last executing test programs: 2.072574611s ago: executing program 3 (id=353): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000200)=0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x20e6, 0x0, @empty, 0xfffffffd}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'syzkaller1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, '\x00', 0x2}, 0x40, r3}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000600)={'syzkaller1\x00', 0x41}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="010530000a002800060000006000000000301140fe800000000000000000000000000001fe80000000000000000000000000000220e620e60012", @ANYRES16], 0x64) (fail_nth: 7) 1.726684736s ago: executing program 3 (id=359): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="60000000020601020000740000000000000000000900020073797a31000000000500010007000000050005000a000000140007800800134000e4000008001240ffffffff11000300686173683a69702c706f727400000000050004"], 0x60}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000f00)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x118, 0x1170, 0x1170, 0x0, 0x1170, 0x208, 0x1398, 0x1398, 0x208, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000, 0xffffffff], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x2e, 0x0, 0x0, 0x46}, 0x0, 0xf8, 0x118, 0x0, {}, [@common=@inet=@socket2={{0x28}, 0x1}, @inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0) (async) syz_emit_ethernet(0x9e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800450000900000000000119078000000000000000000004e22007c907804000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000558000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000"/158], 0x0) (async, rerun: 32) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x58, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="000000002600010000112233445566778899aabb0800450000140000000001170000010203040506070800000c00020006002000080000000c0003000500110004"]}, 0x58}}, 0x0) (async) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x31, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000600)={0x30, 0x30, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) (async) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0xfffe}], 0x1) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) (async) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r4, 0xc0585609, &(0x7f00000001c0)={0xd, 0x9, 0x4, 0x80, 0x5, {0x77359400}, {0x5, 0x2, 0x9, 0xf2, 0xea, 0x7, "59a48cf8"}, 0x9, 0x4, {}, 0x3}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000240)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x8, 0x0, 0x3, 0x4, 0x0, 0x7}, 0x20) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) chdir(&(0x7f0000000000)='./sys\x00') (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async) write(r5, &(0x7f0000000180)='0', 0x1) 1.725249165s ago: executing program 0 (id=360): socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) setns(0xc9, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000080)={0xb}, 0x8) sendmmsg$sock(r0, &(0x7f0000000300)=[{{&(0x7f0000000000)=@qipcrtr={0x2a, 0x2, 0x3fff}, 0x80, 0x0, 0x0, &(0x7f0000000280)=[@txtime={{0x18, 0x1, 0x3d, 0x1}}], 0x18}}], 0x1, 0x200088d0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x2000007}]}}]}, 0x40}}, 0x4000010) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@multicast, @multicast, @val={@val={0x88a8, 0x1, 0x0, 0x4}, {0x8100, 0x7, 0x0, 0x2}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0x14, 0x28, 0x68, 0x0, 0x40, 0x1, 0x0, @loopback, @rand_addr=0x64010102}, @timestamp={0xd, 0x0, 0x0, 0x5, 0x7, 0x2, 0x4}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f0000000840)=[{&(0x7f0000000100)=""/157, 0x9d}], 0x1, 0x9, 0x9) socket$nl_generic(0x10, 0x3, 0x10) 1.634650422s ago: executing program 0 (id=363): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet6(0xa, 0x800000000000002, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x2d, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x8, 0x0, 0x0, 0x3, 0x4, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x9, 0x1, 0x0, 0x2}, {0xeda7, 0x4, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x4, 0x1000000000080, 0xfffffffffffffff8, 0x0, 0x0, 0x2004cb, 0x3, 0x100000000000000, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2eb, 0x2000000000002ff, 0x2, 0x0, 0x4c3], 0x0, 0x200306}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0xf400) 1.474828523s ago: executing program 3 (id=364): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000009c0)=@nat={'nat\x00', 0x670, 0x5, 0x678, 0x0, 0x0, 0xfeffffff, 0x330, 0x0, 0x5e0, 0x5e0, 0xffffffff, 0x5e0, 0x5e0, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, 0x0, 0x0, 'wlan1\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0x308, 0x330, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'veth0_vlan\x00', {0xff}, 'team0\x00', {0xff}, 0xe, 0x1c}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00', {0x6}}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4000000, 0x4000000, 0x1000002]}}}, @common=@set={{0x40}, {{0x0, [0x4, 0x0, 0x0, 0x3]}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@multicast2, @rand_addr, 0x0, 0x0, 'veth0\x00', 'ip6tnl0\x00', {}, {}, 0x73}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x8, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x1, @gre_key=0x80}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private=0xa010100, @ipv4=@dev, @port=0xfffd}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x6d8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000003880)={0x0, 0x0, 0x0, &(0x7f0000002840)="c52a26c460f7fc7d", 0x1, 0xffffffffffffffff, 0x4}, 0x38) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x13, &(0x7f0000000040)=0x5, 0x4) keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) write(r2, &(0x7f00000001c0)="716dc89cd44e448db0ed2ecb84123d553742ae32a5febf161718e9ed5f867a2461fa0dcc75888181c7e0f99f038dc3f62637dd86ffef471df782bf47f067802a16a46d7fc92e123539f26a31dd78b7cf10d97b9a6ac40624263d44d23cb10da31e481b941838dbbbd43d0181dabd14f3a61d07703f16af", 0x77) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0, 0xffffffffffffffef}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x10000, 0x8) openat(r5, &(0x7f0000000140)='./file0\x00', 0x420282, 0x80) 1.421116164s ago: executing program 0 (id=365): migrate_pages(0xffffffffffffffff, 0x1, 0x0, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) write(r0, &(0x7f0000000a00)='transport=fc,traddr=nn-0x3333333333333333:pn-0x4444444444444444,host_traddr=nn-0x1111111111111111:pn-0x2222222222222222,nqn=nqn.2014-08.org.nvmexpress.discovery,reconnect_delay=1\x00', 0xb3) 1.346076629s ago: executing program 0 (id=368): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x8002) syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) socket(0x1d, 0x2, 0x6) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0x1, 0x362, 0x7ff, 0x7fffffff, 0x1, 0x8001, '2'}}, 0x119) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_CT_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f00000210c0), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20e400, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x1, @remote}, {0x2, 0x4e23, @multicast1}, 0x118, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x5}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES16=0x0, @ANYRES8=r4], 0x1c}, 0x1, 0x0, 0x0, 0x20000814}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r5, &(0x7f0000000000), 0xd) 1.259114021s ago: executing program 2 (id=369): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)={0x200000, 0x200000, 0xa, 0x0, 0x8}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010063616e"], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000003f0007012bbd700000000000017c00000400fc800c00018008000600", @ANYRES32=0x0, @ANYBLOB="0c0002800500230000000000080007"], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000640)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000000000000009500a505000000001058cb65a6ca76c640780c11e51111ce615b4e35760826346276cefb4448d2803df8cb02609599ea8bc97b6231fa70b1e3b2e2d5c716a01a4bf2175026abeacfd0c534a316a08676d2d15c5aa86a01434cf34a04e9c40b0c59e8e003028473332aef0866a11481ca76b9f1dd55c6eb02ed2fc24d94b1a8745f5d2e1bcf852bef858a955008e6dcd2265b51967117c06dd6ca395a743628928c5b1694b3c7e01d443147424b2e018d4a800942a3e4addb820d515d4e85520dd472f25dfd25d558d8a608f379a18185ebf1ce7219b21a2a704a24cfc386d5db9fdaa55f852291439ef6571171f5e0e3ab183b8b9ec4c9b4318f3589c5e5c132e551de2bee9cd8693a454d4b1065376aca96ac67ae1d97b67db35724839c229ba6a501c7f1479c200e3679fb99abe59aad260354c6dfe54c0def8e76"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f00000000c0)={0x1, 0x0, 0x5, 0x0}) ioctl(r5, 0x3b8f, &(0x7f00000000c0)='(') bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r4, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff74, 0x19, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4400100013008000", @ANYRESOCT=r1, @ANYBLOB="00000000100000001c001a80080002"], 0x44}}, 0x4008000) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="040b20fbc493038c8b3e723e0a0300c9000400ff0f8000"], 0xd) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000000206010200000000000000000000000005000100070000000900020073797a30000000000c000780080012400000000011000300686173683a6e65742c6e657400000000050005000a0000000500040000000000be640b3b6084"], 0x58}}, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) 1.254706668s ago: executing program 2 (id=371): timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000080)={{0x0, 0x3938700}, {0x77359400}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_usbip_server_init(0x5) write$usbip_server(r1, &(0x7f0000000000)=ANY=[], 0x3696) syz_clone3(&(0x7f0000000380)={0x2140000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[r0], 0x1}, 0x58) 1.164904018s ago: executing program 1 (id=372): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000100)=ANY=[@ANYBLOB="0098574d8453ec60ee5267227b7a4644db2f86a61dc8bb620d75743ce70a1531cf4630c2c10d9a950883aa5e16de9cc23361557c68453ee8cd146610f45822978b486c07ed91153ace0e7ccb0e7135abd578b77857351132adf2d66fc87eb84dfe8dadbd08cdb1101cf2fc7f9732f535596988e76789b8674d870168e0f03ba387cd6551e77fdc8c3e093f3fe0d16735a75910324046a705e074805fa2c3fdacd878099ed315f065e37605729801d605e34189ca4114a9fc4bda3cfb9f87aef346fe569ec24b8c6197676f86417675a18ec72c12094b", @ANYRES16=r1, @ANYBLOB="99ff08000000fddbdf2501000000080001001100000008000300", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x1c4}, 0x4) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x5}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x48}, 0x1, 0x0, 0x0, 0x2000004}, 0x8) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) write$P9_RLCREATE(r5, &(0x7f0000000040)={0x18, 0xf, 0x2, {{0x8, 0x0, 0x5}, 0x62}}, 0x18) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = dup3(r4, r6, 0x80000) read$FUSE(r7, &(0x7f0000000780)={0x2020}, 0x2020) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r3, 0x1, 0x70bd29, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f00000006c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f00000027c0)={0x418, r3, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x90}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e20, @private=0xa010102}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xff, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x101, @local, 0x3}}}}]}, @TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x201c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xce6}]}, @TIPC_NLA_NODE={0x130, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "0a7e96e3937a5cdb9c29d58d89d2b8145f5b425afdc93f9847890288dd61307d"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}, @TIPC_NLA_NODE_ID={0xcd, 0x3, "e7d1a55995d98998fe7605a6c363673393665651e077b1ab4da06eeb95d35fefeb1ac56650ee5461aab117ab4ddc076b55fec5f7fe5b61912f77c8ef3bf77f2fdda32162f1dabff06f8e4806467be6383f2a6c7dc44a71b3e1c77eb0e7821edb9a938bc5010f3045e38f8bd84f1c7797b5294cf9e629b361260a80af986e37af9db631ce8e85cb1e34c51a675c3c01b3df2df52f457fcdf4ce047b508a75bd1fd30aedf8f7182f1b07342e7fa7b7fcf6fb56e4daa15e2713bffeffe43272739317e3c4c066450d2402"}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x4}, @TIPC_NLA_BEARER={0x16c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x2, @private0}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1c}}}, {0x14, 0x2, @in={0x2, 0x4e21, @loopback}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth0_to_bond\x00'}}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffee}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa67}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb70}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdb7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}}, {0x14, 0x2, @in={0x2, 0x4e26, @remote}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffff8b}]}]}, 0x418}, 0x1, 0x0, 0x0, 0x4044804}, 0x4000000) r8 = syz_open_dev$swradio(&(0x7f00000048c0), 0x0, 0x2) ioctl$VIDIOC_G_FREQUENCY(r8, 0xc02c5638, &(0x7f0000000140)={0x5, 0x4, 0x9}) write$P9_RSYMLINK(r5, &(0x7f00000002c0)={0x14, 0x11, 0x1, {0x1, 0x2, 0x8}}, 0x14) r9 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000002600010b00bd7000fcffffff150000000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x409d6}, 0x0) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r9) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r13, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="180000000102010800000000000000000a00000a04000180ea047a8ba8eddcccd59bb68233d4ab85232546a2c0e0d88d2ca8f6468a0b2798f6e3b5dff5ebc6212730871852480e4cb05ae2d5b3f36d81f4deb49a2cfd84969ac212b45cafcce882869b56df7da515d51c6df7e0c0f7eb9b4b4136542803307ef47a050f041e87ff3c7e24e503ff7371052b9e3289960a73d5edc43ea135d9ed6d1384f0f9538de0beeab5cf53f267ff6b66cd0c3c0d1ba0822f695421f8cfa36fb3a071de66e8279684e513b7408f270a8c17e7a1d3249f99ba"], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) syslog(0x9, &(0x7f0000000000)=""/218, 0xda) write$P9_RSTAT(r8, &(0x7f0000000300)=ANY=[@ANYBLOB="530000007d020000004c00ff000002000010040200000500000000000000000000000700000000000000010000000000000009007564703a73797a3000000008006465766c696e6b0008006e6c383032313100"], 0x53) syslog(0x4, &(0x7f0000000200)=""/67, 0x43) 1.164534208s ago: executing program 0 (id=373): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x2200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = userfaultfd(0x1) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000380)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x2}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x312000, 0x800, 0x0, 0x5}, 0x20) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4048aecb, &(0x7f0000000300)) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r5, 0x8946, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = getpid() syz_pidfd_open(r6, 0x0) syz_open_procfs(r6, &(0x7f0000000080)='limits\x00') 897.85042ms ago: executing program 1 (id=374): r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1ea1e2) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_freeze_timeout', 0x68a41, 0x3) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x6, 0x6, 0xc, "faf98357e5128bbad0099cebdc25f5abb534464c516bdd8a0f350000000000000000000000000000000000000100", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237641a8ccf162e43ac61f700000000009b41000000050000000000001000", [0x6, 0x12000000000003]}}) kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg$alg(r4, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0", 0x5e}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb558492027148", 0x44}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508e", 0x5d}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1", 0x36}], 0x4, 0x0, 0x0, 0xc0}], 0x1, 0x48040) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x57, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) (fail_nth: 5) 545.16287ms ago: executing program 2 (id=375): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40043, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x42) fcntl$setlease(r1, 0x400, 0x0) fremovexattr(r0, &(0x7f00000000c0)=@known='trusted.overlay.upper\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, &(0x7f0000000100)={{}, "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"}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_mreq(r2, 0x3a, 0x1, 0x0, &(0x7f0000000040)) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x55b000, 0x12) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./dev\x00', r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r4, 0xc138fd03, &(0x7f0000001000)="0400000032000000") ioctl(r4, 0xc138fd01, &(0x7f0000002000)="0400000032000000000000006c01") 542.791864ms ago: executing program 1 (id=383): syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1ea1e2) kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e"], 0x80}}, 0x4000000) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0", 0x5e}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb558492027148", 0x44}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9", 0x5b}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9", 0x30}], 0x5, 0x0, 0x0, 0xc0}], 0x1, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46", 0xb5}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x57, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 472.119312ms ago: executing program 3 (id=376): openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x346df2d8b503c16a, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r0, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) ioctl$XFS_IOC_ERROR_INJECTION(r0, 0x40085874, &(0x7f0000000040)={r0, 0x67}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 461.309967ms ago: executing program 2 (id=377): r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1ea1e2) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_freeze_timeout', 0x68a41, 0x3) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x6, 0x6, 0xc, "faf98357e5128bbad0099cebdc25f5abb534464c516bdd8a0f350000000000000000000000000000000000000100", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237641a8ccf162e43ac61f700000000009b41000000050000000000001000", [0x6, 0x12000000000003]}}) kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r3 = socket$nl_crypto(0x10, 0x3, 0x15) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) sendmsg$nl_crypto(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f00000001200"], 0xf0}}, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg$alg(r5, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0", 0x5e}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb558492027148", 0x44}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508e", 0x5d}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1", 0x36}], 0x4, 0x0, 0x0, 0xc0}], 0x1, 0x48040) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000580)={0x0, 0x0, r8, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000100)={r8, r9, 0x0, 0x0, 0xfffffffffffffffe}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000000)={r8, r9, 0x1, 0x0, 0xd4}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000600)={&(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000d80)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000001040)=[0x0, 0x0], &(0x7f0000001080)=[0x0, 0x0, 0x0, 0x0], 0xa, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f00000011c0)={0xa00, 0x2, &(0x7f0000000340)=[0x0, r8], &(0x7f0000000500)=[0x2, 0x3, 0x5d63cb6b], &(0x7f0000001140)=[r10], &(0x7f0000001180)=[0x63cb, 0x4b2e, 0xa, 0x4, 0xfffffffffffffffb, 0x471b], 0x0, 0x10000}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r11 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x57, 0x1, 0x2) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) 266.290854ms ago: executing program 1 (id=378): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e23, @broadcast}, 0x80002, 0x0, 0x4}}, 0x2e) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010402000000fddbdf25070000000500120009000000140008"], 0x30}}, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) write$tun(r0, &(0x7f0000000380)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r1, 0x0, 0x2) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r7, r7) setpgid(0x0, r7) close(0x3) fchdir(r6) stat(&(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000100)={0x8000, 0xa, 0x3, 0x0, 0x2, 0x2}, 0x30, 0x1) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/block/md0/md/chunk_size\x00', 0x1, 0x0) write(r10, &(0x7f00000006c0)="b65f", 0x2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x10b, 0x3}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r11 = dup3(r9, r8, 0x80000) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xffffffffffffff9a, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6313}], 0x0, 0x0, 0x0}) 181.69581ms ago: executing program 3 (id=379): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)={0x200000, 0x200000, 0xa, 0x0, 0x8}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010063616e"], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000003f0007012bbd700000000000017c00000400fc800c00018008000600", @ANYRES32=0x0, @ANYBLOB="0c0002800500230000000000080007"], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f00000000c0)={0x1, 0x0, 0x5, 0x0}) ioctl(r5, 0x3b8f, &(0x7f00000000c0)='(') bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r4, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff74, 0x19, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4400100013008000", @ANYRESOCT=r1, @ANYBLOB="00000000100000001c001a80080002"], 0x44}}, 0x4008000) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="040b20fbc493038c8b3e723e0a0300c9000400ff0f8000"], 0xd) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000000206010200000000000000000000000005000100070000000900020073797a30000000000c000780080012400000000011000300686173683a6e65742c6e657400000000050005000a0000000500040000000000be640b3b6084"], 0x58}}, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) 181.430045ms ago: executing program 2 (id=380): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys/module/kvm/parameters/nx_huge_pages\x00', &(0x7f0000000080)='sysfs\x00', 0x540, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='force', 0x5) 181.058184ms ago: executing program 3 (id=381): r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1ea1e2) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/rcu_expedited', 0x68a41, 0x3) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x20000, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x6, 0x5, 0xc, "faf98357e5128bbad0099cebdc25f5abb534464c516bdd8a0f35000000e3ffffff0000dc00000000000000000100", "32d8ccccf7061a74df2cfc06c89f3d9e230400c50997d3be4bd3ffe70c7f3f800b2f7b6aa54cc50a9fcafe27fbccaf986dea00", "715237641a8ccf162e43acc83c78a2b3b2074141000000050000000000001000", [0x6, 0x12000000000003]}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/bus/usb/devices/usb5/bConfigurationValue\x00', 0x1, 0x0) write(r2, &(0x7f0000000500)='0', 0x1) kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount(&(0x7f00000025c0)=@sg0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000040)='erofs\x00', 0x0, &(0x7f0000000380)='acl') r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a0000"], 0x80}}, 0x4000000) sendmmsg$alg(r5, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0", 0x5e}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb5584920271", 0x43}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508e", 0x5d}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1", 0x36}], 0x5, 0x0, 0x0, 0xc0}], 0x1, 0x48040) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x57, 0x1, 0x2) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x12, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, @jmp={0x5, 0x1, 0x4, 0x0, 0x9, 0xfffffffffffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x3}, 0x94) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) 117.982355ms ago: executing program 2 (id=382): io_setup(0x8, &(0x7f0000000600)=0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) mkdir(&(0x7f00000020c0)='./file0\x00', 0x46) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='huge=']) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="01", 0x400000}]) 117.426097ms ago: executing program 0 (id=384): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = socket(0x10, 0x80002, 0x4) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES16, @ANYRES16], 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000000)=[0x9a, 0x20d]) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x40}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00', @ANYBLOB="010000000000200000000100000008000100020000001c0004800500030001000000050003000100000005000300020000050800020003"], 0x40}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4005001}, 0x40050) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(0xffffffffffffffff, 0xc) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4001, 0x800000, @private1}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x2) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000010058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r2, 0x402) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ed56b6c5", 0x4) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000004c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) dup(r1) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x3, 0x0) dup(r0) 131.341µs ago: executing program 1 (id=385): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 0s ago: executing program 1 (id=386): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x80000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xffffffffffffff9a, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x8, 0x1000000, &(0x7f0000000000)=[@decrefs={0x400c6313}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): 2/0xc0 [ 108.228628][ T6371] ? vhost_task_create+0xee/0x370 [ 108.228648][ T6371] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 108.228674][ T6371] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 108.228689][ T6371] vhost_task_create+0xee/0x370 [ 108.228702][ T6371] ? __pfx_vhost_task_create+0x10/0x10 [ 108.228721][ T6371] ? __pfx_vhost_task_fn+0x10/0x10 [ 108.228734][ T6371] ? __pfx___mutex_lock+0x10/0x10 [ 108.228756][ T6371] ? kasan_quarantine_put+0x104/0x240 [ 108.228771][ T6371] kvm_mmu_post_init_vm+0x1b3/0x360 [ 108.228788][ T6371] kvm_arch_vcpu_ioctl_run+0x66/0x1960 [ 108.228810][ T6371] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 108.228830][ T6371] kvm_vcpu_ioctl+0x730/0x1700 [ 108.228844][ T6371] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 108.228856][ T6371] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 108.228876][ T6371] ? do_vfs_ioctl+0x226/0x13e0 [ 108.228897][ T6371] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 108.228912][ T6371] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 108.228953][ T6371] ? __fget_files+0x215/0x3d0 [ 108.228964][ T6371] ? hook_file_ioctl_common+0x140/0x440 [ 108.228980][ T6371] ? selinux_file_ioctl+0x13b/0x290 [ 108.228990][ T6371] ? selinux_file_ioctl+0xb6/0x290 [ 108.229000][ T6371] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 108.229013][ T6371] __x64_sys_ioctl+0x18e/0x210 [ 108.229029][ T6371] do_syscall_64+0x115/0x870 [ 108.229042][ T6371] ? clear_bhb_loop+0x70/0xc0 [ 108.229057][ T6371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.229068][ T6371] RIP: 0033:0x7fa6e3f9e0d9 [ 108.229078][ T6371] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.229091][ T6371] RSP: 002b:00007fa6e4ef3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 108.229120][ T6371] RAX: ffffffffffffffda RBX: 00007fa6e4225fa0 RCX: 00007fa6e3f9e0d9 [ 108.229126][ T6371] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 108.229132][ T6371] RBP: 00007fa6e4ef3090 R08: 0000000000000000 R09: 0000000000000000 [ 108.229138][ T6371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.229144][ T6371] R13: 00007fa6e4226038 R14: 00007fa6e4225fa0 R15: 00007ffcaab4f498 [ 108.229157][ T6371] [ 108.495666][ T6383] FAULT_INJECTION: forcing a failure. [ 108.495666][ T6383] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 108.499804][ T6383] CPU: 0 UID: 0 PID: 6383 Comm: syz.3.150 Tainted: G L syzkaller #0 PREEMPT(full) [ 108.499821][ T6383] Tainted: [L]=SOFTLOCKUP [ 108.499825][ T6383] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 108.499831][ T6383] Call Trace: [ 108.499836][ T6383] [ 108.499841][ T6383] dump_stack_lvl+0x100/0x190 [ 108.499861][ T6383] should_fail_ex.cold+0x5/0xa [ 108.499876][ T6383] _copy_from_user+0x2e/0xd0 [ 108.499894][ T6383] move_addr_to_kernel+0x65/0x170 [ 108.499916][ T6383] __sys_sendto+0x1b8/0x4e0 [ 108.499930][ T6383] ? __pfx___sys_sendto+0x10/0x10 [ 108.499946][ T6383] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 108.499967][ T6383] ? ksys_write+0x1ac/0x250 [ 108.499983][ T6383] ? __pfx_ksys_write+0x10/0x10 [ 108.499994][ T6383] __x64_sys_sendto+0xe0/0x1c0 [ 108.500007][ T6383] ? do_syscall_64+0x90/0x870 [ 108.500020][ T6383] ? lockdep_hardirqs_on+0x78/0x100 [ 108.500033][ T6383] do_syscall_64+0x115/0x870 [ 108.500046][ T6383] ? clear_bhb_loop+0x70/0xc0 [ 108.500060][ T6383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.500071][ T6383] RIP: 0033:0x7fd8b459e0d9 [ 108.500080][ T6383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.500090][ T6383] RSP: 002b:00007fd8b54ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 108.500101][ T6383] RAX: ffffffffffffffda RBX: 00007fd8b4825fa0 RCX: 00007fd8b459e0d9 [ 108.500108][ T6383] RDX: 0000000000000001 RSI: 0000200000001b00 RDI: 0000000000000003 [ 108.500114][ T6383] RBP: 00007fd8b54ff090 R08: 0000200000000140 R09: 000000000000001c [ 108.500120][ T6383] R10: 0000000020000045 R11: 0000000000000246 R12: 0000000000000001 [ 108.500125][ T6383] R13: 00007fd8b4826038 R14: 00007fd8b4825fa0 R15: 00007fff56956a78 [ 108.500138][ T6383] [ 108.519984][ T6386] netlink: 12 bytes leftover after parsing attributes in process `syz.0.152'. [ 108.819544][ T6405] faux_driver vkms: [drm] Unknown color mode 7; guessing buffer size. [ 108.847352][ T844] cfg80211: failed to load regulatory.db [ 108.892618][ T29] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 109.065761][ T6419] netlink: 20 bytes leftover after parsing attributes in process `syz.2.163'. [ 109.069071][ T6419] FAULT_INJECTION: forcing a failure. [ 109.069071][ T6419] name failslab, interval 1, probability 0, space 0, times 0 [ 109.073213][ T6419] CPU: 2 UID: 0 PID: 6419 Comm: syz.2.163 Tainted: G L syzkaller #0 PREEMPT(full) [ 109.073231][ T6419] Tainted: [L]=SOFTLOCKUP [ 109.073236][ T6419] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 109.073242][ T6419] Call Trace: [ 109.073246][ T6419] [ 109.073251][ T6419] dump_stack_lvl+0x100/0x190 [ 109.073271][ T6419] should_fail_ex.cold+0x5/0xa [ 109.073286][ T6419] should_failslab+0xc2/0x120 [ 109.073301][ T6419] __kmalloc_cache_noprof+0x91/0x6c0 [ 109.073320][ T6419] ? garp_init_applicant+0x38d/0x4e0 [ 109.073349][ T6419] garp_init_applicant+0x38d/0x4e0 [ 109.073362][ T6419] register_vlan_dev+0x197/0x910 [ 109.073393][ T6419] ? vlan_changelink+0x2c3/0x5e0 [ 109.073407][ T6419] vlan_newlink+0x48c/0x750 [ 109.073421][ T6419] ? __pfx_vlan_newlink+0x10/0x10 [ 109.073432][ T6419] rtnl_newlink+0x1499/0x2380 [ 109.073461][ T6419] ? __pfx_rtnl_newlink+0x10/0x10 [ 109.073475][ T6419] ? find_held_lock+0x2b/0x80 [ 109.073493][ T6419] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 109.073508][ T6419] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 109.073523][ T6419] ? avc_has_perm_noaudit+0x145/0x3b0 [ 109.073546][ T6419] ? find_held_lock+0x2b/0x80 [ 109.073555][ T6419] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 109.073570][ T6419] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 109.073586][ T6419] ? __pfx_rtnl_newlink+0x10/0x10 [ 109.073601][ T6419] rtnetlink_rcv_msg+0x95e/0xe90 [ 109.073617][ T6419] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 109.073636][ T6419] ? ref_tracker_free+0x37e/0x6c0 [ 109.073655][ T6419] netlink_rcv_skb+0x159/0x420 [ 109.073673][ T6419] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 109.073689][ T6419] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 109.073705][ T6419] ? netlink_deliver_tap+0x1ae/0xcc0 [ 109.073718][ T6419] netlink_unicast+0x585/0x850 [ 109.073732][ T6419] ? __pfx_netlink_unicast+0x10/0x10 [ 109.073746][ T6419] netlink_sendmsg+0x8b0/0xda0 [ 109.073760][ T6419] ? __pfx_netlink_sendmsg+0x10/0x10 [ 109.073773][ T6419] ? selinux_socket_sendmsg+0x198/0x2f0 [ 109.073792][ T6419] ____sys_sendmsg+0xa4d/0xbe0 [ 109.073802][ T6419] ? __pfx_netlink_sendmsg+0x10/0x10 [ 109.073814][ T6419] ? __pfx_____sys_sendmsg+0x10/0x10 [ 109.073830][ T6419] ___sys_sendmsg+0x190/0x1e0 [ 109.073842][ T6419] ? __pfx____sys_sendmsg+0x10/0x10 [ 109.073856][ T6419] ? __lock_acquire+0x49f/0x1a40 [ 109.073869][ T6419] ? get_pid_task+0x106/0x250 [ 109.073894][ T6419] __sys_sendmsg+0x160/0x210 [ 109.073909][ T6419] ? __pfx___sys_sendmsg+0x10/0x10 [ 109.073930][ T6419] do_syscall_64+0x115/0x870 [ 109.073943][ T6419] ? clear_bhb_loop+0x70/0xc0 [ 109.073957][ T6419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.073968][ T6419] RIP: 0033:0x7fa43db9e0d9 [ 109.073979][ T6419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.073989][ T6419] RSP: 002b:00007fa43ea67028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 109.074000][ T6419] RAX: ffffffffffffffda RBX: 00007fa43de25fa0 RCX: 00007fa43db9e0d9 [ 109.074006][ T6419] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 000000000000000e [ 109.074012][ T6419] RBP: 00007fa43ea67090 R08: 0000000000000000 R09: 0000000000000000 [ 109.074018][ T6419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 109.074023][ T6419] R13: 00007fa43de26038 R14: 00007fa43de25fa0 R15: 00007ffec28d30d8 [ 109.074036][ T6419] [ 109.083998][ T29] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 109.107113][ T6420] ima: policy update failed [ 109.123095][ T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.137233][ T6424] ima: rule for LSM 'u' is undefined [ 109.140989][ T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.143865][ T6422] ima: policy update failed [ 109.151663][ T29] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 109.240611][ T29] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 109.244553][ T29] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 109.247764][ T29] usb 8-1: Manufacturer: syz [ 109.256318][ T29] usb 8-1: config 0 descriptor?? [ 109.280231][ T6433] FAULT_INJECTION: forcing a failure. [ 109.280231][ T6433] name failslab, interval 1, probability 0, space 0, times 0 [ 109.285147][ T6433] CPU: 2 UID: 0 PID: 6433 Comm: syz.2.167 Tainted: G L syzkaller #0 PREEMPT(full) [ 109.285166][ T6433] Tainted: [L]=SOFTLOCKUP [ 109.285170][ T6433] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 109.285177][ T6433] Call Trace: [ 109.285181][ T6433] [ 109.285185][ T6433] dump_stack_lvl+0x100/0x190 [ 109.285207][ T6433] should_fail_ex.cold+0x5/0xa [ 109.285222][ T6433] should_failslab+0xc2/0x120 [ 109.285238][ T6433] __kmalloc_cache_noprof+0x91/0x6c0 [ 109.285256][ T6433] ? kmem_cache_alloc_lru_noprof+0x2d3/0x6a0 [ 109.285269][ T6433] ? v9fs_dentry_init+0x3f/0xd0 [ 109.285306][ T6433] ? __pfx_v9fs_dentry_init+0x10/0x10 [ 109.285319][ T6433] v9fs_dentry_init+0x3f/0xd0 [ 109.285331][ T6433] ? __pfx_v9fs_dentry_init+0x10/0x10 [ 109.285342][ T6433] __d_alloc+0x5fb/0xa50 [ 109.285359][ T6433] d_alloc_parallel+0x105/0x14b0 [ 109.285380][ T6433] ? __pfx_d_alloc_parallel+0x10/0x10 [ 109.285396][ T6433] ? __d_lookup+0x25c/0x4a0 [ 109.285413][ T6433] ? __d_lookup+0x266/0x4a0 [ 109.285431][ T6433] path_openat+0x271c/0x4280 [ 109.285449][ T6433] ? __pfx_path_openat+0x10/0x10 [ 109.285463][ T6433] do_file_open+0x20e/0x430 [ 109.285475][ T6433] ? __pfx_do_file_open+0x10/0x10 [ 109.285496][ T6433] ? alloc_fd+0x471/0x7a0 [ 109.285508][ T6433] ? do_getname+0x191/0x390 [ 109.285523][ T6433] do_sys_openat2+0x10f/0x1e0 [ 109.285538][ T6433] ? __pfx_do_sys_openat2+0x10/0x10 [ 109.285550][ T6433] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 109.285572][ T6433] ? __fget_files+0x21f/0x3d0 [ 109.285593][ T6433] __x64_sys_creat+0xcc/0x120 [ 109.285615][ T6433] ? __pfx___x64_sys_creat+0x10/0x10 [ 109.285635][ T6433] ? __pfx_ksys_write+0x10/0x10 [ 109.285654][ T6433] ? do_syscall_64+0x90/0x870 [ 109.285676][ T6433] do_syscall_64+0x115/0x870 [ 109.285696][ T6433] ? clear_bhb_loop+0x70/0xc0 [ 109.285718][ T6433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.285735][ T6433] RIP: 0033:0x7fa43db9e0d9 [ 109.285750][ T6433] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.285765][ T6433] RSP: 002b:00007fa43ea67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 109.285784][ T6433] RAX: ffffffffffffffda RBX: 00007fa43de25fa0 RCX: 00007fa43db9e0d9 [ 109.285795][ T6433] RDX: 0000000000000000 RSI: 00000000000000ec RDI: 0000200000000080 [ 109.285805][ T6433] RBP: 00007fa43ea67090 R08: 0000000000000000 R09: 0000000000000000 [ 109.285815][ T6433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.285823][ T6433] R13: 00007fa43de26038 R14: 00007fa43de25fa0 R15: 00007ffec28d30d8 [ 109.285851][ T6433] [ 109.288676][ T6433] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 109.370488][ T6433] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 109.374701][ T5451] veth0_vlan: left promiscuous mode [ 109.387259][ T6433] vhci_hcd vhci_hcd.0: Device attached [ 109.390938][ T62] veth0_vlan: entered promiscuous mode [ 109.399064][ T6437] vhci_hcd vhci_hcd.0: port 0 already used [ 109.405736][ T6435] vhci_hcd: connection closed [ 109.408815][ T5851] vhci_hcd vhci_hcd.2: stop threads [ 109.423051][ T5851] vhci_hcd vhci_hcd.2: release socket [ 109.424881][ T5851] vhci_hcd vhci_hcd.2: disconnect device [ 109.677519][ T29] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 109.685248][ T6457] netlink: 64 bytes leftover after parsing attributes in process `syz.0.171'. [ 109.686060][ T42] kauditd_printk_skb: 53 callbacks suppressed [ 109.686074][ T42] audit: type=1400 audit(1786059222.520:421): avc: denied { ioctl } for pid=6456 comm="syz.0.171" path="/dev/rtc0" dev="devtmpfs" ino=945 ioctlcmd=0x7013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 109.693948][ T6457] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 109.706772][ T42] audit: type=1400 audit(1786059222.520:422): avc: denied { create } for pid=6456 comm="syz.0.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 109.720724][ T42] audit: type=1400 audit(1786059222.520:423): avc: denied { write } for pid=6456 comm="syz.0.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 109.725379][ T29] appleir 0003:05AC:8243.0002: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 109.728551][ T42] audit: type=1400 audit(1786059222.520:424): avc: denied { nlmsg_write } for pid=6456 comm="syz.0.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 109.729722][ T6457] cramfs: wrong magic [ 109.742622][ T6457] netlink: 64 bytes leftover after parsing attributes in process `syz.0.171'. [ 109.746450][ T42] audit: type=1400 audit(1786059222.530:425): avc: denied { mounton } for pid=6456 comm="syz.0.171" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 109.747459][ T6459] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 109.763197][ T6459] cramfs: wrong magic [ 109.807846][ T42] audit: type=1400 audit(1786059222.640:426): avc: denied { write } for pid=6461 comm="syz.0.172" name="cells" dev="proc" ino=4026533482 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 109.809724][ T6462] kAFS: bad VL server IP address [ 109.828427][ T6464] netlink: 8 bytes leftover after parsing attributes in process `syz.0.172'. [ 109.835523][ T6464] netlink: 24 bytes leftover after parsing attributes in process `syz.0.172'. [ 109.869679][ T42] audit: type=1400 audit(1786059222.700:427): avc: denied { ioctl } for pid=6465 comm="syz.1.173" path="socket:[16406]" dev="sockfs" ino=16406 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 109.880782][ T42] audit: type=1400 audit(1786059222.710:428): avc: denied { bind } for pid=6465 comm="syz.1.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 109.889120][ T42] audit: type=1400 audit(1786059222.710:429): avc: denied { setopt } for pid=6465 comm="syz.1.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 109.891815][ T6469] FAULT_INJECTION: forcing a failure. [ 109.891815][ T6469] name failslab, interval 1, probability 0, space 0, times 0 [ 109.896753][ T42] audit: type=1400 audit(1786059222.710:430): avc: denied { connect } for pid=6465 comm="syz.1.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 109.904377][ T6469] CPU: 1 UID: 0 PID: 6469 Comm: syz.0.174 Tainted: G L syzkaller #0 PREEMPT(full) [ 109.904406][ T6469] Tainted: [L]=SOFTLOCKUP [ 109.904412][ T6469] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 109.904423][ T6469] Call Trace: [ 109.904441][ T6469] [ 109.904448][ T6469] dump_stack_lvl+0x100/0x190 [ 109.904575][ T6469] should_fail_ex.cold+0x5/0xa [ 109.904629][ T6469] should_failslab+0xc2/0x120 [ 109.904679][ T6469] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 109.904713][ T6469] ? kasan_quarantine_put+0x104/0x240 [ 109.904734][ T6469] ? lockdep_hardirqs_on+0x78/0x100 [ 109.904768][ T6469] ? vfs_parse_fs_qstr+0x112/0x1c0 [ 109.904805][ T6469] kmemdup_nul+0x49/0xd0 [ 109.904837][ T6469] vfs_parse_fs_qstr+0x112/0x1c0 [ 109.904862][ T6469] ? __pfx_vfs_parse_fs_qstr+0x10/0x10 [ 109.904891][ T6469] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 109.904915][ T6469] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 109.904938][ T6469] vfs_parse_monolithic_sep+0x195/0x210 [ 109.904964][ T6469] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 109.904989][ T6469] ? alloc_fs_context+0x65a/0xf40 [ 109.905015][ T6469] path_mount+0x77f/0x23d0 [ 109.905043][ T6469] ? __pfx_path_mount+0x10/0x10 [ 109.905064][ T6469] ? lockdep_hardirqs_on+0x78/0x100 [ 109.905089][ T6469] ? putname+0xb1/0x110 [ 109.905110][ T6469] ? kmem_cache_free+0x127/0x6b0 [ 109.905135][ T6469] ? __x64_sys_mount+0x293/0x310 [ 109.905156][ T6469] __x64_sys_mount+0x293/0x310 [ 109.905179][ T6469] ? __pfx___x64_sys_mount+0x10/0x10 [ 109.905207][ T6469] do_syscall_64+0x115/0x870 [ 109.905230][ T6469] ? clear_bhb_loop+0x70/0xc0 [ 109.905259][ T6469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.905279][ T6469] RIP: 0033:0x7fa6e3f9e0d9 [ 109.905296][ T6469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.905314][ T6469] RSP: 002b:00007fa6e4ef3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 109.905334][ T6469] RAX: ffffffffffffffda RBX: 00007fa6e4225fa0 RCX: 00007fa6e3f9e0d9 [ 109.905347][ T6469] RDX: 0000200000002100 RSI: 0000200000000040 RDI: 0000000000000000 [ 109.905357][ T6469] RBP: 00007fa6e4ef3090 R08: 0000200000000200 R09: 0000000000000000 [ 109.905369][ T6469] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000002 [ 109.905380][ T6469] R13: 00007fa6e4226038 R14: 00007fa6e4225fa0 R15: 00007ffcaab4f498 [ 109.905403][ T6469] [ 109.934378][ T6394] binder: BINDER_SET_CONTEXT_MGR bad uid 60929 != 0 [ 109.987185][ T6466] ima: rule for LSM 'u' is undefined [ 109.989717][ T6394] binder: 6393:6394 ioctl 4018620d 200000004a80 returned -1 [ 110.006951][ T844] usb 8-1: USB disconnect, device number 2 [ 110.158299][ T6476] FAULT_INJECTION: forcing a failure. [ 110.158299][ T6476] name failslab, interval 1, probability 0, space 0, times 0 [ 110.163515][ T6476] CPU: 3 UID: 0 PID: 6476 Comm: syz.2.176 Tainted: G L syzkaller #0 PREEMPT(full) [ 110.163534][ T6476] Tainted: [L]=SOFTLOCKUP [ 110.163538][ T6476] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 110.163545][ T6476] Call Trace: [ 110.163550][ T6476] [ 110.163555][ T6476] dump_stack_lvl+0x100/0x190 [ 110.163576][ T6476] should_fail_ex.cold+0x5/0xa [ 110.163591][ T6476] should_failslab+0xc2/0x120 [ 110.163607][ T6476] __kmalloc_noprof+0xfc/0x820 [ 110.163619][ T6476] ? __lock_acquire+0x49f/0x1a40 [ 110.163658][ T6476] ? hash_netnet_create+0x84a/0x1b40 [ 110.163680][ T6476] hash_netnet_create+0x84a/0x1b40 [ 110.163695][ T6476] ? __pfx_hash_netnet_create+0x10/0x10 [ 110.163708][ T6476] ? __pfx_hash_netnet_create+0x10/0x10 [ 110.163721][ T6476] ? ip_set_create+0x6b8/0x14f0 [ 110.163743][ T6476] ip_set_create+0x6b8/0x14f0 [ 110.163762][ T6476] ? __pfx_ip_set_create+0x10/0x10 [ 110.163786][ T6476] ? find_held_lock+0x2b/0x80 [ 110.163799][ T6476] nfnetlink_rcv_msg+0x9d5/0x11e0 [ 110.163825][ T6476] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 110.163839][ T6476] ? skb_release_data+0x6ca/0x8e0 [ 110.163861][ T6476] ? __lock_acquire+0x49f/0x1a40 [ 110.163883][ T6476] ? avc_has_perm_noaudit+0x145/0x3b0 [ 110.163919][ T6476] netlink_rcv_skb+0x159/0x420 [ 110.163938][ T6476] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 110.163953][ T6476] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 110.163971][ T6476] ? ns_capable+0xd2/0xf0 [ 110.163993][ T6476] nfnetlink_rcv+0x1b3/0x440 [ 110.164007][ T6476] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 110.164021][ T6476] ? netlink_deliver_tap+0x1ae/0xcc0 [ 110.164034][ T6476] netlink_unicast+0x585/0x850 [ 110.164048][ T6476] ? __pfx_netlink_unicast+0x10/0x10 [ 110.164063][ T6476] netlink_sendmsg+0x8b0/0xda0 [ 110.164077][ T6476] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.164090][ T6476] ? selinux_socket_sendmsg+0x198/0x2f0 [ 110.164110][ T6476] ____sys_sendmsg+0xa4d/0xbe0 [ 110.164128][ T6476] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.164140][ T6476] ? __pfx_____sys_sendmsg+0x10/0x10 [ 110.164156][ T6476] ___sys_sendmsg+0x190/0x1e0 [ 110.164169][ T6476] ? __pfx____sys_sendmsg+0x10/0x10 [ 110.164179][ T6476] ? __lock_acquire+0x49f/0x1a40 [ 110.164192][ T6476] ? get_pid_task+0x106/0x250 [ 110.164219][ T6476] __sys_sendmsg+0x160/0x210 [ 110.164234][ T6476] ? __pfx___sys_sendmsg+0x10/0x10 [ 110.164254][ T6476] do_syscall_64+0x115/0x870 [ 110.164269][ T6476] ? clear_bhb_loop+0x70/0xc0 [ 110.164282][ T6476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.164294][ T6476] RIP: 0033:0x7fa43db9e0d9 [ 110.164304][ T6476] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.164315][ T6476] RSP: 002b:00007fa43ea67028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 110.164327][ T6476] RAX: ffffffffffffffda RBX: 00007fa43de25fa0 RCX: 00007fa43db9e0d9 [ 110.164334][ T6476] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 110.164340][ T6476] RBP: 00007fa43ea67090 R08: 0000000000000000 R09: 0000000000000000 [ 110.164347][ T6476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.164352][ T6476] R13: 00007fa43de26038 R14: 00007fa43de25fa0 R15: 00007ffec28d30d8 [ 110.164365][ T6476] [ 110.221684][ T5842] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 110.443687][ T6481] netlink: 16 bytes leftover after parsing attributes in process `syz.2.178'. [ 110.447477][ T6481] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info Ack ret = -22) [ 110.452622][ T5842] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 110.455223][ T5842] usb 5-1: config 0 has no interface number 0 [ 110.457167][ T5842] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 110.460454][ T5842] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 110.464287][ T5842] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 110.467972][ T5842] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64 [ 110.471470][ T5842] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 110.476156][ T5842] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 110.479247][ T5842] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.487434][ T5842] usb 5-1: config 0 descriptor?? [ 110.489892][ T6472] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 110.496893][ T5842] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 110.691229][ T6465] ima: policy update failed [ 110.719795][ T5842] usb 5-1: USB disconnect, device number 2 [ 110.722016][ C2] ldusb 5-1:0.55: usb_submit_urb failed (-19) [ 110.729530][ T6472] ldusb 5-1:0.55: Couldn't submit interrupt_out_urb -19 [ 110.742188][ T5842] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 110.823765][ T6496] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 110.825870][ T6496] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 110.828440][ T6496] vhci_hcd vhci_hcd.0: Device attached [ 110.834239][ T6496] vhci_hcd vhci_hcd.0: port 0 already used [ 110.837998][ T6503] vhci_hcd: connection closed [ 110.838901][ T5851] vhci_hcd vhci_hcd.0: stop threads [ 110.842640][ T5851] vhci_hcd vhci_hcd.0: release socket [ 110.844363][ T5851] vhci_hcd vhci_hcd.0: disconnect device [ 110.916049][ T6510] __nla_validate_parse: 1 callbacks suppressed [ 110.916063][ T6510] netlink: 28 bytes leftover after parsing attributes in process `syz.3.187'. [ 110.930834][ T6508] FAULT_INJECTION: forcing a failure. [ 110.930834][ T6508] name failslab, interval 1, probability 0, space 0, times 0 [ 110.935728][ T6508] CPU: 1 UID: 0 PID: 6508 Comm: syz.2.186 Tainted: G L syzkaller #0 PREEMPT(full) [ 110.935757][ T6508] Tainted: [L]=SOFTLOCKUP [ 110.935764][ T6508] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 110.935776][ T6508] Call Trace: [ 110.935793][ T6508] [ 110.935799][ T6508] dump_stack_lvl+0x100/0x190 [ 110.935894][ T6508] should_fail_ex.cold+0x5/0xa [ 110.935929][ T6508] should_failslab+0xc2/0x120 [ 110.935974][ T6508] __kmalloc_cache_noprof+0x91/0x6c0 [ 110.936008][ T6508] ? rcu_is_watching+0x12/0xc0 [ 110.936049][ T6508] ? vhost_task_create+0xee/0x370 [ 110.936075][ T6508] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 110.936110][ T6508] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 110.936130][ T6508] vhost_task_create+0xee/0x370 [ 110.936146][ T6508] ? __pfx_vhost_task_create+0x10/0x10 [ 110.936168][ T6508] ? __pfx_vhost_task_fn+0x10/0x10 [ 110.936186][ T6508] ? __pfx___mutex_lock+0x10/0x10 [ 110.936215][ T6508] ? kasan_quarantine_put+0x104/0x240 [ 110.936236][ T6508] kvm_mmu_post_init_vm+0x1b3/0x360 [ 110.936279][ T6508] kvm_arch_vcpu_ioctl_run+0x66/0x1960 [ 110.936310][ T6508] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 110.936340][ T6508] kvm_vcpu_ioctl+0x730/0x1700 [ 110.936358][ T6508] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 110.936374][ T6508] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 110.936402][ T6508] ? do_vfs_ioctl+0x226/0x13e0 [ 110.936431][ T6508] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 110.936451][ T6508] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 110.936532][ T6508] ? __fget_files+0x215/0x3d0 [ 110.936547][ T6508] ? hook_file_ioctl_common+0x140/0x440 [ 110.936569][ T6508] ? selinux_file_ioctl+0x13b/0x290 [ 110.936582][ T6508] ? selinux_file_ioctl+0xb6/0x290 [ 110.936596][ T6508] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 110.936613][ T6508] __x64_sys_ioctl+0x18e/0x210 [ 110.936634][ T6508] do_syscall_64+0x115/0x870 [ 110.936659][ T6508] ? clear_bhb_loop+0x70/0xc0 [ 110.936678][ T6508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.936692][ T6508] RIP: 0033:0x7fa43db9e0d9 [ 110.936707][ T6508] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.936720][ T6508] RSP: 002b:00007fa43ea67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 110.936736][ T6508] RAX: ffffffffffffffda RBX: 00007fa43de25fa0 RCX: 00007fa43db9e0d9 [ 110.936745][ T6508] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 110.936754][ T6508] RBP: 00007fa43ea67090 R08: 0000000000000000 R09: 0000000000000000 [ 110.936763][ T6508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.936771][ T6508] R13: 00007fa43de26038 R14: 00007fa43de25fa0 R15: 00007ffec28d30d8 [ 110.936790][ T6508] [ 111.123196][ T6525] FAULT_INJECTION: forcing a failure. [ 111.123196][ T6525] name failslab, interval 1, probability 0, space 0, times 0 [ 111.133775][ T6525] CPU: 3 UID: 0 PID: 6525 Comm: syz.1.192 Tainted: G L syzkaller #0 PREEMPT(full) [ 111.133795][ T6525] Tainted: [L]=SOFTLOCKUP [ 111.133798][ T6525] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 111.133806][ T6525] Call Trace: [ 111.133811][ T6525] [ 111.133816][ T6525] dump_stack_lvl+0x100/0x190 [ 111.133836][ T6525] should_fail_ex.cold+0x5/0xa [ 111.133852][ T6525] should_failslab+0xc2/0x120 [ 111.133867][ T6525] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 111.133882][ T6525] ? __alloc_skb+0x140/0x710 [ 111.133908][ T6525] __alloc_skb+0x140/0x710 [ 111.133921][ T6525] ? __alloc_skb+0x5b7/0x710 [ 111.133933][ T6525] ? __pfx___alloc_skb+0x10/0x10 [ 111.133950][ T6525] hci_sock_sendmsg+0x1b01/0x2620 [ 111.133976][ T6525] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 111.133991][ T6525] ? selinux_socket_sendmsg+0x198/0x2f0 [ 111.134011][ T6525] sock_write_iter+0x53a/0x5b0 [ 111.134022][ T6525] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 111.134035][ T6525] ? __pfx_sock_write_iter+0x10/0x10 [ 111.134049][ T6525] ? bpf_lsm_file_permission+0x9/0x10 [ 111.134074][ T6525] ? security_file_permission+0x76/0x210 [ 111.134095][ T6525] ? rw_verify_area+0xce/0x6d0 [ 111.134121][ T6525] vfs_write+0x6ac/0x1050 [ 111.134139][ T6525] ? __pfx_sock_write_iter+0x10/0x10 [ 111.134150][ T6525] ? __pfx_vfs_write+0x10/0x10 [ 111.134166][ T6525] ? find_held_lock+0x2b/0x80 [ 111.134197][ T6525] ksys_write+0x1f8/0x250 [ 111.134207][ T6525] ? __pfx_ksys_write+0x10/0x10 [ 111.134221][ T6525] do_syscall_64+0x115/0x870 [ 111.134235][ T6525] ? clear_bhb_loop+0x70/0xc0 [ 111.134249][ T6525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.134261][ T6525] RIP: 0033:0x7f59c039e0d9 [ 111.134271][ T6525] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.134296][ T6525] RSP: 002b:00007f59c1348028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 111.134309][ T6525] RAX: ffffffffffffffda RBX: 00007f59c0625fa0 RCX: 00007f59c039e0d9 [ 111.134316][ T6525] RDX: 000000000000000d RSI: 0000200000000000 RDI: 0000000000000016 [ 111.134322][ T6525] RBP: 00007f59c1348090 R08: 0000000000000000 R09: 0000000000000000 [ 111.134328][ T6525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.134334][ T6525] R13: 00007f59c0626038 R14: 00007f59c0625fa0 R15: 00007ffce44137f8 [ 111.134360][ T6525] [ 111.365650][ T6542] netlink: 5 bytes leftover after parsing attributes in process `syz.2.202'. [ 111.382883][ T6544] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 111.393290][ T6542] bond1: entered promiscuous mode [ 111.395938][ T6542] bond1: entered allmulticast mode [ 111.398553][ T6542] 8021q: adding VLAN 0 to HW filter on device bond1 [ 111.609895][ T6560] binder: 6559:6560 ioctl af02 0 returned -22 [ 111.717554][ T6569] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 111.719625][ T6569] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 111.723284][ T6569] vhci_hcd vhci_hcd.0: Device attached [ 111.728208][ T6569] vhci_hcd vhci_hcd.0: port 0 already used [ 111.731374][ T6581] vhci_hcd: connection closed [ 111.734093][ T5851] vhci_hcd vhci_hcd.1: stop threads [ 111.737559][ T5851] vhci_hcd vhci_hcd.1: release socket [ 111.739306][ T5851] vhci_hcd vhci_hcd.1: disconnect device [ 111.886631][ T6589] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 111.895129][ T6589] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 111.917344][ T6598] trusted_key: encrypted_key: insufficient parameters specified [ 111.981791][ T6604] Invalid ELF header type: 3 != 1 [ 112.023108][ T6606] FAULT_INJECTION: forcing a failure. [ 112.023108][ T6606] name failslab, interval 1, probability 0, space 0, times 0 [ 112.023170][ T6606] CPU: 3 UID: 0 PID: 6606 Comm: syz.3.224 Tainted: G L syzkaller #0 PREEMPT(full) [ 112.023186][ T6606] Tainted: [L]=SOFTLOCKUP [ 112.023189][ T6606] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 112.023197][ T6606] Call Trace: [ 112.023209][ T6606] [ 112.023214][ T6606] dump_stack_lvl+0x100/0x190 [ 112.023291][ T6606] should_fail_ex.cold+0x5/0xa [ 112.023318][ T6606] should_failslab+0xc2/0x120 [ 112.023349][ T6606] __kmalloc_cache_noprof+0x91/0x6c0 [ 112.023373][ T6606] ? sctp_add_bind_addr+0xae/0x3e0 [ 112.023397][ T6606] sctp_add_bind_addr+0xae/0x3e0 [ 112.023413][ T6606] sctp_copy_local_addr_list+0x349/0x550 [ 112.023432][ T6606] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 112.023449][ T6606] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 112.023467][ T6606] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 112.023496][ T6606] sctp_bind_addr_copy+0xe0/0x530 [ 112.023513][ T6606] sctp_connect_new_asoc+0x1c9/0x770 [ 112.023525][ T6606] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 112.023538][ T6606] ? selinux_sctp_bind_connect+0xe0/0x230 [ 112.023584][ T6606] sctp_sendmsg+0x1743/0x22e0 [ 112.023605][ T6606] ? __pfx_sctp_sendmsg+0x10/0x10 [ 112.023619][ T6606] ? sock_has_perm+0x25a/0x2f0 [ 112.023640][ T6606] ? __pfx_sock_has_perm+0x10/0x10 [ 112.023677][ T6606] ? __pfx_sctp_sendmsg+0x10/0x10 [ 112.023697][ T6606] inet_sendmsg+0x11c/0x140 [ 112.023725][ T6606] ____sys_sendmsg+0x9c9/0xbe0 [ 112.023741][ T6606] ? __pfx_inet_sendmsg+0x10/0x10 [ 112.023757][ T6606] ? __pfx_____sys_sendmsg+0x10/0x10 [ 112.023773][ T6606] ___sys_sendmsg+0x190/0x1e0 [ 112.023785][ T6606] ? __pfx____sys_sendmsg+0x10/0x10 [ 112.023796][ T6606] ? __lock_acquire+0x49f/0x1a40 [ 112.023822][ T6606] ? get_pid_task+0x106/0x250 [ 112.023851][ T6606] __sys_sendmsg+0x160/0x210 [ 112.023866][ T6606] ? __pfx___sys_sendmsg+0x10/0x10 [ 112.023887][ T6606] do_syscall_64+0x115/0x870 [ 112.023905][ T6606] ? clear_bhb_loop+0x70/0xc0 [ 112.023920][ T6606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.023931][ T6606] RIP: 0033:0x7fd8b459e0d9 [ 112.023940][ T6606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.023951][ T6606] RSP: 002b:00007fd8b54ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 112.023963][ T6606] RAX: ffffffffffffffda RBX: 00007fd8b4825fa0 RCX: 00007fd8b459e0d9 [ 112.023969][ T6606] RDX: 000000000000c850 RSI: 00002000000000c0 RDI: 0000000000000004 [ 112.023976][ T6606] RBP: 00007fd8b54ff090 R08: 0000000000000000 R09: 0000000000000000 [ 112.023982][ T6606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 112.023987][ T6606] R13: 00007fd8b4826038 R14: 00007fd8b4825fa0 R15: 00007fff56956a78 [ 112.024001][ T6606] [ 112.067818][ T6611] netlink: 'syz.3.226': attribute type 16 has an invalid length. [ 112.068183][ T6610] netlink: 'syz.3.226': attribute type 16 has an invalid length. [ 112.076676][ T6611] netlink: 'syz.3.226': attribute type 3 has an invalid length. [ 112.077936][ T6610] netlink: 'syz.3.226': attribute type 3 has an invalid length. [ 112.088360][ T6611] netlink: 'syz.3.226': attribute type 1 has an invalid length. [ 112.088445][ T6610] netlink: 'syz.3.226': attribute type 1 has an invalid length. [ 112.090476][ T6611] netlink: 112 bytes leftover after parsing attributes in process `syz.3.226'. [ 112.149560][ T6610] netlink: 112 bytes leftover after parsing attributes in process `syz.3.226'. [ 112.370714][ T6629] IPv6: Can't replace route, no match found [ 112.419573][ T6633] FAULT_INJECTION: forcing a failure. [ 112.419573][ T6633] name failslab, interval 1, probability 0, space 0, times 0 [ 112.423914][ T6633] CPU: 1 UID: 0 PID: 6633 Comm: syz.2.236 Tainted: G L syzkaller #0 PREEMPT(full) [ 112.423933][ T6633] Tainted: [L]=SOFTLOCKUP [ 112.423937][ T6633] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 112.423944][ T6633] Call Trace: [ 112.423949][ T6633] [ 112.423954][ T6633] dump_stack_lvl+0x100/0x190 [ 112.423980][ T6633] should_fail_ex.cold+0x5/0xa [ 112.423996][ T6633] should_failslab+0xc2/0x120 [ 112.424015][ T6633] __kmalloc_noprof+0xfc/0x820 [ 112.424028][ T6633] ? rcu_is_watching+0x12/0xc0 [ 112.424075][ T6633] ? tomoyo_realpath_from_path+0xb6/0x690 [ 112.424091][ T6633] tomoyo_realpath_from_path+0xb6/0x690 [ 112.424105][ T6633] tomoyo_path_number_perm+0x23c/0x580 [ 112.424123][ T6633] ? tomoyo_path_number_perm+0x22e/0x580 [ 112.424140][ T6633] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 112.424174][ T6633] ? find_held_lock+0x2b/0x80 [ 112.424189][ T6633] ? __fget_files+0x215/0x3d0 [ 112.424205][ T6633] ? hook_file_ioctl_common+0x140/0x440 [ 112.424223][ T6633] ? __fget_files+0x215/0x3d0 [ 112.424248][ T6633] ? __fget_files+0x21f/0x3d0 [ 112.424268][ T6633] security_file_ioctl+0xd3/0x230 [ 112.424296][ T6633] __x64_sys_ioctl+0xb7/0x210 [ 112.424314][ T6633] do_syscall_64+0x115/0x870 [ 112.424328][ T6633] ? clear_bhb_loop+0x70/0xc0 [ 112.424343][ T6633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.424354][ T6633] RIP: 0033:0x7fa43db9e0d9 [ 112.424364][ T6633] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.424375][ T6633] RSP: 002b:00007fa43ea67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 112.424387][ T6633] RAX: ffffffffffffffda RBX: 00007fa43de25fa0 RCX: 00007fa43db9e0d9 [ 112.424394][ T6633] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009 [ 112.424400][ T6633] RBP: 00007fa43ea67090 R08: 0000000000000000 R09: 0000000000000000 [ 112.424406][ T6633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.424412][ T6633] R13: 00007fa43de26038 R14: 00007fa43de25fa0 R15: 00007ffec28d30d8 [ 112.424426][ T6633] [ 112.424444][ T6633] ERROR: Out of memory at tomoyo_realpath_from_path. [ 112.502124][ T6638] FAULT_INJECTION: forcing a failure. [ 112.502124][ T6638] name failslab, interval 1, probability 0, space 0, times 0 [ 112.511118][ T6638] CPU: 2 UID: 0 PID: 6638 Comm: syz.1.233 Tainted: G L syzkaller #0 PREEMPT(full) [ 112.511154][ T6638] Tainted: [L]=SOFTLOCKUP [ 112.511161][ T6638] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 112.511172][ T6638] Call Trace: [ 112.511180][ T6638] [ 112.511189][ T6638] dump_stack_lvl+0x100/0x190 [ 112.511222][ T6638] should_fail_ex.cold+0x5/0xa [ 112.511247][ T6638] should_failslab+0xc2/0x120 [ 112.511272][ T6638] __kvmalloc_node_noprof+0x116/0x970 [ 112.511294][ T6638] ? __lock_acquire+0x49f/0x1a40 [ 112.511319][ T6638] ? __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 112.511359][ T6638] __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 112.511388][ T6638] mmu_topup_memory_caches+0x25/0x170 [ 112.511428][ T6638] kvm_mmu_load+0xe2/0x2570 [ 112.511453][ T6638] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 112.511474][ T6638] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 112.511496][ T6638] ? __pfx_kvm_mmu_load+0x10/0x10 [ 112.511539][ T6638] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 112.511580][ T6638] ? kvm_check_and_inject_events+0x873/0x12a0 [ 112.511609][ T6638] ? record_steal_time+0x3a0/0xbb0 [ 112.511632][ T6638] vcpu_run+0x3aaa/0x5de0 [ 112.511670][ T6638] ? __pfx_vcpu_run+0x10/0x10 [ 112.511706][ T6638] ? rcu_is_watching+0x12/0xc0 [ 112.511739][ T6638] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 112.511764][ T6638] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 112.511798][ T6638] kvm_vcpu_ioctl+0x730/0x1700 [ 112.511822][ T6638] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 112.511843][ T6638] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 112.511868][ T6638] ? do_vfs_ioctl+0x226/0x13e0 [ 112.511896][ T6638] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 112.511922][ T6638] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 112.511962][ T6638] ? __fget_files+0x215/0x3d0 [ 112.511980][ T6638] ? hook_file_ioctl_common+0x140/0x440 [ 112.512009][ T6638] ? selinux_file_ioctl+0x13b/0x290 [ 112.512027][ T6638] ? selinux_file_ioctl+0xb6/0x290 [ 112.512045][ T6638] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 112.512067][ T6638] __x64_sys_ioctl+0x18e/0x210 [ 112.512096][ T6638] do_syscall_64+0x115/0x870 [ 112.512120][ T6638] ? clear_bhb_loop+0x70/0xc0 [ 112.512148][ T6638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.512168][ T6638] RIP: 0033:0x7f59c039e0d9 [ 112.512185][ T6638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.512204][ T6638] RSP: 002b:00007f59c1348028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 112.512223][ T6638] RAX: ffffffffffffffda RBX: 00007f59c0625fa0 RCX: 00007f59c039e0d9 [ 112.512235][ T6638] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 112.512246][ T6638] RBP: 00007f59c1348090 R08: 0000000000000000 R09: 0000000000000000 [ 112.512257][ T6638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.512268][ T6638] R13: 00007f59c0626038 R14: 00007f59c0625fa0 R15: 00007ffce44137f8 [ 112.512293][ T6638] [ 112.524710][ T979] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 112.807621][ T979] usb 8-1: unable to get BOS descriptor or descriptor too short [ 112.815347][ T979] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.821777][ T979] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 112.825846][ T979] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 112.836067][ T979] usb 8-1: string descriptor 0 read error: -22 [ 112.838921][ T979] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 112.843210][ T979] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.857881][ T979] cdc_ncm 8-1:1.0: CDC Union missing and no IAD found [ 112.860847][ T979] cdc_ncm 8-1:1.0: bind() failure [ 112.879397][ T6653] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 112.882072][ T6653] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 112.886661][ T6653] vhci_hcd vhci_hcd.0: Device attached [ 112.892535][ T6653] vhci_hcd vhci_hcd.0: port 0 already used [ 112.896900][ T6659] vhci_hcd: connection closed [ 112.898133][ T5851] vhci_hcd vhci_hcd.2: stop threads [ 112.902468][ T5851] vhci_hcd vhci_hcd.2: release socket [ 112.904237][ T5851] vhci_hcd vhci_hcd.2: disconnect device [ 113.114010][ T6668] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 113.179753][ T5861] usb 8-1: USB disconnect, device number 3 [ 113.203555][ T6670] FAULT_INJECTION: forcing a failure. [ 113.203555][ T6670] name failslab, interval 1, probability 0, space 0, times 0 [ 113.207521][ T6670] CPU: 0 UID: 0 PID: 6670 Comm: syz.0.245 Tainted: G L syzkaller #0 PREEMPT(full) [ 113.207538][ T6670] Tainted: [L]=SOFTLOCKUP [ 113.207542][ T6670] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 113.207549][ T6670] Call Trace: [ 113.207555][ T6670] [ 113.207561][ T6670] dump_stack_lvl+0x100/0x190 [ 113.207582][ T6670] should_fail_ex.cold+0x5/0xa [ 113.207598][ T6670] should_failslab+0xc2/0x120 [ 113.207614][ T6670] kmem_cache_alloc_noprof+0x91/0x6a0 [ 113.207628][ T6670] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 113.207645][ T6670] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 113.207662][ T6670] mmu_topup_memory_caches+0x25/0x170 [ 113.207680][ T6670] kvm_mmu_load+0xe2/0x2570 [ 113.207695][ T6670] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 113.207706][ T6670] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 113.207719][ T6670] ? __pfx_kvm_mmu_load+0x10/0x10 [ 113.207733][ T6670] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 113.207747][ T6670] ? kvm_check_and_inject_events+0x873/0x12a0 [ 113.207763][ T6670] ? record_steal_time+0x3a0/0xbb0 [ 113.207776][ T6670] vcpu_run+0x3aaa/0x5de0 [ 113.207801][ T6670] ? __pfx_vcpu_run+0x10/0x10 [ 113.207821][ T6670] ? rcu_is_watching+0x12/0xc0 [ 113.207840][ T6670] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 113.207856][ T6670] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 113.207875][ T6670] kvm_vcpu_ioctl+0x730/0x1700 [ 113.207889][ T6670] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 113.207901][ T6670] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 113.207916][ T6670] ? do_vfs_ioctl+0x226/0x13e0 [ 113.207933][ T6670] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 113.207949][ T6670] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 113.207972][ T6670] ? __fget_files+0x215/0x3d0 [ 113.207983][ T6670] ? hook_file_ioctl_common+0x140/0x440 [ 113.207999][ T6670] ? selinux_file_ioctl+0x13b/0x290 [ 113.208009][ T6670] ? selinux_file_ioctl+0xb6/0x290 [ 113.208020][ T6670] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 113.208033][ T6670] __x64_sys_ioctl+0x18e/0x210 [ 113.208049][ T6670] do_syscall_64+0x115/0x870 [ 113.208064][ T6670] ? clear_bhb_loop+0x70/0xc0 [ 113.208078][ T6670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.208089][ T6670] RIP: 0033:0x7fa6e3f9e0d9 [ 113.208099][ T6670] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.208109][ T6670] RSP: 002b:00007fa6e4ef3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 113.208121][ T6670] RAX: ffffffffffffffda RBX: 00007fa6e4225fa0 RCX: 00007fa6e3f9e0d9 [ 113.208128][ T6670] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 113.208134][ T6670] RBP: 00007fa6e4ef3090 R08: 0000000000000000 R09: 0000000000000000 [ 113.208140][ T6670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 113.208146][ T6670] R13: 00007fa6e4226038 R14: 00007fa6e4225fa0 R15: 00007ffcaab4f498 [ 113.208160][ T6670] [ 113.404278][ T5842] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 113.562586][ T5842] usb 5-1: Dual-Role OTG device on HNP port [ 113.564990][ T5842] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 113.568362][ T5842] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.584320][ T6680] netlink: 28 bytes leftover after parsing attributes in process `syz.2.248'. [ 113.584828][ T5842] gspca_main: spca501-2.14.0 probing 0000:0000 [ 113.591276][ T5842] gspca_spca501: reg write: error -32 [ 113.601102][ T5842] spca501 5-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 113.604211][ T5842] spca501 5-1:1.0: probe with driver spca501 failed with error -22 [ 113.859397][ T6688] FAULT_INJECTION: forcing a failure. [ 113.859397][ T6688] name failslab, interval 1, probability 0, space 0, times 0 [ 113.864898][ T6688] CPU: 2 UID: 0 PID: 6688 Comm: syz.0.250 Tainted: G L syzkaller #0 PREEMPT(full) [ 113.864928][ T6688] Tainted: [L]=SOFTLOCKUP [ 113.864935][ T6688] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 113.864946][ T6688] Call Trace: [ 113.864967][ T6688] [ 113.864977][ T6688] dump_stack_lvl+0x100/0x190 [ 113.865008][ T6688] should_fail_ex.cold+0x5/0xa [ 113.865094][ T6688] should_failslab+0xc2/0x120 [ 113.865120][ T6688] __kmalloc_noprof+0xfc/0x820 [ 113.865141][ T6688] ? __pfx_dynamic_dname+0x10/0x10 [ 113.865169][ T6688] ? tomoyo_encode2+0xfb/0x3c0 [ 113.865192][ T6688] tomoyo_encode2+0xfb/0x3c0 [ 113.865213][ T6688] tomoyo_encode+0x29/0x50 [ 113.865230][ T6688] tomoyo_realpath_from_path+0x18c/0x690 [ 113.865253][ T6688] tomoyo_path_number_perm+0x23c/0x580 [ 113.865276][ T6688] ? tomoyo_path_number_perm+0x22e/0x580 [ 113.865303][ T6688] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 113.865350][ T6688] ? find_held_lock+0x2b/0x80 [ 113.865381][ T6688] ? __fget_files+0x215/0x3d0 [ 113.865399][ T6688] ? hook_file_ioctl_common+0x140/0x440 [ 113.865421][ T6688] ? __fget_files+0x215/0x3d0 [ 113.865443][ T6688] ? __fget_files+0x21f/0x3d0 [ 113.865466][ T6688] security_file_ioctl+0xd3/0x230 [ 113.865494][ T6688] __x64_sys_ioctl+0xb7/0x210 [ 113.865522][ T6688] do_syscall_64+0x115/0x870 [ 113.865545][ T6688] ? clear_bhb_loop+0x70/0xc0 [ 113.865568][ T6688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.865587][ T6688] RIP: 0033:0x7fa6e3f9e0d9 [ 113.865630][ T6688] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.865652][ T6688] RSP: 002b:00007fa6e4ef3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 113.865672][ T6688] RAX: ffffffffffffffda RBX: 00007fa6e4225fa0 RCX: 00007fa6e3f9e0d9 [ 113.865683][ T6688] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 113.865694][ T6688] RBP: 00007fa6e4ef3090 R08: 0000000000000000 R09: 0000000000000000 [ 113.865704][ T6688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.865714][ T6688] R13: 00007fa6e4226038 R14: 00007fa6e4225fa0 R15: 00007ffcaab4f498 [ 113.865781][ T6688] [ 113.865898][ T6688] ERROR: Out of memory at tomoyo_realpath_from_path. [ 114.561745][ T29] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 114.670429][ T6735] vivid-000: ================= START STATUS ================= [ 114.690162][ T6735] vivid-000: Test Pattern: 75% Colorbar [ 114.695971][ T42] kauditd_printk_skb: 67 callbacks suppressed [ 114.695989][ T42] audit: type=1400 audit(1786059227.530:498): avc: denied { ioctl } for pid=6738 comm="syz.0.267" path="socket:[17715]" dev="sockfs" ino=17715 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 114.697652][ T6735] vivid-000: Fill Percentage of Frame: [ 114.698135][ T6739] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=3 sclass=netlink_xfrm_socket pid=6739 comm=syz.0.267 [ 114.710215][ T6735] 100 [ 114.717323][ T6735] vivid-000: Horizontal Movement: No Movement [ 114.719858][ T6735] vivid-000: Vertical Movement: No Movement [ 114.721334][ T6740] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 114.721888][ T29] usb 6-1: Using ep0 maxpacket: 8 [ 114.722855][ T6735] vivid-000: OSD Text Mode: All [ 114.722882][ T6735] vivid-000: Show Border: [ 114.726433][ T29] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 114.727579][ T6735] false [ 114.734025][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.735297][ T6735] [ 114.740729][ T6735] vivid-000: Show Square: false [ 114.743681][ T6735] vivid-000: Sensor Flipped Horizontally: false [ 114.746457][ T29] pvrusb2: Hardware description: Terratec Grabster AV400 [ 114.746577][ T6735] vivid-000: Sensor Flipped Vertically: false [ 114.751673][ T6735] vivid-000: Insert SAV Code in Image: false [ 114.752342][ T29] pvrusb2: ********** [ 114.754323][ T6735] vivid-000: Insert EAV Code in Image: false [ 114.754362][ T6735] vivid-000: Insert Video Guard Band: [ 114.757183][ T29] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 114.758309][ T6735] false [ 114.758326][ T6735] vivid-000: Reduced Framerate: false [ 114.758350][ T6735] vivid-000: HDMI 000-0 Is Connected To: [ 114.760163][ T29] pvrusb2: Important functionality might not be entirely working. [ 114.764760][ T6735] Test Pattern Generator [ 114.764778][ T6735] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 114.764804][ T6735] vivid-000: Enable Capture Cropping: true [ 114.764828][ T6735] vivid-000: Enable Capture Composing: true [ 114.764851][ T6735] vivid-000: Enable Capture Scaler: true [ 114.764887][ T6735] vivid-000: Timestamp Source: [ 114.766632][ T29] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 114.768047][ T6735] End of Frame [ 114.768063][ T6735] vivid-000: Colorspace: sRGB [ 114.770109][ T29] pvrusb2: ********** [ 114.773954][ T6735] [ 114.800051][ T6735] vivid-000: Transfer Function: Default [ 114.802610][ T6735] vivid-000: Y'CbCr Encoding: Default [ 114.804967][ T6735] vivid-000: HSV Encoding: Hue 0-179 [ 114.807150][ T6735] vivid-000: Quantization: Default [ 114.809333][ T6735] vivid-000: Apply Alpha To Red Only: false [ 114.812188][ T6735] vivid-000: Standard Aspect Ratio: 4x3 [ 114.814991][ T6735] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 114.818403][ T6735] vivid-000: DV Timings: 640x480p59 inactive [ 114.820970][ T6735] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 114.824519][ T6735] vivid-000: Maximum EDID Blocks: 2 [ 114.826899][ T6735] vivid-000: Limited RGB Range (16-235): false [ 114.829623][ T6735] vivid-000: Rx RGB Quantization Range: Automatic [ 114.833843][ T6735] vivid-000: Power Present: 0x00000001 [ 114.836347][ T6735] tpg source WxH: 320x240 (Y'CbCr) [ 114.838348][ T6735] tpg field: 1 [ 114.839851][ T6735] tpg crop: (0,0)/320x240 [ 114.842276][ T6735] tpg compose: (0,0)/320x240 [ 114.844390][ T6735] tpg colorspace: 8 [ 114.846065][ T6735] tpg transfer function: 0/0 [ 114.847953][ T6735] tpg Y'CbCr encoding: 0/0 [ 114.849726][ T6735] tpg quantization: 0/0 [ 114.851406][ T6735] tpg RGB range: 0/2 [ 114.853285][ T6735] vivid-000: ================== END STATUS ================== [ 114.901682][ T979] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 114.944865][ T5842] IPVS: starting estimator thread 0... [ 114.948541][ T2522] pvrusb2: Invalid write control endpoint [ 115.031817][ T2522] pvrusb2: Invalid write control endpoint [ 115.039503][ T6751] IPVS: using max 48 ests per chain, 115200 per kthread [ 115.050056][ T2522] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 115.061213][ T2522] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 115.064384][ T2522] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 115.068493][ T2522] pvrusb2: Device being rendered inoperable [ 115.072264][ T979] usb 7-1: Using ep0 maxpacket: 8 [ 115.076852][ T2522] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 115.079730][ T979] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 115.079761][ T979] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 115.079780][ T979] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 115.079801][ T979] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 115.086762][ T2522] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 115.104478][ T979] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 115.109225][ T2522] pvrusb2: Attached sub-driver cx25840 [ 115.110768][ T979] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.111828][ T2522] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 115.119579][ T2522] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 115.157355][ T42] audit: type=1400 audit(1786059227.975:499): avc: denied { connect } for pid=6763 comm="syz.3.275" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 115.161385][ T6702] pvrusb2: Attempted to execute control transfer when device not ok [ 115.172024][ T29] usb 6-1: USB disconnect, device number 3 [ 115.176048][ T6764] erspan1: entered promiscuous mode [ 115.361052][ T979] usb 7-1: GET_CAPABILITIES returned 0 [ 115.363650][ T979] usbtmc 7-1:16.0: can't read capabilities [ 115.456096][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 115.618001][ T41] usb 7-1: USB disconnect, device number 3 [ 115.635718][ T6767] binder: 6766:6767 ioctl c0306201 200000000040 returned -14 [ 115.751340][ T6775] autofs: Bad value for 'fd' [ 115.839880][ T6777] FAULT_INJECTION: forcing a failure. [ 115.839880][ T6777] name failslab, interval 1, probability 0, space 0, times 0 [ 115.844146][ T6777] CPU: 2 UID: 0 PID: 6777 Comm: syz.1.281 Tainted: G L syzkaller #0 PREEMPT(full) [ 115.844165][ T6777] Tainted: [L]=SOFTLOCKUP [ 115.844168][ T6777] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 115.844176][ T6777] Call Trace: [ 115.844191][ T6777] [ 115.844196][ T6777] dump_stack_lvl+0x100/0x190 [ 115.844322][ T6777] should_fail_ex.cold+0x5/0xa [ 115.844350][ T6777] should_failslab+0xc2/0x120 [ 115.844388][ T6777] kmem_cache_alloc_noprof+0x91/0x6a0 [ 115.844407][ T6777] ? vhost_task_create+0x1db/0x370 [ 115.844461][ T6777] ? kvm_mmu_post_init_vm+0x1b3/0x360 [ 115.844486][ T6777] ? kvm_arch_vcpu_ioctl_run+0x66/0x1960 [ 115.844510][ T6777] ? alloc_pid+0x1bd/0x1910 [ 115.844523][ T6777] alloc_pid+0x1bd/0x1910 [ 115.844536][ T6777] ? __pfx_alloc_pid+0x10/0x10 [ 115.844559][ T6777] ? fpu_clone+0x226/0x7a0 [ 115.844634][ T6777] ? copy_thread+0x729/0xbe0 [ 115.844651][ T6777] copy_process+0x5485/0x8030 [ 115.844682][ T6777] ? __pfx_copy_process+0x10/0x10 [ 115.844697][ T6777] ? __kasan_kmalloc+0xaa/0xb0 [ 115.844711][ T6777] ? lockdep_init_map_type+0x5c/0x250 [ 115.844733][ T6777] ? lockdep_init_map_type+0x5c/0x250 [ 115.844747][ T6777] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 115.844761][ T6777] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 115.844781][ T6777] vhost_task_create+0x1db/0x370 [ 115.844794][ T6777] ? __pfx_vhost_task_create+0x10/0x10 [ 115.844811][ T6777] ? __pfx_vhost_task_fn+0x10/0x10 [ 115.844824][ T6777] ? __pfx___mutex_lock+0x10/0x10 [ 115.844971][ T6777] ? kasan_quarantine_put+0x104/0x240 [ 115.844996][ T6777] kvm_mmu_post_init_vm+0x1b3/0x360 [ 115.845017][ T6777] kvm_arch_vcpu_ioctl_run+0x66/0x1960 [ 115.845038][ T6777] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 115.845067][ T6777] kvm_vcpu_ioctl+0x730/0x1700 [ 115.845087][ T6777] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 115.845106][ T6777] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 115.845134][ T6777] ? do_vfs_ioctl+0x226/0x13e0 [ 115.845159][ T6777] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 115.845175][ T6777] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 115.845222][ T6777] ? __fget_files+0x215/0x3d0 [ 115.845234][ T6777] ? hook_file_ioctl_common+0x140/0x440 [ 115.845251][ T6777] ? selinux_file_ioctl+0x13b/0x290 [ 115.845261][ T6777] ? selinux_file_ioctl+0xb6/0x290 [ 115.845275][ T6777] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 115.845288][ T6777] __x64_sys_ioctl+0x18e/0x210 [ 115.845305][ T6777] do_syscall_64+0x115/0x870 [ 115.845319][ T6777] ? clear_bhb_loop+0x70/0xc0 [ 115.845337][ T6777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.845349][ T6777] RIP: 0033:0x7f59c039e0d9 [ 115.845359][ T6777] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.845370][ T6777] RSP: 002b:00007f59c1348028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 115.845381][ T6777] RAX: ffffffffffffffda RBX: 00007f59c0625fa0 RCX: 00007f59c039e0d9 [ 115.845388][ T6777] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 115.845394][ T6777] RBP: 00007f59c1348090 R08: 0000000000000000 R09: 0000000000000000 [ 115.845401][ T6777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.845407][ T6777] R13: 00007f59c0626038 R14: 00007f59c0625fa0 R15: 00007ffce44137f8 [ 115.845420][ T6777] [ 116.144061][ T42] audit: type=1400 audit(1786059228.901:500): avc: denied { create } for pid=6783 comm="syz.1.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 116.150844][ T42] audit: type=1400 audit(1786059228.901:501): avc: denied { ioctl } for pid=6783 comm="syz.1.283" path="socket:[17292]" dev="sockfs" ino=17292 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 116.159866][ T42] audit: type=1400 audit(1786059228.901:502): avc: denied { write } for pid=6783 comm="syz.1.283" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 116.219314][ T6789] FAULT_INJECTION: forcing a failure. [ 116.219314][ T6789] name failslab, interval 1, probability 0, space 0, times 0 [ 116.223383][ T6789] CPU: 2 UID: 0 PID: 6789 Comm: syz.0.285 Tainted: G L syzkaller #0 PREEMPT(full) [ 116.223401][ T6789] Tainted: [L]=SOFTLOCKUP [ 116.223406][ T6789] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 116.223412][ T6789] Call Trace: [ 116.223417][ T6789] [ 116.223422][ T6789] dump_stack_lvl+0x100/0x190 [ 116.223444][ T6789] should_fail_ex.cold+0x5/0xa [ 116.223460][ T6789] should_failslab+0xc2/0x120 [ 116.223476][ T6789] kmem_cache_alloc_noprof+0x91/0x6a0 [ 116.223489][ T6789] ? vhost_task_create+0x1db/0x370 [ 116.223515][ T6789] ? kvm_mmu_post_init_vm+0x1b3/0x360 [ 116.223532][ T6789] ? kvm_arch_vcpu_ioctl_run+0x66/0x1960 [ 116.223550][ T6789] ? alloc_pid+0x1bd/0x1910 [ 116.223563][ T6789] alloc_pid+0x1bd/0x1910 [ 116.223576][ T6789] ? __pfx_alloc_pid+0x10/0x10 [ 116.223592][ T6789] ? __lock_acquire+0x49f/0x1a40 [ 116.223607][ T6789] ? avc_has_perm_noaudit+0x145/0x3b0 [ 116.223627][ T6789] ? fpu_clone+0x226/0x7a0 [ 116.223640][ T6789] ? copy_thread+0x729/0xbe0 [ 116.223656][ T6789] copy_process+0x5485/0x8030 [ 116.223683][ T6789] ? __pfx_copy_process+0x10/0x10 [ 116.223698][ T6789] ? __kasan_kmalloc+0xaa/0xb0 [ 116.223711][ T6789] ? lockdep_init_map_type+0x5c/0x250 [ 116.223725][ T6789] ? lockdep_init_map_type+0x5c/0x250 [ 116.223740][ T6789] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 116.223753][ T6789] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 116.223771][ T6789] vhost_task_create+0x1db/0x370 [ 116.223783][ T6789] ? __pfx_vhost_task_create+0x10/0x10 [ 116.223799][ T6789] ? __pfx_vhost_task_fn+0x10/0x10 [ 116.223813][ T6789] ? __pfx___mutex_lock+0x10/0x10 [ 116.223828][ T6789] ? kasan_quarantine_put+0x104/0x240 [ 116.223843][ T6789] kvm_mmu_post_init_vm+0x1b3/0x360 [ 116.223860][ T6789] kvm_arch_vcpu_ioctl_run+0x66/0x1960 [ 116.223876][ T6789] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 116.223891][ T6789] kvm_vcpu_ioctl+0x730/0x1700 [ 116.223905][ T6789] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 116.223917][ T6789] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 116.223931][ T6789] ? do_vfs_ioctl+0x226/0x13e0 [ 116.223948][ T6789] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 116.223963][ T6789] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 116.223985][ T6789] ? __fget_files+0x215/0x3d0 [ 116.223996][ T6789] ? hook_file_ioctl_common+0x140/0x440 [ 116.224012][ T6789] ? selinux_file_ioctl+0x13b/0x290 [ 116.224022][ T6789] ? selinux_file_ioctl+0xb6/0x290 [ 116.224032][ T6789] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 116.224045][ T6789] __x64_sys_ioctl+0x18e/0x210 [ 116.224061][ T6789] do_syscall_64+0x115/0x870 [ 116.224075][ T6789] ? clear_bhb_loop+0x70/0xc0 [ 116.224089][ T6789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.224100][ T6789] RIP: 0033:0x7fa6e3f9e0d9 [ 116.224125][ T6789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.224135][ T6789] RSP: 002b:00007fa6e4ef3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 116.224146][ T6789] RAX: ffffffffffffffda RBX: 00007fa6e4225fa0 RCX: 00007fa6e3f9e0d9 [ 116.224153][ T6789] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 116.224159][ T6789] RBP: 00007fa6e4ef3090 R08: 0000000000000000 R09: 0000000000000000 [ 116.224165][ T6789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.224172][ T6789] R13: 00007fa6e4226038 R14: 00007fa6e4225fa0 R15: 00007ffcaab4f498 [ 116.224185][ T6789] [ 116.230743][ T42] audit: type=1400 audit(1786059228.976:503): avc: denied { map } for pid=6783 comm="syz.1.283" path="socket:[17828]" dev="sockfs" ino=17828 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 116.504913][ T979] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 116.525802][ T6801] FAULT_INJECTION: forcing a failure. [ 116.525802][ T6801] name failslab, interval 1, probability 0, space 0, times 0 [ 116.530123][ T6801] CPU: 2 UID: 0 PID: 6801 Comm: syz.0.288 Tainted: G L syzkaller #0 PREEMPT(full) [ 116.530167][ T6801] Tainted: [L]=SOFTLOCKUP [ 116.530174][ T6801] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 116.530186][ T6801] Call Trace: [ 116.530194][ T6801] [ 116.530202][ T6801] dump_stack_lvl+0x100/0x190 [ 116.530233][ T6801] should_fail_ex.cold+0x5/0xa [ 116.530258][ T6801] should_failslab+0xc2/0x120 [ 116.530283][ T6801] kmem_cache_alloc_noprof+0x91/0x6a0 [ 116.530304][ T6801] ? vhost_task_create+0x1db/0x370 [ 116.530324][ T6801] ? kvm_mmu_post_init_vm+0x1b3/0x360 [ 116.530351][ T6801] ? kvm_arch_vcpu_ioctl_run+0x66/0x1960 [ 116.530378][ T6801] ? alloc_pid+0x1bd/0x1910 [ 116.530400][ T6801] alloc_pid+0x1bd/0x1910 [ 116.530421][ T6801] ? __pfx_alloc_pid+0x10/0x10 [ 116.530445][ T6801] ? __lock_acquire+0x49f/0x1a40 [ 116.530467][ T6801] ? avc_has_perm_noaudit+0x145/0x3b0 [ 116.530500][ T6801] ? fpu_clone+0x226/0x7a0 [ 116.530520][ T6801] ? copy_thread+0x729/0xbe0 [ 116.530542][ T6801] copy_process+0x5485/0x8030 [ 116.530574][ T6801] ? __pfx_copy_process+0x10/0x10 [ 116.530593][ T6801] ? __kasan_kmalloc+0xaa/0xb0 [ 116.530615][ T6801] ? lockdep_init_map_type+0x5c/0x250 [ 116.530635][ T6801] ? lockdep_init_map_type+0x5c/0x250 [ 116.530656][ T6801] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 116.530684][ T6801] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 116.530714][ T6801] vhost_task_create+0x1db/0x370 [ 116.530735][ T6801] ? __pfx_vhost_task_create+0x10/0x10 [ 116.530762][ T6801] ? __pfx_vhost_task_fn+0x10/0x10 [ 116.530785][ T6801] ? __pfx___mutex_lock+0x10/0x10 [ 116.530809][ T6801] ? kasan_quarantine_put+0x104/0x240 [ 116.530835][ T6801] kvm_mmu_post_init_vm+0x1b3/0x360 [ 116.530863][ T6801] kvm_arch_vcpu_ioctl_run+0x66/0x1960 [ 116.530888][ T6801] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 116.530913][ T6801] kvm_vcpu_ioctl+0x730/0x1700 [ 116.530935][ T6801] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 116.530956][ T6801] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 116.530980][ T6801] ? do_vfs_ioctl+0x226/0x13e0 [ 116.531007][ T6801] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 116.531032][ T6801] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 116.531069][ T6801] ? __fget_files+0x215/0x3d0 [ 116.531086][ T6801] ? hook_file_ioctl_common+0x140/0x440 [ 116.531114][ T6801] ? selinux_file_ioctl+0x13b/0x290 [ 116.531130][ T6801] ? selinux_file_ioctl+0xb6/0x290 [ 116.531148][ T6801] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 116.531169][ T6801] __x64_sys_ioctl+0x18e/0x210 [ 116.531196][ T6801] do_syscall_64+0x115/0x870 [ 116.531217][ T6801] ? clear_bhb_loop+0x70/0xc0 [ 116.531239][ T6801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.531258][ T6801] RIP: 0033:0x7fa6e3f9e0d9 [ 116.531273][ T6801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.531290][ T6801] RSP: 002b:00007fa6e4ef3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 116.531308][ T6801] RAX: ffffffffffffffda RBX: 00007fa6e4225fa0 RCX: 00007fa6e3f9e0d9 [ 116.531318][ T6801] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 116.531329][ T6801] RBP: 00007fa6e4ef3090 R08: 0000000000000000 R09: 0000000000000000 [ 116.531338][ T6801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.531348][ T6801] R13: 00007fa6e4226038 R14: 00007fa6e4225fa0 R15: 00007ffcaab4f498 [ 116.531372][ T6801] [ 116.674306][ T979] usb 7-1: Using ep0 maxpacket: 16 [ 116.678957][ T979] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.683357][ T979] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 116.688452][ T979] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 116.692061][ T979] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.695354][ T42] audit: type=1400 audit(1786059229.407:504): avc: denied { write } for pid=6804 comm="syz.1.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 116.709910][ T979] usb 7-1: config 0 descriptor?? [ 116.712485][ T6805] netlink: 148 bytes leftover after parsing attributes in process `syz.1.290'. [ 116.719547][ T42] audit: type=1400 audit(1786059229.435:505): avc: denied { sqpoll } for pid=6804 comm="syz.1.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 116.827351][ T6810] FAULT_INJECTION: forcing a failure. [ 116.827351][ T6810] name failslab, interval 1, probability 0, space 0, times 0 [ 116.831315][ T6810] CPU: 2 UID: 0 PID: 6810 Comm: syz.3.292 Tainted: G L syzkaller #0 PREEMPT(full) [ 116.831332][ T6810] Tainted: [L]=SOFTLOCKUP [ 116.831336][ T6810] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 116.831343][ T6810] Call Trace: [ 116.831348][ T6810] [ 116.831353][ T6810] dump_stack_lvl+0x100/0x190 [ 116.831374][ T6810] should_fail_ex.cold+0x5/0xa [ 116.831403][ T6810] should_failslab+0xc2/0x120 [ 116.831421][ T6810] kmem_cache_alloc_noprof+0x91/0x6a0 [ 116.831434][ T6810] ? vhost_task_create+0x1db/0x370 [ 116.831447][ T6810] ? kvm_mmu_post_init_vm+0x1b3/0x360 [ 116.831464][ T6810] ? kvm_arch_vcpu_ioctl_run+0x66/0x1960 [ 116.831481][ T6810] ? alloc_pid+0x1bd/0x1910 [ 116.831494][ T6810] alloc_pid+0x1bd/0x1910 [ 116.831507][ T6810] ? __pfx_alloc_pid+0x10/0x10 [ 116.831523][ T6810] ? __lock_acquire+0x49f/0x1a40 [ 116.831537][ T6810] ? avc_has_perm_noaudit+0x145/0x3b0 [ 116.831558][ T6810] ? fpu_clone+0x226/0x7a0 [ 116.831571][ T6810] ? copy_thread+0x729/0xbe0 [ 116.831587][ T6810] copy_process+0x5485/0x8030 [ 116.831611][ T6810] ? __pfx_copy_process+0x10/0x10 [ 116.831627][ T6810] ? __kasan_kmalloc+0xaa/0xb0 [ 116.831640][ T6810] ? lockdep_init_map_type+0x5c/0x250 [ 116.831655][ T6810] ? lockdep_init_map_type+0x5c/0x250 [ 116.831673][ T6810] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 116.831687][ T6810] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 116.831706][ T6810] vhost_task_create+0x1db/0x370 [ 116.831718][ T6810] ? __pfx_vhost_task_create+0x10/0x10 [ 116.831736][ T6810] ? __pfx_vhost_task_fn+0x10/0x10 [ 116.831749][ T6810] ? __pfx___mutex_lock+0x10/0x10 [ 116.831764][ T6810] ? kasan_quarantine_put+0x104/0x240 [ 116.831780][ T6810] kvm_mmu_post_init_vm+0x1b3/0x360 [ 116.831796][ T6810] kvm_arch_vcpu_ioctl_run+0x66/0x1960 [ 116.831812][ T6810] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 116.831828][ T6810] kvm_vcpu_ioctl+0x730/0x1700 [ 116.831842][ T6810] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 116.831854][ T6810] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 116.831868][ T6810] ? do_vfs_ioctl+0x226/0x13e0 [ 116.831885][ T6810] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 116.831900][ T6810] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 116.831923][ T6810] ? __fget_files+0x215/0x3d0 [ 116.831934][ T6810] ? hook_file_ioctl_common+0x140/0x440 [ 116.831951][ T6810] ? selinux_file_ioctl+0x13b/0x290 [ 116.831960][ T6810] ? selinux_file_ioctl+0xb6/0x290 [ 116.831971][ T6810] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 116.831983][ T6810] __x64_sys_ioctl+0x18e/0x210 [ 116.832000][ T6810] do_syscall_64+0x115/0x870 [ 116.832014][ T6810] ? clear_bhb_loop+0x70/0xc0 [ 116.832028][ T6810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.832039][ T6810] RIP: 0033:0x7fd8b459e0d9 [ 116.832048][ T6810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.832059][ T6810] RSP: 002b:00007fd8b54ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 116.832070][ T6810] RAX: ffffffffffffffda RBX: 00007fd8b4825fa0 RCX: 00007fd8b459e0d9 [ 116.832077][ T6810] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 116.832083][ T6810] RBP: 00007fd8b54ff090 R08: 0000000000000000 R09: 0000000000000000 [ 116.832089][ T6810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.832095][ T6810] R13: 00007fd8b4826038 R14: 00007fd8b4825fa0 R15: 00007fff56956a78 [ 116.832109][ T6810] [ 116.839423][ T6812] FAULT_INJECTION: forcing a failure. [ 116.839423][ T6812] name failslab, interval 1, probability 0, space 0, times 0 [ 116.974148][ T6812] CPU: 1 UID: 0 PID: 6812 Comm: syz.0.293 Tainted: G L syzkaller #0 PREEMPT(full) [ 116.974167][ T6812] Tainted: [L]=SOFTLOCKUP [ 116.974171][ T6812] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 116.974179][ T6812] Call Trace: [ 116.974184][ T6812] [ 116.974190][ T6812] dump_stack_lvl+0x100/0x190 [ 116.974211][ T6812] should_fail_ex.cold+0x5/0xa [ 116.974228][ T6812] should_failslab+0xc2/0x120 [ 116.974254][ T6812] kmem_cache_alloc_noprof+0x91/0x6a0 [ 116.974267][ T6812] ? vhost_task_create+0x1db/0x370 [ 116.974281][ T6812] ? kvm_mmu_post_init_vm+0x1b3/0x360 [ 116.974394][ T6812] ? kvm_arch_vcpu_ioctl_run+0x66/0x1960 [ 116.974410][ T6812] ? alloc_pid+0x1bd/0x1910 [ 116.974423][ T6812] alloc_pid+0x1bd/0x1910 [ 116.974436][ T6812] ? __pfx_alloc_pid+0x10/0x10 [ 116.974452][ T6812] ? __lock_acquire+0x49f/0x1a40 [ 116.974466][ T6812] ? avc_has_perm_noaudit+0x145/0x3b0 [ 116.974486][ T6812] ? fpu_clone+0x226/0x7a0 [ 116.974499][ T6812] ? copy_thread+0x729/0xbe0 [ 116.974515][ T6812] copy_process+0x5485/0x8030 [ 116.974539][ T6812] ? __pfx_copy_process+0x10/0x10 [ 116.974553][ T6812] ? __kasan_kmalloc+0xaa/0xb0 [ 116.974567][ T6812] ? lockdep_init_map_type+0x5c/0x250 [ 116.974581][ T6812] ? lockdep_init_map_type+0x5c/0x250 [ 116.974595][ T6812] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 116.974610][ T6812] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 116.974635][ T6812] vhost_task_create+0x1db/0x370 [ 116.974653][ T6812] ? __pfx_vhost_task_create+0x10/0x10 [ 116.974678][ T6812] ? __pfx_vhost_task_fn+0x10/0x10 [ 116.974692][ T6812] ? __pfx___mutex_lock+0x10/0x10 [ 116.974708][ T6812] ? kasan_quarantine_put+0x104/0x240 [ 116.974731][ T6812] kvm_mmu_post_init_vm+0x1b3/0x360 [ 116.974756][ T6812] kvm_arch_vcpu_ioctl_run+0x66/0x1960 [ 116.974780][ T6812] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 116.974800][ T6812] kvm_vcpu_ioctl+0x730/0x1700 [ 116.974814][ T6812] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 116.974826][ T6812] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 116.974840][ T6812] ? do_vfs_ioctl+0x226/0x13e0 [ 116.974857][ T6812] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 116.974873][ T6812] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 116.974895][ T6812] ? __fget_files+0x215/0x3d0 [ 116.974906][ T6812] ? hook_file_ioctl_common+0x140/0x440 [ 116.974923][ T6812] ? selinux_file_ioctl+0x13b/0x290 [ 116.974932][ T6812] ? selinux_file_ioctl+0xb6/0x290 [ 116.974943][ T6812] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 116.974956][ T6812] __x64_sys_ioctl+0x18e/0x210 [ 116.974973][ T6812] do_syscall_64+0x115/0x870 [ 116.974986][ T6812] ? clear_bhb_loop+0x70/0xc0 [ 116.975006][ T6812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.975018][ T6812] RIP: 0033:0x7fa6e3f9e0d9 [ 116.975028][ T6812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.975038][ T6812] RSP: 002b:00007fa6e4ef3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 116.975050][ T6812] RAX: ffffffffffffffda RBX: 00007fa6e4225fa0 RCX: 00007fa6e3f9e0d9 [ 116.975056][ T6812] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 116.975062][ T6812] RBP: 00007fa6e4ef3090 R08: 0000000000000000 R09: 0000000000000000 [ 116.975068][ T6812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.975074][ T6812] R13: 00007fa6e4226038 R14: 00007fa6e4225fa0 R15: 00007ffcaab4f498 [ 116.975088][ T6812] [ 117.196597][ T6820] FAULT_INJECTION: forcing a failure. [ 117.196597][ T6820] name failslab, interval 1, probability 0, space 0, times 0 [ 117.203720][ T6820] CPU: 3 UID: 0 PID: 6820 Comm: syz.3.296 Tainted: G L syzkaller #0 PREEMPT(full) [ 117.203741][ T6820] Tainted: [L]=SOFTLOCKUP [ 117.203745][ T6820] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 117.203752][ T6820] Call Trace: [ 117.203759][ T6820] [ 117.203764][ T6820] dump_stack_lvl+0x100/0x190 [ 117.203785][ T6820] should_fail_ex.cold+0x5/0xa [ 117.203802][ T6820] should_failslab+0xc2/0x120 [ 117.203818][ T6820] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 117.203832][ T6820] ? alloc_vmap_area+0x17a4/0x2bb0 [ 117.203847][ T6820] ? alloc_vmap_area+0x17a4/0x2bb0 [ 117.203860][ T6820] ? alloc_vmap_area+0x640/0x2bb0 [ 117.203875][ T6820] alloc_vmap_area+0x640/0x2bb0 [ 117.203892][ T6820] ? kasan_save_track+0x14/0x30 [ 117.203905][ T6820] ? __kasan_kmalloc+0xaa/0xb0 [ 117.203917][ T6820] ? __pfx_alloc_vmap_area+0x10/0x10 [ 117.203931][ T6820] ? __get_vm_area_node+0x101/0x330 [ 117.203947][ T6820] __get_vm_area_node+0x1ca/0x330 [ 117.203964][ T6820] __vmalloc_node_range_noprof+0x228/0x1630 [ 117.203980][ T6820] ? vhost_task_create+0x1db/0x370 [ 117.203993][ T6820] ? rcu_is_watching+0x12/0xc0 [ 117.204026][ T6820] ? vhost_task_create+0x1db/0x370 [ 117.204041][ T6820] ? __memcg_slab_post_alloc_hook+0x749/0x1160 [ 117.204066][ T6820] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 117.204085][ T6820] ? trace_kmem_cache_alloc+0xdd/0x100 [ 117.204102][ T6820] ? vhost_task_create+0x1db/0x370 [ 117.204113][ T6820] __vmalloc_node_noprof+0xad/0xf0 [ 117.204130][ T6820] ? vhost_task_create+0x1db/0x370 [ 117.204144][ T6820] copy_process+0x7fb/0x8030 [ 117.204167][ T6820] ? __pfx_copy_process+0x10/0x10 [ 117.204182][ T6820] ? __kasan_kmalloc+0xaa/0xb0 [ 117.204195][ T6820] ? lockdep_init_map_type+0x5c/0x250 [ 117.204210][ T6820] ? lockdep_init_map_type+0x5c/0x250 [ 117.204224][ T6820] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 117.204239][ T6820] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 117.204263][ T6820] vhost_task_create+0x1db/0x370 [ 117.204276][ T6820] ? __pfx_vhost_task_create+0x10/0x10 [ 117.204291][ T6820] ? __pfx_vhost_task_fn+0x10/0x10 [ 117.204306][ T6820] ? __pfx___mutex_lock+0x10/0x10 [ 117.204327][ T6820] ? kasan_quarantine_put+0x104/0x240 [ 117.204350][ T6820] kvm_mmu_post_init_vm+0x1b3/0x360 [ 117.204368][ T6820] kvm_arch_vcpu_ioctl_run+0x66/0x1960 [ 117.204385][ T6820] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 117.204401][ T6820] kvm_vcpu_ioctl+0x730/0x1700 [ 117.204415][ T6820] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 117.204448][ T6820] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 117.204465][ T6820] ? do_vfs_ioctl+0x226/0x13e0 [ 117.204481][ T6820] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 117.204497][ T6820] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 117.204521][ T6820] ? __fget_files+0x215/0x3d0 [ 117.204545][ T6820] ? hook_file_ioctl_common+0x140/0x440 [ 117.204565][ T6820] ? selinux_file_ioctl+0x13b/0x290 [ 117.204580][ T6820] ? selinux_file_ioctl+0xb6/0x290 [ 117.204596][ T6820] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 117.204609][ T6820] __x64_sys_ioctl+0x18e/0x210 [ 117.204626][ T6820] do_syscall_64+0x115/0x870 [ 117.204639][ T6820] ? clear_bhb_loop+0x70/0xc0 [ 117.204666][ T6820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.204679][ T6820] RIP: 0033:0x7fd8b459e0d9 [ 117.204690][ T6820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.204701][ T6820] RSP: 002b:00007fd8b54ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 117.204713][ T6820] RAX: ffffffffffffffda RBX: 00007fd8b4825fa0 RCX: 00007fd8b459e0d9 [ 117.204720][ T6820] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 117.204726][ T6820] RBP: 00007fd8b54ff090 R08: 0000000000000000 R09: 0000000000000000 [ 117.204733][ T6820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.204739][ T6820] R13: 00007fd8b4826038 R14: 00007fd8b4825fa0 R15: 00007fff56956a78 [ 117.204752][ T6820] [ 117.204803][ T6820] warn_alloc: 1 callbacks suppressed [ 117.204810][ T6820] syz.3.296: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 117.231156][ T979] usbhid 7-1:0.0: can't add hid device: -71 [ 117.231492][ T6820] ,cpuset= [ 117.232868][ T979] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 117.235144][ T6820] / [ 117.246787][ T979] usb 7-1: USB disconnect, device number 4 [ 117.252383][ T6820] ,mems_allowed=0-1 [ 117.289651][ T6823] FAULT_INJECTION: forcing a failure. [ 117.289651][ T6823] name failslab, interval 1, probability 0, space 0, times 0 [ 117.293143][ T6820] [ 117.293738][ T6823] CPU: 2 UID: 0 PID: 6823 Comm: syz.0.297 Tainted: G L syzkaller #0 PREEMPT(full) [ 117.293755][ T6823] Tainted: [L]=SOFTLOCKUP [ 117.293759][ T6823] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 117.293766][ T6823] Call Trace: [ 117.293772][ T6823] [ 117.293777][ T6823] dump_stack_lvl+0x100/0x190 [ 117.293813][ T6823] should_fail_ex.cold+0x5/0xa [ 117.293829][ T6823] should_failslab+0xc2/0x120 [ 117.293845][ T6823] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 117.293860][ T6823] ? alloc_vmap_area+0x640/0x2bb0 [ 117.293877][ T6823] alloc_vmap_area+0x640/0x2bb0 [ 117.293894][ T6823] ? kasan_save_track+0x14/0x30 [ 117.293908][ T6823] ? __kasan_kmalloc+0xaa/0xb0 [ 117.293920][ T6823] ? __pfx_alloc_vmap_area+0x10/0x10 [ 117.293934][ T6823] ? __get_vm_area_node+0x101/0x330 [ 117.293950][ T6823] __get_vm_area_node+0x1ca/0x330 [ 117.293967][ T6823] __vmalloc_node_range_noprof+0x228/0x1630 [ 117.293984][ T6823] ? vhost_task_create+0x1db/0x370 [ 117.294001][ T6823] ? vhost_task_create+0x1db/0x370 [ 117.294016][ T6823] ? __memcg_slab_post_alloc_hook+0x749/0x1160 [ 117.294034][ T6823] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 117.294053][ T6823] ? trace_kmem_cache_alloc+0xdd/0x100 [ 117.294069][ T6823] ? vhost_task_create+0x1db/0x370 [ 117.294080][ T6823] __vmalloc_node_noprof+0xad/0xf0 [ 117.294096][ T6823] ? vhost_task_create+0x1db/0x370 [ 117.294109][ T6823] copy_process+0x7fb/0x8030 [ 117.294135][ T6823] ? __pfx_copy_process+0x10/0x10 [ 117.294150][ T6823] ? __kasan_kmalloc+0xaa/0xb0 [ 117.294163][ T6823] ? lockdep_init_map_type+0x5c/0x250 [ 117.294179][ T6823] ? lockdep_init_map_type+0x5c/0x250 [ 117.294193][ T6823] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 117.294207][ T6823] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 117.294226][ T6823] vhost_task_create+0x1db/0x370 [ 117.294239][ T6823] ? __pfx_vhost_task_create+0x10/0x10 [ 117.294255][ T6823] ? __pfx_vhost_task_fn+0x10/0x10 [ 117.294268][ T6823] ? __pfx___mutex_lock+0x10/0x10 [ 117.294282][ T6823] ? kasan_quarantine_put+0x104/0x240 [ 117.294298][ T6823] kvm_mmu_post_init_vm+0x1b3/0x360 [ 117.294315][ T6823] kvm_arch_vcpu_ioctl_run+0x66/0x1960 [ 117.294345][ T6823] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 117.294361][ T6823] kvm_vcpu_ioctl+0x730/0x1700 [ 117.294375][ T6823] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 117.294387][ T6823] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 117.294402][ T6823] ? do_vfs_ioctl+0x226/0x13e0 [ 117.294418][ T6823] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 117.294434][ T6823] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 117.294457][ T6823] ? __fget_files+0x215/0x3d0 [ 117.294467][ T6823] ? hook_file_ioctl_common+0x140/0x440 [ 117.294484][ T6823] ? selinux_file_ioctl+0x13b/0x290 [ 117.294493][ T6823] ? selinux_file_ioctl+0xb6/0x290 [ 117.294504][ T6823] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 117.294516][ T6823] __x64_sys_ioctl+0x18e/0x210 [ 117.294533][ T6823] do_syscall_64+0x115/0x870 [ 117.294546][ T6823] ? clear_bhb_loop+0x70/0xc0 [ 117.294560][ T6823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.294571][ T6823] RIP: 0033:0x7fa6e3f9e0d9 [ 117.294584][ T6823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.294595][ T6823] RSP: 002b:00007fa6e4ef3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 117.294606][ T6823] RAX: ffffffffffffffda RBX: 00007fa6e4225fa0 RCX: 00007fa6e3f9e0d9 [ 117.294612][ T6823] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 117.294619][ T6823] RBP: 00007fa6e4ef3090 R08: 0000000000000000 R09: 0000000000000000 [ 117.294625][ T6823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.294631][ T6823] R13: 00007fa6e4226038 R14: 00007fa6e4225fa0 R15: 00007ffcaab4f498 [ 117.294644][ T6823] [ 117.414854][ T42] audit: type=1400 audit(1786059230.090:506): avc: denied { name_connect } for pid=6824 comm="syz.1.298" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 117.415862][ T6820] CPU: 3 UID: 0 PID: 6820 Comm: syz.3.296 Tainted: G L syzkaller #0 PREEMPT(full) [ 117.415888][ T6820] Tainted: [L]=SOFTLOCKUP [ 117.415896][ T6820] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 117.415906][ T6820] Call Trace: [ 117.415914][ T6820] [ 117.415922][ T6820] dump_stack_lvl+0x100/0x190 [ 117.415953][ T6820] warn_alloc.cold+0x94/0xa8 [ 117.415989][ T6820] ? __pfx_warn_alloc+0x10/0x10 [ 117.416008][ T6820] ? lockdep_hardirqs_on+0x78/0x100 [ 117.416036][ T6820] ? __get_vm_area_node+0x2cd/0x330 [ 117.416066][ T6820] ? __get_vm_area_node+0x208/0x330 [ 117.416096][ T6820] __vmalloc_node_range_noprof+0xccd/0x1630 [ 117.416128][ T6820] ? rcu_is_watching+0x12/0xc0 [ 117.416164][ T6820] ? vhost_task_create+0x1db/0x370 [ 117.416193][ T6820] ? __memcg_slab_post_alloc_hook+0x749/0x1160 [ 117.416223][ T6820] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 117.416256][ T6820] ? trace_kmem_cache_alloc+0xdd/0x100 [ 117.416284][ T6820] ? vhost_task_create+0x1db/0x370 [ 117.416304][ T6820] __vmalloc_node_noprof+0xad/0xf0 [ 117.416331][ T6820] ? vhost_task_create+0x1db/0x370 [ 117.416355][ T6820] copy_process+0x7fb/0x8030 [ 117.416396][ T6820] ? __pfx_copy_process+0x10/0x10 [ 117.416421][ T6820] ? __kasan_kmalloc+0xaa/0xb0 [ 117.416469][ T6820] ? lockdep_init_map_type+0x5c/0x250 [ 117.416496][ T6820] ? lockdep_init_map_type+0x5c/0x250 [ 117.416520][ T6820] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 117.416544][ T6820] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 117.416575][ T6820] vhost_task_create+0x1db/0x370 [ 117.416597][ T6820] ? __pfx_vhost_task_create+0x10/0x10 [ 117.416625][ T6820] ? __pfx_vhost_task_fn+0x10/0x10 [ 117.416648][ T6820] ? __pfx___mutex_lock+0x10/0x10 [ 117.416671][ T6820] ? kasan_quarantine_put+0x104/0x240 [ 117.416699][ T6820] kvm_mmu_post_init_vm+0x1b3/0x360 [ 117.416728][ T6820] kvm_arch_vcpu_ioctl_run+0x66/0x1960 [ 117.416756][ T6820] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 117.416783][ T6820] kvm_vcpu_ioctl+0x730/0x1700 [ 117.416807][ T6820] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 117.416828][ T6820] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 117.416853][ T6820] ? do_vfs_ioctl+0x226/0x13e0 [ 117.416881][ T6820] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 117.416909][ T6820] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 117.416947][ T6820] ? __fget_files+0x215/0x3d0 [ 117.416965][ T6820] ? hook_file_ioctl_common+0x140/0x440 [ 117.416994][ T6820] ? selinux_file_ioctl+0x13b/0x290 [ 117.417011][ T6820] ? selinux_file_ioctl+0xb6/0x290 [ 117.417030][ T6820] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 117.417052][ T6820] __x64_sys_ioctl+0x18e/0x210 [ 117.417081][ T6820] do_syscall_64+0x115/0x870 [ 117.417103][ T6820] ? clear_bhb_loop+0x70/0xc0 [ 117.417132][ T6820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.417152][ T6820] RIP: 0033:0x7fd8b459e0d9 [ 117.417166][ T6820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.417183][ T6820] RSP: 002b:00007fd8b54ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 117.417202][ T6820] RAX: ffffffffffffffda RBX: 00007fd8b4825fa0 RCX: 00007fd8b459e0d9 [ 117.417213][ T6820] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 117.417224][ T6820] RBP: 00007fd8b54ff090 R08: 0000000000000000 R09: 0000000000000000 [ 117.417235][ T6820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.417246][ T6820] R13: 00007fd8b4826038 R14: 00007fd8b4825fa0 R15: 00007fff56956a78 [ 117.417271][ T6820] [ 117.417279][ T6820] Mem-Info: [ 117.678508][ T6820] active_anon:10114 inactive_anon:4 isolated_anon:0 [ 117.678508][ T6820] active_file:32 inactive_file:57087 isolated_file:0 [ 117.678508][ T6820] unevictable:1768 dirty:26 writeback:0 [ 117.678508][ T6820] slab_reclaimable:11979 slab_unreclaimable:67315 [ 117.678508][ T6820] mapped:25403 shmem:2327 pagetables:1325 [ 117.678508][ T6820] sec_pagetables:294 bounce:0 [ 117.678508][ T6820] kernel_misc_reclaimable:0 [ 117.678508][ T6820] free:454894 free_pcp:12475 free_cma:0 [ 117.696539][ T6820] Node 0 active_anon:40456kB inactive_anon:16kB active_file:128kB inactive_file:228144kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:101612kB dirty:104kB writeback:0kB shmem:5772kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13312kB pagetables:5128kB sec_pagetables:1176kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 117.710474][ T6820] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:172kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 117.723679][ T6820] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 117.735810][ T6820] lowmem_reserve[]: 0 1225 1225 1225 1225 [ 117.738517][ T6820] Node 0 DMA32 free:152952kB boost:0kB min:27396kB low:34244kB high:41092kB reserved_highatomic:0KB free_highatomic:0KB active_anon:40208kB inactive_anon:16kB active_file:128kB inactive_file:228144kB unevictable:3536kB writepending:104kB zspages:376kB present:2080628kB managed:1255200kB mlocked:0kB bounce:0kB free_pcp:50508kB local_pcp:14648kB free_cma:0kB [ 117.755844][ T6820] lowmem_reserve[]: 0 0 0 0 0 [ 117.757907][ T6820] Node 1 Normal free:1651264kB boost:0kB min:39840kB low:49800kB high:59760kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:3536kB writepending:0kB zspages:0kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:492kB local_pcp:260kB free_cma:0kB [ 117.785298][ T6820] lowmem_reserve[]: 0 0 0 0 0 [ 117.787831][ T6836] FAULT_INJECTION: forcing a failure. [ 117.787831][ T6836] name failslab, interval 1, probability 0, space 0, times 0 [ 117.787878][ T6836] CPU: 1 UID: 0 PID: 6836 Comm: syz.2.302 Tainted: G L syzkaller #0 PREEMPT(full) [ 117.787894][ T6836] Tainted: [L]=SOFTLOCKUP [ 117.787898][ T6836] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 117.787906][ T6836] Call Trace: [ 117.787910][ T6836] [ 117.787915][ T6836] dump_stack_lvl+0x100/0x190 [ 117.787937][ T6836] should_fail_ex.cold+0x5/0xa [ 117.787953][ T6836] should_failslab+0xc2/0x120 [ 117.787969][ T6836] __kmalloc_cache_noprof+0x91/0x6c0 [ 117.787989][ T6836] ? vkms_plane_duplicate_state+0x87/0x130 [ 117.788035][ T6836] vkms_plane_duplicate_state+0x87/0x130 [ 117.788049][ T6836] drm_atomic_get_plane_state+0x279/0x7d0 [ 117.788076][ T6836] drm_client_modeset_commit_atomic+0x237/0x7e0 [ 117.788095][ T6836] ? __mutex_lock+0x26d/0x1bd0 [ 117.788110][ T6836] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 117.788131][ T6836] ? drm_master_internal_acquire+0x21/0x80 [ 117.788159][ T6836] drm_client_modeset_commit_locked+0x14d/0x580 [ 117.788177][ T6836] drm_client_modeset_commit+0x4f/0x80 [ 117.788193][ T6836] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 117.788211][ T6836] drm_fb_helper_set_par+0x15a/0x1b0 [ 117.788224][ T6836] ? __pfx_drm_fb_helper_set_par+0x10/0x10 [ 117.788238][ T6836] fb_set_var+0x824/0x11b0 [ 117.788263][ T6836] ? __pfx_fb_set_var+0x10/0x10 [ 117.788287][ T6836] ? lock_acquire+0x1b9/0x370 [ 117.788304][ T6836] ? rcu_is_watching+0x12/0xc0 [ 117.788322][ T6836] ? trace_contention_end+0x126/0x160 [ 117.788338][ T6836] ? __mutex_lock+0x26d/0x1bd0 [ 117.788351][ T6836] ? do_fb_ioctl+0x1e3/0x730 [ 117.788372][ T6836] ? is_console_locked+0x9/0x20 [ 117.788385][ T6836] ? fbcon_info_from_console+0xf9/0x1d0 [ 117.788400][ T6836] ? fbcon_modechange_possible+0x35a/0x4d0 [ 117.788420][ T6836] fb_set_var_from_user+0x4d/0xc0 [ 117.788500][ T6836] do_fb_ioctl+0x1f3/0x730 [ 117.788513][ T6836] ? __pfx_do_fb_ioctl+0x10/0x10 [ 117.788532][ T6836] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 117.788561][ T6836] ? selinux_file_ioctl+0x13b/0x290 [ 117.788574][ T6836] fb_ioctl+0xe5/0x150 [ 117.788585][ T6836] ? __pfx_fb_ioctl+0x10/0x10 [ 117.788597][ T6836] __x64_sys_ioctl+0x18e/0x210 [ 117.788616][ T6836] do_syscall_64+0x115/0x870 [ 117.788629][ T6836] ? clear_bhb_loop+0x70/0xc0 [ 117.788643][ T6836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.788654][ T6836] RIP: 0033:0x7fa43db9e0d9 [ 117.788664][ T6836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.788674][ T6836] RSP: 002b:00007fa43ea67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 117.788685][ T6836] RAX: ffffffffffffffda RBX: 00007fa43de25fa0 RCX: 00007fa43db9e0d9 [ 117.788692][ T6836] RDX: 0000200000000040 RSI: 0000000000004601 RDI: 0000000000000003 [ 117.788698][ T6836] RBP: 00007fa43ea67090 R08: 0000000000000000 R09: 0000000000000000 [ 117.788705][ T6836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.788711][ T6836] R13: 00007fa43de26038 R14: 00007fa43de25fa0 R15: 00007ffec28d30d8 [ 117.788725][ T6836] [ 117.791798][ T6820] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 117.791926][ T6820] Node 0 DMA32: 1083*4kB (UME) 275*8kB (UME) 325*16kB (UM) 142*32kB (M) 80*64kB (UME) 66*128kB (UME) 37*256kB (UM) 23*512kB (UM) 10*1024kB (UME) 5*2048kB (UME) 20*4096kB (UM) = 153492kB [ 117.792092][ T6820] Node 1 Normal: 2*4kB (M) 1*8kB (U) 1*16kB (M) 11*32kB (UM) 6*64kB (UM) 7*128kB (UM) 2*256kB (U) 5*512kB (UM) 0*1024kB 2*2048kB (UM) 401*4096kB (UM) = 1651328kB [ 117.792254][ T6820] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 117.792312][ T6820] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 117.792327][ T6820] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 117.792341][ T6820] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 117.792355][ T6820] 59445 total pagecache pages [ 117.792363][ T6820] 3 pages in swap cache [ 117.792371][ T6820] Free swap = 124896kB [ 117.792378][ T6820] Total swap = 124996kB [ 117.792385][ T6820] 1048443 pages RAM [ 117.792393][ T6820] 0 pages HighMem/MovableOnly [ 117.792400][ T6820] 285332 pages reserved [ 117.792406][ T6820] 0 pages cma reserved [ 117.795818][ T42] audit: type=1400 audit(1786059230.436:507): avc: denied { write } for pid=6832 comm="syz.0.301" name="/" dev="9p" ino=78390681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 117.891801][ T6838] FAULT_INJECTION: forcing a failure. [ 117.891801][ T6838] name failslab, interval 1, probability 0, space 0, times 0 [ 118.040181][ T6838] CPU: 2 UID: 0 PID: 6838 Comm: syz.1.303 Tainted: G L syzkaller #0 PREEMPT(full) [ 118.040202][ T6838] Tainted: [L]=SOFTLOCKUP [ 118.040206][ T6838] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 118.040213][ T6838] Call Trace: [ 118.040217][ T6838] [ 118.040223][ T6838] dump_stack_lvl+0x100/0x190 [ 118.040244][ T6838] should_fail_ex.cold+0x5/0xa [ 118.040271][ T6838] should_failslab+0xc2/0x120 [ 118.040289][ T6838] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 118.040304][ T6838] ? alloc_vmap_area+0x640/0x2bb0 [ 118.040320][ T6838] alloc_vmap_area+0x640/0x2bb0 [ 118.040338][ T6838] ? kasan_save_track+0x14/0x30 [ 118.040351][ T6838] ? __kasan_kmalloc+0xaa/0xb0 [ 118.040364][ T6838] ? __pfx_alloc_vmap_area+0x10/0x10 [ 118.040381][ T6838] ? __get_vm_area_node+0x101/0x330 [ 118.040397][ T6838] __get_vm_area_node+0x1ca/0x330 [ 118.040449][ T6838] __vmalloc_node_range_noprof+0x228/0x1630 [ 118.040467][ T6838] ? vhost_task_create+0x1db/0x370 [ 118.040479][ T6838] ? rcu_is_watching+0x12/0xc0 [ 118.040501][ T6838] ? vhost_task_create+0x1db/0x370 [ 118.040519][ T6838] ? __memcg_slab_post_alloc_hook+0x749/0x1160 [ 118.040537][ T6838] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 118.040557][ T6838] ? trace_kmem_cache_alloc+0xdd/0x100 [ 118.040574][ T6838] ? vhost_task_create+0x1db/0x370 [ 118.040589][ T6838] __vmalloc_node_noprof+0xad/0xf0 [ 118.040605][ T6838] ? vhost_task_create+0x1db/0x370 [ 118.040618][ T6838] copy_process+0x7fb/0x8030 [ 118.040642][ T6838] ? __pfx_copy_process+0x10/0x10 [ 118.040656][ T6838] ? __kasan_kmalloc+0xaa/0xb0 [ 118.040669][ T6838] ? lockdep_init_map_type+0x5c/0x250 [ 118.040684][ T6838] ? lockdep_init_map_type+0x5c/0x250 [ 118.040698][ T6838] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 118.040713][ T6838] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 118.040731][ T6838] vhost_task_create+0x1db/0x370 [ 118.040744][ T6838] ? __pfx_vhost_task_create+0x10/0x10 [ 118.040760][ T6838] ? __pfx_vhost_task_fn+0x10/0x10 [ 118.040776][ T6838] ? __pfx___mutex_lock+0x10/0x10 [ 118.040791][ T6838] ? kasan_quarantine_put+0x104/0x240 [ 118.040807][ T6838] kvm_mmu_post_init_vm+0x1b3/0x360 [ 118.040824][ T6838] kvm_arch_vcpu_ioctl_run+0x66/0x1960 [ 118.040841][ T6838] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 118.040865][ T6838] kvm_vcpu_ioctl+0x730/0x1700 [ 118.040879][ T6838] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 118.040891][ T6838] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 118.040906][ T6838] ? do_vfs_ioctl+0x226/0x13e0 [ 118.040922][ T6838] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 118.040938][ T6838] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 118.040961][ T6838] ? __fget_files+0x215/0x3d0 [ 118.040971][ T6838] ? hook_file_ioctl_common+0x140/0x440 [ 118.040988][ T6838] ? selinux_file_ioctl+0x13b/0x290 [ 118.040997][ T6838] ? selinux_file_ioctl+0xb6/0x290 [ 118.041008][ T6838] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 118.041020][ T6838] __x64_sys_ioctl+0x18e/0x210 [ 118.041037][ T6838] do_syscall_64+0x115/0x870 [ 118.041050][ T6838] ? clear_bhb_loop+0x70/0xc0 [ 118.041064][ T6838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.041075][ T6838] RIP: 0033:0x7f59c039e0d9 [ 118.041088][ T6838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.041098][ T6838] RSP: 002b:00007f59c1348028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 118.041109][ T6838] RAX: ffffffffffffffda RBX: 00007f59c0625fa0 RCX: 00007f59c039e0d9 [ 118.041116][ T6838] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009 [ 118.041122][ T6838] RBP: 00007f59c1348090 R08: 0000000000000000 R09: 0000000000000000 [ 118.041128][ T6838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.041134][ T6838] R13: 00007f59c0626038 R14: 00007f59c0625fa0 R15: 00007ffce44137f8 [ 118.041148][ T6838] [ 118.417118][ T6851] binder: 6849:6851 ioctl c0306201 200000000640 returned -22 [ 118.695891][ T6863] FAULT_INJECTION: forcing a failure. [ 118.695891][ T6863] name failslab, interval 1, probability 0, space 0, times 0 [ 118.695918][ T6863] CPU: 2 UID: 0 PID: 6863 Comm: syz.3.312 Tainted: G L syzkaller #0 PREEMPT(full) [ 118.695944][ T6863] Tainted: [L]=SOFTLOCKUP [ 118.695949][ T6863] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 118.695956][ T6863] Call Trace: [ 118.695961][ T6863] [ 118.695967][ T6863] dump_stack_lvl+0x100/0x190 [ 118.695987][ T6863] should_fail_ex.cold+0x5/0xa [ 118.696003][ T6863] should_failslab+0xc2/0x120 [ 118.696019][ T6863] __kmalloc_cache_noprof+0x91/0x6c0 [ 118.696038][ T6863] ? vkms_plane_duplicate_state+0x45/0x130 [ 118.696057][ T6863] vkms_plane_duplicate_state+0x45/0x130 [ 118.696071][ T6863] drm_atomic_get_plane_state+0x279/0x7d0 [ 118.696088][ T6863] drm_client_modeset_commit_atomic+0x237/0x7e0 [ 118.696107][ T6863] ? __mutex_lock+0x26d/0x1bd0 [ 118.696124][ T6863] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 118.696140][ T6863] ? drm_master_internal_acquire+0x21/0x80 [ 118.696168][ T6863] drm_client_modeset_commit_locked+0x14d/0x580 [ 118.696186][ T6863] drm_client_modeset_commit+0x4f/0x80 [ 118.696202][ T6863] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 118.696219][ T6863] drm_fb_helper_set_par+0x15a/0x1b0 [ 118.696232][ T6863] ? __pfx_drm_fb_helper_set_par+0x10/0x10 [ 118.696246][ T6863] fb_set_var+0x824/0x11b0 [ 118.696265][ T6863] ? __pfx_stack_trace_save+0x10/0x10 [ 118.696278][ T6863] ? __pfx_fb_set_var+0x10/0x10 [ 118.696297][ T6863] ? __lock_acquire+0x49f/0x1a40 [ 118.696312][ T6863] ? kfree+0x22b/0x6c0 [ 118.696330][ T6863] ? lock_acquire+0x1b9/0x370 [ 118.696346][ T6863] ? rcu_is_watching+0x12/0xc0 [ 118.696363][ T6863] ? trace_contention_end+0x126/0x160 [ 118.696378][ T6863] ? __mutex_lock+0x26d/0x1bd0 [ 118.696391][ T6863] ? do_fb_ioctl+0x1e3/0x730 [ 118.696412][ T6863] ? is_console_locked+0x9/0x20 [ 118.696447][ T6863] ? fbcon_info_from_console+0xf9/0x1d0 [ 118.696462][ T6863] ? fbcon_modechange_possible+0x35a/0x4d0 [ 118.696482][ T6863] fb_set_var_from_user+0x4d/0xc0 [ 118.696500][ T6863] do_fb_ioctl+0x1f3/0x730 [ 118.696512][ T6863] ? __pfx_do_fb_ioctl+0x10/0x10 [ 118.696531][ T6863] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 118.696559][ T6863] ? selinux_file_ioctl+0x13b/0x290 [ 118.696573][ T6863] fb_ioctl+0xe5/0x150 [ 118.696588][ T6863] ? __pfx_fb_ioctl+0x10/0x10 [ 118.696601][ T6863] __x64_sys_ioctl+0x18e/0x210 [ 118.696618][ T6863] do_syscall_64+0x115/0x870 [ 118.696631][ T6863] ? clear_bhb_loop+0x70/0xc0 [ 118.696646][ T6863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.696657][ T6863] RIP: 0033:0x7fd8b459e0d9 [ 118.696667][ T6863] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.696678][ T6863] RSP: 002b:00007fd8b54ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 118.696688][ T6863] RAX: ffffffffffffffda RBX: 00007fd8b4825fa0 RCX: 00007fd8b459e0d9 [ 118.696695][ T6863] RDX: 0000200000000040 RSI: 0000000000004601 RDI: 0000000000000003 [ 118.696702][ T6863] RBP: 00007fd8b54ff090 R08: 0000000000000000 R09: 0000000000000000 [ 118.696708][ T6863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.696714][ T6863] R13: 00007fd8b4826038 R14: 00007fd8b4825fa0 R15: 00007fff56956a78 [ 118.696728][ T6863] [ 119.214697][ T6871] IPVS: You probably need to specify IP address on multicast interface. [ 119.221241][ T6871] IPVS: Error connecting to the multicast addr [ 119.235256][ T6889] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 119.310007][ T6888] netlink: 60 bytes leftover after parsing attributes in process `syz.3.319'. [ 119.976861][ T6932] netlink: 12 bytes leftover after parsing attributes in process `syz.0.332'. [ 119.985044][ T6932] netlink: 40 bytes leftover after parsing attributes in process `syz.0.332'. [ 120.030433][ T42] kauditd_printk_skb: 12 callbacks suppressed [ 120.030453][ T42] audit: type=1400 audit(1786059232.523:520): avc: denied { mounton } for pid=6933 comm="syz.0.333" path="/83/config" dev="configfs" ino=2078 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 120.047848][ T42] audit: type=1400 audit(1786059232.551:521): avc: denied { wake_alarm } for pid=6933 comm="syz.0.333" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 120.096084][ T42] audit: type=1400 audit(1786059232.598:522): avc: denied { write } for pid=6937 comm="syz.3.335" name="mtd0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 120.107889][ T42] audit: type=1400 audit(1786059232.598:523): avc: denied { write } for pid=6933 comm="syz.0.333" name="functions" dev="configfs" ino=13920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 120.121445][ T42] audit: type=1400 audit(1786059232.607:524): avc: denied { open } for pid=6937 comm="syz.3.335" path="/dev/mtd0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 120.130646][ T42] audit: type=1400 audit(1786059232.607:525): avc: denied { write } for pid=6933 comm="syz.0.333" name="c.1" dev="configfs" ino=15275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 120.139159][ T42] audit: type=1400 audit(1786059232.607:526): avc: denied { write } for pid=6933 comm="syz.0.333" name="c.1" dev="configfs" ino=15275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 120.251274][ T6944] FAULT_INJECTION: forcing a failure. [ 120.251274][ T6944] name failslab, interval 1, probability 0, space 0, times 0 [ 120.258640][ T6944] CPU: 3 UID: 0 PID: 6944 Comm: syz.2.336 Tainted: G L syzkaller #0 PREEMPT(full) [ 120.258670][ T6944] Tainted: [L]=SOFTLOCKUP [ 120.258678][ T6944] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 120.258690][ T6944] Call Trace: [ 120.258709][ T6944] [ 120.258717][ T6944] dump_stack_lvl+0x100/0x190 [ 120.258818][ T6944] should_fail_ex.cold+0x5/0xa [ 120.258858][ T6944] should_failslab+0xc2/0x120 [ 120.258908][ T6944] kmem_cache_alloc_noprof+0x91/0x6a0 [ 120.258943][ T6944] ? dst_alloc+0x99/0x1a0 [ 120.259000][ T6944] ? __pfx_ip6_dst_gc+0x10/0x10 [ 120.259044][ T6944] dst_alloc+0x99/0x1a0 [ 120.259069][ T6944] ip6_pol_route+0x9fd/0x1310 [ 120.259104][ T6944] ? __pfx_ip6_pol_route+0x10/0x10 [ 120.259136][ T6944] ? __pfx_ip6_multipath_l3_keys.constprop.0+0x10/0x10 [ 120.259161][ T6944] ? __lock_acquire+0x49f/0x1a40 [ 120.259212][ T6944] ? __siphash_unaligned+0x1eb/0x360 [ 120.259259][ T6944] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 120.259283][ T6944] fib6_rule_lookup+0x386/0x720 [ 120.259306][ T6944] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 120.259332][ T6944] ? lock_acquire+0x1b9/0x370 [ 120.259359][ T6944] ? dev_get_by_index_rcu+0x102/0x140 [ 120.259385][ T6944] ip6_route_output_flags+0x1d0/0x650 [ 120.259408][ T6944] icmpv6_xrlim_allow.isra.0+0x12c/0x880 [ 120.259434][ T6944] ? __pfx_icmpv6_xrlim_allow.isra.0+0x10/0x10 [ 120.259458][ T6944] ? __pfx_map_id_range_down+0x10/0x10 [ 120.259491][ T6944] ? selinux_xfrm_skb_sid_ingress+0x257/0x390 [ 120.259563][ T6944] ? icmp6_send+0x10d3/0x3c60 [ 120.259583][ T6944] icmp6_send+0x10d3/0x3c60 [ 120.259605][ T6944] ? ip6t_do_table+0xc1d/0x1c90 [ 120.259633][ T6944] ? __pfx_icmp6_send+0x10/0x10 [ 120.259650][ T6944] ? rcu_is_cpu_rrupt_from_idle+0x251/0x270 [ 120.259685][ T6944] ? __local_bh_enable_ip+0x9e/0x120 [ 120.259713][ T6944] ? lockdep_hardirqs_on+0x78/0x100 [ 120.259733][ T6944] ? ip6t_do_table+0xbed/0x1c90 [ 120.259750][ T6944] ? __local_bh_enable_ip+0x9e/0x120 [ 120.259787][ T6944] ? lock_acquire+0x1b9/0x370 [ 120.259812][ T6944] ? udpv6_rcv+0x260a/0x32e0 [ 120.259826][ T6944] udpv6_rcv+0x260a/0x32e0 [ 120.259850][ T6944] ? __pfx_udpv6_rcv+0x10/0x10 [ 120.259867][ T6944] ip6_protocol_deliver_rcu+0x741/0x15b0 [ 120.259908][ T6944] ip6_input_finish+0x1e4/0x4a0 [ 120.259932][ T6944] ip6_input+0x105/0x2f0 [ 120.259956][ T6944] ? __pfx_ip6_input+0x10/0x10 [ 120.259981][ T6944] ipv6_rcv+0x263/0x3d0 [ 120.260007][ T6944] ? __pfx_ipv6_rcv+0x10/0x10 [ 120.260031][ T6944] __netif_receive_skb_one_core+0x12d/0x1e0 [ 120.260056][ T6944] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 120.260079][ T6944] ? lock_acquire+0x1b9/0x370 [ 120.260105][ T6944] __netif_receive_skb+0x1f/0x120 [ 120.260137][ T6944] netif_receive_skb+0x139/0x7d0 [ 120.260158][ T6944] ? __pfx_netif_receive_skb+0x10/0x10 [ 120.260178][ T6944] ? _copy_from_iter+0x270/0x1690 [ 120.260210][ T6944] ? skb_partial_csum_set+0x202/0x2a0 [ 120.260245][ T6944] tun_rx_batched.isra.0+0x3f6/0x750 [ 120.260297][ T6944] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 120.260330][ T6944] ? tun_get_user+0x1cc8/0x3c20 [ 120.260354][ T6944] tun_get_user+0x1e31/0x3c20 [ 120.260386][ T6944] ? __pfx_tun_get_user+0x10/0x10 [ 120.260410][ T6944] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 120.260475][ T6944] ? find_held_lock+0x2b/0x80 [ 120.260494][ T6944] ? tun_get+0x191/0x370 [ 120.260510][ T6944] ? tun_get+0x191/0x370 [ 120.260535][ T6944] tun_chr_write_iter+0xdc/0x200 [ 120.260559][ T6944] vfs_write+0x6ac/0x1050 [ 120.260600][ T6944] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 120.260624][ T6944] ? __pfx_vfs_write+0x10/0x10 [ 120.260649][ T6944] ? find_held_lock+0x2b/0x80 [ 120.260683][ T6944] ksys_write+0x12a/0x250 [ 120.260701][ T6944] ? __pfx_ksys_write+0x10/0x10 [ 120.260727][ T6944] do_syscall_64+0x115/0x870 [ 120.260751][ T6944] ? clear_bhb_loop+0x70/0xc0 [ 120.260776][ T6944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.260795][ T6944] RIP: 0033:0x7fa43db9e0d9 [ 120.260813][ T6944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.260829][ T6944] RSP: 002b:00007fa43ea67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 120.260848][ T6944] RAX: ffffffffffffffda RBX: 00007fa43de25fa0 RCX: 00007fa43db9e0d9 [ 120.260861][ T6944] RDX: 0000000000000064 RSI: 00002000000001c0 RDI: 0000000000000003 [ 120.260872][ T6944] RBP: 00007fa43ea67090 R08: 0000000000000000 R09: 0000000000000000 [ 120.260884][ T6944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.260894][ T6944] R13: 00007fa43de26038 R14: 00007fa43de25fa0 R15: 00007ffec28d30d8 [ 120.260919][ T6944] [ 120.273713][ T42] audit: type=1400 audit(1786059232.757:527): avc: denied { ioctl } for pid=6937 comm="syz.3.335" path="/dev/mtd0" dev="devtmpfs" ino=716 ioctlcmd=0x4d16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 120.467127][ T42] audit: type=1400 audit(1786059232.935:528): avc: denied { write } for pid=6946 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.519381][ T42] audit: type=1400 audit(1786059232.991:529): avc: denied { write } for pid=6949 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.665458][ T6960] netlink: 28 bytes leftover after parsing attributes in process `syz.3.340'. [ 120.668389][ T6960] netlink: 28 bytes leftover after parsing attributes in process `syz.3.340'. [ 120.721109][ T6963] input: syz0 as /devices/virtual/input/input8 [ 120.763347][ C2] vcan0: j1939_tp_rxtimer: 0xffff88802c5e0400: rx timeout, send abort [ 120.767766][ C2] vcan0: j1939_xtp_rx_abort_one: 0xffff88802c5e0400: 0x00100: (3) A timeout occurred and this is the connection abort to close the session. [ 120.803139][ T6965] scsi_nl_rcv_msg: Msgtype 1 failed - err -3 [ 120.962210][ T6978] FAULT_INJECTION: forcing a failure. [ 120.962210][ T6978] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 120.967776][ T6978] CPU: 3 UID: 0 PID: 6978 Comm: syz.0.346 Tainted: G L syzkaller #0 PREEMPT(full) [ 120.967807][ T6978] Tainted: [L]=SOFTLOCKUP [ 120.967814][ T6978] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 120.967824][ T6978] Call Trace: [ 120.967851][ T6978] [ 120.967860][ T6978] dump_stack_lvl+0x100/0x190 [ 120.967966][ T6978] should_fail_ex.cold+0x5/0xa [ 120.968018][ T6978] _copy_from_user+0x2e/0xd0 [ 120.968078][ T6978] do_ip6t_set_ctl+0xa15/0xd00 [ 120.968110][ T6978] ? nf_sockopt_find.isra.0+0x222/0x290 [ 120.968143][ T6978] ? nf_sockopt_find.isra.0+0x222/0x290 [ 120.968168][ T6978] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 120.968190][ T6978] ? __mutex_unlock_slowpath+0x35d/0x930 [ 120.968224][ T6978] ? get_pid_task+0x106/0x250 [ 120.968269][ T6978] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 120.968302][ T6978] ? nf_sockopt_find.isra.0+0x222/0x290 [ 120.968327][ T6978] nf_setsockopt+0x8d/0xf0 [ 120.968352][ T6978] ipv6_setsockopt+0x135/0x170 [ 120.968380][ T6978] udpv6_setsockopt+0x64/0xb0 [ 120.968431][ T6978] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 120.968474][ T6978] do_sock_setsockopt+0xf3/0x1d0 [ 120.968506][ T6978] __sys_setsockopt+0x195/0x220 [ 120.968534][ T6978] __x64_sys_setsockopt+0xbd/0x160 [ 120.968557][ T6978] ? do_syscall_64+0x90/0x870 [ 120.968580][ T6978] ? lockdep_hardirqs_on+0x78/0x100 [ 120.968598][ T6978] do_syscall_64+0x115/0x870 [ 120.968625][ T6978] ? clear_bhb_loop+0x70/0xc0 [ 120.968648][ T6978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.968665][ T6978] RIP: 0033:0x7fa6e3f9e0d9 [ 120.968681][ T6978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.968695][ T6978] RSP: 002b:00007fa6e4ef3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 120.968716][ T6978] RAX: ffffffffffffffda RBX: 00007fa6e4225fa0 RCX: 00007fa6e3f9e0d9 [ 120.968727][ T6978] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 120.968737][ T6978] RBP: 00007fa6e4ef3090 R08: 0000000000000650 R09: 0000000000000000 [ 120.968747][ T6978] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.968758][ T6978] R13: 00007fa6e4226038 R14: 00007fa6e4225fa0 R15: 00007ffcaab4f498 [ 120.968778][ T6978] [ 121.253483][ T6994] FAULT_INJECTION: forcing a failure. [ 121.253483][ T6994] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 121.258794][ T6994] CPU: 1 UID: 0 PID: 6994 Comm: syz.3.353 Tainted: G L syzkaller #0 PREEMPT(full) [ 121.258814][ T6994] Tainted: [L]=SOFTLOCKUP [ 121.258818][ T6994] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 121.258825][ T6994] Call Trace: [ 121.258837][ T6994] [ 121.258843][ T6994] dump_stack_lvl+0x100/0x190 [ 121.258917][ T6994] should_fail_ex.cold+0x5/0xa [ 121.258949][ T6994] _copy_to_user+0x32/0xd0 [ 121.258984][ T6994] simple_read_from_buffer+0xcb/0x170 [ 121.259007][ T6994] proc_fail_nth_read+0x1af/0x230 [ 121.259026][ T6994] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 121.259043][ T6994] ? rw_verify_area+0xce/0x6d0 [ 121.259064][ T6994] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 121.259081][ T6994] vfs_read+0x1e4/0xb40 [ 121.259099][ T6994] ? __pfx_vfs_read+0x10/0x10 [ 121.259115][ T6994] ? __fget_files+0x215/0x3d0 [ 121.259129][ T6994] ? __fget_files+0x21f/0x3d0 [ 121.259148][ T6994] ksys_read+0x12a/0x250 [ 121.259165][ T6994] ? __pfx_ksys_read+0x10/0x10 [ 121.259185][ T6994] do_syscall_64+0x115/0x870 [ 121.259205][ T6994] ? clear_bhb_loop+0x70/0xc0 [ 121.259219][ T6994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.259230][ T6994] RIP: 0033:0x7fd8b455e90e [ 121.259240][ T6994] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 121.259251][ T6994] RSP: 002b:00007fd8b54fefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 121.259262][ T6994] RAX: ffffffffffffffda RBX: 00007fd8b54ff6c0 RCX: 00007fd8b455e90e [ 121.259269][ T6994] RDX: 000000000000000f RSI: 00007fd8b54ff0a0 RDI: 0000000000000006 [ 121.259275][ T6994] RBP: 00007fd8b54ff090 R08: 0000000000000000 R09: 0000000000000000 [ 121.259281][ T6994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.259287][ T6994] R13: 00007fd8b4826038 R14: 00007fd8b4825fa0 R15: 00007fff56956a78 [ 121.259300][ T6994] [ 121.259782][ T6987] FAULT_INJECTION: forcing a failure. [ 121.259782][ T6987] name failslab, interval 1, probability 0, space 0, times 0 [ 121.342093][ T6987] CPU: 2 UID: 0 PID: 6987 Comm: syz.0.350 Tainted: G L syzkaller #0 PREEMPT(full) [ 121.342113][ T6987] Tainted: [L]=SOFTLOCKUP [ 121.342129][ T6987] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 121.342136][ T6987] Call Trace: [ 121.342141][ T6987] [ 121.342147][ T6987] dump_stack_lvl+0x100/0x190 [ 121.342169][ T6987] should_fail_ex.cold+0x5/0xa [ 121.342185][ T6987] should_failslab+0xc2/0x120 [ 121.342214][ T6987] kmem_cache_alloc_noprof+0x91/0x6a0 [ 121.342232][ T6987] ? vhost_task_create+0x1db/0x370 [ 121.342266][ T6987] ? kvm_mmu_post_init_vm+0x1b3/0x360 [ 121.342292][ T6987] ? kvm_arch_vcpu_ioctl_run+0x66/0x1960 [ 121.342314][ T6987] ? alloc_pid+0x1bd/0x1910 [ 121.342328][ T6987] alloc_pid+0x1bd/0x1910 [ 121.342341][ T6987] ? __pfx_alloc_pid+0x10/0x10 [ 121.342357][ T6987] ? __lock_acquire+0x49f/0x1a40 [ 121.342377][ T6987] ? avc_has_perm_noaudit+0x145/0x3b0 [ 121.342404][ T6987] ? fpu_clone+0x226/0x7a0 [ 121.342422][ T6987] ? copy_thread+0x729/0xbe0 [ 121.342439][ T6987] copy_process+0x5485/0x8030 [ 121.342469][ T6987] ? __pfx_copy_process+0x10/0x10 [ 121.342484][ T6987] ? __kasan_kmalloc+0xaa/0xb0 [ 121.342498][ T6987] ? lockdep_init_map_type+0x5c/0x250 [ 121.342513][ T6987] ? lockdep_init_map_type+0x5c/0x250 [ 121.342527][ T6987] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 121.342540][ T6987] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 121.342560][ T6987] vhost_task_create+0x1db/0x370 [ 121.342577][ T6987] ? __pfx_vhost_task_create+0x10/0x10 [ 121.342593][ T6987] ? __pfx_vhost_task_fn+0x10/0x10 [ 121.342607][ T6987] ? __pfx___mutex_lock+0x10/0x10 [ 121.342622][ T6987] ? kasan_quarantine_put+0x104/0x240 [ 121.342644][ T6987] kvm_mmu_post_init_vm+0x1b3/0x360 [ 121.342667][ T6987] kvm_arch_vcpu_ioctl_run+0x66/0x1960 [ 121.342689][ T6987] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 121.342721][ T6987] kvm_vcpu_ioctl+0x730/0x1700 [ 121.342741][ T6987] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 121.342760][ T6987] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 121.342791][ T6987] ? do_vfs_ioctl+0x226/0x13e0 [ 121.342814][ T6987] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 121.342837][ T6987] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 121.342870][ T6987] ? __fget_files+0x215/0x3d0 [ 121.342886][ T6987] ? hook_file_ioctl_common+0x140/0x440 [ 121.342910][ T6987] ? selinux_file_ioctl+0x13b/0x290 [ 121.342924][ T6987] ? selinux_file_ioctl+0xb6/0x290 [ 121.342941][ T6987] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 121.342958][ T6987] __x64_sys_ioctl+0x18e/0x210 [ 121.342982][ T6987] do_syscall_64+0x115/0x870 [ 121.343002][ T6987] ? clear_bhb_loop+0x70/0xc0 [ 121.343023][ T6987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.343039][ T6987] RIP: 0033:0x7fa6e3f9e0d9 [ 121.343054][ T6987] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.343069][ T6987] RSP: 002b:00007fa6e4ef3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 121.343086][ T6987] RAX: ffffffffffffffda RBX: 00007fa6e4225fa0 RCX: 00007fa6e3f9e0d9 [ 121.343096][ T6987] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 121.343105][ T6987] RBP: 00007fa6e4ef3090 R08: 0000000000000000 R09: 0000000000000000 [ 121.343113][ T6987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.343123][ T6987] R13: 00007fa6e4226038 R14: 00007fa6e4225fa0 R15: 00007ffcaab4f498 [ 121.343145][ T6987] [ 121.565338][ T6999] ceph: No mds server is up or the cluster is laggy [ 121.622199][ T7010] xt_CT: You must specify a L4 protocol and not use inversions on it [ 121.633885][ T7007] bond2: entered promiscuous mode [ 121.684507][ T7019] netlink: 4 bytes leftover after parsing attributes in process `syz.2.362'. [ 121.778498][ T7021] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 121.795999][ T7011] syz.3.359 (7011): drop_caches: 2 [ 121.817307][ T7019] netlink: 4 bytes leftover after parsing attributes in process `syz.2.362'. [ 121.927227][ T7028] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 121.987396][ T7035] IPv6: NLM_F_CREATE should be specified when creating new route [ 122.005629][ T29] hid-generic 0362:07FF:7FFFFFFF.0003: item fetching failed at offset 0/1 [ 122.014872][ T29] hid-generic 0362:07FF:7FFFFFFF.0003: probe with driver hid-generic failed with error -22 [ 122.118985][ T7043] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 122.121275][ T7043] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 122.145295][ T7043] vhci_hcd vhci_hcd.0: Device attached [ 122.187799][ T7045] vhci_hcd: connection closed [ 122.190187][ T5851] vhci_hcd vhci_hcd.2: stop threads [ 122.193563][ T5851] vhci_hcd vhci_hcd.2: release socket [ 122.195379][ T5851] vhci_hcd vhci_hcd.2: disconnect device [ 122.199544][ T7050] tipc: Started in network mode [ 122.201615][ T7050] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 122.221629][ T7050] tipc: Enabled bearer , priority 10 [ 122.481065][ T7055] FAULT_INJECTION: forcing a failure. [ 122.481065][ T7055] name failslab, interval 1, probability 0, space 0, times 0 [ 122.485209][ T7055] CPU: 2 UID: 0 PID: 7055 Comm: syz.1.374 Tainted: G L syzkaller #0 PREEMPT(full) [ 122.485227][ T7055] Tainted: [L]=SOFTLOCKUP [ 122.485231][ T7055] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 122.485238][ T7055] Call Trace: [ 122.485243][ T7055] [ 122.485248][ T7055] dump_stack_lvl+0x100/0x190 [ 122.485319][ T7055] should_fail_ex.cold+0x5/0xa [ 122.485336][ T7055] should_failslab+0xc2/0x120 [ 122.485359][ T7055] __kmalloc_noprof+0xfc/0x820 [ 122.485373][ T7055] ? lsm_blob_alloc+0x68/0x90 [ 122.485402][ T7055] lsm_blob_alloc+0x68/0x90 [ 122.485415][ T7055] security_task_alloc+0x2a/0x260 [ 122.485428][ T7055] copy_process+0x2b94/0x8030 [ 122.485457][ T7055] ? __pfx_copy_process+0x10/0x10 [ 122.485472][ T7055] ? __kasan_kmalloc+0xaa/0xb0 [ 122.485487][ T7055] ? lockdep_init_map_type+0x5c/0x250 [ 122.485502][ T7055] ? lockdep_init_map_type+0x5c/0x250 [ 122.485516][ T7055] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 122.485531][ T7055] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 122.485550][ T7055] vhost_task_create+0x1db/0x370 [ 122.485564][ T7055] ? __pfx_vhost_task_create+0x10/0x10 [ 122.485581][ T7055] ? __pfx_vhost_task_fn+0x10/0x10 [ 122.485594][ T7055] ? __pfx___mutex_lock+0x10/0x10 [ 122.485625][ T7055] ? lockdep_hardirqs_on+0x78/0x100 [ 122.485642][ T7055] kvm_mmu_post_init_vm+0x1b3/0x360 [ 122.485659][ T7055] kvm_arch_vcpu_ioctl_run+0x66/0x1960 [ 122.485681][ T7055] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 122.485697][ T7055] kvm_vcpu_ioctl+0x730/0x1700 [ 122.485710][ T7055] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 122.485723][ T7055] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 122.485737][ T7055] ? do_vfs_ioctl+0x226/0x13e0 [ 122.485758][ T7055] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 122.485774][ T7055] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 122.485798][ T7055] ? __fget_files+0x215/0x3d0 [ 122.485809][ T7055] ? hook_file_ioctl_common+0x140/0x440 [ 122.485826][ T7055] ? selinux_file_ioctl+0x13b/0x290 [ 122.485842][ T7055] ? selinux_file_ioctl+0xb6/0x290 [ 122.485853][ T7055] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 122.485865][ T7055] __x64_sys_ioctl+0x18e/0x210 [ 122.485882][ T7055] do_syscall_64+0x115/0x870 [ 122.485896][ T7055] ? clear_bhb_loop+0x70/0xc0 [ 122.485910][ T7055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.485921][ T7055] RIP: 0033:0x7f59c039e0d9 [ 122.485931][ T7055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.485942][ T7055] RSP: 002b:00007f59c1348028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 122.485953][ T7055] RAX: ffffffffffffffda RBX: 00007f59c0625fa0 RCX: 00007f59c039e0d9 [ 122.485959][ T7055] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 122.485965][ T7055] RBP: 00007f59c1348090 R08: 0000000000000000 R09: 0000000000000000 [ 122.485971][ T7055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.485977][ T7055] R13: 00007f59c0626038 R14: 00007f59c0625fa0 R15: 00007ffce44137f8 [ 122.485991][ T7055] [ 122.964807][ T7066] netlink: 16 bytes leftover after parsing attributes in process `syz.2.377'. [ 123.195725][ T7081] tmpfs: Bad value for 'huge' [ 123.236959][ T7083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.241329][ T7083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.279457][ T7084] usb 5-1: USB disconnect, device number 3 [ 123.289635][ T10] tipc: Node number set to 1 [ 123.332776][ T7089] /dev/sg0: Can't lookup blockdev [ 123.378174][ T7084] ================================================================== [ 123.380733][ T7084] BUG: KASAN: slab-use-after-free in snd_usb_midi_v2_free+0x52d/0x670 [ 123.383317][ T7084] Write of size 8 at addr ffff8880631b4350 by task syz.3.381/7084 [ 123.386099][ T7084] [ 123.387700][ T7084] CPU: 2 UID: 0 PID: 7084 Comm: syz.3.381 Tainted: G L syzkaller #0 PREEMPT(full) [ 123.387719][ T7084] Tainted: [L]=SOFTLOCKUP [ 123.387724][ T7084] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 123.387733][ T7084] Call Trace: [ 123.387745][ T7084] [ 123.387750][ T7084] dump_stack_lvl+0x100/0x190 [ 123.387798][ T7084] print_report+0x13d/0x4b0 [ 123.387832][ T7084] ? __virt_addr_valid+0x239/0x430 [ 123.387870][ T7084] ? snd_usb_midi_v2_free+0x52d/0x670 [ 123.387885][ T7084] kasan_report+0xdf/0x1c0 [ 123.387913][ T7084] ? snd_usb_midi_v2_free+0x52d/0x670 [ 123.387926][ T7084] snd_usb_midi_v2_free+0x52d/0x670 [ 123.387939][ T7084] ? __pfx_snd_ctl_dev_free+0x10/0x10 [ 123.388319][ T7084] snd_usb_midi_v2_free_all+0x85/0xe0 [ 123.388335][ T7084] snd_usb_audio_free+0x4e/0x120 [ 123.388358][ T7084] ? __pfx_snd_usb_audio_free+0x10/0x10 [ 123.388374][ T7084] release_card_device+0xb2/0x1a0 [ 123.388385][ T7084] ? __pfx_release_card_device+0x10/0x10 [ 123.388395][ T7084] device_release+0xd2/0x270 [ 123.388456][ T7084] kobject_put+0x1f7/0x640 [ 123.388480][ T7084] ? snd_card_disconnect.part.0+0x443/0x5b0 [ 123.388493][ T7084] put_device+0x1f/0x30 [ 123.388504][ T7084] snd_card_free_when_closed+0x2b/0x40 [ 123.388517][ T7084] usb_audio_disconnect+0x210/0x680 [ 123.388536][ T7084] usb_unbind_interface+0x1dd/0x9e0 [ 123.388566][ T7084] ? __pfx_usb_unbind_interface+0x10/0x10 [ 123.388584][ T7084] device_remove+0x12a/0x180 [ 123.388600][ T7084] device_release_driver_internal+0x44e/0x620 [ 123.388620][ T7084] bus_remove_device+0x2bc/0x560 [ 123.388634][ T7084] ? __pfx_bus_remove_device+0x10/0x10 [ 123.388648][ T7084] ? __pfx_device_remove_attrs+0x10/0x10 [ 123.388669][ T7084] device_del+0x376/0x9b0 [ 123.388682][ T7084] ? __pfx_device_del+0x10/0x10 [ 123.388695][ T7084] ? __pfx___pm_runtime_barrier+0x10/0x10 [ 123.388714][ T7084] usb_disable_device+0x367/0x810 [ 123.388730][ T7084] ? mark_held_locks+0x40/0x70 [ 123.388752][ T7084] usb_disconnect+0x2e2/0x9a0 [ 123.388767][ T7084] hub_quiesce+0x16d/0x320 [ 123.388782][ T7084] hub_disconnect+0xd5/0x510 [ 123.388798][ T7084] usb_unbind_interface+0x1dd/0x9e0 [ 123.388817][ T7084] ? __pfx_usb_unbind_interface+0x10/0x10 [ 123.388835][ T7084] device_remove+0x12a/0x180 [ 123.388851][ T7084] device_release_driver_internal+0x44e/0x620 [ 123.388871][ T7084] bus_remove_device+0x2bc/0x560 [ 123.388886][ T7084] ? __pfx_bus_remove_device+0x10/0x10 [ 123.388900][ T7084] ? __pfx_device_remove_attrs+0x10/0x10 [ 123.388917][ T7084] device_del+0x376/0x9b0 [ 123.388930][ T7084] ? __pfx_device_del+0x10/0x10 [ 123.388943][ T7084] ? kobject_put+0xb9/0x640 [ 123.388960][ T7084] usb_disable_device+0x367/0x810 [ 123.388975][ T7084] usb_set_configuration+0x12a0/0x1c60 [ 123.388991][ T7084] ? kernfs_fop_write_iter+0x2c2/0x5f0 [ 123.389009][ T7084] bConfigurationValue_store+0x103/0x180 [ 123.389029][ T7084] ? __pfx_bConfigurationValue_store+0x10/0x10 [ 123.389044][ T7084] ? find_held_lock+0x2b/0x80 [ 123.389053][ T7084] ? sysfs_file_kobj+0xe4/0x290 [ 123.389069][ T7084] ? sysfs_file_kobj+0xe4/0x290 [ 123.389084][ T7084] ? __pfx_bConfigurationValue_store+0x10/0x10 [ 123.389099][ T7084] dev_attr_store+0x58/0x80 [ 123.389117][ T7084] ? __pfx_dev_attr_store+0x10/0x10 [ 123.389135][ T7084] sysfs_kf_write+0xf2/0x150 [ 123.389154][ T7084] kernfs_fop_write_iter+0x3e0/0x5f0 [ 123.389168][ T7084] ? __pfx_sysfs_kf_write+0x10/0x10 [ 123.389184][ T7084] vfs_write+0x6ac/0x1050 [ 123.389207][ T7084] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 123.389222][ T7084] ? __pfx_vfs_write+0x10/0x10 [ 123.389241][ T7084] ksys_write+0x12a/0x250 [ 123.389251][ T7084] ? __pfx_ksys_write+0x10/0x10 [ 123.389262][ T7084] do_syscall_64+0x115/0x870 [ 123.389280][ T7084] ? clear_bhb_loop+0x70/0xc0 [ 123.389293][ T7084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.389305][ T7084] RIP: 0033:0x7fd8b459e0d9 [ 123.389316][ T7084] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.389329][ T7084] RSP: 002b:00007fd8b54de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 123.389342][ T7084] RAX: ffffffffffffffda RBX: 00007fd8b4826090 RCX: 00007fd8b459e0d9 [ 123.389349][ T7084] RDX: 0000000000000001 RSI: 0000200000000500 RDI: 0000000000000005 [ 123.389355][ T7084] RBP: 00007fd8b4635024 R08: 0000000000000000 R09: 0000000000000000 [ 123.389362][ T7084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.389368][ T7084] R13: 00007fd8b4826128 R14: 00007fd8b4826090 R15: 00007fff56956a78 [ 123.389378][ T7084] [ 123.389383][ T7084] [ 123.529156][ T7084] Allocated by task 5842: [ 123.530478][ T7084] kasan_save_stack+0x30/0x50 [ 123.531952][ T7084] kasan_save_track+0x14/0x30 [ 123.533398][ T7084] __kasan_kmalloc+0xaa/0xb0 [ 123.534898][ T7084] __kmalloc_cache_noprof+0x2e5/0x6c0 [ 123.536595][ T7084] snd_ump_endpoint_new+0x93/0x470 [ 123.538189][ T7084] create_midi2_ump+0x2dd/0x920 [ 123.539671][ T7084] snd_usb_midi_v2_create+0x11fa/0x4070 [ 123.541467][ T7084] snd_usb_create_stream.isra.0+0x386/0x4d0 [ 123.543378][ T7084] usb_audio_probe+0xf05/0x3b10 [ 123.544940][ T7084] usb_probe_interface+0x303/0x8f0 [ 123.546688][ T7084] really_probe+0x241/0xa60 [ 123.548100][ T7084] __driver_probe_device+0x20e/0x450 [ 123.549718][ T7084] driver_probe_device+0x4a/0x140 [ 123.551293][ T7084] __device_attach_driver+0x1df/0x320 [ 123.553020][ T7084] bus_for_each_drv+0x159/0x1e0 [ 123.554556][ T7084] __device_attach+0x1e4/0x4d0 [ 123.556043][ T7084] device_initial_probe+0xaf/0xd0 [ 123.557665][ T7084] bus_probe_device+0x64/0x160 [ 123.559209][ T7084] device_add+0x121d/0x1970 [ 123.560652][ T7084] usb_set_configuration+0xd97/0x1c60 [ 123.562338][ T7084] usb_generic_driver_probe+0xa1/0xe0 [ 123.564034][ T7084] usb_probe_device+0xef/0x400 [ 123.565559][ T7084] really_probe+0x241/0xa60 [ 123.567075][ T7084] __driver_probe_device+0x20e/0x450 [ 123.568767][ T7084] driver_probe_device+0x4a/0x140 [ 123.570354][ T7084] __device_attach_driver+0x1df/0x320 [ 123.572096][ T7084] bus_for_each_drv+0x159/0x1e0 [ 123.573645][ T7084] __device_attach+0x1e4/0x4d0 [ 123.575199][ T7084] device_initial_probe+0xaf/0xd0 [ 123.576826][ T7084] bus_probe_device+0x64/0x160 [ 123.578334][ T7084] device_add+0x121d/0x1970 [ 123.579815][ T7084] usb_new_device.cold+0x685/0x115c [ 123.581522][ T7084] hub_event+0x30a3/0x4a60 [ 123.582938][ T7084] process_one_work+0xa23/0x1940 [ 123.584547][ T7084] worker_thread+0x5ef/0xe50 [ 123.586054][ T7084] kthread+0x370/0x450 [ 123.587316][ T7084] ret_from_fork+0x72b/0xd50 [ 123.588763][ T7084] ret_from_fork_asm+0x1a/0x30 [ 123.590251][ T7084] [ 123.591019][ T7084] Freed by task 7084: [ 123.592274][ T7084] kasan_save_stack+0x30/0x50 [ 123.593767][ T7084] kasan_save_track+0x14/0x30 [ 123.595288][ T7084] kasan_save_free_info+0x3b/0x70 [ 123.596892][ T7084] __kasan_slab_free+0x5f/0x80 [ 123.598389][ T7084] kfree+0x22b/0x6c0 [ 123.599626][ T7084] snd_rawmidi_dev_free+0x3e/0x60 [ 123.601204][ T7084] __snd_device_free+0x1a3/0x300 [ 123.602759][ T7084] snd_device_free_all+0xf3/0x220 [ 123.604354][ T7084] release_card_device+0x77/0x1a0 [ 123.605943][ T7084] device_release+0xd2/0x270 [ 123.607416][ T7084] kobject_put+0x1f7/0x640 [ 123.608781][ T7084] put_device+0x1f/0x30 [ 123.610068][ T7084] snd_card_free_when_closed+0x2b/0x40 [ 123.611710][ T7084] usb_audio_disconnect+0x210/0x680 [ 123.613297][ T7084] usb_unbind_interface+0x1dd/0x9e0 [ 123.614958][ T7084] device_remove+0x12a/0x180 [ 123.616478][ T7084] device_release_driver_internal+0x44e/0x620 [ 123.618371][ T7084] bus_remove_device+0x2bc/0x560 [ 123.619923][ T7084] device_del+0x376/0x9b0 [ 123.621285][ T7084] usb_disable_device+0x367/0x810 [ 123.622937][ T7084] usb_disconnect+0x2e2/0x9a0 [ 123.624420][ T7084] hub_quiesce+0x16d/0x320 [ 123.625841][ T7084] hub_disconnect+0xd5/0x510 [ 123.627317][ T7084] usb_unbind_interface+0x1dd/0x9e0 [ 123.628946][ T7084] device_remove+0x12a/0x180 [ 123.630392][ T7084] device_release_driver_internal+0x44e/0x620 [ 123.632281][ T7084] bus_remove_device+0x2bc/0x560 [ 123.633863][ T7084] device_del+0x376/0x9b0 [ 123.635253][ T7084] usb_disable_device+0x367/0x810 [ 123.636880][ T7084] usb_set_configuration+0x12a0/0x1c60 [ 123.638579][ T7084] bConfigurationValue_store+0x103/0x180 [ 123.640329][ T7084] dev_attr_store+0x58/0x80 [ 123.641807][ T7084] sysfs_kf_write+0xf2/0x150 [ 123.643270][ T7084] kernfs_fop_write_iter+0x3e0/0x5f0 [ 123.644946][ T7084] vfs_write+0x6ac/0x1050 [ 123.646371][ T7084] ksys_write+0x12a/0x250 [ 123.647669][ T7084] do_syscall_64+0x115/0x870 [ 123.649111][ T7084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.650962][ T7084] [ 123.651731][ T7084] The buggy address belongs to the object at ffff8880631b4000 [ 123.651731][ T7084] which belongs to the cache kmalloc-4k of size 4096 [ 123.656039][ T7084] The buggy address is located 848 bytes inside of [ 123.656039][ T7084] freed 4096-byte region [ffff8880631b4000, ffff8880631b5000) [ 123.659971][ T7084] [ 123.660757][ T7084] The buggy address belongs to the physical page: [ 123.662795][ T7084] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x631b0 [ 123.665559][ T7084] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 123.668210][ T7084] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 123.670574][ T7084] page_type: f5(slab) [ 123.671907][ T7084] raw: 00fff00000000040 ffff88801bc43040 dead000000000100 dead000000000122 [ 123.674626][ T7084] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 123.677347][ T7084] head: 00fff00000000040 ffff88801bc43040 dead000000000100 dead000000000122 [ 123.680126][ T7084] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 123.683216][ T7084] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 123.686130][ T7084] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 123.688830][ T7084] page dumped because: kasan: bad access detected [ 123.690834][ T7084] page_owner tracks the page as allocated [ 123.692628][ T7084] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5149, tgid 5149 (udevd), ts 109156802064, free_ts 109124136055 [ 123.698901][ T7084] post_alloc_hook+0xfd/0x120 [ 123.700422][ T7084] get_page_from_freelist+0xf48/0x3530 [ 123.702139][ T7084] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 123.703995][ T7084] new_slab+0xa2/0x640 [ 123.705307][ T7084] refill_objects+0xe3/0x410 [ 123.706799][ T7084] __pcs_replace_empty_main+0x376/0x680 [ 123.708551][ T7084] __kmalloc_noprof+0x66d/0x820 [ 123.710112][ T7084] tomoyo_realpath_from_path+0xb6/0x690 [ 123.711896][ T7084] tomoyo_path_perm+0x276/0x460 [ 123.713403][ T7084] security_inode_getattr+0x116/0x280 [ 123.715086][ T7084] vfs_fstat+0x4b/0xe0 [ 123.716423][ T7084] __do_sys_newfstat+0x8b/0x110 [ 123.717961][ T7084] do_syscall_64+0x115/0x870 [ 123.719429][ T7084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.721305][ T7084] page last free pid 5149 tgid 5149 stack trace: [ 123.723273][ T7084] __free_frozen_pages+0x79f/0x1090 [ 123.724952][ T7084] qlist_free_all+0x47/0xf0 [ 123.726448][ T7084] kasan_quarantine_reduce+0x1a0/0x1f0 [ 123.728164][ T7084] __kasan_slab_alloc+0x69/0x90 [ 123.729717][ T7084] __kmalloc_cache_noprof+0x265/0x6c0 [ 123.731413][ T7084] kernfs_fop_open+0x23d/0xd50 [ 123.732934][ T7084] do_dentry_open+0x6ab/0x14d0 [ 123.734481][ T7084] vfs_open+0x82/0x3f0 [ 123.735801][ T7084] path_openat+0x2873/0x4280 [ 123.737293][ T7084] do_file_open+0x20e/0x430 [ 123.738734][ T7084] do_sys_openat2+0x10f/0x1e0 [ 123.740228][ T7084] __x64_sys_openat+0x12d/0x210 [ 123.741902][ T7084] do_syscall_64+0x115/0x870 [ 123.743413][ T7084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.745338][ T7084] [ 123.746151][ T7084] Memory state around the buggy address: [ 123.747902][ T7084] ffff8880631b4200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 123.750413][ T7084] ffff8880631b4280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 123.752910][ T7084] >ffff8880631b4300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 123.755429][ T7084] ^ [ 123.757541][ T7084] ffff8880631b4380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 123.760031][ T7084] ffff8880631b4400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 123.762534][ T7084] ================================================================== [ 123.774378][ T7084] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 123.776754][ T7084] CPU: 2 UID: 0 PID: 7084 Comm: syz.3.381 Tainted: G L syzkaller #0 PREEMPT(full) [ 123.780072][ T7084] Tainted: [L]=SOFTLOCKUP [ 123.781442][ T7084] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 123.784615][ T7084] Call Trace: [ 123.785703][ T7084] [ 123.786677][ T7084] dump_stack_lvl+0x100/0x190 [ 123.788171][ T7084] vpanic+0x552/0x970 [ 123.789457][ T7084] ? __pfx_vpanic+0x10/0x10 [ 123.790891][ T7084] ? mark_held_locks+0x40/0x70 [ 123.792379][ T7084] ? snd_usb_midi_v2_free+0x52d/0x670 [ 123.794039][ T7084] panic+0xd1/0xe0 [ 123.795263][ T7084] ? __pfx_panic+0x10/0x10 [ 123.796704][ T7084] ? snd_usb_midi_v2_free+0x52d/0x670 [ 123.798387][ T7084] ? preempt_schedule_common+0x42/0xc0 [ 123.800107][ T7084] check_panic_on_warn.cold+0x19/0x34 [ 123.801806][ T7084] end_report.part.0+0x3a/0x90 [ 123.803324][ T7084] kasan_report.cold+0xe/0x18 [ 123.804865][ T7084] ? snd_usb_midi_v2_free+0x52d/0x670 [ 123.806564][ T7084] snd_usb_midi_v2_free+0x52d/0x670 [ 123.808169][ T7084] ? __pfx_snd_ctl_dev_free+0x10/0x10 [ 123.809884][ T7084] snd_usb_midi_v2_free_all+0x85/0xe0 [ 123.811538][ T7084] snd_usb_audio_free+0x4e/0x120 [ 123.812983][ T7084] ? __pfx_snd_usb_audio_free+0x10/0x10 [ 123.814760][ T7084] release_card_device+0xb2/0x1a0 [ 123.816410][ T7084] ? __pfx_release_card_device+0x10/0x10 [ 123.818177][ T7084] device_release+0xd2/0x270 [ 123.819650][ T7084] kobject_put+0x1f7/0x640 [ 123.821076][ T7084] ? snd_card_disconnect.part.0+0x443/0x5b0 [ 123.822931][ T7084] put_device+0x1f/0x30 [ 123.824267][ T7084] snd_card_free_when_closed+0x2b/0x40 [ 123.826012][ T7084] usb_audio_disconnect+0x210/0x680 [ 123.832331][ T7084] usb_unbind_interface+0x1dd/0x9e0 [ 123.834183][ T7084] ? __pfx_usb_unbind_interface+0x10/0x10 [ 123.836006][ T7084] device_remove+0x12a/0x180 [ 123.837538][ T7084] device_release_driver_internal+0x44e/0x620 [ 123.839467][ T7084] bus_remove_device+0x2bc/0x560 [ 123.841037][ T7084] ? __pfx_bus_remove_device+0x10/0x10 [ 123.842792][ T7084] ? __pfx_device_remove_attrs+0x10/0x10 [ 123.844576][ T7084] device_del+0x376/0x9b0 [ 123.845971][ T7084] ? __pfx_device_del+0x10/0x10 [ 123.847515][ T7084] ? __pfx___pm_runtime_barrier+0x10/0x10 [ 123.849271][ T7084] usb_disable_device+0x367/0x810 [ 123.850822][ T7084] ? mark_held_locks+0x40/0x70 [ 123.852327][ T7084] usb_disconnect+0x2e2/0x9a0 [ 123.853862][ T7084] hub_quiesce+0x16d/0x320 [ 123.855305][ T7084] hub_disconnect+0xd5/0x510 [ 123.856813][ T7084] usb_unbind_interface+0x1dd/0x9e0 [ 123.858454][ T7084] ? __pfx_usb_unbind_interface+0x10/0x10 [ 123.860252][ T7084] device_remove+0x12a/0x180 [ 123.861724][ T7084] device_release_driver_internal+0x44e/0x620 [ 123.863621][ T7084] bus_remove_device+0x2bc/0x560 [ 123.865222][ T7084] ? __pfx_bus_remove_device+0x10/0x10 [ 123.866996][ T7084] ? __pfx_device_remove_attrs+0x10/0x10 [ 123.868825][ T7084] device_del+0x376/0x9b0 [ 123.870140][ T7084] ? __pfx_device_del+0x10/0x10 [ 123.871644][ T7084] ? kobject_put+0xb9/0x640 [ 123.873105][ T7084] usb_disable_device+0x367/0x810 [ 123.874729][ T7084] usb_set_configuration+0x12a0/0x1c60 [ 123.876510][ T7084] ? kernfs_fop_write_iter+0x2c2/0x5f0 [ 123.878288][ T7084] bConfigurationValue_store+0x103/0x180 [ 123.880059][ T7084] ? __pfx_bConfigurationValue_store+0x10/0x10 [ 123.882009][ T7084] ? find_held_lock+0x2b/0x80 [ 123.883502][ T7084] ? sysfs_file_kobj+0xe4/0x290 [ 123.885081][ T7084] ? sysfs_file_kobj+0xe4/0x290 [ 123.886624][ T7084] ? __pfx_bConfigurationValue_store+0x10/0x10 [ 123.888574][ T7084] dev_attr_store+0x58/0x80 [ 123.890043][ T7084] ? __pfx_dev_attr_store+0x10/0x10 [ 123.891678][ T7084] sysfs_kf_write+0xf2/0x150 [ 123.893161][ T7084] kernfs_fop_write_iter+0x3e0/0x5f0 [ 123.894851][ T7084] ? __pfx_sysfs_kf_write+0x10/0x10 [ 123.896552][ T7084] vfs_write+0x6ac/0x1050 [ 123.897940][ T7084] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 123.899780][ T7084] ? __pfx_vfs_write+0x10/0x10 [ 123.901306][ T7084] ksys_write+0x12a/0x250 [ 123.902677][ T7084] ? __pfx_ksys_write+0x10/0x10 [ 123.904217][ T7084] do_syscall_64+0x115/0x870 [ 123.905996][ T7084] ? clear_bhb_loop+0x70/0xc0 [ 123.907874][ T7084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.910162][ T7084] RIP: 0033:0x7fd8b459e0d9 [ 123.911905][ T7084] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.919407][ T7084] RSP: 002b:00007fd8b54de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 123.922675][ T7084] RAX: ffffffffffffffda RBX: 00007fd8b4826090 RCX: 00007fd8b459e0d9 [ 123.925388][ T7084] RDX: 0000000000000001 RSI: 0000200000000500 RDI: 0000000000000005 [ 123.927899][ T7084] RBP: 00007fd8b4635024 R08: 0000000000000000 R09: 0000000000000000 [ 123.930395][ T7084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.932872][ T7084] R13: 00007fd8b4826128 R14: 00007fd8b4826090 R15: 00007fff56956a78 [ 123.935384][ T7084] [ 123.937139][ T7084] Kernel Offset: disabled [ 123.938504][ T7084] Rebooting in 86400 seconds.. VM DIAGNOSIS: 23:33:56 Registers: info registers vcpu 0 CPU#0 RAX=00000000000f2d79 RBX=ffffffff8e891480 RCX=ffffffff8bbb7335 RDX=0000000000000000 RSI=ffffffff8e1a896d RDI=ffffffff8c402a80 RBP=fffffbfff1d12290 RSP=ffffffff8e807e10 R8 =0000000000000001 R9 =ffffed100d48678d R10=ffff88806a433c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffffffff1d00fc6 R15=dffffc0000000000 RIP=ffffffff8bbb58ff RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5dd8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f59c1347ff8 CR3=000000004a985000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a82b4148341652be f348ff8fa39c8df7 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcaab4f986 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcaab4f986 00007ffcaab4f98c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa6e4035607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa6e4035647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa6e40357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa6e4035639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 cdcd536f1833b426 00d3568498da58a1 d3473ac34d7be9ab 5e0032105d94b34d ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 666b75138b56c194 1f50219a6b76934b 2fef03812a7dadc6 e943c458f1802c96 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 110f0685a0e2454c 67f43e349ebf4718 24487b6de2ce1145 ef463f3fe6a2bdee ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 663e9dd1ba3d2ff0 28c9fdd35a045af0 3a1921e725ed582e 7136c4fc0aaf33b2 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7040c3968bdad204 1780cf464ff7666b 75138b56c1941f50 219a6b76934b2fef ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 03812a7dadc6e943 c458f1802c9692e8 c55376150bcd3815 cfb1ba5934ad9ece ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffffffff966c43f8 RBX=ffff88801f6c3130 RCX=0000000000000000 RDX=000000000000013b RSI=ffff88801f6c3108 RDI=ffff88801cbd9948 RBP=ffff88801f6c2540 RSP=ffffc90000687890 R8 =0000000000000001 R9 =0000000000000004 R10=0000000000000000 R11=0000000000000000 R12=000000000000013b R13=0000000000000002 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81e5dbf3 RFL=00000003 [------C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5ed8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055a9d9d4ee88 CR3=000000003da25000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000e2200100 Opmask01=0000000000000000 Opmask02=000000007ffeffff Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055a9d9dc4700 000055a9d9dc4700 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055a9d9cb8c50 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055a9d9cc3fd0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f90235f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ff00000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ff00000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffff0000 ffffff0000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f5c4f5f05040405 1e694645585e4445 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 49051e4e584b4905 4e445f4559051a04 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6568007365747962 20756c3825202020 20202020203a657a 697320656c696600 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 404d005640515c47 0550491d00050505 05050505051f405f 4c560540494c4300 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000002b1 0031443443003044 340034647261632f 646e756f732f302e ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055a9d9cb37b0 000055a9d9cbde10 000055a9d9d412a0 000055a9d9cc3480 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055a9d9cb5f60 000055a9d9cc2f50 000055a9d9cc2f10 000055a9d9cb3b10 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055a9d9cbb670 000055a9d9cb9580 000055a9d9a7f4b0 000055a9d9cc39f0 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055a9d9cc8a20 000055a9d9cc4c40 000055a9d9cc42b0 000055a9d9cd2140 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005f4d23521b00 3a30304f3032303a 0000000000000021 0000000000000040 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000554d08521b00 0000000530320d3a 0000000000000000 0000000000000040 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000029ac1 RBX=ffffffff8dd38f4c RCX=ffffffff81fe45c4 RDX=00000000000001eb RSI=0000000000000001 RDI=0000000000000007 RBP=0000000000000065 RSP=ffffc9002281e5d8 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=00000000000865bd R12=ffffc9002281e7e5 R13=00000000000001eb R14=dffffc0000000000 R15=ffffffff8d90415c RIP=ffffffff820a5d90 RFL=00000083 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007fd8b54de6c0 ffffffff 00c00000 GS =0000 ffff8880d5fd8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fa43e9556c8 CR3=000000005771e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000003 Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73657479625f6563 69767265735f6f69 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcaab4f986 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcaab4f986 00007ffcaab4f98c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa6e4035607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa6e4035647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa6e40357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa6e4035639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000120 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 0000000000000000 0000000000000000 0000000000000120 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000001 RBX=1ffff920006b2f63 RCX=0000000000000001 RDX=0000000000000046 RSI=ffffffff8e182aaa RDI=ffffffff8c402a80 RBP=0000000000000000 RSP=ffffc90003597b10 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=00000000de68bc54 R12=ffffffff8c3e0900 R13=00000000000000c4 R14=ffffc90003597e60 R15=0000000000000040 RIP=ffffffff8bbb62a4 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007fd8b54ff6c0 ffffffff 00c00000 GS =0000 ffff8880d60d8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00002000008f7000 CR3=000000005771e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000f802fefe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 317a79732f74656e 2f70756f7267637a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffce4413ce6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffce4413ce6 00007ffce4413cec ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f59c0435607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f59c0435647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f59c04357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f59c0435639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000