last executing test programs: 37.900869912s ago: executing program 3 (id=98): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000100)={0xfffffff8, 0x0, 0xfffffff2, 0x1fd3, 0x4f, "0d418107009188b791e15b1b6f6ff88c6b00", 0x9, 0x140220}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000002440)=0xd) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0xec, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r3, &(0x7f00000002c0)={0x4, 0x8, 0xfa00, {r4, 0x3}}, 0x10) mount(&(0x7f0000000040)=@filename='./cgroup\x00', &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000780)='romfs\x00', 0x204001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r5, &(0x7f0000000100)='select \n', 0x10) ioctl$VT_WAITACTIVE(r0, 0x5607) write(r5, &(0x7f0000000100)='file read /etc/passwd task.uid=0 exec.argv[0X=\"sh\" exec.envp[\"PATH\"]=\"/bin\"\n', 0x4c) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {&(0x7f0000000340), r4}}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r5}, 0x4) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000300)={0xbff, 0xfffffff1, 0x1, 0x0, 0x5, "649fdf2f620652cf0912b264c4a6951adc541e", 0x5, 0x7ff}) r6 = ioctl$KVM_GET_STATS_FD_vm(r5, 0xaece) ioctl$SIOCGETLINKNAME(r6, 0x89e0, &(0x7f00000003c0)={0x3, 0x1}) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413010048100000005e140602ffe7ede40e000a000f000000028000001c64e046882f121f3ebab168c6526a9928c9abe9833d4c26483f186c63363d2cbf740ddea30743136e6f3c05a43aca3b9b94e8abb575f615890f3c3ca0e0811750c762c7ed174bd328ce88427f868aa49a716b67f219f83249469d1368c5baac1ff14d6172", 0x91}, {&(0x7f0000000000)="576d108d96866c677ace847171891868eee30988616b233bde111476e9f908e134ec6fc3", 0x24}], 0x2}, 0x0) 37.800640505s ago: executing program 3 (id=99): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) r1 = accept(r0, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000013c0), r1) sendmsg$netlink(r1, &(0x7f0000004dc0)={0x0, 0x0, &(0x7f0000004380)=[{&(0x7f0000001400)=ANY=[], 0x131c}], 0x1, 0x0, 0x0, 0x80}, 0x4040000) r2 = syz_open_dev$vim2m(&(0x7f0000003c40), 0xc, 0x2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1123102, 0x0) pipe2(&(0x7f00000038c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r5, &(0x7f00000000c0)=ANY=[], 0xffffff6a) splice(r4, 0x0, r3, 0x0, 0x40010003, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x1b) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000001, 0x11, r2, 0x52a90000) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) 36.972705454s ago: executing program 3 (id=109): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (fail_nth: 1) 36.891303248s ago: executing program 3 (id=110): r0 = socket$kcm(0xa, 0x1, 0x106) syz_usb_connect(0x2, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x10007, 0xbc03) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0x80dc5521, &(0x7f00000001c0)=""/137) mkdir(&(0x7f0000000080)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x4b, 0x0, 0x4) 35.72027034s ago: executing program 3 (id=124): socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000080)=ANY=[], 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x1, @remote}, {0x2, 0x4e20, @multicast1}, 0x26e647b9a7ad1610, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x5}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x4002014) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 35.431287885s ago: executing program 3 (id=126): sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24040004) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x7aaf804d}, {{0x0, 0x0, 0x0}, 0xd}, {{0x0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x81}], 0x4, 0x12002, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x93) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @loopback, 0x3}, 0x1c, 0x0}, 0x440e0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 35.375283917s ago: executing program 32 (id=126): sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24040004) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x7aaf804d}, {{0x0, 0x0, 0x0}, 0xd}, {{0x0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x81}], 0x4, 0x12002, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x93) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @loopback, 0x3}, 0x1c, 0x0}, 0x440e0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.373178536s ago: executing program 2 (id=415): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0xc, "d92984ad1ca44c226af5160e961711a000f2170e65e3f50327e4221c0000000000195f0000000000005700", 0x100000100000003c}, 0x60) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x62) (fail_nth: 1) 5.300814615s ago: executing program 2 (id=416): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x80800, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000480)=0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r2, &(0x7f00000024c0)=""/4122, 0x101a, 0x1000000000000095) r3 = openat(r2, &(0x7f0000000080)='./proc/file0\x00', 0x2419c025f81ff7f4, 0x81) write(r3, &(0x7f0000000200)='1\n', 0x2) close(r3) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000240)=0x2, 0x4) setsockopt(r4, 0x84, 0x7d, &(0x7f0000000280)="0000000001000000", 0x8) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f00000002c0)=0x1, 0x4) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000300)={0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1}, 0xe) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback, 0x8}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$KDGETLED(r1, 0x89f3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000000040)={r8, 0xd}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000001f80)={0x0, 0x6, 0x10, 0x2, 0x5, 0x0, 0x0, 0x86d, {0x0, @in6={{0xa, 0x4e21, 0x7, @remote, 0x8000}}, 0x200, 0x80, 0x3, 0x50000, 0x6}}, &(0x7f0000002040)=0xb0) sendmmsg$inet_sctp(r2, &(0x7f0000002140)=[{&(0x7f0000000340)=@in={0x2, 0x4e20, @loopback}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000380)="42a301d6780fd81378ded9ab6d9a6ac75848b6faa762900213d46159d8f3ec48c546463da5e0d7764368d7cbf20ef616fdd45190b2ec5888704715c0a3e57ecebe5312f1b175f96147b3ff0972f3469c101d8db1da3345d21a21e04ddd6b0b66175b3e6374de1cab5de45edeb1447ae18864663ba2f2a274d5726f3df8d344fe86ac9b5983b8d93aeab1fbd1471aeb88a50ed3ab3680b6e80fc846468039a79c98f318f32c43d226d08081874098051d8afc4e8fe9f0947242a34ea392bb64038b9e2fc95b5098268cd01d6e562fe27e26a6efc0c23be782ac6c010324e96655", 0xe0}, {&(0x7f00000004c0)="df358e3fdfa280edede679ea1b8f67b5f53dafc75f12e678ec6067607958c5028217ac9b37e85eec876299d36bcfb5d31091c9d564f8591f8d1a3578eb7e6f26a7a932231264fe7e2fcf2a894cc49bf9658648e9cdbf31", 0x57}, {&(0x7f0000000540)="b35cf26f8db61da63ab4355d2cc8c125e0fc0878807313ef4acde1de87ac2eb735e16f8a508dbc0b23ab768c99196046ff3593c21eb869122c1c25861e7bdc2c8ca37ef751b41fb9e226b195e9e9fd777d0539ec7008fcf8fce2d5f2d7557ffb355c22c8390e385b8e814084acc2b92b5f1dc968ebe689aa7ef7af9e7ff9c1deef1111bac914e607522ab53e3d54a7c0d59de6c1d449987bfeee4f7c9c72a2a64fd5ea4ae5a16ce31bd889a3f83ab1b4f4a5fbef77fa3fb9a13f846a3525d9c3bc3ffaa26823eccdbade1c", 0xcb}, {&(0x7f0000000640)="294039d0de1fd510f256f78b6dcd0bd0663db6a4d3ba95a9bb36ca3dc7a6453be24cb197b6abbb02e79741b6547fe7b14ccbee5e03c751160bb0228f465580793fba7760cab586d3981f25dca50ebba1371014c13fac7957eb22c85e46bfb8321ac821fc3ab7414b341f9c25be4beef3f1543248fbda095c5d49eaa25f8e5ee96eea23a3a05349e1660c126a96f8", 0x8e}, {&(0x7f0000000700)="e2f54bc38dfe61b971f25d2988f2e1c77241d16c4056ebe86ca0609c6265f9a02537c53524a74e5b67c7295494fd5eab0559d099752105b6d8aac70027ae7a4c7b05d324925d2ecd515438d901786db9bd92d77af81e91d7ec9903e852e93ebbeb5c913eee076b27838bc80f05ecbc6572c8dacaf6f0f80ddd612d21c03d3020e5a43c5b7c4f9e6b43ee1d173e", 0x8d}], 0x5, &(0x7f0000000840)=[@authinfo={0x18, 0x84, 0x6, {0x8}}], 0x18}, {&(0x7f0000000880)=@in6={0xa, 0x4e20, 0x8000, @empty, 0xff}, 0x1c, &(0x7f0000000940)=[{&(0x7f00000008c0)="7c4653bb7781a12ccd6cd9a71af0b890b809ea44ba5dc403fb4203d1e47f91f47f8ae8b5f82c56a0df454c4f410d7aa9dee9f56643ae8abdc91dc31cdd7e0d97d36ee3a633b762913dccb4214715122e096788a1c048c7c3c16dce6edffec444001151043fd33bb03520", 0x6a}], 0x1, &(0x7f0000000980)=[@init={0x18, 0x84, 0x0, {0x1, 0x1, 0x59, 0x7b8}}], 0x18, 0x10}, {&(0x7f00000009c0)=@in6={0xa, 0x4e22, 0x9, @mcast2, 0x7ff}, 0x1c, &(0x7f0000001c80)=[{&(0x7f0000000a00)="26c933292bb156f769ee19b4a0b40656ec666eda889414a36a1a0925f929d59115a57b3b678fffad9b5483d995940bd6ff5f07176b5e14e5f0f6838afe30c6e7196a323e9ab3b08d20766b0a7eb01b153987d0a6f0e26e5afd", 0x59}, {&(0x7f0000000a80)="f75c5c4254d9b55c8c8df946975405b0ac568e69140d9994712fbbf7ac1377f8108ea0aa5fe1cf282bd0d36280b975b739269e3ac0b3f3bfd39cdbc292fee7f7b936abc580361c972d716e16e8b17ae0465eaddf1e05367a0ce20a7c872b8111cb9901a186ae7d65578364f97de22f1faa3d9beb3419628592f4e24fe9baf98e699d0901339232d662dc296e1a73e956a591b03b5a4b2be37b0e5c7ec4aedb4a2b11cc914dd104955408939f8de6", 0xae}, {&(0x7f0000000b40)="bef654ca18265cb11e921e6aabc086f4f69fefc38cc70b3ded8eb5c9a1df3e4aa17831f9ddcfcfd064eeaab2f5241d4fb699c2afaa26083f19d86060f5c9a71d5b5e93386ea30c4012216a4bb24ee6029c41f302d28bb8f8d921294559e5af9cffc784c5e0a1c561784a5fb8602fd0a79c4e9c46753abb54af5fdbdc514fd375602c0cee4efee666164afbf99fed4031e27b0931de00ddf37be43a8e4405cc5abbd1e33c5858746b9a4506dc9dbb684bc3a5009a9687d8a7da4ee423a11c3aa184a3ece6400b426852c668ca", 0xcc}, {&(0x7f0000000c40)="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", 0x1000}, {&(0x7f0000001c40)="b82ee9ff140ff327ae517901b31e2bf58bd9b48734270d27b8f2ade02fdde65e877dcb", 0x23}], 0x5, &(0x7f0000001d00)=[@dstaddrv4={0x18, 0x84, 0x7, @rand_addr=0x64010101}, @init={0x18, 0x84, 0x0, {0x8000, 0x2, 0xffff, 0x1ff}}, @dstaddrv4={0x18, 0x84, 0x7, @loopback}, @dstaddrv6={0x20, 0x84, 0x8, @mcast1}, @init={0x18, 0x84, 0x0, {0x101, 0x10, 0x391}}, @dstaddrv6={0x20, 0x84, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}}], 0xa0, 0x8054}, {&(0x7f0000001dc0)=@in6={0xa, 0x4e21, 0x2, @remote, 0x80}, 0x1c, &(0x7f0000001f40)=[{&(0x7f0000001e00)="603a98e5b2d3c6ee79f03235b9fe4c4647c0692b0598b146740557550d646179f0e73c601634a8d2ea5634fed0a258644f9e98df4e", 0x35}, {&(0x7f0000001e40)="81ac35f67ea83ced0fe2bcbef7871c36ee6c1828ef4ddcdb0054cc7df69a1483b3523faf6b1012986d65fc639df8f4d49115694ce19a0d1a41e6953b01f6814c6b22a47def37856bf5e3c792443742c568a9d319b69e73d42e945881f9cf9efb9ba698efc6e78f8ee984c9139ef34ebe3733147a5cb9dd2e3d651af66dd58ac4fa6ae2e96b5eb14c0e434004d6519bb7c78975ff87dc9ec378fad7f3797927ea40cc5efd8be9bd619ab831869cd31011a382823b9ddbe34c0af2b21dcf20a68bfcf5ab35ed5f05", 0xc7}], 0x2, &(0x7f0000002080)=[@init={0x18, 0x84, 0x0, {0x5, 0x3, 0x0, 0x8}}, @sndrcv={0x30, 0x84, 0x1, {0x81, 0x8, 0x4, 0x32f, 0xfffffff7, 0xffffffff, 0x800, 0x5, r8}}, @dstaddrv4={0x18, 0x84, 0x7, @multicast1}, @sndrcv={0x30, 0x84, 0x1, {0x7, 0x6, 0x8005, 0x8, 0x7, 0x0, 0x1ff, 0x0, r9}}, @dstaddrv6={0x20, 0x84, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}}], 0xb0}], 0x4, 0x20000800) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x25dfdbff, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000000000c6000000000001019500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r5, @sched_cls}, 0x94) 4.341179043s ago: executing program 2 (id=421): r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000340)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x42446bf2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', 0x0}) ioctl(r3, 0x8b1a, &(0x7f0000000040)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r4, r2, 0x80000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xffffffffffffff9a, 0x1000000, 0x0}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x490420, 0x2}}, 0x50) syz_fuse_handle_req(r5, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x22401, 0x0) fallocate(r7, 0x1, 0x460e, 0x3) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0x8, 0x0, &(0x7f0000000480)=[@decrefs], 0x0, 0x0, 0x0}) r8 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000d, 0x11, r8, 0x0) pipe2(&(0x7f0000000100)={0x0, 0x0}, 0x80000) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x61) read(r9, &(0x7f0000000000)=""/11, 0xb) splice(r0, &(0x7f0000000040)=0x10, r10, 0x0, 0x807, 0x0) 4.239425938s ago: executing program 0 (id=422): setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) readlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0xb4) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009bbd8b08e80430ffd1a601220301090222000100000000090400000129fddd000905e2ffbe"], 0x0) r2 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000004e40)={0x4, 0x1, 0xeffe, 0xc, "0b4538588ced4bb6000000090000000000000073f2001001009c00"}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e21, @rand_addr=0x64010102}}, [0x1, 0x4, 0x0, 0x7c2b, 0x3, 0x100, 0x5, 0x2, 0x81, 0x8000000000000001, 0x800, 0x8000000000000000, 0x51ff, 0x3, 0x7]}, &(0x7f0000000540)=0x100) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000580)={r4, 0x91}, 0x8) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r7 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e, 0x1, 0x0, 0x2c00}, 0x30, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r7, 0x1, &(0x7f0000000000)={0x2102, r6}, 0x1) r8 = socket$inet_sctp(0x2, 0x1, 0x84) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r8, 0x84, 0x71, &(0x7f0000000080)={r10, 0x1}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f00000005c0)={r10, @in={{0x2, 0x4e21, @remote}}}, 0x84) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000280)={{0x9000, 0x0, 0xc, 0x6, 0x4, 0xa, 0x3, 0x6, 0x0, 0x1, 0x3, 0x3}, {0x2, 0x1000, 0xe, 0x13, 0x1, 0x8, 0x3, 0x7, 0x0, 0x46, 0x6}, {0x1, 0x315a4c100da1da58, 0x4, 0xf, 0x5, 0xff, 0xc6, 0x6, 0x3, 0x6, 0x1, 0x3}, {0x3000, 0x4000, 0x1a, 0xc, 0x7f, 0x6, 0x8, 0x80, 0x9, 0x2, 0xf, 0x6}, {0x9000, 0x8000000, 0x0, 0xd, 0x59, 0x2d, 0x5, 0xc, 0xfc, 0x0, 0x3, 0xe5}, {0x2, 0x8092000, 0x8, 0xbd, 0x6, 0x7, 0x12, 0x1, 0xbf, 0x18, 0x2, 0x4}, {0x1, 0x1, 0xc, 0x9, 0x0, 0xf, 0x10, 0x3, 0x4, 0x0, 0x80, 0x9}, {0x26000, 0xffff, 0x10, 0x4, 0x3, 0x3, 0x0, 0xf9, 0x1, 0xfc, 0x0, 0xfe}, {0x4, 0xedd8}, {0xffff1000, 0x17}, 0x4004000f, 0x0, 0xd000, 0x100, 0x100000002, 0x0, 0xdddd1000, [0x5, 0x3, 0x4000000000000009, 0x7]}) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f00000002c0)=[@code={0xa, 0x5d, {"b8010000000f01c166bad104ec0fdb4d70b99f030000b8feffffffba000000000f300f20578f292098953200000066baf80cb8e68af88def66bafc0c66ed2666420fc737ff4d49c4c155f3e9"}}], 0x5d}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.355519864s ago: executing program 4 (id=439): setns(0xc9, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x2000c015}, 0x2404c8c0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020f0000100000000000000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000000000000000000000000000000000000000000000000000000fc0200000000000000000000000000ff030006000000000002001a"], 0x80}}, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000200)={0x8, r0, 0x1}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2c, '\x00', 0x0, 0x0, r2}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c00)=ANY=[@ANYBLOB="64010000100001000400000000000000fc010000000000000000000000000000000000000000000000000000000000000000ecdf00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r4], 0x164}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x1a, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x4, 0x200008, 0x10000, 0x20001}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.17081722s ago: executing program 4 (id=441): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x20001, 0xcb) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0xe0000000}) io_setup(0x4fe, &(0x7f0000000100)=0x0) io_submit(r3, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x40, r0, &(0x7f0000000200)='8', 0x1, 0x80}]) (fail_nth: 1) 2.0552055s ago: executing program 4 (id=442): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x0, 0x3c}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r1, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000740)}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r2}, 0x20) ioctl$NILFS_IOCTL_GET_SUSTAT(r3, 0x80306e85, &(0x7f0000000240)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x481, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) close(r4) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f00000001c0), 0x12) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x5) syz_kvm_setup_cpu$x86(r5, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x70, &(0x7f0000000080)=[@efer={0x2, 0x800}], 0x1) ioctl$KVM_RUN(r8, 0xae80, 0x0) 1.850521652s ago: executing program 4 (id=445): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/kvm/kvm_entry/enable\x00', 0x2, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000340)={0x30, 0x5, 0x0, {0x0, 0x6, 0x4, 0x8d5a}}, 0x30) 1.710980767s ago: executing program 4 (id=449): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='md0', 0x3) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100"}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40280, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl(r4, 0x4048aecb, &(0x7f0000000100)) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/block/md0/md/metadata_version\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) write(r5, &(0x7f0000000280), 0x0) write(0xffffffffffffffff, &(0x7f0000000300)='raid', 0x4) write(r5, &(0x7f0000000380)='2', 0x1) 1.521267203s ago: executing program 4 (id=452): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a61b010001000000000109022000010100803209"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000080)={0x20, 0x13}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x1, 0x802) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1.179403028s ago: executing program 2 (id=455): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x28011, r1, 0x7808b000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/vlan/config\x00') pread64(r2, &(0x7f0000003900)=""/80, 0x50, 0x5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000004900)={0x0, 0x0, &(0x7f00000048c0)={&(0x7f0000003600)={0x14, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x800) 1.120837242s ago: executing program 0 (id=456): pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async, rerun: 64) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) (rerun: 64) ioctl$FE_GET_PROPERTY(r2, 0x80106f53, &(0x7f0000000380)={0x5, &(0x7f00000000c0)=[{0xb, '\x00', @buffer={"58f0b7628ac5a9d79a97cf2a95a276c88955aa00", 0x20}, 0x6}, {0xd, '\x00', @data=0x7, 0x5}, {0x13, '\x00', @st={0x4, [{0x3, @svalue=0x400000000000007}, {0x3, @uvalue=0x8}, {0x2, @uvalue=0xa}, {0x3, @uvalue=0x1}]}, 0x3}, {0x44}, {0x26, '\x00', @data=0x8, 0x3}]}) ioctl$FE_GET_PROPERTY(r2, 0x80106f53, &(0x7f0000000600)={0x14, &(0x7f00000003c0)=[{0x2a, '\x00', @data=0x8, 0x6}, {0x26, '\x00', @buffer={"10e4a2a1871131848dd4e1638567ed9676fcd8b33004cd70a30d3dccb034bbf6", 0x20}, 0x7}, {0x29, '\x00', @buffer={"4f419478a1c532c108386e0ed8d7a3b9e9b5b1afdc44aaa44e803a6450ce520c", 0x20}, 0xcb4}, {0x2f, '\x00', @data=0xfffffff8, 0x9}, {0x11, '\x00', @buffer={"3742ca19fad1dad38579dceaa0c49853d763a81b6f5d2280081be791e175cf9d", 0x20}, 0xff}, {0x15, '\x00', @st={0x4, [{0x3, @uvalue=0x9}, {0x1, @uvalue=0x9}, {0x2, @uvalue=0x5}, {0x2, @uvalue=0x7}]}, 0x3}, {0x3b, '\x00', @data=0xffff, 0x101}]}) (async) r3 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000280)="d2", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r0, 0xdf) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r1, 0x5e) 1.100760733s ago: executing program 0 (id=457): socket$nl_route(0x10, 0x3, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat(r0, 0x0, 0x202200, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1d084, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 979.374389ms ago: executing program 0 (id=458): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x28011, r1, 0x7808b000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/vlan/config\x00') pread64(r2, &(0x7f0000003900)=""/80, 0x50, 0x5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000004900)={0x0, 0x0, &(0x7f00000048c0)={&(0x7f0000003600)={0x14, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x800) (fail_nth: 1) 924.102269ms ago: executing program 2 (id=459): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x1c, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x1c, 0x0, 0x3, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004040}, 0x8000) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 781.001786ms ago: executing program 0 (id=460): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000280)=[@code={0xa, 0x5a, {"0f380a669766ba6100b000ee2309c0da00008c000000ba000000000f30c4827941fac4e1f96e42e46505e7ee1921b9500b00000f328fe9209b7ce100c403790cdeb8010000000f01d9"}}], 0x5a}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000000c0)={0x4000003}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x1, 0xc, 0x6, 0x3, 0x40, 0x2, 0x42, 0x9, 0x1, 0x4, 0x2, 0x8, 0x4}, {0x1, 0x8080, 0x7, 0x0, 0x8, 0x7, 0x49, 0xff, 0x2, 0x1, 0x9, 0xf, 0x20000000006}, {0x2, 0x5, 0x5, 0x84, 0x8, 0x7, 0xfd, 0x40, 0x5, 0x1, 0x2, 0x3}], 0xf87}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 1) 711.252956ms ago: executing program 2 (id=461): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) readv(r0, &(0x7f0000001400)=[{&(0x7f0000002700)=""/4106, 0x100a}], 0x1) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb628678", 0x1e) 540.505565ms ago: executing program 0 (id=463): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x0, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0, 0x4}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x7a, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = syz_clone(0x4820000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) ioctl$FITRIM(r2, 0xff0a, 0x0) syz_usb_disconnect(0xffffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20846, 0x2) syz_kvm_setup_cpu$x86(r4, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000240)="c4e1a9d83d00000000c4c1cf2a79fdb9a80a0000b807000000ba000000000f30c4e11d73d9069ae0235f8d6d000f20c035020000000f22c00f79199a77000000a9002e65f30fbd934230000066bad10466b8060066ef"}], 0x1, 0x60, 0x0, 0x40) write$P9_RLERRORu(r4, &(0x7f0000000240)=ANY=[], 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$unix(0x1, 0x2, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r8, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000300)={0x38, r10, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x0, 0x4d}}}}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0x4}, @NL80211_ATTR_MAC={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x800) r12 = socket$packet(0x11, 0x3, 0x300) bind$packet(r12, &(0x7f00000004c0)={0x11, 0x300, r7, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) write(r12, &(0x7f0000000500)="0802110000010802110000000800", 0x5ea) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r4, 0x0) 481.028025ms ago: executing program 1 (id=464): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f00008aa000/0x400000)=nil) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x1, 0x0, 0xffffffffffffffff, 0x7, 0x80000001000, 0x79, 0x8000000001002, 0x9, 0x6, 0x6, 0xfffffffffffffffa, 0x4000002373, 0x80000000008bd9, 0xfffffffffffffefd, 0x7f, 0x800000000001f], 0x60000, 0x386343}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x44002, 0x0) 169.143575ms ago: executing program 1 (id=465): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20a40, 0x0) r1 = dup(r0) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r1, 0x4018aee2, &(0x7f0000000340)=@attr_pmu_filter={0x0, 0x1, 0x1, 0x0}) 168.767185ms ago: executing program 1 (id=466): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20a40, 0x0) r1 = dup(r0) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r1, 0x4018aee2, &(0x7f0000000340)=@attr_pmu_filter={0x0, 0x1, 0x1, 0x0}) (fail_nth: 1) 89.923953ms ago: executing program 1 (id=467): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x7, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1=0xac14140f}, {0x4e24, 0x4e20, 0x8}}}}}, 0x0) 89.102862ms ago: executing program 1 (id=468): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x7, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000000c0)={0x0, 0xda, "49fed396129f80f3a8b4ad1b186f76086fb01ce485232d7cafe6b8bd6a0da9a055661c304c62cebc207a95fb208a2922d0cbe38a1530b64020e671830ce9f206e55d568eef615d70785355b75f195d8897732ea8d10d29a54ddc144ac6419e0cfa7b0ff0140b96fb4c19edb8d064310ed3923c2a65097d69f300f46c1029271145873981282c49f70309b3c8b17dac17b8936e7ad77cac2adba3e570e877965d752a148fca6c638c81fac12b34c6e4b44fed0d88da31f460d100468b8ac9e5822dba71ce7691e8525d352fa587a5a21e8fa9ffc518ac145976ae"}, &(0x7f00000001c0)=0xe2) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(r2, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000840), 0x0, 0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000200)={r1, 0x8}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1=0xac14140f}, {0x4e24, 0x4e20, 0x8}}}}}, 0x0) 0s ago: executing program 1 (id=469): openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x80400, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001c00357428bd7000fed3df2502000000", @ANYRES32, @ANYBLOB="080026040a000100000000000000000008000f0005"], 0x30}, 0x1, 0x0, 0x0, 0x240400c0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/target/core/rd_mcp_0\x00', 0x1ed) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000500)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000180), 0x0) openat(r0, 0x0, 0x202200, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1d084, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r2}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r4 = socket(0x11, 0x2, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r4, 0x107, 0x17, 0x0, &(0x7f0000000240)) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x13, &(0x7f0000000200)=0x1, 0x4) write(r1, &(0x7f00000004c0)='\n', 0x1) 0s ago: executing program 1 (id=470): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) r2 = getpgid(0x0) prlimit64(r2, 0x7, &(0x7f0000000040)={0x9, 0x23}, &(0x7f00000000c0)) ioctl$USBDEVFS_CONNECTINFO(r1, 0x80045520, 0x0) timer_settime(r0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000840), 0x0, 0x1) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) (async) syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) (async) getpgid(0x0) (async) prlimit64(r2, 0x7, &(0x7f0000000040)={0x9, 0x23}, &(0x7f00000000c0)) (async) ioctl$USBDEVFS_CONNECTINFO(r1, 0x80045520, 0x0) (async) timer_settime(r0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) syz_open_dev$dvb_frontend(&(0x7f0000000840), 0x0, 0x1) (async) kernel console output (not intermixed with test programs): 0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 68.989426][ T6530] ? ksys_write+0x1ac/0x250 [ 68.989439][ T6530] ? __pfx_ksys_write+0x10/0x10 [ 68.989453][ T6530] __x64_sys_sendto+0xe0/0x1c0 [ 68.989487][ T6530] ? do_syscall_64+0xae/0x790 [ 68.989500][ T6530] ? lockdep_hardirqs_on+0x7d/0x110 [ 68.989511][ T6530] do_syscall_64+0x123/0x790 [ 68.989524][ T6530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.989535][ T6530] RIP: 0033:0x7f618cb9e159 [ 68.989545][ T6530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.989555][ T6530] RSP: 002b:00007f618d9af028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 68.989566][ T6530] RAX: ffffffffffffffda RBX: 00007f618ce25fa0 RCX: 00007f618cb9e159 [ 68.989572][ T6530] RDX: 000000000000003c RSI: 0000200000000000 RDI: 0000000000000003 [ 68.989579][ T6530] RBP: 00007f618d9af090 R08: 0000000000000000 R09: 0000000000000000 [ 68.989585][ T6530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.989591][ T6530] R13: 00007f618ce26038 R14: 00007f618ce25fa0 R15: 00007ffd5d9f9068 [ 68.989606][ T6530] [ 69.220639][ T6536] FAULT_INJECTION: forcing a failure. [ 69.220639][ T6536] name failslab, interval 1, probability 0, space 0, times 0 [ 69.220671][ T6536] CPU: 2 UID: 0 PID: 6536 Comm: syz.4.197 Not tainted syzkaller #0 PREEMPT(full) [ 69.220693][ T6536] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 69.220704][ T6536] Call Trace: [ 69.220712][ T6536] [ 69.220720][ T6536] dump_stack_lvl+0x100/0x190 [ 69.220752][ T6536] should_fail_ex.cold+0x5/0xa [ 69.220780][ T6536] should_failslab+0xc2/0x120 [ 69.220811][ T6536] kmem_cache_alloc_noprof+0x92/0x6a0 [ 69.220834][ T6536] ? do_getname+0x35/0x390 [ 69.220856][ T6536] do_getname+0x35/0x390 [ 69.220878][ T6536] do_sys_openat2+0xc7/0x1e0 [ 69.220907][ T6536] ? __pfx_do_sys_openat2+0x10/0x10 [ 69.220935][ T6536] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 69.220958][ T6536] ? __fget_files+0x21f/0x3d0 [ 69.220984][ T6536] __x64_sys_openat+0x12d/0x210 [ 69.221013][ T6536] ? __pfx___x64_sys_openat+0x10/0x10 [ 69.221038][ T6536] ? ksys_write+0x1ac/0x250 [ 69.221068][ T6536] do_syscall_64+0x123/0x790 [ 69.221092][ T6536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.221112][ T6536] RIP: 0033:0x7f620975e98e [ 69.221126][ T6536] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 69.221140][ T6536] RSP: 002b:00007f620a637f18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 69.221159][ T6536] RAX: ffffffffffffffda RBX: 00007f620a6386c0 RCX: 00007f620975e98e [ 69.221172][ T6536] RDX: 0000000000000000 RSI: 00007f62098347a6 RDI: ffffffffffffff9c [ 69.221184][ T6536] RBP: 00007f620a638090 R08: 0000000000000000 R09: 0000000000000000 [ 69.221193][ T6536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.221202][ T6536] R13: 00007f6209a26038 R14: 00007f6209a25fa0 R15: 00007fffe09c6738 [ 69.221227][ T6536] [ 69.562185][ T67] Bluetooth: hci2: command tx timeout [ 71.254790][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.254856][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.651945][ T67] Bluetooth: hci2: command tx timeout [ 74.504563][ T43] kauditd_printk_skb: 5 callbacks suppressed [ 74.504574][ T43] audit: type=1400 audit(1791026406.642:867): avc: denied { write } for pid=6541 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.555081][ T43] audit: type=1400 audit(1791026406.692:868): avc: denied { write } for pid=6544 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.463705][ T43] audit: type=1400 audit(1791026407.602:869): avc: denied { write } for pid=6547 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.507387][ T43] audit: type=1400 audit(1791026407.642:870): avc: denied { write } for pid=6550 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.364647][ T901] cfg80211: failed to load regulatory.db [ 76.639340][ T43] audit: type=1400 audit(1791026408.772:871): avc: denied { write } for pid=6554 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.707144][ T43] audit: type=1400 audit(1791026408.842:872): avc: denied { write } for pid=6557 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.811781][ T43] audit: type=1400 audit(1791026408.952:873): avc: denied { write } for pid=6560 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.869340][ T43] audit: type=1400 audit(1791026409.002:874): avc: denied { write } for pid=6563 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.236964][ T43] audit: type=1400 audit(1791026409.372:875): avc: denied { write } for pid=6566 comm="syz.1.199" name="nullb" dev="configfs" ino=4940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 77.237624][ T43] audit: type=1400 audit(1791026409.372:876): avc: denied { create } for pid=6566 comm="syz.1.199" name="rnullb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 77.239454][ T6571] Bluetooth: MGMT ver 1.23 [ 77.247430][ T6571] fuse: fd is not a fuse device [ 77.255536][ T6569] netlink: 60 bytes leftover after parsing attributes in process `syz.1.199'. [ 77.258753][ T6569] null_blk: rnullb0: using native zone append [ 77.305449][ T6569] null_blk: disk rnullb0 created [ 77.976088][ T67] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 78.384086][ T6642] FAULT_INJECTION: forcing a failure. [ 78.384086][ T6642] name failslab, interval 1, probability 0, space 0, times 0 [ 78.384161][ T6642] CPU: 1 UID: 0 PID: 6642 Comm: syz.0.221 Tainted: G L syzkaller #0 PREEMPT(full) [ 78.384186][ T6642] Tainted: [L]=SOFTLOCKUP [ 78.384192][ T6642] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 78.384202][ T6642] Call Trace: [ 78.384218][ T6642] [ 78.384225][ T6642] dump_stack_lvl+0x100/0x190 [ 78.384264][ T6642] should_fail_ex.cold+0x5/0xa [ 78.384289][ T6642] should_failslab+0xc2/0x120 [ 78.384320][ T6642] __kmalloc_noprof+0xfc/0x840 [ 78.384339][ T6642] ? rcu_is_watching+0x13/0xc0 [ 78.384364][ T6642] ? tomoyo_realpath_from_path+0xb6/0x690 [ 78.384395][ T6642] tomoyo_realpath_from_path+0xb6/0x690 [ 78.384426][ T6642] tomoyo_path_number_perm+0x23c/0x580 [ 78.384446][ T6642] ? tomoyo_path_number_perm+0x22e/0x580 [ 78.384469][ T6642] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 78.384500][ T6642] ? __lock_acquire+0x5c0/0x1f40 [ 78.384532][ T6642] ? __fget_files+0x34/0x3d0 [ 78.384557][ T6642] ? find_held_lock+0x2b/0x80 [ 78.384581][ T6642] ? hook_file_ioctl_common+0x140/0x440 [ 78.384615][ T6642] ? __fget_files+0x21f/0x3d0 [ 78.384642][ T6642] security_file_ioctl+0xd3/0x230 [ 78.384666][ T6642] __x64_sys_ioctl+0xb7/0x210 [ 78.384688][ T6642] do_syscall_64+0x123/0x790 [ 78.384714][ T6642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.384732][ T6642] RIP: 0033:0x7fec85d9e159 [ 78.384746][ T6642] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.384762][ T6642] RSP: 002b:00007fec86bd2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 78.384784][ T6642] RAX: ffffffffffffffda RBX: 00007fec86025fa0 RCX: 00007fec85d9e159 [ 78.384795][ T6642] RDX: 0000200000000140 RSI: 00000000c0d05605 RDI: 0000000000000003 [ 78.384806][ T6642] RBP: 00007fec86bd2090 R08: 0000000000000000 R09: 0000000000000000 [ 78.384816][ T6642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.384826][ T6642] R13: 00007fec86026038 R14: 00007fec86025fa0 R15: 00007fff96e68818 [ 78.384852][ T6642] [ 78.384858][ T6642] ERROR: Out of memory at tomoyo_realpath_from_path. [ 78.669917][ T6663] block nbd0: Receive control failed (result -32) [ 78.725568][ T6666] FAULT_INJECTION: forcing a failure. [ 78.725568][ T6666] name failslab, interval 1, probability 0, space 0, times 0 [ 78.725601][ T6666] CPU: 3 UID: 0 PID: 6666 Comm: syz.1.228 Tainted: G L syzkaller #0 PREEMPT(full) [ 78.725627][ T6666] Tainted: [L]=SOFTLOCKUP [ 78.725634][ T6666] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 78.725645][ T6666] Call Trace: [ 78.725651][ T6666] [ 78.725659][ T6666] dump_stack_lvl+0x100/0x190 [ 78.725691][ T6666] should_fail_ex.cold+0x5/0xa [ 78.725726][ T6666] should_failslab+0xc2/0x120 [ 78.725754][ T6666] __kmalloc_noprof+0xfc/0x840 [ 78.725777][ T6666] ? rcu_is_watching+0x13/0xc0 [ 78.725805][ T6666] ? tomoyo_realpath_from_path+0xb6/0x690 [ 78.725839][ T6666] tomoyo_realpath_from_path+0xb6/0x690 [ 78.725874][ T6666] tomoyo_path_number_perm+0x23c/0x580 [ 78.725897][ T6666] ? tomoyo_path_number_perm+0x22e/0x580 [ 78.725922][ T6666] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 78.725956][ T6666] ? __lock_acquire+0x5c0/0x1f40 [ 78.725992][ T6666] ? __fget_files+0x34/0x3d0 [ 78.726019][ T6666] ? find_held_lock+0x2b/0x80 [ 78.726070][ T6666] ? hook_file_ioctl_common+0x140/0x440 [ 78.726108][ T6666] ? __fget_files+0x21f/0x3d0 [ 78.726138][ T6666] security_file_ioctl+0xd3/0x230 [ 78.726166][ T6666] __x64_sys_ioctl+0xb7/0x210 [ 78.726192][ T6666] do_syscall_64+0x123/0x790 [ 78.726218][ T6666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.726238][ T6666] RIP: 0033:0x7f88dd19e159 [ 78.726256][ T6666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.726273][ T6666] RSP: 002b:00007f88de112028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 78.726294][ T6666] RAX: ffffffffffffffda RBX: 00007f88dd425fa0 RCX: 00007f88dd19e159 [ 78.726308][ T6666] RDX: 0000200000000380 RSI: 0000000040106f52 RDI: 0000000000000003 [ 78.726321][ T6666] RBP: 00007f88de112090 R08: 0000000000000000 R09: 0000000000000000 [ 78.726333][ T6666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.726345][ T6666] R13: 00007f88dd426038 R14: 00007f88dd425fa0 R15: 00007ffecd620378 [ 78.726374][ T6666] [ 78.726382][ T6666] ERROR: Out of memory at tomoyo_realpath_from_path. [ 78.726418][ T6666] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 79.125922][ T6678] netlink: 28 bytes leftover after parsing attributes in process `syz.1.232'. [ 79.125939][ T6678] netlink: 28 bytes leftover after parsing attributes in process `syz.1.232'. [ 79.351180][ T6683] ima: policy update failed [ 79.404864][ T6690] FAULT_INJECTION: forcing a failure. [ 79.404864][ T6690] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 79.404889][ T6690] CPU: 1 UID: 0 PID: 6690 Comm: syz.2.238 Tainted: G L syzkaller #0 PREEMPT(full) [ 79.404905][ T6690] Tainted: [L]=SOFTLOCKUP [ 79.404909][ T6690] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 79.404916][ T6690] Call Trace: [ 79.404920][ T6690] [ 79.404925][ T6690] dump_stack_lvl+0x100/0x190 [ 79.404946][ T6690] should_fail_ex.cold+0x5/0xa [ 79.404966][ T6690] _copy_to_user+0x32/0xd0 [ 79.404982][ T6690] simple_read_from_buffer+0xcb/0x170 [ 79.405000][ T6690] proc_fail_nth_read+0x1af/0x230 [ 79.405017][ T6690] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 79.405034][ T6690] ? rw_verify_area+0xce/0x6d0 [ 79.405045][ T6690] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 79.405061][ T6690] vfs_read+0x1e4/0xb40 [ 79.405074][ T6690] ? lock_acquire+0x1d1/0x380 [ 79.405087][ T6690] ? __fget_files+0x34/0x3d0 [ 79.405124][ T6690] ? __pfx_vfs_read+0x10/0x10 [ 79.405136][ T6690] ? find_held_lock+0x2b/0x80 [ 79.405153][ T6690] ? __fget_files+0x215/0x3d0 [ 79.405171][ T6690] ? __fget_files+0x21f/0x3d0 [ 79.405191][ T6690] ksys_read+0x12a/0x250 [ 79.405207][ T6690] ? __pfx_ksys_read+0x10/0x10 [ 79.405225][ T6690] do_syscall_64+0x123/0x790 [ 79.405239][ T6690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.405251][ T6690] RIP: 0033:0x7f618cb5e98e [ 79.405260][ T6690] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 79.405271][ T6690] RSP: 002b:00007f618d9aefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 79.405282][ T6690] RAX: ffffffffffffffda RBX: 00007f618d9af6c0 RCX: 00007f618cb5e98e [ 79.405290][ T6690] RDX: 000000000000000f RSI: 00007f618d9af0a0 RDI: 0000000000000003 [ 79.405297][ T6690] RBP: 00007f618d9af090 R08: 0000000000000000 R09: 0000000000000000 [ 79.405303][ T6690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.405310][ T6690] R13: 00007f618ce26038 R14: 00007f618ce25fa0 R15: 00007ffd5d9f9068 [ 79.405325][ T6690] [ 79.410958][ T6689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.236'. [ 79.478461][ T6698] FAULT_INJECTION: forcing a failure. [ 79.478461][ T6698] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 79.478483][ T6698] CPU: 1 UID: 0 PID: 6698 Comm: syz.1.242 Tainted: G L syzkaller #0 PREEMPT(full) [ 79.478499][ T6698] Tainted: [L]=SOFTLOCKUP [ 79.478503][ T6698] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 79.478510][ T6698] Call Trace: [ 79.478514][ T6698] [ 79.478518][ T6698] dump_stack_lvl+0x100/0x190 [ 79.478538][ T6698] should_fail_ex.cold+0x5/0xa [ 79.478555][ T6698] _copy_from_user+0x2e/0xd0 [ 79.478573][ T6698] move_addr_to_kernel+0x65/0x170 [ 79.478593][ T6698] __sys_connect+0xb5/0x170 [ 79.478608][ T6698] ? __pfx___sys_connect+0x10/0x10 [ 79.478621][ T6698] ? __fget_files+0x21f/0x3d0 [ 79.478642][ T6698] ? __pfx_ksys_write+0x10/0x10 [ 79.478658][ T6698] __x64_sys_connect+0x72/0xb0 [ 79.478672][ T6698] ? lockdep_hardirqs_on+0x7d/0x110 [ 79.478687][ T6698] do_syscall_64+0x123/0x790 [ 79.478700][ T6698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.478712][ T6698] RIP: 0033:0x7f88dd19e159 [ 79.478722][ T6698] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.478733][ T6698] RSP: 002b:00007f88de112028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 79.478746][ T6698] RAX: ffffffffffffffda RBX: 00007f88dd425fa0 RCX: 00007f88dd19e159 [ 79.478754][ T6698] RDX: 0000000000000010 RSI: 0000200000000300 RDI: 0000000000000003 [ 79.478761][ T6698] RBP: 00007f88de112090 R08: 0000000000000000 R09: 0000000000000000 [ 79.478767][ T6698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.478774][ T6698] R13: 00007f88dd426038 R14: 00007f88dd425fa0 R15: 00007ffecd620378 [ 79.478788][ T6698] [ 79.509274][ T6700] FAULT_INJECTION: forcing a failure. [ 79.509274][ T6700] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 79.509296][ T6700] CPU: 1 UID: 0 PID: 6700 Comm: syz.1.244 Tainted: G L syzkaller #0 PREEMPT(full) [ 79.509311][ T6700] Tainted: [L]=SOFTLOCKUP [ 79.509315][ T6700] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 79.509321][ T6700] Call Trace: [ 79.509325][ T6700] [ 79.509330][ T6700] dump_stack_lvl+0x100/0x190 [ 79.509351][ T6700] should_fail_ex.cold+0x5/0xa [ 79.509368][ T6700] _copy_to_user+0x32/0xd0 [ 79.509384][ T6700] simple_read_from_buffer+0xcb/0x170 [ 79.509401][ T6700] proc_fail_nth_read+0x1af/0x230 [ 79.509417][ T6700] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 79.509434][ T6700] ? rw_verify_area+0xce/0x6d0 [ 79.509445][ T6700] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 79.509460][ T6700] vfs_read+0x1e4/0xb40 [ 79.509474][ T6700] ? lock_acquire+0x1d1/0x380 [ 79.509487][ T6700] ? __fget_files+0x34/0x3d0 [ 79.509502][ T6700] ? __pfx_vfs_read+0x10/0x10 [ 79.509514][ T6700] ? find_held_lock+0x2b/0x80 [ 79.509531][ T6700] ? __fget_files+0x215/0x3d0 [ 79.509555][ T6700] ? __fget_files+0x21f/0x3d0 [ 79.509575][ T6700] ksys_read+0x12a/0x250 [ 79.509587][ T6700] ? __pfx_ksys_read+0x10/0x10 [ 79.509622][ T6700] do_syscall_64+0x123/0x790 [ 79.509639][ T6700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.509651][ T6700] RIP: 0033:0x7f88dd15e98e [ 79.509660][ T6700] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 79.509671][ T6700] RSP: 002b:00007f88de111fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 79.509683][ T6700] RAX: ffffffffffffffda RBX: 00007f88de1126c0 RCX: 00007f88dd15e98e [ 79.509690][ T6700] RDX: 000000000000000f RSI: 00007f88de1120a0 RDI: 0000000000000003 [ 79.509697][ T6700] RBP: 00007f88de112090 R08: 0000000000000000 R09: 0000000000000000 [ 79.509703][ T6700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.509710][ T6700] R13: 00007f88dd426038 R14: 00007f88dd425fa0 R15: 00007ffecd620378 [ 79.509724][ T6700] [ 79.548943][ T6705] ima: policy update failed [ 79.550826][ T43] kauditd_printk_skb: 36 callbacks suppressed [ 79.550845][ T43] audit: type=1807 audit(1791026411.682:913): action=measure UNKNOWN=func res=0 [ 79.550887][ T43] audit: type=1802 audit(1791026411.682:914): pid=6706 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=update_policy cause=invalid-policy comm="syz.1.246" res=0 errno=0 [ 79.550926][ T43] audit: type=1802 audit(1791026411.682:915): pid=6705 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.1.246" res=0 errno=0 [ 79.701503][ T10] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 79.809234][ T43] audit: type=1400 audit(1791026411.942:916): avc: denied { create } for pid=6719 comm="syz.1.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 79.819986][ T43] audit: type=1400 audit(1791026411.952:917): avc: denied { bind } for pid=6719 comm="syz.1.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 79.871554][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 79.873118][ T10] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 79.874510][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.874537][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.874556][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 79.874590][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.878361][ T10] usb 7-1: config 0 descriptor?? [ 79.904988][ T43] audit: type=1400 audit(1791026412.042:918): avc: denied { create } for pid=6722 comm="syz.4.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 79.905866][ T43] audit: type=1400 audit(1791026412.042:919): avc: denied { getopt } for pid=6722 comm="syz.4.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 80.307651][ T10] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 80.307687][ T10] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 80.307705][ T10] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 80.307722][ T10] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 80.307740][ T10] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 80.307808][ T10] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 80.307826][ T10] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 80.307843][ T10] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 80.307860][ T10] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 80.307877][ T10] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 80.320399][ T10] microsoft 0003:045E:07DA.0002: hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 80.500926][ T5840] usb 7-1: USB disconnect, device number 10 [ 80.513664][ T6732] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 80.640259][ T43] audit: type=1400 audit(1791026412.772:920): avc: denied { bind } for pid=6739 comm="syz.0.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 80.640535][ T43] audit: type=1400 audit(1791026412.772:921): avc: denied { name_bind } for pid=6739 comm="syz.0.257" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 80.640672][ T43] audit: type=1400 audit(1791026412.772:922): avc: denied { node_bind } for pid=6739 comm="syz.0.257" saddr=::1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 81.052738][ T6753] netlink: 'syz.2.260': attribute type 1 has an invalid length. [ 81.668031][ T6760] autofs: Unknown parameter 'Û½¹9#' [ 81.684726][ T6760] ALSA: seq fatal error: cannot create timer (-16) [ 81.873177][ T6766] FAULT_INJECTION: forcing a failure. [ 81.873177][ T6766] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 81.873210][ T6766] CPU: 1 UID: 0 PID: 6766 Comm: syz.0.265 Tainted: G L syzkaller #0 PREEMPT(full) [ 81.873233][ T6766] Tainted: [L]=SOFTLOCKUP [ 81.873240][ T6766] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 81.873250][ T6766] Call Trace: [ 81.873256][ T6766] [ 81.873263][ T6766] dump_stack_lvl+0x100/0x190 [ 81.873294][ T6766] should_fail_ex.cold+0x5/0xa [ 81.873320][ T6766] _copy_from_user+0x2e/0xd0 [ 81.873344][ T6766] io_submit_one+0xbd/0x1fb0 [ 81.873364][ T6766] ? __lock_acquire+0x5c0/0x1f40 [ 81.873386][ T6766] ? irqentry_exit+0x24d/0xa10 [ 81.873404][ T6766] ? lockdep_hardirqs_on+0x7d/0x110 [ 81.873425][ T6766] ? __pfx_io_submit_one+0x10/0x10 [ 81.873445][ T6766] ? lock_acquire+0x1d1/0x380 [ 81.873469][ T6766] ? __might_fault+0xc5/0x140 [ 81.873493][ T6766] ? __x64_sys_io_submit+0x1b1/0x3a0 [ 81.873511][ T6766] __x64_sys_io_submit+0x1b1/0x3a0 [ 81.873532][ T6766] ? __pfx___x64_sys_io_submit+0x10/0x10 [ 81.873563][ T6766] do_syscall_64+0x123/0x790 [ 81.873585][ T6766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.873604][ T6766] RIP: 0033:0x7fec85d9e159 [ 81.873620][ T6766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.873637][ T6766] RSP: 002b:00007fec86bd2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 81.873656][ T6766] RAX: ffffffffffffffda RBX: 00007fec86025fa0 RCX: 00007fec85d9e159 [ 81.873668][ T6766] RDX: 0000200000000700 RSI: 0000000000000001 RDI: 00007fec86b88000 [ 81.873680][ T6766] RBP: 00007fec86bd2090 R08: 0000000000000000 R09: 0000000000000000 [ 81.873691][ T6766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.873702][ T6766] R13: 00007fec86026038 R14: 00007fec86025fa0 R15: 00007fff96e68818 [ 81.873729][ T6766] [ 81.884396][ T5090] Bluetooth: hci4: command 0x1003 tx timeout [ 81.884526][ T67] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 82.015293][ T6778] netlink: 4 bytes leftover after parsing attributes in process `syz.4.270'. [ 82.027691][ T9] wacom 0003:056A:003F.0003: hidraw1: USB HID v0.00 Gamepad [syz0] on syz0 [ 82.059774][ T6774] kvm [6772]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x50 [ 82.127059][ T6786] FAULT_INJECTION: forcing a failure. [ 82.127059][ T6786] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 82.127097][ T6786] CPU: 3 UID: 0 PID: 6786 Comm: syz.4.272 Tainted: G L syzkaller #0 PREEMPT(full) [ 82.127120][ T6786] Tainted: [L]=SOFTLOCKUP [ 82.127126][ T6786] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 82.127140][ T6786] Call Trace: [ 82.127146][ T6786] [ 82.127153][ T6786] dump_stack_lvl+0x100/0x190 [ 82.127201][ T6786] should_fail_ex.cold+0x5/0xa [ 82.127224][ T6786] _copy_from_user+0x2e/0xd0 [ 82.127252][ T6786] copy_msghdr_from_user+0x9f/0x4c0 [ 82.127278][ T6786] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 82.127301][ T6786] ? lock_acquire+0x1d1/0x380 [ 82.127373][ T6786] ? get_pid_task+0x2a/0x250 [ 82.127404][ T6786] ___sys_sendmsg+0x106/0x1e0 [ 82.127428][ T6786] ? __pfx____sys_sendmsg+0x10/0x10 [ 82.127447][ T6786] ? get_pid_task+0x106/0x250 [ 82.127480][ T6786] ? find_held_lock+0x2b/0x80 [ 82.127521][ T6786] __sys_sendmsg+0x160/0x210 [ 82.127545][ T6786] ? __pfx___sys_sendmsg+0x10/0x10 [ 82.127616][ T6786] do_syscall_64+0x123/0x790 [ 82.127647][ T6786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.127665][ T6786] RIP: 0033:0x7f620979e159 [ 82.127689][ T6786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.127705][ T6786] RSP: 002b:00007f620a638028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 82.127723][ T6786] RAX: ffffffffffffffda RBX: 00007f6209a25fa0 RCX: 00007f620979e159 [ 82.127735][ T6786] RDX: 0000000034004894 RSI: 0000200000000140 RDI: 0000000000000003 [ 82.127746][ T6786] RBP: 00007f620a638090 R08: 0000000000000000 R09: 0000000000000000 [ 82.127756][ T6786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.127766][ T6786] R13: 00007f6209a26038 R14: 00007f6209a25fa0 R15: 00007fffe09c6738 [ 82.127791][ T6786] [ 82.334458][ T6797] FAULT_INJECTION: forcing a failure. [ 82.334458][ T6797] name failslab, interval 1, probability 0, space 0, times 0 [ 82.334485][ T6797] CPU: 0 UID: 0 PID: 6797 Comm: syz.4.277 Tainted: G L syzkaller #0 PREEMPT(full) [ 82.334502][ T6797] Tainted: [L]=SOFTLOCKUP [ 82.334506][ T6797] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 82.334513][ T6797] Call Trace: [ 82.334517][ T6797] [ 82.334522][ T6797] dump_stack_lvl+0x100/0x190 [ 82.334545][ T6797] should_fail_ex.cold+0x5/0xa [ 82.334563][ T6797] should_failslab+0xc2/0x120 [ 82.334579][ T6797] kmem_cache_alloc_noprof+0x92/0x6a0 [ 82.334593][ T6797] ? __lock_acquire+0x5c0/0x1f40 [ 82.334607][ T6797] ? fuse_request_alloc+0x22/0x200 [ 82.334629][ T6797] fuse_request_alloc+0x22/0x200 [ 82.334649][ T6797] fuse_get_req+0x20a/0x400 [ 82.334661][ T6797] ? __pfx_fuse_get_req+0x10/0x10 [ 82.334673][ T6797] ? from_kgid+0x8f/0xd0 [ 82.334688][ T6797] ? __pfx_from_kgid+0x10/0x10 [ 82.334703][ T6797] ? __kasan_check_byte+0x13/0x50 [ 82.334721][ T6797] fuse_chan_send+0x259/0x9c0 [ 82.334737][ T6797] __fuse_simple_request+0x18e/0x1e0 [ 82.334751][ T6797] fuse_getxattr+0x24e/0x420 [ 82.334763][ T6797] ? __pfx_fuse_getxattr+0x10/0x10 [ 82.334784][ T6797] ? check_noncircular+0x97/0x160 [ 82.334800][ T6797] ? __pfx_fuse_xattr_get+0x10/0x10 [ 82.334811][ T6797] fuse_xattr_get+0x77/0xb0 [ 82.334823][ T6797] __vfs_getxattr+0x13d/0x1a0 [ 82.334840][ T6797] ? __pfx___vfs_getxattr+0x10/0x10 [ 82.334860][ T6797] cap_inode_need_killpriv+0x40/0x60 [ 82.334874][ T6797] security_inode_need_killpriv+0x87/0x1e0 [ 82.334890][ T6797] file_remove_privs_flags+0x2b8/0x590 [ 82.334910][ T6797] ? __pfx_file_remove_privs_flags+0x10/0x10 [ 82.334929][ T6797] ? generic_write_check_limits+0x1ef/0x280 [ 82.334947][ T6797] ? generic_write_checks+0x321/0x490 [ 82.334965][ T6797] ? __pfx_generic_write_checks+0x10/0x10 [ 82.334981][ T6797] ? __pfx_down_write+0x10/0x10 [ 82.335005][ T6797] kiocb_modified+0x5a/0xa0 [ 82.335022][ T6797] fuse_file_write_iter+0x349/0x960 [ 82.335050][ T6797] do_iter_readv_writev+0x6f7/0x930 [ 82.335073][ T6797] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 82.335092][ T6797] ? lock_acquire+0x1d1/0x380 [ 82.335126][ T6797] vfs_writev+0x360/0xdd0 [ 82.335155][ T6797] ? __lock_acquire+0x5c0/0x1f40 [ 82.335179][ T6797] ? __pfx_vfs_writev+0x10/0x10 [ 82.335205][ T6797] ? lock_acquire+0x1d1/0x380 [ 82.335227][ T6797] ? __fget_files+0x34/0x3d0 [ 82.335259][ T6797] ? __fget_files+0x21f/0x3d0 [ 82.335291][ T6797] ? do_writev+0x28a/0x340 [ 82.335310][ T6797] do_writev+0x28a/0x340 [ 82.335332][ T6797] ? __pfx_do_writev+0x10/0x10 [ 82.335361][ T6797] do_syscall_64+0x123/0x790 [ 82.335385][ T6797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.335406][ T6797] RIP: 0033:0x7f620979e159 [ 82.335423][ T6797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.335441][ T6797] RSP: 002b:00007f620a638028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 82.335461][ T6797] RAX: ffffffffffffffda RBX: 00007f6209a25fa0 RCX: 00007f620979e159 [ 82.335474][ T6797] RDX: 0000000000000001 RSI: 00002000000005c0 RDI: 0000000000000004 [ 82.335486][ T6797] RBP: 00007f620a638090 R08: 0000000000000000 R09: 0000000000000000 [ 82.335497][ T6797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.335506][ T6797] R13: 00007f6209a26038 R14: 00007f6209a25fa0 R15: 00007fffe09c6738 [ 82.335531][ T6797] [ 82.391504][ T901] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 82.483435][ T6802] FAULT_INJECTION: forcing a failure. [ 82.483435][ T6802] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 82.483467][ T6802] CPU: 3 UID: 0 PID: 6802 Comm: syz.4.279 Tainted: G L syzkaller #0 PREEMPT(full) [ 82.483492][ T6802] Tainted: [L]=SOFTLOCKUP [ 82.483498][ T6802] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 82.483508][ T6802] Call Trace: [ 82.483514][ T6802] [ 82.483523][ T6802] dump_stack_lvl+0x100/0x190 [ 82.483554][ T6802] should_fail_ex.cold+0x5/0xa [ 82.483579][ T6802] _copy_to_user+0x32/0xd0 [ 82.483605][ T6802] simple_read_from_buffer+0xcb/0x170 [ 82.483632][ T6802] proc_fail_nth_read+0x1af/0x230 [ 82.483659][ T6802] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 82.483684][ T6802] ? rw_verify_area+0xce/0x6d0 [ 82.483704][ T6802] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 82.483727][ T6802] vfs_read+0x1e4/0xb40 [ 82.483747][ T6802] ? lock_acquire+0x1d1/0x380 [ 82.483768][ T6802] ? __fget_files+0x34/0x3d0 [ 82.483790][ T6802] ? __pfx_vfs_read+0x10/0x10 [ 82.483809][ T6802] ? find_held_lock+0x2b/0x80 [ 82.483836][ T6802] ? __fget_files+0x215/0x3d0 [ 82.483864][ T6802] ? __fget_files+0x21f/0x3d0 [ 82.483895][ T6802] ksys_read+0x12a/0x250 [ 82.483914][ T6802] ? __pfx_ksys_read+0x10/0x10 [ 82.483941][ T6802] do_syscall_64+0x123/0x790 [ 82.483964][ T6802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.483983][ T6802] RIP: 0033:0x7f620975e98e [ 82.483999][ T6802] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 82.484015][ T6802] RSP: 002b:00007f620a637fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 82.484034][ T6802] RAX: ffffffffffffffda RBX: 00007f620a6386c0 RCX: 00007f620975e98e [ 82.484044][ T6802] RDX: 000000000000000f RSI: 00007f620a6380a0 RDI: 0000000000000003 [ 82.484054][ T6802] RBP: 00007f620a638090 R08: 0000000000000000 R09: 0000000000000000 [ 82.484066][ T6802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.484076][ T6802] R13: 00007f6209a26038 R14: 00007f6209a25fa0 R15: 00007fffe09c6738 [ 82.484102][ T6802] [ 82.563172][ T901] usb 7-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 82.564909][ T901] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.564931][ T901] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 82.564959][ T901] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.612542][ T67] Bluetooth: hci2: unexpected cc 0x1407 length: 11 > 9 [ 83.020311][ T6810] FAULT_INJECTION: forcing a failure. [ 83.020311][ T6810] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 83.020341][ T6810] CPU: 3 UID: 0 PID: 6810 Comm: syz.1.282 Tainted: G L syzkaller #0 PREEMPT(full) [ 83.020365][ T6810] Tainted: [L]=SOFTLOCKUP [ 83.020372][ T6810] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 83.020382][ T6810] Call Trace: [ 83.020389][ T6810] [ 83.020395][ T6810] dump_stack_lvl+0x100/0x190 [ 83.020425][ T6810] should_fail_ex.cold+0x5/0xa [ 83.020451][ T6810] _copy_from_user+0x2e/0xd0 [ 83.020475][ T6810] copy_msghdr_from_user+0x9f/0x4c0 [ 83.020496][ T6810] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 83.020519][ T6810] ? lock_acquire+0x1d1/0x380 [ 83.020537][ T6810] ? get_pid_task+0x2a/0x250 [ 83.020562][ T6810] ___sys_sendmsg+0x106/0x1e0 [ 83.020581][ T6810] ? __pfx____sys_sendmsg+0x10/0x10 [ 83.020598][ T6810] ? get_pid_task+0x106/0x250 [ 83.020630][ T6810] ? find_held_lock+0x2b/0x80 [ 83.020669][ T6810] __sys_sendmsg+0x160/0x210 [ 83.020693][ T6810] ? __pfx___sys_sendmsg+0x10/0x10 [ 83.020737][ T6810] do_syscall_64+0x123/0x790 [ 83.020760][ T6810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.020778][ T6810] RIP: 0033:0x7f88dd19e159 [ 83.020792][ T6810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.020808][ T6810] RSP: 002b:00007f88de112028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 83.020826][ T6810] RAX: ffffffffffffffda RBX: 00007f88dd425fa0 RCX: 00007f88dd19e159 [ 83.020837][ T6810] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 83.020847][ T6810] RBP: 00007f88de112090 R08: 0000000000000000 R09: 0000000000000000 [ 83.020858][ T6810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.020868][ T6810] R13: 00007f88dd426038 R14: 00007f88dd425fa0 R15: 00007ffecd620378 [ 83.020891][ T6810] [ 83.242752][ T6812] xt_l2tp: wrong L2TP version: 4 [ 83.266191][ T6823] ublk_ctrl_add_dev: dev id not match 4294967295 1862 [ 83.287770][ T6825] loop5: detected capacity change from 0 to 7 [ 83.300552][ T6825] Dev loop5: unable to read RDB block 7 [ 83.300585][ T6825] loop5: unable to read partition table [ 83.300776][ T6825] loop5: partition table beyond EOD, truncated [ 83.300809][ T6825] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 83.304155][ T6825] mmap: syz.1.287 (6825) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 83.329139][ T6825] mac80211_hwsim hwsim0 wlan0: entered allmulticast mode [ 83.366301][ T6832] FAULT_INJECTION: forcing a failure. [ 83.366301][ T6832] name failslab, interval 1, probability 0, space 0, times 0 [ 83.366323][ T6832] CPU: 3 UID: 0 PID: 6832 Comm: syz.1.289 Tainted: G L syzkaller #0 PREEMPT(full) [ 83.366339][ T6832] Tainted: [L]=SOFTLOCKUP [ 83.366343][ T6832] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 83.366349][ T6832] Call Trace: [ 83.366353][ T6832] [ 83.366358][ T6832] dump_stack_lvl+0x100/0x190 [ 83.366379][ T6832] should_fail_ex.cold+0x5/0xa [ 83.366394][ T6832] should_failslab+0xc2/0x120 [ 83.366411][ T6832] __kmalloc_noprof+0xfc/0x840 [ 83.366423][ T6832] ? rcu_is_watching+0x13/0xc0 [ 83.366440][ T6832] ? tomoyo_realpath_from_path+0xb6/0x690 [ 83.366459][ T6832] tomoyo_realpath_from_path+0xb6/0x690 [ 83.366478][ T6832] tomoyo_path_number_perm+0x23c/0x580 [ 83.366496][ T6832] ? tomoyo_path_number_perm+0x22e/0x580 [ 83.366510][ T6832] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 83.366532][ T6832] ? __lock_acquire+0x5c0/0x1f40 [ 83.366561][ T6832] ? __fget_files+0x34/0x3d0 [ 83.366582][ T6832] ? find_held_lock+0x2b/0x80 [ 83.366604][ T6832] ? hook_file_ioctl_common+0x140/0x440 [ 83.366641][ T6832] ? __fget_files+0x21f/0x3d0 [ 83.366665][ T6832] security_file_ioctl+0xd3/0x230 [ 83.366688][ T6832] __x64_sys_ioctl+0xb7/0x210 [ 83.366711][ T6832] do_syscall_64+0x123/0x790 [ 83.366731][ T6832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.366748][ T6832] RIP: 0033:0x7f88dd19e159 [ 83.366763][ T6832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.366778][ T6832] RSP: 002b:00007f88de112028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 83.366796][ T6832] RAX: ffffffffffffffda RBX: 00007f88dd425fa0 RCX: 00007f88dd19e159 [ 83.366807][ T6832] RDX: 000000000000000c RSI: 0000000000000703 RDI: 0000000000000003 [ 83.366817][ T6832] RBP: 00007f88de112090 R08: 0000000000000000 R09: 0000000000000000 [ 83.366827][ T6832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.366837][ T6832] R13: 00007f88dd426038 R14: 00007f88dd425fa0 R15: 00007ffecd620378 [ 83.366860][ T6832] [ 83.366867][ T6832] ERROR: Out of memory at tomoyo_realpath_from_path. [ 83.394307][ T6834] FAULT_INJECTION: forcing a failure. [ 83.394307][ T6834] name failslab, interval 1, probability 0, space 0, times 0 [ 83.394339][ T6834] CPU: 3 UID: 0 PID: 6834 Comm: syz.1.290 Tainted: G L syzkaller #0 PREEMPT(full) [ 83.394361][ T6834] Tainted: [L]=SOFTLOCKUP [ 83.394367][ T6834] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 83.394377][ T6834] Call Trace: [ 83.394382][ T6834] [ 83.394389][ T6834] dump_stack_lvl+0x100/0x190 [ 83.394418][ T6834] should_fail_ex.cold+0x5/0xa [ 83.394442][ T6834] should_failslab+0xc2/0x120 [ 83.394465][ T6834] __kmalloc_noprof+0xfc/0x840 [ 83.394482][ T6834] ? rcu_is_watching+0x13/0xc0 [ 83.394498][ T6834] ? tomoyo_realpath_from_path+0xb6/0x690 [ 83.394517][ T6834] tomoyo_realpath_from_path+0xb6/0x690 [ 83.394537][ T6834] tomoyo_path_number_perm+0x23c/0x580 [ 83.394550][ T6834] ? tomoyo_path_number_perm+0x22e/0x580 [ 83.394564][ T6834] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 83.394583][ T6834] ? __lock_acquire+0x5c0/0x1f40 [ 83.394602][ T6834] ? __fget_files+0x34/0x3d0 [ 83.394620][ T6834] ? find_held_lock+0x2b/0x80 [ 83.394636][ T6834] ? hook_file_ioctl_common+0x140/0x440 [ 83.394657][ T6834] ? __fget_files+0x21f/0x3d0 [ 83.394674][ T6834] security_file_ioctl+0xd3/0x230 [ 83.394689][ T6834] __x64_sys_ioctl+0xb7/0x210 [ 83.394703][ T6834] do_syscall_64+0x123/0x790 [ 83.394717][ T6834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.394728][ T6834] RIP: 0033:0x7f88dd19e159 [ 83.394738][ T6834] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.394748][ T6834] RSP: 002b:00007f88de112028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 83.394760][ T6834] RAX: ffffffffffffffda RBX: 00007f88dd425fa0 RCX: 00007f88dd19e159 [ 83.394767][ T6834] RDX: 00002000000002c0 RSI: 00000000c138fd0a RDI: 0000000000000003 [ 83.394773][ T6834] RBP: 00007f88de112090 R08: 0000000000000000 R09: 0000000000000000 [ 83.394780][ T6834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.394786][ T6834] R13: 00007f88dd426038 R14: 00007f88dd425fa0 R15: 00007ffecd620378 [ 83.394800][ T6834] [ 83.394805][ T6834] ERROR: Out of memory at tomoyo_realpath_from_path. [ 83.736967][ T6856] FAULT_INJECTION: forcing a failure. [ 83.736967][ T6856] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 83.736990][ T6856] CPU: 0 UID: 0 PID: 6856 Comm: syz.1.292 Tainted: G L syzkaller #0 PREEMPT(full) [ 83.737006][ T6856] Tainted: [L]=SOFTLOCKUP [ 83.737010][ T6856] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 83.737016][ T6856] Call Trace: [ 83.737020][ T6856] [ 83.737025][ T6856] dump_stack_lvl+0x100/0x190 [ 83.737047][ T6856] should_fail_ex.cold+0x5/0xa [ 83.737063][ T6856] _copy_to_user+0x32/0xd0 [ 83.737078][ T6856] simple_read_from_buffer+0xcb/0x170 [ 83.737096][ T6856] proc_fail_nth_read+0x1af/0x230 [ 83.737115][ T6856] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 83.737132][ T6856] ? rw_verify_area+0xce/0x6d0 [ 83.737143][ T6856] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 83.737173][ T6856] vfs_read+0x1e4/0xb40 [ 83.737187][ T6856] ? lock_acquire+0x1d1/0x380 [ 83.737199][ T6856] ? __fget_files+0x34/0x3d0 [ 83.737217][ T6856] ? __pfx_vfs_read+0x10/0x10 [ 83.737228][ T6856] ? find_held_lock+0x2b/0x80 [ 83.737245][ T6856] ? __fget_files+0x215/0x3d0 [ 83.737262][ T6856] ? __fget_files+0x21f/0x3d0 [ 83.737281][ T6856] ksys_read+0x12a/0x250 [ 83.737294][ T6856] ? __pfx_ksys_read+0x10/0x10 [ 83.737310][ T6856] do_syscall_64+0x123/0x790 [ 83.737325][ T6856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.737337][ T6856] RIP: 0033:0x7f88dd15e98e [ 83.737346][ T6856] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 83.737357][ T6856] RSP: 002b:00007f88de111fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 83.737369][ T6856] RAX: ffffffffffffffda RBX: 00007f88de1126c0 RCX: 00007f88dd15e98e [ 83.737376][ T6856] RDX: 000000000000000f RSI: 00007f88de1120a0 RDI: 0000000000000005 [ 83.737382][ T6856] RBP: 00007f88de112090 R08: 0000000000000000 R09: 0000000000000000 [ 83.737389][ T6856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.737395][ T6856] R13: 00007f88dd426038 R14: 00007f88dd425fa0 R15: 00007ffecd620378 [ 83.737410][ T6856] [ 84.052496][ T6869] netlink: 60 bytes leftover after parsing attributes in process `syz.1.297'. [ 84.100921][ T6871] gadgetfs: bound to dummy_udc driver [ 84.105459][ T25] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 84.252356][ T25] usb 9-1: Using ep0 maxpacket: 16 [ 84.254168][ T25] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 84.255210][ T25] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.255235][ T25] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.255253][ T25] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 84.255284][ T25] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.257574][ T25] usb 9-1: config 0 descriptor?? [ 84.359292][ T6877] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 84.360632][ T6877] cramfs: wrong magic [ 84.674224][ T25] microsoft 0003:045E:07DA.0004: hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 84.868407][ T5664] usb 9-1: USB disconnect, device number 2 [ 85.014959][ T6883] FAULT_INJECTION: forcing a failure. [ 85.014959][ T6883] name failslab, interval 1, probability 0, space 0, times 0 [ 85.014981][ T6883] CPU: 3 UID: 0 PID: 6883 Comm: syz.0.302 Tainted: G L syzkaller #0 PREEMPT(full) [ 85.014997][ T6883] Tainted: [L]=SOFTLOCKUP [ 85.015001][ T6883] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.015007][ T6883] Call Trace: [ 85.015011][ T6883] [ 85.015016][ T6883] dump_stack_lvl+0x100/0x190 [ 85.015036][ T6883] should_fail_ex.cold+0x5/0xa [ 85.015052][ T6883] should_failslab+0xc2/0x120 [ 85.015069][ T6883] __kmalloc_noprof+0xfc/0x840 [ 85.015082][ T6883] ? rcu_is_watching+0x13/0xc0 [ 85.015098][ T6883] ? tomoyo_realpath_from_path+0xb6/0x690 [ 85.015119][ T6883] tomoyo_realpath_from_path+0xb6/0x690 [ 85.015138][ T6883] tomoyo_get_exe+0x63/0xa0 [ 85.015150][ T6883] tomoyo_write_control+0x69e/0x13a0 [ 85.015166][ T6883] ? lock_acquire+0x1d1/0x380 [ 85.015178][ T6883] ? ksys_write+0x12a/0x250 [ 85.015191][ T6883] ? __pfx_tomoyo_write_control+0x10/0x10 [ 85.015222][ T6883] vfs_write+0x2aa/0x1050 [ 85.015238][ T6883] ? __pfx_tomoyo_write+0x10/0x10 [ 85.015261][ T6883] ? lock_acquire+0x1d1/0x380 [ 85.015273][ T6883] ? __fget_files+0x34/0x3d0 [ 85.015288][ T6883] ? __pfx_vfs_write+0x10/0x10 [ 85.015299][ T6883] ? find_held_lock+0x2b/0x80 [ 85.015317][ T6883] ? __fget_files+0x215/0x3d0 [ 85.015334][ T6883] ? __fget_files+0x21f/0x3d0 [ 85.015354][ T6883] ksys_write+0x12a/0x250 [ 85.015366][ T6883] ? __pfx_ksys_write+0x10/0x10 [ 85.015384][ T6883] do_syscall_64+0x123/0x790 [ 85.015398][ T6883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.015410][ T6883] RIP: 0033:0x7fec85d9e159 [ 85.015419][ T6883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.015430][ T6883] RSP: 002b:00007fec86bd2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 85.015441][ T6883] RAX: ffffffffffffffda RBX: 00007fec86025fa0 RCX: 00007fec85d9e159 [ 85.015449][ T6883] RDX: 0000000000000ffe RSI: 00002000000000c0 RDI: 0000000000000003 [ 85.015455][ T6883] RBP: 00007fec86bd2090 R08: 0000000000000000 R09: 0000000000000000 [ 85.015461][ T6883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.015468][ T6883] R13: 00007fec86026038 R14: 00007fec86025fa0 R15: 00007fff96e68818 [ 85.015483][ T6883] [ 85.015838][ T6883] ERROR: Out of memory at tomoyo_realpath_from_path. [ 85.156098][ T5664] usb 7-1: USB disconnect, device number 11 [ 85.496542][ T43] kauditd_printk_skb: 37 callbacks suppressed [ 85.496559][ T43] audit: type=1400 audit(1791026417.632:960): avc: denied { prog_run } for pid=6899 comm="syz.4.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 85.508895][ T6900] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 85.848218][ T43] audit: type=1400 audit(1791026417.982:961): avc: denied { create } for pid=6911 comm="syz.1.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 85.850749][ T43] audit: type=1400 audit(1791026417.982:962): avc: denied { write } for pid=6911 comm="syz.1.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 85.877931][ T6914] FAULT_INJECTION: forcing a failure. [ 85.877931][ T6914] name failslab, interval 1, probability 0, space 0, times 0 [ 85.877950][ T6914] CPU: 3 UID: 0 PID: 6914 Comm: syz.4.313 Tainted: G L syzkaller #0 PREEMPT(full) [ 85.877966][ T6914] Tainted: [L]=SOFTLOCKUP [ 85.877970][ T6914] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.877976][ T6914] Call Trace: [ 85.877980][ T6914] [ 85.877984][ T6914] dump_stack_lvl+0x100/0x190 [ 85.878037][ T6914] should_fail_ex.cold+0x5/0xa [ 85.878054][ T6914] should_failslab+0xc2/0x120 [ 85.878074][ T6914] __kmalloc_noprof+0xfc/0x840 [ 85.878087][ T6914] ? rcu_is_watching+0x13/0xc0 [ 85.878103][ T6914] ? tomoyo_realpath_from_path+0xb6/0x690 [ 85.878123][ T6914] tomoyo_realpath_from_path+0xb6/0x690 [ 85.878145][ T6914] tomoyo_path_number_perm+0x23c/0x580 [ 85.878159][ T6914] ? tomoyo_path_number_perm+0x22e/0x580 [ 85.878173][ T6914] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 85.878192][ T6914] ? __lock_acquire+0x5c0/0x1f40 [ 85.878211][ T6914] ? __fget_files+0x34/0x3d0 [ 85.878227][ T6914] ? find_held_lock+0x2b/0x80 [ 85.878244][ T6914] ? hook_file_ioctl_common+0x140/0x440 [ 85.878264][ T6914] ? __fget_files+0x21f/0x3d0 [ 85.878282][ T6914] security_file_ioctl+0xd3/0x230 [ 85.878297][ T6914] __x64_sys_ioctl+0xb7/0x210 [ 85.878311][ T6914] do_syscall_64+0x123/0x790 [ 85.878329][ T6914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.878341][ T6914] RIP: 0033:0x7f620979e159 [ 85.878350][ T6914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.878361][ T6914] RSP: 002b:00007f620a638028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 85.878372][ T6914] RAX: ffffffffffffffda RBX: 00007f6209a25fa0 RCX: 00007f620979e159 [ 85.878379][ T6914] RDX: 0000200000000040 RSI: 00000000c0405610 RDI: 0000000000000003 [ 85.878386][ T6914] RBP: 00007f620a638090 R08: 0000000000000000 R09: 0000000000000000 [ 85.878393][ T6914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.878399][ T6914] R13: 00007f6209a26038 R14: 00007f6209a25fa0 R15: 00007fffe09c6738 [ 85.878414][ T6914] [ 85.878419][ T6914] ERROR: Out of memory at tomoyo_realpath_from_path. [ 85.906140][ T43] audit: type=1400 audit(1791026418.042:963): avc: denied { listen } for pid=6915 comm="syz.1.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 85.907199][ T43] audit: type=1400 audit(1791026418.042:964): avc: denied { read } for pid=6915 comm="syz.1.315" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 85.907498][ T43] audit: type=1400 audit(1791026418.042:965): avc: denied { open } for pid=6915 comm="syz.1.315" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 85.908209][ T43] audit: type=1400 audit(1791026418.042:966): avc: denied { ioctl } for pid=6915 comm="syz.1.315" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 85.910990][ T43] audit: type=1400 audit(1791026418.042:967): avc: denied { set_context_mgr } for pid=6915 comm="syz.1.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 85.914310][ T43] audit: type=1400 audit(1791026418.052:968): avc: denied { write } for pid=6915 comm="syz.1.315" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 85.969224][ T6921] binder: 6915:6921 ioctl c0306201 200000000640 returned -22 [ 85.969801][ T43] audit: type=1400 audit(1791026418.102:969): avc: denied { accept } for pid=6915 comm="syz.1.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 86.182307][ T6925] netlink: 'syz.0.318': attribute type 11 has an invalid length. [ 86.294659][ T6930] netlink: 60 bytes leftover after parsing attributes in process `syz.2.319'. [ 86.866700][ T6943] FAULT_INJECTION: forcing a failure. [ 86.866700][ T6943] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 86.866732][ T6943] CPU: 2 UID: 0 PID: 6943 Comm: syz.1.325 Tainted: G L syzkaller #0 PREEMPT(full) [ 86.866755][ T6943] Tainted: [L]=SOFTLOCKUP [ 86.866760][ T6943] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.866771][ T6943] Call Trace: [ 86.866777][ T6943] [ 86.866784][ T6943] dump_stack_lvl+0x100/0x190 [ 86.866828][ T6943] should_fail_ex.cold+0x5/0xa [ 86.866857][ T6943] _copy_from_user+0x2e/0xd0 [ 86.866885][ T6943] move_addr_to_kernel+0x65/0x170 [ 86.866912][ T6943] __sys_sendto+0x1b8/0x4e0 [ 86.866937][ T6943] ? __pfx___sys_sendto+0x10/0x10 [ 86.866966][ T6943] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 86.867004][ T6943] ? ksys_write+0x1ac/0x250 [ 86.867025][ T6943] ? __pfx_ksys_write+0x10/0x10 [ 86.867047][ T6943] __x64_sys_sendto+0xe0/0x1c0 [ 86.867070][ T6943] ? do_syscall_64+0xae/0x790 [ 86.867088][ T6943] ? lockdep_hardirqs_on+0x7d/0x110 [ 86.867107][ T6943] do_syscall_64+0x123/0x790 [ 86.867129][ T6943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.867149][ T6943] RIP: 0033:0x7f88dd19e159 [ 86.867164][ T6943] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.867189][ T6943] RSP: 002b:00007f88de112028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 86.867208][ T6943] RAX: ffffffffffffffda RBX: 00007f88dd425fa0 RCX: 00007f88dd19e159 [ 86.867222][ T6943] RDX: 0000000000000026 RSI: 0000200000000240 RDI: 0000000000000003 [ 86.867233][ T6943] RBP: 00007f88de112090 R08: 0000200000000540 R09: 0000000000000014 [ 86.867243][ T6943] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000001 [ 86.867254][ T6943] R13: 00007f88dd426038 R14: 00007f88dd425fa0 R15: 00007ffecd620378 [ 86.867280][ T6943] [ 86.958402][ T6950] random: crng reseeded on system resumption [ 86.969473][ T6950] netlink: 'syz.4.329': attribute type 4 has an invalid length. [ 87.035095][ T6953] netlink: 'syz.4.329': attribute type 4 has an invalid length. [ 87.838976][ T6958] FAULT_INJECTION: forcing a failure. [ 87.838976][ T6958] name failslab, interval 1, probability 0, space 0, times 0 [ 87.838998][ T6958] CPU: 3 UID: 0 PID: 6958 Comm: syz.4.331 Tainted: G L syzkaller #0 PREEMPT(full) [ 87.839013][ T6958] Tainted: [L]=SOFTLOCKUP [ 87.839017][ T6958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 87.839024][ T6958] Call Trace: [ 87.839028][ T6958] [ 87.839032][ T6958] dump_stack_lvl+0x100/0x190 [ 87.839053][ T6958] should_fail_ex.cold+0x5/0xa [ 87.839069][ T6958] should_failslab+0xc2/0x120 [ 87.839092][ T6958] kmem_cache_alloc_noprof+0x92/0x6a0 [ 87.839106][ T6958] ? do_getname+0x35/0x390 [ 87.839120][ T6958] do_getname+0x35/0x390 [ 87.839132][ T6958] __x64_sys_symlinkat+0x7c/0xe0 [ 87.839150][ T6958] do_syscall_64+0x123/0x790 [ 87.839164][ T6958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.839178][ T6958] RIP: 0033:0x7f620979e159 [ 87.839188][ T6958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.839198][ T6958] RSP: 002b:00007f620a638028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 87.839210][ T6958] RAX: ffffffffffffffda RBX: 00007f6209a25fa0 RCX: 00007f620979e159 [ 87.839217][ T6958] RDX: 0000200000000680 RSI: ffffffffffffff9c RDI: 0000200000000640 [ 87.839224][ T6958] RBP: 00007f620a638090 R08: 0000000000000000 R09: 0000000000000000 [ 87.839230][ T6958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.839237][ T6958] R13: 00007f6209a26038 R14: 00007f6209a25fa0 R15: 00007fffe09c6738 [ 87.839251][ T6958] [ 87.870345][ T6958] bridge0: port 3(syz_tun) entered disabled state [ 87.874372][ T6958] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.875010][ T6958] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.885338][ T6960] netlink: 8 bytes leftover after parsing attributes in process `syz.1.332'. [ 87.935903][ T6958] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.939620][ T6958] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.001530][ T5782] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.001575][ T5782] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.001607][ T5782] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.001639][ T5782] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.103564][ T6974] device-mapper: dirty region log: unrecognised sync argument to dirty region log: n [ 88.103617][ T6974] device-mapper: table: 248:0: mirror: Error creating mirror dirty log (-EINVAL) [ 88.103636][ T6974] device-mapper: ioctl: error adding target to table [ 88.192232][ T6981] xt_l2tp: wrong L2TP version: 4 [ 88.278941][ T6987] xt_cgroup: invalid path, errno=-2 [ 88.289028][ T6987] FAULT_INJECTION: forcing a failure. [ 88.289028][ T6987] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 88.289062][ T6987] CPU: 2 UID: 0 PID: 6987 Comm: syz.4.342 Tainted: G L syzkaller #0 PREEMPT(full) [ 88.289090][ T6987] Tainted: [L]=SOFTLOCKUP [ 88.289097][ T6987] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 88.289109][ T6987] Call Trace: [ 88.289116][ T6987] [ 88.289140][ T6987] dump_stack_lvl+0x100/0x190 [ 88.289176][ T6987] should_fail_ex.cold+0x5/0xa [ 88.289202][ T6987] ? prepare_alloc_pages+0x16d/0x5b0 [ 88.289235][ T6987] should_fail_alloc_page+0xeb/0x140 [ 88.289271][ T6987] prepare_alloc_pages+0x1f0/0x5b0 [ 88.289305][ T6987] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 88.289333][ T6987] ? __pfx_get_page_from_freelist+0x10/0x10 [ 88.289354][ T6987] ? prepare_alloc_pages+0x1f0/0x5b0 [ 88.289381][ T6987] ? is_bpf_text_address+0x94/0x1a0 [ 88.289410][ T6987] ? rcu_is_watching+0x13/0xc0 [ 88.289438][ T6987] ? __alloc_frozen_pages_noprof+0x56b/0x3300 [ 88.289465][ T6987] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 88.289495][ T6987] ? stack_trace_save+0x8e/0xc0 [ 88.289515][ T6987] ? __pfx_stack_trace_save+0x10/0x10 [ 88.289534][ T6987] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 88.289556][ T6987] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 88.289577][ T6987] ? is_bpf_text_address+0x94/0x1a0 [ 88.289636][ T6987] ? kasan_save_track+0x14/0x30 [ 88.289661][ T6987] ? __kasan_slab_alloc+0x89/0x90 [ 88.289686][ T6987] ? kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 88.289709][ T6987] ? alloc_vmap_area+0x640/0x2bb0 [ 88.289735][ T6987] ? __get_vm_area_node+0x1ed/0x350 [ 88.289761][ T6987] ? get_vm_area_caller+0x71/0xa0 [ 88.289789][ T6987] ? vmap+0x132/0x2e0 [ 88.289812][ T6987] ? ringbuf_map_alloc+0x363/0x860 [ 88.289836][ T6987] ? map_create+0x874/0x30d0 [ 88.289853][ T6987] ? __sys_bpf+0x12a0/0x4a30 [ 88.289872][ T6987] ? __x64_sys_bpf+0xce/0x140 [ 88.289892][ T6987] ? do_syscall_64+0x123/0x790 [ 88.289914][ T6987] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.289943][ T6987] alloc_pages_bulk_noprof+0x5e1/0x13c0 [ 88.289973][ T6987] ? policy_nodemask+0xed/0x4f0 [ 88.290029][ T6987] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 88.290070][ T6987] __kasan_populate_vmalloc+0xf0/0x210 [ 88.290102][ T6987] alloc_vmap_area+0x95d/0x2bb0 [ 88.290137][ T6987] ? kasan_save_track+0x14/0x30 [ 88.290161][ T6987] ? __kasan_kmalloc+0xaa/0xb0 [ 88.290185][ T6987] ? __pfx_alloc_vmap_area+0x10/0x10 [ 88.290212][ T6987] ? __get_vm_area_node+0x124/0x350 [ 88.290242][ T6987] __get_vm_area_node+0x1ed/0x350 [ 88.290272][ T6987] ? ringbuf_map_alloc+0x363/0x860 [ 88.290296][ T6987] get_vm_area_caller+0x71/0xa0 [ 88.290323][ T6987] ? ringbuf_map_alloc+0x363/0x860 [ 88.290349][ T6987] vmap+0x132/0x2e0 [ 88.290375][ T6987] ? __pfx_vmap+0x10/0x10 [ 88.290399][ T6987] ? __pfx_alloc_pages_node_noprof+0x10/0x10 [ 88.290424][ T6987] ? __bpf_map_area_alloc+0x13a/0x200 [ 88.290450][ T6987] ringbuf_map_alloc+0x363/0x860 [ 88.290481][ T6987] map_create+0x874/0x30d0 [ 88.290499][ T6987] ? find_held_lock+0x2b/0x80 [ 88.290528][ T6987] ? avc_has_perm_noaudit+0x11e/0x470 [ 88.290559][ T6987] ? avc_has_perm_noaudit+0x11e/0x470 [ 88.290598][ T6987] ? __pfx_map_create+0x10/0x10 [ 88.290633][ T6987] ? avc_has_perm+0x135/0x1e0 [ 88.290663][ T6987] ? __pfx_avc_has_perm+0x10/0x10 [ 88.290692][ T6987] ? __might_fault+0xc5/0x140 [ 88.290714][ T6987] ? __might_fault+0xc5/0x140 [ 88.290740][ T6987] ? selinux_bpf+0xfb/0x150 [ 88.290764][ T6987] __sys_bpf+0x12a0/0x4a30 [ 88.290794][ T6987] ? __pfx___sys_bpf+0x10/0x10 [ 88.290814][ T6987] ? find_held_lock+0x2b/0x80 [ 88.290841][ T6987] ? futex_wake+0x4ea/0x5e0 [ 88.290881][ T6987] ? rcu_read_lock_any_held+0x6a/0x90 [ 88.290910][ T6987] ? vfs_write+0x15d/0x1050 [ 88.290955][ T6987] ? __x64_sys_futex+0x34f/0x4d0 [ 88.290982][ T6987] ? __x64_sys_futex+0x358/0x4d0 [ 88.291013][ T6987] ? __pfx___x64_sys_futex+0x10/0x10 [ 88.291041][ T6987] ? ksys_write+0x1ac/0x250 [ 88.291067][ T6987] ? __x64_sys_bpf+0xce/0x140 [ 88.291087][ T6987] __x64_sys_bpf+0xce/0x140 [ 88.291110][ T6987] ? do_syscall_64+0xae/0x790 [ 88.291133][ T6987] do_syscall_64+0x123/0x790 [ 88.291159][ T6987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.291180][ T6987] RIP: 0033:0x7f620979e159 [ 88.291199][ T6987] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.291218][ T6987] RSP: 002b:00007f620a638028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 88.291240][ T6987] RAX: ffffffffffffffda RBX: 00007f6209a25fa0 RCX: 00007f620979e159 [ 88.291255][ T6987] RDX: 0000000000000050 RSI: 0000200000000440 RDI: 0000000000000000 [ 88.291269][ T6987] RBP: 00007f620983506b R08: 0000000000000000 R09: 0000000000000000 [ 88.291282][ T6987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.291294][ T6987] R13: 00007f6209a26038 R14: 00007f6209a25fa0 R15: 00007fffe09c6738 [ 88.291321][ T6987] [ 88.363352][ T6992] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 88.572080][ T7006] bonding: unable to delete non-existent .o [ 88.573822][ T7006] tipc: Started in network mode [ 88.573840][ T7006] tipc: Node identity 7, cluster identity 4369 [ 88.573851][ T7006] tipc: Node number set to 7 [ 89.401518][ T5741] Bluetooth: hci2: command 0x0406 tx timeout [ 89.582671][ T7026] netlink: 36 bytes leftover after parsing attributes in process `syz.0.355'. [ 89.694594][ T7038] Cannot find map_set index 135 as target [ 89.852498][ T7054] FAULT_INJECTION: forcing a failure. [ 89.852498][ T7054] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 89.852535][ T7054] CPU: 2 UID: 0 PID: 7054 Comm: syz.1.361 Tainted: G L syzkaller #0 PREEMPT(full) [ 89.852563][ T7054] Tainted: [L]=SOFTLOCKUP [ 89.852571][ T7054] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 89.852583][ T7054] Call Trace: [ 89.852591][ T7054] [ 89.852599][ T7054] dump_stack_lvl+0x100/0x190 [ 89.852656][ T7054] should_fail_ex.cold+0x5/0xa [ 89.852687][ T7054] _copy_from_user+0x2e/0xd0 [ 89.852722][ T7054] copy_msghdr_from_user+0x9f/0x4c0 [ 89.852755][ T7054] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 89.852785][ T7054] ? lock_acquire+0x1d1/0x380 [ 89.852807][ T7054] ? get_pid_task+0x2a/0x250 [ 89.852837][ T7054] ___sys_sendmsg+0x106/0x1e0 [ 89.852863][ T7054] ? __pfx____sys_sendmsg+0x10/0x10 [ 89.852886][ T7054] ? get_pid_task+0x106/0x250 [ 89.852922][ T7054] ? find_held_lock+0x2b/0x80 [ 89.852970][ T7054] __sys_sendmsg+0x160/0x210 [ 89.852999][ T7054] ? __pfx___sys_sendmsg+0x10/0x10 [ 89.853043][ T7054] do_syscall_64+0x123/0x790 [ 89.853075][ T7054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.853097][ T7054] RIP: 0033:0x7f88dd19e159 [ 89.853115][ T7054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.853135][ T7054] RSP: 002b:00007f88de0d0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 89.853156][ T7054] RAX: ffffffffffffffda RBX: 00007f88dd426180 RCX: 00007f88dd19e159 [ 89.853170][ T7054] RDX: 0000000000040000 RSI: 0000200000000380 RDI: 0000000000000005 [ 89.853183][ T7054] RBP: 00007f88de0d0090 R08: 0000000000000000 R09: 0000000000000000 [ 89.853195][ T7054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.853208][ T7054] R13: 00007f88dd426218 R14: 00007f88dd426180 R15: 00007ffecd620378 [ 89.853237][ T7054] [ 90.268351][ T7072] X25: unknown FF in state 3 [ 90.441632][ T67] Bluetooth: hci0: command 0x0c3a tx timeout [ 90.441737][ T5090] Bluetooth: hci0: Opcode 0x0c3a failed: -110 [ 90.575119][ T43] kauditd_printk_skb: 42 callbacks suppressed [ 90.575139][ T43] audit: type=1400 audit(1791026422.712:1012): avc: denied { write } for pid=7088 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.595088][ T7091] FAULT_INJECTION: forcing a failure. [ 90.595088][ T7091] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 90.595118][ T7091] CPU: 1 UID: 0 PID: 7091 Comm: syz.0.368 Tainted: G L syzkaller #0 PREEMPT(full) [ 90.595138][ T7091] Tainted: [L]=SOFTLOCKUP [ 90.595144][ T7091] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 90.595153][ T7091] Call Trace: [ 90.595158][ T7091] [ 90.595164][ T7091] dump_stack_lvl+0x100/0x190 [ 90.595191][ T7091] should_fail_ex.cold+0x5/0xa [ 90.595213][ T7091] _copy_from_iter+0x1f4/0x1690 [ 90.595236][ T7091] ? __pfx__copy_from_iter+0x10/0x10 [ 90.595252][ T7091] ? __lock_acquire+0x5c0/0x1f40 [ 90.595269][ T7091] ? _parse_integer_limit+0x1ac/0x220 [ 90.595293][ T7091] ? _kstrtoull+0x144/0x200 [ 90.595330][ T7091] ? __pfx__kstrtoull+0x10/0x10 [ 90.595353][ T7091] tun_get_user+0x265/0x3cc0 [ 90.595377][ T7091] ? __lock_acquire+0x5c0/0x1f40 [ 90.595396][ T7091] ? __lock_acquire+0x5c0/0x1f40 [ 90.595412][ T7091] ? __pfx_tun_get_user+0x10/0x10 [ 90.595432][ T7091] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 90.595461][ T7091] ? find_held_lock+0x2b/0x80 [ 90.595481][ T7091] ? tun_get+0x191/0x370 [ 90.595497][ T7091] ? tun_get+0x191/0x370 [ 90.595519][ T7091] tun_chr_write_iter+0xdc/0x200 [ 90.595545][ T7091] vfs_write+0x6af/0x1050 [ 90.595563][ T7091] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 90.595584][ T7091] ? __pfx_vfs_write+0x10/0x10 [ 90.595599][ T7091] ? find_held_lock+0x2b/0x80 [ 90.595632][ T7091] ksys_write+0x12a/0x250 [ 90.595648][ T7091] ? __pfx_ksys_write+0x10/0x10 [ 90.595670][ T7091] do_syscall_64+0x123/0x790 [ 90.595689][ T7091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.595704][ T7091] RIP: 0033:0x7fec85d9e159 [ 90.595716][ T7091] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.595731][ T7091] RSP: 002b:00007fec86bd2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 90.595746][ T7091] RAX: ffffffffffffffda RBX: 00007fec86025fa0 RCX: 00007fec85d9e159 [ 90.595756][ T7091] RDX: 000000000000000a RSI: 0000200000000140 RDI: 0000000000000003 [ 90.595764][ T7091] RBP: 00007fec86bd2090 R08: 0000000000000000 R09: 0000000000000000 [ 90.595773][ T7091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.595782][ T7091] R13: 00007fec86026038 R14: 00007fec86025fa0 R15: 00007fff96e68818 [ 90.595802][ T7091] [ 90.649062][ T43] audit: type=1400 audit(1791026422.782:1013): avc: denied { write } for pid=7093 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.728400][ T43] audit: type=1400 audit(1791026422.862:1014): avc: denied { write } for pid=7095 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.816457][ T43] audit: type=1400 audit(1791026422.952:1015): avc: denied { write } for pid=7100 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.940142][ T43] audit: type=1400 audit(1791026423.072:1016): avc: denied { mount } for pid=7106 comm="syz.4.372" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 90.942217][ T43] audit: type=1400 audit(1791026423.072:1017): avc: denied { write } for pid=7106 comm="syz.4.372" name="h" dev="configfs" ino=20461 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 90.946361][ T43] audit: type=1400 audit(1791026423.082:1018): avc: denied { write } for pid=7106 comm="syz.4.372" name="ss" dev="configfs" ino=20448 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 90.946570][ T43] audit: type=1400 audit(1791026423.082:1019): avc: denied { write } for pid=7106 comm="syz.4.372" name="ss" dev="configfs" ino=20448 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 90.989435][ T43] audit: type=1400 audit(1791026423.122:1020): avc: denied { unmount } for pid=6264 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 91.013855][ T43] audit: type=1400 audit(1791026423.152:1021): avc: denied { write } for pid=7110 comm="syz.1.373" name="h" dev="configfs" ino=20461 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 91.015097][ T7111] FAULT_INJECTION: forcing a failure. [ 91.015097][ T7111] name failslab, interval 1, probability 0, space 0, times 0 [ 91.015117][ T7111] CPU: 1 UID: 0 PID: 7111 Comm: syz.1.373 Tainted: G L syzkaller #0 PREEMPT(full) [ 91.015132][ T7111] Tainted: [L]=SOFTLOCKUP [ 91.015136][ T7111] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 91.015142][ T7111] Call Trace: [ 91.015146][ T7111] [ 91.015150][ T7111] dump_stack_lvl+0x100/0x190 [ 91.015170][ T7111] should_fail_ex.cold+0x5/0xa [ 91.015187][ T7111] should_failslab+0xc2/0x120 [ 91.015204][ T7111] kmem_cache_alloc_noprof+0x92/0x6a0 [ 91.015218][ T7111] ? do_getname+0x35/0x390 [ 91.015232][ T7111] do_getname+0x35/0x390 [ 91.015244][ T7111] __x64_sys_symlinkat+0x7c/0xe0 [ 91.015263][ T7111] do_syscall_64+0x123/0x790 [ 91.015277][ T7111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.015288][ T7111] RIP: 0033:0x7f88dd19e159 [ 91.015298][ T7111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.015308][ T7111] RSP: 002b:00007f88de112028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 91.015320][ T7111] RAX: ffffffffffffffda RBX: 00007f88dd425fa0 RCX: 00007f88dd19e159 [ 91.015327][ T7111] RDX: 0000200000000700 RSI: ffffffffffffff9c RDI: 00002000000006c0 [ 91.015334][ T7111] RBP: 00007f88de112090 R08: 0000000000000000 R09: 0000000000000000 [ 91.015340][ T7111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.015346][ T7111] R13: 00007f88dd426038 R14: 00007f88dd425fa0 R15: 00007ffecd620378 [ 91.015361][ T7111] [ 91.026032][ T7113] FAULT_INJECTION: forcing a failure. [ 91.026032][ T7113] name failslab, interval 1, probability 0, space 0, times 0 [ 91.026062][ T7113] CPU: 0 UID: 0 PID: 7113 Comm: syz.4.374 Tainted: G L syzkaller #0 PREEMPT(full) [ 91.026084][ T7113] Tainted: [L]=SOFTLOCKUP [ 91.026090][ T7113] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 91.026109][ T7113] Call Trace: [ 91.026116][ T7113] [ 91.026123][ T7113] dump_stack_lvl+0x100/0x190 [ 91.026155][ T7113] should_fail_ex.cold+0x5/0xa [ 91.026180][ T7113] should_failslab+0xc2/0x120 [ 91.026207][ T7113] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 91.026227][ T7113] ? __alloc_skb+0x5b7/0x710 [ 91.026249][ T7113] ? __alloc_skb+0x140/0x710 [ 91.026274][ T7113] __alloc_skb+0x140/0x710 [ 91.026293][ T7113] ? __alloc_skb+0x5b7/0x710 [ 91.026317][ T7113] ? __pfx___alloc_skb+0x10/0x10 [ 91.026341][ T7113] ? find_held_lock+0x2b/0x80 [ 91.026367][ T7113] ? avc_has_perm_noaudit+0x11e/0x470 [ 91.026394][ T7113] ? avc_has_perm_noaudit+0x11e/0x470 [ 91.026422][ T7113] alloc_skb_with_frags+0xdd/0x760 [ 91.026445][ T7113] ? avc_has_perm_noaudit+0x145/0x470 [ 91.026475][ T7113] sock_alloc_send_pskb+0x801/0x980 [ 91.026506][ T7113] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 91.026530][ T7113] ? sock_has_perm+0x25a/0x2f0 [ 91.026548][ T7113] ? __pfx_sock_has_perm+0x10/0x10 [ 91.026574][ T7113] hci_sock_sendmsg+0x1c7/0x26a0 [ 91.026605][ T7113] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 91.026628][ T7113] ? selinux_socket_sendmsg+0x198/0x2f0 [ 91.026652][ T7113] sock_write_iter+0x53a/0x5b0 [ 91.026676][ T7113] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 91.026703][ T7113] ? __pfx_sock_write_iter+0x10/0x10 [ 91.026743][ T7113] ? bpf_lsm_file_permission+0x9/0x10 [ 91.026768][ T7113] ? security_file_permission+0x76/0x210 [ 91.026791][ T7113] ? rw_verify_area+0xce/0x6d0 [ 91.026809][ T7113] vfs_write+0x6af/0x1050 [ 91.026828][ T7113] ? __pfx_sock_write_iter+0x10/0x10 [ 91.026847][ T7113] ? __pfx_vfs_write+0x10/0x10 [ 91.026866][ T7113] ? find_held_lock+0x2b/0x80 [ 91.026908][ T7113] ksys_write+0x1f8/0x250 [ 91.026927][ T7113] ? __pfx_ksys_write+0x10/0x10 [ 91.026954][ T7113] do_syscall_64+0x123/0x790 [ 91.026974][ T7113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.026991][ T7113] RIP: 0033:0x7f620979e159 [ 91.027005][ T7113] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.027021][ T7113] RSP: 002b:00007f620a638028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 91.027037][ T7113] RAX: ffffffffffffffda RBX: 00007f6209a25fa0 RCX: 00007f620979e159 [ 91.027050][ T7113] RDX: 000000000000000b RSI: 0000200000000200 RDI: 0000000000000004 [ 91.027061][ T7113] RBP: 00007f620a638090 R08: 0000000000000000 R09: 0000000000000000 [ 91.027072][ T7113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.027084][ T7113] R13: 00007f6209a26038 R14: 00007f6209a25fa0 R15: 00007fffe09c6738 [ 91.027108][ T7113] [ 91.064512][ T7111] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.066218][ T7111] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.153280][ T7111] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.161247][ T7111] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.303092][ T7125] netlink: 32 bytes leftover after parsing attributes in process `syz.0.378'. [ 91.322999][ T5818] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.323049][ T5818] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.323080][ T5818] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.323110][ T5818] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.450708][ T7131] FAULT_INJECTION: forcing a failure. [ 91.450708][ T7131] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 91.450732][ T7131] CPU: 2 UID: 0 PID: 7131 Comm: syz.0.380 Tainted: G L syzkaller #0 PREEMPT(full) [ 91.450748][ T7131] Tainted: [L]=SOFTLOCKUP [ 91.450751][ T7131] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 91.450758][ T7131] Call Trace: [ 91.450762][ T7131] [ 91.450767][ T7131] dump_stack_lvl+0x100/0x190 [ 91.450787][ T7131] should_fail_ex.cold+0x5/0xa [ 91.450804][ T7131] _copy_from_user+0x2e/0xd0 [ 91.450818][ T7131] copy_msghdr_from_user+0x9f/0x4c0 [ 91.450832][ T7131] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 91.450849][ T7131] ? lock_acquire+0x1d1/0x380 [ 91.450861][ T7131] ? get_pid_task+0x2a/0x250 [ 91.450878][ T7131] ___sys_sendmsg+0x106/0x1e0 [ 91.450891][ T7131] ? __pfx____sys_sendmsg+0x10/0x10 [ 91.450906][ T7131] ? get_pid_task+0x106/0x250 [ 91.450955][ T7131] ? find_held_lock+0x2b/0x80 [ 91.450997][ T7131] __sys_sendmsg+0x160/0x210 [ 91.451025][ T7131] ? __pfx___sys_sendmsg+0x10/0x10 [ 91.451062][ T7131] do_syscall_64+0x123/0x790 [ 91.451079][ T7131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.451091][ T7131] RIP: 0033:0x7fec85d9e159 [ 91.451101][ T7131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.451111][ T7131] RSP: 002b:00007fec86bd2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 91.451123][ T7131] RAX: ffffffffffffffda RBX: 00007fec86025fa0 RCX: 00007fec85d9e159 [ 91.451130][ T7131] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 91.451136][ T7131] RBP: 00007fec86bd2090 R08: 0000000000000000 R09: 0000000000000000 [ 91.451143][ T7131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.451149][ T7131] R13: 00007fec86026038 R14: 00007fec86025fa0 R15: 00007fff96e68818 [ 91.451164][ T7131] [ 91.551169][ T7134] netlink: 316 bytes leftover after parsing attributes in process `syz.0.381'. [ 91.551194][ T7134] netlink: 316 bytes leftover after parsing attributes in process `syz.0.381'. [ 91.647629][ T7138] ip_tables: iptables: counters copy to user failed while replacing table [ 91.728622][ T7140] IPVS: Scheduler module ip_vs_mh not found [ 91.910304][ T7147] netlink: 4 bytes leftover after parsing attributes in process `syz.2.387'. [ 91.910390][ T7147] bridge_slave_1: left allmulticast mode [ 91.910410][ T7147] bridge_slave_1: left promiscuous mode [ 91.910608][ T7147] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.917247][ T7149] FAULT_INJECTION: forcing a failure. [ 91.917247][ T7149] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 91.917276][ T7149] CPU: 1 UID: 0 PID: 7149 Comm: syz.0.388 Tainted: G L syzkaller #0 PREEMPT(full) [ 91.917299][ T7149] Tainted: [L]=SOFTLOCKUP [ 91.917305][ T7149] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 91.917315][ T7149] Call Trace: [ 91.917321][ T7149] [ 91.917327][ T7149] dump_stack_lvl+0x100/0x190 [ 91.917356][ T7149] should_fail_ex.cold+0x5/0xa [ 91.917381][ T7149] _copy_from_user+0x2e/0xd0 [ 91.917403][ T7149] copy_msghdr_from_user+0x9f/0x4c0 [ 91.917424][ T7149] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 91.917450][ T7147] bridge_slave_0: left allmulticast mode [ 91.917449][ T7149] ? lock_acquire+0x1d1/0x380 [ 91.917472][ T7147] bridge_slave_0: left promiscuous mode [ 91.917468][ T7149] ? get_pid_task+0x2a/0x250 [ 91.917492][ T7149] ___sys_sendmsg+0x106/0x1e0 [ 91.917513][ T7149] ? __pfx____sys_sendmsg+0x10/0x10 [ 91.917533][ T7149] ? get_pid_task+0x106/0x250 [ 91.917563][ T7149] ? find_held_lock+0x2b/0x80 [ 91.917602][ T7149] __sys_sendmsg+0x160/0x210 [ 91.917627][ T7149] ? __pfx___sys_sendmsg+0x10/0x10 [ 91.917655][ T7147] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.917663][ T7149] do_syscall_64+0x123/0x790 [ 91.917685][ T7149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.917702][ T7149] RIP: 0033:0x7fec85d9e159 [ 91.917717][ T7149] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.917732][ T7149] RSP: 002b:00007fec86bd2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 91.917749][ T7149] RAX: ffffffffffffffda RBX: 00007fec86025fa0 RCX: 00007fec85d9e159 [ 91.917760][ T7149] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 91.917770][ T7149] RBP: 00007fec86bd2090 R08: 0000000000000000 R09: 0000000000000000 [ 91.917780][ T7149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.917790][ T7149] R13: 00007fec86026038 R14: 00007fec86025fa0 R15: 00007fff96e68818 [ 91.917813][ T7149] [ 91.995513][ T7150] input: syz0 as /devices/virtual/input/input11 [ 92.017159][ T7153] jffs2: notice: (7153) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 92.020515][ T7154] overlayfs: failed to resolve './bus': -2 [ 92.032445][ T7153] overlay: Unknown parameter 'óûVâÁêj—×È[¢Ïû HÔŽE·àlÖ$»Ãº –šK ÿë.vx‡î·×Ó2ævÂQ#ʶï [ 92.032445][ T7153] hÚܘdº1U¼¥šþÑ®LP‹ÂèØl ÐãÁÑG…' [ 92.115835][ T7160] FAULT_INJECTION: forcing a failure. [ 92.115835][ T7160] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 92.115869][ T7160] CPU: 2 UID: 0 PID: 7160 Comm: syz.0.391 Tainted: G L syzkaller #0 PREEMPT(full) [ 92.115893][ T7160] Tainted: [L]=SOFTLOCKUP [ 92.115900][ T7160] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 92.115911][ T7160] Call Trace: [ 92.115917][ T7160] [ 92.115925][ T7160] dump_stack_lvl+0x100/0x190 [ 92.115956][ T7160] should_fail_ex.cold+0x5/0xa [ 92.115982][ T7160] _copy_from_user+0x2e/0xd0 [ 92.116006][ T7160] copy_msghdr_from_user+0x9f/0x4c0 [ 92.116036][ T7160] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 92.116064][ T7160] ? lock_acquire+0x1d1/0x380 [ 92.116084][ T7160] ? get_pid_task+0x2a/0x250 [ 92.116112][ T7160] ___sys_sendmsg+0x106/0x1e0 [ 92.116134][ T7160] ? __pfx____sys_sendmsg+0x10/0x10 [ 92.116154][ T7160] ? get_pid_task+0x106/0x250 [ 92.116188][ T7160] ? find_held_lock+0x2b/0x80 [ 92.116229][ T7160] __sys_sendmsg+0x160/0x210 [ 92.116255][ T7160] ? __pfx___sys_sendmsg+0x10/0x10 [ 92.116294][ T7160] do_syscall_64+0x123/0x790 [ 92.116316][ T7160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.116335][ T7160] RIP: 0033:0x7fec85d9e159 [ 92.116350][ T7160] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.116367][ T7160] RSP: 002b:00007fec86bd2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 92.116385][ T7160] RAX: ffffffffffffffda RBX: 00007fec86025fa0 RCX: 00007fec85d9e159 [ 92.116397][ T7160] RDX: 0000000004000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 92.116408][ T7160] RBP: 00007fec86bd2090 R08: 0000000000000000 R09: 0000000000000000 [ 92.116419][ T7160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.116430][ T7160] R13: 00007fec86026038 R14: 00007fec86025fa0 R15: 00007fff96e68818 [ 92.116456][ T7160] [ 92.173780][ T7165] netlink: 'syz.2.393': attribute type 32 has an invalid length. [ 92.309909][ T7178] FAULT_INJECTION: forcing a failure. [ 92.309909][ T7178] name failslab, interval 1, probability 0, space 0, times 0 [ 92.309940][ T7178] CPU: 2 UID: 0 PID: 7178 Comm: syz.4.397 Tainted: G L syzkaller #0 PREEMPT(full) [ 92.309964][ T7178] Tainted: [L]=SOFTLOCKUP [ 92.309998][ T7178] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 92.310008][ T7178] Call Trace: [ 92.310020][ T7178] [ 92.310027][ T7178] dump_stack_lvl+0x100/0x190 [ 92.310057][ T7178] should_fail_ex.cold+0x5/0xa [ 92.310083][ T7178] should_failslab+0xc2/0x120 [ 92.310109][ T7178] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 92.310132][ T7178] ? sock_alloc_inode+0x26/0x2c0 [ 92.310152][ T7178] ? __pfx_sock_alloc_inode+0x10/0x10 [ 92.310170][ T7178] sock_alloc_inode+0x26/0x2c0 [ 92.310186][ T7178] ? __pfx_sock_alloc_inode+0x10/0x10 [ 92.310202][ T7178] alloc_inode+0x68/0x250 [ 92.310222][ T7178] sock_alloc+0x44/0x280 [ 92.310250][ T7178] do_accept+0xf9/0x530 [ 92.310272][ T7178] ? do_raw_spin_lock+0x128/0x260 [ 92.310297][ T7178] ? __pfx_do_accept+0x10/0x10 [ 92.310335][ T7178] __sys_accept4+0x108/0x200 [ 92.310357][ T7178] ? __pfx___sys_accept4+0x10/0x10 [ 92.310379][ T7178] ? __pfx_ksys_write+0x10/0x10 [ 92.310406][ T7178] __x64_sys_accept4+0x96/0x100 [ 92.310427][ T7178] ? lockdep_hardirqs_on+0x7d/0x110 [ 92.310446][ T7178] do_syscall_64+0x123/0x790 [ 92.310467][ T7178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.310489][ T7178] RIP: 0033:0x7f620979e159 [ 92.310504][ T7178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.310520][ T7178] RSP: 002b:00007f620a638028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 92.310538][ T7178] RAX: ffffffffffffffda RBX: 00007f6209a25fa0 RCX: 00007f620979e159 [ 92.310549][ T7178] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 92.310560][ T7178] RBP: 00007f620a638090 R08: 0000000000000000 R09: 0000000000000000 [ 92.310570][ T7178] R10: 0000000000080800 R11: 0000000000000246 R12: 0000000000000001 [ 92.310581][ T7178] R13: 00007f6209a26038 R14: 00007f6209a25fa0 R15: 00007fffe09c6738 [ 92.310606][ T7178] [ 92.400228][ T7182] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 92.460700][ T7188] FAULT_INJECTION: forcing a failure. [ 92.460700][ T7188] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 92.460727][ T7188] CPU: 0 UID: 0 PID: 7188 Comm: syz.1.402 Tainted: G L syzkaller #0 PREEMPT(full) [ 92.460744][ T7188] Tainted: [L]=SOFTLOCKUP [ 92.460749][ T7188] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 92.460756][ T7188] Call Trace: [ 92.460769][ T7188] [ 92.460774][ T7188] dump_stack_lvl+0x100/0x190 [ 92.460805][ T7188] should_fail_ex.cold+0x5/0xa [ 92.460824][ T7188] _copy_from_user+0x2e/0xd0 [ 92.460846][ T7188] copy_msghdr_from_user+0x9f/0x4c0 [ 92.460866][ T7188] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 92.460885][ T7188] ? lock_acquire+0x1d1/0x380 [ 92.460900][ T7188] ? get_pid_task+0x2a/0x250 [ 92.460920][ T7188] ___sys_sendmsg+0x106/0x1e0 [ 92.460935][ T7188] ? __pfx____sys_sendmsg+0x10/0x10 [ 92.460950][ T7188] ? get_pid_task+0x106/0x250 [ 92.460974][ T7188] ? find_held_lock+0x2b/0x80 [ 92.461005][ T7188] __sys_sendmsg+0x160/0x210 [ 92.461025][ T7188] ? __pfx___sys_sendmsg+0x10/0x10 [ 92.461052][ T7188] do_syscall_64+0x123/0x790 [ 92.461073][ T7188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.461091][ T7188] RIP: 0033:0x7f88dd19e159 [ 92.461103][ T7188] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.461116][ T7188] RSP: 002b:00007f88de112028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 92.461134][ T7188] RAX: ffffffffffffffda RBX: 00007f88dd425fa0 RCX: 00007f88dd19e159 [ 92.461142][ T7188] RDX: 0000000000000410 RSI: 0000200000000600 RDI: 0000000000000004 [ 92.461150][ T7188] RBP: 00007f88de112090 R08: 0000000000000000 R09: 0000000000000000 [ 92.461158][ T7188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.461166][ T7188] R13: 00007f88dd426038 R14: 00007f88dd425fa0 R15: 00007ffecd620378 [ 92.461183][ T7188] [ 92.511722][ T7194] netlink: 4 bytes leftover after parsing attributes in process `syz.2.401'. [ 92.592475][ T7200] FAULT_INJECTION: forcing a failure. [ 92.592475][ T7200] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 92.592507][ T7200] CPU: 2 UID: 0 PID: 7200 Comm: syz.2.407 Tainted: G L syzkaller #0 PREEMPT(full) [ 92.592531][ T7200] Tainted: [L]=SOFTLOCKUP [ 92.592537][ T7200] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 92.592549][ T7200] Call Trace: [ 92.592555][ T7200] [ 92.592562][ T7200] dump_stack_lvl+0x100/0x190 [ 92.592594][ T7200] should_fail_ex.cold+0x5/0xa [ 92.592620][ T7200] _copy_from_user+0x2e/0xd0 [ 92.592644][ T7200] copy_msghdr_from_user+0x9f/0x4c0 [ 92.592667][ T7200] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 92.592695][ T7200] ? lock_acquire+0x1d1/0x380 [ 92.592714][ T7200] ? get_pid_task+0x2a/0x250 [ 92.592741][ T7200] ___sys_sendmsg+0x106/0x1e0 [ 92.592762][ T7200] ? __pfx____sys_sendmsg+0x10/0x10 [ 92.592782][ T7200] ? get_pid_task+0x106/0x250 [ 92.592816][ T7200] ? find_held_lock+0x2b/0x80 [ 92.592859][ T7200] __sys_sendmsg+0x160/0x210 [ 92.592884][ T7200] ? __pfx___sys_sendmsg+0x10/0x10 [ 92.592924][ T7200] do_syscall_64+0x123/0x790 [ 92.592946][ T7200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.592965][ T7200] RIP: 0033:0x7f618cb9e159 [ 92.592979][ T7200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.593019][ T7200] RSP: 002b:00007f618d9af028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 92.593037][ T7200] RAX: ffffffffffffffda RBX: 00007f618ce25fa0 RCX: 00007f618cb9e159 [ 92.593049][ T7200] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000004 [ 92.593059][ T7200] RBP: 00007f618d9af090 R08: 0000000000000000 R09: 0000000000000000 [ 92.593070][ T7200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.593080][ T7200] R13: 00007f618ce26038 R14: 00007f618ce25fa0 R15: 00007ffd5d9f9068 [ 92.593106][ T7200] [ 92.606252][ T7202] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 92.606269][ T7202] overlayfs: missing 'lowerdir' [ 92.621856][ T7202] loop5: detected capacity change from 0 to 7 [ 92.625177][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 92.625295][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 92.626370][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 92.626427][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 92.627136][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 92.627226][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 92.627382][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 92.627427][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 92.627590][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 92.627642][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 92.627779][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 92.627833][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 92.627973][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 92.628029][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 92.628085][ T7202] ldm_validate_partition_table(): Disk read failed. [ 92.628168][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 92.628218][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 92.628389][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 92.628440][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 92.629469][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 92.629523][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 92.630631][ T7202] Dev loop5: unable to read RDB block 0 [ 92.631299][ T7202] loop5: unable to read partition table [ 92.631987][ T7202] loop5: partition table beyond EOD, truncated [ 92.637803][ T7202] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 92.771473][ T5882] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 92.936441][ T7219] FAULT_INJECTION: forcing a failure. [ 92.936441][ T7219] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 92.936466][ T7219] CPU: 1 UID: 0 PID: 7219 Comm: syz.2.412 Tainted: G L syzkaller #0 PREEMPT(full) [ 92.936483][ T7219] Tainted: [L]=SOFTLOCKUP [ 92.936501][ T7219] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 92.936509][ T7219] Call Trace: [ 92.936514][ T7219] [ 92.936519][ T7219] dump_stack_lvl+0x100/0x190 [ 92.936542][ T7219] should_fail_ex.cold+0x5/0xa [ 92.936560][ T7219] _copy_from_user+0x2e/0xd0 [ 92.936576][ T7219] copy_msghdr_from_user+0x9f/0x4c0 [ 92.936591][ T7219] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 92.936610][ T7219] ? lock_acquire+0x1d1/0x380 [ 92.936626][ T7219] ? get_pid_task+0x2a/0x250 [ 92.936654][ T7219] ___sys_sendmsg+0x106/0x1e0 [ 92.936669][ T7219] ? __pfx____sys_sendmsg+0x10/0x10 [ 92.936683][ T7219] ? get_pid_task+0x106/0x250 [ 92.936706][ T7219] ? find_held_lock+0x2b/0x80 [ 92.936734][ T7219] __sys_sendmsg+0x160/0x210 [ 92.936752][ T7219] ? __pfx___sys_sendmsg+0x10/0x10 [ 92.936778][ T7219] do_syscall_64+0x123/0x790 [ 92.936793][ T7219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.936806][ T7219] RIP: 0033:0x7f618cb9e159 [ 92.936816][ T7219] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.936828][ T7219] RSP: 002b:00007f618d9af028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 92.936841][ T7219] RAX: ffffffffffffffda RBX: 00007f618ce25fa0 RCX: 00007f618cb9e159 [ 92.936849][ T7219] RDX: 0000000002000800 RSI: 0000200000000000 RDI: 0000000000000010 [ 92.936856][ T7219] RBP: 00007f618d9af090 R08: 0000000000000000 R09: 0000000000000000 [ 92.936863][ T7219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.936870][ T7219] R13: 00007f618ce26038 R14: 00007f618ce25fa0 R15: 00007ffd5d9f9068 [ 92.936889][ T7219] [ 92.941588][ T5882] usb 9-1: Using ep0 maxpacket: 16 [ 92.942566][ T5882] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 92.943878][ T5882] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.943907][ T5882] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.943930][ T5882] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 92.943963][ T5882] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.944748][ T6113] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 92.948125][ T5882] usb 9-1: config 0 descriptor?? [ 93.054240][ T7224] netlink: 4 bytes leftover after parsing attributes in process `syz.2.413'. [ 93.073098][ T6113] usb 6-1: device descriptor read/64, error -71 [ 93.109256][ T7221] warning: `syz.2.413' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 93.112002][ T7221] xt_hl: Unknown TTL match mode: 255 [ 93.112820][ T7221] key id 00000004 not found [ 93.236422][ T7229] FAULT_INJECTION: forcing a failure. [ 93.236422][ T7229] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 93.236458][ T7229] CPU: 2 UID: 0 PID: 7229 Comm: syz.2.415 Tainted: G L syzkaller #0 PREEMPT(full) [ 93.236500][ T7229] Tainted: [L]=SOFTLOCKUP [ 93.236512][ T7229] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 93.236523][ T7229] Call Trace: [ 93.236534][ T7229] [ 93.236543][ T7229] dump_stack_lvl+0x100/0x190 [ 93.236578][ T7229] should_fail_ex.cold+0x5/0xa [ 93.236609][ T7229] _copy_from_user+0x2e/0xd0 [ 93.236644][ T7229] move_addr_to_kernel+0x65/0x170 [ 93.236669][ T7229] __sys_bind+0x11d/0x260 [ 93.236692][ T7229] ? __pfx___sys_bind+0x10/0x10 [ 93.236712][ T7229] ? __fget_files+0x21f/0x3d0 [ 93.236747][ T7229] ? __pfx_ksys_write+0x10/0x10 [ 93.236775][ T7229] __x64_sys_bind+0x72/0xb0 [ 93.236796][ T7229] ? lockdep_hardirqs_on+0x7d/0x110 [ 93.236818][ T7229] do_syscall_64+0x123/0x790 [ 93.236842][ T7229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.236862][ T7229] RIP: 0033:0x7f618cb9e159 [ 93.236878][ T7229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.236898][ T7229] RSP: 002b:00007f618d9af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 93.236918][ T7229] RAX: ffffffffffffffda RBX: 00007f618ce25fa0 RCX: 00007f618cb9e159 [ 93.236931][ T7229] RDX: 0000000000000062 RSI: 0000200000000000 RDI: 0000000000000005 [ 93.236944][ T7229] RBP: 00007f618d9af090 R08: 0000000000000000 R09: 0000000000000000 [ 93.236955][ T7229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.236967][ T7229] R13: 00007f618ce26038 R14: 00007f618ce25fa0 R15: 00007ffd5d9f9068 [ 93.236994][ T7229] [ 93.311516][ T6113] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 93.360178][ T5882] hid_parser_main: 42 callbacks suppressed [ 93.360201][ T5882] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 93.360226][ T5882] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 93.360247][ T5882] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 93.360268][ T5882] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 93.360289][ T5882] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 93.360310][ T5882] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 93.360330][ T5882] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 93.360351][ T5882] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 93.360372][ T5882] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 93.360391][ T5882] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 93.381049][ T5882] microsoft 0003:045E:07DA.0005: hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 93.451499][ T6113] usb 6-1: device descriptor read/64, error -71 [ 93.558909][ T5840] usb 9-1: USB disconnect, device number 3 [ 93.563942][ T6113] usb usb6-port1: attempt power cycle [ 93.911474][ T6113] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 93.932042][ T6113] usb 6-1: device descriptor read/8, error -71 [ 94.175707][ T7260] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 94.185169][ T6113] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 94.202000][ T6113] usb 6-1: device descriptor read/8, error -71 [ 94.208780][ T7262] zonefs (loop4) ERROR: Not a zoned block device [ 94.232955][ T7265] binder: 7264:7265 ioctl c0306201 200000000040 returned -14 [ 94.312861][ T6113] usb usb6-port1: unable to enumerate USB device [ 94.811241][ T7282] FAULT_INJECTION: forcing a failure. [ 94.811241][ T7282] name failslab, interval 1, probability 0, space 0, times 0 [ 94.811275][ T7282] CPU: 0 UID: 0 PID: 7282 Comm: syz.4.423 Tainted: G L syzkaller #0 PREEMPT(full) [ 94.811299][ T7282] Tainted: [L]=SOFTLOCKUP [ 94.811306][ T7282] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 94.811317][ T7282] Call Trace: [ 94.811323][ T7282] [ 94.811331][ T7282] dump_stack_lvl+0x100/0x190 [ 94.811384][ T7282] should_fail_ex.cold+0x5/0xa [ 94.811411][ T7282] should_failslab+0xc2/0x120 [ 94.811438][ T7282] __kmalloc_noprof+0xfc/0x840 [ 94.811459][ T7282] ? rcu_is_watching+0x13/0xc0 [ 94.811484][ T7282] ? tomoyo_realpath_from_path+0xb6/0x690 [ 94.811517][ T7282] tomoyo_realpath_from_path+0xb6/0x690 [ 94.811547][ T7282] tomoyo_path_number_perm+0x23c/0x580 [ 94.811568][ T7282] ? tomoyo_path_number_perm+0x22e/0x580 [ 94.811591][ T7282] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 94.811623][ T7282] ? __lock_acquire+0x5c0/0x1f40 [ 94.811657][ T7282] ? __fget_files+0x34/0x3d0 [ 94.811681][ T7282] ? find_held_lock+0x2b/0x80 [ 94.811705][ T7282] ? hook_file_ioctl_common+0x140/0x440 [ 94.811811][ T7282] ? __fget_files+0x21f/0x3d0 [ 94.811837][ T7282] security_file_ioctl+0xd3/0x230 [ 94.811877][ T7282] __x64_sys_ioctl+0xb7/0x210 [ 94.811902][ T7282] do_syscall_64+0x123/0x790 [ 94.811923][ T7282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.811941][ T7282] RIP: 0033:0x7f620979e159 [ 94.811956][ T7282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.811973][ T7282] RSP: 002b:00007f620a638028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 94.811991][ T7282] RAX: ffffffffffffffda RBX: 00007f6209a25fa0 RCX: 00007f620979e159 [ 94.812002][ T7282] RDX: 0000000000000000 RSI: 0000000000000933 RDI: 0000000000000003 [ 94.812013][ T7282] RBP: 00007f620a638090 R08: 0000000000000000 R09: 0000000000000000 [ 94.812029][ T7282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.812040][ T7282] R13: 00007f6209a26038 R14: 00007f6209a25fa0 R15: 00007fffe09c6738 [ 94.812066][ T7282] [ 94.812177][ T7282] ERROR: Out of memory at tomoyo_realpath_from_path. [ 94.898174][ T7286] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 95.894253][ T7299] netlink: 60 bytes leftover after parsing attributes in process `syz.4.430'. [ 96.110074][ T7311] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 96.146970][ T7313] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 96.220495][ T7317] FAULT_INJECTION: forcing a failure. [ 96.220495][ T7317] name failslab, interval 1, probability 0, space 0, times 0 [ 96.220527][ T7317] CPU: 2 UID: 0 PID: 7317 Comm: syz.1.438 Tainted: G L syzkaller #0 PREEMPT(full) [ 96.220554][ T7317] Tainted: [L]=SOFTLOCKUP [ 96.220560][ T7317] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.220572][ T7317] Call Trace: [ 96.220578][ T7317] [ 96.220587][ T7317] dump_stack_lvl+0x100/0x190 [ 96.220619][ T7317] should_fail_ex.cold+0x5/0xa [ 96.220647][ T7317] should_failslab+0xc2/0x120 [ 96.220674][ T7317] __kmalloc_noprof+0xfc/0x840 [ 96.220695][ T7317] ? rcu_is_watching+0x13/0xc0 [ 96.220723][ T7317] ? tomoyo_realpath_from_path+0xb6/0x690 [ 96.220774][ T7317] tomoyo_realpath_from_path+0xb6/0x690 [ 96.220807][ T7317] tomoyo_path_number_perm+0x23c/0x580 [ 96.220829][ T7317] ? tomoyo_path_number_perm+0x22e/0x580 [ 96.220854][ T7317] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 96.220887][ T7317] ? __lock_acquire+0x5c0/0x1f40 [ 96.220923][ T7317] ? __fget_files+0x34/0x3d0 [ 96.220949][ T7317] ? find_held_lock+0x2b/0x80 [ 96.220976][ T7317] ? hook_file_ioctl_common+0x140/0x440 [ 96.221010][ T7317] ? __fget_files+0x21f/0x3d0 [ 96.221045][ T7317] security_file_ioctl+0xd3/0x230 [ 96.221071][ T7317] __x64_sys_ioctl+0xb7/0x210 [ 96.221095][ T7317] do_syscall_64+0x123/0x790 [ 96.221118][ T7317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.221137][ T7317] RIP: 0033:0x7f88dd19e159 [ 96.221153][ T7317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.221170][ T7317] RSP: 002b:00007f88de112028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 96.221189][ T7317] RAX: ffffffffffffffda RBX: 00007f88dd425fa0 RCX: 00007f88dd19e159 [ 96.221202][ T7317] RDX: 0000200000000080 RSI: 00000000c008ae88 RDI: 0000000000000005 [ 96.221213][ T7317] RBP: 00007f88de112090 R08: 0000000000000000 R09: 0000000000000000 [ 96.221225][ T7317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.221236][ T7317] R13: 00007f88dd426038 R14: 00007f88dd425fa0 R15: 00007ffecd620378 [ 96.221264][ T7317] [ 96.221312][ T7317] ERROR: Out of memory at tomoyo_realpath_from_path. [ 96.348331][ T43] kauditd_printk_skb: 24 callbacks suppressed [ 96.348352][ T43] audit: type=1400 audit(1791026428.482:1046): avc: denied { block_suspend } for pid=7325 comm="syz.1.440" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 96.419508][ T7329] FAULT_INJECTION: forcing a failure. [ 96.419508][ T7329] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.419543][ T7329] CPU: 1 UID: 0 PID: 7329 Comm: syz.4.441 Tainted: G L syzkaller #0 PREEMPT(full) [ 96.419568][ T7329] Tainted: [L]=SOFTLOCKUP [ 96.419574][ T7329] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.419586][ T7329] Call Trace: [ 96.419592][ T7329] [ 96.419599][ T7329] dump_stack_lvl+0x100/0x190 [ 96.419631][ T7329] should_fail_ex.cold+0x5/0xa [ 96.419658][ T7329] _copy_from_user+0x2e/0xd0 [ 96.419683][ T7329] io_submit_one+0xbd/0x1fb0 [ 96.419711][ T7329] ? __lock_acquire+0x5c0/0x1f40 [ 96.419733][ T7329] ? irqentry_exit+0x24d/0xa10 [ 96.419754][ T7329] ? lockdep_hardirqs_on+0x7d/0x110 [ 96.419774][ T7329] ? __pfx_io_submit_one+0x10/0x10 [ 96.419796][ T7329] ? lock_acquire+0x1d1/0x380 [ 96.419821][ T7329] ? __might_fault+0xc5/0x140 [ 96.419846][ T7329] ? __x64_sys_io_submit+0x1b1/0x3a0 [ 96.419865][ T7329] __x64_sys_io_submit+0x1b1/0x3a0 [ 96.419887][ T7329] ? __pfx___x64_sys_io_submit+0x10/0x10 [ 96.419921][ T7329] do_syscall_64+0x123/0x790 [ 96.419944][ T7329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.419963][ T7329] RIP: 0033:0x7f620979e159 [ 96.419978][ T7329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.419995][ T7329] RSP: 002b:00007f620a638028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 96.420014][ T7329] RAX: ffffffffffffffda RBX: 00007f6209a25fa0 RCX: 00007f620979e159 [ 96.420026][ T7329] RDX: 0000200000000400 RSI: 0000000000000001 RDI: 00007f620a604000 [ 96.420038][ T7329] RBP: 00007f620a638090 R08: 0000000000000000 R09: 0000000000000000 [ 96.420049][ T7329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.420060][ T7329] R13: 00007f6209a26038 R14: 00007f6209a25fa0 R15: 00007fffe09c6738 [ 96.420086][ T7329] [ 96.577300][ T43] audit: type=1400 audit(1791026428.712:1047): avc: denied { append } for pid=7332 comm="syz.4.442" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 96.727559][ T7336] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 96.765062][ T7340] FAULT_INJECTION: forcing a failure. [ 96.765062][ T7340] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.765086][ T7340] CPU: 0 UID: 0 PID: 7340 Comm: syz.1.446 Tainted: G L syzkaller #0 PREEMPT(full) [ 96.765102][ T7340] Tainted: [L]=SOFTLOCKUP [ 96.765106][ T7340] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.765113][ T7340] Call Trace: [ 96.765117][ T7340] [ 96.765122][ T7340] dump_stack_lvl+0x100/0x190 [ 96.765151][ T7340] should_fail_ex.cold+0x5/0xa [ 96.765168][ T7340] _copy_from_user+0x2e/0xd0 [ 96.765184][ T7340] copy_msghdr_from_user+0x9f/0x4c0 [ 96.765199][ T7340] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 96.765216][ T7340] ? lock_acquire+0x1d1/0x380 [ 96.765229][ T7340] ? get_pid_task+0x2a/0x250 [ 96.765247][ T7340] ___sys_sendmsg+0x106/0x1e0 [ 96.765261][ T7340] ? __pfx____sys_sendmsg+0x10/0x10 [ 96.765275][ T7340] ? get_pid_task+0x106/0x250 [ 96.765296][ T7340] ? find_held_lock+0x2b/0x80 [ 96.765322][ T7340] __sys_sendmsg+0x160/0x210 [ 96.765340][ T7340] ? __pfx___sys_sendmsg+0x10/0x10 [ 96.765365][ T7340] do_syscall_64+0x123/0x790 [ 96.765380][ T7340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.765392][ T7340] RIP: 0033:0x7f88dd19e159 [ 96.765402][ T7340] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.765413][ T7340] RSP: 002b:00007f88de112028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 96.765426][ T7340] RAX: ffffffffffffffda RBX: 00007f88dd425fa0 RCX: 00007f88dd19e159 [ 96.765433][ T7340] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 96.765440][ T7340] RBP: 00007f88de112090 R08: 0000000000000000 R09: 0000000000000000 [ 96.765447][ T7340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.765453][ T7340] R13: 00007f88dd426038 R14: 00007f88dd425fa0 R15: 00007ffecd620378 [ 96.765469][ T7340] [ 96.799152][ T43] audit: type=1400 audit(1791026428.932:1048): avc: denied { ioctl } for pid=7341 comm="syz.1.447" path="socket:[22446]" dev="sockfs" ino=22446 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 96.802042][ T43] audit: type=1400 audit(1791026428.942:1049): avc: denied { setopt } for pid=7341 comm="syz.1.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 96.804409][ T43] audit: type=1400 audit(1791026428.942:1050): avc: denied { ioctl } for pid=7341 comm="syz.1.447" path="socket:[21491]" dev="sockfs" ino=21491 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 96.805671][ T43] audit: type=1400 audit(1791026428.942:1051): avc: denied { lock } for pid=7341 comm="syz.1.447" path="socket:[21491]" dev="sockfs" ino=21491 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 96.810957][ T43] audit: type=1400 audit(1791026428.942:1052): avc: denied { write } for pid=7341 comm="syz.1.447" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 96.810994][ T43] audit: type=1400 audit(1791026428.942:1053): avc: denied { open } for pid=7341 comm="syz.1.447" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 96.907719][ T7347] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 97.075489][ T7352] FAULT_INJECTION: forcing a failure. [ 97.075489][ T7352] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.075523][ T7352] CPU: 0 UID: 0 PID: 7352 Comm: syz.1.451 Tainted: G L syzkaller #0 PREEMPT(full) [ 97.075549][ T7352] Tainted: [L]=SOFTLOCKUP [ 97.075555][ T7352] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 97.075565][ T7352] Call Trace: [ 97.075571][ T7352] [ 97.075580][ T7352] dump_stack_lvl+0x100/0x190 [ 97.075613][ T7352] should_fail_ex.cold+0x5/0xa [ 97.075641][ T7352] _copy_to_user+0x32/0xd0 [ 97.075667][ T7352] aio_read_events_ring+0x36e/0x700 [ 97.075704][ T7352] read_events+0xc4/0x570 [ 97.075727][ T7352] ? __pfx_read_events+0x10/0x10 [ 97.075752][ T7352] ? lock_acquire+0x1d1/0x380 [ 97.075790][ T7352] do_io_getevents+0x102/0x170 [ 97.075811][ T7352] __x64_sys_io_getevents+0x17f/0x2e0 [ 97.075832][ T7352] ? ksys_write+0x1ac/0x250 [ 97.075855][ T7352] ? __pfx___x64_sys_io_getevents+0x10/0x10 [ 97.075885][ T7352] do_syscall_64+0x123/0x790 [ 97.075908][ T7352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.075925][ T7352] RIP: 0033:0x7f88dd19e159 [ 97.075941][ T7352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.075959][ T7352] RSP: 002b:00007f88de112028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d0 [ 97.075978][ T7352] RAX: ffffffffffffffda RBX: 00007f88dd425fa0 RCX: 00007f88dd19e159 [ 97.075991][ T7352] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 00007f88de0f1000 [ 97.076009][ T7352] RBP: 00007f88de112090 R08: 0000000000000000 R09: 0000000000000000 [ 97.076021][ T7352] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.076031][ T7352] R13: 00007f88dd426038 R14: 00007f88dd425fa0 R15: 00007ffecd620378 [ 97.076056][ T7352] [ 97.284391][ T7358] FAULT_INJECTION: forcing a failure. [ 97.284391][ T7358] name failslab, interval 1, probability 0, space 0, times 0 [ 97.284422][ T7358] CPU: 3 UID: 0 PID: 7358 Comm: syz.1.454 Tainted: G L syzkaller #0 PREEMPT(full) [ 97.284449][ T7358] Tainted: [L]=SOFTLOCKUP [ 97.284455][ T7358] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 97.284467][ T7358] Call Trace: [ 97.284473][ T7358] [ 97.284481][ T7358] dump_stack_lvl+0x100/0x190 [ 97.284513][ T7358] should_fail_ex.cold+0x5/0xa [ 97.284540][ T7358] should_failslab+0xc2/0x120 [ 97.284566][ T7358] __kmalloc_noprof+0xfc/0x840 [ 97.284586][ T7358] ? rcu_is_watching+0x13/0xc0 [ 97.284613][ T7358] ? tomoyo_realpath_from_path+0xb6/0x690 [ 97.284645][ T7358] tomoyo_realpath_from_path+0xb6/0x690 [ 97.284677][ T7358] tomoyo_path_number_perm+0x23c/0x580 [ 97.284699][ T7358] ? tomoyo_path_number_perm+0x22e/0x580 [ 97.284723][ T7358] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 97.284756][ T7358] ? __lock_acquire+0x5c0/0x1f40 [ 97.284790][ T7358] ? __fget_files+0x34/0x3d0 [ 97.284816][ T7358] ? find_held_lock+0x2b/0x80 [ 97.284842][ T7358] ? hook_file_ioctl_common+0x140/0x440 [ 97.284876][ T7358] ? __fget_files+0x21f/0x3d0 [ 97.284906][ T7358] security_file_ioctl+0xd3/0x230 [ 97.284932][ T7358] __x64_sys_ioctl+0xb7/0x210 [ 97.284956][ T7358] do_syscall_64+0x123/0x790 [ 97.284979][ T7358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.284998][ T7358] RIP: 0033:0x7f88dd19e159 [ 97.285014][ T7358] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.285032][ T7358] RSP: 002b:00007f88de112028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 97.285052][ T7358] RAX: ffffffffffffffda RBX: 00007f88dd425fa0 RCX: 00007f88dd19e159 [ 97.285064][ T7358] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 97.285075][ T7358] RBP: 00007f88de112090 R08: 0000000000000000 R09: 0000000000000000 [ 97.285086][ T7358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.285096][ T7358] R13: 00007f88dd426038 R14: 00007f88dd425fa0 R15: 00007ffecd620378 [ 97.285128][ T7358] [ 97.285136][ T7358] ERROR: Out of memory at tomoyo_realpath_from_path. [ 97.353931][ T9] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 97.446878][ T43] audit: type=1400 audit(1791026429.582:1054): avc: denied { execute } for pid=7361 comm="syz.2.455" path="/dev/nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 97.522640][ T9] usb 9-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 97.523719][ T9] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.523733][ T9] usb 9-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 97.523753][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.683225][ T7358] kvm [7357]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0xa800 [ 97.683458][ T7358] kvm [7357]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0xb200 [ 97.703956][ T7358] kvm [7357]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0xe400 [ 97.723274][ T7358] kvm [7357]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0xee00 [ 97.723496][ T7358] kvm [7357]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0xf800 [ 97.732018][ T7371] FAULT_INJECTION: forcing a failure. [ 97.732018][ T7371] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.732075][ T7371] CPU: 3 UID: 0 PID: 7371 Comm: syz.0.458 Tainted: G L syzkaller #0 PREEMPT(full) [ 97.732101][ T7371] Tainted: [L]=SOFTLOCKUP [ 97.732107][ T7371] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 97.732118][ T7371] Call Trace: [ 97.732125][ T7371] [ 97.732132][ T7371] dump_stack_lvl+0x100/0x190 [ 97.732168][ T7371] should_fail_ex.cold+0x5/0xa [ 97.732195][ T7371] _copy_from_user+0x2e/0xd0 [ 97.732240][ T7371] copy_msghdr_from_user+0x9f/0x4c0 [ 97.732268][ T7371] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 97.732295][ T7371] ? lock_acquire+0x1d1/0x380 [ 97.732316][ T7371] ? get_pid_task+0x2a/0x250 [ 97.732343][ T7371] ___sys_sendmsg+0x106/0x1e0 [ 97.732366][ T7371] ? __pfx____sys_sendmsg+0x10/0x10 [ 97.732387][ T7371] ? get_pid_task+0x106/0x250 [ 97.732421][ T7371] ? find_held_lock+0x2b/0x80 [ 97.732466][ T7371] __sys_sendmsg+0x160/0x210 [ 97.732499][ T7371] ? __pfx___sys_sendmsg+0x10/0x10 [ 97.732539][ T7371] do_syscall_64+0x123/0x790 [ 97.732562][ T7371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.732581][ T7371] RIP: 0033:0x7fec85d9e159 [ 97.732597][ T7371] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.732614][ T7371] RSP: 002b:00007fec86bd2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 97.732633][ T7371] RAX: ffffffffffffffda RBX: 00007fec86025fa0 RCX: 00007fec85d9e159 [ 97.732645][ T7371] RDX: 0000000000000800 RSI: 0000200000004900 RDI: 0000000000000003 [ 97.732656][ T7371] RBP: 00007fec86bd2090 R08: 0000000000000000 R09: 0000000000000000 [ 97.732667][ T7371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.732678][ T7371] R13: 00007fec86026038 R14: 00007fec86025fa0 R15: 00007fff96e68818 [ 97.732704][ T7371] [ 97.847715][ T7378] FAULT_INJECTION: forcing a failure. [ 97.847715][ T7378] name failslab, interval 1, probability 0, space 0, times 0 [ 97.847762][ T7378] CPU: 3 UID: 0 PID: 7378 Comm: syz.0.460 Tainted: G L syzkaller #0 PREEMPT(full) [ 97.847798][ T7378] Tainted: [L]=SOFTLOCKUP [ 97.847808][ T7378] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 97.847823][ T7378] Call Trace: [ 97.847831][ T7378] [ 97.847842][ T7378] dump_stack_lvl+0x100/0x190 [ 97.847887][ T7378] should_fail_ex.cold+0x5/0xa [ 97.847925][ T7378] should_failslab+0xc2/0x120 [ 97.847962][ T7378] __kmalloc_noprof+0xfc/0x840 [ 97.847991][ T7378] ? rcu_is_watching+0x13/0xc0 [ 97.848052][ T7378] ? tomoyo_realpath_from_path+0xb6/0x690 [ 97.848097][ T7378] tomoyo_realpath_from_path+0xb6/0x690 [ 97.848142][ T7378] tomoyo_path_number_perm+0x23c/0x580 [ 97.848172][ T7378] ? tomoyo_path_number_perm+0x22e/0x580 [ 97.848206][ T7378] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 97.848251][ T7378] ? __lock_acquire+0x5c0/0x1f40 [ 97.848299][ T7378] ? __fget_files+0x34/0x3d0 [ 97.848334][ T7378] ? find_held_lock+0x2b/0x80 [ 97.848369][ T7378] ? hook_file_ioctl_common+0x140/0x440 [ 97.848412][ T7378] ? __fget_files+0x21f/0x3d0 [ 97.848448][ T7378] security_file_ioctl+0xd3/0x230 [ 97.848487][ T7378] __x64_sys_ioctl+0xb7/0x210 [ 97.848529][ T7378] do_syscall_64+0x123/0x790 [ 97.848562][ T7378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.848588][ T7378] RIP: 0033:0x7fec85d9e159 [ 97.848611][ T7378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.848636][ T7378] RSP: 002b:00007fec86bd2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 97.848662][ T7378] RAX: ffffffffffffffda RBX: 00007fec86025fa0 RCX: 00007fec85d9e159 [ 97.848679][ T7378] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 97.848694][ T7378] RBP: 00007fec86bd2090 R08: 0000000000000000 R09: 0000000000000000 [ 97.848710][ T7378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.848725][ T7378] R13: 00007fec86026038 R14: 00007fec86025fa0 R15: 00007fff96e68818 [ 97.848763][ T7378] [ 97.848898][ T7378] ERROR: Out of memory at tomoyo_realpath_from_path. [ 98.016661][ T7385] FAULT_INJECTION: forcing a failure. [ 98.016661][ T7385] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 98.016696][ T7385] CPU: 0 UID: 0 PID: 7385 Comm: syz.1.462 Tainted: G L syzkaller #0 PREEMPT(full) [ 98.016723][ T7385] Tainted: [L]=SOFTLOCKUP [ 98.016730][ T7385] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 98.016743][ T7385] Call Trace: [ 98.016749][ T7385] [ 98.016758][ T7385] dump_stack_lvl+0x100/0x190 [ 98.016795][ T7385] should_fail_ex.cold+0x5/0xa [ 98.016825][ T7385] _copy_from_user+0x2e/0xd0 [ 98.016852][ T7385] copy_msghdr_from_user+0x9f/0x4c0 [ 98.016878][ T7385] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 98.016909][ T7385] ? lock_acquire+0x1d1/0x380 [ 98.016933][ T7385] ? get_pid_task+0x2a/0x250 [ 98.016964][ T7385] ___sys_sendmsg+0x106/0x1e0 [ 98.016989][ T7385] ? __pfx____sys_sendmsg+0x10/0x10 [ 98.017012][ T7385] ? get_pid_task+0x106/0x250 [ 98.017050][ T7385] ? find_held_lock+0x2b/0x80 [ 98.017115][ T7385] __sys_sendmsg+0x160/0x210 [ 98.017147][ T7385] ? __pfx___sys_sendmsg+0x10/0x10 [ 98.017191][ T7385] do_syscall_64+0x123/0x790 [ 98.017222][ T7385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.017244][ T7385] RIP: 0033:0x7f88dd19e159 [ 98.017261][ T7385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.017280][ T7385] RSP: 002b:00007f88de112028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 98.017302][ T7385] RAX: ffffffffffffffda RBX: 00007f88dd425fa0 RCX: 00007f88dd19e159 [ 98.017315][ T7385] RDX: 0000000004008054 RSI: 0000200000000200 RDI: 0000000000000005 [ 98.017328][ T7385] RBP: 00007f88de112090 R08: 0000000000000000 R09: 0000000000000000 [ 98.017341][ T7385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.017353][ T7385] R13: 00007f88dd426038 R14: 00007f88dd425fa0 R15: 00007ffecd620378 [ 98.017383][ T7385] [ 98.448596][ T7401] FAULT_INJECTION: forcing a failure. [ 98.448596][ T7401] name failslab, interval 1, probability 0, space 0, times 0 [ 98.448628][ T7401] CPU: 1 UID: 0 PID: 7401 Comm: syz.1.466 Tainted: G L syzkaller #0 PREEMPT(full) [ 98.448653][ T7401] Tainted: [L]=SOFTLOCKUP [ 98.448660][ T7401] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 98.448672][ T7401] Call Trace: [ 98.448680][ T7401] [ 98.448687][ T7401] dump_stack_lvl+0x100/0x190 [ 98.448720][ T7401] should_fail_ex.cold+0x5/0xa [ 98.448748][ T7401] should_failslab+0xc2/0x120 [ 98.448795][ T7401] __kmalloc_noprof+0xfc/0x840 [ 98.448819][ T7401] ? rcu_is_watching+0x13/0xc0 [ 98.448846][ T7401] ? tomoyo_realpath_from_path+0xb6/0x690 [ 98.448880][ T7401] tomoyo_realpath_from_path+0xb6/0x690 [ 98.448912][ T7401] tomoyo_path_number_perm+0x23c/0x580 [ 98.448935][ T7401] ? tomoyo_path_number_perm+0x22e/0x580 [ 98.448960][ T7401] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 98.449001][ T7401] ? __lock_acquire+0x5c0/0x1f40 [ 98.449036][ T7401] ? __fget_files+0x34/0x3d0 [ 98.449063][ T7401] ? find_held_lock+0x2b/0x80 [ 98.449091][ T7401] ? hook_file_ioctl_common+0x140/0x440 [ 98.449126][ T7401] ? __fget_files+0x21f/0x3d0 [ 98.449156][ T7401] security_file_ioctl+0xd3/0x230 [ 98.449183][ T7401] __x64_sys_ioctl+0xb7/0x210 [ 98.449208][ T7401] do_syscall_64+0x123/0x790 [ 98.449233][ T7401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.449253][ T7401] RIP: 0033:0x7f88dd19e159 [ 98.449270][ T7401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.449288][ T7401] RSP: 002b:00007f88de112028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 98.449308][ T7401] RAX: ffffffffffffffda RBX: 00007f88dd425fa0 RCX: 00007f88dd19e159 [ 98.449322][ T7401] RDX: 0000200000000340 RSI: 000000004018aee2 RDI: 0000000000000004 [ 98.449334][ T7401] RBP: 00007f88de112090 R08: 0000000000000000 R09: 0000000000000000 [ 98.449346][ T7401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.449357][ T7401] R13: 00007f88dd426038 R14: 00007f88dd425fa0 R15: 00007ffecd620378 [ 98.449385][ T7401] [ 98.449424][ T7401] ERROR: Out of memory at tomoyo_realpath_from_path. [ 98.490088][ T43] audit: type=1400 audit(1791026430.622:1055): avc: denied { name_bind } for pid=7402 comm="syz.1.467" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 98.590334][ T7407] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 98.644659][ T7412] ================================================================== [ 98.644671][ T7412] BUG: KASAN: slab-use-after-free in dvb_device_open+0x33f/0x3b0 [ 98.644688][ T7412] Read of size 8 at addr ffff88802d66bc18 by task syz.1.470/7412 [ 98.644697][ T7412] [ 98.644704][ T7412] CPU: 1 UID: 0 PID: 7412 Comm: syz.1.470 Tainted: G L syzkaller #0 PREEMPT(full) [ 98.644719][ T7412] Tainted: [L]=SOFTLOCKUP [ 98.644724][ T7412] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 98.644731][ T7412] Call Trace: [ 98.644735][ T7412] [ 98.644740][ T7412] dump_stack_lvl+0x100/0x190 [ 98.644757][ T7412] print_report+0x13d/0x4b0 [ 98.644774][ T7412] ? __virt_addr_valid+0x239/0x430 [ 98.644787][ T7412] ? dvb_device_open+0x33f/0x3b0 [ 98.644798][ T7412] kasan_report+0xdf/0x1c0 [ 98.644814][ T7412] ? dvb_device_open+0x33f/0x3b0 [ 98.644826][ T7412] ? __pfx_dvb_device_open+0x10/0x10 [ 98.644838][ T7412] dvb_device_open+0x33f/0x3b0 [ 98.644849][ T7412] ? __pfx_dvb_device_open+0x10/0x10 [ 98.644860][ T7412] chrdev_open+0x234/0x6a0 [ 98.644876][ T7412] ? __pfx_chrdev_open+0x10/0x10 [ 98.644891][ T7412] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 98.644904][ T7412] do_dentry_open+0x6ab/0x14d0 [ 98.644917][ T7412] ? __pfx_chrdev_open+0x10/0x10 [ 98.644933][ T7412] vfs_open+0x82/0x3f0 [ 98.644950][ T7412] path_openat+0x19fa/0x2440 [ 98.644967][ T7412] ? __pfx_path_openat+0x10/0x10 [ 98.644984][ T7412] do_file_open+0x20e/0x430 [ 98.645000][ T7412] ? __pfx_do_file_open+0x10/0x10 [ 98.645020][ T7412] ? _raw_spin_unlock+0x28/0x50 [ 98.645037][ T7412] ? alloc_fd+0x471/0x7a0 [ 98.645054][ T7412] do_sys_openat2+0x10f/0x1e0 [ 98.645084][ T7412] ? __pfx_do_sys_openat2+0x10/0x10 [ 98.645102][ T7412] ? __pfx_restore_altstack+0x10/0x10 [ 98.645120][ T7412] __x64_sys_openat+0x12d/0x210 [ 98.645136][ T7412] ? __pfx___x64_sys_openat+0x10/0x10 [ 98.645153][ T7412] ? __do_sys_rt_sigreturn+0x1da/0x2c0 [ 98.645171][ T7412] ? trace_hardirqs_off+0x70/0x170 [ 98.645188][ T7412] do_syscall_64+0x123/0x790 [ 98.645201][ T7412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.645212][ T7412] RIP: 0033:0x7f88dd15e98e [ 98.645221][ T7412] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 98.645232][ T7412] RSP: 002b:00007f88de0aeb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 98.645244][ T7412] RAX: ffffffffffffffda RBX: 00007f88de0af6c0 RCX: 00007f88dd15e98e [ 98.645251][ T7412] RDX: 0000000000000001 RSI: 00007f88de0aec00 RDI: ffffffffffffff9c [ 98.645279][ T7412] RBP: 00007f88de0aec00 R08: 0000000000000000 R09: 0000000000000000 [ 98.645287][ T7412] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 98.645294][ T7412] R13: 00007f88dd426308 R14: 00007f88dd426270 R15: 00007ffecd620378 [ 98.645305][ T7412] [ 98.645309][ T7412] [ 98.645311][ T7412] Allocated by task 1: [ 98.645317][ T7412] kasan_save_stack+0x30/0x50 [ 98.645331][ T7412] kasan_save_track+0x14/0x30 [ 98.645343][ T7412] __kasan_kmalloc+0xaa/0xb0 [ 98.645356][ T7412] __kmalloc_cache_noprof+0x2f8/0x6d0 [ 98.645366][ T7412] dvb_register_device+0x1d6/0x1e20 [ 98.645376][ T7412] dvb_register_frontend+0x552/0x820 [ 98.645386][ T7412] vidtv_bridge_probe+0x44b/0xa30 [ 98.645399][ T7412] platform_probe+0x106/0x1d0 [ 98.645410][ T7412] really_probe+0x241/0xa60 [ 98.645423][ T7412] __driver_probe_device+0x210/0x460 [ 98.645437][ T7412] driver_probe_device+0x4a/0x140 [ 98.645450][ T7412] __driver_attach+0x21f/0x5b0 [ 98.645463][ T7412] bus_for_each_dev+0x13e/0x1d0 [ 98.645473][ T7412] bus_add_driver+0x305/0x5b0 [ 98.645485][ T7412] driver_register+0x1e2/0x360 [ 98.645500][ T7412] vidtv_bridge_init+0x52/0x80 [ 98.645510][ T7412] do_one_initcall+0x11c/0x6f0 [ 98.645521][ T7412] kernel_init_freeable+0x6ea/0x7b0 [ 98.645533][ T7412] kernel_init+0x21/0x1e0 [ 98.645551][ T7412] ret_from_fork+0x730/0xd60 [ 98.645562][ T7412] ret_from_fork_asm+0x1a/0x30 [ 98.645572][ T7412] [ 98.645575][ T7412] Freed by task 7409: [ 98.645579][ T7412] kasan_save_stack+0x30/0x50 [ 98.645592][ T7412] kasan_save_track+0x14/0x30 [ 98.645605][ T7412] kasan_save_free_info+0x3b/0x70 [ 98.645614][ T7412] __kasan_slab_free+0x5f/0x80 [ 98.645628][ T7412] kfree+0x22b/0x6d0 [ 98.645636][ T7412] dvb_device_put.part.0+0x57/0x90 [ 98.645646][ T7412] dvb_device_open+0x2ba/0x3b0 [ 98.645655][ T7412] chrdev_open+0x234/0x6a0 [ 98.645668][ T7412] do_dentry_open+0x6ab/0x14d0 [ 98.645680][ T7412] vfs_open+0x82/0x3f0 [ 98.645694][ T7412] path_openat+0x19fa/0x2440 [ 98.645707][ T7412] do_file_open+0x20e/0x430 [ 98.645721][ T7412] do_sys_openat2+0x10f/0x1e0 [ 98.645736][ T7412] __x64_sys_openat+0x12d/0x210 [ 98.645752][ T7412] do_syscall_64+0x123/0x790 [ 98.645763][ T7412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.645773][ T7412] [ 98.645775][ T7412] The buggy address belongs to the object at ffff88802d66bc00 [ 98.645775][ T7412] which belongs to the cache kmalloc-256 of size 256 [ 98.645784][ T7412] The buggy address is located 24 bytes inside of [ 98.645784][ T7412] freed 256-byte region [ffff88802d66bc00, ffff88802d66bd00) [ 98.645794][ T7412] [ 98.645797][ T7412] The buggy address belongs to the physical page: [ 98.645802][ T7412] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2d66a [ 98.645812][ T7412] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 98.645821][ T7412] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 98.645831][ T7412] page_type: f5(slab) [ 98.645841][ T7412] raw: 00fff00000000040 ffff88801c042b40 dead000000000100 dead000000000122 [ 98.645850][ T7412] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 98.645860][ T7412] head: 00fff00000000040 ffff88801c042b40 dead000000000100 dead000000000122 [ 98.645870][ T7412] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 98.645879][ T7412] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 98.645888][ T7412] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 98.645894][ T7412] page dumped because: kasan: bad access detected [ 98.645899][ T7412] page_owner tracks the page as allocated [ 98.645903][ T7412] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 9263602927 [ 98.645920][ T7412] post_alloc_hook+0xfd/0x120 [ 98.645929][ T7412] get_page_from_freelist+0x110d/0x35d0 [ 98.645962][ T7412] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 98.645975][ T7412] new_slab+0xa9/0x6e0 [ 98.645984][ T7412] refill_objects+0xe3/0x410 [ 98.645994][ T7412] __pcs_replace_empty_main+0x35e/0x650 [ 98.646004][ T7412] __kmalloc_cache_noprof+0x4f4/0x6d0 [ 98.646014][ T7412] bus_add_driver+0x92/0x5b0 [ 98.646025][ T7412] driver_register+0x1e2/0x360 [ 98.646041][ T7412] usb_register_driver+0x21c/0x3e0 [ 98.646050][ T7412] do_one_initcall+0x11c/0x6f0 [ 98.646061][ T7412] kernel_init_freeable+0x6ea/0x7b0 [ 98.646073][ T7412] kernel_init+0x21/0x1e0 [ 98.646086][ T7412] ret_from_fork+0x730/0xd60 [ 98.646097][ T7412] ret_from_fork_asm+0x1a/0x30 [ 98.646108][ T7412] page_owner free stack trace missing [ 98.646112][ T7412] [ 98.646114][ T7412] Memory state around the buggy address: [ 98.646119][ T7412] ffff88802d66bb00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 98.646127][ T7412] ffff88802d66bb80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 98.646134][ T7412] >ffff88802d66bc00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 98.646140][ T7412] ^ [ 98.646145][ T7412] ffff88802d66bc80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 98.646153][ T7412] ffff88802d66bd00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 98.646158][ T7412] ================================================================== [ 98.646219][ T7412] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 98.934028][ T7412] CPU: 1 UID: 0 PID: 7412 Comm: syz.1.470 Tainted: G L syzkaller #0 PREEMPT(full) [ 98.938372][ T7412] Tainted: [L]=SOFTLOCKUP [ 98.940195][ T7412] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 98.944322][ T7412] Call Trace: [ 98.945788][ T7412] [ 98.947351][ T7412] dump_stack_lvl+0x100/0x190 [ 98.949504][ T7412] vpanic+0x553/0x970 [ 98.951262][ T7412] ? __pfx_vpanic+0x10/0x10 [ 98.953191][ T7412] ? mark_held_locks+0x40/0x70 [ 98.955192][ T7412] ? dvb_device_open+0x33f/0x3b0 [ 98.957288][ T7412] panic+0xd1/0xe0 [ 98.958870][ T7412] ? __pfx_panic+0x10/0x10 [ 98.960750][ T7412] ? dvb_device_open+0x33f/0x3b0 [ 98.962849][ T7412] ? preempt_schedule_common+0x3c/0xb0 [ 98.965114][ T7412] check_panic_on_warn.cold+0x19/0x34 [ 98.967312][ T7412] end_report.part.0+0x3a/0x90 [ 98.969285][ T7412] kasan_report.cold+0xe/0x18 [ 98.971236][ T7412] ? dvb_device_open+0x33f/0x3b0 [ 98.973312][ T7412] ? __pfx_dvb_device_open+0x10/0x10 [ 98.975578][ T7412] dvb_device_open+0x33f/0x3b0 [ 98.977700][ T7412] ? __pfx_dvb_device_open+0x10/0x10 [ 98.979713][ T7412] chrdev_open+0x234/0x6a0 [ 98.981172][ T7412] ? __pfx_chrdev_open+0x10/0x10 [ 98.982771][ T7412] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 98.984712][ T7412] do_dentry_open+0x6ab/0x14d0 [ 98.986234][ T7412] ? __pfx_chrdev_open+0x10/0x10 [ 98.987746][ T7412] vfs_open+0x82/0x3f0 [ 98.989061][ T7412] path_openat+0x19fa/0x2440 [ 98.990643][ T7412] ? __pfx_path_openat+0x10/0x10 [ 98.992283][ T7412] do_file_open+0x20e/0x430 [ 98.993760][ T7412] ? __pfx_do_file_open+0x10/0x10 [ 98.995386][ T7412] ? _raw_spin_unlock+0x28/0x50 [ 98.996954][ T7412] ? alloc_fd+0x471/0x7a0 [ 98.998359][ T7412] do_sys_openat2+0x10f/0x1e0 [ 98.999858][ T7412] ? __pfx_do_sys_openat2+0x10/0x10 [ 99.001510][ T7412] ? __pfx_restore_altstack+0x10/0x10 [ 99.003208][ T7412] __x64_sys_openat+0x12d/0x210 [ 99.004747][ T7412] ? __pfx___x64_sys_openat+0x10/0x10 [ 99.006454][ T7412] ? __do_sys_rt_sigreturn+0x1da/0x2c0 [ 99.008163][ T7412] ? trace_hardirqs_off+0x70/0x170 [ 99.009769][ T7412] do_syscall_64+0x123/0x790 [ 99.011220][ T7412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.013135][ T7412] RIP: 0033:0x7f88dd15e98e [ 99.014660][ T7412] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 99.021709][ T7412] RSP: 002b:00007f88de0aeb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 99.024888][ T7412] RAX: ffffffffffffffda RBX: 00007f88de0af6c0 RCX: 00007f88dd15e98e [ 99.027569][ T7412] RDX: 0000000000000001 RSI: 00007f88de0aec00 RDI: ffffffffffffff9c [ 99.030115][ T7412] RBP: 00007f88de0aec00 R08: 0000000000000000 R09: 0000000000000000 [ 99.033276][ T7412] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 99.036390][ T7412] R13: 00007f88dd426308 R14: 00007f88dd426270 R15: 00007ffecd620378 [ 99.038932][ T7412] [ 99.040538][ T7412] Kernel Offset: disabled [ 99.041977][ T7412] Rebooting in 86400 seconds.. VM DIAGNOSIS: 11:20:30 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000000 RBX=ffffc90003e57f48 RCX=0000000000000000 RDX=1ffff920007cafbf RSI=ffffffff81ac35d1 RDI=ffff888024b46530 RBP=00007f88de0f03f8 RSP=ffffc90003e57cd8 R8 =0000000000000006 R9 =00007ffffffff000 R10=00007f88de0f03f8 R11=0000000000000000 R12=ffff888024b44b00 R13=ffffc90003e57df0 R14=ffffc90003e57fb8 R15=0000000000000000 RIP=ffffffff81ac35eb RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f88de0f16c0 ffffffff 00c00000 GS =0000 ffff8880d5b4e000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f88ddf5da08 CR3=000000005a008000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fff00000 Opmask01=0000000000000000 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffecd620866 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffecd620866 00007ffecd62086c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f88dd23564e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f88dd23568e ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f88dd2357f2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f88dd235680 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000003130302f 3930302f6273752f 7375622f7665642f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000001213130c 1a13130c4150560c 5056410c5546470c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f88dd3f25f8 00007f88dd3f25c8 00007f88dd3f2600 00007f88dd3f25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff85b1bad5 RDI=ffffffff9bc76f60 RBP=ffffffff9bc76f20 RSP=ffffc90003e27148 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000005 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff85b1baff RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f88de0af6c0 ffffffff 00c00000 GS =0000 ffff8880d5c4e000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f88de0aeff8 CR3=000000005a008000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f620a55d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffe09c6c26 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffe09c6c26 00007fffe09c6c2c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f620983564e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f620983568e ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f62098357f2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6209835680 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f62099f2600 00007f62099f25e0 00007f62099f25e8 00007f62099f2618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f62099f25f8 00007f62099f25c8 00007f62099f2600 00007f62099f25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000000ae581 RBX=ffff88801f2f2580 RCX=ffffffff8bd2c215 RDX=0000000000000001 RSI=ffffffff8e38edcf RDI=ffffffff8c623a80 RBP=ffffed1003e5e4b0 RSP=ffffc90000197e00 R8 =0000000000000001 R9 =ffffed100d4c67bd R10=ffff88806a633deb R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000032fc4 R15=dffffc0000000000 RIP=ffffffff8bd2a74f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5d4e000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f88dd1eb840 CR3=000000005a008000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f88ddf5d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffecd620866 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffecd620866 00007ffecd62086c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f88dd23564e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f88dd23568e ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f88dd2357f2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f88dd235680 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f88dd3f2600 00007f88dd3f25e0 00007f88dd3f25e8 00007f88dd3f2618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000700080006 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f88dd3f25f8 00007f88dd3f25c8 00007f88dd3f2600 00007f88dd3f25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000007d049 RBX=ffff88801f2f0000 RCX=ffffffff8bd2c215 RDX=0000000000000001 RSI=ffffffff8e38edcf RDI=ffffffff8c623a80 RBP=ffffed1003e5e000 RSP=ffffc900001a7e00 R8 =0000000000000001 R9 =ffffed100d4e67bd R10=ffff88806a733deb R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000034fc4 R15=dffffc0000000000 RIP=ffffffff8bd2a74f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5e4e000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f88de0cfff8 CR3=000000005ef71000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 788662bb9e9e2809 4c1cb3b47c5a8af3 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd5d9f9556 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd5d9f9556 00007ffd5d9f955c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f618cc3564e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f618cc3568e ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f618cc357f2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f618cc35680 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f618cdf2600 00007f618cdf25e0 00007f618cdf25e8 00007f618cdf2618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f618cdf25f8 00007f618cdf25c8 00007f618cdf2600 00007f618cdf25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000