last executing test programs: 2.090054233s ago: executing program 3 (id=2047): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000a00)="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", 0x53c}], 0x1}}], 0x1, 0x8010) shutdown(r0, 0x1) close(r0) 1.947995495s ago: executing program 3 (id=2048): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0xa88}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x5, [@enum={0x3, 0x1, 0x0, 0xf, 0x4, [{0xa}]}, @struct={0x4}]}, {0x0, [0x0, 0x0, 0x61]}}, 0x0, 0x3d, 0x0, 0x1}, 0x28) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='hfsplus\x00', 0x2000010, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000140)={0x0, 0x80000, 0xffffffffffffffff}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r4, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0xd6, 0x1c, 0xd, 0x5, 0x401, 0xfff5, 0xa, 0x0, 0x52, 0x8000, 0x7e9, 0x401, 0x9aa1, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r4, r5], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000340)={0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b14fea7a1316b81525ccf0f8b91fd2eddb851ba62b00d87337407214ea270251"}}) r7 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r7) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000300)={0x0, 0xfffffffffffffe7a, r9, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000600)={r10, 0x0, 0x1000, 0x10000, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800000, 0x800, 0xfffffffd], [0x0, 0x1001000, 0xfffffffc], [0x0, 0x0, 0xe8a6]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r7, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x1, [r11, 0x0, 0x0, r12], [0x2b8], [0x0, 0x0, 0x0, 0x1]}) ioctl$DRM_IOCTL_MODE_RMFB(r7, 0xc00464af, &(0x7f00000005c0)=r10) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000280)={&(0x7f0000000240)=[0x0], 0x1, r4, r10, 0x375, 0x7, 0x4, 0xffff, {0x8, 0x101, 0x401, 0x1, 0x80, 0x6, 0x4, 0x7, 0x400, 0x7ff, 0x5cf, 0x5, 0x4, 0xfffffff5, "78ea8512f360c692d5a5579128368da7529ee2d045ed621a976da55bff03bc5e"}}) syz_emit_ethernet(0x36, &(0x7f00000010c0)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x0, 0x0, 0x0, @private2, @local}}}}, 0x0) 1.947661095s ago: executing program 3 (id=2049): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x3, @multicast, 'macvlan1\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000001340)=[{{0x0, 0x1f4, &(0x7f0000000980)=[{&(0x7f0000000500)="ab", 0x5ea}], 0x1}}], 0x484, 0x24048084) 1.770448447s ago: executing program 3 (id=2053): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x40000000000000, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="021600000a0000000200000000000000080012000007a18208"], 0x50}}, 0x0) 1.755973404s ago: executing program 3 (id=2054): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r0, 0x1) write(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) munmap(&(0x7f000038d000/0x3000)=nil, 0x3000) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x43033, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000fde000/0x4000)=nil, 0x4000) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503", @ANYRES64], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5c300000000fb04003b1c21000800", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) mmap$KVM_VCPU(&(0x7f0000f3d000/0x4000)=nil, 0x930, 0x0, 0x4030031, 0xffffffffffffffff, 0x0) 1.75367305s ago: executing program 0 (id=2056): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000a00)="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", 0x53c}], 0x1}}], 0x1, 0x8010) shutdown(r0, 0x1) close(r0) 1.690171898s ago: executing program 0 (id=2057): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) recvmmsg(r1, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0}, 0x22}], 0x1, 0x22020, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000002d00010026bd7000fcdbdf2504"], 0x2c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20008010) (fail_nth: 9) 1.479503834s ago: executing program 1 (id=2059): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r0, 0x1) write(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) munmap(&(0x7f000038d000/0x3000)=nil, 0x3000) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x43033, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000fde000/0x4000)=nil, 0x4000) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001", @ANYRES64], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000008000000000a20000000160a03020000000000090000020000000900020073797a3000000000140000001100010000000000000000000000000a675d4a29770df008a1"], 0x48}}, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x44, r3, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3ad}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8d90}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4800}, 0x840) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x200000a, 0x20031, 0xffffffffffffffff, 0x0) munmap(&(0x7f000075a000/0xb000)=nil, 0xb000) munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000002080)={0x2, 0x0, {&(0x7f0000001f80)=""/152, 0x98, 0x0, 0x0, 0x2}}, 0x48) write$qrtrtun(r5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) munmap(&(0x7f0000f62000/0x1000)=nil, 0x1000) sendmsg$key(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)=ANY=[@ANYRES32=0x0], 0xc8}}, 0x20008000) 808.7492ms ago: executing program 0 (id=2063): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x40000000000000, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="021600000a0000000200000000000000080012000007a18208"], 0x50}}, 0x0) 807.612379ms ago: executing program 0 (id=2064): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40) 807.408042ms ago: executing program 0 (id=2065): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000a00)="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", 0x53f}], 0x1}}], 0x1, 0x8010) shutdown(r0, 0x1) close(r0) 739.08482ms ago: executing program 0 (id=2066): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc49093d11594ef13325790b55efbdc2dd99ed1", 0xbd}, {&(0x7f00000002c0)="9c812b37fa6bd3963cbc009f0a922658be630ec6041ed353d314e58721edf306c382ac611fe34479cb9e2585745ff3c61da74b060400000000000000178176dc533f123b66d04d51fb7421cdc9fed78e3e1c18fb67c1f75e", 0x58}, {&(0x7f0000000180)="3f82090ccda4f8ce11f43ea8b51b08afd200c6075794cdd2e0021e30a0f6267447162a2085457cf687e74d142e85e9c4ac6e", 0x32}], 0x3}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000c40)="5c5eafd3ae55a73702d6befaee97f47f4be65587e1fca708cee084691e4587d887a5eaab43ac5edc4886496910cd7a153cd84b93", 0x34}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000001800)="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", 0x13f}], 0x1}}], 0x3, 0x0) 518.865088ms ago: executing program 3 (id=2067): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r0, &(0x7f0000000340)="18000000010005", 0x7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r2, &(0x7f0000002300)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000080)="640ff055597e8a84a48d3992e3974f87b2d89479f0e1ffe80b43e8531e73949246afb7aa676caca71ac8782d5be684b4f6c10efcb9049e36f94b776ac633e6081674a0f404132191df2e91c764c71c3d5c9da5", 0x53}], 0x1}}], 0x1, 0x2000c000) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0xc, &(0x7f0000000140)=@gcm_128={{0xcf05a145b37f58f3}, "2034b251822b3a46", "fa6b72def4acb1a6c86918c638857983", "34b3adec", "6745ac421772258f"}, 0x28) socket$qrtr(0x2a, 0x2, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000), 0x6e, &(0x7f0000000300)=[{0x0}, {0x0}], 0x2}, 0x40000000) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_buf(r5, 0x29, 0x32, &(0x7f0000000000)="3b9f31b362d9345c981059c3e2731d2a23c6e073", 0x14) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e22, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r3}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) read(r1, &(0x7f00000000c0)=""/81, 0xfdef) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000001780)=""/93, &(0x7f0000001800)=0x5d) 270.569598ms ago: executing program 1 (id=2068): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa8}, [@ldst={0x5, 0x3, 0x0, 0x0, 0xa}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x600}, 0x2a) 270.417738ms ago: executing program 1 (id=2069): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x44, r1, 0x1, 0x20000002, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_AUTH_TYPE={0x8}, @key_params=[@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x6}]]}, 0x44}, 0x1, 0x0, 0x0, 0x40094}, 0x0) 219.774346ms ago: executing program 1 (id=2070): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0xa88}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x5, [@enum={0x3, 0x1, 0x0, 0xf, 0x4, [{0xa}]}, @struct={0x4}]}, {0x0, [0x0, 0x0, 0x61]}}, 0x0, 0x3d, 0x0, 0x1}, 0x28) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='hfsplus\x00', 0x2000010, &(0x7f0000000100)='barrier') ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r3, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0xd6, 0x1c, 0xd, 0x5, 0x401, 0xfff5, 0xa, 0x0, 0x52, 0x8000, 0x7e9, 0x401, 0x9aa1, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r3, r4], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, &(0x7f0000000340)={0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b14fea7a1316b81525ccf0f8b91fd2eddb851ba62b00d87337407214ea270251"}}) r6 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r6) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000300)={0x0, 0xfffffffffffffe7a, r8, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000600)={r9, 0x0, 0x1000, 0x10000, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800000, 0x800, 0xfffffffd], [0x0, 0x1001000, 0xfffffffc], [0x0, 0x0, 0xe8a6]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r6, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x1, [r10, 0x0, 0x0, r11], [0x2b8], [0x0, 0x0, 0x0, 0x1]}) ioctl$DRM_IOCTL_MODE_RMFB(r6, 0xc00464af, &(0x7f00000005c0)=r9) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000280)={&(0x7f0000000240)=[0x0], 0x1, r3, r9, 0x375, 0x7, 0x4, 0xffff, {0x8, 0x101, 0x401, 0x1, 0x80, 0x6, 0x4, 0x7, 0x400, 0x7ff, 0x5cf, 0x5, 0x4, 0xfffffff5, "78ea8512f360c692d5a5579128368da7529ee2d045ed621a976da55bff03bc5e"}}) syz_emit_ethernet(0x36, &(0x7f00000010c0)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x0, 0x0, 0x0, @private2, @local}}}}, 0x0) 219.27502ms ago: executing program 1 (id=2071): r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x8) close(r0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r0, &(0x7f000000e400)={0x2020, 0x0, 0x0, 0x0}, 0x204a) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) (async, rerun: 32) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 32) ptrace(0x10, r4) (async) ptrace$poke(0x5, r4, &(0x7f0000000000), 0x8) (async, rerun: 32) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, r2, {0x7, 0x1f, 0xffffffff, 0x240009, 0x1, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x20, 0x7}}, 0x50) (async, rerun: 32) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x62, 0x556a3d07, 0x0, 0x0, 0x1b, 0x8, "864c06ac04046dd802daea519ef0215e4068622d1704f84544d04ed381833624cb3c5c08da88e2168511d0828f534858791bb89fb0850e17c8944d1c0e3944a4", "9bf8f96fdb24314734d77f184a417e8756bf92291d0ce29d1435e343ce0dfe17acb9be531dd39bb1e90829e83a87b629adf37a8086a4ca3d902e6b74201ce296", "6d090b0fd66437690140e9ffde0aeb4be3c51318c97cc69c97c7ce5f4af53796", [0x0, 0x2]}) syz_fuse_handle_req(r0, &(0x7f000000a3c0)="61ddaf21c1282a5a6352f350c2f614ede5b0c406f5488574ed6fcb609ce20f648ee274c8dfeaa625b1fd332f70f776ae0b6e3f959c24f3876756c20e05c82079387520764f2446820d53242898a90e51c5b68297e39b7fcf558b450e9608326c3dc6704a054216a8c6f0d689e5eb6b8564854376910eff147682d2378b9c5b95a626493ce628b1bb6b524ed7e90ebe6eb0246399eac6d624dcf4e824be2de9c1d5d06eab13f2770577304eb676106fd9868a030192067ac009482e03a817f1abd909a94702479fe30b2594ca60b4acc37148cf04e8c0e76dd69e29d243596f8174129ac6ab9dbb79ace8f0fae14234845725102a027d4163f97f3971d207500defeaa2c7318f7e82e591701f9d3f78592ea7ec28806a53278a35a20251eeb2735fa9f37bf0045b5e6faf5f751c7ad31d8426be7b09027b2092f49247159a33b580d2691ebf00797962168bdc368f57282ce5b8526eacb80952ffba771626c0016b8a010546f0b4daf470814cee0ea418b76331c34616cea0459dbd1f196364c99e4a47bcdd64b518ef51833e6f8041fbbbe86e808bdbade7009985f2c4d7ffd76a0e7dc7d542bdee1d136d2096dfa997f98ac83c6341b306a3a8cf81642566d7777480d4dc61b0182f0d418ce95d74c9aadb182326d6671412a1f0c62c93a0ba873ff5daa4ece4b2fc73ed5b02b60890374acc0cd25cbf1707016a542fafd6af098f9737304c726712c8243dcd5eb15c0996e9e03dd741d519cb3e86ea214e20408c2cc5ea607585f1bfd268ba3084ffa69425512571d263fd1ae49b488b2964bd3e78943122006489cc22191dec2900a7fdf798c9f683461f2a7b940f4112b805dc077a7b99071b5b454f7c6d2b13a6b23091f74ecc65a24ac0d11e2ffd7332fb2b2b11aeec3c809d78cc2e168f126f38dddfe3e1d0ec1c6fb25f880690f97a70dc5fbea5d25dba3b24c01d9bd228c58deca660625511127a62220429c94be65d6ad4ce7e79e97af67931b46ccfabca5dbaea11e2dc76279b0244cc2845f31beff418fe4bd892d3676079d9d4eb0251dfead9e0a07a11c0a7e597ac89ec77de60a5f6e0ff4a62374856b8e1659e885d3a0d90293daa0c7bb041cbcd54bf098b66b2ddec28dcba4cfbad969e3b97e4bf680f901485d1cd4b231a9115c22ab2f911415ad0efe0eb7f4bee15c6de7d0f818acd687a117286f9e3c33df5206df918ea4ac52927487968d88f4a18d4889a4060f20487e4cec19250fe48a16b1f9f7250a6ab81fbaa2ad451a936ee98021bf859b9a635132a0dcf7530c0e2c84a459241a1fc9fe45b4a4f32fa8e95185db92660292ece6b5ddbb0b9f69bd7435cd4944f8ff2ed51172f0683fbae1013cde202498f2e1be54d1a2e17b3984b17d1994915a477c87697f465781e41b44c6a40ae035e75a4d9f9c0926bec533db0d4c26d605cb1ae225e692ed315062e8c3283716929e25a22b25105e018d81c07cb7600d1bae16d8beec33c88f1cdb52ac988b4677ed604c28ff1cdeeeb74c332dc526cff5ee935016984cabf117694cccabae944de4d2d2daff8f281b6434475b52c1910210598c684da99c108000a53d2ca03afd42b0200691d92341616353a22a8dacd8cb7eee85953b251236603d2ef1e450675f8d0f3cd0e28ef36457f79c267d836d14ed758148e979b9749ddcef14aec903939c69567a1697aae8f9ed72a16be0267a3a967727937f609720802570287c4e08641b9b7b979c6541add0e8600dd2d75a1dc0822ceb7a7e4e1afda2940d127f488589963b46417d7a7474545e5b08a621c1a7637b3fcb62b0aee10d999505907bd14033370e391f6192ff7d718e1db3ef861d30b2d477f11cd45ecb296d4babcccc34901165e3fcdbef6fa1ee478a97f7d21dc5562582d67c448ae352d3157d83e8ab0122a2bb056bdff8043a91b8f3abe4d788fe741483997a8e3fe126626a14b4243d3ff8ada8dd555c95d5e30b68cc053dfbbb61940cbb552cc1fe211ea5ea13cbfb6a577cde339282d84e92f866145e7b1de4d5a1705fc24fc8843f1a69f4c604adf0d715ad88c6a4ac80a35375662610e0ed07af9c4c76326716a77b106ef87782804ca353eaade28a1ca522d706282ebe48c0b23fd42b2e0297f5997d3aab40615f143e868c6aaf920bc827224946db3e3b3e65ea66dbfa5fe6c45dab930877852e86df251024e4ae46ee8e04cf40f2b3239f4df40062cfddada61700959deaeed3a44fb185ce51685fcab793184435b3e668e7d80820a613acde8d61e24571b9de7ce4581a4751d70a28e8d098660e81941fe40b6844a3204b512457194e100c995c75921569f735afee321080ed6310610887ca842001f5112c5af8c9083e3d088a404b48ee82e1e8be16fd493a2a643816488447706f3e86d2d0ed48f7397aad0cf105a4a71d928a15413ab3813e42478cf7a5be2e03d15ccb90a625863cb2ca1059110f90186cf4c370469f4d7e1ccda56ed9c427cce46e7d1c82641554ffa0c7c42697cbc754702b62be5ab03c995ac8cda3145959c440c4d6ead7d6398faf189de77645a05a54d6c33c9678daec6e5ac0048f91e15b2fdb808d712e662007da5e228ddc7370f575723a0018a1da70fa27e6624c8c75047eb584bf3399a8fce999df94f6fb54fb6c1fc954b1d899459fcd2f459e57c214ae590513ed268ed2d1114d8276642510a2eb99feecb58d8476550553a9f3d1f04c9bb442dae6dd84628b60cc9fd3c1e5c4fe3b9ad5f43b5d06e31ba4644f7499c03fd68cd2207027eeb1908a8022d70eb8fc8f55fee7be7e3af525d4fb1ab3e9b458246cbb5371e8145e1d04762c62068e03795a5a6b48d8643a83927c47000b7766e320e0ef2339d5423813e8d7845b939a9567745f6e2d6070764669c905ea77943a31f0df838a5d046f25d516bb654336f759c05dcc0febbbf1d214382a76fa09aa32be9799252f1d0fd8bacfe3f32574fdc82c6ed77f1c08d4aef88c157cbdac947346e3e015af60125d3e36ec6bd8dc5127c7ab1ed773c8beffc9dba99bd9fa1498a5a49bcce4ddb13fb85e256fcac569aab1c815527710d2c350c7cc84db5a7eb243227973fd5e2d1d8450077ececa0d96884c90ac0146d37b13f1aacc1eaddec3f0d475df6ceafe73f9076fcfeaf496efcae22d09745453a5e4776876ecfb1d004361f82f76b2bfba050d0fd5060f50fd74f9908a62649955e2f90e4ac4a4f0b29484cf80eebcbecb12db8586ee58443c181a59c046c657ecbb067a1e70d4c548e8b291a5aa681624747d9a52a6184a5fc82d824d9ab6156ec5fd73a038b38d86974e7a89b55a95b609e12c98f4168c0e48139749fce33397948224641e9823588858f82247d9abf8f84250564189676325e43944e888cef6918cd2b842b3a42751475a37656b3f04a02430705f16908d638212f69cf96d5311038e00e048468810d1cfefb0a9aeaf46d1bd31f7156a97542d9373abd3c069aa096486244389312031398a35e0ebca6668ed06dbe80290ac9a2a15ac9c208cdbcb2c1e18f008741649b4fe2ac1e6ca0a19980b6276fa09c5c0e67e748c1669add6fd4c70ba522be4428df305c3313929a4eec348f03fc6a6dfd1d6740a61230a977555b6b4d5165c98323871d750e80f9205231af03ab430a720dcaad03d113f38574ebada74f5b34a05a6abb7ba9b8b280401a3a21dd7e1e026deb438ed020d09fc93ffd7376ced7b5d6c9c35072c7f28ddb7fea3ffa7b7e6766892be2015c20e2cc7fa8bcb5832b97e964947ae940d5ce215ff3a0d74851d5735f3573d533cca9b3a89f9494f150cb732139cc2282304f6a375ee1062f6f850ebf89548973b6c5e7aee8b98b18b443332d3be20fea086653d52756b40ec4f08ad52f4d0a5a61004c700f070b83548670ef36dcbd8daf13ae6d382aaba3c3bac3c1efd953781d69e7365e1393d2c3f34d3dc91999ab9a545bc167e50ea6874fe8f49e93e452ad4710d7127c430ab2caf3ec1627e6a2a6a57604a5da490087991b68cd58d456f6818f22e38007e1628c6a78f6a8a321e3f0d5d5e1bc7f9ef53c4780b451dad949962c8a6a464b25cb161159b72f40fed8280daec34135f77373b9432f411b232e9374e9cb3fcd85a599c20d0b8e294835c60c2e034eb8385c507095c6eb6748180fd1ad97cb0a4b2ffa70c90891d373459538f4106078162bc46b425572466aa4769153b994698bbff1a98b5948e40d98bb2900445eebe95c4892bcb92b4c28b734ea7e106accc9836767e0881f970c9d69063dd918de44a484ef3f860b0dcec58f22b3f1a0abb9c0c2b6cd5bdacdc194f188588c0888d6abfa2d0b79d0b33a41e3b6a0f9fbf811ba20f346025b3a4be17eb5ce583b860cad5424bcaf1ef4a255678706052c1cae9cd77cc78639f975f07737b791831c64f0c974b23a5c428091b8b8e17a037ac3c6d56da4b4c7e4752736cbbc8d67b1b823e87d51ffc95fe9752e8479fc15a6fe7b96fbd7b93dc2144381c424ec7782d7f8b2637010dca11ccdaab1bad652a9ecd8b6ba2c116fa419c8582a0ccf754a294d9de5b457d9b1a4120fd53667862e50cb028e2f92c73a38f77ff57c93b410e7f3257bd56e5aa504f0643bd2bcfae2168046ad2737a36b21f6d993de1fe7b31e9ef7c79d545e5364b65011a6d26e0a2f1018a5280ca88d3d1e30c68195f8cf1a3ece813f22e44d83867c9f711218203d1adf2869ed89babca094b8def7ae0abd0245f522930db59c4b2eeec4d564bfdb931d435a986daba4b604d5bf30b1cfdf6960986ba0dab216dfd7ad95ca2555e0573d073dccd407ddd5ed7920c788aa0213aec90b38981a91bc370ede38d171648316d59478e66c068eec33295345162e9896ffc82f8d94b995d3a3a7a4f459e564632b5918b4fd850da380937655f19e2820376e7deb48edb0f5e295521a9a153f5ef69de397d88acc20be99779d7ea2c38445bd70aeeb68cc6c68c1bc603ab580b632866497a3dbcbfd933e2074323f66f1db73129eec8331c8872aa92a33e2180fc0cf2e28d198faef4421064b8435f37b5bfb9b531332b3b0838015fe848f0ce859db8706f2e53fb07ce4d0fd017d85ac9ce2943ab172f08b13c948c3778d2469257d412b1a5305526cc8dcb4a8645f825cca66a63b7134d8b7c760db6a8fa21f2df3456e9b460867303a9d53fb01db8548800d800e49c08c8d731bbf9a642206f4cc6673e4fc0f7106661abfde1eb8a8d384b26d88c16d15f238556ff4b205145d860228038430cd8a342bc15849afd81666b55b358e3ec584fa96f119b77495c4ec36616070237bb170fc04d3befebdaff66643814eb8519abaaf1e9bf939bf5bfefa33c32fe9909055393e383268e426436305b370867db76991ca600bf6211dece3b6b7b4dc5cd4569ff4538080fec318a9e0cce4a8cf26aca8359b503781aaedc2d58b0bb1a82c163425e678b488bdc7362d0be24a7a8238deb31482c332d4d385005ca84c836933b0fce21685ec067adb9490d1a416f83e36e6e3b87d05ab6973f4e359a1fb5a4dbf2ff6a85d235e50d893f222c2a7d84252be9015e104ee3609c83cafdd796a8422257c9ca9172888d91c0f2f2afe36dccada9a713cfc026cf25e113fc543d522e9254f5e129d7ffd61b43ee25bdd63545a81a2b086b616e23abd380a7bb8e54b8341f42c663da1fc8451f21da7315aea416e6856d4d45128dcd34a0f3aeb7aed00c54c348f38888b8c8fec59028d38344a92249c95943d3ff8608bc11406102ebe8269892b2e909bd82ba467aabef127713a0993df779ba7b0816a990566699e4926d75fd47c3f1b9cae3e58771a6ae8776fdb672ee70f215fd908d6dfddb8a2ad10f27b749fa6e67171848d70d3ae135ee3defb2546bb35a3ad2d8ac0e838ff8abb1cd733d80047bc8626960a257b704b43bf0390b7fee656ca7831d23e8ba940533c16c17de68270bb3b2d3bf142b34899b3a106cf9569b4f46f148297c61390733ff9f399c669122dd045187d0a35fe54b4f17e4090c56cfcfa47498b1701a855827d35cf3624624906f997092b010b1da616325a090770694d028fae9874a91f8d21fea85804956594b8252c24d05df5775148ecbf8ab38f131c268cc263f6a2dcd375acfbf39a2defc9869801a720d83add1ff01ac7fc389bc7e35c2eee2b44f808508e6e02ea31cf23ea9f2118bce520101e307b394e5fdd28e90870a327b0a1444b552b7227134a8e5397474a6c0e1ce89d918c899d292660ea44294e07b1645ff9e85f65156f92d55ae795e134250b5359dec6c31d4892d83f363cb09632bb738c4e7f351361adc3ab54776a5c55d6ff4895516c82cc6387b1a424f3af2bb0398d0d4a71fe44c5132b7ad5fdfa732bbcff9f02395df587714072caca65f5fc1215dc9068585e1fbcee22cd69c0386a6482230540ec9ff8e373018e4e2788b9502e5be3e3247f997800c68a634e4490c91d01144a63a7a55afbfa4f0ef5ad538aeec8ea203ef2716ff989e11ce4985263898b8e36b0d3386b816ce484e81404a01ac0ed9f18ef5643f93d46705c949acddca2b74ad53441090f658d22dd081aaf49a7bb07c93ab8dfb5213cba354b4d37d9899423d3b3d45e9463c506ccd69747162d2d64b54291d11fdc6c9b89114543d6948f10e68008973cc485df080b84e0d098f962715ba009f2aa1fb41f7199ea5b9b70df0e1c378da164f7257b4ed04a9fee7cc2de065ad35a60b882d78e26d5804942ed1f2bcf85fc63795fb9164a5f94ffe6bfbf838c9197bce2160d24f88dca14c3e733d18ff1fb7acb0ebdfc4e2ce268a676fb27cc34d4b6b5d7e8db29c020c4c498d793931b0fc7d91ad68d3d8463e36a267833edbdd7062f4d62aa9fd1cb7f8e561d3939bbfa118b897167168832c0aff17fb6cdcf75ad6ef0a18e2b37fb24c85d0866f2e5f191b2ef8fe9b5997635a74cb06aec67363435eb175559629c09316f96dc56de6c7785335d121fc2e4d47c2f50c37c5bf7950ae5de07b3b73830f4299d5009742d4eca98df821a95d244967a42b5a4f3375edc41c5281ca3104bd247c14e838912634d4764c1b6e440860d98f258aa8a24e8af643497366edc2b781aec0567451884aec0343ced1fbddfae585db1012a6d9245ad85c56aa33d5bc30307515bccc8d36d7848c99884db4a49d748e1953b4673e4286393fc97c233d529435faf7ed9f9aa64029814b7cd6a36c3dd9ca7be95e5c4d48e024a3d23651cc81c00a52e2fa2d094435ebdb4ae5be8e6b53cf628ddc87a4bc2dccc98ac38019c91789a40d103fb95785bde5992de08ecdca1dff2ab7cf5013420b3d29b8a7f0af455c4e86285422b986bdf482b87297061084b50684e936acbb075a84e720a2d03892efec7dc1af2fae2a7ce7725cf0d19f39403b273be262c7a4ff638898f6caf84bfb358c580ba4adfd8664bcc539b82792e39ab4f1d8393b1f98f6dd5aae14bc6b73feeeaef7c3accde4d9b098f2d5c7ed68621851f37d27980c4b44df095d865493eeef2724db90aa53a3c37bd345ea75b4e76e8878deae1b4f3204c2957f3806e36a03e995f7633de9b863ff6b3309d330ade917c82f3286d9500105755efac22a4220f457debd861df3c0925dc4ba8913cea12b8deb93cec87c972421bb8442ef2a2a9d638471108ae0152aefdc45eac6ff786dae370a21bfe1e5777df8070bcefba8596cb8f71a516b505b1f83de1129cee91d3a4d6383daac7b9de46a99bc34661f3d805d2e138a769fd6489e4d058a3ab35ccbc81251aa2f23f83d7740bd8869465634e10e114c62bdfd640d69cebf6e78eb0970fa442746f7c3bea77d8589ab131827a95b274dd63ea04fba4c822aed4f8d0cd83ed83177d90332c7e66f103d4eb1dffb9ec0f52094bc7324a7c59819dca343776d6adb6850e7e7e83e2316db1c32feb4ea1c6f47a2ee41bb09d0a931f4fa3cdf7ada2bac7fe5ae2b997e24b8f8c52b0bee1482b74af68b407f0d78f3767bdcb42557c9f3aff0c2c2ea7745a0f588b00a751c1c8d2124a8bfd4d7f756587d239cc43a8cae1d67cf15c73dc8569a1ebdd7b8559e969541a547c272e52d57e5924ced9afc87cd2cdcdf8e30f423ebe26170393ecec06afa093839fc3a10fdc3f9ae19e79e4df6a9af6027e1129a7a6cb4517607eac80fa2b5f7853fe84028a66976ec4b4af50abe9ca959b844d7b2ab94903efec6dfc99ed9df2c329c0e8449b4d2a0a5bc2506d170884d2c6ea8aefebcaaf2abbfa3c4d9e4d201369a47792124a7909e247dc98b777b60a30b1461d857f164e3df983d9a900f8b11bddbdcf47c29d483033c9250f30e268ddf97e0ecbdd99d6fb3dc4562bb75f8f1e03d1aec424293fa5fc786444411a512fc582a9b577d5e88fb9d6f7346bd489f6eb4296e576e25c45e114fb6a3d0b6b831fb4ffe7486daadf2f0ad78aad8f8f7eba17e524de06e81a5af9c1aa09019fcc51611afc45fd30b8ecd2a2ae19758a1ffa55f79cdf53ef1bb55e49cb58d8b291664be61586ace94c7b378d685e54aeee09af828a3ce7335f9d03f8daabcf3543b8099956f60913db6ab401a427aca83772df4fce9081409ab426dae09739b50a8ab4c04a6d2e63b2c4c0b5f7fbd9dc76722057ab6cefc9ccae3abf251259f999fe09dbe1232b8ecf0e26b3d88d13a1001840f6b5942359c3ac75bfc321d9504bcc0e3f4add741125941ece20b4f90416b1f14edb4ecb1ced79cef883aa1d5193f3efeeae7e103891ae4840978fbe74d2cc90b7e02b4d839f15c75576b74e05f7a8af71823317a851bf0ff9171bdb16ffa36f57ccdef61065a62d64ba434571db0d476995e2bf4f148f0a6276b2fad82f03b91fe53f9a7acff3ecdfcedcc1eae42e52e1f7443114b8edc8a9d5c8a55727f7ee1d20e1ca55b42e51b47fc4d2313458ab9a5f05c1411dc8f11e4c57d3fe87183763bd24cfb8dc583c82ce9c0abbeb76310666d2236e2ca164c66e6336fd571967f35b2b0ba847922f5aabf97aea061d19eb9cc3cd6e764da9651f9e66577d9c8870734fe8e03d20ba107e6e2997ef7c42f940b88410c6bf46635cb5e402113411a98c75e8cfd3760235d7a486bfeea1a1dc188b7886172ac66d45a4bd87f60b8502382888f3806e47ffb74d9aef2519e91536f7798b7c22ee70566e686ae2b577f6341f7c47dc1ae41f2af983b80f7db23a3466b4f14e2afd591b19d36375acbc0c8ebf21654c8cf44ea49103299eb1ac6e96bb282a33a6ea204aa266b7d627c53757daa176f6cde932e7e0342977dbf7d5668e8ba984bf05dc610e5450eb4c3dcf7965eedc9b168a9c274ef6a050e93234a9bb5488a5aefaea9c442729b5416dcee6bac23f238bea2f1f4615c863a3ff7c7a081558237f2097b9ffa869f4b69fa32784f62c0b7a458411efd3a9108735de667c63c34af2225e382a17600acecc118ac1f81ec5ed9a26fa966bee8dc6f55c17bbd89a94932bf930b081fd310ef94c490855453551e9eb809e9d568500e6662564b65701a721208dcbef9a07650f9faa5a503d37f2e1b1912fbfb437f1f4c2d4a830a2dcfae905d323fe9a6a01cc8d88ff82a26a1c228103396b6756659b6a8a9ff8b31494cd8bde6205d6f62e698d9ae43ec740fafc60d798a85e5f8598486b6e82f23506c6004ec2f733cde633c3b45d9ef14fb223c020a67f305e33b5d3b239b5026ca679004e212725a4090818734435247b918dc9c65d2f0c580722651217ce7a2dec34c0f8c49e3dc051c01f5d445dca8675339f5c8b30ddc19f51ffa9e9c513f5fc9892dbe5ee5bc148ebf3033635401c8675f0fb43e503d73cd432e3ae2f25bf29b4088a3193c208f5ba51882364202dc3eed6f3ab9a871b4afa960f1776cc92deb7098ae6f61af30e715ab60d44f378bbb79f8fb663de164a5f4f582e6a17fd7e553e677632d1e8489a8138bc780418de30c0a95ae3ec3b0cdee51901869acc318a6725c0c06273dc67d393129278225b9384d978512befdf449f85146fbbe92e6b52cf02008b13d77ccc68e7b65e0c1a25f1f9d17b06b17f216729684fec1b4c0c3fdaf40af5dd1a3f4492d49e018f60f41d91524bc5d750789fd39b6e69cb66b1d86b2c1405331e3e793fb38dc447161f1ba02cee1519b72727aee9ede2898c5195adb0dc1c29fe6eca6598c5612a7f98bfe0d1853e44f47c94ae57bfdaee16711135226c9b44440abbeca5ed53b0aa58d34fa0faf766087135599d7b88a04d5ba7d69c148f3ebaee211a06438146d762c9f85d9007a228edd7d71ad18fe69a1af0caa6176eade25bea11504c2f0498a450d4d265bf97dea5b23c10560c9844d761702a5814fb355827ed6f46bcebb61d0a06c21746625a438c38496a941f447c2150c9125990ff7feef9d551a7adcbe0fd828ef4397c0799507599899259f61ff914f76be6077d0daa67ac0ab9093ecd0f78455b605a7885cae38a88b2955cecd37f972841f440de12831263ae64c7c78970138a738bcc66aae8c1a5c3ca0e166dde9860bbfc4c7bdb854cdb3d94ad4c723b2de03a50dfd120041a9b3107a480e7e108f729484d0df0d8e47c3a6b7ce0376e642ec5a267a91dd2bb1f1b3fe56a5097edddba482627cf79b66801fdd4ecb733067ad52e8fb9970be01a397ede6a3eaee6b8524f8e1cf00e0c5aed165b8b1533afaaeeaa82153f9840760b58b8a12e8168956db4522f2dd5a13183cf861acb0c0bb2735ff5cb683f633bd99ba2bfa7f1fcdd0a54d3b4fa9a7d3de250d7e40bd7b3a829a4f04fd71c64ed4f2503094773b45fdd821688d10ced9da17089b7c954f7e4a7f3e56226abee46d7eb93a6f3d039a7cf3dc14c18dd7502aa0e29e1c54bd1c2182138e06326f3cd4cddcf1997c9739f9e4a0899ce919f20b2def0ff103e5a9e123a1db4a544d438f789a0ed26664523bd55902364f4a21b2a92fcc111392dcdcf7ac0ece18c474d47a11d544b64836a62e3e1e0e9d15f8066315f000b7d8603f772704ed5b96798f28e4f699a671023a4d49c5a1e30d14145b9179e4b0f3424fd46cc22ca48cde74904876cc037a04aee32b53d02e4869427b6b18bf0ce7b5ffb75268788ca5029d2d12b2df068219af12d4e17e56f83e581b0fd6cb7048204803342ab8b146b0c237d6ac7aeb2ee21550c00da60286994f1e7ca53de19d874f7bb27c8c5e263fa350448ea28f4ac0cdfdc4c0d5096f2ab328d089dacb5e87f0a29814e8461470a22ee8a4a318f5e2b5317a027da39789b7b17bdcc9b26bdad1ba5e4580f671a3179a9fde91408aa41a68f47c71c524f8e413557b0656cc2a67e36da5a07ee7c55b0877ecf41a8616ec20f59d370f3eff6b10e68a6c55feff6f52f498bc9ab77224a7548ccdfa3de41ff44ee4bd32295a42d9fdac1a4c8484a7383a6bd5e39cb0249e939fe7f53075d6d4a54bcfbaec50853c5e4bfda256665ed56dcd20fbd04a1d40c200223ddac36a7229df6003f335227a6bde261f7e2f7c980e7e522c68abc63601b3b1a9ebdd4530e4f33b9986f582300", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x78, 0x0, 0x0, {0x410000003, 0x10, 0x0, {0x0, 0x800000001, 0x1000, 0x7, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x8001, 0x0, r3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) syz_fuse_handle_req(r0, &(0x7f0000006100)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0x1, {0x0, 0x15}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async) syz_fuse_handle_req(r1, &(0x7f0000003300)="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", 0x2000, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 118.529956ms ago: executing program 2 (id=2072): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010002000000fcdbdf25280000000c00060001000000010000001c002d80"], 0x3c}, 0x1, 0x0, 0x0, 0x4085}, 0x4000) 118.180119ms ago: executing program 1 (id=2073): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_dev$usbmon(0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000c00), 0x71, 0x2081) mknod(0x0, 0x1000, 0x0) open(0x0, 0x143142, 0xa2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x8, 0x6, 0x5c0, 0xf8, 0xf8, 0x308, 0x420, 0x238, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {0x7a00000000000000}, [@common=@hl={{0x28}, {0x1, 0x80}}]}, @HL={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @loopback, [], [], 'vxcan1\x00', 'veth1_macvtap\x00'}, 0x0, 0x108, 0x140, 0x0, {0x5002}, [@common=@unspec=@cgroup0={{0x28}, {0x0, 0x1}}, @common=@unspec=@connbytes={{0x38}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0xffff}, {0xffffffffffffffff}}}}, {{@ipv6={@mcast2, @mcast1, [0xffffff00, 0xffffffff], [0x0, 0xffffff00, 0x0, 0xffffffff], 'caif0\x00', 'pim6reg0\x00', {}, {}, 0x71, 0x5, 0x0, 0x28}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x10, 0x0, 0xffff, 0x1, 0x0, "4d7993aa315f2d7890b15e25816c1e96ac3fe30705df4f3a3680275eb403e852f9370ad571de244c09c6781e850eddfd21494f66766629bb476302673c1a3f62"}}}, {{@ipv6={@private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'ipvlan0\x00', 'ipvlan1\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620) (fail_nth: 10) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) 117.208364ms ago: executing program 2 (id=2074): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x40000000000000, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="021600000a0000000200000000000000080012000007a18208"], 0x50}}, 0x0) 70.582362ms ago: executing program 2 (id=2075): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x2c, r1, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="8b"}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0xc}]]}, 0x2c}}, 0x0) (fail_nth: 5) 70.389041ms ago: executing program 2 (id=2076): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000100)=@generic={&(0x7f0000000040)='./file0\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x4}, &(0x7f0000000080)=0x8) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="20000000160001f500000000000000000a000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\n'], 0x20}}, 0x0) 158.651µs ago: executing program 2 (id=2077): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, 0x0, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) write(r2, 0x0, 0x0) 0s ago: executing program 2 (id=2078): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc49093d11594ef13325790b55efbdc2dd99ed1", 0xbd}, {&(0x7f00000002c0)="9c812b37fa6bd3963cbc009f0a922658be630ec6041ed353d314e58721edf306c382ac611fe34479cb9e2585745ff3c61da74b060400000000000000178176dc533f123b66d04d51fb7421cdc9fed78e3e1c18fb67c1f75e", 0x58}, {&(0x7f0000000180)="3f82090ccda4f8ce11f43ea8b51b08afd200c6075794cdd2e0021e30a0f6267447162a2085457cf687e74d142e85e9c4ac6e", 0x32}], 0x3}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000c40)="5c5eafd3ae55a73702d6befaee97f47f4be65587e1fca708cee084691e4587d887a5eaab43ac5edc4886496910cd7a153cd84b93208c7b1a625b3ea990092389b19dab4f61e30ee60a4d7e51ffc9a5accbe2084435", 0x55}, {&(0x7f0000000800)="104b0b7073fbd7f77a847bdbfdf6da474f700bf113b18d16d8380f42e296b49f1326c7d0d97be798e205654b8a885df6ee57ec7b690491c55ca484b54170549c7a72b8a579005ffcb0b309dae34571b17126534a763ca881f12d750072abc05a7cb8f0e32fc3ec3ed14c3322630ae8e710fb68299cbb5accee8813185c77248ddec7b5688599f1bfccbec448bc6ce5c139c2095da22c9d7edf7bfa1392c76ab0dddf4db130420df295ea16aa3e841d50dc813025315eea3990c2de68e835c4fec57e2dd70f47b58472c2f915de1a58a32d021d9a26", 0xd5}, {&(0x7f0000000900)="5c3eb8799e8565193cf737e01055d298a4193e91d6dd89384d12d1da97e7e88852e279071ca7a9b536c7911d618feb48b66f1e17e130b7c2f27b77e2053065d05a00ae7bd353283ee3dcaf244ff26600e520af5091696d833f34518e53327718e7e3298de86f15e6a778f6008b96661a10be65c0a44b21b4c8724f61f6ca10d927a31e0c9f", 0x85}, {&(0x7f0000000500)="4c56c5661eb2897219a486044736a64f1a175ba083d2b3ef32", 0x19}], 0x4}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x11) 0s ago: executing program 0 (id=2079): ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000400)={0x40, 0x960, 0x20, 0x10, 0xfff, 0x8, 0x0, 0x2, {0x10020, 0x1}, {0x400, 0x7, 0x1}, {0x9, 0x7f, 0x1}, {0x8, 0x0, 0x1}, 0x3, 0x2, 0x6, 0x5, 0x0, 0x8, 0x6, 0x2, 0x8, 0x5, 0xf21c, 0x7c, 0x20, 0x4, 0x2, 0xc}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000fedbdf250b0000000c0006000100000001000000f52ce212ae61a7261072ce368c49b9b9e318784c51"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x24000000) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff}, 0x80) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="04010000000000010000000006000000000000000000ac000100"/53, @ANYRES64=r3, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003c0000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e00fc0200"/188], 0x104}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$kcm(0x10, 0x2, 0x10) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000f67aad07be1f42ed21694e1000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c0", 0x1}], 0x1}, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) r9 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r9, 0x40946400, &(0x7f0000000140)={'aio_iiro_16\x00', [0x24, 0x1a7b, 0xfffffffd, 0x5, 0x80, 0x8f, 0x1, 0xe, 0x1002, 0x5, 0x200, 0x8, 0xb, 0x1, 0xe5, 0x8, 0x8, 0x8, 0x9, 0xe, 0xff, 0x1, 0x7, 0xa, 0x5, 0x2, 0xb0c4, 0x401, 0x7, 0x400007, 0x100]}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r11, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040018}, 0x0) sendmsg$inet(r11, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="4c000000190001090000000000000000021800000000fd010000000008000100ac141400080005000a0101021800168014000300fe8000000000000000000000000000aa0600150004"], 0x4c}}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000240), 0x4) recvmsg(r10, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0xf) close(r11) rt_sigprocmask(0x0, &(0x7f0000000000), 0x0, 0x8) sendmsg$RDMA_NLDEV_CMD_GET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="100e2000011493", @ANYRES32=r4], 0x10}, 0x1, 0x0, 0x0, 0x40080}, 0x4) kernel console output (not intermixed with test programs): e_alloc_node_noprof+0x5e/0x3b0 [ 147.357870][T10542] should_failslab+0xc2/0x120 [ 147.357886][T10542] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 147.357900][T10542] ? __alloc_skb+0x2b2/0x380 [ 147.357916][T10542] __alloc_skb+0x2b2/0x380 [ 147.357929][T10542] ? __pfx___alloc_skb+0x10/0x10 [ 147.357944][T10542] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 147.357964][T10542] netlink_alloc_large_skb+0x69/0x130 [ 147.357999][T10542] netlink_sendmsg+0x6a1/0xdd0 [ 147.358012][T10542] ? __pfx_netlink_sendmsg+0x10/0x10 [ 147.358027][T10542] ____sys_sendmsg+0xa95/0xc70 [ 147.358038][T10542] ? copy_msghdr_from_user+0x10a/0x160 [ 147.358052][T10542] ? __pfx_____sys_sendmsg+0x10/0x10 [ 147.358069][T10542] ___sys_sendmsg+0x134/0x1d0 [ 147.358084][T10542] ? __pfx____sys_sendmsg+0x10/0x10 [ 147.358097][T10542] ? __lock_acquire+0x622/0x1c90 [ 147.358123][T10542] __sys_sendmsg+0x16d/0x220 [ 147.358138][T10542] ? __pfx___sys_sendmsg+0x10/0x10 [ 147.358161][T10542] do_syscall_64+0xcd/0x4c0 [ 147.358177][T10542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.358188][T10542] RIP: 0033:0x7f4afb98e929 [ 147.358197][T10542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.358208][T10542] RSP: 002b:00007f4afc750038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 147.358219][T10542] RAX: ffffffffffffffda RBX: 00007f4afbbb5fa0 RCX: 00007f4afb98e929 [ 147.358226][T10542] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 147.358232][T10542] RBP: 00007f4afc750090 R08: 0000000000000000 R09: 0000000000000000 [ 147.358238][T10542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.358244][T10542] R13: 0000000000000000 R14: 00007f4afbbb5fa0 R15: 00007ffcf8529388 [ 147.358258][T10542] [ 147.439715][ T5993] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 147.599568][ T5993] usb 5-1: Using ep0 maxpacket: 16 [ 147.602658][ T5993] usb 5-1: config 1 interface 0 altsetting 93 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.606087][ T5993] usb 5-1: config 1 interface 0 altsetting 93 bulk endpoint 0x82 has invalid maxpacket 96 [ 147.609198][ T5993] usb 5-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 8 [ 147.612773][ T5993] usb 5-1: config 1 interface 0 altsetting 93 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 147.616774][ T5993] usb 5-1: config 1 interface 0 has no altsetting 0 [ 147.620015][ T5993] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 147.623259][ T5993] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 147.625715][ T5993] usb 5-1: SerialNumber: syz [ 147.629527][T10527] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 147.631885][T10527] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 147.666612][T10567] FAULT_INJECTION: forcing a failure. [ 147.666612][T10567] name failslab, interval 1, probability 0, space 0, times 0 [ 147.672003][T10567] CPU: 3 UID: 0 PID: 10567 Comm: syz.3.1642 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 147.672018][T10567] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 147.672026][T10567] Call Trace: [ 147.672030][T10567] [ 147.672034][T10567] dump_stack_lvl+0x16c/0x1f0 [ 147.672053][T10567] should_fail_ex+0x512/0x640 [ 147.672069][T10567] ? fs_reclaim_acquire+0xae/0x150 [ 147.672094][T10567] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 147.672112][T10567] should_failslab+0xc2/0x120 [ 147.672129][T10567] __kmalloc_noprof+0xd2/0x510 [ 147.672147][T10567] tomoyo_realpath_from_path+0xc2/0x6e0 [ 147.672167][T10567] ? tomoyo_profile+0x47/0x60 [ 147.672185][T10567] tomoyo_path_number_perm+0x245/0x580 [ 147.672197][T10567] ? tomoyo_path_number_perm+0x237/0x580 [ 147.672211][T10567] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 147.672225][T10567] ? find_held_lock+0x2b/0x80 [ 147.672252][T10567] ? find_held_lock+0x2b/0x80 [ 147.672265][T10567] ? hook_file_ioctl_common+0x145/0x410 [ 147.672285][T10567] ? __fget_files+0x20e/0x3c0 [ 147.672303][T10567] security_file_ioctl+0x9b/0x240 [ 147.672318][T10567] __x64_sys_ioctl+0xb7/0x210 [ 147.672331][T10567] do_syscall_64+0xcd/0x4c0 [ 147.672347][T10567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.672359][T10567] RIP: 0033:0x7fbec238e929 [ 147.672368][T10567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.672379][T10567] RSP: 002b:00007fbec31e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 147.672390][T10567] RAX: ffffffffffffffda RBX: 00007fbec25b5fa0 RCX: 00007fbec238e929 [ 147.672396][T10567] RDX: 0000200000000040 RSI: 0000000000008b1b RDI: 0000000000000003 [ 147.672403][T10567] RBP: 00007fbec31e6090 R08: 0000000000000000 R09: 0000000000000000 [ 147.672411][T10567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.672417][T10567] R13: 0000000000000000 R14: 00007fbec25b5fa0 R15: 00007ffe2cb97cd8 [ 147.672431][T10567] [ 147.672468][T10567] ERROR: Out of memory at tomoyo_realpath_from_path. [ 147.709768][ T7316] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 147.807006][T10573] ptrace attach of "/syz-executor exec"[5958] was attempted by "/syz-executor exec"[10573] [ 147.902297][ T7316] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 147.905602][ T7316] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 147.909811][ T7316] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 147.912778][ T7316] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.916700][ T7316] usb 6-1: config 0 descriptor?? [ 148.124072][ T7316] usb 6-1: string descriptor 0 read error: -71 [ 148.127438][ T7316] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 148.131236][ T7316] usb 6-1: USB disconnect, device number 32 [ 148.409219][ T5993] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 148.414480][ T5993] usb 5-1: USB disconnect, device number 29 [ 148.434233][T10581] hfsplus: unable to find HFS+ superblock [ 148.541442][T10589] kvm: MONITOR instruction emulated as NOP! [ 148.557327][T10594] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1654'. [ 148.698130][T10605] FAULT_INJECTION: forcing a failure. [ 148.698130][T10605] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.702382][T10605] CPU: 1 UID: 0 PID: 10605 Comm: syz.2.1655 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 148.702397][T10605] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 148.702404][T10605] Call Trace: [ 148.702408][T10605] [ 148.702422][T10605] dump_stack_lvl+0x16c/0x1f0 [ 148.702444][T10605] should_fail_ex+0x512/0x640 [ 148.702467][T10605] _copy_from_iter+0x29f/0x16f0 [ 148.702484][T10605] ? __alloc_skb+0x200/0x380 [ 148.702498][T10605] ? __pfx__copy_from_iter+0x10/0x10 [ 148.702515][T10605] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 148.702537][T10605] netlink_sendmsg+0x829/0xdd0 [ 148.702550][T10605] ? __pfx_netlink_sendmsg+0x10/0x10 [ 148.702565][T10605] ____sys_sendmsg+0xa95/0xc70 [ 148.702576][T10605] ? copy_msghdr_from_user+0x10a/0x160 [ 148.702590][T10605] ? __pfx_____sys_sendmsg+0x10/0x10 [ 148.702608][T10605] ___sys_sendmsg+0x134/0x1d0 [ 148.702623][T10605] ? __pfx____sys_sendmsg+0x10/0x10 [ 148.702635][T10605] ? __lock_acquire+0x622/0x1c90 [ 148.702664][T10605] __sys_sendmsg+0x16d/0x220 [ 148.702678][T10605] ? __pfx___sys_sendmsg+0x10/0x10 [ 148.702702][T10605] do_syscall_64+0xcd/0x4c0 [ 148.702718][T10605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.702729][T10605] RIP: 0033:0x7f4afb98e929 [ 148.702738][T10605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.702749][T10605] RSP: 002b:00007f4afc72f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 148.702759][T10605] RAX: ffffffffffffffda RBX: 00007f4afbbb6080 RCX: 00007f4afb98e929 [ 148.702766][T10605] RDX: 0000000020008010 RSI: 0000200000000140 RDI: 0000000000000005 [ 148.702772][T10605] RBP: 00007f4afc72f090 R08: 0000000000000000 R09: 0000000000000000 [ 148.702779][T10605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.702785][T10605] R13: 0000000000000000 R14: 00007f4afbbb6080 R15: 00007ffcf8529388 [ 148.702799][T10605] [ 148.704854][T10599] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1656'. [ 148.802834][T10612] hfsplus: unable to find HFS+ superblock [ 148.847152][T10617] FAULT_INJECTION: forcing a failure. [ 148.847152][T10617] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.851317][T10617] CPU: 3 UID: 0 PID: 10617 Comm: syz.0.1663 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 148.851332][T10617] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 148.851338][T10617] Call Trace: [ 148.851342][T10617] [ 148.851346][T10617] dump_stack_lvl+0x16c/0x1f0 [ 148.851365][T10617] should_fail_ex+0x512/0x640 [ 148.851382][T10617] _copy_from_user+0x2e/0xd0 [ 148.851398][T10617] copy_msghdr_from_user+0x98/0x160 [ 148.851415][T10617] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 148.851432][T10617] ? __pfx__kstrtoull+0x10/0x10 [ 148.851445][T10617] ___sys_sendmsg+0xfe/0x1d0 [ 148.851460][T10617] ? __pfx____sys_sendmsg+0x10/0x10 [ 148.851481][T10617] ? find_held_lock+0x2b/0x80 [ 148.851505][T10617] __sys_sendmmsg+0x200/0x420 [ 148.851521][T10617] ? __pfx___sys_sendmmsg+0x10/0x10 [ 148.851540][T10617] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 148.851563][T10617] ? fput+0x70/0xf0 [ 148.851573][T10617] ? ksys_write+0x1ac/0x250 [ 148.851586][T10617] ? __pfx_ksys_write+0x10/0x10 [ 148.851601][T10617] __x64_sys_sendmmsg+0x9c/0x100 [ 148.851615][T10617] ? lockdep_hardirqs_on+0x7c/0x110 [ 148.851629][T10617] do_syscall_64+0xcd/0x4c0 [ 148.851646][T10617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.851657][T10617] RIP: 0033:0x7f92c758e929 [ 148.851666][T10617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.851676][T10617] RSP: 002b:00007f92c833f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 148.851687][T10617] RAX: ffffffffffffffda RBX: 00007f92c77b5fa0 RCX: 00007f92c758e929 [ 148.851694][T10617] RDX: 0000000000000484 RSI: 0000200000001340 RDI: 0000000000000003 [ 148.851700][T10617] RBP: 00007f92c833f090 R08: 0000000000000000 R09: 0000000000000000 [ 148.851706][T10617] R10: 0000000024048084 R11: 0000000000000246 R12: 0000000000000001 [ 148.851712][T10617] R13: 0000000000000000 R14: 00007f92c77b5fa0 R15: 00007ffeafa9afe8 [ 148.851725][T10617] [ 148.853585][T10620] netlink: 'syz.3.1664': attribute type 1 has an invalid length. [ 148.937554][T10620] 8021q: adding VLAN 0 to HW filter on device bond3 [ 148.967320][T10620] gretap2: entered promiscuous mode [ 148.972748][T10620] bond3: (slave gretap2): making interface the new active one [ 148.975649][T10620] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 148.985051][T10620] bond3: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 149.139471][ T5993] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 149.201917][T10636] syz_tun: entered allmulticast mode [ 149.206093][T10635] syz_tun: left allmulticast mode [ 149.291151][ T5993] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 149.299427][ T5993] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 149.339571][ T5993] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 149.342505][ T5993] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.346806][ T5993] usb 6-1: config 0 descriptor?? [ 149.520706][T10643] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1672'. [ 149.526906][T10646] hfsplus: unable to find HFS+ superblock [ 149.566540][T10624] netlink: 988 bytes leftover after parsing attributes in process `syz.1.1666'. [ 149.571297][ T5993] usb 6-1: string descriptor 0 read error: -71 [ 149.574120][ T5993] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 149.577114][ T5993] usb 6-1: USB disconnect, device number 33 [ 149.624725][T10651] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1676'. [ 149.729513][ T53] page_pool_release_retry() stalled pool shutdown: id 44, 1 inflight 60 sec [ 149.837486][T10667] hfsplus: unable to find HFS+ superblock [ 149.886058][T10668] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1683'. [ 149.967949][T10684] FAULT_INJECTION: forcing a failure. [ 149.967949][T10684] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.973591][T10684] CPU: 1 UID: 0 PID: 10684 Comm: syz.0.1690 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 149.973607][T10684] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 149.973615][T10684] Call Trace: [ 149.973619][T10684] [ 149.973623][T10684] dump_stack_lvl+0x16c/0x1f0 [ 149.973644][T10684] should_fail_ex+0x512/0x640 [ 149.973662][T10684] _copy_from_iter+0x29f/0x16f0 [ 149.973682][T10684] ? __pfx__copy_from_iter+0x10/0x10 [ 149.973698][T10684] ? rcu_is_watching+0x12/0xc0 [ 149.973713][T10684] ? trace_kmalloc+0x2b/0xd0 [ 149.973729][T10684] ? __kmalloc_noprof+0x242/0x510 [ 149.973746][T10684] kernfs_fop_write_iter+0x19a/0x510 [ 149.973761][T10684] vfs_write+0x6c4/0x1150 [ 149.973775][T10684] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 149.973788][T10684] ? __pfx___mutex_lock+0x10/0x10 [ 149.973804][T10684] ? __pfx_vfs_write+0x10/0x10 [ 149.973826][T10684] ksys_write+0x12a/0x250 [ 149.973840][T10684] ? __pfx_ksys_write+0x10/0x10 [ 149.973857][T10684] do_syscall_64+0xcd/0x4c0 [ 149.973873][T10684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.973885][T10684] RIP: 0033:0x7f92c758e929 [ 149.973893][T10684] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.973904][T10684] RSP: 002b:00007f92c833f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 149.973914][T10684] RAX: ffffffffffffffda RBX: 00007f92c77b5fa0 RCX: 00007f92c758e929 [ 149.973920][T10684] RDX: 0000000000000006 RSI: 0000200000000080 RDI: 0000000000000004 [ 149.973927][T10684] RBP: 00007f92c833f090 R08: 0000000000000000 R09: 0000000000000000 [ 149.973933][T10684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.973939][T10684] R13: 0000000000000000 R14: 00007f92c77b5fa0 R15: 00007ffeafa9afe8 [ 149.973982][T10684] [ 150.092125][T10697] hfsplus: unable to find HFS+ superblock [ 150.163511][T10710] FAULT_INJECTION: forcing a failure. [ 150.163511][T10710] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.167534][T10710] CPU: 0 UID: 0 PID: 10710 Comm: syz.3.1701 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 150.167550][T10710] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 150.167557][T10710] Call Trace: [ 150.167561][T10710] [ 150.167565][T10710] dump_stack_lvl+0x16c/0x1f0 [ 150.167584][T10710] should_fail_ex+0x512/0x640 [ 150.167601][T10710] _copy_from_user+0x2e/0xd0 [ 150.167617][T10710] copy_msghdr_from_user+0x98/0x160 [ 150.167633][T10710] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 150.167650][T10710] ? __pfx__kstrtoull+0x10/0x10 [ 150.167664][T10710] ___sys_sendmsg+0xfe/0x1d0 [ 150.167678][T10710] ? __pfx____sys_sendmsg+0x10/0x10 [ 150.167699][T10710] ? find_held_lock+0x2b/0x80 [ 150.167722][T10710] __sys_sendmmsg+0x200/0x420 [ 150.167738][T10710] ? __pfx___sys_sendmmsg+0x10/0x10 [ 150.167757][T10710] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 150.167779][T10710] ? fput+0x70/0xf0 [ 150.167789][T10710] ? ksys_write+0x1ac/0x250 [ 150.167802][T10710] ? __pfx_ksys_write+0x10/0x10 [ 150.167817][T10710] __x64_sys_sendmmsg+0x9c/0x100 [ 150.167831][T10710] ? lockdep_hardirqs_on+0x7c/0x110 [ 150.167846][T10710] do_syscall_64+0xcd/0x4c0 [ 150.167875][T10710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.167887][T10710] RIP: 0033:0x7fbec238e929 [ 150.167896][T10710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.167907][T10710] RSP: 002b:00007fbec31e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 150.167917][T10710] RAX: ffffffffffffffda RBX: 00007fbec25b5fa0 RCX: 00007fbec238e929 [ 150.167924][T10710] RDX: 00000000040000cf RSI: 0000200000000900 RDI: 0000000000000003 [ 150.167930][T10710] RBP: 00007fbec31e6090 R08: 0000000000000000 R09: 0000000000000000 [ 150.167936][T10710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.167942][T10710] R13: 0000000000000000 R14: 00007fbec25b5fa0 R15: 00007ffe2cb97cd8 [ 150.167956][T10710] [ 150.266429][T10707] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1700'. [ 150.410297][T10728] hfsplus: unable to find HFS+ superblock [ 150.518232][ T5954] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 150.619680][ T53] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 150.663522][T10747] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1717'. [ 150.781659][ T53] usb 8-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 150.785025][ T53] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 150.789028][ T53] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 150.792318][ T53] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.797480][ T53] usb 8-1: config 0 descriptor?? [ 150.819444][ T6109] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 150.845511][T10756] FAULT_INJECTION: forcing a failure. [ 150.845511][T10756] name failslab, interval 1, probability 0, space 0, times 0 [ 150.849824][T10756] CPU: 0 UID: 0 PID: 10756 Comm: syz.1.1721 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 150.849846][T10756] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 150.849857][T10756] Call Trace: [ 150.849863][T10756] [ 150.849870][T10756] dump_stack_lvl+0x16c/0x1f0 [ 150.849898][T10756] should_fail_ex+0x512/0x640 [ 150.849919][T10756] ? fs_reclaim_acquire+0xae/0x150 [ 150.849957][T10756] ? tomoyo_encode2+0x100/0x3e0 [ 150.849981][T10756] should_failslab+0xc2/0x120 [ 150.850006][T10756] __kmalloc_noprof+0xd2/0x510 [ 150.850035][T10756] tomoyo_encode2+0x100/0x3e0 [ 150.850062][T10756] tomoyo_encode+0x29/0x50 [ 150.850084][T10756] tomoyo_realpath_from_path+0x18f/0x6e0 [ 150.850110][T10756] ? tomoyo_profile+0x47/0x60 [ 150.850148][T10756] tomoyo_path_number_perm+0x245/0x580 [ 150.850167][T10756] ? tomoyo_path_number_perm+0x237/0x580 [ 150.850189][T10756] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 150.850211][T10756] ? find_held_lock+0x2b/0x80 [ 150.850256][T10756] ? find_held_lock+0x2b/0x80 [ 150.850277][T10756] ? hook_file_ioctl_common+0x145/0x410 [ 150.850309][T10756] ? __fget_files+0x20e/0x3c0 [ 150.850339][T10756] security_file_ioctl+0x9b/0x240 [ 150.850366][T10756] __x64_sys_ioctl+0xb7/0x210 [ 150.850387][T10756] do_syscall_64+0xcd/0x4c0 [ 150.850413][T10756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.850430][T10756] RIP: 0033:0x7f55a4f8e929 [ 150.850444][T10756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.850462][T10756] RSP: 002b:00007f55a5d2e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 150.850479][T10756] RAX: ffffffffffffffda RBX: 00007f55a51b5fa0 RCX: 00007f55a4f8e929 [ 150.850490][T10756] RDX: 0000200000000040 RSI: 0000000000008b1b RDI: 0000000000000003 [ 150.850501][T10756] RBP: 00007f55a5d2e090 R08: 0000000000000000 R09: 0000000000000000 [ 150.850511][T10756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.850521][T10756] R13: 0000000000000000 R14: 00007f55a51b5fa0 R15: 00007ffd4ac78a08 [ 150.850550][T10756] [ 150.850567][T10756] ERROR: Out of memory at tomoyo_realpath_from_path. [ 150.970963][ T6109] usb 7-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 150.974725][ T6109] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 150.978697][ T6109] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 150.982358][ T6109] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.986258][ T6109] usb 7-1: config 0 descriptor?? [ 150.990379][ T6109] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 151.058838][ T53] usb 8-1: string descriptor 0 read error: -71 [ 151.062417][ T53] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 151.066924][ T53] usb 8-1: USB disconnect, device number 32 [ 151.238489][ T6109] usb 7-1: USB disconnect, device number 30 [ 151.361173][T10785] FAULT_INJECTION: forcing a failure. [ 151.361173][T10785] name failslab, interval 1, probability 0, space 0, times 0 [ 151.365384][T10785] CPU: 3 UID: 0 PID: 10785 Comm: syz.1.1731 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 151.365399][T10785] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 151.365406][T10785] Call Trace: [ 151.365411][T10785] [ 151.365415][T10785] dump_stack_lvl+0x16c/0x1f0 [ 151.365450][T10785] should_fail_ex+0x512/0x640 [ 151.365468][T10785] ? __kvmalloc_node_noprof+0x124/0x620 [ 151.365488][T10785] should_failslab+0xc2/0x120 [ 151.365503][T10785] __kvmalloc_node_noprof+0x137/0x620 [ 151.365518][T10785] ? xt_alloc_entry_offsets+0x3a/0x60 [ 151.365533][T10785] ? xt_alloc_entry_offsets+0x3a/0x60 [ 151.365543][T10785] ? __might_fault+0x13b/0x190 [ 151.365556][T10785] xt_alloc_entry_offsets+0x3a/0x60 [ 151.365567][T10785] translate_table+0x22d/0x17b0 [ 151.365583][T10785] ? _copy_from_user+0x59/0xd0 [ 151.365599][T10785] ? __pfx_translate_table+0x10/0x10 [ 151.365616][T10785] do_ip6t_set_ctl+0x570/0xb00 [ 151.365628][T10785] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 151.365642][T10785] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 151.365656][T10785] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 151.365679][T10785] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 151.365692][T10785] nf_setsockopt+0x8a/0xf0 [ 151.365703][T10785] ipv6_setsockopt+0x135/0x170 [ 151.365716][T10785] udpv6_setsockopt+0x7d/0xd0 [ 151.365730][T10785] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 151.365748][T10785] do_sock_setsockopt+0x221/0x470 [ 151.365765][T10785] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 151.365789][T10785] __sys_setsockopt+0x1a0/0x230 [ 151.365805][T10785] __x64_sys_setsockopt+0xbd/0x160 [ 151.365818][T10785] ? do_syscall_64+0x91/0x4c0 [ 151.365832][T10785] ? lockdep_hardirqs_on+0x7c/0x110 [ 151.365846][T10785] do_syscall_64+0xcd/0x4c0 [ 151.365862][T10785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.365873][T10785] RIP: 0033:0x7f55a4f8e929 [ 151.365882][T10785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.365893][T10785] RSP: 002b:00007f55a5d2e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 151.365907][T10785] RAX: ffffffffffffffda RBX: 00007f55a51b5fa0 RCX: 00007f55a4f8e929 [ 151.365914][T10785] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 151.365920][T10785] RBP: 00007f55a5d2e090 R08: 0000000000000620 R09: 0000000000000000 [ 151.365926][T10785] R10: 00002000000009c0 R11: 0000000000000246 R12: 0000000000000001 [ 151.365959][T10785] R13: 0000000000000000 R14: 00007f55a51b5fa0 R15: 00007ffd4ac78a08 [ 151.365973][T10785] [ 151.699180][T10802] FAULT_INJECTION: forcing a failure. [ 151.699180][T10802] name failslab, interval 1, probability 0, space 0, times 0 [ 151.704380][T10802] CPU: 1 UID: 0 PID: 10802 Comm: syz.1.1737 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 151.704396][T10802] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 151.704402][T10802] Call Trace: [ 151.704406][T10802] [ 151.704410][T10802] dump_stack_lvl+0x16c/0x1f0 [ 151.704430][T10802] should_fail_ex+0x512/0x640 [ 151.704444][T10802] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 151.704461][T10802] should_failslab+0xc2/0x120 [ 151.704477][T10802] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 151.704491][T10802] ? __alloc_skb+0x2b2/0x380 [ 151.704506][T10802] ? __pfx_avc_has_perm+0x10/0x10 [ 151.704518][T10802] __alloc_skb+0x2b2/0x380 [ 151.704531][T10802] ? __pfx___alloc_skb+0x10/0x10 [ 151.704543][T10802] ? do_raw_spin_lock+0x12c/0x2b0 [ 151.704556][T10802] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 151.704572][T10802] sock_wmalloc+0xd4/0x120 [ 151.704586][T10802] pppoe_sendmsg+0x2c3/0x7b0 [ 151.704598][T10802] ? __pfx_pppoe_sendmsg+0x10/0x10 [ 151.704608][T10802] ? __might_fault+0x13b/0x190 [ 151.704626][T10802] ____sys_sendmsg+0xa95/0xc70 [ 151.704638][T10802] ? copy_msghdr_from_user+0x10a/0x160 [ 151.704652][T10802] ? __pfx_____sys_sendmsg+0x10/0x10 [ 151.704666][T10802] ? __pfx__kstrtoull+0x10/0x10 [ 151.704681][T10802] ___sys_sendmsg+0x134/0x1d0 [ 151.704696][T10802] ? __pfx____sys_sendmsg+0x10/0x10 [ 151.704718][T10802] ? find_held_lock+0x2b/0x80 [ 151.704740][T10802] __sys_sendmmsg+0x200/0x420 [ 151.704757][T10802] ? __pfx___sys_sendmmsg+0x10/0x10 [ 151.704776][T10802] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 151.704810][T10802] ? fput+0x70/0xf0 [ 151.704821][T10802] ? ksys_write+0x1ac/0x250 [ 151.704835][T10802] ? __pfx_ksys_write+0x10/0x10 [ 151.704851][T10802] __x64_sys_sendmmsg+0x9c/0x100 [ 151.704866][T10802] ? lockdep_hardirqs_on+0x7c/0x110 [ 151.704881][T10802] do_syscall_64+0xcd/0x4c0 [ 151.704897][T10802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.704909][T10802] RIP: 0033:0x7f55a4f8e929 [ 151.704918][T10802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.704929][T10802] RSP: 002b:00007f55a5d2e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 151.704940][T10802] RAX: ffffffffffffffda RBX: 00007f55a51b5fa0 RCX: 00007f55a4f8e929 [ 151.704947][T10802] RDX: 0000000000000484 RSI: 0000200000001340 RDI: 0000000000000003 [ 151.704953][T10802] RBP: 00007f55a5d2e090 R08: 0000000000000000 R09: 0000000000000000 [ 151.704960][T10802] R10: 0000000024048084 R11: 0000000000000246 R12: 0000000000000001 [ 151.704966][T10802] R13: 0000000000000000 R14: 00007f55a51b5fa0 R15: 00007ffd4ac78a08 [ 151.704981][T10802] [ 151.818098][T10807] 9pnet_virtio: no channels available for device 127.0.0.1 [ 151.994255][T10829] FAULT_INJECTION: forcing a failure. [ 151.994255][T10829] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 151.998248][T10829] CPU: 3 UID: 0 PID: 10829 Comm: syz.1.1750 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 151.998263][T10829] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 151.998270][T10829] Call Trace: [ 151.998275][T10829] [ 151.998279][T10829] dump_stack_lvl+0x16c/0x1f0 [ 151.998298][T10829] should_fail_ex+0x512/0x640 [ 151.998315][T10829] _copy_from_user+0x2e/0xd0 [ 151.998332][T10829] copy_msghdr_from_user+0x98/0x160 [ 151.998347][T10829] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 151.998369][T10829] ___sys_sendmsg+0xfe/0x1d0 [ 151.998384][T10829] ? __pfx____sys_sendmsg+0x10/0x10 [ 151.998398][T10829] ? __lock_acquire+0x622/0x1c90 [ 151.998429][T10829] __sys_sendmsg+0x16d/0x220 [ 151.998444][T10829] ? __pfx___sys_sendmsg+0x10/0x10 [ 151.998468][T10829] do_syscall_64+0xcd/0x4c0 [ 151.998484][T10829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.998496][T10829] RIP: 0033:0x7f55a4f8e929 [ 151.998505][T10829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.998517][T10829] RSP: 002b:00007f55a5d2e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 151.998527][T10829] RAX: ffffffffffffffda RBX: 00007f55a51b5fa0 RCX: 00007f55a4f8e929 [ 151.998534][T10829] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 151.998541][T10829] RBP: 00007f55a5d2e090 R08: 0000000000000000 R09: 0000000000000000 [ 151.998548][T10829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.998554][T10829] R13: 0000000000000000 R14: 00007f55a51b5fa0 R15: 00007ffd4ac78a08 [ 151.998568][T10829] [ 152.169555][ T53] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 152.189714][ T56] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 152.323772][ T53] usb 8-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 152.327056][ T53] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 152.330964][ T53] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 152.333643][ T53] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.338627][ T53] usb 8-1: config 0 descriptor?? [ 152.350999][ T56] usb 7-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 152.355163][ T56] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 152.360682][ T56] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 152.364231][ T56] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.369797][ T56] usb 7-1: config 0 descriptor?? [ 152.376058][ T56] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 152.600659][T10856] __nla_validate_parse: 6 callbacks suppressed [ 152.600671][T10856] netlink: 988 bytes leftover after parsing attributes in process `syz.3.1743'. [ 152.606900][ T53] usb 8-1: string descriptor 0 read error: -71 [ 152.617418][ T53] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 152.628547][ T53] usb 8-1: USB disconnect, device number 33 [ 152.636836][ T56] usb 7-1: USB disconnect, device number 31 [ 152.725377][T10864] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1759'. [ 152.916619][T10876] hfsplus: unable to find HFS+ superblock [ 152.990795][T10884] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1769'. [ 153.062120][T10890] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1772'. [ 153.165266][T10898] hfsplus: unable to find HFS+ superblock [ 153.238395][T10905] xt_CT: You must specify a L4 protocol and not use inversions on it [ 153.288544][T10907] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1780'. [ 153.380381][T10914] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1781'. [ 153.649519][ T56] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 153.689521][ T836] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 153.801613][ T56] usb 7-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 153.805543][ T56] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 153.812240][ T56] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 153.815876][ T56] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.822437][ T56] usb 7-1: config 0 descriptor?? [ 153.851148][ T836] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 153.855234][ T836] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 153.860479][ T836] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 153.864136][ T836] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.869736][ T836] usb 5-1: config 0 descriptor?? [ 153.874649][ T836] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 154.041312][T10921] hfsplus: unable to find HFS+ superblock [ 154.070630][ T56] usb 7-1: string descriptor 0 read error: -71 [ 154.075554][ T56] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 154.081118][ T6031] usb 5-1: USB disconnect, device number 30 [ 154.088977][ T56] usb 7-1: USB disconnect, device number 32 [ 154.134077][T10926] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1787'. [ 154.268111][T10930] FAULT_INJECTION: forcing a failure. [ 154.268111][T10930] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 154.272167][T10930] CPU: 2 UID: 0 PID: 10930 Comm: syz.1.1788 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 154.272193][T10930] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 154.272201][T10930] Call Trace: [ 154.272205][T10930] [ 154.272210][T10930] dump_stack_lvl+0x16c/0x1f0 [ 154.272230][T10930] should_fail_ex+0x512/0x640 [ 154.272246][T10930] _copy_from_user+0x2e/0xd0 [ 154.272262][T10930] wext_handle_ioctl+0xc2/0x2a0 [ 154.272280][T10930] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 154.272299][T10930] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 154.272328][T10930] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 154.272346][T10930] sock_ioctl+0x3a1/0x6b0 [ 154.272359][T10930] ? __pfx_sock_ioctl+0x10/0x10 [ 154.272369][T10930] ? hook_file_ioctl_common+0x145/0x410 [ 154.272391][T10930] ? selinux_file_ioctl+0x180/0x270 [ 154.272405][T10930] ? selinux_file_ioctl+0xb4/0x270 [ 154.272421][T10930] ? __pfx_sock_ioctl+0x10/0x10 [ 154.272432][T10930] __x64_sys_ioctl+0x18e/0x210 [ 154.272446][T10930] do_syscall_64+0xcd/0x4c0 [ 154.272462][T10930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.272474][T10930] RIP: 0033:0x7f55a4f8e929 [ 154.272483][T10930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.272494][T10930] RSP: 002b:00007f55a5d2e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 154.272504][T10930] RAX: ffffffffffffffda RBX: 00007f55a51b5fa0 RCX: 00007f55a4f8e929 [ 154.272511][T10930] RDX: 0000200000000040 RSI: 0000000000008b1b RDI: 0000000000000003 [ 154.272518][T10930] RBP: 00007f55a5d2e090 R08: 0000000000000000 R09: 0000000000000000 [ 154.272524][T10930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.272530][T10930] R13: 0000000000000000 R14: 00007f55a51b5fa0 R15: 00007ffd4ac78a08 [ 154.272544][T10930] [ 154.425064][T10932] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1789'. [ 154.528296][ T40] audit: type=1400 audit(1751986178.059:29305): avc: denied { ioctl } for pid=10941 comm="syz.1.1792" path="socket:[39880]" dev="sockfs" ino=39880 ioctlcmd=0x941d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 154.591253][T10946] FAULT_INJECTION: forcing a failure. [ 154.591253][T10946] name failslab, interval 1, probability 0, space 0, times 0 [ 154.597090][T10946] CPU: 1 UID: 0 PID: 10946 Comm: syz.1.1794 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 154.597113][T10946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 154.597124][T10946] Call Trace: [ 154.597130][T10946] [ 154.597136][T10946] dump_stack_lvl+0x16c/0x1f0 [ 154.597166][T10946] should_fail_ex+0x512/0x640 [ 154.597196][T10946] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 154.597223][T10946] should_failslab+0xc2/0x120 [ 154.597248][T10946] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 154.597271][T10946] ? __alloc_skb+0x2b2/0x380 [ 154.597298][T10946] __alloc_skb+0x2b2/0x380 [ 154.597319][T10946] ? __pfx___alloc_skb+0x10/0x10 [ 154.597344][T10946] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 154.597375][T10946] netlink_alloc_large_skb+0x69/0x130 [ 154.597394][T10946] netlink_sendmsg+0x6a1/0xdd0 [ 154.597415][T10946] ? __pfx_netlink_sendmsg+0x10/0x10 [ 154.597440][T10946] ____sys_sendmsg+0xa95/0xc70 [ 154.597459][T10946] ? copy_msghdr_from_user+0x10a/0x160 [ 154.597483][T10946] ? __pfx_____sys_sendmsg+0x10/0x10 [ 154.597511][T10946] ___sys_sendmsg+0x134/0x1d0 [ 154.597535][T10946] ? __pfx____sys_sendmsg+0x10/0x10 [ 154.597555][T10946] ? __lock_acquire+0x622/0x1c90 [ 154.597602][T10946] __sys_sendmsg+0x16d/0x220 [ 154.597626][T10946] ? __pfx___sys_sendmsg+0x10/0x10 [ 154.597657][T10946] ? fput+0x70/0xf0 [ 154.597677][T10946] do_syscall_64+0xcd/0x4c0 [ 154.597704][T10946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.597722][T10946] RIP: 0033:0x7f55a4f8e929 [ 154.597736][T10946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.597754][T10946] RSP: 002b:00007f55a5d2e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 154.597771][T10946] RAX: ffffffffffffffda RBX: 00007f55a51b5fa0 RCX: 00007f55a4f8e929 [ 154.597784][T10946] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 154.597794][T10946] RBP: 00007f55a5d2e090 R08: 0000000000000000 R09: 0000000000000000 [ 154.597804][T10946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.597815][T10946] R13: 0000000000000000 R14: 00007f55a51b5fa0 R15: 00007ffd4ac78a08 [ 154.597839][T10946] [ 154.679259][T10950] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1795'. [ 154.683315][T10950] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1795'. [ 154.891128][T10962] SELinux: ebitmap: truncated map [ 154.896218][T10962] SELinux: failed to load policy [ 154.902135][T10963] SELinux: ebitmap: truncated map [ 154.907170][T10963] SELinux: failed to load policy [ 154.911570][T10967] syz_tun: entered allmulticast mode [ 155.189477][ T6013] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 155.199576][ T56] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 155.273084][ T40] audit: type=1400 audit(1751986178.809:29306): avc: denied { append } for pid=10980 comm="syz.1.1807" name="pfkey" dev="proc" ino=4026532990 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 155.341060][ T6013] usb 7-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 155.345283][ T6013] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 155.350759][ T6013] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 155.354418][ T6013] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.361027][ T56] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 155.365180][ T56] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 155.373513][ T56] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 155.378301][ T6013] usb 7-1: config 0 descriptor?? [ 155.382567][ T56] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.389291][ T6013] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 155.393205][ T56] usb 5-1: config 0 descriptor?? [ 155.601649][ T56] usb 5-1: string descriptor 0 read error: -71 [ 155.606231][ T56] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 155.614167][ T56] usb 5-1: USB disconnect, device number 31 [ 155.637502][ T6013] usb 7-1: USB disconnect, device number 33 [ 155.728704][T11001] FAULT_INJECTION: forcing a failure. [ 155.728704][T11001] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 155.732866][T11001] CPU: 3 UID: 0 PID: 11001 Comm: syz.1.1812 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 155.732881][T11001] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 155.732889][T11001] Call Trace: [ 155.732893][T11001] [ 155.732898][T11001] dump_stack_lvl+0x16c/0x1f0 [ 155.732917][T11001] should_fail_ex+0x512/0x640 [ 155.732934][T11001] _copy_from_user+0x2e/0xd0 [ 155.732950][T11001] copy_msghdr_from_user+0x98/0x160 [ 155.732966][T11001] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 155.732988][T11001] ___sys_sendmsg+0xfe/0x1d0 [ 155.733004][T11001] ? __pfx____sys_sendmsg+0x10/0x10 [ 155.733017][T11001] ? __lock_acquire+0x622/0x1c90 [ 155.733045][T11001] __sys_sendmsg+0x16d/0x220 [ 155.733060][T11001] ? __pfx___sys_sendmsg+0x10/0x10 [ 155.733084][T11001] do_syscall_64+0xcd/0x4c0 [ 155.733106][T11001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.733118][T11001] RIP: 0033:0x7f55a4f8e929 [ 155.733127][T11001] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.733138][T11001] RSP: 002b:00007f55a5d2e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 155.733149][T11001] RAX: ffffffffffffffda RBX: 00007f55a51b5fa0 RCX: 00007f55a4f8e929 [ 155.733156][T11001] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 155.733162][T11001] RBP: 00007f55a5d2e090 R08: 0000000000000000 R09: 0000000000000000 [ 155.733169][T11001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.733175][T11001] R13: 0000000000000000 R14: 00007f55a51b5fa0 R15: 00007ffd4ac78a08 [ 155.733189][T11001] [ 155.903536][T11009] FAULT_INJECTION: forcing a failure. [ 155.903536][T11009] name failslab, interval 1, probability 0, space 0, times 0 [ 155.908358][T11009] CPU: 3 UID: 0 PID: 11009 Comm: syz.1.1816 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 155.908380][T11009] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 155.908391][T11009] Call Trace: [ 155.908397][T11009] [ 155.908404][T11009] dump_stack_lvl+0x16c/0x1f0 [ 155.908431][T11009] should_fail_ex+0x512/0x640 [ 155.908448][T11009] ? fs_reclaim_acquire+0xae/0x150 [ 155.908468][T11009] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 155.908491][T11009] should_failslab+0xc2/0x120 [ 155.908514][T11009] __kmalloc_noprof+0xd2/0x510 [ 155.908541][T11009] tomoyo_realpath_from_path+0xc2/0x6e0 [ 155.908566][T11009] ? tomoyo_profile+0x47/0x60 [ 155.908589][T11009] tomoyo_path_number_perm+0x245/0x580 [ 155.908608][T11009] ? tomoyo_path_number_perm+0x237/0x580 [ 155.908629][T11009] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 155.908650][T11009] ? find_held_lock+0x2b/0x80 [ 155.908692][T11009] ? find_held_lock+0x2b/0x80 [ 155.908707][T11009] ? hook_file_ioctl_common+0x145/0x410 [ 155.908738][T11009] ? __fget_files+0x20e/0x3c0 [ 155.908764][T11009] security_file_ioctl+0x9b/0x240 [ 155.908785][T11009] __x64_sys_ioctl+0xb7/0x210 [ 155.908802][T11009] do_syscall_64+0xcd/0x4c0 [ 155.908827][T11009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.908844][T11009] RIP: 0033:0x7f55a4f8e929 [ 155.908857][T11009] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.908872][T11009] RSP: 002b:00007f55a5d2e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 155.908884][T11009] RAX: ffffffffffffffda RBX: 00007f55a51b5fa0 RCX: 00007f55a4f8e929 [ 155.908895][T11009] RDX: 0000200000000000 RSI: 0000000000008b34 RDI: 0000000000000006 [ 155.908906][T11009] RBP: 00007f55a5d2e090 R08: 0000000000000000 R09: 0000000000000000 [ 155.908915][T11009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.908923][T11009] R13: 0000000000000000 R14: 00007f55a51b5fa0 R15: 00007ffd4ac78a08 [ 155.908945][T11009] [ 155.908952][T11009] ERROR: Out of memory at tomoyo_realpath_from_path. [ 156.239200][T11020] netlink: 'syz.3.1821': attribute type 1 has an invalid length. [ 156.243335][T11026] FAULT_INJECTION: forcing a failure. [ 156.243335][T11026] name failslab, interval 1, probability 0, space 0, times 0 [ 156.248356][T11026] CPU: 0 UID: 0 PID: 11026 Comm: syz.2.1823 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 156.248379][T11026] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 156.248391][T11026] Call Trace: [ 156.248398][T11026] [ 156.248405][T11026] dump_stack_lvl+0x16c/0x1f0 [ 156.248435][T11026] should_fail_ex+0x512/0x640 [ 156.248458][T11026] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 156.248486][T11026] should_failslab+0xc2/0x120 [ 156.248512][T11026] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 156.248536][T11026] ? __alloc_skb+0x2b2/0x380 [ 156.248564][T11026] __alloc_skb+0x2b2/0x380 [ 156.248586][T11026] ? __pfx___alloc_skb+0x10/0x10 [ 156.248606][T11026] ? __pfx___mutex_trylock_common+0x10/0x10 [ 156.248630][T11026] ? rcu_is_watching+0x12/0xc0 [ 156.248656][T11026] netlink_dump+0x678/0xce0 [ 156.248684][T11026] ? __rhashtable_lookup.constprop.0+0x3a5/0x760 [ 156.248711][T11026] ? __netlink_dump_start+0x150/0x990 [ 156.248739][T11026] ? __pfx_netlink_dump+0x10/0x10 [ 156.248765][T11026] ? __pfx___mutex_lock+0x10/0x10 [ 156.248809][T11026] __netlink_dump_start+0x6d6/0x990 [ 156.248841][T11026] rdma_nl_rcv_msg+0x558/0x6e0 [ 156.248868][T11026] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 156.248891][T11026] ? __pfx_nldev_get_dumpit+0x10/0x10 [ 156.248919][T11026] ? __lock_acquire+0x622/0x1c90 [ 156.248941][T11026] rdma_nl_rcv_skb.constprop.0.isra.0+0x2d0/0x430 [ 156.248971][T11026] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 156.249007][T11026] ? netlink_deliver_tap+0x1ae/0xd30 [ 156.249033][T11026] ? is_vmalloc_addr+0x86/0xa0 [ 156.249060][T11026] netlink_unicast+0x53a/0x7f0 [ 156.249080][T11026] ? __pfx_netlink_unicast+0x10/0x10 [ 156.249116][T11026] netlink_sendmsg+0x8d1/0xdd0 [ 156.249139][T11026] ? __pfx_netlink_sendmsg+0x10/0x10 [ 156.249167][T11026] ____sys_sendmsg+0xa95/0xc70 [ 156.249186][T11026] ? copy_msghdr_from_user+0x10a/0x160 [ 156.249210][T11026] ? __pfx_____sys_sendmsg+0x10/0x10 [ 156.249240][T11026] ___sys_sendmsg+0x134/0x1d0 [ 156.249266][T11026] ? __pfx____sys_sendmsg+0x10/0x10 [ 156.249287][T11026] ? __lock_acquire+0x622/0x1c90 [ 156.249351][T11026] __sys_sendmsg+0x16d/0x220 [ 156.249378][T11026] ? __pfx___sys_sendmsg+0x10/0x10 [ 156.249420][T11026] do_syscall_64+0xcd/0x4c0 [ 156.249448][T11026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.249466][T11026] RIP: 0033:0x7f4afb98e929 [ 156.249481][T11026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.249498][T11026] RSP: 002b:00007f4afc750038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 156.249515][T11026] RAX: ffffffffffffffda RBX: 00007f4afbbb5fa0 RCX: 00007f4afb98e929 [ 156.249526][T11026] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 156.249537][T11026] RBP: 00007f4afc750090 R08: 0000000000000000 R09: 0000000000000000 [ 156.249548][T11026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.249558][T11026] R13: 0000000000000000 R14: 00007f4afbbb5fa0 R15: 00007ffcf8529388 [ 156.249583][T11026] [ 156.252044][T11020] bond4: entered promiscuous mode [ 156.281408][ T6031] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 156.282511][T11020] 8021q: adding VLAN 0 to HW filter on device bond4 [ 156.440254][ T6031] usb 6-1: Using ep0 maxpacket: 8 [ 156.444801][ T6031] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 156.448272][ T6031] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 156.454034][ T6031] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 156.458109][ T6031] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 156.462584][ T6031] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 156.467642][ T6031] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 156.471563][ T6031] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.535569][T11050] netlink: 'syz.0.1827': attribute type 32 has an invalid length. [ 156.538128][T11050] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 156.599865][T11060] FAULT_INJECTION: forcing a failure. [ 156.599865][T11060] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.603863][T11060] CPU: 1 UID: 0 PID: 11060 Comm: syz.0.1828 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 156.603878][T11060] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 156.603885][T11060] Call Trace: [ 156.603889][T11060] [ 156.603894][T11060] dump_stack_lvl+0x16c/0x1f0 [ 156.603912][T11060] should_fail_ex+0x512/0x640 [ 156.603930][T11060] _copy_from_iter+0x29f/0x16f0 [ 156.603948][T11060] ? skb_set_owner_w+0x31f/0x710 [ 156.603962][T11060] ? __pfx__copy_from_iter+0x10/0x10 [ 156.603976][T11060] ? __pfx_skb_set_owner_w+0x10/0x10 [ 156.603989][T11060] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 156.604008][T11060] pppoe_sendmsg+0x4da/0x7b0 [ 156.604021][T11060] ? __pfx_pppoe_sendmsg+0x10/0x10 [ 156.604030][T11060] ? __might_fault+0x13b/0x190 [ 156.604049][T11060] ____sys_sendmsg+0xa95/0xc70 [ 156.604060][T11060] ? copy_msghdr_from_user+0x10a/0x160 [ 156.604074][T11060] ? __pfx_____sys_sendmsg+0x10/0x10 [ 156.604088][T11060] ? __pfx__kstrtoull+0x10/0x10 [ 156.604103][T11060] ___sys_sendmsg+0x134/0x1d0 [ 156.604118][T11060] ? __pfx____sys_sendmsg+0x10/0x10 [ 156.604140][T11060] ? find_held_lock+0x2b/0x80 [ 156.604163][T11060] __sys_sendmmsg+0x200/0x420 [ 156.604179][T11060] ? __pfx___sys_sendmmsg+0x10/0x10 [ 156.604199][T11060] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 156.604221][T11060] ? fput+0x70/0xf0 [ 156.604231][T11060] ? ksys_write+0x1ac/0x250 [ 156.604244][T11060] ? __pfx_ksys_write+0x10/0x10 [ 156.604260][T11060] __x64_sys_sendmmsg+0x9c/0x100 [ 156.604275][T11060] ? lockdep_hardirqs_on+0x7c/0x110 [ 156.604289][T11060] do_syscall_64+0xcd/0x4c0 [ 156.604306][T11060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.604317][T11060] RIP: 0033:0x7f92c758e929 [ 156.604327][T11060] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.604338][T11060] RSP: 002b:00007f92c833f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 156.604348][T11060] RAX: ffffffffffffffda RBX: 00007f92c77b5fa0 RCX: 00007f92c758e929 [ 156.604355][T11060] RDX: 0000000000000484 RSI: 0000200000001340 RDI: 0000000000000003 [ 156.604362][T11060] RBP: 00007f92c833f090 R08: 0000000000000000 R09: 0000000000000000 [ 156.604369][T11060] R10: 0000000024048084 R11: 0000000000000246 R12: 0000000000000001 [ 156.604375][T11060] R13: 0000000000000000 R14: 00007f92c77b5fa0 R15: 00007ffeafa9afe8 [ 156.604389][T11060] [ 156.685796][ T6031] usb 6-1: usb_control_msg returned -32 [ 156.689977][ T6031] usbtmc 6-1:16.0: can't read capabilities [ 156.719576][ T6109] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 156.893255][ T6109] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 156.896114][ T6109] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.898573][ T6109] usb 8-1: Product: syz [ 156.900429][ T6109] usb 8-1: Manufacturer: syz [ 156.901991][ T6109] usb 8-1: SerialNumber: syz [ 156.908119][ T6109] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 156.914664][ T40] audit: type=1400 audit(1751986180.449:29307): avc: denied { firmware_load } for pid=836 comm="kworker/3:2" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 156.930878][ T836] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 156.939492][ T7316] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 157.013273][T11087] FAULT_INJECTION: forcing a failure. [ 157.013273][T11087] name failslab, interval 1, probability 0, space 0, times 0 [ 157.017471][T11087] CPU: 0 UID: 0 PID: 11087 Comm: syz.2.1831 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 157.017486][T11087] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 157.017494][T11087] Call Trace: [ 157.017498][T11087] [ 157.017503][T11087] dump_stack_lvl+0x16c/0x1f0 [ 157.017522][T11087] should_fail_ex+0x512/0x640 [ 157.017550][T11087] ? __kmalloc_noprof+0xbf/0x510 [ 157.017566][T11087] ? ioctl_standard_iw_point+0x414/0xca0 [ 157.017582][T11087] should_failslab+0xc2/0x120 [ 157.017598][T11087] __kmalloc_noprof+0xd2/0x510 [ 157.017611][T11087] ? __mutex_trylock_common+0xe9/0x250 [ 157.017623][T11087] ? __pfx___mutex_trylock_common+0x10/0x10 [ 157.017636][T11087] ioctl_standard_iw_point+0x414/0xca0 [ 157.017653][T11087] ? __pfx_cfg80211_wext_giwessid+0x10/0x10 [ 157.017669][T11087] ? __pfx_ioctl_standard_iw_point+0x10/0x10 [ 157.017686][T11087] ? wext_handle_ioctl+0x14d/0x2a0 [ 157.017703][T11087] ? __pfx___mutex_lock+0x10/0x10 [ 157.017722][T11087] ? __pfx_cfg80211_wext_giwessid+0x10/0x10 [ 157.017736][T11087] ioctl_standard_call+0x166/0x1d0 [ 157.017753][T11087] ? __pfx_ioctl_standard_call+0x10/0x10 [ 157.017768][T11087] ? __pfx_cfg80211_wext_giwessid+0x10/0x10 [ 157.017782][T11087] wireless_process_ioctl.constprop.0+0x28e/0x3d0 [ 157.017801][T11087] wext_handle_ioctl+0x168/0x2a0 [ 157.017818][T11087] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 157.017837][T11087] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 157.017855][T11087] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 157.017873][T11087] sock_ioctl+0x3a1/0x6b0 [ 157.017909][T11087] ? __pfx_sock_ioctl+0x10/0x10 [ 157.017923][T11087] ? hook_file_ioctl_common+0x145/0x410 [ 157.017944][T11087] ? selinux_file_ioctl+0x180/0x270 [ 157.017962][T11087] ? selinux_file_ioctl+0xb4/0x270 [ 157.017978][T11087] ? __pfx_sock_ioctl+0x10/0x10 [ 157.017989][T11087] __x64_sys_ioctl+0x18e/0x210 [ 157.018003][T11087] do_syscall_64+0xcd/0x4c0 [ 157.018020][T11087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.018031][T11087] RIP: 0033:0x7f4afb98e929 [ 157.018041][T11087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.018052][T11087] RSP: 002b:00007f4afc750038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 157.018063][T11087] RAX: ffffffffffffffda RBX: 00007f4afbbb5fa0 RCX: 00007f4afb98e929 [ 157.018070][T11087] RDX: 0000200000000040 RSI: 0000000000008b1b RDI: 0000000000000003 [ 157.018076][T11087] RBP: 00007f4afc750090 R08: 0000000000000000 R09: 0000000000000000 [ 157.018083][T11087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.018089][T11087] R13: 0000000000000000 R14: 00007f4afbbb5fa0 R15: 00007ffcf8529388 [ 157.018103][T11087] [ 157.090781][ T7316] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 157.119225][ T7316] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 157.123295][ T7316] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 157.126098][ T7316] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.129838][ T7316] usb 5-1: config 0 descriptor?? [ 157.133508][ T7316] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 157.137410][ T6013] usb 8-1: USB disconnect, device number 34 [ 157.173728][ T40] audit: type=1400 audit(1751986180.709:29308): avc: denied { ioctl } for pid=11095 comm="syz.2.1833" path="socket:[41174]" dev="sockfs" ino=41174 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 157.177406][T11096] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 157.338550][ T7316] usb 5-1: USB disconnect, device number 32 [ 157.461985][ T40] audit: type=1400 audit(1751986180.999:29309): avc: denied { write } for pid=11010 comm="syz.1.1817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 157.470713][T11104] 9pnet_fd: Insufficient options for proto=fd [ 157.653758][ T7316] usb 6-1: USB disconnect, device number 34 [ 157.959567][ T836] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 157.962745][ T836] ath9k_htc: Failed to initialize the device [ 157.965773][ T6013] usb 8-1: ath9k_htc: USB layer deinitialized [ 158.280213][ T6013] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 158.456987][ T6013] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 158.461660][ T6013] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.464877][ T6013] usb 8-1: Product: syz [ 158.466594][ T6013] usb 8-1: Manufacturer: syz [ 158.468419][ T6013] usb 8-1: SerialNumber: syz [ 158.481523][ T6013] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 158.495359][ T56] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 158.676725][T11129] hfsplus: unable to find HFS+ superblock [ 158.845114][T11138] netlink: 'syz.2.1845': attribute type 1 has an invalid length. [ 158.862076][T11138] bond4: entered promiscuous mode [ 158.864191][T11138] 8021q: adding VLAN 0 to HW filter on device bond4 [ 158.902262][T11044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.907983][T11044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.919015][ T7316] usb 8-1: USB disconnect, device number 35 [ 159.001223][T11143] __nla_validate_parse: 4 callbacks suppressed [ 159.001238][T11143] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1846'. [ 159.007374][T11143] FAULT_INJECTION: forcing a failure. [ 159.007374][T11143] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 159.012708][T11143] CPU: 1 UID: 0 PID: 11143 Comm: syz.2.1846 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 159.012731][T11143] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 159.012743][T11143] Call Trace: [ 159.012750][T11143] [ 159.012758][T11143] dump_stack_lvl+0x16c/0x1f0 [ 159.012786][T11143] should_fail_ex+0x512/0x640 [ 159.012816][T11143] should_fail_alloc_page+0xe7/0x130 [ 159.012845][T11143] prepare_alloc_pages+0x3c2/0x610 [ 159.012868][T11143] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 159.012895][T11143] ? mark_held_locks+0x49/0x80 [ 159.012922][T11143] ? finish_task_switch.isra.0+0x221/0xc10 [ 159.012945][T11143] ? lockdep_hardirqs_on+0x7c/0x110 [ 159.012968][T11143] ? finish_task_switch.isra.0+0x221/0xc10 [ 159.012993][T11143] ? rcu_is_watching+0x12/0xc0 [ 159.013016][T11143] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 159.013048][T11143] ? up+0xcb/0x140 [ 159.013076][T11143] ? __pfx___schedule+0x10/0x10 [ 159.013101][T11143] ? wiphy_new_nm+0x701/0x2160 [ 159.013127][T11143] __alloc_pages_noprof+0xb/0x1b0 [ 159.013148][T11143] ___kmalloc_large_node+0x84/0x1e0 [ 159.013171][T11143] ? wiphy_new_nm+0x701/0x2160 [ 159.013196][T11143] __kmalloc_large_node_noprof+0x1c/0x70 [ 159.013216][T11143] __kmalloc_noprof.cold+0xc/0x61 [ 159.013243][T11143] ? irq_work_queue+0xce/0x100 [ 159.013267][T11143] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 159.013287][T11143] ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10 [ 159.013304][T11143] wiphy_new_nm+0x701/0x2160 [ 159.013331][T11143] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 159.013356][T11143] ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10 [ 159.013373][T11143] ieee80211_alloc_hw_nm+0x1b7a/0x2260 [ 159.013391][T11143] ? __local_bh_enable_ip+0xa4/0x120 [ 159.013416][T11143] mac80211_hwsim_new_radio+0x1d4/0x54d0 [ 159.013440][T11143] ? __pfx__printk+0x10/0x10 [ 159.013463][T11143] ? __pfx____ratelimit+0x10/0x10 [ 159.013487][T11143] ? rcu_is_watching+0x12/0xc0 [ 159.013508][T11143] ? do_trace_netlink_extack+0x164/0x1e0 [ 159.013534][T11143] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 159.013565][T11143] hwsim_new_radio_nl+0xb51/0x12c0 [ 159.013591][T11143] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 159.013625][T11143] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 159.013647][T11143] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 159.013673][T11143] genl_family_rcv_msg_doit+0x206/0x2f0 [ 159.013695][T11143] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 159.013724][T11143] ? bpf_lsm_capable+0x9/0x10 [ 159.013743][T11143] ? security_capable+0x7e/0x260 [ 159.013763][T11143] ? ns_capable+0xd7/0x110 [ 159.013785][T11143] genl_rcv_msg+0x55c/0x800 [ 159.013809][T11143] ? __pfx_genl_rcv_msg+0x10/0x10 [ 159.013830][T11143] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 159.013883][T11143] netlink_rcv_skb+0x155/0x420 [ 159.013903][T11143] ? __pfx_genl_rcv_msg+0x10/0x10 [ 159.013926][T11143] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 159.013952][T11143] ? netlink_deliver_tap+0x1ae/0xd30 [ 159.013984][T11143] genl_rcv+0x28/0x40 [ 159.014002][T11143] netlink_unicast+0x53a/0x7f0 [ 159.014021][T11143] ? __pfx_netlink_unicast+0x10/0x10 [ 159.014046][T11143] netlink_sendmsg+0x8d1/0xdd0 [ 159.014069][T11143] ? __pfx_netlink_sendmsg+0x10/0x10 [ 159.014095][T11143] ____sys_sendmsg+0xa95/0xc70 [ 159.014114][T11143] ? copy_msghdr_from_user+0x10a/0x160 [ 159.014139][T11143] ? __pfx_____sys_sendmsg+0x10/0x10 [ 159.014169][T11143] ___sys_sendmsg+0x134/0x1d0 [ 159.014194][T11143] ? __pfx____sys_sendmsg+0x10/0x10 [ 159.014216][T11143] ? __lock_acquire+0x622/0x1c90 [ 159.014264][T11143] __sys_sendmsg+0x16d/0x220 [ 159.014290][T11143] ? __pfx___sys_sendmsg+0x10/0x10 [ 159.014330][T11143] do_syscall_64+0xcd/0x4c0 [ 159.014364][T11143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.014382][T11143] RIP: 0033:0x7f4afb98e929 [ 159.014397][T11143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.014414][T11143] RSP: 002b:00007f4afc72f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 159.014431][T11143] RAX: ffffffffffffffda RBX: 00007f4afbbb6080 RCX: 00007f4afb98e929 [ 159.014443][T11143] RDX: 0000000020008010 RSI: 0000200000000140 RDI: 0000000000000005 [ 159.014455][T11143] RBP: 00007f4afc72f090 R08: 0000000000000000 R09: 0000000000000000 [ 159.014466][T11143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.014477][T11143] R13: 0000000000000000 R14: 00007f4afbbb6080 R15: 00007ffcf8529388 [ 159.014503][T11143] [ 159.209330][T11145] netlink: 'syz.1.1847': attribute type 15 has an invalid length. [ 159.299842][T11148] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1848'. [ 159.569477][ T56] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 159.571827][ T56] ath9k_htc: Failed to initialize the device [ 159.574116][ T7316] usb 8-1: ath9k_htc: USB layer deinitialized [ 159.623011][T11160] mkiss: ax0: crc mode is auto. [ 159.630138][ T40] audit: type=1326 audit(1751986183.169:29310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11159 comm="syz.3.1851" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbec238e929 code=0x0 [ 159.665448][T11163] hfsplus: unable to find HFS+ superblock [ 159.788384][T11168] netlink: 'syz.1.1854': attribute type 1 has an invalid length. [ 159.808437][T11168] bond7: entered promiscuous mode [ 159.813793][T11168] 8021q: adding VLAN 0 to HW filter on device bond7 [ 159.838575][T11176] FAULT_INJECTION: forcing a failure. [ 159.838575][T11176] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.844020][T11176] CPU: 0 UID: 0 PID: 11176 Comm: syz.3.1856 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 159.844042][T11176] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 159.844053][T11176] Call Trace: [ 159.844059][T11176] [ 159.844066][T11176] dump_stack_lvl+0x16c/0x1f0 [ 159.844092][T11176] should_fail_ex+0x512/0x640 [ 159.844121][T11176] _copy_to_user+0x32/0xd0 [ 159.844148][T11176] simple_read_from_buffer+0xcb/0x170 [ 159.844173][T11176] proc_fail_nth_read+0x197/0x270 [ 159.844197][T11176] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 159.844219][T11176] ? rw_verify_area+0xcf/0x680 [ 159.844239][T11176] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 159.844262][T11176] vfs_read+0x1e1/0xc60 [ 159.844285][T11176] ? __pfx___mutex_lock+0x10/0x10 [ 159.844308][T11176] ? __pfx_vfs_read+0x10/0x10 [ 159.844343][T11176] ? __fget_files+0x20e/0x3c0 [ 159.844372][T11176] ksys_read+0x12a/0x250 [ 159.844394][T11176] ? __pfx_ksys_read+0x10/0x10 [ 159.844415][T11176] ? fput+0x70/0xf0 [ 159.844433][T11176] do_syscall_64+0xcd/0x4c0 [ 159.844460][T11176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.844479][T11176] RIP: 0033:0x7fbec238d33c [ 159.844493][T11176] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 159.844509][T11176] RSP: 002b:00007fbec31e6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 159.844525][T11176] RAX: ffffffffffffffda RBX: 00007fbec25b5fa0 RCX: 00007fbec238d33c [ 159.844536][T11176] RDX: 000000000000000f RSI: 00007fbec31e60a0 RDI: 0000000000000004 [ 159.844547][T11176] RBP: 00007fbec31e6090 R08: 0000000000000000 R09: 0000000000000000 [ 159.844557][T11176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.844569][T11176] R13: 0000000000000000 R14: 00007fbec25b5fa0 R15: 00007ffe2cb97cd8 [ 159.844592][T11176] [ 159.954052][T11183] FAULT_INJECTION: forcing a failure. [ 159.954052][T11183] name failslab, interval 1, probability 0, space 0, times 0 [ 159.958144][T11183] CPU: 2 UID: 0 PID: 11183 Comm: syz.1.1859 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 159.958159][T11183] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 159.958166][T11183] Call Trace: [ 159.958170][T11183] [ 159.958174][T11183] dump_stack_lvl+0x16c/0x1f0 [ 159.958195][T11183] should_fail_ex+0x512/0x640 [ 159.958210][T11183] ? fs_reclaim_acquire+0xae/0x150 [ 159.958222][T11183] ? tomoyo_encode2+0x100/0x3e0 [ 159.958237][T11183] should_failslab+0xc2/0x120 [ 159.958254][T11183] __kmalloc_noprof+0xd2/0x510 [ 159.958272][T11183] tomoyo_encode2+0x100/0x3e0 [ 159.958289][T11183] tomoyo_encode+0x29/0x50 [ 159.958303][T11183] tomoyo_realpath_from_path+0x18f/0x6e0 [ 159.958327][T11183] ? tomoyo_profile+0x47/0x60 [ 159.958345][T11183] tomoyo_path_number_perm+0x245/0x580 [ 159.958358][T11183] ? tomoyo_path_number_perm+0x237/0x580 [ 159.958372][T11183] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 159.958386][T11183] ? find_held_lock+0x2b/0x80 [ 159.958413][T11183] ? find_held_lock+0x2b/0x80 [ 159.958426][T11183] ? hook_file_ioctl_common+0x145/0x410 [ 159.958447][T11183] ? __fget_files+0x20e/0x3c0 [ 159.958465][T11183] security_file_ioctl+0x9b/0x240 [ 159.958481][T11183] __x64_sys_ioctl+0xb7/0x210 [ 159.958495][T11183] do_syscall_64+0xcd/0x4c0 [ 159.958511][T11183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.958523][T11183] RIP: 0033:0x7f55a4f8e929 [ 159.958533][T11183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.958544][T11183] RSP: 002b:00007f55a5d2e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 159.958555][T11183] RAX: ffffffffffffffda RBX: 00007f55a51b5fa0 RCX: 00007f55a4f8e929 [ 159.958562][T11183] RDX: 0000200000000000 RSI: 0000000000008b34 RDI: 0000000000000006 [ 159.958569][T11183] RBP: 00007f55a5d2e090 R08: 0000000000000000 R09: 0000000000000000 [ 159.958576][T11183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.958582][T11183] R13: 0000000000000000 R14: 00007f55a51b5fa0 R15: 00007ffd4ac78a08 [ 159.958596][T11183] [ 159.958606][T11183] ERROR: Out of memory at tomoyo_realpath_from_path. [ 160.059965][T11190] hfsplus: unable to find HFS+ superblock [ 160.107370][T11197] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1861'. [ 160.159450][ T6013] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 160.187567][T11206] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1868'. [ 160.317769][ T40] audit: type=1400 audit(1751986183.849:29311): avc: denied { bind } for pid=11212 comm="syz.1.1871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 160.331534][ T6013] usb 7-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 160.335092][ T6013] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 160.339221][ T6013] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 160.342188][ T6013] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.346444][ T6013] usb 7-1: config 0 descriptor?? [ 160.421737][T11224] FAULT_INJECTION: forcing a failure. [ 160.421737][T11224] name failslab, interval 1, probability 0, space 0, times 0 [ 160.425748][T11224] CPU: 2 UID: 0 PID: 11224 Comm: syz.3.1874 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 160.425763][T11224] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 160.425770][T11224] Call Trace: [ 160.425775][T11224] [ 160.425779][T11224] dump_stack_lvl+0x16c/0x1f0 [ 160.425799][T11224] should_fail_ex+0x512/0x640 [ 160.425814][T11224] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 160.425843][T11224] should_failslab+0xc2/0x120 [ 160.425885][T11224] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 160.425900][T11224] ? __alloc_skb+0x2b2/0x380 [ 160.425917][T11224] __alloc_skb+0x2b2/0x380 [ 160.425930][T11224] ? __pfx___alloc_skb+0x10/0x10 [ 160.425945][T11224] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 160.425966][T11224] netlink_alloc_large_skb+0x69/0x130 [ 160.425978][T11224] netlink_sendmsg+0x6a1/0xdd0 [ 160.425990][T11224] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.426006][T11224] ____sys_sendmsg+0xa95/0xc70 [ 160.426018][T11224] ? copy_msghdr_from_user+0x10a/0x160 [ 160.426032][T11224] ? __pfx_____sys_sendmsg+0x10/0x10 [ 160.426049][T11224] ___sys_sendmsg+0x134/0x1d0 [ 160.426065][T11224] ? __pfx____sys_sendmsg+0x10/0x10 [ 160.426078][T11224] ? __lock_acquire+0x622/0x1c90 [ 160.426106][T11224] __sys_sendmsg+0x16d/0x220 [ 160.426121][T11224] ? __pfx___sys_sendmsg+0x10/0x10 [ 160.426141][T11224] ? fput+0x70/0xf0 [ 160.426152][T11224] do_syscall_64+0xcd/0x4c0 [ 160.426169][T11224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.426180][T11224] RIP: 0033:0x7fbec238e929 [ 160.426189][T11224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.426200][T11224] RSP: 002b:00007fbec31e6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 160.426211][T11224] RAX: ffffffffffffffda RBX: 00007fbec25b5fa0 RCX: 00007fbec238e929 [ 160.426218][T11224] RDX: 0000000000044044 RSI: 0000200000000340 RDI: 0000000000000004 [ 160.426225][T11224] RBP: 00007fbec31e6090 R08: 0000000000000000 R09: 0000000000000000 [ 160.426231][T11224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.426238][T11224] R13: 0000000000000000 R14: 00007fbec25b5fa0 R15: 00007ffe2cb97cd8 [ 160.426252][T11224] [ 160.429539][ T5993] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 160.553407][ T6013] usb 7-1: string descriptor 0 read error: -71 [ 160.557541][ T6013] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 160.560705][ T6013] usb 7-1: USB disconnect, device number 34 [ 160.660694][ T5993] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 160.664807][ T5993] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 160.668742][ T5993] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 160.671658][ T5993] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.675836][ T5993] usb 5-1: config 0 descriptor?? [ 160.679239][ T5993] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 160.887335][ T53] usb 5-1: USB disconnect, device number 33 [ 161.128279][T11236] FAULT_INJECTION: forcing a failure. [ 161.128279][T11236] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.133678][T11236] CPU: 0 UID: 0 PID: 11236 Comm: syz.1.1879 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 161.133703][T11236] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 161.133714][T11236] Call Trace: [ 161.133720][T11236] [ 161.133728][T11236] dump_stack_lvl+0x16c/0x1f0 [ 161.133758][T11236] should_fail_ex+0x512/0x640 [ 161.133787][T11236] _copy_from_user+0x2e/0xd0 [ 161.133813][T11236] copy_msghdr_from_user+0x98/0x160 [ 161.133838][T11236] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 161.133889][T11236] ? kfree+0x24f/0x4d0 [ 161.133907][T11236] ? __pfx__kstrtoull+0x10/0x10 [ 161.133932][T11236] ___sys_sendmsg+0xfe/0x1d0 [ 161.133959][T11236] ? __pfx____sys_sendmsg+0x10/0x10 [ 161.134007][T11236] ? __pfx___might_resched+0x10/0x10 [ 161.134036][T11236] __sys_sendmmsg+0x200/0x420 [ 161.134063][T11236] ? __pfx___sys_sendmmsg+0x10/0x10 [ 161.134096][T11236] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 161.134132][T11236] ? fput+0x70/0xf0 [ 161.134149][T11236] ? ksys_write+0x1ac/0x250 [ 161.134171][T11236] ? __pfx_ksys_write+0x10/0x10 [ 161.134198][T11236] __x64_sys_sendmmsg+0x9c/0x100 [ 161.134221][T11236] ? lockdep_hardirqs_on+0x7c/0x110 [ 161.134244][T11236] do_syscall_64+0xcd/0x4c0 [ 161.134271][T11236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.134290][T11236] RIP: 0033:0x7f55a4f8e929 [ 161.134305][T11236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.134323][T11236] RSP: 002b:00007f55a5d2e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 161.134340][T11236] RAX: ffffffffffffffda RBX: 00007f55a51b5fa0 RCX: 00007f55a4f8e929 [ 161.134358][T11236] RDX: 0000000000000484 RSI: 0000200000001340 RDI: 0000000000000003 [ 161.134370][T11236] RBP: 00007f55a5d2e090 R08: 0000000000000000 R09: 0000000000000000 [ 161.134381][T11236] R10: 0000000024048084 R11: 0000000000000246 R12: 0000000000000001 [ 161.134392][T11236] R13: 0000000000000000 R14: 00007f55a51b5fa0 R15: 00007ffd4ac78a08 [ 161.134417][T11236] [ 161.409414][ T40] audit: type=1400 audit(1751986184.939:29312): avc: denied { attach_queue } for pid=11246 comm="syz.2.1884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 161.454126][T11252] hfsplus: unable to find HFS+ superblock [ 161.574131][T11263] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1886'. [ 161.609079][ T40] audit: type=1400 audit(1751986185.139:29313): avc: denied { create } for pid=11264 comm="syz.2.1891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 161.621452][ T40] audit: type=1400 audit(1751986185.149:29314): avc: denied { getopt } for pid=11264 comm="syz.2.1891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 161.696874][ T40] audit: type=1400 audit(1751986185.229:29315): avc: denied { shutdown } for pid=11267 comm="syz.2.1892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 161.741832][T11275] hfsplus: unable to find HFS+ superblock [ 161.780175][ T40] audit: type=1400 audit(1751986185.309:29316): avc: denied { write } for pid=11279 comm="syz.0.1898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 161.819950][T11283] FAULT_INJECTION: forcing a failure. [ 161.819950][T11283] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.824239][T11283] CPU: 1 UID: 0 PID: 11283 Comm: syz.2.1897 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 161.824254][T11283] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 161.824261][T11283] Call Trace: [ 161.824265][T11283] [ 161.824270][T11283] dump_stack_lvl+0x16c/0x1f0 [ 161.824290][T11283] should_fail_ex+0x512/0x640 [ 161.824307][T11283] _copy_from_user+0x2e/0xd0 [ 161.824323][T11283] sctp_setsockopt+0x2045/0xb870 [ 161.824337][T11283] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 161.824353][T11283] ? proc_fail_nth_write+0x9f/0x250 [ 161.824369][T11283] ? __pfx_sctp_setsockopt+0x10/0x10 [ 161.824381][T11283] ? __lock_acquire+0x622/0x1c90 [ 161.824394][T11283] ? selinux_socket_setsockopt+0x6a/0x80 [ 161.824407][T11283] ? sock_common_setsockopt+0x2e/0xf0 [ 161.824425][T11283] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 161.824442][T11283] do_sock_setsockopt+0x221/0x470 [ 161.824459][T11283] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 161.824484][T11283] __sys_setsockopt+0x1a0/0x230 [ 161.824500][T11283] __x64_sys_setsockopt+0xbd/0x160 [ 161.824513][T11283] ? do_syscall_64+0x91/0x4c0 [ 161.824529][T11283] ? lockdep_hardirqs_on+0x7c/0x110 [ 161.824544][T11283] do_syscall_64+0xcd/0x4c0 [ 161.824560][T11283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.824571][T11283] RIP: 0033:0x7f4afb98e929 [ 161.824580][T11283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.824591][T11283] RSP: 002b:00007f4afc72f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 161.824601][T11283] RAX: ffffffffffffffda RBX: 00007f4afbbb6080 RCX: 00007f4afb98e929 [ 161.824608][T11283] RDX: 000000000000001e RSI: 0000000000000084 RDI: 0000000000000003 [ 161.824614][T11283] RBP: 00007f4afc72f090 R08: 0000000000000004 R09: 0000000000000000 [ 161.824621][T11283] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 161.824627][T11283] R13: 0000000000000000 R14: 00007f4afbbb6080 R15: 00007ffcf8529388 [ 161.824641][T11283] [ 161.923883][T11285] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 161.926770][T11285] overlayfs: missing 'lowerdir' [ 161.929560][T11285] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 161.933318][T11285] overlayfs: missing 'lowerdir' [ 161.935781][T11285] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 161.939646][T11285] overlayfs: missing 'lowerdir' [ 161.942216][T11285] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 161.946078][T11285] overlayfs: missing 'lowerdir' [ 161.948543][T11285] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 161.952529][T11285] overlayfs: missing 'lowerdir' [ 161.954805][T11285] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 161.958438][T11285] overlayfs: missing 'lowerdir' [ 161.963487][T11285] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 161.967053][T11285] overlayfs: missing 'lowerdir' [ 161.969447][ T836] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 161.969628][T11285] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 161.976384][T11285] overlayfs: missing 'lowerdir' [ 162.053441][T11292] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1902'. [ 162.133362][T11296] tmpfs: Bad value for 'mpol' [ 162.136495][T11296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1904'. [ 162.141955][ T836] usb 8-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 162.146389][ T836] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 162.146649][ T5954] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 162.151988][ T836] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 162.158637][ T836] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.164841][ T836] usb 8-1: config 0 descriptor?? [ 162.179510][ T836] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 162.195361][ T40] audit: type=1400 audit(1751986185.729:29317): avc: denied { mounton } for pid=11295 comm="syz.0.1904" path=2F3432302FE91F7189591E9233614B dev="tmpfs" ino=2302 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 162.226092][T11296] 9pnet: Could not find request transport: unix  [ 162.230456][T11296] syzkaller1: tun_chr_ioctl cmd 1074025675 [ 162.232983][T11296] syzkaller1: persist enabled [ 162.272329][T11303] hfsplus: unable to find HFS+ superblock [ 162.378448][ T53] usb 8-1: USB disconnect, device number 36 [ 162.386086][T11314] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1910'. [ 162.392498][ T40] audit: type=1400 audit(1751986185.929:29318): avc: denied { listen } for pid=11313 comm="syz.1.1910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 162.393355][T11314] afs: Unknown parameter 'dynÕ!w”L9ôZ{ü¡×¸¸' [ 162.405767][ T40] audit: type=1400 audit(1751986185.939:29319): avc: denied { watch } for pid=11313 comm="syz.1.1910" path="/552/file0" dev="tmpfs" ino=3037 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 162.889426][ T836] usb 7-1: new low-speed USB device number 35 using dummy_hcd [ 162.943420][T11334] hfsplus: unable to find HFS+ superblock [ 163.004262][T11338] netlink: 'syz.1.1919': attribute type 1 has an invalid length. [ 163.022536][T11338] bond8: entered promiscuous mode [ 163.024852][T11338] 8021q: adding VLAN 0 to HW filter on device bond8 [ 163.041971][ T836] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.046702][ T836] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 163.049865][ T836] usb 7-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 163.053570][ T836] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 163.057046][ T836] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 163.060497][ T836] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 163.063314][ T836] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.068088][T11326] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 163.073066][ T836] hub 7-1:1.0: bad descriptor, ignoring hub [ 163.074974][ T836] hub 7-1:1.0: probe with driver hub failed with error -5 [ 163.077516][ T836] cdc_wdm 7-1:1.0: skipping garbage [ 163.079218][ T836] cdc_wdm 7-1:1.0: skipping garbage [ 163.086710][ T836] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 163.088559][ T836] cdc_wdm 7-1:1.0: Unknown control protocol [ 163.227695][T11348] IPv6: NLM_F_CREATE should be specified when creating new route [ 163.464882][T11365] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 163.539470][ T6013] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 163.594450][T11368] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1926'. [ 163.710860][ T6013] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 163.714248][ T6013] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 163.718628][ T6013] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 163.722390][ T6013] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.728439][ T6013] usb 6-1: config 0 descriptor?? [ 163.736349][ T6013] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 163.823481][T11326] cdc_wdm 7-1:1.0: Error autopm - -16 [ 163.823686][ T56] usb 7-1: USB disconnect, device number 35 [ 163.939553][ T7337] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 163.945086][ T6013] usb 6-1: USB disconnect, device number 35 [ 163.959482][ T56] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 164.090762][ T7337] usb 8-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 164.094035][ T7337] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 164.098044][ T7337] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 164.100945][ T7337] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.105043][ T7337] usb 8-1: config 0 descriptor?? [ 164.109697][ T56] usb 7-1: Using ep0 maxpacket: 8 [ 164.113475][ T56] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 164.117501][ T56] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 164.121344][ T56] usb 7-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 164.126047][ T56] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 164.130694][ T56] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 164.134947][ T56] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 164.138513][ T56] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.145125][T11356] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 164.151061][ T56] hub 7-1:1.0: bad descriptor, ignoring hub [ 164.153496][ T56] hub 7-1:1.0: probe with driver hub failed with error -5 [ 164.156682][ T56] cdc_wdm 7-1:1.0: skipping garbage [ 164.158804][ T56] cdc_wdm 7-1:1.0: skipping garbage [ 164.162428][ T56] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 164.164812][ T56] cdc_wdm 7-1:1.0: Unknown control protocol [ 164.313048][ T7337] usb 8-1: string descriptor 0 read error: -71 [ 164.316397][ T7337] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 164.320032][ T7337] usb 8-1: USB disconnect, device number 37 [ 164.463392][ T56] usb 7-1: USB disconnect, device number 36 [ 164.505185][T11374] netlink: 'syz.1.1929': attribute type 1 has an invalid length. [ 164.528745][T11374] bond9: entered promiscuous mode [ 164.531662][T11374] 8021q: adding VLAN 0 to HW filter on device bond9 [ 164.639856][T11378] FAULT_INJECTION: forcing a failure. [ 164.639856][T11378] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 164.643878][T11378] CPU: 3 UID: 0 PID: 11378 Comm: syz.1.1930 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 164.643893][T11378] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 164.643901][T11378] Call Trace: [ 164.643905][T11378] [ 164.643909][T11378] dump_stack_lvl+0x16c/0x1f0 [ 164.643929][T11378] should_fail_ex+0x512/0x640 [ 164.643946][T11378] _copy_to_user+0x32/0xd0 [ 164.643963][T11378] simple_read_from_buffer+0xcb/0x170 [ 164.643980][T11378] proc_fail_nth_read+0x197/0x270 [ 164.643994][T11378] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 164.644015][T11378] ? rw_verify_area+0xcf/0x680 [ 164.644027][T11378] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 164.644041][T11378] vfs_read+0x1e1/0xc60 [ 164.644057][T11378] ? __pfx___mutex_lock+0x10/0x10 [ 164.644073][T11378] ? __pfx_vfs_read+0x10/0x10 [ 164.644091][T11378] ? __fget_files+0x20e/0x3c0 [ 164.644110][T11378] ksys_read+0x12a/0x250 [ 164.644123][T11378] ? __pfx_ksys_read+0x10/0x10 [ 164.644141][T11378] do_syscall_64+0xcd/0x4c0 [ 164.644158][T11378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.644169][T11378] RIP: 0033:0x7f55a4f8d33c [ 164.644179][T11378] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 164.644190][T11378] RSP: 002b:00007f55a5d2e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 164.644201][T11378] RAX: ffffffffffffffda RBX: 00007f55a51b5fa0 RCX: 00007f55a4f8d33c [ 164.644208][T11378] RDX: 000000000000000f RSI: 00007f55a5d2e0a0 RDI: 0000000000000004 [ 164.644215][T11378] RBP: 00007f55a5d2e090 R08: 0000000000000000 R09: 0000000000000000 [ 164.644221][T11378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.644227][T11378] R13: 0000000000000000 R14: 00007f55a51b5fa0 R15: 00007ffd4ac78a08 [ 164.644241][T11378] [ 164.864601][T11387] FAULT_INJECTION: forcing a failure. [ 164.864601][T11387] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 164.868660][T11387] CPU: 1 UID: 0 PID: 11387 Comm: syz.1.1933 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 164.868675][T11387] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 164.868682][T11387] Call Trace: [ 164.868687][T11387] [ 164.868691][T11387] dump_stack_lvl+0x16c/0x1f0 [ 164.868710][T11387] should_fail_ex+0x512/0x640 [ 164.868729][T11387] _copy_from_user+0x2e/0xd0 [ 164.868745][T11387] copy_msghdr_from_user+0x98/0x160 [ 164.868761][T11387] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 164.868783][T11387] ___sys_sendmsg+0xfe/0x1d0 [ 164.868798][T11387] ? __pfx____sys_sendmsg+0x10/0x10 [ 164.868811][T11387] ? __lock_acquire+0x622/0x1c90 [ 164.868839][T11387] __sys_sendmsg+0x16d/0x220 [ 164.868854][T11387] ? __pfx___sys_sendmsg+0x10/0x10 [ 164.868877][T11387] do_syscall_64+0xcd/0x4c0 [ 164.868894][T11387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.868906][T11387] RIP: 0033:0x7f55a4f8e929 [ 164.868915][T11387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.868926][T11387] RSP: 002b:00007f55a5d2e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 164.868937][T11387] RAX: ffffffffffffffda RBX: 00007f55a51b5fa0 RCX: 00007f55a4f8e929 [ 164.868944][T11387] RDX: 0000000000004000 RSI: 0000200000000480 RDI: 0000000000000004 [ 164.868950][T11387] RBP: 00007f55a5d2e090 R08: 0000000000000000 R09: 0000000000000000 [ 164.868957][T11387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.868964][T11387] R13: 0000000000000000 R14: 00007f55a51b5fa0 R15: 00007ffd4ac78a08 [ 164.868977][T11387] [ 164.871419][T11388] x_tables: duplicate underflow at hook 2 [ 164.931159][T11388] dummy0: entered promiscuous mode [ 164.940161][T11388] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1934'. [ 164.960164][T11396] netlink: 'syz.1.1938': attribute type 1 has an invalid length. [ 164.972093][T11396] bond10: entered promiscuous mode [ 164.973940][T11396] 8021q: adding VLAN 0 to HW filter on device bond10 [ 165.127703][T11406] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1941'. [ 165.160525][ T7316] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 165.279411][ T53] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 165.300273][T11412] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 165.308554][T11412] CIFS mount error: No usable UNC path provided in device string! [ 165.308554][T11412] [ 165.311876][T11412] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 165.330807][ T7316] usb 7-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 165.334101][ T7316] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 165.338097][ T7316] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 165.341990][ T7316] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.347616][ T7316] usb 7-1: config 0 descriptor?? [ 165.350940][ T7316] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 165.381035][T11414] Cannot find add_set index 0 as target [ 165.430973][ T53] usb 8-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 165.434585][ T53] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 165.438623][ T53] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 165.441705][ T53] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.445935][ T53] usb 8-1: config 0 descriptor?? [ 165.565920][ T7316] usb 7-1: USB disconnect, device number 37 [ 165.654347][ T53] usb 8-1: string descriptor 0 read error: -71 [ 165.658359][ T53] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 165.663715][ T53] usb 8-1: USB disconnect, device number 38 [ 166.284292][T11425] netlink: 'syz.3.1949': attribute type 1 has an invalid length. [ 166.304740][T11425] bond5: entered promiscuous mode [ 166.307201][T11425] 8021q: adding VLAN 0 to HW filter on device bond5 [ 166.426360][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 166.426372][ T40] audit: type=1800 audit(1751986189.959:29325): pid=11435 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.1953" name="bus" dev="overlay" ino=2649 res=0 errno=0 [ 166.709444][ T6031] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 166.862045][ T6031] usb 8-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 166.866237][ T6031] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 166.871685][ T6031] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 166.875361][ T6031] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.880741][ T6031] usb 8-1: config 0 descriptor?? [ 166.885654][ T6031] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 167.089262][ T836] usb 8-1: USB disconnect, device number 39 [ 167.093665][ T40] audit: type=1400 audit(1751986190.629:29326): avc: denied { map } for pid=11443 comm="syz.2.1957" path="pipe:[6324]" dev="pipefs" ino=6324 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 167.135731][T11447] syz.2.1958: attempt to access beyond end of device [ 167.135731][T11447] nbd2: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 167.139950][T11447] gfs2: error -5 reading superblock [ 167.229580][ T6013] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 167.312621][T11451] netlink: 'syz.1.1960': attribute type 1 has an invalid length. [ 167.327878][T11451] bond11: entered promiscuous mode [ 167.329868][T11451] 8021q: adding VLAN 0 to HW filter on device bond11 [ 167.393683][ T6013] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 167.398030][ T6013] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 167.407626][ T6013] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 167.412731][ T6013] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.419121][ T6013] usb 5-1: config 0 descriptor?? [ 167.592352][T11474] netlink: 'syz.2.1967': attribute type 1 has an invalid length. [ 167.641482][ T6013] usb 5-1: string descriptor 0 read error: -71 [ 167.646262][ T6013] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 167.649894][ T6013] usb 5-1: USB disconnect, device number 34 [ 167.657379][T11474] bond5: (slave bridge1): making interface the new active one [ 167.660235][T11474] bond5: (slave bridge1): Enslaving as an active interface with an up link [ 167.706489][T11483] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 167.909407][ T53] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 168.080728][ T53] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 168.084147][ T53] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 168.088349][ T53] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 168.091427][ T53] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.095509][ T53] usb 6-1: config 0 descriptor?? [ 168.099704][ T53] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 168.248646][T11495] misc userio: Begin command sent, but we're already running [ 168.303842][T11481] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1969'. [ 168.322008][ T53] usb 6-1: USB disconnect, device number 36 [ 168.659107][T11502] netlink: 'syz.2.1978': attribute type 1 has an invalid length. [ 168.673893][T11502] bond6: entered promiscuous mode [ 168.675682][T11502] 8021q: adding VLAN 0 to HW filter on device bond6 [ 168.909182][T11522] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 168.950025][ T53] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 169.100814][ T53] usb 8-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 169.104121][ T53] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 169.108605][ T53] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 169.112519][ T29] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 169.115808][ T53] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.120996][ T53] usb 8-1: config 0 descriptor?? [ 169.291184][ T29] usb 7-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 169.294549][ T29] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 169.298597][ T29] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 169.301464][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.305755][ T29] usb 7-1: config 0 descriptor?? [ 169.312028][ T29] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 169.327170][T11509] netlink: 980 bytes leftover after parsing attributes in process `syz.3.1980'. [ 169.334990][ T53] usb 8-1: string descriptor 0 read error: -71 [ 169.337762][ T53] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 169.340912][ T53] usb 8-1: USB disconnect, device number 40 [ 169.518935][ T6031] usb 7-1: USB disconnect, device number 38 [ 169.767284][T11527] FAULT_INJECTION: forcing a failure. [ 169.767284][T11527] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.773616][T11527] CPU: 0 UID: 0 PID: 11527 Comm: syz.1.1987 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 169.773631][T11527] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 169.773638][T11527] Call Trace: [ 169.773642][T11527] [ 169.773647][T11527] dump_stack_lvl+0x16c/0x1f0 [ 169.773685][T11527] should_fail_ex+0x512/0x640 [ 169.773706][T11527] _copy_to_user+0x32/0xd0 [ 169.773723][T11527] simple_read_from_buffer+0xcb/0x170 [ 169.773739][T11527] proc_fail_nth_read+0x197/0x270 [ 169.773753][T11527] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 169.773793][T11527] ? rw_verify_area+0xcf/0x680 [ 169.773806][T11527] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 169.773820][T11527] vfs_read+0x1e1/0xc60 [ 169.773836][T11527] ? __pfx___mutex_lock+0x10/0x10 [ 169.773852][T11527] ? __pfx_vfs_read+0x10/0x10 [ 169.773869][T11527] ? __fget_files+0x20e/0x3c0 [ 169.773888][T11527] ksys_read+0x12a/0x250 [ 169.773901][T11527] ? __pfx_ksys_read+0x10/0x10 [ 169.773919][T11527] do_syscall_64+0xcd/0x4c0 [ 169.773936][T11527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.773947][T11527] RIP: 0033:0x7f55a4f8d33c [ 169.773956][T11527] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 169.773967][T11527] RSP: 002b:00007f55a2df6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 169.773978][T11527] RAX: ffffffffffffffda RBX: 00007f55a51b6080 RCX: 00007f55a4f8d33c [ 169.773984][T11527] RDX: 000000000000000f RSI: 00007f55a2df60a0 RDI: 0000000000000004 [ 169.773991][T11527] RBP: 00007f55a2df6090 R08: 0000000000000000 R09: 0000000000000000 [ 169.773997][T11527] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 169.774003][T11527] R13: 0000000000000000 R14: 00007f55a51b6080 R15: 00007ffd4ac78a08 [ 169.774017][T11527] [ 169.870649][T11529] netlink: 'syz.0.1989': attribute type 1 has an invalid length. [ 169.884222][T11529] bond5: entered promiscuous mode [ 169.886237][T11529] 8021q: adding VLAN 0 to HW filter on device bond5 [ 169.935172][T11539] usb usb8: usbfs: process 11539 (syz.1.1993) did not claim interface 0 before use [ 169.939216][T11539] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1993'. [ 169.990638][T11545] FAULT_INJECTION: forcing a failure. [ 169.990638][T11545] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.994674][T11545] CPU: 1 UID: 0 PID: 11545 Comm: syz.0.1996 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 169.994689][T11545] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 169.994696][T11545] Call Trace: [ 169.994701][T11545] [ 169.994705][T11545] dump_stack_lvl+0x16c/0x1f0 [ 169.994724][T11545] should_fail_ex+0x512/0x640 [ 169.994742][T11545] _copy_from_iter+0x29f/0x16f0 [ 169.994759][T11545] ? __alloc_skb+0x200/0x380 [ 169.994775][T11545] ? __pfx__copy_from_iter+0x10/0x10 [ 169.994791][T11545] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 169.994813][T11545] netlink_sendmsg+0x829/0xdd0 [ 169.994826][T11545] ? __pfx_netlink_sendmsg+0x10/0x10 [ 169.994842][T11545] ____sys_sendmsg+0xa95/0xc70 [ 169.994853][T11545] ? copy_msghdr_from_user+0x10a/0x160 [ 169.994868][T11545] ? __pfx_____sys_sendmsg+0x10/0x10 [ 169.994885][T11545] ___sys_sendmsg+0x134/0x1d0 [ 169.994900][T11545] ? __pfx____sys_sendmsg+0x10/0x10 [ 169.994913][T11545] ? __lock_acquire+0x622/0x1c90 [ 169.994941][T11545] __sys_sendmsg+0x16d/0x220 [ 169.994956][T11545] ? __pfx___sys_sendmsg+0x10/0x10 [ 169.994979][T11545] do_syscall_64+0xcd/0x4c0 [ 169.995001][T11545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.995012][T11545] RIP: 0033:0x7f92c758e929 [ 169.995022][T11545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.995033][T11545] RSP: 002b:00007f92c833f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 169.995043][T11545] RAX: ffffffffffffffda RBX: 00007f92c77b5fa0 RCX: 00007f92c758e929 [ 169.995050][T11545] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 169.995057][T11545] RBP: 00007f92c833f090 R08: 0000000000000000 R09: 0000000000000000 [ 169.995063][T11545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.995069][T11545] R13: 0000000000000000 R14: 00007f92c77b5fa0 R15: 00007ffeafa9afe8 [ 169.995083][T11545] [ 170.066193][T11546] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 170.408163][T11568] netlink: 'syz.2.2005': attribute type 1 has an invalid length. [ 170.419893][T11568] bond7: entered promiscuous mode [ 170.421815][T11568] 8021q: adding VLAN 0 to HW filter on device bond7 [ 170.449515][ T6031] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 170.601004][ T6031] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 170.604249][ T6031] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 170.609576][ T6031] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 170.612365][ T6031] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.616302][ T6031] usb 6-1: config 0 descriptor?? [ 170.749451][ T7337] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 170.821702][T11557] netlink: 980 bytes leftover after parsing attributes in process `syz.1.2000'. [ 170.826334][ T6031] usb 6-1: string descriptor 0 read error: -71 [ 170.829297][ T6031] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 170.833139][ T6031] usb 6-1: USB disconnect, device number 37 [ 170.901209][ T7337] usb 7-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 170.904484][ T7337] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 170.908457][ T7337] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 170.919301][ T7337] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.923242][ T7337] usb 7-1: config 0 descriptor?? [ 170.926829][ T7337] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 171.134372][ T836] usb 7-1: USB disconnect, device number 39 [ 171.213775][T11597] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 171.256197][ T40] audit: type=1400 audit(1751986194.789:29327): avc: denied { open } for pid=11600 comm="syz.0.2017" path="/dev/ptyq5" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 171.266263][ T40] audit: type=1400 audit(1751986194.789:29328): avc: denied { ioctl } for pid=11600 comm="syz.0.2017" path="/dev/ptyq5" dev="devtmpfs" ino=132 ioctlcmd=0x4b35 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 171.413329][ T40] audit: type=1400 audit(1751986194.949:29329): avc: denied { setopt } for pid=11610 comm="syz.0.2020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 171.645401][T11628] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 171.700543][T11634] FAULT_INJECTION: forcing a failure. [ 171.700543][T11634] name failslab, interval 1, probability 0, space 0, times 0 [ 171.704552][T11634] CPU: 3 UID: 0 PID: 11634 Comm: syz.0.2029 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 171.704567][T11634] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 171.704574][T11634] Call Trace: [ 171.704579][T11634] [ 171.704583][T11634] dump_stack_lvl+0x16c/0x1f0 [ 171.704603][T11634] should_fail_ex+0x512/0x640 [ 171.704618][T11634] ? __kmalloc_noprof+0xbf/0x510 [ 171.704634][T11634] ? ioctl_standard_iw_point+0x414/0xca0 [ 171.704650][T11634] should_failslab+0xc2/0x120 [ 171.704666][T11634] __kmalloc_noprof+0xd2/0x510 [ 171.704680][T11634] ? __mutex_trylock_common+0xe9/0x250 [ 171.704692][T11634] ? __pfx___mutex_trylock_common+0x10/0x10 [ 171.704705][T11634] ioctl_standard_iw_point+0x414/0xca0 [ 171.704722][T11634] ? __pfx_cfg80211_wext_siwencodeext+0x10/0x10 [ 171.704739][T11634] ? __pfx_ioctl_standard_iw_point+0x10/0x10 [ 171.704756][T11634] ? wext_handle_ioctl+0x20b/0x2a0 [ 171.704773][T11634] ? __pfx___mutex_lock+0x10/0x10 [ 171.704796][T11634] ? __pfx_cfg80211_wext_siwencodeext+0x10/0x10 [ 171.704811][T11634] ioctl_standard_call+0x166/0x1d0 [ 171.704831][T11634] ? __pfx_ioctl_standard_call+0x10/0x10 [ 171.704846][T11634] ? __pfx_cfg80211_wext_siwencodeext+0x10/0x10 [ 171.704861][T11634] wireless_process_ioctl.constprop.0+0x28e/0x3d0 [ 171.704880][T11634] wext_handle_ioctl+0x226/0x2a0 [ 171.704897][T11634] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 171.704916][T11634] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 171.704933][T11634] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 171.704952][T11634] sock_ioctl+0x3a1/0x6b0 [ 171.704964][T11634] ? __pfx_sock_ioctl+0x10/0x10 [ 171.704978][T11634] ? hook_file_ioctl_common+0x145/0x410 [ 171.705000][T11634] ? selinux_file_ioctl+0x180/0x270 [ 171.705014][T11634] ? selinux_file_ioctl+0xb4/0x270 [ 171.705029][T11634] ? __pfx_sock_ioctl+0x10/0x10 [ 171.705041][T11634] __x64_sys_ioctl+0x18e/0x210 [ 171.705055][T11634] do_syscall_64+0xcd/0x4c0 [ 171.705072][T11634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.705083][T11634] RIP: 0033:0x7f92c758e929 [ 171.705093][T11634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.705104][T11634] RSP: 002b:00007f92c833f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 171.705114][T11634] RAX: ffffffffffffffda RBX: 00007f92c77b5fa0 RCX: 00007f92c758e929 [ 171.705122][T11634] RDX: 0000200000000000 RSI: 0000000000008b34 RDI: 0000000000000006 [ 171.705128][T11634] RBP: 00007f92c833f090 R08: 0000000000000000 R09: 0000000000000000 [ 171.705135][T11634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.705141][T11634] R13: 0000000000000000 R14: 00007f92c77b5fa0 R15: 00007ffeafa9afe8 [ 171.705155][T11634] [ 171.816970][ T40] audit: type=1400 audit(1751986195.349:29330): avc: denied { ioctl } for pid=11636 comm="syz.0.2030" path="socket:[42899]" dev="sockfs" ino=42899 ioctlcmd=0xf512 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 171.856097][T11639] overlayfs: statfs failed on './file0' [ 171.919480][ T29] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 172.058754][T11647] hfsplus: unable to find HFS+ superblock [ 172.071541][ T29] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 172.075142][ T29] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 172.083597][ T29] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 172.086580][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.095940][ T29] usb 6-1: config 0 descriptor?? [ 172.100890][T11651] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 172.301221][T11630] netlink: 980 bytes leftover after parsing attributes in process `syz.1.2027'. [ 172.307419][ T29] usb 6-1: string descriptor 0 read error: -71 [ 172.310657][ T29] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 172.313735][ T29] usb 6-1: USB disconnect, device number 38 [ 172.389543][ T836] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 172.545222][T11660] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 172.554307][ T836] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 172.557910][ T836] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 172.562466][ T836] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 172.565201][ T836] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.569129][ T836] usb 5-1: config 0 descriptor?? [ 172.575042][ T836] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 172.658382][T11665] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2042'. [ 172.779169][ T836] usb 5-1: USB disconnect, device number 35 [ 172.901004][T11674] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 173.214081][T11680] hfsplus: unable to find HFS+ superblock [ 173.315527][T11684] bridge4: entered promiscuous mode [ 173.536007][T11699] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2057'. [ 173.539052][T11699] FAULT_INJECTION: forcing a failure. [ 173.539052][T11699] name failslab, interval 1, probability 0, space 0, times 0 [ 173.543350][T11699] CPU: 2 UID: 0 PID: 11699 Comm: syz.0.2057 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 173.543366][T11699] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 173.543373][T11699] Call Trace: [ 173.543377][T11699] [ 173.543382][T11699] dump_stack_lvl+0x16c/0x1f0 [ 173.543401][T11699] should_fail_ex+0x512/0x640 [ 173.543417][T11699] ? __kmalloc_noprof+0xbf/0x510 [ 173.543433][T11699] ? rfkill_alloc+0xac/0x330 [ 173.543444][T11699] should_failslab+0xc2/0x120 [ 173.543460][T11699] __kmalloc_noprof+0xd2/0x510 [ 173.543477][T11699] rfkill_alloc+0xac/0x330 [ 173.543490][T11699] wiphy_new_nm+0x136a/0x2160 [ 173.543509][T11699] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 173.543521][T11699] ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10 [ 173.543532][T11699] ieee80211_alloc_hw_nm+0x1b7a/0x2260 [ 173.543542][T11699] ? __local_bh_enable_ip+0xa4/0x120 [ 173.543560][T11699] mac80211_hwsim_new_radio+0x1d4/0x54d0 [ 173.543577][T11699] ? __pfx__printk+0x10/0x10 [ 173.543590][T11699] ? __pfx____ratelimit+0x10/0x10 [ 173.543606][T11699] ? rcu_is_watching+0x12/0xc0 [ 173.543620][T11699] ? do_trace_netlink_extack+0x164/0x1e0 [ 173.543637][T11699] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 173.543657][T11699] hwsim_new_radio_nl+0xb51/0x12c0 [ 173.543673][T11699] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 173.543692][T11699] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 173.543706][T11699] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 173.543722][T11699] genl_family_rcv_msg_doit+0x206/0x2f0 [ 173.543736][T11699] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 173.543754][T11699] ? bpf_lsm_capable+0x9/0x10 [ 173.543765][T11699] ? security_capable+0x7e/0x260 [ 173.543779][T11699] ? ns_capable+0xd7/0x110 [ 173.543794][T11699] genl_rcv_msg+0x55c/0x800 [ 173.543808][T11699] ? __pfx_genl_rcv_msg+0x10/0x10 [ 173.543820][T11699] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 173.543841][T11699] netlink_rcv_skb+0x155/0x420 [ 173.543851][T11699] ? __pfx_genl_rcv_msg+0x10/0x10 [ 173.543864][T11699] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 173.543881][T11699] ? netlink_deliver_tap+0x1ae/0xd30 [ 173.543900][T11699] genl_rcv+0x28/0x40 [ 173.543910][T11699] netlink_unicast+0x53a/0x7f0 [ 173.543923][T11699] ? __pfx_netlink_unicast+0x10/0x10 [ 173.543938][T11699] netlink_sendmsg+0x8d1/0xdd0 [ 173.543950][T11699] ? __pfx_netlink_sendmsg+0x10/0x10 [ 173.543967][T11699] ____sys_sendmsg+0xa95/0xc70 [ 173.543979][T11699] ? copy_msghdr_from_user+0x10a/0x160 [ 173.543994][T11699] ? __pfx_____sys_sendmsg+0x10/0x10 [ 173.544012][T11699] ___sys_sendmsg+0x134/0x1d0 [ 173.544027][T11699] ? __pfx____sys_sendmsg+0x10/0x10 [ 173.544041][T11699] ? __lock_acquire+0x622/0x1c90 [ 173.544070][T11699] __sys_sendmsg+0x16d/0x220 [ 173.544085][T11699] ? __pfx___sys_sendmsg+0x10/0x10 [ 173.544110][T11699] do_syscall_64+0xcd/0x4c0 [ 173.544126][T11699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.544138][T11699] RIP: 0033:0x7f92c758e929 [ 173.544148][T11699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.544159][T11699] RSP: 002b:00007f92c831e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 173.544169][T11699] RAX: ffffffffffffffda RBX: 00007f92c77b6080 RCX: 00007f92c758e929 [ 173.544176][T11699] RDX: 0000000020008010 RSI: 0000200000000140 RDI: 0000000000000005 [ 173.544183][T11699] RBP: 00007f92c831e090 R08: 0000000000000000 R09: 0000000000000000 [ 173.544189][T11699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.544195][T11699] R13: 0000000000000000 R14: 00007f92c77b6080 R15: 00007ffeafa9afe8 [ 173.544210][T11699] [ 173.702093][T11701] hfsplus: unable to find HFS+ superblock [ 173.729427][ T836] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 173.765923][ T40] audit: type=1400 audit(1751986197.299:29331): avc: denied { append } for pid=11706 comm="syz.2.2061" name="001" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 173.859042][T11710] overlayfs: missing 'workdir' [ 173.880772][ T836] usb 8-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 173.884108][ T836] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 173.888242][ T836] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 173.892619][ T836] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.897278][ T836] usb 8-1: config 0 descriptor?? [ 173.969419][ T6109] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 174.105295][T11694] netlink: 'syz.3.2054': attribute type 96 has an invalid length. [ 174.108332][T11694] netlink: 1016 bytes leftover after parsing attributes in process `syz.3.2054'. [ 174.112848][ T836] usb 8-1: string descriptor 0 read error: -71 [ 174.116615][ T836] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 174.120063][ T836] usb 8-1: USB disconnect, device number 41 [ 174.131012][ T6109] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 174.134845][ T6109] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 174.138991][ T6109] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 174.142180][ T6109] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.146009][ T6109] usb 6-1: config 0 descriptor?? [ 174.149848][ T6109] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 174.356567][ T6013] usb 6-1: USB disconnect, device number 39 [ 174.704997][T11722] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 174.950081][T11728] hfsplus: unable to find HFS+ superblock [ 175.102217][T11747] FAULT_INJECTION: forcing a failure. [ 175.102217][T11747] name failslab, interval 1, probability 0, space 0, times 0 [ 175.108101][T11747] CPU: 3 UID: 0 PID: 11747 Comm: syz.1.2073 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 175.108118][T11747] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 175.108126][T11747] Call Trace: [ 175.108131][T11747] [ 175.108136][T11747] dump_stack_lvl+0x16c/0x1f0 [ 175.108155][T11747] should_fail_ex+0x512/0x640 [ 175.108176][T11747] ? __kvmalloc_node_noprof+0x124/0x620 [ 175.108192][T11747] should_failslab+0xc2/0x120 [ 175.108208][T11747] __kvmalloc_node_noprof+0x137/0x620 [ 175.108222][T11747] ? __pfx___mutex_lock+0x10/0x10 [ 175.108238][T11747] ? nf_hook_entries_grow+0x285/0x860 [ 175.108258][T11747] ? nf_hook_entries_grow+0x285/0x860 [ 175.108272][T11747] nf_hook_entries_grow+0x285/0x860 [ 175.108287][T11747] ? __call_rcu_common.constprop.0+0x3f0/0xa10 [ 175.108305][T11747] __nf_register_net_hook+0x1cd/0x730 [ 175.108324][T11747] nf_register_net_hook+0x109/0x160 [ 175.108343][T11747] nf_register_net_hooks+0x5d/0xd0 [ 175.108361][T11747] nf_ct_netns_do_get+0x251/0x620 [ 175.108386][T11747] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 175.108405][T11747] ? xt_find_match+0x1f1/0x290 [ 175.108418][T11747] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 175.108436][T11747] nf_ct_netns_get+0x39/0x150 [ 175.108464][T11747] connbytes_mt_check+0x119/0x310 [ 175.108477][T11747] ? __pfx_connbytes_mt_check+0x10/0x10 [ 175.108488][T11747] xt_check_match+0x283/0xa50 [ 175.108502][T11747] ? __pfx_xt_check_match+0x10/0x10 [ 175.108517][T11747] ? xt_find_match+0x1f6/0x290 [ 175.108530][T11747] ? xt_find_match+0x1f6/0x290 [ 175.108545][T11747] find_check_entry.constprop.0+0x34e/0xa20 [ 175.108563][T11747] ? __pfx_find_check_entry.constprop.0+0x10/0x10 [ 175.108581][T11747] ? lockdep_hardirqs_on+0x7c/0x110 [ 175.108598][T11747] ? kfree+0x2b4/0x4d0 [ 175.108609][T11747] ? translate_table+0xc0e/0x17b0 [ 175.108627][T11747] translate_table+0xd0b/0x17b0 [ 175.108648][T11747] ? __pfx_translate_table+0x10/0x10 [ 175.108665][T11747] do_ip6t_set_ctl+0x570/0xb00 [ 175.108678][T11747] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 175.108692][T11747] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 175.108706][T11747] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 175.108730][T11747] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 175.108748][T11747] nf_setsockopt+0x8a/0xf0 [ 175.108760][T11747] ipv6_setsockopt+0x135/0x170 [ 175.108773][T11747] udpv6_setsockopt+0x7d/0xd0 [ 175.108788][T11747] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 175.108806][T11747] do_sock_setsockopt+0x221/0x470 [ 175.108823][T11747] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 175.108849][T11747] __sys_setsockopt+0x1a0/0x230 [ 175.108866][T11747] __x64_sys_setsockopt+0xbd/0x160 [ 175.108879][T11747] ? do_syscall_64+0x91/0x4c0 [ 175.108894][T11747] ? lockdep_hardirqs_on+0x7c/0x110 [ 175.108908][T11747] do_syscall_64+0xcd/0x4c0 [ 175.108925][T11747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.108937][T11747] RIP: 0033:0x7f55a4f8e929 [ 175.108947][T11747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.108958][T11747] RSP: 002b:00007f55a5d2e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 175.108968][T11747] RAX: ffffffffffffffda RBX: 00007f55a51b5fa0 RCX: 00007f55a4f8e929 [ 175.108975][T11747] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 175.108982][T11747] RBP: 00007f55a5d2e090 R08: 0000000000000620 R09: 0000000000000000 [ 175.108988][T11747] R10: 00002000000009c0 R11: 0000000000000246 R12: 0000000000000002 [ 175.108995][T11747] R13: 0000000000000000 R14: 00007f55a51b5fa0 R15: 00007ffd4ac78a08 [ 175.109009][T11747] [ 175.109651][T11749] FAULT_INJECTION: forcing a failure. [ 175.109651][T11749] name failslab, interval 1, probability 0, space 0, times 0 [ 175.112876][T11747] xt_connbytes: cannot load conntrack support for proto=10 [ 175.115989][T11749] CPU: 0 UID: 0 PID: 11749 Comm: syz.2.2075 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 175.116004][T11749] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 175.116011][T11749] Call Trace: [ 175.116015][T11749] [ 175.116020][T11749] dump_stack_lvl+0x16c/0x1f0 [ 175.116039][T11749] should_fail_ex+0x512/0x640 [ 175.116056][T11749] should_failslab+0xc2/0x120 [ 175.116072][T11749] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 175.116088][T11749] ? skb_clone+0x190/0x3f0 [ 175.116105][T11749] skb_clone+0x190/0x3f0 [ 175.116120][T11749] netlink_deliver_tap+0xabd/0xd30 [ 175.116141][T11749] netlink_unicast+0x5df/0x7f0 [ 175.116154][T11749] ? __pfx_netlink_unicast+0x10/0x10 [ 175.116169][T11749] netlink_sendmsg+0x8d1/0xdd0 [ 175.116182][T11749] ? __pfx_netlink_sendmsg+0x10/0x10 [ 175.116198][T11749] ____sys_sendmsg+0xa95/0xc70 [ 175.116209][T11749] ? copy_msghdr_from_user+0x10a/0x160 [ 175.116228][T11749] ? __pfx_____sys_sendmsg+0x10/0x10 [ 175.116246][T11749] ___sys_sendmsg+0x134/0x1d0 [ 175.116262][T11749] ? __pfx____sys_sendmsg+0x10/0x10 [ 175.116275][T11749] ? __lock_acquire+0x622/0x1c90 [ 175.116304][T11749] __sys_sendmsg+0x16d/0x220 [ 175.116319][T11749] ? __pfx___sys_sendmsg+0x10/0x10 [ 175.116343][T11749] do_syscall_64+0xcd/0x4c0 [ 175.116360][T11749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.116372][T11749] RIP: 0033:0x7f4afb98e929 [ 175.116381][T11749] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.116393][T11749] RSP: 002b:00007f4afc750038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 175.116403][T11749] RAX: ffffffffffffffda RBX: 00007f4afbbb5fa0 RCX: 00007f4afb98e929 [ 175.116410][T11749] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 175.116417][T11749] RBP: 00007f4afc750090 R08: 0000000000000000 R09: 0000000000000000 [ 175.116423][T11749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.116430][T11749] R13: 0000000000000000 R14: 00007f4afbbb5fa0 R15: 00007ffcf8529388 [ 175.116444][T11749] [ 175.289042][T11759] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11759 comm=syz.0.2079 [ 175.325539][T11759] ------------[ cut here ]------------ [ 175.327971][T11759] UBSAN: shift-out-of-bounds in drivers/comedi/drivers/aio_iiro_16.c:180:9 [ 175.333061][T11759] shift exponent 6779 is too large for 32-bit type 'int' [ 175.337274][T11759] CPU: 2 UID: 0 PID: 11759 Comm: syz.0.2079 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 175.337299][T11759] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 175.337313][T11759] Call Trace: [ 175.337321][T11759] [ 175.337329][T11759] dump_stack_lvl+0x16c/0x1f0 [ 175.337358][T11759] __ubsan_handle_shift_out_of_bounds+0x27f/0x420 [ 175.337399][T11759] ? aio_iiro_16_attach+0x76/0x7e0 [ 175.337430][T11759] aio_iiro_16_attach.cold+0x19/0x1e [ 175.337458][T11759] comedi_device_attach+0x3b3/0x900 [ 175.337491][T11759] do_devconfig_ioctl+0x1a7/0x580 [ 175.337517][T11759] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 175.337562][T11759] ? find_held_lock+0x2b/0x80 [ 175.337591][T11759] comedi_unlocked_ioctl+0x15bb/0x2e90 [ 175.337615][T11759] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 175.337638][T11759] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 175.337658][T11759] ? do_vfs_ioctl+0x523/0x1a60 [ 175.337677][T11759] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 175.337706][T11759] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 175.337757][T11759] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 175.337783][T11759] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 175.337820][T11759] ? hook_file_ioctl_common+0x145/0x410 [ 175.337856][T11759] ? selinux_file_ioctl+0x180/0x270 [ 175.337880][T11759] ? selinux_file_ioctl+0xb4/0x270 [ 175.337906][T11759] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 175.337924][T11759] __x64_sys_ioctl+0x18e/0x210 [ 175.337949][T11759] do_syscall_64+0xcd/0x4c0 [ 175.337979][T11759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.337996][T11759] RIP: 0033:0x7f92c758e929 [ 175.338013][T11759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.338032][T11759] RSP: 002b:00007f92c833f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 175.338050][T11759] RAX: ffffffffffffffda RBX: 00007f92c77b5fa0 RCX: 00007f92c758e929 [ 175.338061][T11759] RDX: 0000200000000140 RSI: 0000000040946400 RDI: 000000000000000a [ 175.338071][T11759] RBP: 00007f92c7610b39 R08: 0000000000000000 R09: 0000000000000000 [ 175.338083][T11759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 175.338097][T11759] R13: 0000000000000000 R14: 00007f92c77b5fa0 R15: 00007ffeafa9afe8 [ 175.338125][T11759] [ 175.338132][T11759] ---[ end trace ]--- [ 175.406303][T11763] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2080'. [ 175.415701][T11759] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 175.415720][T11759] CPU: 2 UID: 0 PID: 11759 Comm: syz.0.2079 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 175.415744][T11759] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 175.415758][T11759] Call Trace: [ 175.415765][T11759] [ 175.415773][T11759] dump_stack_lvl+0x3d/0x1f0 [ 175.415803][T11759] panic+0x71c/0x800 [ 175.415834][T11759] ? __pfx_panic+0x10/0x10 [ 175.415863][T11759] ? __pfx__printk+0x10/0x10 [ 175.415895][T11759] check_panic_on_warn+0xab/0xb0 [ 175.415925][T11759] __ubsan_handle_shift_out_of_bounds+0x2a6/0x420 [ 175.415962][T11759] ? aio_iiro_16_attach+0x76/0x7e0 [ 175.415993][T11759] aio_iiro_16_attach.cold+0x19/0x1e [ 175.416019][T11759] comedi_device_attach+0x3b3/0x900 [ 175.416052][T11759] do_devconfig_ioctl+0x1a7/0x580 [ 175.416082][T11759] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 175.416124][T11759] ? find_held_lock+0x2b/0x80 [ 175.416154][T11759] comedi_unlocked_ioctl+0x15bb/0x2e90 [ 175.416179][T11759] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 175.416210][T11759] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 175.416231][T11759] ? do_vfs_ioctl+0x523/0x1a60 [ 175.416255][T11759] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 175.416284][T11759] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 175.416313][T11759] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 175.416341][T11759] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 175.416375][T11759] ? hook_file_ioctl_common+0x145/0x410 [ 175.416411][T11759] ? selinux_file_ioctl+0x180/0x270 [ 175.416436][T11759] ? selinux_file_ioctl+0xb4/0x270 [ 175.416464][T11759] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 175.416483][T11759] __x64_sys_ioctl+0x18e/0x210 [ 175.416508][T11759] do_syscall_64+0xcd/0x4c0 [ 175.416537][T11759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.416558][T11759] RIP: 0033:0x7f92c758e929 [ 175.416571][T11759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.416591][T11759] RSP: 002b:00007f92c833f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 175.416612][T11759] RAX: ffffffffffffffda RBX: 00007f92c77b5fa0 RCX: 00007f92c758e929 [ 175.416626][T11759] RDX: 0000200000000140 RSI: 0000000040946400 RDI: 000000000000000a [ 175.416636][T11759] RBP: 00007f92c7610b39 R08: 0000000000000000 R09: 0000000000000000 [ 175.416647][T11759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 175.416660][T11759] R13: 0000000000000000 R14: 00007f92c77b5fa0 R15: 00007ffeafa9afe8 [ 175.416687][T11759] [ 175.417503][T11759] Kernel Offset: disabled VM DIAGNOSIS: 14:49:59 Registers: info registers vcpu 0 CPU#0 RAX=00000000001e7693 RBX=0000000000000000 RCX=ffffffff8b881c69 RDX=0000000000000000 RSI=ffffffff8de31064 RDI=ffffffff8c158660 RBP=fffffbfff1c52ef0 RSP=ffffffff8e207e08 R8 =0000000000000001 R9 =ffffed100d486645 R10=ffff88806a43322b R11=0000000000000001 R12=0000000000000000 R13=ffffffff8e297780 R14=ffffffff90a97350 R15=0000000000000000 RIP=ffffffff8b8807cf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6718000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f55a51b7bac CR3=000000002cc22000 CR4=00352ef0 DR0=000003fffffffffe DR1=0000000000000ddb DR2=0000000000000006 DR3=0000000000000006 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4afba11b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4afba11b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4afba11b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4afba11b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4afba11bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4afba11c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4afbb85488 00007f4afbb85480 00007f4afbb85478 00007f4afbb85450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4afc6ed100 00007f4afbb85440 00007f4afbb80004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4afbb85498 00007f4afbb85490 00007f4afbb85488 00007f4afbb85480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 9f0c1ea327d910ca f6614f72c8b4214b a4c065be101a6696 8b00f678a7e6156f ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 e88d29e3e7187732 538e51343f836d69 9150af20e50066f2 4f24afdce33e2853 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d37bae005ad06530 05e2777bf2c2b730 e1171e6fb648eb8f 611d91c736b5a9a7 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1c0779e25288e8e7 97dad1124d3889dd d6913e19a498d255 10e037f73c196585 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffffffff91ee4ee0 RBX=ffffffff912f9e38 RCX=dffffc0000000000 RDX=1ffffffff225f3c7 RSI=0000000000000000 RDI=ffffffff912f9e2c RBP=ffffffff912f9e2c RSP=ffffc900043ef808 R8 =ffffffff91ee4f10 R9 =0000000000000000 R10=0000000000000000 R11=00000000000a3a22 R12=ffffffff912f9e48 R13=ffffffff8b3a22dd R14=ffffffff912f9e2c R15=ffffffff912f9e2c RIP=ffffffff816abd50 RFL=00000a02 [-O-----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f55a5d2e6c0 ffffffff 00c00000 GS =0000 ffff8880d6818000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f55a5d2df98 CR3=000000002cdf0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcf8529710 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4afba11b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4afba11b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4afba11b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4afba11b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4afba11bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4afba11c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855bb315 RDI=ffffffff9b0c22a0 RBP=ffffffff9b0c2260 RSP=ffffc900043cf4e0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000020 R14=ffffffff9b0c2260 R15=ffffffff855bb2b0 RIP=ffffffff855bb33f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f92c833f6c0 ffffffff 00c00000 GS =0000 ffff8880d6918000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000555584cab808 CR3=000000003372f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000ffffff00 Opmask01=0000000001000003 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f92c7611b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f92c7611b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f92c7611b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f92c7611b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f92c7611bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f92c7611c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f92c7785488 00007f92c7785480 00007f92c7785478 00007f92c7785450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f92c82ed100 00007f92c7785440 00007f92c7785458 00007f92c77854a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f92c7785498 00007f92c7785490 00007f92c7785488 00007f92c7785480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000000000000 0000000000000000 0000000000000138 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000179f67 RBX=0000000000000003 RCX=ffffffff8b881c69 RDX=0000000000000000 RSI=ffffffff8de31064 RDI=ffffffff8c158660 RBP=ffffed1003c5b000 RSP=ffffc90000197df8 R8 =0000000000000001 R9 =ffffed100d4e6645 R10=ffff88806a73322b R11=0000000000000001 R12=0000000000000003 R13=ffff88801e2d8000 R14=ffffffff90a97350 R15=0000000000000000 RIP=ffffffff8b8807cf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6a18000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055555e303808 CR3=00000000007aa000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000400000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0200000000000000 0000000000000120 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbec2411b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbec2411b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbec2411b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbec2411b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbec2411bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbec2411c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007265746c6966 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbec30ed100 00007fbec2585440 00007fbec2580004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbec2585498 00007fbec2585490 00007fbec2585488 00007fbec2585480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000007 0000000000000000 0000000000000000 00000000000001d0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000