last executing test programs: 8.811441415s ago: executing program 1 (id=984): pipe(&(0x7f0000000080)={0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000a40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r3, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000340)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x4}, @NL80211_ATTR_STATUS_CODE={0x4}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}]}, 0x34}}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, 0x0) ioctl$KVM_TRANSLATE(r7, 0xc018ae85, &(0x7f0000000040)={0x6000, 0x5000}) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019300)=""/102395, 0x18ffb) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000c0000000a0000000000001104000000ffffffff000000000000000400000000000000000000000b02000000020000000000000e0300000000000000000061000000000000002e"], 0x0, 0x5c}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2004cb], 0x100000}) ioctl$KVM_RUN(r10, 0xae80, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/address_bits', 0x4a8200, 0x0) 7.689817882s ago: executing program 1 (id=992): syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r0 = fanotify_init(0x0, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x541b, 0x0) (async) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x541b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) socket(0x11, 0xa, 0x0) (async) r3 = socket(0x11, 0xa, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000240)={'veth0_to_bridge\x00', {0x2, 0x0, @multicast1}}) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000e00)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@local}}, &(0x7f0000000f00)=0xe8) fsetxattr$security_capability(r2, &(0x7f0000000dc0), &(0x7f0000000f40)=@v3={0x3000000, [{0x9, 0x7fffffff}, {0x0, 0x8}], r4}, 0x18, 0x1) (async) fsetxattr$security_capability(r2, &(0x7f0000000dc0), &(0x7f0000000f40)=@v3={0x3000000, [{0x9, 0x7fffffff}, {0x0, 0x8}], r4}, 0x18, 0x1) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETPERSIST(r6, 0x800454cf, 0x800000000000000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r7 = openat$cgroup_pressure(r5, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r7, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xffffa}, 0x2f) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r8, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x30, 0x7, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x80060}, 0x14) (async) sendmsg$IPSET_CMD_LIST(r8, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x30, 0x7, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x80060}, 0x14) r9 = openat$cgroup_pressure(r5, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) ppoll(&(0x7f0000000180)=[{r7}], 0x1, 0x0, 0x0, 0x0) (async) ppoll(&(0x7f0000000180)=[{r7}], 0x1, 0x0, 0x0, 0x0) r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001800), 0x2, 0x0) write$uinput_user_dev(r10, &(0x7f0000001840)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, 0x45c) ioctl$UI_SET_PROPBIT(r10, 0x4004556e, 0x0) write$cgroup_pressure(r9, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xffffa}, 0x2f) close(r7) (async) close(r7) close(r9) (async) close(r9) unshare(0x42000000) getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000c40)=0xfee0, &(0x7f0000000c80)=0x4) (async) getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000c40)=0xfee0, &(0x7f0000000c80)=0x4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(0xffffffffffffffff) 7.539948328s ago: executing program 1 (id=994): socket$packet(0x11, 0x3, 0x300) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100800001) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x7f, &(0x7f00000011c0)=""/4072, &(0x7f0000001180)=0xfe8) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04"], 0x7) r1 = syz_open_dev$cec(&(0x7f0000000680), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x9b0902, 0x0, '\x00', @value64}}) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03c800397058abce57033f29eb6dc1f8b128a7537a3409329d374c891ea6f898ba2a0784b3781c59e6bd91a231a605e31d00"/61], 0x3d) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="02c9000a0006000500010842580e2a64adc9b138f92294bdeebc1ecb348ff152b7108cd561ee4d2c89f6f3bfa05c3f441bd20d1c6ba70e9ed467d5a2b8fd8f67e24d29b35829db02ea386f2b2bf9b81a0b4495877a1b5a2625e79bb29899f85cd07263597bb8ec3117c8e59fd935e3df6c7673feca56a9807ad8515d9bdb88cd8cbb8d6d5f8ba8055205a576717197c6c63a7eb9b71ca1ef176ba5aa73f8fa7bda01b1c8a997b9cbb31f7d6a43f2fd45becca37149c7e02c5e01010000f6edc52d9cd3a82bb77a32a3a7e54582bcff1cc806edd494037a79928ea546a9db2c7c67f6a8"], 0xf) syz_open_dev$usbmon(&(0x7f0000000080), 0xf231, 0x4000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2b0, 0x138, 0x0, 0x148, 0x0, 0x148, 0x218, 0x240, 0x240, 0x218, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@unspec=@connlabel={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'ip6erspan0\x00'}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'veth0_vlan\x00', 'macvtap0\x00'}, 0x0, 0xc0, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="8e70cd2c561d83530000000000000008ea11760251ef864ffbb38783b45bfd28562e2f3f86be70c1f28cc465a09d6d71de", @ANYRESDEC=r5, @ANYRESHEX], 0x0, 0x39, 0x0, 0x0, 0x10007f}, 0x20) io_uring_setup(0x461a, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0xb02, 0x0) 6.067520725s ago: executing program 3 (id=999): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB='T\x00', @ANYRESOCT=r1, @ANYRES32=r4, @ANYBLOB], 0x54}}, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000080)={0xf0f040, 0x4}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x2010, 0xffffffffffffffff, 0xfffff000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x10, 0xffffffffffffffff, 0x0) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r8, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, &(0x7f00000007c0)) r9 = socket$packet(0x11, 0x3, 0x300) r10 = dup(r6) r11 = fcntl$dupfd(r8, 0x0, r9) ioctl$VHOST_SET_VRING_ADDR(r11, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r11, 0x4008af30, &(0x7f0000000080)={0x0, r10}) write$input_event(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb01801800000000000600100000001000000009000000070000000000000e0100000000000000000000000000002e00"], 0x0, 0x31}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) 5.160189871s ago: executing program 3 (id=1002): syz_clone(0x41004080, &(0x7f0000000040), 0x0, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="2af6e9eb3fa29e79793f82a40c6aba9dd79da274772b0da9f2ac3b13c93d7b14a473a6515f709408c1001cb3b3120adbb5af8584b9b9114ad7caba11c7cd9eb3ffd47e5d") syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000080)={'ip6tnl0\x00', 0x400}) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="1278d4010026bd70003402000002000000", @ANYRES32=r2, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) write$nci(r1, &(0x7f0000000400)=@NCI_OP_CORE_CONN_CREDITS_NTF={0x0, 0x1, 0x3, 0x6, 0x3, {0x1, [{0x3, 0xa}]}}, 0x6) getpid() r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='cachefiles_ondemand_copen\x00', r5}, 0x10) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000044000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85823d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2ba9c29faa38c409d32b6b7d6cf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e933119c5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247fa62fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120bed64069dcf82d3e5e0361e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a1000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e824d86869ec4ab392b0a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a412a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0daca8d4c1090000000000000084d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000004f9e02a3b51a97c4b1c1b411cc6bee2a56f29c55a6aac46a0cfc318fae02922a403431d4e5a4396cad2c8dd34037bc041a2ba1505ba2c4889122ca04e85881aad5f8bfc12e6741872aad21bf5301cd4c607ef50a991c410f7c60e45b5c193f813a36d841165b91b5e170f6ba24558df57145eb8142a6ed87c6d5cbae3e52d569996604669a6e9ca1a3689c795970b4bcd00881faff52a6766fafa07ed7d4a49f47d34fd76a394adcb33a270b6a14e74bca7c2ea92dd845d3f774fde1bbea911c1ea76d52f7912e2597e6a33380647ed44956730b5b84662b8e659124379c0d86b1d28fdfa3cd2013103e3048c4ad4f5a4dcd133b2fc8fae3b51e4433cee7c08e67c7d7ed4432045e10f8718e5c163b1704fa2c707b61a1a9f63edfceff1a0cd7baf4a15b2fd607a09d398d73243bdcc664fbd5f582e48af2a18b02f0184a7bdd95ac78241e6749e74b152702333c56588375f806f10578eaae329c4f8dfb83e5524e2c9aa59ce7828bd1f146b2a4150fb2a8ced08e2ffac81e921e8a6f0071361a0acdbd125fb5f5e9ffe98e38508582a496afd30ca460dbfca77915a18b7b9ef6c1d6e13bc12fe43063cfecfafb05bf2339ad61533fbf3e410b403182742fa2d40c402cb83c2fef46a36f17c1abf97b0e2d114bd1472ab4207aa060f9e5d91c4a4911b1a1df47b858be141ab3386f26f561df35678489dc1b9f10eee1b2ab3dfdaedd7e06ff8a127f1743fcb32d7f80d40aebc1ea72edc348f5f9ba4bace97db948c24c679c74cd4336a7233d836082bb0e8b013bd1ee3612cd43cd2a3cb83754bb3408"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r6, 0x2000000, 0x93, 0x0, &(0x7f0000000600)="168e43acc18169514039c5bcdb7a44ca7b73908b0e0245bb78fefed08041a1231bdb4729d55fa1e5b413df0c757252630588a43d899a24818d78c9b4b148de20b812fd893157d5046238c9c82df5a649a4781baeac4da0bf1151b932a24f43608a48841f8083e2bf008a0c7a6415d630057bde8c3589ec5aad0876bd342598daa8affb10c0bccb023f824d8e9fdc94ab245a5d", 0x0, 0xc699, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 4.719062176s ago: executing program 1 (id=1004): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x12, &(0x7f0000000600)=""/97, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="3800000003140000000000008f65e3ad1bbd131073797a"], 0x38}, 0x1, 0x7400}, 0x0) socket(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{0x0}], 0x1, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000500), r6) sendmsg$NLBL_CALIPSO_C_ADD(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00', @ANYRES16=r7], 0x24}}, 0x0) sendmsg$NLBL_CALIPSO_C_REMOVE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}}, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}}) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r8, 0xc06864b8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x6, [], [], [], [0x0, 0x7, 0x0, 0x3]}) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r9 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f0000000200)={0x1, 0x101}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000940)={0x1, 0x0, [{0x0, 0xc3, &(0x7f0000000540)=""/195}]}) ioctl$DRM_IOCTL_GET_CTX(r8, 0xc0086423, &(0x7f00000006c0)={0x0, 0x2}) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r9) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r9}) 4.142313566s ago: executing program 3 (id=1005): socket$packet(0x11, 0x3, 0x300) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100800001) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x7f, &(0x7f00000011c0)=""/4072, &(0x7f0000001180)=0xfe8) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04"], 0x7) r1 = syz_open_dev$cec(&(0x7f0000000680), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x9b0902, 0x0, '\x00', @value64}}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03c800397058abce57033f29eb6dc1f8b128a7537a3409329d374c891ea6f898ba2a0784b3781c59e6bd91a231a605e31d00"/61], 0x3d) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @dev, 0xd}, 0x1c) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="02c9000a0006000500010842580e2a64adc9b138f92294bdeebc1ecb348ff152b7108cd561ee4d2c89f6f3bfa05c3f441bd20d1c6ba70e9ed467d5a2b8fd8f67e24d29b35829db02ea386f2b2bf9b81a0b4495877a1b5a2625e79bb29899f85cd07263597bb8ec3117c8e59fd935e3df6c7673feca56a9807ad8515d9bdb88cd8cbb8d6d5f8ba8055205a576717197c6c63a7eb9b71ca1ef176ba5aa73f8fa7bda01b1c8a997b9cbb31f7d6a43f2fd45becca37149c7e02c5e01010000f6edc52d9cd3a82bb77a32a3a7e54582bcff1cc806edd494037a79928ea546a9db2c7c67f6a8"], 0xf) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2b0, 0x138, 0x0, 0x148, 0x0, 0x148, 0x218, 0x240, 0x240, 0x218, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@unspec=@connlabel={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'ip6erspan0\x00'}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'veth0_vlan\x00', 'macvtap0\x00'}, 0x0, 0xc0, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="8e70cd2c561d83530000000000000008ea11760251ef864ffbb38783b45bfd28562e2f3f86be70c1f28cc465a09d6d71de", @ANYRESDEC=r6, @ANYRESHEX], 0x0, 0x39, 0x0, 0x0, 0x10007f}, 0x20) io_uring_setup(0x461a, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0xb02, 0x0) 4.087066059s ago: executing program 1 (id=1007): sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x515c38d0ea3ab6c4}]}}, 0x0, 0x2a, 0x0, 0x1}, 0x20) sched_setaffinity(0x0, 0x5a, &(0x7f0000000100)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = memfd_create(0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000280)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93', 0x6) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xe, 0x12, r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[], 0x2c}}, 0x0) fallocate(r1, 0x0, 0x7, 0x400) r4 = userfaultfd(0x801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000600)={0xaa, 0x90}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r5, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r6, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) 2.679905487s ago: executing program 2 (id=1010): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000380), 0x0, 0x1) close(r0) socket(0x200000000000011, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c805}, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000001c0)={0x1, @sdr={0x34424752, 0x1}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='tlb_flush\x00', r2}, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) getrusage(0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_mr_cache\x00') bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r3, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000540)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x14}, @in6=@dev={0xfe, 0x80, '\x00', 0x17}, 0x4e24, 0x4, 0x4e22, 0x0, 0x2, 0x0, 0xa0, 0x6, r4, 0xffffffffffffffff}, {0x0, 0x1, 0x7, 0xbe3, 0x7, 0x0, 0x9, 0x3}, {0x0, 0xffffffffffffffff, 0x0, 0x6}, 0xe, 0x6e6bb1, 0x2, 0x1, 0x3}, {{@in6=@empty, 0x4d6, 0x6c}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x29}, 0x3504, 0x4, 0x2, 0x80, 0x3, 0x7fffffff, 0x7}}, 0xe8) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000080)='wg0\x00', 0x4) connect$inet(r5, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xd2, 0x0, 0x2c) preadv(r3, &(0x7f0000000440)=[{&(0x7f0000001280)=""/49, 0x31}, {&(0x7f00000002c0)=""/64, 0x40}], 0x2, 0x8, 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000380)=ANY=[]) r6 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r6, 0x119, 0x1, &(0x7f0000000040)=0x800, 0x4) 2.209870141s ago: executing program 0 (id=1011): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r2, 0x0, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000080)={0xf0f040, 0x4}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x2010, 0xffffffffffffffff, 0xfffff000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x10, 0xffffffffffffffff, 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r5, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f00000007c0)) r6 = socket$packet(0x11, 0x3, 0x300) r7 = dup(r4) r8 = fcntl$dupfd(r5, 0x0, r6) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r8, 0x4008af30, &(0x7f0000000080)={0x0, r7}) write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x77359400}, 0x12}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb01801800000000000600100000001000000009000000070000000000000e0100000000000000000000000000002e00"], 0x0, 0x31}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) 1.722269955s ago: executing program 1 (id=1012): socket$packet(0x11, 0x3, 0x300) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100800001) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x7f, &(0x7f00000011c0)=""/4072, &(0x7f0000001180)=0xfe8) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04"], 0x7) r1 = syz_open_dev$cec(&(0x7f0000000680), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x9b0902, 0x0, '\x00', @value64}}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @dev, 0xd}, 0x1c) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="02c9000a0006000500010842580e2a64adc9b138f92294bdeebc1ecb348ff152b7108cd561ee4d2c89f6f3bfa05c3f441bd20d1c6ba70e9ed467d5a2b8fd8f67e24d29b35829db02ea386f2b2bf9b81a0b4495877a1b5a2625e79bb29899f85cd07263597bb8ec3117c8e59fd935e3df6c7673feca56a9807ad8515d9bdb88cd8cbb8d6d5f8ba8055205a576717197c6c63a7eb9b71ca1ef176ba5aa73f8fa7bda01b1c8a997b9cbb31f7d6a43f2fd45becca37149c7e02c5e01010000f6edc52d9cd3a82bb77a32a3a7e54582bcff1cc806edd494037a79928ea546a9db2c7c67f6a8"], 0xf) syz_open_dev$usbmon(&(0x7f0000000080), 0xf231, 0x4000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2b0, 0x138, 0x0, 0x148, 0x0, 0x148, 0x218, 0x240, 0x240, 0x218, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@unspec=@connlabel={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'ip6erspan0\x00'}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'veth0_vlan\x00', 'macvtap0\x00'}, 0x0, 0xc0, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="8e70cd2c561d83530000000000000008ea11760251ef864ffbb38783b45bfd28562e2f3f86be70c1f28cc465a09d6d71de", @ANYRESDEC=r6, @ANYRESHEX], 0x0, 0x39, 0x0, 0x0, 0x10007f}, 0x20) io_uring_setup(0x461a, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0xb02, 0x0) 1.610146537s ago: executing program 2 (id=1013): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xf}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x4}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xd8}}, 0x0) 1.546991193s ago: executing program 2 (id=1014): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xf}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x4}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xd8}}, 0x0) (fail_nth: 2) 1.389921448s ago: executing program 2 (id=1015): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000180001000000000000000000020000000004ff"], 0x30}, 0x1, 0x0, 0x0, 0x4040084}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x28) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"]) chdir(&(0x7f0000000280)='./file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) write$FUSE_IOCTL(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) io_setup(0x1fe, &(0x7f0000000200)=0x0) io_submit(r4, 0x1, &(0x7f0000000700)=[&(0x7f0000000440)={0x18, 0x7000000, 0x4, 0x1, 0x0, r3, 0x0}]) fchdir(r0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000040)=0x100, 0x4) 1.252926971s ago: executing program 0 (id=1016): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='tlb_flush\x00', r0}, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 1.248364907s ago: executing program 2 (id=1017): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000200), 0x308000, 0x0) ioctl$VIDIOC_ENUM_DV_TIMINGS(r2, 0xc0945662, &(0x7f0000000600)={0x0, 0x0, '\x00', {0x0, @reserved}}) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc01c7c02, &(0x7f00000000c0)={0x80000000, 0x0, &(0x7f0000000300)}) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r3, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="540000001300759200"/55, @ANYBLOB='\x00'/11], 0x54}, 0x1, 0x0, 0x0, 0x40084}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100800001) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r5, 0x84, 0x3, &(0x7f00000011c0)=""/4072, &(0x7f0000001180)=0xfe8) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f000000e280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r6, &(0x7f000000c280)="897c6500ff3035465c7acb4e06980b05687c1480c7aafe631c0543db2bf0d6f539506e8782da06c1ca018774d72e9e5a3418ab66ee78dad68457b17ec9d47bf7d8272d607c1c0a4bd906f0cee7f8451828d2458596bdd6a459ba18ebaf61b38f5d66c27fa8a024ad7832a85e58689a4c254c94cbcf7208fce6e61d9566459789d15a6f91dd7db7c54cc3a94da956fb290a8a15f849270bc459d9d9f47801be86dd5c9d18382081a993b7bfde5c28adca4c71329afd6be743b076033b5859891703eb65fa256d6f47450b6edacbd05a9bd8b372e90cfc30f32826566dac6c48e6ef001881cbc30482f9ec469e476a101da496b8c0785eaf875d3608b0c49e9d39baaa1041f903a805f0f24aa63722fa2d87b98595fa5cfaf8b79c458de43ee39904e7cac7540a934b4108957785d58807abff186949f1b94cd21b724aff34ac45c7066dcdbd68ea7b766af9d045cd7fafeafc5c5a0c3400ef4e0c71a6fdd5b8d68a6f317644cda9d2fd2c839a82b97b3d909b54c672227bef573c9de1991d65a63017f724d1f7f1575e69db53318a7fd7065b303e751518c8eef04f642dbd4dfa349040a7b5401050ffc2b4ef62803a7c8eaba99e011dfac24d81b2b61e0b0581e53bf520f623eca17f0545c5e59ff15b527475f970f589894ae589145fa4283f7225088ccfeba1d72e9128f8c223ae1840f2edae3dbcdf7e560d5cdf4f71c9ada1931c0f8312c000101b264aaddb9fab166ba8d8903d6098eca20935ca607ea79e936798b3dfb22a7e159abb234cf21f3733dbf263a8ff116092f251659108892b2e21e1b428fd225096a5040270b2d70347013eaa1fd8e452942200283aab092c4ffc5b8b427b5d691a5a773e09da20539ff0f8214331c5d84107ae8a59aeb58efe22d7a079e446f1dfb07510377799bfdc7ee59cabcd76af0fe8a427ac8258ff33bbad5a8061f1cfdfbf375d73d676cc7916d6658ce46a0b17ad6350150f98e3512b513e25ca73f5f5df0a1fb9582ace7906c493fe1fd2889d9aac0b7c29c2b6c205537627bad64df433336a5ace32ca871e51b4dab0fbb00886a1fa81a98b74de0a26cebf65723515ebb807fc3c161ed42d1a7b6b55717613577ea437f3a2967c66ce45ff85a6a35b7cd40625fc575b107d7394e3d2db51d58347276c33e21f50b5a6b5672bf9fda63139bb75aead1fe4ee9a4064af5a5958466aa39faa6d821489fa415224c8d69d3b5922236832c2b1e4f6b8863b32f9aea83fb522a2de081d674502b48f73ce6db98d84136059b4a6676bc85ac6b7626329afa9bc7d3f9f2caa3c4d872744e0a8e02d72a75c6c545b8ec8e15b6fb0fe4185bd0d154960e6fef05ba40e5fe2968eb1301dcc52a03337179e74ba1522af93d77827845f8941c69ed8bb84567e3c63f1cc378a542f1de7007b688ff0a9c69d5861f0b85402c30a2fd391c52bafbe65f8e82135fd38361d7c0b43c982b2f3e7cb09c40c7e215114f4243d670cd576bcd93c1e959345170c75d6c3cf89cf8c2c70dc792e646e7c649d4c5f36bb016c7acd466ad58473d40dfef36394e581065a8581ab852250403cf372ac0065bf757fa3f445424ac0d82aec1938a2ea116bdfd306baa1cb06c62a4a97d66ab1b9489469cb8ba842da12e310caed02c5ef05c0be1e1e8c9c8b87d6871c94c57d164d08672b205c948086a06a545b266b7ad902a908681eb188bc51b6190b5cb9d8ca59b8c4c6e7369c00d6f6119fd5d437239e3d3c89cb81e09e560fb817590106015f08e7b09f1e1e65bfab3b8489fa058e24081978b9e25463d9945bfbca81c08885d4b6d4c62e217bd9e19460762f36c66bc948fe31cde089626fbb310e3c78a8d3f2eac21d374d9b58d887235d3a95721168e4b9475849071d60ecfe7ea5d6c4bf60da3747612ef59bb651270f326c0af31bc8c71361f851de34ccb3c8071b96f1128d7ee79b41246e566edd0272dbd3ccfe472b38e5e03d3ef83218bd498e6de8b4d92cb6f82716449ede7ba845028eccdb9137be8a622ac88ac53118fbc39637fa7a93cd3abc6f7671c7804420d66e94720acbcac916950f9baca77fef4217155ccc2cd0507339a0486f9f468eb28772986ee768c63eba671bf8c52e48a2a5dc2cc24fe925368706c2d712dd1064692b0fb2a32ddfbd4a0ffcf9c2abcedaae6e527bc1d42637aff2a275b76a7a7f010e42e1cc1d27141f6c3585a2bf58c6c5789ce61551d10118a000e3764631ec0b7f4b1a6f22a678133a30940b79dc76f863dd9f6e0d7776300898c97cef286c731c2050928c492439256e481652bff0d202db3cfdc54c9816ceea7895357bfa0362fad79afd09ed55189294d6ead7e898ac091cddbe7efcedb314bc02a18dd5bbddc42e089124758bb491fd1536aab27c5c124567bc325e7028bced5a179a011d1cb9a5ffb61d7af863e91ec8e60495561188b74d158ba1418228d44e92915a22eb1c166ef7d6179e84381ed950ffd747f13e24172942d922ca3109fb8b1e4e6264fa4a4eec75ad0d0e22579d90f45d6cd157300e38ae665eb56457202e25a8dd5877ba99725de288660badd2704345d9bad208c903ba27ea167dd45a77f77b6502b525b2973270582858183c784c324c1366fbba8d410c38bf75b41e067f6a9a017c56595161db4fc5639393fdafb1f148d3f416c1adc5fe1ab9cebe4689855c9b4bda6dcba5d5fa858a1b87d2ad23cdf54dbdf4d14aa4462da0b6f1107f4afa0091c2643508861a4d9f133ba77751941bb8fb756abf1a104205b80d47a3b4a59724d959c8b5833da4f56fb6613231f230a9378c9af741e94fd2c7213ac1d7625559b3f032f6c8df3ab441929720fe43d7c548cc661eed5b3c62b3c61f538ea3228376e2a18c6da2ad906322f64fb4865cde8e1889a8e5237fd6a39bbd6662f1dedc22fbd74e4376fa610cd710703dbd3924a38beae69783d1d5abf36122cbb87129ba719042748f060f4303a3199c5891c5040fd8cdb9761b006bf64cdcb65e5cc50a29994b8c1c34b83760ece12ed9ed7c3d2a7f8911cdf23a1afe0d7db1bf342aa0123dd5cd31339f5c8e160c4efef882602b3eccbe76fb690162b8bfb8a31910bcdf9a4a5dde76c2ac2fcd8678add7a000cfdcab398eb2171c026313eb6eb56b4b87bf8ef93f7f8a1c0bcc3775b681d4229ea561cb52281d8ba4315c3694ed08433596884d5a7ce3a8b1f82359846b7136726e2fe37bf4f7b7e2206cdcdb0705ced9f0dcaaa2ed3a78ea70d2cfeab668eb321400fc955e9aeb7bbcf86cd03f02dd443503a1480d9d9f899f53bd747a95293786798fc59fceb09e686a9328da4f929b6201841bbbefaffcf3386abdf69540e3b46a643ec10f0acf21f27c0053dc13f18485dbc898729dfbeaaa4887b58cd442d7ffa941808cd9658595be8650a815b088621278d89f0d8a4252566b923df3a3cd65c0e4af08fad385927251b31d35f75eaf25e6cf13a579aeeb0bcc0a14ca4a20a6831d532be0b2af3821792a2df95131b7fafef245aa19b214053342aa820c35858d13f84e496294529411015c41ed447b5b51dc44a45d52552a2be1abfc157f3ace7bfa32d5b931421d5a152dd66b7bf549311b08325e5a7201f793037b38990bedeca8a647c08d2478670f8fc2b4e8983ea18bcd514daeeeeb9d7a778f783c76edf01bd4beda4b77b612cd2e865c2e4f58ca7ae06147bf66ae6aee221cf9b9505dc07e6fb6cf4f82dc8c406c78e270210c11cf2531011ed678d9dfe1f49c9a69a95a9f3b0e5b624d9c2664d787ab911b75a4a38d63e9d6c353f8aaf433ff961fe5e34d84936ead0d0bc7954caf84e541f5c6f3f20c9eed21eb0316b82c0dc5182540e63a0af25565496792153d6395adc2b8d68b8bcd93dd110ff5685879db4384ec390d44b89663d43a5de3bdc0e103b7c1b355dc5f6fe3518c93628780ba03f156badea65d1d0af8433c9e8a975fdd19453da662a33fa9f0f5fa15fdb216b483fb48370a967246e0b763df8b3bc7924a6c76c4b114f803dbfa3b312e6815b4eb67be167283a9e482d9a5beac250089d069d4c386b7fda5fc228404a0f58b12ca4dc131c381b49b42b570bcfc0dd663f24afaf65a26a21f6d92f52c9f8de36cb76bacbaa0eef98ba6b7dbbc2629a03bb2b6f83fc5adaf20c217bc8d0f0d2421e01472532bcb546aeb2d483c8f95011a3ba1d2fd8086a717cb015dd53064ef4a80b6d6fdc12d9069223fdf2aa9b192a0e0bdb38436f49d9eedfef3665815633fee4344aff11162526362b70b18e1dbedbb5d8c4698860beccf667851878a25a1e766caae2861f2e23404aac859e62fdfeac06a6057554828d7035806e8ab3ee2fa6d711e5811db61231a22f4672f6a11b27641f350bcab78792362e6ebc1c054a643bbbf2746678c14dc567d1f73e37005c8ab6374c4d8d3106384a2d32c5fcf05cb9ba97cb7fa1aff11505a701bead543e555f3901ef3b693d5b9ebf49518c3509af042b7e84b1b867c22b7e08725220e4338fd074edce428212e6a3563a08e2ccd8ab71910256532904542e93d5c7deb5bf5d49beb3202d4da4f643649e55edbb91188cdcf0883a40c6ed6b8a086fb5c50dc08fee00308420121d4c7431b3cfb80f9c1e099423ac451d67b12e930d9e391d0a799c7d4b54a0d56ea0aae00c1d009e21fb5459416b464b227d66ccc1a68da59d64c1583dee54bbcd7d61ffe541fd0fb7452adba91906918966a7d58019ad1f8fdebeceeed7018837b6e4272eefeec8385abe7207fb2d7061fa6cdc478165a98971f9729b818a73edefed976d5c7c0a651c091cfd1174c020e39330a79144271fe4cbc61ea0ffa274d0d87d06dd08c1d5f8a0364d46ef7b54426bc286330c75fa257afeb2715c2ae511ff53b1189cc59ab80b1325fbdcedfdb8f36ed71f70091116e16b52188b794e637755027caac8db8554f8674b844964c710cacd7a9d6b06baf6fef76159a380e639b0d3e66080a7cf7f86baac01dbe47fe687fcef2f3bfbf6f8fba045181dee688360a11ee56e5fc73ed31c0e2924ae57f0cc93c63a30662a65c5d5f17123ae28cc5b74dd13ed81b03dc7fa61dc575668868c0df12d3553269f04ba79084d070abcdbd4745de80e90e4e3e524f27249b5c4a2f2d4c8b331b0cb6d4efe62a298daacc6eacdfe008c1f912795dbdc37098c42db860953120fda709baa6d46f52eaba781505e68561ca0f281e850532ef8e7c779883e312806e1c357bdef8d0dda005e710cfa6eb8686e8bf3bff036b3fcdc4036541d93530ce6f598442c24170b307ef05f23c93aa0ec96831b532d8120402214a940d1fa01ed649061a4a71308be189cffd729a196754fb8a75f23851189589be1b819f0612cad3dc94ccee88f4ab9ef6ac9c7daad8cf94f5ed9496c4c824e5b4f66ce32a80e7a6ef069a32f6812e656aa5f5742bd432afdf026c86e8f28212c1139dad47d7fc07e5c1a83e993daaa4a4bb5f0c9435ccab2a10f867ffe259dba7a1d9168619b1e3048860a5122e4a5d0b00372eaae861a0cc88549852fffa76e6d78739b654d67df15ea97a9a46b7c382d83191a673aa619b4a10ec05bc681379b0d6df824cb6fe158e9d89ae5dd1ef66976f67972b553db52eb6feef836dca6026293f83a61e117754a7424a3da63bd82d017f87f0603e2a9b8fc550aae611681935ae91f7ca2b5341b05a25208bd28f1a202a7f2a213b1d7411ffb557470aec00c4d13c70163f22a038a189710dd19a47e8db4a87c3fd329a63abca172a9810edad2d8e19ef85b57ea4287cfb3d740d7ea3fa9c80d06e1aa84b317f678ddb3c147ba5e0db432125f59ca4944c8e9050281ca82a3ecf67b2a5df678697a52a7297af1ecb03c586af7b91d74e881964ed95f7be12fa07e2a4e71aab8b913a13996fa33e915144bf00e49b8e7adec5b2c4b8165f54ba3155230e241ee023af77a295ab87c40f63f6092ccee05cb08a265abe8f57c9919bf45064b6c2240ba8011db223a283a4e2292d9b59df8c9a4fdc763f0631007db9976f351717db0e6b5f9c6e5f227c2efa1ae5fe0be1af0b22fc164f9f9678a01fe8b059749fe8a2972455732da1989c609d191544ef9fbb3e58da93ec4a582430523f260b776e4d747312747d18a9bae14740f5dcd35fd1072f8a4d81573b5882203be856b62d7e1d87081a9e431872c9d68864197bbc61f15dd8aeae950d34d6ce97182deebd2ad64cabd1c723baf512acfc7e94675b31369bd60e155af79b97bb734312569f736dcd5b5a78223ffaa0f7e93e1a112cb9f6a5b88fe3cf12c30024c16c6b8380fdf086c662665d3751c11617cc4dbd5b8bc7543301a23fbc90ba8d060193cdc2b68c31c734d516707b759f7db009c8f06e69b40154e1cd8ae444afb28134acdf871136b4fd78bd86d7faaaf618afb25e92d1ee37cdff0595278f9565f5eb109e181e9cacec2f22e32e9f34774ee223fdb992febcc5dbc5cceeda16cbcf1434730d859e7e03d36ff17636a7a7e66956b515894da114f3040909f90ce3cfbb2d7d46e37049c0fb124e0683d662eb427cd7b851ada229451e6e3aaee64b9964ced3036bde5d9d80eb062474f96ecfb9b65fcafc719494ac12ab7df245475f2a5e7f85ca4789833ca373e6214d39176c8f51dde87a4cfe5414a20f68bb9f34709979b99533ba3435c4aa56e525195e10ffd00f8e41aee30a909c07b973bbf733d45500b539ebe2206d438216690998d9e256db1b7ac6bef3e810785e1986985c945a2b820323a592721fcfa444934d0faf8aa439d5efca5dcd77b72d1eb91b3790d50d0a7483e354c415f81d99c133d648c1293e795b3c43f9b47e23ef982e10072ea5baafb0df675e69af1807b225afa0cec3eafbde8535d3ecaa0ea6ddbffe4465207425bb003670320324df0aeeb16b38a043f9c0e85673b36def332fd68b2b1e6edda621d0cadebbced8c7fc8f890489115b457249e8d8103676b3207a472804d33e0fe511ac56cd8dc5333b2333892f87b455940ada78fcf5075c358fce990e6f65f095eb416d876ce6f120b8b02cfa6b176ee269c942f881247c3e464cce2aa65c39137607c585aeb4b5f24f5f8e058c9c8b48003c1809da3e8aad1bee7955c3a976d43fe132e2b16f4758a0a9884e51d13b930675a4361ff366b0fed190ad7b2a00385528951e39cd44ea06d8921b9d613d7626221154cf86249a550198fe4e5b05ad3052b474291da0a0a2f701759859bc0392adf243ad5eca89e6d18e28dff99ef95743bcabe75504be8c715cd6360facf3bb06cb97c29989d4f6ff5083573cefe6ef0b39a252a2678112fa88e5b06c9a6bfc9597cc96e5a49710c4fc120fb0da4945b9d94e46de1e9989d0fc3d8d20df23d815b660c799a903f651b0d013f7fe158f1d297f7fcb6a48780ca5525f1d081ada0aafa83552318b848783306549750b6254cf676c7b934cf7fdab992717f0cdc089b34278f3fb151cadde14d0d3250e85a4b0ff2a2778a219aa40563d3ef575285484424b6d0e7cc8392342e4848c6fc8cb20fa1b450cc4c1fea19f3bbdd9e342e6c49cd7ac893b1eda2e93d1d74d20969465946b398fbc733757741ac822c4a118632cd242a439fc37512cf79b7c629504ccc1e7f2f11798955c3262b5e9695625ba74d8050e20f51d4769e1ab938f487f1bc4b55b5abcaa3ec079c2d0972b2ae9bfb7c5423b959119292ea05f1d79d35afe47e49d97c946b193bffc0a8f607f18a6845cecbbdd98cd351db2b2dce05a4848ba84a6a497b4618950130cb7e76c03d0976eb2fb41d3a42a1430063ed8e5b8c67e80fd4fc1148911958babbcbff33a6505de209b0d9320017fd736fd027a16564008ab2e1f48a6dd66c9256730e9fda0a606875d0871b2b9b0bc2ed4e1b696dbf0283c8dc72cf4338e595266f5390bc3a21f988353118f2948fc75d050ea076b73508d9ed89bade0ba305c1f4e5daf9d40d2f5e7ababed8d1b1d919c61a6d3fb149c1a9b44e38585a2fe322f83d73a3aecb44da3f0e82942d75d62ed3f91eb44f3411df014f88839e4cb1e21b9b259d4eb4adaf6b0be433d0ed4c87ec77dde5ee9d566e3dd8d928fc1875c63af26c59daba5ae267d9bd5da72b99a03e6a33cc48ed961ab484ff4a46c2d5fa597e626e00b530d7b9a9705e4e08d03f3a7f2a5a5233ad6340e3b5c89db81ca713b6d7d855c6324955f85109b204566f50178cd88abe3fcba25de905e8ea0b75ad51831761ed9b1af2470f976f05ec73bf74d137c207270cfd614170518cdc449aeeb663e114359c8124eaf2499d8cf5dc84a0872301db2e57b50bd285060ec4390d99d4ae3674ca3bb8679c1b08e566ba4f30daec8684a980055eb43cb5a1306c4b52a154682aa96637e06c869278aa2f74ef7345632c11265ef8ac97e953745302556881ba0cb590fef271c0abb193fb84d18ee3f24d9976ae816b857d6f68d1fdfe10b312c799fe014debf875d04bff8b4f387859e97c6bf13f7083c28a2045a0b5eb09c94e781a165965e8617c0efed1701ea9667aeca26d9577ea7b1242e1d91b25d6a66756cc627648a293b9f4345966bc469fafaeddc1118d0972bd5c7751a1f51e5989fd952f314ae10417c97b41e60ebfbc47e496486fa4a89fd16aea7fa1eabebd26eb2a37a3e2b351e0c9d2f67b2e5be0f921adc9b6045b045948e5103af0e5050b9c0799b513c00865deebda730de538f956ceb6164e08bd6f58655a294b4b44fc65309b30f9c00f92ef5bd5b911a3d830f72c258b19521bb8e80db02129954efb61423f518d2c5f36587303890cad9a93fa4f4bcd0e24c67db679c67ea59c1350b8442577632d5e8735833f3daf5a74bc7bd82659a81beba8c889632efe03cd24187aee856cf659e16e195464f52f2b984fc7a299e7b2aa53979a147ebed35705d5e89691666536f2febacfcef9b32d14952f958b72512869e4f6a0a34176918217888b1eb8b89322ebb6bb1dead2b4744e728479880db70e6147edaff6c3f083f18e0696bdbd78cf0bda14d9f42e5c1077ced00041aadff90470aacec0e48e2a5f2a0ed37818a173b96061e8c5bf24c0bde9e09f9e0ddb8e13306ef1d4eb8043ebadde5d7553e5212ecd4691eb426251f9d6720b8276ac543dde02399a35d974b22c1727d4b6df01957cae47443b706d43165e01d6932b136f561ce837431254cfb2a6e7d8070a2d3805aaa15b3c10ccd0cda2e9b418ce9ef380e5d08217752e12b3b892d03a9495c83d78d674612fde5a67738b2d4649ce44606ecce6bf3bd1293eca246a83643e4f1c7ba362b110e07c8479f216e3d4afc4fcb8d0820c8ab702a66d8183e83174597035e92b9b500dee08c80b927b42c3689c7c9617b4112c9e54cbfa51e989b5fd42b80c595d3edd265f138e8128cfbbb0e4f53aa0aa95a2ecda4518b2e564c42d5de7671560843d08103b9bdceac5fdeb0b1266f72f491265dd2b2b80a225a50955167da1812364ea340d82f61535401bae6f3140a8795d7c318a64cee4676627244930957b2f0b227be21b72d90027e6a5a7af3c59470c74dcdb71d1ef090a0f49c91acd604c792385c8f4e085765292822ee5eca03885fd6bfeaca9b3bbbdeac939f7846a487c5a483ed1e4fbf37c93886ea27bb35c812089b900b77c7c924147e97b6a71533610750bc84921012aa8158b213f7601d934a20bdd1f757b0a33042a683af6b9069f3900059d7f80f9fdcc9f33ece8cf7888dc9e24f1fc6ca0ecccf161c5334c60f440feb3acfc3d115011c176dfa05314c5bcf089e3c82bbe7680a3eefdcdbf3ac27265b779db4f49bade0128eda6e29bc5933ef454601db1b49628fd39ab938794fa46a33937a086ece7050d31a21524e2f0cacb307ed4412a2078636f9cc8e11c5c31cc0f9edd7be6d1e31a1513a58e25215f5a24245cb988589e6d5e5119f4f6557c697fad7d1c3a7e3bae064db4382701e33e48c5b6a52fe9141a385ef2325c6f7781134607e98bfd02c43d6deefaa861700388b40d98e941cfb2ddec209f977e8b9f93d29fdbf85e3010ce7cd622e8c75ce3df535e392052b6d65d5042d2a6e78bbfe5ee146e8b18d4bc7fb024dbba57cbe0402205593766a313950cb719d00c67bb6b3bcaa1015b89e820f11475afce655947113a7c3dcbb52427f090df994fbf076db867e0ab3f6125fb8884c1d13ff3e99fab5fa8b9f0b72cb44db4d0a48d9ec17f9733764e213c40a15ad821ec60e4a88cb2fd9dd9a4f35e6a708f4b74067f4be3f03a95261f6b191df53fa5bb5164e4a164630ad9ce39087aa950ad9e60cd2c44fa2237c49abf858c97737fd21180fd0b9542767150fbed3f39a29e6c3484d9437e15d2439f2a54b2a1ac7e63e6c436658abc3f1dd52d984f6c6901768a8cf2ec98ebf44e90e0fc0c24f8957c62e05d8eacecaf25b178fd710af609a8a1bc4d7955b5f0cb4f48a37685e6304ea5843573a1abff37b5106916c83c8f23f939a0dc43aea8d196191ed6e18dd793990d1f37d7de0bf8fac6f469843724eaab86be8a483be281b8ecf4aa29d9c571951cde8cd8c2aaf4d597ac2cb48f23fad145916920a55d655924940573b64dbd42a280cddc4810434f930183fdbbdc72db1491a4c9d44daf9b1bc2fecd855508648063040faeb125da0e68e6cd2002181118eecff0be1dd8eae726af5d451630cd65119c52abd6dded97f931202f186a18c4ba34bc2c3f6d765e2d8f445e959f26ffb55827cf3ff2cc0289f17b82c8caa5a2d3d54306a300f0ef42bbe4ea9e32c5d4b1173942745cdcfe4f5d1619eefaf8dc600afbc9171d516f7f4b35331d0b9be005132ffad5e9df59710278b842afb626a78b8b8b37fc3a894dc705b2d4e0940cb264e9dc87eaa148e6faf78125462f28a0f1d7b3c65a291b85713fa71ffc478f6601e8716c35489f4a54ed0c70bcfd5502cc91374dc3c982075c5180398bc6b195b36e79dcc4087cb990cc9d964a150e0dcc887d496bdd27c3f298736b9ad8345ba2df46021964cf43c38f9d2e94b77bee2b7bf059e0870ff9f17b9ef1320c0aa88a2fa9781e9017ab64643de9a3df9ed4b8cfd8fa080a2e494409520b795eb1517d224a05e450c4c8ae0e9fd29c0e72d3a592cce55f6dd5107f21214e1a3f9a5448384de06149f959ec0c92790f0ff229ab4971171f1c528ae6d095ec007bf5e7f55d623a68194e9ea8edc3af418075338328f24e7504341c22bef72c2963fc9c3237ba990d29c2c8aa3007395f6d96e95b40ee1b18dbad550bf39d0d98268cb74dde76d987c3169c9067495fb1b88508bbb7e94cbb7dfc15c03b1d5b163132c8a468906f02d422a8cf98d0b432b5779dd962074b72dd27439b2e94312f573435e5aa84664432c1914839cd6e172186ce93eeb1d7cb0659696d9d550eb3b185f8c6ee16e53f78233cbe709f99d2879d63d93f7d0ed133241d2f1ab1eb2c56605ca0f0e01c39ab0ba2370fe5c4e68de0561b517ff9a10023c386236398372c7176e35443e2cf5dd6cbed9f23395f231e6a54f65626cb5860a8b72122c34664119e7c47204ef4a70583a", 0x2000, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0xfffffffffffffff5, 0x8000000, {0x3, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x2, {0xfffffffffffffffe, 0x0, 0x7f, 0x0, 0x0, 0xc9, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, r8, 0x0, 0x4}}}, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r6, &(0x7f0000000380)={0x50, 0x0, r7, {0x7, 0x27}}, 0x50) 1.08440066s ago: executing program 0 (id=1018): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x7fc00101}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000003c0)={0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x8, 0x50}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@cgroup, 0xffffffffffffffff, 0x26}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r4 = getpid() syz_init_net_socket$ax25(0x3, 0x2, 0x0) r5 = syz_io_uring_setup(0xeec, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r5, 0x567, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x10, 0xc, &(0x7f0000000780)=ANY=[@ANYRES16, @ANYRESDEC, @ANYRES8=r0, @ANYRESHEX, @ANYRESOCT=r1, @ANYRES8=r4, @ANYRES64], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') preadv(r8, 0x0, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r3, &(0x7f0000000680), &(0x7f0000000040)=@udp6=r2}, 0x20) r9 = fsopen(&(0x7f0000000280)='gadgetfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r9, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r9, 0x7, 0x0, 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r10, 0x80284504, &(0x7f0000000680)=""/224) sendmmsg$inet6(r2, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e25, 0x2, @local, 0x4}, 0x5c, 0x0}}], 0x1, 0x0) 637.182603ms ago: executing program 0 (id=1019): openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) (async) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[@ANYBLOB='/\a'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 588.295555ms ago: executing program 0 (id=1020): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) r4 = syz_open_procfs(r3, &(0x7f0000000280)='fd/3\x00') ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000380)=0x4000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xc8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='tlb_flush\x00', r0}, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 176.650794ms ago: executing program 2 (id=1021): sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x515c38d0ea3ab6c4}]}}, 0x0, 0x2a, 0x0, 0x1}, 0x20) sched_setaffinity(0x0, 0x5a, &(0x7f0000000100)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = memfd_create(0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000280)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93', 0x6) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xe, 0x12, r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[], 0x2c}}, 0x0) fallocate(r1, 0x0, 0x7, 0x400) r4 = userfaultfd(0x801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000600)={0xaa, 0x90}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r5, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r6, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) 176.390717ms ago: executing program 3 (id=1022): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x6, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x1000000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0x1, 0x1100}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c250000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 89.862875ms ago: executing program 3 (id=1023): r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0xb) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x141080, 0xb5, 0x39}, 0x18) faccessat(r1, &(0x7f0000000100)='./file0\x00', 0x100) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f0000000380)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x4e, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0xf4, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640), 0x400001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x10, 0x16, &(0x7f0000000180)=@raw=[@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xc}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}], &(0x7f0000000240)='syzkaller\x00', 0x3, 0x3c, &(0x7f0000000280)=""/60, 0x40f00, 0x23, '\x00', 0x0, 0x2b, r0, 0x8, &(0x7f00000002c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0xc, 0x5, 0xcb}, 0x10, r3, r0, 0x7, &(0x7f0000000680)=[r0, r4, r0, r0], &(0x7f00000006c0)=[{0x2, 0x2, 0xf, 0xc}, {0x0, 0x5, 0x2, 0xa}, {0x3, 0x5, 0x3, 0xc}, {0x0, 0x5, 0x10, 0x2}, {0x3, 0x4, 0xf, 0xb}, {0x2, 0x3, 0xb, 0x8}, {0x1, 0x4, 0x8, 0x4}], 0x10, 0x1}, 0x90) syz_io_uring_setup(0x24ee, &(0x7f0000000800)={0x0, 0x1e6, 0x8, 0x0, 0x38a, 0x0, r2}, &(0x7f0000000880), &(0x7f00000008c0)) inotify_init1(0x80000) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000900)={'raw\x00', 0x11, "8edcc37066b48578eba70b5757d19c05c9"}, &(0x7f0000000940)=0x35) landlock_create_ruleset(&(0x7f0000000980)={0x400, 0x2}, 0x10, 0x0) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000009c0), 0x8800, 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000a00)={0x5, 0x5, 0x7, 0x2, 0xfff}) pipe2$watch_queue(&(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_kvm_setup_cpu$x86(r2, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000ac0)=[@text16={0x10, &(0x7f0000000a80)="640f300f18ada5543e3667660fc735d7e481096565f30f1ecdeaa300f400dde7f30fa7e0650f01c23e0f72e500640f47980500", 0x33}], 0x1, 0x26, &(0x7f0000000b00)=[@cr0={0x0, 0x40000}], 0x1) r7 = accept4$unix(r0, &(0x7f0000000b40)=@abs, &(0x7f0000000bc0)=0x6e, 0x0) connect$unix(r7, &(0x7f0000000c00)=@file={0x1, './file0\x00'}, 0x6e) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r4, 0xc01064bd, &(0x7f0000000d40)={&(0x7f0000000d00)="542f130be6e6eb6b45619e40b771b1d5b64e8efb1a90891a84c426cedfa01bc4bb180fabe62c8630a97055dadb22f6391cc9f287be59930ac2745a97", 0x3c, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000d80)={&(0x7f0000000c80)=[0x0, 0x0, 0x0], &(0x7f0000000cc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, r8, 0xcccccccc}) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000dc0)={0x0, 0x2}) execveat(r4, &(0x7f0000000e00)='./file0\x00', &(0x7f0000000ec0)=[&(0x7f0000000e40)='%\\@/:@\'\x00', &(0x7f0000000e80)='/proc/self/net/pfkey\x00'], &(0x7f0000000fc0)=[&(0x7f0000000f00)='syzkaller\x00', &(0x7f0000000f40)='/dev/dri/renderD128\x00', &(0x7f0000000f80)='-(\x00'], 0x800) r9 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000001000), 0x2, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r9, 0x40286608, &(0x7f0000001040)={0x9, 0x30a9, 0x7, 0x5, 0x9e8, 0x9}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000010c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r10, &(0x7f0000001280)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001240)={&(0x7f0000001140)={0xf0, r11, 0x20, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_IE={0x50, 0x2a, [@peer_mgmt={0x75, 0x4, {0x0, 0x1000, @void, @void, @void}}, @random={0x0, 0x44, "a326e285b0b747656ccf86f7a1cf321134a7658a2d826a9e9b63fa44d71ae238ff4271fce5db6aff19552961f9209a9632d62c6f530b7b488e91fcbd0c0f84d6b4da2627"}]}, @NL80211_ATTR_IE={0x82, 0x2a, [@mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x6e, {0x6, 0x2, "4c28e6dd0abad12182f04138952d515b", "bcc8964976faacaed74bc862609589540333c9c72c28021b3ae962a4c211a12d", "aa505f20f0cfd4120e38d39ddb55534a8b2384c075e2d383485d52bf94928a1f", [{0x2, 0x12, "95c8f046c60671ab4422f13fd7266e54e160"}, {0x1, 0x6, "4f6a1c160fd7"}]}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x7, 0xd, 0x6}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x10}, 0x8d70a90f383d037d) ioctl$FIOCLEX(r4, 0x5451) move_mount(0xffffffffffffffff, &(0x7f00000012c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000001380)='./file0/file0\x00', 0x200) 86.815118ms ago: executing program 0 (id=1024): pipe(&(0x7f0000000080)={0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000a40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r3, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000340)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x4}, @NL80211_ATTR_STATUS_CODE={0x4}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}]}, 0x34}}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, 0x0) ioctl$KVM_TRANSLATE(r7, 0xc018ae85, &(0x7f0000000040)={0x6000, 0x5000}) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019300)=""/102395, 0x18ffb) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000c0000000a0000000000001104000000ffffffff000000000000000400000000000000000000000b02000000020000000000000e0300000000000000000061000000000000002e"], 0x0, 0x5c}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2004cb], 0x100000}) ioctl$KVM_RUN(r10, 0xae80, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/address_bits', 0x4a8200, 0x0) 0s ago: executing program 3 (id=1025): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='tlb_flush\x00', r0}, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (fail_nth: 2) kernel console output (not intermixed with test programs): tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 180.241167][ T5401] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 180.435809][ T5401] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 180.440581][ T5401] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 180.445069][ T5401] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 180.449710][ T5401] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.459201][ T7503] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 180.470260][ T5401] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 180.980686][ T8] usb 5-1: USB disconnect, device number 5 [ 181.355472][ T7529] fuse: Bad value for 'rootmode' [ 182.137405][ T39] audit: type=1400 audit(1725860838.587:450): avc: denied { mount } for pid=7541 comm="syz.0.489" name="/" dev="configfs" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 182.147830][ T7542] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 182.159282][ T7542] overlayfs: missing 'lowerdir' [ 182.249623][ T39] audit: type=1400 audit(1725860838.707:451): avc: denied { unmount } for pid=5338 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 182.981480][ T8] usb 8-1: USB disconnect, device number 7 [ 183.049049][ T39] audit: type=1400 audit(1725860839.497:452): avc: denied { map } for pid=7564 comm="syz.3.494" path="socket:[15295]" dev="sockfs" ino=15295 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 183.064836][ T39] audit: type=1400 audit(1725860839.507:453): avc: denied { read } for pid=7564 comm="syz.3.494" path="socket:[15295]" dev="sockfs" ino=15295 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 183.182322][ T7563] netlink: 256 bytes leftover after parsing attributes in process `syz.2.493'. [ 183.840014][ T39] audit: type=1400 audit(1725860840.287:454): avc: denied { bind } for pid=7576 comm="syz.1.497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 183.851954][ T39] audit: type=1400 audit(1725860840.297:455): avc: denied { listen } for pid=7576 comm="syz.1.497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 184.012514][ T39] audit: type=1400 audit(1725860840.467:456): avc: denied { bind } for pid=7580 comm="syz.0.499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 184.032692][ T39] audit: type=1400 audit(1725860840.487:457): avc: denied { write } for pid=7580 comm="syz.0.499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 184.037321][ T7582] fuse: Bad value for 'rootmode' [ 184.145741][ T7583] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(13) [ 184.149216][ T7583] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 184.157600][ T7583] vhci_hcd vhci_hcd.0: Device attached [ 184.351726][ T57] vhci_hcd: vhci_device speed not set [ 184.421018][ T57] usb 13-1: new full-speed USB device number 2 using vhci_hcd [ 184.744353][ T7589] FAULT_INJECTION: forcing a failure. [ 184.744353][ T7589] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 184.750757][ T7589] CPU: 3 UID: 0 PID: 7589 Comm: syz.1.508 Not tainted 6.11.0-rc6-syzkaller-00355-g5dadc1be8fc5 #0 [ 184.754997][ T7589] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 184.759022][ T7589] Call Trace: [ 184.760472][ T7589] [ 184.761735][ T7589] dump_stack_lvl+0x16c/0x1f0 [ 184.763657][ T7589] should_fail_ex+0x497/0x5b0 [ 184.765804][ T7589] ? fs_reclaim_acquire+0xae/0x160 [ 184.767975][ T7589] should_fail_alloc_page+0xe7/0x130 [ 184.770061][ T7589] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 184.772391][ T7589] ? hlock_class+0x4e/0x130 [ 184.774216][ T7589] __alloc_pages_noprof+0x194/0x2460 [ 184.776044][ T7589] ? __pfx_mark_lock+0x10/0x10 [ 184.777652][ T7589] ? hlock_class+0x4e/0x130 [ 184.779567][ T7589] ? __lock_acquire+0xbdd/0x3cb0 [ 184.780255][ T7585] vhci_hcd: connection reset by peer [ 184.781545][ T7589] ? hlock_class+0x4e/0x130 [ 184.781769][ T7589] ? mark_lock+0xb5/0xc60 [ 184.781796][ T7589] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 184.781814][ T7589] ? mark_lock+0xb5/0xc60 [ 184.781841][ T7589] ? hlock_class+0x4e/0x130 [ 184.781869][ T7589] ? __pfx_mark_lock+0x10/0x10 [ 184.781892][ T7589] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 184.781912][ T7589] ? policy_nodemask+0xea/0x4e0 [ 184.781930][ T7589] alloc_pages_mpol_noprof+0x275/0x610 [ 184.781951][ T7589] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 184.781971][ T7589] ? find_held_lock+0x2d/0x110 [ 184.781994][ T7589] ? mt_find+0x82f/0xa20 [ 184.782018][ T7589] __pmd_alloc+0x3f/0x820 [ 184.782044][ T7589] __handle_mm_fault+0x947/0x5660 [ 184.782070][ T7589] ? __pfx_mt_find+0x10/0x10 [ 184.782090][ T7589] ? __pfx___handle_mm_fault+0x10/0x10 [ 184.782119][ T7589] ? find_vma+0xc0/0x140 [ 184.782143][ T7589] ? __pfx_find_vma+0x10/0x10 [ 184.800862][ T7589] handle_mm_fault+0x498/0xa60 [ 184.800883][ T7589] ? __pkru_allows_pkey+0x21/0xb0 [ 184.800904][ T7589] do_user_addr_fault+0x7a3/0x13f0 [ 184.800932][ T7589] exc_page_fault+0x5c/0xc0 [ 184.800957][ T7589] asm_exc_page_fault+0x26/0x30 [ 184.800974][ T7589] RIP: 0010:_copy_from_user+0xc1/0xf0 [ 184.800996][ T7589] Code: 89 df e8 c2 64 04 fd 4d 85 f6 75 9e e8 08 63 04 fd 0f ae e8 89 ee 4c 89 ef e8 5b 2b 63 fd 0f 01 cb 48 89 e9 4c 89 ef 48 89 de a4 0f 1f 00 48 89 cb 0f 01 ca e9 73 ff ff ff e8 da 62 04 fd 48 [ 184.801012][ T7589] RSP: 0018:ffffc900064ffce8 EFLAGS: 00050297 [ 184.801027][ T7589] RAX: 0000000000000001 RBX: 0000000020001100 RCX: 0000000000000004 [ 184.845396][ T7589] RDX: fffff52000c9ffad RSI: 0000000020001100 RDI: ffffc900064ffd68 [ 184.848768][ T7589] RBP: 0000000000000004 R08: 0000000000000001 R09: fffff52000c9ffad [ 184.852190][ T7589] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000020001104 [ 184.855540][ T7589] R13: ffffc900064ffd68 R14: 0000000000000000 R15: 0000000000000111 [ 184.858423][ T7589] ? _copy_from_user+0xb5/0xf0 [ 184.860282][ T7589] do_sock_getsockopt+0x5f6/0x800 [ 184.862252][ T7589] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 184.864694][ T7589] ? __fget_files+0x256/0x400 [ 184.866661][ T7589] ? __fget_light+0x173/0x210 [ 184.868665][ T7589] __sys_getsockopt+0x1a1/0x270 [ 184.870262][ T7589] ? __pfx___sys_getsockopt+0x10/0x10 [ 184.872511][ T7589] ? fput+0x32/0x390 [ 184.874176][ T7589] ? ksys_write+0x1ab/0x260 [ 184.876138][ T7589] ? __pfx_ksys_write+0x10/0x10 [ 184.877875][ T7589] __x64_sys_getsockopt+0xbd/0x160 [ 184.880139][ T7589] ? do_syscall_64+0x91/0x250 [ 184.882075][ T7589] ? lockdep_hardirqs_on+0x7c/0x110 [ 184.884307][ T7589] do_syscall_64+0xcd/0x250 [ 184.886244][ T7589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.888542][ T7589] RIP: 0033:0x7eff6a57cef9 [ 184.890469][ T7589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.898132][ T7589] RSP: 002b:00007eff6b2bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 184.901609][ T7589] RAX: ffffffffffffffda RBX: 00007eff6a735f80 RCX: 00007eff6a57cef9 [ 184.904922][ T7589] RDX: 0000000000000004 RSI: 0000000000000111 RDI: 0000000000000003 [ 184.908331][ T7589] RBP: 00007eff6b2bf090 R08: 0000000020001100 R09: 0000000000000000 [ 184.911598][ T7589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.914761][ T7589] R13: 0000000000000000 R14: 00007eff6a735f80 R15: 00007ffd0b5d5b08 [ 184.917978][ T7589] [ 184.927183][ T11] vhci_hcd: stop threads [ 184.929805][ T11] vhci_hcd: release socket [ 184.941568][ T11] vhci_hcd: disconnect device [ 185.149844][ T7597] FAULT_INJECTION: forcing a failure. [ 185.149844][ T7597] name failslab, interval 1, probability 0, space 0, times 0 [ 185.158273][ T7597] CPU: 3 UID: 0 PID: 7597 Comm: syz.1.502 Not tainted 6.11.0-rc6-syzkaller-00355-g5dadc1be8fc5 #0 [ 185.162811][ T7597] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 185.167166][ T7597] Call Trace: [ 185.168421][ T7597] [ 185.169470][ T7597] dump_stack_lvl+0x16c/0x1f0 [ 185.171504][ T7597] should_fail_ex+0x497/0x5b0 [ 185.173861][ T7597] ? fs_reclaim_acquire+0xae/0x160 [ 185.175977][ T7597] should_failslab+0xc2/0x120 [ 185.177911][ T7597] kmem_cache_alloc_node_noprof+0x71/0x310 [ 185.180345][ T7597] ? __alloc_skb+0x2b1/0x380 [ 185.182322][ T7597] __alloc_skb+0x2b1/0x380 [ 185.184282][ T7597] ? __pfx___alloc_skb+0x10/0x10 [ 185.186421][ T7597] ? __might_fault+0x13b/0x190 [ 185.188449][ T7597] ? __import_iovec+0x1fd/0x6e0 [ 185.190189][ T7597] pfkey_sendmsg+0x16e/0x840 [ 185.192173][ T7597] ? security_socket_sendmsg+0x8c/0xc0 [ 185.194596][ T7597] ____sys_sendmsg+0xab5/0xc90 [ 185.196660][ T7597] ? copy_msghdr_from_user+0x10b/0x160 [ 185.198825][ T7597] ? __pfx_____sys_sendmsg+0x10/0x10 [ 185.201245][ T7597] ? find_held_lock+0x2d/0x110 [ 185.203152][ T7597] ? __pfx___lock_acquire+0x10/0x10 [ 185.205429][ T7597] ___sys_sendmsg+0x135/0x1e0 [ 185.207522][ T7597] ? __pfx____sys_sendmsg+0x10/0x10 [ 185.209874][ T7597] ? ksys_write+0x21c/0x260 [ 185.211883][ T7597] ? __fget_light+0x173/0x210 [ 185.213933][ T7597] __sys_sendmsg+0x117/0x1f0 [ 185.215939][ T7597] ? __pfx___sys_sendmsg+0x10/0x10 [ 185.218200][ T7597] do_syscall_64+0xcd/0x250 [ 185.220231][ T7597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.222702][ T7597] RIP: 0033:0x7eff6a57cef9 [ 185.224583][ T7597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.233164][ T7597] RSP: 002b:00007eff6b2bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 185.236769][ T7597] RAX: ffffffffffffffda RBX: 00007eff6a735f80 RCX: 00007eff6a57cef9 [ 185.240128][ T7597] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 185.243556][ T7597] RBP: 00007eff6b2bf090 R08: 0000000000000000 R09: 0000000000000000 [ 185.247300][ T7597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.250470][ T7597] R13: 0000000000000000 R14: 00007eff6a735f80 R15: 00007ffd0b5d5b08 [ 185.253641][ T7597] [ 186.240068][ T7620] netlink: 47 bytes leftover after parsing attributes in process `syz.1.507'. [ 186.363719][ T7623] fuse: Bad value for 'rootmode' [ 186.421703][ T7629] FAULT_INJECTION: forcing a failure. [ 186.421703][ T7629] name failslab, interval 1, probability 0, space 0, times 0 [ 186.427964][ T7629] CPU: 3 UID: 0 PID: 7629 Comm: syz.1.513 Not tainted 6.11.0-rc6-syzkaller-00355-g5dadc1be8fc5 #0 [ 186.432899][ T7629] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 186.437109][ T7629] Call Trace: [ 186.438430][ T7629] [ 186.439681][ T7629] dump_stack_lvl+0x16c/0x1f0 [ 186.441731][ T7629] should_fail_ex+0x497/0x5b0 [ 186.443829][ T7629] ? fs_reclaim_acquire+0xae/0x160 [ 186.446152][ T7629] should_failslab+0xc2/0x120 [ 186.448251][ T7629] __kmalloc_noprof+0xcb/0x400 [ 186.450397][ T7629] ? __pfx_lock_acquire+0x10/0x10 [ 186.452667][ T7629] tomoyo_realpath_from_path+0xb9/0x720 [ 186.455144][ T7629] ? tomoyo_profile+0x47/0x60 [ 186.457252][ T7629] tomoyo_path_number_perm+0x245/0x590 [ 186.459666][ T7629] ? tomoyo_path_number_perm+0x232/0x590 [ 186.462153][ T7629] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 186.464767][ T7629] ? __pfx_lock_release+0x10/0x10 [ 186.466935][ T7629] ? __pfx___might_resched+0x10/0x10 [ 186.469177][ T7629] ? down_write+0x14e/0x200 [ 186.470838][ T7629] ? __pfx_down_write+0x10/0x10 [ 186.473019][ T7629] security_path_chmod+0x109/0x180 [ 186.475107][ T7629] chmod_common+0x16d/0x460 [ 186.476890][ T7629] ? __pfx_chmod_common+0x10/0x10 [ 186.478686][ T7629] __x64_sys_fchmod+0x121/0x1b0 [ 186.480331][ T7629] do_syscall_64+0xcd/0x250 [ 186.481886][ T7629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.483917][ T7629] RIP: 0033:0x7eff6a57cef9 [ 186.485428][ T7629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.492274][ T7629] RSP: 002b:00007eff6b2bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000005b [ 186.495174][ T7629] RAX: ffffffffffffffda RBX: 00007eff6a735f80 RCX: 00007eff6a57cef9 [ 186.498232][ T7629] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000003 [ 186.501299][ T7629] RBP: 00007eff6b2bf090 R08: 0000000000000000 R09: 0000000000000000 [ 186.504789][ T7629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.507830][ T7629] R13: 0000000000000000 R14: 00007eff6a735f80 R15: 00007ffd0b5d5b08 [ 186.511444][ T7629] [ 186.521660][ T7629] ERROR: Out of memory at tomoyo_realpath_from_path. [ 186.579017][ T7641] netlink: 'syz.0.515': attribute type 9 has an invalid length. [ 186.583251][ T7641] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.515'. [ 186.667901][ T39] audit: type=1400 audit(1725860844.108:458): avc: denied { sqpoll } for pid=7632 comm="syz.0.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 186.941097][ T831] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 187.161328][ T831] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 187.182444][ T831] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 187.196454][ T831] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 187.208127][ T831] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.366271][ T7633] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 187.420751][ T831] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 189.554615][ T57] vhci_hcd: vhci_device speed not set [ 189.710587][ T7678] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 189.742771][ T7678] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 190.146186][ T35] usb 7-1: USB disconnect, device number 5 [ 190.174930][ T7686] FAULT_INJECTION: forcing a failure. [ 190.174930][ T7686] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 190.180839][ T7686] CPU: 0 UID: 0 PID: 7686 Comm: syz.0.525 Not tainted 6.11.0-rc6-syzkaller-00355-g5dadc1be8fc5 #0 [ 190.185306][ T7686] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 190.189979][ T7686] Call Trace: [ 190.191172][ T7686] [ 190.192175][ T7686] dump_stack_lvl+0x16c/0x1f0 [ 190.193977][ T7686] should_fail_ex+0x497/0x5b0 [ 190.196006][ T7686] _copy_from_user+0x30/0xf0 [ 190.197969][ T7686] copy_msghdr_from_user+0x99/0x160 [ 190.200222][ T7686] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 190.203250][ T7686] ? find_held_lock+0x2d/0x110 [ 190.205812][ T7686] ? __pfx___lock_acquire+0x10/0x10 [ 190.208206][ T7686] ___sys_sendmsg+0xff/0x1e0 [ 190.210214][ T7686] ? __pfx____sys_sendmsg+0x10/0x10 [ 190.212632][ T7686] ? ksys_write+0x21c/0x260 [ 190.214751][ T7686] ? __fget_light+0x173/0x210 [ 190.216941][ T7686] __sys_sendmsg+0x117/0x1f0 [ 190.218782][ T7686] ? __pfx___sys_sendmsg+0x10/0x10 [ 190.221119][ T7686] do_syscall_64+0xcd/0x250 [ 190.223519][ T7686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.225685][ T7686] RIP: 0033:0x7fa2f357cef9 [ 190.227734][ T7686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.236223][ T7686] RSP: 002b:00007fa2f43dd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 190.239415][ T7686] RAX: ffffffffffffffda RBX: 00007fa2f3735f80 RCX: 00007fa2f357cef9 [ 190.242510][ T7686] RDX: 0000000000000000 RSI: 0000000020000440 RDI: 0000000000000004 [ 190.245242][ T7686] RBP: 00007fa2f43dd090 R08: 0000000000000000 R09: 0000000000000000 [ 190.249461][ T7686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.252394][ T7686] R13: 0000000000000000 R14: 00007fa2f3735f80 R15: 00007ffeeaace438 [ 190.255636][ T7686] [ 190.259872][ T39] audit: type=1400 audit(1725860847.718:459): avc: denied { create } for pid=7688 comm="syz.2.526" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 190.276329][ T39] audit: type=1400 audit(1725860847.728:460): avc: denied { write } for pid=7688 comm="syz.2.526" name="file0" dev="tmpfs" ino=692 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 190.287504][ T39] audit: type=1400 audit(1725860847.728:461): avc: denied { open } for pid=7688 comm="syz.2.526" path="/128/file0" dev="tmpfs" ino=692 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 190.356430][ T39] audit: type=1400 audit(1725860847.808:462): avc: denied { write } for pid=7688 comm="syz.2.526" name="card0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 190.981043][ T57] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 190.992079][ T7716] FAULT_INJECTION: forcing a failure. [ 190.992079][ T7716] name failslab, interval 1, probability 0, space 0, times 0 [ 190.997130][ T7716] CPU: 2 UID: 0 PID: 7716 Comm: syz.3.534 Not tainted 6.11.0-rc6-syzkaller-00355-g5dadc1be8fc5 #0 [ 191.001506][ T7716] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 191.005688][ T7716] Call Trace: [ 191.007093][ T7716] [ 191.008158][ T7716] dump_stack_lvl+0x16c/0x1f0 [ 191.009810][ T7716] should_fail_ex+0x497/0x5b0 [ 191.011955][ T7716] ? fs_reclaim_acquire+0xae/0x160 [ 191.014126][ T7716] should_failslab+0xc2/0x120 [ 191.016178][ T7716] __kmalloc_noprof+0xcb/0x400 [ 191.018422][ T7716] ? __pfx_lock_acquire+0x10/0x10 [ 191.020703][ T7716] tomoyo_realpath_from_path+0xb9/0x720 [ 191.023136][ T7716] ? tomoyo_profile+0x47/0x60 [ 191.025191][ T7716] tomoyo_path_number_perm+0x245/0x590 [ 191.027380][ T7716] ? tomoyo_path_number_perm+0x232/0x590 [ 191.029581][ T7716] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 191.032145][ T7716] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 191.034724][ T7716] ? __fget_files+0x256/0x400 [ 191.036779][ T7716] security_file_ioctl+0x75/0xc0 [ 191.038771][ T7716] __x64_sys_ioctl+0xbb/0x220 [ 191.040671][ T7716] do_syscall_64+0xcd/0x250 [ 191.042426][ T7716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.044912][ T7716] RIP: 0033:0x7f8e3eb7cef9 [ 191.046991][ T7716] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.055018][ T7716] RSP: 002b:00007f8e3fa32038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 191.058378][ T7716] RAX: ffffffffffffffda RBX: 00007f8e3ed35f80 RCX: 00007f8e3eb7cef9 [ 191.061961][ T7716] RDX: 0000000020000000 RSI: 00000000fffff000 RDI: 0000000000000004 [ 191.065426][ T7716] RBP: 00007f8e3fa32090 R08: 0000000000000000 R09: 0000000000000000 [ 191.069020][ T7716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.072491][ T7716] R13: 0000000000000000 R14: 00007f8e3ed35f80 R15: 00007fff65d7afa8 [ 191.075974][ T7716] [ 191.085828][ T7716] ERROR: Out of memory at tomoyo_realpath_from_path. [ 191.264395][ T39] audit: type=1400 audit(1725860848.718:463): avc: denied { unlink } for pid=5337 comm="syz-executor" name="file0" dev="tmpfs" ino=692 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 191.324023][ T57] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 191.328599][ T57] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 191.333021][ T57] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 191.337039][ T57] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.351822][ T7701] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 191.367087][ T57] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 193.021189][ T831] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 193.226460][ T831] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 193.232898][ T831] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 193.237291][ T831] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 193.244648][ T831] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.256170][ T7745] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 193.273422][ T831] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 193.711148][ T831] usb 6-1: USB disconnect, device number 6 [ 193.791312][ T7753] sp0: Synchronizing with TNC [ 193.969586][ T7757] FAULT_INJECTION: forcing a failure. [ 193.969586][ T7757] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 193.976065][ T7757] CPU: 1 UID: 0 PID: 7757 Comm: syz.2.543 Not tainted 6.11.0-rc6-syzkaller-00355-g5dadc1be8fc5 #0 [ 193.980670][ T7757] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 193.985324][ T7757] Call Trace: [ 193.986790][ T7757] [ 193.988082][ T7757] dump_stack_lvl+0x16c/0x1f0 [ 193.990246][ T7757] should_fail_ex+0x497/0x5b0 [ 193.992317][ T7757] _copy_from_iter+0x2a1/0x1150 [ 193.994474][ T7757] ? __pfx__copy_from_iter+0x10/0x10 [ 193.996739][ T7757] ? hlock_class+0x4e/0x130 [ 193.998744][ T7757] ? __lock_acquire+0xbdd/0x3cb0 [ 194.000923][ T7757] tun_get_user+0x245/0x3c30 [ 194.002948][ T7757] ? __pfx_tun_get_user+0x10/0x10 [ 194.005627][ T7757] ? find_held_lock+0x2d/0x110 [ 194.007748][ T7757] ? __pfx_lock_release+0x10/0x10 [ 194.009998][ T7757] tun_chr_write_iter+0xe8/0x210 [ 194.011919][ T7757] vfs_write+0x6b6/0x1140 [ 194.013488][ T7757] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 194.015563][ T7757] ? __pfx_vfs_write+0x10/0x10 [ 194.017559][ T7757] ? __fget_files+0x256/0x400 [ 194.019329][ T7757] ? __fget_light+0x173/0x210 [ 194.021327][ T7757] ksys_write+0x12f/0x260 [ 194.023483][ T7757] ? __pfx_ksys_write+0x10/0x10 [ 194.025516][ T7757] do_syscall_64+0xcd/0x250 [ 194.027452][ T7757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.030018][ T7757] RIP: 0033:0x7f85f017cef9 [ 194.031978][ T7757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.040120][ T7757] RSP: 002b:00007f85f105a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 194.043552][ T7757] RAX: ffffffffffffffda RBX: 00007f85f0335f80 RCX: 00007f85f017cef9 [ 194.046973][ T7757] RDX: 000000000000fdef RSI: 0000000020000440 RDI: 0000000000000003 [ 194.050438][ T7757] RBP: 00007f85f105a090 R08: 0000000000000000 R09: 0000000000000000 [ 194.053823][ T7757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.057190][ T7757] R13: 0000000000000000 R14: 00007f85f0335f80 R15: 00007ffec7f2e3d8 [ 194.060579][ T7757] [ 194.129545][ T7753] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 194.238069][ T7751] [U] è [ 194.809462][ T1379] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.823474][ T1379] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.258942][ T58] usb 8-1: USB disconnect, device number 8 [ 195.340682][ T39] audit: type=1400 audit(1725860852.788:464): avc: denied { listen } for pid=7780 comm="syz.0.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 195.349445][ T39] audit: type=1400 audit(1725860852.798:465): avc: denied { accept } for pid=7780 comm="syz.0.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 195.535218][ T7786] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(13) [ 195.538076][ T7786] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 195.542049][ T7786] vhci_hcd vhci_hcd.0: Device attached [ 195.608409][ T5400] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 195.625940][ T7798] FAULT_INJECTION: forcing a failure. [ 195.625940][ T7798] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.651040][ T7798] CPU: 3 UID: 0 PID: 7798 Comm: syz.0.553 Not tainted 6.11.0-rc6-syzkaller-00355-g5dadc1be8fc5 #0 [ 195.655662][ T7798] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 195.660340][ T7798] Call Trace: [ 195.661817][ T7798] [ 195.663164][ T7798] dump_stack_lvl+0x16c/0x1f0 [ 195.665243][ T7798] should_fail_ex+0x497/0x5b0 [ 195.667333][ T7798] _copy_from_user+0x30/0xf0 [ 195.669379][ T7798] copy_msghdr_from_user+0x99/0x160 [ 195.671685][ T7798] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 195.674295][ T7798] ? find_held_lock+0x2d/0x110 [ 195.676417][ T7798] ? __pfx___lock_acquire+0x10/0x10 [ 195.678717][ T7798] ___sys_sendmsg+0xff/0x1e0 [ 195.680777][ T7798] ? __pfx____sys_sendmsg+0x10/0x10 [ 195.683128][ T7798] ? ksys_write+0x21c/0x260 [ 195.685154][ T7798] ? __fget_light+0x173/0x210 [ 195.687267][ T7798] __sys_sendmsg+0x117/0x1f0 [ 195.689314][ T7798] ? __pfx___sys_sendmsg+0x10/0x10 [ 195.691599][ T7798] do_syscall_64+0xcd/0x250 [ 195.693638][ T7798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.696233][ T7798] RIP: 0033:0x7fa2f357cef9 [ 195.698210][ T7798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.706545][ T7798] RSP: 002b:00007fa2f43dd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 195.710187][ T7798] RAX: ffffffffffffffda RBX: 00007fa2f3735f80 RCX: 00007fa2f357cef9 [ 195.713642][ T7798] RDX: 0000000000004040 RSI: 0000000020000200 RDI: 0000000000000003 [ 195.717084][ T7798] RBP: 00007fa2f43dd090 R08: 0000000000000000 R09: 0000000000000000 [ 195.720550][ T7798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.723994][ T7798] R13: 0000000000000000 R14: 00007fa2f3735f80 R15: 00007ffeeaace438 [ 195.727491][ T7798] [ 195.728903][ C3] vkms_vblank_simulate: vblank timer overrun [ 196.072845][ T5401] vhci_hcd: vhci_device speed not set [ 196.151124][ T5401] usb 19-1: new full-speed USB device number 2 using vhci_hcd [ 196.180661][ T7791] vhci_hcd: connection reset by peer [ 196.186500][ T13] vhci_hcd: stop threads [ 196.188374][ T13] vhci_hcd: release socket [ 196.194395][ T13] vhci_hcd: disconnect device [ 196.378651][ T5400] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 196.383587][ T5400] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 196.387910][ T5400] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 196.395557][ T5400] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.524260][ T7769] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 196.533159][ T5400] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 196.911139][ T7816] sp0: Synchronizing with TNC [ 197.343261][ T7816] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 197.662737][ T7814] [U] è [ 197.701018][ T1998] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 197.896690][ T1998] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 197.900795][ T1998] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 197.905916][ T1998] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 197.910037][ T1998] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.924081][ T7828] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 197.934209][ T1998] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 197.977889][ T5400] usb 7-1: USB disconnect, device number 6 [ 198.109488][ T7836] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 198.131854][ T7839] netlink: 8 bytes leftover after parsing attributes in process `syz.2.564'. [ 198.141024][ T39] audit: type=1400 audit(1725860855.588:466): avc: denied { mounton } for pid=7837 comm="syz.2.564" path="/132/file0" dev="tmpfs" ino=713 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 199.477355][ T7869] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.851060][ T5404] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 200.031187][ T5404] usb 7-1: Using ep0 maxpacket: 32 [ 200.054930][ T5404] usb 7-1: New USB device found, idVendor=0cde, idProduct=0023, bcdDevice=21.32 [ 200.058979][ T5404] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.074208][ T5404] usb 7-1: Product: syz [ 200.076111][ T5404] usb 7-1: Manufacturer: syz [ 200.078133][ T5404] usb 7-1: SerialNumber: syz [ 200.082625][ T5404] usb 7-1: config 0 descriptor?? [ 200.311337][ T7875] sp0: Synchronizing with TNC [ 200.404197][ T1998] usb 5-1: USB disconnect, device number 6 [ 200.599358][ T7875] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 200.749444][ T7871] [U] è [ 201.213311][ T5404] usb 7-1: USB disconnect, device number 7 [ 201.301117][ T5401] vhci_hcd: vhci_device speed not set [ 201.782004][ T7906] FAULT_INJECTION: forcing a failure. [ 201.782004][ T7906] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 201.786998][ T7906] CPU: 3 UID: 0 PID: 7906 Comm: syz.0.576 Not tainted 6.11.0-rc6-syzkaller-00355-g5dadc1be8fc5 #0 [ 201.791287][ T7906] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 201.795752][ T7906] Call Trace: [ 201.797024][ T7906] [ 201.798242][ T7906] dump_stack_lvl+0x16c/0x1f0 [ 201.800241][ T7906] should_fail_ex+0x497/0x5b0 [ 201.801930][ T7906] _copy_from_user+0x30/0xf0 [ 201.803512][ T7906] move_addr_to_kernel+0x68/0x160 [ 201.805475][ T7906] __sys_connect+0xbd/0x170 [ 201.807434][ T7906] ? __pfx___sys_connect+0x10/0x10 [ 201.809558][ T7906] ? __pfx_ksys_write+0x10/0x10 [ 201.811222][ T7906] __x64_sys_connect+0x72/0xb0 [ 201.813429][ T7906] ? lockdep_hardirqs_on+0x7c/0x110 [ 201.815333][ T7906] do_syscall_64+0xcd/0x250 [ 201.817102][ T7906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.819978][ T7906] RIP: 0033:0x7fa2f357cef9 [ 201.822080][ T7906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.829600][ T7906] RSP: 002b:00007fa2f43dd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 201.833066][ T7906] RAX: ffffffffffffffda RBX: 00007fa2f3735f80 RCX: 00007fa2f357cef9 [ 201.836447][ T7906] RDX: 0000000000000010 RSI: 0000000020000140 RDI: 0000000000000004 [ 201.839783][ T7906] RBP: 00007fa2f43dd090 R08: 0000000000000000 R09: 0000000000000000 [ 201.843142][ T7906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.846625][ T7906] R13: 0000000000000000 R14: 00007fa2f3735f80 R15: 00007ffeeaace438 [ 201.849928][ T7906] [ 201.851280][ C3] vkms_vblank_simulate: vblank timer overrun [ 202.573102][ T39] audit: type=1400 audit(1725860860.018:467): avc: denied { ioctl } for pid=7920 comm="syz.2.582" path="socket:[19513]" dev="sockfs" ino=19513 ioctlcmd=0x8b22 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 202.686520][ T7918] /dev/sr0: Can't open blockdev [ 202.833372][ T7919] /dev/sr0: Can't open blockdev [ 202.871150][ T5400] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 203.029354][ T39] audit: type=1400 audit(1725860860.478:468): avc: denied { write } for pid=7925 comm="syz.3.583" name="ip6_mr_cache" dev="proc" ino=4026533175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 203.070410][ T5400] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 203.079308][ T5400] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 203.099620][ T5400] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 203.103945][ T5400] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 203.109135][ T5400] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 203.138754][ T5400] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.152538][ T5400] usb 7-1: config 0 descriptor?? [ 203.732614][ T5400] usbhid 7-1:0.0: can't add hid device: -71 [ 203.751250][ T5400] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 203.773413][ T5400] usb 7-1: USB disconnect, device number 8 [ 206.576540][ T39] audit: type=1400 audit(1725860864.028:469): avc: denied { accept } for pid=7994 comm="syz.1.598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 206.600993][ T5381] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 206.807081][ T5381] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 206.821205][ T5381] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 206.825519][ T5381] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 206.835053][ T5381] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.862135][ T7993] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 206.871754][ T5381] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 208.034592][ T39] audit: type=1400 audit(1725860865.488:470): avc: denied { read } for pid=8012 comm="syz.3.604" name="loop-control" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 208.049969][ T39] audit: type=1400 audit(1725860865.488:471): avc: denied { open } for pid=8012 comm="syz.3.604" path="/dev/loop-control" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 208.431795][ T5373] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 208.627042][ T5373] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 208.631443][ T5373] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 208.637377][ T5373] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 208.641896][ T5373] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.661304][ T8021] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 208.667830][ T5373] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 209.146399][ T5373] usb 5-1: USB disconnect, device number 7 [ 210.218550][ T39] audit: type=1400 audit(1725860867.668:472): avc: denied { read } for pid=8045 comm="syz.1.612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 211.155192][ T8] usb 7-1: USB disconnect, device number 9 [ 211.980993][ T5401] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 212.217856][ T5401] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 212.221821][ T5401] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 212.240763][ T5401] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 212.244536][ T5401] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.267851][ T8071] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 212.276898][ T5401] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 214.502037][ T8] usb 7-1: USB disconnect, device number 10 [ 214.626097][ T8108] FAULT_INJECTION: forcing a failure. [ 214.626097][ T8108] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 214.635332][ T8108] CPU: 2 UID: 0 PID: 8108 Comm: syz.2.624 Not tainted 6.11.0-rc6-syzkaller-00355-g5dadc1be8fc5 #0 [ 214.640427][ T8108] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 214.644617][ T8108] Call Trace: [ 214.645928][ T8108] [ 214.647225][ T8108] dump_stack_lvl+0x16c/0x1f0 [ 214.649335][ T8108] should_fail_ex+0x497/0x5b0 [ 214.651245][ T8108] _copy_from_user+0x30/0xf0 [ 214.652960][ T8108] copy_msghdr_from_user+0x99/0x160 [ 214.654927][ T8108] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 214.657290][ T8108] ? find_held_lock+0x2d/0x110 [ 214.659213][ T8108] ? __pfx___lock_acquire+0x10/0x10 [ 214.661348][ T8108] ___sys_sendmsg+0xff/0x1e0 [ 214.663379][ T8108] ? __pfx____sys_sendmsg+0x10/0x10 [ 214.665613][ T8108] ? ksys_write+0x21c/0x260 [ 214.667473][ T8108] ? __fget_light+0x173/0x210 [ 214.669267][ T8108] __sys_sendmsg+0x117/0x1f0 [ 214.670937][ T8108] ? __pfx___sys_sendmsg+0x10/0x10 [ 214.673145][ T8108] do_syscall_64+0xcd/0x250 [ 214.675127][ T8108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.677643][ T8108] RIP: 0033:0x7f85f017cef9 [ 214.679570][ T8108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.687788][ T8108] RSP: 002b:00007f85f105a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 214.691414][ T8108] RAX: ffffffffffffffda RBX: 00007f85f0335f80 RCX: 00007f85f017cef9 [ 214.694764][ T8108] RDX: 0000000000000000 RSI: 0000000020000440 RDI: 0000000000000004 [ 214.697698][ T8108] RBP: 00007f85f105a090 R08: 0000000000000000 R09: 0000000000000000 [ 214.700482][ T8108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.703886][ T8108] R13: 0000000000000000 R14: 00007f85f0335f80 R15: 00007ffec7f2e3d8 [ 214.707271][ T8108] [ 216.041896][ T58] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 216.047509][ T39] audit: type=1400 audit(1725860873.498:473): avc: denied { bind } for pid=8133 comm="syz.1.633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 216.073424][ T39] audit: type=1400 audit(1725860873.528:474): avc: denied { execute } for pid=8133 comm="syz.1.633" path="/dev/audio1" dev="devtmpfs" ino=1133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 216.223788][ T58] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 216.236451][ T58] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 216.259119][ T58] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 216.271467][ T58] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.283859][ T8126] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 216.296200][ T58] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 216.855645][ T39] audit: type=1400 audit(1725860874.308:475): avc: denied { ioctl } for pid=8125 comm="syz.3.631" path="socket:[18123]" dev="sockfs" ino=18123 ioctlcmd=0x8b24 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 217.131510][ T5400] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 217.324915][ T5400] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 217.339769][ T5400] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 217.361450][ T5400] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 217.365790][ T5400] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.421285][ T8149] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 217.442782][ T5400] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 218.081424][ T5400] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 218.282896][ T5400] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 218.289604][ T5400] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 218.293894][ T5400] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 218.297379][ T5400] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.318960][ T8154] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 218.361752][ T5400] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 218.770389][ T5400] usb 8-1: USB disconnect, device number 9 [ 219.091064][ T8] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 219.306775][ T8] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 219.311662][ T8] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 219.315112][ T8] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 219.318856][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.325369][ T8163] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 219.331646][ T8] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 219.421336][ T5381] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 219.645884][ T5381] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 219.651427][ T5381] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 219.656096][ T5381] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 219.660209][ T5381] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.682132][ T8171] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 219.694494][ T5381] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 219.754732][ T5373] usb 5-1: USB disconnect, device number 8 [ 219.883348][ T39] audit: type=1400 audit(1725860877.328:476): avc: denied { write } for pid=8173 comm="syz.0.640" name="nvram" dev="devtmpfs" ino=633 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 219.912993][ T39] audit: type=1400 audit(1725860877.328:477): avc: denied { open } for pid=8173 comm="syz.0.640" path="/dev/nvram" dev="devtmpfs" ino=633 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 219.926106][ T39] audit: type=1400 audit(1725860877.338:478): avc: denied { bind } for pid=8173 comm="syz.0.640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 219.934641][ T39] audit: type=1400 audit(1725860877.338:479): avc: denied { node_bind } for pid=8173 comm="syz.0.640" saddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 220.211701][ T5373] usb 6-1: USB disconnect, device number 7 [ 221.624792][ T8202] FAULT_INJECTION: forcing a failure. [ 221.624792][ T8202] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 221.630501][ T8202] CPU: 2 UID: 0 PID: 8202 Comm: syz.0.647 Not tainted 6.11.0-rc6-syzkaller-00355-g5dadc1be8fc5 #0 [ 221.634865][ T8202] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 221.639410][ T8202] Call Trace: [ 221.640841][ T8202] [ 221.642196][ T8202] dump_stack_lvl+0x16c/0x1f0 [ 221.644346][ T8202] should_fail_ex+0x497/0x5b0 [ 221.646474][ T8202] _copy_from_user+0x30/0xf0 [ 221.648576][ T8202] copy_msghdr_from_user+0x99/0x160 [ 221.650923][ T8202] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 221.653542][ T8202] ? find_held_lock+0x2d/0x110 [ 221.655720][ T8202] ? __pfx___lock_acquire+0x10/0x10 [ 221.658099][ T8202] ___sys_sendmsg+0xff/0x1e0 [ 221.660067][ T8202] ? __pfx____sys_sendmsg+0x10/0x10 [ 221.661924][ T8202] ? ksys_write+0x21c/0x260 [ 221.663855][ T8202] ? __fget_light+0x173/0x210 [ 221.665853][ T8202] __sys_sendmsg+0x117/0x1f0 [ 221.667832][ T8202] ? __pfx___sys_sendmsg+0x10/0x10 [ 221.669891][ T8202] do_syscall_64+0xcd/0x250 [ 221.671869][ T8202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.674405][ T8202] RIP: 0033:0x7fa2f357cef9 [ 221.676294][ T8202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.684421][ T8202] RSP: 002b:00007fa2f43dd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 221.687917][ T8202] RAX: ffffffffffffffda RBX: 00007fa2f3735f80 RCX: 00007fa2f357cef9 [ 221.691279][ T8202] RDX: 0000000020000000 RSI: 00000000200004c0 RDI: 0000000000000003 [ 221.694678][ T8202] RBP: 00007fa2f43dd090 R08: 0000000000000000 R09: 0000000000000000 [ 221.698051][ T8202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.701106][ T8202] R13: 0000000000000000 R14: 00007fa2f3735f80 R15: 00007ffeeaace438 [ 221.704168][ T8202] [ 221.752444][ T5401] usb 7-1: USB disconnect, device number 11 [ 221.937130][ T5373] usb 8-1: USB disconnect, device number 10 [ 222.431467][ T5401] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 222.511221][ T8] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 222.656441][ T5401] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 222.663295][ T5401] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 222.671006][ T5401] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 222.675536][ T5401] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.693343][ T8217] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 222.702917][ T5401] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 222.728839][ T8] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 222.734006][ T8] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 222.737557][ T8] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 222.743558][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.761898][ T8213] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 222.785037][ T8] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 223.500921][ C1] hrtimer: interrupt took 77164 ns [ 224.584206][ T5404] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 224.765817][ T5404] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 224.771857][ T5404] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 224.775920][ T5404] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 224.779675][ T5404] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.787434][ T8248] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 224.793798][ T5404] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 225.483948][ T5404] usb 5-1: USB disconnect, device number 9 [ 225.691540][ T5401] usb 7-1: USB disconnect, device number 12 [ 226.521419][ T8274] FAULT_INJECTION: forcing a failure. [ 226.521419][ T8274] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 226.527953][ T8274] CPU: 1 UID: 0 PID: 8274 Comm: syz.3.664 Not tainted 6.11.0-rc6-syzkaller-00355-g5dadc1be8fc5 #0 [ 226.532875][ T8274] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 226.537411][ T8274] Call Trace: [ 226.538746][ T8274] [ 226.539927][ T8274] dump_stack_lvl+0x16c/0x1f0 [ 226.541898][ T8274] should_fail_ex+0x497/0x5b0 [ 226.543894][ T8274] _copy_to_user+0x30/0xc0 [ 226.545872][ T8274] simple_read_from_buffer+0xd0/0x160 [ 226.548314][ T8274] proc_fail_nth_read+0x19e/0x280 [ 226.550582][ T8274] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 226.553140][ T8274] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 226.555602][ T8274] vfs_read+0x1d4/0xbd0 [ 226.557467][ T8274] ? __fdget_pos+0xeb/0x180 [ 226.559498][ T8274] ? __pfx_vfs_read+0x10/0x10 [ 226.561550][ T8274] ? __pfx___mutex_lock+0x10/0x10 [ 226.563800][ T8274] ? __fget_files+0x256/0x400 [ 226.565873][ T8274] ksys_read+0x12f/0x260 [ 226.567700][ T8274] ? __pfx_ksys_read+0x10/0x10 [ 226.569617][ T8274] do_syscall_64+0xcd/0x250 [ 226.571535][ T8274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.574129][ T8274] RIP: 0033:0x7f8e3eb7b93c [ 226.576082][ T8274] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 226.584125][ T8274] RSP: 002b:00007f8e3fa32030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 226.587418][ T8274] RAX: ffffffffffffffda RBX: 00007f8e3ed35f80 RCX: 00007f8e3eb7b93c [ 226.590739][ T8274] RDX: 000000000000000f RSI: 00007f8e3fa320a0 RDI: 0000000000000004 [ 226.594108][ T8274] RBP: 00007f8e3fa32090 R08: 0000000000000000 R09: 0000000000000000 [ 226.596897][ T8274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.600989][ T8274] R13: 0000000000000000 R14: 00007f8e3ed35f80 R15: 00007fff65d7afa8 [ 226.604791][ T8274] [ 227.613200][ T5401] usb 6-1: USB disconnect, device number 8 [ 227.764988][ T39] audit: type=1400 audit(1725860885.218:480): avc: denied { setopt } for pid=8276 comm="syz.3.666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 227.773281][ T39] audit: type=1400 audit(1725860885.218:481): avc: denied { getopt } for pid=8276 comm="syz.3.666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 227.779735][ T8278] netlink: 12 bytes leftover after parsing attributes in process `syz.3.666'. [ 227.891216][ T1998] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 228.102354][ T1998] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 228.206828][ T1998] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 228.213423][ T1998] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 228.225283][ T1998] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.237489][ T8299] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 228.248853][ T1998] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 228.973824][ T8] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 229.172877][ T8] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 229.177904][ T8] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 229.182492][ T8] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 229.186381][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.198541][ T8318] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 229.210791][ T8] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 229.295128][ T8325] FAULT_INJECTION: forcing a failure. [ 229.295128][ T8325] name failslab, interval 1, probability 0, space 0, times 0 [ 229.299698][ T8325] CPU: 2 UID: 0 PID: 8325 Comm: syz.3.675 Not tainted 6.11.0-rc6-syzkaller-00355-g5dadc1be8fc5 #0 [ 229.304282][ T8325] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 229.308132][ T8325] Call Trace: [ 229.309299][ T8325] [ 229.310312][ T8325] dump_stack_lvl+0x16c/0x1f0 [ 229.312281][ T8325] should_fail_ex+0x497/0x5b0 [ 229.314302][ T8325] ? fs_reclaim_acquire+0xae/0x160 [ 229.316470][ T8325] should_failslab+0xc2/0x120 [ 229.318087][ T8325] __kmalloc_noprof+0xcb/0x400 [ 229.320129][ T8325] ? __pfx_lock_acquire+0x10/0x10 [ 229.322263][ T8325] tomoyo_realpath_from_path+0xb9/0x720 [ 229.324595][ T8325] ? tomoyo_profile+0x47/0x60 [ 229.326603][ T8325] tomoyo_path_number_perm+0x245/0x590 [ 229.328913][ T8325] ? tomoyo_path_number_perm+0x232/0x590 [ 229.331289][ T8325] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 229.333525][ T8325] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 229.336055][ T8325] ? __fget_files+0x256/0x400 [ 229.338022][ T8325] security_file_ioctl+0x75/0xc0 [ 229.340125][ T8325] __x64_sys_ioctl+0xbb/0x220 [ 229.342150][ T8325] do_syscall_64+0xcd/0x250 [ 229.344105][ T8325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.346589][ T8325] RIP: 0033:0x7f8e3eb7cef9 [ 229.348467][ T8325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.356496][ T8325] RSP: 002b:00007f8e3fa32038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 229.359995][ T8325] RAX: ffffffffffffffda RBX: 00007f8e3ed35f80 RCX: 00007f8e3eb7cef9 [ 229.362939][ T8325] RDX: 0000000020000000 RSI: 00000000c008561c RDI: 0000000000000003 [ 229.366306][ T8325] RBP: 00007f8e3fa32090 R08: 0000000000000000 R09: 0000000000000000 [ 229.369791][ T8325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.372988][ T8325] R13: 0000000000000000 R14: 00007f8e3ed35f80 R15: 00007fff65d7afa8 [ 229.376126][ T8325] [ 229.382119][ T8325] ERROR: Out of memory at tomoyo_realpath_from_path. [ 230.886119][ T8340] FAULT_INJECTION: forcing a failure. [ 230.886119][ T8340] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 230.891107][ T8340] CPU: 2 UID: 0 PID: 8340 Comm: syz.3.680 Not tainted 6.11.0-rc6-syzkaller-00355-g5dadc1be8fc5 #0 [ 230.895002][ T8340] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 230.898823][ T8340] Call Trace: [ 230.899964][ T8340] [ 230.900983][ T8340] dump_stack_lvl+0x16c/0x1f0 [ 230.902889][ T8340] should_fail_ex+0x497/0x5b0 [ 230.904977][ T8340] _copy_from_user+0x30/0xf0 [ 230.906985][ T8340] copy_msghdr_from_user+0x99/0x160 [ 230.909088][ T8340] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 230.911572][ T8340] ? find_held_lock+0x2d/0x110 [ 230.913610][ T8340] ? __pfx___lock_acquire+0x10/0x10 [ 230.915432][ T8340] ___sys_sendmsg+0xff/0x1e0 [ 230.917092][ T8340] ? __pfx____sys_sendmsg+0x10/0x10 [ 230.919242][ T8340] ? ksys_write+0x21c/0x260 [ 230.921210][ T8340] ? __fget_light+0x173/0x210 [ 230.922884][ T8340] __sys_sendmsg+0x117/0x1f0 [ 230.924852][ T8340] ? __pfx___sys_sendmsg+0x10/0x10 [ 230.927047][ T8340] do_syscall_64+0xcd/0x250 [ 230.928971][ T8340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.931541][ T8340] RIP: 0033:0x7f8e3eb7cef9 [ 230.933531][ T8340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.941642][ T8340] RSP: 002b:00007f8e3fa32038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 230.945239][ T8340] RAX: ffffffffffffffda RBX: 00007f8e3ed35f80 RCX: 00007f8e3eb7cef9 [ 230.948452][ T8340] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 230.951841][ T8340] RBP: 00007f8e3fa32090 R08: 0000000000000000 R09: 0000000000000000 [ 230.955018][ T8340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.958374][ T8340] R13: 0000000000000000 R14: 00007f8e3ed35f80 R15: 00007fff65d7afa8 [ 230.961849][ T8340] [ 230.975350][ T1998] usb 5-1: USB disconnect, device number 10 [ 231.909516][ T1998] usb 7-1: USB disconnect, device number 13 [ 233.031131][ T8] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 233.181025][ T8] usb 5-1: device descriptor read/64, error -71 [ 233.321134][ T10] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 233.412955][ T8392] FAULT_INJECTION: forcing a failure. [ 233.412955][ T8392] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 233.418806][ T8392] CPU: 2 UID: 0 PID: 8392 Comm: syz.2.691 Not tainted 6.11.0-rc6-syzkaller-00355-g5dadc1be8fc5 #0 [ 233.423438][ T8392] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 233.427868][ T8392] Call Trace: [ 233.429333][ T8392] [ 233.430643][ T8392] dump_stack_lvl+0x16c/0x1f0 [ 233.432741][ T8392] should_fail_ex+0x497/0x5b0 [ 233.434849][ T8392] _copy_from_user+0x30/0xf0 [ 233.436917][ T8392] __sys_bpf+0x21c/0x4a00 [ 233.438854][ T8392] ? ksys_write+0x21c/0x260 [ 233.440785][ T8392] ? reacquire_held_locks+0x4b0/0x4c0 [ 233.443030][ T8392] ? __pfx___sys_bpf+0x10/0x10 [ 233.445129][ T8392] ? vfs_write+0x14d/0x1140 [ 233.447168][ T8392] ? __mutex_unlock_slowpath+0x164/0x650 [ 233.449680][ T8392] ? fput+0x32/0x390 [ 233.451425][ T8392] ? ksys_write+0x1ab/0x260 [ 233.453447][ T8392] ? __pfx_ksys_write+0x10/0x10 [ 233.455601][ T8392] __x64_sys_bpf+0x78/0xc0 [ 233.457543][ T8392] ? lockdep_hardirqs_on+0x7c/0x110 [ 233.459591][ T8392] do_syscall_64+0xcd/0x250 [ 233.461410][ T8392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.463749][ T8392] RIP: 0033:0x7f85f017cef9 [ 233.465534][ T8392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.473808][ T8392] RSP: 002b:00007f85f105a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 233.477067][ T8392] RAX: ffffffffffffffda RBX: 00007f85f0335f80 RCX: 00007f85f017cef9 [ 233.480446][ T8392] RDX: 0000000000000050 RSI: 0000000020000dc0 RDI: 000000000000000a [ 233.483935][ T8392] RBP: 00007f85f105a090 R08: 0000000000000000 R09: 0000000000000000 [ 233.487353][ T8392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.490851][ T8392] R13: 0000000000000000 R14: 00007f85f0335f80 R15: 00007ffec7f2e3d8 [ 233.494362][ T8392] [ 233.501341][ T8] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 233.544573][ T10] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 233.549200][ T10] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 233.572818][ T10] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 233.576573][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.590531][ T8387] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 233.613260][ T10] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 233.670768][ T8379] netlink: 12 bytes leftover after parsing attributes in process `syz.1.688'. [ 233.670987][ T8] usb 5-1: device descriptor read/64, error -71 [ 233.821840][ T8] usb usb5-port1: attempt power cycle [ 234.251014][ T8] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 234.281839][ T8] usb 5-1: device descriptor read/8, error -71 [ 234.561721][ T8] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 234.603960][ T8] usb 5-1: device descriptor read/8, error -71 [ 234.731355][ T8] usb usb5-port1: unable to enumerate USB device [ 235.782941][ T8] usb 8-1: USB disconnect, device number 11 [ 236.201029][ T39] audit: type=1400 audit(1725860893.648:482): avc: denied { name_bind } for pid=8431 comm="syz.3.703" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 237.131181][ T39] audit: type=1400 audit(1725860894.568:483): avc: denied { write } for pid=8458 comm="syz.3.707" name="ppp" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 237.133179][ T8459] FAULT_INJECTION: forcing a failure. [ 237.133179][ T8459] name failslab, interval 1, probability 0, space 0, times 0 [ 237.140878][ T39] audit: type=1400 audit(1725860894.588:484): avc: denied { bind } for pid=8458 comm="syz.3.707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 237.161109][ T8459] CPU: 0 UID: 0 PID: 8459 Comm: syz.3.707 Not tainted 6.11.0-rc6-syzkaller-00355-g5dadc1be8fc5 #0 [ 237.165631][ T8459] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 237.170222][ T8459] Call Trace: [ 237.171702][ T8459] [ 237.172989][ T8459] dump_stack_lvl+0x16c/0x1f0 [ 237.175084][ T8459] should_fail_ex+0x497/0x5b0 [ 237.177171][ T8459] ? fs_reclaim_acquire+0xae/0x160 [ 237.179372][ T8459] should_failslab+0xc2/0x120 [ 237.181434][ T8459] kmem_cache_alloc_node_noprof+0x71/0x310 [ 237.184057][ T8459] ? __alloc_skb+0x2b1/0x380 [ 237.186138][ T8459] ? __pfx___might_resched+0x10/0x10 [ 237.188437][ T8459] __alloc_skb+0x2b1/0x380 [ 237.190376][ T8459] ? __pfx___alloc_skb+0x10/0x10 [ 237.192420][ T8459] ? inode_security+0x101/0x130 [ 237.194543][ T8459] ? avc_policy_seqno+0x9/0x20 [ 237.196648][ T8459] ppp_write+0xc3/0x3e0 [ 237.198482][ T8459] ? rw_verify_area+0xd0/0x6c0 [ 237.200593][ T8459] ? __pfx_ppp_write+0x10/0x10 [ 237.202726][ T8459] vfs_writev+0x6ec/0xde0 [ 237.204629][ T8459] ? find_held_lock+0x2d/0x110 [ 237.206751][ T8459] ? __pfx_vfs_writev+0x10/0x10 [ 237.208871][ T8459] ? find_held_lock+0x2d/0x110 [ 237.211002][ T8459] ? __pfx_lock_release+0x10/0x10 [ 237.213162][ T8459] ? __x64_sys_pwritev+0x22b/0x310 [ 237.215397][ T8459] __x64_sys_pwritev+0x22b/0x310 [ 237.217573][ T8459] ? __pfx___x64_sys_pwritev+0x10/0x10 [ 237.219566][ T8459] do_syscall_64+0xcd/0x250 [ 237.221483][ T8459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.223884][ T8459] RIP: 0033:0x7f8e3eb7cef9 [ 237.225760][ T8459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.233112][ T8459] RSP: 002b:00007f8e3fa32038 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 237.235922][ T8459] RAX: ffffffffffffffda RBX: 00007f8e3ed35f80 RCX: 00007f8e3eb7cef9 [ 237.238760][ T8459] RDX: 0000000000000001 RSI: 0000000020000180 RDI: 0000000000000004 [ 237.242143][ T8459] RBP: 00007f8e3fa32090 R08: 0000000000200000 R09: 0000000000000000 [ 237.245636][ T8459] R10: 00000000fffffffe R11: 0000000000000246 R12: 0000000000000001 [ 237.249124][ T8459] R13: 0000000000000000 R14: 00007f8e3ed35f80 R15: 00007fff65d7afa8 [ 237.252605][ T8459] [ 237.253821][ C0] vkms_vblank_simulate: vblank timer overrun [ 239.511153][ T1998] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 239.726196][ T1998] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 239.730866][ T1998] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 239.749096][ T1998] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 239.753727][ T1998] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.782592][ T8487] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 239.799347][ T1998] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 240.091277][ T10] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 240.463419][ T10] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 240.468332][ T10] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 240.475016][ T10] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 240.479044][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.500591][ T8510] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 240.513051][ T10] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 240.841054][ T5381] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 241.041548][ T5381] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 241.046627][ T5381] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 241.050812][ T5381] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 241.055499][ T5381] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.062549][ T8517] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 241.069516][ T5381] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 241.651507][ T10] usb 7-1: USB disconnect, device number 14 [ 242.271513][ T5373] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 242.347398][ T1998] usb 8-1: USB disconnect, device number 12 [ 242.428255][ T8529] FAULT_INJECTION: forcing a failure. [ 242.428255][ T8529] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 242.435214][ T8529] CPU: 0 UID: 0 PID: 8529 Comm: syz.3.725 Not tainted 6.11.0-rc6-syzkaller-00355-g5dadc1be8fc5 #0 [ 242.439819][ T8529] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 242.444539][ T8529] Call Trace: [ 242.446062][ T8529] [ 242.447350][ T8529] dump_stack_lvl+0x16c/0x1f0 [ 242.449433][ T8529] should_fail_ex+0x497/0x5b0 [ 242.451500][ T8529] _copy_from_user+0x30/0xf0 [ 242.453598][ T8529] copy_msghdr_from_user+0x99/0x160 [ 242.455300][ T5373] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 242.455974][ T8529] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 242.460697][ T5373] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 242.463235][ T8529] ? find_held_lock+0x2d/0x110 [ 242.463260][ T8529] ? __pfx___lock_acquire+0x10/0x10 [ 242.463287][ T8529] ___sys_sendmsg+0xff/0x1e0 [ 242.463316][ T8529] ? __pfx____sys_sendmsg+0x10/0x10 [ 242.468251][ T5373] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 242.469735][ T8529] ? ksys_write+0x21c/0x260 [ 242.472124][ T5373] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.473989][ T8529] ? __fget_light+0x173/0x210 [ 242.483702][ T8524] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 242.484667][ T8529] __sys_sendmsg+0x117/0x1f0 [ 242.491680][ T8529] ? __pfx___sys_sendmsg+0x10/0x10 [ 242.493904][ T8529] do_syscall_64+0xcd/0x250 [ 242.495918][ T8529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.498004][ T5373] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 242.498489][ T8529] RIP: 0033:0x7f8e3eb7cef9 [ 242.503422][ T8529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.511554][ T8529] RSP: 002b:00007f8e3fa32038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 242.514836][ T8529] RAX: ffffffffffffffda RBX: 00007f8e3ed35f80 RCX: 00007f8e3eb7cef9 [ 242.517956][ T8529] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 242.520994][ T8529] RBP: 00007f8e3fa32090 R08: 0000000000000000 R09: 0000000000000000 [ 242.524238][ T8529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.527207][ T8529] R13: 0000000000000000 R14: 00007f8e3ed35f80 R15: 00007fff65d7afa8 [ 242.530583][ T8529] [ 242.531850][ C0] vkms_vblank_simulate: vblank timer overrun [ 243.366249][ T10] usb 6-1: USB disconnect, device number 9 [ 244.281074][ T1998] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 244.421160][ T5373] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 244.492835][ T1998] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 244.497564][ T1998] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 244.502066][ T1998] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 244.519006][ T1998] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.551198][ T8565] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 244.559683][ T1998] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 244.637630][ T5373] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 244.649551][ T5373] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 244.653866][ T5373] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 244.657677][ T5373] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.685546][ T8564] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 244.692173][ T5373] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 244.972144][ T8] usb 7-1: USB disconnect, device number 15 [ 246.542145][ T8] usb 5-1: USB disconnect, device number 15 [ 246.693105][ T39] audit: type=1400 audit(1725860904.148:485): avc: denied { listen } for pid=8590 comm="syz.0.741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 246.720018][ T1998] usb 6-1: USB disconnect, device number 10 [ 247.313071][ T1998] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 247.513310][ T1998] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 247.517827][ T1998] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 247.522023][ T1998] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 247.526097][ T1998] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.533875][ T8613] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 247.546074][ T1998] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 249.161051][ T1998] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 249.350223][ T1998] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 249.355498][ T1998] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 249.364098][ T1998] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 249.378533][ T1998] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.402713][ T8640] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 249.417178][ T1998] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 249.521126][ T5373] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 249.752561][ T5373] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 249.765223][ T5373] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 249.774828][ T5373] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 249.780635][ T5373] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.793707][ T8644] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 249.798846][ T5373] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 249.963937][ T1998] usb 5-1: USB disconnect, device number 16 [ 250.043375][ T39] audit: type=1400 audit(1725860907.498:486): avc: denied { create } for pid=8656 comm="syz.0.758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 251.381980][ T5373] usb 7-1: USB disconnect, device number 16 [ 252.140159][ T1998] usb 8-1: USB disconnect, device number 13 [ 252.200792][ T39] audit: type=1400 audit(1725860909.648:487): avc: denied { getopt } for pid=8691 comm="syz.3.766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 252.301680][ T58] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 252.529004][ T58] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 252.541027][ T58] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 252.545003][ T58] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 252.548738][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.571909][ T8684] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 252.602262][ T58] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 252.820769][ T8699] can: request_module (can-proto-4) failed. [ 254.735851][ T58] usb 5-1: USB disconnect, device number 17 [ 255.161750][ T10] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 255.457497][ T10] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 255.469349][ T10] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 255.499976][ T10] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 255.511488][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.541807][ T8721] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 255.559923][ T10] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 255.906496][ T39] audit: type=1400 audit(1725860913.358:488): avc: denied { getattr } for pid=8734 comm="syz.3.780" name="/" dev="9p" ino=36575627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 255.910797][ T8735] overlayfs: failed to resolve './file1': -2 [ 256.185471][ T1379] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.188355][ T1379] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.433125][ T57] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 256.648735][ T57] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 256.654377][ T57] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 256.658520][ T57] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 256.662330][ T57] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.713474][ T8739] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 256.734232][ T57] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 257.790024][ T10] usb 7-1: USB disconnect, device number 17 [ 257.989789][ T8756] FAULT_INJECTION: forcing a failure. [ 257.989789][ T8756] name failslab, interval 1, probability 0, space 0, times 0 [ 257.996006][ T8756] CPU: 1 UID: 0 PID: 8756 Comm: syz.3.784 Not tainted 6.11.0-rc6-syzkaller-00355-g5dadc1be8fc5 #0 [ 258.000710][ T8756] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 258.005244][ T8756] Call Trace: [ 258.006738][ T8756] [ 258.008056][ T8756] dump_stack_lvl+0x16c/0x1f0 [ 258.009905][ T8756] should_fail_ex+0x497/0x5b0 [ 258.011780][ T8756] ? fs_reclaim_acquire+0xae/0x160 [ 258.014268][ T8756] should_failslab+0xc2/0x120 [ 258.016300][ T8756] __kmalloc_noprof+0xcb/0x400 [ 258.018735][ T8756] ? __pfx_lock_acquire+0x10/0x10 [ 258.021009][ T8756] tomoyo_realpath_from_path+0xb9/0x720 [ 258.023711][ T8756] ? tomoyo_profile+0x47/0x60 [ 258.025858][ T8756] tomoyo_path_number_perm+0x245/0x590 [ 258.028309][ T8756] ? tomoyo_path_number_perm+0x232/0x590 [ 258.030909][ T8756] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 258.033661][ T8756] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 258.036377][ T8756] ? __fget_files+0x256/0x400 [ 258.038519][ T8756] security_file_ioctl+0x75/0xc0 [ 258.040828][ T8756] __x64_sys_ioctl+0xbb/0x220 [ 258.043045][ T8756] do_syscall_64+0xcd/0x250 [ 258.045115][ T8756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.047628][ T8756] RIP: 0033:0x7f8e3eb7cef9 [ 258.049645][ T8756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.057645][ T8756] RSP: 002b:00007f8e3fa32038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 258.060887][ T8756] RAX: ffffffffffffffda RBX: 00007f8e3ed35f80 RCX: 00007f8e3eb7cef9 [ 258.064059][ T8756] RDX: 0000000020000300 RSI: 000000004048ae9b RDI: 0000000000000005 [ 258.067192][ T8756] RBP: 00007f8e3fa32090 R08: 0000000000000000 R09: 0000000000000000 [ 258.070587][ T8756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.073846][ T8756] R13: 0000000000000000 R14: 00007f8e3ed35f80 R15: 00007fff65d7afa8 [ 258.077183][ T8756] [ 258.079209][ T8756] ERROR: Out of memory at tomoyo_realpath_from_path. [ 259.021159][ T57] usb 6-1: USB disconnect, device number 11 [ 259.471293][ T10] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 259.591091][ T8800] FAULT_INJECTION: forcing a failure. [ 259.591091][ T8800] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 259.595632][ T8800] CPU: 2 UID: 0 PID: 8800 Comm: syz.3.796 Not tainted 6.11.0-rc6-syzkaller-00355-g5dadc1be8fc5 #0 [ 259.599959][ T8800] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 259.604359][ T8800] Call Trace: [ 259.605673][ T8800] [ 259.606896][ T8800] dump_stack_lvl+0x16c/0x1f0 [ 259.608779][ T8800] should_fail_ex+0x497/0x5b0 [ 259.610724][ T8800] _copy_from_user+0x30/0xf0 [ 259.612627][ T8800] io_ringfd_register+0x128/0x4a0 [ 259.614638][ T8800] ? __pfx_io_ringfd_register+0x10/0x10 [ 259.616825][ T8800] __do_sys_io_uring_register+0xc19/0x2240 [ 259.618803][ T8800] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 259.620905][ T8800] ? ksys_write+0x1ab/0x260 [ 259.622543][ T8800] ? __pfx_ksys_write+0x10/0x10 [ 259.624299][ T8800] do_syscall_64+0xcd/0x250 [ 259.625884][ T8800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.628354][ T8800] RIP: 0033:0x7f8e3eb7cef9 [ 259.630240][ T8800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 259.637449][ T8800] RSP: 002b:00007f8e3fa32038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 259.640259][ T8800] RAX: ffffffffffffffda RBX: 00007f8e3ed35f80 RCX: 00007f8e3eb7cef9 [ 259.643352][ T8800] RDX: 00000000200002c0 RSI: 0000000000000014 RDI: 0000000000000005 [ 259.646051][ T8800] RBP: 00007f8e3fa32090 R08: 0000000000000000 R09: 0000000000000000 [ 259.648693][ T8800] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000001 [ 259.651346][ T8800] R13: 0000000000000000 R14: 00007f8e3ed35f80 R15: 00007fff65d7afa8 [ 259.654024][ T8800] [ 259.673690][ T10] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 259.678027][ T10] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 259.682960][ T10] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 259.687046][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.702114][ T8789] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 259.712179][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 259.840022][ T8809] netlink: 68 bytes leftover after parsing attributes in process `syz.1.799'. [ 259.845295][ T8809] netlink: 68 bytes leftover after parsing attributes in process `syz.1.799'. [ 261.157408][ T39] audit: type=1400 audit(1725860918.608:489): avc: denied { connect } for pid=8832 comm="syz.3.805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 261.212843][ T39] audit: type=1400 audit(1725860918.668:490): avc: denied { listen } for pid=8834 comm="syz.2.806" laddr=172.20.20.170 lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 261.589339][ T8844] FAULT_INJECTION: forcing a failure. [ 261.589339][ T8844] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 261.595338][ T8844] CPU: 2 UID: 0 PID: 8844 Comm: syz.1.808 Not tainted 6.11.0-rc6-syzkaller-00355-g5dadc1be8fc5 #0 [ 261.600103][ T8844] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 261.604899][ T8844] Call Trace: [ 261.606429][ T8844] [ 261.607750][ T8844] dump_stack_lvl+0x16c/0x1f0 [ 261.609853][ T8844] should_fail_ex+0x497/0x5b0 [ 261.611918][ T8844] _copy_from_user+0x30/0xf0 [ 261.614072][ T8844] move_addr_to_kernel+0x68/0x160 [ 261.616360][ T8844] __sys_sendto+0x169/0x4e0 [ 261.618434][ T8844] ? __pfx___sys_sendto+0x10/0x10 [ 261.620725][ T8844] ? ksys_write+0x1ab/0x260 [ 261.622806][ T8844] ? __pfx_ksys_write+0x10/0x10 [ 261.624948][ T8844] __x64_sys_sendto+0xe0/0x1c0 [ 261.627062][ T8844] ? do_syscall_64+0x91/0x250 [ 261.629182][ T8844] ? lockdep_hardirqs_on+0x7c/0x110 [ 261.631549][ T8844] do_syscall_64+0xcd/0x250 [ 261.633560][ T8844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.636135][ T8844] RIP: 0033:0x7eff6a57cef9 [ 261.638089][ T8844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.646457][ T8844] RSP: 002b:00007eff6b29e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 261.650225][ T8844] RAX: ffffffffffffffda RBX: 00007eff6a736058 RCX: 00007eff6a57cef9 [ 261.653763][ T8844] RDX: 000000000000ff05 RSI: 0000000020000300 RDI: 0000000000000003 [ 261.657205][ T8844] RBP: 00007eff6b29e090 R08: 0000000020000380 R09: 0000000000000010 [ 261.660671][ T8844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.664175][ T8844] R13: 0000000000000000 R14: 00007eff6a736058 R15: 00007ffd0b5d5b08 [ 261.667702][ T8844] [ 262.040559][ T39] audit: type=1400 audit(1725860919.488:491): avc: denied { write } for pid=8846 comm="syz.2.809" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 262.188083][ T1998] usb 5-1: USB disconnect, device number 18 [ 262.588653][ T8873] can: request_module (can-proto-4) failed. [ 262.921212][ T10] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 263.120374][ T10] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 263.130818][ T10] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 263.138023][ T10] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 263.142645][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.193527][ T8876] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 263.234402][ T10] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 263.240639][ T8882] netlink: 20 bytes leftover after parsing attributes in process `syz.0.819'. [ 263.693432][ T8891] FAULT_INJECTION: forcing a failure. [ 263.693432][ T8891] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 263.698769][ T8891] CPU: 2 UID: 0 PID: 8891 Comm: syz.2.822 Not tainted 6.11.0-rc6-syzkaller-00355-g5dadc1be8fc5 #0 [ 263.703191][ T8891] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 263.707875][ T8891] Call Trace: [ 263.709334][ T8891] [ 263.710598][ T8891] dump_stack_lvl+0x16c/0x1f0 [ 263.712667][ T8891] should_fail_ex+0x497/0x5b0 [ 263.714663][ T8891] _copy_from_user+0x30/0xf0 [ 263.716498][ T8891] copy_msghdr_from_user+0x99/0x160 [ 263.718822][ T8891] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 263.721426][ T8891] ? find_held_lock+0x2d/0x110 [ 263.723587][ T8891] ? __pfx___lock_acquire+0x10/0x10 [ 263.725806][ T8891] ___sys_sendmsg+0xff/0x1e0 [ 263.727709][ T8891] ? __pfx____sys_sendmsg+0x10/0x10 [ 263.729979][ T8891] ? ksys_write+0x21c/0x260 [ 263.731948][ T8891] ? __fget_light+0x173/0x210 [ 263.734008][ T8891] __sys_sendmsg+0x117/0x1f0 [ 263.736094][ T8891] ? __pfx___sys_sendmsg+0x10/0x10 [ 263.738367][ T8891] do_syscall_64+0xcd/0x250 [ 263.740386][ T8891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.742823][ T8891] RIP: 0033:0x7f85f017cef9 [ 263.744659][ T8891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.752535][ T8891] RSP: 002b:00007f85f105a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 263.755907][ T8891] RAX: ffffffffffffffda RBX: 00007f85f0335f80 RCX: 00007f85f017cef9 [ 263.759373][ T8891] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 263.762684][ T8891] RBP: 00007f85f105a090 R08: 0000000000000000 R09: 0000000000000000 [ 263.766146][ T8891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.769641][ T8891] R13: 0000000000000000 R14: 00007f85f0335f80 R15: 00007ffec7f2e3d8 [ 263.773232][ T8891] [ 264.461064][ T10] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 264.665045][ T10] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 264.670164][ T10] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 264.676672][ T10] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 264.680636][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.696309][ T8896] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 264.716490][ T10] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 264.986969][ T8911] netlink: 'syz.1.828': attribute type 4 has an invalid length. [ 265.493471][ T5373] usb 8-1: USB disconnect, device number 14 [ 265.685446][ T8918] netlink: 20 bytes leftover after parsing attributes in process `syz.3.830'. [ 266.966117][ T35] usb 7-1: USB disconnect, device number 18 [ 268.681052][ T5373] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 268.902405][ T5373] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 268.907036][ T5373] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 268.910862][ T5373] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 268.931006][ T5373] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.943906][ T8964] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 268.962052][ T5373] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 269.041064][ T57] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 269.272282][ T57] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 269.276952][ T57] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 269.291032][ T57] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 269.294882][ T57] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.350280][ T8968] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 269.379512][ T57] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 269.710969][ T5401] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 269.897950][ T5401] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 269.902377][ T5401] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 269.905870][ T5401] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 269.909787][ T5401] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.930563][ T8986] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 269.940672][ T5401] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 271.324536][ T5381] usb 6-1: USB disconnect, device number 12 [ 271.375003][ T35] usb 8-1: USB disconnect, device number 15 [ 271.536787][ T9003] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.542738][ T9003] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.094029][ T5401] usb 5-1: USB disconnect, device number 19 [ 273.303915][ T9034] nbd: must specify an index to disconnect [ 274.331056][ T10] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 274.361057][ T8] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 274.547507][ T10] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 274.553609][ T10] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 274.557016][ T10] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 274.560035][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.568370][ T9066] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 274.589582][ T8] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 274.595253][ T10] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 274.600877][ T8] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 274.608312][ T8] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 274.621800][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.678375][ T9055] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 274.689265][ T8] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 277.133688][ T5401] usb 7-1: USB disconnect, device number 19 [ 277.230353][ T10] usb 5-1: USB disconnect, device number 20 [ 278.082124][ T9111] netlink: 24 bytes leftover after parsing attributes in process `syz.3.874'. [ 278.310042][ T9117] FAULT_INJECTION: forcing a failure. [ 278.310042][ T9117] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 278.316228][ T9117] CPU: 3 UID: 0 PID: 9117 Comm: syz.3.875 Not tainted 6.11.0-rc6-syzkaller-00355-g5dadc1be8fc5 #0 [ 278.320450][ T9117] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 278.324185][ T9117] Call Trace: [ 278.325346][ T9117] [ 278.326385][ T9117] dump_stack_lvl+0x16c/0x1f0 [ 278.328016][ T9117] should_fail_ex+0x497/0x5b0 [ 278.330060][ T9117] _copy_from_user+0x30/0xf0 [ 278.332044][ T9117] __sys_bpf+0x21c/0x4a00 [ 278.333896][ T9117] ? ksys_write+0x21c/0x260 [ 278.335905][ T9117] ? reacquire_held_locks+0x4b0/0x4c0 [ 278.338219][ T9117] ? __pfx___sys_bpf+0x10/0x10 [ 278.339976][ T9117] ? vfs_write+0x14d/0x1140 [ 278.341910][ T9117] ? __mutex_unlock_slowpath+0x164/0x650 [ 278.344207][ T9117] ? fput+0x32/0x390 [ 278.345715][ T9117] ? ksys_write+0x1ab/0x260 [ 278.347505][ T9117] ? __pfx_ksys_write+0x10/0x10 [ 278.349567][ T9117] __x64_sys_bpf+0x78/0xc0 [ 278.351263][ T9117] ? lockdep_hardirqs_on+0x7c/0x110 [ 278.353390][ T9117] do_syscall_64+0xcd/0x250 [ 278.355102][ T9117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.357185][ T9117] RIP: 0033:0x7f8e3eb7cef9 [ 278.358789][ T9117] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.365414][ T9117] RSP: 002b:00007f8e3fa32038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 278.368863][ T9117] RAX: ffffffffffffffda RBX: 00007f8e3ed35f80 RCX: 00007f8e3eb7cef9 [ 278.371969][ T9117] RDX: 0000000000000050 RSI: 00000000200011c0 RDI: 000000000000000a [ 278.374706][ T9117] RBP: 00007f8e3fa32090 R08: 0000000000000000 R09: 0000000000000000 [ 278.377550][ T9117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.380845][ T9117] R13: 0000000000000000 R14: 00007f8e3ed35f80 R15: 00007fff65d7afa8 [ 278.384191][ T9117] [ 278.801389][ T8] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 279.034424][ T8] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 279.042257][ T8] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 279.047323][ T8] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 279.051287][ T8] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.077749][ T9122] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 279.107635][ T8] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 281.057248][ T5401] usb 8-1: USB disconnect, device number 16 [ 281.089874][ T9153] FAULT_INJECTION: forcing a failure. [ 281.089874][ T9153] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 281.095619][ T9153] CPU: 1 UID: 0 PID: 9153 Comm: syz.0.895 Not tainted 6.11.0-rc6-syzkaller-00355-g5dadc1be8fc5 #0 [ 281.100031][ T9153] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 281.104478][ T9153] Call Trace: [ 281.105893][ T9153] [ 281.107136][ T9153] dump_stack_lvl+0x16c/0x1f0 [ 281.109118][ T9153] should_fail_ex+0x497/0x5b0 [ 281.110777][ T9153] _copy_from_user+0x30/0xf0 [ 281.112631][ T9153] move_addr_to_kernel+0x68/0x160 [ 281.114594][ T9153] __sys_connect+0xbd/0x170 [ 281.116164][ T9153] ? __pfx___sys_connect+0x10/0x10 [ 281.117960][ T9153] ? __pfx_ksys_write+0x10/0x10 [ 281.119673][ T9153] __x64_sys_connect+0x72/0xb0 [ 281.121448][ T9153] ? lockdep_hardirqs_on+0x7c/0x110 [ 281.123759][ T9153] do_syscall_64+0xcd/0x250 [ 281.125331][ T9153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.127807][ T9153] RIP: 0033:0x7fa2f357cef9 [ 281.129546][ T9153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.136769][ T9153] RSP: 002b:00007fa2f43dd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 281.139617][ T9153] RAX: ffffffffffffffda RBX: 00007fa2f3735f80 RCX: 00007fa2f357cef9 [ 281.142770][ T9153] RDX: 000000000000001e RSI: 0000000020000700 RDI: 0000000000000003 [ 281.146147][ T9153] RBP: 00007fa2f43dd090 R08: 0000000000000000 R09: 0000000000000000 [ 281.149477][ T9153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.152815][ T9153] R13: 0000000000000000 R14: 00007fa2f3735f80 R15: 00007ffeeaace438 [ 281.156142][ T9153] [ 281.158124][ C1] hpet: Lost 3 RTC interrupts [ 281.918417][ T9177] netlink: 28 bytes leftover after parsing attributes in process `syz.3.892'. [ 281.921879][ T9177] netlink: 28 bytes leftover after parsing attributes in process `syz.3.892'. [ 282.516678][ T39] audit: type=1400 audit(1725860939.968:492): avc: denied { getattr } for pid=9188 comm="syz.1.896" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 282.532361][ T39] audit: type=1400 audit(1725860939.978:493): avc: denied { setopt } for pid=9188 comm="syz.1.896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 283.181474][ T5400] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 283.390287][ T5400] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 283.395795][ T5400] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 283.400245][ T5400] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 283.407273][ T5400] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.429874][ T9202] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 283.442300][ T5400] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 283.631073][ T57] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 283.812906][ T57] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 283.816918][ T57] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 283.820727][ T57] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 283.827178][ T57] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.842734][ T9209] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 283.859467][ T57] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 284.604130][ T5400] usb 8-1: USB disconnect, device number 17 [ 285.611261][ T5400] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 285.853008][ T57] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 285.924742][ T39] audit: type=1326 audit(1725860943.378:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9233 comm="syz.0.907" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f357cef9 code=0x7ffc0000 [ 285.935268][ T39] audit: type=1326 audit(1725860943.378:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9233 comm="syz.0.907" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f357cef9 code=0x7ffc0000 [ 285.944777][ T39] audit: type=1326 audit(1725860943.388:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9233 comm="syz.0.907" exe="/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fa2f357cef9 code=0x7ffc0000 [ 285.954532][ T39] audit: type=1326 audit(1725860943.388:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9233 comm="syz.0.907" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f357cef9 code=0x7ffc0000 [ 285.963562][ T39] audit: type=1326 audit(1725860943.388:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9233 comm="syz.0.907" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f357cef9 code=0x7ffc0000 [ 285.975563][ T39] audit: type=1326 audit(1725860943.388:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9233 comm="syz.0.907" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa2f357cef9 code=0x7ffc0000 [ 285.983255][ T5400] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 285.984851][ T39] audit: type=1326 audit(1725860943.388:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9233 comm="syz.0.907" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f357cef9 code=0x7ffc0000 [ 285.988474][ T5400] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 286.001680][ T5400] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 286.004785][ T5400] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.010469][ T9229] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 286.017267][ T5400] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 286.035248][ T57] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 286.039987][ T57] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 286.043915][ T57] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 286.046968][ T57] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.084462][ T9235] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 286.100242][ T57] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 286.239337][ T57] usb 7-1: USB disconnect, device number 20 [ 287.001186][ T57] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 287.075302][ T5373] usb 8-1: USB disconnect, device number 18 [ 287.184311][ T57] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 287.188715][ T57] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 287.193388][ T57] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 287.196797][ T57] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.209472][ T9254] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 287.216538][ T57] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 288.503512][ T35] usb 6-1: USB disconnect, device number 13 [ 288.960994][ T5400] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 289.154489][ T5400] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 289.158230][ T5400] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 289.164325][ T5400] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 289.168700][ T5400] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.178062][ T9273] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 289.188621][ T5400] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 289.210969][ T35] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 289.403061][ T35] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 289.407510][ T35] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 289.411550][ T35] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 289.415099][ T35] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.423107][ T9275] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 289.435208][ T35] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 289.558459][ T5373] usb 7-1: USB disconnect, device number 21 [ 289.655422][ T39] kauditd_printk_skb: 4 callbacks suppressed [ 289.655437][ T39] audit: type=1400 audit(1725860947.108:505): avc: denied { create } for pid=9290 comm="syz.2.923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 289.733716][ T39] audit: type=1400 audit(1725860947.188:506): avc: denied { mount } for pid=9290 comm="syz.2.923" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 290.565554][ T1998] usb 8-1: USB disconnect, device number 19 [ 291.657793][ T1998] usb 6-1: USB disconnect, device number 14 [ 292.361015][ T5401] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 292.484599][ T5400] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 292.562977][ T5401] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 292.568250][ T5401] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 292.618255][ T5401] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 292.622054][ T5401] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.633708][ T9339] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 292.672591][ T5401] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 292.673594][ T5400] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 292.691083][ T5400] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 292.695604][ T5400] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 292.699515][ T5400] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.754838][ T9345] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 292.766871][ T5400] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 294.544332][ T9370] FAULT_INJECTION: forcing a failure. [ 294.544332][ T9370] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 294.548812][ T9370] CPU: 0 UID: 0 PID: 9370 Comm: syz.0.941 Not tainted 6.11.0-rc6-syzkaller-00355-g5dadc1be8fc5 #0 [ 294.552445][ T9370] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 294.556195][ T9370] Call Trace: [ 294.557420][ T9370] [ 294.558727][ T9370] dump_stack_lvl+0x16c/0x1f0 [ 294.560801][ T9370] should_fail_ex+0x497/0x5b0 [ 294.562847][ T9370] _copy_from_user+0x30/0xf0 [ 294.565047][ T9370] move_addr_to_kernel+0x68/0x160 [ 294.567314][ T9370] __copy_msghdr+0x386/0x470 [ 294.569452][ T9370] copy_msghdr_from_user+0xc2/0x160 [ 294.571656][ T9370] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 294.573929][ T9370] ? find_held_lock+0x2d/0x110 [ 294.575940][ T9370] ? __pfx___lock_acquire+0x10/0x10 [ 294.578186][ T9370] ___sys_sendmsg+0xff/0x1e0 [ 294.579788][ T9370] ? __pfx____sys_sendmsg+0x10/0x10 [ 294.582084][ T9370] ? ksys_write+0x21c/0x260 [ 294.584213][ T9370] ? __fget_light+0x173/0x210 [ 294.586325][ T9370] __sys_sendmsg+0x117/0x1f0 [ 294.588374][ T9370] ? __pfx___sys_sendmsg+0x10/0x10 [ 294.590670][ T9370] do_syscall_64+0xcd/0x250 [ 294.592641][ T9370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.595165][ T9370] RIP: 0033:0x7fa2f357cef9 [ 294.597098][ T9370] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.605227][ T9370] RSP: 002b:00007fa2f43dd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 294.608547][ T9370] RAX: ffffffffffffffda RBX: 00007fa2f3735f80 RCX: 00007fa2f357cef9 [ 294.611555][ T9370] RDX: 0000000000000060 RSI: 0000000020000080 RDI: 0000000000000004 [ 294.614487][ T9370] RBP: 00007fa2f43dd090 R08: 0000000000000000 R09: 0000000000000000 [ 294.617047][ T9370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 294.619744][ T9370] R13: 0000000000000000 R14: 00007fa2f3735f80 R15: 00007ffeeaace438 [ 294.623249][ T9370] [ 294.624681][ C0] vkms_vblank_simulate: vblank timer overrun [ 294.951038][ T57] usb 7-1: USB disconnect, device number 22 [ 295.165943][ T5373] usb 6-1: USB disconnect, device number 15 [ 296.326651][ T9405] FAULT_INJECTION: forcing a failure. [ 296.326651][ T9405] name failslab, interval 1, probability 0, space 0, times 0 [ 296.331290][ T9405] CPU: 3 UID: 0 PID: 9405 Comm: syz.0.947 Not tainted 6.11.0-rc6-syzkaller-00355-g5dadc1be8fc5 #0 [ 296.335066][ T9405] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 296.338962][ T9405] Call Trace: [ 296.340200][ T9405] [ 296.341448][ T9405] dump_stack_lvl+0x16c/0x1f0 [ 296.343538][ T9405] should_fail_ex+0x497/0x5b0 [ 296.345659][ T9405] should_failslab+0xc2/0x120 [ 296.347703][ T9405] __kmalloc_cache_noprof+0x6b/0x300 [ 296.350112][ T9405] ? __pfx_do_raw_write_lock+0x10/0x10 [ 296.352511][ T9405] ? tls_ctx_create+0x45/0x150 [ 296.354412][ T9405] ? lockdep_hardirqs_on+0x7c/0x110 [ 296.356716][ T9405] tls_ctx_create+0x45/0x150 [ 296.358644][ T9405] tls_init+0x11e/0xbc0 [ 296.360038][ T9405] tcp_set_ulp+0x326/0x7f0 [ 296.361976][ T9405] do_tcp_setsockopt+0x53a/0x2660 [ 296.364153][ T9405] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 296.366145][ T9405] ? sock_has_perm+0x25a/0x2f0 [ 296.368127][ T9405] ? __pfx_sock_has_perm+0x10/0x10 [ 296.370259][ T9405] ? selinux_netlbl_socket_setsockopt+0x142/0x420 [ 296.372821][ T9405] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 296.375808][ T9405] ? find_held_lock+0x2d/0x110 [ 296.377972][ T9405] tcp_setsockopt+0xe2/0x100 [ 296.380023][ T9405] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 296.382494][ T9405] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 296.385104][ T9405] do_sock_setsockopt+0x222/0x480 [ 296.387321][ T9405] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 296.389671][ T9405] ? __fget_light+0x173/0x210 [ 296.391612][ T9405] __sys_setsockopt+0x1a4/0x270 [ 296.393657][ T9405] ? __pfx___sys_setsockopt+0x10/0x10 [ 296.395884][ T9405] ? fput+0x32/0x390 [ 296.397588][ T9405] ? ksys_write+0x1ab/0x260 [ 296.399477][ T9405] ? __pfx_ksys_write+0x10/0x10 [ 296.401529][ T9405] __x64_sys_setsockopt+0xbd/0x160 [ 296.403663][ T9405] ? do_syscall_64+0x91/0x250 [ 296.405621][ T9405] ? lockdep_hardirqs_on+0x7c/0x110 [ 296.407767][ T9405] do_syscall_64+0xcd/0x250 [ 296.409658][ T9405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.412121][ T9405] RIP: 0033:0x7fa2f357cef9 [ 296.413671][ T9405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.421462][ T9405] RSP: 002b:00007fa2f43dd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 296.424578][ T9405] RAX: ffffffffffffffda RBX: 00007fa2f3735f80 RCX: 00007fa2f357cef9 [ 296.427803][ T9405] RDX: 000000000000001f RSI: 0000000000000006 RDI: 0000000000000003 [ 296.430714][ T9405] RBP: 00007fa2f43dd090 R08: 000000000000003c R09: 0000000000000000 [ 296.433988][ T9405] R10: 0000000020000540 R11: 0000000000000246 R12: 0000000000000001 [ 296.436777][ T9405] R13: 0000000000000000 R14: 00007fa2f3735f80 R15: 00007ffeeaace438 [ 296.439995][ T9405] [ 296.741098][ T8] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 297.018155][ T8] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 297.023398][ T8] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 297.027729][ T8] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 297.031849][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.040643][ T9401] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 297.046009][ T8] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 297.111786][ T9420] SELinux: Context system_u:object_r:useradd_exec_t:s0 is not valid (left unmapped). [ 297.117108][ T39] audit: type=1400 audit(1725860954.568:507): avc: denied { relabelto } for pid=9418 comm="syz.1.953" name="address_bits" dev="sysfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:useradd_exec_t:s0" [ 297.128859][ T39] audit: type=1400 audit(1725860954.568:508): avc: denied { associate } for pid=9418 comm="syz.1.953" name="address_bits" dev="sysfs" ino=821 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:useradd_exec_t:s0" [ 298.421167][ T5381] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 298.612690][ T5381] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 298.617573][ T5381] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 298.634375][ T5381] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 298.638336][ T5381] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.654362][ T9443] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 298.673477][ T5381] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 299.227535][ T5401] usb 7-1: USB disconnect, device number 23 [ 299.547840][ T39] audit: type=1400 audit(1725860956.998:509): avc: denied { relabelfrom } for pid=9460 comm="syz.2.962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 299.561179][ T39] audit: type=1400 audit(1725860956.998:510): avc: denied { relabelto } for pid=9460 comm="syz.2.962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 299.730359][ T5381] usb 6-1: USB disconnect, device number 16 [ 299.791066][ T5401] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 299.973934][ T5401] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 299.979394][ T5401] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 299.984278][ T5401] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 299.988264][ T5401] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.998332][ T9453] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 300.008241][ T5401] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 300.499596][ T9464] FAULT_INJECTION: forcing a failure. [ 300.499596][ T9464] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 300.504677][ T9464] CPU: 3 UID: 0 PID: 9464 Comm: syz.1.963 Not tainted 6.11.0-rc6-syzkaller-00355-g5dadc1be8fc5 #0 [ 300.509346][ T9464] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 300.514562][ T9464] Call Trace: [ 300.516133][ T9464] [ 300.517841][ T9464] dump_stack_lvl+0x16c/0x1f0 [ 300.520057][ T9464] should_fail_ex+0x497/0x5b0 [ 300.522598][ T9464] _copy_to_user+0x30/0xc0 [ 300.524632][ T9464] simple_read_from_buffer+0xd0/0x160 [ 300.527053][ T9464] proc_fail_nth_read+0x19e/0x280 [ 300.529298][ T9464] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 300.531797][ T9464] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 300.534278][ T9464] vfs_read+0x1d4/0xbd0 [ 300.536146][ T9464] ? reacquire_held_locks+0x20b/0x4c0 [ 300.538610][ T9464] ? __fdget_pos+0xeb/0x180 [ 300.540653][ T9464] ? __pfx_vfs_read+0x10/0x10 [ 300.542769][ T9464] ? __pfx___mutex_lock+0x10/0x10 [ 300.545026][ T9464] ? __fget_files+0x256/0x400 [ 300.547142][ T9464] ksys_read+0x12f/0x260 [ 300.549057][ T9464] ? __pfx_ksys_read+0x10/0x10 [ 300.551210][ T9464] ? do_user_addr_fault+0x83d/0x13f0 [ 300.553665][ T9464] do_syscall_64+0xcd/0x250 [ 300.555694][ T9464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.558091][ T9464] RIP: 0033:0x7eff6a57b93c [ 300.560085][ T9464] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 300.568638][ T9464] RSP: 002b:00007eff6b2bf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 300.572316][ T9464] RAX: ffffffffffffffda RBX: 00007eff6a735f80 RCX: 00007eff6a57b93c [ 300.575797][ T9464] RDX: 000000000000000f RSI: 00007eff6b2bf0a0 RDI: 0000000000000005 [ 300.579295][ T9464] RBP: 00007eff6b2bf090 R08: 0000000000000000 R09: 0000000000000000 [ 300.582808][ T9464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.586367][ T9464] R13: 0000000000000000 R14: 00007eff6a735f80 R15: 00007ffd0b5d5b08 [ 300.589919][ T9464] [ 300.624673][ T5381] usb 8-1: USB disconnect, device number 20 [ 301.601024][ T8] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 301.793013][ T8] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 301.796669][ T8] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 301.807414][ T8] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 301.814181][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.839891][ T9498] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 301.847365][ T8] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 302.646489][ T9523] FAULT_INJECTION: forcing a failure. [ 302.646489][ T9523] name failslab, interval 1, probability 0, space 0, times 0 [ 302.650987][ T9523] CPU: 0 UID: 0 PID: 9523 Comm: syz.3.978 Not tainted 6.11.0-rc6-syzkaller-00355-g5dadc1be8fc5 #0 [ 302.654626][ T9523] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 302.658239][ T9523] Call Trace: [ 302.659567][ T9523] [ 302.660699][ T9523] dump_stack_lvl+0x16c/0x1f0 [ 302.662407][ T9523] should_fail_ex+0x497/0x5b0 [ 302.664032][ T9523] ? fs_reclaim_acquire+0xae/0x160 [ 302.665766][ T9523] should_failslab+0xc2/0x120 [ 302.667469][ T9523] __kmalloc_noprof+0xcb/0x400 [ 302.669160][ T9523] ? __pfx_lock_acquire+0x10/0x10 [ 302.670865][ T9523] tomoyo_realpath_from_path+0xb9/0x720 [ 302.672992][ T9523] ? tomoyo_profile+0x47/0x60 [ 302.674967][ T9523] tomoyo_path_number_perm+0x245/0x590 [ 302.677237][ T9523] ? tomoyo_path_number_perm+0x232/0x590 [ 302.679253][ T9523] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 302.681447][ T9523] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 302.683948][ T9523] ? __fget_files+0x256/0x400 [ 302.685920][ T9523] security_file_ioctl+0x75/0xc0 [ 302.687971][ T9523] __x64_sys_ioctl+0xbb/0x220 [ 302.689943][ T9523] do_syscall_64+0xcd/0x250 [ 302.691851][ T9523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.694358][ T9523] RIP: 0033:0x7f8e3eb7cef9 [ 302.696238][ T9523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.704260][ T9523] RSP: 002b:00007f8e3fa11038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 302.707740][ T9523] RAX: ffffffffffffffda RBX: 00007f8e3ed36058 RCX: 00007f8e3eb7cef9 [ 302.711083][ T9523] RDX: 0000000020000040 RSI: 00000000800448d4 RDI: 0000000000000005 [ 302.713822][ T9523] RBP: 00007f8e3fa11090 R08: 0000000000000000 R09: 0000000000000000 [ 302.717089][ T9523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.720358][ T9523] R13: 0000000000000000 R14: 00007f8e3ed36058 R15: 00007fff65d7afa8 [ 302.723684][ T9523] [ 302.727194][ T9523] ERROR: Out of memory at tomoyo_realpath_from_path. [ 303.214026][ T39] audit: type=1400 audit(1725860960.668:511): avc: denied { getopt } for pid=9527 comm="syz.0.980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 303.471037][ T39] audit: type=1400 audit(1725860960.908:512): avc: denied { ioctl } for pid=9534 comm="syz.3.982" path="socket:[24804]" dev="sockfs" ino=24804 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 303.481497][ T39] audit: type=1400 audit(1725860960.908:513): avc: denied { bind } for pid=9534 comm="syz.3.982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 304.141268][ T9550] netlink: 'syz.1.984': attribute type 72 has an invalid length. [ 304.253067][ T5401] usb 7-1: USB disconnect, device number 24 [ 305.010719][ T9566] /dev/nullb0: Can't lookup blockdev [ 305.471081][ T35] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 305.680990][ T35] usb 8-1: Using ep0 maxpacket: 32 [ 305.684500][ T35] usb 8-1: config 0 has no interfaces? [ 305.688085][ T35] usb 8-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 305.691896][ T35] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.694674][ T35] usb 8-1: Product: syz [ 305.696078][ T35] usb 8-1: Manufacturer: syz [ 305.697937][ T35] usb 8-1: SerialNumber: syz [ 305.702708][ T35] usb 8-1: config 0 descriptor?? [ 305.740975][ T8] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 305.968938][ T8] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 305.972833][ T8] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 305.976933][ T8] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 305.980864][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.988976][ T9586] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 306.001052][ T8] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 306.109001][ T35] usb 8-1: USB disconnect, device number 21 [ 307.457471][ T5400] usb 6-1: USB disconnect, device number 17 [ 307.851707][ T8] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 308.072423][ T8] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 308.076969][ T8] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 308.087899][ T8] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 308.101476][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.120230][ T9628] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 308.136557][ T8] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 309.341069][ T5373] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 309.538724][ T5373] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 309.549095][ T5373] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 309.554839][ T5373] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 309.559483][ T5373] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.621999][ T9654] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 309.762718][ T5373] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 310.545293][ T8] usb 5-1: USB disconnect, device number 21 [ 311.234538][ T9677] FAULT_INJECTION: forcing a failure. [ 311.234538][ T9677] name failslab, interval 1, probability 0, space 0, times 0 [ 311.239943][ T9677] CPU: 3 UID: 0 PID: 9677 Comm: syz.2.1014 Not tainted 6.11.0-rc6-syzkaller-00355-g5dadc1be8fc5 #0 [ 311.244659][ T9677] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 311.248766][ T9677] Call Trace: [ 311.249897][ T9677] [ 311.251010][ T9677] dump_stack_lvl+0x16c/0x1f0 [ 311.253068][ T9677] should_fail_ex+0x497/0x5b0 [ 311.255067][ T9677] ? fs_reclaim_acquire+0xae/0x160 [ 311.257338][ T9677] should_failslab+0xc2/0x120 [ 311.259090][ T9677] kmem_cache_alloc_node_noprof+0x71/0x310 [ 311.261290][ T9677] ? __alloc_skb+0x2b1/0x380 [ 311.263306][ T9677] __alloc_skb+0x2b1/0x380 [ 311.265144][ T9677] ? __pfx___alloc_skb+0x10/0x10 [ 311.267545][ T9677] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 311.270150][ T9677] netlink_alloc_large_skb+0x69/0x130 [ 311.272514][ T9677] netlink_sendmsg+0x689/0xd70 [ 311.274647][ T9677] ? __pfx_netlink_sendmsg+0x10/0x10 [ 311.276919][ T9677] ? __import_iovec+0x1fd/0x6e0 [ 311.279090][ T9677] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 311.281510][ T9677] ____sys_sendmsg+0xab5/0xc90 [ 311.283617][ T9677] ? copy_msghdr_from_user+0x10b/0x160 [ 311.285980][ T9677] ? __pfx_____sys_sendmsg+0x10/0x10 [ 311.288355][ T9677] ? find_held_lock+0x2d/0x110 [ 311.290435][ T9677] ? __pfx___lock_acquire+0x10/0x10 [ 311.292730][ T9677] ___sys_sendmsg+0x135/0x1e0 [ 311.294573][ T9677] ? __pfx____sys_sendmsg+0x10/0x10 [ 311.296580][ T9677] ? ksys_write+0x21c/0x260 [ 311.298361][ T9677] ? __fget_light+0x173/0x210 [ 311.300263][ T9677] __sys_sendmsg+0x117/0x1f0 [ 311.302272][ T9677] ? __pfx___sys_sendmsg+0x10/0x10 [ 311.304662][ T9677] do_syscall_64+0xcd/0x250 [ 311.306661][ T9677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.309263][ T9677] RIP: 0033:0x7f85f017cef9 [ 311.311268][ T9677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.319190][ T9677] RSP: 002b:00007f85f105a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 311.323002][ T9677] RAX: ffffffffffffffda RBX: 00007f85f0335f80 RCX: 00007f85f017cef9 [ 311.326598][ T9677] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 311.330039][ T9677] RBP: 00007f85f105a090 R08: 0000000000000000 R09: 0000000000000000 [ 311.333489][ T9677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 311.336994][ T9677] R13: 0000000000000000 R14: 00007f85f0335f80 R15: 00007ffec7f2e3d8 [ 311.340276][ T9677] [ 311.394084][ T9681] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1015'. [ 311.411287][ T39] audit: type=1400 audit(1725860968.868:514): avc: denied { write } for pid=9680 comm="syz.2.1015" name="file0" dev="9p" ino=36575628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 311.623798][ T5373] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 311.666787][ T57] usb 8-1: USB disconnect, device number 22 [ 311.953588][ T5373] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 311.957570][ T5373] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 311.964455][ T5373] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 311.967653][ T5373] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.978893][ T9678] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 311.989154][ T5373] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 312.716563][ T39] audit: type=1400 audit(1725860970.168:515): avc: denied { read } for pid=9704 comm="syz.3.1023" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 312.727861][ T39] audit: type=1400 audit(1725860970.168:516): avc: denied { open } for pid=9704 comm="syz.3.1023" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 312.737377][ T39] audit: type=1400 audit(1725860970.168:517): avc: denied { write } for pid=9704 comm="syz.3.1023" name="net" dev="proc" ino=26952 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 312.748093][ T39] audit: type=1400 audit(1725860970.168:518): avc: denied { add_name } for pid=9704 comm="syz.3.1023" name="pfkey" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 312.756676][ T39] audit: type=1400 audit(1725860970.168:519): avc: denied { create } for pid=9704 comm="syz.3.1023" name="pfkey" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 312.767433][ T39] audit: type=1400 audit(1725860970.188:520): avc: denied { associate } for pid=9704 comm="syz.3.1023" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 312.767484][ T39] audit: type=1400 audit(1725860970.198:521): avc: denied { ioctl } for pid=9704 comm="syz.3.1023" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 312.822497][ T9712] netlink: 'syz.0.1024': attribute type 72 has an invalid length. [ 312.927864][ T9715] FAULT_INJECTION: forcing a failure. [ 312.927864][ T9715] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 312.927919][ T9715] [ 312.927922][ T9715] ====================================================== [ 312.927925][ T9715] WARNING: possible circular locking dependency detected [ 312.927928][ T9715] 6.11.0-rc6-syzkaller-00355-g5dadc1be8fc5 #0 Not tainted [ 312.927933][ T9715] ------------------------------------------------------ [ 312.927936][ T9715] syz.3.1025/9715 is trying to acquire lock: [ 312.927941][ T9715] ffffffff8dda8018 ((console_sem).lock){-.-.}-{2:2}, at: down_trylock+0x12/0x70 [ 312.927974][ T9715] [ 312.927974][ T9715] but task is already holding lock: [ 312.927978][ T9715] ffff88806a83edd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 312.928015][ T9715] [ 312.928015][ T9715] which lock already depends on the new lock. [ 312.928015][ T9715] [ 312.928020][ T9715] [ 312.928020][ T9715] the existing dependency chain (in reverse order) is: [ 312.928025][ T9715] [ 312.928025][ T9715] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 312.928042][ T9715] _raw_spin_lock_nested+0x31/0x40 [ 312.928060][ T9715] raw_spin_rq_lock_nested+0x29/0x130 [ 312.928081][ T9715] task_fork_fair+0x73/0x250 [ 312.928097][ T9715] sched_cgroup_fork+0x3cf/0x510 [ 312.928112][ T9715] copy_process+0x43a1/0x8de0 [ 312.928130][ T9715] kernel_clone+0xfd/0x960 [ 312.928146][ T9715] user_mode_thread+0xb4/0xf0 [ 312.928162][ T9715] rest_init+0x23/0x2b0 [ 312.928174][ T9715] start_kernel+0x3df/0x4c0 [ 312.928196][ T9715] x86_64_start_reservations+0x18/0x30 [ 312.928218][ T9715] x86_64_start_kernel+0xb2/0xc0 [ 312.928235][ T9715] common_startup_64+0x13e/0x148 [ 312.928244][ T9715] [ 312.928244][ T9715] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 312.928255][ T9715] _raw_spin_lock_irqsave+0x3a/0x60 [ 312.928264][ T9715] try_to_wake_up+0x9a/0x13e0 [ 312.928275][ T9715] up+0x79/0xb0 [ 312.928285][ T9715] console_unlock+0x23e/0x290 [ 312.928293][ T9715] vga_remove_vgacon+0x90/0xd0 [ 312.928304][ T9715] aperture_remove_conflicting_pci_devices+0x16a/0x1e0 [ 312.928313][ T9715] virtio_gpu_probe+0x408/0x4e0 [ 312.928354][ T9715] virtio_dev_probe+0x586/0x8a0 [ 312.928363][ T9715] really_probe+0x23e/0xa90 [ 312.928372][ T9715] __driver_probe_device+0x1de/0x440 [ 312.928382][ T9715] driver_probe_device+0x4c/0x1b0 [ 312.928392][ T9715] __driver_attach+0x283/0x580 [ 312.928402][ T9715] bus_for_each_dev+0x13c/0x1d0 [ 312.928410][ T9715] bus_add_driver+0x2e9/0x690 [ 312.928419][ T9715] driver_register+0x15c/0x4b0 [ 312.928430][ T9715] do_one_initcall+0x128/0x700 [ 312.928441][ T9715] kernel_init_freeable+0x69d/0xca0 [ 312.928453][ T9715] kernel_init+0x1c/0x2b0 [ 312.928460][ T9715] ret_from_fork+0x45/0x80 [ 312.928472][ T9715] ret_from_fork_asm+0x1a/0x30 [ 312.928483][ T9715] [ 312.928483][ T9715] -> #0 ((console_sem).lock){-.-.}-{2:2}: [ 312.928494][ T9715] __lock_acquire+0x24ed/0x3cb0 [ 312.928506][ T9715] lock_acquire+0x1b1/0x560 [ 312.928516][ T9715] _raw_spin_lock_irqsave+0x3a/0x60 [ 312.928526][ T9715] down_trylock+0x12/0x70 [ 312.928536][ T9715] __down_trylock_console_sem+0x40/0x140 [ 312.928549][ T9715] vprintk_emit+0x3d3/0x600 [ 312.928557][ T9715] vprintk+0x7f/0xa0 [ 312.928565][ T9715] _printk+0xc8/0x100 [ 312.928575][ T9715] should_fail_ex+0x46c/0x5b0 [ 312.928585][ T9715] strncpy_from_user+0x38/0x320 [ 312.928593][ T9715] strncpy_from_user_nofault+0x7f/0x180 [ 312.928602][ T9715] bpf_probe_read_compat_str+0xf1/0x170 [ 312.928613][ T9715] bpf_prog_1ccb8ba97563bf77+0x40/0x63 [ 312.928620][ T9715] bpf_trace_run2+0x231/0x590 [ 312.928630][ T9715] __bpf_trace_tlb_flush+0xd2/0x110 [ 312.928643][ T9715] trace_tlb_flush+0xf3/0x170 [ 312.928652][ T9715] switch_mm_irqs_off+0x697/0xbb0 [ 312.928662][ T9715] __schedule+0xc4d/0x5490 [ 312.928671][ T9715] schedule+0xe7/0x350 [ 312.928680][ T9715] schedule_timeout+0x258/0x2a0 [ 312.928688][ T9715] __wait_for_common+0x3de/0x5f0 [ 312.928699][ T9715] __flush_work+0x776/0xc30 [ 312.928706][ T9715] __lru_add_drain_all+0x52c/0x740 [ 312.928714][ T9715] madvise_collapse+0x224/0xaf0 [ 312.928723][ T9715] madvise_vma_behavior+0x349/0x18e0 [ 312.928732][ T9715] madvise_walk_vmas+0x1cf/0x2c0 [ 312.928739][ T9715] do_madvise+0x310/0x7a0 [ 312.928746][ T9715] __x64_sys_madvise+0xa9/0x110 [ 312.928755][ T9715] do_syscall_64+0xcd/0x250 [ 312.928767][ T9715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.928775][ T9715] [ 312.928775][ T9715] other info that might help us debug this: [ 312.928775][ T9715] [ 312.928777][ T9715] Chain exists of: [ 312.928777][ T9715] (console_sem).lock --> &p->pi_lock --> &rq->__lock [ 312.928777][ T9715] [ 312.928789][ T9715] Possible unsafe locking scenario: [ 312.928789][ T9715] [ 312.928791][ T9715] CPU0 CPU1 [ 312.928793][ T9715] ---- ---- [ 312.928795][ T9715] lock(&rq->__lock); [ 312.928799][ T9715] lock(&p->pi_lock); [ 312.928804][ T9715] lock(&rq->__lock); [ 312.928809][ T9715] lock((console_sem).lock); [ 312.928814][ T9715] [ 312.928814][ T9715] *** DEADLOCK *** [ 312.928814][ T9715] [ 312.928815][ T9715] 4 locks held by syz.3.1025/9715: [ 312.928821][ T9715] #0: ffff8880270a0b18 (&mm->mmap_lock){++++}-{3:3}, at: do_madvise+0x44e/0x7a0 [ 312.928839][ T9715] #1: ffffffff8dedd6c8 (lock#3){+.+.}-{3:3}, at: __lru_add_drain_all+0x69/0x740 [ 312.928858][ T9715] #2: ffff88806a83edd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 312.928880][ T9715] #3: ffffffff8ddb9fe0 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run2+0x1c2/0x590 [ 312.928902][ T9715] [ 312.928902][ T9715] stack backtrace: [ 312.928905][ T9715] CPU: 3 UID: 0 PID: 9715 Comm: syz.3.1025 Not tainted 6.11.0-rc6-syzkaller-00355-g5dadc1be8fc5 #0 [ 312.928916][ T9715] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 312.928921][ T9715] Call Trace: [ 312.928925][ T9715] [ 312.928929][ T9715] dump_stack_lvl+0x116/0x1f0 [ 312.928940][ T9715] check_noncircular+0x31a/0x400 [ 312.928952][ T9715] ? __pfx_check_noncircular+0x10/0x10 [ 312.928964][ T9715] ? __pfx__prb_read_valid+0x10/0x10 [ 312.928974][ T9715] ? __pfx_format_decode+0x10/0x10 [ 312.928987][ T9715] ? lockdep_lock+0xc6/0x200 [ 312.928997][ T9715] ? __pfx_lockdep_lock+0x10/0x10 [ 312.929007][ T9715] __lock_acquire+0x24ed/0x3cb0 [ 312.929022][ T9715] ? __pfx___lock_acquire+0x10/0x10 [ 312.929035][ T9715] ? vprintk_store+0x22a/0xb70 [ 312.929044][ T9715] lock_acquire+0x1b1/0x560 [ 312.929055][ T9715] ? down_trylock+0x12/0x70 [ 312.929068][ T9715] ? __pfx_lock_acquire+0x10/0x10 [ 312.929080][ T9715] ? __pfx_mark_lock+0x10/0x10 [ 312.929091][ T9715] ? hlock_class+0x4e/0x130 [ 312.929102][ T9715] ? vprintk+0x7f/0xa0 [ 312.929112][ T9715] _raw_spin_lock_irqsave+0x3a/0x60 [ 312.929122][ T9715] ? down_trylock+0x12/0x70 [ 312.929134][ T9715] down_trylock+0x12/0x70 [ 312.929147][ T9715] __down_trylock_console_sem+0x40/0x140 [ 312.929160][ T9715] vprintk_emit+0x3d3/0x600 [ 312.929170][ T9715] vprintk+0x7f/0xa0 [ 312.929179][ T9715] _printk+0xc8/0x100 [ 312.929191][ T9715] ? __pfx__printk+0x10/0x10 [ 312.929203][ T9715] ? ___ratelimit+0x24c/0x580 [ 312.929217][ T9715] ? __pfx_mark_lock+0x10/0x10 [ 312.929236][ T9715] ? __pfx____ratelimit+0x10/0x10 [ 312.929254][ T9715] should_fail_ex+0x46c/0x5b0 [ 312.929273][ T9715] strncpy_from_user+0x38/0x320 [ 312.929292][ T9715] strncpy_from_user_nofault+0x7f/0x180 [ 312.929309][ T9715] bpf_probe_read_compat_str+0xf1/0x170 [ 312.929326][ T9715] bpf_prog_1ccb8ba97563bf77+0x40/0x63 [ 312.929339][ T9715] bpf_trace_run2+0x231/0x590 [ 312.929357][ T9715] ? __pfx_bpf_trace_run2+0x10/0x10 [ 312.929368][ T9715] ? find_held_lock+0x2d/0x110 [ 312.929378][ T9715] ? psi_task_switch+0x2d9/0x900 [ 312.929390][ T9715] __bpf_trace_tlb_flush+0xd2/0x110 [ 312.929399][ T9715] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 312.929410][ T9715] ? __phys_addr+0xc6/0x150 [ 312.929419][ T9715] trace_tlb_flush+0xf3/0x170 [ 312.929430][ T9715] switch_mm_irqs_off+0x697/0xbb0 [ 312.929442][ T9715] __schedule+0xc4d/0x5490 [ 312.929452][ T9715] ? __pfx___lock_acquire+0x10/0x10 [ 312.929463][ T9715] ? hlock_class+0x4e/0x130 [ 312.929476][ T9715] ? __pfx___schedule+0x10/0x10 [ 312.929486][ T9715] ? schedule+0x298/0x350 [ 312.929497][ T9715] ? __pfx_lock_release+0x10/0x10 [ 312.929509][ T9715] ? __pfx_mark_lock+0x10/0x10 [ 312.929520][ T9715] ? mark_lock+0xb5/0xc60 [ 312.929532][ T9715] schedule+0xe7/0x350 [ 312.929543][ T9715] schedule_timeout+0x258/0x2a0 [ 312.929553][ T9715] ? __pfx_schedule_timeout+0x10/0x10 [ 312.929564][ T9715] ? mark_held_locks+0x9f/0xe0 [ 312.929576][ T9715] ? _raw_spin_unlock_irq+0x23/0x50 [ 312.929587][ T9715] __wait_for_common+0x3de/0x5f0 [ 312.929598][ T9715] ? __pfx_schedule_timeout+0x10/0x10 [ 312.929609][ T9715] ? __pfx___wait_for_common+0x10/0x10 [ 312.929621][ T9715] ? rcu_is_watching+0x12/0xc0 [ 312.929641][ T9715] __flush_work+0x776/0xc30 [ 312.929651][ T9715] ? __pfx___flush_work+0x10/0x10 [ 312.929659][ T9715] ? __pfx_lock_release+0x10/0x10 [ 312.929671][ T9715] ? __pfx_wq_barrier_func+0x10/0x10 [ 312.929683][ T9715] ? mark_held_locks+0x9f/0xe0 [ 312.929695][ T9715] ? __pfx___might_resched+0x10/0x10 [ 312.929704][ T9715] ? queue_work_on+0xc6/0x140 [ 312.929711][ T9715] ? lockdep_hardirqs_on+0x7c/0x110 [ 312.929723][ T9715] __lru_add_drain_all+0x52c/0x740 [ 312.929732][ T9715] ? kasan_save_track+0x14/0x30 [ 312.929745][ T9715] madvise_collapse+0x224/0xaf0 [ 312.929755][ T9715] ? mas_prev_slot+0x4b1/0x1ff0 [ 312.929765][ T9715] ? __pfx_madvise_collapse+0x10/0x10 [ 312.929776][ T9715] madvise_vma_behavior+0x349/0x18e0 [ 312.929787][ T9715] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 312.929796][ T9715] ? find_vma_prev+0xcd/0x150 [ 312.929805][ T9715] ? __pfx_find_vma_prev+0x10/0x10 [ 312.929815][ T9715] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 312.929825][ T9715] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 312.929834][ T9715] madvise_walk_vmas+0x1cf/0x2c0 [ 312.929843][ T9715] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 312.929854][ T9715] do_madvise+0x310/0x7a0 [ 312.929863][ T9715] ? __pfx_do_madvise+0x10/0x10 [ 312.929873][ T9715] ? ksys_write+0x1ab/0x260 [ 312.929883][ T9715] ? __pfx_ksys_write+0x10/0x10 [ 312.929895][ T9715] __x64_sys_madvise+0xa9/0x110 [ 312.929904][ T9715] ? lockdep_hardirqs_on+0x7c/0x110 [ 312.929915][ T9715] do_syscall_64+0xcd/0x250 [ 312.929928][ T9715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.929937][ T9715] RIP: 0033:0x7f8e3eb7cef9 [ 312.929943][ T9715] Code: Unable to access opcode bytes at 0x7f8e3eb7cecf. [ 312.929948][ T9715] RSP: 002b:00007f8e3fa11038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 312.929956][ T9715] RAX: ffffffffffffffda RBX: 00007f8e3ed36058 RCX: 00007f8e3eb7cef9 [ 312.929962][ T9715] RDX: 0000000000000019 RSI: 0000000000600003 RDI: 0000000020000000 [ 312.929968][ T9715] RBP: 00007f8e3fa11090 R08: 0000000000000000 R09: 0000000000000000 [ 312.929973][ T9715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.929978][ T9715] R13: 0000000000000001 R14: 00007f8e3ed36058 R15: 00007fff65d7afa8 [ 312.929986][ T9715] [ 313.368252][ T9715] CPU: 3 UID: 0 PID: 9715 Comm: syz.3.1025 Not tainted 6.11.0-rc6-syzkaller-00355-g5dadc1be8fc5 #0 [ 313.372167][ T9715] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 313.376618][ T9715] Call Trace: [ 313.378064][ T9715] [ 313.379339][ T9715] dump_stack_lvl+0x116/0x1f0 [ 313.381373][ T9715] should_fail_ex+0x497/0x5b0 [ 313.383380][ T9715] strncpy_from_user+0x38/0x320 [ 313.385135][ T9715] strncpy_from_user_nofault+0x7f/0x180 [ 313.387226][ T9715] bpf_probe_read_compat_str+0xf1/0x170 [ 313.389587][ T9715] bpf_prog_1ccb8ba97563bf77+0x40/0x63 [ 313.391451][ T9715] bpf_trace_run2+0x231/0x590 [ 313.393302][ T9715] ? __pfx_bpf_trace_run2+0x10/0x10 [ 313.395531][ T9715] ? find_held_lock+0x2d/0x110 [ 313.397296][ T9715] ? psi_task_switch+0x2d9/0x900 [ 313.399099][ T9715] __bpf_trace_tlb_flush+0xd2/0x110 [ 313.401367][ T9715] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 313.403544][ T9715] ? __phys_addr+0xc6/0x150 [ 313.405193][ T9715] trace_tlb_flush+0xf3/0x170 [ 313.407237][ T9715] switch_mm_irqs_off+0x697/0xbb0 [ 313.409188][ T9715] __schedule+0xc4d/0x5490 [ 313.410705][ T9715] ? __pfx___lock_acquire+0x10/0x10 [ 313.412936][ T9715] ? hlock_class+0x4e/0x130 [ 313.414856][ T9715] ? __pfx___schedule+0x10/0x10 [ 313.416514][ T9715] ? schedule+0x298/0x350 [ 313.418255][ T9715] ? __pfx_lock_release+0x10/0x10 [ 313.420444][ T9715] ? __pfx_mark_lock+0x10/0x10 [ 313.422498][ T9715] ? mark_lock+0xb5/0xc60 [ 313.424338][ T9715] schedule+0xe7/0x350 [ 313.426058][ T9715] schedule_timeout+0x258/0x2a0 [ 313.427896][ T9715] ? __pfx_schedule_timeout+0x10/0x10 [ 313.429795][ T9715] ? mark_held_locks+0x9f/0xe0 [ 313.431859][ T9715] ? _raw_spin_unlock_irq+0x23/0x50 [ 313.433796][ T9715] __wait_for_common+0x3de/0x5f0 [ 313.435816][ T9715] ? __pfx_schedule_timeout+0x10/0x10 [ 313.438115][ T9715] ? __pfx___wait_for_common+0x10/0x10 [ 313.440440][ T9715] ? rcu_is_watching+0x12/0xc0 [ 313.442506][ T9715] __flush_work+0x776/0xc30 [ 313.444055][ T9715] ? __pfx___flush_work+0x10/0x10 [ 313.445987][ T9715] ? __pfx_lock_release+0x10/0x10 [ 313.448136][ T9715] ? __pfx_wq_barrier_func+0x10/0x10 [ 313.450160][ T9715] ? mark_held_locks+0x9f/0xe0 [ 313.451801][ T9715] ? __pfx___might_resched+0x10/0x10 [ 313.454079][ T9715] ? queue_work_on+0xc6/0x140 [ 313.456077][ T9715] ? lockdep_hardirqs_on+0x7c/0x110 [ 313.458037][ T9715] __lru_add_drain_all+0x52c/0x740 [ 313.459874][ T9715] ? kasan_save_track+0x14/0x30 [ 313.461985][ T9715] madvise_collapse+0x224/0xaf0 [ 313.463928][ T9715] ? mas_prev_slot+0x4b1/0x1ff0 [ 313.465583][ T9715] ? __pfx_madvise_collapse+0x10/0x10 [ 313.467831][ T9715] madvise_vma_behavior+0x349/0x18e0 [ 313.469957][ T9715] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 313.471899][ T9715] ? find_vma_prev+0xcd/0x150 [ 313.473922][ T9715] ? __pfx_find_vma_prev+0x10/0x10 [ 313.476007][ T9715] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 313.478225][ T9715] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 313.480653][ T9715] madvise_walk_vmas+0x1cf/0x2c0 [ 313.482781][ T9715] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 313.484923][ T9715] do_madvise+0x310/0x7a0 [ 313.486394][ T9715] ? __pfx_do_madvise+0x10/0x10 [ 313.488487][ T9715] ? ksys_write+0x1ab/0x260 [ 313.490431][ T9715] ? __pfx_ksys_write+0x10/0x10 [ 313.492120][ T9715] __x64_sys_madvise+0xa9/0x110 [ 313.493991][ T9715] ? lockdep_hardirqs_on+0x7c/0x110 [ 313.496214][ T9715] do_syscall_64+0xcd/0x250 [ 313.498022][ T9715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.500147][ T9715] RIP: 0033:0x7f8e3eb7cef9 [ 313.502067][ T9715] Code: Unable to access opcode bytes at 0x7f8e3eb7cecf. [ 313.504457][ T9715] RSP: 002b:00007f8e3fa11038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 313.507808][ T9715] RAX: ffffffffffffffda RBX: 00007f8e3ed36058 RCX: 00007f8e3eb7cef9 [ 313.510753][ T9715] RDX: 0000000000000019 RSI: 0000000000600003 RDI: 0000000020000000 [ 313.513668][ T9715] RBP: 00007f8e3fa11090 R08: 0000000000000000 R09: 0000000000000000 [ 313.516834][ T9715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.519793][ T9715] R13: 0000000000000001 R14: 00007f8e3ed36058 R15: 00007fff65d7afa8 [ 313.522959][ T9715] [ 313.524443][ C2] vkms_vblank_simulate: vblank timer overrun [ 313.530640][ C1] hpet: Lost 38 RTC interrupts [ 315.052079][ T58] usb 6-1: USB disconnect, device number 18 [ 317.624365][ T1379] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.626607][ T1379] ieee802154 phy1 wpan1: encryption failed: -22 VM DIAGNOSIS: 05:49:28 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000001 RBX=ffff88806a83edc0 RCX=0000000000000100 RDX=0000000000000001 RSI=ffffffff8b19b59d RDI=0000000000000000 RBP=dffffc0000000000 RSP=ffffffff8da07968 R8 =0000000000000000 R9 =0000000000000003 R10=0000000000000001 R11=0000000000000000 R12=0000000000000000 R13=0000000000000f23 R14=ffff88806a63fc80 R15=ffffed100d507db8 RIP=ffffffff8b19b4ca RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020000000 CR3=0000000025e66000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001030001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00327265636e6575 7165732f7665642f ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007eff6a5efe6a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007eff6a5efe77 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007eff6a5efe71 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007eff6a5efe85 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007eff6a5eff0b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007eff6a5effe9 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f360b0509011000 007fff8b05090074 3e2a020000040900 00001b0100240209 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e776f6e6b6e7500 6f6c6c3332302500 657a697320740004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4b524a4b4e4b5000 4a49491617150000 405f4c560551464a 5751560541444700 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a8f6677c2cdba946 a58e92797a0394d4 ed06c81cffbc8245 e5a7a3327ab72ba8 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d39c2dc5edf60000 01015e2ce0c74971 a3ccbe45fdf2436a 7d1fb3cbb997a9c8 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b101da7bfaf873aa a56b17efa11cb7b9 7e3ac6c697717176 a5055205a88b5f6d ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8dbb8ccd88db9b5d 51d87a80a956cafe 73766cdfe335d99f e5c81731ecb87b59 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000003 RCX=ffffffff813c44fe RDX=ffff88801b72c880 RSI=ffffffff813c451b RDI=0000000000000000 RBP=ffff88806a63edc0 RSP=ffffc90000987640 R8 =0000000000000000 R9 =0000000000000003 R10=0000000000000003 R11=0000000000000000 R12=0000000000000003 R13=0000000000000003 R14=ffff88806a73fc80 R15=ffffed100d4c7db8 RIP=ffffffff813c451c RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020000000 CR3=0000000025e66000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001030001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00327265636e6575 7165732f7665642f ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007eff6a5efe6a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007eff6a5efe77 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007eff6a5efe71 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007eff6a5efe85 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007eff6a5eff0b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007eff6a5effe9 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f360b0509011000 007fff8b05090074 3e2a020000040900 00001b0100240209 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e776f6e6b6e7500 6f6c6c3332302500 657a697320740004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4b524a4b4e4b5000 4a49491617150000 405f4c560551464a 5751560541444700 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a8f6677c2cdba946 a58e92797a0394d4 ed06c81cffbc8245 e5a7a3327ab72ba8 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d39c2dc5edf60000 01015e2ce0c74971 a3ccbe45fdf2436a 7d1fb3cbb997a9c8 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b101da7bfaf873aa a56b17efa11cb7b9 7e3ac6c697717176 a5055205a88b5f6d ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8dbb8ccd88db9b5d 51d87a80a956cafe 73766cdfe335d99f e5c81731ecb87b59 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff813c44fe RDX=ffff888020422440 RSI=ffffffff813c451b RDI=0000000000000000 RBP=ffff88806a83fc94 RSP=ffffc90000a97a68 R8 =0000000000000000 R9 =0000000000000001 R10=0000000000000001 R11=0000000000000000 R12=0000000000000001 R13=0000000000000001 R14=ffff88806a83fc80 R15=00000000000c0000 RIP=ffffffff813c451c RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c33bb38 CR3=000000002ab4c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000054 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8100a093 ffffffff8100a0af ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8100a0af ffffffff8100a093 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 ffffffff8100a093 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f85f01efe6a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f85f01efe77 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f85f01efe71 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f85f01efe85 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f85f01eff0b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f85f01effe9 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff81308551 ffffffff8130851d ffffffff813084fd ffffffff813084f3 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f85f0e6d100 00007f85f02ff440 00007f8500040008 0000000f0010000c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f85f02ff498 00007f85f02ff490 00007f85f02ff488 00007f85f02ff480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 000000000000010c ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000033 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85030a45 RDI=ffffffff9a5b4f60 RBP=ffffffff9a5b4f20 RSP=ffffc90026c36e00 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=0000000000000033 R14=ffffffff850309e0 R15=0000000000000000 RIP=ffffffff85030a6f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f8e3fa116c0 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f8e3fa10f98 CR3=000000002ab4c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffffffe Opmask01=0000000000000014 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8e3fa11060 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8e3ebefe6a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8e3ebefe77 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8e3ebefe71 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8e3ebefe85 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8e3ebeff0b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8e3ebeffe9 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 73697664616d2065 74616c75706f7000 757a253d657a6973 2070253d72747000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 564c534144480540 51444950554a5500 505f0018405f4c56 0555001857515500 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 9500000004000000 8500000000000003 b700000008000002 b7fffffff8000001 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 07000000000000a1 bf00000000fff81a 7b20202000000000 00256c7520000001 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 180000002d000000 8520000000000003 b700000008000002 b7fffffff8000001 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 07000000000000a1 bf00000000fff81a 7b20202000000000 00256c6420000001 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000