last executing test programs: 5.966838785s ago: executing program 1 (id=1775): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/ehci-pci/unbind\x00', 0x1, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r2, 0x8992, &(0x7f0000000300)={'bond0\x00', @ifru_names='sit0\x00'}) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0x6, &(0x7f0000003480)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc6e080000070900000d000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) write(r1, &(0x7f0000000240)='0000:00:1d.7', 0xc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pci/drivers/ehci-pci/bind\x00', 0x1, 0x0) write(r4, &(0x7f00000002c0)='0000:00:1d.7', 0xc) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0x7, 0xb}, {0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7fffffff, 0x1, 0x4, 0x4}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240000a1}, 0x4890) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="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", 0x1d1, 0x0, 0x0, 0x0) r8 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000"], 0xf0}}, 0x0) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket$packet(0x11, 0x3, 0x300) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r13, 0x8946, &(0x7f0000000240)={'team0\x00', &(0x7f0000000140)=@ethtool_drvinfo={0x3, "df69de45d0f36f4f16c70f68cdfab82c8ebc0979a218659083ee4249a966cfcc", "e7a7edb8c81bb14b7aaa4493acad77c2841a1cade7ed3a2780f1d01064992ba7", "91c9851df29c3357cd9bb75f6c3dbe826e20397f654497ec8e144231e707b3cd", "d30f5c12709b096986047d46169ec1098f0219096348c4e0a110f242f6c24da5", "cd80463b35e87790111bdc7bbdd879baf6d4c437ccac17f4f97502854080066c", "0786cfa1a4a2709cf5db307f", 0x0, 0x6, 0x40, 0xffffffff, 0x8}}) sendto$packet(r12, &(0x7f00000005c0)="bad330fbc93f8578040000ea0756", 0xe, 0x4044041, &(0x7f00000001c0)={0x11, 0x16, r11, 0x1, 0xd8}, 0x14) 5.215727745s ago: executing program 2 (id=1777): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x1, 0x0) write(r0, &(0x7f0000000180), 0x0) 5.166701548s ago: executing program 2 (id=1778): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f00000001c0)='0x1234\n\x00', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, &(0x7f0000000240), 0x0) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/printer.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000380)='./config/usb_gadget/g1/functions/printer.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/printer.usb0\x00') (fail_nth: 3) close(0xffffffffffffffff) 5.164467636s ago: executing program 2 (id=1779): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x2, 0xffffffffea110f4c, 0xd, 0xfffd, 0xf, 0x802, 0x0, 0x0, 0x40, 0x6}}, 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_GET_TSC_KHZ_vm(r1, 0xaea3) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_SNDMTU(r4, 0x112, 0xc, &(0x7f0000000100)=0xc1, &(0x7f0000000140)=0x2) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.945480038s ago: executing program 0 (id=1781): ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x4, 0x0, 0x10000}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000080)={0x5f1, r1}) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, 0xffffffffffffffff) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f0000000140)={&(0x7f0000000100)="27ae6ece203a332bf315994e0fdd7a90", 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r0, 0x4122, 0x0) getpeername(r2, &(0x7f00000001c0)=@pptp={0x18, 0x2, {0x0, @broadcast}}, &(0x7f0000000240)=0x80) ioctl$HIDIOCGFEATURE(r0, 0xc0404807, &(0x7f0000000280)={0x40, "5f820a6eb558fbed853f7616f4d9b3ab4e542c7d572399622c9cd6066042e0129efdb96d8c24067b68ecae13a96dac8b2686093265b5e3e7b20afb5a7b537a9b"}) r4 = syz_open_dev$hidraw(&(0x7f0000000300), 0x0, 0x2000) ioctl$SNDRV_TIMER_IOCTL_CREATE(r0, 0xc02054a5, &(0x7f0000000340)={0x6, r4, 'id0\x00'}) ioctl$XFS_IOC_GETVERSION(r5, 0x80087601, &(0x7f00000003c0)) close_range(r3, r0, 0x0) r6 = accept4$phonet_pipe(r5, &(0x7f0000000400), &(0x7f0000000440)=0x10, 0x0) r7 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) close_range(r6, r7, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r4, {0x8}}, './file0\x00'}) ioctl$SNDCTL_SEQ_PANIC(r8, 0x5111) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r8, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)={0x12c, r9, 0x800, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x1e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0xf2, 0x33, @data_frame={@a_msdu=@type11={{0x0, 0x2, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x5}, @broadcast, @broadcast, @random="88f7db24e631", {0xf, 0x2}, @device_a, @void, @value=@ver_80211n={0x0, 0x9, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1}}, @a_msdu=[{@broadcast, @device_a, 0xbb, "9e743139ee9b178297960f899b9f643059895588b60543253fb5059af667bec6d685f5e5820f204a9d76d68ccf176ffd974388e03b93ba5c2b0cac400cd73adf245f677c8fe00761c9f8c14505f7b2a5e649c8b46b991a0233e7465ddd51208f6f85f16a88ba17f1524facf5be5eb2dfd8b2123b68439ae00f3bd169b7ce969fb03dda5336521e1c6f8c42e041bec0ee401332166d43a8d909fc6ff28f79e51af5d7c5b494d76941fc043d7544bfe3c95f2556cf28d1a681250d22"}]}}]}, 0x12c}, 0x1, 0x0, 0x0, 0x24008811}, 0x800) setsockopt$inet6_IPV6_PKTINFO(r8, 0x29, 0x32, &(0x7f0000000740)={@loopback}, 0x14) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c00)={&(0x7f00000007c0)={0x41c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xc8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff0000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x70400000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6d8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}]}, @TIPC_NLA_NODE={0x124, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x101, 0x3, "13e3882ac420f052201d5645854a940a7557660ecd4dcf5d090e74a5269f0ee7d71270e75923d4ed9e6010bbe9c9c4e514492fdf8ae09906da3cf337dba330ede6ae9acacd5286feeb674102d1b8eb31149ceab4cb4b1ce93f6de233f543b9ad337d927215c311d6c5e258ff97b3c7ffcbec5936837f628f6b9127ee71e554d859e8dda415c90c502416d5134f1c88951c9e18d101d0cea9e0b2921c15be4489768d0f3d8cd33cfbf69e16b944ad7f51af620c0144d0c286317c1691fec63893203e5122f17a84dfb5ef2da345978c694afa1bd952f4db981ada6b94c1d6fcfe7ab9e020609db9da4099907f4060a34145b049b7438309a4e3b5961486"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_ID={0x5, 0x3, "82"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xca}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x81}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xe}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8000}]}, @TIPC_NLA_NODE={0x74, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x94ef}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "17778f8399e1f7f12fd0348ee42fe0d39bfe9be3cd62b46c13f24600cf2692b030d3ce"}}]}, @TIPC_NLA_MEDIA={0xbc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xab5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}]}]}, @TIPC_NLA_NODE={0xac, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xa1, 0x3, "e9307ab5ae7de2a6fa1c5077239dc3069042559000df47df29b557d79409ebafc886969d5d0f3b68ff72ab6074fd8eb1829019200a845dffe22922a07061dde6cf080191f71887b29379dcc5a505ecea4d19873312da43a19a357a3a1a6ac5d2e02cbef47e542833cba69477de05621324a99f929214946dee01c23309ad860fda70b85a64c19155c5771b863dd6dbbbdd60a59fef3d1e03aed64e7c6a"}]}]}, 0x41c}, 0x1, 0x0, 0x0, 0x40}, 0x20000004) landlock_create_ruleset(&(0x7f0000000c80)={0x40, 0xc, 0x2, 0x402, 0x5, 0x2}, 0x30, 0x2) sendmsg$unix(r0, &(0x7f0000001400)={&(0x7f0000000cc0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001340)=[{&(0x7f0000000d40)="ab411f5c0b79547553a2", 0xa}, {&(0x7f0000000d80)="4758e6215e0ca678a1eb8630e7e9e87fee35e89b04a1cdca9a98a17ebfe1d7b0d01b7c9caf00dea1150cd96c593a11ede1f5843f4e0d3cdc2e7289d64b32c945533a63e13c6ee10b0e37fe87fcf1d3544b7f42edfa192b83cdb1bcc894f69d5458f86196cc8c5ed800825eeac1e7230bf5a3d242fdf478736d996b80e87c9458c1111f500e7d4c62e45d841219f15301e5821e7a929761b9510dea50d17f323d97191e60768be86f18e515cd0c350bc05b16a7053cf0cd4fa73380fb27fa0ca6c9e39d80dd2e2966cd240a620dd831592e6383d98c2824754713847fba1118dbab08a11319e96d96", 0xe8}, {&(0x7f0000000e80)="344479ee7f831a841dce81b94ebec3f6a2a062c3b751baf09a73448459a86284f008505f6c8e4274379982a9697e312ddcc1e8c92f5f17eb3f7398aab879621f371c1cf11219cf8e27fd23fd6c52979df28c64bf6fedc31ea7e0be6f19c2fd7b8a68424b51f7e6b43fa6e174cdf55b5086bb0fcc16f6e6b5bd281484f156aede7bbd124bc588249ff50daa91c0ec242bfd7c53fcb879e4a5957606a2ff83470924da4c3d25ae87893bd74b53281dc2be29b1092e710593586cf7", 0xba}, {&(0x7f0000000f40)="3776d2eed1f45154ce3c392273cd668766043426adcc2e265449bfdd2443c98d8e3602351904489b862bce1e5c17f7fd423eca78782b6f7be306cb83994895cdfe5807e3da1f4796ff9c0c08f2a79d4a0ae67e9708949cf7c3d18c312c60ea4b0c4b80ec7f729fe8021e01b1e85f8a86b75ed8cd1a5c3769f8e6d7926ad5656fbe3ae3eb893eca90916ec26b722225e4268976", 0x93}, {&(0x7f0000001000)="9dc1820f321abcdaa1705d64b222892aad78ecf76e60c73ccae96e38501d6df22b92a9de08124b4c5a15b97c8c3770a38fba4bde82b95ef6de1f8af72d9d5d94c31ce104c14ef6ec4ba7cdc59085388e40ddadfd24f3a3b2e2d0710c1e5457a49291601168c5aab856615f1c49bb1b845e7af14881528622809545f43f67e56e49aa4c30d306aed2a5660ac4eef60ed1d824c9", 0x93}, {&(0x7f00000010c0)="d29db73626fab6eab2ad5c0aaca67bdd9ba879dc5bc651e46acc2d55fe02805e1afa01e7dae8a8d8630c5ddfb01efc8293da16b62f1fb48bcd1354f80e6ad7c922f9af917f8c46a8e78c1968cb9f9fdfe011c557abc2c0e6a64bb665cd7cbf64ba8e4bac8343b99efca11976983282dc55e0b86638e1beba8f431221db072d019c75295f33530752844ce1fe32dd91e2a54b95734bf328586ecd5eb9d51e15a194f5b6d847e6584d1f3ad2eed1371ef55208af5782a92f49ba4ea7dc", 0xbc}, {&(0x7f0000001180)="be72f3599e3f6ab71de9f7fd2da0cca504b212cca5ceed978697a2f6897814500fa71e854cbdb0a305cae79b", 0x2c}, {&(0x7f00000011c0)="05a9660a14d643246ffc793134d1ceeb26e0b03f93928a36c26b490b8951086fbd01c3759c3a7d2f1f9137f0d30b9236e25228efd1979e19ef03ed993e33e8576e775be28d395eadd779cdb4602c1bea407050fa627dba64466257fb3aa941ce48fc0ceb873ec881c260ac3027a0949abefcf7d80f0796753a391115c7996c99ff59ac505b4a048a2693be44381913a43a7483f22ac24db678c64f2b3bd6f36838596186c136ab", 0xa7}, {&(0x7f0000001280)="c52435e31d348f79412fd24dd124c042b5a63657a0acb17f77f96574122bd2e28ceaca645c93a2911778ecd5e1f8bf84dc580f2aeb1e8ae8991364b602f18d4147966fea240f2c6c407cfc3ade1e0b0478c235a06880269c5b01343fc84ae813a85aa1e633e360639f442a9ece70c2cc913c4d16d690391ccdfce760571bbcfbf98ae8374f2d62", 0x87}], 0x9, 0x0, 0x0, 0xc67e8fa5cab2b891}, 0x8000) setsockopt$inet_sctp_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000001440)={0x17, 0x0, 0xf0, 0x4, 0x0, 0x7, 0x8, 0x0, 0x16, 0x40, 0x2, 0x2, 0xff, 0x5}, 0xe) ioctl$XFS_IOC_ERROR_INJECTION(r3, 0x40085874, &(0x7f0000001480)={r6, 0x2}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000014c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r8, &(0x7f0000001940)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001900)={&(0x7f00000015c0)={0x314, 0x0, 0x300, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4000000, 0x7b}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end_cf_ack={{}, {0x3}, @broadcast, @device_b}}, @NL80211_ATTR_FRAME={0x295, 0x33, @mgmt_frame=@assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x8}, @device_b, @device_b, @initial, {0x0, 0x2}, @value=@ver_80211n={0x0, 0x7f, 0x1, 0x3, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1}}, 0x800, 0x6b, @default, @void, @val={0x2d, 0x1a, {0x2, 0x1, 0x0, 0x0, {0x5, 0xf16, 0x0, 0x5, 0x0, 0x1, 0x1, 0x3}, 0x1, 0xffffffff, 0x2}}, [{0xdd, 0xe4, "e796e30a27313f01483fd2797f77c9b11763bd28649941154d65188ac63d46d94ee0c2855209583a7f219c41b90a489b0f1df34acb1c7d5605789dd2b9bdbc6a0caa73df608812bcbf7408d254f3ea9b922cdb2f66037a02c66e536a7180ad1ff91e4b4b900936c30db3d7572f33018a23c06cee4a2d1f082e1cb770fd99b4f787eda7f70323f218e0a507c0e3ef2b58247ea5088296d52a63045611ebe8bf74dd9d175850803c63e1dc99306071916fba293306e39cdd4ecbbb7b6e0a66a4e0d09459c96b96f99409d55738e4b3552a4d802db8692bca3b34bfbed29f9d9d1636df065f"}, {0xdd, 0x2a, "48f3d156d6ef83f4d744453b61cf456de71431c805b66e209aa6bd3c5ac972945173eebdc700ff2d74b3"}, {0xdd, 0x54, "c70f489eaea52ec268c26d291e5a0c187c97ca62191e33a3a560016887885e2efa6012930ec632149b5e7cfd07dd054defd05ce81ca16594ec0c6bf4a03f57d66900a436a4f8842fa0a38d93f5742e1d7641a79e"}, {0xdd, 0xe9, "84c5c491c560bc10a873a3e8c4c49070ebc7bb3a880832527755d8982b0b017dc8dc0b5c5adf3fb970c686ca547c778477b855bf0a7ddb1e58574a865016951d763849ab320ce8a65b6bdea9d206a9928a02194781b7e830ab80b47359598a399d299c787e5cf6b5f0d1b9124207272830eb5102f2d6967de7358465e474bac10d7dafc4383c01ee3e05f306e6d1f7c687eb62033feb40245e7ce871c1e15c9ed2a862ffeca987152afabc9535c64b6fd0d800afdf30a9b1cd86b52d30cb4727fe639797f514c25e21bcdc544c8b8cad02f13696ff0764e06ed25f41276018ef95b4e5d485518c9bef"}]}}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack={{}, {0x4}, @broadcast}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x314}, 0x1, 0x0, 0x0, 0x24054000}, 0x24000801) 4.941555691s ago: executing program 0 (id=1782): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x40480923, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='3\n', 0x2) (fail_nth: 3) 4.787188981s ago: executing program 0 (id=1783): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) socket$nl_rdma(0x10, 0x3, 0x14) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0xb00}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) r2 = fsopen(&(0x7f0000000080)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000000c0)='source\x00', &(0x7f0000000100)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000240)='proto\x00', &(0x7f0000000280)='tcp\x00', 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/serio/devices/serio1/protocol\x00', 0x2, 0x0) write(r4, &(0x7f0000000800)='cypress', 0x7) sendmsg$NFT_BATCH(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_CHAIN_USERDATA={0x1a, 0xc, "4302000000dd550000be27e436e18abe5a204a5502d9"}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x4000) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r7, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0xe0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff3, 0xa}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}}, 0x40440c0) bind$packet(r5, &(0x7f0000000040)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @random="d6a365dd00ca"}, 0x14) sendto$inet6(r5, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newtfilter={0x40, 0x2c, 0xf3f, 0x30bd29, 0x25dfd3f5, {0x0, 0x0, 0x0, r9, {0x1}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_ACT={0x4}, @TCA_FLOWER_KEY_ENC_IP_TTL={0x5, 0x52, 0x5}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20041890}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) 4.576554161s ago: executing program 3 (id=1784): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001500010000000000000000000100000008000100", @ANYRES32=r2], 0x1c}}, 0x804) r4 = syz_open_dev$sndpcmc(&(0x7f0000000d00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(r4, 0x806c4120, &(0x7f00000000c0)) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) ioctl$SIOCX25SFACILITIES(r5, 0x89e3, &(0x7f0000000100)={0x1a, 0x1, 0x6, 0xc, 0x7fff}) setsockopt$CAN_RAW_JOIN_FILTERS(r4, 0x65, 0x6, &(0x7f0000000180)=0xfffffffa, 0x4) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000004c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000500)={0x48, 0x2, r7}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000800)={0x48, 0x2, r7}) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000680)) ioctl(r6, 0x3b89, &(0x7f00000002c0)="3000000004000000030000000600") setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000400)=0x1, 0xa) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r5) mount(&(0x7f0000000300)=@sr0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='ecryptfs\x00', 0x0, &(0x7f0000000600)='/dev/iommu\x00') r8 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000030000000028c220a0cd77bd", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) process_mrelease(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000001509010000000000b500f8ffffff000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000000a36c00850000001700000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto(r1, &(0x7f0000001340)="f6", 0x1, 0xd63a66976f7df3e1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r8, &(0x7f0000000240)={0x8}) r9 = socket$rds(0x15, 0x5, 0x0) bind$rds(r9, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) 4.512199102s ago: executing program 3 (id=1785): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x50) write$sysctl(r0, &(0x7f0000000100)='4\x00', 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) 4.355545349s ago: executing program 2 (id=1786): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0xd80f, 0x20}, @ldst={0x0, 0x1, 0x1, 0x8, 0x8, 0xfffffffffffffff8, 0xfffffffffffffffc}], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) 4.353699589s ago: executing program 2 (id=1787): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x9a) socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x6, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x58, 0x2, 0x9, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}, @NFCTH_TUPLE={0x4}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x44800}, 0x4004054) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f00000001c0)={r5, 0x1, 0x2}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x400000000000000) 4.275090591s ago: executing program 1 (id=1788): r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x50) setsockopt$sock_attach_bpf(r0, 0x84, 0x19, &(0x7f0000000080), 0x4) write$sysctl(r0, &(0x7f0000000100)='4\x00', 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) 4.194730273s ago: executing program 1 (id=1789): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x50) socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x19, 0x0, 0x0) write$sysctl(r1, &(0x7f0000000100)='4\x00', 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) (fail_nth: 1) 4.048274753s ago: executing program 3 (id=1790): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x50) socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x19, 0x0, 0x0) write$sysctl(r1, &(0x7f0000000100)='4\x00', 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x5}}, 0x20) 3.352189841s ago: executing program 0 (id=1791): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) r1 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) read$dsp(r1, &(0x7f0000000040)=""/196, 0xc4) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000040)=0x800) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000001c0)=0x840010c) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000140)={0x0, 0x2}) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x0, 0x1, 0x4, "1d0344ea898b2daccf6b60adef7779e9824efd21d180880994f5e876f958432b", 0x31384142}) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000003c0)="00214500002c00000000400600000a0000010a000002005000500000000100000001601003e80000000001010101", 0x2e}], 0x1, 0x0, 0x0) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240)="21a9b46c3677ba2ee777e8200e2d87bda6e3b6dcc6bc19b0791fb1c104abb9c1edfa3598d39fa52a00e4bdc83a00f26ffd6363c48eda7bf6ef6fe777241404c474ee6b3d5cb0ef10e8d83741ae457f71e4ca62ac88a93cb1e4823eb736ed5c8cefc79947454ad1b9a2af6eaecf480d8c6a42dd6312cf7ab99fc9c49e75743143919eeb2bc66ef8f662b15eaaecf9c543668a995626e0c31459d906b6977036ace3c0c85533c3fee9084098ee2f95a0bc8a74d631ac9f52eb87fdc594ee05db1ed201e715300af2f8fb9cfbe9938afc4b0e4a7f143e4ae1a25d7f76602bccc2ee97575a100a9cf1815d29ec223625b4cc11fa91", 0xf3, r3}, 0x68) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000003c0)="002145000b2c000b0000400600000a0000010a000002005000500000000200000001601003e80000000001010101", 0x2e}], 0x1, 0x0, 0x0) 2.516947144s ago: executing program 1 (id=1792): r0 = socket$inet_udp(0x2, 0x2, 0x0) setresgid(0xee00, 0xee01, 0x0) r1 = syz_clone(0x1100400, 0x0, 0xffffffffffffff2b, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r3 = syz_open_procfs(r1, &(0x7f0000000080)='stat\x00') pread64(r3, &(0x7f0000000140)=""/15, 0xf, 0x4) bind$inet(r0, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142bc00090ef83804919e1d9fb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x605, 0xfffffffc, 0x83, {0x0, 0x0, 0x0, 0x0, 0x1001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2006, 0x0, 0x0, 0x0, 0x60, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000000)={@my=0x0}) r7 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000001440), 0x801, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r7, 0xaa00, 0x0) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r6, 0x7af, &(0x7f0000000000)={@my=0x1, 0x5}) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) ptrace(0x10, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000940)={@dev, 0x0}, &(0x7f0000000980)=0x14) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000480)={0x2, 0xb, 0x0, 0x0, 0x3, 0x0, 0x4070bd2c, 0x25dfdbfc, [@sadb_key={0x1, 0x9}]}, 0x18}, 0x1, 0x7}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0xf, 0x2c, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_fd={0x18, 0x4, 0x1, 0x0, r2}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xf}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, @alu={0x7, 0x0, 0x6, 0x2, 0x9, 0x6, 0xfffffffffffffff0}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000840)='GPL\x00', 0x4, 0xa9, &(0x7f0000000880)=""/169, 0x41100, 0x20, '\x00', r9, @cgroup_device, r2, 0x8, &(0x7f00000009c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000a00)={0x0, 0xa, 0x7fffffff, 0x4}, 0x10, 0xffffffffffffffff, r2, 0x4, &(0x7f0000000a40)=[r2, r3], &(0x7f0000000a80)=[{0x3, 0x4, 0x9, 0x6}, {0x2, 0x2, 0xb, 0x9}, {0x3, 0x5, 0x2}, {0x0, 0x4, 0xc, 0x7}], 0x10, 0x63}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.516693953s ago: executing program 3 (id=1793): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142bc00090ef83804919e1d9fb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2006, 0x0, 0x0, 0x0, 0x60}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) ptrace(0x10, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.25486919s ago: executing program 1 (id=1794): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000004c0)=@upd={0xe8, 0x12, 0x201, 0x70bd2b, 0x25dfdbfc, {{'ctr-twofish-avx\x00'}, '\x00', '\x00', 0x400}, [{0x8, 0x1, 0x3}]}, 0xe8}, 0x1, 0x0, 0x0, 0x8000}, 0x4800) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYRES8], 0x48}}, 0x0) sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) (async) r4 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f00000000c0)=0x10, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010027bd7000fddbdf253800000008000300", @ANYRES32=r9, @ANYBLOB='\f\x00X\x00'], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x80) (async, rerun: 32) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f0000000400)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, r5, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x2, 0xc}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) (rerun: 32) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10) (async) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff) (async, rerun: 32) r10 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r10, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x6}, {}, @connect}, {0x0, 0x5, 0x0, 0x0, @tick, {}, {}, @result}, {0x10, 0x0, 0x0, 0x0, @time={0x4, 0x7}, {}, {0x0, 0x83}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time}], 0x70) (async, rerun: 32) mount(0x0, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000200)='ecryptfs\x00', 0x0, &(0x7f0000000380)='ecryptfs_sig=1214567090\xde2\xd0\x01\xe84`\xff\x86\xb9\xebF\x053456,ecryptfs_cipher=aes,ec\x8c|}\xab\x06\x00\x00\x00yptfes51') (async, rerun: 32) personality(0xfc6703a0ffffffff) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x202001, 0x0) 2.246492392s ago: executing program 3 (id=1795): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r2, 0x4068aea3, &(0x7f0000000300)={0xa3, 0x0, 0x0}) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000700)=@vmx={0x4, 0x0, 0x2080, {0x1000, 0xffffffffffffffff, {0x3f}}}) 2.15724749s ago: executing program 1 (id=1796): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x3a, [0xc, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0x6, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x9, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x8, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffef, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0x95e, 0x1000, 0x0, 0x200b398, 0x8001, 0x6, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x10000, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18a, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4007, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x2, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x6, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0x6, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x6, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0xfee00000) 1.267216007s ago: executing program 0 (id=1797): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0xc, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r1 = syz_open_pts(r0, 0x141601) fcntl$setstatus(r1, 0x4, 0x102800) 1.267013975s ago: executing program 0 (id=1798): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x1, 0x2b, 0x118, 0x68, 0x0, 0x60, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, "11f3305280f125e6e11a9314b296b53b5d25867c0a8c27b6478984da4eb57d56be4ee0efb45c215a64d718cb6f639e60026f3fcd218590d2fd47a1803f67d8c3c5ebe25ed9991203e04d3bdc1e70ef759d8f6ca8744bd9d672c1c9368faa9f538c1e6d3f741c022ddc02e6d3e1881c4ebf6d62df9fc11edf041909cea12539f7b05232c1cd9a748ff7e4a6b7ce7420bab33b3ce6da2742316d128730875e8c1d068a59aef9030e56546effdf83fe2b6fcadf2a73552e77d9cfdb452639cae6aa8f5c7aba74516be0a290f60c30c51e8de293376c07b999d87ac564e47f21f28fda4d277beb21a78ab228bfa2b84461fc73b9a82c9ac29bf066fa44f3f676ef64edab4c6d"}}, 0x126) (fail_nth: 3) 398.456µs ago: executing program 2 (id=1799): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={0x0, &(0x7f0000000c40)=""/252, 0x0, 0xfc, 0x6, 0x0, 0x10000}, 0x28) ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r1, 0x8949, &(0x7f0000000000)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x24, r3, 0x1, 0x4070bd28, 0x2, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x24}}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1a00000000000000080000000200000020220400", @ANYRES32, @ANYBLOB="fcffffff00000000000000000600000000000000", @ANYRES32=r2, @ANYRES32, @ANYBLOB="01000000000000000200"/28], 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r4, 0x0, &(0x7f0000001700)=""/53}, 0x20) mkdir(&(0x7f0000000000)='myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='myproc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='myproc/self/root/dev/kmsg\x00', 0x0, 0x8c) read(r5, &(0x7f0000000600)=""/1024, 0x400) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x20000014) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000040)=0x80000001, 0x4) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x3}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xca, r9, 0x18}, 0x38) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000140)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe8", 0xffa9, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r10, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14) 0s ago: executing program 3 (id=1800): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1000008, 0x11, r0, 0x100000000) r1 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'vlan0\x00'}) syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) r2 = syz_open_dev$hidraw(&(0x7f0000000280), 0x0, 0x2) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae03, 0xa3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='proc\x00', 0x42) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x0) write(r4, &(0x7f0000000500)='1', 0x1) write$hidraw(r2, &(0x7f0000000000)='\x00\x00', 0x2) r5 = socket(0x10, 0x2, 0x0) sendto$inet6(r5, &(0x7f00000007c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006020a0000000d0085a168d0bf46d32345653600648d270005000a00000849935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000407160012000a0000000000e000e218d1dd3b6ed538f6523250", 0x78, 0x0, 0x0, 0xe0ffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x74, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x74}}, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000540)={&(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[{}], &(0x7f00000004c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x3, 0x8}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000005c0)={&(0x7f0000000080)=[0x0], &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}], r7, 0x0, '\x00', 0x1, 0x7}) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x40050}, 0x20048000) recvmmsg$unix(r8, &(0x7f0000002380)=[{{0x0, 0x3f, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) io_setup(0x6, &(0x7f0000000680)=0x0) io_submit(r9, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x30, 0x3, 0x1, 0xaa6c, 0xffffffffffffffff, 0x0, 0x60, 0x30, 0x30}]) r10 = userfaultfd(0x1) ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x140}) ioctl$UFFDIO_REGISTER(r10, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r11 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r11, &(0x7f0000000040), 0x10) 0s ago: executing program 3 (id=1805): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/usb-conn-gpio/uevent\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='add', 0x3f) kernel console output (not intermixed with test programs): { create } for pid=9929 comm="syz.3.1482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 182.979181][ T42] audit: type=1400 audit(1787254545.032:678): avc: denied { setopt } for pid=9929 comm="syz.3.1482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 182.980297][ T9930] hid-generic 0003:0627:0001.0011: pid 9930 passed too short report [ 183.301071][ T9938] kvm: pic: non byte write [ 183.391487][ T9918] syz.2.1477 (9918): drop_caches: 2 [ 184.248996][ T5739] usb 5-1: USB disconnect, device number 11 [ 184.664184][ T9949] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 184.671420][ T9949] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1489'. [ 184.815384][ T9957] md/raid10:md0: not enough operational mirrors. [ 184.826736][ T9957] md: pers->run() failed ... [ 184.829000][ T9954] md: could not open device unknown-block(1,1). [ 184.832478][ T9954] md: error, md_import_device() returned -16 [ 184.835317][ T9957] md: could not open device unknown-block(1,2). [ 184.838048][ T9957] md: error, md_import_device() returned -16 [ 184.928414][ T70] hid-generic 0006:0008:0008.0012: unknown main item tag 0x0 [ 184.931586][ T70] hid-generic 0006:0008:0008.0012: unknown main item tag 0x0 [ 184.933969][ T70] hid-generic 0006:0008:0008.0012: unknown main item tag 0x0 [ 184.936721][ T70] hid-generic 0006:0008:0008.0012: unknown main item tag 0x0 [ 184.939113][ T70] hid-generic 0006:0008:0008.0012: unknown main item tag 0x0 [ 184.941487][ T70] hid-generic 0006:0008:0008.0012: unknown main item tag 0x0 [ 184.943910][ T70] hid-generic 0006:0008:0008.0012: unknown main item tag 0x0 [ 184.947831][ T70] hid-generic 0006:0008:0008.0012: unknown main item tag 0x0 [ 184.950223][ T70] hid-generic 0006:0008:0008.0012: unknown main item tag 0x0 [ 184.952551][ T70] hid-generic 0006:0008:0008.0012: unknown main item tag 0x0 [ 184.961538][ T70] hid-generic 0006:0008:0008.0012: hidraw1: VIRTUAL HID v0.04 Device [syz1] on syz1 [ 185.005595][ T9965] CIFS: Attempting to mount //127.0.0.1/share [ 185.010047][ T9965] CIFS: VFS: Error connecting to socket. Aborting operation. [ 185.011614][ T9968] fido_id[9968]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 185.012425][ T9965] CIFS: VFS: cifs_mount failed w/return code = -4 [ 185.155647][ T9971] hid-generic 0003:0627:0001.0011: pid 9971 passed too large report [ 185.175030][ T5739] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 185.221652][ T9974] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 185.326579][ T5739] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 185.331836][ T5739] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 185.335536][ T5739] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 185.340474][ T5739] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 185.345881][ T5739] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 185.350693][ T5739] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 185.356744][ T5739] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 185.360109][ T5739] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 185.364843][ T5739] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 185.369973][ T5739] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 185.374875][ T5739] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 185.380619][ T5739] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 185.383962][ T5739] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 185.388718][ T5739] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 185.393898][ T5739] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 185.398763][ T5739] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 185.406286][ T5739] usb 5-1: string descriptor 0 read error: -22 [ 185.409140][ T5739] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.420642][ T5739] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 185.638705][ T42] audit: type=1400 audit(1787254547.702:679): avc: denied { listen } for pid=9982 comm="syz.1.1501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 185.910862][ T9988] md/raid10:md0: not enough operational mirrors. [ 185.915385][ T9988] md: pers->run() failed ... [ 185.920012][ T9987] md: could not open device unknown-block(1,1). [ 185.922443][ T9987] md: error, md_import_device() returned -16 [ 185.925410][ T9988] md: could not open device unknown-block(1,2). [ 185.927844][ T9988] md: error, md_import_device() returned -16 [ 186.301044][T10000] ehci-pci 0000:00:1d.7: remove, state 1 [ 186.303040][T10000] usb usb2: USB disconnect, device number 1 [ 186.307210][T10000] usb 2-1: USB disconnect, device number 2 [ 186.364677][T10000] ehci-pci 0000:00:1d.7: USB bus 2 deregistered [ 186.397865][T10002] syzkaller0: entered promiscuous mode [ 186.400377][T10002] syzkaller0: entered allmulticast mode [ 186.408075][T10002] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1506'. [ 186.624863][ T50] usb 1-1: new full-speed USB device number 8 using uhci_hcd [ 186.780386][ T50] usb 1-1: not running at top speed; connect to a high speed hub [ 186.785257][ T50] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 186.811225][ T50] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 186.813984][ T50] usb 1-1: Product: QEMU USB Tablet [ 186.815751][ T50] usb 1-1: Manufacturer: QEMU [ 186.817265][ T50] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 186.836172][ T50] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb1/1-1/1-1:1.0/0003:0627:0001.0013/input/input26 [ 186.881681][T10004] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=10004 comm=syz.2.1507 [ 186.898416][ T50] hid-generic 0003:0627:0001.0013: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0 [ 186.918220][T10001] usb 1-1: USB disconnect, device number 8 [ 187.009548][T10007] fido_id[10007]: Failed to open report descriptor at '/sys/devices/pci0000:00/0000:00:1d.0/usb1/1-1/report_descriptor': No such file or directory [ 187.139484][T10001] ehci-pci 0000:00:1d.7: EHCI Host Controller [ 187.143407][T10001] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 2 [ 187.152914][T10001] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000 [ 187.176360][T10001] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00 [ 187.179241][T10001] usb usb2: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 187.183033][T10001] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 187.186097][T10001] usb usb2: Product: EHCI Host Controller [ 187.188185][T10001] usb usb2: Manufacturer: Linux syzkaller ehci_hcd [ 187.190601][T10001] usb usb2: SerialNumber: 0000:00:1d.7 [ 187.204012][T10001] hub 2-0:1.0: USB hub found [ 187.207572][T10001] hub 2-0:1.0: 6 ports detected [ 187.257836][T10001] hub 1-0:1.0: USB hub found [ 187.263027][T10001] hub 1-0:1.0: 2 ports detected [ 187.299207][T10001] hub 3-0:1.0: USB hub found [ 187.301519][T10001] hub 3-0:1.0: 2 ports detected [ 187.337997][T10001] hub 4-0:1.0: USB hub found [ 187.340423][T10001] hub 4-0:1.0: 2 ports detected [ 187.345568][T10022] FAULT_INJECTION: forcing a failure. [ 187.345568][T10022] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 187.350719][T10022] CPU: 1 UID: 0 PID: 10022 Comm: syz.2.1514 Not tainted syzkaller #0 PREEMPT(full) [ 187.350742][T10022] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 187.350753][T10022] Call Trace: [ 187.350761][T10022] [ 187.350770][T10022] dump_stack_lvl+0x100/0x190 [ 187.350809][T10022] should_fail_ex.cold+0x5/0xa [ 187.350833][T10022] _copy_from_iter+0x1f4/0x1690 [ 187.350877][T10022] ? __pfx__copy_from_iter+0x10/0x10 [ 187.350904][T10022] ? _parse_integer_limit+0x1ac/0x220 [ 187.350930][T10022] ? _kstrtoull+0x13c/0x1f0 [ 187.350949][T10022] ? __pfx__kstrtoull+0x10/0x10 [ 187.350973][T10022] tun_get_user+0x3ba/0x3cc0 [ 187.351018][T10022] ? __pfx_tun_get_user+0x10/0x10 [ 187.351046][T10022] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 187.351076][T10022] ? find_held_lock+0x2b/0x80 [ 187.351121][T10022] ? tun_get+0x191/0x370 [ 187.351146][T10022] ? tun_get+0x191/0x370 [ 187.351177][T10022] tun_chr_write_iter+0xdc/0x200 [ 187.351197][T10022] vfs_write+0x6af/0x1050 [ 187.351215][T10022] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 187.351235][T10022] ? __pfx_vfs_write+0x10/0x10 [ 187.351250][T10022] ? find_held_lock+0x2b/0x80 [ 187.351286][T10022] ksys_write+0x12a/0x250 [ 187.351303][T10022] ? __pfx_ksys_write+0x10/0x10 [ 187.351327][T10022] do_syscall_64+0x123/0x790 [ 187.351361][T10022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.351380][T10022] RIP: 0033:0x7f6a6d99e0d9 [ 187.351396][T10022] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.351413][T10022] RSP: 002b:00007f6a6bbf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 187.351431][T10022] RAX: ffffffffffffffda RBX: 00007f6a6dc25fa0 RCX: 00007f6a6d99e0d9 [ 187.351442][T10022] RDX: 0000000000000fce RSI: 0000200000000240 RDI: 0000000000000003 [ 187.351452][T10022] RBP: 00007f6a6bbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 187.351463][T10022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.351473][T10022] R13: 00007f6a6dc26038 R14: 00007f6a6dc25fa0 R15: 00007fff14dfad48 [ 187.351498][T10022] [ 187.494908][ T34] usb 2-1: new high-speed USB device number 2 using ehci-pci [ 187.666409][ T34] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 187.683250][ T34] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 187.686786][ T34] usb 2-1: Product: QEMU USB Tablet [ 187.688959][ T34] usb 2-1: Manufacturer: QEMU [ 187.690945][ T34] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 187.698657][ T70] usb 5-1: USB disconnect, device number 12 [ 187.719597][ T34] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0014/input/input27 [ 187.787462][ T34] hid-generic 0003:0627:0001.0014: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 188.226549][T10036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.364898][ T41] usb 8-1: new low-speed USB device number 16 using dummy_hcd [ 189.516128][ T41] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 189.521123][ T41] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 189.524390][ T41] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 189.529469][ T41] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 189.534478][ T41] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 189.540395][ T41] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 189.547189][ T41] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 189.550438][ T41] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 189.555293][ T41] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 189.560539][ T41] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 189.565282][ T41] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 189.570741][ T41] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 189.573767][ T41] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 189.579681][ T41] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 189.584708][ T41] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 189.590315][ T41] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 189.599073][ T41] usb 8-1: string descriptor 0 read error: -22 [ 189.601911][ T41] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.629684][ T41] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 190.722171][T10081] syzkaller0: entered promiscuous mode [ 190.724460][T10081] syzkaller0: entered allmulticast mode [ 190.836316][T10078] netlink: 'syz.1.1537': attribute type 1 has an invalid length. [ 190.964430][T10078] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10078 comm=syz.1.1537 [ 191.182667][T10086] FAULT_INJECTION: forcing a failure. [ 191.182667][T10086] name failslab, interval 1, probability 0, space 0, times 0 [ 191.188351][T10086] CPU: 0 UID: 0 PID: 10086 Comm: syz.0.1539 Not tainted syzkaller #0 PREEMPT(full) [ 191.188376][T10086] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 191.188389][T10086] Call Trace: [ 191.188395][T10086] [ 191.188404][T10086] dump_stack_lvl+0x100/0x190 [ 191.188435][T10086] should_fail_ex.cold+0x5/0xa [ 191.188461][T10086] should_failslab+0xc2/0x120 [ 191.188486][T10086] kmem_cache_alloc_noprof+0x91/0x6a0 [ 191.188511][T10086] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 191.188542][T10086] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 191.188574][T10086] mmu_topup_memory_caches+0x25/0x170 [ 191.188605][T10086] kvm_mmu_load+0xe2/0x2570 [ 191.188633][T10086] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 191.188655][T10086] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 191.188681][T10086] ? __pfx_kvm_mmu_load+0x10/0x10 [ 191.188707][T10086] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 191.188732][T10086] ? kvm_check_and_inject_events+0x873/0x12a0 [ 191.188764][T10086] ? record_steal_time+0x3c0/0xbb0 [ 191.188788][T10086] vcpu_run+0x3ab0/0x5df0 [ 191.188818][T10086] ? __pfx_vcpu_run+0x10/0x10 [ 191.188843][T10086] ? rcu_is_watching+0x13/0xc0 [ 191.188866][T10086] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 191.188882][T10086] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 191.188907][T10086] kvm_vcpu_ioctl+0x730/0x1700 [ 191.188931][T10086] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 191.188955][T10086] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 191.188984][T10086] ? do_vfs_ioctl+0x226/0x13e0 [ 191.189002][T10086] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 191.189018][T10086] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 191.189048][T10086] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 191.189094][T10086] ? selinux_file_ioctl+0x13b/0x290 [ 191.189119][T10086] ? selinux_file_ioctl+0xb6/0x290 [ 191.189147][T10086] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 191.189172][T10086] __x64_sys_ioctl+0x18e/0x210 [ 191.189192][T10086] do_syscall_64+0x123/0x790 [ 191.189213][T10086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.189233][T10086] RIP: 0033:0x7fd68459e0d9 [ 191.189250][T10086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.189267][T10086] RSP: 002b:00007fd6854ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 191.189287][T10086] RAX: ffffffffffffffda RBX: 00007fd684825fa0 RCX: 00007fd68459e0d9 [ 191.189299][T10086] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000e [ 191.189310][T10086] RBP: 00007fd6854ad090 R08: 0000000000000000 R09: 0000000000000000 [ 191.189321][T10086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 191.189333][T10086] R13: 00007fd684826038 R14: 00007fd684825fa0 R15: 00007ffe2d672a78 [ 191.189359][T10086] [ 191.511767][T10097] md: could not open device unknown-block(1,1). [ 191.514537][T10097] md: error, md_import_device() returned -16 [ 191.548400][T10096] md/raid10:md0: not enough operational mirrors. [ 191.563996][T10096] md: pers->run() failed ... [ 191.715866][ T42] audit: type=1400 audit(1787254553.782:680): avc: denied { setopt } for pid=10100 comm="syz.2.1544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 191.865303][ T10] usb 8-1: USB disconnect, device number 16 [ 192.563318][T10110] FAULT_INJECTION: forcing a failure. [ 192.563318][T10110] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.567792][T10110] CPU: 2 UID: 0 PID: 10110 Comm: syz.2.1547 Not tainted syzkaller #0 PREEMPT(full) [ 192.567808][T10110] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 192.567815][T10110] Call Trace: [ 192.567820][T10110] [ 192.567826][T10110] dump_stack_lvl+0x100/0x190 [ 192.567845][T10110] should_fail_ex.cold+0x5/0xa [ 192.567861][T10110] _copy_from_user+0x2e/0xd0 [ 192.567880][T10110] __sys_bpf+0x2f5/0x4a30 [ 192.567900][T10110] ? __pfx___sys_bpf+0x10/0x10 [ 192.567914][T10110] ? find_held_lock+0x2b/0x80 [ 192.567927][T10110] ? get_pid_task+0xfc/0x250 [ 192.567939][T10110] ? get_pid_task+0xfc/0x250 [ 192.567955][T10110] ? find_held_lock+0x2b/0x80 [ 192.567970][T10110] ? rcu_read_lock_any_held+0x6a/0x90 [ 192.567984][T10110] ? find_held_lock+0x2b/0x80 [ 192.567995][T10110] ? ksys_write+0x190/0x250 [ 192.568006][T10110] ? ksys_write+0x190/0x250 [ 192.568026][T10110] ? fput+0x7c/0x100 [ 192.568040][T10110] ? ksys_write+0x1ac/0x250 [ 192.568052][T10110] ? __x64_sys_bpf+0xce/0x140 [ 192.568065][T10110] __x64_sys_bpf+0xce/0x140 [ 192.568080][T10110] ? do_syscall_64+0xae/0x790 [ 192.568092][T10110] do_syscall_64+0x123/0x790 [ 192.568104][T10110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.568115][T10110] RIP: 0033:0x7f6a6d99e0d9 [ 192.568126][T10110] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.568137][T10110] RSP: 002b:00007f6a6bbf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 192.568149][T10110] RAX: ffffffffffffffda RBX: 00007f6a6dc25fa0 RCX: 00007f6a6d99e0d9 [ 192.568156][T10110] RDX: 00000000000000e8 RSI: 0000200000000240 RDI: 0000000000000005 [ 192.568162][T10110] RBP: 00007f6a6bbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 192.568169][T10110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.568175][T10110] R13: 00007f6a6dc26038 R14: 00007f6a6dc25fa0 R15: 00007fff14dfad48 [ 192.568190][T10110] [ 192.984866][ T34] usb 7-1: new low-speed USB device number 9 using dummy_hcd [ 193.135415][ T34] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 193.147563][ T34] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 193.152684][ T34] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 193.156532][ T34] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 193.160690][ T34] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 193.170769][ T34] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 193.180917][ T34] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 193.183441][ T34] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 193.192687][ T34] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 193.196736][ T34] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 193.200347][ T34] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 193.212060][ T34] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 193.215388][ T34] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 193.219770][ T34] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 193.224459][ T34] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 193.235968][ T34] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 193.247318][ T34] usb 7-1: string descriptor 0 read error: -22 [ 193.249323][ T34] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.264326][ T34] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 193.887545][T10140] kvm: MONITOR instruction emulated as NOP! [ 193.899989][T10140] ip6t_srh: unknown srh match flags 4015 [ 194.166856][ T1437] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.169183][ T1437] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.175345][T10137] veth0_to_bond: entered allmulticast mode [ 195.100469][T10149] FAULT_INJECTION: forcing a failure. [ 195.100469][T10149] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.106049][T10149] CPU: 3 UID: 0 PID: 10149 Comm: syz.0.1563 Not tainted syzkaller #0 PREEMPT(full) [ 195.106066][T10149] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 195.106074][T10149] Call Trace: [ 195.106079][T10149] [ 195.106085][T10149] dump_stack_lvl+0x100/0x190 [ 195.106106][T10149] should_fail_ex.cold+0x5/0xa [ 195.106122][T10149] _copy_to_user+0x32/0xd0 [ 195.106143][T10149] simple_read_from_buffer+0xcb/0x170 [ 195.106159][T10149] proc_fail_nth_read+0x1af/0x230 [ 195.106174][T10149] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 195.106189][T10149] ? rw_verify_area+0xce/0x6d0 [ 195.106207][T10149] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 195.106221][T10149] vfs_read+0x1e4/0xb40 [ 195.106234][T10149] ? __pfx_vfs_read+0x10/0x10 [ 195.106243][T10149] ? find_held_lock+0x2b/0x80 [ 195.106258][T10149] ? __fget_files+0x215/0x3d0 [ 195.106274][T10149] ? __fget_files+0x21f/0x3d0 [ 195.106292][T10149] ksys_read+0x12a/0x250 [ 195.106303][T10149] ? __pfx_ksys_read+0x10/0x10 [ 195.106318][T10149] do_syscall_64+0x123/0x790 [ 195.106332][T10149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.106344][T10149] RIP: 0033:0x7fd68455e90e [ 195.106355][T10149] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 195.106366][T10149] RSP: 002b:00007fd6854acfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 195.106378][T10149] RAX: ffffffffffffffda RBX: 00007fd6854ad6c0 RCX: 00007fd68455e90e [ 195.106392][T10149] RDX: 000000000000000f RSI: 00007fd6854ad0a0 RDI: 0000000000000004 [ 195.106399][T10149] RBP: 00007fd6854ad090 R08: 0000000000000000 R09: 0000000000000000 [ 195.106406][T10149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.106413][T10149] R13: 00007fd684826038 R14: 00007fd684825fa0 R15: 00007ffe2d672a78 [ 195.106428][T10149] [ 195.369563][T10169] FAULT_INJECTION: forcing a failure. [ 195.369563][T10169] name failslab, interval 1, probability 0, space 0, times 0 [ 195.373458][T10169] CPU: 2 UID: 0 PID: 10169 Comm: syz.0.1571 Not tainted syzkaller #0 PREEMPT(full) [ 195.373475][T10169] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 195.373482][T10169] Call Trace: [ 195.373487][T10169] [ 195.373492][T10169] dump_stack_lvl+0x100/0x190 [ 195.373512][T10169] should_fail_ex.cold+0x5/0xa [ 195.373528][T10169] should_failslab+0xc2/0x120 [ 195.373544][T10169] kmem_cache_alloc_noprof+0x91/0x6a0 [ 195.373558][T10169] ? alloc_empty_file+0x5b/0x1c0 [ 195.373576][T10169] alloc_empty_file+0x5b/0x1c0 [ 195.373591][T10169] path_openat+0xdb/0x2440 [ 195.373607][T10169] ? __pfx_path_openat+0x10/0x10 [ 195.373625][T10169] do_file_open+0x20e/0x430 [ 195.373639][T10169] ? __pfx_do_file_open+0x10/0x10 [ 195.373662][T10169] ? _raw_spin_unlock+0x28/0x50 [ 195.373680][T10169] ? alloc_fd+0x471/0x7a0 [ 195.373697][T10169] do_sys_openat2+0x10f/0x1e0 [ 195.373712][T10169] ? __pfx_do_sys_openat2+0x10/0x10 [ 195.373731][T10169] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 195.373743][T10169] ? __fget_files+0x21f/0x3d0 [ 195.373759][T10169] __x64_sys_openat+0x12d/0x210 [ 195.373774][T10169] ? __pfx___x64_sys_openat+0x10/0x10 [ 195.373788][T10169] ? ksys_write+0x1ac/0x250 [ 195.373804][T10169] do_syscall_64+0x123/0x790 [ 195.373816][T10169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.373828][T10169] RIP: 0033:0x7fd68459e0d9 [ 195.373839][T10169] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.373850][T10169] RSP: 002b:00007fd6854ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 195.373861][T10169] RAX: ffffffffffffffda RBX: 00007fd684825fa0 RCX: 00007fd68459e0d9 [ 195.373868][T10169] RDX: 0000000000000002 RSI: 0000200000000380 RDI: ffffffffffffff9c [ 195.373875][T10169] RBP: 00007fd6854ad090 R08: 0000000000000000 R09: 0000000000000000 [ 195.373881][T10169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.373888][T10169] R13: 00007fd684826038 R14: 00007fd684825fa0 R15: 00007ffe2d672a78 [ 195.373902][T10169] [ 195.528941][ T5739] usb 7-1: USB disconnect, device number 9 [ 195.590264][T10173] md/raid10:md0: not enough operational mirrors. [ 195.598807][T10173] md: pers->run() failed ... [ 195.601202][T10174] md: could not open device unknown-block(1,1). [ 195.603582][T10174] md: error, md_import_device() returned -16 [ 195.827665][T10181] usb usb1: usbfs: process 10181 (syz.2.1574) did not claim interface 0 before use [ 196.082220][T10192] usb usb1: usbfs: process 10192 (syz.2.1578) did not claim interface 0 before use [ 196.086100][T10192] FAULT_INJECTION: forcing a failure. [ 196.086100][T10192] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.090446][T10192] CPU: 3 UID: 0 PID: 10192 Comm: syz.2.1578 Not tainted syzkaller #0 PREEMPT(full) [ 196.090462][T10192] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 196.090468][T10192] Call Trace: [ 196.090473][T10192] [ 196.090479][T10192] dump_stack_lvl+0x100/0x190 [ 196.090500][T10192] should_fail_ex.cold+0x5/0xa [ 196.090516][T10192] _copy_to_user+0x32/0xd0 [ 196.090536][T10192] simple_read_from_buffer+0xcb/0x170 [ 196.090553][T10192] proc_fail_nth_read+0x1af/0x230 [ 196.090568][T10192] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 196.090583][T10192] ? rw_verify_area+0xce/0x6d0 [ 196.090601][T10192] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 196.090615][T10192] vfs_read+0x1e4/0xb40 [ 196.090628][T10192] ? __pfx_vfs_read+0x10/0x10 [ 196.090637][T10192] ? find_held_lock+0x2b/0x80 [ 196.090652][T10192] ? __fget_files+0x215/0x3d0 [ 196.090668][T10192] ? __fget_files+0x21f/0x3d0 [ 196.090686][T10192] ksys_read+0x12a/0x250 [ 196.090698][T10192] ? __pfx_ksys_read+0x10/0x10 [ 196.090713][T10192] do_syscall_64+0x123/0x790 [ 196.090727][T10192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.090740][T10192] RIP: 0033:0x7f6a6d95e90e [ 196.090752][T10192] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 196.090764][T10192] RSP: 002b:00007f6a6bbf5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 196.090776][T10192] RAX: ffffffffffffffda RBX: 00007f6a6bbf66c0 RCX: 00007f6a6d95e90e [ 196.090783][T10192] RDX: 000000000000000f RSI: 00007f6a6bbf60a0 RDI: 0000000000000004 [ 196.090790][T10192] RBP: 00007f6a6bbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 196.090797][T10192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.090804][T10192] R13: 00007f6a6dc26038 R14: 00007f6a6dc25fa0 R15: 00007fff14dfad48 [ 196.090819][T10192] [ 196.228809][T10194] usb usb1: usbfs: process 10194 (syz.2.1579) did not claim interface 0 before use [ 196.276820][T10198] FAULT_INJECTION: forcing a failure. [ 196.276820][T10198] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.280976][T10198] CPU: 1 UID: 0 PID: 10198 Comm: syz.2.1581 Not tainted syzkaller #0 PREEMPT(full) [ 196.280991][T10198] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 196.280999][T10198] Call Trace: [ 196.281003][T10198] [ 196.281009][T10198] dump_stack_lvl+0x100/0x190 [ 196.281029][T10198] should_fail_ex.cold+0x5/0xa [ 196.281044][T10198] _copy_to_user+0x32/0xd0 [ 196.281064][T10198] simple_read_from_buffer+0xcb/0x170 [ 196.281079][T10198] proc_fail_nth_read+0x1af/0x230 [ 196.281093][T10198] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 196.281108][T10198] ? rw_verify_area+0xce/0x6d0 [ 196.281125][T10198] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 196.281138][T10198] vfs_read+0x1e4/0xb40 [ 196.281150][T10198] ? __pfx_vfs_read+0x10/0x10 [ 196.281160][T10198] ? find_held_lock+0x2b/0x80 [ 196.281173][T10198] ? __fget_files+0x215/0x3d0 [ 196.281189][T10198] ? __fget_files+0x21f/0x3d0 [ 196.281206][T10198] ksys_read+0x12a/0x250 [ 196.281216][T10198] ? __pfx_ksys_read+0x10/0x10 [ 196.281231][T10198] do_syscall_64+0x123/0x790 [ 196.281244][T10198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.281256][T10198] RIP: 0033:0x7f6a6d95e90e [ 196.281266][T10198] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 196.281277][T10198] RSP: 002b:00007f6a6bbf5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 196.281287][T10198] RAX: ffffffffffffffda RBX: 00007f6a6bbf66c0 RCX: 00007f6a6d95e90e [ 196.281294][T10198] RDX: 000000000000000f RSI: 00007f6a6bbf60a0 RDI: 0000000000000004 [ 196.281301][T10198] RBP: 00007f6a6bbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 196.281307][T10198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.281314][T10198] R13: 00007f6a6dc26038 R14: 00007f6a6dc25fa0 R15: 00007fff14dfad48 [ 196.281328][T10198] [ 196.449614][ T5780] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xf1 [ 197.071839][ T42] audit: type=1400 audit(1787254559.132:681): avc: denied { ioctl } for pid=10229 comm="syz.0.1592" path="socket:[40978]" dev="sockfs" ino=40978 ioctlcmd=0x5864 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 197.097446][T10199] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 197.173302][T10239] FAULT_INJECTION: forcing a failure. [ 197.173302][T10239] name failslab, interval 1, probability 0, space 0, times 0 [ 197.178934][T10239] CPU: 2 UID: 0 PID: 10239 Comm: syz.0.1595 Not tainted syzkaller #0 PREEMPT(full) [ 197.178960][T10239] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 197.178972][T10239] Call Trace: [ 197.178978][T10239] [ 197.178986][T10239] dump_stack_lvl+0x100/0x190 [ 197.179019][T10239] should_fail_ex.cold+0x5/0xa [ 197.179071][T10239] should_failslab+0xc2/0x120 [ 197.179098][T10239] __kmalloc_cache_noprof+0x91/0x6b0 [ 197.179119][T10239] ? kobject_uevent_env+0x263/0x18b0 [ 197.179152][T10239] kobject_uevent_env+0x263/0x18b0 [ 197.179182][T10239] ? __lock_acquire+0x4c5/0x1ec0 [ 197.179212][T10239] kobject_synth_uevent+0x6f0/0x7d0 [ 197.179263][T10239] ? __pfx_kobject_synth_uevent+0x10/0x10 [ 197.179292][T10239] ? find_held_lock+0x2b/0x80 [ 197.179316][T10239] uevent_store+0x46/0x90 [ 197.179339][T10239] ? __pfx_uevent_store+0x10/0x10 [ 197.179362][T10239] drv_attr_store+0x74/0xb0 [ 197.179385][T10239] ? __pfx_drv_attr_store+0x10/0x10 [ 197.179407][T10239] sysfs_kf_write+0xf2/0x150 [ 197.179432][T10239] kernfs_fop_write_iter+0x3e0/0x5f0 [ 197.179449][T10239] ? __pfx_sysfs_kf_write+0x10/0x10 [ 197.179473][T10239] vfs_write+0x6af/0x1050 [ 197.179492][T10239] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 197.179515][T10239] ? __pfx_vfs_write+0x10/0x10 [ 197.179531][T10239] ? find_held_lock+0x2b/0x80 [ 197.179570][T10239] ksys_write+0x12a/0x250 [ 197.179588][T10239] ? __pfx_ksys_write+0x10/0x10 [ 197.179615][T10239] do_syscall_64+0x123/0x790 [ 197.179636][T10239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.179656][T10239] RIP: 0033:0x7fd68459e0d9 [ 197.179678][T10239] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.179695][T10239] RSP: 002b:00007fd6854ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 197.179715][T10239] RAX: ffffffffffffffda RBX: 00007fd684825fa0 RCX: 00007fd68459e0d9 [ 197.179727][T10239] RDX: 0000000000000003 RSI: 0000200000000300 RDI: 0000000000000003 [ 197.179738][T10239] RBP: 00007fd6854ad090 R08: 0000000000000000 R09: 0000000000000000 [ 197.179749][T10239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.179760][T10239] R13: 00007fd684826038 R14: 00007fd684825fa0 R15: 00007ffe2d672a78 [ 197.179792][T10239] [ 197.179819][T10239] synth uevent: /bus/platform/drivers/usb-conn-gpio: failed to send uevent [ 197.321627][T10244] FAULT_INJECTION: forcing a failure. [ 197.321627][T10244] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 197.326524][T10244] CPU: 3 UID: 0 PID: 10244 Comm: syz.0.1597 Not tainted syzkaller #0 PREEMPT(full) [ 197.326540][T10244] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 197.326547][T10244] Call Trace: [ 197.326552][T10244] [ 197.326558][T10244] dump_stack_lvl+0x100/0x190 [ 197.326578][T10244] should_fail_ex.cold+0x5/0xa [ 197.326594][T10244] _copy_to_user+0x32/0xd0 [ 197.326613][T10244] simple_read_from_buffer+0xcb/0x170 [ 197.326628][T10244] proc_fail_nth_read+0x1af/0x230 [ 197.326643][T10244] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 197.326657][T10244] ? rw_verify_area+0xce/0x6d0 [ 197.326673][T10244] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 197.326686][T10244] vfs_read+0x1e4/0xb40 [ 197.326699][T10244] ? __pfx_vfs_read+0x10/0x10 [ 197.326708][T10244] ? find_held_lock+0x2b/0x80 [ 197.326722][T10244] ? __fget_files+0x215/0x3d0 [ 197.326738][T10244] ? __fget_files+0x21f/0x3d0 [ 197.326754][T10244] ksys_read+0x12a/0x250 [ 197.326765][T10244] ? __pfx_ksys_read+0x10/0x10 [ 197.326780][T10244] do_syscall_64+0x123/0x790 [ 197.326792][T10244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.326804][T10244] RIP: 0033:0x7fd68455e90e [ 197.326815][T10244] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 197.326826][T10244] RSP: 002b:00007fd6854acfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 197.326837][T10244] RAX: ffffffffffffffda RBX: 00007fd6854ad6c0 RCX: 00007fd68455e90e [ 197.326844][T10244] RDX: 000000000000000f RSI: 00007fd6854ad0a0 RDI: 0000000000000004 [ 197.326851][T10244] RBP: 00007fd6854ad090 R08: 0000000000000000 R09: 0000000000000000 [ 197.326858][T10244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.326864][T10244] R13: 00007fd684826038 R14: 00007fd684825fa0 R15: 00007ffe2d672a78 [ 197.326883][T10244] [ 197.511886][T10248] md/raid10:md0: not enough operational mirrors. [ 197.525823][T10248] md: pers->run() failed ... [ 197.681490][T10256] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 197.725377][T10256] md: array md0 already has disks! [ 197.807676][T10256] md: could not open device unknown-block(1,1). [ 197.810278][T10256] md: error, md_import_device() returned -16 [ 197.842117][T10256] md/raid10:md0: not enough operational mirrors. [ 197.856044][T10256] md: pers->run() failed ... [ 197.905120][T10256] md: could not open device unknown-block(1,2). [ 197.907680][T10256] md: error, md_import_device() returned -16 [ 197.976277][T10260] FAULT_INJECTION: forcing a failure. [ 197.976277][T10260] name failslab, interval 1, probability 0, space 0, times 0 [ 197.981097][T10260] CPU: 3 UID: 0 PID: 10260 Comm: syz.0.1602 Not tainted syzkaller #0 PREEMPT(full) [ 197.981120][T10260] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 197.981131][T10260] Call Trace: [ 197.981145][T10260] [ 197.981153][T10260] dump_stack_lvl+0x100/0x190 [ 197.981193][T10260] should_fail_ex.cold+0x5/0xa [ 197.981233][T10260] should_failslab+0xc2/0x120 [ 197.981261][T10260] __kmalloc_cache_noprof+0x91/0x6b0 [ 197.981280][T10260] ? call_usermodehelper_setup+0xaf/0x360 [ 197.981305][T10260] ? __pfx_free_modprobe_argv+0x10/0x10 [ 197.981318][T10260] call_usermodehelper_setup+0xaf/0x360 [ 197.981337][T10260] __request_module+0x3c7/0x6a0 [ 197.981349][T10260] ? __pfx___request_module+0x10/0x10 [ 197.981372][T10260] md_run+0x6e4/0x2510 [ 197.981392][T10260] ? cred_has_capability.isra.0+0x186/0x300 [ 197.981414][T10260] ? __pfx_md_run+0x10/0x10 [ 197.981433][T10260] do_md_run+0x36/0x660 [ 197.981461][T10260] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 197.981482][T10260] md_ioctl+0x2613/0x36b0 [ 197.981509][T10260] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 197.981535][T10260] ? __pfx_md_ioctl+0x10/0x10 [ 197.981561][T10260] ? do_vfs_ioctl+0x226/0x13e0 [ 197.981579][T10260] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 197.981593][T10260] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 197.981616][T10260] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 197.981639][T10260] ? __pfx_md_ioctl+0x10/0x10 [ 197.981656][T10260] blkdev_ioctl+0x5ad/0x6f0 [ 197.981669][T10260] ? __pfx_blkdev_ioctl+0x10/0x10 [ 197.981680][T10260] ? selinux_file_ioctl+0x13b/0x290 [ 197.981696][T10260] ? selinux_file_ioctl+0xb6/0x290 [ 197.981713][T10260] ? __pfx_blkdev_ioctl+0x10/0x10 [ 197.981725][T10260] __x64_sys_ioctl+0x18e/0x210 [ 197.981742][T10260] do_syscall_64+0x123/0x790 [ 197.981765][T10260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.981778][T10260] RIP: 0033:0x7fd68459e0d9 [ 197.981789][T10260] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.981800][T10260] RSP: 002b:00007fd6854ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 197.981815][T10260] RAX: ffffffffffffffda RBX: 00007fd684825fa0 RCX: 00007fd68459e0d9 [ 197.981822][T10260] RDX: 0000000000000000 RSI: 00000000400c0930 RDI: 0000000000000003 [ 197.981828][T10260] RBP: 00007fd6854ad090 R08: 0000000000000000 R09: 0000000000000000 [ 197.981834][T10260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.981841][T10260] R13: 00007fd684826038 R14: 00007fd684825fa0 R15: 00007ffe2d672a78 [ 197.981856][T10260] [ 198.085299][T10260] md/raid10:md0: not enough operational mirrors. [ 198.090890][T10260] md: pers->run() failed ... [ 198.137461][T10263] lo: entered allmulticast mode [ 198.150240][T10263] tmpfs: Unknown parameter 'm' [ 198.214472][T10267] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 198.281689][T10263] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 198.288136][T10263] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 198.293201][T10263] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 198.296952][T10263] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 198.300236][T10263] kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 198.303719][T10263] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 198.312245][T10263] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 198.315864][T10263] kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 198.319108][T10263] kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 198.322691][T10267] lo: left allmulticast mode [ 198.348652][T10274] md/raid10:md0: not enough operational mirrors. [ 198.361874][T10274] md: pers->run() failed ... [ 198.561641][T10283] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 198.625878][T10283] md: array md0 already has disks! [ 198.675442][T10283] md: could not open device unknown-block(1,1). [ 198.677370][T10283] md: error, md_import_device() returned -16 [ 198.700178][T10283] md/raid10:md0: not enough operational mirrors. [ 198.706497][T10283] md: pers->run() failed ... [ 198.721940][ T42] audit: type=1400 audit(1787254560.782:682): avc: denied { ioctl } for pid=10287 comm="syz.2.1611" path="socket:[40014]" dev="sockfs" ino=40014 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 198.749466][T10288] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1611'. [ 198.775448][T10283] md: could not open device unknown-block(1,2). [ 198.778216][T10283] md: error, md_import_device() returned -16 [ 198.906756][T10298] FAULT_INJECTION: forcing a failure. [ 198.906756][T10298] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 198.910987][T10300] tmpfs: Cannot change global quota limit on remount [ 198.911714][T10298] CPU: 1 UID: 0 PID: 10298 Comm: syz.2.1617 Not tainted syzkaller #0 PREEMPT(full) [ 198.911736][T10298] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 198.911748][T10298] Call Trace: [ 198.911752][T10298] [ 198.911757][T10298] dump_stack_lvl+0x100/0x190 [ 198.911786][T10298] should_fail_ex.cold+0x5/0xa [ 198.911809][T10298] _copy_to_user+0x32/0xd0 [ 198.911838][T10298] simple_read_from_buffer+0xcb/0x170 [ 198.911857][T10298] proc_fail_nth_read+0x1af/0x230 [ 198.911879][T10298] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 198.911902][T10298] ? rw_verify_area+0xce/0x6d0 [ 198.911926][T10298] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 198.911946][T10298] vfs_read+0x1e4/0xb40 [ 198.911961][T10298] ? __pfx_vfs_read+0x10/0x10 [ 198.911975][T10298] ? find_held_lock+0x2b/0x80 [ 198.911996][T10298] ? __fget_files+0x215/0x3d0 [ 198.912021][T10298] ? __fget_files+0x21f/0x3d0 [ 198.912047][T10298] ksys_read+0x12a/0x250 [ 198.912063][T10298] ? __pfx_ksys_read+0x10/0x10 [ 198.912081][T10298] do_syscall_64+0x123/0x790 [ 198.912102][T10298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.912120][T10298] RIP: 0033:0x7f6a6d95e90e [ 198.912135][T10298] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 198.912152][T10298] RSP: 002b:00007f6a6bbf5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 198.912166][T10298] RAX: ffffffffffffffda RBX: 00007f6a6bbf66c0 RCX: 00007f6a6d95e90e [ 198.912176][T10298] RDX: 000000000000000f RSI: 00007f6a6bbf60a0 RDI: 0000000000000003 [ 198.912186][T10298] RBP: 00007f6a6bbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 198.912197][T10298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.912207][T10298] R13: 00007f6a6dc26038 R14: 00007f6a6dc25fa0 R15: 00007fff14dfad48 [ 198.912232][T10298] [ 198.998175][T10301] tmpfs: Cannot change global quota limit on remount [ 200.000442][T10313] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 200.030696][T10313] md: array md0 already has disks! [ 200.041319][T10317] ntfs3(sr0): Primary boot signature is not NTFS. [ 200.045348][T10317] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 200.136589][T10320] md: could not open device unknown-block(1,1). [ 200.139816][T10320] md: error, md_import_device() returned -16 [ 200.139966][ T42] audit: type=1400 audit(1787254562.202:683): avc: denied { mounton } for pid=10325 comm="syz.3.1627" path="/379/my_configfs" dev="configfs" ino=1060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 200.172813][T10327] db_root: cannot be changed because it's in use [ 200.177436][T10326] db_root: cannot be changed because it's in use [ 200.183245][T10313] md/raid10:md0: not enough operational mirrors. [ 200.196175][T10313] md: pers->run() failed ... [ 200.213674][T10332] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1628'. [ 200.236728][T10332] MTDSB: Device #1 doesn't appear to exist [ 200.236728][T10332] [ 200.237004][T10320] md: could not open device unknown-block(1,2). [ 200.242301][T10320] md: error, md_import_device() returned -16 [ 200.464577][T10348] FAULT_INJECTION: forcing a failure. [ 200.464577][T10348] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 200.469982][T10348] CPU: 2 UID: 0 PID: 10348 Comm: syz.2.1634 Not tainted syzkaller #0 PREEMPT(full) [ 200.470008][T10348] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 200.470020][T10348] Call Trace: [ 200.470028][T10348] [ 200.470037][T10348] dump_stack_lvl+0x100/0x190 [ 200.470068][T10348] should_fail_ex.cold+0x5/0xa [ 200.470093][T10348] _copy_to_user+0x32/0xd0 [ 200.470124][T10348] simple_read_from_buffer+0xcb/0x170 [ 200.470149][T10348] proc_fail_nth_read+0x1af/0x230 [ 200.470172][T10348] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 200.470196][T10348] ? rw_verify_area+0xce/0x6d0 [ 200.470222][T10348] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 200.470243][T10348] vfs_read+0x1e4/0xb40 [ 200.470265][T10348] ? __pfx_vfs_read+0x10/0x10 [ 200.470280][T10348] ? find_held_lock+0x2b/0x80 [ 200.470303][T10348] ? __fget_files+0x215/0x3d0 [ 200.470329][T10348] ? __fget_files+0x21f/0x3d0 [ 200.470358][T10348] ksys_read+0x12a/0x250 [ 200.470375][T10348] ? __pfx_ksys_read+0x10/0x10 [ 200.470400][T10348] do_syscall_64+0x123/0x790 [ 200.470421][T10348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.470440][T10348] RIP: 0033:0x7f6a6d95e90e [ 200.470456][T10348] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 200.470474][T10348] RSP: 002b:00007f6a6bbf5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 200.470492][T10348] RAX: ffffffffffffffda RBX: 00007f6a6bbf66c0 RCX: 00007f6a6d95e90e [ 200.470504][T10348] RDX: 000000000000000f RSI: 00007f6a6bbf60a0 RDI: 0000000000000004 [ 200.470515][T10348] RBP: 00007f6a6bbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 200.470526][T10348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.470536][T10348] R13: 00007f6a6dc26038 R14: 00007f6a6dc25fa0 R15: 00007fff14dfad48 [ 200.470562][T10348] [ 200.949043][T10359] FAULT_INJECTION: forcing a failure. [ 200.949043][T10359] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 200.954009][T10359] CPU: 1 UID: 0 PID: 10359 Comm: syz.2.1638 Not tainted syzkaller #0 PREEMPT(full) [ 200.954033][T10359] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 200.954044][T10359] Call Trace: [ 200.954051][T10359] [ 200.954061][T10359] dump_stack_lvl+0x100/0x190 [ 200.954092][T10359] should_fail_ex.cold+0x5/0xa [ 200.954114][T10359] _copy_from_user+0x2e/0xd0 [ 200.954139][T10359] ctl_ioctl+0x289/0xcc0 [ 200.954163][T10359] ? __pfx_list_devices+0x10/0x10 [ 200.954184][T10359] ? __pfx_ctl_ioctl+0x10/0x10 [ 200.954228][T10359] ? selinux_file_ioctl+0x13b/0x290 [ 200.954252][T10359] ? selinux_file_ioctl+0xb6/0x290 [ 200.954280][T10359] dm_ctl_ioctl+0x22/0x30 [ 200.954299][T10359] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 200.954320][T10359] __x64_sys_ioctl+0x18e/0x210 [ 200.954340][T10359] do_syscall_64+0x123/0x790 [ 200.954362][T10359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.954382][T10359] RIP: 0033:0x7f6a6d99e0d9 [ 200.954399][T10359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.954416][T10359] RSP: 002b:00007f6a6bbf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 200.954434][T10359] RAX: ffffffffffffffda RBX: 00007f6a6dc25fa0 RCX: 00007f6a6d99e0d9 [ 200.954446][T10359] RDX: 0000200000000100 RSI: 00000000c178fd02 RDI: 0000000000000003 [ 200.954459][T10359] RBP: 00007f6a6bbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 200.954470][T10359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.954482][T10359] R13: 00007f6a6dc26038 R14: 00007f6a6dc25fa0 R15: 00007fff14dfad48 [ 200.954508][T10359] [ 201.060197][T10361] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 201.104966][T10361] md: array md0 already has disks! [ 201.177016][T10361] md: could not open device unknown-block(1,1). [ 201.181268][T10361] md: error, md_import_device() returned -16 [ 201.220119][T10361] md/raid10:md0: not enough operational mirrors. [ 201.231203][T10361] md: pers->run() failed ... [ 201.262459][T10373] FAULT_INJECTION: forcing a failure. [ 201.262459][T10373] name failslab, interval 1, probability 0, space 0, times 0 [ 201.268092][T10373] CPU: 2 UID: 0 PID: 10373 Comm: syz.1.1644 Not tainted syzkaller #0 PREEMPT(full) [ 201.268116][T10373] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 201.268126][T10373] Call Trace: [ 201.268132][T10373] [ 201.268139][T10373] dump_stack_lvl+0x100/0x190 [ 201.268167][T10373] should_fail_ex.cold+0x5/0xa [ 201.268197][T10373] should_failslab+0xc2/0x120 [ 201.268223][T10373] __kmalloc_cache_node_noprof+0x94/0x6c0 [ 201.268251][T10373] ? __get_vm_area_node+0x124/0x350 [ 201.268284][T10373] __get_vm_area_node+0x124/0x350 [ 201.268313][T10373] __vmalloc_node_range_noprof+0x228/0x1630 [ 201.268338][T10373] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 201.268372][T10373] ? __lock_acquire+0x4c5/0x1ec0 [ 201.268399][T10373] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 201.268436][T10373] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 201.268464][T10373] ? find_held_lock+0x2b/0x80 [ 201.268482][T10373] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 201.268501][T10373] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 201.268524][T10373] ? avc_has_perm_noaudit+0x145/0x3b0 [ 201.268545][T10373] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 201.268570][T10373] __vmalloc_node_noprof+0xad/0xf0 [ 201.268594][T10373] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 201.268621][T10373] __vmalloc_noprof+0xa3/0x120 [ 201.268646][T10373] ? __pfx___vmalloc_noprof+0x10/0x10 [ 201.268672][T10373] ? rcu_is_watching+0x13/0xc0 [ 201.268690][T10373] ? cap_capable+0x107/0x430 [ 201.268714][T10373] bpf_prog_alloc_no_stats+0x59/0x690 [ 201.268739][T10373] ? security_capable+0x80/0x260 [ 201.268761][T10373] bpf_prog_alloc+0x3b/0x200 [ 201.268784][T10373] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 201.268810][T10373] bpf_prog_load+0x49e/0x2a80 [ 201.268834][T10373] ? __pfx_bpf_prog_load+0x10/0x10 [ 201.268871][T10373] __sys_bpf+0x1f46/0x4a30 [ 201.268899][T10373] ? __pfx___sys_bpf+0x10/0x10 [ 201.268924][T10373] ? find_held_lock+0x2b/0x80 [ 201.268942][T10373] ? get_pid_task+0xfc/0x250 [ 201.268959][T10373] ? get_pid_task+0xfc/0x250 [ 201.268985][T10373] ? find_held_lock+0x2b/0x80 [ 201.269008][T10373] ? rcu_read_lock_any_held+0x6a/0x90 [ 201.269028][T10373] ? find_held_lock+0x2b/0x80 [ 201.269045][T10373] ? ksys_write+0x190/0x250 [ 201.269062][T10373] ? ksys_write+0x190/0x250 [ 201.269097][T10373] ? fput+0x7c/0x100 [ 201.269118][T10373] ? ksys_write+0x1ac/0x250 [ 201.269136][T10373] ? __x64_sys_bpf+0xce/0x140 [ 201.269156][T10373] __x64_sys_bpf+0xce/0x140 [ 201.269178][T10373] ? do_syscall_64+0xae/0x790 [ 201.269196][T10373] do_syscall_64+0x123/0x790 [ 201.269218][T10373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.269237][T10373] RIP: 0033:0x7efc4df9e0d9 [ 201.269253][T10373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.269269][T10373] RSP: 002b:00007efc4edd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 201.269287][T10373] RAX: ffffffffffffffda RBX: 00007efc4e225fa0 RCX: 00007efc4df9e0d9 [ 201.269298][T10373] RDX: 0000000000000094 RSI: 0000200000000500 RDI: 0000000000000005 [ 201.269312][T10373] RBP: 00007efc4edd7090 R08: 0000000000000000 R09: 0000000000000000 [ 201.269323][T10373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.269332][T10373] R13: 00007efc4e226038 R14: 00007efc4e225fa0 R15: 00007ffde7358668 [ 201.269357][T10373] [ 201.269373][T10373] warn_alloc: 1 callbacks suppressed [ 201.269382][T10373] syz.1.1644: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 201.275185][T10361] md: could not open device unknown-block(1,2). [ 201.278719][T10373] ,cpuset= [ 201.280133][T10361] md: error, md_import_device() returned -16 [ 201.281554][T10373] /,mems_allowed=0-1 [ 201.411018][T10373] CPU: 2 UID: 0 PID: 10373 Comm: syz.1.1644 Not tainted syzkaller #0 PREEMPT(full) [ 201.411070][T10373] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 201.411082][T10373] Call Trace: [ 201.411089][T10373] [ 201.411096][T10373] dump_stack_lvl+0x100/0x190 [ 201.411127][T10373] warn_alloc.cold+0x94/0xa8 [ 201.411147][T10373] ? __pfx_warn_alloc+0x10/0x10 [ 201.411166][T10373] ? __kasan_kmalloc+0x8a/0xb0 [ 201.411198][T10373] ? __get_vm_area_node+0x22b/0x350 [ 201.411234][T10373] __vmalloc_node_range_noprof+0xccd/0x1630 [ 201.411266][T10373] ? __lock_acquire+0x4c5/0x1ec0 [ 201.411295][T10373] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 201.411332][T10373] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 201.411359][T10373] ? find_held_lock+0x2b/0x80 [ 201.411380][T10373] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 201.411401][T10373] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 201.411426][T10373] ? avc_has_perm_noaudit+0x145/0x3b0 [ 201.411448][T10373] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 201.411475][T10373] __vmalloc_node_noprof+0xad/0xf0 [ 201.411502][T10373] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 201.411533][T10373] __vmalloc_noprof+0xa3/0x120 [ 201.411560][T10373] ? __pfx___vmalloc_noprof+0x10/0x10 [ 201.411589][T10373] ? rcu_is_watching+0x13/0xc0 [ 201.411609][T10373] ? cap_capable+0x107/0x430 [ 201.411634][T10373] bpf_prog_alloc_no_stats+0x59/0x690 [ 201.411662][T10373] ? security_capable+0x80/0x260 [ 201.411688][T10373] bpf_prog_alloc+0x3b/0x200 [ 201.411713][T10373] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 201.411740][T10373] bpf_prog_load+0x49e/0x2a80 [ 201.411764][T10373] ? __pfx_bpf_prog_load+0x10/0x10 [ 201.411802][T10373] __sys_bpf+0x1f46/0x4a30 [ 201.411835][T10373] ? __pfx___sys_bpf+0x10/0x10 [ 201.411857][T10373] ? find_held_lock+0x2b/0x80 [ 201.411875][T10373] ? get_pid_task+0xfc/0x250 [ 201.411893][T10373] ? get_pid_task+0xfc/0x250 [ 201.411920][T10373] ? find_held_lock+0x2b/0x80 [ 201.411946][T10373] ? rcu_read_lock_any_held+0x6a/0x90 [ 201.411968][T10373] ? find_held_lock+0x2b/0x80 [ 201.411988][T10373] ? ksys_write+0x190/0x250 [ 201.412008][T10373] ? ksys_write+0x190/0x250 [ 201.412043][T10373] ? fput+0x7c/0x100 [ 201.412066][T10373] ? ksys_write+0x1ac/0x250 [ 201.412087][T10373] ? __x64_sys_bpf+0xce/0x140 [ 201.412109][T10373] __x64_sys_bpf+0xce/0x140 [ 201.412133][T10373] ? do_syscall_64+0xae/0x790 [ 201.412153][T10373] do_syscall_64+0x123/0x790 [ 201.412172][T10373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.412191][T10373] RIP: 0033:0x7efc4df9e0d9 [ 201.412208][T10373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.412225][T10373] RSP: 002b:00007efc4edd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 201.412249][T10373] RAX: ffffffffffffffda RBX: 00007efc4e225fa0 RCX: 00007efc4df9e0d9 [ 201.412261][T10373] RDX: 0000000000000094 RSI: 0000200000000500 RDI: 0000000000000005 [ 201.412272][T10373] RBP: 00007efc4edd7090 R08: 0000000000000000 R09: 0000000000000000 [ 201.412283][T10373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.412294][T10373] R13: 00007efc4e226038 R14: 00007efc4e225fa0 R15: 00007ffde7358668 [ 201.412320][T10373] [ 201.412327][T10373] Mem-Info: [ 201.421305][T10371] hid-generic 0003:0627:0001.0014: pid 10371 passed too large report [ 201.422031][T10373] active_anon:8727 inactive_anon:27 isolated_anon:0 [ 201.422031][T10373] active_file:3989 inactive_file:55187 isolated_file:0 [ 201.422031][T10373] unevictable:1000 dirty:37 writeback:0 [ 201.422031][T10373] slab_reclaimable:9095 slab_unreclaimable:73211 [ 201.422031][T10373] mapped:25174 shmem:1555 pagetables:1321 [ 201.422031][T10373] sec_pagetables:300 bounce:0 [ 201.422031][T10373] kernel_misc_reclaimable:0 [ 201.422031][T10373] free:446589 free_pcp:14287 free_cma:0 [ 201.469394][T10377] FAULT_INJECTION: forcing a failure. [ 201.469394][T10377] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 201.470160][T10373] Node 0 active_anon:34908kB inactive_anon:108kB active_file:15956kB inactive_file:220520kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:100672kB dirty:144kB writeback:0kB shmem:4220kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13664kB pagetables:5088kB sec_pagetables:1200kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 201.472279][T10377] CPU: 1 UID: 0 PID: 10377 Comm: syz.0.1645 Not tainted syzkaller #0 PREEMPT(full) [ 201.472303][T10377] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 201.472315][T10377] Call Trace: [ 201.472323][T10377] [ 201.472332][T10377] dump_stack_lvl+0x100/0x190 [ 201.472363][T10377] should_fail_ex.cold+0x5/0xa [ 201.472388][T10377] _copy_to_user+0x32/0xd0 [ 201.472425][T10377] simple_read_from_buffer+0xcb/0x170 [ 201.472450][T10377] proc_fail_nth_read+0x1af/0x230 [ 201.472474][T10377] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 201.472499][T10377] ? rw_verify_area+0xce/0x6d0 [ 201.472525][T10377] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 201.472547][T10377] vfs_read+0x1e4/0xb40 [ 201.472569][T10377] ? __pfx_vfs_read+0x10/0x10 [ 201.472585][T10377] ? find_held_lock+0x2b/0x80 [ 201.472607][T10377] ? __fget_files+0x215/0x3d0 [ 201.472634][T10377] ? __fget_files+0x21f/0x3d0 [ 201.472663][T10377] ksys_read+0x12a/0x250 [ 201.472679][T10377] ? __pfx_ksys_read+0x10/0x10 [ 201.472704][T10377] do_syscall_64+0x123/0x790 [ 201.472727][T10377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.472746][T10377] RIP: 0033:0x7fd68455e90e [ 201.472762][T10377] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 201.472780][T10377] RSP: 002b:00007fd6854acfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 201.472799][T10377] RAX: ffffffffffffffda RBX: 00007fd6854ad6c0 RCX: 00007fd68455e90e [ 201.472811][T10377] RDX: 000000000000000f RSI: 00007fd6854ad0a0 RDI: 0000000000000004 [ 201.472823][T10377] RBP: 00007fd6854ad090 R08: 0000000000000000 R09: 0000000000000000 [ 201.472834][T10377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.472845][T10377] R13: 00007fd684826038 R14: 00007fd684825fa0 R15: 00007ffe2d672a78 [ 201.472871][T10377] [ 201.630037][T10373] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:228kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:24kB dirty:4kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:196kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 201.641855][T10373] Node 0 DMA free:15208kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:128kB local_pcp:4kB free_cma:0kB [ 201.653663][T10373] lowmem_reserve[]: 0 1224 1224 1224 1224 [ 201.663446][T10373] Node 0 DMA32 free:123072kB boost:0kB min:27364kB low:34204kB high:41044kB reserved_highatomic:0KB free_highatomic:0KB active_anon:34908kB inactive_anon:108kB active_file:15956kB inactive_file:220520kB unevictable:2000kB writepending:144kB zspages:8656kB present:2080628kB managed:1254228kB mlocked:0kB bounce:0kB free_pcp:47872kB local_pcp:6496kB free_cma:0kB [ 201.677802][T10373] lowmem_reserve[]: 0 0 0 0 0 [ 201.682064][T10373] Node 1 Normal free:1646300kB boost:0kB min:39872kB low:49840kB high:59808kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:228kB unevictable:2000kB writepending:4kB zspages:128kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:10244kB local_pcp:1972kB free_cma:0kB [ 201.696821][T10373] lowmem_reserve[]: 0 0 0 0 0 [ 201.698757][T10373] Node 0 DMA: 4*4kB (UM) 5*8kB (UM) 7*16kB (UM) 8*32kB (UM) 5*64kB (UM) 7*128kB (UM) 5*256kB (UM) 4*512kB (UM) 4*1024kB (UM) 1*2048kB (M) 1*4096kB (M) = 15208kB [ 201.700185][T10382] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1647'. [ 201.706254][T10373] Node 0 DMA32: 165*4kB (UME) 303*8kB (UE) 110*16kB (UE) 735*32kB [ 201.709387][T10382] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 201.716101][T10373] (UE) 150*64kB (UME) 86*128kB (UME) 61*256kB (UME) 40*512kB (UME) 23*1024kB (UM) 1*2048kB (M) 3*4096kB (UM) = 122956kB [ 201.721949][T10373] Node 1 Normal: 43*4kB (UM) 38*8kB (UM) 45*16kB (UME) 34*32kB (UME) 30*64kB (UME) 23*128kB (UM) 9*256kB (UME) 13*512kB (UM) 6*1024kB (UME) 7*2048kB (UME) 393*4096kB (UM) = 1646316kB [ 201.730165][T10373] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 201.734377][T10373] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 201.738912][T10373] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 201.743228][T10373] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 201.748055][T10373] 60785 total pagecache pages [ 201.750324][T10373] 19 pages in swap cache [ 201.752409][T10373] Free swap = 55760kB [ 201.754404][T10373] Total swap = 124996kB [ 201.756921][T10373] 1048443 pages RAM [ 201.758549][T10373] 0 pages HighMem/MovableOnly [ 201.759246][T10382] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 201.760516][T10373] 285575 pages reserved [ 201.760527][T10373] 0 pages cma reserved [ 201.762966][T10384] FAULT_INJECTION: forcing a failure. [ 201.762966][T10384] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 201.784934][T10384] CPU: 1 UID: 0 PID: 10384 Comm: syz.0.1648 Not tainted syzkaller #0 PREEMPT(full) [ 201.784952][T10384] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 201.784959][T10384] Call Trace: [ 201.784964][T10384] [ 201.784969][T10384] dump_stack_lvl+0x100/0x190 [ 201.784989][T10384] should_fail_ex.cold+0x5/0xa [ 201.785004][T10384] _copy_from_iter+0x1f4/0x1690 [ 201.785023][T10384] ? __asan_memset+0x23/0x50 [ 201.785036][T10384] ? __pfx__copy_from_iter+0x10/0x10 [ 201.785053][T10384] ? __pfx___alloc_skb+0x10/0x10 [ 201.785075][T10384] netlink_sendmsg+0x808/0xda0 [ 201.785094][T10384] ? __pfx_netlink_sendmsg+0x10/0x10 [ 201.785111][T10384] ? selinux_socket_sendmsg+0x198/0x2f0 [ 201.785130][T10384] ____sys_sendmsg+0xa4d/0xbe0 [ 201.785142][T10384] ? __pfx_netlink_sendmsg+0x10/0x10 [ 201.785158][T10384] ? __pfx_____sys_sendmsg+0x10/0x10 [ 201.785182][T10384] ___sys_sendmsg+0x190/0x1e0 [ 201.785197][T10384] ? __pfx____sys_sendmsg+0x10/0x10 [ 201.785211][T10384] ? get_pid_task+0x106/0x250 [ 201.785229][T10384] ? find_held_lock+0x2b/0x80 [ 201.785250][T10384] __sys_sendmsg+0x160/0x210 [ 201.785268][T10384] ? __pfx___sys_sendmsg+0x10/0x10 [ 201.785292][T10384] do_syscall_64+0x123/0x790 [ 201.785305][T10384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.785317][T10384] RIP: 0033:0x7fd68459e0d9 [ 201.785328][T10384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.785338][T10384] RSP: 002b:00007fd6854ad028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 201.785350][T10384] RAX: ffffffffffffffda RBX: 00007fd684825fa0 RCX: 00007fd68459e0d9 [ 201.785357][T10384] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 201.785363][T10384] RBP: 00007fd6854ad090 R08: 0000000000000000 R09: 0000000000000000 [ 201.785370][T10384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.785376][T10384] R13: 00007fd684826038 R14: 00007fd684825fa0 R15: 00007ffe2d672a78 [ 201.785390][T10384] [ 202.284279][T10406] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 202.383241][T10410] FAULT_INJECTION: forcing a failure. [ 202.383241][T10410] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.389987][T10410] CPU: 3 UID: 0 PID: 10410 Comm: syz.3.1658 Not tainted syzkaller #0 PREEMPT(full) [ 202.390013][T10410] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 202.390025][T10410] Call Trace: [ 202.390032][T10410] [ 202.390040][T10410] dump_stack_lvl+0x100/0x190 [ 202.390070][T10410] should_fail_ex.cold+0x5/0xa [ 202.390095][T10410] _copy_from_user+0x2e/0xd0 [ 202.390125][T10410] __sys_bpf+0x2f5/0x4a30 [ 202.390156][T10410] ? __pfx___sys_bpf+0x10/0x10 [ 202.390185][T10410] ? find_held_lock+0x2b/0x80 [ 202.390205][T10410] ? get_pid_task+0xfc/0x250 [ 202.390224][T10410] ? get_pid_task+0xfc/0x250 [ 202.390252][T10410] ? find_held_lock+0x2b/0x80 [ 202.390278][T10410] ? rcu_read_lock_any_held+0x6a/0x90 [ 202.390301][T10410] ? find_held_lock+0x2b/0x80 [ 202.390321][T10410] ? ksys_write+0x190/0x250 [ 202.390339][T10410] ? ksys_write+0x190/0x250 [ 202.390375][T10410] ? fput+0x7c/0x100 [ 202.390397][T10410] ? ksys_write+0x1ac/0x250 [ 202.390418][T10410] ? __x64_sys_bpf+0xce/0x140 [ 202.390440][T10410] __x64_sys_bpf+0xce/0x140 [ 202.390465][T10410] ? do_syscall_64+0xae/0x790 [ 202.390485][T10410] do_syscall_64+0x123/0x790 [ 202.390504][T10410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.390524][T10410] RIP: 0033:0x7f5607b9e0d9 [ 202.390540][T10410] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.390558][T10410] RSP: 002b:00007f5608a24028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 202.390577][T10410] RAX: ffffffffffffffda RBX: 00007f5607e25fa0 RCX: 00007f5607b9e0d9 [ 202.390589][T10410] RDX: 0000000000000020 RSI: 0000200000000580 RDI: 0000000000000002 [ 202.390600][T10410] RBP: 00007f5608a24090 R08: 0000000000000000 R09: 0000000000000000 [ 202.390611][T10410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.390622][T10410] R13: 00007f5607e26038 R14: 00007f5607e25fa0 R15: 00007fff0ae01e08 [ 202.390647][T10410] [ 202.565102][ T5739] page_pool_release_retry() stalled pool shutdown: id 27, 50 inflight 120 sec [ 202.644882][ T5739] page_pool_release_retry() stalled pool shutdown: id 26, 50 inflight 121 sec [ 202.914879][ T5739] usb 8-1: new full-speed USB device number 17 using dummy_hcd [ 203.045966][ T5739] usb 8-1: device descriptor read/64, error -71 [ 203.296873][ T5739] usb 8-1: new full-speed USB device number 18 using dummy_hcd [ 203.424911][ T5739] usb 8-1: device descriptor read/64, error -71 [ 203.535218][ T5739] usb usb8-port1: attempt power cycle [ 203.639621][T10437] FAULT_INJECTION: forcing a failure. [ 203.639621][T10437] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.643790][T10437] CPU: 2 UID: 0 PID: 10437 Comm: syz.1.1670 Not tainted syzkaller #0 PREEMPT(full) [ 203.643806][T10437] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 203.643813][T10437] Call Trace: [ 203.643818][T10437] [ 203.643823][T10437] dump_stack_lvl+0x100/0x190 [ 203.643844][T10437] should_fail_ex.cold+0x5/0xa [ 203.643859][T10437] _copy_to_user+0x32/0xd0 [ 203.643879][T10437] simple_read_from_buffer+0xcb/0x170 [ 203.643895][T10437] proc_fail_nth_read+0x1af/0x230 [ 203.643908][T10437] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 203.643922][T10437] ? rw_verify_area+0xce/0x6d0 [ 203.643939][T10437] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 203.643952][T10437] vfs_read+0x1e4/0xb40 [ 203.643964][T10437] ? __pfx_vfs_read+0x10/0x10 [ 203.643973][T10437] ? find_held_lock+0x2b/0x80 [ 203.643986][T10437] ? __fget_files+0x215/0x3d0 [ 203.644002][T10437] ? __fget_files+0x21f/0x3d0 [ 203.644018][T10437] ksys_read+0x12a/0x250 [ 203.644029][T10437] ? __pfx_ksys_read+0x10/0x10 [ 203.644043][T10437] do_syscall_64+0x123/0x790 [ 203.644056][T10437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.644068][T10437] RIP: 0033:0x7efc4df5e90e [ 203.644078][T10437] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 203.644089][T10437] RSP: 002b:00007efc4edd6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 203.644100][T10437] RAX: ffffffffffffffda RBX: 00007efc4edd76c0 RCX: 00007efc4df5e90e [ 203.644108][T10437] RDX: 000000000000000f RSI: 00007efc4edd70a0 RDI: 0000000000000004 [ 203.644114][T10437] RBP: 00007efc4edd7090 R08: 0000000000000000 R09: 0000000000000000 [ 203.644120][T10437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.644126][T10437] R13: 00007efc4e226038 R14: 00007efc4e225fa0 R15: 00007ffde7358668 [ 203.644141][T10437] [ 203.739582][T10443] FAULT_INJECTION: forcing a failure. [ 203.739582][T10443] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.743712][T10443] CPU: 1 UID: 0 PID: 10443 Comm: syz.1.1672 Not tainted syzkaller #0 PREEMPT(full) [ 203.743728][T10443] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 203.743735][T10443] Call Trace: [ 203.743741][T10443] [ 203.743746][T10443] dump_stack_lvl+0x100/0x190 [ 203.743765][T10443] should_fail_ex.cold+0x5/0xa [ 203.743781][T10443] _copy_to_user+0x32/0xd0 [ 203.743801][T10443] simple_read_from_buffer+0xcb/0x170 [ 203.743816][T10443] proc_fail_nth_read+0x1af/0x230 [ 203.743830][T10443] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 203.743844][T10443] ? rw_verify_area+0xce/0x6d0 [ 203.743861][T10443] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 203.743874][T10443] vfs_read+0x1e4/0xb40 [ 203.743887][T10443] ? __pfx_vfs_read+0x10/0x10 [ 203.743908][T10443] ? find_held_lock+0x2b/0x80 [ 203.743923][T10443] ? __fget_files+0x215/0x3d0 [ 203.743938][T10443] ? __fget_files+0x21f/0x3d0 [ 203.743955][T10443] ksys_read+0x12a/0x250 [ 203.743966][T10443] ? __pfx_ksys_read+0x10/0x10 [ 203.743980][T10443] do_syscall_64+0x123/0x790 [ 203.743994][T10443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.744005][T10443] RIP: 0033:0x7efc4df5e90e [ 203.744016][T10443] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 203.744027][T10443] RSP: 002b:00007efc4edd6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 203.744038][T10443] RAX: ffffffffffffffda RBX: 00007efc4edd76c0 RCX: 00007efc4df5e90e [ 203.744045][T10443] RDX: 000000000000000f RSI: 00007efc4edd70a0 RDI: 0000000000000004 [ 203.744052][T10443] RBP: 00007efc4edd7090 R08: 0000000000000000 R09: 0000000000000000 [ 203.744059][T10443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.744065][T10443] R13: 00007efc4e226038 R14: 00007efc4e225fa0 R15: 00007ffde7358668 [ 203.744080][T10443] [ 203.874946][ T5739] usb 8-1: new full-speed USB device number 19 using dummy_hcd [ 203.895582][ T5739] usb 8-1: device descriptor read/8, error -71 [ 204.144900][ T5739] usb 8-1: new full-speed USB device number 20 using dummy_hcd [ 204.165409][ T5739] usb 8-1: device descriptor read/8, error -71 [ 204.199558][ T42] audit: type=1400 audit(1787254566.262:684): avc: denied { mounton } for pid=10452 comm="syz.0.1675" path="/427/trace" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 204.275207][ T5739] usb usb8-port1: unable to enumerate USB device [ 204.314934][T10460] md: array md0 already has disks! [ 204.316818][T10460] FAULT_INJECTION: forcing a failure. [ 204.316818][T10460] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 204.321361][T10460] CPU: 3 UID: 0 PID: 10460 Comm: syz.0.1677 Not tainted syzkaller #0 PREEMPT(full) [ 204.321379][T10460] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 204.321389][T10460] Call Trace: [ 204.321397][T10460] [ 204.321405][T10460] dump_stack_lvl+0x100/0x190 [ 204.321434][T10460] should_fail_ex.cold+0x5/0xa [ 204.321457][T10460] _copy_from_user+0x2e/0xd0 [ 204.321482][T10460] kstrtouint_from_user+0xd6/0x1d0 [ 204.321519][T10460] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 204.321539][T10460] ? __lock_acquire+0x4c5/0x1ec0 [ 204.321564][T10460] ? lock_acquire+0x1b9/0x370 [ 204.321593][T10460] proc_fail_nth_write+0x83/0x220 [ 204.321615][T10460] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 204.321639][T10460] vfs_write+0x2aa/0x1050 [ 204.321655][T10460] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 204.321678][T10460] ? __pfx_vfs_write+0x10/0x10 [ 204.321693][T10460] ? find_held_lock+0x2b/0x80 [ 204.321713][T10460] ? __fget_files+0x215/0x3d0 [ 204.321732][T10460] ? __fget_files+0x21f/0x3d0 [ 204.321759][T10460] ksys_write+0x12a/0x250 [ 204.321776][T10460] ? __pfx_ksys_write+0x10/0x10 [ 204.321801][T10460] do_syscall_64+0x123/0x790 [ 204.321816][T10460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.321834][T10460] RIP: 0033:0x7fd68455e90e [ 204.321850][T10460] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 204.321866][T10460] RSP: 002b:00007fd6854acfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 204.321884][T10460] RAX: ffffffffffffffda RBX: 00007fd6854ad6c0 RCX: 00007fd68455e90e [ 204.321895][T10460] RDX: 0000000000000001 RSI: 00007fd6854ad0a0 RDI: 0000000000000004 [ 204.321902][T10460] RBP: 00007fd6854ad090 R08: 0000000000000000 R09: 0000000000000000 [ 204.321911][T10460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.321921][T10460] R13: 00007fd684826038 R14: 00007fd684825fa0 R15: 00007ffe2d672a78 [ 204.321947][T10460] [ 205.044969][ T5739] page_pool_release_retry() stalled pool shutdown: id 28, 50 inflight 120 sec [ 205.208578][T10467] tmpfs: Bad value for 'mpol' [ 205.382167][T10473] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1681'. [ 205.687659][ T42] audit: type=1400 audit(1787254567.752:685): avc: denied { execute } for pid=10478 comm="syz.3.1684" path="/dev/nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 205.905691][ T42] audit: type=1400 audit(1787254567.972:686): avc: denied { mount } for pid=10492 comm="syz.3.1690" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 205.913592][ T42] audit: type=1400 audit(1787254567.972:687): avc: denied { mounton } for pid=10492 comm="syz.3.1690" path="/391/file0" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 205.923658][ T42] audit: type=1400 audit(1787254567.982:688): avc: denied { unmount } for pid=5725 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 205.931734][T10485] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3918892086 (125404546752 ns) > initial count (95458267904 ns). Using initial count to start timer. [ 205.959348][T10496] FAULT_INJECTION: forcing a failure. [ 205.959348][T10496] name failslab, interval 1, probability 0, space 0, times 0 [ 205.964553][T10496] CPU: 0 UID: 0 PID: 10496 Comm: syz.3.1691 Not tainted syzkaller #0 PREEMPT(full) [ 205.964576][T10496] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 205.964586][T10496] Call Trace: [ 205.964593][T10496] [ 205.964601][T10496] dump_stack_lvl+0x100/0x190 [ 205.964640][T10496] should_fail_ex.cold+0x5/0xa [ 205.964681][T10496] should_failslab+0xc2/0x120 [ 205.964711][T10496] __kmalloc_noprof+0xfc/0x820 [ 205.964733][T10496] ? bpf_test_init.isra.0+0x88/0x100 [ 205.964778][T10496] bpf_test_init.isra.0+0x88/0x100 [ 205.964802][T10496] bpf_prog_test_run_xdp+0x587/0x1670 [ 205.964835][T10496] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 205.964866][T10496] ? fput+0x7c/0x100 [ 205.964889][T10496] ? __bpf_prog_get+0x97/0x290 [ 205.964906][T10496] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 205.964928][T10496] __sys_bpf+0x2265/0x4a30 [ 205.964957][T10496] ? __pfx___sys_bpf+0x10/0x10 [ 205.964979][T10496] ? find_held_lock+0x2b/0x80 [ 205.965000][T10496] ? get_pid_task+0xfc/0x250 [ 205.965019][T10496] ? get_pid_task+0xfc/0x250 [ 205.965044][T10496] ? find_held_lock+0x2b/0x80 [ 205.965069][T10496] ? rcu_read_lock_any_held+0x6a/0x90 [ 205.965091][T10496] ? find_held_lock+0x2b/0x80 [ 205.965110][T10496] ? ksys_write+0x190/0x250 [ 205.965127][T10496] ? ksys_write+0x190/0x250 [ 205.965163][T10496] ? fput+0x7c/0x100 [ 205.965184][T10496] ? ksys_write+0x1ac/0x250 [ 205.965204][T10496] ? __x64_sys_bpf+0xce/0x140 [ 205.965234][T10496] __x64_sys_bpf+0xce/0x140 [ 205.965259][T10496] ? do_syscall_64+0xae/0x790 [ 205.965292][T10496] do_syscall_64+0x123/0x790 [ 205.965311][T10496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.965331][T10496] RIP: 0033:0x7f5607b9e0d9 [ 205.965348][T10496] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.965364][T10496] RSP: 002b:00007f5608a24028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 205.965382][T10496] RAX: ffffffffffffffda RBX: 00007f5607e25fa0 RCX: 00007f5607b9e0d9 [ 205.965394][T10496] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 205.965405][T10496] RBP: 00007f5608a24090 R08: 0000000000000000 R09: 0000000000000000 [ 205.965416][T10496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.965426][T10496] R13: 00007f5607e26038 R14: 00007f5607e25fa0 R15: 00007fff0ae01e08 [ 205.965451][T10496] [ 207.906233][T10520] FAULT_INJECTION: forcing a failure. [ 207.906233][T10520] name failslab, interval 1, probability 0, space 0, times 0 [ 207.911138][T10520] CPU: 2 UID: 0 PID: 10520 Comm: syz.3.1701 Not tainted syzkaller #0 PREEMPT(full) [ 207.911160][T10520] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 207.911171][T10520] Call Trace: [ 207.911176][T10520] [ 207.911181][T10520] dump_stack_lvl+0x100/0x190 [ 207.911202][T10520] should_fail_ex.cold+0x5/0xa [ 207.911217][T10520] should_failslab+0xc2/0x120 [ 207.911233][T10520] __kmalloc_node_noprof+0x101/0x830 [ 207.911246][T10520] ? __get_vm_area_node+0x1ff/0x350 [ 207.911261][T10520] ? __get_vm_area_node+0x22b/0x350 [ 207.911276][T10520] ? __vmalloc_node_range_noprof+0x409/0x1630 [ 207.911300][T10520] __vmalloc_node_range_noprof+0x409/0x1630 [ 207.911322][T10520] ? bpf_check+0x1800/0xa7c0 [ 207.911337][T10520] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 207.911354][T10520] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 207.911367][T10520] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 207.911382][T10520] ? avc_has_perm_noaudit+0x145/0x3b0 [ 207.911396][T10520] ? bpf_check+0x1800/0xa7c0 [ 207.911406][T10520] __vmalloc_node_noprof+0xad/0xf0 [ 207.911422][T10520] ? bpf_check+0x1800/0xa7c0 [ 207.911434][T10520] __vmalloc_noprof+0xa3/0x120 [ 207.911451][T10520] ? __pfx___vmalloc_noprof+0x10/0x10 [ 207.911470][T10520] ? bpf_lsm_bpf_prog_load+0x9/0x10 [ 207.911482][T10520] ? security_bpf_prog_load+0x10f/0x2f0 [ 207.911500][T10520] bpf_check+0x1800/0xa7c0 [ 207.911512][T10520] ? __lock_acquire+0x4c5/0x1ec0 [ 207.911528][T10520] ? __pfx___css_rstat_updated+0x10/0x10 [ 207.911550][T10520] ? __lock_acquire+0x4c5/0x1ec0 [ 207.911570][T10520] ? __pfx_bpf_check+0x10/0x10 [ 207.911583][T10520] ? find_held_lock+0x2b/0x80 [ 207.911595][T10520] ? bpf_prog_load+0x1a09/0x2a80 [ 207.911608][T10520] ? __asan_memset+0x23/0x50 [ 207.911622][T10520] ? bpf_prog_load+0x1ac3/0x2a80 [ 207.911633][T10520] bpf_prog_load+0x1ac3/0x2a80 [ 207.911647][T10520] ? __pfx_bpf_prog_load+0x10/0x10 [ 207.911669][T10520] __sys_bpf+0x1f46/0x4a30 [ 207.911687][T10520] ? __pfx___sys_bpf+0x10/0x10 [ 207.911701][T10520] ? find_held_lock+0x2b/0x80 [ 207.911713][T10520] ? get_pid_task+0xfc/0x250 [ 207.911725][T10520] ? get_pid_task+0xfc/0x250 [ 207.911741][T10520] ? find_held_lock+0x2b/0x80 [ 207.911756][T10520] ? rcu_read_lock_any_held+0x6a/0x90 [ 207.911770][T10520] ? find_held_lock+0x2b/0x80 [ 207.911782][T10520] ? ksys_write+0x190/0x250 [ 207.911792][T10520] ? ksys_write+0x190/0x250 [ 207.911815][T10520] ? fput+0x7c/0x100 [ 207.911828][T10520] ? ksys_write+0x1ac/0x250 [ 207.911841][T10520] ? __x64_sys_bpf+0xce/0x140 [ 207.911854][T10520] __x64_sys_bpf+0xce/0x140 [ 207.911869][T10520] ? do_syscall_64+0xae/0x790 [ 207.911881][T10520] do_syscall_64+0x123/0x790 [ 207.911893][T10520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.911904][T10520] RIP: 0033:0x7f5607b9e0d9 [ 207.911916][T10520] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.911926][T10520] RSP: 002b:00007f5608a24028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 207.911946][T10520] RAX: ffffffffffffffda RBX: 00007f5607e25fa0 RCX: 00007f5607b9e0d9 [ 207.911953][T10520] RDX: 0000000000000094 RSI: 0000200000000500 RDI: 0000000000000005 [ 207.911960][T10520] RBP: 00007f5608a24090 R08: 0000000000000000 R09: 0000000000000000 [ 207.911967][T10520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 207.911973][T10520] R13: 00007f5607e26038 R14: 00007f5607e25fa0 R15: 00007fff0ae01e08 [ 207.911987][T10520] [ 208.116492][T10523] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4293918468.255.0), cmd(9) [ 208.333361][T10530] md: could not open device unknown-block(0,0). [ 208.336615][T10530] md: error, md_import_device() returned -6 [ 208.723865][T10546] FAULT_INJECTION: forcing a failure. [ 208.723865][T10546] name failslab, interval 1, probability 0, space 0, times 0 [ 208.728188][T10546] CPU: 3 UID: 0 PID: 10546 Comm: syz.0.1710 Not tainted syzkaller #0 PREEMPT(full) [ 208.728204][T10546] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 208.728211][T10546] Call Trace: [ 208.728216][T10546] [ 208.728221][T10546] dump_stack_lvl+0x100/0x190 [ 208.728241][T10546] should_fail_ex.cold+0x5/0xa [ 208.728255][T10546] should_failslab+0xc2/0x120 [ 208.728271][T10546] kmem_cache_alloc_noprof+0x91/0x6a0 [ 208.728285][T10546] ? net_generic+0xea/0x2a0 [ 208.728303][T10546] ? __nf_conntrack_alloc+0xb7/0x5e0 [ 208.728316][T10546] __nf_conntrack_alloc+0xb7/0x5e0 [ 208.728329][T10546] init_conntrack.isra.0+0xf51/0x1380 [ 208.728345][T10546] ? __nf_conntrack_find_get+0xa0d/0xd00 [ 208.728356][T10546] ? __pfx_init_conntrack.isra.0+0x10/0x10 [ 208.728368][T10546] ? ipv4_get_l4proto+0x232/0x3a0 [ 208.728387][T10546] ? ipt_do_table+0xd4f/0x1b00 [ 208.728398][T10546] ? __local_bh_enable_ip+0xa5/0x120 [ 208.728418][T10546] nf_conntrack_in+0xe9e/0x16d0 [ 208.728434][T10546] ? __lock_acquire+0x422/0x1ec0 [ 208.728451][T10546] ? __pfx_nf_conntrack_in+0x10/0x10 [ 208.728461][T10546] ? __netif_receive_skb_core.constprop.0+0xd4d/0x3530 [ 208.728481][T10546] ? lock_acquire+0x1b9/0x370 [ 208.728499][T10546] nf_hook_slow+0xbf/0x220 [ 208.728516][T10546] nf_hook.constprop.0+0x2a6/0x750 [ 208.728531][T10546] ? __pfx_ip_rcv_finish+0x10/0x10 [ 208.728546][T10546] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 208.728561][T10546] ? sock_wfree+0x12e/0x7f0 [ 208.728578][T10546] ? __pfx_ip_rcv_finish+0x10/0x10 [ 208.728593][T10546] ? ip_rcv_core+0x93c/0xe80 [ 208.728609][T10546] ? __pfx_ip_rcv+0x10/0x10 [ 208.728623][T10546] ip_rcv+0x7d/0x3c0 [ 208.728638][T10546] ? __pfx_ip_rcv+0x10/0x10 [ 208.728652][T10546] __netif_receive_skb_one_core+0x197/0x1e0 [ 208.728668][T10546] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 208.728684][T10546] ? lock_acquire+0x1b9/0x370 [ 208.728703][T10546] __netif_receive_skb+0x1f/0x120 [ 208.728719][T10546] netif_receive_skb+0x139/0x7d0 [ 208.728734][T10546] ? __pfx_netif_receive_skb+0x10/0x10 [ 208.728753][T10546] tun_rx_batched.isra.0+0x3f6/0x750 [ 208.728772][T10546] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 208.728792][T10546] ? tun_get_user+0x1e1e/0x3cc0 [ 208.728812][T10546] tun_get_user+0x1f53/0x3cc0 [ 208.728835][T10546] ? __pfx_tun_get_user+0x10/0x10 [ 208.728854][T10546] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 208.728872][T10546] ? find_held_lock+0x2b/0x80 [ 208.728884][T10546] ? tun_get+0x191/0x370 [ 208.728900][T10546] ? tun_get+0x191/0x370 [ 208.728929][T10546] tun_chr_write_iter+0xdc/0x200 [ 208.728945][T10546] vfs_write+0x6af/0x1050 [ 208.728961][T10546] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 208.728978][T10546] ? __pfx_vfs_write+0x10/0x10 [ 208.728994][T10546] ? find_held_lock+0x2b/0x80 [ 208.729029][T10546] ksys_write+0x12a/0x250 [ 208.729040][T10546] ? __pfx_ksys_write+0x10/0x10 [ 208.729054][T10546] do_syscall_64+0x123/0x790 [ 208.729067][T10546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.729079][T10546] RIP: 0033:0x7fd68455e90e [ 208.729090][T10546] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 208.729101][T10546] RSP: 002b:00007fd6854acfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 208.729112][T10546] RAX: ffffffffffffffda RBX: 00007fd6854ad6c0 RCX: 00007fd68455e90e [ 208.729120][T10546] RDX: 00000000000000be RSI: 0000200000000100 RDI: 00000000000000c8 [ 208.729126][T10546] RBP: 00007fd6854ad090 R08: 0000000000000000 R09: 0000000000000000 [ 208.729133][T10546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.729139][T10546] R13: 00007fd684826038 R14: 00007fd684825fa0 R15: 00007ffe2d672a78 [ 208.729153][T10546] [ 208.956228][T10548] hid-generic 0003:0627:0001.0014: pid 10548 passed too short report [ 209.340155][ T42] audit: type=1400 audit(1787254571.402:689): avc: denied { rename } for pid=10560 comm="syz.3.1715" name="file0" dev="tmpfs" ino=2228 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 209.351479][T10561] loop2: detected capacity change from 0 to 7 [ 209.364516][T10561] Dev loop2: unable to read RDB block 7 [ 209.374850][T10561] loop2: unable to read partition table [ 209.380449][T10561] loop2: partition table beyond EOD, truncated [ 209.383712][T10561] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 209.438969][ T42] audit: type=1400 audit(1787254571.502:690): avc: denied { ioctl } for pid=10562 comm="syz.3.1716" path="/405/config/usb_gadget/g1/strings/0x409/product" dev="configfs" ino=39010 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 209.451345][ T42] audit: type=1800 audit(1787254571.502:691): pid=10563 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1716" name="product" dev="configfs" ino=39010 res=0 errno=0 [ 209.587822][T10573] FAULT_INJECTION: forcing a failure. [ 209.587822][T10573] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 209.593880][T10573] CPU: 2 UID: 0 PID: 10573 Comm: syz.3.1720 Not tainted syzkaller #0 PREEMPT(full) [ 209.593904][T10573] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 209.593915][T10573] Call Trace: [ 209.593922][T10573] [ 209.593930][T10573] dump_stack_lvl+0x100/0x190 [ 209.593961][T10573] should_fail_ex.cold+0x5/0xa [ 209.593985][T10573] _copy_to_user+0x32/0xd0 [ 209.594014][T10573] simple_read_from_buffer+0xcb/0x170 [ 209.594039][T10573] proc_fail_nth_read+0x1af/0x230 [ 209.594081][T10573] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 209.594105][T10573] ? rw_verify_area+0xce/0x6d0 [ 209.594132][T10573] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 209.594151][T10573] vfs_read+0x1e4/0xb40 [ 209.594172][T10573] ? __pfx_vfs_read+0x10/0x10 [ 209.594187][T10573] ? find_held_lock+0x2b/0x80 [ 209.594210][T10573] ? __fget_files+0x215/0x3d0 [ 209.594236][T10573] ? __fget_files+0x21f/0x3d0 [ 209.594266][T10573] ksys_read+0x12a/0x250 [ 209.594283][T10573] ? __pfx_ksys_read+0x10/0x10 [ 209.594308][T10573] do_syscall_64+0x123/0x790 [ 209.594329][T10573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.594349][T10573] RIP: 0033:0x7f5607b5e90e [ 209.594365][T10573] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 209.594383][T10573] RSP: 002b:00007f5608a23fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 209.594401][T10573] RAX: ffffffffffffffda RBX: 00007f5608a246c0 RCX: 00007f5607b5e90e [ 209.594414][T10573] RDX: 000000000000000f RSI: 00007f5608a240a0 RDI: 0000000000000004 [ 209.594425][T10573] RBP: 00007f5608a24090 R08: 0000000000000000 R09: 0000000000000000 [ 209.594436][T10573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.594447][T10573] R13: 00007f5607e26038 R14: 00007f5607e25fa0 R15: 00007fff0ae01e08 [ 209.594473][T10573] [ 209.711776][T10579] FAULT_INJECTION: forcing a failure. [ 209.711776][T10579] name failslab, interval 1, probability 0, space 0, times 0 [ 209.717008][T10579] CPU: 2 UID: 0 PID: 10579 Comm: syz.3.1721 Not tainted syzkaller #0 PREEMPT(full) [ 209.717024][T10579] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 209.717031][T10579] Call Trace: [ 209.717035][T10579] [ 209.717040][T10579] dump_stack_lvl+0x100/0x190 [ 209.717060][T10579] should_fail_ex.cold+0x5/0xa [ 209.717075][T10579] should_failslab+0xc2/0x120 [ 209.717091][T10579] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 209.717105][T10579] ? __alloc_skb+0x5b7/0x710 [ 209.717121][T10579] ? __alloc_skb+0x140/0x710 [ 209.717142][T10579] __alloc_skb+0x140/0x710 [ 209.717157][T10579] ? __alloc_skb+0x5b7/0x710 [ 209.717173][T10579] ? __pfx___alloc_skb+0x10/0x10 [ 209.717193][T10579] alloc_skb_with_frags+0xdd/0x760 [ 209.717204][T10579] ? __might_fault+0xc5/0x140 [ 209.717215][T10579] ? __might_fault+0xc5/0x140 [ 209.717229][T10579] sock_alloc_send_pskb+0x801/0x980 [ 209.717245][T10579] ? _copy_from_iter+0x270/0x1690 [ 209.717266][T10579] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 209.717282][T10579] ? _parse_integer_limit+0x1ac/0x220 [ 209.717297][T10579] ? _kstrtoull+0x13c/0x1f0 [ 209.717309][T10579] ? iov_iter_advance+0xac/0x6d0 [ 209.717325][T10579] ? __pfx__kstrtoull+0x10/0x10 [ 209.717339][T10579] tun_get_user+0x7d0/0x3cc0 [ 209.717363][T10579] ? __pfx_tun_get_user+0x10/0x10 [ 209.717382][T10579] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 209.717400][T10579] ? find_held_lock+0x2b/0x80 [ 209.717413][T10579] ? tun_get+0x191/0x370 [ 209.717428][T10579] ? tun_get+0x191/0x370 [ 209.717447][T10579] tun_chr_write_iter+0xdc/0x200 [ 209.717459][T10579] vfs_write+0x6af/0x1050 [ 209.717470][T10579] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 209.717482][T10579] ? __pfx_vfs_write+0x10/0x10 [ 209.717492][T10579] ? find_held_lock+0x2b/0x80 [ 209.717513][T10579] ksys_write+0x12a/0x250 [ 209.717523][T10579] ? __pfx_ksys_write+0x10/0x10 [ 209.717538][T10579] do_syscall_64+0x123/0x790 [ 209.717551][T10579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.717562][T10579] RIP: 0033:0x7f5607b9e0d9 [ 209.717572][T10579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.717583][T10579] RSP: 002b:00007f5608a24028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 209.717594][T10579] RAX: ffffffffffffffda RBX: 00007f5607e25fa0 RCX: 00007f5607b9e0d9 [ 209.717618][T10579] RDX: 0000000000000fce RSI: 0000200000000240 RDI: 0000000000000003 [ 209.717625][T10579] RBP: 00007f5608a24090 R08: 0000000000000000 R09: 0000000000000000 [ 209.717631][T10579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.717642][T10579] R13: 00007f5607e26038 R14: 00007f5607e25fa0 R15: 00007fff0ae01e08 [ 209.717657][T10579] [ 209.746235][T10582] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1723'. [ 209.926772][T10587] i2c i2c-0: new_device: Extra parameters [ 209.948658][ T42] audit: type=1400 audit(1787254572.012:692): avc: denied { map } for pid=10588 comm="syz.0.1725" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 209.992765][ T42] audit: type=1400 audit(1787254572.052:693): avc: denied { map } for pid=10590 comm="syz.0.1726" path="/proc/1082/net/netlink" dev="proc" ino=4026532886 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 210.082142][T10597] FAULT_INJECTION: forcing a failure. [ 210.082142][T10597] name failslab, interval 1, probability 0, space 0, times 0 [ 210.092756][T10597] CPU: 0 UID: 0 PID: 10597 Comm: syz.0.1728 Not tainted syzkaller #0 PREEMPT(full) [ 210.092780][T10597] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 210.092792][T10597] Call Trace: [ 210.092800][T10597] [ 210.092808][T10597] dump_stack_lvl+0x100/0x190 [ 210.092839][T10597] should_fail_ex.cold+0x5/0xa [ 210.092862][T10597] should_failslab+0xc2/0x120 [ 210.092887][T10597] __kmalloc_noprof+0xfc/0x820 [ 210.092909][T10597] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 210.092931][T10597] kernfs_fop_write_iter+0x26a/0x5f0 [ 210.092950][T10597] vfs_write+0x6af/0x1050 [ 210.092966][T10597] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 210.092984][T10597] ? __pfx_vfs_write+0x10/0x10 [ 210.092997][T10597] ? find_held_lock+0x2b/0x80 [ 210.093029][T10597] ksys_write+0x12a/0x250 [ 210.093044][T10597] ? __pfx_ksys_write+0x10/0x10 [ 210.093066][T10597] do_syscall_64+0x123/0x790 [ 210.093085][T10597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.093102][T10597] RIP: 0033:0x7fd68459e0d9 [ 210.093117][T10597] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.093133][T10597] RSP: 002b:00007fd6854ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 210.093149][T10597] RAX: ffffffffffffffda RBX: 00007fd684825fa0 RCX: 00007fd68459e0d9 [ 210.093160][T10597] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 0000000000000006 [ 210.093170][T10597] RBP: 00007fd6854ad090 R08: 0000000000000000 R09: 0000000000000000 [ 210.093181][T10597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.093191][T10597] R13: 00007fd684826038 R14: 00007fd684825fa0 R15: 00007ffe2d672a78 [ 210.093214][T10597] [ 211.105248][ T41] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 211.255883][ T41] usb 8-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 211.259756][ T41] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.262953][ T41] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.267501][ T41] usb 8-1: config 0 descriptor?? [ 211.273396][ T41] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 211.487106][ T41] usb 8-1: USB disconnect, device number 21 [ 211.746430][T10604] FAULT_INJECTION: forcing a failure. [ 211.746430][T10604] name failslab, interval 1, probability 0, space 0, times 0 [ 211.750252][T10604] CPU: 1 UID: 0 PID: 10604 Comm: syz.1.1731 Not tainted syzkaller #0 PREEMPT(full) [ 211.750267][T10604] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 211.750274][T10604] Call Trace: [ 211.750279][T10604] [ 211.750283][T10604] dump_stack_lvl+0x100/0x190 [ 211.750303][T10604] should_fail_ex.cold+0x5/0xa [ 211.750318][T10604] should_failslab+0xc2/0x120 [ 211.750334][T10604] kmem_cache_alloc_noprof+0x91/0x6a0 [ 211.750348][T10604] ? trace_kmem_cache_alloc+0xdd/0x100 [ 211.750364][T10604] ? security_file_alloc+0x34/0x2c0 [ 211.750385][T10604] security_file_alloc+0x34/0x2c0 [ 211.750403][T10604] init_file+0x95/0x480 [ 211.750417][T10604] alloc_empty_file+0x79/0x1c0 [ 211.750432][T10604] path_openat+0xdb/0x2440 [ 211.750448][T10604] ? __pfx_path_openat+0x10/0x10 [ 211.750465][T10604] do_file_open+0x20e/0x430 [ 211.750480][T10604] ? __pfx_do_file_open+0x10/0x10 [ 211.750503][T10604] ? _raw_spin_unlock+0x28/0x50 [ 211.750520][T10604] ? alloc_fd+0x471/0x7a0 [ 211.750537][T10604] do_sys_openat2+0x10f/0x1e0 [ 211.750552][T10604] ? __pfx_do_sys_openat2+0x10/0x10 [ 211.750567][T10604] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 211.750579][T10604] ? __fget_files+0x21f/0x3d0 [ 211.750594][T10604] __x64_sys_openat+0x12d/0x210 [ 211.750609][T10604] ? __pfx___x64_sys_openat+0x10/0x10 [ 211.750623][T10604] ? ksys_write+0x1ac/0x250 [ 211.750638][T10604] do_syscall_64+0x123/0x790 [ 211.750650][T10604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.750662][T10604] RIP: 0033:0x7efc4df9e0d9 [ 211.750672][T10604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.750683][T10604] RSP: 002b:00007efc4edd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 211.750694][T10604] RAX: ffffffffffffffda RBX: 00007efc4e225fa0 RCX: 00007efc4df9e0d9 [ 211.750701][T10604] RDX: 0000000000000002 RSI: 0000200000000380 RDI: ffffffffffffff9c [ 211.750707][T10604] RBP: 00007efc4edd7090 R08: 0000000000000000 R09: 0000000000000000 [ 211.750713][T10604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.750720][T10604] R13: 00007efc4e226038 R14: 00007efc4e225fa0 R15: 00007ffde7358668 [ 211.750733][T10604] [ 211.906443][ T42] audit: type=1800 audit(1787254573.972:694): pid=10610 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1734" name="product" dev="configfs" ino=39074 res=0 errno=0 [ 212.737584][T10620] FAULT_INJECTION: forcing a failure. [ 212.737584][T10620] name failslab, interval 1, probability 0, space 0, times 0 [ 212.742673][T10620] CPU: 0 UID: 0 PID: 10620 Comm: syz.2.1738 Not tainted syzkaller #0 PREEMPT(full) [ 212.742693][T10620] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 212.742703][T10620] Call Trace: [ 212.742710][T10620] [ 212.742717][T10620] dump_stack_lvl+0x100/0x190 [ 212.742744][T10620] should_fail_ex.cold+0x5/0xa [ 212.742764][T10620] should_failslab+0xc2/0x120 [ 212.742784][T10620] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 212.742803][T10620] ? sock_alloc_inode+0x26/0x2c0 [ 212.742820][T10620] ? __pfx_sock_alloc_inode+0x10/0x10 [ 212.742835][T10620] sock_alloc_inode+0x26/0x2c0 [ 212.742850][T10620] ? __pfx_sock_alloc_inode+0x10/0x10 [ 212.742864][T10620] alloc_inode+0x68/0x250 [ 212.742886][T10620] sock_alloc+0x44/0x280 [ 212.742902][T10620] do_accept+0xf9/0x530 [ 212.742923][T10620] ? do_raw_spin_lock+0x128/0x260 [ 212.742941][T10620] ? __pfx_do_accept+0x10/0x10 [ 212.743000][T10620] __sys_accept4+0x108/0x200 [ 212.743024][T10620] ? __pfx___sys_accept4+0x10/0x10 [ 212.743045][T10620] ? __pfx_ksys_write+0x10/0x10 [ 212.743063][T10620] __x64_sys_accept4+0x96/0x100 [ 212.743081][T10620] ? lockdep_hardirqs_on+0x7d/0x110 [ 212.743104][T10620] do_syscall_64+0x123/0x790 [ 212.743119][T10620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.743134][T10620] RIP: 0033:0x7f6a6d99e0d9 [ 212.743148][T10620] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.743162][T10620] RSP: 002b:00007f6a6bbf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 212.743176][T10620] RAX: ffffffffffffffda RBX: 00007f6a6dc25fa0 RCX: 00007f6a6d99e0d9 [ 212.743185][T10620] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 212.743194][T10620] RBP: 00007f6a6bbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 212.743202][T10620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.743211][T10620] R13: 00007f6a6dc26038 R14: 00007f6a6dc25fa0 R15: 00007fff14dfad48 [ 212.743231][T10620] [ 212.869275][T10623] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 212.879641][T10623] pim6reg: entered allmulticast mode [ 213.112224][T10637] nvme_tcp: malformed address passed: 127trsvcid=8009:8009 [ 213.161814][T10637] team0: No ports can be present during mode change [ 213.274285][T10646] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 213.328382][T10650] FAULT_INJECTION: forcing a failure. [ 213.328382][T10650] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 213.332998][T10650] CPU: 0 UID: 0 PID: 10650 Comm: syz.2.1750 Not tainted syzkaller #0 PREEMPT(full) [ 213.333020][T10650] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 213.333031][T10650] Call Trace: [ 213.333038][T10650] [ 213.333046][T10650] dump_stack_lvl+0x100/0x190 [ 213.333073][T10650] should_fail_ex.cold+0x5/0xa [ 213.333096][T10650] _copy_from_user+0x2e/0xd0 [ 213.333125][T10650] __sys_bpf+0x2f5/0x4a30 [ 213.333153][T10650] ? __pfx___sys_bpf+0x10/0x10 [ 213.333172][T10650] ? find_held_lock+0x2b/0x80 [ 213.333190][T10650] ? get_pid_task+0xfc/0x250 [ 213.333208][T10650] ? get_pid_task+0xfc/0x250 [ 213.333233][T10650] ? find_held_lock+0x2b/0x80 [ 213.333256][T10650] ? rcu_read_lock_any_held+0x6a/0x90 [ 213.333277][T10650] ? find_held_lock+0x2b/0x80 [ 213.333295][T10650] ? ksys_write+0x190/0x250 [ 213.333318][T10650] ? ksys_write+0x190/0x250 [ 213.333352][T10650] ? fput+0x7c/0x100 [ 213.333372][T10650] ? ksys_write+0x1ac/0x250 [ 213.333391][T10650] ? __x64_sys_bpf+0xce/0x140 [ 213.333413][T10650] __x64_sys_bpf+0xce/0x140 [ 213.333436][T10650] ? do_syscall_64+0xae/0x790 [ 213.333454][T10650] do_syscall_64+0x123/0x790 [ 213.333472][T10650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.333490][T10650] RIP: 0033:0x7f6a6d99e0d9 [ 213.333505][T10650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.333522][T10650] RSP: 002b:00007f6a6bbf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 213.333539][T10650] RAX: ffffffffffffffda RBX: 00007f6a6dc25fa0 RCX: 00007f6a6d99e0d9 [ 213.333550][T10650] RDX: 00000000000000e8 RSI: 0000200000000240 RDI: 0000000000000005 [ 213.333561][T10650] RBP: 00007f6a6bbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 213.333572][T10650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.333582][T10650] R13: 00007f6a6dc26038 R14: 00007f6a6dc25fa0 R15: 00007fff14dfad48 [ 213.333607][T10650] [ 213.888466][T10662] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 213.914390][T10662] romfs: unable to set blocksize [ 213.914390][T10662] [ 213.998833][ T42] audit: type=1400 audit(1787254576.062:695): avc: denied { setopt } for pid=10666 comm="syz.3.1757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 214.000159][T10667] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1757'. [ 214.062065][T10669] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 214.067464][T10669] mroute: pending queue full, dropping entries [ 214.121729][T10671] ehci-pci 0000:00:1d.7: remove, state 1 [ 214.124241][T10671] usb usb2: USB disconnect, device number 1 [ 214.126905][T10671] usb 2-1: USB disconnect, device number 2 [ 214.210764][T10671] ehci-pci 0000:00:1d.7: USB bus 2 deregistered [ 214.227519][T10673] syzkaller0: entered promiscuous mode [ 214.229633][T10673] syzkaller0: entered allmulticast mode [ 214.594575][T10683] FAULT_INJECTION: forcing a failure. [ 214.594575][T10683] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 214.601048][T10683] CPU: 0 UID: 0 PID: 10683 Comm: syz.2.1763 Not tainted syzkaller #0 PREEMPT(full) [ 214.601064][T10683] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 214.601071][T10683] Call Trace: [ 214.601075][T10683] [ 214.601081][T10683] dump_stack_lvl+0x100/0x190 [ 214.601101][T10683] should_fail_ex.cold+0x5/0xa [ 214.601116][T10683] _copy_from_iter+0x1f4/0x1690 [ 214.601136][T10683] ? __asan_memset+0x23/0x50 [ 214.601149][T10683] ? __pfx__copy_from_iter+0x10/0x10 [ 214.601166][T10683] ? __pfx___alloc_skb+0x10/0x10 [ 214.601188][T10683] netlink_sendmsg+0x808/0xda0 [ 214.601206][T10683] ? __pfx_netlink_sendmsg+0x10/0x10 [ 214.601239][T10683] ? selinux_socket_sendmsg+0x198/0x2f0 [ 214.601259][T10683] ____sys_sendmsg+0xa4d/0xbe0 [ 214.601271][T10683] ? __pfx_netlink_sendmsg+0x10/0x10 [ 214.601288][T10683] ? __pfx_____sys_sendmsg+0x10/0x10 [ 214.601307][T10683] ___sys_sendmsg+0x190/0x1e0 [ 214.601321][T10683] ? __pfx____sys_sendmsg+0x10/0x10 [ 214.601335][T10683] ? get_pid_task+0x106/0x250 [ 214.601353][T10683] ? find_held_lock+0x2b/0x80 [ 214.601375][T10683] __sys_sendmsg+0x160/0x210 [ 214.601392][T10683] ? __pfx___sys_sendmsg+0x10/0x10 [ 214.601417][T10683] do_syscall_64+0x123/0x790 [ 214.601429][T10683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.601441][T10683] RIP: 0033:0x7f6a6d99e0d9 [ 214.601451][T10683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.601461][T10683] RSP: 002b:00007f6a6bbf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 214.601472][T10683] RAX: ffffffffffffffda RBX: 00007f6a6dc25fa0 RCX: 00007f6a6d99e0d9 [ 214.601479][T10683] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 214.601486][T10683] RBP: 00007f6a6bbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 214.601492][T10683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.601499][T10683] R13: 00007f6a6dc26038 R14: 00007f6a6dc25fa0 R15: 00007fff14dfad48 [ 214.601513][T10683] [ 214.611623][ T50] usb 1-1: new full-speed USB device number 9 using uhci_hcd [ 214.639365][T10685] FAULT_INJECTION: forcing a failure. [ 214.639365][T10685] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 214.639396][T10685] CPU: 0 UID: 0 PID: 10685 Comm: syz.2.1764 Not tainted syzkaller #0 PREEMPT(full) [ 214.639417][T10685] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 214.639427][T10685] Call Trace: [ 214.639433][T10685] [ 214.639440][T10685] dump_stack_lvl+0x100/0x190 [ 214.639467][T10685] should_fail_ex.cold+0x5/0xa [ 214.639486][T10685] _copy_from_iter+0x1f4/0x1690 [ 214.639519][T10685] ? __pfx__copy_from_iter+0x10/0x10 [ 214.639544][T10685] ? _parse_integer_limit+0x1ac/0x220 [ 214.639569][T10685] ? _kstrtoull+0x13c/0x1f0 [ 214.639587][T10685] ? __pfx__kstrtoull+0x10/0x10 [ 214.639609][T10685] tun_get_user+0x3ba/0x3cc0 [ 214.639647][T10685] ? __pfx_tun_get_user+0x10/0x10 [ 214.639674][T10685] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 214.639701][T10685] ? find_held_lock+0x2b/0x80 [ 214.639720][T10685] ? tun_get+0x191/0x370 [ 214.639743][T10685] ? tun_get+0x191/0x370 [ 214.639773][T10685] tun_chr_write_iter+0xdc/0x200 [ 214.639792][T10685] vfs_write+0x6af/0x1050 [ 214.639810][T10685] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 214.639829][T10685] ? __pfx_vfs_write+0x10/0x10 [ 214.639844][T10685] ? find_held_lock+0x2b/0x80 [ 214.639877][T10685] ksys_write+0x12a/0x250 [ 214.639894][T10685] ? __pfx_ksys_write+0x10/0x10 [ 214.639917][T10685] do_syscall_64+0x123/0x790 [ 214.639937][T10685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.639954][T10685] RIP: 0033:0x7f6a6d99e0d9 [ 214.639970][T10685] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.639986][T10685] RSP: 002b:00007f6a6bbf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 214.640003][T10685] RAX: ffffffffffffffda RBX: 00007f6a6dc25fa0 RCX: 00007f6a6d99e0d9 [ 214.640014][T10685] RDX: 0000000000000628 RSI: 0000200000000240 RDI: 0000000000000003 [ 214.640024][T10685] RBP: 00007f6a6bbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 214.640035][T10685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.640045][T10685] R13: 00007f6a6dc26038 R14: 00007f6a6dc25fa0 R15: 00007fff14dfad48 [ 214.640069][T10685] [ 215.536959][ T50] usb 1-1: not running at top speed; connect to a high speed hub [ 215.565000][ T50] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 215.671993][ T50] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 215.687475][ T50] usb 1-1: Product: QEMU USB Tablet [ 215.689710][ T50] usb 1-1: Manufacturer: QEMU [ 215.691311][ T50] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 215.824399][ T50] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb1/1-1/1-1:1.0/0003:0627:0001.0015/input/input28 [ 215.972667][ T50] hid-generic 0003:0627:0001.0015: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0 [ 216.050498][T10672] usb 1-1: USB disconnect, device number 9 [ 216.103452][T10686] fido_id[10686]: Failed to open report descriptor at '/sys/devices/pci0000:00/0000:00:1d.0/usb1/report_descriptor': No such file or directory [ 216.170454][T10672] ehci-pci 0000:00:1d.7: EHCI Host Controller [ 216.177680][T10672] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 2 [ 216.182878][T10672] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000 [ 216.204910][T10672] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00 [ 216.208102][T10672] usb usb2: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 216.212949][T10672] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 216.216407][T10672] usb usb2: Product: EHCI Host Controller [ 216.218750][T10672] usb usb2: Manufacturer: Linux syzkaller ehci_hcd [ 216.221341][T10672] usb usb2: SerialNumber: 0000:00:1d.7 [ 216.233106][T10672] hub 2-0:1.0: USB hub found [ 216.235510][T10672] hub 2-0:1.0: 6 ports detected [ 216.276956][T10672] hub 1-0:1.0: USB hub found [ 216.284342][T10672] hub 1-0:1.0: 2 ports detected [ 216.315787][T10672] hub 3-0:1.0: USB hub found [ 216.317515][T10672] hub 3-0:1.0: 2 ports detected [ 216.356253][T10672] hub 4-0:1.0: USB hub found [ 216.360824][T10672] hub 4-0:1.0: 2 ports detected [ 216.410594][T10692] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 216.457409][T10696] FAULT_INJECTION: forcing a failure. [ 216.457409][T10696] name failslab, interval 1, probability 0, space 0, times 0 [ 216.462037][T10696] CPU: 0 UID: 0 PID: 10696 Comm: syz.3.1770 Not tainted syzkaller #0 PREEMPT(full) [ 216.462052][T10696] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 216.462059][T10696] Call Trace: [ 216.462064][T10696] [ 216.462069][T10696] dump_stack_lvl+0x100/0x190 [ 216.462089][T10696] should_fail_ex.cold+0x5/0xa [ 216.462104][T10696] should_failslab+0xc2/0x120 [ 216.462120][T10696] __kmalloc_cache_noprof+0x91/0x6b0 [ 216.462132][T10696] ? resv_map_alloc+0x46/0x400 [ 216.462149][T10696] resv_map_alloc+0x46/0x400 [ 216.462164][T10696] hugetlbfs_get_inode+0x385/0x700 [ 216.462176][T10696] ? __mutex_unlock_slowpath+0x35d/0x930 [ 216.462190][T10696] hugetlb_file_setup+0x15b/0x5b0 [ 216.462203][T10696] ksys_mmap_pgoff+0x242/0x610 [ 216.462220][T10696] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 216.462236][T10696] ? fput+0x7c/0x100 [ 216.462250][T10696] ? ksys_write+0x1ac/0x250 [ 216.462260][T10696] ? __pfx_ksys_write+0x10/0x10 [ 216.462273][T10696] __x64_sys_mmap+0x125/0x190 [ 216.462292][T10696] do_syscall_64+0x123/0x790 [ 216.462304][T10696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.462316][T10696] RIP: 0033:0x7f5607b9e0d9 [ 216.462326][T10696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.462337][T10696] RSP: 002b:00007f5608a24028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 216.462348][T10696] RAX: ffffffffffffffda RBX: 00007f5607e25fa0 RCX: 00007f5607b9e0d9 [ 216.462355][T10696] RDX: 0000000000000002 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 216.462361][T10696] RBP: 00007f5608a24090 R08: ffffffffffffffff R09: 0000000000000000 [ 216.462368][T10696] R10: 000000000004c831 R11: 0000000000000246 R12: 0000000000000001 [ 216.462374][T10696] R13: 00007f5607e26038 R14: 00007f5607e25fa0 R15: 00007fff0ae01e08 [ 216.462388][T10696] [ 216.515373][ T5824] usb 2-1: new high-speed USB device number 2 using ehci-pci [ 216.566146][T10704] bridge1: entered promiscuous mode [ 216.570219][T10704] bridge1: entered allmulticast mode [ 216.592507][T10707] Invalid option length (480) for dns_resolver key [ 216.660878][T10711] ehci-pci 0000:00:1d.7: remove, state 1 [ 216.663438][T10711] usb usb2: USB disconnect, device number 1 [ 216.770049][T10714] syzkaller0: entered promiscuous mode [ 216.772457][T10714] syzkaller0: entered allmulticast mode [ 216.874922][ T5824] usb 2-1: device not accepting address 2, error -108 [ 216.880967][ T5824] usb usb2-port1: attempt power cycle [ 216.886196][ T5729] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 216.890656][ T5729] Bluetooth: hci3: Injecting HCI hardware error event [ 216.896974][ T63] Bluetooth: hci3: hardware error 0x00 [ 216.990074][T10711] ehci-pci 0000:00:1d.7: USB bus 2 deregistered [ 217.408260][ T6521] usb 1-1: new full-speed USB device number 10 using uhci_hcd [ 217.545551][T10724] md: array md0 already has disks! [ 217.622399][ T6521] usb 1-1: not running at top speed; connect to a high speed hub [ 217.625919][ T6521] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 217.648889][ T6521] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 217.658368][ T42] audit: type=1400 audit(1787254579.722:696): avc: denied { write } for pid=10726 comm="syz.0.1781" name="renderD128" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 217.664878][ T6521] usb 1-1: Product: QEMU USB Tablet [ 217.668379][ T6521] usb 1-1: Manufacturer: QEMU [ 217.669925][ T6521] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 217.728843][ T6521] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb1/1-1/1-1:1.0/0003:0627:0001.0016/input/input29 [ 217.775312][T10729] FAULT_INJECTION: forcing a failure. [ 217.775312][T10729] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 217.781454][T10729] CPU: 2 UID: 0 PID: 10729 Comm: syz.0.1782 Not tainted syzkaller #0 PREEMPT(full) [ 217.781480][T10729] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 217.781491][T10729] Call Trace: [ 217.781498][T10729] [ 217.781507][T10729] dump_stack_lvl+0x100/0x190 [ 217.781538][T10729] should_fail_ex.cold+0x5/0xa [ 217.781563][T10729] _copy_to_user+0x32/0xd0 [ 217.781596][T10729] simple_read_from_buffer+0xcb/0x170 [ 217.781622][T10729] proc_fail_nth_read+0x1af/0x230 [ 217.781645][T10729] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 217.781670][T10729] ? rw_verify_area+0xce/0x6d0 [ 217.781703][T10729] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 217.781725][T10729] vfs_read+0x1e4/0xb40 [ 217.781751][T10729] ? __pfx_vfs_read+0x10/0x10 [ 217.781767][T10729] ? find_held_lock+0x2b/0x80 [ 217.781788][T10729] ? __fget_files+0x215/0x3d0 [ 217.781813][T10729] ? __fget_files+0x21f/0x3d0 [ 217.781841][T10729] ksys_read+0x12a/0x250 [ 217.781858][T10729] ? __pfx_ksys_read+0x10/0x10 [ 217.781884][T10729] do_syscall_64+0x123/0x790 [ 217.781905][T10729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.781924][T10729] RIP: 0033:0x7fd68455e90e [ 217.781940][T10729] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 217.781958][T10729] RSP: 002b:00007fd6854acfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 217.781976][T10729] RAX: ffffffffffffffda RBX: 00007fd6854ad6c0 RCX: 00007fd68455e90e [ 217.781988][T10729] RDX: 000000000000000f RSI: 00007fd6854ad0a0 RDI: 0000000000000004 [ 217.781999][T10729] RBP: 00007fd6854ad090 R08: 0000000000000000 R09: 0000000000000000 [ 217.782010][T10729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.782021][T10729] R13: 00007fd684826038 R14: 00007fd684825fa0 R15: 00007ffe2d672a78 [ 217.782049][T10729] [ 217.866156][ T6521] hid-generic 0003:0627:0001.0016: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0 [ 217.884389][T10712] usb 1-1: USB disconnect, device number 10 [ 217.910145][T10731] syzkaller1: entered promiscuous mode [ 217.912439][T10731] syzkaller1: entered allmulticast mode [ 217.942874][T10732] fido_id[10732]: Failed to open report descriptor at '/sys/devices/pci0000:00/0000:00:1d.0/usb1/1-1/report_descriptor': No such file or directory [ 217.955136][T10731] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1783'. [ 218.045990][T10734] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 218.055669][T10734] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 218.083521][T10712] ehci-pci 0000:00:1d.7: EHCI Host Controller [ 218.097102][T10712] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 2 [ 218.102394][T10712] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000 [ 218.125015][T10712] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00 [ 218.127872][T10712] usb usb2: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 218.131549][T10712] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 218.134278][T10712] usb usb2: Product: EHCI Host Controller [ 218.136929][T10712] usb usb2: Manufacturer: Linux syzkaller ehci_hcd [ 218.139115][T10712] usb usb2: SerialNumber: 0000:00:1d.7 [ 218.147232][T10712] hub 2-0:1.0: USB hub found [ 218.149198][T10712] hub 2-0:1.0: 6 ports detected [ 218.188288][T10712] hub 1-0:1.0: USB hub found [ 218.190560][T10712] hub 1-0:1.0: 2 ports detected [ 218.227605][T10712] hub 3-0:1.0: USB hub found [ 218.232490][T10712] hub 3-0:1.0: 2 ports detected [ 218.276259][T10712] hub 4-0:1.0: USB hub found [ 218.283333][T10712] hub 4-0:1.0: 2 ports detected [ 218.434996][ T5882] usb 2-1: new high-speed USB device number 2 using ehci-pci [ 218.636420][T10748] FAULT_INJECTION: forcing a failure. [ 218.636420][T10748] name failslab, interval 1, probability 0, space 0, times 0 [ 218.645571][T10748] CPU: 2 UID: 0 PID: 10748 Comm: syz.1.1789 Not tainted syzkaller #0 PREEMPT(full) [ 218.645598][T10748] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 218.645609][T10748] Call Trace: [ 218.645616][T10748] [ 218.645625][T10748] dump_stack_lvl+0x100/0x190 [ 218.645656][T10748] should_fail_ex.cold+0x5/0xa [ 218.645681][T10748] should_failslab+0xc2/0x120 [ 218.645706][T10748] __kmalloc_noprof+0xfc/0x820 [ 218.645730][T10748] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 218.645754][T10748] kernfs_fop_write_iter+0x26a/0x5f0 [ 218.645777][T10748] vfs_write+0x6af/0x1050 [ 218.645797][T10748] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 218.645818][T10748] ? __pfx_vfs_write+0x10/0x10 [ 218.645834][T10748] ? find_held_lock+0x2b/0x80 [ 218.645873][T10748] ksys_write+0x12a/0x250 [ 218.645892][T10748] ? __pfx_ksys_write+0x10/0x10 [ 218.645918][T10748] do_syscall_64+0x123/0x790 [ 218.645940][T10748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.645960][T10748] RIP: 0033:0x7efc4df9e0d9 [ 218.645976][T10748] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.645994][T10748] RSP: 002b:00007efc4edb6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 218.646012][T10748] RAX: ffffffffffffffda RBX: 00007efc4e226090 RCX: 00007efc4df9e0d9 [ 218.646024][T10748] RDX: 0000000000000020 RSI: 0000200000000000 RDI: 0000000000000005 [ 218.646036][T10748] RBP: 00007efc4edb6090 R08: 0000000000000000 R09: 0000000000000000 [ 218.646047][T10748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.646058][T10748] R13: 00007efc4e226128 R14: 00007efc4e226090 R15: 00007ffde7358668 [ 218.646084][T10748] [ 218.719428][ T5882] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 218.821054][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 218.824458][ T5882] usb 2-1: Product: QEMU USB Tablet [ 218.826756][ T5882] usb 2-1: Manufacturer: QEMU [ 218.828763][ T5882] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 218.952161][ T5882] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0017/input/input30 [ 218.977143][ T63] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 219.025946][ T5882] hid-generic 0003:0627:0001.0017: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 220.121471][ T42] audit: type=1400 audit(1787254582.182:697): avc: denied { mounton } for pid=10758 comm="syz.1.1792" path="/proc/1083/task" dev="proc" ino=43199 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 220.128870][T10759] ip6gretap0: entered promiscuous mode [ 220.387566][T10762] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1794'. [ 222.625531][ T5824] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 222.659854][ T42] audit: type=1400 audit(1787254584.722:698): avc: denied { write } for pid=10788 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 222.712486][ T42] audit: type=1400 audit(1787254584.772:699): avc: denied { write } for pid=10791 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 222.820503][ T42] audit: type=1400 audit(1787254584.872:700): avc: denied { write } for pid=10795 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 222.858331][ T42] audit: type=1400 audit(1787254584.922:701): avc: denied { read } for pid=10797 comm="syz.3.1802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 222.892233][ T42] audit: type=1400 audit(1787254584.952:702): avc: denied { write } for pid=10801 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 222.910536][ T42] audit: type=1400 audit(1787254584.972:703): avc: denied { write } for pid=10797 comm="syz.3.1802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 222.997950][ T42] audit: type=1400 audit(1787254585.062:704): avc: denied { write } for pid=10804 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 223.042550][ T42] audit: type=1400 audit(1787254585.102:705): avc: denied { write } for pid=10807 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 223.057657][ T42] audit: type=1400 audit(1787254585.122:706): avc: denied { write } for pid=10797 comm="syz.3.1802" name="functions" dev="configfs" ino=16002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 223.067015][ T42] audit: type=1400 audit(1787254585.122:707): avc: denied { write } for pid=10797 comm="syz.3.1802" name="c.1" dev="configfs" ino=16007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 223.075603][ T42] audit: type=1400 audit(1787254585.122:708): avc: denied { write } for pid=10797 comm="syz.3.1802" name="c.1" dev="configfs" ino=16007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 223.100275][T10803] configfs-gadget.g1 gadget.0: HOST MAC 46:18:44:5f:05:b9 [ 223.103417][T10803] configfs-gadget.g1 gadget.0: MAC 16:95:4d:17:54:cf [ 223.114517][T10803] udc dummy_udc.0: failed to start g1: -19 [ 223.119438][T10803] UDC core: g1: couldn't find an available UDC or it's busy [ 223.124697][T10808] hid-generic 0003:0627:0001.0017: pid 10808 passed too short report [ 223.755672][T10840] ================================================================== [ 223.758979][T10840] BUG: KASAN: global-out-of-bounds in kobject_synth_uevent+0x79d/0x7d0 [ 223.762336][T10840] Read of size 1 at addr ffffffff8d7101be by task syz.3.1805/10840 [ 223.767042][T10840] [ 223.768492][T10840] CPU: 2 UID: 0 PID: 10840 Comm: syz.3.1805 Not tainted syzkaller #0 PREEMPT(full) [ 223.768518][T10840] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 223.768533][T10840] Call Trace: [ 223.768541][T10840] [ 223.768551][T10840] dump_stack_lvl+0x100/0x190 [ 223.768584][T10840] print_report+0x13d/0x4b0 [ 223.768621][T10840] ? __virt_addr_valid+0x239/0x430 [ 223.768653][T10840] ? kobject_synth_uevent+0x79d/0x7d0 [ 223.768682][T10840] kasan_report+0xdf/0x1c0 [ 223.768718][T10840] ? kobject_synth_uevent+0x79d/0x7d0 [ 223.768748][T10840] kobject_synth_uevent+0x79d/0x7d0 [ 223.768777][T10840] ? __pfx_kobject_synth_uevent+0x10/0x10 [ 223.768807][T10840] ? find_held_lock+0x2b/0x80 [ 223.768833][T10840] uevent_store+0x46/0x90 [ 223.768858][T10840] ? __pfx_uevent_store+0x10/0x10 [ 223.768882][T10840] drv_attr_store+0x74/0xb0 [ 223.768907][T10840] ? __pfx_drv_attr_store+0x10/0x10 [ 223.768931][T10840] sysfs_kf_write+0xf2/0x150 [ 223.768955][T10840] kernfs_fop_write_iter+0x3e0/0x5f0 [ 223.768974][T10840] ? __pfx_sysfs_kf_write+0x10/0x10 [ 223.768997][T10840] vfs_write+0x6af/0x1050 [ 223.769017][T10840] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 223.769038][T10840] ? __pfx_vfs_write+0x10/0x10 [ 223.769056][T10840] ? find_held_lock+0x2b/0x80 [ 223.769086][T10840] ksys_write+0x12a/0x250 [ 223.769105][T10840] ? __pfx_ksys_write+0x10/0x10 [ 223.769126][T10840] do_syscall_64+0x123/0x790 [ 223.769147][T10840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.769168][T10840] RIP: 0033:0x7f5607b9e0d9 [ 223.769185][T10840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.769205][T10840] RSP: 002b:00007f5608a24028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 223.769225][T10840] RAX: ffffffffffffffda RBX: 00007f5607e25fa0 RCX: 00007f5607b9e0d9 [ 223.769239][T10840] RDX: 000000000000003f RSI: 0000200000000300 RDI: 0000000000000003 [ 223.769249][T10840] RBP: 00007f5607c35024 R08: 0000000000000000 R09: 0000000000000000 [ 223.769258][T10840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 223.769267][T10840] R13: 00007f5607e26038 R14: 00007f5607e25fa0 R15: 00007fff0ae01e08 [ 223.769282][T10840] [ 223.769287][T10840] [ 223.854940][T10840] The buggy address belongs to the variable: [ 223.856864][T10840] uevent_helper_sysctl_table+0xde/0x2a0 [ 223.858676][T10840] [ 223.859461][T10840] The buggy address belongs to the physical page: [ 223.861481][T10840] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0xd710 [ 223.864270][T10840] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 223.866751][T10840] raw: 00fff00000002000 ffffea000035c408 ffffea000035c408 0000000000000000 [ 223.869640][T10840] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 223.872387][T10840] page dumped because: kasan: bad access detected [ 223.874552][T10840] page_owner info is not present (never set?) [ 223.877101][T10840] [ 223.878138][T10840] Memory state around the buggy address: [ 223.880502][T10840] ffffffff8d710080: f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 00 00 00 00 [ 223.883821][T10840] ffffffff8d710100: 00 00 00 f9 f9 f9 f9 f9 00 07 f9 f9 f9 f9 f9 f9 [ 223.887137][T10840] >ffffffff8d710180: 04 f9 f9 f9 f9 f9 f9 f9 07 f9 f9 f9 f9 f9 f9 f9 [ 223.889886][T10840] ^ [ 223.891905][T10840] ffffffff8d710200: 07 f9 f9 f9 f9 f9 f9 f9 05 f9 f9 f9 f9 f9 f9 f9 [ 223.894498][T10840] ffffffff8d710280: 07 f9 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 [ 223.897079][T10840] ================================================================== [ 223.901921][T10840] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 223.904311][T10840] CPU: 2 UID: 0 PID: 10840 Comm: syz.3.1805 Not tainted syzkaller #0 PREEMPT(full) [ 223.907248][T10840] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 223.910376][T10840] Call Trace: [ 223.911518][T10840] [ 223.912503][T10840] dump_stack_lvl+0x100/0x190 [ 223.914051][T10840] vpanic+0x553/0x970 [ 223.915344][T10840] ? __pfx_vpanic+0x10/0x10 [ 223.916786][T10840] ? mark_held_locks+0x40/0x70 [ 223.918319][T10840] ? kobject_synth_uevent+0x79d/0x7d0 [ 223.920021][T10840] panic+0xd1/0xe0 [ 223.921306][T10840] ? __pfx_panic+0x10/0x10 [ 223.922803][T10840] ? kobject_synth_uevent+0x79d/0x7d0 [ 223.924563][T10840] ? preempt_schedule_common+0x3c/0xb0 [ 223.926292][T10840] check_panic_on_warn.cold+0x19/0x34 [ 223.927985][T10840] end_report.part.0+0x3a/0x90 [ 223.929502][T10840] kasan_report.cold+0xe/0x18 [ 223.931055][T10840] ? kobject_synth_uevent+0x79d/0x7d0 [ 223.933148][T10840] kobject_synth_uevent+0x79d/0x7d0 [ 223.934967][T10840] ? __pfx_kobject_synth_uevent+0x10/0x10 [ 223.936825][T10840] ? find_held_lock+0x2b/0x80 [ 223.938328][T10840] uevent_store+0x46/0x90 [ 223.939724][T10840] ? __pfx_uevent_store+0x10/0x10 [ 223.941388][T10840] drv_attr_store+0x74/0xb0 [ 223.943162][T10840] ? __pfx_drv_attr_store+0x10/0x10 [ 223.945171][T10840] sysfs_kf_write+0xf2/0x150 [ 223.946646][T10840] kernfs_fop_write_iter+0x3e0/0x5f0 [ 223.948506][T10840] ? __pfx_sysfs_kf_write+0x10/0x10 [ 223.950263][T10840] vfs_write+0x6af/0x1050 [ 223.951729][T10840] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 223.953705][T10840] ? __pfx_vfs_write+0x10/0x10 [ 223.955300][T10840] ? find_held_lock+0x2b/0x80 [ 223.956805][T10840] ksys_write+0x12a/0x250 [ 223.958175][T10840] ? __pfx_ksys_write+0x10/0x10 [ 223.959727][T10840] do_syscall_64+0x123/0x790 [ 223.961212][T10840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.963205][T10840] RIP: 0033:0x7f5607b9e0d9 [ 223.964624][T10840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.970735][T10840] RSP: 002b:00007f5608a24028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 223.973527][T10840] RAX: ffffffffffffffda RBX: 00007f5607e25fa0 RCX: 00007f5607b9e0d9 [ 223.976082][T10840] RDX: 000000000000003f RSI: 0000200000000300 RDI: 0000000000000003 [ 223.978640][T10840] RBP: 00007f5607c35024 R08: 0000000000000000 R09: 0000000000000000 [ 223.981229][T10840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 223.984117][T10840] R13: 00007f5607e26038 R14: 00007f5607e25fa0 R15: 00007fff0ae01e08 [ 223.986702][T10840] [ 223.988384][T10840] Kernel Offset: disabled [ 223.989820][T10840] Rebooting in 86400 seconds.. VM DIAGNOSIS: 19:36:26 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000001 RBX=0000000000000001 RCX=0000000000000000 RDX=0000000000000001 RSI=ffffffff8c613400 RDI=0000000000000001 RBP=0000000000000000 RSP=ffffc9000332fc20 R8 =0000000000000000 R9 =fffffbfff2285eda R10=ffffffff9142f6d7 R11=0000000000000000 R12=ffff888027e30000 R13=ffff888027e304c4 R14=ffffffff91432884 R15=0000000000000000 RIP=ffffffff81d606ab RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5bb6000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055d437d96660 CR3=000000000eb94000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=00000000000000ff Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000003172 656c6c616b7a7973 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe2d672f66 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe2d672f66 00007ffe2d672f6c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd684635607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd684635647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd6846357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd684635639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 76f6f344fa66f09b c29a2ca8b973fc61 44b8a2bf28b28aa7 21eb7b274dda8ff2 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 217fe464c57ad899 b9076c3793e28d1e c5300cf690a2e06b 5174ba7a5c8faae6 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ca392645dbcfd977 2e55732adfca6f2b fe83dfff6e54560e 03f9ae598a061d8c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5e873087126d3142 27dae63c3bb3ba20 74ceb7a6e4f78f74 9acdc13252b0f739 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c3d8673f80a147fd d2908521cd3f6f02 609e636fcb18d764 5a215cb4efe04ebe ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 539faa8f36c9c172 d6d94b74a86c8f9d 75ef701edc3b4de0 031299d95ee2ebc5 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 f73925a1ce091904 df1ec19fdf626dbf 4e1c88e1d3e602dc 2d021c743f6d1e8c ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6d4cabed64ef76f6 f344fa66f09bc29a 2ca8b973fc6144b8 a2bf28b28aa721eb ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000182c73 RBX=ffff88801eeea580 RCX=ffffffff8bc36115 RDX=0000000000000001 RSI=ffffffff8e3ced6e RDI=ffffffff8c613480 RBP=ffffed1003ddd4b0 RSP=ffffc90000177e00 R8 =0000000000000001 R9 =ffffed100d4a678d R10=ffff88806a533c6b R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200002efc4 R15=dffffc0000000000 RIP=ffffffff8bc346bf RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5cb6000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f560895da08 CR3=0000000050df9000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f736e6f69746365 6e6e6f632f657375 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff0ae022f6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff0ae022f6 00007fff0ae022fc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5607c35607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5607c35647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5607c357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5607c35639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000050 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a73cb5 RDI=ffffffff9bc0e340 RBP=ffffffff9bc0e300 RSP=ffffc900303f7598 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3866666666666666 R12=0000000000000000 R13=0000000000000030 R14=ffffffff9b900236 R15=ffffffff85a73c50 RIP=ffffffff85a73cdf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f5608a246c0 ffffffff 00c00000 GS =0000 ffff8880d5db6000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c39ab48 CR3=000000002d538000 CR4=00352ef0 DR0=ffffffffffffffff DR1=20000000000001f8 DR2=0000000000000002 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010001 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff0ae022f6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff0ae022f6 00007fff0ae022fc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5607c35607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5607c35647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5607c357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5607c35639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5607df25f8 00007f5607df25c8 00007f5607df2600 00007f5607df25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000168019 RBX=ffff88801f2d2580 RCX=ffffffff8bc36115 RDX=0000000000000001 RSI=ffffffff8e3ced6e RDI=ffffffff8c613480 RBP=ffffed1003e5a4b0 RSP=ffffc90000197e00 R8 =0000000000000001 R9 =ffffed100d4e678d R10=ffff88806a733c6b R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000032fc4 R15=dffffc0000000000 RIP=ffffffff8bc346bf RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5eb6000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f5608a23ff8 CR3=000000005c2b2000 CR4=00352ef0 DR0=ffffffffffffffff DR1=20000000000001f8 DR2=0000000000000002 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd68535d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe2d672f66 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe2d672f66 00007ffe2d672f6c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd684635607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd684635647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd6846357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd684635639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd6847f2600 00007fd6847f25e0 00007fd6847f25e8 00007fd6847f2618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd6847f25f8 00007fd6847f25c8 00007fd6847f2600 00007fd6847f25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000