last executing test programs: 48.19286469s ago: executing program 2 (id=2350): syz_emit_ethernet(0x36, &(0x7f0000000280)={@random="a24858ca13d1", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @dccp={{0x6, 0x4, 0x1, 0x7, 0x28, 0x68, 0x0, 0x7, 0x21, 0x0, @rand_addr=0x64010100, @local, {[@ra={0x94, 0x4}]}}, {{0x4e21, 0x4e21, 0x4, 0x1, 0xb, 0x0, 0x0, 0x0, 0x2, "740e23", 0x2d, '1\x00'}}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000700180a050000000000000000000a0000000900010073797a30000000000900020073797a31000000001400000011"], 0x54}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000"], 0xfdef) 48.024425582s ago: executing program 2 (id=2354): r0 = socket$inet(0x2, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000280)={0x1, 0x0, @ioapic={0x26000, 0x80000000, 0x2, 0x30000, 0x0, [{0xd3, 0x4, 0x3, '\x00', 0xff}, {0x70, 0x66, 0x2, '\x00', 0x7}, {0x8, 0x6, 0x4, '\x00', 0x4}, {0x7a, 0xa, 0x8, '\x00', 0x3}, {0x9, 0x1, 0x0, '\x00', 0x4}, {0x7f, 0x6, 0x0, '\x00', 0x33}, {0x10, 0x81, 0x81, '\x00', 0x3}, {0x1, 0x1, 0x3, '\x00', 0x3}, {0x81, 0x7, 0x3, '\x00', 0x9}, {0x4, 0x9, 0x0, '\x00', 0x2}, {0x7, 0x7, 0x3, '\x00', 0x9}, {0x81, 0xff, 0x7e, '\x00', 0x4}, {0x0, 0x7, 0x4, '\x00', 0x7}, {0x9, 0x0, 0x7f, '\x00', 0xf}, {0x1, 0x5, 0x0, '\x00', 0x7f}, {0x40, 0xd, 0x1, '\x00', 0x6}, {0x0, 0x2, 0x3, '\x00', 0x9}, {0x18, 0x1, 0x8, '\x00', 0x8}, {0x60, 0x1, 0x2, '\x00', 0x8}, {0x40, 0x4, 0x4, '\x00', 0x9}, {0x2, 0x9, 0x81, '\x00', 0x4}, {0x1, 0x6, 0x1, '\x00', 0x8}, {0x7, 0xe2, 0x5, '\x00', 0xd}, {0x3, 0x0, 0x92, '\x00', 0xff}]}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x5, 0x0, 0x8, 0x8001, 0x3, 0x2, 0x106c, 0x100, 0x8000000000000001, 0x80000004000080, 0x5, 0x1, 0x10000000000b, 0x5, 0x1, 0x8000], 0x1, 0x46190}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000600)=@nat={'nat\x00', 0x670, 0x5, 0x368, 0x228, 0x2d0, 0xffffffff, 0xd8, 0x170, 0x2d0, 0x2d0, 0xffffffff, 0x2d0, 0x2d0, 0x5, 0x0, {[{{@ip={@rand_addr=0x640100fc, @rand_addr=0x64010101, 0xff, 0x0, 'veth1_macvtap\x00', 'ipvlan1\x00', {0xff}, {}, 0x33, 0x2, 0x14}, 0x0, 0xa0, 0xd8, 0x48, {}, [@common=@ah={{0x30}, {[0x1, 0x3], 0xff}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x67, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'veth1_vlan\x00'}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xe, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @icmp_id=0x65, @port=0x4e21}}}, {{@ip={@private=0xa010100, @empty, 0x0, 0x0, 'nicvf0\x00', 'nr0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @gre_key=0xe, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x619}, 0x38) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a14000000000a050000000000000000000a00fffe38000000090a010300000000000000000700000008000f40000000020900010073797a310000000008000a400000000008000f400000000114"], 0x74}, 0x1, 0x0, 0x0, 0x88000}, 0x20000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000600012800b00010067656e65766500005000028005000800000000000400380205000900010000000500"], 0x88}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) socket$nl_route(0x10, 0x3, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) r4 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) fsmount(0xffffffffffffffff, 0x1, 0xa) write$hidraw(r4, 0x0, 0xfffffd74) 47.829482872s ago: executing program 2 (id=2355): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r0, 0x40140921, 0x0) ioctl(r0, 0x40140921, &(0x7f0000000420)="0100000001000000010000000100000006000000") ioctl(r0, 0x400c0930, &(0x7f0000000500)='\x00'/12) ioctl(r0, 0x40140921, &(0x7f0000000440)="020000000100000002000000ffffffff00000000") openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) pwrite64(r0, &(0x7f0000001000), 0x1000, 0x0) 47.829200699s ago: executing program 2 (id=2356): syz_open_dev$dvb_demux(&(0x7f0000000280), 0x0, 0x101800) mkdirat(0xffffffffffffff9c, &(0x7f00000000a0)='./config\x00', 0x1ff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x8}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000040)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r2, &(0x7f0000000240), &(0x7f0000000300)=""/234}, 0x20) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='nfs4\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x7989d, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)='nfsd 127.0.0.1 999999999\n', 0x19) read(r3, &(0x7f0000000100), 0x100) chroot(&(0x7f0000000580)='./file0/../file0\x00') r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/card1/oss_mixer\x00', 0x171082, 0x0) r5 = fsopen(&(0x7f00000002c0)='rootfs\x00', 0x1) dup3(r4, r5, 0x80000) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000140)='./file0/../file0\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000130)='./config/dlm/cluster/tcp_port\x00', 0x1, 0x0) write(r6, &(0x7f0000000138)='21', 0x2) 47.721248623s ago: executing program 2 (id=2358): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x6, 0x0, 0x0, 0x574aca18db6b83aa, 0x0, 0x0, 0x2}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9a) 47.335102019s ago: executing program 2 (id=2367): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/usb-conn-gpio/uevent\x00', 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./sys/bus/platform/drivers/usb-conn-gpio/uevent\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x0) write(r0, &(0x7f0000000300)='add', 0x3) 47.234824472s ago: executing program 32 (id=2367): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/usb-conn-gpio/uevent\x00', 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./sys/bus/platform/drivers/usb-conn-gpio/uevent\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x0) write(r0, &(0x7f0000000300)='add', 0x3) 4.976007138s ago: executing program 1 (id=2957): r0 = gettid() r1 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000000b40)={0x8da, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "b8c821145c631d"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000001b40)={r2, 0x0, "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", "772dab82c5a2a3b27be71534270db18ed6251134a2964298ac6b69473abe498d69be6b0b0b70a396ab3c2a413c2a31c21192bdce9021bab7ed71bf889c64db9d276153e3397d35774b4eb14d90930f1f1f5a6b55ed27ced3da490718b3648e4ed9f5b5293351d1ce5b9e86ac2c391441594aa1d0fccacbe94cad623506bc7700cfe3ef271042b21773c4056567ea806dcbe2270c52d522815830439f409e2c51a05a568cb3fbce263f3e2736d38b34239a1f251591e93ca164adb43f224d00f9b7814ee6c36b726684101ab5160f9ad01df97832425b2c6d8a93b339dd5c48dc04d94c18ade131c878a0b931e14f4bef5cff8d1547c8a2c2551d8ac6653ec138528272b1ccc5b7dd638f25588d0f1a7e6ded4002dd4f2409580788b322ffc64d1f07e1689af98e15533226eea14de70a6c96088622724257ec0f267e39f889cdd1267c093c773cb56755737750bd78370045327ded439565b8ee912d7671b0d94a082aebd74f0468c71885d72d84331c7f1d3abba98b2c264d4a55773da3af749e010274bd04e7561a0bb8b4eff1b3417b7efb7d50367e297b5ccaea20f6f05d7609e2e85119bbc3b0192d32feda5e31b71405a1189dae15e03fdf39e54d3579a15e20826be673e1c37cf35d50d93327bed8584a6b1465f3403241b967a1cce524e5b6e0d745f2496d98412bd6a3e41cc82e43eb92e71e05194bf14ffeb17a9f24b1f5e8aeb8715f9ed4c8f89a8c42d1fa885b36053539d8a86b26fc448538b882af7deaa2a53336a8368bab67f2008fbe2597ab50cff6d0bdfd528943afb34c8a32347ce481f8c04fed55190513bacfd493662a26d7004d382251caa41ddaf065abc7f72091f6104cce23b83a27ff87fe5c3dcc811ae8b1d43160bf9677119cdbeb29452c4c21d863778c92a16f66c1065cd0939578bcd5c7d9935418ca8edba2ce6235fb86adc9772caa5b7e30150fb7e15ecf101fed950db732e0968c2838266c3d38f3e96c0ab367eb0c73f98f8ec4432f1c4c37cfc08e26b1f91ac8d9020badff688c1d2cd8b84597a9a4e70e98c74cf109b5f9c64b79b03882c902f585771ebbf6e7610d5d434181c5da32d515be49c786d1ea5ad50c5314ea459b86f952496f1fa1789bbde8c3203d0bde5555b1fbe1c046ce13beca5b706808b0ce05690b3d458d81976e71772f33d88e9f104c18477b4586434ddedab3ba57c64b0d51464533f0deb563dd5d7adfd9bf9c48dda5aea547459a4f17d58145b701751f8ee0c5d8c50f2f3be3fa1f010d7e817d33e3714bb86ea30ee789f6c68b2a3c37e883660d0bd22e232a3b50e41291028f20d44c4f7890eb65b8095920cc2f0a6018e1cc361f1488b4ad928f5f64caa8a8556128e6c41f0fb95509de29b0226e2e90c6b7ed20348ee9cb47daa1eace095481062b509e0b46a7358330b89f944584a2a935432270bc7664a6e2375d2833ac997cbfd3949676ee9d237a671310ac7673decb336d45cb1e52ffb064c478c244d2aa93da34076cdcf0297c88ded8c37a3b67dbb805381880570c86460cedcd9734acf6d02dab86b0ba62c62de5532dc3c14100f634b6e5e222a6d24e479a974695ad7d4b6829b75ece035abf6412771ff75a90514a7a7b4285a381e937b8903345268b15a7bbe0ed39368462b1c0ca0cb0685f55ccb12ff3fb3ca3fbd945f911cb4ead8ce40b2066467c05f502ed81673be8cc6ce16fa13833dbc29447ccb608bc55ad4e5007c65ce60d5126d6766783937ea75432e6f77231e19b7f9816e4748b605a4c65dd0956c35f9cf36b79a9ac23e33c26d64cd4bed3e0deafe9b5a4fd66017945620f05c92e968779c385605a19d6b5b3bc00a02a56882fed60a39e70b9a3fa186a3c055a4404f8cb2d9d7bcef2d11320f860e0242287d22170ed708bc72d7190b1cb8492318f8e5048017244b6efa3dd323b09c9f13c28a160ba68ec0d88c8d2e18e8cf235369117e9cd94ea8f04cc1ec304e7a021ef41659eba67281ad81bd6205e39459ef50c899905befa3e826c18963e2a5164686a5cf150d01724f8e4a5dc10fe0dcdaff7fbc125524b5810819d6a996ffdc4c15bdfb49e355e0dea8d13b17bbeb90db5207a95bceb44e8812d735e7f43aa57050f5ea458f49a6704ca5fc3d6f4dffc27a726aad54eccf7f16e651f930134911444af846d09ca816f33b5b7c2b18dc72d00aadef315bdde32379859ebc4b35cbef6ec446c2eb5bc41bd7ad2ccb9f53334b2df10ced12e3771901b4cf925d1a11ea5e39936f2fdd41d22b12b3f0716a7533f72b5b5721334fc7093006e42e83913c6ec787cae0bc176c33773a829a6ed6ca33bb10c31dbcbd9bb3517acacdef1e69b5590ac12669523df01262fe1d7c99d78203d6135a390f591200f38df9051253c1876679df2a6355399c41cefe4b42b954faf1f13925824ee195cc2f321b49ffe3e96596ce7f8d55beac721f83e011e81c0f12bbd2cb99d3bd88e2dbe435c8e9e573226f0306b7496d52e3e6d7ce0db68c01f6f64a403c75a9710f3c9f01ca022816ca4e61a1aa57d52703ffa47b09709469c05d545b24edb142458fae56889c1487694fcd1138c80889f2048aac0aee4cd62abf0c1346396f060ca3eebd6cfb44bf6f5435c8f91bef6f8554fe9313e12105d43e315e11143f8fd00fddbf6850228275ab3d814ae41d3a30638717fc08d8a71d8d7c7e27629803713d37f2f1c5a04de507deb7fc6f126711d07f1e2eab2c8f30b7a0438a844d7610653035e9cbfe80daeedfcd0018643ec94ca101fe075841ae9ab53e2491286d4cde6e120ddcdf60a180b211a21f7cfa7e8b4295846b6e70c2a43fcecc5f41fefaec2192d42841f7b5953d805d5745b37c7725c396818385df0202fb3d88d2d145890d1e54b385910f086889ce76c37a80f00969f139be4a7beef3e2b9c42e8ecdf3cbe090c76bde5d264e22f3f628d90e212089b8903570562d9e4534100de07e3ca9fb0d00d8825564657c6fec25ac655aa3b127ef55f2045c13a4dfdf6dd89fa8ae0fd75ed967e670d658514c6fbbbaf8dc508f630e01c3d17920b4c469bbe68b9952f76acd1f6a08e9308a0f1fb4cf10806b4e2fc6bd2b07fb45c0fe23d1f97eea91088ce4bffe6094f215a5a6f17691cfb579e0f749e7fc122f8419587b12f7c0324e5ccee01c8f46dc9a581862efe74d44dc3187e023bf3d7fad6560e7c54c7a610f39b46941e90d920ccc61a4fd0868bb6a662c181b0fce4cd96f584941658c48275818f9ffae3c7640671514a033d45fd7b9be8782483dead8a00c8fa9b30b5369d51323d14a6e81387860a0ae41d3ddd8acc67e8a3fe1e7f6b18f1ba4e266e963ae0367ef5924559ea162e1d7560ab7a18902df78afa491e2195d34d9046c6db350061030760dcdfcb50661c84413a7806bc899c53acbfb36129ea54b595f64fc93fa774180e2a1e8cd4e6bb07137a4313430f7de762c2f79f9051c68bdddfd5692df360150c0e451a05db936e8120e722982b8ee3fcea60655258701444138059c736cf5157d6d03a14398deaa0fcc4b1703ec7d88fd7e3f225b999027ea3f1a8c7f7cf7f26729debfdc82c8346aa91c2bc8f520f23c88164a42821a3d4e528768e6f706eadcde653d9e2185e2777a5f7fa9b784b4dc511778c461f31e45d22ca71a50084459e00a45aa8b1afc488fbec855d5c811193ad07a776b9ccfe4b7f61a948c13c7b04f3f3c74fb92caa60d7af723e279f25451de6172a87ae4745f6b371a11d7d1297318b593de24e26e5da7719a820f2458b7822b43d4558424b47eec4a15b0035dcff16eeb9cc66bd307f532144094efd626b1e6bdcc986a6c34a509c6865c33f28c1b9f957a771c7ef5ecbc84e3921505a0c3bf88fd51d4f7e95d4b817929c4881fe26600d08fdda4d09b13ae373e6e3622216d6d3a1467fd072718367de566c9877d5ee72aba2083385ee139aa74e3483827f281c601a2c56325f0dbc765b5f4523dcd4bb923e9e2b8438ea2dee3290a50e7bdb8b1195624b5d72e6fb636cb8166a92fdbb45940532213b4974e0f45b3f7457b3d6fd7855d47c97331a7cec5a315f7422f6463f58b5f1e1232bf8be21489be9775b6611f12cd6583e12380b668a4c8f38612ec4f344c0919beac5a15cc022315353d913035d832ca957bcc6da5913ff2dbe2263951fd51456ad445a1eb4471807a807f3d5546a608a9f3a9b93564c814d88512a3121dbdb7d93f2600d5e4a568d46e7ed38a3255e2dcb5699fd30265ca114131758c885525e546a3f5bfce32811b4c39df329164858affc821102eef7fc92dab4c1c3e3b680004e401863370726b5fe8882dd9cb3e173b0b45d799d885abb8be13b1378cb8b9c9f7245bfab763444d0d6511f854b6fba7f460860e023b46876b29227fccdb0aed4f3449c09904b97bdc437f6dae93218f40667f82a711fdf5a4323e7973926862aa0b5dc96049c44991b25812b80519399a58b079c74cb90ba8d889624d0f4b65d86d07701d9d558921221160f31369c6f0b3f5c657cda04029e9cfe4a098a06d8cd598861ba75e68b20af15817f5c18e9bf5f12a80e67c0d5b253ac04dd9eb23e5fe1b03d63acd437986f28d44d7c9b1105f83ee9a39470940ed3121a3e064dbe9b247652da9ae76c56629fb649f3b955a01b5b12d1e1de1b81ce737d378d62fdf9e57d2159d3c61880780b14801fe6c48d69d91c315fce26c577e1a965021b95010e69b495172fd9db60d0e831e21e38e8f444e60c843c42aa235bd0bf2fe3a163a92b76b6f656aff682059880348f04408bbb71f703f63ac6f7bde4ee84d9672889e978538e80fa87995547a5f69ce289e6d8b86abf2e823746a9b916ad40c5294b9a827700dd251cd8e6080bcc5823159d3b0aff951bec9845435159a61790cb4ab4b31853d87d587219957e2406f233feb9fc84b0bc26e3d5a0f6a4aa55d60a08fafb206acdd1c7df290442efd7bda4e92d3f76c5da982bdd30b97038423d6dc61a703df66d83976b573ec495c31498f537767f98bc4b027638b40df6381474556373197ae9d1f0d539d307d7c7fe904f31ff6fe224f04aa253e791131146d1ebb330aa7846bc5e689c3fd63058b4933135c656aa2b4631a3e62346854d5d94e4d76cf8c047da35d43aa4296e2b66b26597227349d00b70b966bb188083d01ca3c3c398ac017ebca49470c662348dc4a12771d20e1a62359b1221d341950f2848914eedae8f05d357cbf428d02d86cd892cbd37e07690b744d5b4b9b9a04b67b2a6cb569753df248e1f2d84729a1df7c37526d3f8ae1ba0400a52bc044ea7a80f94bd99c84ad74b640021473743fa6111a56ec6b0245b5a5d04f9f9f94d5e8d1ceb0715ce58edba41ec62f00ca74e7cca2b"}) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000a80)=0x1, 0x4) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0xfffffc01, @remote, 0xc0}, 0x1c) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000180)=0x200) write$dsp(r4, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)={0x1c, r7, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r8, 0x40000000af01, 0x0) 1.781870183s ago: executing program 4 (id=2994): setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x80, 0x20203843, 0x7, [0x2], [0x80ffff, 0x0, 0x2], [], [0x400000000000001]}) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x128, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x114, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xcc}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @private=0xa010102}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x2, @empty, 0x7}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @private=0xa010100}}, {0x14, 0x2, @in={0x2, 0x4e20, @loopback}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd7c}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}]}, 0x128}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000040)={@multicast2, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a", 0x4}, 0x3c) r3 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f0000000000)={'icmp\x00'}, &(0x7f0000000080)=0x1e) setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f0000000540)=0xe, 0x4) 1.769370358s ago: executing program 1 (id=2996): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md0\n\x00', 0x4) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r1, 0x40480923, &(0x7f0000000380)="000000000000000000000000000000000a00000000040000020000000200000000000000010000000000000000000000000000000000000000000000000000000201000000000100") ioctl(r1, 0x40140921, 0x0) ioctl(r1, 0x40140921, &(0x7f0000000420)="0100000001000000010000000100000006000000") ioctl(r1, 0x400c0930, 0x0) ioctl(r1, 0x40140921, &(0x7f0000000440)="02000000010000000200") r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r2, &(0x7f0000000600)='3\n\x00', 0x2) close(r2) pwrite64(r1, &(0x7f0000001000), 0x1000, 0x0) 1.705890748s ago: executing program 4 (id=2997): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=@polexpire={0xcc, 0x1b, 0x111, 0x70bd2d, 0x25dfdbfc, {{{@in6=@local, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e21, 0x0, 0x4e23, 0x3ff, 0x2, 0x60, 0x120, 0x73, 0x0, 0xffffffffffffffff}, {0x80000001, 0xfff, 0x6, 0x4, 0x10000000000, 0x7fffffff, 0x8, 0x7}, {0x1, 0x4c67, 0x9, 0x449f}, 0x9, 0x0, 0x2, 0x0, 0x1, 0x1}, 0x10}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x6}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4090}, 0x4004) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000008"], 0x0, 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x50, 0x50, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x4, 0x7}}, @restrict={0xe}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x6, 0x1}, {}, {0x40005}, {0x9, 0x2}]}]}}, 0x0, 0x6a, 0x0, 0x0, 0x7fffffff}, 0x28) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x26e003, 0x0) write$tun(r2, &(0x7f0000000140)={@void, @void, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x3, @broadcast, @empty, @multicast, @local}}, 0x1c) (async) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x34}}, 0xc088) (async, rerun: 64) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) (async, rerun: 64) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='cpuacct.usage_all\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r3, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x50, 0x0, &(0x7f00000001c0)="80c91467a0356f3b6fef07d1b145a9f83c21df26bda0349d12b1706e121793735c399a20f6b39f52ce8e42c65d10489ed0cf04c1d7e7469dfffa3e647b8004e623950bfe09029360140c417928ec94ed", 0x0, 0x0, 0x0, 0x2}, 0x50) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x5f}]}]}, 0x58}}, 0x2) (async, rerun: 32) ioctl$DVB_DVR_DMX_EXPBUF(r3, 0xc00c6f3e, &(0x7f0000000280)={0x9, 0x0, r3}) (rerun: 32) setsockopt$inet6_udp_encap(r5, 0x11, 0x64, &(0x7f00000002c0)=0x3, 0x4) 1.654654111s ago: executing program 4 (id=2998): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/class/sound/card0/id\x00', 0x0, 0x0) read(r0, &(0x7f0000000900), 0x40) write$binfmt_register(r0, &(0x7f0000000040)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x5, 0x3a, ']+', 0x3a, 'sysfs\x00', 0x3a, './sys', 0x3a, [0x46, 0x43, 0x4f, 0x46, 0x43, 0x50, 0x43, 0x46, 0x4f]}, 0x36) 1.587470888s ago: executing program 4 (id=2999): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000280)="7800000018002507b9409b14ffff00000214ae04020206050a02040c430009003f000405100000000d0085a168d0bf46d389516a9069921a4b0005000a00000049935ade4a460c89b6ec0cff3959547f5000000000c902007a00004a324004001600040000d5808bd3e30a37e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={@mcast2, @broadcast, 0x4, 0xd}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='10000', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x5ada985dea50982f) write(r2, &(0x7f0000000200)='1', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r3, &(0x7f0000000280)='0', 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/stat\x00', 0x0, 0x0) socket(0xa, 0x3, 0x3a) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$MEMGETINFO(r4, 0x80204d01, &(0x7f00000001c0)) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0x5}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0xfb5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x400000000000000, 0x1000000000000192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x80, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x1}]}, 0x140}}, 0x844) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3801000018000100feffffff0001000000000000000000000000ffffe0000002040900000000000000000000000000010001071c4e230005000000003a000000eab0b4a64af3cb51100c76cfac132e776dcb9ea81df40620bcf302041ae3bbf19cc6c0", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000fcffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff000000008000000000350000020001032000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x4000000) mkdir(&(0x7f00000000c0)='./file1\x00', 0x34) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000940)='./file1\x00') openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x20402, 0x0) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000580), 0x60700, 0x0) r9 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r8, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x60, r9}, './file0\x00'}) 1.469271819s ago: executing program 0 (id=3001): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, 0x0, 0x0) close(r0) ioctl(0xffffffffffffffff, 0x40140921, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r1, &(0x7f0000000600)='3\n\x00', 0x2) close(r1) 1.469002463s ago: executing program 4 (id=3002): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./config/dlm/cl1/comms/1/local\x00', 0x1, 0x0) write$P9_RREADLINK(r0, 0x0, 0x0) 1.459245345s ago: executing program 1 (id=3003): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r0, &(0x7f0000000280)='0', 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (fail_nth: 1) 1.446876722s ago: executing program 4 (id=3004): r0 = gettid() r1 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000000b40)={0x8da, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "b8c821145c631d"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000001b40)={r2, 0x0, "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", "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"}) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000a80)=0x1, 0x4) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0xfffffc01, @remote, 0xc0}, 0x1c) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000180)=0x200) write$dsp(r4, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)={0x1c, r7, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r8, 0x40000000af01, 0x0) 1.35855267s ago: executing program 0 (id=3005): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280100001700000224bd700000000000ffffffff000000000000000000000000000000100000000000000000000000000000ffffe0000002ac1414bb000000000000000000000000ff0200000000000000000000000000014e2100000000ffff0200a0e467000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000000fc02000000000000000000000000000000000000000000000a0080202e000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000000000000000000000000000000000000000000000fcffffffffffffff0000000000000000000000000000000000000000000000ec00001000000040000000000000000000000000000000000000000000000000040000000000000000ffffffff040000000200000300000000fffffeff3800000000040000fdffffff"], 0x128}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0xe8) 1.352511879s ago: executing program 1 (id=3006): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x9, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFCTH_STATUS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c050}, 0x8000) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000180)="a1", 0x1}], 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(r0, &(0x7f00000001c0)="64e9", 0x2) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT_IN6(r3, 0x89e1, &(0x7f0000000040)={@remote, @local}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000740)=[0x2], 0x0, 0x0, 0x1}}, 0x40) creat(&(0x7f0000000280)='./file0\x00', 0x0) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) 1.232216057s ago: executing program 0 (id=3007): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socket$netlink(0x10, 0x3, 0x14) socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io$printer(r0, &(0x7f00000001c0)={0x14, &(0x7f00000000c0)={0x40, 0x0, 0x5, {0x5, 0x23, "927883"}}, &(0x7f0000000140)={0x0, 0x3, 0x70, @string={0x70, 0x3, "bdfcf40015823a59db1cbc67bd76884207a9ec916ab296d7fdb2c0a7fffb9200ee6c18e07522a83b60c952d4e7aa1df2f9b21e3b3c2eacf943df8ea86800e20ff185241351bf397cfb6e217d9852363c81f8a13dd248e1a1743212e117e03b288a73b4d6f9857b1a0d8acd341882"}}}, &(0x7f0000000740)={0x34, &(0x7f0000000400)={0x40, 0x6, 0xf8, "f59708eeb99a8fc4af25551877ca5407e1368859208b7693da24d4f8049d62cee8b72c5974c185f7162cce16c3564a5fb5a8a0cd7c79d4989be776936b5a8729621746d6b5fa7fd5e10cad6d7e11673365f3058357b4aa8b07f25f4f31db61350e5174216ec1ac4211bda7a42b5231a516d39048634f8fb8c27f212ec4d462c604adc9b394fa2358c62735cbb3859f4d2308bad120b01ba2f1bd065f5f64bcd6ebe2011340991adb90cb11d589d45a99f39cc56fc8042ee3a9dc169248eca8a7f29ec546c04c6177b664091e73bf515cf2383c5a50857c2fd3f62460be250522cc5f7c86f381f9ef9d15b8f53f9961e7d5147ba329b33a3b"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0xd7}, &(0x7f00000005c0)={0x20, 0x0, 0xd4, {0xd2, "a61131175042ae538fe2311ce49a8ae7b3f7538ac12448b3e9053490974ad1330cbac67feb54e253e01d25ce69f2429b92f1fa793fc47bc28f73792b2fac3eab36509f278ce915dd7fb0ee67e29cf743aae831e7c2a1a0277da6459c5a3129e329cf75a870c81d63d8b2f061357b6056863d756c8ad6090be3d8e26d976d2681dd0dc4d028a1dc513847dcb21238d1095d25f993d2c0a0f6be2223ad05948c454ad8b68dad48882487948dd056e5fa87039f70ed51cb03adf7d0b75a68ea74914efc9284f386ae3d6f9b91817d5ee512bcb0"}}, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0x3c}, &(0x7f0000000700)={0x20, 0x0, 0x1, 0x1}}) pselect6(0x29, &(0x7f0000000000)={0x7f, 0x8, 0x3, 0x6, 0xa, 0x0, 0x800, 0xa}, 0x0, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x208c, &(0x7f0000000200)={0x0, 0xcb14, 0x10100, 0x3, 0x4001bf}, &(0x7f0000000040), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000580)=[{&(0x7f0000000380)=""/113, 0x71}], 0x1) io_uring_setup(0x40ab, &(0x7f0000000040)={0x0, 0x7747, 0xc12d, 0x2, 0x0, 0x0, r1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000effd0010000000004000700070100000807f3007500fcff0000000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x41000}, 0x94) 1.141422614s ago: executing program 1 (id=3008): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/ehci-pci/unbind\x00', 0x1, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r2, 0x8992, &(0x7f0000000300)={'bond0\x00', @ifru_names='sit0\x00'}) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0x6, &(0x7f0000003480)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc6e080000070900000d000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) write(r1, &(0x7f0000000240)='0000:00:1d.7', 0xc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pci/drivers/ehci-pci/bind\x00', 0x1, 0x0) write(r4, &(0x7f00000002c0)='0000:00:1d.7', 0xc) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0x7, 0xb}, {0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7fffffff, 0x1, 0x4, 0x4}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240000a1}, 0x4890) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="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", 0x1d1, 0x0, 0x0, 0x0) r8 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0xf0}}, 0x0) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket$packet(0x11, 0x3, 0x300) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r13, 0x8946, &(0x7f0000000240)={'team0\x00', &(0x7f0000000140)=@ethtool_drvinfo={0x3, "df69de45d0f36f4f16c70f68cdfab82c8ebc0979a218659083ee4249a966cfcc", "e7a7edb8c81bb14b7aaa4493acad77c2841a1cade7ed3a2780f1d01064992ba7", "91c9851df29c3357cd9bb75f6c3dbe826e20397f654497ec8e144231e707b3cd", "d30f5c12709b096986047d46169ec1098f0219096348c4e0a110f242f6c24da5", "cd80463b35e87790111bdc7bbdd879baf6d4c437ccac17f4f97502854080066c", "0786cfa1a4a2709cf5db307f", 0x0, 0x6, 0x40, 0xffffffff, 0x8}}) sendto$packet(r12, &(0x7f00000005c0)="bad330fbc93f8578040000ea0756", 0xe, 0x4044041, &(0x7f00000001c0)={0x11, 0x16, r11, 0x1, 0xd8}, 0x14) 729.674262ms ago: executing program 3 (id=3009): openat$kvm(0xffffffffffffff9c, 0x0, 0x101000, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x1, 0x0, @ioapic={0x26000, 0x80000000, 0x2, 0x30000, 0x0, [{0xd3, 0x4, 0x3, '\x00', 0xff}, {0x70, 0x66, 0x2, '\x00', 0x7}, {0x8, 0x6, 0x4, '\x00', 0x4}, {0x7a, 0xa, 0x8, '\x00', 0x3}, {0x9, 0x1, 0x0, '\x00', 0x4}, {0x7f, 0x6, 0x0, '\x00', 0x33}, {0x10, 0x81, 0x81, '\x00', 0x3}, {0x1, 0x1, 0x3, '\x00', 0x3}, {0x81, 0x7, 0x3, '\x00', 0x9}, {0x4, 0x9, 0x0, '\x00', 0x2}, {0x7, 0x7, 0x3, '\x00', 0x9}, {0x81, 0xff, 0x7e, '\x00', 0x4}, {0x0, 0x7, 0x4, '\x00', 0x7}, {0x9, 0x0, 0x7f, '\x00', 0xf}, {0x1, 0x5, 0x0, '\x00', 0x7f}, {0x40, 0xd, 0x1, '\x00', 0x6}, {0x0, 0x2, 0x3, '\x00', 0x9}, {0x18, 0x1, 0x8, '\x00', 0x8}, {0x60, 0x1, 0x2, '\x00', 0x8}, {0x40, 0x4, 0x4, '\x00', 0x9}, {0x2, 0x9, 0x81, '\x00', 0x4}, {0x1, 0x6, 0x1, '\x00', 0x8}, {0x7, 0xe2, 0x5, '\x00', 0xd}, {0x3, 0x0, 0x92, '\x00', 0xff}]}}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000600)=@nat={'nat\x00', 0x670, 0x5, 0x368, 0x228, 0x2d0, 0xffffffff, 0xd8, 0x170, 0x2d0, 0x2d0, 0xffffffff, 0x2d0, 0x2d0, 0x5, 0x0, {[{{@ip={@rand_addr=0x640100fc, @rand_addr=0x64010101, 0xff, 0x0, 'veth1_macvtap\x00', 'ipvlan1\x00', {0xff}, {}, 0x33, 0x2, 0x14}, 0x0, 0xa0, 0xd8, 0x48, {}, [@common=@ah={{0x30}, {[0x1, 0x3], 0xff}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x67, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'veth1_vlan\x00'}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xe, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @icmp_id=0x65, @port=0x4e21}}}, {{@ip={@private=0xa010100, @empty, 0x0, 0x0, 'nicvf0\x00', 'nr0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @gre_key=0xe, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x619}, 0x38) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x88000}, 0x20000000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x310) socket$nl_route(0x10, 0x3, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) r0 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) fsmount(0xffffffffffffffff, 0x1, 0xa) write$hidraw(r0, 0x0, 0xfffffd74) 648.905245ms ago: executing program 3 (id=3010): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x84b0, 0x2, 0x1}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r2, 0x2, &(0x7f0000000380)={0x2, 0x2}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys_mnt\x00', 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x25dfdbfd, {{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x1d}, {@in6=@private1={0xfc, 0x1, '\x00', 0xff}, 0xfe, 0x32}, @in6=@empty, {0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x1, 0x9, 0x7fffffff, 0x543}, {0x4, 0x7fffffffffffffff, 0xfffffffffffffffc, 0xebe2}, {0x2}, 0x70bd2c, 0x3500, 0xa, 0x4, 0x80, 0x50}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x880}, 0x0) mount(0x0, &(0x7f00000000c0)='sys_mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='sys_mnt/block/zram0/reset\x00', 0x1, 0x0) write$sysctl(r4, &(0x7f0000000180)='7\x00', 0x2) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, 0x0) syz_emit_ethernet(0x176, &(0x7f0000000080)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010448", 0x140, 0x3a, 0xff, @local, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, [{0x2, 0x25, "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"}]}}}}}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000000c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0504"], 0x64}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x800, 0x0, 0xffffffffffffffff}) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x33, 0x0, 0x0) r8 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r9, 0xc008561c, &(0x7f0000000100)={0x980929, 0x2}) ioctl$VIDIOC_S_SELECTION(r8, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0x1000, 0x4, 0x2}}) sendto$inet6(r7, &(0x7f0000000280)="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", 0x1000, 0x20000000, &(0x7f0000001280)={0xa, 0x4e23, 0x6, @mcast1, 0x2}, 0x1c) 543.092473ms ago: executing program 0 (id=3011): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, 0x0, 0x0) close(r0) ioctl(0xffffffffffffffff, 0x40140921, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r1, &(0x7f0000000600)='3\n\x00', 0x2) (fail_nth: 3) close(r1) 542.85242ms ago: executing program 3 (id=3012): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./config/dlm/cl1/comms/1/local\x00', 0x1, 0x0) write$P9_RREADLINK(r0, 0x0, 0x0) 447.185726ms ago: executing program 3 (id=3013): r0 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}, 0xfffffffe}, 0x1c) shutdown(r0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) sendto$inet6(r0, &(0x7f00000001c0)="bc", 0x1, 0x4, &(0x7f0000000000)={0xa, 0x4e20, 0x8, @loopback, 0xffff7ffc}, 0x1c) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x440000, 0x0) ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, &(0x7f0000000140)={0x28, 0x2, 0x0, 0x0, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000100)}) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/net\x00') setns(r1, 0x80) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x10f) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r4, &(0x7f0000000100), 0x12) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x8004) write$tun(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b"], 0x88) r6 = accept(r4, 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(r6, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20008010}, 0x80) close(r0) 446.977456ms ago: executing program 0 (id=3014): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) bpf$MAP_CREATE(0xb00000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="08000000040000000400000022bf000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ea45bbad918a00ad49e6c47c903d6b010000000400000500000004000000000000b9262a9da400000000000000000000638a11a71fec4abf7605445f04800bf5a097bcd89593dc87f82f2255"], 0x50) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/bmAttributes\x00', 0x1, 0x0) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000480)=0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget\x00', 0x1ff) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$netlink(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r3 = inotify_init1(0x800) inotify_add_watch(r3, &(0x7f0000000080)='./debug\x00', 0x100) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x11) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000005c0), 0x12) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) mount(0x0, &(0x7f0000000140)='./gadget\x00', &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x0) 294.935789ms ago: executing program 3 (id=3015): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000039c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESHEX=r0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYRES32=r0]) mkdir(&(0x7f00000001c0)='./file1\x00', 0xb) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) syz_fuse_handle_req(r0, &(0x7f00000007c0)="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", 0x2000, &(0x7f00000005c0)={&(0x7f0000000040)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x28, 0x3e, 0xb235333, 0x1, 0x4, 0x4000001, 0x0, 0x0, 0x0, 0xe, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 294.726676ms ago: executing program 3 (id=3016): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newsa={0x148, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d8, 0x6c}, @in=@local, {0x0, 0x192, 0x6, 0xffff, 0x8253c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x800, 0x1}, {0x3, 0x8}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @sa_dir={0x5, 0x21, 0x1}, @extra_flags={0x8, 0x18, 0x1}]}, 0x148}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000090400"/20, @ANYRES32=r4, @ANYBLOB="020000000000000024001280110001006272696467655f736c617665000000000c00058005002b"], 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) ioctl(r0, 0x40140921, 0x0) ioctl(r0, 0x40140921, &(0x7f0000000420)="0100000001000000010000000100000006") ioctl(r0, 0x400c0930, 0x0) syz_usbip_server_init(0x1) ioctl(r0, 0x40140921, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) pwrite64(r0, &(0x7f0000001000), 0x1000, 0x0) 179.83269ms ago: executing program 0 (id=3017): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]}) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x5000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 0s ago: executing program 1 (id=3018): openat$kvm(0xffffffffffffff9c, 0x0, 0x101000, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x1, 0x0, @ioapic={0x26000, 0x80000000, 0x2, 0x30000, 0x0, [{0xd3, 0x4, 0x3, '\x00', 0xff}, {0x70, 0x66, 0x2, '\x00', 0x7}, {0x8, 0x6, 0x4, '\x00', 0x4}, {0x7a, 0xa, 0x8, '\x00', 0x3}, {0x9, 0x1, 0x0, '\x00', 0x4}, {0x7f, 0x6, 0x0, '\x00', 0x33}, {0x10, 0x81, 0x81, '\x00', 0x3}, {0x1, 0x1, 0x3, '\x00', 0x3}, {0x81, 0x7, 0x3, '\x00', 0x9}, {0x4, 0x9, 0x0, '\x00', 0x2}, {0x7, 0x7, 0x3, '\x00', 0x9}, {0x81, 0xff, 0x7e, '\x00', 0x4}, {0x0, 0x7, 0x4, '\x00', 0x7}, {0x9, 0x0, 0x7f, '\x00', 0xf}, {0x1, 0x5, 0x0, '\x00', 0x7f}, {0x40, 0xd, 0x1, '\x00', 0x6}, {0x0, 0x2, 0x3, '\x00', 0x9}, {0x18, 0x1, 0x8, '\x00', 0x8}, {0x60, 0x1, 0x2, '\x00', 0x8}, {0x40, 0x4, 0x4, '\x00', 0x9}, {0x2, 0x9, 0x81, '\x00', 0x4}, {0x1, 0x6, 0x1, '\x00', 0x8}, {0x7, 0xe2, 0x5, '\x00', 0xd}, {0x3, 0x0, 0x92, '\x00', 0xff}]}}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000600)=@nat={'nat\x00', 0x670, 0x5, 0x368, 0x228, 0x2d0, 0xffffffff, 0xd8, 0x170, 0x2d0, 0x2d0, 0xffffffff, 0x2d0, 0x2d0, 0x5, 0x0, {[{{@ip={@rand_addr=0x640100fc, @rand_addr=0x64010101, 0xff, 0x0, 'veth1_macvtap\x00', 'ipvlan1\x00', {0xff}, {}, 0x33, 0x2, 0x14}, 0x0, 0xa0, 0xd8, 0x48, {}, [@common=@ah={{0x30}, {[0x1, 0x3], 0xff}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x67, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'veth1_vlan\x00'}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xe, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @icmp_id=0x65, @port=0x4e21}}}, {{@ip={@private=0xa010100, @empty, 0x0, 0x0, 'nicvf0\x00', 'nr0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @gre_key=0xe, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x619}, 0x38) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x88000}, 0x20000000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x310) socket$nl_route(0x10, 0x3, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) r0 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) fsmount(0xffffffffffffffff, 0x1, 0xa) write$hidraw(r0, 0x0, 0xfffffd74) 0s ago: executing program 1 (id=3019): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/usb-conn-gpio/uevent\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='add', 0x3f) kernel console output (not intermixed with test programs): 0000000000001 RSI: 00007fe1416ca0a0 RDI: 0000000000000004 [ 221.098875][T18044] RBP: 00007fe1416ca090 R08: 0000000000000000 R09: 0000000000000000 [ 221.098881][T18044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.098888][T18044] R13: 00007fe140a26038 R14: 00007fe140a25fa0 R15: 00007ffde25c24a8 [ 221.098901][T18044] [ 221.099078][T18021] md: md_import_device returned -16 [ 221.180060][T18030] md: could not open device unknown-block(1,2). [ 221.183250][T18030] md: md_import_device returned -16 [ 221.261906][T18065] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2638'. [ 221.377729][ T42] audit: type=1400 audit(1787254537.035:682): avc: denied { read write } for pid=18073 comm="syz.3.2641" name="uhid" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 221.389848][ T34] hid-generic 0006:0008:0008.0027: unknown main item tag 0x0 [ 221.396326][ T42] audit: type=1400 audit(1787254537.035:683): avc: denied { open } for pid=18073 comm="syz.3.2641" path="/dev/uhid" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 221.397274][ T34] hid-generic 0006:0008:0008.0027: unknown main item tag 0x0 [ 221.415437][ T34] hid-generic 0006:0008:0008.0027: unknown main item tag 0x0 [ 221.420050][ T34] hid-generic 0006:0008:0008.0027: unknown main item tag 0x0 [ 221.425520][ T34] hid-generic 0006:0008:0008.0027: unknown main item tag 0x0 [ 221.430347][ T34] hid-generic 0006:0008:0008.0027: unknown main item tag 0x0 [ 221.437639][ T34] hid-generic 0006:0008:0008.0027: unknown main item tag 0x0 [ 221.448975][ T34] hid-generic 0006:0008:0008.0027: unknown main item tag 0x0 [ 221.453935][ T34] hid-generic 0006:0008:0008.0027: unknown main item tag 0x0 [ 221.458685][ T34] hid-generic 0006:0008:0008.0027: unknown main item tag 0x0 [ 221.492456][ T34] hid-generic 0006:0008:0008.0027: hidraw1: VIRTUAL HID v0.04 Device [syz1] on syz1 [ 221.530600][T18085] CIFS: Attempting to mount //127.0.0.1/share [ 221.547871][T18085] CIFS: VFS: Error connecting to socket. Aborting operation. [ 221.554017][T18085] CIFS: VFS: cifs_mount failed w/return code = -4 [ 221.571950][T18103] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 221.572694][T18100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 221.625855][T18103] md: couldn't update array info. -22 [ 221.722310][T18103] md: could not open device unknown-block(1,1). [ 221.725024][T18103] md: md_import_device returned -16 [ 221.775592][T18113] md: could not open device unknown-block(1,2). [ 221.778441][T18113] md: md_import_device returned -16 [ 222.135975][ T42] audit: type=1800 audit(1787254537.746:684): pid=18138 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.2654" name="serialnumber" dev="configfs" ino=57092 res=0 errno=0 [ 222.253522][T18148] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 222.310037][T18148] md: couldn't update array info. -22 [ 222.408529][T18148] md: could not open device unknown-block(1,1). [ 222.411122][T18148] md: md_import_device returned -16 [ 222.471084][T18148] md: could not open device unknown-block(1,2). [ 222.477195][T18148] md: md_import_device returned -16 [ 223.055149][T18205] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 223.101875][T18205] md: couldn't update array info. -22 [ 223.197339][T18205] md: could not open device unknown-block(1,1). [ 223.201973][T18205] md: md_import_device returned -16 [ 223.261462][T18205] md: could not open device unknown-block(1,2). [ 223.268108][T18205] md: md_import_device returned -16 [ 223.545634][ T42] audit: type=1800 audit(1787254539.066:685): pid=18220 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.2675" name="product" dev="configfs" ino=57157 res=0 errno=0 [ 223.658996][T18237] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 223.712175][T18237] md: couldn't update array info. -22 [ 223.775883][ T42] audit: type=1400 audit(1787254539.290:686): avc: denied { setopt } for pid=18247 comm="syz.1.2683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 223.816676][T18250] md: could not open device unknown-block(1,1). [ 223.819427][T18250] md: md_import_device returned -16 [ 223.859662][T18237] md: could not open device unknown-block(1,2). [ 223.866256][T18237] md: md_import_device returned -16 [ 224.148205][T18264] md: could not open device unknown-block(1,1). [ 224.151032][T18264] md: md_import_device returned -16 [ 224.153530][T18263] md: could not open device unknown-block(1,2). [ 224.155658][T18263] md: md_import_device returned -16 [ 224.454485][T18289] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 224.533243][T18289] md: couldn't update array info. -22 [ 224.536245][T18291] md: could not open device unknown-block(1,2). [ 224.539648][T18291] md: md_import_device returned -16 [ 224.714331][T18299] md: could not open device unknown-block(1,1). [ 224.719160][T18299] md: md_import_device returned -16 [ 224.722274][T18303] md: could not open device unknown-block(1,2). [ 224.726948][T18303] md: md_import_device returned -16 [ 224.754047][T18306] iommufd_mock iommufd_mock0: Adding to iommu group 5 [ 224.760307][T18310] FAULT_INJECTION: forcing a failure. [ 224.760307][T18310] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 224.788559][T18310] CPU: 2 UID: 0 PID: 18310 Comm: syz.4.2699 Tainted: G L syzkaller #0 PREEMPT(full) [ 224.788585][T18310] Tainted: [L]=SOFTLOCKUP [ 224.788591][T18310] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 224.788600][T18310] Call Trace: [ 224.788606][T18310] [ 224.788613][T18310] dump_stack_lvl+0x100/0x190 [ 224.788641][T18310] should_fail_ex.cold+0x5/0xa [ 224.788659][T18310] ? prepare_alloc_pages+0x16d/0x5f0 [ 224.788697][T18310] should_fail_alloc_page+0xeb/0x140 [ 224.788720][T18310] prepare_alloc_pages+0x1f0/0x5f0 [ 224.788743][T18310] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 224.788764][T18310] ? find_held_lock+0x2b/0x80 [ 224.788799][T18310] ? is_bpf_text_address+0x8a/0x1a0 [ 224.788816][T18310] ? is_bpf_text_address+0x8a/0x1a0 [ 224.788830][T18310] ? bpf_ksym_find+0x128/0x1c0 [ 224.788847][T18310] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 224.788868][T18310] ? is_bpf_text_address+0x94/0x1a0 [ 224.788881][T18310] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 224.788898][T18310] ? __kernel_text_address+0xd/0x30 [ 224.788918][T18310] ? unwind_get_return_address+0x59/0xa0 [ 224.788939][T18310] ? __lock_acquire+0x4c5/0x1ec0 [ 224.788966][T18310] ? look_up_lock_class+0x64/0x120 [ 224.788991][T18310] ? register_lock_class+0x3f/0x7b0 [ 224.789011][T18310] ? find_held_lock+0x2b/0x80 [ 224.789026][T18310] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 224.789049][T18310] ? policy_nodemask+0xed/0x4f0 [ 224.789072][T18310] alloc_pages_mpol+0x1fb/0x540 [ 224.789094][T18310] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 224.789116][T18310] ? __lock_acquire+0x4c5/0x1ec0 [ 224.789138][T18310] folio_alloc_mpol_noprof+0x36/0x260 [ 224.789163][T18310] vma_alloc_folio_noprof+0xed/0x1d0 [ 224.789186][T18310] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 224.789214][T18310] do_anonymous_page+0xb2b/0x2080 [ 224.789232][T18310] ? rcu_read_unlock+0x2d/0xb0 [ 224.789252][T18310] __handle_mm_fault+0x1d2c/0x2a00 [ 224.789270][T18310] ? mt_find+0x45e/0x8e0 [ 224.789287][T18310] ? __pfx___handle_mm_fault+0x10/0x10 [ 224.789305][T18310] ? __pfx_mt_find+0x10/0x10 [ 224.789331][T18310] ? find_vma+0xbf/0x140 [ 224.789349][T18310] ? __pfx_find_vma+0x10/0x10 [ 224.789368][T18310] handle_mm_fault+0x37b/0xa30 [ 224.789387][T18310] do_user_addr_fault+0x745/0x12f0 [ 224.789409][T18310] exc_page_fault+0x6f/0xd0 [ 224.789431][T18310] asm_exc_page_fault+0x26/0x30 [ 224.789446][T18310] RIP: 0010:_copy_to_iter+0x38c/0x1720 [ 224.789470][T18310] Code: 00 00 00 00 e9 4d ff ff ff e8 e0 ea eb fc 4c 8b 74 24 18 44 89 fe 4c 89 f7 e8 50 2e 5e fd 0f 01 cb 4c 89 f9 48 89 df 4c 89 f6 a4 0f 1f 00 48 89 cb 0f 01 ca 4c 89 f8 48 29 c8 48 89 44 24 08 [ 224.789484][T18310] RSP: 0018:ffffc90005627af8 EFLAGS: 00050246 [ 224.789498][T18310] RAX: 0000000000000001 RBX: 0000200000001000 RCX: 000000000000000b [ 224.789507][T18310] RDX: 0000000000000001 RSI: ffff8880577a0000 RDI: 0000200000001000 [ 224.789516][T18310] RBP: ffffc90005627d88 R08: 0000000000000000 R09: ffffed100aef4001 [ 224.789525][T18310] R10: ffff8880577a000a R11: 0000000000000001 R12: 000020000000100b [ 224.789533][T18310] R13: 00007ffffffff000 R14: ffff8880577a0000 R15: 000000000000000b [ 224.789552][T18310] ? _copy_to_iter+0x380/0x1720 [ 224.789575][T18310] ? __mutex_unlock_slowpath+0x35d/0x930 [ 224.789591][T18310] ? __pfx__copy_to_iter+0x10/0x10 [ 224.789613][T18310] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 224.789631][T18310] ? kernfs_put_active+0x93/0xe0 [ 224.789656][T18310] seq_read_iter+0xdab/0x1270 [ 224.789682][T18310] kernfs_fop_read_iter+0x46c/0x610 [ 224.789697][T18310] ? rw_verify_area+0xce/0x6d0 [ 224.789729][T18310] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 224.789746][T18310] vfs_read+0x82e/0xb40 [ 224.789761][T18310] ? __pfx_vfs_read+0x10/0x10 [ 224.789774][T18310] ? find_held_lock+0x2b/0x80 [ 224.789802][T18310] ksys_read+0x12a/0x250 [ 224.789816][T18310] ? __pfx_ksys_read+0x10/0x10 [ 224.789835][T18310] do_syscall_64+0x123/0x790 [ 224.789850][T18310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.789864][T18310] RIP: 0033:0x7f7e7159e0d9 [ 224.789877][T18310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.789891][T18310] RSP: 002b:00007f7e723eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 224.789904][T18310] RAX: ffffffffffffffda RBX: 00007f7e71825fa0 RCX: 00007f7e7159e0d9 [ 224.789912][T18310] RDX: 00000000000003e8 RSI: 0000200000001000 RDI: 0000000000000003 [ 224.789922][T18310] RBP: 00007f7e723eb090 R08: 0000000000000000 R09: 0000000000000000 [ 224.789930][T18310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.789938][T18310] R13: 00007f7e71826038 R14: 00007f7e71825fa0 R15: 00007ffe703d34f8 [ 224.789957][T18310] [ 225.107363][T18337] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 225.152564][T18337] md: couldn't update array info. -22 [ 225.263378][T18352] hid-generic 0003:0627:0001.0026: pid 18352 passed too large report [ 225.287586][T18337] md: could not open device unknown-block(1,2). [ 225.290681][T18337] md: md_import_device returned -16 [ 225.409051][T18363] md: could not open device unknown-block(1,1). [ 225.414210][T18363] md: md_import_device returned -16 [ 225.440869][T18367] FAULT_INJECTION: forcing a failure. [ 225.440869][T18367] name failslab, interval 1, probability 0, space 0, times 0 [ 225.448505][T18367] CPU: 0 UID: 0 PID: 18367 Comm: syz.0.2711 Tainted: G L syzkaller #0 PREEMPT(full) [ 225.448531][T18367] Tainted: [L]=SOFTLOCKUP [ 225.448536][T18367] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 225.448547][T18367] Call Trace: [ 225.448555][T18367] [ 225.448563][T18367] dump_stack_lvl+0x100/0x190 [ 225.448596][T18367] should_fail_ex.cold+0x5/0xa [ 225.448623][T18367] should_failslab+0xc2/0x120 [ 225.448650][T18367] __kvmalloc_node_noprof+0x116/0x970 [ 225.448677][T18367] ? file_tty_write.isra.0+0x64e/0x890 [ 225.448766][T18367] file_tty_write.isra.0+0x64e/0x890 [ 225.448816][T18367] ? security_file_permission+0x76/0x210 [ 225.448863][T18367] ? rw_verify_area+0xce/0x6d0 [ 225.448890][T18367] vfs_write+0x6af/0x1050 [ 225.448904][T18367] ? __pfx_tty_write+0x10/0x10 [ 225.448922][T18367] ? __pfx_vfs_write+0x10/0x10 [ 225.448932][T18367] ? find_held_lock+0x2b/0x80 [ 225.448954][T18367] ksys_write+0x12a/0x250 [ 225.448964][T18367] ? __pfx_ksys_write+0x10/0x10 [ 225.448979][T18367] do_syscall_64+0x123/0x790 [ 225.448993][T18367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.449005][T18367] RIP: 0033:0x7fc6b899e0d9 [ 225.449016][T18367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.449028][T18367] RSP: 002b:00007fc6b6bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 225.449039][T18367] RAX: ffffffffffffffda RBX: 00007fc6b8c25fa0 RCX: 00007fc6b899e0d9 [ 225.449046][T18367] RDX: 0000000000000002 RSI: 0000200000000a00 RDI: 0000000000000003 [ 225.449053][T18367] RBP: 00007fc6b6bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 225.449060][T18367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.449066][T18367] R13: 00007fc6b8c26038 R14: 00007fc6b8c25fa0 R15: 00007ffce2c6a508 [ 225.449080][T18367] [ 225.452799][T18359] md: could not open device unknown-block(1,2). [ 225.453858][ T34] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 225.537384][T18359] md: md_import_device returned -16 [ 225.659200][ T34] usb 6-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 225.666101][ T34] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 225.669628][ T34] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 225.674468][ T34] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.679417][ T34] usb 6-1: Product: syz [ 225.680832][ T34] usb 6-1: Manufacturer: syz [ 225.682400][ T34] usb 6-1: SerialNumber: syz [ 225.686814][T18344] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 225.689882][T18344] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 225.693912][ T34] usbserial_generic 6-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 225.699263][ T34] usbserial_generic 6-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 225.702896][ T34] usbserial_generic 6-1:1.0: generic converter detected [ 225.708876][ T34] usb 6-1: generic converter now attached to ttyUSB0 [ 225.908855][ T3267] usb 6-1: USB disconnect, device number 22 [ 225.916030][ T3267] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 225.919204][ T3267] usbserial_generic 6-1:1.0: device disconnected [ 226.203973][T18417] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 226.242457][T18417] md: couldn't update array info. -22 [ 226.349171][T18417] md: could not open device unknown-block(1,2). [ 226.353610][T18417] md: md_import_device returned -16 [ 226.443221][T18421] ehci-pci 0000:00:1d.7: remove, state 1 [ 226.445897][T18421] usb usb2: USB disconnect, device number 1 [ 226.448474][T18421] usb 2-1: USB disconnect, device number 2 [ 226.466402][ T42] audit: type=1400 audit(1787254541.798:687): avc: denied { connect } for pid=18424 comm="syz.4.2722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 226.479908][ T42] audit: type=1400 audit(1787254541.798:688): avc: denied { read } for pid=18424 comm="syz.4.2722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 226.526986][T18421] ehci-pci 0000:00:1d.7: USB bus 2 deregistered [ 226.561623][T18455] syzkaller0: entered promiscuous mode [ 226.565786][T18455] syzkaller0: entered allmulticast mode [ 226.584735][T18440] md: could not open device unknown-block(1,1). [ 226.587119][T18440] md: md_import_device returned -16 [ 226.691241][T18440] md: could not open device unknown-block(1,2). [ 226.693989][T18440] md: md_import_device returned -16 [ 226.811529][ T42] audit: type=1400 audit(1787254542.126:689): avc: denied { create } for pid=18474 comm="syz.1.2731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 226.823161][ T42] audit: type=1400 audit(1787254542.145:690): avc: denied { bind } for pid=18474 comm="syz.1.2731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 226.826421][T18478] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 226.836590][ T34] usb 1-1: new full-speed USB device number 19 using uhci_hcd [ 226.894348][T18478] md: couldn't update array info. -22 [ 227.023930][T18478] md: could not open device unknown-block(0,0). [ 227.026198][T18478] md: md_import_device returned -6 [ 227.028795][ T34] usb 1-1: not running at top speed; connect to a high speed hub [ 227.033745][ T34] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 227.058578][ T34] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 227.063742][ T34] usb 1-1: Product: QEMU USB Tablet [ 227.066285][ T34] usb 1-1: Manufacturer: QEMU [ 227.068402][ T34] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 227.086467][T18480] md: could not open device unknown-block(1,2). [ 227.089266][T18480] md: md_import_device returned -16 [ 227.095611][ T34] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb1/1-1/1-1:1.0/0003:0627:0001.0028/input/input61 [ 227.164191][ T34] hid-generic 0003:0627:0001.0028: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0 [ 227.170755][T18439] usb 1-1: USB disconnect, device number 19 [ 227.334911][T18439] ehci-pci 0000:00:1d.7: EHCI Host Controller [ 227.347884][T18439] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 2 [ 227.362432][T18439] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000 [ 227.396406][T18439] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00 [ 227.421417][T18439] usb usb2: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 227.425468][T18439] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 227.428839][T18439] usb usb2: Product: EHCI Host Controller [ 227.431635][T18439] usb usb2: Manufacturer: Linux syzkaller ehci_hcd [ 227.434111][T18439] usb usb2: SerialNumber: 0000:00:1d.7 [ 227.442954][T18439] hub 2-0:1.0: USB hub found [ 227.444813][T18439] hub 2-0:1.0: 6 ports detected [ 227.460795][T18530] md: could not open device unknown-block(1,1). [ 227.463629][T18530] md: md_import_device returned -16 [ 227.496171][T18439] hub 1-0:1.0: USB hub found [ 227.498238][T18439] hub 1-0:1.0: 2 ports detected [ 227.514055][T18530] md: could not open device unknown-block(1,2). [ 227.516973][T18530] md: md_import_device returned -16 [ 227.537417][T18439] hub 3-0:1.0: USB hub found [ 227.539357][T18439] hub 3-0:1.0: 2 ports detected [ 227.586918][T18439] hub 4-0:1.0: USB hub found [ 227.589908][T18439] hub 4-0:1.0: 2 ports detected [ 227.671752][T18558] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 227.743076][T18558] md: couldn't update array info. -22 [ 227.749554][ T1037] usb 2-1: new high-speed USB device number 2 using ehci-pci [ 227.875609][T18558] md: could not open device unknown-block(0,0). [ 227.875950][T18584] ehci-pci 0000:00:1d.7: remove, state 1 [ 227.879876][T18558] md: md_import_device returned -6 [ 227.880711][T18584] usb usb2: USB disconnect, device number 1 [ 227.886817][T18587] md: could not open device unknown-block(1,2). [ 227.888983][T18587] md: md_import_device returned -16 [ 227.890948][T18588] md: could not open device unknown-block(1,1). [ 227.900428][T18588] md: md_import_device returned -16 [ 227.994027][T18599] syzkaller0: entered promiscuous mode [ 227.997170][T18599] syzkaller0: entered allmulticast mode [ 227.997499][T18576] md: could not open device unknown-block(1,2). [ 228.005442][T18576] md: md_import_device returned -16 [ 228.122981][ T1037] usb 2-1: device not accepting address 2, error -108 [ 228.126083][T18608] FAULT_INJECTION: forcing a failure. [ 228.126083][T18608] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 228.126651][ T1037] usb usb2-port1: attempt power cycle [ 228.130799][T18608] CPU: 2 UID: 0 PID: 18608 Comm: syz.4.2755 Tainted: G L syzkaller #0 PREEMPT(full) [ 228.130824][T18608] Tainted: [L]=SOFTLOCKUP [ 228.130830][T18608] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 228.130842][T18608] Call Trace: [ 228.130849][T18608] [ 228.130856][T18608] dump_stack_lvl+0x100/0x190 [ 228.130888][T18608] should_fail_ex.cold+0x5/0xa [ 228.130911][T18608] _copy_to_user+0x32/0xd0 [ 228.130942][T18608] simple_read_from_buffer+0xcb/0x170 [ 228.130968][T18608] proc_fail_nth_read+0x1af/0x230 [ 228.130992][T18608] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 228.131014][T18608] ? rw_verify_area+0xce/0x6d0 [ 228.131041][T18608] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 228.131062][T18608] vfs_read+0x1e4/0xb40 [ 228.131082][T18608] ? __pfx_vfs_read+0x10/0x10 [ 228.131098][T18608] ? find_held_lock+0x2b/0x80 [ 228.131120][T18608] ? __fget_files+0x215/0x3d0 [ 228.131145][T18608] ? __fget_files+0x21f/0x3d0 [ 228.131173][T18608] ksys_read+0x12a/0x250 [ 228.131191][T18608] ? __pfx_ksys_read+0x10/0x10 [ 228.131214][T18608] do_syscall_64+0x123/0x790 [ 228.131238][T18608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.131258][T18608] RIP: 0033:0x7f7e7155e90e [ 228.131273][T18608] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 228.131292][T18608] RSP: 002b:00007f7e723eafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 228.131310][T18608] RAX: ffffffffffffffda RBX: 00007f7e723eb6c0 RCX: 00007f7e7155e90e [ 228.131323][T18608] RDX: 000000000000000f RSI: 00007f7e723eb0a0 RDI: 0000000000000004 [ 228.131333][T18608] RBP: 00007f7e723eb090 R08: 0000000000000000 R09: 0000000000000000 [ 228.131345][T18608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.131356][T18608] R13: 00007f7e71826038 R14: 00007f7e71825fa0 R15: 00007ffe703d34f8 [ 228.131380][T18608] [ 228.340833][T18584] ehci-pci 0000:00:1d.7: USB bus 2 deregistered [ 228.371778][T18628] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 228.445796][T18628] md: couldn't update array info. -22 [ 228.569554][T18628] md: could not open device unknown-block(0,0). [ 228.576670][T18628] md: md_import_device returned -6 [ 228.580610][T18636] md: could not open device unknown-block(1,2). [ 228.583413][T18636] md: md_import_device returned -16 [ 228.625192][ T50] usb 1-1: new full-speed USB device number 20 using uhci_hcd [ 228.813755][ T50] usb 1-1: not running at top speed; connect to a high speed hub [ 228.820673][ T50] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 228.846664][ T50] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 228.856170][ T50] usb 1-1: Product: QEMU USB Tablet [ 228.858328][ T50] usb 1-1: Manufacturer: QEMU [ 228.867051][ T50] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 228.909249][ T50] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb1/1-1/1-1:1.0/0003:0627:0001.0029/input/input62 [ 229.000052][ T50] hid-generic 0003:0627:0001.0029: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0 [ 229.018029][T18592] usb 1-1: USB disconnect, device number 20 [ 229.193191][T18703] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 229.201340][T18592] ehci-pci 0000:00:1d.7: EHCI Host Controller [ 229.208754][T18592] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 2 [ 229.216872][T18592] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000 [ 229.245437][T18592] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00 [ 229.249239][T18592] usb usb2: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 229.253910][T18592] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 229.258539][T18703] md: couldn't update array info. -22 [ 229.258799][T18592] usb usb2: Product: EHCI Host Controller [ 229.263088][T18592] usb usb2: Manufacturer: Linux syzkaller ehci_hcd [ 229.265265][T18592] usb usb2: SerialNumber: 0000:00:1d.7 [ 229.278002][T18592] hub 2-0:1.0: USB hub found [ 229.280738][T18592] hub 2-0:1.0: 6 ports detected [ 229.289551][T18704] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 229.321974][T18592] hub 1-0:1.0: USB hub found [ 229.324826][T18592] hub 1-0:1.0: 2 ports detected [ 229.354130][T18592] hub 3-0:1.0: USB hub found [ 229.356014][T18592] hub 3-0:1.0: 2 ports detected [ 229.373551][T18703] md: could not open device unknown-block(1,1). [ 229.376271][T18703] md: md_import_device returned -16 [ 229.396267][T18592] hub 4-0:1.0: USB hub found [ 229.398179][T18592] hub 4-0:1.0: 2 ports detected [ 229.416574][T18718] md: could not open device unknown-block(1,2). [ 229.420293][T18718] md: md_import_device returned -16 [ 229.576271][ T1037] usb 2-1: new high-speed USB device number 2 using ehci-pci [ 229.780054][ T1037] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 229.803454][ T1037] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 229.809331][ T1037] usb 2-1: Product: QEMU USB Tablet [ 229.813223][ T1037] usb 2-1: Manufacturer: QEMU [ 229.815327][ T1037] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 229.869407][ T1037] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.002A/input/input63 [ 229.883829][ T1037] hid-generic 0003:0627:0001.002A: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 230.258703][T18781] ehci-pci 0000:00:1d.7: remove, state 1 [ 230.265451][T18781] usb usb2: USB disconnect, device number 1 [ 230.268065][T18781] usb 2-1: USB disconnect, device number 2 [ 230.318594][T18781] ehci-pci 0000:00:1d.7: USB bus 2 deregistered [ 230.357487][T18794] md: could not open device unknown-block(1,1). [ 230.365073][T18794] md: md_import_device returned -16 [ 230.376949][T18801] syzkaller0: entered promiscuous mode [ 230.379623][T18801] syzkaller0: entered allmulticast mode [ 230.429947][T18808] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 230.506825][T18808] md: couldn't update array info. -22 [ 230.570299][T18808] md: could not open device unknown-block(1,1). [ 230.572509][T18808] md: md_import_device returned -16 [ 230.575240][T18814] md: could not open device unknown-block(1,2). [ 230.578013][T18814] md: md_import_device returned -16 [ 230.644846][ T50] usb 1-1: new full-speed USB device number 21 using uhci_hcd [ 230.822144][ T50] usb 1-1: not running at top speed; connect to a high speed hub [ 230.825572][ T50] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 230.847750][ T50] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 230.851001][ T50] usb 1-1: Product: QEMU USB Tablet [ 230.852898][ T50] usb 1-1: Manufacturer: QEMU [ 230.854457][ T50] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 230.860583][T18843] md: could not open device unknown-block(1,1). [ 230.863145][T18843] md: md_import_device returned -16 [ 230.879284][ T50] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb1/1-1/1-1:1.0/0003:0627:0001.002B/input/input64 [ 230.954049][ T50] hid-generic 0003:0627:0001.002B: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0 [ 230.974470][T18868] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 230.979905][T18798] usb 1-1: USB disconnect, device number 21 [ 231.020213][T18868] md: couldn't update array info. -22 [ 231.115515][T18889] md: could not open device unknown-block(1,1). [ 231.117863][T18889] md: md_import_device returned -16 [ 231.121659][T18798] ehci-pci 0000:00:1d.7: EHCI Host Controller [ 231.126696][T18798] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 2 [ 231.132643][T18798] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000 [ 231.158586][T18798] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00 [ 231.162260][T18798] usb usb2: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 231.167348][T18798] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 231.170758][T18798] usb usb2: Product: EHCI Host Controller [ 231.173166][T18798] usb usb2: Manufacturer: Linux syzkaller ehci_hcd [ 231.175707][T18798] usb usb2: SerialNumber: 0000:00:1d.7 [ 231.182783][T18798] hub 2-0:1.0: USB hub found [ 231.184526][T18798] hub 2-0:1.0: 6 ports detected [ 231.211492][T18868] md: could not open device unknown-block(1,2). [ 231.213996][T18868] md: md_import_device returned -16 [ 231.223449][T18798] hub 1-0:1.0: USB hub found [ 231.225894][T18798] hub 1-0:1.0: 2 ports detected [ 231.266541][T18798] hub 3-0:1.0: USB hub found [ 231.269631][T18798] hub 3-0:1.0: 2 ports detected [ 231.303293][T18798] hub 4-0:1.0: USB hub found [ 231.305090][T18798] hub 4-0:1.0: 2 ports detected [ 231.478570][ T5876] usb 2-1: new high-speed USB device number 2 using ehci-pci [ 231.501127][T18923] md: could not open device unknown-block(1,1). [ 231.503222][T18923] md: md_import_device returned -16 [ 231.570232][T18936] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 231.628290][T18936] md: couldn't update array info. -22 [ 231.643316][T18943] FAULT_INJECTION: forcing a failure. [ 231.643316][T18943] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 231.653003][T18943] CPU: 0 UID: 0 PID: 18943 Comm: syz.0.2813 Tainted: G L syzkaller #0 PREEMPT(full) [ 231.653035][T18943] Tainted: [L]=SOFTLOCKUP [ 231.653042][T18943] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 231.653054][T18943] Call Trace: [ 231.653062][T18943] [ 231.653070][T18943] dump_stack_lvl+0x100/0x190 [ 231.653105][T18943] should_fail_ex.cold+0x5/0xa [ 231.653131][T18943] _copy_from_iter+0x1f4/0x1690 [ 231.653168][T18943] ? __pfx__copy_from_iter+0x10/0x10 [ 231.653201][T18943] ? trace_kmalloc+0xeb/0x110 [ 231.653227][T18943] ? __kasan_kmalloc+0xaa/0xb0 [ 231.653251][T18943] ? __kmalloc_noprof+0x345/0x820 [ 231.653274][T18943] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 231.653299][T18943] kernfs_fop_write_iter+0x186/0x5f0 [ 231.653322][T18943] vfs_write+0x6af/0x1050 [ 231.653343][T18943] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 231.653365][T18943] ? __pfx_vfs_write+0x10/0x10 [ 231.653381][T18943] ? find_held_lock+0x2b/0x80 [ 231.653419][T18943] ksys_write+0x12a/0x250 [ 231.653438][T18943] ? __pfx_ksys_write+0x10/0x10 [ 231.653463][T18943] do_syscall_64+0x123/0x790 [ 231.653486][T18943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.653506][T18943] RIP: 0033:0x7fc6b899e0d9 [ 231.653522][T18943] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.653540][T18943] RSP: 002b:00007fc6b6bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 231.653559][T18943] RAX: ffffffffffffffda RBX: 00007fc6b8c25fa0 RCX: 00007fc6b899e0d9 [ 231.653572][T18943] RDX: 0000000000000002 RSI: 0000200000000600 RDI: 0000000000000003 [ 231.653583][T18943] RBP: 00007fc6b6bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 231.653594][T18943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.653605][T18943] R13: 00007fc6b8c26038 R14: 00007fc6b8c25fa0 R15: 00007ffce2c6a508 [ 231.653630][T18943] [ 231.740701][ T5876] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 231.763131][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 231.766081][ T5876] usb 2-1: Product: QEMU USB Tablet [ 231.771141][ T5876] usb 2-1: Manufacturer: QEMU [ 231.773203][ T5876] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 231.778637][T18936] md: could not open device unknown-block(1,1). [ 231.781792][T18936] md: md_import_device returned -16 [ 231.784117][T18944] md: could not open device unknown-block(1,2). [ 231.787994][T18944] md: md_import_device returned -16 [ 231.791139][T18947] ehci-pci 0000:00:1d.7: remove, state 1 [ 231.791229][T18947] usb usb2: USB disconnect, device number 1 [ 231.802660][T18947] usb 2-1: USB disconnect, device number 2 [ 231.824037][T18947] ehci-pci 0000:00:1d.7: USB bus 2 deregistered [ 231.918451][T18947] syzkaller0: entered promiscuous mode [ 231.920836][T18947] syzkaller0: entered allmulticast mode [ 232.121256][ T50] usb 1-1: new full-speed USB device number 22 using uhci_hcd [ 232.153050][T18985] md: could not open device unknown-block(1,1). [ 232.155217][T18985] md: md_import_device returned -16 [ 232.230620][T18994] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 232.285772][ T50] usb 1-1: not running at top speed; connect to a high speed hub [ 232.294735][ T50] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 232.304824][T18994] md: couldn't update array info. -22 [ 232.315523][ T42] audit: type=1400 audit(1787254547.282:691): avc: denied { shutdown } for pid=18989 comm="syz.3.2822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 232.317467][ T50] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 232.347234][ T50] usb 1-1: Product: QEMU USB Tablet [ 232.348949][ T50] usb 1-1: Manufacturer: QEMU [ 232.350564][ T50] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 232.365861][T18998] md: could not open device unknown-block(1,2). [ 232.368670][T18998] md: md_import_device returned -16 [ 232.371067][T18994] md: could not open device unknown-block(1,1). [ 232.371792][ T50] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb1/1-1/1-1:1.0/0003:0627:0001.002C/input/input65 [ 232.378473][T18994] md: md_import_device returned -16 [ 232.492214][T19023] FAULT_INJECTION: forcing a failure. [ 232.492214][T19023] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 232.499399][T19023] CPU: 2 UID: 0 PID: 19023 Comm: syz.1.2826 Tainted: G L syzkaller #0 PREEMPT(full) [ 232.499430][T19023] Tainted: [L]=SOFTLOCKUP [ 232.499437][T19023] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 232.499448][T19023] Call Trace: [ 232.499455][T19023] [ 232.499463][T19023] dump_stack_lvl+0x100/0x190 [ 232.499496][T19023] should_fail_ex.cold+0x5/0xa [ 232.499522][T19023] _copy_to_user+0x32/0xd0 [ 232.499556][T19023] simple_read_from_buffer+0xcb/0x170 [ 232.499582][T19023] proc_fail_nth_read+0x1af/0x230 [ 232.499676][T19023] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 232.499701][T19023] ? rw_verify_area+0xce/0x6d0 [ 232.499734][T19023] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 232.499755][T19023] vfs_read+0x1e4/0xb40 [ 232.499777][T19023] ? __pfx_vfs_read+0x10/0x10 [ 232.499793][T19023] ? find_held_lock+0x2b/0x80 [ 232.499815][T19023] ? __fget_files+0x215/0x3d0 [ 232.499840][T19023] ? __fget_files+0x21f/0x3d0 [ 232.499869][T19023] ksys_read+0x12a/0x250 [ 232.499887][T19023] ? __pfx_ksys_read+0x10/0x10 [ 232.499932][T19023] do_syscall_64+0x123/0x790 [ 232.499957][T19023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.499977][T19023] RIP: 0033:0x7f420955e90e [ 232.499993][T19023] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 232.500011][T19023] RSP: 002b:00007f420a4d0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 232.500030][T19023] RAX: ffffffffffffffda RBX: 00007f420a4d16c0 RCX: 00007f420955e90e [ 232.500042][T19023] RDX: 000000000000000f RSI: 00007f420a4d10a0 RDI: 0000000000000004 [ 232.500053][T19023] RBP: 00007f420a4d1090 R08: 0000000000000000 R09: 0000000000000000 [ 232.500064][T19023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.500075][T19023] R13: 00007f4209826038 R14: 00007f4209825fa0 R15: 00007fff8023e048 [ 232.500101][T19023] [ 232.571322][ T50] hid-generic 0003:0627:0001.002C: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0 [ 232.623685][T18962] usb 1-1: USB disconnect, device number 22 [ 232.709815][T19035] md: could not open device unknown-block(1,1). [ 232.712512][T19035] md: md_import_device returned -16 [ 232.749478][T19065] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 232.790819][T18962] ehci-pci 0000:00:1d.7: EHCI Host Controller [ 232.795758][T18962] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 2 [ 232.796855][T19073] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 232.800885][T18962] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000 [ 232.825114][T18962] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00 [ 232.828927][T18962] usb usb2: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 232.832541][T18962] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 232.835173][T18962] usb usb2: Product: EHCI Host Controller [ 232.838290][T18962] usb usb2: Manufacturer: Linux syzkaller ehci_hcd [ 232.840698][T18962] usb usb2: SerialNumber: 0000:00:1d.7 [ 232.847112][T18962] hub 2-0:1.0: USB hub found [ 232.849168][T19073] md: couldn't update array info. -22 [ 232.849613][T18962] hub 2-0:1.0: 6 ports detected [ 232.895360][T18962] hub 1-0:1.0: USB hub found [ 232.897697][T18962] hub 1-0:1.0: 2 ports detected [ 232.931862][T19073] md: could not open device unknown-block(1,1). [ 232.933014][T18962] hub 3-0:1.0: USB hub found [ 232.934761][T19073] md: md_import_device returned -16 [ 232.936683][T18962] hub 3-0:1.0: 2 ports detected [ 232.975599][T18962] hub 4-0:1.0: USB hub found [ 232.978095][T18962] hub 4-0:1.0: 2 ports detected [ 232.986335][T19073] md: could not open device unknown-block(1,2). [ 232.988873][T19073] md: md_import_device returned -16 [ 233.145720][ T5809] usb 2-1: new high-speed USB device number 2 using ehci-pci [ 233.329913][ T5809] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 233.352668][ T5809] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 233.356027][ T5809] usb 2-1: Product: QEMU USB Tablet [ 233.357897][ T5809] usb 2-1: Manufacturer: QEMU [ 233.361383][ T5809] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 233.399832][ T5809] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.002D/input/input66 [ 233.475297][ T5809] hid-generic 0003:0627:0001.002D: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 233.513889][T19130] ehci-pci 0000:00:1d.7: remove, state 1 [ 233.515890][T19130] usb usb2: USB disconnect, device number 1 [ 233.517957][T19130] usb 2-1: USB disconnect, device number 2 [ 233.599369][T19130] ehci-pci 0000:00:1d.7: USB bus 2 deregistered [ 233.629764][T19150] syzkaller0: entered promiscuous mode [ 233.632179][T19150] syzkaller0: entered allmulticast mode [ 233.704411][T19156] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 233.754527][T19156] md: couldn't update array info. -22 [ 233.799502][T19163] netlink: Setting conntrack mark requires 'commit' flag. [ 233.802072][T19163] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 233.832980][T19143] ehci-pci 0000:00:1d.7: EHCI Host Controller [ 233.838592][T19143] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 2 [ 233.844696][T19156] md: could not open device unknown-block(1,1). [ 233.846733][T19156] md: md_import_device returned -16 [ 233.850111][T19143] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000 [ 233.872222][T19143] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00 [ 233.876702][T19143] usb usb2: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 233.881909][T19143] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 233.885335][T19143] usb usb2: Product: EHCI Host Controller [ 233.887778][T19143] usb usb2: Manufacturer: Linux syzkaller ehci_hcd [ 233.890458][T19143] usb usb2: SerialNumber: 0000:00:1d.7 [ 233.898090][T19143] hub 2-0:1.0: USB hub found [ 233.900466][T19143] hub 2-0:1.0: 6 ports detected [ 233.959303][T19143] hub 1-0:1.0: USB hub found [ 233.962542][T19143] hub 1-0:1.0: 2 ports detected [ 233.979863][T19156] md: could not open device unknown-block(1,2). [ 233.984481][T19156] md: md_import_device returned -16 [ 234.003260][T19143] hub 3-0:1.0: USB hub found [ 234.005624][T19143] hub 3-0:1.0: 2 ports detected [ 234.034255][T19143] hub 4-0:1.0: USB hub found [ 234.036688][T19143] hub 4-0:1.0: 2 ports detected [ 234.224792][ T1037] usb 2-1: new high-speed USB device number 2 using ehci-pci [ 234.320920][ T29] usb 8-1: new low-speed USB device number 22 using dummy_hcd [ 234.425337][T19222] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 234.428676][ T1037] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 234.450011][ T1037] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 234.453553][ T1037] usb 2-1: Product: QEMU USB Tablet [ 234.455769][ T1037] usb 2-1: Manufacturer: QEMU [ 234.457845][ T1037] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 234.478951][ T1037] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.002E/input/input67 [ 234.481228][T19222] md: couldn't update array info. -22 [ 234.492630][ T29] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 234.497584][ T29] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 234.500613][ T29] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 234.507489][ T29] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 234.512732][ T29] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 234.520268][ T29] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 234.530181][ T29] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 234.533540][ T29] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 234.539228][ T29] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 234.543447][ T29] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 234.547469][ T29] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 234.552075][ T29] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 234.554451][ T29] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 234.555528][ T1037] hid-generic 0003:0627:0001.002E: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 234.557923][ T29] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 234.557940][ T29] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 234.557953][ T29] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 234.560346][ T29] usb 8-1: string descriptor 0 read error: -22 [ 234.577152][ T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.585769][ T29] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 234.622445][T19222] md: could not open device unknown-block(1,1). [ 234.625416][T19222] md: md_import_device returned -16 [ 234.628026][T19228] md: could not open device unknown-block(1,2). [ 234.631148][T19228] md: md_import_device returned -16 [ 234.800722][ T29] usb 8-1: USB disconnect, device number 22 [ 234.868197][T19260] ehci-pci 0000:00:1d.7: remove, state 1 [ 234.869980][T19260] usb usb2: USB disconnect, device number 1 [ 234.871776][T19260] usb 2-1: USB disconnect, device number 2 [ 234.901257][T19260] ehci-pci 0000:00:1d.7: USB bus 2 deregistered [ 234.984851][T19260] syzkaller0: entered promiscuous mode [ 234.986772][T19260] syzkaller0: entered allmulticast mode [ 235.197163][ T50] usb 1-1: new full-speed USB device number 23 using uhci_hcd [ 235.228337][T19282] SELinux: syz.1.2861 (19282) wrote to user. This is no longer supported. [ 235.236250][ T42] audit: type=1400 audit(1787254550.005:692): avc: denied { accept } for pid=19281 comm="syz.1.2861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 235.386026][ T50] usb 1-1: not running at top speed; connect to a high speed hub [ 235.391398][ T50] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 235.413682][ T50] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 235.416482][ T50] usb 1-1: Product: QEMU USB Tablet [ 235.418376][ T50] usb 1-1: Manufacturer: QEMU [ 235.420948][ T50] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 235.457192][ T42] audit: type=1400 audit(1787254550.221:693): avc: denied { wake_alarm } for pid=19301 comm="syz.1.2866" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 235.465730][ T50] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb1/1-1/1-1:1.0/0003:0627:0001.002F/input/input68 [ 235.544765][ T50] hid-generic 0003:0627:0001.002F: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0 [ 235.554771][T19278] usb 1-1: USB disconnect, device number 23 [ 235.731821][ T5817] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 235.735818][T19278] ehci-pci 0000:00:1d.7: EHCI Host Controller [ 235.755381][T19278] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 2 [ 235.765086][T19278] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000 [ 235.800778][T19278] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00 [ 235.811373][T19278] usb usb2: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 235.822847][T19278] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 235.829456][T19278] usb usb2: Product: EHCI Host Controller [ 235.834720][T19278] usb usb2: Manufacturer: Linux syzkaller ehci_hcd [ 235.838066][T19278] usb usb2: SerialNumber: 0000:00:1d.7 [ 235.852886][T19278] hub 2-0:1.0: USB hub found [ 235.855349][T19278] hub 2-0:1.0: 6 ports detected [ 235.903270][T19278] hub 1-0:1.0: USB hub found [ 235.911937][T19278] hub 1-0:1.0: 2 ports detected [ 235.950982][T19278] hub 3-0:1.0: USB hub found [ 235.955988][T19278] hub 3-0:1.0: 2 ports detected [ 236.014088][T19278] hub 4-0:1.0: USB hub found [ 236.016031][T19278] hub 4-0:1.0: 2 ports detected [ 236.129657][T19380] FAULT_INJECTION: forcing a failure. [ 236.129657][T19380] name failslab, interval 1, probability 0, space 0, times 0 [ 236.135277][T19380] CPU: 2 UID: 0 PID: 19380 Comm: syz.1.2875 Tainted: G L syzkaller #0 PREEMPT(full) [ 236.135327][T19380] Tainted: [L]=SOFTLOCKUP [ 236.135336][T19380] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 236.135348][T19380] Call Trace: [ 236.135355][T19380] [ 236.135363][T19380] dump_stack_lvl+0x100/0x190 [ 236.135395][T19380] should_fail_ex.cold+0x5/0xa [ 236.135421][T19380] should_failslab+0xc2/0x120 [ 236.135449][T19380] __kmalloc_noprof+0xfc/0x820 [ 236.135474][T19380] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 236.135498][T19380] kernfs_fop_write_iter+0x26a/0x5f0 [ 236.135521][T19380] vfs_write+0x6af/0x1050 [ 236.135541][T19380] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 236.135563][T19380] ? __pfx_vfs_write+0x10/0x10 [ 236.135579][T19380] ? find_held_lock+0x2b/0x80 [ 236.135618][T19380] ksys_write+0x12a/0x250 [ 236.135637][T19380] ? __pfx_ksys_write+0x10/0x10 [ 236.135662][T19380] do_syscall_64+0x123/0x790 [ 236.135686][T19380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.135706][T19380] RIP: 0033:0x7f420959e0d9 [ 236.135723][T19380] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.135740][T19380] RSP: 002b:00007f420a4d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 236.135759][T19380] RAX: ffffffffffffffda RBX: 00007f4209825fa0 RCX: 00007f420959e0d9 [ 236.135771][T19380] RDX: 0000000000000002 RSI: 0000200000000600 RDI: 0000000000000003 [ 236.135788][T19380] RBP: 00007f420a4d1090 R08: 0000000000000000 R09: 0000000000000000 [ 236.135799][T19380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.135810][T19380] R13: 00007f4209826038 R14: 00007f4209825fa0 R15: 00007fff8023e048 [ 236.135835][T19380] [ 236.202693][ T3267] usb 2-1: new high-speed USB device number 2 using ehci-pci [ 236.254615][T19394] fuse: Unknown parameter '' [ 236.324124][T19389] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 236.405433][ T3267] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 236.422204][ T3267] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 236.425107][ T3267] usb 2-1: Product: QEMU USB Tablet [ 236.427798][ T3267] usb 2-1: Manufacturer: QEMU [ 236.429832][ T3267] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 236.466479][ T3267] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0030/input/input69 [ 236.549909][ T3267] hid-generic 0003:0627:0001.0030: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 236.674151][T19415] ehci-pci 0000:00:1d.7: remove, state 1 [ 236.677347][T19415] usb usb2: USB disconnect, device number 1 [ 236.680373][T19415] usb 2-1: USB disconnect, device number 2 [ 236.789941][T19429] syzkaller0: entered promiscuous mode [ 236.792445][T19429] syzkaller0: entered allmulticast mode [ 236.802946][T19415] ehci-pci 0000:00:1d.7: USB bus 2 deregistered [ 237.068159][ T42] audit: type=1400 audit(1787254551.727:694): avc: denied { ioctl } for pid=19440 comm="syz.4.2882" path="socket:[61245]" dev="sockfs" ino=61245 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 237.078123][T19441] CUSE: unknown device info "" [ 237.079724][T19441] CUSE: unknown device info "" [ 237.081404][T19441] CUSE: unknown device info "" [ 237.082992][T19441] CUSE: unknown device info "" [ 237.084865][T19441] CUSE: DEVNAME unspecified [ 237.131442][ T50] usb 1-1: new full-speed USB device number 24 using uhci_hcd [ 237.250610][ T42] audit: type=1400 audit(1787254551.896:695): avc: denied { append } for pid=19446 comm="syz.4.2883" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 237.285503][ T42] audit: type=1400 audit(1787254551.933:696): avc: denied { accept } for pid=19446 comm="syz.4.2883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 237.307228][ T50] usb 1-1: not running at top speed; connect to a high speed hub [ 237.310889][ T50] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 237.332969][ T50] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 237.336485][ T50] usb 1-1: Product: QEMU USB Tablet [ 237.338579][ T50] usb 1-1: Manufacturer: QEMU [ 237.340464][ T50] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 237.368570][ T50] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb1/1-1/1-1:1.0/0003:0627:0001.0031/input/input70 [ 237.449651][ T50] hid-generic 0003:0627:0001.0031: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0 [ 237.472008][T19418] usb 1-1: USB disconnect, device number 24 [ 237.507072][T19464] hid-generic 0003:0627:0001.0031: pid 19464 passed too large report [ 237.661830][T19493] FAULT_INJECTION: forcing a failure. [ 237.661830][T19493] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 237.667153][T19493] CPU: 0 UID: 0 PID: 19493 Comm: syz.4.2888 Tainted: G L syzkaller #0 PREEMPT(full) [ 237.667183][T19493] Tainted: [L]=SOFTLOCKUP [ 237.667190][T19493] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 237.667201][T19493] Call Trace: [ 237.667208][T19493] [ 237.667216][T19493] dump_stack_lvl+0x100/0x190 [ 237.667248][T19493] should_fail_ex.cold+0x5/0xa [ 237.667274][T19493] _copy_to_user+0x32/0xd0 [ 237.667306][T19493] simple_read_from_buffer+0xcb/0x170 [ 237.667331][T19493] proc_fail_nth_read+0x1af/0x230 [ 237.667354][T19493] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 237.667378][T19493] ? rw_verify_area+0xce/0x6d0 [ 237.667404][T19493] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 237.667425][T19493] vfs_read+0x1e4/0xb40 [ 237.667446][T19493] ? __pfx_vfs_read+0x10/0x10 [ 237.667461][T19493] ? find_held_lock+0x2b/0x80 [ 237.667482][T19493] ? __fget_files+0x215/0x3d0 [ 237.667509][T19493] ? __fget_files+0x21f/0x3d0 [ 237.667537][T19493] ksys_read+0x12a/0x250 [ 237.667553][T19493] ? __pfx_ksys_read+0x10/0x10 [ 237.667579][T19493] do_syscall_64+0x123/0x790 [ 237.667600][T19493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.667618][T19493] RIP: 0033:0x7f7e7155e90e [ 237.667634][T19493] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 237.667651][T19493] RSP: 002b:00007f7e723eafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 237.667670][T19493] RAX: ffffffffffffffda RBX: 00007f7e723eb6c0 RCX: 00007f7e7155e90e [ 237.667681][T19493] RDX: 000000000000000f RSI: 00007f7e723eb0a0 RDI: 0000000000000004 [ 237.667692][T19493] RBP: 00007f7e723eb090 R08: 0000000000000000 R09: 0000000000000000 [ 237.667703][T19493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.667714][T19493] R13: 00007f7e71826038 R14: 00007f7e71825fa0 R15: 00007ffe703d34f8 [ 237.667739][T19493] [ 237.668100][T19418] ehci-pci 0000:00:1d.7: EHCI Host Controller [ 237.760396][T19418] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 2 [ 237.769664][T19418] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000 [ 237.794163][T19418] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00 [ 237.800297][T19418] usb usb2: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 237.813099][T19418] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 237.817878][T19418] usb usb2: Product: EHCI Host Controller [ 237.820298][T19418] usb usb2: Manufacturer: Linux syzkaller ehci_hcd [ 237.822766][T19418] usb usb2: SerialNumber: 0000:00:1d.7 [ 237.846958][T19418] hub 2-0:1.0: USB hub found [ 237.849817][T19418] hub 2-0:1.0: 6 ports detected [ 237.892138][T19418] hub 1-0:1.0: USB hub found [ 237.896137][T19418] hub 1-0:1.0: 2 ports detected [ 237.933617][T19418] hub 3-0:1.0: USB hub found [ 237.935550][T19418] hub 3-0:1.0: 2 ports detected [ 237.966677][T19418] hub 4-0:1.0: USB hub found [ 237.969202][T19418] hub 4-0:1.0: 2 ports detected [ 238.164408][ T56] usb 2-1: new high-speed USB device number 2 using ehci-pci [ 238.232997][T19530] FAULT_INJECTION: forcing a failure. [ 238.232997][T19530] name failslab, interval 1, probability 0, space 0, times 0 [ 238.238325][T19530] CPU: 1 UID: 0 PID: 19530 Comm: syz.1.2895 Tainted: G L syzkaller #0 PREEMPT(full) [ 238.238357][T19530] Tainted: [L]=SOFTLOCKUP [ 238.238365][T19530] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 238.238377][T19530] Call Trace: [ 238.238386][T19530] [ 238.238394][T19530] dump_stack_lvl+0x100/0x190 [ 238.238427][T19530] should_fail_ex.cold+0x5/0xa [ 238.238451][T19530] should_failslab+0xc2/0x120 [ 238.238476][T19530] kmem_cache_alloc_noprof+0x91/0x6a0 [ 238.238500][T19530] ? alloc_empty_file+0x5b/0x1c0 [ 238.238530][T19530] alloc_empty_file+0x5b/0x1c0 [ 238.238555][T19530] path_openat+0xdb/0x2440 [ 238.238587][T19530] ? __pfx_path_openat+0x10/0x10 [ 238.238614][T19530] do_file_open+0x20e/0x430 [ 238.238636][T19530] ? __pfx_do_file_open+0x10/0x10 [ 238.238689][T19530] ? _raw_spin_unlock+0x28/0x50 [ 238.238714][T19530] ? alloc_fd+0x471/0x7a0 [ 238.238741][T19530] do_sys_openat2+0x10f/0x1e0 [ 238.238767][T19530] ? __pfx_do_sys_openat2+0x10/0x10 [ 238.238788][T19530] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 238.238804][T19530] ? __fget_files+0x21f/0x3d0 [ 238.238824][T19530] __x64_sys_openat+0x12d/0x210 [ 238.238844][T19530] ? __pfx___x64_sys_openat+0x10/0x10 [ 238.238863][T19530] ? ksys_write+0x1ac/0x250 [ 238.238884][T19530] do_syscall_64+0x123/0x790 [ 238.238901][T19530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.238917][T19530] RIP: 0033:0x7f420959e0d9 [ 238.238930][T19530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.238945][T19530] RSP: 002b:00007f420a4d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 238.238961][T19530] RAX: ffffffffffffffda RBX: 00007f4209825fa0 RCX: 00007f420959e0d9 [ 238.238971][T19530] RDX: 0000000000000002 RSI: 0000200000000980 RDI: ffffffffffffff9c [ 238.238981][T19530] RBP: 00007f420a4d1090 R08: 0000000000000000 R09: 0000000000000000 [ 238.238990][T19530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.238999][T19530] R13: 00007f4209826038 R14: 00007f4209825fa0 R15: 00007fff8023e048 [ 238.239019][T19530] [ 238.436494][ T56] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 238.457227][ T56] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 238.460821][ T56] usb 2-1: Product: QEMU USB Tablet [ 238.462884][ T56] usb 2-1: Manufacturer: QEMU [ 238.464961][ T56] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 238.501228][ T56] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0032/input/input71 [ 238.551994][T19548] ehci-pci 0000:00:1d.7: remove, state 1 [ 238.555107][T19548] usb usb2: USB disconnect, device number 1 [ 238.578793][ T56] hid-generic 0003:0627:0001.0032: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 238.589905][T19548] usb 2-1: USB disconnect, device number 2 [ 238.675429][T19548] ehci-pci 0000:00:1d.7: USB bus 2 deregistered [ 238.676788][T19569] syzkaller0: entered promiscuous mode [ 238.679844][T19569] syzkaller0: entered allmulticast mode [ 238.823653][T19585] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19585 comm=syz.3.2902 [ 238.956778][ T42] audit: type=1400 audit(1787254553.486:697): avc: denied { nlmsg_read } for pid=19599 comm="syz.3.2907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 238.969497][ T50] usb 1-1: new full-speed USB device number 25 using uhci_hcd [ 239.026551][ T42] audit: type=1400 audit(1787254553.561:698): avc: denied { bind } for pid=19606 comm="syz.3.2909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 239.123827][T19619] FAULT_INJECTION: forcing a failure. [ 239.123827][T19619] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 239.129436][T19619] CPU: 1 UID: 0 PID: 19619 Comm: syz.4.2910 Tainted: G L syzkaller #0 PREEMPT(full) [ 239.129489][T19619] Tainted: [L]=SOFTLOCKUP [ 239.129497][T19619] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 239.129509][T19619] Call Trace: [ 239.129516][T19619] [ 239.129525][T19619] dump_stack_lvl+0x100/0x190 [ 239.129559][T19619] should_fail_ex.cold+0x5/0xa [ 239.129585][T19619] _copy_from_iter+0x1f4/0x1690 [ 239.129621][T19619] ? __pfx__copy_from_iter+0x10/0x10 [ 239.129649][T19619] ? _parse_integer_limit+0x1ac/0x220 [ 239.129676][T19619] ? _kstrtoull+0x13c/0x1f0 [ 239.129698][T19619] ? __pfx__kstrtoull+0x10/0x10 [ 239.129722][T19619] tun_get_user+0x265/0x3cc0 [ 239.129791][T19619] ? __pfx_tun_get_user+0x10/0x10 [ 239.129822][T19619] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 239.129863][T19619] ? find_held_lock+0x2b/0x80 [ 239.129886][T19619] ? tun_get+0x191/0x370 [ 239.129912][T19619] ? tun_get+0x191/0x370 [ 239.129944][T19619] tun_chr_write_iter+0xdc/0x200 [ 239.129964][T19619] vfs_write+0x6af/0x1050 [ 239.129985][T19619] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 239.130006][T19619] ? __pfx_vfs_write+0x10/0x10 [ 239.130022][T19619] ? find_held_lock+0x2b/0x80 [ 239.130058][T19619] ksys_write+0x12a/0x250 [ 239.130074][T19619] ? __pfx_ksys_write+0x10/0x10 [ 239.130098][T19619] do_syscall_64+0x123/0x790 [ 239.130121][T19619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.130153][T19619] RIP: 0033:0x7f7e7159e0d9 [ 239.130170][T19619] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.130189][T19619] RSP: 002b:00007f7e723eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 239.130208][T19619] RAX: ffffffffffffffda RBX: 00007f7e71825fa0 RCX: 00007f7e7159e0d9 [ 239.130221][T19619] RDX: 000000000000fdef RSI: 0000200000000240 RDI: 0000000000000003 [ 239.130232][T19619] RBP: 00007f7e723eb090 R08: 0000000000000000 R09: 0000000000000000 [ 239.130243][T19619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.130254][T19619] R13: 00007f7e71826038 R14: 00007f7e71825fa0 R15: 00007ffe703d34f8 [ 239.130284][T19619] [ 239.146211][ T50] usb 1-1: not running at top speed; connect to a high speed hub [ 239.227780][ T50] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 239.250175][ T50] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 239.254132][ T50] usb 1-1: Product: QEMU USB Tablet [ 239.256603][ T50] usb 1-1: Manufacturer: QEMU [ 239.259228][ T50] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 239.295053][ T50] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb1/1-1/1-1:1.0/0003:0627:0001.0033/input/input72 [ 239.378661][ T50] hid-generic 0003:0627:0001.0033: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0 [ 239.396681][T19556] usb 1-1: USB disconnect, device number 25 [ 239.415927][T19634] jffs2: notice: (19634) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 239.436051][ T42] audit: type=1400 audit(1787254553.936:699): avc: denied { write } for pid=19633 comm="syz.4.2911" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 239.452899][ T42] audit: type=1400 audit(1787254553.936:700): avc: denied { add_name } for pid=19633 comm="syz.4.2911" name="test" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 239.467794][ T42] audit: type=1400 audit(1787254553.936:701): avc: denied { create } for pid=19633 comm="syz.4.2911" name="test" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 239.495577][ T42] audit: type=1400 audit(1787254554.001:702): avc: denied { read write open } for pid=19633 comm="syz.4.2911" path="/103/file0/test" dev="jffs2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 239.545858][T19661] FAULT_INJECTION: forcing a failure. [ 239.545858][T19661] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 239.554908][T19661] CPU: 2 UID: 0 PID: 19661 Comm: syz.0.2913 Tainted: G L syzkaller #0 PREEMPT(full) [ 239.554939][T19661] Tainted: [L]=SOFTLOCKUP [ 239.554946][T19661] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 239.554957][T19661] Call Trace: [ 239.554963][T19661] [ 239.554972][T19661] dump_stack_lvl+0x100/0x190 [ 239.555004][T19661] should_fail_ex.cold+0x5/0xa [ 239.555029][T19661] _copy_from_iter+0x1f4/0x1690 [ 239.555064][T19661] ? __pfx__copy_from_iter+0x10/0x10 [ 239.555091][T19661] ? _parse_integer_limit+0x1ac/0x220 [ 239.555117][T19661] ? _kstrtoull+0x13c/0x1f0 [ 239.555137][T19661] ? __pfx__kstrtoull+0x10/0x10 [ 239.555160][T19661] tun_get_user+0x265/0x3cc0 [ 239.555201][T19661] ? __pfx_tun_get_user+0x10/0x10 [ 239.555230][T19661] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 239.555260][T19661] ? find_held_lock+0x2b/0x80 [ 239.555282][T19661] ? tun_get+0x191/0x370 [ 239.555306][T19661] ? tun_get+0x191/0x370 [ 239.555337][T19661] tun_chr_write_iter+0xdc/0x200 [ 239.555357][T19661] vfs_write+0x6af/0x1050 [ 239.555378][T19661] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 239.555397][T19661] ? __pfx_vfs_write+0x10/0x10 [ 239.555414][T19661] ? find_held_lock+0x2b/0x80 [ 239.555449][T19661] ksys_write+0x12a/0x250 [ 239.555466][T19661] ? __pfx_ksys_write+0x10/0x10 [ 239.555491][T19661] do_syscall_64+0x123/0x790 [ 239.555513][T19661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.555532][T19661] RIP: 0033:0x7fc6b899e0d9 [ 239.555548][T19661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.555566][T19661] RSP: 002b:00007fc6b6bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 239.555586][T19661] RAX: ffffffffffffffda RBX: 00007fc6b8c25fa0 RCX: 00007fc6b899e0d9 [ 239.555597][T19661] RDX: 0000000000000628 RSI: 0000200000000240 RDI: 0000000000000003 [ 239.555608][T19661] RBP: 00007fc6b6bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 239.555637][T19661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.555648][T19661] R13: 00007fc6b8c26038 R14: 00007fc6b8c25fa0 R15: 00007ffce2c6a508 [ 239.555673][T19661] [ 239.669760][T19556] ehci-pci 0000:00:1d.7: EHCI Host Controller [ 239.676267][T19556] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 2 [ 239.680961][T19556] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000 [ 239.697113][T19556] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00 [ 239.701147][T19556] usb usb2: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 239.715686][T19556] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 239.722621][T19556] usb usb2: Product: EHCI Host Controller [ 239.725709][T19556] usb usb2: Manufacturer: Linux syzkaller ehci_hcd [ 239.728800][T19556] usb usb2: SerialNumber: 0000:00:1d.7 [ 239.744778][T19556] hub 2-0:1.0: USB hub found [ 239.747048][T19556] hub 2-0:1.0: 6 ports detected [ 239.784149][T19556] hub 1-0:1.0: USB hub found [ 239.787733][T19556] hub 1-0:1.0: 2 ports detected [ 239.850801][T19556] hub 3-0:1.0: USB hub found [ 239.854370][T19556] hub 3-0:1.0: 2 ports detected [ 239.900170][T19556] hub 4-0:1.0: USB hub found [ 239.904926][T19556] hub 4-0:1.0: 2 ports detected [ 239.911515][T19709] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2919'. [ 240.043871][T19737] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 240.077048][ T6235] usb 2-1: new high-speed USB device number 2 using ehci-pci [ 240.169497][T19741] usb usb1: usbfs: process 19741 (syz.0.2923) did not claim interface 0 before use [ 240.241104][ T5876] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 240.284405][ T6235] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 240.304281][ T6235] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 240.307988][ T6235] usb 2-1: Product: QEMU USB Tablet [ 240.310320][ T6235] usb 2-1: Manufacturer: QEMU [ 240.312455][ T6235] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 240.346238][ T6235] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0034/input/input73 [ 240.355613][T19762] ehci-pci 0000:00:1d.7: remove, state 1 [ 240.357530][T19762] usb usb2: USB disconnect, device number 1 [ 240.380053][ T5876] usb 6-1: device descriptor read/64, error -71 [ 240.428183][ T6235] hid-generic 0003:0627:0001.0034: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 240.435296][T19762] usb 2-1: USB disconnect, device number 2 [ 240.469779][T19774] syzkaller0: entered promiscuous mode [ 240.471593][T19774] syzkaller0: entered allmulticast mode [ 240.488583][T19777] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2929'. [ 240.530231][T19790] 9pnet_virtio: no channels available for device syz [ 240.543577][T19762] ehci-pci 0000:00:1d.7: USB bus 2 deregistered [ 240.616389][T19802] FAULT_INJECTION: forcing a failure. [ 240.616389][T19802] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 240.622397][T19802] CPU: 0 UID: 0 PID: 19802 Comm: syz.3.2932 Tainted: G L syzkaller #0 PREEMPT(full) [ 240.622428][T19802] Tainted: [L]=SOFTLOCKUP [ 240.622435][T19802] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 240.622448][T19802] Call Trace: [ 240.622455][T19802] [ 240.622463][T19802] dump_stack_lvl+0x100/0x190 [ 240.622496][T19802] should_fail_ex.cold+0x5/0xa [ 240.622518][T19802] ? prepare_alloc_pages+0x16d/0x5f0 [ 240.622548][T19802] should_fail_alloc_page+0xeb/0x140 [ 240.622576][T19802] prepare_alloc_pages+0x1f0/0x5f0 [ 240.622607][T19802] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 240.622748][T19802] ? find_held_lock+0x2b/0x80 [ 240.622772][T19802] ? is_bpf_text_address+0x8a/0x1a0 [ 240.622792][T19802] ? is_bpf_text_address+0x8a/0x1a0 [ 240.622810][T19802] ? bpf_ksym_find+0x128/0x1c0 [ 240.622847][T19802] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 240.622875][T19802] ? is_bpf_text_address+0x94/0x1a0 [ 240.622894][T19802] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 240.622917][T19802] ? __kernel_text_address+0xd/0x30 [ 240.622941][T19802] ? unwind_get_return_address+0x59/0xa0 [ 240.622964][T19802] ? arch_stack_walk+0xa6/0xf0 [ 240.622996][T19802] ? __pfx_stack_trace_save+0x10/0x10 [ 240.623020][T19802] ? stack_depot_save_flags+0x27/0x9f0 [ 240.623045][T19802] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 240.623075][T19802] ? policy_nodemask+0xed/0x4f0 [ 240.623103][T19802] alloc_pages_mpol+0x1fb/0x540 [ 240.623131][T19802] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 240.623165][T19802] alloc_pages_noprof+0x1a/0x160 [ 240.623195][T19802] get_free_pages_noprof+0x10/0xb0 [ 240.623219][T19802] __kasan_populate_vmalloc+0xa0/0x210 [ 240.623246][T19802] alloc_vmap_area+0x95d/0x2bb0 [ 240.623280][T19802] ? kasan_save_track+0x14/0x30 [ 240.623303][T19802] ? __kasan_kmalloc+0xaa/0xb0 [ 240.623325][T19802] ? __pfx_alloc_vmap_area+0x10/0x10 [ 240.623351][T19802] ? __get_vm_area_node+0x124/0x350 [ 240.623380][T19802] __get_vm_area_node+0x1ed/0x350 [ 240.623411][T19802] __vmalloc_node_range_noprof+0x228/0x1630 [ 240.623440][T19802] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 240.623471][T19802] ? __lock_acquire+0x4c5/0x1ec0 [ 240.623500][T19802] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 240.623537][T19802] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 240.623564][T19802] ? find_held_lock+0x2b/0x80 [ 240.623584][T19802] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 240.623606][T19802] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 240.623632][T19802] ? avc_has_perm_noaudit+0x145/0x3b0 [ 240.623654][T19802] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 240.623682][T19802] __vmalloc_node_noprof+0xad/0xf0 [ 240.623709][T19802] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 240.623745][T19802] __vmalloc_noprof+0xa3/0x120 [ 240.623772][T19802] ? __pfx___vmalloc_noprof+0x10/0x10 [ 240.623802][T19802] ? rcu_is_watching+0x13/0xc0 [ 240.623823][T19802] ? cap_capable+0x107/0x430 [ 240.623858][T19802] bpf_prog_alloc_no_stats+0x59/0x690 [ 240.623913][T19802] ? security_capable+0x80/0x260 [ 240.623939][T19802] bpf_prog_alloc+0x3b/0x200 [ 240.623966][T19802] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 240.623994][T19802] bpf_prog_load+0x49e/0x2a80 [ 240.624127][T19802] ? __pfx_bpf_prog_load+0x10/0x10 [ 240.624170][T19802] __sys_bpf+0x1f46/0x4a30 [ 240.624201][T19802] ? __pfx___sys_bpf+0x10/0x10 [ 240.624224][T19802] ? find_held_lock+0x2b/0x80 [ 240.624243][T19802] ? get_pid_task+0xfc/0x250 [ 240.624262][T19802] ? get_pid_task+0xfc/0x250 [ 240.624290][T19802] ? find_held_lock+0x2b/0x80 [ 240.624316][T19802] ? rcu_read_lock_any_held+0x6a/0x90 [ 240.624339][T19802] ? find_held_lock+0x2b/0x80 [ 240.624359][T19802] ? ksys_write+0x190/0x250 [ 240.624378][T19802] ? ksys_write+0x190/0x250 [ 240.624414][T19802] ? fput+0x7c/0x100 [ 240.624437][T19802] ? ksys_write+0x1ac/0x250 [ 240.624458][T19802] ? __x64_sys_bpf+0xce/0x140 [ 240.624480][T19802] __x64_sys_bpf+0xce/0x140 [ 240.624505][T19802] ? do_syscall_64+0xae/0x790 [ 240.624526][T19802] do_syscall_64+0x123/0x790 [ 240.624550][T19802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.624569][T19802] RIP: 0033:0x7fe14079e0d9 [ 240.624587][T19802] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.624605][T19802] RSP: 002b:00007fe1416ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 240.624625][T19802] RAX: ffffffffffffffda RBX: 00007fe140a25fa0 RCX: 00007fe14079e0d9 [ 240.624638][T19802] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005 [ 240.624650][T19802] RBP: 00007fe1416ca090 R08: 0000000000000000 R09: 0000000000000000 [ 240.624661][T19802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.624673][T19802] R13: 00007fe140a26038 R14: 00007fe140a25fa0 R15: 00007ffde25c24a8 [ 240.624698][T19802] [ 240.624871][T19802] syz.3.2932: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 240.636700][ T5876] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 240.775235][ T5876] usb 6-1: device descriptor read/64, error -71 [ 240.775925][T19802] ,cpuset=/,mems_allowed=0-1 [ 240.834915][T19802] CPU: 1 UID: 0 PID: 19802 Comm: syz.3.2932 Tainted: G L syzkaller #0 PREEMPT(full) [ 240.834942][T19802] Tainted: [L]=SOFTLOCKUP [ 240.834949][T19802] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 240.834960][T19802] Call Trace: [ 240.834968][T19802] [ 240.834976][T19802] dump_stack_lvl+0x100/0x190 [ 240.835008][T19802] warn_alloc.cold+0x94/0xa8 [ 240.835030][T19802] ? __pfx_warn_alloc+0x10/0x10 [ 240.835051][T19802] ? lockdep_hardirqs_on+0x7d/0x110 [ 240.835085][T19802] ? __get_vm_area_node+0x2f0/0x350 [ 240.835116][T19802] ? __get_vm_area_node+0x22b/0x350 [ 240.835146][T19802] __vmalloc_node_range_noprof+0xccd/0x1630 [ 240.835184][T19802] ? __lock_acquire+0x4c5/0x1ec0 [ 240.835215][T19802] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 240.835252][T19802] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 240.835279][T19802] ? find_held_lock+0x2b/0x80 [ 240.835299][T19802] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 240.835322][T19802] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 240.835348][T19802] ? avc_has_perm_noaudit+0x145/0x3b0 [ 240.835369][T19802] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 240.835396][T19802] __vmalloc_node_noprof+0xad/0xf0 [ 240.835423][T19802] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 240.835454][T19802] __vmalloc_noprof+0xa3/0x120 [ 240.835481][T19802] ? __pfx___vmalloc_noprof+0x10/0x10 [ 240.835510][T19802] ? rcu_is_watching+0x13/0xc0 [ 240.835531][T19802] ? cap_capable+0x107/0x430 [ 240.835557][T19802] bpf_prog_alloc_no_stats+0x59/0x690 [ 240.835584][T19802] ? security_capable+0x80/0x260 [ 240.835609][T19802] bpf_prog_alloc+0x3b/0x200 [ 240.835636][T19802] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 240.835664][T19802] bpf_prog_load+0x49e/0x2a80 [ 240.835687][T19802] ? __pfx_bpf_prog_load+0x10/0x10 [ 240.835722][T19802] __sys_bpf+0x1f46/0x4a30 [ 240.835752][T19802] ? __pfx___sys_bpf+0x10/0x10 [ 240.835773][T19802] ? find_held_lock+0x2b/0x80 [ 240.835792][T19802] ? get_pid_task+0xfc/0x250 [ 240.835812][T19802] ? get_pid_task+0xfc/0x250 [ 240.835839][T19802] ? find_held_lock+0x2b/0x80 [ 240.835864][T19802] ? rcu_read_lock_any_held+0x6a/0x90 [ 240.835911][T19802] ? find_held_lock+0x2b/0x80 [ 240.835930][T19802] ? ksys_write+0x190/0x250 [ 240.835949][T19802] ? ksys_write+0x190/0x250 [ 240.835983][T19802] ? fput+0x7c/0x100 [ 240.836005][T19802] ? ksys_write+0x1ac/0x250 [ 240.836026][T19802] ? __x64_sys_bpf+0xce/0x140 [ 240.836048][T19802] __x64_sys_bpf+0xce/0x140 [ 240.836074][T19802] ? do_syscall_64+0xae/0x790 [ 240.836093][T19802] do_syscall_64+0x123/0x790 [ 240.836113][T19802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.836133][T19802] RIP: 0033:0x7fe14079e0d9 [ 240.836156][T19802] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.836174][T19802] RSP: 002b:00007fe1416ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 240.836193][T19802] RAX: ffffffffffffffda RBX: 00007fe140a25fa0 RCX: 00007fe14079e0d9 [ 240.836204][T19802] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005 [ 240.836215][T19802] RBP: 00007fe1416ca090 R08: 0000000000000000 R09: 0000000000000000 [ 240.836228][T19802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.836238][T19802] R13: 00007fe140a26038 R14: 00007fe140a25fa0 R15: 00007ffde25c24a8 [ 240.836262][T19802] [ 240.836286][T19802] Mem-Info: [ 240.839331][ T5912] usb 1-1: new full-speed USB device number 26 using uhci_hcd [ 240.840897][T19802] active_anon:10558 inactive_anon:13 isolated_anon:0 [ 240.840897][T19802] active_file:832 inactive_file:58179 isolated_file:0 [ 240.840897][T19802] unevictable:0 dirty:137 writeback:0 [ 240.840897][T19802] slab_reclaimable:13227 slab_unreclaimable:68778 [ 240.840897][T19802] mapped:25230 shmem:554 pagetables:1246 [ 240.840897][T19802] sec_pagetables:304 bounce:0 [ 240.840897][T19802] kernel_misc_reclaimable:0 [ 240.840897][T19802] free:454542 free_pcp:7246 free_cma:0 [ 240.893434][ T5876] usb usb6-port1: attempt power cycle [ 240.894507][T19802] Node 0 active_anon:42320kB inactive_anon:52kB active_file:3328kB inactive_file:232516kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:72380kB dirty:552kB writeback:0kB shmem:2212kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13824kB pagetables:4936kB sec_pagetables:1216kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 241.012311][T19802] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28672kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:128kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 241.025671][T19802] Node 0 DMA free:15240kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:60kB local_pcp:56kB free_cma:0kB [ 241.027587][ T5912] usb 1-1: not running at top speed; connect to a high speed hub [ 241.037668][T19802] lowmem_reserve[]: 0 1224 1224 1224 1224 [ 241.037718][T19802] Node 0 DMA32 free:199360kB boost:0kB min:27364kB low:34204kB high:41044kB reserved_highatomic:0KB free_highatomic:0KB active_anon:42312kB inactive_anon:52kB active_file:3328kB inactive_file:232512kB unevictable:0kB writepending:552kB zspages:20kB present:2080628kB managed:1254228kB mlocked:0kB bounce:0kB free_pcp:26936kB local_pcp:1436kB free_cma:0kB [ 241.037772][T19802] lowmem_reserve[]: 0 0 0 0 0 [ 241.037804][T19802] Node 1 Normal free:1603184kB boost:0kB min:39872kB low:49840kB high:59808kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:1032kB local_pcp:400kB free_cma:0kB [ 241.037854][T19802] lowmem_reserve[]: 0 0 0 0 0 [ 241.037891][T19802] Node 0 [ 241.040558][ T5912] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 241.042889][T19802] DMA: 4*4kB (U) 7*8kB (UE) 8*16kB (UME) 8*32kB (UME) 5*64kB (UE) [ 241.072062][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 241.075084][T19802] 5*128kB (UME) 4*256kB (UME) 3*512kB (UME) 3*1024kB (UME) 4*2048kB (M) 0*4096kB = 15240kB [ 241.075173][T19802] Node 0 DMA32: 1202*4kB (UME) 492*8kB (UME) 605*16kB (UME) 808*32kB (UME) 315*64kB (UME) 174*128kB (UME) 74*256kB (UME) 29*512kB (UME) 29*1024kB (UME) 12*2048kB (UM) 6*4096kB (UM) = 199352kB [ 241.075330][T19802] Node 1 Normal: 24*4kB (UME) 42*8kB [ 241.078004][ T5912] usb 1-1: Product: QEMU USB Tablet [ 241.081205][T19802] (UE) 28*16kB (UME) 40*32kB (UME) 28*64kB (UME) [ 241.084749][ T5912] usb 1-1: Manufacturer: QEMU [ 241.092572][T19802] 20*128kB (UME) 7*256kB (UE) 9*512kB [ 241.094351][ T5912] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 241.096505][T19802] (UME) 3*1024kB (UE) 5*2048kB (UME) 385*4096kB (M) = 1603184kB [ 241.108487][T19802] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 241.112297][T19802] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 241.115899][T19802] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 241.116103][ T5912] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb1/1-1/1-1:1.0/0003:0627:0001.0035/input/input74 [ 241.119831][T19802] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 241.127273][T19802] 59566 total pagecache pages [ 241.129309][T19802] 7 pages in swap cache [ 241.131026][T19802] Free swap = 124964kB [ 241.132751][T19802] Total swap = 124996kB [ 241.134384][T19802] 1048443 pages RAM [ 241.135937][T19802] 0 pages HighMem/MovableOnly [ 241.137836][T19802] 285575 pages reserved [ 241.139668][T19802] 0 pages cma reserved [ 241.183749][ T5912] hid-generic 0003:0627:0001.0035: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0 [ 241.192519][T19768] usb 1-1: USB disconnect, device number 26 [ 241.267183][ T5876] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 241.267697][T19819] md: couldn't update array info. -22 [ 241.288874][ T5876] usb 6-1: device descriptor read/8, error -71 [ 241.301959][ T42] audit: type=1326 audit(1787254555.686:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19835 comm="syz.3.2935" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe14079e0d9 code=0x0 [ 241.347552][T19768] ehci-pci 0000:00:1d.7: EHCI Host Controller [ 241.350934][T19768] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 2 [ 241.357695][T19842] binder: 19835:19842 ioctl c0306201 200000000080 returned -14 [ 241.358565][T19768] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000 [ 241.361848][T19842] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2935'. [ 241.369356][T19842] binder: 19835:19842 ioctl c0306201 2000000003c0 returned -22 [ 241.384454][T19768] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00 [ 241.388052][T19768] usb usb2: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 241.392047][T19768] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 241.394882][T19768] usb usb2: Product: EHCI Host Controller [ 241.397796][T19768] usb usb2: Manufacturer: Linux syzkaller ehci_hcd [ 241.400058][T19768] usb usb2: SerialNumber: 0000:00:1d.7 [ 241.406619][T19768] hub 2-0:1.0: USB hub found [ 241.408834][T19768] hub 2-0:1.0: 6 ports detected [ 241.460894][T19768] hub 1-0:1.0: USB hub found [ 241.462665][T19768] hub 1-0:1.0: 2 ports detected [ 241.492738][T19768] hub 3-0:1.0: USB hub found [ 241.495301][T19768] hub 3-0:1.0: 2 ports detected [ 241.525149][T19768] hub 4-0:1.0: USB hub found [ 241.527578][T19768] hub 4-0:1.0: 2 ports detected [ 241.545649][ T5876] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 241.577503][ T5876] usb 6-1: device descriptor read/8, error -71 [ 241.633193][T19860] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 241.694897][T19860] md: couldn't update array info. -22 [ 241.697664][ T5876] usb usb6-port1: unable to enumerate USB device [ 241.742444][ T1037] usb 2-1: new high-speed USB device number 2 using ehci-pci [ 241.844011][T19860] md: could not open device unknown-block(1,1). [ 241.846854][T19860] md: md_import_device returned -16 [ 241.940641][ T1037] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 241.957183][T19864] FAULT_INJECTION: forcing a failure. [ 241.957183][T19864] name failslab, interval 1, probability 0, space 0, times 0 [ 241.957406][ T1037] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 241.961147][T19864] CPU: 1 UID: 0 PID: 19864 Comm: syz.0.2938 Tainted: G L syzkaller #0 PREEMPT(full) [ 241.961166][T19864] Tainted: [L]=SOFTLOCKUP [ 241.961171][T19864] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 241.961178][T19864] Call Trace: [ 241.961182][T19864] [ 241.961188][T19864] dump_stack_lvl+0x100/0x190 [ 241.961208][T19864] should_fail_ex.cold+0x5/0xa [ 241.961226][T19864] should_failslab+0xc2/0x120 [ 241.961243][T19864] __kmalloc_noprof+0xfc/0x820 [ 241.961270][T19864] ? rcu_is_watching+0x13/0xc0 [ 241.961285][T19864] ? tomoyo_realpath_from_path+0xb6/0x690 [ 241.961301][T19864] tomoyo_realpath_from_path+0xb6/0x690 [ 241.961315][T19864] tomoyo_path_number_perm+0x23c/0x580 [ 241.961331][T19864] ? tomoyo_path_number_perm+0x22e/0x580 [ 241.961347][T19864] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 241.961376][T19864] ? find_held_lock+0x2b/0x80 [ 241.961389][T19864] ? hook_file_ioctl_common+0x140/0x440 [ 241.961407][T19864] ? __fget_files+0x21f/0x3d0 [ 241.961423][T19864] security_file_ioctl+0xd3/0x230 [ 241.961442][T19864] __x64_sys_ioctl+0xb7/0x210 [ 241.961455][T19864] do_syscall_64+0x123/0x790 [ 241.961470][T19864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.961482][T19864] RIP: 0033:0x7fc6b899e0d9 [ 241.961492][T19864] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.961504][T19864] RSP: 002b:00007fc6b6bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 241.961515][T19864] RAX: ffffffffffffffda RBX: 00007fc6b8c25fa0 RCX: 00007fc6b899e0d9 [ 241.961522][T19864] RDX: 0000000000000000 RSI: 0000000040480923 RDI: 0000000000000003 [ 241.961530][T19864] RBP: 00007fc6b6bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 241.961540][T19864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.961550][T19864] R13: 00007fc6b8c26038 R14: 00007fc6b8c25fa0 R15: 00007ffce2c6a508 [ 241.961575][T19864] [ 241.961791][T19864] ERROR: Out of memory at tomoyo_realpath_from_path. [ 241.963809][ T1037] usb 2-1: Product: QEMU USB Tablet [ 242.034752][ T1037] usb 2-1: Manufacturer: QEMU [ 242.036567][ T1037] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 242.047614][T19864] md: couldn't update array info. -22 [ 242.054204][ T1037] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0036/input/input75 [ 242.086152][T19873] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2939'. [ 242.141408][ T1037] hid-generic 0003:0627:0001.0036: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 242.154054][T19873] md: couldn't update array info. -22 [ 242.233526][T19884] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2940'. [ 242.337195][T19890] hid-generic 0003:0627:0001.0036: pid 19890 passed too large report [ 242.389521][T19895] ehci-pci 0000:00:1d.7: remove, state 1 [ 242.391713][T19895] usb usb2: USB disconnect, device number 1 [ 242.393859][T19895] usb 2-1: USB disconnect, device number 2 [ 242.420916][T19900] FAULT_INJECTION: forcing a failure. [ 242.420916][T19900] name failslab, interval 1, probability 0, space 0, times 0 [ 242.425366][T19900] CPU: 0 UID: 0 PID: 19900 Comm: syz.0.2945 Tainted: G L syzkaller #0 PREEMPT(full) [ 242.425384][T19900] Tainted: [L]=SOFTLOCKUP [ 242.425388][T19900] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 242.425395][T19900] Call Trace: [ 242.425399][T19900] [ 242.425405][T19900] dump_stack_lvl+0x100/0x190 [ 242.425425][T19900] should_fail_ex.cold+0x5/0xa [ 242.425442][T19900] should_failslab+0xc2/0x120 [ 242.425459][T19900] __kmalloc_cache_noprof+0x91/0x6b0 [ 242.425471][T19900] ? __pfx_add_uevent_var+0x10/0x10 [ 242.425487][T19900] ? call_usermodehelper_setup+0xaf/0x360 [ 242.425505][T19900] ? __pfx_cleanup_uevent_env+0x10/0x10 [ 242.425520][T19900] call_usermodehelper_setup+0xaf/0x360 [ 242.425538][T19900] kobject_uevent_env+0x17c1/0x18b0 [ 242.425555][T19900] ? tty_cdev_add+0x191/0x290 [ 242.425573][T19900] tty_register_device_attr+0x4b6/0x7f0 [ 242.425591][T19900] ? lockdep_init_map_type+0x5c/0x250 [ 242.425609][T19900] ? __pfx_tty_register_device_attr+0x10/0x10 [ 242.425630][T19900] ? tty_port_init+0x156/0x1c0 [ 242.425643][T19900] gsm_activate_mux+0x155/0x2a0 [ 242.425661][T19900] gsmld_ioctl+0xbbc/0x15c0 [ 242.425678][T19900] ? kasan_quarantine_put+0x104/0x240 [ 242.425691][T19900] ? __pfx_gsmld_ioctl+0x10/0x10 [ 242.425715][T19900] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 242.425732][T19900] ? __pfx_pty_unix98_ioctl+0x10/0x10 [ 242.425749][T19900] ? __pfx_gsmld_ioctl+0x10/0x10 [ 242.425760][T19900] tty_ioctl+0x11b4/0x1640 [ 242.425791][T19900] ? __pfx_tty_ioctl+0x10/0x10 [ 242.425807][T19900] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 242.425828][T19900] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 242.425854][T19900] ? selinux_file_ioctl+0x13b/0x290 [ 242.425870][T19900] ? selinux_file_ioctl+0xb6/0x290 [ 242.425887][T19900] ? __pfx_tty_ioctl+0x10/0x10 [ 242.425904][T19900] __x64_sys_ioctl+0x18e/0x210 [ 242.425917][T19900] do_syscall_64+0x123/0x790 [ 242.425930][T19900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.425942][T19900] RIP: 0033:0x7fc6b899e0d9 [ 242.425953][T19900] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.425964][T19900] RSP: 002b:00007fc6b6bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 242.425976][T19900] RAX: ffffffffffffffda RBX: 00007fc6b8c25fa0 RCX: 00007fc6b899e0d9 [ 242.425983][T19900] RDX: 00002000000001c0 RSI: 00000000404c4701 RDI: 0000000000000003 [ 242.425990][T19900] RBP: 00007fc6b6bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 242.425996][T19900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 242.426002][T19900] R13: 00007fc6b8c26038 R14: 00007fc6b8c25fa0 R15: 00007ffce2c6a508 [ 242.426016][T19900] [ 242.454350][T19895] ehci-pci 0000:00:1d.7: USB bus 2 deregistered [ 242.506392][T19952] syzkaller0: entered promiscuous mode [ 242.529066][T19952] syzkaller0: entered allmulticast mode [ 242.695386][T20047] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 242.742433][ T5912] usb 1-1: new full-speed USB device number 27 using uhci_hcd [ 242.774251][T20047] md: couldn't update array info. -22 [ 242.837840][T20047] md: could not open device unknown-block(1,1). [ 242.840030][T20047] md: md_import_device returned -16 [ 242.911667][ T5912] usb 1-1: not running at top speed; connect to a high speed hub [ 242.918919][ T5912] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 242.942333][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 242.949957][ T5912] usb 1-1: Product: QEMU USB Tablet [ 242.951938][ T5912] usb 1-1: Manufacturer: QEMU [ 242.953864][ T5912] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 242.972665][T20051] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 242.973084][ T5912] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb1/1-1/1-1:1.0/0003:0627:0001.0037/input/input76 [ 243.058749][ T5912] hid-generic 0003:0627:0001.0037: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0 [ 243.065529][T19908] usb 1-1: USB disconnect, device number 27 [ 243.247291][T19908] ehci-pci 0000:00:1d.7: EHCI Host Controller [ 243.277276][T19908] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 2 [ 243.284878][T19908] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000 [ 243.308018][T19908] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00 [ 243.320511][T19908] usb usb2: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 243.333374][T19908] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 243.340081][T19908] usb usb2: Product: EHCI Host Controller [ 243.342714][T19908] usb usb2: Manufacturer: Linux syzkaller ehci_hcd [ 243.345786][T19908] usb usb2: SerialNumber: 0000:00:1d.7 [ 243.358847][T19908] hub 2-0:1.0: USB hub found [ 243.363978][T19908] hub 2-0:1.0: 6 ports detected [ 243.371630][T20110] xt_hashlimit: size too large, truncated to 1048576 [ 243.382961][T20107] md: could not open device unknown-block(1,1). [ 243.388141][T20107] md: md_import_device returned -16 [ 243.406251][T19908] hub 1-0:1.0: USB hub found [ 243.408867][T19908] hub 1-0:1.0: 2 ports detected [ 243.449816][T19908] hub 3-0:1.0: USB hub found [ 243.453708][T20122] FAULT_INJECTION: forcing a failure. [ 243.453708][T20122] name failslab, interval 1, probability 0, space 0, times 0 [ 243.455254][T19908] hub 3-0:1.0: 2 ports detected [ 243.459065][T20122] CPU: 1 UID: 0 PID: 20122 Comm: syz.1.2954 Tainted: G L syzkaller #0 PREEMPT(full) [ 243.459081][T20122] Tainted: [L]=SOFTLOCKUP [ 243.459086][T20122] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 243.459092][T20122] Call Trace: [ 243.459096][T20122] [ 243.459101][T20122] dump_stack_lvl+0x100/0x190 [ 243.459121][T20122] should_fail_ex.cold+0x5/0xa [ 243.459138][T20122] should_failslab+0xc2/0x120 [ 243.459155][T20122] __kmalloc_noprof+0xfc/0x820 [ 243.459170][T20122] ? tomoyo_encode2+0xfb/0x3c0 [ 243.459191][T20122] tomoyo_encode2+0xfb/0x3c0 [ 243.459210][T20122] tomoyo_encode+0x29/0x50 [ 243.459227][T20122] tomoyo_realpath_from_path+0x18c/0x690 [ 243.459241][T20122] tomoyo_path_number_perm+0x23c/0x580 [ 243.459256][T20122] ? tomoyo_path_number_perm+0x22e/0x580 [ 243.459273][T20122] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 243.459301][T20122] ? find_held_lock+0x2b/0x80 [ 243.459314][T20122] ? hook_file_ioctl_common+0x140/0x440 [ 243.459330][T20122] ? __fget_files+0x21f/0x3d0 [ 243.459346][T20122] security_file_ioctl+0xd3/0x230 [ 243.459365][T20122] __x64_sys_ioctl+0xb7/0x210 [ 243.459378][T20122] do_syscall_64+0x123/0x790 [ 243.459391][T20122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.459403][T20122] RIP: 0033:0x7f420959e0d9 [ 243.459413][T20122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.459425][T20122] RSP: 002b:00007f420a4d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 243.459436][T20122] RAX: ffffffffffffffda RBX: 00007f4209825fa0 RCX: 00007f420959e0d9 [ 243.459443][T20122] RDX: 0000200000000420 RSI: 0000000040140921 RDI: 0000000000000003 [ 243.459450][T20122] RBP: 00007f420a4d1090 R08: 0000000000000000 R09: 0000000000000000 [ 243.459456][T20122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.459463][T20122] R13: 00007f4209826038 R14: 00007f4209825fa0 R15: 00007fff8023e048 [ 243.459477][T20122] [ 243.459486][T20122] ERROR: Out of memory at tomoyo_realpath_from_path. [ 243.504397][T19908] hub 4-0:1.0: USB hub found [ 243.551098][T19908] hub 4-0:1.0: 2 ports detected [ 243.607645][T20122] md: could not open device unknown-block(1,1). [ 243.610123][T20132] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 243.610390][T20122] md: md_import_device returned -16 [ 243.616984][T20132] md: couldn't update array info. -22 [ 243.660531][ T50] usb 2-1: new high-speed USB device number 2 using ehci-pci [ 243.713971][T20132] md: could not open device unknown-block(1,1). [ 243.716454][T20132] md: md_import_device returned -16 [ 243.735368][ T5912] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 243.843046][ T50] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 243.859618][ T50] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 243.862360][ T50] usb 2-1: Product: QEMU USB Tablet [ 243.864360][ T50] usb 2-1: Manufacturer: QEMU [ 243.866292][ T50] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 243.889503][ T50] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0038/input/input77 [ 243.896151][ T5912] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 243.899314][ T5912] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 243.902768][ T5912] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 243.906096][ T5912] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 243.910149][ T5912] usb 9-1: config 0 interface 0 has no altsetting 0 [ 243.913260][ T5912] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 243.916514][ T5912] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 243.920309][ T5912] usb 9-1: config 0 interface 0 has no altsetting 0 [ 243.923554][ T5912] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 243.926359][ T5912] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 243.930523][ T5912] usb 9-1: config 0 interface 0 has no altsetting 0 [ 243.934300][ T5912] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 243.937911][ T5912] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 243.942225][ T5912] usb 9-1: config 0 interface 0 has no altsetting 0 [ 243.946303][ T5912] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 243.948021][T20159] FAULT_INJECTION: forcing a failure. [ 243.948021][T20159] name failslab, interval 1, probability 0, space 0, times 0 [ 243.951525][ T5912] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 243.955260][T20159] CPU: 1 UID: 0 PID: 20159 Comm: syz.3.2959 Tainted: G L syzkaller #0 PREEMPT(full) [ 243.955286][T20159] Tainted: [L]=SOFTLOCKUP [ 243.955293][T20159] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 243.955303][T20159] Call Trace: [ 243.955310][T20159] [ 243.955317][T20159] dump_stack_lvl+0x100/0x190 [ 243.955349][T20159] should_fail_ex.cold+0x5/0xa [ 243.955376][T20159] should_failslab+0xc2/0x120 [ 243.955400][T20159] __kmalloc_noprof+0xfc/0x820 [ 243.955421][T20159] ? __import_iovec+0x1d2/0x640 [ 243.955438][T20159] ? sock_kmalloc+0x111/0x170 [ 243.955492][T20159] sock_kmalloc+0x111/0x170 [ 243.955512][T20159] ____sys_sendmsg+0x569/0xbe0 [ 243.955534][T20159] ? __pfx_____sys_sendmsg+0x10/0x10 [ 243.955564][T20159] ___sys_sendmsg+0x190/0x1e0 [ 243.955586][T20159] ? __pfx____sys_sendmsg+0x10/0x10 [ 243.955606][T20159] ? get_pid_task+0x106/0x250 [ 243.955635][T20159] ? find_held_lock+0x2b/0x80 [ 243.955669][T20159] __sys_sendmsg+0x160/0x210 [ 243.955695][T20159] ? __pfx___sys_sendmsg+0x10/0x10 [ 243.955732][T20159] do_syscall_64+0x123/0x790 [ 243.955752][T20159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.955770][T20159] RIP: 0033:0x7fe14079e0d9 [ 243.955785][T20159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.955802][T20159] RSP: 002b:00007fe1416ca028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 243.955820][T20159] RAX: ffffffffffffffda RBX: 00007fe140a25fa0 RCX: 00007fe14079e0d9 [ 243.955832][T20159] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 243.955843][T20159] RBP: 00007fe1416ca090 R08: 0000000000000000 R09: 0000000000000000 [ 243.955854][T20159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.955892][T20159] R13: 00007fe140a26038 R14: 00007fe140a25fa0 R15: 00007ffde25c24a8 [ 243.955916][T20159] [ 244.023923][ T50] hid-generic 0003:0627:0001.0038: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 244.029635][ T5912] usb 9-1: config 0 interface 0 has no altsetting 0 [ 244.032978][ T5912] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 244.036000][ T5912] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 244.039327][ T5912] usb 9-1: config 0 interface 0 has no altsetting 0 [ 244.042602][ T5912] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 244.045775][ T5912] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 244.049216][ T5912] usb 9-1: config 0 interface 0 has no altsetting 0 [ 244.052643][ T5912] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 244.055618][ T5912] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 244.059157][ T5912] usb 9-1: config 0 interface 0 has no altsetting 0 [ 244.062961][ T5912] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 244.065695][ T5912] usb 9-1: Product: syz [ 244.067212][ T5912] usb 9-1: Manufacturer: syz [ 244.068775][ T5912] usb 9-1: SerialNumber: syz [ 244.071919][ T5912] usb 9-1: config 0 descriptor?? [ 244.077564][ T5912] yurex 9-1:0.0: USB YUREX device now attached to Yurex #0 [ 244.166208][T20180] xt_time: unknown flags 0x78 [ 244.213350][T20183] ehci-pci 0000:00:1d.7: remove, state 1 [ 244.215886][T20183] usb usb2: USB disconnect, device number 1 [ 244.218671][T20183] usb 2-1: USB disconnect, device number 2 [ 244.274024][T20183] ehci-pci 0000:00:1d.7: USB bus 2 deregistered [ 244.292328][ T5817] usb 9-1: USB disconnect, device number 8 [ 244.298290][ T5817] yurex 9-1:0.0: USB YUREX #0 now disconnected [ 244.332486][T20183] syzkaller0: entered promiscuous mode [ 244.334628][T20183] syzkaller0: entered allmulticast mode [ 244.558162][ T5912] usb 1-1: new full-speed USB device number 28 using uhci_hcd [ 244.619230][T20227] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 244.686521][T20227] md: couldn't update array info. -22 [ 244.726177][ T5912] usb 1-1: not running at top speed; connect to a high speed hub [ 244.729734][ T5912] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 244.753343][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 244.753428][T20227] md: could not open device unknown-block(1,1). [ 244.756961][ T5912] usb 1-1: Product: QEMU USB Tablet [ 244.758823][T20227] md: md_import_device returned -16 [ 244.760918][ T5912] usb 1-1: Manufacturer: QEMU [ 244.764723][ T5912] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 244.787630][ T5912] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb1/1-1/1-1:1.0/0003:0627:0001.0039/input/input78 [ 244.796800][T20228] md: could not open device unknown-block(0,0). [ 244.799898][T20228] md: md_import_device returned -6 [ 244.831593][T20239] FAULT_INJECTION: forcing a failure. [ 244.831593][T20239] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.836709][T20239] CPU: 1 UID: 0 PID: 20239 Comm: syz.3.2967 Tainted: G L syzkaller #0 PREEMPT(full) [ 244.836728][T20239] Tainted: [L]=SOFTLOCKUP [ 244.836732][T20239] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 244.836740][T20239] Call Trace: [ 244.836744][T20239] [ 244.836748][T20239] dump_stack_lvl+0x100/0x190 [ 244.836770][T20239] should_fail_ex.cold+0x5/0xa [ 244.836785][T20239] _copy_from_user+0x2e/0xd0 [ 244.836805][T20239] input_event_from_user+0x123/0x310 [ 244.836841][T20239] ? __pfx_input_event_from_user+0x10/0x10 [ 244.836857][T20239] ? __pfx___might_resched+0x10/0x10 [ 244.836873][T20239] ? _raw_spin_unlock_irq_enable+0x56/0x90 [ 244.836892][T20239] ? input_inject_event+0x18e/0x370 [ 244.836908][T20239] evdev_write+0x342/0x610 [ 244.836926][T20239] ? __pfx_evdev_write+0x10/0x10 [ 244.836942][T20239] ? bpf_lsm_file_permission+0x9/0x10 [ 244.836954][T20239] ? security_file_permission+0x76/0x210 [ 244.836974][T20239] ? rw_verify_area+0xce/0x6d0 [ 244.836993][T20239] vfs_write+0x2aa/0x1050 [ 244.837004][T20239] ? __pfx_evdev_write+0x10/0x10 [ 244.837020][T20239] ? __pfx_vfs_write+0x10/0x10 [ 244.837029][T20239] ? find_held_lock+0x2b/0x80 [ 244.837042][T20239] ? __fget_files+0x215/0x3d0 [ 244.837061][T20239] ? __fget_files+0x215/0x3d0 [ 244.837076][T20239] ? __fget_files+0x21f/0x3d0 [ 244.837093][T20239] ksys_write+0x1f8/0x250 [ 244.837103][T20239] ? __pfx_ksys_write+0x10/0x10 [ 244.837118][T20239] do_syscall_64+0x123/0x790 [ 244.837131][T20239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.837143][T20239] RIP: 0033:0x7fe14079e0d9 [ 244.837153][T20239] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.837164][T20239] RSP: 002b:00007fe1416ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 244.837175][T20239] RAX: ffffffffffffffda RBX: 00007fe140a25fa0 RCX: 00007fe14079e0d9 [ 244.837182][T20239] RDX: 00000000000012d8 RSI: 0000200000000040 RDI: 0000000000000003 [ 244.837189][T20239] RBP: 00007fe1416ca090 R08: 0000000000000000 R09: 0000000000000000 [ 244.837195][T20239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 244.837202][T20239] R13: 00007fe140a26038 R14: 00007fe140a25fa0 R15: 00007ffde25c24a8 [ 244.837216][T20239] [ 244.920044][ T5912] hid-generic 0003:0627:0001.0039: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0 [ 244.930438][T20203] usb 1-1: USB disconnect, device number 28 [ 244.940980][T20247] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1537 sclass=netlink_route_socket pid=20247 comm=syz.3.2968 [ 244.946415][T20247] netlink: 'syz.3.2968': attribute type 1 has an invalid length. [ 244.963789][T20247] 8021q: adding VLAN 0 to HW filter on device bond1 [ 244.981988][T20247] bond1: (slave geneve2): making interface the new active one [ 244.986569][T20247] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 245.076308][T20203] ehci-pci 0000:00:1d.7: EHCI Host Controller [ 245.079853][T20203] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 2 [ 245.085159][T20203] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000 [ 245.103389][T20203] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00 [ 245.106118][T20203] usb usb2: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 245.109804][T20203] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 245.112382][T20203] usb usb2: Product: EHCI Host Controller [ 245.116074][T20203] usb usb2: Manufacturer: Linux syzkaller ehci_hcd [ 245.118192][T20203] usb usb2: SerialNumber: 0000:00:1d.7 [ 245.122829][T20203] hub 2-0:1.0: USB hub found [ 245.124637][T20203] hub 2-0:1.0: 6 ports detected [ 245.144753][ T42] audit: type=1400 audit(1787254559.279:704): avc: denied { read } for pid=20303 comm="syz.4.2969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 245.156553][ T42] audit: type=1400 audit(1787254559.298:705): avc: denied { read write } for pid=20303 comm="syz.4.2969" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 245.166069][T20203] hub 1-0:1.0: USB hub found [ 245.166390][ T42] audit: type=1400 audit(1787254559.298:706): avc: denied { open } for pid=20303 comm="syz.4.2969" path="/111/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 245.168194][T20203] hub 1-0:1.0: 2 ports detected [ 245.175113][ T42] audit: type=1400 audit(1787254559.298:707): avc: denied { ioctl } for pid=20303 comm="syz.4.2969" path="/111/proc/mtrr" dev="proc" ino=4026531995 ioctlcmd=0x4d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 245.215143][T20203] hub 3-0:1.0: USB hub found [ 245.217242][T20203] hub 3-0:1.0: 2 ports detected [ 245.233143][ T42] audit: type=1400 audit(1787254559.373:708): avc: denied { create } for pid=20317 comm="syz.3.2970" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 245.246053][ T42] audit: type=1400 audit(1787254559.373:709): avc: denied { write } for pid=20317 comm="syz.3.2970" name="file0" dev="tmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 245.253111][ T42] audit: type=1400 audit(1787254559.373:710): avc: denied { open } for pid=20317 comm="syz.3.2970" path="/131/file0" dev="tmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 245.260995][T20203] hub 4-0:1.0: USB hub found [ 245.262740][T20203] hub 4-0:1.0: 2 ports detected [ 245.269093][ T42] audit: type=1400 audit(1787254559.401:711): avc: denied { unlink } for pid=20317 comm="syz.3.2970" name="file0" dev="tmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 245.309054][ T42] audit: type=1400 audit(1787254559.438:712): avc: denied { watch_mount watch_reads } for pid=20327 comm="syz.0.2971" path="/284" dev="tmpfs" ino=1582 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 245.413732][ T5912] usb 2-1: new high-speed USB device number 2 using ehci-pci [ 245.503564][T20342] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 245.564218][T20342] md: couldn't update array info. -22 [ 245.595422][ T5912] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 245.612287][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 245.615534][ T5912] usb 2-1: Product: QEMU USB Tablet [ 245.617945][ T5912] usb 2-1: Manufacturer: QEMU [ 245.619838][ T5912] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 245.646843][ T5912] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.003A/input/input79 [ 245.648161][T20342] md: could not open device unknown-block(1,1). [ 245.654438][T20342] md: md_import_device returned -16 [ 245.720551][ T5912] hid-generic 0003:0627:0001.003A: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 245.750475][T20342] md: could not open device unknown-block(0,0). [ 245.753324][T20342] md: md_import_device returned -6 [ 245.883892][T20374] overlay: Unknown parameter 'subj_role' [ 245.913140][T20377] ehci-pci 0000:00:1d.7: remove, state 1 [ 245.915662][T20377] usb usb2: USB disconnect, device number 1 [ 245.917700][T20377] usb 2-1: USB disconnect, device number 2 [ 245.993379][T20377] ehci-pci 0000:00:1d.7: USB bus 2 deregistered [ 246.028097][T20400] syzkaller0: entered promiscuous mode [ 246.030583][T20400] syzkaller0: entered allmulticast mode [ 246.120875][T20407] FAULT_INJECTION: forcing a failure. [ 246.120875][T20407] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 246.128315][T20407] CPU: 3 UID: 0 PID: 20407 Comm: syz.3.2981 Tainted: G L syzkaller #0 PREEMPT(full) [ 246.128345][T20407] Tainted: [L]=SOFTLOCKUP [ 246.128351][T20407] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 246.128363][T20407] Call Trace: [ 246.128369][T20407] [ 246.128378][T20407] dump_stack_lvl+0x100/0x190 [ 246.128410][T20407] should_fail_ex.cold+0x5/0xa [ 246.128433][T20407] _copy_to_user+0x32/0xd0 [ 246.128463][T20407] simple_read_from_buffer+0xcb/0x170 [ 246.128488][T20407] proc_fail_nth_read+0x1af/0x230 [ 246.128511][T20407] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 246.128541][T20407] ? rw_verify_area+0xce/0x6d0 [ 246.128566][T20407] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 246.128587][T20407] vfs_read+0x1e4/0xb40 [ 246.128607][T20407] ? __pfx_vfs_read+0x10/0x10 [ 246.128622][T20407] ? find_held_lock+0x2b/0x80 [ 246.128644][T20407] ? __fget_files+0x215/0x3d0 [ 246.128670][T20407] ? __fget_files+0x21f/0x3d0 [ 246.128695][T20407] ksys_read+0x12a/0x250 [ 246.128711][T20407] ? __pfx_ksys_read+0x10/0x10 [ 246.128736][T20407] do_syscall_64+0x123/0x790 [ 246.128759][T20407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.128779][T20407] RIP: 0033:0x7fe14075e90e [ 246.128796][T20407] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 246.128811][T20407] RSP: 002b:00007fe1416c9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 246.128846][T20407] RAX: ffffffffffffffda RBX: 00007fe1416ca6c0 RCX: 00007fe14075e90e [ 246.128859][T20407] RDX: 000000000000000f RSI: 00007fe1416ca0a0 RDI: 0000000000000004 [ 246.128870][T20407] RBP: 00007fe1416ca090 R08: 0000000000000000 R09: 0000000000000000 [ 246.128880][T20407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.128891][T20407] R13: 00007fe140a26038 R14: 00007fe140a25fa0 R15: 00007ffde25c24a8 [ 246.128916][T20407] [ 246.274550][T20424] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 246.302750][T20421] tmpfs: Unknown parameter 'n' [ 246.343073][ T5912] usb 1-1: new full-speed USB device number 29 using uhci_hcd [ 246.366321][T20424] md: couldn't update array info. -22 [ 246.414507][T20426] md: could not open device unknown-block(1,1). [ 246.416483][T20426] md: md_import_device returned -16 [ 246.508965][ T5912] usb 1-1: not running at top speed; connect to a high speed hub [ 246.511806][ T5912] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 246.529142][T20424] md: could not open device unknown-block(0,0). [ 246.532016][T20424] md: md_import_device returned -6 [ 246.533621][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 246.537571][ T5912] usb 1-1: Product: QEMU USB Tablet [ 246.539403][ T5912] usb 1-1: Manufacturer: QEMU [ 246.541728][ T5912] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 246.576630][ T5912] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb1/1-1/1-1:1.0/0003:0627:0001.003B/input/input80 [ 246.588024][ T5912] hid-generic 0003:0627:0001.003B: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0 [ 246.604962][T20390] usb 1-1: USB disconnect, device number 29 [ 246.640803][T20443] fuse: Bad value for 'user_id' [ 246.644924][T20443] fuse: Bad value for 'user_id' [ 246.751412][T20476] FAULT_INJECTION: forcing a failure. [ 246.751412][T20476] name failslab, interval 1, probability 0, space 0, times 0 [ 246.755866][T20476] CPU: 3 UID: 0 PID: 20476 Comm: syz.4.2992 Tainted: G L syzkaller #0 PREEMPT(full) [ 246.755885][T20476] Tainted: [L]=SOFTLOCKUP [ 246.755890][T20476] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 246.755902][T20476] Call Trace: [ 246.755910][T20476] [ 246.755916][T20476] dump_stack_lvl+0x100/0x190 [ 246.755981][T20476] should_fail_ex.cold+0x5/0xa [ 246.756004][T20476] should_failslab+0xc2/0x120 [ 246.756049][T20476] kmem_cache_alloc_noprof+0x91/0x6a0 [ 246.756064][T20476] ? trace_kmem_cache_alloc+0xdd/0x100 [ 246.756080][T20476] ? security_file_alloc+0x34/0x2c0 [ 246.756123][T20476] security_file_alloc+0x34/0x2c0 [ 246.756140][T20476] init_file+0x95/0x480 [ 246.756162][T20476] alloc_empty_file+0x79/0x1c0 [ 246.756177][T20476] path_openat+0xdb/0x2440 [ 246.756193][T20476] ? __pfx_path_openat+0x10/0x10 [ 246.756211][T20476] do_file_open+0x20e/0x430 [ 246.756225][T20476] ? __pfx_do_file_open+0x10/0x10 [ 246.756248][T20476] ? _raw_spin_unlock+0x28/0x50 [ 246.756296][T20476] ? alloc_fd+0x471/0x7a0 [ 246.756314][T20476] do_sys_openat2+0x10f/0x1e0 [ 246.756336][T20476] ? __pfx_do_sys_openat2+0x10/0x10 [ 246.756351][T20476] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 246.756363][T20476] ? __fget_files+0x21f/0x3d0 [ 246.756378][T20476] __x64_sys_openat+0x12d/0x210 [ 246.756393][T20476] ? __pfx___x64_sys_openat+0x10/0x10 [ 246.756408][T20476] ? ksys_write+0x1ac/0x250 [ 246.756423][T20476] do_syscall_64+0x123/0x790 [ 246.756436][T20476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.756448][T20476] RIP: 0033:0x7f7e7159e0d9 [ 246.756459][T20476] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.756470][T20476] RSP: 002b:00007f7e723eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 246.756486][T20476] RAX: ffffffffffffffda RBX: 00007f7e71825fa0 RCX: 00007f7e7159e0d9 [ 246.756493][T20476] RDX: 0000000000000002 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 246.756500][T20476] RBP: 00007f7e723eb090 R08: 0000000000000000 R09: 0000000000000000 [ 246.756507][T20476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.756513][T20476] R13: 00007f7e71826038 R14: 00007f7e71825fa0 R15: 00007ffe703d34f8 [ 246.756527][T20476] [ 246.833806][T20390] ehci-pci 0000:00:1d.7: EHCI Host Controller [ 246.839839][T20390] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 2 [ 246.846198][T20390] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000 [ 246.877031][T20390] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00 [ 246.880719][T20390] usb usb2: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 246.886133][T20390] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 246.889955][T20390] usb usb2: Product: EHCI Host Controller [ 246.893189][T20390] usb usb2: Manufacturer: Linux syzkaller ehci_hcd [ 246.895317][T20390] usb usb2: SerialNumber: 0000:00:1d.7 [ 246.908834][T20390] hub 2-0:1.0: USB hub found [ 246.911884][T20390] hub 2-0:1.0: 6 ports detected [ 246.957399][T20501] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 246.988110][T20390] hub 1-0:1.0: USB hub found [ 246.993321][T20390] hub 1-0:1.0: 2 ports detected [ 247.028332][T20501] md: couldn't update array info. -22 [ 247.029718][T20390] hub 3-0:1.0: USB hub found [ 247.035403][T20390] hub 3-0:1.0: 2 ports detected [ 247.059145][T20501] md: could not open device unknown-block(1,1). [ 247.064996][T20501] md: md_import_device returned -16 [ 247.067472][T20519] netlink: 'syz.4.2999': attribute type 4 has an invalid length. [ 247.070743][T20390] hub 4-0:1.0: USB hub found [ 247.075756][T20390] hub 4-0:1.0: 2 ports detected [ 247.112379][T20501] md: could not open device unknown-block(1,2). [ 247.121745][T20501] md: md_import_device returned -16 [ 247.157421][T20519] socket: no more sockets [ 247.251347][T20536] FAULT_INJECTION: forcing a failure. [ 247.251347][T20536] name failslab, interval 1, probability 0, space 0, times 0 [ 247.259088][T20536] CPU: 3 UID: 0 PID: 20536 Comm: syz.1.3003 Tainted: G L syzkaller #0 PREEMPT(full) [ 247.259117][T20536] Tainted: [L]=SOFTLOCKUP [ 247.259124][T20536] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 247.259135][T20536] Call Trace: [ 247.259142][T20536] [ 247.259148][T20536] dump_stack_lvl+0x100/0x190 [ 247.259181][T20536] should_fail_ex.cold+0x5/0xa [ 247.259206][T20536] should_failslab+0xc2/0x120 [ 247.259233][T20536] kmem_cache_alloc_noprof+0x91/0x6a0 [ 247.259256][T20536] ? find_held_lock+0x2b/0x80 [ 247.259310][T20536] ? vm_area_dup+0x27/0x8e0 [ 247.259340][T20536] vm_area_dup+0x27/0x8e0 [ 247.259359][T20536] __split_vma+0x18c/0xda0 [ 247.259381][T20536] ? __pfx___split_vma+0x10/0x10 [ 247.259413][T20536] vma_modify+0x12ad/0x25c0 [ 247.259441][T20536] ? __pfx_vma_modify+0x10/0x10 [ 247.259457][T20536] ? bpf_ksym_find+0x128/0x1c0 [ 247.259479][T20536] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 247.259506][T20536] ? is_bpf_text_address+0x94/0x1a0 [ 247.259525][T20536] ? kernel_text_address+0x8d/0x100 [ 247.259550][T20536] ? __kernel_text_address+0xd/0x30 [ 247.259580][T20536] vma_modify_flags+0x257/0x3d0 [ 247.259602][T20536] ? __pfx_vma_modify_flags+0x10/0x10 [ 247.259619][T20536] ? _parse_integer_limit+0x1ac/0x220 [ 247.259678][T20536] mlock_fixup+0x496/0xb50 [ 247.259702][T20536] ? __pfx_mlock_fixup+0x10/0x10 [ 247.259736][T20536] apply_vma_lock_flags+0x256/0x370 [ 247.259759][T20536] ? __pfx_apply_vma_lock_flags+0x10/0x10 [ 247.259780][T20536] ? __pfx___might_resched+0x10/0x10 [ 247.259813][T20536] ? __pfx_down_write_killable+0x10/0x10 [ 247.259843][T20536] do_mlock+0x261/0x7f0 [ 247.259892][T20536] ? __fget_files+0x21f/0x3d0 [ 247.259917][T20536] ? __pfx_do_mlock+0x10/0x10 [ 247.259939][T20536] ? fput+0x7c/0x100 [ 247.259964][T20536] ? ksys_write+0x1ac/0x250 [ 247.259982][T20536] ? __pfx_ksys_write+0x10/0x10 [ 247.260006][T20536] __x64_sys_mlock+0x59/0x80 [ 247.260027][T20536] do_syscall_64+0x123/0x790 [ 247.260048][T20536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.260069][T20536] RIP: 0033:0x7f420959e0d9 [ 247.260092][T20536] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.260109][T20536] RSP: 002b:00007f420a4d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 247.260129][T20536] RAX: ffffffffffffffda RBX: 00007f4209825fa0 RCX: 00007f420959e0d9 [ 247.260141][T20536] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 247.260153][T20536] RBP: 00007f420a4d1090 R08: 0000000000000000 R09: 0000000000000000 [ 247.260165][T20536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.260176][T20536] R13: 00007f4209826038 R14: 00007f4209825fa0 R15: 00007fff8023e048 [ 247.260201][T20536] [ 247.261859][ T1037] usb 2-1: new high-speed USB device number 2 using ehci-pci [ 247.491010][T20555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.495484][T20555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.536282][T20560] ehci-pci 0000:00:1d.7: remove, state 1 [ 247.538653][T20560] usb usb2: USB disconnect, device number 1 [ 247.582483][ T1037] usb 2-1: device descriptor read/all, error -108 [ 247.584971][ T1037] usb usb2-port1: attempt power cycle [ 247.649659][T20564] syzkaller0: entered promiscuous mode [ 247.651831][T20564] syzkaller0: entered allmulticast mode [ 247.687925][T20560] ehci-pci 0000:00:1d.7: USB bus 2 deregistered [ 247.969614][ T5912] usb 1-1: new full-speed USB device number 30 using uhci_hcd [ 248.133657][ T5912] usb 1-1: not running at top speed; connect to a high speed hub [ 248.138730][ T5912] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 248.162370][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 248.165919][ T5912] usb 1-1: Product: QEMU USB Tablet [ 248.169704][ T5912] usb 1-1: Manufacturer: QEMU [ 248.172864][ T5912] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 248.208339][ T5912] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb1/1-1/1-1:1.0/0003:0627:0001.003C/input/input81 [ 248.216278][ T42] audit: type=1400 audit(1787254562.161:713): avc: denied { bind } for pid=20590 comm="syz.3.3013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 248.281349][ T5912] hid-generic 0003:0627:0001.003C: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0 [ 248.302773][T20563] usb 1-1: USB disconnect, device number 30 [ 248.340227][T20616] fuse: Bad value for 'group_id' [ 248.341995][T20616] fuse: Bad value for 'group_id' [ 248.406760][T20629] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.473094][T20563] ehci-pci 0000:00:1d.7: EHCI Host Controller [ 248.476286][T20563] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 2 [ 248.480777][T20563] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000 [ 248.490800][T20629] md: could not open device unknown-block(1,1). [ 248.494251][T20629] md: md_import_device returned -16 [ 248.497422][T20646] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 248.499482][T20646] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 248.502588][T20563] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00 [ 248.507619][T20563] usb usb2: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 248.510697][T20646] vhci_hcd vhci_hcd.0: Device attached [ 248.514289][T20563] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 248.516861][T20563] usb usb2: Product: EHCI Host Controller [ 248.518664][T20563] usb usb2: Manufacturer: Linux syzkaller ehci_hcd [ 248.520842][T20563] usb usb2: SerialNumber: 0000:00:1d.7 [ 248.527615][T20563] hub 2-0:1.0: USB hub found [ 248.529306][T20563] hub 2-0:1.0: 6 ports detected [ 248.555095][T20647] vhci_hcd: connection closed [ 248.557677][ T5773] vhci_hcd vhci_hcd.3: stop threads [ 248.562169][ T5773] vhci_hcd vhci_hcd.3: release socket [ 248.564619][ T5773] vhci_hcd vhci_hcd.3: disconnect device [ 248.567039][T20563] hub 1-0:1.0: USB hub found [ 248.569097][T20563] hub 1-0:1.0: 2 ports detected [ 248.599589][T20563] hub 3-0:1.0: USB hub found [ 248.602724][T20563] hub 3-0:1.0: 2 ports detected [ 248.641392][T20563] hub 4-0:1.0: USB hub found [ 248.643543][T20563] hub 4-0:1.0: 2 ports detected [ 248.719554][T20666] ================================================================== [ 248.722201][T20666] BUG: KASAN: global-out-of-bounds in kobject_synth_uevent+0x79d/0x7d0 [ 248.724876][T20666] Read of size 1 at addr ffffffff8d7101be by task syz.1.3019/20666 [ 248.728928][T20666] [ 248.730140][T20666] CPU: 1 UID: 0 PID: 20666 Comm: syz.1.3019 Tainted: G L syzkaller #0 PREEMPT(full) [ 248.730171][T20666] Tainted: [L]=SOFTLOCKUP [ 248.730176][T20666] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 248.730219][T20666] Call Trace: [ 248.730227][T20666] [ 248.730233][T20666] dump_stack_lvl+0x100/0x190 [ 248.730255][T20666] print_report+0x13d/0x4b0 [ 248.730276][T20666] ? __virt_addr_valid+0x239/0x430 [ 248.730298][T20666] ? kobject_synth_uevent+0x79d/0x7d0 [ 248.730315][T20666] kasan_report+0xdf/0x1c0 [ 248.730332][T20666] ? kobject_synth_uevent+0x79d/0x7d0 [ 248.730353][T20666] kobject_synth_uevent+0x79d/0x7d0 [ 248.730371][T20666] ? __pfx_kobject_synth_uevent+0x10/0x10 [ 248.730390][T20666] ? find_held_lock+0x2b/0x80 [ 248.730406][T20666] uevent_store+0x46/0x90 [ 248.730458][T20666] ? __pfx_uevent_store+0x10/0x10 [ 248.730475][T20666] drv_attr_store+0x74/0xb0 [ 248.730491][T20666] ? __pfx_drv_attr_store+0x10/0x10 [ 248.730508][T20666] sysfs_kf_write+0xf2/0x150 [ 248.730531][T20666] kernfs_fop_write_iter+0x3e0/0x5f0 [ 248.730542][T20666] ? __pfx_sysfs_kf_write+0x10/0x10 [ 248.730556][T20666] vfs_write+0x6af/0x1050 [ 248.730567][T20666] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 248.730579][T20666] ? __pfx_vfs_write+0x10/0x10 [ 248.730592][T20666] ? find_held_lock+0x2b/0x80 [ 248.730616][T20666] ksys_write+0x12a/0x250 [ 248.730632][T20666] ? __pfx_ksys_write+0x10/0x10 [ 248.730650][T20666] do_syscall_64+0x123/0x790 [ 248.730669][T20666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.730688][T20666] RIP: 0033:0x7f420959e0d9 [ 248.730704][T20666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.730722][T20666] RSP: 002b:00007f420a4d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 248.730745][T20666] RAX: ffffffffffffffda RBX: 00007f4209825fa0 RCX: 00007f420959e0d9 [ 248.730758][T20666] RDX: 000000000000003f RSI: 0000200000000300 RDI: 0000000000000003 [ 248.730770][T20666] RBP: 00007f4209635024 R08: 0000000000000000 R09: 0000000000000000 [ 248.730781][T20666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 248.730792][T20666] R13: 00007f4209826038 R14: 00007f4209825fa0 R15: 00007fff8023e048 [ 248.730802][T20666] [ 248.730806][T20666] [ 248.804401][T20666] The buggy address belongs to the variable: [ 248.806370][T20666] uevent_helper_sysctl_table+0xde/0x2a0 [ 248.808177][T20666] [ 248.808949][T20666] The buggy address belongs to the physical page: [ 248.810933][T20666] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0xd710 [ 248.813704][T20666] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 248.816207][T20666] raw: 00fff00000002000 ffffea000035c408 ffffea000035c408 0000000000000000 [ 248.818865][T20666] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 248.821534][T20666] page dumped because: kasan: bad access detected [ 248.821819][ T5876] usb 2-1: new high-speed USB device number 2 using ehci-pci [ 248.823600][T20666] page_owner info is not present (never set?) [ 248.823608][T20666] [ 248.823611][T20666] Memory state around the buggy address: [ 248.823618][T20666] ffffffff8d710080: f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 00 00 00 00 [ 248.823628][T20666] ffffffff8d710100: 00 00 00 f9 f9 f9 f9 f9 00 07 f9 f9 f9 f9 f9 f9 [ 248.823638][T20666] >ffffffff8d710180: 04 f9 f9 f9 f9 f9 f9 f9 07 f9 f9 f9 f9 f9 f9 f9 [ 248.823646][T20666] ^ [ 248.823653][T20666] ffffffff8d710200: 07 f9 f9 f9 f9 f9 f9 f9 05 f9 f9 f9 f9 f9 f9 f9 [ 248.844378][T20666] ffffffff8d710280: 07 f9 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 [ 248.847723][T20666] ================================================================== [ 248.857641][T20666] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 248.860783][T20666] CPU: 1 UID: 0 PID: 20666 Comm: syz.1.3019 Tainted: G L syzkaller #0 PREEMPT(full) [ 248.864491][T20666] Tainted: [L]=SOFTLOCKUP [ 248.866019][T20666] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 248.869599][T20666] Call Trace: [ 248.870987][T20666] [ 248.872000][T20666] dump_stack_lvl+0x100/0x190 [ 248.873467][T20666] vpanic+0x553/0x970 [ 248.874717][T20666] ? __pfx_vpanic+0x10/0x10 [ 248.876435][T20666] ? mark_held_locks+0x40/0x70 [ 248.877977][T20666] ? kobject_synth_uevent+0x79d/0x7d0 [ 248.879643][T20666] panic+0xd1/0xe0 [ 248.880817][T20666] ? __pfx_panic+0x10/0x10 [ 248.882227][T20666] ? kobject_synth_uevent+0x79d/0x7d0 [ 248.883963][T20666] ? preempt_schedule_common+0x3c/0xb0 [ 248.885899][T20666] check_panic_on_warn.cold+0x19/0x34 [ 248.887606][T20666] end_report.part.0+0x3a/0x90 [ 248.889120][T20666] kasan_report.cold+0xe/0x18 [ 248.890641][T20666] ? kobject_synth_uevent+0x79d/0x7d0 [ 248.892357][T20666] kobject_synth_uevent+0x79d/0x7d0 [ 248.894001][T20666] ? __pfx_kobject_synth_uevent+0x10/0x10 [ 248.895818][T20666] ? find_held_lock+0x2b/0x80 [ 248.897362][T20666] uevent_store+0x46/0x90 [ 248.898727][T20666] ? __pfx_uevent_store+0x10/0x10 [ 248.900398][T20666] drv_attr_store+0x74/0xb0 [ 248.901802][T20666] ? __pfx_drv_attr_store+0x10/0x10 [ 248.903460][T20666] sysfs_kf_write+0xf2/0x150 [ 248.905023][T20666] kernfs_fop_write_iter+0x3e0/0x5f0 [ 248.906783][T20666] ? __pfx_sysfs_kf_write+0x10/0x10 [ 248.908507][T20666] vfs_write+0x6af/0x1050 [ 248.909917][T20666] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 248.911741][T20666] ? __pfx_vfs_write+0x10/0x10 [ 248.913293][T20666] ? find_held_lock+0x2b/0x80 [ 248.914793][T20666] ksys_write+0x12a/0x250 [ 248.916215][T20666] ? __pfx_ksys_write+0x10/0x10 [ 248.917763][T20666] do_syscall_64+0x123/0x790 [ 248.919230][T20666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.921133][T20666] RIP: 0033:0x7f420959e0d9 [ 248.922529][T20666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.928935][T20666] RSP: 002b:00007f420a4d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 248.931609][T20666] RAX: ffffffffffffffda RBX: 00007f4209825fa0 RCX: 00007f420959e0d9 [ 248.934174][T20666] RDX: 000000000000003f RSI: 0000200000000300 RDI: 0000000000000003 [ 248.936712][T20666] RBP: 00007f4209635024 R08: 0000000000000000 R09: 0000000000000000 [ 248.939216][T20666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 248.941827][T20666] R13: 00007f4209826038 R14: 00007f4209825fa0 R15: 00007fff8023e048 [ 248.944387][T20666] [ 248.946070][T20666] Kernel Offset: disabled [ 248.947430][T20666] Rebooting in 86400 seconds.. VM DIAGNOSIS: 19:36:13 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000004 RBX=ffff8880311e8c20 RCX=ffffffff9691ea08 RDX=0000000000000007 RSI=ffff8880311e8bf8 RDI=0000000000000000 RBP=ffff8880311e8c20 RSP=ffffc9000169f960 R8 =0000000000000000 R9 =0000000000000003 R10=0000000000000003 R11=0000000000000001 R12=ffff8880311e8000 R13=0000000000000003 R14=0000000000000004 R15=0000000000000001 RIP=ffffffff81e62531 RFL=00000092 [--S-A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5bb6000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fff8023cc60 CR3=000000003646c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010001 Opmask01=0000000001000003 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffce2c6a9f6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffce2c6a9f6 00007ffce2c6a9fc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc6b8a35607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc6b8a35647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc6b8a357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc6b8a35639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc6b8bf25f8 00007fc6b8bf25c8 00007fc6b8bf2600 00007fc6b8bf25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000000000000 0000000000000000 000000000000017c ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000061 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a73cb5 RDI=ffffffff9bc0e340 RBP=ffffffff9bc0e300 RSP=ffffc900095f7598 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3866666666666666 R12=0000000000000000 R13=0000000000000061 R14=ffffffff9b900223 R15=ffffffff85a73c50 RIP=ffffffff85a73cdf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f420a4d16c0 ffffffff 00c00000 GS =0000 ffff8880d5cb6000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f420a4d0ff8 CR3=0000000027d88000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff8023e536 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff8023e536 00007fff8023e53c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4209635607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4209635647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f42096357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4209635639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f42097f25f8 00007f42097f25c8 00007f42097f2600 00007f42097f25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000046 RBX=0000000000000000 RCX=0000000000000200 RDX=0000000000000002 RSI=ffffffff8e3a8a7f RDI=ffffffff8c613480 RBP=ffffffff8ede9ac0 RSP=ffffc900033df2f8 R8 =0000000057439c28 R9 =0000000000000007 R10=0000000000000000 R11=0000000000000001 R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81e6410e RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5db6000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c342948 CR3=000000003646c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc6b975d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffce2c6a9f6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffce2c6a9f6 00007ffce2c6a9fc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc6b8a35607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc6b8a35647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc6b8a357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc6b8a35639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc6b8bf2600 00007fc6b8bf25e0 00007fc6b8bf25e8 00007fc6b8bf2618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 00080000000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc6b8bf25f8 00007fc6b8bf25c8 00007fc6b8bf2600 00007fc6b8bf25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000000000000 0000000000000000 000000000000017c ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=dffffc0000000000 RBX=0000000000000001 RCX=ffffffff91f446a6 RDX=ffffffff91f446aa RSI=ffffffff91f446ab RDI=ffffffff9165d8ec RBP=ffffc90004b3fb38 RSP=ffffc90004b3fa80 R8 =ffffffff91f446aa R9 =0000000000000007 R10=0000000000000200 R11=0000000000017cf2 R12=ffffc90004b3fb40 R13=ffffc90004b3faf0 R14=ffffc90004b3fb25 R15=ffffffff91f446ab RIP=ffffffff81b8b5c1 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f2997439880 ffffffff 00c00000 GS =0000 ffff8880d5eb6000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=0000000027d6e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000001004 Opmask01=0000000000000000 Opmask02=00000000efff3f2f Opmask03=0000000002082001 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055ef086cc3a0 000055ef086cc3a0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055ef086adf60 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055ef086b5c40 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2996df1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffff0000 ffffff00000000ff ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff0000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373269c7b19f483 7373269925c4fe59 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 865b93a777aad405 737373762d83f5c0 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 33706f0031706f6f 6c2f6b636f6c622f 000055ef086c0ce0 00007f006b736964 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30302c443230302c 4332300031302d30 3030303030003831 3d5145534b534944 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0d0d11440f0d0d11 430f0d000c0d100d 0d0d0d0d0d00050c 005145534b534944 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f30737562646e2f 30303a3231303049 5043412f6d726f66 74616c702f736563 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055ef086adf40 000055ef086c0260 0000000000000041 0000340000797400 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3032785c3032785c 3032785c3032785c 3032785c3032785c 3032785c3032785c ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3032785c3032785c 3032785c3032785c 3032785c3032785c 3032785c3032785c ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3032785c3032785c 3032785c4b534944 445241483032785c 554d45513d434e45 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000014100 000000000000303d 44440045525f5346 0054242044492065 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000