last executing test programs: 3.710050345s ago: executing program 0 (id=133): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r2, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x800}) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f0000000380)={0x28, 0x5, r2, 0x0, &(0x7f00000002c0)="a9b42146", 0x4, 0x100000001}) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x8004, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r3, 0x40086409, &(0x7f0000000200)) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r2, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) 3.709830923s ago: executing program 0 (id=134): syz_open_dev$video4linux(&(0x7f0000000480), 0x5, 0x0) r0 = openat$zero(0xffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1c, 0x3, &(0x7f00000003c0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r1, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0xff, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}}, 0x14) socket$kcm(0xa, 0x5, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r5, 0x8, 0x67}}, 0x1c}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="000300"/20, @ANYRES32=r4, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f091030000003477", "4ee9f0420448f5ac45a8b1af8a3d7b75", "0697b948", "c191885fdda84d32"}, 0x28) sendto$inet6(0xffffffffffffffff, &(0x7f0000000400)="07280b01844f576d1eda1dc0c04343c65895644789733334cd057c33607966a82b0446dcf825c685be42cb4a7379e1b1953dd6a413af539dbef634b6f4dab74fe33bf9ff785ed031ce8e090f8d7e1ef2262d65fabf5fb6cc191d209ea1d5000000fb35fb2786d0a07826570e74235932f4d7f02578fa4896596926aad0b8ca52d6dedab905517df1ea088fbf8ca23d13cb0e88256b1902d43306805cbe1856332673d40fe12e1e7c07e06aacbfcd03c7c0a8833e722417d37013d44759469bd467d75da53b7b87013df6d762de5dbc665a16fd071448633ed5e174a97ad3d6b2a84225d24e5c119442d929b0a444edca", 0xffffffec, 0x20004091, 0x0, 0x0) close(r2) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000240)={0x0, 0xf0ffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) getpid() openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 2.791148293s ago: executing program 0 (id=138): r0 = syz_open_dev$video4linux(&(0x7f0000000480), 0x5, 0x0) r1 = openat$zero(0xffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1c, 0x3, &(0x7f00000003c0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r2, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0xff, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}}, 0x14) socket$kcm(0xa, 0x5, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) r4 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001d08a5f6bd9c8d1dbae822f1eb000000000000e000000007000000a9ab70db5d427ac0508d7a543944af851a523bec", @ANYRES32=r6, @ANYBLOB='\b\x00g\x00'], 0x1c}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="000300"/20, @ANYRES32=r5, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f091030000003477", "4ee9f0420448f5ac45a8b1af8a3d7b75", "0697b948", "c191885fdda84d32"}, 0x28) sendto$inet6(0xffffffffffffffff, &(0x7f0000000400)="07280b01844f576d1eda1dc0c04343c65895644789733334cd057c33607966a82b0446dcf825c685be42cb4a7379e1b1953dd6a413af539dbef634b6f4dab74fe33bf9ff785ed031ce8e090f8d7e1ef2262d65fabf5fb6cc191d209ea1d5000000fb35fb2786d0a07826570e74235932f4d7f02578fa4896596926aad0b8ca52d6dedab905517df1ea088fbf8ca23d13cb0e88256b1902d43306805cbe1856332673d40fe12e1e7c07e06aacbfcd03c7c0a8833e722417d37013d44759469bd467d75da53b7b87013df6d762de5dbc665a16fd071448633ed5e174a97ad3d6b2a84225d24e5c119442d929b0a444edca", 0xffffffec, 0x20004091, 0x0, 0x0) close(r3) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000240)={0x0, 0xf0ffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) getpid() openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r0, 0x229}, {r2, 0x20}], 0x2, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={[0x800]}, 0x8) 1.931525475s ago: executing program 0 (id=145): pipe(&(0x7f0000000100)={0xffffffffffffffff}) (async) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) (async) chdir(&(0x7f0000000140)='./file0\x00') r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000c40)=ANY=[], 0x478) (async) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000012009702000000000000010000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000024000e"], 0x44}}, 0x0) (async) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r2, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r4, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1f, 0x1}}, 0x3c) (async) close_range(r0, 0xffffffffffffffff, 0x0) 1.931199953s ago: executing program 0 (id=146): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000080)={0x0, 0x3, 0xa1}) socket$vsock_stream(0x28, 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000002100), 0x2a71801, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0xe2300) socket$inet6(0xa, 0x2, 0x3a) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL) io_uring_enter(0xffffffffffffffff, 0x3516, 0x40000, 0x49, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000000)=0x400) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000080)) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000380)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="56c78e3c733dd956f47c2c6ae5c782785fb2dbd811576f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) mkdirat(0xffffffffffffff9c, 0x0, 0x0) symlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000004c0)=""/83, 0x53) syz_emit_ethernet(0x4a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00142b00fc0000000000000000fe8000000000000000000000000000aa010002080000000000000000000c9078e101000100000000000000"], 0x0) open(0x0, 0x0, 0x0) rename(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000280)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x3f00) dup(r3) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[@ANYBLOB="700000000009010400000000000000000000000008000540000200000900010073797a31000000000000002c000180140003008910000400000000000000000000000214000400fe8000000000000004803e00"/102], 0x70}}, 0x0) write$binfmt_script(r3, &(0x7f0000000080)={'#! ', './file0'}, 0xfffffffffffffcf3) 1.741744569s ago: executing program 0 (id=147): syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r0) dup(r1) openat$ppp(0xffffff9c, &(0x7f0000000000), 0xc0401, 0x0) socket$xdp(0x2c, 0x3, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 1.15529956s ago: executing program 3 (id=158): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) pread64(r2, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000700)={'team0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000040)="09000000010002", 0x7) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)={0x20, r1, 0x300, 0x70b92c, 0xfffffffc, {}, [{{0x8, 0x1, r4}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x800c}, 0x4000800) r6 = socket$inet(0x2, 0x800, 0x2000001) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r9, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8081}, 0x24000800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x7e}, @exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) setsockopt$packet_int(r10, 0x107, 0x7, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r10, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r11, 0x1, 0x0, 0x6, @multicast}, 0x14) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000440)='.\x00', 0x12000021) r12 = syz_io_uring_setup(0x39, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500}, &(0x7f0000000240), &(0x7f0000001880)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r12, 0x21, &(0x7f0000000440), 0x1) r13 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r13, 0x8933, &(0x7f0000000280)) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r7, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="ba2e0b00", @ANYRES16=r9, @ANYBLOB="000325bd7000fbdbdf25080000000c000680060001000200000008000400020000002c0001800800060004000000050002000800000008000700", @ANYRES32=r11, @ANYBLOB="080003007f000001080003006401010208000200070000000800040077e1000008000400001000000500050004000000080002000000000008000400ff0f00003c00068008000300ffffffff08000600090000000600010002000000060005004e22000008000300ac1414aa05000200010000000800060010000000"], 0xc0}, 0x1, 0x0, 0x0, 0x8040}, 0x19) bind$inet(r6, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10) 1.088503438s ago: executing program 3 (id=159): membarrier(0x4, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000005c40), 0x0, 0x0, 0x0) ioctl$CEC_DQEVENT(0xffffffffffffffff, 0xc0506107, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/fib_triestat\x00') r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x14}}, 0xe) r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000100), 0x8) write$6lowpan_control(r5, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) read$FUSE(r3, &(0x7f0000006480)={0x2020}, 0x2020) 620.781366ms ago: executing program 1 (id=168): personality(0x1fffffc) io_setup(0x3, &(0x7f0000000000)) uname(&(0x7f0000000040)=""/49) 480.643214ms ago: executing program 1 (id=169): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004000)={&(0x7f0000001340)=@newtaction={0x84, 0x30, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1100}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0x24}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x20000000, 0x0, 0x7ff, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x9, 0x0, 0x2}, 0x0, 0xfffffffd}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x84}}, 0x8000) ioctl$NBD_DISCONNECT(r0, 0xab08) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x4800) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x4, 0x2dd2, 0x15, 0x10000, 0xffffffffffffffff, 0x7, '\x00', 0x0, r2, 0x4, 0x4, 0x3, 0x0, @void, @value, @value=r2}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=0xffffffffffffffff, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x20, &(0x7f0000000580)={&(0x7f00000004c0)=""/1, 0x1, 0x0, &(0x7f0000000500)=""/98, 0x62}}, 0x10) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000600)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000640), 0x2000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1f, 0x1a, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x2}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @map_val={0x18, 0x3, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x2}, @ldst={0x2, 0x0, 0x4, 0x3, 0xa, 0xfffffffffffffff0, 0xfffffffffffffff0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xb}]}, &(0x7f0000000080)='GPL\x00', 0x8, 0xb3, &(0x7f0000000280)=""/179, 0x41000, 0xe, '\x00', r5, @fallback=0x4, r6, 0x8, &(0x7f0000000440)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000480)={0x1, 0xd, 0x4, 0xd}, 0x10, r7, r8, 0x0, &(0x7f0000000680)=[r9], &(0x7f00000006c0), 0x10, 0x0, @void, @value}, 0x94) connect$rose(r2, &(0x7f00000007c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @bcast}, 0x1c) 479.144807ms ago: executing program 1 (id=172): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_enter(r1, 0x5485, 0x57a3, 0x56, &(0x7f0000000000)={[0x9]}, 0x8) vmsplice(r2, &(0x7f0000000400)=[{0x0}, {&(0x7f00000001c0)="5c8000000000000000ea45a1", 0xc}, {&(0x7f00000004c0)="90acc1d36cb37b3685ac64c0c0af3ff8690c1f2d7809a76842a10b0a8c9f1d907b5df6269e8217a5843000f0158829c6e894f31672662cbf693eeb7d1cf85bb31dc1aae172c68f992ca89ce3baceb034a46f3a32a085b50ba65e429f14fde6c6c2a7f27e0bc9572034250e384120baf413ed08b88cec96f047f16a280378991b", 0x80}, {&(0x7f0000000100)="500467c845f8effffffffda1d79e61fff9d2424f42dd91e481141a53740c171c63f8053e00"/49, 0x31}, {&(0x7f0000000240)="5f535b965e2b91a98dd216843b8037025a3c95ec474672422b3bf779d31b5667e8311b55c2050db2f29448cfbec6e4d4145e61146faab183cea51a9c14fbeb", 0x3f}, {&(0x7f0000000580)="f20e522ced84f55d125213673d96c4ff9eb19701c3ac61aae5d29d848df4b662bc2e60cac23febae208c3b0c949fd4c4716679b1d4dacc7db6a9a1a29ce0e9cc126ba60d8d30397da183df6ed30a49c83cea79a58a389186fb8fbdf4897b2f7a76b7d435e0495bac42c2173b399edd2f823cb35906cfe8cbf200f5f410a368c4a1f1c49794c532015957c69a8d4a68d8f91b8833f7e5ff8736f14a4f14a18edd3e4d84700263a300828ded", 0xab}], 0x6, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000740)={0x800006dc, 0x0, 0xfffffff9, 0x6, 0x18, "1012a2c2e0d997451fe550bd026388080d00"}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r5 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r5, 0x65, 0x8, &(0x7f0000004400), &(0x7f0000002140)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r4}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) getsockopt$SO_TIMESTAMP(r5, 0x1, 0x23, &(0x7f0000000680), &(0x7f00000006c0)=0x4) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x2982, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000200)=0xd) r9 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r9, 0x2def, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r6, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x34, r7, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1ff}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8850}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48080}, 0x48000) r12 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_AUDOUT(r12, 0x40345632, &(0x7f0000000280)={0x0, "ec331c71956b398f2930164d63bbf22bdc9af1d044e771cfd9f47022d67531f3"}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x5412, &(0x7f0000000040)=0xa) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00000800000100251c000000ff00000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20004011}, 0x0) ioctl(r0, 0x9, &(0x7f0000000080)="40e4") 410.803932ms ago: executing program 2 (id=173): r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000c40)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd, @map_val, @call, @exit, @tail_call]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat$pmem0(0xffffffffffffff9c, 0x0, 0x80d01, 0x0) ioctl$BLKPG(r1, 0x1269, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f00000001c0)={0x2, 0x0, 0x94, &(0x7f00000000c0)={0x400, 0x1000, 0xd}}) 410.549723ms ago: executing program 1 (id=174): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {}, {}, {0x2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TTL={0x5}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240008c0}, 0x4000) (fail_nth: 2) 410.368469ms ago: executing program 2 (id=175): r0 = syz_open_dev$sg(&(0x7f0000007700), 0x3ffffffffffffffd, 0x101) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x409, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x31}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa4}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) ftruncate(r2, 0xc17a) (async) fstat(r2, &(0x7f0000000300)) (async) setsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000000)={@empty, @rand_addr=0x64010100}, 0xc) (async) writev(r1, &(0x7f0000000040), 0x2) (async) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000240)={0xdf, 0x2, 0x7, "88252ce49c96a8e517791dd61f91f82f92f77ec37ee11a36c8a6dbdc5ed9ce9f3cdafeef45d3f40435c9c50132665dd23e732f657b3e65fddae225e382afd642ddf5d76429952a9f4c04e7e33b249425192669a1a9de3e4a45978f739c6a2f7988bb2a767e0164177863f76faec9fac8d76b30013a8eb78ac22fae9c0cbde67e9b03ae0b46e66c09d5e60a2a23b39eddf46a5cc49bf1d0525a973339bef74f1e5aaea1fefee59ae425427913eb80907c8825e04384c9f2febb6af27786ab43507da64f14859a36d56de1de77c917700494fc037e53832e751dbaadf8f8cd47"}) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000040)={0x53, 0xffffffffffffffff, 0x0, 0x2, @scatter={0x0, 0xf5ff, 0x0}, 0x0, 0x0, 0x1, 0x6, 0x2, 0x0}) 327.95591ms ago: executing program 2 (id=176): setgid(0xee00) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x2, 0xfffffffd, 0x10000, 0x8, "53c121c24bdd7de7a0d3debee96c574ee021b5"}) write$UHID_INPUT(r1, &(0x7f0000001980)={0xc, {"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", 0x5f1}}, 0x505) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') read$FUSE(r2, &(0x7f0000000600)={0x2020}, 0xffffffb5) syz_io_uring_setup(0x77e8, &(0x7f0000000080)={0x0, 0xfffffffd, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xc, 0x10, r2, 0x10000000) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x600080, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r6, 0x9362, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xeeee0000, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001800)=[@text32={0x20, &(0x7f00000001c0)="b8f40000000f23c00f21f835010006000f23f8f74ab800800000643e67670f01c90f20c035100000000f22c0c4c11df8f566b819008ee00f78e50f09b9bd0a0000b8c0000000ba000000000f30c744240005000000c744240200000000c7442406000000000f011c24", 0x69}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000100)=@IORING_OP_POLL_REMOVE={0x7, 0x8, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1, {0x0, r7}}) 327.742014ms ago: executing program 1 (id=177): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x0, 0x5, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2000, 0x0, r2, 0x0, 0x440}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x118) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xd) (fail_nth: 2) openat$snapshot(0xffffff9c, 0x0, 0x1, 0x0) 208.556753ms ago: executing program 3 (id=178): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)={{0x0, 0x0, 0x80, {0xd000, 0xf000}}, "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", "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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$can_j1939(0x1d, 0x2, 0x7) prctl$PR_MCE_KILL_GET(0x22) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r5}, 0x18) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000100)={0x1d, r7}, 0x18) connect$can_j1939(r6, &(0x7f0000000140)={0x1d, r7}, 0x18) sendmsg$can_j1939(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)='d', 0x1}}, 0x0) recvmsg$can_j1939(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000001580)=@raw={'raw\x00', 0x3c1, 0x3, 0x1488, 0x1190, 0x1170, 0x1398, 0x0, 0x1170, 0x13b8, 0x1398, 0x1398, 0x13b8, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [0x0, 0x0, 0x0, 0xff000000], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0x1128, 0x1190, 0x0, {}, [@common=@inet=@multiport={{0x50}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x2, 0x0, 0x0, './cgroup.cpu/syz0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x10, 0x2, 0x2, 'syz1\x00', 'syz1\x00', {0xe203}}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x23, 0x0, [@empty, @local, @remote, @mcast2, @loopback, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @local}, @mcast1, @loopback, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x14e8) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x4, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x440c0}, 0x44000) 208.387986ms ago: executing program 1 (id=179): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$caif_stream(0x25, 0x1, 0x2) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r3, 0x0) ioctl$BLKRRPART(r3, 0x125f, 0x0) 81.68337ms ago: executing program 2 (id=180): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x0, 0x5, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2000, 0x0, r2, 0x0, 0x440}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x118) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xd) openat$snapshot(0xffffff9c, 0x0, 0x1, 0x0) 47.593922ms ago: executing program 3 (id=181): timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r0, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0x1}, {0x0}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0) 43.40058ms ago: executing program 2 (id=182): setgid(0xee00) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') read$FUSE(r0, &(0x7f0000000600)={0x2020}, 0xffffffb5) 41.720315ms ago: executing program 3 (id=183): prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000c00)={{}, {0x1, 0x1}, [], {0x4, 0x5}, [{0x8, 0x5}], {0x10, 0x2}}, 0x2c, 0x1) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xdf, 0x0, 0x0, 0x0, 0x7}, [@alu={0x4, 0x0, 0x4, 0x0, 0xa, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000140)='GPL\x00', 0x10000, 0x1000, &(0x7f0000000b40)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f0000000200)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x6, 0x800}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) write$sndseq(r4, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control={0xd8, 0x6, 0x8}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}], 0x38) (async) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f0000000980)) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) recvfrom$rose(r1, &(0x7f0000000380)=""/28, 0x1c, 0x220, &(0x7f0000000440)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) r6 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r7, 0x40045542, &(0x7f0000000b00)) (async, rerun: 64) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x0) (rerun: 64) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fcdb0f256c00000008000300", @ANYRES32=r8, @ANYBLOB="0800270001000000080026006c0900000800a000ff070000"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0xc000) 2.220353ms ago: executing program 3 (id=184): setgid(0xee00) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') read$FUSE(r0, &(0x7f0000000600)={0x2020}, 0xffffffb5) (fail_nth: 2) 0s ago: executing program 2 (id=185): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) fcntl$setsig(r0, 0xa, 0x28) socket$nl_generic(0x10, 0x3, 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000580)={{@host, 0x9}, @local, 0x2, 0x0, 0x3ff, 0x2000000, 0xc66, 0xa43c, 0x6}) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_targets\x00') syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x2, 0x3, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000000)=0x1) r3 = gettid() rt_sigprocmask(0x0, &(0x7f0000000040)={[0xfffffffffffffffb]}, 0x0, 0x8) timer_create(0x0, &(0x7f0000001080)={0x0, 0x12, 0x4, @tid=r3}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r4 = gettid() tkill(r4, 0x14) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socket(0x28, 0x5, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r9, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x1c}}, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x0, 0xb, 0x301, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_COMPAT_NAME={0x8, 0x1, '\\:/\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_COMPAT_TYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44000}, 0x20044012) r10 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4b8, 0x2b0, 0x268, 0x300, 0x2b0, 0x268, 0x3e8, 0x460, 0x460, 0x3e8, 0x460, 0x9, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @loopback, [], [], 'veth0_to_hsr\x00', 'bond_slave_0\x00'}, 0x0, 0x270, 0x2b0, 0x0, {0x9401}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0xc28da5586c675118, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @dev, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @rand_addr=' \x01\x00', @dev, @mcast2, @private0, @mcast2, @private1, @remote, @private0, @remote, @private1]}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @mcast2, @mcast1, @private2}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "1852aa405753905554ed000600ebaf5ffbbbcc15d0abddcb5ae29b3b8f45"}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518) pselect6(0x40, &(0x7f0000000000)={0xff, 0x6, 0xea, 0x0, 0x0, 0x1, 0x802}, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 38.111270][ T39] audit: type=1400 audit(1737044319.993:80): avc: denied { write } for pid=5906 comm="sh" path="pipe:[5899]" dev="pipefs" ino=5899 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 38.118706][ T39] audit: type=1400 audit(1737044319.993:81): avc: denied { rlimitinh } for pid=5906 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.124292][ T39] audit: type=1400 audit(1737044319.993:82): avc: denied { siginh } for pid=5906 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:47773' (ED25519) to the list of known hosts. [ 39.186139][ T39] audit: type=1400 audit(1737044321.073:83): avc: denied { read } for pid=5331 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 39.192362][ T39] audit: type=1400 audit(1737044321.073:84): avc: denied { append } for pid=5331 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 39.198572][ T39] audit: type=1400 audit(1737044321.073:85): avc: denied { open } for pid=5331 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 39.205235][ T39] audit: type=1400 audit(1737044321.073:86): avc: denied { getattr } for pid=5331 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 39.211260][ T39] audit: type=1400 audit(1737044321.073:87): avc: denied { name_bind } for pid=5916 comm="sshd" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 40.919241][ T5918] cgroup: Unknown subsys name 'net' [ 41.051547][ T5918] cgroup: Unknown subsys name 'cpuset' [ 41.054786][ T5918] cgroup: Unknown subsys name 'rlimit' [ 41.236328][ T5926] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 41.829629][ T5918] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 43.374727][ T39] kauditd_printk_skb: 17 callbacks suppressed [ 43.374737][ T39] audit: type=1400 audit(1737044325.253:105): avc: denied { execmem } for pid=5929 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 43.520848][ T39] audit: type=1400 audit(1737044325.403:106): avc: denied { create } for pid=5932 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 43.529266][ T39] audit: type=1400 audit(1737044325.403:107): avc: denied { read write } for pid=5932 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 43.536207][ T39] audit: type=1400 audit(1737044325.403:108): avc: denied { open } for pid=5932 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 43.543286][ T39] audit: type=1400 audit(1737044325.403:109): avc: denied { ioctl } for pid=5932 comm="syz-executor" path="socket:[5944]" dev="sockfs" ino=5944 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 43.547807][ T5935] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 43.559335][ T5944] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 43.561879][ T5944] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 43.564110][ T5944] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 43.567188][ T5944] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 43.569672][ T5944] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 43.573240][ T5937] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 43.573883][ T5944] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 43.576374][ T5937] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 43.578397][ T5944] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 43.581135][ T5937] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 43.582823][ T5944] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 43.582968][ T5945] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 43.583382][ T5945] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 43.583830][ T5945] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 43.584070][ T5945] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 43.584172][ T5945] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 43.584414][ T5937] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 43.584527][ T5937] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 43.586075][ T64] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 43.586434][ T64] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 43.587576][ T5944] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 43.587722][ T5944] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 43.599061][ T39] audit: type=1400 audit(1737044325.473:110): avc: denied { read } for pid=5932 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 43.600607][ T64] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 43.602372][ T39] audit: type=1400 audit(1737044325.473:111): avc: denied { open } for pid=5932 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 43.623552][ T39] audit: type=1400 audit(1737044325.473:112): avc: denied { mounton } for pid=5932 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 43.736682][ T39] audit: type=1400 audit(1737044325.613:113): avc: denied { module_request } for pid=5932 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 43.768745][ T5934] chnl_net:caif_netlink_parms(): no params data found [ 43.772960][ T5932] chnl_net:caif_netlink_parms(): no params data found [ 43.778175][ T5939] chnl_net:caif_netlink_parms(): no params data found [ 43.831620][ T5936] chnl_net:caif_netlink_parms(): no params data found [ 43.933016][ T5934] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.936299][ T5934] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.938867][ T5934] bridge_slave_0: entered allmulticast mode [ 43.941176][ T5934] bridge_slave_0: entered promiscuous mode [ 43.991802][ T5934] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.994021][ T5934] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.996062][ T5934] bridge_slave_1: entered allmulticast mode [ 43.998178][ T5934] bridge_slave_1: entered promiscuous mode [ 44.009974][ T5939] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.012268][ T5939] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.014683][ T5939] bridge_slave_0: entered allmulticast mode [ 44.016851][ T5939] bridge_slave_0: entered promiscuous mode [ 44.042858][ T5939] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.045002][ T5939] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.047056][ T5939] bridge_slave_1: entered allmulticast mode [ 44.049231][ T5939] bridge_slave_1: entered promiscuous mode [ 44.060138][ T5932] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.062202][ T5932] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.064333][ T5932] bridge_slave_0: entered allmulticast mode [ 44.066472][ T5932] bridge_slave_0: entered promiscuous mode [ 44.077631][ T5934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.089270][ T5932] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.091346][ T5932] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.093389][ T5932] bridge_slave_1: entered allmulticast mode [ 44.095557][ T5932] bridge_slave_1: entered promiscuous mode [ 44.097672][ T5936] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.099833][ T5936] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.101932][ T5936] bridge_slave_0: entered allmulticast mode [ 44.104283][ T5936] bridge_slave_0: entered promiscuous mode [ 44.107581][ T5934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.118782][ T5939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.139881][ T5936] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.141975][ T5936] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.144061][ T5936] bridge_slave_1: entered allmulticast mode [ 44.146266][ T5936] bridge_slave_1: entered promiscuous mode [ 44.158131][ T5934] team0: Port device team_slave_0 added [ 44.161232][ T5939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.164729][ T5932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.184737][ T5934] team0: Port device team_slave_1 added [ 44.206961][ T5932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.212153][ T5936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.224783][ T5939] team0: Port device team_slave_0 added [ 44.235573][ T5936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.247574][ T5939] team0: Port device team_slave_1 added [ 44.264921][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.266915][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.274156][ T5934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.294301][ T5932] team0: Port device team_slave_0 added [ 44.303979][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.305978][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.313293][ T5934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.319346][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.321376][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.328714][ T5939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.333625][ T5932] team0: Port device team_slave_1 added [ 44.337350][ T5936] team0: Port device team_slave_0 added [ 44.340597][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.343029][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.352346][ T5939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.375801][ T5936] team0: Port device team_slave_1 added [ 44.427462][ T5932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.430082][ T5932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.439451][ T5932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.446564][ T5934] hsr_slave_0: entered promiscuous mode [ 44.449757][ T5934] hsr_slave_1: entered promiscuous mode [ 44.476047][ T5936] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.478008][ T5936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.485198][ T5936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.488607][ T5932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.491263][ T5932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.498405][ T5932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.509159][ T5939] hsr_slave_0: entered promiscuous mode [ 44.511277][ T5939] hsr_slave_1: entered promiscuous mode [ 44.513336][ T5939] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 44.515725][ T5939] Cannot create hsr debugfs directory [ 44.517680][ T5936] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.520332][ T5936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.529722][ T5936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.595013][ T5936] hsr_slave_0: entered promiscuous mode [ 44.597500][ T5936] hsr_slave_1: entered promiscuous mode [ 44.600032][ T5936] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 44.602810][ T5936] Cannot create hsr debugfs directory [ 44.614453][ T5932] hsr_slave_0: entered promiscuous mode [ 44.616510][ T5932] hsr_slave_1: entered promiscuous mode [ 44.618464][ T5932] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 44.621532][ T5932] Cannot create hsr debugfs directory [ 44.770595][ T5934] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 44.774795][ T5934] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 44.782665][ T5934] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 44.788330][ T5934] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 44.812960][ T5939] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 44.817274][ T5939] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 44.822180][ T5939] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 44.826068][ T5939] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 44.862182][ T5936] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 44.871217][ T5936] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 44.878109][ T5936] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 44.883181][ T5936] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 44.906993][ T5932] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 44.914010][ T5932] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 44.918691][ T5932] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 44.925617][ T5932] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 44.946988][ T5934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.958185][ T5939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.968199][ T5934] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.980712][ T5939] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.987739][ T1177] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.990480][ T1177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.004733][ T5936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.012572][ T1226] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.015231][ T1226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.019946][ T1226] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.022559][ T1226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.028155][ T1226] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.030828][ T1226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.037946][ T5936] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.044726][ T1226] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.046800][ T1226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.055523][ T1226] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.057586][ T1226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.100227][ T5934] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 45.119400][ T5932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.119607][ T39] audit: type=1400 audit(1737044327.003:114): avc: denied { sys_module } for pid=5939 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 45.131937][ T5936] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 45.143224][ T5932] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.151354][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.154022][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.165975][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.168787][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.192004][ T5939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.200889][ T5934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.236771][ T5936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.243516][ T5934] veth0_vlan: entered promiscuous mode [ 45.245545][ T5939] veth0_vlan: entered promiscuous mode [ 45.260101][ T5939] veth1_vlan: entered promiscuous mode [ 45.262402][ T5934] veth1_vlan: entered promiscuous mode [ 45.268646][ T5936] veth0_vlan: entered promiscuous mode [ 45.277686][ T5936] veth1_vlan: entered promiscuous mode [ 45.292004][ T5934] veth0_macvtap: entered promiscuous mode [ 45.301480][ T5934] veth1_macvtap: entered promiscuous mode [ 45.306352][ T5939] veth0_macvtap: entered promiscuous mode [ 45.308631][ T5936] veth0_macvtap: entered promiscuous mode [ 45.311868][ T5932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.316859][ T5939] veth1_macvtap: entered promiscuous mode [ 45.321204][ T5936] veth1_macvtap: entered promiscuous mode [ 45.327849][ T5936] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.331790][ T5934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.335318][ T5934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.338500][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.344943][ T5936] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.351188][ T5934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.354243][ T5934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.357551][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.366957][ T5936] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.370393][ T5936] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.372992][ T5936] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.375454][ T5936] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.382008][ T5934] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.384666][ T5934] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.387529][ T5934] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.390539][ T5934] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.397250][ T5939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.402327][ T5939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.405191][ T5939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.408260][ T5939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.414236][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.425842][ T5939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.429604][ T5939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.432368][ T5939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.435409][ T5939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.439402][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.444310][ T5939] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.446928][ T5939] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.449672][ T5939] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.452342][ T5939] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.484658][ T5932] veth0_vlan: entered promiscuous mode [ 45.510163][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.515333][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.518138][ T5932] veth1_vlan: entered promiscuous mode [ 45.534738][ T1177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.536970][ T1177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.541483][ T233] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.544689][ T233] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.563862][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.565282][ T5932] veth0_macvtap: entered promiscuous mode [ 45.566231][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.571551][ T5932] veth1_macvtap: entered promiscuous mode [ 45.577531][ T1226] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.580043][ T1226] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.586938][ T5932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.591138][ T5932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.594763][ T5932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.598599][ T5932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.603303][ T5932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.607131][ T5932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.607489][ T5936] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 45.612109][ T5932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.630049][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.630528][ T5932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.633442][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.637493][ T5932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.637523][ T5932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.646275][ T5932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.649277][ T5932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.652217][ T5932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.655465][ T5932] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.660878][ T5932] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.663505][ T5932] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.666012][ T5932] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.668477][ T5932] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.669715][ T64] Bluetooth: hci3: command tx timeout [ 45.671891][ T5935] Bluetooth: hci0: command tx timeout [ 45.673274][ T64] Bluetooth: hci1: command tx timeout [ 45.675011][ T5943] Bluetooth: hci2: command tx timeout [ 45.704764][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.707669][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.718646][ T1226] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.722263][ T1226] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.731183][ T5999] syz.2.3 uses obsolete (PF_INET,SOCK_PACKET) [ 45.801882][ T6009] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6'. [ 45.999035][ T5991] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 46.151998][ T5991] usb 6-1: config index 0 descriptor too short (expected 26395, got 27) [ 46.154419][ T5991] usb 6-1: config 130 has 1 interface, different from the descriptor's value: 20 [ 46.157012][ T5991] usb 6-1: config 130 interface 0 has no altsetting 0 [ 46.162557][ T5991] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 46.165135][ T5991] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.167400][ T5991] usb 6-1: Product: syz [ 46.168605][ T5991] usb 6-1: Manufacturer: syz [ 46.170029][ T5991] usb 6-1: SerialNumber: syz [ 46.285307][ T6015] FAULT_INJECTION: forcing a failure. [ 46.285307][ T6015] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 46.289366][ T6015] CPU: 0 UID: 0 PID: 6015 Comm: syz.0.9 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0 [ 46.293354][ T6015] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 46.297419][ T6015] Call Trace: [ 46.298704][ T6015] [ 46.299845][ T6015] dump_stack_lvl+0x16c/0x1f0 [ 46.301715][ T6015] should_fail_ex+0x497/0x5b0 [ 46.303581][ T6015] _copy_from_iter+0x2a1/0x1560 [ 46.305481][ T6015] ? __pfx__copy_from_iter+0x10/0x10 [ 46.307542][ T6015] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 46.309857][ T6015] ? tun_build_skb.constprop.0+0x1b8/0x1120 [ 46.312129][ T6015] ? __pfx_lock_release+0x10/0x10 [ 46.314071][ T6015] ? trace_lock_acquire+0x14e/0x1f0 [ 46.316058][ T6015] ? __pfx_lock_release+0x10/0x10 [ 46.318014][ T6015] copy_page_from_iter+0xa5/0x120 [ 46.319942][ T6015] tun_build_skb.constprop.0+0x294/0x1120 [ 46.322174][ T6015] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 46.324595][ T6015] ? __pfx___lock_acquire+0x10/0x10 [ 46.326616][ T6015] ? register_lock_class+0xb1/0x1240 [ 46.328649][ T6015] ? __lock_acquire+0xcc5/0x3c40 [ 46.330558][ T6015] tun_get_user+0x870/0x3e50 [ 46.332353][ T6015] ? find_held_lock+0x2d/0x110 [ 46.334231][ T6015] ? __pfx_tun_get_user+0x10/0x10 [ 46.336170][ T6015] ? find_held_lock+0x2d/0x110 [ 46.338030][ T6015] ? __pfx_lock_release+0x10/0x10 [ 46.340001][ T6015] tun_chr_write_iter+0xdc/0x210 [ 46.341930][ T6015] vfs_write+0x5ae/0x1150 [ 46.343636][ T6015] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 46.345847][ T6015] ? __pfx_vfs_write+0x10/0x10 [ 46.347731][ T6015] ? __fget_files+0x40/0x3a0 [ 46.349545][ T6015] ksys_write+0x12b/0x250 [ 46.351216][ T6015] ? __pfx_ksys_write+0x10/0x10 [ 46.353085][ T6015] do_syscall_64+0xcd/0x250 [ 46.354848][ T6015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.357115][ T6015] RIP: 0033:0x7f7392d847df [ 46.358843][ T6015] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 46.366196][ T6015] RSP: 002b:00007f7393c13000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 46.369356][ T6015] RAX: ffffffffffffffda RBX: 00007f7392f75fa0 RCX: 00007f7392d847df [ 46.372397][ T6015] RDX: 000000000000003e RSI: 0000000020000040 RDI: 00000000000000c8 [ 46.375392][ T6015] RBP: 00007f7393c13090 R08: 0000000000000000 R09: 0000000000000000 [ 46.378400][ T6015] R10: 000000000000003e R11: 0000000000000293 R12: 0000000000000001 [ 46.381436][ T6015] R13: 0000000000000000 R14: 00007f7392f75fa0 R15: 00007ffcacffb878 [ 46.384527][ T6015] [ 46.803094][ T5991] usblp 6-1:130.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 245 proto 1 vid 0x0525 pid 0xA4A8 [ 46.815146][ T5991] usb 6-1: USB disconnect, device number 2 [ 46.818784][ T5991] usblp0: removed [ 47.391988][ T6033] ======================================================= [ 47.391988][ T6033] WARNING: The mand mount option has been deprecated and [ 47.391988][ T6033] and is ignored by this kernel. Remove the mand [ 47.391988][ T6033] option from the mount to silence this warning. [ 47.391988][ T6033] ======================================================= [ 47.432547][ T6033] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 47.483927][ T6040] ax25_connect(): syz.3.17 uses autobind, please contact jreuter@yaina.de [ 47.750280][ T5943] Bluetooth: hci1: command tx timeout [ 47.750405][ T64] Bluetooth: hci0: command tx timeout [ 47.751755][ T5935] Bluetooth: hci3: command tx timeout [ 47.753312][ T5945] Bluetooth: hci2: command tx timeout [ 47.809101][ T5992] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 47.982926][ T5992] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 47.986950][ T5992] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 47.997426][ T5992] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 48.001456][ T5992] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.005009][ T6046] FAULT_INJECTION: forcing a failure. [ 48.005009][ T6046] name failslab, interval 1, probability 0, space 0, times 0 [ 48.008743][ T6046] CPU: 2 UID: 0 PID: 6046 Comm: syz.2.19 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0 [ 48.011869][ T6046] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 48.014927][ T6046] Call Trace: [ 48.015895][ T6046] [ 48.016770][ T6046] dump_stack_lvl+0x16c/0x1f0 [ 48.018137][ T6046] should_fail_ex+0x497/0x5b0 [ 48.019491][ T6046] ? fs_reclaim_acquire+0xae/0x150 [ 48.020969][ T6046] should_failslab+0xc2/0x120 [ 48.022345][ T6046] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 48.024014][ T6046] ? __alloc_skb+0x2b1/0x380 [ 48.025355][ T6046] __alloc_skb+0x2b1/0x380 [ 48.026654][ T6046] ? __pfx___alloc_skb+0x10/0x10 [ 48.028130][ T6046] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 48.029866][ T6046] netlink_alloc_large_skb+0x69/0x130 [ 48.031447][ T6046] netlink_sendmsg+0x689/0xd70 [ 48.032844][ T6046] ? __pfx_netlink_sendmsg+0x10/0x10 [ 48.034393][ T6046] ____sys_sendmsg+0xaaf/0xc90 [ 48.035797][ T6046] ? copy_msghdr_from_user+0x10b/0x160 [ 48.037405][ T6046] ? __pfx_____sys_sendmsg+0x10/0x10 [ 48.038904][ T6046] ? __lock_acquire+0xcc5/0x3c40 [ 48.040388][ T6046] ___sys_sendmsg+0x135/0x1e0 [ 48.041752][ T6046] ? __pfx____sys_sendmsg+0x10/0x10 [ 48.043232][ T6046] ? trace_lock_acquire+0x14e/0x1f0 [ 48.044703][ T6046] __sys_sendmmsg+0x201/0x420 [ 48.046075][ T6046] ? __pfx___sys_sendmmsg+0x10/0x10 [ 48.047528][ T6046] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 48.049250][ T6046] ? fput+0x67/0x440 [ 48.050398][ T6046] ? ksys_write+0x1ba/0x250 [ 48.051699][ T6046] ? __pfx_ksys_write+0x10/0x10 [ 48.053084][ T6046] __x64_sys_sendmmsg+0x9c/0x100 [ 48.054478][ T6046] ? lockdep_hardirqs_on+0x7c/0x110 [ 48.055965][ T6046] do_syscall_64+0xcd/0x250 [ 48.057269][ T6046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.058343][ T6048] netlink: 28 bytes leftover after parsing attributes in process `syz.1.20'. [ 48.058904][ T6046] RIP: 0033:0x7f7f6b385d29 [ 48.061909][ T6048] netlink: 'syz.1.20': attribute type 7 has an invalid length. [ 48.062923][ T6046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.062934][ T6046] RSP: 002b:00007f7f6c17b038 EFLAGS: 00000246 [ 48.065184][ T6048] netlink: 'syz.1.20': attribute type 8 has an invalid length. [ 48.070682][ T6046] ORIG_RAX: 0000000000000133 [ 48.070689][ T6046] RAX: ffffffffffffffda RBX: 00007f7f6b575fa0 RCX: 00007f7f6b385d29 [ 48.070696][ T6046] RDX: 04000000000001f2 RSI: 0000000020000000 RDI: 0000000000000003 [ 48.070703][ T6046] RBP: 00007f7f6c17b090 R08: 0000000000000000 R09: 0000000000000000 [ 48.070709][ T6046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.070714][ T6046] R13: 0000000000000000 R14: 00007f7f6b575fa0 R15: 00007ffd7a2a6018 [ 48.070726][ T6046] [ 48.073994][ T6042] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 48.074669][ T6048] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20'. [ 48.100193][ T5992] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 48.100474][ T6048] erspan0: entered promiscuous mode [ 48.104816][ T6048] batadv_slave_1: entered promiscuous mode [ 48.107752][ T6048] Zero length message leads to an empty skb [ 48.218260][ T6059] FAULT_INJECTION: forcing a failure. [ 48.218260][ T6059] name failslab, interval 1, probability 0, space 0, times 0 [ 48.222229][ T6059] CPU: 2 UID: 0 PID: 6059 Comm: syz.1.25 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0 [ 48.225218][ T6059] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 48.228268][ T6059] Call Trace: [ 48.229260][ T6059] [ 48.230137][ T6059] dump_stack_lvl+0x16c/0x1f0 [ 48.231519][ T6059] should_fail_ex+0x497/0x5b0 [ 48.232903][ T6059] ? fs_reclaim_acquire+0xae/0x150 [ 48.234394][ T6059] should_failslab+0xc2/0x120 [ 48.235776][ T6059] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 48.237460][ T6059] ? __alloc_skb+0x2b1/0x380 [ 48.239107][ T6059] __alloc_skb+0x2b1/0x380 [ 48.240560][ T6059] ? __pfx___alloc_skb+0x10/0x10 [ 48.242037][ T6059] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 48.243774][ T6059] netlink_alloc_large_skb+0x69/0x130 [ 48.245340][ T6059] netlink_sendmsg+0x689/0xd70 [ 48.246696][ T6059] ? __pfx_netlink_sendmsg+0x10/0x10 [ 48.248200][ T6059] ____sys_sendmsg+0xaaf/0xc90 [ 48.249596][ T6059] ? copy_msghdr_from_user+0x10b/0x160 [ 48.251173][ T6059] ? __pfx_____sys_sendmsg+0x10/0x10 [ 48.252699][ T6059] ___sys_sendmsg+0x135/0x1e0 [ 48.254078][ T6059] ? __pfx____sys_sendmsg+0x10/0x10 [ 48.255618][ T6059] ? __pfx_lock_release+0x10/0x10 [ 48.257112][ T6059] ? trace_lock_acquire+0x14e/0x1f0 [ 48.258651][ T6059] ? __fget_files+0x206/0x3a0 [ 48.260034][ T6059] __sys_sendmsg+0x16e/0x220 [ 48.261441][ T6059] ? __pfx___sys_sendmsg+0x10/0x10 [ 48.262945][ T6059] do_syscall_64+0xcd/0x250 [ 48.264268][ T6059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.265979][ T6059] RIP: 0033:0x7f1233d85d29 [ 48.267255][ T6059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.272740][ T6059] RSP: 002b:00007f1234ad4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 48.275102][ T6059] RAX: ffffffffffffffda RBX: 00007f1233f75fa0 RCX: 00007f1233d85d29 [ 48.277394][ T6059] RDX: 0000000000040000 RSI: 0000000020000100 RDI: 0000000000000003 [ 48.279661][ T6059] RBP: 00007f1234ad4090 R08: 0000000000000000 R09: 0000000000000000 [ 48.281966][ T6059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.284246][ T6059] R13: 0000000000000000 R14: 00007f1233f75fa0 R15: 00007ffc6a9e6b78 [ 48.286536][ T6059] [ 48.297287][ T5972] usb 8-1: USB disconnect, device number 2 [ 48.369153][ T35] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 48.433682][ T39] kauditd_printk_skb: 84 callbacks suppressed [ 48.433697][ T39] audit: type=1400 audit(1737044330.313:199): avc: denied { create } for pid=6062 comm="syz.1.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 48.443818][ T39] audit: type=1400 audit(1737044330.313:200): avc: denied { setopt } for pid=6062 comm="syz.1.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 48.451329][ T39] audit: type=1400 audit(1737044330.323:201): avc: denied { sqpoll } for pid=6062 comm="syz.1.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 48.458682][ T39] audit: type=1400 audit(1737044330.333:202): avc: denied { ioctl } for pid=6062 comm="syz.1.27" path="socket:[8891]" dev="sockfs" ino=8891 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 48.468422][ T39] audit: type=1400 audit(1737044330.333:203): avc: denied { bind } for pid=6062 comm="syz.1.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 48.473861][ T39] audit: type=1400 audit(1737044330.333:204): avc: denied { connect } for pid=6062 comm="syz.1.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 48.499352][ T39] audit: type=1400 audit(1737044330.383:205): avc: denied { append } for pid=6041 comm="syz.3.18" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 48.506350][ T39] audit: type=1400 audit(1737044330.383:206): avc: denied { open } for pid=6041 comm="syz.3.18" path="/dev/ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 48.520745][ T35] usb 7-1: config index 0 descriptor too short (expected 26395, got 27) [ 48.523216][ T35] usb 7-1: config 130 has 1 interface, different from the descriptor's value: 20 [ 48.525896][ T35] usb 7-1: config 130 interface 0 has no altsetting 0 [ 48.529275][ T35] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 48.532025][ T35] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.534367][ T35] usb 7-1: Product: syz [ 48.535598][ T35] usb 7-1: Manufacturer: syz [ 48.536982][ T35] usb 7-1: SerialNumber: syz [ 49.150845][ T35] usblp 7-1:130.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 245 proto 1 vid 0x0525 pid 0xA4A8 [ 49.155369][ T35] usb 7-1: USB disconnect, device number 2 [ 49.159144][ T35] usblp0: removed [ 49.160983][ T5925] udevd[5925]: setting mode of /dev/bus/usb/007/002 to 020664 failed: No such file or directory [ 49.163322][ T39] audit: type=1326 audit(1737044331.043:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6062 comm="syz.1.27" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1233d85d29 code=0x7fc00000 [ 49.164041][ T5925] udevd[5925]: setting owner of /dev/bus/usb/007/002 to uid=0, gid=7 failed: No such file or directory [ 49.327754][ T39] audit: type=1400 audit(1737044331.203:208): avc: denied { read } for pid=6075 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 49.369064][ T5940] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 49.541025][ T5940] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 49.544337][ T5940] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 49.547257][ T5940] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 49.550204][ T5940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.556209][ T6069] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 49.562663][ T5940] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 49.593474][ T6082] FAULT_INJECTION: forcing a failure. [ 49.593474][ T6082] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 49.597207][ T6082] CPU: 1 UID: 0 PID: 6082 Comm: syz.3.31 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0 [ 49.600213][ T6082] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 49.603283][ T6082] Call Trace: [ 49.604250][ T6082] [ 49.605116][ T6082] dump_stack_lvl+0x16c/0x1f0 [ 49.606514][ T6082] should_fail_ex+0x497/0x5b0 [ 49.607885][ T6082] _copy_from_iter+0x2a1/0x1560 [ 49.609304][ T6082] ? register_lock_class+0xb1/0x1240 [ 49.610851][ T6082] ? __pfx__copy_from_iter+0x10/0x10 [ 49.612378][ T6082] ? __lock_acquire+0xcc5/0x3c40 [ 49.613822][ T6082] ? hlock_class+0x4e/0x130 [ 49.615144][ T6082] ? __lock_acquire+0xcc5/0x3c40 [ 49.616601][ T6082] tun_get_user+0x34e/0x3e50 [ 49.618026][ T6082] ? find_held_lock+0x2d/0x110 [ 49.619474][ T6082] ? __pfx_tun_get_user+0x10/0x10 [ 49.620936][ T6082] ? find_held_lock+0x2d/0x110 [ 49.622343][ T6082] ? __pfx_lock_release+0x10/0x10 [ 49.623812][ T6082] tun_chr_write_iter+0xdc/0x210 [ 49.625264][ T6082] vfs_write+0x5ae/0x1150 [ 49.626528][ T6082] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 49.628139][ T6082] ? __pfx_vfs_write+0x10/0x10 [ 49.629539][ T6082] ? __fget_files+0x40/0x3a0 [ 49.630896][ T6082] ksys_write+0x12b/0x250 [ 49.632174][ T6082] ? __pfx_ksys_write+0x10/0x10 [ 49.633632][ T6082] do_syscall_64+0xcd/0x250 [ 49.634960][ T6082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.636663][ T6082] RIP: 0033:0x7fc3ccb85d29 [ 49.637968][ T6082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.643514][ T6082] RSP: 002b:00007fc3cd9e4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 49.645909][ T6082] RAX: ffffffffffffffda RBX: 00007fc3ccd75fa0 RCX: 00007fc3ccb85d29 [ 49.648175][ T6082] RDX: 0000000000000fce RSI: 00000000200007c0 RDI: 0000000000000003 [ 49.650466][ T6082] RBP: 00007fc3cd9e4090 R08: 0000000000000000 R09: 0000000000000000 [ 49.652749][ T6082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.655033][ T6082] R13: 0000000000000000 R14: 00007fc3ccd75fa0 R15: 00007ffc14a49c18 [ 49.657307][ T6082] [ 49.762230][ T5992] usb 5-1: USB disconnect, device number 2 [ 49.839152][ T5945] Bluetooth: hci0: command tx timeout [ 49.839408][ T64] Bluetooth: hci2: command tx timeout [ 49.839668][ T5943] Bluetooth: hci1: command tx timeout [ 49.839691][ T5943] Bluetooth: hci3: command tx timeout [ 50.019072][ T30] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 50.029056][ T35] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 50.170465][ T30] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 50.173733][ T30] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 50.176288][ T30] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 50.179931][ T30] usb 8-1: config 0 interface 0 has no altsetting 0 [ 50.182699][ T30] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 50.185365][ T30] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 50.188484][ T30] usb 8-1: config 0 interface 0 has no altsetting 0 [ 50.192077][ T30] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 50.194803][ T30] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 50.197996][ T30] usb 8-1: config 0 interface 0 has no altsetting 0 [ 50.200975][ T30] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 50.203649][ T30] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 50.206736][ T30] usb 8-1: config 0 interface 0 has no altsetting 0 [ 50.209567][ T35] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 50.209804][ T30] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 50.212578][ T35] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 50.214769][ T30] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 50.217211][ T35] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 50.220468][ T30] usb 8-1: config 0 interface 0 has no altsetting 0 [ 50.223501][ T35] usb 7-1: config 0 interface 0 has no altsetting 0 [ 50.227199][ T30] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 50.227217][ T30] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 50.231872][ T35] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 50.233301][ T30] usb 8-1: config 0 interface 0 has no altsetting 0 [ 50.235766][ T35] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 50.235781][ T35] usb 7-1: config 0 interface 0 has no altsetting 0 [ 50.238463][ T30] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 50.242316][ T35] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 50.243049][ T30] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 50.245521][ T35] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 50.248151][ T30] usb 8-1: config 0 interface 0 has no altsetting 0 [ 50.251451][ T35] usb 7-1: config 0 interface 0 has no altsetting 0 [ 50.252267][ T35] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 50.255334][ T30] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 50.256510][ T35] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 50.258756][ T30] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 50.261106][ T35] usb 7-1: config 0 interface 0 has no altsetting 0 [ 50.263565][ T30] usb 8-1: config 0 interface 0 has no altsetting 0 [ 50.267354][ T35] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 50.271423][ T30] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 50.271742][ T35] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 50.273767][ T30] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 50.276179][ T35] usb 7-1: config 0 interface 0 has no altsetting 0 [ 50.278796][ T30] usb 8-1: Product: syz [ 50.283018][ T35] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 50.284356][ T30] usb 8-1: Manufacturer: syz [ 50.286250][ T35] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 50.287443][ T30] usb 8-1: SerialNumber: syz [ 50.290261][ T35] usb 7-1: config 0 interface 0 has no altsetting 0 [ 50.292705][ T30] usb 8-1: config 0 descriptor?? [ 50.296155][ T35] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 50.300862][ T30] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 50.302160][ T35] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 50.302175][ T35] usb 7-1: config 0 interface 0 has no altsetting 0 [ 50.310869][ T35] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 50.313379][ T35] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 50.316464][ T35] usb 7-1: config 0 interface 0 has no altsetting 0 [ 50.319996][ T35] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 50.322596][ T35] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 50.324980][ T35] usb 7-1: Product: syz [ 50.326197][ T35] usb 7-1: Manufacturer: syz [ 50.327467][ T35] usb 7-1: SerialNumber: syz [ 50.330352][ T35] usb 7-1: config 0 descriptor?? [ 50.334460][ T35] yurex 7-1:0.0: USB YUREX device now attached to Yurex #1 [ 50.506244][ T6101] FAULT_INJECTION: forcing a failure. [ 50.506244][ T6101] name failslab, interval 1, probability 0, space 0, times 0 [ 50.518346][ T6101] CPU: 0 UID: 0 PID: 6101 Comm: syz.0.41 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0 [ 50.522500][ T6101] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 50.526751][ T6101] Call Trace: [ 50.528075][ T6101] [ 50.529323][ T6101] dump_stack_lvl+0x16c/0x1f0 [ 50.531075][ T6101] should_fail_ex+0x497/0x5b0 [ 50.532597][ T6101] ? fs_reclaim_acquire+0xae/0x150 [ 50.534686][ T6101] should_failslab+0xc2/0x120 [ 50.536943][ T6101] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 50.539391][ T6101] ? __pfx_mark_lock+0x10/0x10 [ 50.541364][ T6101] ? __alloc_skb+0x2b1/0x380 [ 50.543269][ T6101] __alloc_skb+0x2b1/0x380 [ 50.544779][ T6101] ? __pfx___alloc_skb+0x10/0x10 [ 50.546535][ T6101] ? hlock_class+0x4e/0x130 [ 50.547879][ T6101] tcp_stream_alloc_skb+0x34/0x570 [ 50.549372][ T6101] tcp_sendmsg_locked+0xed5/0x3770 [ 50.550977][ T6101] ? mark_lock+0xb5/0xc60 [ 50.552590][ T6101] ? __pfx_avc_has_perm+0x10/0x10 [ 50.554675][ T6101] ? lock_acquire+0x2f/0xb0 [ 50.556567][ T6101] ? __pfx_mark_lock+0x10/0x10 [ 50.558539][ T6101] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 50.560813][ T6101] ? tcp_sendmsg+0x20/0x50 [ 50.562729][ T6101] ? mark_held_locks+0x9f/0xe0 [ 50.564667][ T6101] ? __local_bh_enable_ip+0xa4/0x120 [ 50.566804][ T6101] tcp_sendmsg+0x2e/0x50 [ 50.568544][ T6101] ? __pfx_tcp_sendmsg+0x10/0x10 [ 50.570585][ T6101] inet6_sendmsg+0xb9/0x140 [ 50.572441][ T6101] sock_write_iter+0x3e8/0x5b0 [ 50.574425][ T6101] ? __pfx_sock_write_iter+0x10/0x10 [ 50.576602][ T6101] ? bpf_lsm_file_permission+0x9/0x10 [ 50.578785][ T6101] ? security_file_permission+0x71/0x210 [ 50.581130][ T6101] vfs_write+0x5ae/0x1150 [ 50.582752][ T6101] ? __pfx_sock_write_iter+0x10/0x10 [ 50.584261][ T6101] ? __pfx_vfs_write+0x10/0x10 [ 50.585686][ T6101] ? __fget_files+0x40/0x3a0 [ 50.587082][ T6101] ksys_write+0x207/0x250 [ 50.588352][ T6101] ? __pfx_ksys_write+0x10/0x10 [ 50.589794][ T6101] do_syscall_64+0xcd/0x250 [ 50.591480][ T6101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.593798][ T6101] RIP: 0033:0x7f7392d85d29 [ 50.595578][ T6101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.601555][ T6101] RSP: 002b:00007f7393c13038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 50.604780][ T6101] RAX: ffffffffffffffda RBX: 00007f7392f75fa0 RCX: 00007f7392d85d29 [ 50.607189][ T6101] RDX: 00000000fffffd9d RSI: 0000000020000200 RDI: 0000000000000003 [ 50.609362][ T6101] RBP: 00007f7393c13090 R08: 0000000000000000 R09: 0000000000000000 [ 50.611517][ T6101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.613787][ T6101] R13: 0000000000000000 R14: 00007f7392f75fa0 R15: 00007ffcacffb878 [ 50.615976][ T6101] [ 50.646631][ T30] usb 7-1: USB disconnect, device number 3 [ 50.669649][ C1] usb 8-1: yurex_control_callback - control failed: -71 [ 50.670105][ T9] usb 8-1: USB disconnect, device number 3 [ 50.673621][ T6103] yurex 8-1:0.0: yurex_write - failed to send bulk msg, error -19 [ 50.673693][ T30] yurex 7-1:0.0: USB YUREX #1 now disconnected [ 50.674190][ T9] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 50.676466][ T6103] FAULT_INJECTION: forcing a failure. [ 50.676466][ T6103] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 50.683273][ T6103] CPU: 0 UID: 0 PID: 6103 Comm: syz.3.38 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0 [ 50.686313][ T6103] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 50.689407][ T6103] Call Trace: [ 50.690401][ T6103] [ 50.691268][ T6103] dump_stack_lvl+0x16c/0x1f0 [ 50.692670][ T6103] should_fail_ex+0x497/0x5b0 [ 50.694062][ T6103] _copy_to_user+0x32/0xd0 [ 50.695364][ T6103] simple_read_from_buffer+0xd0/0x160 [ 50.696923][ T6103] proc_fail_nth_read+0x198/0x270 [ 50.698388][ T6103] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 50.699973][ T6103] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 50.701562][ T6103] vfs_read+0x1df/0xbe0 [ 50.702809][ T6103] ? __fget_files+0x1fc/0x3a0 [ 50.704179][ T6103] ? __pfx___mutex_lock+0x10/0x10 [ 50.705573][ T6103] ? __pfx_vfs_read+0x10/0x10 [ 50.706945][ T6103] ? __fget_files+0x206/0x3a0 [ 50.708260][ T6103] ksys_read+0x12b/0x250 [ 50.709412][ T6103] ? __pfx_ksys_read+0x10/0x10 [ 50.710813][ T6103] do_syscall_64+0xcd/0x250 [ 50.712060][ T6103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.713747][ T6103] RIP: 0033:0x7fc3ccb8473c [ 50.715042][ T6103] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 50.720568][ T6103] RSP: 002b:00007fc3cd9c3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 50.722991][ T6103] RAX: ffffffffffffffda RBX: 00007fc3ccd76080 RCX: 00007fc3ccb8473c [ 50.725209][ T6103] RDX: 000000000000000f RSI: 00007fc3cd9c30a0 RDI: 0000000000000006 [ 50.727433][ T6103] RBP: 00007fc3cd9c3090 R08: 0000000000000000 R09: 0000000000000000 [ 50.729702][ T6103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.731991][ T6103] R13: 0000000000000001 R14: 00007fc3ccd76080 R15: 00007ffc14a49c18 [ 50.734386][ T6103] [ 50.760654][ T6108] tty tty1: ldisc open failed (-12), clearing slot 0 [ 51.299016][ T5992] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 51.395503][ T6117] process 'syz.2.45' launched './file0' with NULL argv: empty string added [ 51.465343][ T6125] FAULT_INJECTION: forcing a failure. [ 51.465343][ T6125] name failslab, interval 1, probability 0, space 0, times 0 [ 51.469602][ T5992] usb 6-1: Using ep0 maxpacket: 32 [ 51.472689][ T6125] CPU: 2 UID: 0 PID: 6125 Comm: syz.2.47 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0 [ 51.475658][ T6125] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 51.478707][ T6125] Call Trace: [ 51.479678][ T6125] [ 51.480540][ T6125] dump_stack_lvl+0x16c/0x1f0 [ 51.481895][ T6125] should_fail_ex+0x497/0x5b0 [ 51.483240][ T6125] ? fs_reclaim_acquire+0xae/0x150 [ 51.484698][ T6125] should_failslab+0xc2/0x120 [ 51.486060][ T6125] __kmalloc_noprof+0xcb/0x510 [ 51.487431][ T6125] ? d_absolute_path+0x137/0x1b0 [ 51.488857][ T6125] ? rcu_is_watching+0x12/0xc0 [ 51.490256][ T6125] tomoyo_encode2+0x100/0x3e0 [ 51.491605][ T6125] tomoyo_encode+0x29/0x50 [ 51.492880][ T6125] tomoyo_realpath_from_path+0x19d/0x720 [ 51.494479][ T6125] tomoyo_path_number_perm+0x248/0x590 [ 51.496018][ T6125] ? tomoyo_path_number_perm+0x235/0x590 [ 51.497620][ T6125] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 51.499359][ T6125] ? __pfx_lock_release+0x10/0x10 [ 51.500820][ T6125] ? trace_lock_acquire+0x14e/0x1f0 [ 51.502340][ T6125] ? lock_acquire+0x2f/0xb0 [ 51.503743][ T6125] ? __fget_files+0x40/0x3a0 [ 51.505241][ T6125] ? __fget_files+0x206/0x3a0 [ 51.506621][ T6125] security_file_ioctl+0x9b/0x240 [ 51.508075][ T6125] __x64_sys_ioctl+0xb7/0x200 [ 51.509460][ T6125] do_syscall_64+0xcd/0x250 [ 51.510771][ T6125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.512474][ T6125] RIP: 0033:0x7f7f6b385d29 [ 51.513765][ T6125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.519226][ T6125] RSP: 002b:00007f7f6c17b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 51.521623][ T6125] RAX: ffffffffffffffda RBX: 00007f7f6b575fa0 RCX: 00007f7f6b385d29 [ 51.523851][ T6125] RDX: 0000000020000180 RSI: 00000000000007a9 RDI: 0000000000000003 [ 51.526083][ T6125] RBP: 00007f7f6c17b090 R08: 0000000000000000 R09: 0000000000000000 [ 51.528321][ T6125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.530605][ T6125] R13: 0000000000000000 R14: 00007f7f6b575fa0 R15: 00007ffd7a2a6018 [ 51.532839][ T6125] [ 51.534357][ T6125] ERROR: Out of memory at tomoyo_realpath_from_path. [ 51.536279][ T5992] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 51.541436][ T5992] usb 6-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 51.544040][ T5992] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.546364][ T5992] usb 6-1: Product: syz [ 51.547550][ T5992] usb 6-1: Manufacturer: syz [ 51.548888][ T5992] usb 6-1: SerialNumber: syz [ 51.551580][ T5992] usb 6-1: config 0 descriptor?? [ 51.553847][ T6114] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 51.556329][ T5992] hub 6-1:0.0: bad descriptor, ignoring hub [ 51.558087][ T5992] hub 6-1:0.0: probe with driver hub failed with error -5 [ 51.565982][ T5992] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input5 [ 51.748497][ T6139] FAULT_INJECTION: forcing a failure. [ 51.748497][ T6139] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 51.752543][ T6139] CPU: 3 UID: 0 PID: 6139 Comm: syz.3.52 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0 [ 51.755824][ T6139] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 51.759287][ T1177] af_packet: tpacket_rcv: packet too big, clamped from 60 to 4294967272. macoff=96 [ 51.759473][ T6139] Call Trace: [ 51.759480][ T6139] [ 51.759484][ T6139] dump_stack_lvl+0x16c/0x1f0 [ 51.765564][ T6139] should_fail_ex+0x497/0x5b0 [ 51.767104][ T6139] _copy_from_iter+0x2a1/0x1560 [ 51.768554][ T6139] ? __pfx__copy_from_iter+0x10/0x10 [ 51.770553][ T6139] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 51.772354][ T6139] ? tun_build_skb.constprop.0+0x1b8/0x1120 [ 51.774210][ T6139] ? __pfx_lock_release+0x10/0x10 [ 51.776084][ T6139] ? trace_lock_acquire+0x14e/0x1f0 [ 51.778031][ T6139] ? __pfx_lock_release+0x10/0x10 [ 51.779915][ T6139] copy_page_from_iter+0xa5/0x120 [ 51.781679][ T6139] tun_build_skb.constprop.0+0x294/0x1120 [ 51.783338][ T6139] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 51.785107][ T6139] ? __pfx___lock_acquire+0x10/0x10 [ 51.786643][ T6139] ? register_lock_class+0xb1/0x1240 [ 51.788181][ T6139] ? __lock_acquire+0xcc5/0x3c40 [ 51.789628][ T6139] tun_get_user+0x870/0x3e50 [ 51.791018][ T6139] ? find_held_lock+0x2d/0x110 [ 51.792402][ T6139] ? __pfx_tun_get_user+0x10/0x10 [ 51.793860][ T6139] ? find_held_lock+0x2d/0x110 [ 51.795242][ T6139] ? __pfx_lock_release+0x10/0x10 [ 51.796704][ T6139] tun_chr_write_iter+0xdc/0x210 [ 51.798161][ T6139] vfs_write+0x5ae/0x1150 [ 51.799438][ T6139] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 51.801068][ T6139] ? __pfx_vfs_write+0x10/0x10 [ 51.802493][ T6139] ? __fget_files+0x40/0x3a0 [ 51.803845][ T6139] ksys_write+0x12b/0x250 [ 51.805098][ T6139] ? __pfx_ksys_write+0x10/0x10 [ 51.806517][ T6139] do_syscall_64+0xcd/0x250 [ 51.807874][ T6139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.809623][ T6139] RIP: 0033:0x7fc3ccb847df [ 51.811080][ T6139] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 51.816569][ T6139] RSP: 002b:00007fc3cd9e4000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 51.818965][ T6139] RAX: ffffffffffffffda RBX: 00007fc3ccd75fa0 RCX: 00007fc3ccb847df [ 51.821349][ T6139] RDX: 000000000000007e RSI: 00000000200000c0 RDI: 00000000000000c8 [ 51.823672][ T6139] RBP: 00007fc3cd9e4090 R08: 0000000000000000 R09: 0000000000000000 [ 51.825946][ T6139] R10: 000000000000007e R11: 0000000000000293 R12: 0000000000000001 [ 51.828248][ T6139] R13: 0000000000000000 R14: 00007fc3ccd75fa0 R15: 00007ffc14a49c18 [ 51.829053][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 51.830524][ T6139] [ 51.837706][ T35] usb 6-1: USB disconnect, device number 3 [ 51.837800][ C2] usbtouchscreen 6-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 51.909082][ T64] Bluetooth: hci0: command tx timeout [ 51.909307][ T5945] Bluetooth: hci2: command tx timeout [ 51.909387][ T5935] Bluetooth: hci3: command tx timeout [ 51.909586][ T5945] Bluetooth: hci1: command tx timeout [ 51.980334][ T9] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 51.983684][ T9] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 51.986616][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 51.989557][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.993539][ T6131] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 51.998563][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 52.003038][ T6148] /dev/nullb0: Can't open blockdev [ 52.198857][ T9] usb 5-1: USB disconnect, device number 3 [ 52.289021][ T56] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 52.441150][ T56] usb 8-1: config index 0 descriptor too short (expected 26395, got 27) [ 52.444201][ T56] usb 8-1: config 130 has 1 interface, different from the descriptor's value: 20 [ 52.447235][ T56] usb 8-1: config 130 interface 0 has no altsetting 0 [ 52.452638][ T56] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 52.455637][ T56] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.458108][ T56] usb 8-1: Product: syz [ 52.459788][ T6155] FAULT_INJECTION: forcing a failure. [ 52.459788][ T6155] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 52.460192][ T56] usb 8-1: Manufacturer: syz [ 52.463631][ T6155] CPU: 2 UID: 0 PID: 6155 Comm: syz.2.58 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0 [ 52.465343][ T56] usb 8-1: SerialNumber: syz [ 52.468293][ T6155] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 52.468302][ T6155] Call Trace: [ 52.473806][ T6155] [ 52.474667][ T6155] dump_stack_lvl+0x16c/0x1f0 [ 52.476038][ T6155] should_fail_ex+0x497/0x5b0 [ 52.477366][ T6155] strncpy_from_user+0x3b/0x2d0 [ 52.478768][ T6155] getname_flags.part.0+0x8f/0x550 [ 52.480431][ T6155] getname_flags+0x93/0xf0 [ 52.481780][ T6155] user_path_at+0x24/0x60 [ 52.483025][ T6155] __x64_sys_mount+0x1fc/0x320 [ 52.484350][ T6155] ? __pfx___x64_sys_mount+0x10/0x10 [ 52.485831][ T6155] do_syscall_64+0xcd/0x250 [ 52.487134][ T6155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.488831][ T6155] RIP: 0033:0x7f7f6b385d29 [ 52.490134][ T6155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.495533][ T6155] RSP: 002b:00007f7f6c17b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 52.497820][ T6155] RAX: ffffffffffffffda RBX: 00007f7f6b575fa0 RCX: 00007f7f6b385d29 [ 52.500092][ T6155] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000000 [ 52.502375][ T6155] RBP: 00007f7f6c17b090 R08: 0000000000000000 R09: 0000000000000000 [ 52.504626][ T6155] R10: 0000000000210020 R11: 0000000000000246 R12: 0000000000000001 [ 52.506879][ T6155] R13: 0000000000000000 R14: 00007f7f6b575fa0 R15: 00007ffd7a2a6018 [ 52.509137][ T6155] [ 52.538068][ T6158] hsr0: entered allmulticast mode [ 52.539974][ T6158] hsr_slave_0: entered allmulticast mode [ 52.541657][ T6158] hsr_slave_1: entered allmulticast mode [ 52.544228][ T6158] hsr_slave_0: left promiscuous mode [ 52.546143][ T6158] hsr_slave_1: left promiscuous mode [ 52.554205][ T6158] hsr0 (unregistering): left allmulticast mode [ 52.699060][ T35] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 52.748188][ T6167] FAULT_INJECTION: forcing a failure. [ 52.748188][ T6167] name failslab, interval 1, probability 0, space 0, times 0 [ 52.751916][ T6167] CPU: 2 UID: 0 PID: 6167 Comm: syz.2.62 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0 [ 52.755583][ T6167] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 52.758711][ T6167] Call Trace: [ 52.759683][ T6167] [ 52.760565][ T6167] dump_stack_lvl+0x16c/0x1f0 [ 52.761952][ T6167] should_fail_ex+0x497/0x5b0 [ 52.763449][ T6167] ? fs_reclaim_acquire+0xae/0x150 [ 52.765124][ T6167] should_failslab+0xc2/0x120 [ 52.766548][ T6167] __kmalloc_noprof+0xcb/0x510 [ 52.768060][ T6167] ? d_absolute_path+0x137/0x1b0 [ 52.769503][ T6167] ? rcu_is_watching+0x12/0xc0 [ 52.770886][ T6167] tomoyo_encode2+0x100/0x3e0 [ 52.772281][ T6167] tomoyo_encode+0x29/0x50 [ 52.773589][ T6167] tomoyo_realpath_from_path+0x19d/0x720 [ 52.775205][ T6167] tomoyo_path_number_perm+0x248/0x590 [ 52.776767][ T6167] ? tomoyo_path_number_perm+0x235/0x590 [ 52.778391][ T6167] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 52.780269][ T6167] ? __pfx_lock_release+0x10/0x10 [ 52.781740][ T6167] ? trace_lock_acquire+0x14e/0x1f0 [ 52.783355][ T6167] ? lock_acquire+0x2f/0xb0 [ 52.784769][ T6167] ? __fget_files+0x40/0x3a0 [ 52.786119][ T6167] ? __fget_files+0x206/0x3a0 [ 52.787565][ T6167] security_file_ioctl+0x9b/0x240 [ 52.789106][ T6167] __x64_sys_ioctl+0xb7/0x200 [ 52.790509][ T6167] do_syscall_64+0xcd/0x250 [ 52.791827][ T6167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.793566][ T6167] RIP: 0033:0x7f7f6b385d29 [ 52.794848][ T6167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.800365][ T6167] RSP: 002b:00007f7f6c17b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 52.802781][ T6167] RAX: ffffffffffffffda RBX: 00007f7f6b575fa0 RCX: 00007f7f6b385d29 [ 52.805040][ T6167] RDX: 0000000020000000 RSI: 000000004004af61 RDI: 0000000000000003 [ 52.807283][ T6167] RBP: 00007f7f6c17b090 R08: 0000000000000000 R09: 0000000000000000 [ 52.809553][ T6167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.811826][ T6167] R13: 0000000000000000 R14: 00007f7f6b575fa0 R15: 00007ffd7a2a6018 [ 52.814097][ T6167] [ 52.816098][ T6167] ERROR: Out of memory at tomoyo_realpath_from_path. [ 52.849019][ T35] usb 6-1: Using ep0 maxpacket: 32 [ 52.852239][ T35] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 52.856552][ T35] usb 6-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 52.859223][ T35] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.861523][ T35] usb 6-1: Product: syz [ 52.862749][ T35] usb 6-1: Manufacturer: syz [ 52.864101][ T35] usb 6-1: SerialNumber: syz [ 52.866586][ T35] usb 6-1: config 0 descriptor?? [ 52.867528][ T6170] netlink: 'syz.2.63': attribute type 11 has an invalid length. [ 52.868446][ T6156] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 52.874083][ T35] hub 6-1:0.0: bad descriptor, ignoring hub [ 52.875815][ T35] hub 6-1:0.0: probe with driver hub failed with error -5 [ 52.878776][ T35] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input6 [ 53.116493][ T56] usblp 8-1:130.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 245 proto 1 vid 0x0525 pid 0xA4A8 [ 53.124199][ T56] usb 8-1: USB disconnect, device number 4 [ 53.127147][ T56] usblp0: removed [ 53.132973][ T6193] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 53.351111][ T6208] netlink: 'syz.0.70': attribute type 1 has an invalid length. [ 53.399625][ T6210] netlink: 'syz.0.71': attribute type 1 has an invalid length. [ 53.964373][ T6220] FAULT_INJECTION: forcing a failure. [ 53.964373][ T6220] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 53.969047][ T39] kauditd_printk_skb: 49 callbacks suppressed [ 53.969056][ T39] audit: type=1400 audit(1737044335.843:258): avc: denied { read } for pid=6222 comm="syz.2.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 53.972129][ T6220] CPU: 2 UID: 0 PID: 6220 Comm: syz.3.74 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0 [ 53.980531][ T6220] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 53.984633][ T6220] Call Trace: [ 53.985945][ T6220] [ 53.987292][ T6220] dump_stack_lvl+0x16c/0x1f0 [ 53.989151][ T6220] should_fail_ex+0x497/0x5b0 [ 53.991155][ T6220] _copy_to_user+0x32/0xd0 [ 53.992882][ T6220] copy_siginfo_to_user+0x23/0xc0 [ 53.994848][ T6220] x64_setup_rt_frame+0x814/0xcf0 [ 53.996810][ T6220] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 53.998596][ T6220] arch_do_signal_or_restart+0x5e6/0x7e0 [ 54.000216][ T6220] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 54.001999][ T6220] ? __pfx_do_preadv+0x10/0x10 [ 54.003391][ T6220] syscall_exit_to_user_mode+0x150/0x2a0 [ 54.005007][ T6220] do_syscall_64+0xda/0x250 [ 54.006348][ T6220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.008058][ T6220] RIP: 0033:0x7fc3ccb85d27 [ 54.009364][ T6220] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 54.015657][ T6220] RSP: 002b:00007fc3cd9e4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 54.018239][ T6220] RAX: 0000000000000127 RBX: 00007fc3ccd75fa0 RCX: 00007fc3ccb85d29 [ 54.020578][ T6220] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000003 [ 54.022897][ T6220] RBP: 00007fc3cd9e4090 R08: 0000000000000000 R09: 0000000000000000 [ 54.025141][ T6220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.027417][ T6220] R13: 0000000000000000 R14: 00007fc3ccd75fa0 R15: 00007ffc14a49c18 [ 54.029696][ T6220] [ 54.030788][ T39] audit: type=1400 audit(1737044335.913:259): avc: denied { write } for pid=6222 comm="syz.2.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 54.073693][ T6223] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 54.078841][ T6223] kvm: requested 115657 ns i8254 timer period limited to 200000 ns [ 54.209703][ T39] audit: type=1400 audit(1737044336.093:260): avc: denied { read } for pid=6235 comm="syz.3.77" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 54.218265][ T39] audit: type=1400 audit(1737044336.093:261): avc: denied { open } for pid=6235 comm="syz.3.77" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 54.225120][ T39] audit: type=1400 audit(1737044336.093:262): avc: denied { ioctl } for pid=6235 comm="syz.3.77" path="/dev/dri/card1" dev="devtmpfs" ino=636 ioctlcmd=0x64c6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 54.234760][ T39] audit: type=1400 audit(1737044336.093:263): avc: denied { ioctl } for pid=6235 comm="syz.3.77" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=9129 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 54.297850][ T6241] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 54.302498][ T6241] kvm: requested 62857 ns i8254 timer period limited to 200000 ns [ 54.325651][ T6247] mkiss: ax0: crc mode is auto. [ 54.331311][ T39] audit: type=1400 audit(1737044336.213:264): avc: denied { read write } for pid=6246 comm="syz.0.81" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 54.338490][ T39] audit: type=1400 audit(1737044336.213:265): avc: denied { open } for pid=6246 comm="syz.0.81" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 54.345384][ T39] audit: type=1400 audit(1737044336.213:266): avc: denied { listen } for pid=6246 comm="syz.0.81" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 54.353642][ T39] audit: type=1400 audit(1737044336.213:267): avc: denied { setopt } for pid=6246 comm="syz.0.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 55.447649][ T6266] netlink: 4 bytes leftover after parsing attributes in process `syz.2.87'. [ 55.466681][ T35] usb 6-1: USB disconnect, device number 4 [ 55.468466][ C3] usbtouchscreen 6-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 55.478270][ T6268] dccp_flush_write_queue: CCID did not manage to send all packets [ 55.491282][ T6264] netlink: 'syz.3.86': attribute type 10 has an invalid length. [ 55.494433][ T6264] macvlan0: entered allmulticast mode [ 55.497842][ T6264] veth1_vlan: entered allmulticast mode [ 55.503766][ T6264] team0: Port device macvlan0 added [ 55.560836][ T6273] /dev/nullb0: Can't open blockdev [ 56.137368][ C0] Unknown status report in ack skb [ 56.301987][ T6289] bridge0: port 3(syz_tun) entered blocking state [ 56.304195][ T6289] bridge0: port 3(syz_tun) entered disabled state [ 56.306243][ T6289] syz_tun: entered allmulticast mode [ 56.308651][ T6289] syz_tun: entered promiscuous mode [ 56.311106][ T6289] bridge0: port 3(syz_tun) entered blocking state [ 56.313157][ T6289] bridge0: port 3(syz_tun) entered forwarding state [ 56.461795][ T6294] dccp_flush_write_queue: CCID did not manage to send all packets [ 56.777431][ T6299] FAULT_INJECTION: forcing a failure. [ 56.777431][ T6299] name failslab, interval 1, probability 0, space 0, times 0 [ 56.781824][ T6299] CPU: 3 UID: 0 PID: 6299 Comm: syz.3.99 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0 [ 56.785679][ T6299] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 56.789298][ T6299] Call Trace: [ 56.790438][ T6299] [ 56.791443][ T6299] dump_stack_lvl+0x16c/0x1f0 [ 56.793214][ T6299] should_fail_ex+0x497/0x5b0 [ 56.795178][ T6299] ? fs_reclaim_acquire+0xae/0x150 [ 56.797118][ T6299] should_failslab+0xc2/0x120 [ 56.798910][ T6299] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 56.800905][ T6299] ? io_submit_one+0x123/0x1da0 [ 56.802801][ T6299] io_submit_one+0x123/0x1da0 [ 56.804594][ T6299] ? __pfx_io_submit_one+0x10/0x10 [ 56.806525][ T6299] ? __might_fault+0x13b/0x190 [ 56.808392][ T6299] ? lock_acquire+0x2f/0xb0 [ 56.810121][ T6299] ? __might_fault+0xe3/0x190 [ 56.811487][ T6299] ? __x64_sys_io_submit+0x1b2/0x340 [ 56.813115][ T6299] __x64_sys_io_submit+0x1b2/0x340 [ 56.814631][ T6299] ? __pfx___x64_sys_io_submit+0x10/0x10 [ 56.816244][ T6299] do_syscall_64+0xcd/0x250 [ 56.817564][ T6299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.819278][ T6299] RIP: 0033:0x7fc3ccb85d29 [ 56.820745][ T6299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.826335][ T6299] RSP: 002b:00007fc3cd9e4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 56.828677][ T6299] RAX: ffffffffffffffda RBX: 00007fc3ccd75fa0 RCX: 00007fc3ccb85d29 [ 56.830888][ T6299] RDX: 00000000200003c0 RSI: 0000000000000001 RDI: 00007fc3cd9c3000 [ 56.833129][ T6299] RBP: 00007fc3cd9e4090 R08: 0000000000000000 R09: 0000000000000000 [ 56.835293][ T6299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.837512][ T6299] R13: 0000000000000000 R14: 00007fc3ccd75fa0 R15: 00007ffc14a49c18 [ 56.839756][ T6299] [ 56.999478][ T6303] FAULT_INJECTION: forcing a failure. [ 56.999478][ T6303] name failslab, interval 1, probability 0, space 0, times 0 [ 57.003055][ T6303] CPU: 3 UID: 0 PID: 6303 Comm: syz.3.101 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0 [ 57.006035][ T6303] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 57.009035][ T6303] Call Trace: [ 57.009048][ T6303] [ 57.009053][ T6303] dump_stack_lvl+0x16c/0x1f0 [ 57.009070][ T6303] should_fail_ex+0x497/0x5b0 [ 57.009085][ T6303] ? fs_reclaim_acquire+0xae/0x150 [ 57.009096][ T6303] should_failslab+0xc2/0x120 [ 57.009110][ T6303] __kmalloc_noprof+0xcb/0x510 [ 57.009121][ T6303] ? d_absolute_path+0x137/0x1b0 [ 57.009134][ T6303] ? rcu_is_watching+0x12/0xc0 [ 57.009149][ T6303] tomoyo_encode2+0x100/0x3e0 [ 57.009165][ T6303] tomoyo_encode+0x29/0x50 [ 57.009176][ T6303] tomoyo_realpath_from_path+0x19d/0x720 [ 57.009192][ T6303] tomoyo_path_number_perm+0x248/0x590 [ 57.009202][ T6303] ? tomoyo_path_number_perm+0x235/0x590 [ 57.009213][ T6303] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 57.009234][ T6303] ? __pfx_lock_release+0x10/0x10 [ 57.009245][ T6303] ? trace_lock_acquire+0x14e/0x1f0 [ 57.009261][ T6303] ? lock_acquire+0x2f/0xb0 [ 57.009270][ T6303] ? __fget_files+0x40/0x3a0 [ 57.035130][ T6303] ? __fget_files+0x206/0x3a0 [ 57.036479][ T6303] security_file_ioctl+0x9b/0x240 [ 57.037886][ T6303] __x64_sys_ioctl+0xb7/0x200 [ 57.039185][ T6303] do_syscall_64+0xcd/0x250 [ 57.040448][ T6303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.042065][ T6303] RIP: 0033:0x7fc3ccb85d29 [ 57.043294][ T6303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.048469][ T6303] RSP: 002b:00007fc3cd9e4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 57.050865][ T6303] RAX: ffffffffffffffda RBX: 00007fc3ccd75fa0 RCX: 00007fc3ccb85d29 [ 57.053082][ T6303] RDX: 00000000200001c0 RSI: 0000000000001269 RDI: 0000000000000003 [ 57.055193][ T6303] RBP: 00007fc3cd9e4090 R08: 0000000000000000 R09: 0000000000000000 [ 57.057296][ T6303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.059490][ T6303] R13: 0000000000000000 R14: 00007fc3ccd75fa0 R15: 00007ffc14a49c18 [ 57.061698][ T6303] [ 57.063782][ T6303] ERROR: Out of memory at tomoyo_realpath_from_path. [ 57.439065][ T6077] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 57.553877][ T6322] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 57.562927][ T6322] [U] J"—e:ÀÆ" [ 57.577493][ T6326] FAULT_INJECTION: forcing a failure. [ 57.577493][ T6326] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 57.581933][ T6326] CPU: 0 UID: 0 PID: 6326 Comm: syz.2.109 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0 [ 57.584941][ T6326] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 57.587996][ T6326] Call Trace: [ 57.588919][ T6326] [ 57.589755][ T6326] dump_stack_lvl+0x16c/0x1f0 [ 57.591121][ T6326] should_fail_ex+0x497/0x5b0 [ 57.592435][ T6326] ? fs_reclaim_acquire+0xae/0x150 [ 57.593907][ T6326] should_fail_alloc_page+0xe7/0x130 [ 57.595423][ T6326] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 57.597190][ T6326] __alloc_pages_noprof+0x190/0x25b0 [ 57.598676][ T6326] ? copy_splice_read+0x1a8/0xb90 [ 57.600149][ T6326] ? stack_trace_save+0x95/0xd0 [ 57.601530][ T6326] ? __pfx_stack_trace_save+0x10/0x10 [ 57.603043][ T6326] ? stack_depot_save_flags+0x28/0x9c0 [ 57.604631][ T6326] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 57.606185][ T6326] ? copy_splice_read+0x1a8/0xb90 [ 57.607548][ T6326] ? kasan_save_stack+0x33/0x60 [ 57.608911][ T6326] ? __kasan_kmalloc+0xaa/0xb0 [ 57.610234][ T6326] ? __kmalloc_noprof+0x21c/0x510 [ 57.611639][ T6326] ? copy_splice_read+0x1a8/0xb90 [ 57.612995][ T6326] ? do_splice_read+0x282/0x370 [ 57.614382][ T6326] ? splice_direct_to_actor+0x2a4/0xa40 [ 57.615946][ T6326] ? do_splice_direct+0x178/0x250 [ 57.617377][ T6326] ? do_sendfile+0xaed/0xe30 [ 57.618727][ T6326] alloc_pages_bulk_noprof+0x72b/0x10b0 [ 57.620320][ T6326] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 57.622012][ T6326] ? trace_kmalloc+0x2d/0xd0 [ 57.623362][ T6326] ? __kmalloc_noprof+0x23b/0x510 [ 57.624788][ T6326] ? mark_lock+0xb5/0xc60 [ 57.626024][ T6326] copy_splice_read+0x1e3/0xb90 [ 57.627448][ T6326] ? hlock_class+0x4e/0x130 [ 57.628760][ T6326] ? __pfx_copy_splice_read+0x10/0x10 [ 57.630323][ T6326] ? __pfx_copy_splice_read+0x10/0x10 [ 57.631862][ T6326] do_splice_read+0x282/0x370 [ 57.633168][ T6326] splice_direct_to_actor+0x2a4/0xa40 [ 57.634686][ T6326] ? __pfx_direct_splice_actor+0x10/0x10 [ 57.636297][ T6326] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 57.638004][ T6326] ? __pfx___might_resched+0x10/0x10 [ 57.639505][ T6326] do_splice_direct+0x178/0x250 [ 57.640375][ T6077] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 57.640890][ T6326] ? __pfx_do_splice_direct+0x10/0x10 [ 57.643996][ T6077] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 57.645418][ T6326] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 57.645440][ T6326] do_sendfile+0xaed/0xe30 [ 57.648205][ T6077] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 57.649934][ T6326] ? __pfx_do_sendfile+0x10/0x10 [ 57.649951][ T6326] ? __fget_files+0x206/0x3a0 [ 57.649965][ T6326] __x64_sys_sendfile64+0x1da/0x220 [ 57.649977][ T6326] ? ksys_write+0x1ba/0x250 [ 57.649987][ T6326] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 57.650002][ T6326] do_syscall_64+0xcd/0x250 [ 57.651348][ T6077] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.653943][ T6326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.653964][ T6326] RIP: 0033:0x7f7f6b385d29 [ 57.653974][ T6326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.653983][ T6326] RSP: 002b:00007f7f6c17b038 EFLAGS: 00000246 [ 57.657277][ T6313] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 57.658170][ T6326] ORIG_RAX: 0000000000000028 [ 57.661106][ T6077] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 57.682879][ T6326] RAX: ffffffffffffffda RBX: 00007f7f6b575fa0 RCX: 00007f7f6b385d29 [ 57.685832][ T6326] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 57.688851][ T6326] RBP: 00007f7f6c17b090 R08: 0000000000000000 R09: 0000000000000000 [ 57.691217][ T6326] R10: 0000000000000fff R11: 0000000000000246 R12: 0000000000000001 [ 57.693909][ T6326] R13: 0000000000000000 R14: 00007f7f6b575fa0 R15: 00007ffd7a2a6018 [ 57.696678][ T6326] [ 57.749044][ T6330] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 57.864805][ T6077] usb 8-1: USB disconnect, device number 5 [ 58.059522][ T6336] FAULT_INJECTION: forcing a failure. [ 58.059522][ T6336] name failslab, interval 1, probability 0, space 0, times 0 [ 58.063127][ T6336] CPU: 3 UID: 0 PID: 6336 Comm: syz.1.113 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0 [ 58.066151][ T6336] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 58.069258][ T6336] Call Trace: [ 58.070243][ T6336] [ 58.071075][ T6336] dump_stack_lvl+0x16c/0x1f0 [ 58.072599][ T6336] should_fail_ex+0x497/0x5b0 [ 58.074126][ T6336] ? fs_reclaim_acquire+0xae/0x150 [ 58.075685][ T6336] should_failslab+0xc2/0x120 [ 58.077045][ T6336] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 58.078812][ T6336] ? __alloc_skb+0x2b1/0x380 [ 58.080215][ T6336] __alloc_skb+0x2b1/0x380 [ 58.081523][ T6336] ? __pfx___alloc_skb+0x10/0x10 [ 58.083105][ T6336] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 58.085028][ T6336] netlink_alloc_large_skb+0x69/0x130 [ 58.086676][ T6336] netlink_sendmsg+0x689/0xd70 [ 58.088192][ T6336] ? __pfx_netlink_sendmsg+0x10/0x10 [ 58.090067][ T6336] ____sys_sendmsg+0xaaf/0xc90 [ 58.091787][ T6336] ? copy_msghdr_from_user+0x10b/0x160 [ 58.093827][ T6336] ? __pfx_____sys_sendmsg+0x10/0x10 [ 58.095687][ T6336] ___sys_sendmsg+0x135/0x1e0 [ 58.097296][ T6336] ? __pfx____sys_sendmsg+0x10/0x10 [ 58.099147][ T6336] ? __pfx_lock_release+0x10/0x10 [ 58.101049][ T6336] ? trace_lock_acquire+0x14e/0x1f0 [ 58.102974][ T6336] ? __fget_files+0x206/0x3a0 [ 58.104624][ T6336] __sys_sendmsg+0x16e/0x220 [ 58.106219][ T6336] ? __pfx___sys_sendmsg+0x10/0x10 [ 58.108129][ T6336] do_syscall_64+0xcd/0x250 [ 58.109817][ T6336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.111696][ T6336] RIP: 0033:0x7f1233d85d29 [ 58.113146][ T6336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.119662][ T6336] RSP: 002b:00007f1234ad4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 58.122719][ T6336] RAX: ffffffffffffffda RBX: 00007f1233f75fa0 RCX: 00007f1233d85d29 [ 58.125768][ T6336] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 58.128659][ T6336] RBP: 00007f1234ad4090 R08: 0000000000000000 R09: 0000000000000000 [ 58.131469][ T6336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.133774][ T6336] R13: 0000000000000000 R14: 00007f1233f75fa0 R15: 00007ffc6a9e6b78 [ 58.136023][ T6336] [ 58.216003][ T6349] tipc: Started in network mode [ 58.217589][ T6349] tipc: Node identity 4, cluster identity 4711 [ 58.225865][ T6349] tipc: Node number set to 4 [ 58.275478][ T6351] kvm: pic: non byte read [ 58.277698][ T6351] kvm: pic: non byte read [ 58.280766][ T6351] kvm: pic: single mode not supported [ 58.281066][ T6351] kvm: pic: non byte read [ 58.284657][ T6351] kvm: pic: level sensitive irq not supported [ 58.284886][ T6351] kvm: pic: non byte read [ 58.288776][ T6351] kvm: pic: non byte read [ 58.291713][ T6351] kvm: pic: non byte read [ 58.294291][ T6351] kvm: pic: non byte read [ 58.296129][ T6351] kvm: pic: single mode not supported [ 58.296138][ T6351] kvm: pic: level sensitive irq not supported [ 58.298032][ T6351] kvm: pic: non byte read [ 58.302122][ T6351] kvm: pic: single mode not supported [ 58.302130][ T6351] kvm: pic: level sensitive irq not supported [ 58.303914][ T6351] kvm: pic: non byte read [ 58.478205][ T30] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 58.480589][ T30] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 58.482854][ T30] hid-generic 0000:0000:0000.0002: unknown main item tag 0x7 [ 58.485039][ T30] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 58.487243][ T30] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 58.490249][ T30] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 58.491003][ T6359] FAULT_INJECTION: forcing a failure. [ 58.491003][ T6359] name failslab, interval 1, probability 0, space 0, times 0 [ 58.492422][ T30] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 58.495979][ T6359] CPU: 2 UID: 0 PID: 6359 Comm: syz.0.122 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0 [ 58.495995][ T6359] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 58.496001][ T6359] Call Trace: [ 58.496005][ T6359] [ 58.496009][ T6359] dump_stack_lvl+0x16c/0x1f0 [ 58.498212][ T30] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 58.501298][ T6359] should_fail_ex+0x497/0x5b0 [ 58.501317][ T6359] ? fs_reclaim_acquire+0xae/0x150 [ 58.501330][ T6359] should_failslab+0xc2/0x120 [ 58.501347][ T6359] __kmalloc_noprof+0xcb/0x510 [ 58.501360][ T6359] ? rcu_is_watching+0x12/0xc0 [ 58.501392][ T6359] tomoyo_encode2+0x100/0x3e0 [ 58.501408][ T6359] tomoyo_encode+0x29/0x50 [ 58.501419][ T6359] tomoyo_realpath_from_path+0x19d/0x720 [ 58.501432][ T6359] ? tomoyo_path_number_perm+0x235/0x590 [ 58.501444][ T6359] tomoyo_path_number_perm+0x248/0x590 [ 58.501454][ T6359] ? tomoyo_path_number_perm+0x235/0x590 [ 58.501466][ T6359] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 58.501487][ T6359] ? __pfx_lock_release+0x10/0x10 [ 58.501497][ T6359] ? trace_lock_acquire+0x14e/0x1f0 [ 58.501512][ T6359] ? lock_acquire+0x2f/0xb0 [ 58.501522][ T6359] ? __fget_files+0x40/0x3a0 [ 58.501534][ T6359] ? __fget_files+0x206/0x3a0 [ 58.501546][ T6359] security_file_ioctl+0x9b/0x240 [ 58.501559][ T6359] __x64_sys_ioctl+0xb7/0x200 [ 58.501574][ T6359] do_syscall_64+0xcd/0x250 [ 58.501589][ T6359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.501603][ T6359] RIP: 0033:0x7f7392d85d29 [ 58.501612][ T6359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.501621][ T6359] RSP: 002b:00007f7393c13038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 58.501632][ T6359] RAX: ffffffffffffffda RBX: 00007f7392f75fa0 RCX: 00007f7392d85d29 [ 58.501638][ T6359] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 58.501644][ T6359] RBP: 00007f7393c13090 R08: 0000000000000000 R09: 0000000000000000 [ 58.501650][ T6359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.501656][ T6359] R13: 0000000000000000 R14: 00007f7392f75fa0 R15: 00007ffcacffb878 [ 58.501668][ T6359] [ 58.501781][ T6359] ERROR: Out of memory at tomoyo_realpath_from_path. [ 58.505027][ T30] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 58.507543][ T6359] kvm: pic: non byte read [ 58.508179][ T30] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 58.511868][ T6359] kvm: pic: single mode not supported [ 58.512381][ T30] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 58.514315][ T6359] kvm: pic: level sensitive irq not supported [ 58.514981][ T30] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 58.519304][ T6359] kvm: pic: single mode not supported [ 58.520555][ T30] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 58.522164][ T6359] kvm: pic: level sensitive irq not supported [ 58.523131][ T6359] kvm: pic: single mode not supported [ 58.523820][ T30] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 58.525449][ T6359] kvm: pic: level sensitive irq not supported [ 58.588455][ T30] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 58.592448][ T30] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 58.598275][ T30] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [syz0] on syz0 [ 58.598796][ T6367] netlink: 4 bytes leftover after parsing attributes in process `syz.3.124'. [ 58.709189][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 58.837463][ T6382] FAULT_INJECTION: forcing a failure. [ 58.837463][ T6382] name failslab, interval 1, probability 0, space 0, times 0 [ 58.843291][ T6382] CPU: 2 UID: 0 PID: 6382 Comm: syz.0.130 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0 [ 58.846513][ T6382] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 58.849760][ T6382] Call Trace: [ 58.850770][ T6382] [ 58.851669][ T6382] dump_stack_lvl+0x16c/0x1f0 [ 58.853104][ T6382] should_fail_ex+0x497/0x5b0 [ 58.854527][ T6382] ? fs_reclaim_acquire+0xae/0x150 [ 58.856062][ T6382] should_failslab+0xc2/0x120 [ 58.857471][ T6382] __kmalloc_noprof+0xcb/0x510 [ 58.858886][ T6382] ? rcu_is_watching+0x12/0xc0 [ 58.860330][ T6382] tomoyo_encode2+0x100/0x3e0 [ 58.860798][ T9] usb 6-1: config 0 has no interfaces? [ 58.861764][ T6382] tomoyo_encode+0x29/0x50 [ 58.861779][ T6382] tomoyo_realpath_from_path+0x19d/0x720 [ 58.861793][ T6382] ? tomoyo_path_number_perm+0x235/0x590 [ 58.863411][ T9] usb 6-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 58.864729][ T6382] tomoyo_path_number_perm+0x248/0x590 [ 58.864748][ T6382] ? tomoyo_path_number_perm+0x235/0x590 [ 58.866540][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.868016][ T6382] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 58.868045][ T6382] ? __pfx_lock_release+0x10/0x10 [ 58.876922][ T9] usb 6-1: config 0 descriptor?? [ 58.878253][ T6382] ? trace_lock_acquire+0x14e/0x1f0 [ 58.883180][ T6382] ? lock_acquire+0x2f/0xb0 [ 58.884618][ T6382] ? __fget_files+0x40/0x3a0 [ 58.886026][ T6382] ? __fget_files+0x206/0x3a0 [ 58.887450][ T6382] security_file_ioctl+0x9b/0x240 [ 58.888938][ T6382] __x64_sys_ioctl+0xb7/0x200 [ 58.890610][ T6382] do_syscall_64+0xcd/0x250 [ 58.891959][ T6382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.893773][ T6382] RIP: 0033:0x7f7392d85d29 [ 58.895083][ T6382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.900870][ T6382] RSP: 002b:00007f7393c13038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 58.903669][ T6382] RAX: ffffffffffffffda RBX: 00007f7392f75fa0 RCX: 00007f7392d85d29 [ 58.906020][ T6382] RDX: 0000000020000640 RSI: 000000000000890b RDI: 0000000000000006 [ 58.908344][ T6382] RBP: 00007f7393c13090 R08: 0000000000000000 R09: 0000000000000000 [ 58.910690][ T6382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.913165][ T6382] R13: 0000000000000000 R14: 00007f7392f75fa0 R15: 00007ffcacffb878 [ 58.915508][ T6382] [ 58.917244][ T6382] ERROR: Out of memory at tomoyo_realpath_from_path. [ 59.082656][ T39] kauditd_printk_skb: 32 callbacks suppressed [ 59.082672][ T39] audit: type=1400 audit(1737044340.963:300): avc: denied { create } for pid=6389 comm="syz.0.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 59.092938][ T39] audit: type=1400 audit(1737044340.963:301): avc: denied { write } for pid=6389 comm="syz.0.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 59.100126][ T39] audit: type=1400 audit(1737044340.963:302): avc: denied { nlmsg_read } for pid=6389 comm="syz.0.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 59.139292][ T30] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 59.194071][ T5991] usb 6-1: USB disconnect, device number 5 [ 59.290775][ T30] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 59.293988][ T30] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 59.296865][ T30] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 59.299594][ T30] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.303293][ T6386] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 59.307319][ T30] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 59.509488][ T35] usb 7-1: USB disconnect, device number 4 [ 59.516113][ T6406] FAULT_INJECTION: forcing a failure. [ 59.516113][ T6406] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 59.519069][ T5991] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 59.520558][ T6406] CPU: 2 UID: 0 PID: 6406 Comm: syz.3.135 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0 [ 59.526020][ T6406] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 59.529153][ T6406] Call Trace: [ 59.530149][ T6406] [ 59.531052][ T6406] dump_stack_lvl+0x16c/0x1f0 [ 59.532453][ T6406] should_fail_ex+0x497/0x5b0 [ 59.533878][ T6406] _copy_from_user+0x2e/0xd0 [ 59.535238][ T6406] copy_msghdr_from_user+0x99/0x160 [ 59.536773][ T6406] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 59.538498][ T6406] ___sys_sendmsg+0xff/0x1e0 [ 59.540001][ T6406] ? __pfx____sys_sendmsg+0x10/0x10 [ 59.541575][ T6406] ? __pfx_lock_release+0x10/0x10 [ 59.543058][ T6406] ? trace_lock_acquire+0x14e/0x1f0 [ 59.544601][ T6406] ? __fget_files+0x206/0x3a0 [ 59.546003][ T6406] __sys_sendmsg+0x16e/0x220 [ 59.547384][ T6406] ? __pfx___sys_sendmsg+0x10/0x10 [ 59.548881][ T6406] do_syscall_64+0xcd/0x250 [ 59.550209][ T6406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.551964][ T6406] RIP: 0033:0x7fc3ccb85d29 [ 59.553301][ T6406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.558957][ T6406] RSP: 002b:00007fc3cd9e4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 59.562134][ T6406] RAX: ffffffffffffffda RBX: 00007fc3ccd75fa0 RCX: 00007fc3ccb85d29 [ 59.565310][ T6406] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000009 [ 59.568546][ T6406] RBP: 00007fc3cd9e4090 R08: 0000000000000000 R09: 0000000000000000 [ 59.571796][ T6406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.575030][ T6406] R13: 0000000000000000 R14: 00007fc3ccd75fa0 R15: 00007ffc14a49c18 [ 59.578280][ T6406] [ 59.809030][ T5991] usb 6-1: Invalid ep0 maxpacket: 16 [ 59.959021][ T5991] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 60.119081][ T5991] usb 6-1: Invalid ep0 maxpacket: 16 [ 60.121025][ T5991] usb usb6-port1: attempt power cycle [ 60.383114][ T39] audit: type=1400 audit(1737044342.263:303): avc: denied { append } for pid=6424 comm="syz.2.140" name="qat_adf_ctl" dev="devtmpfs" ino=1295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 60.383893][ T6425] netlink: 4 bytes leftover after parsing attributes in process `syz.2.140'. [ 60.396053][ T6425] netlink: 4 bytes leftover after parsing attributes in process `syz.2.140'. [ 60.401334][ T39] audit: type=1400 audit(1737044342.283:304): avc: denied { ioctl } for pid=6424 comm="syz.2.140" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 60.405537][ T6425] QAT: failed to copy from user. [ 60.410582][ T39] audit: type=1400 audit(1737044342.283:305): avc: denied { create } for pid=6424 comm="syz.2.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 60.419729][ T39] audit: type=1400 audit(1737044342.283:306): avc: denied { connect } for pid=6424 comm="syz.2.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 60.459445][ T5991] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 60.503888][ T39] audit: type=1400 audit(1737044342.383:307): avc: denied { write } for pid=6426 comm="syz.2.141" name="fib_triestat" dev="proc" ino=4026533176 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 60.519305][ T5991] usb 6-1: Invalid ep0 maxpacket: 16 [ 60.561186][ T39] audit: type=1400 audit(1737044342.443:308): avc: denied { bind } for pid=6431 comm="syz.3.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 60.567332][ T6432] Bluetooth: MGMT ver 1.23 [ 60.569044][ T39] audit: type=1400 audit(1737044342.443:309): avc: denied { write } for pid=6431 comm="syz.3.143" path="socket:[11495]" dev="sockfs" ino=11495 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 60.649123][ T5991] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 60.669472][ T5991] usb 6-1: Invalid ep0 maxpacket: 16 [ 60.671687][ T5991] usb usb6-port1: unable to enumerate USB device [ 60.843077][ T6443] program syz.0.146 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 60.848014][ T6443] 9pnet_virtio: no channels available for device syz [ 61.039036][ T5935] Bluetooth: hci3: command 0x0405 tx timeout [ 61.189021][ T5972] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 61.302044][ T6451] netlink: 28 bytes leftover after parsing attributes in process `syz.3.149'. [ 61.340478][ T5972] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 61.344632][ T5972] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 61.344653][ T5972] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 61.344664][ T5972] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.355590][ T6446] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 61.359487][ T5972] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 61.559311][ T5972] usb 5-1: USB disconnect, device number 4 [ 61.922244][ T6491] FAULT_INJECTION: forcing a failure. [ 61.922244][ T6491] name failslab, interval 1, probability 0, space 0, times 0 [ 61.927209][ T6491] CPU: 3 UID: 0 PID: 6491 Comm: syz.1.166 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0 [ 61.930414][ T6491] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 61.933528][ T6491] Call Trace: [ 61.934505][ T6491] [ 61.935460][ T6491] dump_stack_lvl+0x16c/0x1f0 [ 61.937074][ T6491] should_fail_ex+0x497/0x5b0 [ 61.938465][ T6491] ? fs_reclaim_acquire+0xae/0x150 [ 61.940147][ T6491] should_failslab+0xc2/0x120 [ 61.941744][ T6491] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 61.943557][ T6491] ? netlink_dump+0x9e8/0xd00 [ 61.945200][ T6491] ? ___sys_recvmsg+0x115/0x1a0 [ 61.947078][ T6491] ? __alloc_skb+0x2b1/0x380 [ 61.948472][ T6491] ? __pfx___mutex_lock+0x10/0x10 [ 61.949957][ T6491] __alloc_skb+0x2b1/0x380 [ 61.951312][ T6491] ? __pfx___alloc_skb+0x10/0x10 [ 61.952805][ T6491] netlink_dump+0x699/0xd00 [ 61.954141][ T6491] ? __pfx_netlink_dump+0x10/0x10 [ 61.955628][ T6491] ? kfree_skbmem+0x1a4/0x1f0 [ 61.957019][ T6491] ? kfree_skbmem+0x1a4/0x1f0 [ 61.958397][ T6491] netlink_recvmsg+0xa0d/0xf30 [ 61.959804][ T6491] ? __pfx_netlink_recvmsg+0x10/0x10 [ 61.961585][ T6491] ? find_held_lock+0x2d/0x110 [ 61.963210][ T6491] sock_recvmsg+0x1f6/0x250 [ 61.964540][ T6491] ____sys_recvmsg+0x219/0x6b0 [ 61.966014][ T6491] ? __pfx_____sys_recvmsg+0x10/0x10 [ 61.967561][ T6491] ? find_held_lock+0x2d/0x110 [ 61.968973][ T6491] ___sys_recvmsg+0x115/0x1a0 [ 61.970419][ T6491] ? __pfx____sys_recvmsg+0x10/0x10 [ 61.971956][ T6491] ? __fget_files+0x1fc/0x3a0 [ 61.973537][ T6491] ? trace_lock_acquire+0x14e/0x1f0 [ 61.975046][ T6491] ? __fget_files+0x206/0x3a0 [ 61.976424][ T6491] __sys_recvmsg+0x16b/0x220 [ 61.977769][ T6491] ? __pfx___sys_recvmsg+0x10/0x10 [ 61.979242][ T6491] do_syscall_64+0xcd/0x250 [ 61.980562][ T6491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.982256][ T6491] RIP: 0033:0x7f1233d85d29 [ 61.983542][ T6491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.989029][ T6491] RSP: 002b:00007f1234ad4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 61.991425][ T6491] RAX: ffffffffffffffda RBX: 00007f1233f75fa0 RCX: 00007f1233d85d29 [ 61.993692][ T6491] RDX: 0000000000000000 RSI: 0000000020002940 RDI: 0000000000000003 [ 61.995958][ T6491] RBP: 00007f1234ad4090 R08: 0000000000000000 R09: 0000000000000000 [ 61.998215][ T6491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.000489][ T6491] R13: 0000000000000000 R14: 00007f1233f75fa0 R15: 00007ffc6a9e6b78 [ 62.002755][ T6491] [ 62.177708][ T6497] netlink: 68 bytes leftover after parsing attributes in process `syz.1.169'. [ 62.180948][ T6497] block nbd1: NBD_DISCONNECT [ 62.262286][ T6512] program syz.2.175 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 62.276275][ T6507] FAULT_INJECTION: forcing a failure. [ 62.276275][ T6507] name failslab, interval 1, probability 0, space 0, times 0 [ 62.281236][ T6507] CPU: 1 UID: 0 PID: 6507 Comm: syz.1.174 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0 [ 62.285142][ T6507] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 62.288219][ T6507] Call Trace: [ 62.289480][ T6507] [ 62.290638][ T6507] dump_stack_lvl+0x16c/0x1f0 [ 62.292399][ T6507] should_fail_ex+0x497/0x5b0 [ 62.294171][ T6507] ? fs_reclaim_acquire+0xae/0x150 [ 62.296075][ T6507] should_failslab+0xc2/0x120 [ 62.297839][ T6507] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 62.300014][ T6507] ? __alloc_skb+0x2b1/0x380 [ 62.301757][ T6507] __alloc_skb+0x2b1/0x380 [ 62.303527][ T6507] ? __pfx___alloc_skb+0x10/0x10 [ 62.305397][ T6507] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 62.307634][ T6507] netlink_alloc_large_skb+0x69/0x130 [ 62.309645][ T6507] netlink_sendmsg+0x689/0xd70 [ 62.311450][ T6507] ? __pfx_netlink_sendmsg+0x10/0x10 [ 62.313460][ T6507] ____sys_sendmsg+0xaaf/0xc90 [ 62.315260][ T6507] ? copy_msghdr_from_user+0x10b/0x160 [ 62.317430][ T6507] ? __pfx_____sys_sendmsg+0x10/0x10 [ 62.317451][ T6507] ___sys_sendmsg+0x135/0x1e0 [ 62.317462][ T6507] ? __pfx____sys_sendmsg+0x10/0x10 [ 62.317477][ T6507] ? __pfx_lock_release+0x10/0x10 [ 62.317488][ T6507] ? trace_lock_acquire+0x14e/0x1f0 [ 62.317506][ T6507] ? __fget_files+0x206/0x3a0 [ 62.328421][ T6507] __sys_sendmsg+0x16e/0x220 [ 62.328437][ T6507] ? __pfx___sys_sendmsg+0x10/0x10 [ 62.328454][ T6507] do_syscall_64+0xcd/0x250 [ 62.328470][ T6507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.328484][ T6507] RIP: 0033:0x7f1233d85d29 [ 62.328494][ T6507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.328503][ T6507] RSP: 002b:00007f1234ad4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 62.328515][ T6507] RAX: ffffffffffffffda RBX: 00007f1233f75fa0 RCX: 00007f1233d85d29 [ 62.328521][ T6507] RDX: 0000000000004000 RSI: 0000000020006040 RDI: 0000000000000003 [ 62.328528][ T6507] RBP: 00007f1234ad4090 R08: 0000000000000000 R09: 0000000000000000 [ 62.328534][ T6507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.328540][ T6507] R13: 0000000000000000 R14: 00007f1233f75fa0 R15: 00007ffc6a9e6b78 [ 62.328551][ T6507] [ 62.328593][ C1] vkms_vblank_simulate: vblank timer overrun getty: ttyS0: read error: Resource temporarily unavailable [ 62.456236][ T6521] xt_CT: You must specify a L4 protocol and not use inversions on it [ 62.681936][ T6540] FAULT_INJECTION: forcing a failure. [ 62.681936][ T6540] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 62.687411][ T6540] CPU: 2 UID: 0 PID: 6540 Comm: syz.3.184 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0 [ 62.691532][ T6540] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 62.695858][ T6540] Call Trace: [ 62.697227][ T6540] [ 62.698448][ T6540] dump_stack_lvl+0x16c/0x1f0 [ 62.700372][ T6540] should_fail_ex+0x497/0x5b0 [ 62.702326][ T6540] _copy_to_iter+0x2a1/0x1560 [ 62.704244][ T6540] ? trace_lock_acquire+0x14e/0x1f0 [ 62.706347][ T6540] ? __pfx__copy_to_iter+0x10/0x10 [ 62.708483][ T6540] ? __virt_addr_valid+0x1a4/0x590 [ 62.710576][ T6540] ? __virt_addr_valid+0x5e/0x590 [ 62.712597][ T6540] ? __phys_addr_symbol+0x30/0x80 [ 62.714122][ T6540] ? __check_object_size+0x488/0x710 [ 62.716169][ T6540] seq_read_iter+0xd00/0x12b0 [ 62.718066][ T6540] vfs_read+0x87f/0xbe0 [ 62.719720][ T6540] ? __pfx_vfs_read+0x10/0x10 [ 62.721588][ T6540] ksys_read+0x12b/0x250 [ 62.723163][ T6540] ? __pfx_ksys_read+0x10/0x10 [ 62.724604][ T6540] do_syscall_64+0xcd/0x250 [ 62.725941][ T6540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.727670][ T6540] RIP: 0033:0x7fc3ccb85d29 [ 62.728963][ T6540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.735055][ T6540] RSP: 002b:00007fc3cd9e4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 62.737522][ T6540] RAX: ffffffffffffffda RBX: 00007fc3ccd75fa0 RCX: 00007fc3ccb85d29 [ 62.739906][ T6540] RDX: 00000000ffffffb5 RSI: 0000000020000600 RDI: 0000000000000003 [ 62.742326][ T6540] RBP: 00007fc3cd9e4090 R08: 0000000000000000 R09: 0000000000000000 [ 62.744638][ T6540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.746937][ T6540] R13: 0000000000000000 R14: 00007fc3ccd75fa0 R15: 00007ffc14a49c18 [ 62.749304][ T6540] [ 62.771129][ C2] ------------[ cut here ]------------ [ 62.773555][ C2] WARNING: CPU: 2 PID: 6542 at kernel/signal.c:2050 posixtimer_send_sigqueue+0xba8/0x1020 [ 62.776593][ C2] Modules linked in: [ 62.777926][ C2] CPU: 2 UID: 0 PID: 6542 Comm: syz.2.185 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0 [ 62.783690][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 62.787370][ C2] RIP: 0010:posixtimer_send_sigqueue+0xba8/0x1020 [ 62.789450][ C2] Code: ff ff 4c 89 e7 e8 98 fd 9d 00 e9 7e f8 ff ff 41 bf 02 00 00 00 e9 87 f8 ff ff 48 89 54 24 10 48 89 44 24 08 e8 c9 50 3b 00 90 <0f> 0b 90 48 8d 7b 10 48 8b 44 24 08 48 b9 00 00 00 00 00 fc ff df [ 62.795228][ C2] RSP: 0018:ffffc90000658d50 EFLAGS: 00010046 [ 62.797072][ C2] RAX: 0000000080010003 RBX: ffff88802d290000 RCX: 1ffff11005a52003 [ 62.799489][ C2] RDX: ffff88802546c880 RSI: ffffffff815ed3d7 RDI: 0000000000000001 [ 62.802002][ C2] RBP: ffff88802546c880 R08: 0000000000000001 R09: 0000000000000000 [ 62.804477][ C2] R10: 0000000000000001 R11: 0000000000000090 R12: ffff88802d2900a4 [ 62.806851][ C2] R13: 1ffff920000cb1af R14: ffff88802d2900d8 R15: ffff88802d2900c0 [ 62.809459][ C2] FS: 00007f7f6c17b6c0(0000) GS:ffff88806a800000(0000) knlGS:0000000000000000 [ 62.812376][ C2] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 62.814396][ C2] CR2: 000000002006b000 CR3: 0000000028500000 CR4: 0000000000352ef0 [ 62.816812][ C2] DR0: 00000000000000f4 DR1: 0000000000000000 DR2: 0000000000000000 [ 62.819295][ C2] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 62.822189][ C2] Call Trace: [ 62.823183][ C2] [ 62.824045][ C2] ? __warn+0xea/0x3c0 [ 62.825280][ C2] ? posixtimer_send_sigqueue+0xba8/0x1020 [ 62.827030][ C2] ? report_bug+0x3c0/0x580 [ 62.828377][ C2] ? handle_bug+0x54/0xa0 [ 62.829732][ C2] ? exc_invalid_op+0x17/0x50 [ 62.831300][ C2] ? asm_exc_invalid_op+0x1a/0x20 [ 62.832891][ C2] ? posixtimer_send_sigqueue+0xba7/0x1020 [ 62.834707][ C2] ? posixtimer_send_sigqueue+0xba8/0x1020 [ 62.836573][ C2] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 62.838335][ C2] ? __pfx_posixtimer_send_sigqueue+0x10/0x10 [ 62.840211][ C2] ? __pfx_posix_timer_fn+0x10/0x10 [ 62.841811][ C2] posix_timer_fn+0x31/0x60 [ 62.843177][ C2] __hrtimer_run_queues+0x20a/0xae0 [ 62.844761][ C2] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 62.846657][ C2] ? read_tsc+0x9/0x20 [ 62.847924][ C2] hrtimer_interrupt+0x392/0x8e0 [ 62.849589][ C2] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 62.851481][ C2] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 62.853206][ C2] [ 62.854131][ C2] [ 62.855023][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 62.856827][ C2] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 62.858758][ C2] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 76 32 4a f6 48 89 df e8 ce b1 4a f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 c5 96 3b f6 65 8b 05 86 40 d7 74 85 c0 74 16 5b [ 62.864497][ C2] RSP: 0018:ffffc900032b7d58 EFLAGS: 00000246 [ 62.866349][ C2] RAX: 0000000000000006 RBX: ffff88802d290030 RCX: 1ffffffff20be0c9 [ 62.868716][ C2] RDX: 0000000000000000 RSI: ffffffff8b6cd9e0 RDI: ffffffff8bd1ef20 [ 62.871737][ C2] RBP: 0000000000000287 R08: 0000000000000001 R09: 0000000000000001 [ 62.874535][ C2] R10: ffffffff905f4997 R11: 0000000000000002 R12: ffffc900032b7e50 [ 62.876912][ C2] R13: 0000000000000000 R14: 1ffff92000656fb1 R15: dffffc0000000000 [ 62.879294][ C2] do_timer_settime+0x315/0x400 [ 62.880760][ C2] ? __pfx_common_timer_set+0x10/0x10 [ 62.882401][ C2] ? __pfx_do_timer_settime+0x10/0x10 [ 62.884021][ C2] ? __pfx_do_futex+0x10/0x10 [ 62.885472][ C2] __x64_sys_timer_settime+0x26a/0x2c0 [ 62.887119][ C2] ? __pfx___x64_sys_timer_settime+0x10/0x10 [ 62.888884][ C2] ? xfd_validate_state+0x5d/0x180 [ 62.890517][ C2] do_syscall_64+0xcd/0x250 [ 62.891867][ C2] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.893625][ C2] RIP: 0033:0x7f7f6b385d29 [ 62.894988][ C2] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.900650][ C2] RSP: 002b:00007f7f6c17b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000df [ 62.903074][ C2] RAX: ffffffffffffffda RBX: 00007f7f6b575fa0 RCX: 00007f7f6b385d29 [ 62.905412][ C2] RDX: 000000002006b000 RSI: 0000000000000000 RDI: 0000000000000000 [ 62.907693][ C2] RBP: 00007f7f6b401b08 R08: 0000000000000000 R09: 0000000000000000 [ 62.910052][ C2] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 62.912428][ C2] R13: 0000000000000000 R14: 00007f7f6b575fa0 R15: 00007ffd7a2a6018 [ 62.914798][ C2] [ 62.915779][ C2] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 62.917948][ C2] CPU: 2 UID: 0 PID: 6542 Comm: syz.2.185 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0 [ 62.921739][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 62.924988][ C2] Call Trace: [ 62.926041][ C2] [ 62.926916][ C2] dump_stack_lvl+0x3d/0x1f0 [ 62.928290][ C2] panic+0x71d/0x800 [ 62.929518][ C2] ? __pfx_panic+0x10/0x10 [ 62.930858][ C2] ? show_trace_log_lvl+0x29d/0x3d0 [ 62.932487][ C2] ? check_panic_on_warn+0x1f/0xb0 [ 62.934018][ C2] ? posixtimer_send_sigqueue+0xba8/0x1020 [ 62.935838][ C2] check_panic_on_warn+0xab/0xb0 [ 62.937245][ C2] __warn+0xf6/0x3c0 [ 62.938579][ C2] ? posixtimer_send_sigqueue+0xba8/0x1020 [ 62.940304][ C2] report_bug+0x3c0/0x580 [ 62.941559][ C2] handle_bug+0x54/0xa0 [ 62.942751][ C2] exc_invalid_op+0x17/0x50 [ 62.944088][ C2] asm_exc_invalid_op+0x1a/0x20 [ 62.945520][ C2] RIP: 0010:posixtimer_send_sigqueue+0xba8/0x1020 [ 62.947399][ C2] Code: ff ff 4c 89 e7 e8 98 fd 9d 00 e9 7e f8 ff ff 41 bf 02 00 00 00 e9 87 f8 ff ff 48 89 54 24 10 48 89 44 24 08 e8 c9 50 3b 00 90 <0f> 0b 90 48 8d 7b 10 48 8b 44 24 08 48 b9 00 00 00 00 00 fc ff df [ 62.952869][ C2] RSP: 0018:ffffc90000658d50 EFLAGS: 00010046 [ 62.954646][ C2] RAX: 0000000080010003 RBX: ffff88802d290000 RCX: 1ffff11005a52003 [ 62.956922][ C2] RDX: ffff88802546c880 RSI: ffffffff815ed3d7 RDI: 0000000000000001 [ 62.959225][ C2] RBP: ffff88802546c880 R08: 0000000000000001 R09: 0000000000000000 [ 62.961527][ C2] R10: 0000000000000001 R11: 0000000000000090 R12: ffff88802d2900a4 [ 62.963834][ C2] R13: 1ffff920000cb1af R14: ffff88802d2900d8 R15: ffff88802d2900c0 [ 62.966177][ C2] ? posixtimer_send_sigqueue+0xba7/0x1020 [ 62.967873][ C2] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 62.969566][ C2] ? __pfx_posixtimer_send_sigqueue+0x10/0x10 [ 62.971913][ C2] ? __pfx_posix_timer_fn+0x10/0x10 [ 62.973494][ C2] posix_timer_fn+0x31/0x60 [ 62.974851][ C2] __hrtimer_run_queues+0x20a/0xae0 [ 62.976384][ C2] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 62.978044][ C2] ? read_tsc+0x9/0x20 [ 62.979267][ C2] hrtimer_interrupt+0x392/0x8e0 [ 62.980780][ C2] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 62.982559][ C2] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 62.984225][ C2] [ 62.985135][ C2] [ 62.986001][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 62.987778][ C2] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 62.989685][ C2] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 76 32 4a f6 48 89 df e8 ce b1 4a f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 c5 96 3b f6 65 8b 05 86 40 d7 74 85 c0 74 16 5b [ 62.995380][ C2] RSP: 0018:ffffc900032b7d58 EFLAGS: 00000246 [ 62.997173][ C2] RAX: 0000000000000006 RBX: ffff88802d290030 RCX: 1ffffffff20be0c9 [ 62.999545][ C2] RDX: 0000000000000000 RSI: ffffffff8b6cd9e0 RDI: ffffffff8bd1ef20 [ 63.001946][ C2] RBP: 0000000000000287 R08: 0000000000000001 R09: 0000000000000001 [ 63.004312][ C2] R10: ffffffff905f4997 R11: 0000000000000002 R12: ffffc900032b7e50 [ 63.006730][ C2] R13: 0000000000000000 R14: 1ffff92000656fb1 R15: dffffc0000000000 [ 63.009079][ C2] do_timer_settime+0x315/0x400 [ 63.010547][ C2] ? __pfx_common_timer_set+0x10/0x10 [ 63.012172][ C2] ? __pfx_do_timer_settime+0x10/0x10 [ 63.013766][ C2] ? __pfx_do_futex+0x10/0x10 [ 63.015222][ C2] __x64_sys_timer_settime+0x26a/0x2c0 [ 63.016887][ C2] ? __pfx___x64_sys_timer_settime+0x10/0x10 [ 63.018705][ C2] ? xfd_validate_state+0x5d/0x180 [ 63.020709][ C2] do_syscall_64+0xcd/0x250 [ 63.022410][ C2] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.024124][ C2] RIP: 0033:0x7f7f6b385d29 [ 63.025436][ C2] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.030998][ C2] RSP: 002b:00007f7f6c17b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000df [ 63.033439][ C2] RAX: ffffffffffffffda RBX: 00007f7f6b575fa0 RCX: 00007f7f6b385d29 [ 63.035698][ C2] RDX: 000000002006b000 RSI: 0000000000000000 RDI: 0000000000000000 [ 63.038014][ C2] RBP: 00007f7f6b401b08 R08: 0000000000000000 R09: 0000000000000000 [ 63.040581][ C2] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 63.042858][ C2] R13: 0000000000000000 R14: 00007f7f6b575fa0 R15: 00007ffd7a2a6018 [ 63.045113][ C2] [ 63.046521][ C2] Kernel Offset: disabled [ 63.047878][ C2] Rebooting in 86400 seconds.. VM DIAGNOSIS: 16:19:04 Registers: info registers vcpu 0 CPU#0 RAX=000000000011d34b RBX=0000000000000000 RCX=ffffffff8b2a17c9 RDX=0000000000000000 RSI=ffffffff8b6cd9e0 RDI=ffffffff8bd1ef20 RBP=fffffbfff1bd2ef8 RSP=ffffffff8de07e20 R8 =0000000000000001 R9 =ffffed100d4c6fed R10=ffff88806a637f6b R11=0000000000000000 R12=0000000000000000 R13=ffffffff8de977c0 R14=ffffffff905f4990 R15=0000000000000000 RIP=ffffffff8b2a2baf RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020040fe0 CR3=0000000020e56000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcacffbc10 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7392e02a9a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7392e02aa7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7392e02aa1 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7392e02ab5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7392e02b3b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7392e02c19 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000050 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000046 RBX=ffff88801ff8d360 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff8b6cdce0 RDI=ffffffff8bd1ef20 RBP=ffffffff8e1bb840 RSP=ffffc900032f7480 R8 =000000000000197c R9 =ffffed1003ff1910 R10=ffff88801ff8c887 R11=000000000000005f R12=ffff88801ff8c880 R13=0000000000000000 R14=00000000ffffffff R15=0000000000000001 RIP=ffffffff8b2a09f8 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f1234ad46c0 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000200bc030 CR3=000000002de54000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7f6b402a9a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7f6b402aa7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7f6b402aa1 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7f6b402ab5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7f6b402b3b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7f6b402c19 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7f6b54b488 00007f7f6b54b480 00007f7f6b54b478 00007f7f6b54b450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7f6c0ad100 00007f7f6b54b440 00007f7f6b54b458 00007f7f6b54b4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7f6b54b498 00007f7f6b54b490 00007f7f6b54b488 00007f7f6b54b480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000036 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff851c0de5 RDI=ffffffff9ab11b20 RBP=ffffffff9ab11ae0 RSP=ffffc900006586b8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000007 R12=0000000000000000 R13=0000000000000036 R14=ffffffff851c0d80 R15=0000000000000000 RIP=ffffffff851c0e0f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f7f6c17b6c0 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002006b000 CR3=0000000028500000 CR4=00352ef0 DR0=00000000000000f4 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffff800 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 745f73656c626174 5f3670692f74656e ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 737465677261745f 73656c6261745f36 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7f6b402a9a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7f6b402aa7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7f6b402aa1 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7f6b402ab5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7f6b402b3b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7f6b402c19 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000376f65 6469762f7665642f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000144c46 474a550c5546470c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000003 RBX=ffff88806a937f68 RCX=ffffc90007b74000 RDX=0000000000000000 RSI=ffffffff8bd1eea0 RDI=ffffffff8da77cf8 RBP=0000000000000003 RSP=ffffc900060cf2c8 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000004 R12=ffffffff8185e450 R13=ffffc900060cf3f8 R14=0000000000000000 R15=ffff888024fb8000 RIP=ffffffff817fafd1 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007fc3cd9e46c0 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020001000 CR3=000000004dcf4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc3ccc02a9a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc3ccc02aa7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc3ccc02aa1 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc3ccc02ab5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc3ccc02b3b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc3ccc02c19 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc3ccd4b488 00007fc3ccd4b480 00007fc3ccd4b478 00007fc3ccd4b450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc3cd8ad100 00007fc3ccd4b440 00007fc3ccd4b458 00007fc3ccd4b4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc3ccd4b498 00007fc3ccd4b490 00007fc3ccd4b488 00007fc3ccd4b480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000