last executing test programs: 1m58.900687266s ago: executing program 2 (id=249): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000080)={{@host, 0x2}, 0x1, 0x0, 0x95}) 1m58.90042158s ago: executing program 2 (id=250): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/hibernate_compression_threads', 0x48a82, 0x0) write$sysctl(r0, &(0x7f0000000040)='2\x00', 0x2) io_setup(0x2, &(0x7f0000000200)) 1m58.840510382s ago: executing program 2 (id=251): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f00000007c0)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007"], 0x40}, 0x1, 0x0, 0x0, 0x40801}, 0x820) bind$inet6(r1, &(0x7f0000000a80)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x50, &(0x7f0000000ac0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "910100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, '\x00\x00\x00`\x00\x00'}}}}}}}, 0x0) 1m58.840192412s ago: executing program 2 (id=252): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000180), 0x40, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000200)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './file0'}}], [], 0x2c}) mount(0x0, &(0x7f0000000280)='./config\x00', &(0x7f00000002c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r0, &(0x7f0000000440)='l', 0x1) 1m58.778990262s ago: executing program 2 (id=254): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000400)={&(0x7f0000000340), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x1, 0x3, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x800}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r4 = add_key(&(0x7f00000001c0)='id_resolver\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000280)="f8", 0x1, 0xfffffffffffffffe) setrlimit(0x7, &(0x7f00000002c0)) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r3, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r3, 0xffffffffffffffff) r5 = openat$kvm(0x0, &(0x7f0000000440), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r6, 0x4068aea3, &(0x7f0000000480)={0xa4, 0x0, 0x1}) r7 = syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$x86(r7, &(0x7f0000000500)={0x0, 0x0}) ioctl$KVM_GET_VCPU_EVENTS(r8, 0x8040ae9f, &(0x7f0000000540)) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000000200010400000000000000000200000908000824a0a75d131000000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x3, 0xb}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) close(0x3) 1m58.560769078s ago: executing program 2 (id=256): r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14, 0x100800) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x2, 0x7, 0x8, 0x6, 0x7, 0xdf97, 0x2e47}, 0x1c) r1 = socket(0x10, 0x803, 0x0) write(r1, &(0x7f0000000280)="1c0000005e001f3814584707f9f4ffffff000000230000001ff80000", 0x1c) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000380)={0x200, 0x4f, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x1, 0x3, 0x9}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0xfe, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, &(0x7f0000000200)={0x1, &(0x7f0000000240)=[{0x6}]}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000180)={r3}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000003c0)={'syz1\x00', {0xfff9, 0x2, 0x1e93, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x800, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x2, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0xffffffff, 0x91, 0x4, 0x4, 0x16, 0x10, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x1, 0x2, 0x2, 0x0, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x976e7265], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0xb, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x41cb, 0x7ff, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x7, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xffe, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x9e9, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf47, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0x2, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0x5, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) syz_genetlink_get_family_id$batadv(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000e020}, 0x18) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000980)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r9 = dup(r8) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000a80)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000ac0)=[@text32={0x20, &(0x7f00000002c0)="c20000361e0f01c3660fd2eff30f10f10f20e035000040000f22e000f4ba000000000f30b98d02000f320b99f3530000c7442400655c0000c744240240e70000c7442406000000000f011424c4e2f91d20", 0x51}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000b40)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) 1m58.469889551s ago: executing program 32 (id=256): r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14, 0x100800) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x2, 0x7, 0x8, 0x6, 0x7, 0xdf97, 0x2e47}, 0x1c) r1 = socket(0x10, 0x803, 0x0) write(r1, &(0x7f0000000280)="1c0000005e001f3814584707f9f4ffffff000000230000001ff80000", 0x1c) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000380)={0x200, 0x4f, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x1, 0x3, 0x9}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0xfe, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, &(0x7f0000000200)={0x1, &(0x7f0000000240)=[{0x6}]}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000180)={r3}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000003c0)={'syz1\x00', {0xfff9, 0x2, 0x1e93, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x800, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x2, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0xffffffff, 0x91, 0x4, 0x4, 0x16, 0x10, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x1, 0x2, 0x2, 0x0, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x976e7265], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0xb, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x41cb, 0x7ff, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x7, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xffe, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x9e9, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf47, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0x2, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0x5, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) syz_genetlink_get_family_id$batadv(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000e020}, 0x18) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000980)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r9 = dup(r8) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000a80)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000ac0)=[@text32={0x20, &(0x7f00000002c0)="c20000361e0f01c3660fd2eff30f10f10f20e035000040000f22e000f4ba000000000f30b98d02000f320b99f3530000c7442400655c0000c744240240e70000c7442406000000000f011424c4e2f91d20", 0x51}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000b40)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) 1m27.920750249s ago: executing program 1 (id=668): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000540), r1) socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000080)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) getsockname$packet(r1, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8, 0x4408}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback={0x0, 0xfffffffe}}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1m27.850505673s ago: executing program 1 (id=669): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)=0x3000000) 1m27.850231146s ago: executing program 1 (id=670): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/91, 0x5b}], 0x1, 0xa2e1, 0xc) r2 = openat$cgroup_procs(r0, &(0x7f0000000280)='tasks\x00', 0x2, 0x0) preadv(r2, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/142, 0x8e}], 0x1, 0x4, 0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x10, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_USER_PORT_KEY={0x6, 0x19, 0x4003}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x7f}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc051}, 0x0) 1m27.788340928s ago: executing program 1 (id=671): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c000000700005040100fd0f0000000007000000", @ANYRES32=r1, @ANYBLOB="140001800800010003000100050003"], 0x2c}}, 0x0) 1m27.787970678s ago: executing program 1 (id=672): syz_open_dev$vim2m(&(0x7f0000000100), 0x10001, 0x2) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000180)={0xd, 0x1, 0x80, "b7a39ae0d209ceacda4e7b3c01403a681a92569e7932c1d58aa2da102aa64f47", 0x38415261}) r1 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000000)=0x7a1) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x80800}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000680)='./proc\x00', &(0x7f00000006c0)='proc\x00', 0x4000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/thread-self/fail-nth\x00', 0x2, 0x100) write(r4, &(0x7f0000000740)='3', 0x4e) write(r3, &(0x7f0000000780)='md0', 0x3) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffdfffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x2, 0x3, 0x1, 0xb, 0x3, 0x7, 0xb87, 0x2, 0x9c}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0xc000880}, 0x20040084) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = landlock_create_ruleset(&(0x7f0000000600)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r9, 0xf) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = getpgid(r8) fcntl$setownex(r11, 0xf, &(0x7f0000000800)={0x2, r12}) sendmmsg$unix(r10, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000008c0)="11", 0x1}], 0x1, 0x0, 0x0, 0x4004040}}], 0x1, 0x40015) 1m27.679513226s ago: executing program 1 (id=673): sigaltstack(&(0x7f0000001380)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f00000013c0)={&(0x7f0000001400)}) gettid() (async) gettid() timer_create(0x0, &(0x7f0000001480)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000000)="c772d8c78e648c579b5fa560b7834ce413546542aa896469a4f5e2016e423c0e3883ab6a8241abecad570d442abbd366e326533493d2fccae50fc6137dfdd36cf4b95487e4a22f5d6ffd5cc92f24b4e6a64f27bbe9efa6d7ab9825575f33302a9f06240b144ba3976126adddc790c68d8038b1f689dc0dec399b05d3a0e65ece85cd5070ba89eb484b8b", &(0x7f00000000c0)="160f61e7617577b3627ac79477d046985133707059adae34fce487d720200a01e461ecb9a0a7ab725368b75ed7f69f7d47e6f56b6f08d0580a49e19ca6f8645cee7a95f3ed1b8b0b0afba9d5dee8f16ba706cd41d3dbd344"}}, &(0x7f00000014c0)) timer_settime(0x0, 0x0, &(0x7f0000001500)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000001500)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ustat(0x8, &(0x7f0000000140)) r0 = openat(0xffffffffffffff9c, &(0x7f0000001580)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) (async) fcntl$setlease(r0, 0x400, 0x0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000180)={[0x6, 0xd, 0x0, 0x1, 0x0, 0xffffffffffff35e7, 0x7fff, 0x7fffffffffffffff, 0x3, 0x5, 0x3, 0x2, 0x0, 0x1600000000, 0xffff, 0xb20e], 0x5000, 0x20202}) openat(0xffffffffffffff9c, &(0x7f00000015c0)='./file1\x00', 0x101042, 0x15) 1m15.930694994s ago: executing program 3 (id=795): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x8101, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0x8000) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000380)={r2, 0x800, 0x1}) ioctl$XFS_IOC_SCRUBV_METADATA(r0, 0xc0285840, &(0x7f0000000080)={0x6, 0x5, 0x51d, 0x0, 0x2, 0x5, 0x0, &(0x7f0000000000)=[{0x8, 0x1ff, 0x7}, {0xe, 0x1ff, 0x9}, {0x4, 0xfe, 0x6ea}, {0xf, 0x1ff, 0xff}, {0x10, 0x1ff, 0x1}]}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000440)={r2, 0x6, 0x1}) 1m15.590837607s ago: executing program 3 (id=798): socket$packet(0x11, 0x3, 0x300) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000002c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x2d, 0x9, 0xffffffff90002080, 0xc00, 0x2, 0x8, 0x0, 0x0, 0x0, 0xea72cdca4525d46e, 0xfffffffa}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000002380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e48e435000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f2ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005a99e6a60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d7a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000120000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004b68d3810000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ebff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e3ffffffffffffff00", 0x2000, &(0x7f0000004380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004440)={0x20, 0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004480)='./file0\x00', 0x101001, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x8002, 0x0) writev(r2, &(0x7f00000044c0)=[{&(0x7f0000004500)="67a1", 0x56000}], 0xf) umount2(&(0x7f0000004540)='./file0\x00', 0x1) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="02c8000c00080002"], 0x11) syz_emit_ethernet(0x2a, &(0x7f0000000280)={@empty, @empty, @void, {@ipv4={0x88e5, @igmp={{0x5, 0x4, 0x3, 0x1, 0x1c, 0x68, 0x0, 0x3, 0x2, 0x0, @broadcast, @multicast2}, {0x13, 0x6, 0x0, @multicast1}}}}}, 0x0) 1m14.940203068s ago: executing program 3 (id=804): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) write$UHID_INPUT(r1, &(0x7f00000000c0)={0x8, {"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", 0x1000}}, 0x1006) mkdirat(0xffffffffffffff9c, &(0x7f000001ac40)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f000001ac80), 0x2, 0x0) mount$fuse(0x0, &(0x7f000001acc0)='./file0\x00', &(0x7f000001ad00), 0x404, &(0x7f000001ad40)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f000001adc0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f000001ce00)={0x50, 0x0, r3, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) statx(0xffffffffffffff9c, &(0x7f000001ce80)='./file0/file1\x00', 0x1000, 0x100, 0x0) creat(&(0x7f000001cec0)='./file0/file0\x00', 0x0) syz_fuse_handle_req(r2, &(0x7f000001cf00)="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", 0x2000, &(0x7f000001ef00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000001efc0)={0x90, 0x0, 0x7, {0x5, 0x3, 0xdc, 0x8, 0x3, 0x1, {0x6, 0x638, 0xfffffffffffffff8, 0x8, 0x3, 0x79, 0xfffffffe, 0x7, 0x1, 0x4000, 0x4, r4, r5, 0x7, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f000001f080)="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", 0x2000, &(0x7f0000021080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000021140)={0x90, 0x0, 0xfffffffeffffffff, {0x5, 0x3, 0x0, 0x4000000000004, 0xfffffffd, 0x6, {0x2, 0xfff, 0x808, 0xfffffffffbd, 0x8, 0x81, 0xfaae, 0x6, 0x4, 0x4000, 0x6, r4, r5, 0x4, 0xa}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001100), 0x280c40, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000001300)='pagemap\x00') pread64(r7, &(0x7f0000001340)=""/102400, 0x19020, 0x1000000000) r8 = syz_btf_id_by_name$bpf_lsm(&(0x7f000001a340)='bpf_lsm_secctx_to_secid\x00') r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f000001a640)={0x6, 0x9, &(0x7f000001a380)=@raw=[@map_fd={0x18, 0x4}, @map_fd={0x18, 0x0, 0x1, 0x0, 0x1}, @jmp={0x5, 0x0, 0xb, 0xb, 0x9, 0xffffffffffffffc0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ldst={0x1, 0x1, 0x3, 0xb, 0xa, 0x1, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2}], &(0x7f000001a400)='syzkaller\x00', 0x2, 0xdf, &(0x7f000001a440)=""/223, 0x1e00, 0x14, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f000001a540)={0x3, 0x2}, 0x8, 0x10, &(0x7f000001a580)={0x3, 0x2, 0x6, 0x8}, 0x10, 0x0, 0x0, 0x1, &(0x7f000001a5c0)=[0xffffffffffffffff], &(0x7f000001a600)=[{0x4, 0x1, 0x0, 0xc}], 0x10, 0x27}, 0x94) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f000001aa40)={{r0, &(0x7f000001a700)='\x00', 0x208000, &(0x7f000001a740)={@_ha_fsid={[0x15, 0x1]}, {0x8, 0x9, 0x100, 0x2}}, 0x160, &(0x7f000001a780)={@_ha_fsid}, &(0x7f000001a7c0)=0x9ded73a}, 0x3, &(0x7f000001a9c0)=[{0x2, 0x169, &(0x7f000001a800)='-$\x00', &(0x7f000001a840)="bac796523503d16e3f2186d6e62aa0a3435a00f7fa38d407b220c3", 0x1b, 0x10}, {0x3, 0x4, &(0x7f000001a880)='\x95\x00', &(0x7f000001a8c0)="dc3433cc3f0ee447d2bcd0ab7260b22cfefd178d484b0863c1b2ff0f6abaf6a5558e06509a6cf8e773d4f7e7678c87664702315f6a7f344f62c07604ae6e8d1a0082cff083faee40", 0x48, 0x12}, {0x3, 0x2, &(0x7f000001a940)='^[-^$!)\x00', &(0x7f000001a980)="60b704c926224d1afc561b488b1d0ac54c3289be52eb32a8ea8778aa19f07ae5dbda79a71404294604ed", 0x2a}]}) bpf$PROG_LOAD(0x5, &(0x7f000001ab80)={0x9, 0x13, &(0x7f0000001140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@call={0x85, 0x0, 0x0, 0x60}, @alu={0x7, 0x0, 0x5, 0x4, 0x0, 0x20, 0x3}, @map_fd={0x18, 0x5, 0x1, 0x0, r6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001200)='syzkaller\x00', 0x0, 0x89, &(0x7f0000001240)=""/137, 0x41000, 0x4c, '\x00', 0x0, @fallback, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r8, r9, 0x5, &(0x7f000001aac0)=[r10], &(0x7f000001ab00)=[{0x5, 0x2, 0x4, 0xb}, {0x3, 0x5, 0x0, 0xb}, {0x5, 0x5, 0x6, 0x8}, {0x0, 0x3, 0x1, 0x3}, {0x3, 0x4, 0x4, 0x3}], 0x10, 0x10001}, 0x94) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="3500000002"], 0x8) 1m14.75028731s ago: executing program 3 (id=807): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x38ff817, 0x0) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)="00ac17", 0x3}, 0x1, 0x0, 0x0, 0x810}, 0x24004014) umount2(&(0x7f0000000380)='./file0\x00', 0x1) 1m14.748997346s ago: executing program 3 (id=808): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x9, 0x32, 0xffffffffffffffff, 0x34d4c000) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000dc0)={&(0x7f0000000e00)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e40)=@bpf_lsm={0x1d, 0x2, &(0x7f0000000f00)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000f40)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, 0x1b, r0, 0x8, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001f80)=[{0x1, 0x4, 0x8, 0x8}], 0x10, 0xa8f6}, 0x94) 1m14.44048682s ago: executing program 3 (id=809): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='asymmetric\x00', 0x0, &(0x7f00000000c0)="30800201", 0x1001, r0) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f00000002c0)={&(0x7f00000006c0)=@ieee802154={0x24, @long={0x3, 0x3}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000440)="27031c00160014000200", 0xa}, {&(0x7f0000000480)="7d3ed2ea1f2f210c0784b2ce65c9", 0xe}], 0x2}, 0x40000) 1m14.374394777s ago: executing program 33 (id=809): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='asymmetric\x00', 0x0, &(0x7f00000000c0)="30800201", 0x1001, r0) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f00000002c0)={&(0x7f00000006c0)=@ieee802154={0x24, @long={0x3, 0x3}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000440)="27031c00160014000200", 0xa}, {&(0x7f0000000480)="7d3ed2ea1f2f210c0784b2ce65c9", 0xe}], 0x2}, 0x40000) 1m12.546222159s ago: executing program 34 (id=673): sigaltstack(&(0x7f0000001380)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f00000013c0)={&(0x7f0000001400)}) gettid() (async) gettid() timer_create(0x0, &(0x7f0000001480)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000000)="c772d8c78e648c579b5fa560b7834ce413546542aa896469a4f5e2016e423c0e3883ab6a8241abecad570d442abbd366e326533493d2fccae50fc6137dfdd36cf4b95487e4a22f5d6ffd5cc92f24b4e6a64f27bbe9efa6d7ab9825575f33302a9f06240b144ba3976126adddc790c68d8038b1f689dc0dec399b05d3a0e65ece85cd5070ba89eb484b8b", &(0x7f00000000c0)="160f61e7617577b3627ac79477d046985133707059adae34fce487d720200a01e461ecb9a0a7ab725368b75ed7f69f7d47e6f56b6f08d0580a49e19ca6f8645cee7a95f3ed1b8b0b0afba9d5dee8f16ba706cd41d3dbd344"}}, &(0x7f00000014c0)) timer_settime(0x0, 0x0, &(0x7f0000001500)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000001500)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ustat(0x8, &(0x7f0000000140)) r0 = openat(0xffffffffffffff9c, &(0x7f0000001580)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) (async) fcntl$setlease(r0, 0x400, 0x0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000180)={[0x6, 0xd, 0x0, 0x1, 0x0, 0xffffffffffff35e7, 0x7fff, 0x7fffffffffffffff, 0x3, 0x5, 0x3, 0x2, 0x0, 0x1600000000, 0xffff, 0xb20e], 0x5000, 0x20202}) openat(0xffffffffffffff9c, &(0x7f00000015c0)='./file1\x00', 0x101042, 0x15) 57.150605972s ago: executing program 4 (id=1018): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0xfffffffb) r0 = getpid() capget(&(0x7f0000000100)={0x19980330, r0}, &(0x7f0000000180)={0xc, 0xd, 0x174, 0x0, 0x9, 0x6}) capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f00000001c0)={0x200002, 0x200003, 0x801, 0x4, 0x7}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) ioctl$FIBMAP(r1, 0x1, 0x0) 56.82621115s ago: executing program 4 (id=1023): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x54, 0x0, 0xd55319eec59dfa33, 0xfffffffd, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x76}, @val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x0, 0x2000067}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0x54}, 0x1, 0x0, 0x0, 0xc804}, 0x40c2010) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000780)=ANY=[@ANYBLOB="240000002f00090027bd9f0000000000040000000c0018"], 0x24}, 0x1, 0x0, 0x0, 0x42804}, 0x4) 56.767431917s ago: executing program 4 (id=1025): socket$packet(0x11, 0x2, 0x300) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="14000000040000000800000006"], 0x48) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) mmap(&(0x7f0000dde000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000240)="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", &(0x7f0000001840)=@udp6=r1, 0x4}, 0x20) prlimit64(0x0, 0x2, 0x0, &(0x7f0000000000)) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000140), &(0x7f00000004c0)=""/94}, 0x20) 56.690736585s ago: executing program 4 (id=1028): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000005f40)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, 0x0, 0x0, 0x34040005}, 0x48024) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x80, 0x7fffffff}]}) r2 = syz_usb_connect(0x3, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100004898b610c2154500201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x7, 0x1, 0x3, 0x40, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xfb, 0xb0, 0xc, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r3, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x100a}}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) syz_usb_control_io$printer(r3, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b30, &(0x7f0000000040)={'wlan0\x00'}) 53.138754025s ago: executing program 4 (id=1074): ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000000)={0x1, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = io_uring_setup(0x66a9, &(0x7f0000000740)={0x0, 0xaeff, 0x20, 0x0, 0x87}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000840)='./proc\x00', &(0x7f0000000880)='proc\x00', 0x4000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x1) write(r2, &(0x7f0000000900)='27', 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000019c0)={0x1, &(0x7f0000001a00)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8) r3 = socket(0x1, 0x803, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r4 = io_uring_setup(0x46eb, &(0x7f00000005c0)={0x0, 0x1e89, 0x20, 0x1, 0x80db}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000700)=[{&(0x7f00000009c0)=""/4095, 0xfff}], 0x1) syz_clone(0x100000, 0x0, 0x10, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000680)={'tunl0\x00', 0x0, 0x700, 0x0, 0x0, 0x40007, {{0x5, 0x4, 0x0, 0xb, 0x14, 0x67, 0x0, 0x28, 0x29, 0x0, @broadcast, @empty}}}}) sendto$packet(0xffffffffffffffff, &(0x7f0000000540)="0b031260fe814e3ab5ce8f94061cffff", 0x10, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f2, &(0x7f0000000580)={'erspan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, &(0x7f0000000080)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00001000"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000006790fc61542f1710000000"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r6, 0xffffffffffffffff}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xc, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000500)="7638300c000000000000e9000000", 0x0, 0x2f, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001ac0)={0x6, 0xf, &(0x7f0000001a40)=ANY=[@ANYBLOB="1800000018000000000000000300000018110000", @ANYRES32=r5, @ANYRES32=0x0], &(0x7f0000000640)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x40}, 0x94) 53.083871576s ago: executing program 4 (id=1075): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r4 = creat(&(0x7f0000000240)='./sys/devices/system/memory/memory0/state/file0\x00', 0xce) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x10, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000000880)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000940)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r5) r6 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x20000001) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{r7}, &(0x7f0000000b00), &(0x7f0000000b40)=r5}, 0x20) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000b80)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x24004045) bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000fcdbdf253e0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c746963617374000400830000000000"], 0x58}}, 0x80) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./sys\x00', 0x1ff) mount(&(0x7f00000003c0)=@filename='sysfs\x00', &(0x7f0000000400)='./sys\x00', &(0x7f0000000440)='sysfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/devices/system/memory/memory0/state\x00', 0x2, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_tables_matches\x00') pread64(r9, &(0x7f0000000d00)=""/4082, 0xff2, 0x7fffffff) write(r8, &(0x7f00000004c0)='online\n\x00', 0x7) r10 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/memory/auto_online_blocks\x00', 0x2, 0x0) write(r10, &(0x7f0000000540)='online\n\x00', 0x7) r11 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r11, &(0x7f00000005c0)='1\x00', 0x2) madvise(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) mkdirat(r4, &(0x7f0000000600)='./mnt\x00', 0x1ff) 38.050427973s ago: executing program 35 (id=1075): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r4 = creat(&(0x7f0000000240)='./sys/devices/system/memory/memory0/state/file0\x00', 0xce) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x10, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000000880)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000940)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r5) r6 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x20000001) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{r7}, &(0x7f0000000b00), &(0x7f0000000b40)=r5}, 0x20) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000b80)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x24004045) bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000fcdbdf253e0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c746963617374000400830000000000"], 0x58}}, 0x80) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./sys\x00', 0x1ff) mount(&(0x7f00000003c0)=@filename='sysfs\x00', &(0x7f0000000400)='./sys\x00', &(0x7f0000000440)='sysfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/devices/system/memory/memory0/state\x00', 0x2, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_tables_matches\x00') pread64(r9, &(0x7f0000000d00)=""/4082, 0xff2, 0x7fffffff) write(r8, &(0x7f00000004c0)='online\n\x00', 0x7) r10 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/memory/auto_online_blocks\x00', 0x2, 0x0) write(r10, &(0x7f0000000540)='online\n\x00', 0x7) r11 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r11, &(0x7f00000005c0)='1\x00', 0x2) madvise(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) mkdirat(r4, &(0x7f0000000600)='./mnt\x00', 0x1ff) 2.590269693s ago: executing program 5 (id=1668): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100003800c"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc0fe) 2.520066118s ago: executing program 5 (id=1669): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="300000002f00090027bd7000000000000400000004001d001800098014"], 0x30}, 0x1, 0x0, 0x0, 0x2004a884}, 0x10) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000000)=0x1, 0x4) r2 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000080)={0x0, 0x30b5, 0x400, 0x2, 0x154}, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) sendmsg$nl_generic(r1, &(0x7f0000000ac0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0xa001200}, 0xc, &(0x7f0000000a80)={&(0x7f0000000c80)=ANY=[@ANYRES32=r5], 0xd8}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000280)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f00000002c0)=0x0) recvmmsg(r1, &(0x7f0000005f00)=[{{&(0x7f00000009c0)=@alg, 0x80, &(0x7f0000001000)=[{&(0x7f0000000a40)=""/48, 0x30}, {&(0x7f0000000cc0)=""/49, 0x31}, {&(0x7f0000000d00)=""/219, 0xdb}, {&(0x7f0000000e00)=""/89, 0x59}, {&(0x7f0000000e80)=""/167, 0xa7}, {&(0x7f0000000f40)=""/157, 0x9d}], 0x6, &(0x7f0000001080)=""/163, 0xa3}, 0x8}, {{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000001140)=""/163, 0xa3}, {&(0x7f0000001200)=""/120, 0x78}, {&(0x7f0000001280)=""/226, 0xe2}, {&(0x7f0000001380)=""/75, 0x4b}, {&(0x7f0000001400)=""/158, 0x9e}, {&(0x7f00000014c0)=""/87, 0x57}, {&(0x7f0000001540)=""/174, 0xae}, {&(0x7f0000001600)=""/146, 0x92}, {&(0x7f00000016c0)=""/19, 0x13}], 0x9, &(0x7f00000017c0)=""/103, 0x67}, 0x9f}, {{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001840)=""/48, 0x30}], 0x1}, 0x40}, {{&(0x7f00000018c0)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000001a40)=[{&(0x7f0000001940)=""/78, 0x4e}, {&(0x7f00000019c0)=""/95, 0x5f}], 0x2, &(0x7f0000001a80)=""/191, 0xbf}, 0xe}, {{&(0x7f0000001b40)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000002bc0)=[{&(0x7f0000001bc0)=""/4096, 0x1000}], 0x1, &(0x7f0000002c00)=""/146, 0x92}, 0xfffff43c}, {{&(0x7f0000002cc0)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000003000)=[{&(0x7f0000002d40)=""/160, 0xa0}, {&(0x7f0000002e00)=""/229, 0xe5}, {&(0x7f0000002f00)=""/173, 0xad}, {&(0x7f0000002fc0)=""/6, 0x6}], 0x4, &(0x7f0000003040)=""/8, 0x8}, 0x725}, {{&(0x7f0000003080)=@pppoe, 0x80, &(0x7f00000054c0)=[{&(0x7f0000003100)=""/149, 0x95}, {&(0x7f00000031c0)=""/220, 0xdc}, {&(0x7f00000032c0)=""/40, 0x28}, {&(0x7f0000003300)=""/183, 0xb7}, {&(0x7f00000033c0)=""/4096, 0x1000}, {&(0x7f00000043c0)=""/4096, 0x1000}, {&(0x7f00000053c0)=""/199, 0xc7}], 0x7, &(0x7f0000005540)=""/17, 0x11}}, {{&(0x7f0000005580)=@xdp, 0x80, &(0x7f00000057c0)=[{&(0x7f0000005600)=""/204, 0xcc}, {&(0x7f0000005700)=""/160, 0xa0}], 0x2, &(0x7f0000005800)=""/39, 0x27}, 0x843}, {{&(0x7f0000005840)=@in6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000005e00)=[{&(0x7f00000058c0)}, {&(0x7f0000005900)=""/33, 0x21}, {&(0x7f0000005940)=""/48, 0x30}, {&(0x7f0000005980)=""/234, 0xea}, {&(0x7f0000005a80)=""/151, 0x97}, {&(0x7f0000005b40)=""/236, 0xec}, {&(0x7f0000005c40)=""/254, 0xfe}, {&(0x7f0000005d40)=""/137, 0x89}], 0x8, &(0x7f0000005e80)=""/87, 0x57}, 0x2}], 0x9, 0x10000, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000840)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000880), 0x200002, 0x0) fchdir(r7) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) rename(&(0x7f0000000940)='./file0\x00', &(0x7f0000000900)='./bus/file0\x00') r8 = syz_open_dev$dri(&(0x7f0000000b00), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000b40)={0x0, &(0x7f0000000b80)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f0000000bc0)={0x0, 0x0, r9, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r8, 0xc01864b0, &(0x7f0000000c40)={r9, r10, 0x1, 0x0, 0x400000d4}) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) ioctl$KVM_SET_VCPU_EVENTS(r12, 0x4040aea0, &(0x7f0000000980)=@x86={0x4, 0xf1, 0x5f, 0x0, 0xff, 0xff, 0xff, 0xfb, 0x10, 0xa, 0xe, 0x0, 0x0, 0xfffffff9, 0x2, 0x5, 0x91, 0x8, 0x2, '\x00', 0x0, 0x9}) syz_ublk_setup_queues(r12, r6, &(0x7f0000000300)={0x0, 0x20fb87, 0x800, 0x1, 0x32c, 0x0, r12}, &(0x7f0000000380)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2f41, 0x200, 0x1006, 0x200015a, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffe97d, 0x40000, 0x10001, 0x149}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x0, 0x0, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x10, 0x2, 0x1f5}}], 0x1, &(0x7f0000000600)={0x2e, 0x2b, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x1, 0x5c0, 0x0, 0x0}}, 0x0) fcntl$F_GET_RW_HINT(r13, 0x40b, &(0x7f0000000800)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) r14 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg/2:0:0:0\x00', 0x109000, 0x0) ioctl$SG_GET_RESERVED_SIZE(r14, 0x2272, &(0x7f0000000040)) 1.650519797s ago: executing program 5 (id=1673): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000580)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000fffffff50000000200000a20000000000a01040000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000090000000060a01240000000000000000020000000900010073797a30000000000900020073797a300000000064000480600001800b0001007461726765740000500002800e00010049444c4554494d45520000000800024000000001340003"], 0x104}}, 0x0) 1.650170064s ago: executing program 5 (id=1674): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x33) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000001040)={0x0, &(0x7f0000001080)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x40}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f00000010c0)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r3, 0x4068aea3, &(0x7f0000001140)={0xc7, 0x0, 0x1}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000011c0)={[0x0, 0x7fffffffffffffff, 0x2, 0x10000, 0x9, 0x101, 0xb, 0x10, 0x2, 0x7ffffffffffffffa, 0xa, 0x0, 0xfffffffffffffffe, 0x5, 0x3, 0x3], 0x0, 0x100912}) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x33) (async) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) (async) syz_kvm_add_vcpu$x86(r2, &(0x7f0000001040)={0x0, &(0x7f0000001080)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x40}) (async) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f00000010c0)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r3, 0x4068aea3, &(0x7f0000001140)={0xc7, 0x0, 0x1}) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000011c0)={[0x0, 0x7fffffffffffffff, 0x2, 0x10000, 0x9, 0x101, 0xb, 0x10, 0x2, 0x7ffffffffffffffa, 0xa, 0x0, 0xfffffffffffffffe, 0x5, 0x3, 0x3], 0x0, 0x100912}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) 1.600404277s ago: executing program 5 (id=1675): symlink(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000500)='./bus\x00', &(0x7f0000000540), 0x0, &(0x7f0000000580)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000600)='./bus\x00') mount(0x0, 0x0, 0x0, 0x2200020, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000800)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000840), 0x8, 0x200) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000880)={r0, 0x0, {0x2a12, 0x80010000, 0x0, 0xffff, 0x4, 0x0, 0x0, 0xc, 0x5, "fee8a2ab78fc179fd1f809000000aca7ca64c6a4b4e00d9683dda1af01000000def712001000fe000000000000000000000800", "2809e8dbe1b22d0000b420a1a93c7540f476779e0117613dd4070000ebff08000000000000000100020000000800000000faffffff00", "e7460000102000000000e44400000020e40000008bd02800", [0xde, 0x2]}}) 1.599906563s ago: executing program 5 (id=1676): setpriority(0x2, 0xffffffffffffffff, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = syz_ublk_setup_io_uring(0x2261, &(0x7f0000000e80)={0x0, 0xb480, 0x80, 0x2, 0x2e1}, &(0x7f0000000f00)=0x0, &(0x7f0000000f40)=0x0, &(0x7f0000000f80)=0x0) r5 = eventfd(0xe467) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000fc0)=r5, 0x1) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000001000)={0x2e, 0x5, 0x21, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000001080)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) connect$bt_sco(r0, &(0x7f0000000c00)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000c40)={0x1, 0x69f8467e}, 0x8) shutdown(r0, 0x1) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000e00)={r6, 0x20, &(0x7f0000000dc0)={&(0x7f0000000c80)=""/236, 0xec, 0x0, &(0x7f0000000d80)=""/16, 0x10}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000e40)=r7, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001640)=@bpf_tracing={0x1a, 0xc, &(0x7f0000001200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0x2e}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_val={0x18, 0x1, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x275}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000001280)='syzkaller\x00', 0xfffffc01, 0x6e, &(0x7f00000012c0)=""/110, 0x41100, 0x40, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000001440)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x16c35, 0xffffffffffffffff, 0x8, &(0x7f0000001580)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000015c0)=[{0x0, 0x2, 0xe, 0xa}, {0x4, 0x5, 0x822}, {0x5, 0x3, 0x3, 0x3}, {0x2, 0x2, 0x8, 0x7}, {0x4, 0x3, 0x2, 0xa}, {0x2, 0x2, 0x10, 0x4}, {0x4, 0x4, 0xf, 0x3}, {0x5, 0x3, 0x9, 0x6}], 0x10, 0x81}, 0x94) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x86, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000e88470000000000000400000000000000000000000000000000000000080001aae7e6b7ac88f8ea4c88c0cb28bc099b25cd87fd10f77137aa0c3e055c0da8d37f6e181a17d9125513e7e6a1b091183a9dfa5f8e77db87d50f712b17b22cf0b1e3ddcddbfef8329f945b262375bbc466d6d0dfb75dcbf1531a4eba"], 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r10, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r11, 0x1, 0x3b, 0x0, &(0x7f0000000240)) getsockname$packet(r10, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_usb_connect(0x5, 0x4e, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904000006ff0000000705810240000007050102"], 0x0) mkdir(&(0x7f00000003c0)='mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000ac0)='mnt\x00', &(0x7f0000000b80)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000bc0)='mnt/ttyUSB0\x00', 0x2, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r12, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r13 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r13, 0x0, 0x40, &(0x7f0000000480)=@nat={'nat\x00', 0x670, 0x5, 0x510, 0x0, 0x228, 0xffffffff, 0x2e8, 0x3d0, 0x478, 0x478, 0xffffffff, 0x478, 0x478, 0x5, 0x0, {[{{@uncond, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x10}, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x0, 0xffffff00, 0xff000000], @ipv6=@local, [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0xffffff00, 0xff], 0x7, 0x1, 0x5c, 0x4e20, 0x4e22, 0x4e24, 0x4e24, 0x804, 0x20c0}, 0x80, 0x2}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x2f, @rand_addr=0x64010100, @empty, @gre_key=0x1, @icmp_id=0x67}}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28}, {0x10, "89ce", 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@multicast2, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x40}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@addrtype={{0x30}, {0x890, 0x218, 0x0, 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x16, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@private1, @icmp_id=0x65, @port=0x4e21}}}, {{@ip={@private=0xa010100, @rand_addr, 0x0, 0x0, 'nicvf0\x00', 'nr0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0xe12, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="5400000010001ffffdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000804003002c0012800b00010067726574617000001c00028008000700e000000108000100", @ANYRES32=r12, @ANYBLOB="050008000300000008000a00", @ANYRES32=r12], 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x804) 860.248322ms ago: executing program 6 (id=1684): r0 = socket$alg(0x26, 0x5, 0x0) close(0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926", 0x20}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1, 0x0, 0x0, 0xfffffff0}, 0x0) 810.075461ms ago: executing program 6 (id=1686): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000980), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip_vs_stats\x00') pread64(r3, &(0x7f0000003e80)=""/102400, 0x19000, 0x100008) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000940), r5) sendmsg$ETHTOOL_MSG_PAUSE_SET(r5, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000d00)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000200100000c000280080002006c6f000018000380040001000800020005000000080004001f"], 0x38}}, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYRES8=r1], 0x47) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000440)={{0x2, 0x6, 0x7, 0x9, 'syz1\x00', 0x1}, 0x0, [0x0, 0x10000, 0x10, 0x615, 0x276, 0x0, 0x80000000, 0x6, 0x2, 0x7fffffff, 0x2, 0x81, 0xabf, 0x4, 0x3, 0x2e58, 0x9, 0x0, 0x4495, 0x3000000000000, 0x8000, 0x3ff, 0x30, 0x7fffffff, 0x8, 0x8000000000000000, 0x40, 0xe, 0xffffffffffff0001, 0xfba, 0x100000001, 0x100, 0x1bf4, 0x3, 0x8000, 0x7, 0x7, 0x8, 0x8, 0x767, 0x2, 0x2, 0xffff, 0x9, 0x5, 0x8, 0x8, 0x1, 0x7, 0x5, 0x5, 0x55b8, 0x40, 0x5, 0x6, 0x3, 0xfffffffffffff001, 0xf8c9bcc, 0x2, 0xfffffffffffffff8, 0x6704, 0x7, 0x7, 0xffffffffffffff81, 0x2, 0x2, 0x8, 0x9, 0x404000000000000, 0x7, 0x9, 0x0, 0x1ff, 0x9, 0x133b, 0x0, 0x2, 0x10000, 0x8001, 0x6, 0x4c31, 0x10000, 0xc20, 0x1, 0x8, 0x3, 0x8001, 0x810001, 0x5, 0x3, 0x8, 0x40, 0x0, 0x9, 0x8, 0x8, 0xff, 0x3, 0x7, 0x4, 0xff, 0x1, 0x4, 0x3, 0x3ff, 0x43225a28, 0x8, 0xed, 0x10, 0xa, 0x81, 0x1, 0xc0, 0x2, 0xfffffffffffffffb, 0x2, 0x401, 0x7, 0x2, 0x0, 0x5, 0x9, 0xf, 0x9, 0x6, 0x7, 0x4, 0x8]}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) recvmmsg(r7, &(0x7f0000003dc0)=[{{&(0x7f00000009c0)=@xdp, 0x80, &(0x7f00000038c0)=[{&(0x7f0000000a40)=""/42, 0x2a}, {&(0x7f0000000a80)=""/169, 0xa9}, {&(0x7f0000000c80)=""/69, 0x45}, {&(0x7f0000000bc0)=""/150, 0x96}, {&(0x7f000001ce80)=""/4086, 0xff6}, {&(0x7f0000002600)=""/3, 0x3}, {&(0x7f0000002640)=""/215, 0xd7}, {&(0x7f0000002740)=""/175, 0xaf}, {&(0x7f0000002800)=""/147, 0x93}, {&(0x7f00000028c0)=""/4096, 0x1000}], 0xa, &(0x7f0000001140)=""/136, 0x88}, 0x4}, {{&(0x7f0000003a40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000003d00)=[{&(0x7f0000003ac0)=""/45, 0x2d}, {&(0x7f0000003b00)=""/192, 0xc0}, {&(0x7f0000003bc0)=""/38, 0x26}, {&(0x7f0000003c00)=""/225, 0xe1}], 0x4, &(0x7f0000003d40)=""/116, 0x74}, 0x6}], 0x2, 0x1, &(0x7f0000003e40)) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$BLKFLSBUF(r2, 0x1261, &(0x7f0000000200)) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000001040)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000030a03000000002c9dd8d800050000000900010073797a30000000000900030073797a300000000018000480140003007465616d5f736c6176000000000000000200000a00000000000000000000000000f25a3553c189d53adb23113cd6d79c8d126f7c82fb55e835b48e0e6af0ad5f1fada99b0fac370a8cd1bd08801e41f95d693f4950bb6e51eba12495f1a562d2a146bd183a741c3fd57d81134012c6f9a0e01dc7dfd53397c3c92fc7fc7038382dbb3d9b4e0076fe5813556eb2a6f9a07d616032f8138fd7"], 0x6c}, 0x1, 0x0, 0x0, 0x20040845}, 0x4018080) sendmsg$NFT_BATCH(r8, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001000)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) socket$can_bcm(0x1d, 0x2, 0x2) 530.185817ms ago: executing program 7 (id=1692): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000540)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000640)='100', 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x8001, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000x00040000,user_id=', @ANYRESHEX=r1, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 530.066303ms ago: executing program 7 (id=1693): setns(0xc9, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x4}]}}}]}, 0x3c}}, 0x0) 419.737696ms ago: executing program 7 (id=1694): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_delroute={0x24, 0x1a, 0x401, 0x0, 0x0, {0xa, 0x0, 0x0, 0x7, 0xfd, 0x0, 0x0, 0x0, 0x400}, [@RTA_IP_PROTO={0x5, 0x1b, 0x3a}]}, 0x24}}, 0x800) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f00000024c0)={0x28, r2, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x480d5}, 0x4000000) 419.535316ms ago: executing program 7 (id=1695): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000001600)={0x4000000, 0x92, 0x0, 0x0, 0x2}) 357.915001ms ago: executing program 7 (id=1696): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/comedi4\x00', 0x109040, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') lseek(r1, 0x8001, 0x4) ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000000400)={0x1, 0x8, 0x80, 0xd, 0x10, 0x3e7, 0x2, 0x0, 0x20, 0x1, 0x20, 0xffffffff, &(0x7f0000000480)=[0x7], 0x1, 0x0}) 357.732077ms ago: executing program 7 (id=1697): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x39, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001000000401e09030001000102000109022700010100c0320904000003ffffff00070581034000010705020240"], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/ttyUSB0\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)="100610", 0x3) syz_io_uring_setup(0x47ea, &(0x7f0000000400)={0x0, 0xba32, 0x1, 0x2, 0xb3}, 0x0, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x6004, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000440)={'\x00', 0x9, 0x3, 0x5, 0x1000000003, 0x40000000008}) 300.216941ms ago: executing program 0 (id=1699): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000017c0)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) sendmsg$inet_sctp(r0, &(0x7f0000001800)={&(0x7f0000001840)=@in6={0xa, 0x4e24, 0xff, @loopback={0xf103000000000000}, 0x5}, 0x1c, &(0x7f0000001880)=[{&(0x7f00000018c0)="e6", 0x1}], 0x1, &(0x7f0000001900)=ANY=[@ANYBLOB="18000000000000008400000007000000ac1414aa0000000020000000000000008400000008000000200100000000000000000000000000022000000000000000840000000800000000e0"], 0x58, 0x4855}, 0x24020052) 300.06748ms ago: executing program 0 (id=1700): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000002c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340), 0x3) getsockopt$bt_hci(r0, 0x11a, 0x3, 0x0, &(0x7f0000000380)=0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x100) syz_ublk_setup_io_uring(0x73c1, &(0x7f0000000000)={0x0, 0xcd3b, 0x2, 0x20002, 0x297}, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/thread-self/fail-nth\x00', 0x2, 0x29) write(r4, &(0x7f0000000280)='7', 0x1) munmap$IORING_OFF_SQES(r3, 0xc5059c) 169.455425ms ago: executing program 0 (id=1701): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config\x00', 0x1ff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000001800)=@ethtool_per_queue_op={0x4b, 0xe, [0x81, 0x9, 0x3, 0x0, 0x10000, 0x6, 0x800, 0x4, 0x5, 0x2, 0x5, 0x7, 0x2, 0xfff, 0x81, 0x33, 0x9, 0xffffff7f, 0x3c4, 0x2, 0x1000, 0x80000000, 0x8, 0x5, 0x7, 0x3, 0x7, 0x99ee, 0x5, 0xffffffff, 0x7f, 0x9, 0xff, 0x125d829d, 0x0, 0x7, 0x8c5c, 0x4, 0xe, 0x4, 0x4, 0xfffff231, 0x7fffffff, 0x9, 0x7fffffff, 0x3, 0xffffffff, 0x8001, 0x6, 0x6, 0x2, 0x8, 0x7, 0xffff8001, 0xb, 0x5, 0x1, 0xfffffffe, 0x6, 0x401, 0x8, 0x86, 0x24000, 0x75a, 0x4, 0x6, 0x0, 0x0, 0x0, 0xc25f, 0xfffffff8, 0x81, 0xd, 0x5, 0x100, 0x7, 0x0, 0x5, 0x4d, 0xfffffc01, 0x9, 0xc7, 0x7f, 0x1, 0x1, 0x3, 0x3, 0x4, 0xd7f, 0x6, 0x8001, 0x7fffffff, 0x1, 0x3, 0xffffff81, 0xe2, 0x80, 0x5a, 0x5, 0x9, 0x200, 0x7, 0x5, 0x4, 0x7, 0x1, 0x6, 0x10001, 0x8, 0x1, 0xc, 0x80000000, 0x1, 0xf, 0x0, 0x3f1, 0x1, 0x3, 0x101, 0x9, 0x8a, 0x3, 0xb, 0x5, 0x96, 0x7fb, 0x3, 0x3]}}) syz_emit_ethernet(0x56, &(0x7f0000001b80)=ANY=[@ANYBLOB="0113ca000000aaaaaaaaaaaa86dd6001044a00203afffe80001c0000000000001300000000aafeffaf000000000000000000000000aa88009078fb723bee2261231475a200000000fe8000000000000100000000000000bb0201000000000000"], 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './config/usb_gadget/g1/configs/c.1/strings/0x409\x00'}) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f00000001c0)=0x20b) mount(0x0, &(0x7f00000002c0)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r2, 0x4004e502, &(0x7f0000001a40)=0x4) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/hid.usb0/subclass\x00', 0x2, 0x0) write(r3, 0x0, 0x0) readv(r3, &(0x7f0000001780)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/204, 0xcc}, {&(0x7f00000015c0)=""/155, 0x9b}, {&(0x7f0000001680)=""/7, 0x7}, {&(0x7f00000016c0)=""/59, 0x3b}, {&(0x7f0000001700)=""/98, 0x62}], 0x6) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x40040, 0x0) ioctl$KDADDIO(r4, 0x4b34, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001ac0)=ANY=[@ANYRES64=0x0, @ANYBLOB='B'], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x24008014) fsetxattr$security_selinux(r5, &(0x7f00000000c0), &(0x7f0000000100)='system_u:object_r:udev_rules_t:s0\x00', 0x22, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions/hid.usb0/protocol\x00', 0x2, 0x0) write(r6, &(0x7f0000000480)='1', 0x1) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000001cc0)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c00)={0x4c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4810}, 0x4) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000001a80)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7}) 168.898744ms ago: executing program 0 (id=1702): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x20a201, 0x0) close(r6) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000640)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000740)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000780), 0x56) sendmsg$kcm(r5, &(0x7f00000007c0)={&(0x7f0000000800)=@xdp={0x2c, 0x0, r7, 0x36}, 0x80, &(0x7f0000000880)=[{&(0x7f00000008c0)="27030200000214000e00002fb96dffff1144ee163cddcb000000802400827600000000000000", 0x26}, {&(0x7f0000000900)="442ea407603a16ff", 0x8}], 0x2}, 0x20000085) migrate_pages(0x0, 0x6, 0x0, 0x0) 67.476406ms ago: executing program 6 (id=1703): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x400) sendmsg$NFT_BATCH(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x60, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 611.63µs ago: executing program 0 (id=1704): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010006000d0000000000010000f00000000001410000001c001700000000000000006574683a73"], 0x38}}, 0x0) 372.269µs ago: executing program 6 (id=1705): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x60042, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00bf0000000002000300fffeffffdf020000000000004000000000000000030300ef000000000000000008003800010004000400"], 0x78) 152.404µs ago: executing program 0 (id=1706): openat$kvm(0xffffff9c, &(0x7f0000000840), 0x8000, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x82801, 0x0) write$sequencer(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="81040808f9ffffff940f32f0411976ec9402ff"], 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x2, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000040000000000000000000020085000000ad00000095"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x30}, 0x94) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x3c, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004894}, 0x4000) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f0000000340)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2f) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r5, 0xc008ae88, &(0x7f0000000880)={0x1, 0x0, [{0x400000b3, 0x0, 0x9}]}) 111.841µs ago: executing program 6 (id=1707): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendto(r0, &(0x7f0000000200)="9400000042000100020000000000000003010000102700003200010000112e33445566778899aabb080045000020000140004011b778c0a80101c0a8010204d2162e000c00007465737400003c00020008000300010000001000040066778899aabb001122334455060006000800000010000700c0a80101c0a801021100400008000a0004d2162e0c00030008000c0004000100", 0x94, 0x0, 0x0, 0x0) 0s ago: executing program 6 (id=1708): r0 = syz_open_dev$dvb_frontend(&(0x7f0000007040), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000007080)={0x3, &(0x7f0000000180)=[{0x4, '\x00', @buffer={"010d1de90c16308a633fda925d1085c6b9f70f72ad6cc5f4853700000000ffff", 0x20}, 0xfffffff9}, {0x27, '\x00', @buffer={"0964b619483c872272c3d86cbee956d5e192c407635f11d5b86ce9ea70fa7516", 0x20}, 0x5}, {0xb, '\x00', @st={0x4, [{0x3, @svalue=0x4}, {0x0, @svalue=0xe}, {0x1, @svalue}, {0x2, @uvalue=0x8}]}, 0x40007fe}]}) kernel console output (not intermixed with test programs): ][T10032] ? __pfx_get_futex_key+0x10/0x10 [ 148.147586][T10032] ? futex_wake+0x4ea/0x5e0 [ 148.147609][T10032] futex_wake+0xf4/0x5e0 [ 148.147622][T10032] ? __lock_acquire+0x5c0/0x1f40 [ 148.147636][T10032] ? __pfx_futex_wake+0x10/0x10 [ 148.147652][T10032] ? lock_acquire+0x1d1/0x380 [ 148.147666][T10032] do_futex+0x2b2/0x440 [ 148.147684][T10032] ? __pfx_do_futex+0x10/0x10 [ 148.147701][T10032] ? __fget_files+0x21f/0x3d0 [ 148.147721][T10032] __x64_sys_futex+0x34f/0x4d0 [ 148.147740][T10032] ? __pfx___x64_sys_futex+0x10/0x10 [ 148.147762][T10032] do_syscall_64+0x123/0x790 [ 148.147780][T10032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.147792][T10032] RIP: 0033:0x7fe76899e559 [ 148.147802][T10032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.147813][T10032] RSP: 002b:00007fe7698d90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 148.147825][T10032] RAX: ffffffffffffffda RBX: 00007fe768c25fa8 RCX: 00007fe76899e559 [ 148.147833][T10032] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe768c25fac [ 148.147840][T10032] RBP: 00007fe768c25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 148.147847][T10032] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 148.147854][T10032] R13: 00007fe768c26038 R14: 00007ffe922a0e80 R15: 00007ffe922a0f68 [ 148.147869][T10032] [ 148.199212][T10041] loop2: detected capacity change from 0 to 8 [ 148.202789][T10041] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 148.202803][T10041] loop2: partition table partially beyond EOD, truncated [ 148.202886][T10041] loop2: p1 size 2645487272 extends beyond EOD, truncated [ 148.231896][ T5742] udevd[5742]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 148.271154][T10047] FAULT_INJECTION: forcing a failure. [ 148.271154][T10047] name failslab, interval 1, probability 0, space 0, times 0 [ 148.271177][T10047] CPU: 0 UID: 0 PID: 10047 Comm: syz.5.1251 Tainted: G L syzkaller #0 PREEMPT(full) [ 148.271193][T10047] Tainted: [L]=SOFTLOCKUP [ 148.271197][T10047] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 148.271204][T10047] Call Trace: [ 148.271208][T10047] [ 148.271213][T10047] dump_stack_lvl+0x100/0x190 [ 148.271251][T10047] should_fail_ex.cold+0x5/0xa [ 148.271269][T10047] should_failslab+0xc2/0x120 [ 148.271288][T10047] __kmalloc_cache_noprof+0x91/0x6d0 [ 148.271307][T10047] ? do_raw_spin_lock+0x128/0x260 [ 148.271332][T10047] ? alloc_fdtable+0xbd/0x2d0 [ 148.271359][T10047] alloc_fdtable+0xbd/0x2d0 [ 148.271386][T10047] dup_fd+0x995/0xd10 [ 148.271420][T10047] __x64_sys_close_range+0x405/0x5d0 [ 148.271451][T10047] ? __pfx___x64_sys_close_range+0x10/0x10 [ 148.271489][T10047] do_syscall_64+0x123/0x790 [ 148.271518][T10047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.271538][T10047] RIP: 0033:0x7f6d5439e559 [ 148.271554][T10047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.271576][T10047] RSP: 002b:00007f6d55333028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 148.271588][T10047] RAX: ffffffffffffffda RBX: 00007f6d54625fa0 RCX: 00007f6d5439e559 [ 148.271596][T10047] RDX: 0000000000000002 RSI: ffffffffffffffff RDI: ffffffffffffffff [ 148.271604][T10047] RBP: 00007f6d54435ad8 R08: 0000000000000000 R09: 0000000000000000 [ 148.271612][T10047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.271619][T10047] R13: 00007f6d54626038 R14: 00007f6d54625fa0 R15: 00007ffe9f1fb4f8 [ 148.271634][T10047] [ 148.283033][T10049] evm: overlay not supported [ 148.395587][T10060] netlink: 'syz.5.1256': attribute type 1 has an invalid length. [ 148.405015][T10060] 8021q: adding VLAN 0 to HW filter on device bond3 [ 148.612017][ T5735] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 148.613870][ T5735] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 148.614582][ T5735] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 148.620488][ T5735] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 148.620729][ T5735] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 148.815753][T10075] rxe_eth0 speed is unknown, defaulting to 1000 [ 148.890903][T10075] lo speed is unknown, defaulting to 1000 [ 148.891588][T10075] dummy0 speed is unknown, defaulting to 1000 [ 149.106336][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.158893][T10104] bond4 (unregistering): Released all slaves [ 149.179302][T10109] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1269'. [ 149.179320][T10109] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1269'. [ 149.213968][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.220471][T10075] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.220514][T10075] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.220589][T10075] bridge_slave_0: entered allmulticast mode [ 149.221474][T10075] bridge_slave_0: entered promiscuous mode [ 149.225175][T10075] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.225322][T10075] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.225467][T10075] bridge_slave_1: entered allmulticast mode [ 149.226895][T10075] bridge_slave_1: entered promiscuous mode [ 149.255269][T10075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.270008][T10075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.278365][T10109] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1269'. [ 149.281146][T10112] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1270'. [ 149.281268][ T42] kauditd_printk_skb: 15 callbacks suppressed [ 149.281293][ T42] audit: type=1400 audit(1792424721.809:5451): avc: denied { write } for pid=10111 comm="syz.5.1270" name="ptp0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 149.282653][T10112] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1270'. [ 149.318415][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.323992][T10075] team0: Port device team_slave_0 added [ 149.326460][T10075] team0: Port device team_slave_1 added [ 149.337998][T10075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.338018][T10075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 149.338031][T10075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.338894][T10075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.338901][T10075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 149.338913][T10075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.358119][T10075] hsr_slave_0: entered promiscuous mode [ 149.358950][T10075] hsr_slave_1: entered promiscuous mode [ 149.359309][T10075] debugfs: 'hsr0' already exists in 'hsr' [ 149.359320][T10075] Cannot create hsr debugfs directory [ 149.376504][T10115] ip_tables: iptables: counters copy to user failed while replacing table [ 149.400084][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.556039][T10075] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 149.558734][T10075] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 149.564516][T10075] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 149.572944][T10075] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 149.589481][T10075] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 149.591713][T10075] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 149.593302][T10075] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 149.597631][ T5802] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 149.598103][T10075] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 149.604228][ T12] bridge_slave_1: left allmulticast mode [ 149.604245][ T12] bridge_slave_1: left promiscuous mode [ 149.604412][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.609708][ T12] bridge_slave_0: left allmulticast mode [ 149.609727][ T12] bridge_slave_0: left promiscuous mode [ 149.609943][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.677007][ T42] audit: type=1400 audit(1792424722.209:5452): avc: denied { write } for pid=10119 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 149.724400][ T42] audit: type=1400 audit(1792424722.249:5453): avc: denied { write } for pid=10122 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 149.734128][ T12] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 149.740862][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 149.742644][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 149.744271][ T12] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 149.746401][ T12] bond0 (unregistering): Released all slaves [ 149.749169][ T12] bond1 (unregistering): Released all slaves [ 149.757520][ T5444] 8021q: adding VLAN 0 to HW filter on device eth10 [ 149.817877][ T12] tipc: Left network mode [ 149.849044][ T42] audit: type=1400 audit(1792424722.379:5454): avc: denied { write } for pid=10131 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 149.873637][T10075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.882144][T10075] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.885421][ T6067] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.885466][ T6067] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.890354][ T6067] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.890399][ T6067] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.914373][ T42] audit: type=1400 audit(1792424722.439:5455): avc: denied { write } for pid=10138 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 149.963224][ T5444] 8021q: adding VLAN 0 to HW filter on device eth11 [ 150.000474][ T42] audit: type=1400 audit(1792424722.529:5456): avc: denied { setopt } for pid=10151 comm="syz.5.1275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 150.048686][ T42] audit: type=1400 audit(1792424722.579:5457): avc: denied { write } for pid=10153 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 150.108497][ T42] audit: type=1400 audit(1792424722.639:5458): avc: denied { write } for pid=10158 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 150.143058][T10165] syzkaller0: entered promiscuous mode [ 150.143073][T10165] syzkaller0: entered allmulticast mode [ 150.151088][ T5444] 8021q: adding VLAN 0 to HW filter on device eth12 [ 150.218668][T10075] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.235589][ T42] audit: type=1400 audit(1792424722.759:5459): avc: denied { write } for pid=10171 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 150.255250][ T12] hsr_slave_0: left promiscuous mode [ 150.269296][ T12] hsr_slave_1: left promiscuous mode [ 150.269775][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.269788][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.270346][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.270356][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.277936][ T12] veth1_macvtap: left promiscuous mode [ 150.277969][ T12] veth0_macvtap: left promiscuous mode [ 150.278079][ T12] veth0_vlan: left promiscuous mode [ 150.304379][ T42] audit: type=1400 audit(1792424722.829:5460): avc: denied { write } for pid=10180 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 150.322437][T10182] xt_l2tp: v2 doesn't support IP mode [ 150.416257][ T850] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 150.481260][ T12] team0 (unregistering): Port device team_slave_1 removed [ 150.485831][ T12] team0 (unregistering): Port device team_slave_0 removed [ 150.546349][ T6067] smc: removing ib device syz0 [ 150.566458][ T850] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 150.567272][ T850] usb 10-1: config 0 interface 0 altsetting 255 bulk endpoint 0x5 has invalid maxpacket 61 [ 150.567288][ T850] usb 10-1: config 0 interface 0 has no altsetting 0 [ 150.568891][ T850] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 150.568904][ T850] usb 10-1: Product: syz [ 150.568911][ T850] usb 10-1: Manufacturer: syz [ 150.568918][ T850] usb 10-1: SerialNumber: syz [ 150.583160][ T6048] smbdirect: ib_dev[syz_device_name_32_chars_1234567] removed [ 150.594728][ T5444] 8021q: adding VLAN 0 to HW filter on device eth13 [ 150.599500][ T1642] infiniband syz_device_name_32_chars_1234567: ib_query_port failed (-19) [ 150.601438][ T5593] infiniband syz0: ib_query_port failed (-19) [ 150.611736][ T850] usb 10-1: config 0 descriptor?? [ 150.612268][T10169] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 150.620736][ T850] usb 10-1: selecting invalid altsetting 0 [ 150.656217][ T5091] Bluetooth: hci1: command tx timeout [ 150.667884][ T6067] smbdirect: ib_dev[syz0] removed [ 150.755552][T10075] veth0_vlan: entered promiscuous mode [ 150.761781][T10075] veth1_vlan: entered promiscuous mode [ 150.780352][T10075] veth0_macvtap: entered promiscuous mode [ 150.782809][T10075] veth1_macvtap: entered promiscuous mode [ 150.792993][T10075] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.794988][T10075] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.802178][ T5827] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.802252][ T5827] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.802331][ T5827] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.839166][T10169] IPVS: lblc: UDP [fe80::aa]:8080 - no destination available [ 150.841678][ T36] IPVS: starting estimator thread 0... [ 150.846156][ T5775] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.874053][ T850] usb 10-1: USB disconnect, device number 7 [ 150.935980][T10200] IPVS: using max 43 ests per chain, 103200 per kthread [ 150.993943][T10197] rxe_eth0 speed is unknown, defaulting to 1000 [ 151.021877][T10211] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1285'. [ 151.033200][ T6056] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.033214][ T6056] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.109264][ T6056] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.109286][ T6056] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.387971][T10243] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1289'. [ 151.387995][T10243] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1289'. [ 151.388198][T10243] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 151.516837][T10256] syzkaller1: entered promiscuous mode [ 151.516853][T10256] syzkaller1: entered allmulticast mode [ 151.639463][T10266] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0, syncid = 31, id = 0 [ 151.714929][T10273] netlink: 'syz.0.1294': attribute type 3 has an invalid length. [ 151.714951][T10273] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1294'. [ 151.743769][T10275] netlink: 'syz.6.1293': attribute type 10 has an invalid length. [ 151.743785][T10275] netlink: 55 bytes leftover after parsing attributes in process `syz.6.1293'. [ 152.265639][T10284] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1296'. [ 152.338049][T10286] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1297'. [ 152.725961][ T5091] Bluetooth: hci1: command tx timeout [ 153.754686][T10314] netlink: 'syz.7.1305': attribute type 10 has an invalid length. [ 153.755094][T10314] syz_tun: entered promiscuous mode [ 153.759610][T10314] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 153.781499][T10316] ip_tables: iptables: counters copy to user failed while replacing table [ 153.817940][T10318] Failed to get privilege flags for destination (handle=0x2:0x2) [ 154.777157][T10338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.806058][ T5091] Bluetooth: hci1: command tx timeout [ 154.828892][T10338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.855970][ T5881] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 154.880501][T10338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.006477][ T5881] usb 12-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 155.007052][ T5881] usb 12-1: config 0 has no interfaces? [ 155.007079][ T5881] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.009926][ T5881] usb 12-1: config 0 descriptor?? [ 155.213527][T10332] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 155.215118][ T997] usb 12-1: USB disconnect, device number 2 [ 155.522582][T10348] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1317'. [ 155.524866][T10346] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 155.606063][ T42] kauditd_printk_skb: 32 callbacks suppressed [ 155.606079][ T42] audit: type=1400 audit(1792424728.129:5493): avc: denied { setopt } for pid=10354 comm="syz.0.1320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 155.607451][T10355] loop5: detected capacity change from 0 to 7 [ 155.611725][T10355] Dev loop5: unable to read RDB block 7 [ 155.611821][T10355] loop5: AHDI p1 p2 p3 [ 155.611831][T10355] loop5: partition table partially beyond EOD, truncated [ 155.612068][T10355] loop5: p1 start 1601398130 is beyond EOD, truncated [ 155.612079][T10355] loop5: p2 start 1702059890 is beyond EOD, truncated [ 155.621814][T10358] netlink: 'syz.6.1321': attribute type 1 has an invalid length. [ 155.640031][T10358] 8021q: adding VLAN 0 to HW filter on device bond3 [ 155.662272][T10358] bond3: (slave ip6erspan0): making interface the new active one [ 155.663121][T10358] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link [ 155.666423][T10358] sg_write: data in/out 180/136 bytes for SCSI command 0x0-- guessing data in; [ 155.666423][T10358] program syz.6.1321 not setting count and/or reply_len properly [ 155.681896][ T42] audit: type=1400 audit(1792424728.209:5494): avc: denied { create } for pid=10362 comm="syz.5.1323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 155.694476][ T42] audit: type=1400 audit(1792424728.219:5495): avc: denied { bind } for pid=10362 comm="syz.5.1323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 155.695510][ T42] audit: type=1400 audit(1792424728.219:5496): avc: denied { write } for pid=10362 comm="syz.5.1323" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 155.696125][ T42] audit: type=1400 audit(1792424728.229:5497): avc: denied { setopt } for pid=10362 comm="syz.5.1323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 155.857471][T10376] rxe_eth0 speed is unknown, defaulting to 1000 [ 155.868797][T10378] FAULT_INJECTION: forcing a failure. [ 155.868797][T10378] name failslab, interval 1, probability 0, space 0, times 0 [ 155.868835][T10378] CPU: 2 UID: 0 PID: 10378 Comm: syz.5.1329 Tainted: G L syzkaller #0 PREEMPT(full) [ 155.868853][T10378] Tainted: [L]=SOFTLOCKUP [ 155.868868][T10378] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 155.868883][T10378] Call Trace: [ 155.868888][T10378] [ 155.868893][T10378] dump_stack_lvl+0x100/0x190 [ 155.868977][T10378] should_fail_ex.cold+0x5/0xa [ 155.869010][T10378] should_failslab+0xc2/0x120 [ 155.869035][T10378] kmem_cache_alloc_noprof+0x92/0x6a0 [ 155.869056][T10378] ? __proc_create+0xc1/0x8f0 [ 155.869104][T10378] ? __proc_create+0x247/0x8f0 [ 155.869131][T10378] __proc_create+0x247/0x8f0 [ 155.869154][T10378] ? __pfx___proc_create+0x10/0x10 [ 155.869189][T10378] proc_mkdir+0x81/0x170 [ 155.869210][T10378] ? __pfx_proc_mkdir+0x10/0x10 [ 155.869223][T10378] ? cache_register_net+0x137/0x5e0 [ 155.869245][T10378] ? cache_register_net+0x137/0x5e0 [ 155.869262][T10378] cache_register_net+0x18f/0x5e0 [ 155.869276][T10378] nfsd_idmap_init+0x16e/0x250 [ 155.869294][T10378] ? __pfx_nfsd_net_init+0x10/0x10 [ 155.869305][T10378] nfsd_net_init+0x85/0x480 [ 155.869318][T10378] ? __pfx_nfsd_net_init+0x10/0x10 [ 155.869329][T10378] ops_init+0x1e2/0x5f0 [ 155.869354][T10378] setup_net+0x118/0x3a0 [ 155.869368][T10378] ? __pfx_setup_net+0x10/0x10 [ 155.869386][T10378] copy_net_ns+0x345/0x7a0 [ 155.869402][T10378] create_new_namespaces+0x3ea/0xac0 [ 155.869438][T10378] unshare_nsproxy_namespaces+0xf2/0x220 [ 155.869454][T10378] ksys_unshare+0x4a2/0xb30 [ 155.869470][T10378] ? __pfx_ksys_unshare+0x10/0x10 [ 155.869484][T10378] ? kmem_cache_free+0x127/0x6c0 [ 155.869503][T10378] __x64_sys_unshare+0x31/0x40 [ 155.869519][T10378] do_syscall_64+0x123/0x790 [ 155.869544][T10378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.869560][T10378] RIP: 0033:0x7f6d5439e559 [ 155.869571][T10378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.869583][T10378] RSP: 002b:00007f6d55333028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 155.869595][T10378] RAX: ffffffffffffffda RBX: 00007f6d54625fa0 RCX: 00007f6d5439e559 [ 155.869603][T10378] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 155.869610][T10378] RBP: 00007f6d54435ad8 R08: 0000000000000000 R09: 0000000000000000 [ 155.869618][T10378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.869625][T10378] R13: 00007f6d54626038 R14: 00007f6d54625fa0 R15: 00007ffe9f1fb4f8 [ 155.869641][T10378] [ 155.943407][ T42] audit: type=1400 audit(1792424728.469:5498): avc: denied { write } for pid=10383 comm="syz.6.1331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 155.988330][ T42] audit: type=1400 audit(1792424728.519:5499): avc: denied { getopt } for pid=10385 comm="syz.6.1332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 156.024868][T10393] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 156.024906][T10393] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 156.024973][T10393] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 156.027519][T10393] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 156.032103][T10393] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 156.255071][ T42] audit: type=1400 audit(1792424728.779:5500): avc: denied { name_bind } for pid=10409 comm="syz.0.1339" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 156.346050][ T936] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 156.496878][ T936] usb 10-1: Using ep0 maxpacket: 8 [ 156.498275][ T936] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 156.503510][ T936] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 156.503548][ T936] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 156.503565][ T936] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 156.503584][ T936] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 156.503601][ T936] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 156.503631][ T936] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.641911][T10448] IPv6: NLM_F_REPLACE set, but no existing node found! [ 156.645625][ T42] audit: type=1400 audit(1792424729.169:5501): avc: denied { view } for pid=10449 comm="syz.0.1341" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 156.717537][ T936] usb 10-1: usb_control_msg returned -32 [ 156.717562][ T936] usbtmc 10-1:16.0: can't read capabilities [ 156.717736][T10400] netlink: 'syz.5.1335': attribute type 32 has an invalid length. [ 156.821691][T10456] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=10456 comm=syz.0.1343 [ 156.823485][T10456] ebt_among: dst integrity fail: 200 [ 156.886027][ T5091] Bluetooth: hci1: command tx timeout [ 156.920371][T10459] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 156.920388][T10459] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 156.920482][T10459] vhci_hcd vhci_hcd.0: Device attached [ 156.931976][T10459] netlink: 'syz.7.1344': attribute type 4 has an invalid length. [ 156.931995][T10459] netlink: 152 bytes leftover after parsing attributes in process `syz.7.1344'. [ 156.940627][T10459] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 156.944166][T10460] vhci_hcd: connection closed [ 156.944800][ T5891] vhci_hcd vhci_hcd.0: stop threads [ 156.944825][ T5891] vhci_hcd vhci_hcd.0: release socket [ 156.944844][ T5891] vhci_hcd vhci_hcd.0: disconnect device [ 157.073775][T10468] usbtmc 10-1:16.0: usb_control_msg returned -32 [ 157.074453][ T1642] usb 10-1: USB disconnect, device number 8 [ 157.179060][T10464] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1345'. [ 157.449091][ T42] audit: type=1400 audit(1792424729.979:5502): avc: denied { accept } for pid=10475 comm="syz.6.1348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 157.827373][T10498] binder: 10497:10498 ioctl c0306201 200000000580 returned -22 [ 157.879439][T10504] netlink: 168 bytes leftover after parsing attributes in process `syz.7.1356'. [ 157.882442][T10505] binder: 10497:10505 ioctl c0306201 2000000000c0 returned -22 [ 157.932039][T10504] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1356'. [ 157.932831][T10504] FAULT_INJECTION: forcing a failure. [ 157.932831][T10504] name failslab, interval 1, probability 0, space 0, times 0 [ 157.932876][T10504] CPU: 3 UID: 0 PID: 10504 Comm: syz.7.1356 Tainted: G L syzkaller #0 PREEMPT(full) [ 157.932894][T10504] Tainted: [L]=SOFTLOCKUP [ 157.932898][T10504] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 157.932913][T10504] Call Trace: [ 157.932921][T10504] [ 157.932927][T10504] dump_stack_lvl+0x100/0x190 [ 157.933018][T10504] should_fail_ex.cold+0x5/0xa [ 157.933056][T10504] should_failslab+0xc2/0x120 [ 157.933093][T10504] kmem_cache_alloc_noprof+0x92/0x6a0 [ 157.933111][T10504] ? do_getname+0x35/0x390 [ 157.933127][T10504] do_getname+0x35/0x390 [ 157.933140][T10504] do_sys_openat2+0xc7/0x1e0 [ 157.933152][T10504] ? __pfx_do_sys_openat2+0x10/0x10 [ 157.933163][T10504] ? fput+0x7c/0x100 [ 157.933182][T10504] __x64_sys_openat+0x12d/0x210 [ 157.933193][T10504] ? __pfx___x64_sys_openat+0x10/0x10 [ 157.933210][T10504] do_syscall_64+0x123/0x790 [ 157.933236][T10504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.933247][T10504] RIP: 0033:0x7f694fb9e559 [ 157.933257][T10504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.933269][T10504] RSP: 002b:00007f6950b18028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 157.933286][T10504] RAX: ffffffffffffffda RBX: 00007f694fe25fa0 RCX: 00007f694fb9e559 [ 157.933293][T10504] RDX: 0000000000000001 RSI: 00002000000008c0 RDI: ffffffffffffff9c [ 157.933301][T10504] RBP: 00007f694fc35ad8 R08: 0000000000000000 R09: 0000000000000000 [ 157.933308][T10504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 157.933315][T10504] R13: 00007f694fe26038 R14: 00007f694fe25fa0 R15: 00007ffe89763c48 [ 157.933330][T10504] [ 158.131314][T10516] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1358'. [ 158.131359][T10516] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1358'. [ 158.137393][T10519] ip_tables: iptables: counters copy to user failed while replacing table [ 158.353339][T10534] openvswitch: netlink: Missing key (keys=d0, expected=40280) [ 158.353732][T10534] openvswitch: netlink: Missing key (keys=d0, expected=40280) [ 158.354050][T10534] openvswitch: netlink: Missing key (keys=d0, expected=40280) [ 158.354241][T10534] openvswitch: netlink: Missing key (keys=d0, expected=40280) [ 158.454318][T10537] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1367'. [ 158.536292][ T5828] usb 10-1: new low-speed USB device number 9 using dummy_hcd [ 158.688254][ T5828] usb 10-1: unable to get BOS descriptor or descriptor too short [ 158.688305][ T5828] usb 10-1: New USB device found, idVendor=1430, idProduct=6cdc, bcdDevice=85.cc [ 158.689403][ T5828] usb 10-1: config 8 has an invalid interface number: 198 but max is 0 [ 158.689418][ T5828] usb 10-1: config 8 has no interface number 0 [ 158.689436][ T5828] usb 10-1: config 8 interface 198 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 8 [ 158.691630][ T5828] usb 10-1: string descriptor 0 read error: -22 [ 158.691687][ T5828] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.694908][T10530] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 158.903376][ T936] usb 10-1: USB disconnect, device number 9 [ 158.966093][ T5091] Bluetooth: hci1: command tx timeout [ 159.469614][T10566] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1377'. [ 159.511497][T10566] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1377'. [ 159.512723][T10566] FAULT_INJECTION: forcing a failure. [ 159.512723][T10566] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.512755][T10566] CPU: 1 UID: 0 PID: 10566 Comm: syz.5.1377 Tainted: G L syzkaller #0 PREEMPT(full) [ 159.512783][T10566] Tainted: [L]=SOFTLOCKUP [ 159.512791][T10566] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 159.512803][T10566] Call Trace: [ 159.512810][T10566] [ 159.512819][T10566] dump_stack_lvl+0x100/0x190 [ 159.512855][T10566] should_fail_ex.cold+0x5/0xa [ 159.512883][T10566] strncpy_from_user+0x3b/0x2d0 [ 159.512961][T10566] do_getname+0x78/0x390 [ 159.512987][T10566] do_sys_openat2+0xc7/0x1e0 [ 159.513007][T10566] ? __pfx_do_sys_openat2+0x10/0x10 [ 159.513030][T10566] ? fput+0x7c/0x100 [ 159.513063][T10566] __x64_sys_openat+0x12d/0x210 [ 159.513083][T10566] ? __pfx___x64_sys_openat+0x10/0x10 [ 159.513113][T10566] do_syscall_64+0x123/0x790 [ 159.513146][T10566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.513166][T10566] RIP: 0033:0x7f6d5439e559 [ 159.513182][T10566] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.513200][T10566] RSP: 002b:00007f6d55333028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 159.513221][T10566] RAX: ffffffffffffffda RBX: 00007f6d54625fa0 RCX: 00007f6d5439e559 [ 159.513233][T10566] RDX: 0000000000000001 RSI: 00002000000008c0 RDI: ffffffffffffff9c [ 159.513247][T10566] RBP: 00007f6d54435ad8 R08: 0000000000000000 R09: 0000000000000000 [ 159.513258][T10566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 159.513268][T10566] R13: 00007f6d54626038 R14: 00007f6d54625fa0 R15: 00007ffe9f1fb4f8 [ 159.513295][T10566] [ 159.554446][T10570] FAULT_INJECTION: forcing a failure. [ 159.554446][T10570] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.554478][T10570] CPU: 2 UID: 0 PID: 10570 Comm: syz.6.1379 Tainted: G L syzkaller #0 PREEMPT(full) [ 159.554502][T10570] Tainted: [L]=SOFTLOCKUP [ 159.554508][T10570] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 159.554519][T10570] Call Trace: [ 159.554525][T10570] [ 159.554533][T10570] dump_stack_lvl+0x100/0x190 [ 159.554565][T10570] should_fail_ex.cold+0x5/0xa [ 159.554591][T10570] strncpy_from_user+0x3b/0x2d0 [ 159.554623][T10570] bpf_prog_load+0x1502/0x2ab0 [ 159.554672][T10570] ? __pfx_bpf_prog_load+0x10/0x10 [ 159.554721][T10570] __sys_bpf+0x1f46/0x4a30 [ 159.554749][T10570] ? __pfx___sys_bpf+0x10/0x10 [ 159.554769][T10570] ? find_held_lock+0x2b/0x80 [ 159.554808][T10570] ? get_pid_task+0xfc/0x250 [ 159.554842][T10570] ? get_pid_task+0xfc/0x250 [ 159.554876][T10570] ? find_held_lock+0x2b/0x80 [ 159.554909][T10570] ? rcu_read_lock_any_held+0x6a/0x90 [ 159.554936][T10570] ? find_held_lock+0x2b/0x80 [ 159.554963][T10570] ? ksys_write+0x190/0x250 [ 159.554986][T10570] ? ksys_write+0x190/0x250 [ 159.555012][T10570] ? lock_acquire+0x1d1/0x380 [ 159.555051][T10570] ? fput+0x7c/0x100 [ 159.555077][T10570] ? ksys_write+0x1ac/0x250 [ 159.555102][T10570] ? __x64_sys_bpf+0xce/0x140 [ 159.555122][T10570] __x64_sys_bpf+0xce/0x140 [ 159.555144][T10570] ? do_syscall_64+0xae/0x790 [ 159.555173][T10570] do_syscall_64+0x123/0x790 [ 159.555201][T10570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.555220][T10570] RIP: 0033:0x7fe76899e559 [ 159.555237][T10570] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.555254][T10570] RSP: 002b:00007fe7698d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 159.555294][T10570] RAX: ffffffffffffffda RBX: 00007fe768c25fa0 RCX: 00007fe76899e559 [ 159.555305][T10570] RDX: 0000000000000094 RSI: 0000200000000280 RDI: 0000000000000005 [ 159.555316][T10570] RBP: 00007fe7698d9090 R08: 0000000000000000 R09: 0000000000000000 [ 159.555328][T10570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.555339][T10570] R13: 00007fe768c26038 R14: 00007fe768c25fa0 R15: 00007ffe922a0f68 [ 159.555365][T10570] [ 159.828853][T10582] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 159.926505][ T5881] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 160.076524][ T5881] usb 10-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 160.077346][ T5881] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 160.077383][ T5881] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.083608][ T5881] as10x_usb: device has been detected [ 160.083902][ T5881] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 160.094054][ T5881] usb 10-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 160.100175][ T5881] as10x_usb: error during firmware upload part1 [ 160.100455][ T5881] Registered device Abilis Systems DVB-Titan [ 160.220467][ T5091] Bluetooth: to_multiplier 0 < 10 [ 160.618281][T10600] block nbd6: shutting down sockets [ 160.635026][T10604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.635361][T10604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.835208][T10610] jffs2: notice: (10610) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 160.853946][ T42] kauditd_printk_skb: 14 callbacks suppressed [ 160.853972][ T42] audit: type=1400 audit(1792424733.379:5517): avc: denied { write } for pid=10609 comm="syz.0.1393" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 160.879857][T10617] tipc: Started in network mode [ 160.879883][T10617] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 160.880045][T10617] tipc: Enabling of bearer rejected, failed to enable media [ 160.934958][T10621] ptrace attach of "/syz-executor exec"[8609] was attempted by "/syz-executor exec"[10621] [ 161.012364][T10626] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1398'. [ 161.012472][T10626] bridge_slave_1: left allmulticast mode [ 161.012492][T10626] bridge_slave_1: left promiscuous mode [ 161.012635][T10626] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.014824][T10626] bridge_slave_0: left allmulticast mode [ 161.014838][T10626] bridge_slave_0: left promiscuous mode [ 161.014951][T10626] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.020389][ T42] audit: type=1400 audit(1792424733.549:5518): avc: denied { map } for pid=10628 comm="syz.0.1399" path="socket:[38781]" dev="sockfs" ino=38781 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 161.021223][ T42] audit: type=1400 audit(1792424733.549:5519): avc: denied { read } for pid=10628 comm="syz.0.1399" path="socket:[38781]" dev="sockfs" ino=38781 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 161.055867][ T1642] usb 10-1: USB disconnect, device number 10 [ 161.081324][ T1642] Unregistered device Abilis Systems DVB-Titan [ 161.084249][ T1642] as10x_usb: device has been disconnected [ 161.319137][T10643] 8021q: adding VLAN 0 to HW filter on device bond4 [ 161.326808][T10646] FAULT_INJECTION: forcing a failure. [ 161.326808][T10646] name failslab, interval 1, probability 0, space 0, times 0 [ 161.326843][T10646] CPU: 3 UID: 0 PID: 10646 Comm: syz.7.1405 Tainted: G L syzkaller #0 PREEMPT(full) [ 161.326859][T10646] Tainted: [L]=SOFTLOCKUP [ 161.326863][T10646] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 161.326877][T10646] Call Trace: [ 161.326881][T10646] [ 161.326886][T10646] dump_stack_lvl+0x100/0x190 [ 161.326999][T10646] should_fail_ex.cold+0x5/0xa [ 161.327029][T10646] should_failslab+0xc2/0x120 [ 161.327062][T10646] __kmalloc_noprof+0xfc/0x840 [ 161.327077][T10646] ? tomoyo_encode2+0xfb/0x3c0 [ 161.327103][T10646] tomoyo_encode2+0xfb/0x3c0 [ 161.327125][T10646] tomoyo_encode+0x29/0x50 [ 161.327141][T10646] tomoyo_realpath_from_path+0x18c/0x690 [ 161.327157][T10646] tomoyo_mount_acl+0x1b6/0x8b0 [ 161.327178][T10646] ? is_bpf_text_address+0x8a/0x1a0 [ 161.327212][T10646] ? is_bpf_text_address+0x8a/0x1a0 [ 161.327230][T10646] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 161.327251][T10646] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 161.327266][T10646] ? kernel_text_address+0x8d/0x100 [ 161.327290][T10646] ? unwind_get_return_address+0x59/0xa0 [ 161.327322][T10646] ? arch_stack_walk+0xa6/0xf0 [ 161.327347][T10646] ? __lock_acquire+0x5c0/0x1f40 [ 161.327373][T10646] ? tomoyo_mount_permission+0x1f6/0x460 [ 161.327408][T10646] ? tomoyo_domain+0xb2/0x150 [ 161.327426][T10646] ? tomoyo_profile+0x47/0x60 [ 161.327446][T10646] tomoyo_mount_permission+0x214/0x460 [ 161.327467][T10646] ? tomoyo_mount_permission+0x1f6/0x460 [ 161.327484][T10646] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 161.327509][T10646] security_sb_mount+0xdd/0x270 [ 161.327525][T10646] path_mount+0x158/0x2850 [ 161.327540][T10646] ? __pfx_path_mount+0x10/0x10 [ 161.327551][T10646] ? lockdep_hardirqs_on+0x7d/0x110 [ 161.327579][T10646] ? putname+0xb1/0x110 [ 161.327587][T10646] ? kmem_cache_free+0x127/0x6c0 [ 161.327604][T10646] ? __x64_sys_mount+0x293/0x310 [ 161.327622][T10646] __x64_sys_mount+0x293/0x310 [ 161.327640][T10646] ? __pfx___x64_sys_mount+0x10/0x10 [ 161.327665][T10646] do_syscall_64+0x123/0x790 [ 161.327689][T10646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.327700][T10646] RIP: 0033:0x7f694fb9e559 [ 161.327710][T10646] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.327721][T10646] RSP: 002b:00007f6950b18028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 161.327732][T10646] RAX: ffffffffffffffda RBX: 00007f694fe25fa0 RCX: 00007f694fb9e559 [ 161.327739][T10646] RDX: 0000200000000140 RSI: 00002000000000c0 RDI: 0000000000000000 [ 161.327745][T10646] RBP: 00007f6950b18090 R08: 0000200000000180 R09: 0000000000000000 [ 161.327751][T10646] R10: 0000000000014000 R11: 0000000000000246 R12: 0000000000000001 [ 161.327758][T10646] R13: 00007f694fe26038 R14: 00007f694fe25fa0 R15: 00007ffe89763c48 [ 161.327773][T10646] [ 161.327808][T10646] ERROR: Out of memory at tomoyo_realpath_from_path. [ 161.335886][T10643] netlink: 'syz.0.1404': attribute type 4 has an invalid length. [ 161.337348][T10643] .`: renamed from bond0 [ 161.375026][T10648] kvm: user requested TSC rate below hardware speed [ 161.379909][T10648] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 161.562305][ T42] audit: type=1400 audit(1792424734.089:5520): avc: denied { mount } for pid=10653 comm="syz.7.1408" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 161.599020][T10654] sctp: [Deprecated]: syz.7.1408 (pid 10654) Use of int in max_burst socket option deprecated. [ 161.599020][T10654] Use struct sctp_assoc_value instead [ 161.619796][T10658] FAULT_INJECTION: forcing a failure. [ 161.619796][T10658] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.619845][T10658] CPU: 3 UID: 0 PID: 10658 Comm: syz.6.1409 Tainted: G L syzkaller #0 PREEMPT(full) [ 161.619860][T10658] Tainted: [L]=SOFTLOCKUP [ 161.619864][T10658] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 161.619886][T10658] Call Trace: [ 161.619891][T10658] [ 161.619899][T10658] dump_stack_lvl+0x100/0x190 [ 161.619958][T10658] should_fail_ex.cold+0x5/0xa [ 161.619985][T10658] _copy_from_user+0x2e/0xd0 [ 161.620008][T10658] memdup_user+0x6b/0xe0 [ 161.620031][T10658] strndup_user+0x78/0xe0 [ 161.620044][T10658] __x64_sys_mount+0x136/0x310 [ 161.620057][T10658] ? __pfx___x64_sys_mount+0x10/0x10 [ 161.620073][T10658] do_syscall_64+0x123/0x790 [ 161.620097][T10658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.620109][T10658] RIP: 0033:0x7fe76899e559 [ 161.620118][T10658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.620129][T10658] RSP: 002b:00007fe7698d9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 161.620140][T10658] RAX: ffffffffffffffda RBX: 00007fe768c25fa0 RCX: 00007fe76899e559 [ 161.620147][T10658] RDX: 0000200000000340 RSI: 0000200000000080 RDI: 0000200000000040 [ 161.620154][T10658] RBP: 00007fe7698d9090 R08: 0000000000000000 R09: 0000000000000000 [ 161.620160][T10658] R10: 0000000002c14808 R11: 0000000000000246 R12: 0000000000000001 [ 161.620166][T10658] R13: 00007fe768c26038 R14: 00007fe768c25fa0 R15: 00007ffe922a0f68 [ 161.620180][T10658] [ 161.674714][ T42] audit: type=1400 audit(1792424734.199:5521): avc: denied { read } for pid=10661 comm="syz.6.1411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 161.707263][ T42] audit: type=1400 audit(1792424734.239:5522): avc: denied { append } for pid=10663 comm="syz.6.1412" name="event0" dev="devtmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 161.764941][T10667] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 161.965151][ T42] audit: type=1400 audit(1792424734.489:5523): avc: denied { write } for pid=10673 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 161.981807][T10680] FAULT_INJECTION: forcing a failure. [ 161.981807][T10680] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.981836][T10680] CPU: 0 UID: 0 PID: 10680 Comm: syz.6.1416 Tainted: G L syzkaller #0 PREEMPT(full) [ 161.981862][T10680] Tainted: [L]=SOFTLOCKUP [ 161.981870][T10680] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 161.981882][T10680] Call Trace: [ 161.981889][T10680] [ 161.981896][T10680] dump_stack_lvl+0x100/0x190 [ 161.981925][T10680] should_fail_ex.cold+0x5/0xa [ 161.981950][T10680] _copy_to_user+0x32/0xd0 [ 161.981981][T10680] simple_read_from_buffer+0xcb/0x170 [ 161.982010][T10680] proc_fail_nth_read+0x1af/0x230 [ 161.982041][T10680] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 161.982068][T10680] ? rw_verify_area+0xce/0x6d0 [ 161.982086][T10680] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 161.982110][T10680] vfs_read+0x1e4/0xb40 [ 161.982131][T10680] ? lock_acquire+0x1d1/0x380 [ 161.982177][T10680] ? __fget_files+0x34/0x3d0 [ 161.982202][T10680] ? __pfx_vfs_read+0x10/0x10 [ 161.982220][T10680] ? find_held_lock+0x2b/0x80 [ 161.982245][T10680] ? __fget_files+0x215/0x3d0 [ 161.982272][T10680] ? __fget_files+0x21f/0x3d0 [ 161.982302][T10680] ksys_read+0x12a/0x250 [ 161.982325][T10680] ? __pfx_ksys_read+0x10/0x10 [ 161.982355][T10680] do_syscall_64+0x123/0x790 [ 161.982383][T10680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.982400][T10680] RIP: 0033:0x7fe76895ed8e [ 161.982414][T10680] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 161.982444][T10680] RSP: 002b:00007fe7698d8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 161.982463][T10680] RAX: ffffffffffffffda RBX: 00007fe7698d96c0 RCX: 00007fe76895ed8e [ 161.982475][T10680] RDX: 000000000000000f RSI: 00007fe7698d90a0 RDI: 0000000000000006 [ 161.982487][T10680] RBP: 00007fe7698d9090 R08: 0000000000000000 R09: 0000000000000000 [ 161.982499][T10680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.982509][T10680] R13: 00007fe768c26038 R14: 00007fe768c25fa0 R15: 00007ffe922a0f68 [ 161.982532][T10680] [ 162.036127][ T42] audit: type=1400 audit(1792424734.559:5524): avc: denied { write } for pid=10684 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 162.101075][T10693] __nla_validate_parse: 4 callbacks suppressed [ 162.101089][T10693] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1421'. [ 162.104834][ T42] audit: type=1400 audit(1792424734.629:5525): avc: denied { write } for pid=10689 comm="syz.5.1418" name="/" dev="9p" ino=71827811 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 162.104864][ T42] audit: type=1400 audit(1792424734.629:5526): avc: denied { remove_name } for pid=10689 comm="syz.5.1418" name="file0" dev="9p" ino=71827825 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 162.244650][T10691] afs: Unknown parameter ' 2n$YTH9¾ëàÆ™}ÉL)7«v6âê¬&[è»N­Í›¯BgöÎòr\ק@¡VÔŽ o…–' [ 162.246122][ T5735] Bluetooth: hci2: command tx timeout [ 162.296367][T10712] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 162.297194][T10712] bond4 (unregistering): Released all slaves [ 162.335606][T10715] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1428'. [ 162.335627][T10715] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1428'. [ 162.656080][ T5881] usb 11-1: new full-speed USB device number 6 using dummy_hcd [ 162.808007][ T5881] usb 11-1: unable to get BOS descriptor or descriptor too short [ 162.808393][ T5881] usb 11-1: not running at top speed; connect to a high speed hub [ 162.808447][ T5881] usb 11-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 162.809194][ T5881] usb 11-1: config 14 has an invalid interface number: 57 but max is 1 [ 162.809207][ T5881] usb 11-1: config 14 has an invalid interface number: 228 but max is 1 [ 162.809217][ T5881] usb 11-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 162.809226][ T5881] usb 11-1: config 14 has no interface number 0 [ 162.809234][ T5881] usb 11-1: config 14 has no interface number 1 [ 162.809260][ T5881] usb 11-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 162.809273][ T5881] usb 11-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 162.809285][ T5881] usb 11-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 162.809311][ T5881] usb 11-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 162.809324][ T5881] usb 11-1: config 14 interface 57 has no altsetting 0 [ 162.809333][ T5881] usb 11-1: config 14 interface 228 has no altsetting 0 [ 162.810897][ T5881] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.810912][ T5881] usb 11-1: Product: syz [ 162.810923][ T5881] usb 11-1: Manufacturer: syz [ 162.810934][ T5881] usb 11-1: SerialNumber: syz [ 163.192822][T10737] VFS: Can't find a romfs filesystem on dev mtdblock0. [ 163.192822][T10737] [ 163.242117][ T5881] legousbtower 11-1:14.57: interrupt endpoints not found [ 163.317838][T10741] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1432'. [ 163.419918][T10743] RGB/YUV Input: ================= START STATUS ================= [ 163.419931][T10743] RGB/YUV Input: Test Pattern: 75% Colorbar [ 163.419944][T10743] RGB/YUV Input: Show Information: All [ 163.419955][T10743] RGB/YUV Input: Vertical Flip: false [ 163.419964][T10743] RGB/YUV Input: Horizontal Flip: false [ 163.419975][T10743] RGB/YUV Input: Brightness: 128 [ 163.419985][T10743] RGB/YUV Input: Contrast: 128 [ 163.419995][T10743] RGB/YUV Input: Hue: 0 [ 163.420005][T10743] RGB/YUV Input: Saturation: 128 [ 163.420015][T10743] RGB/YUV Input: Pixel Rate: 160000000 [ 163.420036][T10743] RGB/YUV Input: Horizontal Blanking: 800 [ 163.420046][T10743] RGB/YUV Input: Vertical Blanking: 3223 [ 163.420058][T10743] RGB/YUV Input: ================== END STATUS ================== [ 163.420450][T10743] netlink: 'syz.5.1433': attribute type 9 has an invalid length. [ 163.425516][T10743] macvlan0: entered promiscuous mode [ 163.445190][T10722] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1429'. [ 163.448848][T10722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.449334][T10722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.529480][ T5881] legousbtower 11-1:14.228: get version request failed: -71 [ 163.529551][ T5881] legousbtower 11-1:14.228: probe with driver legousbtower failed with error -71 [ 163.534781][ T5881] usb 11-1: USB disconnect, device number 6 [ 163.751596][T10751] befs: (nbd5): No write support. Marking filesystem read-only [ 163.753269][T10751] befs: (nbd5): unable to read superblock [ 163.846069][ T5735] Bluetooth: hci0: command 0x1003 tx timeout [ 163.846212][ T5091] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 164.115317][T10764] FAULT_INJECTION: forcing a failure. [ 164.115317][T10764] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 164.115339][T10764] CPU: 1 UID: 0 PID: 10764 Comm: syz.7.1443 Tainted: G L syzkaller #0 PREEMPT(full) [ 164.115355][T10764] Tainted: [L]=SOFTLOCKUP [ 164.115359][T10764] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 164.115365][T10764] Call Trace: [ 164.115369][T10764] [ 164.115374][T10764] dump_stack_lvl+0x100/0x190 [ 164.115395][T10764] should_fail_ex.cold+0x5/0xa [ 164.115411][T10764] strncpy_from_user+0x3b/0x2d0 [ 164.115431][T10764] bpf_prog_load+0x1502/0x2ab0 [ 164.115453][T10764] ? __pfx_bpf_prog_load+0x10/0x10 [ 164.115481][T10764] __sys_bpf+0x1f46/0x4a30 [ 164.115497][T10764] ? __pfx___sys_bpf+0x10/0x10 [ 164.115509][T10764] ? find_held_lock+0x2b/0x80 [ 164.115526][T10764] ? get_pid_task+0xfc/0x250 [ 164.115554][T10764] ? get_pid_task+0xfc/0x250 [ 164.115574][T10764] ? find_held_lock+0x2b/0x80 [ 164.115593][T10764] ? rcu_read_lock_any_held+0x6a/0x90 [ 164.115611][T10764] ? find_held_lock+0x2b/0x80 [ 164.115627][T10764] ? ksys_write+0x190/0x250 [ 164.115646][T10764] ? ksys_write+0x190/0x250 [ 164.115659][T10764] ? lock_acquire+0x1d1/0x380 [ 164.115681][T10764] ? fput+0x7c/0x100 [ 164.115697][T10764] ? ksys_write+0x1ac/0x250 [ 164.115712][T10764] ? __x64_sys_bpf+0xce/0x140 [ 164.115724][T10764] __x64_sys_bpf+0xce/0x140 [ 164.115736][T10764] ? do_syscall_64+0xae/0x790 [ 164.115754][T10764] do_syscall_64+0x123/0x790 [ 164.115771][T10764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.115782][T10764] RIP: 0033:0x7f694fb9e559 [ 164.115791][T10764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.115802][T10764] RSP: 002b:00007f6950b18028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 164.115814][T10764] RAX: ffffffffffffffda RBX: 00007f694fe25fa0 RCX: 00007f694fb9e559 [ 164.115821][T10764] RDX: 0000000000000094 RSI: 0000200000000280 RDI: 0000000000000005 [ 164.115828][T10764] RBP: 00007f6950b18090 R08: 0000000000000000 R09: 0000000000000000 [ 164.115835][T10764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.115841][T10764] R13: 00007f694fe26038 R14: 00007f694fe25fa0 R15: 00007ffe89763c48 [ 164.115856][T10764] [ 164.129404][T10766] input: syz0 as /devices/virtual/input/input29 [ 164.252075][T10771] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1445'. [ 164.446216][T10781] trusted_key: encrypted_key: insufficient parameters specified [ 164.451479][T10781] trusted_key: encrypted_key: insufficient parameters specified [ 164.493563][T10783] rxe_eth0 speed is unknown, defaulting to 1000 [ 164.519614][T10785] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 164.519642][T10785] SELinux: failed to load policy [ 164.596004][ T24] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 164.748647][ T24] usb 11-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 164.749752][ T24] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 164.749792][ T24] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 164.749813][ T24] usb 11-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 164.751348][ T24] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 164.751368][ T24] usb 11-1: Product: syz [ 164.751381][ T24] usb 11-1: Manufacturer: syz [ 164.761439][T10775] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 164.763292][ T24] garmin_gps 11-1:1.0: Garmin GPS usb/tty converter detected [ 164.769458][ T24] usb 11-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 164.967189][ T850] usb 11-1: USB disconnect, device number 7 [ 164.973884][T10796] FAULT_INJECTION: forcing a failure. [ 164.973884][T10796] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 164.973917][T10796] CPU: 3 UID: 0 PID: 10796 Comm: syz.7.1453 Tainted: G L syzkaller #0 PREEMPT(full) [ 164.973951][T10796] Tainted: [L]=SOFTLOCKUP [ 164.973958][T10796] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 164.973970][T10796] Call Trace: [ 164.973977][T10796] [ 164.973985][T10796] dump_stack_lvl+0x100/0x190 [ 164.974020][T10796] should_fail_ex.cold+0x5/0xa [ 164.974047][T10796] _copy_to_user+0x32/0xd0 [ 164.974077][T10796] simple_read_from_buffer+0xcb/0x170 [ 164.974107][T10796] proc_fail_nth_read+0x1af/0x230 [ 164.974136][T10796] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 164.974167][T10796] ? rw_verify_area+0xce/0x6d0 [ 164.974188][T10796] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 164.974216][T10796] vfs_read+0x1e4/0xb40 [ 164.974240][T10796] ? lock_acquire+0x1d1/0x380 [ 164.974263][T10796] ? __fget_files+0x34/0x3d0 [ 164.974288][T10796] ? __pfx_vfs_read+0x10/0x10 [ 164.974308][T10796] ? find_held_lock+0x2b/0x80 [ 164.974335][T10796] ? __fget_files+0x215/0x3d0 [ 164.974366][T10796] ? __fget_files+0x21f/0x3d0 [ 164.974400][T10796] ksys_read+0x12a/0x250 [ 164.974422][T10796] ? __pfx_ksys_read+0x10/0x10 [ 164.974451][T10796] do_syscall_64+0x123/0x790 [ 164.974481][T10796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.974501][T10796] RIP: 0033:0x7f694fb5ed8e [ 164.974516][T10796] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 164.974535][T10796] RSP: 002b:00007f6950b17fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 164.974553][T10796] RAX: ffffffffffffffda RBX: 00007f6950b186c0 RCX: 00007f694fb5ed8e [ 164.974566][T10796] RDX: 000000000000000f RSI: 00007f6950b180a0 RDI: 0000000000000003 [ 164.974576][T10796] RBP: 00007f6950b18090 R08: 0000000000000000 R09: 0000000000000000 [ 164.974586][T10796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.974597][T10796] R13: 00007f694fe26038 R14: 00007f694fe25fa0 R15: 00007ffe89763c48 [ 164.974622][T10796] [ 164.977515][ T850] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 164.978782][ T850] garmin_gps 11-1:1.0: device disconnected [ 166.125170][T10802] netlink: 'syz.6.1456': attribute type 5 has an invalid length. [ 166.128551][T10802] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1456'. [ 167.047142][ T5735] Bluetooth: hci0: command 0x1003 tx timeout [ 167.047514][ T5091] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 167.089484][T10815] virtio-fs: tag not found [ 167.090854][T10815] virtio-fs: tag not found [ 167.539596][T10845] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1473'. [ 167.539613][T10845] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1473'. [ 167.539622][T10845] FAULT_INJECTION: forcing a failure. [ 167.539622][T10845] name failslab, interval 1, probability 0, space 0, times 0 [ 167.539639][T10845] CPU: 1 UID: 0 PID: 10845 Comm: syz.7.1473 Tainted: G L syzkaller #0 PREEMPT(full) [ 167.539654][T10845] Tainted: [L]=SOFTLOCKUP [ 167.539659][T10845] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 167.539666][T10845] Call Trace: [ 167.539672][T10845] [ 167.539677][T10845] dump_stack_lvl+0x100/0x190 [ 167.539698][T10845] should_fail_ex.cold+0x5/0xa [ 167.539716][T10845] should_failslab+0xc2/0x120 [ 167.539734][T10845] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 167.539750][T10845] ? __alloc_skb+0x5b7/0x710 [ 167.539781][T10845] ? __alloc_skb+0x140/0x710 [ 167.539794][T10845] __alloc_skb+0x140/0x710 [ 167.539805][T10845] ? __alloc_skb+0x5b7/0x710 [ 167.539816][T10845] ? __pfx___alloc_skb+0x10/0x10 [ 167.539831][T10845] netlink_ack+0x117/0xb80 [ 167.539850][T10845] ? avc_has_perm_noaudit+0x145/0x470 [ 167.539869][T10845] netlink_rcv_skb+0x333/0x420 [ 167.539880][T10845] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 167.539898][T10845] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 167.539917][T10845] ? ns_capable+0xd2/0xf0 [ 167.539939][T10845] nfnetlink_rcv+0x1b3/0x440 [ 167.539955][T10845] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 167.539968][T10845] ? netlink_deliver_tap+0x1ae/0xcc0 [ 167.539989][T10845] netlink_unicast+0x65f/0x950 [ 167.540003][T10845] ? __pfx_netlink_unicast+0x10/0x10 [ 167.540018][T10845] netlink_sendmsg+0x8b0/0xda0 [ 167.540032][T10845] ? __pfx_netlink_sendmsg+0x10/0x10 [ 167.540046][T10845] ? selinux_socket_sendmsg+0x198/0x2f0 [ 167.540065][T10845] ____sys_sendmsg+0xa4d/0xbe0 [ 167.540079][T10845] ? __pfx_netlink_sendmsg+0x10/0x10 [ 167.540092][T10845] ? __pfx_____sys_sendmsg+0x10/0x10 [ 167.540113][T10845] ___sys_sendmsg+0x190/0x1e0 [ 167.540129][T10845] ? __pfx____sys_sendmsg+0x10/0x10 [ 167.540145][T10845] ? futex_wait+0x11e/0x370 [ 167.540175][T10845] ? find_held_lock+0x2b/0x80 [ 167.540203][T10845] __sys_sendmsg+0x160/0x210 [ 167.540217][T10845] ? __pfx___sys_sendmsg+0x10/0x10 [ 167.540238][T10845] do_syscall_64+0x123/0x790 [ 167.540257][T10845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.540269][T10845] RIP: 0033:0x7f694fb9e559 [ 167.540279][T10845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.540290][T10845] RSP: 002b:00007f6950b18028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 167.540301][T10845] RAX: ffffffffffffffda RBX: 00007f694fe25fa0 RCX: 00007f694fb9e559 [ 167.540309][T10845] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000005 [ 167.540317][T10845] RBP: 00007f694fc35ad8 R08: 0000000000000000 R09: 0000000000000000 [ 167.540324][T10845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 167.540331][T10845] R13: 00007f694fe26038 R14: 00007f694fe25fa0 R15: 00007ffe89763c48 [ 167.540348][T10845] [ 167.576865][ T42] kauditd_printk_skb: 21 callbacks suppressed [ 167.576879][ T42] audit: type=1400 audit(1792424740.109:5546): avc: denied { write } for pid=10846 comm="syz.7.1474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 168.067061][ T42] audit: type=1400 audit(1792424740.599:5547): avc: denied { write } for pid=10855 comm="syz.6.1477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 168.108633][T10858] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 168.440516][T10864] ip_tables: iptables: counters copy to user failed while replacing table [ 168.528675][T10876] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1481'. [ 168.776051][ T50] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 168.925993][ T50] usb 11-1: Using ep0 maxpacket: 8 [ 168.926608][ T50] usb 11-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 168.927728][ T50] usb 11-1: config 1 has an invalid descriptor of length 229, skipping remainder of the config [ 168.927748][ T50] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 168.927783][ T50] usb 11-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 168.927816][ T50] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.141118][ T50] usb 11-1: string descriptor 0 read error: -71 [ 169.141337][ T50] hub 11-1:1.0: bad descriptor, ignoring hub [ 169.141348][ T50] hub 11-1:1.0: probe with driver hub failed with error -5 [ 169.141573][ T50] cdc_wdm 11-1:1.0: probe with driver cdc_wdm failed with error -22 [ 169.156311][ T50] usb 11-1: USB disconnect, device number 8 [ 169.295783][T10894] FAULT_INJECTION: forcing a failure. [ 169.295783][T10894] name failslab, interval 1, probability 0, space 0, times 0 [ 169.295818][T10894] CPU: 3 UID: 0 PID: 10894 Comm: syz.0.1492 Tainted: G L syzkaller #0 PREEMPT(full) [ 169.295844][T10894] Tainted: [L]=SOFTLOCKUP [ 169.295851][T10894] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 169.295862][T10894] Call Trace: [ 169.295869][T10894] [ 169.295877][T10894] dump_stack_lvl+0x100/0x190 [ 169.295935][T10894] should_fail_ex.cold+0x5/0xa [ 169.295966][T10894] should_failslab+0xc2/0x120 [ 169.295998][T10894] __kmalloc_noprof+0xfc/0x840 [ 169.296024][T10894] ? l2tp_session_create+0x3a/0xd90 [ 169.296070][T10894] l2tp_session_create+0x3a/0xd90 [ 169.296098][T10894] pppol2tp_connect+0x1454/0x1c20 [ 169.296128][T10894] ? __pfx_pppol2tp_connect+0x10/0x10 [ 169.296153][T10894] ? print_kernel_ident+0x11/0x40 [ 169.296187][T10894] ? __local_bh_enable_ip+0xa5/0x120 [ 169.296213][T10894] ? selinux_netlbl_socket_connect+0x30/0x40 [ 169.296244][T10894] ? selinux_socket_connect+0x6b/0x80 [ 169.296275][T10894] __sys_connect_file+0x146/0x1a0 [ 169.296310][T10894] __sys_connect+0x141/0x170 [ 169.296340][T10894] ? __pfx___sys_connect+0x10/0x10 [ 169.296381][T10894] ? __pfx_ksys_write+0x10/0x10 [ 169.296412][T10894] __x64_sys_connect+0x72/0xb0 [ 169.296440][T10894] ? lockdep_hardirqs_on+0x7d/0x110 [ 169.296469][T10894] do_syscall_64+0x123/0x790 [ 169.296501][T10894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.296522][T10894] RIP: 0033:0x7fdaaa59e559 [ 169.296537][T10894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.296557][T10894] RSP: 002b:00007fdaab51d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 169.296577][T10894] RAX: ffffffffffffffda RBX: 00007fdaaa825fa0 RCX: 00007fdaaa59e559 [ 169.296589][T10894] RDX: 000000000000002e RSI: 00002000000001c0 RDI: 0000000000000004 [ 169.296603][T10894] RBP: 00007fdaaa635ad8 R08: 0000000000000000 R09: 0000000000000000 [ 169.296617][T10894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.296630][T10894] R13: 00007fdaaa826038 R14: 00007fdaaa825fa0 R15: 00007ffc23d40d48 [ 169.296657][T10894] [ 169.576016][ T50] usb 11-1: new high-speed USB device number 9 using dummy_hcd [ 169.585678][ T42] audit: type=1400 audit(1792424742.109:5548): avc: denied { ioctl } for pid=10898 comm="syz.5.1494" path="socket:[41692]" dev="sockfs" ino=41692 ioctlcmd=0x9417 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 169.586373][T10901] netlink: 19 bytes leftover after parsing attributes in process `syz.5.1494'. [ 169.590482][T10901] netlink: 19 bytes leftover after parsing attributes in process `syz.5.1494'. [ 169.671971][ T42] audit: type=1400 audit(1792424742.199:5549): avc: denied { bind } for pid=10909 comm="syz.7.1498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 169.672151][ T42] audit: type=1400 audit(1792424742.199:5550): avc: denied { name_bind } for pid=10909 comm="syz.7.1498" src=4660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 169.672334][ T42] audit: type=1400 audit(1792424742.199:5551): avc: denied { node_bind } for pid=10909 comm="syz.7.1498" saddr=172.20.20.170 src=4660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 169.726500][ T50] usb 11-1: Using ep0 maxpacket: 8 [ 169.727032][ T50] usb 11-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 169.728098][ T50] usb 11-1: config 1 has an invalid descriptor of length 229, skipping remainder of the config [ 169.728111][ T50] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 169.728130][ T50] usb 11-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 169.728149][ T50] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.937198][ T50] usb 11-1: string descriptor 0 read error: -71 [ 169.937443][ T50] hub 11-1:1.0: bad descriptor, ignoring hub [ 169.937461][ T50] hub 11-1:1.0: probe with driver hub failed with error -5 [ 169.937684][ T50] cdc_wdm 11-1:1.0: probe with driver cdc_wdm failed with error -22 [ 169.949454][T10921] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1502'. [ 169.949466][T10921] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1502'. [ 169.961097][ T50] usb 11-1: USB disconnect, device number 9 [ 169.976061][ T5891] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.976100][ T5891] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.976128][ T5891] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.976155][ T5891] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.566017][ T5735] Bluetooth: hci2: command 0x0406 tx timeout [ 170.658205][T10939] 9pnet_fd: Insufficient options for proto=fd [ 170.739470][T10943] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1511'. [ 170.742194][T10943] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1511'. [ 170.742566][T10943] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1511'. [ 170.814128][T10947] xt_hashlimit: invalid rate [ 170.814258][T10947] xt_hashlimit: invalid rate [ 170.814351][T10947] xt_hashlimit: invalid rate [ 170.814487][T10947] xt_hashlimit: invalid rate [ 170.814560][T10947] xt_hashlimit: invalid rate [ 170.814650][T10947] xt_hashlimit: invalid rate [ 170.814738][T10947] xt_hashlimit: invalid rate [ 170.814826][T10947] xt_hashlimit: invalid rate [ 170.815009][T10947] xt_hashlimit: invalid rate [ 170.815101][T10947] xt_hashlimit: invalid rate [ 171.362482][ T42] audit: type=1400 audit(1792424743.889:5552): avc: denied { mounton } for pid=10953 comm="syz.6.1515" path="/nfsd" dev="bpf" ino=41799 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 171.481617][T10965] xt_REDIRECT: bad rangesize 26624. [ 171.495209][T10965] block nbd0: not configured, cannot reconfigure [ 172.184626][T10973] syzkaller0: entered promiscuous mode [ 172.184641][T10973] syzkaller0: entered allmulticast mode [ 172.301433][ T42] audit: type=1400 audit(1792424744.829:5553): avc: denied { write } for pid=10980 comm="syz.5.1521" name="nullb" dev="configfs" ino=1430 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 172.314496][T10981] FAULT_INJECTION: forcing a failure. [ 172.314496][T10981] name failslab, interval 1, probability 0, space 0, times 0 [ 172.314518][T10981] CPU: 2 UID: 0 PID: 10981 Comm: syz.5.1521 Tainted: G L syzkaller #0 PREEMPT(full) [ 172.314548][T10981] Tainted: [L]=SOFTLOCKUP [ 172.314554][T10981] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 172.314565][T10981] Call Trace: [ 172.314571][T10981] [ 172.314578][T10981] dump_stack_lvl+0x100/0x190 [ 172.314615][T10981] should_fail_ex.cold+0x5/0xa [ 172.314645][T10981] should_failslab+0xc2/0x120 [ 172.314674][T10981] kmem_cache_alloc_noprof+0x92/0x6a0 [ 172.314692][T10981] ? check_noncircular+0x97/0x160 [ 172.314705][T10981] ? __kernfs_new_node+0xd2/0xa10 [ 172.314747][T10981] __kernfs_new_node+0xd2/0xa10 [ 172.314760][T10981] ? check_prev_add+0xfe/0xe60 [ 172.314774][T10981] ? kernfs_add_one+0x214/0xaa0 [ 172.314788][T10981] ? __pfx___kernfs_new_node+0x10/0x10 [ 172.314820][T10981] ? lock_acquire+0x1d1/0x380 [ 172.314834][T10981] ? kernfs_root+0x23/0x2a0 [ 172.314846][T10981] ? find_held_lock+0x2b/0x80 [ 172.314863][T10981] ? kernfs_root+0xee/0x2a0 [ 172.314874][T10981] ? kernfs_root+0xee/0x2a0 [ 172.314891][T10981] kernfs_new_node+0x117/0x150 [ 172.314908][T10981] kernfs_create_link+0xcc/0x240 [ 172.314926][T10981] sysfs_do_create_link_sd+0x90/0x140 [ 172.314940][T10981] sysfs_create_link+0x61/0xc0 [ 172.314952][T10981] device_add+0x553/0x1970 [ 172.314968][T10981] ? __pfx_device_add+0x10/0x10 [ 172.314979][T10981] ? __pfx___might_resched+0x10/0x10 [ 172.314998][T10981] __add_disk+0x592/0xf10 [ 172.315014][T10981] add_disk_fwnode+0x118/0x480 [ 172.315031][T10981] null_add_dev+0x129d/0x1df0 [ 172.315050][T10981] ? __pfx_null_add_dev+0x10/0x10 [ 172.315064][T10981] ? __lock_acquire+0x5c0/0x1f40 [ 172.315087][T10981] ? __pfx___might_resched+0x10/0x10 [ 172.315103][T10981] nullb_device_power_store+0x29d/0x350 [ 172.315115][T10981] ? __pfx_nullb_device_power_store+0x10/0x10 [ 172.315126][T10981] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 172.315139][T10981] ? configfs_write_iter+0x388/0x4e0 [ 172.315155][T10981] configfs_write_iter+0x302/0x4e0 [ 172.315170][T10981] vfs_write+0x6af/0x1050 [ 172.315185][T10981] ? __pfx_configfs_write_iter+0x10/0x10 [ 172.315200][T10981] ? __pfx_vfs_write+0x10/0x10 [ 172.315213][T10981] ? find_held_lock+0x2b/0x80 [ 172.315240][T10981] ksys_write+0x12a/0x250 [ 172.315254][T10981] ? __pfx_ksys_write+0x10/0x10 [ 172.315273][T10981] do_syscall_64+0x123/0x790 [ 172.315293][T10981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.315305][T10981] RIP: 0033:0x7f6d5439e559 [ 172.315315][T10981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.315327][T10981] RSP: 002b:00007f6d55333028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 172.315339][T10981] RAX: ffffffffffffffda RBX: 00007f6d54625fa0 RCX: 00007f6d5439e559 [ 172.315346][T10981] RDX: 0000000000000001 RSI: 0000200000000b00 RDI: 0000000000000007 [ 172.315353][T10981] RBP: 00007f6d54435ad8 R08: 0000000000000000 R09: 0000000000000000 [ 172.315360][T10981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 172.315366][T10981] R13: 00007f6d54626038 R14: 00007f6d54625fa0 R15: 00007ffe9f1fb4f8 [ 172.315383][T10981] [ 172.530136][ T42] audit: type=1400 audit(1792424745.059:5554): avc: denied { write } for pid=10989 comm="syz.7.1525" name="/" dev="9p" ino=71827811 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 172.532767][ T42] audit: type=1400 audit(1792424745.059:5555): avc: denied { append } for pid=10989 comm="syz.7.1525" path="/70/file0/cpuset.effective_mems" dev="9p" ino=71827927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 172.552204][T10990] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.626013][ T5828] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 172.776479][ T5828] usb 10-1: New USB device found, idVendor=0a99, idProduct=0001, bcdDevice= 0.00 [ 172.777387][ T5828] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 172.778637][ T5828] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 172.778649][ T5828] usb 10-1: Product: syz [ 172.778656][ T5828] usb 10-1: Manufacturer: syz [ 172.784699][ T5828] navman 10-1:1.0: navman converter detected [ 172.788231][ T5828] usb 10-1: navman converter now attached to ttyUSB0 [ 172.988542][ T5828] usb 10-1: USB disconnect, device number 11 [ 172.995576][ T5828] navman ttyUSB0: navman converter now disconnected from ttyUSB0 [ 172.995806][ T5828] navman 10-1:1.0: device disconnected [ 175.712070][T10996] gretap1: entered promiscuous mode [ 175.733483][ T42] kauditd_printk_skb: 1 callbacks suppressed [ 175.733499][ T42] audit: type=1400 audit(1792424748.259:5557): avc: denied { unmount } for pid=5733 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 175.792836][T11005] ecryptfs_verify_version: Minor version number mismatch. Expected [4]; got [0] [ 175.792893][T11005] Data structure version mismatch. Userspace tools must match eCryptfs kernel module with major version [0] and minor version [4] [ 175.792916][T11005] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 175.792926][T11005] One or more global auth toks could not properly register; rc = [-22] [ 175.792989][T11005] Error validating options; rc = [-22] [ 175.803602][T11012] __nla_validate_parse: 4 callbacks suppressed [ 175.803614][T11012] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1532'. [ 175.852058][T11016] FAULT_INJECTION: forcing a failure. [ 175.852058][T11016] name failslab, interval 1, probability 0, space 0, times 0 [ 175.852082][T11016] CPU: 3 UID: 0 PID: 11016 Comm: syz.5.1534 Tainted: G L syzkaller #0 PREEMPT(full) [ 175.852098][T11016] Tainted: [L]=SOFTLOCKUP [ 175.852102][T11016] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 175.852109][T11016] Call Trace: [ 175.852113][T11016] [ 175.852118][T11016] dump_stack_lvl+0x100/0x190 [ 175.852141][T11016] should_fail_ex.cold+0x5/0xa [ 175.852158][T11016] should_failslab+0xc2/0x120 [ 175.852178][T11016] __kvmalloc_node_noprof+0x113/0x9b0 [ 175.852194][T11016] ? __pfx___mutex_lock+0x10/0x10 [ 175.852213][T11016] ? nf_hook_entries_grow+0x255/0x870 [ 175.852233][T11016] nf_hook_entries_grow+0x255/0x870 [ 175.852251][T11016] ? __call_rcu_common.constprop.0+0x3f2/0x9b0 [ 175.852273][T11016] __nf_register_net_hook+0x112/0x780 [ 175.852293][T11016] nf_register_net_hook+0xdb/0x170 [ 175.852311][T11016] nf_register_net_hooks+0x5d/0xd0 [ 175.852331][T11016] nf_ct_netns_do_get+0x56b/0x610 [ 175.852342][T11016] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 175.852353][T11016] ? kasan_save_track+0x14/0x30 [ 175.852368][T11016] ? __kasan_kmalloc+0xaa/0xb0 [ 175.852383][T11016] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 175.852396][T11016] ? lockdep_init_map_type+0x5c/0x250 [ 175.852413][T11016] nf_ct_netns_get+0x5f/0x160 [ 175.852425][T11016] nft_connlimit_do_init+0x238/0x340 [ 175.852454][T11016] ? __pfx_nft_connlimit_init+0x10/0x10 [ 175.852473][T11016] nft_expr_init+0x28e/0x3b0 [ 175.852489][T11016] ? __pfx_nft_expr_init+0x10/0x10 [ 175.852519][T11016] nft_set_elem_expr_alloc+0x27/0x270 [ 175.852539][T11016] nft_set_expr_alloc+0x2ac/0x5f0 [ 175.852560][T11016] nf_tables_newset+0x3103/0x4250 [ 175.852583][T11016] ? net_generic+0xea/0x2a0 [ 175.852595][T11016] ? __pfx_nf_tables_newset+0x10/0x10 [ 175.852616][T11016] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 175.852633][T11016] ? __nla_validate_parse+0x1e7/0x28b0 [ 175.852655][T11016] ? lock_acquire+0x1d1/0x380 [ 175.852668][T11016] ? net_generic+0x25/0x2a0 [ 175.852684][T11016] ? __nla_parse+0x40/0x60 [ 175.852701][T11016] nfnetlink_rcv_batch+0x1410/0x2880 [ 175.852724][T11016] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 175.852741][T11016] ? lock_acquire+0x1d1/0x380 [ 175.852754][T11016] ? avc_has_perm_noaudit+0x56/0x470 [ 175.852773][T11016] ? avc_has_perm_noaudit+0x145/0x470 [ 175.852811][T11016] ? __nla_parse+0x40/0x60 [ 175.852828][T11016] nfnetlink_rcv+0x3bd/0x440 [ 175.852866][T11016] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 175.852888][T11016] netlink_unicast+0x65f/0x950 [ 175.852904][T11016] ? __pfx_netlink_unicast+0x10/0x10 [ 175.852920][T11016] netlink_sendmsg+0x8b0/0xda0 [ 175.852935][T11016] ? __pfx_netlink_sendmsg+0x10/0x10 [ 175.852949][T11016] ? selinux_socket_sendmsg+0x198/0x2f0 [ 175.852969][T11016] ____sys_sendmsg+0xa4d/0xbe0 [ 175.852984][T11016] ? __pfx_netlink_sendmsg+0x10/0x10 [ 175.852996][T11016] ? __pfx_____sys_sendmsg+0x10/0x10 [ 175.853024][T11016] ___sys_sendmsg+0x190/0x1e0 [ 175.853041][T11016] ? __pfx____sys_sendmsg+0x10/0x10 [ 175.853058][T11016] ? futex_wait+0x11e/0x370 [ 175.853079][T11016] ? find_held_lock+0x2b/0x80 [ 175.853108][T11016] __sys_sendmsg+0x160/0x210 [ 175.853122][T11016] ? __pfx___sys_sendmsg+0x10/0x10 [ 175.853144][T11016] do_syscall_64+0x123/0x790 [ 175.853163][T11016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.853176][T11016] RIP: 0033:0x7f6d5439e559 [ 175.853186][T11016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.853198][T11016] RSP: 002b:00007f6d55333028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 175.853211][T11016] RAX: ffffffffffffffda RBX: 00007f6d54625fa0 RCX: 00007f6d5439e559 [ 175.853218][T11016] RDX: 0000000020050800 RSI: 00002000000000c0 RDI: 0000000000000004 [ 175.853225][T11016] RBP: 00007f6d54435ad8 R08: 0000000000000000 R09: 0000000000000000 [ 175.853232][T11016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 175.853239][T11016] R13: 00007f6d54626038 R14: 00007f6d54625fa0 R15: 00007ffe9f1fb4f8 [ 175.853257][T11016] [ 175.866658][ T42] audit: type=1400 audit(1792424748.399:5558): avc: denied { map } for pid=11013 comm="syz.7.1533" path="socket:[40717]" dev="sockfs" ino=40717 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 175.910152][T11023] binder: 11022:11023 ioctl c0306201 200000000280 returned -14 [ 175.911151][T11023] binder: 11022:11023 ioctl c0306201 200000000380 returned -14 [ 175.911237][T11023] binder: 11022:11023 ioctl 4004ae99 200000000580 returned -22 [ 175.991580][T11026] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 176.023374][T11028] team0: Device xfrm0 is of different type [ 176.146916][T11037] tipc: Started in network mode [ 176.146935][T11037] tipc: Node identity , cluster identity 4711 [ 176.146948][T11037] tipc: Failed to set node id, please configure manually [ 176.146982][T11037] tipc: Enabling of bearer rejected, failed to enable media [ 176.181167][T11040] netlink: 'syz.0.1543': attribute type 2 has an invalid length. [ 176.181181][T11040] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1543'. [ 176.186771][T11040] input: syz0 as /devices/virtual/input/input30 [ 176.239761][ T42] audit: type=1400 audit(1792424748.769:5559): avc: denied { getopt } for pid=11039 comm="syz.0.1543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 176.316977][T11046] netlink: 'syz.5.1545': attribute type 20 has an invalid length. [ 176.328520][T11046] syzkaller0: left promiscuous mode [ 176.328559][T11046] syzkaller0: left allmulticast mode [ 176.415159][ T42] audit: type=1400 audit(1792424748.939:5560): avc: denied { write } for pid=11048 comm="syz.7.1546" name="/" dev="9p" ino=71827811 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 176.644825][T11053] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1548'. [ 176.722157][T11055] netlink: 'syz.7.1549': attribute type 10 has an invalid length. [ 176.930970][T11063] loop0: detected capacity change from 0 to 3904 [ 176.977950][T11063] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 176.977973][T11063] ldm_validate_privheads(): Disk read failed. [ 176.979232][T11063] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 176.979252][T11063] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 176.979264][T11063] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 2. [ 176.979278][T11063] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 3. [ 176.979291][T11063] ldm_validate_tocblocks(): Failed to find a valid TOCBLOCK. [ 176.979329][T11063] loop0: [ 176.979347][T11063] loop0: partition table partially beyond EOD, truncated [ 177.932335][T11086] FAULT_INJECTION: forcing a failure. [ 177.932335][T11086] name failslab, interval 1, probability 0, space 0, times 0 [ 177.932422][T11086] CPU: 3 UID: 0 PID: 11086 Comm: syz.5.1558 Tainted: G L syzkaller #0 PREEMPT(full) [ 177.932439][T11086] Tainted: [L]=SOFTLOCKUP [ 177.932443][T11086] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 177.932457][T11086] Call Trace: [ 177.932462][T11086] [ 177.932467][T11086] dump_stack_lvl+0x100/0x190 [ 177.932529][T11086] should_fail_ex.cold+0x5/0xa [ 177.932558][T11086] should_failslab+0xc2/0x120 [ 177.932592][T11086] __kmalloc_noprof+0xfc/0x840 [ 177.932608][T11086] ? tomoyo_encode2+0xfb/0x3c0 [ 177.932634][T11086] tomoyo_encode2+0xfb/0x3c0 [ 177.932654][T11086] tomoyo_encode+0x29/0x50 [ 177.932670][T11086] tomoyo_realpath_from_path+0x18c/0x690 [ 177.932685][T11086] tomoyo_path_number_perm+0x23c/0x580 [ 177.932699][T11086] ? tomoyo_path_number_perm+0x22e/0x580 [ 177.932716][T11086] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 177.932737][T11086] ? __lock_acquire+0x5c0/0x1f40 [ 177.932770][T11086] ? __fget_files+0x34/0x3d0 [ 177.932787][T11086] ? find_held_lock+0x2b/0x80 [ 177.932804][T11086] ? hook_file_ioctl_common+0x140/0x440 [ 177.932820][T11086] ? __fget_files+0x21f/0x3d0 [ 177.932856][T11086] security_file_ioctl+0xd3/0x230 [ 177.932876][T11086] __x64_sys_ioctl+0xb7/0x210 [ 177.932892][T11086] do_syscall_64+0x123/0x790 [ 177.932919][T11086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.932931][T11086] RIP: 0033:0x7f6d5439e559 [ 177.932941][T11086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.932953][T11086] RSP: 002b:00007f6d55333028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 177.932965][T11086] RAX: ffffffffffffffda RBX: 00007f6d54625fa0 RCX: 00007f6d5439e559 [ 177.932973][T11086] RDX: 0000200000000140 RSI: 00000000c0286405 RDI: 0000000000000003 [ 177.932980][T11086] RBP: 00007f6d55333090 R08: 0000000000000000 R09: 0000000000000000 [ 177.932986][T11086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.932993][T11086] R13: 00007f6d54626038 R14: 00007f6d54625fa0 R15: 00007ffe9f1fb4f8 [ 177.933008][T11086] [ 177.933019][T11086] ERROR: Out of memory at tomoyo_realpath_from_path. [ 177.986560][T11090] jffs2: notice: (11090) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 177.990728][ T42] audit: type=1400 audit(1792424750.519:5561): avc: denied { write } for pid=11089 comm="syz.5.1561" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 178.030575][ T42] audit: type=1400 audit(1792424750.559:5562): avc: denied { shutdown } for pid=11091 comm="syz.6.1562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 178.035142][ T42] audit: type=1400 audit(1792424750.559:5563): avc: denied { write } for pid=11094 comm="syz.0.1563" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 178.035171][ T42] audit: type=1400 audit(1792424750.559:5564): avc: denied { read } for pid=11094 comm="syz.0.1563" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 178.099429][T11105] jffs2: notice: (11105) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 178.103429][ T42] audit: type=1400 audit(1792424750.629:5565): avc: denied { mount } for pid=11103 comm="syz.6.1567" name="/" dev="ramfs" ino=43357 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 178.132184][T11109] netlink: 'syz.5.1569': attribute type 4 has an invalid length. [ 178.132555][T11110] netlink: 'syz.5.1569': attribute type 4 has an invalid length. [ 178.282811][T11124] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1575'. [ 178.862945][T11138] syz.6.1580(11138): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 179.010175][ T42] audit: type=1400 audit(1792424751.539:5566): avc: denied { setopt } for pid=11147 comm="syz.0.1584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 179.013290][T11149] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1584'. [ 179.029056][T11151] batman_adv: batadv0: Adding interface: syzkaller0 [ 179.029076][T11151] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 179.029095][T11151] batman_adv: batadv0: Interface activated: syzkaller0 [ 179.279188][T11157] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 179.293996][T11157] batman_adv: batadv0: Removing interface: syzkaller0 [ 179.971893][T11177] loop6: detected capacity change from 0 to 4096 [ 180.019312][T11179] FAULT_INJECTION: forcing a failure. [ 180.019312][T11179] name failslab, interval 1, probability 0, space 0, times 0 [ 180.019317][T11177] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 180.019333][T11177] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 180.019335][T11179] CPU: 3 UID: 0 PID: 11179 Comm: syz.5.1591 Tainted: G L syzkaller #0 PREEMPT(full) [ 180.019341][T11177] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 180.019351][T11179] Tainted: [L]=SOFTLOCKUP [ 180.019355][T11179] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 180.019362][T11179] Call Trace: [ 180.019366][T11179] [ 180.019370][T11177] loop6: [ 180.019371][T11179] dump_stack_lvl+0x100/0x190 [ 180.019392][T11179] should_fail_ex.cold+0x5/0xa [ 180.019409][T11179] should_failslab+0xc2/0x120 [ 180.019433][T11179] __kmalloc_node_noprof+0xff/0x880 [ 180.019448][T11179] ? __get_vm_area_node+0x1ff/0x350 [ 180.019463][T11179] ? __get_vm_area_node+0x22b/0x350 [ 180.019478][T11179] ? __vmalloc_node_range_noprof+0x3d4/0x1420 [ 180.019498][T11179] __vmalloc_node_range_noprof+0x3d4/0x1420 [ 180.019520][T11179] ? kernel_clone+0x176/0x9d0 [ 180.019547][T11179] ? __memcg_slab_post_alloc_hook+0x71e/0x10c0 [ 180.019561][T11179] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 180.019580][T11179] ? rcu_is_watching+0x13/0xc0 [ 180.019604][T11179] ? trace_kmem_cache_alloc+0xdd/0x100 [ 180.019622][T11179] ? kernel_clone+0x176/0x9d0 [ 180.019634][T11179] __vmalloc_node_noprof+0xad/0xf0 [ 180.019651][T11179] ? kernel_clone+0x176/0x9d0 [ 180.019667][T11179] copy_process+0x80b/0x8430 [ 180.019684][T11179] ? __lock_acquire+0x5c0/0x1f40 [ 180.019704][T11179] ? __pfx_copy_process+0x10/0x10 [ 180.019717][T11179] ? find_held_lock+0x2b/0x80 [ 180.019739][T11179] kernel_clone+0x176/0x9d0 [ 180.019751][T11179] ? find_held_lock+0x2b/0x80 [ 180.019768][T11179] ? __pfx_kernel_clone+0x10/0x10 [ 180.019784][T11179] ? ksys_write+0x190/0x250 [ 180.019798][T11179] ? lock_acquire+0x1d1/0x380 [ 180.019814][T11179] __do_sys_clone+0xd9/0x120 [ 180.019827][T11179] ? __pfx___do_sys_clone+0x10/0x10 [ 180.019840][T11179] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 180.019864][T11179] ? ksys_write+0x1ac/0x250 [ 180.019877][T11179] ? __pfx_ksys_write+0x10/0x10 [ 180.019895][T11179] do_syscall_64+0x123/0x790 [ 180.019912][T11179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.019924][T11179] RIP: 0033:0x7f6d5439e559 [ 180.019933][T11179] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.019944][T11179] RSP: 002b:00007f6d55332fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 180.019955][T11179] RAX: ffffffffffffffda RBX: 00007f6d54625fa0 RCX: 00007f6d5439e559 [ 180.019962][T11179] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 180.019969][T11179] RBP: 00007f6d55333090 R08: 0000000000000000 R09: 0000000000000000 [ 180.019976][T11179] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 180.019982][T11179] R13: 00007f6d54626038 R14: 00007f6d54625fa0 R15: 00007ffe9f1fb4f8 [ 180.019997][T11179] [ 180.020003][T11179] syz.5.1591: vmalloc error: size 32768, failed to allocated page array size 64, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 180.020041][T11179] CPU: 3 UID: 0 PID: 11179 Comm: syz.5.1591 Tainted: G L syzkaller #0 PREEMPT(full) [ 180.020055][T11179] Tainted: [L]=SOFTLOCKUP [ 180.020059][T11179] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 180.020065][T11179] Call Trace: [ 180.020069][T11179] [ 180.020073][T11179] dump_stack_lvl+0x100/0x190 [ 180.020090][T11179] warn_alloc.cold+0x9e/0xb2 [ 180.020112][T11179] ? __pfx_warn_alloc+0x10/0x10 [ 180.020124][T11179] ? dump_stack_lvl+0x17c/0x190 [ 180.020140][T11179] ? rcu_is_watching+0x13/0xc0 [ 180.020157][T11179] ? __kasan_kmalloc+0x8a/0xb0 [ 180.020172][T11179] ? __kmalloc_node_noprof+0x360/0x880 [ 180.020185][T11179] ? __get_vm_area_node+0x1ff/0x350 [ 180.020200][T11179] ? __get_vm_area_node+0x22b/0x350 [ 180.020215][T11179] ? __vmalloc_node_range_noprof+0x3d4/0x1420 [ 180.020235][T11179] __vmalloc_node_range_noprof+0x10f4/0x1420 [ 180.020257][T11179] ? kernel_clone+0x176/0x9d0 [ 180.020271][T11179] ? __memcg_slab_post_alloc_hook+0x71e/0x10c0 [ 180.020285][T11179] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 180.020318][T11179] ? rcu_is_watching+0x13/0xc0 [ 180.020334][T11179] ? trace_kmem_cache_alloc+0xdd/0x100 [ 180.020352][T11179] ? kernel_clone+0x176/0x9d0 [ 180.020365][T11179] __vmalloc_node_noprof+0xad/0xf0 [ 180.020381][T11179] ? kernel_clone+0x176/0x9d0 [ 180.020395][T11179] copy_process+0x80b/0x8430 [ 180.020408][T11179] ? __lock_acquire+0x5c0/0x1f40 [ 180.020432][T11179] ? __pfx_copy_process+0x10/0x10 [ 180.020445][T11179] ? find_held_lock+0x2b/0x80 [ 180.020467][T11179] kernel_clone+0x176/0x9d0 [ 180.020479][T11179] ? find_held_lock+0x2b/0x80 [ 180.020496][T11179] ? __pfx_kernel_clone+0x10/0x10 [ 180.020513][T11179] ? ksys_write+0x190/0x250 [ 180.020526][T11179] ? lock_acquire+0x1d1/0x380 [ 180.020541][T11179] __do_sys_clone+0xd9/0x120 [ 180.020555][T11179] ? __pfx___do_sys_clone+0x10/0x10 [ 180.020567][T11179] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 180.020590][T11179] ? ksys_write+0x1ac/0x250 [ 180.020603][T11179] ? __pfx_ksys_write+0x10/0x10 [ 180.020620][T11179] do_syscall_64+0x123/0x790 [ 180.020638][T11179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.020649][T11179] RIP: 0033:0x7f6d5439e559 [ 180.020658][T11179] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.020668][T11179] RSP: 002b:00007f6d55332fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 180.020678][T11179] RAX: ffffffffffffffda RBX: 00007f6d54625fa0 RCX: 00007f6d5439e559 [ 180.020685][T11179] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 180.020692][T11179] RBP: 00007f6d55333090 R08: 0000000000000000 R09: 0000000000000000 [ 180.020698][T11179] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 180.020705][T11179] R13: 00007f6d54626038 R14: 00007f6d54625fa0 R15: 00007ffe9f1fb4f8 [ 180.020719][T11179] [ 180.020789][T11179] Mem-Info: [ 180.020796][T11179] active_anon:12288 inactive_anon:3 isolated_anon:0 [ 180.020796][T11179] active_file:511 inactive_file:53937 isolated_file:0 [ 180.020796][T11179] unevictable:1000 dirty:295 writeback:0 [ 180.020796][T11179] slab_reclaimable:9450 slab_unreclaimable:75810 [ 180.020796][T11179] mapped:26297 shmem:1571 pagetables:4035 [ 180.020796][T11179] sec_pagetables:300 bounce:0 [ 180.020796][T11179] kernel_misc_reclaimable:0 [ 180.020796][T11179] free:427285 free_pcp:9536 free_cma:0 [ 180.020822][T11179] Node 0 active_anon:49152kB inactive_anon:12kB active_file:2044kB inactive_file:215092kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:60132kB dirty:1172kB writeback:0kB shmem:4284kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16096kB pagetables:7012kB sec_pagetables:1200kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 180.020869][T11179] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:656kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:45056kB dirty:8kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:192kB pagetables:9128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 180.020895][T11179] Node 0 DMA free:12436kB boost:0kB min:344kB low:428kB high:512kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:148kB local_pcp:12kB free_cma:0kB [ 180.020925][T11179] lowmem_reserve[]: 0 1204 1204 1204 1204 [ 180.020944][T11179] Node 0 DMA32 free:144664kB boost:0kB min:27108kB low:33884kB high:40660kB reserved_highatomic:0kB free_highatomic:0kB active_anon:49152kB inactive_anon:12kB active_file:2044kB inactive_file:215092kB unevictable:2000kB writepending:1172kB zspages:5944kB present:2080628kB managed:1233664kB mlocked:0kB bounce:0kB free_pcp:34088kB local_pcp:15756kB free_cma:0kB [ 180.020974][T11179] lowmem_reserve[]: 0 0 0 0 0 [ 180.020991][T11179] Node 1 Normal free:1552040kB boost:0kB min:40124kB low:50152kB high:60180kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:656kB unevictable:2000kB writepending:8kB zspages:0kB present:2097152kB managed:1781880kB mlocked:0kB bounce:0kB free_pcp:3904kB local_pcp:1856kB free_cma:0kB [ 180.021020][T11179] lowmem_reserve[]: 0 0 0 0 0 [ 180.021037][T11179] Node 0 DMA: 5*4kB (U) 12*8kB (U) 8*16kB (U) 23*32kB (U) 15*64kB (UM) 6*128kB (UM) 6*256kB (UM) 2*512kB (UM) 3*1024kB (UM) 2*2048kB (M) 0*4096kB = 12436kB [ 180.021115][T11179] Node 0 DMA32: 1811*4kB (UME) 1038*8kB (UME) 371*16kB (UME) 426*32kB (UME) 268*64kB (UME) 114*128kB (UME) 70*256kB (UME) 33*512kB (UM) 10*1024kB (UM) 8*2048kB (UM) 4*4096kB (UM) = 144684kB [ 180.021196][T11179] Node 1 Normal: 166*4kB (UM) 234*8kB (UM) 254*16kB (UME) 253*32kB (UME) 237*64kB (UME) 230*128kB (UM) 217*256kB (UM) 215*512kB (UME) 196*1024kB (UME) 12*2048kB (UME) 269*4096kB (UM) = 1552040kB [ 180.021278][T11179] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 180.021287][T11179] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 180.021295][T11179] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 180.021304][T11179] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 180.021312][T11179] 56018 total pagecache pages [ 180.021316][T11179] 3 pages in swap cache [ 180.021320][T11179] Free swap = 59140kB [ 180.021324][T11179] Total swap = 124996kB [ 180.021328][T11179] 1048443 pages RAM [ 180.021332][T11179] 0 pages HighMem/MovableOnly [ 180.021336][T11179] 290717 pages reserved [ 180.021340][T11179] 0 pages cma reserved [ 180.055059][T11181] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 180.096395][T11184] FAULT_INJECTION: forcing a failure. [ 180.096395][T11184] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 180.096418][T11184] CPU: 1 UID: 0 PID: 11184 Comm: syz.5.1594 Tainted: G L syzkaller #0 PREEMPT(full) [ 180.096433][T11184] Tainted: [L]=SOFTLOCKUP [ 180.096438][T11184] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 180.096445][T11184] Call Trace: [ 180.096450][T11184] [ 180.096455][T11184] dump_stack_lvl+0x100/0x190 [ 180.096476][T11184] should_fail_ex.cold+0x5/0xa [ 180.096493][T11184] _copy_from_user+0x2e/0xd0 [ 180.096511][T11184] __sys_bpf+0x2f5/0x4a30 [ 180.096529][T11184] ? __pfx___sys_bpf+0x10/0x10 [ 180.096540][T11184] ? __pfx_futex_hash+0x10/0x10 [ 180.096565][T11184] ? __pfx_get_futex_key+0x10/0x10 [ 180.096581][T11184] ? get_pid_task+0xfc/0x250 [ 180.096603][T11184] ? get_pid_task+0xfc/0x250 [ 180.096623][T11184] ? find_held_lock+0x2b/0x80 [ 180.096643][T11184] ? rcu_read_lock_any_held+0x6a/0x90 [ 180.096654][T11184] ? find_held_lock+0x2b/0x80 [ 180.096671][T11184] ? ksys_write+0x190/0x250 [ 180.096684][T11184] ? ksys_write+0x190/0x250 [ 180.096707][T11184] ? __x64_sys_futex+0x34f/0x4d0 [ 180.096722][T11184] ? __x64_sys_futex+0x358/0x4d0 [ 180.096741][T11184] ? xfd_validate_state+0x129/0x190 [ 180.096764][T11184] ? __x64_sys_bpf+0xce/0x140 [ 180.096776][T11184] __x64_sys_bpf+0xce/0x140 [ 180.096789][T11184] ? do_syscall_64+0xae/0x790 [ 180.096808][T11184] do_syscall_64+0x123/0x790 [ 180.096850][T11184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.096866][T11184] RIP: 0033:0x7f6d5439e559 [ 180.096876][T11184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.096889][T11184] RSP: 002b:00007f6d55333028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 180.096901][T11184] RAX: ffffffffffffffda RBX: 00007f6d54625fa0 RCX: 00007f6d5439e559 [ 180.096909][T11184] RDX: 0000000000000094 RSI: 00002000000005c0 RDI: 0000000000000005 [ 180.096916][T11184] RBP: 00007f6d54435ad8 R08: 0000000000000000 R09: 0000000000000000 [ 180.096923][T11184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 180.096930][T11184] R13: 00007f6d54626038 R14: 00007f6d54625fa0 R15: 00007ffe9f1fb4f8 [ 180.096946][T11184] [ 180.099923][T11181] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 180.192179][T11189] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 180.222028][T11191] netlink: 'syz.0.1597': attribute type 10 has an invalid length. [ 180.222066][T11191] team0: Device wg2 is up. Set it down before adding it as a team port [ 180.909071][T11206] FAULT_INJECTION: forcing a failure. [ 180.909071][T11206] name failslab, interval 1, probability 0, space 0, times 0 [ 180.909096][T11206] CPU: 2 UID: 0 PID: 11206 Comm: syz.5.1604 Tainted: G L syzkaller #0 PREEMPT(full) [ 180.909112][T11206] Tainted: [L]=SOFTLOCKUP [ 180.909117][T11206] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 180.909124][T11206] Call Trace: [ 180.909128][T11206] [ 180.909133][T11206] dump_stack_lvl+0x100/0x190 [ 180.909155][T11206] should_fail_ex.cold+0x5/0xa [ 180.909172][T11206] should_failslab+0xc2/0x120 [ 180.909189][T11206] kmem_cache_alloc_noprof+0x92/0x6a0 [ 180.909205][T11206] ? anon_vma_clone+0x2b3/0xca0 [ 180.909225][T11206] anon_vma_clone+0x2b3/0xca0 [ 180.909246][T11206] __split_vma+0x750/0x1de0 [ 180.909261][T11206] ? __pfx___split_vma+0x10/0x10 [ 180.909272][T11206] ? mas_next_slot+0xc05/0x13a0 [ 180.909291][T11206] vms_gather_munmap_vmas+0x3a5/0x1720 [ 180.909308][T11206] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 180.909321][T11206] ? lock_acquire+0x1d1/0x380 [ 180.909334][T11206] ? futex_unqueue+0x29/0x2c0 [ 180.909351][T11206] ? find_held_lock+0x2b/0x80 [ 180.909368][T11206] ? futex_unqueue+0x133/0x2c0 [ 180.909383][T11206] ? futex_unqueue+0x133/0x2c0 [ 180.909402][T11206] ? futex_unqueue+0x13d/0x2c0 [ 180.909424][T11206] do_vmi_align_munmap+0x287/0x5f0 [ 180.909443][T11206] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 180.909457][T11206] ? __pfx_futex_wake_mark+0x10/0x10 [ 180.909484][T11206] ? __lock_acquire+0x5c0/0x1f40 [ 180.909510][T11206] ? mas_walk+0x260/0x310 [ 180.909529][T11206] do_vmi_munmap+0x1f8/0x3e0 [ 180.909545][T11206] __vm_munmap+0x196/0x390 [ 180.909560][T11206] ? __pfx___vm_munmap+0x10/0x10 [ 180.909580][T11206] ? __pfx_ksys_write+0x10/0x10 [ 180.909598][T11206] __x64_sys_munmap+0x59/0x80 [ 180.909615][T11206] do_syscall_64+0x123/0x790 [ 180.909633][T11206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.909645][T11206] RIP: 0033:0x7f6d5439e559 [ 180.909656][T11206] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.909667][T11206] RSP: 002b:00007f6d55333028 EFLAGS: 00000246 ORIG_RAX: 000000000000000b [ 180.909679][T11206] RAX: ffffffffffffffda RBX: 00007f6d54625fa0 RCX: 00007f6d5439e559 [ 180.909686][T11206] RDX: 0000000000000000 RSI: 0000000000c5059c RDI: 00007f6d51fd6000 [ 180.909693][T11206] RBP: 00007f6d54435ad8 R08: 0000000000000000 R09: 0000000000000000 [ 180.909699][T11206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 180.909706][T11206] R13: 00007f6d54626038 R14: 00007f6d54625fa0 R15: 00007ffe9f1fb4f8 [ 180.909721][T11206] [ 181.173181][T11212] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 181.174330][T11212] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 181.175082][T11212] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 182.173884][T11163] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 182.215011][T11223] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1609'. [ 182.239509][ T42] kauditd_printk_skb: 2 callbacks suppressed [ 182.239521][ T42] audit: type=1400 audit(1792424754.769:5569): avc: denied { open } for pid=11229 comm="syz.5.1613" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 182.368051][T11243] FAULT_INJECTION: forcing a failure. [ 182.368051][T11243] name failslab, interval 1, probability 0, space 0, times 0 [ 182.368081][T11243] CPU: 0 UID: 0 PID: 11243 Comm: syz.0.1618 Tainted: G L syzkaller #0 PREEMPT(full) [ 182.368102][T11243] Tainted: [L]=SOFTLOCKUP [ 182.368108][T11243] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 182.368142][T11243] Call Trace: [ 182.368148][T11243] [ 182.368155][T11243] dump_stack_lvl+0x100/0x190 [ 182.368204][T11243] should_fail_ex.cold+0x5/0xa [ 182.368227][T11243] should_failslab+0xc2/0x120 [ 182.368250][T11243] kmem_cache_alloc_noprof+0x92/0x6a0 [ 182.368270][T11243] ? anon_vma_clone+0x2b3/0xca0 [ 182.368296][T11243] anon_vma_clone+0x2b3/0xca0 [ 182.368323][T11243] __split_vma+0x750/0x1de0 [ 182.368342][T11243] ? __pfx___split_vma+0x10/0x10 [ 182.368356][T11243] ? mas_next_slot+0xc05/0x13a0 [ 182.368382][T11243] vms_gather_munmap_vmas+0x3a5/0x1720 [ 182.368404][T11243] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 182.368443][T11243] ? lock_acquire+0x1d1/0x380 [ 182.368461][T11243] ? futex_unqueue+0x29/0x2c0 [ 182.368482][T11243] ? find_held_lock+0x2b/0x80 [ 182.368502][T11243] ? futex_unqueue+0x133/0x2c0 [ 182.368522][T11243] ? futex_unqueue+0x133/0x2c0 [ 182.368545][T11243] ? futex_unqueue+0x13d/0x2c0 [ 182.368569][T11243] do_vmi_align_munmap+0x287/0x5f0 [ 182.368588][T11243] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 182.368605][T11243] ? __pfx_futex_wake_mark+0x10/0x10 [ 182.368626][T11243] ? __lock_acquire+0x5c0/0x1f40 [ 182.368659][T11243] ? mas_walk+0x260/0x310 [ 182.368684][T11243] do_vmi_munmap+0x1f8/0x3e0 [ 182.368703][T11243] __vm_munmap+0x196/0x390 [ 182.368721][T11243] ? __pfx___vm_munmap+0x10/0x10 [ 182.368752][T11243] __x64_sys_munmap+0x59/0x80 [ 182.368773][T11243] do_syscall_64+0x123/0x790 [ 182.368797][T11243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.368812][T11243] RIP: 0033:0x7fdaaa59e559 [ 182.368849][T11243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.368864][T11243] RSP: 002b:00007fdaab51d028 EFLAGS: 00000246 ORIG_RAX: 000000000000000b [ 182.368880][T11243] RAX: ffffffffffffffda RBX: 00007fdaaa825fa0 RCX: 00007fdaaa59e559 [ 182.368891][T11243] RDX: 0000000000000000 RSI: 0000000000c5059c RDI: 00007fdaa81d6000 [ 182.368901][T11243] RBP: 00007fdaaa635ad8 R08: 0000000000000000 R09: 0000000000000000 [ 182.368910][T11243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 182.368920][T11243] R13: 00007fdaaa826038 R14: 00007fdaaa825fa0 R15: 00007ffc23d40d48 [ 182.368941][T11243] [ 182.404494][T11249] device-mapper: ioctl: Invalid ioctl structure: name mpath0, dev 320000 [ 182.520257][T11262] syzkaller1: entered promiscuous mode [ 182.520272][T11262] syzkaller1: entered allmulticast mode [ 182.634702][T11264] netlink: 'syz.0.1626': attribute type 1 has an invalid length. [ 182.652272][T11264] bond0: (slave bridge0): making interface the new active one [ 182.652768][T11264] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 182.892417][ T42] audit: type=1400 audit(1792424755.419:5570): avc: denied { mounton } for pid=11275 comm="syz.0.1631" path="/474/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 182.978231][T11284] netlink: 'syz.0.1633': attribute type 1 has an invalid length. [ 182.994961][T11284] 8021q: adding VLAN 0 to HW filter on device bond5 [ 183.005199][ T42] audit: type=1400 audit(1792424755.529:5571): avc: denied { listen } for pid=11286 comm="syz.7.1634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 183.005519][T11287] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1634'. [ 183.022932][T11287] 8021q: adding VLAN 0 to HW filter on device bond1 [ 183.029235][T11287] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1634'. [ 183.083819][T11287] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1634'. [ 183.083834][T11287] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1634'. [ 183.163368][T11301] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 183.219236][ T42] audit: type=1400 audit(1792424755.749:5572): avc: denied { map } for pid=11305 comm="syz.5.1642" path="/dev/nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 183.219523][ T42] audit: type=1400 audit(1792424755.749:5573): avc: denied { execute } for pid=11305 comm="syz.5.1642" path="/dev/nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 183.344283][T11316] /dev/nullb0: Can't open blockdev [ 183.509293][ T42] audit: type=1400 audit(1792424756.039:5574): avc: denied { bind } for pid=11326 comm="syz.5.1650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 183.632511][T11339] FAULT_INJECTION: forcing a failure. [ 183.632511][T11339] name failslab, interval 1, probability 0, space 0, times 0 [ 183.632551][T11339] CPU: 3 UID: 0 PID: 11339 Comm: syz.5.1655 Tainted: G L syzkaller #0 PREEMPT(full) [ 183.632576][T11339] Tainted: [L]=SOFTLOCKUP [ 183.632584][T11339] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 183.632596][T11339] Call Trace: [ 183.632603][T11339] [ 183.632611][T11339] dump_stack_lvl+0x100/0x190 [ 183.632644][T11339] should_fail_ex.cold+0x5/0xa [ 183.632671][T11339] should_failslab+0xc2/0x120 [ 183.632698][T11339] __kmalloc_noprof+0xfc/0x840 [ 183.632744][T11339] ? kernel_text_address+0x8d/0x100 [ 183.632764][T11339] ? virtqueue_add_split+0x25c/0x1d30 [ 183.632798][T11339] virtqueue_add_split+0x25c/0x1d30 [ 183.632862][T11339] ? __pfx_virtqueue_add_split+0x10/0x10 [ 183.632893][T11339] ? lock_acquire+0x1d1/0x380 [ 183.632924][T11339] virtqueue_add_sgs+0x207/0x2b0 [ 183.632962][T11339] virtio_gpu_queue_fenced_ctrl_buffer+0x905/0x1350 [ 183.632999][T11339] ? __pfx_virtio_gpu_queue_fenced_ctrl_buffer+0x10/0x10 [ 183.633034][T11339] ? rcu_is_watching+0x13/0xc0 [ 183.633065][T11339] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 183.633088][T11339] ? rcu_is_watching+0x13/0xc0 [ 183.633112][T11339] ? virtio_gpu_cmd_transfer_to_host_2d+0x273/0x6e0 [ 183.633143][T11339] ? virtio_gpu_cmd_transfer_to_host_2d+0x362/0x6e0 [ 183.633175][T11339] virtio_gpu_primary_plane_update+0xdda/0x1290 [ 183.633213][T11339] ? __pfx_virtio_gpu_primary_plane_update+0x10/0x10 [ 183.633246][T11339] ? drm_calc_timestamping_constants+0x44a/0x6d0 [ 183.633277][T11339] drm_atomic_helper_commit_planes+0x497/0xf10 [ 183.633308][T11339] drm_atomic_helper_commit_tail+0x7f/0x130 [ 183.633331][T11339] commit_tail+0x338/0x430 [ 183.633359][T11339] drm_atomic_helper_commit+0x303/0x380 [ 183.633381][T11339] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 183.633404][T11339] drm_atomic_commit+0x230/0x300 [ 183.633423][T11339] ? __pfx_drm_atomic_commit+0x10/0x10 [ 183.633441][T11339] ? __pfx___drm_printfn_info+0x10/0x10 [ 183.633494][T11339] ? drm_client_rotation+0x451/0x6a0 [ 183.633523][T11339] drm_client_modeset_commit_atomic+0x6a6/0x7e0 [ 183.633563][T11339] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 183.633589][T11339] ? __mutex_lock+0x26c/0x1bd0 [ 183.633635][T11339] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 183.633668][T11339] drm_client_modeset_commit_locked+0x14d/0x580 [ 183.633696][T11339] drm_fb_helper_pan_display+0x32d/0xa40 [ 183.633727][T11339] fb_pan_display+0x195/0x820 [ 183.633747][T11339] ? __pfx_drm_fb_helper_pan_display+0x10/0x10 [ 183.633771][T11339] do_fb_ioctl+0x6e3/0x730 [ 183.633797][T11339] ? __pfx_do_fb_ioctl+0x10/0x10 [ 183.633827][T11339] ? __pfx_futex_wait+0x10/0x10 [ 183.633855][T11339] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 183.633884][T11339] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 183.633905][T11339] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 183.633955][T11339] ? selinux_file_ioctl+0xb6/0x290 [ 183.633984][T11339] fb_ioctl+0xe5/0x150 [ 183.634007][T11339] ? __pfx_fb_ioctl+0x10/0x10 [ 183.634031][T11339] __x64_sys_ioctl+0x18e/0x210 [ 183.634056][T11339] do_syscall_64+0x123/0x790 [ 183.634084][T11339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.634104][T11339] RIP: 0033:0x7f6d5439e559 [ 183.634121][T11339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.634139][T11339] RSP: 002b:00007f6d55333028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 183.634159][T11339] RAX: ffffffffffffffda RBX: 00007f6d54625fa0 RCX: 00007f6d5439e559 [ 183.634173][T11339] RDX: 0000000000000000 RSI: 0000000000004606 RDI: 0000000000000003 [ 183.634185][T11339] RBP: 00007f6d54435ad8 R08: 0000000000000000 R09: 0000000000000000 [ 183.634197][T11339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 183.634208][T11339] R13: 00007f6d54626038 R14: 00007f6d54625fa0 R15: 00007ffe9f1fb4f8 [ 183.634238][T11339] [ 183.695301][T11343] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1656'. [ 183.735406][T11346] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 183.821214][T11359] netlink: 'syz.6.1659': attribute type 1 has an invalid length. [ 183.837039][T11359] 8021q: adding VLAN 0 to HW filter on device bond4 [ 183.840905][T11362] syzkaller0: entered promiscuous mode [ 183.840923][T11362] syzkaller0: entered allmulticast mode [ 183.842989][T11362] tipc: Started in network mode [ 183.843011][T11362] tipc: Node identity 929dc967ebdb, cluster identity 4711 [ 183.843670][T11362] tipc: Enabled bearer , priority 0 [ 183.882366][T11367] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1664'. [ 183.908536][T11369] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1665'. [ 183.994803][T11376] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 184.024431][T11378] netlink: 'syz.5.1669': attribute type 9 has an invalid length. [ 184.203337][ T42] audit: type=1400 audit(1792424756.729:5575): avc: denied { listen } for pid=11383 comm="syz.7.1671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 184.203767][ T5091] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 184.203784][ T5091] CPU: 2 UID: 0 PID: 5091 Comm: kworker/u34:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 184.203801][ T5091] Tainted: [L]=SOFTLOCKUP [ 184.203806][ T5091] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 184.203823][ T5091] Workqueue: hci1 hci_rx_work [ 184.203851][ T5091] Call Trace: [ 184.203856][ T5091] [ 184.203862][ T5091] dump_stack_lvl+0x100/0x190 [ 184.203883][ T5091] sysfs_warn_dup.cold+0x1c/0x28 [ 184.203902][ T5091] sysfs_create_dir_ns+0x24b/0x2b0 [ 184.203941][ T5091] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 184.203952][ T5091] ? find_held_lock+0x2b/0x80 [ 184.203970][ T5091] ? kobject_add_internal+0x25f/0x930 [ 184.203983][ T5091] ? kobject_add_internal+0x25f/0x930 [ 184.203998][ T5091] ? do_raw_spin_unlock+0x145/0x1e0 [ 184.204016][ T5091] kobject_add_internal+0x2c8/0x930 [ 184.204032][ T5091] kobject_add+0x16a/0x1e0 [ 184.204045][ T5091] ? __pfx_kobject_add+0x10/0x10 [ 184.204057][ T5091] ? class_to_subsys+0x10f/0x150 [ 184.204075][ T5091] ? kobject_put+0xb9/0x640 [ 184.204085][ T5091] ? _raw_spin_unlock+0x28/0x50 [ 184.204112][ T5091] device_add+0x294/0x1970 [ 184.204125][ T5091] ? __pfx_dev_set_name+0x10/0x10 [ 184.204141][ T5091] ? __pfx_device_add+0x10/0x10 [ 184.204154][ T5091] ? mgmt_send_event_skb+0x2fb/0x460 [ 184.204181][ T5091] hci_conn_add_sysfs+0x1a3/0x260 [ 184.204198][ T5091] le_conn_complete_evt+0x122f/0x2130 [ 184.204217][ T5091] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 184.204231][ T5091] ? hci_event_packet+0x186/0xcd0 [ 184.204249][ T5091] hci_le_conn_complete_evt+0x23c/0x3a0 [ 184.204264][ T5091] ? skb_pull_data+0x15f/0x1e0 [ 184.204293][ T5091] hci_le_meta_evt+0x34a/0x5f0 [ 184.204309][ T5091] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 184.204338][ T5091] hci_event_packet+0x51c/0xcd0 [ 184.204352][ T5091] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 184.204367][ T5091] ? __pfx_hci_event_packet+0x10/0x10 [ 184.204384][ T5091] ? lockdep_hardirqs_on+0x7d/0x110 [ 184.204421][ T5091] hci_rx_work+0x451/0xfc0 [ 184.204442][ T5091] process_one_work+0xac7/0x1b10 [ 184.204461][ T5091] ? __pfx_process_one_work+0x10/0x10 [ 184.204482][ T5091] ? lock_acquire+0x1d1/0x380 [ 184.204500][ T5091] ? __pfx_hci_rx_work+0x10/0x10 [ 184.204516][ T5091] worker_thread+0x5ef/0xe50 [ 184.204535][ T5091] ? kthread+0x13a/0x450 [ 184.204551][ T5091] ? __pfx_worker_thread+0x10/0x10 [ 184.204562][ T5091] kthread+0x373/0x450 [ 184.204578][ T5091] ? __pfx_kthread+0x10/0x10 [ 184.204595][ T5091] ret_from_fork+0x730/0xd60 [ 184.204610][ T5091] ? __pfx_ret_from_fork+0x10/0x10 [ 184.204625][ T5091] ? __switch_to+0x800/0x10f0 [ 184.204641][ T5091] ? __pfx_kthread+0x10/0x10 [ 184.204658][ T5091] ret_from_fork_asm+0x1a/0x30 [ 184.204687][ T5091] [ 184.204739][ T5091] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 184.204768][ T5091] Bluetooth: hci1: failed to register connection device [ 184.836166][ T850] tipc: Node number set to 2034682215 [ 185.296076][ T850] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 185.467045][ T850] usb 10-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 185.467875][ T850] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 185.467899][ T850] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 185.467912][ T850] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 185.467923][ T850] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 185.467935][ T850] usb 10-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 185.467955][ T850] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.472634][T11406] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 185.473882][ T850] keyspan 10-1:1.0: Keyspan 2 port adapter converter detected [ 185.474731][ T850] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 84 [ 185.474767][ T850] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 2 [ 185.483292][ T850] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 185.484046][ T850] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 88 [ 185.484082][ T850] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 6 [ 185.488415][ T850] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 185.511233][T11408] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11408 comm=syz.6.1677 [ 185.512415][T11408] FAULT_INJECTION: forcing a failure. [ 185.512415][T11408] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 185.512433][T11408] CPU: 2 UID: 0 PID: 11408 Comm: syz.6.1677 Tainted: G L syzkaller #0 PREEMPT(full) [ 185.512449][T11408] Tainted: [L]=SOFTLOCKUP [ 185.512453][T11408] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 185.512460][T11408] Call Trace: [ 185.512464][T11408] [ 185.512469][T11408] dump_stack_lvl+0x100/0x190 [ 185.512491][T11408] should_fail_ex.cold+0x5/0xa [ 185.512508][T11408] _copy_to_user+0x32/0xd0 [ 185.512525][T11408] simple_read_from_buffer+0xcb/0x170 [ 185.512544][T11408] proc_fail_nth_read+0x1af/0x230 [ 185.512563][T11408] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 185.512581][T11408] ? rw_verify_area+0xce/0x6d0 [ 185.512594][T11408] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 185.512612][T11408] vfs_read+0x1e4/0xb40 [ 185.512626][T11408] ? lock_acquire+0x1d1/0x380 [ 185.512640][T11408] ? __fget_files+0x34/0x3d0 [ 185.512656][T11408] ? __pfx_vfs_read+0x10/0x10 [ 185.512669][T11408] ? find_held_lock+0x2b/0x80 [ 185.512686][T11408] ? __fget_files+0x215/0x3d0 [ 185.512705][T11408] ? __fget_files+0x21f/0x3d0 [ 185.512725][T11408] ksys_read+0x12a/0x250 [ 185.512739][T11408] ? __pfx_ksys_read+0x10/0x10 [ 185.512757][T11408] do_syscall_64+0x123/0x790 [ 185.512776][T11408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.512789][T11408] RIP: 0033:0x7fe76895ed8e [ 185.512798][T11408] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 185.512835][T11408] RSP: 002b:00007fe7698d8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 185.512847][T11408] RAX: ffffffffffffffda RBX: 00007fe7698d96c0 RCX: 00007fe76895ed8e [ 185.512855][T11408] RDX: 000000000000000f RSI: 00007fe7698d90a0 RDI: 0000000000000008 [ 185.512862][T11408] RBP: 00007fe7698d9090 R08: 0000000000000000 R09: 0000000000000000 [ 185.512868][T11408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.512875][T11408] R13: 00007fe768c26038 R14: 00007fe768c25fa0 R15: 00007ffe922a0f68 [ 185.512891][T11408] [ 185.584026][T11417] tmpfs: Bad value for 'mpol' [ 185.651634][ T42] audit: type=1400 audit(1792424758.179:5576): avc: denied { mounton } for pid=11420 comm="syz.7.1682" path="/100/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 185.682679][T11406] netlink: 'syz.5.1676': attribute type 1 has an invalid length. [ 185.696302][T11406] 8021q: adding VLAN 0 to HW filter on device bond4 [ 185.699540][T11406] xt_REDIRECT: bad MAP_IPS. [ 185.705867][T11406] bond4: (slave gretap1): making interface the new active one [ 185.709832][T11406] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 185.839488][ T42] audit: type=1400 audit(1792424758.369:5577): avc: denied { mounton } for pid=11442 comm="syz.7.1690" path="/file0" dev="ramfs" ino=43994 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 185.843746][T11443] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 185.843763][T11443] overlayfs: failed to set xattr on upper [ 185.843768][T11443] overlayfs: ...falling back to redirect_dir=nofollow. [ 185.843773][T11443] overlayfs: ...falling back to index=off. [ 185.843777][T11443] overlayfs: ...falling back to uuid=null. [ 186.010577][T11448] fuse: Bad value for 'rootmode' [ 186.162058][ T42] audit: type=1400 audit(1792424758.689:5578): avc: denied { write } for pid=11455 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 186.265055][ T5444] 8021q: adding VLAN 0 to HW filter on device bond1 [ 186.393712][T11479] SELinux: Context system_u:object_r:udev_rules_t:s0 is not valid (left unmapped). [ 186.430422][T11483] syzkaller0: entered promiscuous mode [ 186.430436][T11483] syzkaller0: entered allmulticast mode [ 186.446069][ T850] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 186.504607][T11485] nftables ruleset with unbound set [ 186.532737][T11487] tipc: Enabling of bearer rejected, failed to enable media [ 186.592854][T11496] ================================================================== [ 186.592873][T11496] BUG: KASAN: slab-use-after-free in dvb_device_open+0x33f/0x3b0 [ 186.592908][T11496] Read of size 8 at addr ffff88802cd3d018 by task syz.6.1708/11496 [ 186.592918][T11496] [ 186.592927][T11496] CPU: 2 UID: 0 PID: 11496 Comm: syz.6.1708 Tainted: G L syzkaller #0 PREEMPT(full) [ 186.592945][T11496] Tainted: [L]=SOFTLOCKUP [ 186.592950][T11496] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 186.592957][T11496] Call Trace: [ 186.592962][T11496] [ 186.592967][T11496] dump_stack_lvl+0x100/0x190 [ 186.592986][T11496] print_report+0x13d/0x4b0 [ 186.593028][T11496] ? __virt_addr_valid+0x239/0x430 [ 186.593046][T11496] ? dvb_device_open+0x33f/0x3b0 [ 186.593067][T11496] kasan_report+0xdf/0x1c0 [ 186.593091][T11496] ? dvb_device_open+0x33f/0x3b0 [ 186.593114][T11496] ? __pfx_dvb_device_open+0x10/0x10 [ 186.593134][T11496] dvb_device_open+0x33f/0x3b0 [ 186.593164][T11496] ? __pfx_dvb_device_open+0x10/0x10 [ 186.593178][T11496] chrdev_open+0x234/0x6a0 [ 186.593270][T11496] ? __pfx_chrdev_open+0x10/0x10 [ 186.593288][T11496] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 186.593305][T11496] do_dentry_open+0x6ab/0x14d0 [ 186.593320][T11496] ? __pfx_chrdev_open+0x10/0x10 [ 186.593347][T11496] vfs_open+0x82/0x3f0 [ 186.593367][T11496] path_openat+0x1a23/0x2450 [ 186.593385][T11496] ? __pfx_path_openat+0x10/0x10 [ 186.593405][T11496] do_file_open+0x20e/0x430 [ 186.593423][T11496] ? __pfx_do_file_open+0x10/0x10 [ 186.593445][T11496] ? _raw_spin_unlock+0x28/0x50 [ 186.593459][T11496] ? alloc_fd+0x471/0x7a0 [ 186.593477][T11496] do_sys_openat2+0x10f/0x1e0 [ 186.593487][T11496] ? __pfx_do_sys_openat2+0x10/0x10 [ 186.593497][T11496] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 186.593516][T11496] __x64_sys_openat+0x12d/0x210 [ 186.593526][T11496] ? __pfx___x64_sys_openat+0x10/0x10 [ 186.593539][T11496] do_syscall_64+0x123/0x790 [ 186.593557][T11496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.593569][T11496] RIP: 0033:0x7fe76895ed8e [ 186.593579][T11496] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 186.593591][T11496] RSP: 002b:00007fe7698d8b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 186.593603][T11496] RAX: ffffffffffffffda RBX: 00007fe7698d96c0 RCX: 00007fe76895ed8e [ 186.593610][T11496] RDX: 0000000000000002 RSI: 00007fe7698d8c00 RDI: ffffffffffffff9c [ 186.593618][T11496] RBP: 00007fe7698d8c00 R08: 0000000000000000 R09: 0000000000000000 [ 186.593626][T11496] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 186.593634][T11496] R13: 00007fe768c26038 R14: 00007fe768c25fa0 R15: 00007ffe922a0f68 [ 186.593647][T11496] [ 186.593651][T11496] [ 186.593654][T11496] Allocated by task 11261: [ 186.593670][T11496] kasan_save_stack+0x30/0x50 [ 186.593686][T11496] kasan_save_track+0x14/0x30 [ 186.593700][T11496] __kasan_kmalloc+0xaa/0xb0 [ 186.593713][T11496] __kmalloc_noprof+0x32f/0x840 [ 186.593728][T11496] security_inode_init_security+0x113/0x370 [ 186.593742][T11496] shmem_symlink+0x163/0xbf0 [ 186.593753][T11496] vfs_symlink+0x178/0x4d0 [ 186.593765][T11496] filename_symlinkat+0x2a6/0x560 [ 186.593776][T11496] __x64_sys_symlinkat+0x9c/0xe0 [ 186.593785][T11496] do_syscall_64+0x123/0x790 [ 186.593800][T11496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.593811][T11496] [ 186.593814][T11496] Freed by task 11261: [ 186.593819][T11496] kasan_save_stack+0x30/0x50 [ 186.593833][T11496] kasan_save_track+0x14/0x30 [ 186.593846][T11496] kasan_save_free_info+0x3b/0x70 [ 186.593856][T11496] __kasan_slab_free+0x5f/0x80 [ 186.593869][T11496] kfree+0x22b/0x6d0 [ 186.593878][T11496] security_inode_init_security+0x2bf/0x370 [ 186.593890][T11496] shmem_symlink+0x163/0xbf0 [ 186.593899][T11496] vfs_symlink+0x178/0x4d0 [ 186.593910][T11496] filename_symlinkat+0x2a6/0x560 [ 186.593919][T11496] __x64_sys_symlinkat+0x9c/0xe0 [ 186.593928][T11496] do_syscall_64+0x123/0x790 [ 186.593942][T11496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.593952][T11496] [ 186.593954][T11496] The buggy address belongs to the object at ffff88802cd3d000 [ 186.593954][T11496] which belongs to the cache kmalloc-256 of size 256 [ 186.593963][T11496] The buggy address is located 24 bytes inside of [ 186.593963][T11496] freed 256-byte region [ffff88802cd3d000, ffff88802cd3d100) [ 186.593973][T11496] [ 186.593976][T11496] The buggy address belongs to the physical page: [ 186.593981][T11496] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802cd3d000 pfn:0x2cd3c [ 186.593992][T11496] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 186.594000][T11496] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 186.594011][T11496] page_type: f5(slab) [ 186.594021][T11496] raw: 00fff00000000240 ffff88801d042b40 ffffea0000b4aa10 ffffea0000facf90 [ 186.594040][T11496] raw: ffff88802cd3d000 000000000010000f 00000000f5000000 0000000000000000 [ 186.594050][T11496] head: 00fff00000000240 ffff88801d042b40 ffffea0000b4aa10 ffffea0000facf90 [ 186.594061][T11496] head: ffff88802cd3d000 000000000010000f 00000000f5000000 0000000000000000 [ 186.594072][T11496] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 186.594082][T11496] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 186.594088][T11496] page dumped because: kasan: bad access detected [ 186.594094][T11496] page_owner tracks the page as allocated [ 186.594099][T11496] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 8507575926 [ 186.594117][T11496] post_alloc_hook+0xfd/0x120 [ 186.594129][T11496] get_page_from_freelist+0x110d/0x35d0 [ 186.594142][T11496] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 186.594155][T11496] new_slab+0xa9/0x6e0 [ 186.594165][T11496] refill_objects+0xe3/0x410 [ 186.594176][T11496] __pcs_replace_empty_main+0x35e/0x650 [ 186.594186][T11496] __kmalloc_cache_noprof+0x4f4/0x6d0 [ 186.594197][T11496] bus_add_driver+0x92/0x5b0 [ 186.594211][T11496] driver_register+0x1e2/0x360 [ 186.594221][T11496] usb_register_driver+0x21c/0x3e0 [ 186.594243][T11496] au0828_init+0x12a/0x160 [ 186.594267][T11496] do_one_initcall+0x11c/0x6f0 [ 186.594279][T11496] kernel_init_freeable+0x6ea/0x7b0 [ 186.594301][T11496] kernel_init+0x21/0x1e0 [ 186.594319][T11496] ret_from_fork+0x730/0xd60 [ 186.594335][T11496] ret_from_fork_asm+0x1a/0x30 [ 186.594346][T11496] page_owner free stack trace missing [ 186.594350][T11496] [ 186.594353][T11496] Memory state around the buggy address: [ 186.594358][T11496] ffff88802cd3cf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 186.594366][T11496] ffff88802cd3cf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 186.594375][T11496] >ffff88802cd3d000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 186.594381][T11496] ^ [ 186.594387][T11496] ffff88802cd3d080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 186.594396][T11496] ffff88802cd3d100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 186.594403][T11496] ================================================================== [ 186.594496][T11496] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 186.839845][T11496] CPU: 2 UID: 0 PID: 11496 Comm: syz.6.1708 Tainted: G L syzkaller #0 PREEMPT(full) [ 186.843200][T11496] Tainted: [L]=SOFTLOCKUP [ 186.844565][T11496] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 186.847698][T11496] Call Trace: [ 186.848762][T11496] [ 186.849721][T11496] dump_stack_lvl+0x100/0x190 [ 186.851218][T11496] vpanic+0x553/0x970 [ 186.852490][T11496] ? __pfx_vpanic+0x10/0x10 [ 186.853933][T11496] ? mark_held_locks+0x40/0x70 [ 186.855444][T11496] ? dvb_device_open+0x33f/0x3b0 [ 186.857019][T11496] panic+0xd1/0xe0 [ 186.858211][T11496] ? __pfx_panic+0x10/0x10 [ 186.859621][T11496] ? dvb_device_open+0x33f/0x3b0 [ 186.861188][T11496] ? preempt_schedule_common+0x3c/0xb0 [ 186.862916][T11496] check_panic_on_warn.cold+0x19/0x34 [ 186.864612][T11496] end_report.part.0+0x3a/0x90 [ 186.866153][T11496] kasan_report.cold+0xe/0x18 [ 186.867644][T11496] ? dvb_device_open+0x33f/0x3b0 [ 186.869215][T11496] ? __pfx_dvb_device_open+0x10/0x10 [ 186.870876][T11496] dvb_device_open+0x33f/0x3b0 [ 186.872393][T11496] ? __pfx_dvb_device_open+0x10/0x10 [ 186.874051][T11496] chrdev_open+0x234/0x6a0 [ 186.875466][T11496] ? __pfx_chrdev_open+0x10/0x10 [ 186.877044][T11496] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 186.879021][T11496] do_dentry_open+0x6ab/0x14d0 [ 186.880533][T11496] ? __pfx_chrdev_open+0x10/0x10 [ 186.882104][T11496] vfs_open+0x82/0x3f0 [ 186.883407][T11496] path_openat+0x1a23/0x2450 [ 186.884896][T11496] ? __pfx_path_openat+0x10/0x10 [ 186.886465][T11496] do_file_open+0x20e/0x430 [ 186.887906][T11496] ? __pfx_do_file_open+0x10/0x10 [ 186.889516][T11496] ? _raw_spin_unlock+0x28/0x50 [ 186.891046][T11496] ? alloc_fd+0x471/0x7a0 [ 186.892422][T11496] do_sys_openat2+0x10f/0x1e0 [ 186.893914][T11496] ? __pfx_do_sys_openat2+0x10/0x10 [ 186.895584][T11496] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 186.897593][T11496] __x64_sys_openat+0x12d/0x210 [ 186.899119][T11496] ? __pfx___x64_sys_openat+0x10/0x10 [ 186.900807][T11496] do_syscall_64+0x123/0x790 [ 186.902279][T11496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.904126][T11496] RIP: 0033:0x7fe76895ed8e [ 186.905557][T11496] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 186.911500][T11496] RSP: 002b:00007fe7698d8b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 186.914084][T11496] RAX: ffffffffffffffda RBX: 00007fe7698d96c0 RCX: 00007fe76895ed8e [ 186.916550][T11496] RDX: 0000000000000002 RSI: 00007fe7698d8c00 RDI: ffffffffffffff9c [ 186.919018][T11496] RBP: 00007fe7698d8c00 R08: 0000000000000000 R09: 0000000000000000 [ 186.921485][T11496] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 186.923936][T11496] R13: 00007fe768c26038 R14: 00007fe768c25fa0 R15: 00007ffe922a0f68 [ 186.926384][T11496] [ 186.928041][T11496] Kernel Offset: disabled [ 186.929320][T11496] Rebooting in 86400 seconds.. VM DIAGNOSIS: 15:45:59 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000010 RBX=0000000000000001 RCX=ffffc900062c1000 RDX=0000000000000000 RSI=ffffffff819e47eb RDI=ffffffff8be60ef4 RBP=0000000000000000 RSP=ffffc9000546f3e0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=ffff888059e6a880 R13=0000000000006808 R14=ffff888058a70ba8 R15=ffff888058a70e80 RIP=ffffffff819e483b RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] FS =0000 00007fdaab51d6c0 ffffffff 00c09300 DPL=0 DS [-WA] GS =0000 ffff8880d4946000 ffffffff 00c09300 DPL=0 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000ffff IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=0000000053289000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000001cb4a7 RBX=ffff88801feea580 RCX=ffffffff8bd482f5 RDX=0000000000000001 RSI=ffffffff8e3e3b01 RDI=ffffffff8c625680 RBP=ffffed1003fdd4b0 RSP=ffffc90000177e00 R8 =0000000000000001 R9 =ffffed100d4667bd R10=ffff88806a333deb R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200002efc4 R15=dffffc0000000000 RIP=ffffffff8bd467af RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d4a46000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000001008 CR3=0000000027ce4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7291bf6e80 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7291bf6e80 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555b1fa318 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffe7 0808b80316080008 b0030a080008a803 0010000898030000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 08100008d4030602 0008d20308020008 d003000000000000 00000000000001ff ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8a03040200098803 00100008f8030202 0008f6031c100008 e60300020008e403 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8004088183bda408 0001000000080606 011a9e40809ffc08 0009c00310100009 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0103c28004088183 bda4080001000000 080606011a9e4080 9ffc080009c00310 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1000098a03040200 09880300100008f8 0302020008f6031c 100008e603000200 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 08e40308100008d4 0306020008d20308 020008d003000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0001ffffffffffff ffffe70808b80316 080008b0030a0800 08a8030010000898 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000031 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85b2d115 RDI=ffffffff9cc7e6a0 RBP=ffffffff9cc7e660 RSP=ffffc900049170e8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3230383838666666 R12=0000000000000000 R13=0000000000000031 R14=0000000000000001 R15=ffffc90004917400 RIP=ffffffff85b2d13f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fe7698d96c0 ffffffff 00c00000 GS =0000 ffff8880d4b46000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fe768987b80 CR3=000000004ccb3000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 fffffffdff1f0010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe9f1fb9e6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe9f1fb9e6 00007ffe9f1fb9ec ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6d54436102 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6d5443613c ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6d544362a0 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6d5443612e ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00010008010000e0 000700088002001c 0000706174657267 0001000b8012002c ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ba4e1a53f1cb5db7 dfd0d666c4bb7523 265b949f32f8fedb cddde3b1f02cb217 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2b710fd587db778e 5ffa9d3a1891b0a1 e6e7135512d9171a 186e7fd3a80d5c05 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3e0caa3771f710fd 87cd259b09bc28cb c0884ceaf888acb7 e6e7aa0100080000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0004000000000000 47880e0000c28001 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000001d5f75 RBX=ffff8880202d2580 RCX=ffffffff8bd482f5 RDX=0000000000000001 RSI=ffffffff8e3e3b01 RDI=ffffffff8c625680 RBP=ffffed100405a4b0 RSP=ffffc90000197e00 R8 =0000000000000001 R9 =ffffed100d4a67bd R10=ffff88806a533deb R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000032fc4 R15=dffffc0000000000 RIP=ffffffff8bd467af RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d4c46000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fe768c27dac CR3=0000000022446000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000c002fefc Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 737570635f657669 7463656666652e74 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc23d41236 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc23d41236 00007ffc23d4123c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdaaa636102 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdaaa63613c ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdaaa6362a0 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdaaa63612e ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000