last executing test programs: 4m55.53104076s ago: executing program 1 (id=1088): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="340000001000010800000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000000110000008001b00000000000c002b8008000100", @ANYRES32=r0], 0x34}}, 0x0) 4m55.211276727s ago: executing program 1 (id=1089): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) signalfd(0xffffffffffffffff, &(0x7f0000000580)={[0x7]}, 0x8) socket$netlink(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f00000001c0)={'HL\x00'}, &(0x7f00000002c0)=0x1e) socket$unix(0x1, 0x5, 0x0) syz_open_dev$vivid(&(0x7f0000000000), 0x3, 0x2) syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) syz_usb_connect_ath9k(0x3, 0x5a, 0xfffffffffffffffe, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r1, &(0x7f0000000080)={0x4d6, 0x7d, 0x0, {{0x500, 0x124, 0x0, 0x0, {}, 0x400c0000, 0x0, 0x0, 0x0, 0x2e, '\x04nodZ=\xbfd\x027\xfcb%\xff\xff\xff\x80\x05\x00\x00\x00\x00\x00\x00\xff\x03\xff\x92\xe9\x16\x00\x05\x9beq,\x93\xcb=\xb6\xc21\xd1\x19\xaa\xa1', 0x39, 'p\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\xd9\xb5i(\xfb\xbf\v\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x35, '\xcf`7-a\xcc\xea\xb8\xc8\x86A\xeb\x93\xb4\xcc\xf6\x00*\xb8{\xfc\x01\'\x96\t?h0\\M\" \x83~\x01\b\xe2\xe7HP\x1cQHK\xa0/\x10\x9c\xaa\xf9\x15\t\xa2', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xdb\x80\xe8\xd4\a\x00\x00\x007\x00'}, 0x39d, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\fA\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaau\xf8$k\xccB\xea\xa8\xc61\xc0\xc5\x00\x95\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xc0\xfbNL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12.a\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xc2\x00\x00\x000\xe4\xee+\xfc\x7f\x80P\x85\x11C\xe5\x16\x1a\xcdG\x15\n\xcb\xaft8\"\xdf\xe2\x03\xb1\b\xd3~\x91M\xc1\xe5>#LP\x9e\xcaA\a\xa1q,\xaa\x9d\xa5=\x05\x1c6\x88Ly\x18&a\xf3\xca6\xbc\xdb\xfb\xbd&q\t\xf81\x9d\x8d\xd5\xc0p\x99\xeb\x1b\x11\x03\x06U\xf5biOat=\x19B\x1bJ\x19\xef\x8b\x8bL\xe9\xc9\x93\xc7\xd6\xcb0\fNezNP\xa3[\\\xc1k\x8c\x16\x1a\x8e=\xf9\x03k\xbc\xf2\x8a\xdc\xd1\x9alL)\x17\t\xae\xe5\xab>[\xc5\xae)\xf4u\xe4\xd2D\b\xb5\x16}\x0f\xaf_\xc1Vkp\\\x8b`\xaf\xa8\xac\xa4/~\x04i\x18\x8a\x0e\xf0b\xca\x18\xe3\x8f\x9e\xe1\n\xc7}+~\xb9\xd6\x0e\xa7\x9f\xdbUd\x11\xe5\x9d\xfb\xd8\xdb\xb8\xa2\xa6b.\xbc\xf8Lio\xa4\xda!\xba\xd22\r\rh\xe9\xbfCF\xf0ha\x19\xa3\x9e@\x03\x95\xc8\xf2\x82^\xa0i\xae\x0e\x14;\xd1\xa4Ay\xed\x8e<\xea\v^\x9a\x19\xcc\x7f\xfaP\x0f\xa4\x1bl\x80I\xbd\xe4X\'\xd5N\xc9\x01\xd2z\xd1%\x05h\x89\xb33k?\x06\x83\x8c[fz\xe2.\xfe;\xc1[\x82_\x7f\xbc\xe4\x80\'(\x1c\xf9\xfe\x8f\xc2\x1f\xc7|$=\xe2g\x051\x0e\xb8\x1c\xf7M\xe0)1\x92\xa1?j\xd0W\xdea\xfd\x8a\xba\x8e\xf4C\x9b\xc0jE\xb2\xb01bQZ#C:\xfe\xb5*\xed\xb5\xabo3FS8\x05\x15\xf7y\xf3]\xc8\xa7\x8c7w$\x92\xa2(L!\xd2\x13V\xd4s\xf0\x0f\x85\x13|{\xf0cou}5(\x86\x9b?\x00w5\xcf\xf8\\\x9d\x97\x8b\xf5]\xcc&\xd6-%\xe3\b\xf0\x88\'\xa9\x1f\xf4{\xec\x92\xf8\xe9\x1ey\bfT\x00\xaaN9\xb3Y\x86#\x9d\\{\x94\x92\xc5\xbb&\xbcU\xb5[I\xedpHnn}\xa3\x8c \x84P\xf9\xf7\x9e\x1bA\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xae-[\\\x99\xf7\x17\xf0\xa0wI#\x9b]\b\xf8\xc5\xc0\xadyQ\xe0\xa7\xc7\xf3\xdb\x8d\xfd?\x86W%\x8al\x04\xf3-W\xad(s\xdeE\xfa\x98\xb0\xf8&y\x17\xff\x9b\xbe\x9c\rt\xa5\xac\xa2\x06\xfe)\xe0\xc1\x03\x9f\"U<\'GB]\x83\x100x.\xe7\x8f\x8b\xa3]\xe3\x18\xc5?\tO\x92\\\xc9x.\x94\xb6\xc8p\xa4\x87g\x8b\xfa\xe7E\xdf\xf2h\xbd\xa7\xfd\xec\x87<\xe4\xfbK\x8d\xcb\xa0A\x9b0D\x9a\xdf\xefrAb\xbf\xb1\n\xaf\xcf\xeaH\xa6\x7f\xaew3\xcc:\x7f\x1e\xef\x91\xbeR\x85!^\xabA\xf6', 0xffffffffffffffff}}, 0x4d6) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) getsockname$inet(r2, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x4c, 0x24, 0xf0b, 0xffffffff, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xffff, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x4c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r4 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000180)={0x700, 0x1, &(0x7f00000000c0)=[r5], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x801}) 4m54.581694595s ago: executing program 1 (id=1099): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x0, 0x0, '\x00'/100}}}}}}, 0x0) 4m54.581357449s ago: executing program 1 (id=1100): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_linger(r2, 0x1, 0x3d, &(0x7f0000000080)={0xb}, 0x8) sendmmsg$sock(r2, &(0x7f0000000280)=[{{&(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x2, {{0x1, 0x200000}, 0x1}}, 0x80, 0x0, 0x0, &(0x7f0000000300)=[@txtime={{0x18, 0x1, 0x3d, 0xffffffff80000001}}], 0x18}}], 0x1, 0x20008850) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000080)='./file0\x00') r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x101000, 0x102) getdents64(r4, &(0x7f0000001f80)=""/4108, 0x100c) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) symlink(&(0x7f0000001480)='./bus\x00', &(0x7f0000002480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/comedi\x00', 0x0, 0x0) read(r5, &(0x7f0000000100), 0x1000) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x8000000, 0x9, 0x10001, 0xfffffffd, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x2, '\x00', 0xb}, {0x1, 0x7f, 0x5, '\x00', 0x67}, {0x0, 0x2, 0x5, '\x00', 0xf}, {0x1, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x4, 0xc}, {0x7f, 0x5, 0xb, '\x00', 0x8}, {0xd7, 0xd, 0x94, '\x00', 0x86}, {0x0, 0x28, 0x7, '\x00', 0xdc}, {0x40, 0x4, 0x4, '\x00', 0x1}, {0xfe, 0x3, 0x26, '\x00', 0x5}, {0xcf, 0x3, 0x1, '\x00', 0x6}, {0xf, 0xee, 0x3, '\x00', 0x3}, {0x39, 0x2, 0x8, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x7}, {0x5, 0xc, 0x5, '\x00', 0xc}, {0x7, 0x1, 0x7}, {0x0, 0x80, 0x1, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4, '\x00', 0xbf}]}}) 4m54.289803772s ago: executing program 1 (id=1101): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) (async) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) (async) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000100000000000000000000060a0b250000000000000000020000040900010073797a30200000000900020273797a3200000080140000001100010000009bc27c4b7cfd63df0836541963eef4fd10ff04dc629e6a92fbbeb07b55205ed2e419b99a2b8525d4c30afe57b1d3d5a399f83b8206bd7d2601513d40fb1949524847a69028c5f3ace4aeaf5667bbe785da42b0631fdd9a24dff91e5494ff662c0e9dd1432b4e0ce72f18c6bb7cb31ea3896bba4c07befb0bce123b0d595a"], 0x54}}, 0x0) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x101802, 0x0) (async, rerun: 64) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (rerun: 64) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000680)={{r1, &(0x7f0000000080)='+\x9b{,$]B%!+Y\x00', 0x322600, &(0x7f00000000c0)={@align=0x1, {0xd4, 0x8dc, 0x800, 0xa}}, 0xfffffffc, &(0x7f0000000100), &(0x7f00000001c0)=0x9}, 0x2, &(0x7f0000000580)=[{0x2, 0x5, &(0x7f0000000200)='-{@.\x00', &(0x7f00000003c0)="84ba97df33ac2aa2121199e71af982a464b45ce5304031359c5e3f53b2549492c1f7caae448dd20f0f81e6f79d27d89a5c5352998cee0ccfe58a1e277f321c59c3afcaaa451fc8dff3afa55f73b5505f5c43a14de657fbbd1e66a3729954de8891c993a3ec77ec19745035bd4d35414879609ff0e8cd770e974db87058b9a47a12f489ebfe7c8390aecbe793fc7cf7e9a11634de565f0a56c41589ab026f5ec21155d4515951d851e1b3c97319636b06e4e91c8eb245ffcfa6582e174d33be47ecd0eb15722abc71731a5c0f1accb9f10d0b5cf5fb322ab65972bc343aa0a583b57d66a5e78c4b031860cfb2f8ad5e2ddf", 0xf1, 0x18}, {0x1, 0x6, &(0x7f00000004c0)='\xab!\x00', &(0x7f0000000500)="027727e38cfe4cf6bfa0a25194f90288a70200000000441e185db888e90127f5ed5c093a89cd4969275e1a221943fb0fde3af42904792b3d5f362383ef0cb15c053bda540bbc2342051104e7d9464245e8c44a49d1322dea61427209055378b851c4be711107d3cfbe2ed5dfa6cb4f35850448cecb000000000000", 0x7b, 0x3a}]}) fsmount(r6, 0x0, 0x84) (async, rerun: 32) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000f0ff0000000000a500000000000a2c000000050a03000000000000000000000109948f5fa4000000000019ce000000f700"/70], 0x54}}, 0x0) (rerun: 32) 4m52.151758113s ago: executing program 1 (id=1125): r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000180), 0x0) syz_open_dev$vim2m(0x0, 0x0, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x28, 0x4, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x20008040) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r2], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="71050d050203"], 0x177) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x2c}}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) write$nci(r0, &(0x7f0000000300)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x8, @b={0x1, 0x2, 0x1, 0x0, {0x8b, "d9b4bb202ef4dca4e14e66062a2b06d0a3daa55c3ebc788a14a653afb8b287a6c308ed49041ee073956ba796e5ef2684df162389f8b35e44ffd1018cc0b8aef4bde01f247caded56dd809adf26916b59a6d760eb177272a04fe47b69d1d71df5d17de07559c54838dbb9f0693f723e947b422cb85123a95f13ddc553d2565701a52c007eb59bf577432545"}}}, 0x94) 4m52.092712393s ago: executing program 32 (id=1125): r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000180), 0x0) syz_open_dev$vim2m(0x0, 0x0, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x28, 0x4, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x20008040) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r2], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="71050d050203"], 0x177) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x2c}}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) write$nci(r0, &(0x7f0000000300)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x8, @b={0x1, 0x2, 0x1, 0x0, {0x8b, "d9b4bb202ef4dca4e14e66062a2b06d0a3daa55c3ebc788a14a653afb8b287a6c308ed49041ee073956ba796e5ef2684df162389f8b35e44ffd1018cc0b8aef4bde01f247caded56dd809adf26916b59a6d760eb177272a04fe47b69d1d71df5d17de07559c54838dbb9f0693f723e947b422cb85123a95f13ddc553d2565701a52c007eb59bf577432545"}}}, 0x94) 4m3.411824909s ago: executing program 4 (id=1618): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x900, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$video(&(0x7f0000000040), 0x1, 0x189000) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f0000000000)=0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r4, 0x0, 0x17, &(0x7f0000000180)=0x1ff, 0x4) syz_emit_ethernet(0x86, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaa005c62509e000800450000780000000000119078000000000000000000004e20006490780200000000000000010000005f12b6871b386fa5eeb1f63a854953be6b687c5ca8f24d70097114a49438d6a5aea62ca640d24af68d48a8225caf175b3b854944cbe40dfb8d58dfffa2e3eed366003e65d38b98f7535880606655"], 0x0) recvmmsg(r4, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40010040, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f000000d000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000180)="66baf80cb8585b778eef66bafc0c66b8d1008ec866ba200066b8000066ef66b837000f00d866b8b2000f00d8c7442400fe280000c744240298f1463bc7442406000000000f011c240f013366baf80cb856d23f8eef66bafc0c66b8001866efd02766baf80cb8d0a5ba82ef66bafc0c66b8a6d566ef", 0x75}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r3, 0x4068aea3, &(0x7f0000000080)={0xdf, 0x0, 0x189000}) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000a00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000840)={0x158, r5, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0xec, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "5da2b1de6bf4d19788b0302a81eac212e57a045e2be17caf5338"}}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "ab57fd51b8ff0f341ebee49f1b4266d3f83ffeb1b440f4b2271aac7542"}}, @TIPC_NLA_NODE_ID={0x45, 0x3, "53aa772be61465ec26f001bbe63ec8844f8922efdaf9a46e709e9f4801b40879ea3bbb46ee7c9af0cdaf37260068c8736ecf7a36c23673d7ec9897685c26a8da5b"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10000}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xc1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NODE={0x20, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1ff}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}]}]}, 0x158}, 0x1, 0x0, 0x0, 0xf3662dc8ae81ed}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r6, 0x1, 0x2a, 0x0, &(0x7f0000000040)) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000440)={0x0, 0x8, 0x4, 0x1}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x208000) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4m2.897366846s ago: executing program 4 (id=1621): openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000007"], 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap$KVM_VCPU(&(0x7f0000c6f000/0x4000)=nil, 0x930, 0x2, 0x32e7851d6de9e532, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x42200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d03, 0x0, 0x1}]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000780)={0x2c, r4, 0x1, 0x0, 0x25dfdbff, {{0x2}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1743}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x367}]]}, 0x2c}, 0x1, 0x0, 0x0, 0xc804}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m2.227026909s ago: executing program 4 (id=1625): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b70400000000000085000000a4000000b7000000000000009500000000000000b7000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 4m2.027153549s ago: executing program 4 (id=1628): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x900, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="8f0978d21b640fc79ca50000c0fe470f06430f01c2440f20c0ac0a0000e39d9d0f22c066460f38809bf77f00000f214a0fc73d0d0000003e653666400fc7775f400f01c4", 0x44}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xc000000) 4m1.501014376s ago: executing program 4 (id=1634): r0 = socket(0x400000000010, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r1 = syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_disconnect(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) exit(0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dynamic_debug/control\x00', 0x2, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001414"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x40050) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x278, 0x310, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) write$binfmt_script(r2, &(0x7f0000000700), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r5 = syz_create_resource$binfmt(&(0x7f0000000100)='./file1\x00') r6 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r7, 0x13) waitid(0x0, r7, 0x0, 0xb, 0x0) r8 = openat$binfmt(0xffffffffffffff9c, r6, 0x42, 0x1ff) close(r8) execveat$binfmt(0xffffffffffffff9c, r5, 0x0, &(0x7f00000005c0)={[], 0xf000}, 0x1000) openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/block/sda/hctx0/tags\x00', 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r9, 0x0) setpgid(0x0, r9) rt_sigtimedwait(&(0x7f0000000000)={[0xffffffffffffffff]}, &(0x7f0000000280), 0x0, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 4m0.165537434s ago: executing program 3 (id=1648): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/comedi\x00', 0x0, 0x0) read(r3, &(0x7f0000000100), 0x1000) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x8000000, 0x1f, 0x10001, 0xfffffffd, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x2, '\x00', 0xb}, {0x1, 0x7f, 0x5, '\x00', 0x67}, {0x0, 0x2, 0x5, '\x00', 0xf}, {0x1, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x4, 0xc}, {0x7f, 0x5, 0xb, '\x00', 0x8}, {0xd7, 0xd, 0x94, '\x00', 0x86}, {0x0, 0x28, 0x7, '\x00', 0xdc}, {0x40, 0x4, 0x4, '\x00', 0x1}, {0xfe, 0x3, 0x26, '\x00', 0x5}, {0xcf, 0x3, 0x1, '\x00', 0x6}, {0xf, 0xee, 0x3, '\x00', 0x3}, {0x39, 0x2, 0x8, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x7}, {0x5, 0xc, 0x5, '\x00', 0xc}, {0x7, 0x1, 0x7}, {0x0, 0x80, 0x1, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4, '\x00', 0xbf}]}}) 3m59.815601955s ago: executing program 3 (id=1650): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)) syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1edb2361000000010902"], 0x0) socket(0xa, 0x3, 0x3a) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0xffffffff, 0x36, 0x0, &(0x7f00000001c0)="c1dfb080cd21d398098ee68886ddfc30d80ce5ed88f6e9b83601f444ac505655d702cb0e4881a9fb5fbebe8f1e17d613fe24c2021a97", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m58.496701721s ago: executing program 4 (id=1662): r0 = socket(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) accept$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @private0}, &(0x7f00000000c0)=0x1c) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) close(0x3) socket$alg(0x26, 0x5, 0x0) pidfd_send_signal(r2, 0x0, 0x0, 0x10000000000001) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xc}, {0xffff, 0x1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x1}]}}]}, 0x40}}, 0x0) 3m58.099417708s ago: executing program 3 (id=1664): r0 = socket(0xa, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f0000000000)=""/4102, 0x0) 3m58.015332029s ago: executing program 3 (id=1666): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x8b) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = openat$ptp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x5a000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) close_range(r1, r0, 0x2) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r2 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x40) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x65, 0x0, 0x0, 0x89, 0x0, @dev, @local, {[@noop, @generic={0x86, 0xd, "c045d45768dc37efa0fc58"}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@loopback}]}, @ssrr={0x89, 0xf, 0x0, [@empty, @broadcast, @broadcast]}, @timestamp_addr={0x44, 0x4c, 0x0, 0x1, 0x0, [{}, {@private}, {}, {@local, 0x4}, {@loopback}, {@private}, {@remote}, {@broadcast}, {@broadcast}]}, @generic={0x86, 0x8, "58185dd6611e"}]}}}}}}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xd4}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x28, 0x2, 0x3, 0x1, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xffff, 0x2}}]}, 0x28}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000000000080040fe8000000000000000000000000000aafe8000000000000000000000000000bb3b00010400000000"], 0x0) sendmsg$NFQNL_MSG_VERDICT(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x54, 0x1, 0x3, 0x1, 0x0, 0x0, {0xa}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x1, 0x1}}, @NFQA_PAYLOAD={0x34, 0xa, "6000000000080040fe8000000000000000000000000000aafe8000000000000000000000000000bb0000010400000000"}]}, 0x54}}, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014000300697036746e6c300000000000000000001c0012800b000100697036746e6c00000c00028006000f0002"], 0x50}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x8b) (async) write(r0, &(0x7f0000000000)='3', 0x4e) (async) openat$ptp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x5a000, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async) close_range(r1, r0, 0x2) (async) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async) chdir(&(0x7f0000000140)='./file1\x00') (async) open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x40) (async) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, 0x0) (async) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x65, 0x0, 0x0, 0x89, 0x0, @dev, @local, {[@noop, @generic={0x86, 0xd, "c045d45768dc37efa0fc58"}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@loopback}]}, @ssrr={0x89, 0xf, 0x0, [@empty, @broadcast, @broadcast]}, @timestamp_addr={0x44, 0x4c, 0x0, 0x1, 0x0, [{}, {@private}, {}, {@local, 0x4}, {@loopback}, {@private}, {@remote}, {@broadcast}, {@broadcast}]}, @generic={0x86, 0x8, "58185dd6611e"}]}}}}}}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xd4}}, 0x0) (async) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x28, 0x2, 0x3, 0x1, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xffff, 0x2}}]}, 0x28}}, 0x0) (async) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000000000080040fe8000000000000000000000000000aafe8000000000000000000000000000bb3b00010400000000"], 0x0) (async) sendmsg$NFQNL_MSG_VERDICT(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x54, 0x1, 0x3, 0x1, 0x0, 0x0, {0xa}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x1, 0x1}}, @NFQA_PAYLOAD={0x34, 0xa, "6000000000080040fe8000000000000000000000000000aafe8000000000000000000000000000bb0000010400000000"}]}, 0x54}}, 0x0) (async) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014000300697036746e6c300000000000000000001c0012800b000100697036746e6c00000c00028006000f0002"], 0x50}}, 0x0) (async) 3m57.843066855s ago: executing program 3 (id=1668): setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x40082, 0x17) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x1, 0xa, 0x1}) 3m56.670614923s ago: executing program 3 (id=1676): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) io_setup(0x200, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0xa1, 0x1, 0x4, r0, &(0x7f0000000040)="1d", 0x1, 0x801, 0x0, 0x1080000}]) 3m56.436281203s ago: executing program 33 (id=1676): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) io_setup(0x200, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0xa1, 0x1, 0x4, r0, &(0x7f0000000040)="1d", 0x1, 0x801, 0x0, 0x1080000}]) 3m43.017469707s ago: executing program 34 (id=1662): r0 = socket(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) accept$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @private0}, &(0x7f00000000c0)=0x1c) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) close(0x3) socket$alg(0x26, 0x5, 0x0) pidfd_send_signal(r2, 0x0, 0x0, 0x10000000000001) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xc}, {0xffff, 0x1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x1}]}}]}, 0x40}}, 0x0) 2m56.697089221s ago: executing program 2 (id=2034): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="181100ff", @ANYRES32=r0, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b70400000000000085000000a4000000b7000000000000009500000000000000b7000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 2m56.539607418s ago: executing program 2 (id=2037): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0xa, @vbi={0x0, 0x6, 0x31324d59, 0x3136564e, [0x3fe, 0xf4ca], [0x7, 0x8], 0x1}}) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r3 = syz_open_dev$loop(&(0x7f0000000040), 0x8, 0x0) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x42000, 0x0) r5 = socket$inet6(0xa, 0x1, 0x5) r6 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) r7 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r9 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) poll(&(0x7f00000001c0)=[{r0, 0x2000}, {r2, 0x80}, {r3}, {0xffffffffffffffff, 0x4}, {r4, 0x44}, {r5, 0x4000}, {r6, 0x42}, {r7, 0x4014}, {r8, 0x8081}, {r9, 0x2108}], 0xa, 0x4cb) r10 = socket$inet6_udp(0xa, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x32f000) r11 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r11, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2}) close_range(r10, 0xffffffffffffffff, 0x0) 2m56.195016394s ago: executing program 2 (id=2039): bpf$PROG_LOAD(0x5, 0x0, 0x18) r0 = fsopen(&(0x7f0000000100)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x100) getdents64(r2, &(0x7f0000000000)=""/50, 0x32) lseek(r2, 0x1, 0x0) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r4, 0x40025b0c, 0x0) 2m54.431584268s ago: executing program 2 (id=2055): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="181100ff", @ANYRES32=r0, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b70400000000000085000000a4000000b7000000000000009500000000000000b7000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 2m54.009921331s ago: executing program 2 (id=2056): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002b40)=ANY=[@ANYBLOB="1c27bd700004000000020000f6070001800400758000000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x200048d5}, 0x4008094) r1 = syz_io_uring_setup(0x208c, &(0x7f0000000200)={0x0, 0xcb14, 0x10100, 0x3, 0x4001bf}, &(0x7f0000000040), &(0x7f0000000000), &(0x7f0000000000)) prlimit64(0x0, 0xe, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/devices/system/clocksource/clocksource0/available_clocksource\x00', 0x0, 0x0) read(r2, &(0x7f0000000000)=""/256, 0x100) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000580)=[{&(0x7f0000000380)=""/113, 0x71}], 0x1) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r5 = socket(0x400000000010, 0x2, 0xf0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xc, 0x9}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x101, 0x0, 0x7, 0x3}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x4c840) r7 = eventfd(0x1) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f00000001c0)=r7, 0x1) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000280)=@delchain={0x2c, 0x65, 0x400, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x5, 0x9}, {0x6, 0xb}, {0xffe0, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x9}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x2000400c) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000080a369eeed3bf12e0d7ba3aa6b00"/32, @ANYRES32=0x0, @ANYBLOB="400d0000001200002800128008000100687372001c00028008000200", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="0500070002000000"], 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x4008044) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000fc0)='fdinfo/3\x00') r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r11, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000240)=0xac7a627bf20b3c4f) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) 2m53.200947315s ago: executing program 2 (id=2061): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, r0, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x900, 0x0, 0x8890}, 0x800) 2m38.123759516s ago: executing program 35 (id=2061): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, r0, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x900, 0x0, 0x8890}, 0x800) 2m11.702055355s ago: executing program 5 (id=2242): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x3c, r1, 0xb97534d5fe9704cf, 0x70bd2b, 0x25dfdbfc, {{0x12}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x2, 0x5b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c040}, 0x40000c4) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) r4 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_FRONTEND_TUNE_MODE(r4, 0x6f51, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config\x00', 0x18b) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x7, 0x0, 0x81, 0xffffffff, 0x26c}) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp\x00') preadv(r5, &(0x7f0000001240), 0x0, 0x0, 0x4a3e) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000240), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xfffffffe}, 0x10, 0x0, r5}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/nexus\x00', 0x1, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSPTLCK(r7, 0x40045431, &(0x7f0000000000)) r8 = syz_open_pts(r7, 0x2) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0xf) ioctl$TCSBRK(r8, 0x400455c8, 0x2) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000080)=0xc0) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000080)=0x1) r9 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r9, 0x1, 0x7, &(0x7f0000000180), 0x43) write(r6, &(0x7f0000000400)='na', 0x2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 2m11.501043602s ago: executing program 5 (id=2243): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x10000000000, 0x4, 0x2000008, 0x11, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') pread64(r1, &(0x7f0000000000)=""/65, 0x41, 0x7bdb) pread64(r1, &(0x7f00000000c0)=""/127, 0x7f, 0x3) prctl$PR_SET_SECUREBITS(0x1c, 0x14) r2 = socket$unix(0x1, 0x5, 0x0) recvmmsg(r2, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}, 0x60000000}], 0x1, 0x2002, 0x0) setuid(0xee01) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000040), 0xbd) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x39, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 2m11.266285158s ago: executing program 5 (id=2245): r0 = syz_ublk_setup_io_uring(0x1b1d, &(0x7f0000000080)={0x0, 0x1c3f, 0x10000, 0x2, 0xf5}, &(0x7f0000000040), &(0x7f0000000200), &(0x7f0000000240)) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000001480)=0xffffffffffff7fff, 0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r2) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000980)={0x54, r3, 0x1, 0x70bd26, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x2}, {0xc, 0x90, 0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40810}, 0xa080) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000000)=0x100000001, 0x8) mmap$IORING_OFF_CQ_RING(0x0, 0x782, 0x1000002, 0x12, r0, 0x8000000) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r4, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) getsockopt$nfc_llcp(r4, 0x118, 0x3, &(0x7f0000000600)=""/239, 0xef) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) getresuid(&(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0)=0x0) quotactl_fd$Q_QUOTAON(r1, 0xffffffff80000201, r6, &(0x7f0000000300)='./file0\x00') ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r7, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000600)={0x28, 0x4, r7, 0x0, &(0x7f0000feb000/0x14000)=nil, 0x14000, 0x100019}) ioctl$IOMMU_HWPT_ALLOC$TEST(r5, 0x3b89, &(0x7f0000000140)={0x28, 0x6, r8, r7, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000180)}) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0xe0302, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r9, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r10}) ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, &(0x7f0000000140)={0x28, 0x1, r8, r10, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000100)}) 2m10.849820418s ago: executing program 5 (id=2247): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./lower1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./lower2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./upper\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./work\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./lower1/file1\x00', 0x42, 0x1ff) mount(0x0, &(0x7f00000002c0)='./mnt\x00', &(0x7f0000000340)='overlay\x00', 0x0, &(0x7f0000000380)='lowerdir=lower1:lower2,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00') name_to_handle_at(0xffffffffffffff9c, &(0x7f00000004c0)='./mnt/file1\x00', &(0x7f0000000300)=@raw={0x80, 0x0, {'\x00'}}, &(0x7f0000000400), 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./mnt\x00', 0x0, 0x0) open_by_handle_at(r1, &(0x7f0000000300)=ANY=[], 0x3f) write$cgroup_devices(r0, &(0x7f0000000000)={'b', ' *:* ', 'm\x00'}, 0x8) 2m10.709548418s ago: executing program 5 (id=2248): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/enabled\x00', 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = syz_clone(0x0, 0x0, 0x29, 0x0, 0x0, 0x0) write(r0, &(0x7f00000000c0)='0', 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x19, 0x1c, 0x401, 0x1000000, 0x0, {0x2, 0x0, 0x0, 0x0, 0x20, 0x8ccdef3e8cce1dee}, [@NDA_DST_MAC={0xa, 0x1, @link_local}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}}, 0x4) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c0001800600060086dd00000c0007"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x108}, 0x1, 0x0, 0x0, 0x24008c44}, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r3, {0x7f}}, './sys\x00'}) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_USERDATA={0x1c, 0x7, 0x1, 0x0, "10eb420eb56b78fef1dc7609811fcead8858dd31a88217b0"}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2f}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x805}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x120, 0x14, 0xa, 0x900, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_USERDATA={0x8, 0x8, '9ABc'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0xbc, 0x8, "c77a52c7c5509733d650c38810a842fb37872d401bdf6bb03d424c039b0d22e909a2917b25c806c5a34dc12ed88dfab407bdce8342969d044d747d31fa93c59c4f28335c8440cc3fd778391caf29b9af6efd1c769f01937af4e32938551ff1fca38543deac0ce5bea866123808aff2ae4c7c31956d375adcce2c5d76899d76e932a93834394dcf1043076441ff77eb125031a1abd9a5d7c8345d76ee9df86227d6f9deafc7b64d7d1d8fa9cb617dc7770e32b823b07120fd"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xd}}}, 0x1d0}, 0x1, 0x0, 0x0, 0x24040001}, 0x40000) setpriority(0x1, r1, 0x3) socket$xdp(0x2c, 0x3, 0x0) 2m7.763588855s ago: executing program 5 (id=2251): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}, 0x0, 0x0, 0xe4}}, &(0x7f0000000480)) 1m52.715816981s ago: executing program 36 (id=2251): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}, 0x0, 0x0, 0xe4}}, &(0x7f0000000480)) 1m1.743529656s ago: executing program 0 (id=2686): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401107000900010000000109023c0001010080320904000006ffffff0007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d02"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) r0 = fsopen(&(0x7f0000000380)='pstore\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x30, 0x0) (async) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'wlan0\x00', 0x100}) (async) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(0xffffffffffffffff, 0x19, &(0x7f00000001c0)={0x80, 0x7f}, 0x0) landlock_restrict_self(r1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) r4 = syz_open_dev$dri(&(0x7f0000000080), 0xffffffffffffffff, 0x301000) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000dc0)={0x0, 0x0, 0x0, r5}) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, r6, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x24}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x48}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3a}]}, 0x58}, 0x1, 0x0, 0x0, 0x44000}, 0x4000000) (async) socket$kcm(0x11, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) (async) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x84, 0x2c, 0xd2f, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x40, 0x8, 0x7}}]}, {0xfffffffffffffc20}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) r11 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r11) (async) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 58.059407218s ago: executing program 0 (id=2713): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) 57.885167928s ago: executing program 0 (id=2714): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000) userfaultfd(0x801) syz_init_net_socket$x25(0x9, 0x5, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3000000, 0x0, 0x0, 0x2) syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) 57.427330032s ago: executing program 0 (id=2719): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000) userfaultfd(0x801) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1c5) creat(&(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x80) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) chdir(&(0x7f0000000000)='./file0\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0xc02, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) 56.774177413s ago: executing program 0 (id=2722): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000000085ff0000000000000000180100002020702500000000002020207baaf8ff00000000bda108000000000047010000f8ffffffb702000008000000b70300000000000085000000050000001801000020786c250000000000202020db1af8ff41000000bda100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 56.018751628s ago: executing program 0 (id=2727): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x15) ioctl(r0, 0x404c4701, &(0x7f00000001c0)="01000000000000000000000001000000010000000100000000000000200000002000fffd0100000001") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 55.507418826s ago: executing program 37 (id=2727): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x15) ioctl(r0, 0x404c4701, &(0x7f00000001c0)="01000000000000000000000001000000010000000100000000000000200000002000fffd0100000001") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 10.194448791s ago: executing program 9 (id=2800): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x81, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x20, 0x0, 0x0, 0x0, 0xfffffdfd, 0x0, 0x0, 0xd4695a9457ddd0e6, 0xd, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000140)={0x28729f328c68897}) 10.09584422s ago: executing program 9 (id=2802): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) 10.028043121s ago: executing program 9 (id=2804): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$can_bcm(0x1d, 0x2, 0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, 0x0) connect$bt_l2cap(r1, &(0x7f0000000200)={0x1f, 0x1001, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="02c80010000c0001000302080040"], 0x15) syz_emit_vhci(0x0, 0x21) syz_emit_vhci(0x0, 0x1f) syz_usb_connect$cdc_ecm(0x6, 0x4d, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x9}, 0x0, &(0x7f0000000180)={0x1ff, 0x1, 0x2, 0x4, 0x3, 0x3152eb0d, 0x0, 0xffffffffffffffff}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6.840753296s ago: executing program 9 (id=2822): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xf}, 0x15, 0x3, 'lblcr\x00', 0x1, 0x6, 0x48}, 0x2c) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./proc_mnt\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc_mnt/sys/net/ipv4/vs/svc_lfactor\x00', 0x2, 0x0) write$tcp_congestion(r1, 0x0, 0x0) 6.654714654s ago: executing program 9 (id=2825): creat(0x0, 0x130) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getenv(0x4201, r0, 0x7, &(0x7f0000000100)) 6.446637864s ago: executing program 9 (id=2827): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dynamic_debug/control\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='+p', 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl(r1, 0x3ba0, &(0x7f0000000080)="4800000002000000") 4.529462222s ago: executing program 7 (id=2838): setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/nf_conntrack/parameters/hashsize\x00', 0x101042, 0x0) io_submit(r0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0xffffff7f00000000, 0x0, 0x0, 0x1, 0x6, r1, &(0x7f0000000140)='i', 0x1, 0xc}]) 4.340751256s ago: executing program 7 (id=2841): r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000001c0)=0xe) 4.111838108s ago: executing program 7 (id=2843): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8153, 0x2000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan1\x00', 0x0}) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x2, r2, 0x0, 0x0}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x12}, 0x0, &(0x7f0000000040)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 3.069309388s ago: executing program 7 (id=2850): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md0', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/block/md0/md/metadata_version\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='external:', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='raid5', 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r3, &(0x7f0000000380)='2', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/block/md0/md/chunk_size\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)='65536', 0x5) r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/block/md0/md/consistency_policy\x00', 0x1, 0x0) write(r5, &(0x7f0000000500)='ppl', 0x3) r6 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r6, &(0x7f0000000580)='1:0', 0x3) write(r6, &(0x7f00000005c0)='1:1', 0x3) r7 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/block/md0/md/dev-ram0/ppl_size\x00', 0x1, 0x0) write(r7, &(0x7f0000000740)='128', 0x3) r8 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1, 0x0) write(r8, &(0x7f00000007c0)='0', 0x1) r9 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r9, &(0x7f0000000a40)='active', 0x6) 2.318426857s ago: executing program 7 (id=2854): socket$netlink(0x10, 0x3, 0x0) socket(0x200000000000011, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) syz_usb_connect(0x6, 0x24, &(0x7f0000000600)=ANY=[], 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xec, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x3}}]}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r2], 0x4) 2.13162744s ago: executing program 6 (id=2858): prlimit64(0x0, 0xe, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1c7) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 1.96648398s ago: executing program 6 (id=2859): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}}, 0x0) 1.689895556s ago: executing program 8 (id=2860): openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dynamic_debug/control\x00', 0x2, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl(r0, 0x3ba0, &(0x7f0000000080)="4800000006000000") 1.557175654s ago: executing program 8 (id=2861): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0xc) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(r0, 0x5396, &(0x7f0000000000)={0x0, 0x1}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000000)={0x14, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f0000000140)={0x48, 0xc, r4, 0x0, 0xfffffffffffffffc, 0x1543}) 1.281685211s ago: executing program 6 (id=2862): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x8008af83, &(0x7f0000000080)) 952.756705ms ago: executing program 8 (id=2863): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x4c, 0x9, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x800}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x30008054}, 0x800) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) write(r0, &(0x7f0000000000)='6', 0x32) 952.579516ms ago: executing program 6 (id=2864): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'vxcan1\x00', 0x101}) 857.178503ms ago: executing program 6 (id=2865): r0 = syz_open_dev$dri(&(0x7f0000000540), 0x1, 0x1040) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r0, 0xc02864c3, &(0x7f0000000280)={&(0x7f0000000200)=[r1], 0x7ffffeffffffffff, 0x1, 0xa}) 749.666514ms ago: executing program 8 (id=2866): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) read$FUSE(r1, &(0x7f0000000680)={0x2020}, 0x2020) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 748.23908ms ago: executing program 6 (id=2867): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x80) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {0xc, 0xb}, {0xffff, 0xffe2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x1000}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 494.951412ms ago: executing program 7 (id=2868): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='md0', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/level\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='raid1', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='1:0', 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/block/md0/md/raid_disks\x00', 0x2, 0x0) write(r3, &(0x7f0000000400)='1', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/block/md0/md/dev-ram0/slot\x00', 0x2, 0x0) write(r4, &(0x7f0000000480)='0', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/block/md0/md/array_state\x00', 0x2, 0x0) write(r5, &(0x7f0000000500)='active', 0x6) write(r1, &(0x7f0000000540)='raid0', 0x5) 324.61737ms ago: executing program 8 (id=2869): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000040), 0x142, 0x0) ioctl$BLKPG(r0, 0x1269, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x40082, 0x17) write(r1, &(0x7f0000000000)='3', 0x4e) getpid() setns(0xc9, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_clone(0x87002100, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 8 (id=2870): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000100)={0xffffffffffffffff, 0x1, 0xfffff000, 0x1000000}) kernel console output (not intermixed with test programs): device batadv0 [ 341.684307][T13256] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 341.686057][T13256] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 341.730536][T13256] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 341.730562][T13256] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 341.826996][T13256] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 341.828580][T13256] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 341.829433][T13256] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 341.830320][T13256] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 341.844552][T13256] 8021q: adding VLAN 0 to HW filter on device bond1 [ 341.863816][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.863908][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.866988][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.867119][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.443575][ T5812] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.443635][ T5812] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.443667][ T5812] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.443698][ T5812] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.449013][T13158] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 342.511498][T13158] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 342.587434][ T44] audit: type=1400 audit(1790027035.357:1104): avc: denied { write } for pid=13276 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 342.724291][ T5882] hsr_slave_0: left promiscuous mode [ 342.753212][ T5882] hsr_slave_1: left promiscuous mode [ 342.754156][ T5882] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.790834][ T5882] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 342.837747][ T44] audit: type=1400 audit(1790027035.607:1105): avc: denied { write } for pid=13282 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 342.971956][ T5736] Bluetooth: hci2: command tx timeout [ 343.375644][ T5736] Bluetooth: hci1: command 0x0406 tx timeout [ 343.573508][ T5882] team0 (unregistering): Port device team_slave_1 removed [ 343.601120][ T5882] team0 (unregistering): Port device team_slave_0 removed [ 343.777469][T13303] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2385'. [ 343.861174][T13158] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 343.958179][T13158] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 343.959134][T13158] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 344.015870][T13158] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 344.065201][ T5443] 8021q: adding VLAN 0 to HW filter on device eth14 [ 344.098110][T13299] netlink: 'syz.6.2385': attribute type 1 has an invalid length. [ 344.320420][T13323] No source specified [ 344.439311][T13158] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 344.571979][T13158] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 344.585564][ T44] audit: type=1400 audit(1790027037.357:1106): avc: denied { write } for pid=13326 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 344.860537][ T44] audit: type=1400 audit(1790027037.627:1107): avc: denied { write } for pid=13338 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 345.046210][ T5088] Bluetooth: hci2: command tx timeout [ 345.123172][ T5443] 8021q: adding VLAN 0 to HW filter on device eth16 [ 345.328847][T13354] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 345.651521][T13158] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.673074][T13364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2394'. [ 345.724070][ T44] audit: type=1400 audit(1790027038.457:1108): avc: denied { write } for pid=13361 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 345.783273][T13158] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.820763][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.820843][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.822599][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.822682][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.906666][ T44] audit: type=1400 audit(1790027038.677:1109): avc: denied { write } for pid=13367 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 346.058229][ T5443] 8021q: adding VLAN 0 to HW filter on device eth17 [ 346.544009][ T5820] usb 11-1: new high-speed USB device number 20 using dummy_hcd [ 346.719589][ T5820] usb 11-1: Using ep0 maxpacket: 8 [ 346.720751][ T5820] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 346.721264][ T5820] usb 11-1: config 0 has no interfaces? [ 346.721289][ T5820] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.723467][ T5820] usb 11-1: config 0 descriptor?? [ 346.944156][T13158] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.989452][ T9] usb 11-1: USB disconnect, device number 20 [ 347.238359][ T1041] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 347.389032][T13158] veth0_vlan: entered promiscuous mode [ 347.416031][T13158] veth1_vlan: entered promiscuous mode [ 347.429068][T13416] netlink: 'syz.7.2402': attribute type 27 has an invalid length. [ 347.447543][T13158] veth0_macvtap: entered promiscuous mode [ 347.455130][T13158] veth1_macvtap: entered promiscuous mode [ 347.484454][T13158] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 347.505031][T13158] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 347.518898][ T13] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.519075][ T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.519225][ T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.519381][ T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.741246][T13400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.741565][T13400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.798758][ T1041] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 347.843226][ T1041] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 347.843265][ T1041] usb 5-1: can't read configurations, error -71 [ 347.975228][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.975306][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.055630][T13435] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2408'. [ 348.070446][T13433] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2408'. [ 348.073439][ T1178] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.073458][ T1178] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.119817][T13433] IPv6: NLM_F_REPLACE set, but no existing node found! [ 348.174255][T13445] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2410'. [ 348.718597][ T1041] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 348.870156][ T1041] usb 5-1: Using ep0 maxpacket: 8 [ 348.875362][ T1041] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 348.883571][ T1041] usb 5-1: config 0 has no interfaces? [ 348.883603][ T1041] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.885647][ T1041] usb 5-1: config 0 descriptor?? [ 348.959292][T13470] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 349.044768][T13475] nbd6: detected capacity change from 0 to 24 [ 349.053997][T13475] block nbd6: shutting down sockets [ 349.097663][ T5820] usb 5-1: USB disconnect, device number 22 [ 349.136845][T13476] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 349.137088][ C3] blk_print_req_error: 25 callbacks suppressed [ 349.137105][ C3] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 349.137185][ C3] buffer_io_error: 29 callbacks suppressed [ 349.137196][ C3] Buffer I/O error on dev nbd6, logical block 0, async page read [ 349.208304][ T36] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 349.208417][ T36] Buffer I/O error on dev nbd6, logical block 0, async page read [ 349.212327][T11140] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 349.212371][T11140] Buffer I/O error on dev nbd6, logical block 0, async page read [ 349.212480][T11140] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 349.212502][T11140] Buffer I/O error on dev nbd6, logical block 0, async page read [ 349.212589][T11140] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 349.212609][T11140] Buffer I/O error on dev nbd6, logical block 0, async page read [ 349.212709][T11140] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 349.212731][T11140] Buffer I/O error on dev nbd6, logical block 0, async page read [ 349.212821][T11140] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 349.212841][T11140] Buffer I/O error on dev nbd6, logical block 0, async page read [ 349.212921][T11140] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 349.212941][T11140] Buffer I/O error on dev nbd6, logical block 0, async page read [ 349.212971][T12840] ldm_validate_partition_table(): Disk read failed. [ 349.213036][T11140] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 349.213057][T11140] Buffer I/O error on dev nbd6, logical block 0, async page read [ 349.213199][T11140] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 349.213220][T11140] Buffer I/O error on dev nbd6, logical block 0, async page read [ 349.213413][T12840] Dev nbd6: unable to read RDB block 0 [ 349.213688][T12840] nbd6: unable to read partition table [ 349.213837][T12840] nbd6: partition table beyond EOD, truncated [ 349.299495][T13481] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2420'. [ 349.391879][T12840] ldm_validate_partition_table(): Disk read failed. [ 349.392157][T12840] Dev nbd6: unable to read RDB block 0 [ 349.392365][T12840] nbd6: unable to read partition table [ 349.392531][T12840] nbd6: partition table beyond EOD, truncated [ 349.838117][ T44] audit: type=1400 audit(1790027042.607:1110): avc: denied { read write } for pid=13493 comm="syz.6.2425" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 349.838504][ T44] audit: type=1400 audit(1790027042.607:1111): avc: denied { open } for pid=13493 comm="syz.6.2425" path="/164/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 349.841692][ T44] audit: type=1400 audit(1790027042.617:1112): avc: denied { ioctl } for pid=13493 comm="syz.6.2425" path="/164/proc/mtrr" dev="proc" ino=4026531995 ioctlcmd=0x4d06 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 349.841781][T13494] zero sized request [ 350.004601][ T5736] Bluetooth: hci4: command 0x0406 tx timeout [ 350.080738][ T44] audit: type=1400 audit(1790027042.857:1113): avc: denied { bind } for pid=13498 comm="syz.7.2427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 350.081981][ T44] audit: type=1400 audit(1790027042.857:1114): avc: denied { write } for pid=13498 comm="syz.7.2427" path="socket:[58422]" dev="sockfs" ino=58422 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 350.559588][T13507] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2431'. [ 350.711638][T13513] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 351.118078][ T30] usb 11-1: new high-speed USB device number 21 using dummy_hcd [ 351.149786][T13522] cdns2-pci 0000:00:1f.3: probe with driver cdns2-pci failed with error -22 [ 351.310284][T13528] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2437'. [ 351.310974][T13528] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2437'. [ 351.310991][T13528] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2437'. [ 351.311448][ T30] usb 11-1: Using ep0 maxpacket: 8 [ 351.313528][ T30] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 351.314162][ T30] usb 11-1: config 0 has no interfaces? [ 351.314189][ T30] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.334688][ T30] usb 11-1: config 0 descriptor?? [ 351.466187][T13530] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2438'. [ 351.542433][ T30] usb 11-1: USB disconnect, device number 21 [ 351.953899][T13541] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13541 comm=syz.7.2443 [ 351.953982][T13541] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13541 comm=syz.7.2443 [ 351.954045][T13541] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13541 comm=syz.7.2443 [ 351.954107][T13541] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13541 comm=syz.7.2443 [ 351.954167][T13541] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13541 comm=syz.7.2443 [ 351.954231][T13541] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13541 comm=syz.7.2443 [ 351.954291][T13541] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13541 comm=syz.7.2443 [ 351.954349][T13541] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13541 comm=syz.7.2443 [ 351.954409][T13541] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13541 comm=syz.7.2443 [ 351.954469][T13541] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13541 comm=syz.7.2443 [ 352.457359][T13556] netlink: 'syz.0.2446': attribute type 21 has an invalid length. [ 352.457388][T13556] IPv6: NLM_F_CREATE should be specified when creating new route [ 352.457459][T13556] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 352.457469][T13556] IPv6: NLM_F_CREATE should be set when creating new route [ 352.457506][T13556] IPv6: NLM_F_CREATE should be set when creating new route [ 352.457526][T13556] IPv6: NLM_F_CREATE should be set when creating new route [ 352.467518][T13560] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2449'. [ 352.626440][T13564] WARNING! power/level is deprecated; use power/control instead [ 352.640278][T13564] xt_hashlimit: size too large, truncated to 1048576 [ 353.331554][ T5820] usb 12-1: new high-speed USB device number 7 using dummy_hcd [ 353.498189][ T5820] usb 12-1: Using ep0 maxpacket: 8 [ 353.499185][ T5820] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 353.519545][ T5820] usb 12-1: config 0 has no interfaces? [ 353.519576][ T5820] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.539913][ T5820] usb 12-1: config 0 descriptor?? [ 353.778897][ T5820] usb 12-1: USB disconnect, device number 7 [ 353.902564][T13591] netlink: 'syz.0.2460': attribute type 12 has an invalid length. [ 353.902590][T13591] netlink: 'syz.0.2460': attribute type 29 has an invalid length. [ 353.902606][T13591] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2460'. [ 353.902625][T13591] netlink: 59 bytes leftover after parsing attributes in process `syz.0.2460'. [ 354.274229][T13593] netlink: 'syz.0.2461': attribute type 3 has an invalid length. [ 354.274262][T13593] netlink: 'syz.0.2461': attribute type 3 has an invalid length. [ 356.025494][T13626] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 356.025601][T13626] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 356.069454][T13626] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 356.069559][T13626] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 356.090516][T13626] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 356.183057][T13626] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 356.183150][T13626] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 356.330751][T13626] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 356.342343][T13626] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 356.390046][T13626] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 356.620129][T13649] netlink: 'syz.0.2478': attribute type 10 has an invalid length. [ 356.621994][T13649] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 356.626959][T13649] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 356.639802][ T44] audit: type=1400 audit(1790027049.417:1115): avc: denied { write } for pid=13650 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 356.740538][ T44] audit: type=1400 audit(1790027049.517:1116): avc: denied { write } for pid=13653 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 356.745377][T13658] nfs: Unknown parameter ':@{-]}(•{%[}' [ 356.748913][T13661] nfs: Unknown parameter ':@{-]}(•{%[}' [ 357.065088][ T44] audit: type=1400 audit(1790027049.847:1117): avc: denied { write } for pid=13673 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 357.230879][ T44] audit: type=1400 audit(1790027050.007:1118): avc: denied { write } for pid=13679 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 357.301505][T13686] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2486'. [ 357.301660][T13686] futex_wake_op: syz.6.2486 tries to shift op by -1; fix this program [ 357.379004][T13665] netlink: 15487 bytes leftover after parsing attributes in process `syz.8.2482'. [ 357.740072][ T44] audit: type=1400 audit(1790027050.517:1119): avc: denied { append } for pid=13692 comm="syz.0.2487" name="rtc0" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 357.792518][ T44] audit: type=1400 audit(1790027050.567:1120): avc: denied { accept } for pid=13692 comm="syz.0.2487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 358.098903][ T5736] Bluetooth: hci4: command 0x0406 tx timeout [ 358.099056][ T5088] Bluetooth: hci3: command 0x0c1a tx timeout [ 358.120606][T13702] binder: 13701:13702 ioctl 8918 200000000080 returned -22 [ 358.242248][ T5736] Bluetooth: hci1: command 0x0406 tx timeout [ 358.331776][ T44] audit: type=1400 audit(1790027051.097:1121): avc: denied { write } for pid=13714 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 358.337153][T13724] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2496'. [ 358.337175][T13724] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2496'. [ 358.390901][T13724] erspan1: entered promiscuous mode [ 358.399802][ T5736] Bluetooth: hci2: command 0x0c1a tx timeout [ 358.507538][ T851] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 358.514863][ T44] audit: type=1400 audit(1790027051.287:1122): avc: denied { write } for pid=13726 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 358.675504][ T851] usb 5-1: Using ep0 maxpacket: 8 [ 358.680808][ T851] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 358.681389][ T851] usb 5-1: config 0 has no interfaces? [ 358.681415][ T851] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.782363][T13737] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2500'. [ 358.813028][ T851] usb 5-1: config 0 descriptor?? [ 358.866209][T13739] loop5: detected capacity change from 0 to 4095 [ 358.881655][ T44] audit: type=1400 audit(1790027051.657:1123): avc: denied { write } for pid=13735 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 358.943988][T12840] buffer_io_error: 25 callbacks suppressed [ 358.944006][T12840] Buffer I/O error on dev loop5, logical block 511, async page read [ 358.983897][T13739] FAULT_INJECTION: forcing a failure. [ 358.983897][T13739] name failslab, interval 1, probability 0, space 0, times 0 [ 358.983936][T13739] CPU: 3 UID: 0 PID: 13739 Comm: syz.6.2501 Tainted: G L syzkaller #0 PREEMPT(full) [ 358.983963][T13739] Tainted: [L]=SOFTLOCKUP [ 358.983972][T13739] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 358.983983][T13739] Call Trace: [ 358.983990][T13739] [ 358.984000][T13739] dump_stack_lvl+0x100/0x190 [ 358.984032][T13739] should_fail_ex.cold+0x5/0xa [ 358.984059][T13739] should_failslab+0xc2/0x120 [ 358.984100][T13739] kmem_cache_alloc_noprof+0x92/0x6a0 [ 358.984123][T13739] ? __mpol_dup+0x74/0x390 [ 358.984158][T13739] __mpol_dup+0x74/0x390 [ 358.984184][T13739] ? __pfx___mpol_dup+0x10/0x10 [ 358.984211][T13739] ? sp_alloc+0x27/0x160 [ 358.984242][T13739] sp_alloc+0x4d/0x160 [ 358.984266][T13739] ? __pfx_shmem_set_policy+0x10/0x10 [ 358.984287][T13739] mpol_set_shared_policy+0xa5/0x850 [ 358.984319][T13739] ? __pfx_shmem_set_policy+0x10/0x10 [ 358.984340][T13739] mbind_range+0x339/0x550 [ 358.984370][T13739] do_mbind+0x7dc/0xfd0 [ 358.984403][T13739] ? __pfx_do_mbind+0x10/0x10 [ 358.984436][T13739] ? _copy_from_user+0x59/0xd0 [ 358.984464][T13739] ? __pfx_get_nodes+0x10/0x10 [ 358.984493][T13739] kernel_mbind+0x1b7/0x200 [ 358.984513][T13739] ? __pfx_kernel_mbind+0x10/0x10 [ 358.984547][T13739] do_syscall_64+0x123/0x790 [ 358.984577][T13739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.984597][T13739] RIP: 0033:0x7f225519e159 [ 358.984614][T13739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 358.984632][T13739] RSP: 002b:00007f225601b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 358.984653][T13739] RAX: ffffffffffffffda RBX: 00007f2255425fa0 RCX: 00007f225519e159 [ 358.984665][T13739] RDX: 0000000000004003 RSI: 0000000000004000 RDI: 0000200000000000 [ 358.984695][T13739] RBP: 00007f225523506b R08: 0000000000000006 R09: 0000000000000002 [ 358.984710][T13739] R10: 0000200000000c00 R11: 0000000000000246 R12: 0000000000000000 [ 358.984722][T13739] R13: 00007f2255426038 R14: 00007f2255425fa0 R15: 00007fff58f8e428 [ 358.984754][T13739] [ 359.103441][T11712] usb 5-1: USB disconnect, device number 23 [ 359.139341][T13739] netlink: 232 bytes leftover after parsing attributes in process `syz.6.2501'. [ 359.201674][ T44] audit: type=1400 audit(1790027051.967:1124): avc: denied { write } for pid=13745 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 360.161888][ T5736] Bluetooth: hci4: command 0x0406 tx timeout [ 360.179769][ T5736] Bluetooth: hci3: command 0x0c1a tx timeout [ 360.248212][ T5088] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 360.328600][ T5736] Bluetooth: hci1: command 0x0406 tx timeout [ 360.345235][ T75] IPVS: starting estimator thread 0... [ 360.424170][T13777] IPVS: using max 27 ests per chain, 64800 per kthread [ 360.493498][ T5736] Bluetooth: hci2: command 0x0c1a tx timeout [ 360.623553][T13787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2517'. [ 360.623692][T13787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2517'. [ 360.624602][T13787] 9p: Bad value for 'rfdno' [ 360.834678][T13793] lo: left promiscuous mode [ 360.835291][T13793] tunl0: left promiscuous mode [ 360.835610][T13793] gre0: left promiscuous mode [ 360.835835][T13793] gretap0: left promiscuous mode [ 360.836066][T13793] erspan0: left promiscuous mode [ 360.838433][T13793] ip_vti0: left promiscuous mode [ 360.838792][T13793] ip6_vti0: left promiscuous mode [ 360.839061][T13793] sit0: left promiscuous mode [ 360.839342][T13793] ip6tnl0: left promiscuous mode [ 360.839598][T13793] ip6gre0: left promiscuous mode [ 360.839854][T13793] ip6gretap0: left promiscuous mode [ 360.840246][T13793] bridge0: left promiscuous mode [ 360.840588][T13793] vcan0: left promiscuous mode [ 360.840899][T13793] bond0: left promiscuous mode [ 360.841677][T13793] dummy0: left promiscuous mode [ 360.842017][T13793] nlmon0: left promiscuous mode [ 360.842273][T13793] batadv0: left promiscuous mode [ 360.843043][T13793] vxcan0: left promiscuous mode [ 360.843396][T13793] vxcan1: left promiscuous mode [ 360.843815][T13793] veth0: left promiscuous mode [ 360.844143][T13793] veth1: left promiscuous mode [ 360.844442][T13793] wg0: left promiscuous mode [ 360.844860][T13793] wg1: left promiscuous mode [ 360.845165][T13793] wg2: left promiscuous mode [ 360.845486][T13793] veth0_to_bridge: left promiscuous mode [ 360.846469][T13793] veth1_to_bridge: left promiscuous mode [ 360.847612][T13793] veth0_to_bond: left promiscuous mode [ 360.848207][T13793] bond_slave_0: left promiscuous mode [ 360.848643][T13793] veth1_to_bond: left promiscuous mode [ 360.849017][T13793] bond_slave_1: left promiscuous mode [ 360.849534][T13793] veth1_to_team: left promiscuous mode [ 360.849902][T13793] team_slave_1: left promiscuous mode [ 360.850218][T13793] veth0_to_batadv: left promiscuous mode [ 360.850689][T13793] batadv_slave_0: left promiscuous mode [ 360.851003][T13793] veth1_to_batadv: left promiscuous mode [ 360.851351][T13793] batadv_slave_1: left promiscuous mode [ 360.851797][T13793] xfrm0: left promiscuous mode [ 360.852124][T13793] veth0_to_hsr: left promiscuous mode [ 360.852814][T13793] veth1_to_hsr: left promiscuous mode [ 360.853881][T13793] hsr0: left promiscuous mode [ 360.854206][T13793] veth1_virt_wifi: left promiscuous mode [ 360.854487][T13793] veth0_virt_wifi: left promiscuous mode [ 360.854794][T13793] virt_wifi0: left promiscuous mode [ 360.856039][T13793] vlan0: left promiscuous mode [ 360.856478][T13793] vlan1: left promiscuous mode [ 360.856922][T13793] macvlan0: left promiscuous mode [ 360.857454][T13793] macvlan1: left promiscuous mode [ 360.924389][T13793] ipvlan0: left promiscuous mode [ 360.924977][T13793] ipvlan1: left promiscuous mode [ 360.961495][T13793] macvtap0: left promiscuous mode [ 360.961985][T13793] macsec0: left promiscuous mode [ 360.962294][T13793] geneve0: left promiscuous mode [ 360.962537][T13793] geneve1: left promiscuous mode [ 360.962871][T13793] netdevsim netdevsim6 netdevsim0: left promiscuous mode [ 360.963240][T13793] netdevsim netdevsim6 netdevsim1: left promiscuous mode [ 360.963566][T13793] netdevsim netdevsim6 netdevsim2: left promiscuous mode [ 360.963998][T13793] netdevsim netdevsim6 netdevsim3: left promiscuous mode [ 360.964425][T13793] mac80211_hwsim hwsim18 wlan0: left promiscuous mode [ 360.965082][T13793] geneve2: left promiscuous mode [ 360.965995][T13793] erspan1: left promiscuous mode [ 362.274615][ T5736] Bluetooth: hci3: command 0x0c1a tx timeout [ 362.276127][T13823] pimreg: entered allmulticast mode [ 362.337378][T13823] dvmrp6: entered allmulticast mode [ 362.350717][T13822] pimreg: left allmulticast mode [ 362.520404][T13824] FAULT_INJECTION: forcing a failure. [ 362.520404][T13824] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 362.520440][T13824] CPU: 3 UID: 0 PID: 13824 Comm: syz.7.2531 Tainted: G L syzkaller #0 PREEMPT(full) [ 362.520466][T13824] Tainted: [L]=SOFTLOCKUP [ 362.520473][T13824] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 362.520485][T13824] Call Trace: [ 362.520492][T13824] [ 362.520500][T13824] dump_stack_lvl+0x100/0x190 [ 362.520532][T13824] should_fail_ex.cold+0x5/0xa [ 362.520555][T13824] ? prepare_alloc_pages+0x16d/0x5b0 [ 362.520581][T13824] should_fail_alloc_page+0xeb/0x140 [ 362.520608][T13824] prepare_alloc_pages+0x1f0/0x5b0 [ 362.520637][T13824] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 362.520670][T13824] ? folio_remove_rmap_ptes+0x7e0/0xdd0 [ 362.520702][T13824] ? try_to_migrate_one+0x14a6/0x30d0 [ 362.520732][T13824] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 362.520757][T13824] ? __pfx_try_to_migrate_one+0x10/0x10 [ 362.520786][T13824] ? lock_acquire+0x1d1/0x380 [ 362.520807][T13824] ? folio_lock_anon_vma_read+0x348/0xe30 [ 362.520840][T13824] ? folio_lock_anon_vma_read+0x348/0xe30 [ 362.520872][T13824] ? rcu_is_watching+0x13/0xc0 [ 362.520897][T13824] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 362.520921][T13824] ? policy_nodemask+0xed/0x4f0 [ 362.520949][T13824] alloc_pages_mpol+0x201/0x550 [ 362.520975][T13824] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 362.521007][T13824] folio_alloc_mpol_noprof+0x36/0x260 [ 362.521036][T13824] alloc_migration_target_by_mpol+0x2c1/0x650 [ 362.521068][T13824] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 362.521098][T13824] ? __pfx___might_resched+0x10/0x10 [ 362.521118][T13824] ? folio_get_anon_vma+0x16b/0x980 [ 362.521147][T13824] migrate_pages_batch+0x5c4/0x4680 [ 362.521176][T13824] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 362.521215][T13824] ? __pfx_migrate_pages_batch+0x10/0x10 [ 362.521251][T13824] ? __pfx_remove_migration_pte+0x10/0x10 [ 362.521285][T13824] migrate_pages_sync+0x12c/0x880 [ 362.521314][T13824] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 362.521345][T13824] ? vma_migratable+0x380/0x450 [ 362.521373][T13824] ? __pfx_migrate_pages_sync+0x10/0x10 [ 362.521398][T13824] ? __pfx_queue_pages_test_walk+0x10/0x10 [ 362.521430][T13824] ? walk_page_range_mm_unsafe+0x32c/0xa10 [ 362.521456][T13824] migrate_pages+0x1a83/0x2850 [ 362.521486][T13824] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 362.521522][T13824] ? __pfx_migrate_pages+0x10/0x10 [ 362.521555][T13824] ? do_mbind+0x555/0xfd0 [ 362.521592][T13824] do_mbind+0x5a4/0xfd0 [ 362.521627][T13824] ? __pfx_do_mbind+0x10/0x10 [ 362.521662][T13824] ? find_held_lock+0x2b/0x80 [ 362.521688][T13824] ? ksys_write+0x190/0x250 [ 362.521718][T13824] ? __pfx_get_nodes+0x10/0x10 [ 362.521741][T13824] ? __fget_files+0x21f/0x3d0 [ 362.521770][T13824] kernel_mbind+0x1b7/0x200 [ 362.521789][T13824] ? __pfx_kernel_mbind+0x10/0x10 [ 362.521825][T13824] do_syscall_64+0x123/0x790 [ 362.521855][T13824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.521875][T13824] RIP: 0033:0x7f771759e159 [ 362.521892][T13824] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 362.521909][T13824] RSP: 002b:00007f77183d7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 362.521928][T13824] RAX: ffffffffffffffda RBX: 00007f7717825fa0 RCX: 00007f771759e159 [ 362.521941][T13824] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 0000200000000000 [ 362.521954][T13824] RBP: 00007f77183d7090 R08: 0000000000000000 R09: 0000000000000002 [ 362.521967][T13824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 362.521979][T13824] R13: 00007f7717826038 R14: 00007f7717825fa0 R15: 00007ffdee532ef8 [ 362.522005][T13824] [ 362.563407][ T5736] Bluetooth: hci2: command 0x0c1a tx timeout [ 363.061899][T13845] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2535'. [ 363.635934][T13864] ip_tables: iptables: counters copy to user failed while replacing table [ 363.640206][T13864] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2545'. [ 364.046269][ T5736] Bluetooth: hci3: unexpected event for opcode 0x1408 [ 364.322528][T13898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2556'. [ 364.589393][T13905] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2558'. [ 364.619996][T13906] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2558'. [ 365.335932][ T44] kauditd_printk_skb: 3 callbacks suppressed [ 365.335949][ T44] audit: type=1807 audit(1790027058.107:1128): action=measure func=FÉLE_CHECK res=0 [ 365.336225][ T44] audit: type=1802 audit(1790027058.107:1129): pid=13931 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=update_policy cause=invalid-policy comm="syz.7.2567" res=0 errno=0 [ 365.477708][T13929] syzkaller0: entered promiscuous mode [ 365.477733][T13929] syzkaller0: entered allmulticast mode [ 366.018424][T13925] ima: policy update failed [ 366.018580][ T44] audit: type=1802 audit(1790027058.797:1130): pid=13925 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.7.2567" res=0 errno=0 [ 366.232648][T13938] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2568'. [ 366.335913][ T5088] Bluetooth: hci4: unexpected event for opcode 0x1408 [ 367.357296][T13952] FAULT_INJECTION: forcing a failure. [ 367.357296][T13952] name failslab, interval 1, probability 0, space 0, times 0 [ 367.357325][T13952] CPU: 2 UID: 0 PID: 13952 Comm: syz.8.2572 Tainted: G L syzkaller #0 PREEMPT(full) [ 367.357348][T13952] Tainted: [L]=SOFTLOCKUP [ 367.357363][T13952] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 367.357373][T13952] Call Trace: [ 367.357380][T13952] [ 367.357387][T13952] dump_stack_lvl+0x100/0x190 [ 367.357416][T13952] should_fail_ex.cold+0x5/0xa [ 367.357442][T13952] should_failslab+0xc2/0x120 [ 367.357464][T13952] __kmalloc_cache_node_noprof+0x94/0x720 [ 367.357484][T13952] ? lockdep_init_map_type+0x5c/0x250 [ 367.357504][T13952] ? __alloc_workqueue+0x1211/0x1950 [ 367.357529][T13952] __alloc_workqueue+0x1211/0x1950 [ 367.357556][T13952] alloc_workqueue_noprof+0xc7/0x130 [ 367.357578][T13952] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 367.357603][T13952] ? lockdep_init_map_type+0x5c/0x250 [ 367.357622][T13952] ? lockdep_init_map_type+0x5c/0x250 [ 367.357646][T13952] __rds_conn_create+0x1234/0x25a0 [ 367.357682][T13952] ? __pfx___rds_conn_create+0x10/0x10 [ 367.357707][T13952] ? trace_kmalloc+0xeb/0x110 [ 367.357729][T13952] ? __kasan_kmalloc+0xaa/0xb0 [ 367.357748][T13952] ? lockdep_init_map_type+0x5c/0x250 [ 367.357770][T13952] rds_conn_create_outgoing+0x44/0x60 [ 367.357799][T13952] rds_sendmsg+0x10da/0x34d0 [ 367.357819][T13952] ? trace_sched_exit_tp+0x120/0x160 [ 367.357850][T13952] ? __pfx_rds_sendmsg+0x10/0x10 [ 367.357880][T13952] ? selinux_socket_sendmsg+0x198/0x2f0 [ 367.357902][T13952] ? ____sys_sendmsg+0xa4d/0xbe0 [ 367.357952][T13952] ____sys_sendmsg+0xa4d/0xbe0 [ 367.357978][T13952] ? __pfx_rds_sendmsg+0x10/0x10 [ 367.358001][T13952] ? __pfx_____sys_sendmsg+0x10/0x10 [ 367.358037][T13952] ___sys_sendmsg+0x190/0x1e0 [ 367.358057][T13952] ? __pfx____sys_sendmsg+0x10/0x10 [ 367.358076][T13952] ? futex_wait+0x11e/0x370 [ 367.358101][T13952] ? find_held_lock+0x2b/0x80 [ 367.358138][T13952] __sys_sendmsg+0x160/0x210 [ 367.358160][T13952] ? __pfx___sys_sendmsg+0x10/0x10 [ 367.358193][T13952] do_syscall_64+0x123/0x790 [ 367.358220][T13952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.358238][T13952] RIP: 0033:0x7f42c1b9e159 [ 367.358253][T13952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 367.358270][T13952] RSP: 002b:00007f42c2b0f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 367.358291][T13952] RAX: ffffffffffffffda RBX: 00007f42c1e25fa0 RCX: 00007f42c1b9e159 [ 367.358302][T13952] RDX: 0000000000000040 RSI: 00002000000002c0 RDI: 0000000000000003 [ 367.358313][T13952] RBP: 00007f42c1c3506b R08: 0000000000000000 R09: 0000000000000000 [ 367.358324][T13952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 367.358333][T13952] R13: 00007f42c1e26038 R14: 00007f42c1e25fa0 R15: 00007ffc111032e8 [ 367.358363][T13952] [ 367.358925][T13948] netlink: 'syz.7.2574': attribute type 1 has an invalid length. [ 367.397432][T13952] FAULT_INJECTION: forcing a failure. [ 367.397432][T13952] name failslab, interval 1, probability 0, space 0, times 0 [ 367.397468][T13952] CPU: 2 UID: 0 PID: 13952 Comm: syz.8.2572 Tainted: G L syzkaller #0 PREEMPT(full) [ 367.397498][T13952] Tainted: [L]=SOFTLOCKUP [ 367.397506][T13952] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 367.397520][T13952] Call Trace: [ 367.397528][T13952] [ 367.397536][T13952] dump_stack_lvl+0x100/0x190 [ 367.397572][T13952] should_fail_ex.cold+0x5/0xa [ 367.397600][T13952] should_failslab+0xc2/0x120 [ 367.397628][T13952] kmem_cache_alloc_noprof+0x92/0x6a0 [ 367.397651][T13952] ? __asan_memcpy+0x3c/0x60 [ 367.397668][T13952] ? __kernfs_new_node+0xd2/0xa10 [ 367.397702][T13952] __kernfs_new_node+0xd2/0xa10 [ 367.397735][T13952] ? __pfx___kernfs_new_node+0x10/0x10 [ 367.397769][T13952] ? lock_acquire+0x1d1/0x380 [ 367.397790][T13952] ? kernfs_root+0x23/0x2a0 [ 367.397817][T13952] ? find_held_lock+0x2b/0x80 [ 367.397844][T13952] ? kernfs_root+0xee/0x2a0 [ 367.397871][T13952] ? kernfs_root+0xee/0x2a0 [ 367.397904][T13952] kernfs_new_node+0x117/0x150 [ 367.397955][T13952] kernfs_create_link+0xcc/0x240 [ 367.397982][T13952] sysfs_do_create_link_sd+0x90/0x140 [ 367.398009][T13952] sysfs_create_link+0x61/0xc0 [ 367.398035][T13952] driver_sysfs_add+0x91/0x2d0 [ 367.398060][T13952] really_probe+0x146/0xa60 [ 367.398087][T13952] __driver_probe_device+0x210/0x460 [ 367.398109][T13952] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 367.398139][T13952] driver_probe_device+0x4a/0x140 [ 367.398162][T13952] __driver_attach+0x21f/0x5b0 [ 367.398187][T13952] ? __pfx___driver_attach+0x10/0x10 [ 367.398216][T13952] bus_for_each_dev+0x13e/0x1d0 [ 367.398236][T13952] ? __pfx_bus_for_each_dev+0x10/0x10 [ 367.398255][T13952] ? bus_add_driver+0x2b5/0x5b0 [ 367.398283][T13952] bus_add_driver+0x305/0x5b0 [ 367.398306][T13952] driver_register+0x1e2/0x360 [ 367.398330][T13952] ? rcu_is_watching+0x13/0xc0 [ 367.398360][T13952] usb_gadget_register_driver_owner+0x132/0x210 [ 367.398386][T13952] raw_ioctl+0x1a85/0x2b80 [ 367.398413][T13952] ? __pfx_raw_ioctl+0x10/0x10 [ 367.398431][T13952] ? selinux_file_ioctl+0x13b/0x290 [ 367.398453][T13952] ? selinux_file_ioctl+0xb6/0x290 [ 367.398476][T13952] ? __pfx_raw_ioctl+0x10/0x10 [ 367.398496][T13952] __x64_sys_ioctl+0x18e/0x210 [ 367.398518][T13952] do_syscall_64+0x123/0x790 [ 367.398546][T13952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.398566][T13952] RIP: 0033:0x7f42c1b9ddeb [ 367.398582][T13952] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 367.398601][T13952] RSP: 002b:00007f42c2b0cf00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 367.398620][T13952] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00007f42c1b9ddeb [ 367.398632][T13952] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000009 [ 367.398643][T13952] RBP: 00007f42c2b0dfd0 R08: 0000000000000001 R09: 00000000ffffffff [ 367.398654][T13952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 367.398666][T13952] R13: 0000200000000180 R14: 0000000000000005 R15: 0000000000000000 [ 367.398692][T13952] [ 367.398816][T13952] raw-gadget.0 gadget.8: really_probe: driver_sysfs_add failed [ 367.401546][T13952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.403302][T13952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.494480][T13956] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2574'. [ 368.287699][T13962] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2577'. [ 368.698980][ T30] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 368.931344][ T30] usb 13-1: Using ep0 maxpacket: 8 [ 368.933354][ T30] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 368.933890][ T30] usb 13-1: config 0 has no interfaces? [ 368.933917][ T30] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.984702][ T30] usb 13-1: config 0 descriptor?? [ 369.230065][T13446] usb 13-1: USB disconnect, device number 2 [ 370.084246][ T5088] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 370.933443][T13984] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2586'. [ 375.491823][T13948] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 376.253459][T14000] netlink: 'syz.7.2592': attribute type 29 has an invalid length. [ 376.254960][T14000] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2592'. [ 376.317779][T13993] FAULT_INJECTION: forcing a failure. [ 376.317779][T13993] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 376.317816][T13993] CPU: 0 UID: 0 PID: 13993 Comm: syz.8.2591 Tainted: G L syzkaller #0 PREEMPT(full) [ 376.317843][T13993] Tainted: [L]=SOFTLOCKUP [ 376.317851][T13993] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 376.317861][T13993] Call Trace: [ 376.317867][T13993] [ 376.317873][T13993] dump_stack_lvl+0x100/0x190 [ 376.317904][T13993] should_fail_ex.cold+0x5/0xa [ 376.318238][T13993] ? prepare_alloc_pages+0x16d/0x5b0 [ 376.318281][T13993] should_fail_alloc_page+0xeb/0x140 [ 376.318308][T13993] prepare_alloc_pages+0x1f0/0x5b0 [ 376.318335][T13993] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 376.318355][T13993] ? folio_remove_rmap_ptes+0x7e0/0xdd0 [ 376.318386][T13993] ? try_to_migrate_one+0x14a6/0x30d0 [ 376.318415][T13993] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 376.318439][T13993] ? __pfx_try_to_migrate_one+0x10/0x10 [ 376.318466][T13993] ? lock_acquire+0x1d1/0x380 [ 376.318485][T13993] ? folio_lock_anon_vma_read+0x348/0xe30 [ 376.318517][T13993] ? folio_lock_anon_vma_read+0x348/0xe30 [ 376.318548][T13993] ? rcu_is_watching+0x13/0xc0 [ 376.318572][T13993] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 376.318595][T13993] ? policy_nodemask+0xed/0x4f0 [ 376.318620][T13993] alloc_pages_mpol+0x201/0x550 [ 376.318641][T13993] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 376.318669][T13993] folio_alloc_mpol_noprof+0x36/0x260 [ 376.318694][T13993] alloc_migration_target_by_mpol+0x2c1/0x650 [ 376.318729][T13993] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 376.318757][T13993] ? __pfx___might_resched+0x10/0x10 [ 376.318778][T13993] ? folio_get_anon_vma+0x16b/0x980 [ 376.318806][T13993] migrate_pages_batch+0x5c4/0x4680 [ 376.318835][T13993] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 376.318871][T13993] ? __pfx_migrate_pages_batch+0x10/0x10 [ 376.318905][T13993] ? __pfx_remove_migration_pte+0x10/0x10 [ 376.318938][T13993] migrate_pages_sync+0x12c/0x880 [ 376.318961][T13993] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 376.318988][T13993] ? vma_migratable+0x380/0x450 [ 376.319005][T13993] ? __pfx_migrate_pages_sync+0x10/0x10 [ 376.319020][T13993] ? __pfx_queue_pages_test_walk+0x10/0x10 [ 376.319065][T13993] ? walk_page_range_mm_unsafe+0x32c/0xa10 [ 376.319089][T13993] migrate_pages+0x1a83/0x2850 [ 376.319109][T13993] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 376.319137][T13993] ? __pfx_migrate_pages+0x10/0x10 [ 376.319163][T13993] ? do_mbind+0x555/0xfd0 [ 376.319196][T13993] do_mbind+0x5a4/0xfd0 [ 376.319224][T13993] ? __pfx_do_mbind+0x10/0x10 [ 376.319244][T13993] ? find_held_lock+0x2b/0x80 [ 376.319262][T13993] ? ksys_write+0x190/0x250 [ 376.319282][T13993] ? __pfx_get_nodes+0x10/0x10 [ 376.319298][T13993] ? __fget_files+0x21f/0x3d0 [ 376.319317][T13993] kernel_mbind+0x1b7/0x200 [ 376.319330][T13993] ? __pfx_kernel_mbind+0x10/0x10 [ 376.319355][T13993] do_syscall_64+0x123/0x790 [ 376.319377][T13993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.319391][T13993] RIP: 0033:0x7f42c1b9e159 [ 376.319405][T13993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 376.319418][T13993] RSP: 002b:00007f42c2b0f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 376.319431][T13993] RAX: ffffffffffffffda RBX: 00007f42c1e25fa0 RCX: 00007f42c1b9e159 [ 376.319440][T13993] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 0000200000000000 [ 376.319448][T13993] RBP: 00007f42c2b0f090 R08: 0000000000000000 R09: 0000000000000002 [ 376.319456][T13993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 376.319463][T13993] R13: 00007f42c1e26038 R14: 00007f42c1e25fa0 R15: 00007ffc111032e8 [ 376.319480][T13993] [ 376.518671][T14004] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 376.596576][T14006] kvm: MONITOR instruction emulated as NOP! [ 377.211078][ T5088] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 377.510564][T14029] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 377.748495][ T44] audit: type=1400 audit(1790027070.497:1131): avc: denied { setopt } for pid=14037 comm="syz.7.2602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 377.951998][T14041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2603'. [ 378.051636][T14045] binder: 14035:14045 ioctl c0306201 0 returned -14 [ 378.238494][ T44] audit: type=1400 audit(1790027071.017:1132): avc: denied { create } for pid=14056 comm="syz.8.2608" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 378.239607][ T44] audit: type=1400 audit(1790027071.017:1133): avc: denied { read write } for pid=14056 comm="syz.8.2608" name="file0" dev="tmpfs" ino=218 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 378.240088][ T44] audit: type=1400 audit(1790027071.017:1134): avc: denied { open } for pid=14056 comm="syz.8.2608" path="/37/file0" dev="tmpfs" ino=218 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 378.240959][ T44] audit: type=1400 audit(1790027071.017:1135): avc: denied { ioctl } for pid=14056 comm="syz.8.2608" path="/37/file0" dev="tmpfs" ino=218 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 378.352104][T14054] FAULT_INJECTION: forcing a failure. [ 378.352104][T14054] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 378.352148][T14054] CPU: 0 UID: 0 PID: 14054 Comm: syz.0.2607 Tainted: G L syzkaller #0 PREEMPT(full) [ 378.352180][T14054] Tainted: [L]=SOFTLOCKUP [ 378.352190][T14054] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 378.352205][T14054] Call Trace: [ 378.352215][T14054] [ 378.352224][T14054] dump_stack_lvl+0x100/0x190 [ 378.352284][T14054] should_fail_ex.cold+0x5/0xa [ 378.352321][T14054] ? prepare_alloc_pages+0x16d/0x5b0 [ 378.352361][T14054] should_fail_alloc_page+0xeb/0x140 [ 378.352396][T14054] prepare_alloc_pages+0x1f0/0x5b0 [ 378.352432][T14054] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 378.352460][T14054] ? folio_remove_rmap_ptes+0x7e0/0xdd0 [ 378.352500][T14054] ? try_to_migrate_one+0x14a6/0x30d0 [ 378.352537][T14054] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 378.352569][T14054] ? __pfx_try_to_migrate_one+0x10/0x10 [ 378.352607][T14054] ? lock_acquire+0x1d1/0x380 [ 378.352632][T14054] ? folio_lock_anon_vma_read+0x348/0xe30 [ 378.352673][T14054] ? folio_lock_anon_vma_read+0x348/0xe30 [ 378.352713][T14054] ? rcu_is_watching+0x13/0xc0 [ 378.352745][T14054] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 378.352777][T14054] ? policy_nodemask+0xed/0x4f0 [ 378.352810][T14054] alloc_pages_mpol+0x201/0x550 [ 378.352843][T14054] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 378.352884][T14054] folio_alloc_mpol_noprof+0x36/0x260 [ 378.352948][T14054] alloc_migration_target_by_mpol+0x2c1/0x650 [ 378.352989][T14054] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 378.353027][T14054] ? __pfx___might_resched+0x10/0x10 [ 378.353054][T14054] ? folio_get_anon_vma+0x16b/0x980 [ 378.353092][T14054] migrate_pages_batch+0x5c4/0x4680 [ 378.353130][T14054] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 378.353179][T14054] ? __pfx_migrate_pages_batch+0x10/0x10 [ 378.353223][T14054] ? __pfx_remove_migration_pte+0x10/0x10 [ 378.353256][T14054] ? pick_eevdf+0x4f9/0x880 [ 378.353291][T14054] ? kvm_sched_clock_read+0x11/0x20 [ 378.353335][T14054] ? sched_clock+0x3a/0x60 [ 378.353363][T14054] migrate_pages_sync+0x12c/0x880 [ 378.353400][T14054] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 378.353436][T14054] ? try_to_wake_up+0xf20/0x1c90 [ 378.353462][T14054] ? rcu_is_watching+0x13/0xc0 [ 378.353494][T14054] ? __pfx_migrate_pages_sync+0x10/0x10 [ 378.353526][T14054] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 378.353561][T14054] ? __pfx_try_to_wake_up+0x10/0x10 [ 378.353593][T14054] migrate_pages+0x1a83/0x2850 [ 378.353628][T14054] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 378.353672][T14054] ? __pfx_migrate_pages+0x10/0x10 [ 378.353706][T14054] ? __pfx_rwsem_wake.isra.0+0x10/0x10 [ 378.353750][T14054] do_mbind+0x5a4/0xfd0 [ 378.353794][T14054] ? __pfx_do_mbind+0x10/0x10 [ 378.353828][T14054] ? find_held_lock+0x2b/0x80 [ 378.353860][T14054] ? ksys_write+0x190/0x250 [ 378.353898][T14054] ? __pfx_get_nodes+0x10/0x10 [ 378.353926][T14054] ? __fget_files+0x21f/0x3d0 [ 378.353959][T14054] kernel_mbind+0x1b7/0x200 [ 378.353983][T14054] ? __pfx_kernel_mbind+0x10/0x10 [ 378.354023][T14054] do_syscall_64+0x123/0x790 [ 378.354059][T14054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.354082][T14054] RIP: 0033:0x7fe99e79e159 [ 378.354103][T14054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 378.354124][T14054] RSP: 002b:00007fe99f6b1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 378.354146][T14054] RAX: ffffffffffffffda RBX: 00007fe99ea25fa0 RCX: 00007fe99e79e159 [ 378.354162][T14054] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 0000200000000000 [ 378.354176][T14054] RBP: 00007fe99f6b1090 R08: 0000000000000000 R09: 0000000000000002 [ 378.354191][T14054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 378.354205][T14054] R13: 00007fe99ea26038 R14: 00007fe99ea25fa0 R15: 00007ffc349b2ae8 [ 378.354237][T14054] [ 378.362428][T14036] syz.6.2601 (14036): drop_caches: 2 [ 378.412289][T14061] syzkaller0: entered promiscuous mode [ 378.412312][T14061] syzkaller0: entered allmulticast mode [ 378.415481][T14061] tipc: Started in network mode [ 378.415510][T14061] tipc: Node identity 86de8e0a657e, cluster identity 4711 [ 378.422169][T14061] tipc: Enabled bearer , priority 0 [ 378.447013][T14060] tipc: Resetting bearer [ 378.557494][T14064] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2610'. [ 378.592943][T14060] tipc: Disabling bearer [ 378.657522][ T1443] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.662604][ T1443] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.757527][T14066] FAULT_INJECTION: forcing a failure. [ 378.757527][T14066] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 378.757559][T14066] CPU: 1 UID: 0 PID: 14066 Comm: syz.0.2612 Tainted: G L syzkaller #0 PREEMPT(full) [ 378.757584][T14066] Tainted: [L]=SOFTLOCKUP [ 378.757590][T14066] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 378.757601][T14066] Call Trace: [ 378.757607][T14066] [ 378.757616][T14066] dump_stack_lvl+0x100/0x190 [ 378.757647][T14066] should_fail_ex.cold+0x5/0xa [ 378.757674][T14066] _copy_from_user+0x2e/0xd0 [ 378.757695][T14066] video_usercopy+0xe71/0x1730 [ 378.757739][T14066] ? __pfx___video_do_ioctl+0x10/0x10 [ 378.757768][T14066] ? __pfx_video_usercopy+0x10/0x10 [ 378.757809][T14066] v4l2_ioctl+0x1bd/0x250 [ 378.757836][T14066] ? __pfx_v4l2_ioctl+0x10/0x10 [ 378.757865][T14066] __x64_sys_ioctl+0x18e/0x210 [ 378.757886][T14066] do_syscall_64+0x123/0x790 [ 378.757942][T14066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.757963][T14066] RIP: 0033:0x7fe99e79e159 [ 378.757979][T14066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 378.757997][T14066] RSP: 002b:00007fe99f6b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 378.758015][T14066] RAX: ffffffffffffffda RBX: 00007fe99ea25fa0 RCX: 00007fe99e79e159 [ 378.758028][T14066] RDX: 00002000000008c0 RSI: 00000000c0585609 RDI: 0000000000000003 [ 378.758039][T14066] RBP: 00007fe99f6b1090 R08: 0000000000000000 R09: 0000000000000000 [ 378.758052][T14066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 378.758064][T14066] R13: 00007fe99ea26038 R14: 00007fe99ea25fa0 R15: 00007ffc349b2ae8 [ 378.758091][T14066] [ 378.950436][T14068] FAULT_INJECTION: forcing a failure. [ 378.950436][T14068] name failslab, interval 1, probability 0, space 0, times 0 [ 378.950467][T14068] CPU: 0 UID: 0 PID: 14068 Comm: syz.6.2611 Tainted: G L syzkaller #0 PREEMPT(full) [ 378.950492][T14068] Tainted: [L]=SOFTLOCKUP [ 378.950499][T14068] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 378.950511][T14068] Call Trace: [ 378.950519][T14068] [ 378.950527][T14068] dump_stack_lvl+0x100/0x190 [ 378.950559][T14068] should_fail_ex.cold+0x5/0xa [ 378.950586][T14068] should_failslab+0xc2/0x120 [ 378.950615][T14068] __kmalloc_noprof+0xfc/0x840 [ 378.950635][T14068] ? rcu_is_watching+0x13/0xc0 [ 378.950661][T14068] ? tomoyo_realpath_from_path+0xb6/0x690 [ 378.950690][T14068] tomoyo_realpath_from_path+0xb6/0x690 [ 378.950721][T14068] tomoyo_path_number_perm+0x23c/0x580 [ 378.950739][T14068] ? tomoyo_path_number_perm+0x22e/0x580 [ 378.950761][T14068] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 378.950789][T14068] ? __lock_acquire+0x5c0/0x1f40 [ 378.950820][T14068] ? __fget_files+0x34/0x3d0 [ 378.950844][T14068] ? find_held_lock+0x2b/0x80 [ 378.950869][T14068] ? hook_file_ioctl_common+0x140/0x440 [ 378.950899][T14068] ? __fget_files+0x21f/0x3d0 [ 378.950926][T14068] security_file_ioctl+0xd3/0x230 [ 378.950950][T14068] __x64_sys_ioctl+0xb7/0x210 [ 378.950971][T14068] do_syscall_64+0x123/0x790 [ 378.951003][T14068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.951047][T14068] RIP: 0033:0x7f225519e159 [ 378.951064][T14068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 378.951082][T14068] RSP: 002b:00007f225601b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 378.951101][T14068] RAX: ffffffffffffffda RBX: 00007f2255425fa0 RCX: 00007f225519e159 [ 378.951113][T14068] RDX: 0000200000000180 RSI: 0000000080084504 RDI: 0000000000000003 [ 378.951126][T14068] RBP: 00007f225601b090 R08: 0000000000000000 R09: 0000000000000000 [ 378.951138][T14068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 378.951148][T14068] R13: 00007f2255426038 R14: 00007f2255425fa0 R15: 00007fff58f8e428 [ 378.951175][T14068] [ 378.951184][T14068] ERROR: Out of memory at tomoyo_realpath_from_path. [ 379.075939][ T5088] Bluetooth: hci1: unexpected event for opcode 0x1408 [ 379.110912][T14076] loop6: detected capacity change from 0 to 2640 [ 379.111514][T14076] Buffer I/O error on dev loop6, logical block 0, async page read [ 379.111549][T14076] Buffer I/O error on dev loop6, logical block 0, async page read [ 379.111572][T14076] Buffer I/O error on dev loop6, logical block 0, async page read [ 379.111593][T14076] Buffer I/O error on dev loop6, logical block 0, async page read [ 379.111615][T14076] Buffer I/O error on dev loop6, logical block 0, async page read [ 379.111655][T14076] Buffer I/O error on dev loop6, logical block 0, async page read [ 379.111689][T14076] Buffer I/O error on dev loop6, logical block 0, async page read [ 379.111711][T14076] Buffer I/O error on dev loop6, logical block 0, async page read [ 379.111723][T14076] ldm_validate_partition_table(): Disk read failed. [ 379.111744][T14076] Buffer I/O error on dev loop6, logical block 0, async page read [ 379.111765][T14076] Buffer I/O error on dev loop6, logical block 0, async page read [ 379.111799][T14076] Dev loop6: unable to read RDB block 0 [ 379.112895][T14076] loop6: unable to read partition table [ 379.113043][T14076] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 379.378191][ T62] usb 11-1: new high-speed USB device number 22 using dummy_hcd [ 379.406332][T14082] netlink: 'syz.8.2617': attribute type 63 has an invalid length. [ 379.406358][T14082] netlink: 5 bytes leftover after parsing attributes in process `syz.8.2617'. [ 379.439662][T14082] eql: entered allmulticast mode [ 379.439996][T14082] A link change request failed with some changes committed already. Interface eql may have been left with an inconsistent configuration, please check. [ 379.455385][ T5088] Bluetooth: hci2: unexpected event for opcode 0x203c [ 379.531334][ T62] usb 11-1: Using ep0 maxpacket: 8 [ 379.533058][ T62] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 379.533764][ T62] usb 11-1: config 0 has no interfaces? [ 379.533789][ T62] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.536407][ T62] usb 11-1: config 0 descriptor?? [ 379.780696][ T62] usb 11-1: USB disconnect, device number 22 [ 380.243731][T14108] FAULT_INJECTION: forcing a failure. [ 380.243731][T14108] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 380.243764][T14108] CPU: 3 UID: 0 PID: 14108 Comm: syz.0.2624 Tainted: G L syzkaller #0 PREEMPT(full) [ 380.243785][T14108] Tainted: [L]=SOFTLOCKUP [ 380.243791][T14108] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 380.243800][T14108] Call Trace: [ 380.243806][T14108] [ 380.243812][T14108] dump_stack_lvl+0x100/0x190 [ 380.243840][T14108] should_fail_ex.cold+0x5/0xa [ 380.243858][T14108] ? prepare_alloc_pages+0x16d/0x5b0 [ 380.243879][T14108] should_fail_alloc_page+0xeb/0x140 [ 380.243900][T14108] prepare_alloc_pages+0x1f0/0x5b0 [ 380.243921][T14108] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 380.243938][T14108] ? mlock_drain_local+0x254/0x4e0 [ 380.243958][T14108] ? try_to_migrate_one+0x14a6/0x30d0 [ 380.243982][T14108] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 380.244001][T14108] ? __pfx_try_to_migrate_one+0x10/0x10 [ 380.244024][T14108] ? lock_acquire+0x1d1/0x380 [ 380.244040][T14108] ? folio_lock_anon_vma_read+0x348/0xe30 [ 380.244064][T14108] ? folio_lock_anon_vma_read+0x348/0xe30 [ 380.244089][T14108] ? rcu_is_watching+0x13/0xc0 [ 380.244109][T14108] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 380.244128][T14108] ? policy_nodemask+0xed/0x4f0 [ 380.244149][T14108] alloc_pages_mpol+0x201/0x550 [ 380.244169][T14108] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 380.244200][T14108] folio_alloc_mpol_noprof+0x36/0x260 [ 380.244226][T14108] alloc_migration_target_by_mpol+0x2c1/0x650 [ 380.244252][T14108] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 380.244279][T14108] ? __pfx___might_resched+0x10/0x10 [ 380.244294][T14108] ? folio_get_anon_vma+0x16b/0x980 [ 380.244318][T14108] migrate_pages_batch+0x5c4/0x4680 [ 380.244341][T14108] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 380.244370][T14108] ? __pfx_migrate_pages_batch+0x10/0x10 [ 380.244396][T14108] ? __pfx_remove_migration_pte+0x10/0x10 [ 380.244423][T14108] migrate_pages_sync+0x12c/0x880 [ 380.244444][T14108] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 380.244469][T14108] ? vma_migratable+0x380/0x450 [ 380.244489][T14108] ? __pfx_migrate_pages_sync+0x10/0x10 [ 380.244508][T14108] ? __pfx_queue_pages_test_walk+0x10/0x10 [ 380.244533][T14108] ? walk_page_range_mm_unsafe+0x32c/0xa10 [ 380.244552][T14108] migrate_pages+0x1a83/0x2850 [ 380.244575][T14108] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 380.244602][T14108] ? __pfx_migrate_pages+0x10/0x10 [ 380.244626][T14108] ? do_mbind+0x555/0xfd0 [ 380.244654][T14108] do_mbind+0x5a4/0xfd0 [ 380.244682][T14108] ? __pfx_do_mbind+0x10/0x10 [ 380.244703][T14108] ? find_held_lock+0x2b/0x80 [ 380.244725][T14108] ? ksys_write+0x190/0x250 [ 380.244747][T14108] ? __pfx_get_nodes+0x10/0x10 [ 380.244765][T14108] ? __fget_files+0x21f/0x3d0 [ 380.244787][T14108] kernel_mbind+0x1b7/0x200 [ 380.244801][T14108] ? __pfx_kernel_mbind+0x10/0x10 [ 380.244829][T14108] do_syscall_64+0x123/0x790 [ 380.244853][T14108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.244868][T14108] RIP: 0033:0x7fe99e79e159 [ 380.244882][T14108] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 380.244896][T14108] RSP: 002b:00007fe99f6b1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 380.244911][T14108] RAX: ffffffffffffffda RBX: 00007fe99ea25fa0 RCX: 00007fe99e79e159 [ 380.244921][T14108] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 0000200000000000 [ 380.244931][T14108] RBP: 00007fe99f6b1090 R08: 0000000000000000 R09: 0000000000000002 [ 380.244940][T14108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 380.244949][T14108] R13: 00007fe99ea26038 R14: 00007fe99ea25fa0 R15: 00007ffc349b2ae8 [ 380.244968][T14108] [ 380.273117][T14115] netlink: 'syz.7.2626': attribute type 1 has an invalid length. [ 380.352437][T14115] 8021q: adding VLAN 0 to HW filter on device bond2 [ 380.356929][T14115] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2626'. [ 380.419783][T14115] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2626'. [ 380.661103][ T5088] Bluetooth: hci1: unexpected event for opcode 0x1408 [ 380.809267][T14129] FAULT_INJECTION: forcing a failure. [ 380.809267][T14129] name failslab, interval 1, probability 0, space 0, times 0 [ 380.809297][T14129] CPU: 0 UID: 0 PID: 14129 Comm: syz.7.2629 Tainted: G L syzkaller #0 PREEMPT(full) [ 380.809318][T14129] Tainted: [L]=SOFTLOCKUP [ 380.809324][T14129] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 380.809332][T14129] Call Trace: [ 380.809338][T14129] [ 380.809344][T14129] dump_stack_lvl+0x100/0x190 [ 380.809371][T14129] should_fail_ex.cold+0x5/0xa [ 380.809392][T14129] should_failslab+0xc2/0x120 [ 380.809413][T14129] __kmalloc_noprof+0xfc/0x840 [ 380.809429][T14129] ? tomoyo_encode2+0xfb/0x3c0 [ 380.809452][T14129] tomoyo_encode2+0xfb/0x3c0 [ 380.809474][T14129] tomoyo_encode+0x29/0x50 [ 380.809491][T14129] tomoyo_realpath_from_path+0x18c/0x690 [ 380.809515][T14129] tomoyo_path_number_perm+0x23c/0x580 [ 380.809529][T14129] ? tomoyo_path_number_perm+0x22e/0x580 [ 380.809547][T14129] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 380.809571][T14129] ? __lock_acquire+0x5c0/0x1f40 [ 380.809597][T14129] ? __fget_files+0x34/0x3d0 [ 380.809616][T14129] ? find_held_lock+0x2b/0x80 [ 380.809636][T14129] ? hook_file_ioctl_common+0x140/0x440 [ 380.809661][T14129] ? __fget_files+0x21f/0x3d0 [ 380.809683][T14129] security_file_ioctl+0xd3/0x230 [ 380.809702][T14129] __x64_sys_ioctl+0xb7/0x210 [ 380.809719][T14129] do_syscall_64+0x123/0x790 [ 380.809767][T14129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.809783][T14129] RIP: 0033:0x7f771759e159 [ 380.809796][T14129] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 380.809810][T14129] RSP: 002b:00007f77183d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 380.809826][T14129] RAX: ffffffffffffffda RBX: 00007f7717825fa0 RCX: 00007f771759e159 [ 380.809836][T14129] RDX: 0000200000000180 RSI: 0000000080084504 RDI: 0000000000000003 [ 380.809846][T14129] RBP: 00007f77183d7090 R08: 0000000000000000 R09: 0000000000000000 [ 380.809855][T14129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 380.809864][T14129] R13: 00007f7717826038 R14: 00007f7717825fa0 R15: 00007ffdee532ef8 [ 380.809884][T14129] [ 380.809927][T14129] ERROR: Out of memory at tomoyo_realpath_from_path. [ 381.134086][T13446] hid-generic 0401:0008:00E1.0006: unknown main item tag 0x0 [ 381.134113][T13446] hid-generic 0401:0008:00E1.0006: unknown main item tag 0x0 [ 381.134128][T13446] hid-generic 0401:0008:00E1.0006: unknown main item tag 0x0 [ 381.134144][T13446] hid-generic 0401:0008:00E1.0006: unknown main item tag 0x0 [ 381.134161][T13446] hid-generic 0401:0008:00E1.0006: unknown main item tag 0x0 [ 381.134176][T13446] hid-generic 0401:0008:00E1.0006: unknown main item tag 0x0 [ 381.134192][T13446] hid-generic 0401:0008:00E1.0006: unknown main item tag 0x0 [ 381.134207][T13446] hid-generic 0401:0008:00E1.0006: unknown main item tag 0x0 [ 381.134223][T13446] hid-generic 0401:0008:00E1.0006: unknown main item tag 0x0 [ 381.134238][T13446] hid-generic 0401:0008:00E1.0006: unknown main item tag 0x0 [ 381.190672][T13446] hid-generic 0401:0008:00E1.0006: hidraw1: HID v0.08 Device [syz1] on syz0 [ 381.260982][T14140] fido_id[14140]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 381.872208][T14161] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2641'. [ 382.054968][T14161] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.055512][T14161] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.259401][ T5101] usb 11-1: new high-speed USB device number 23 using dummy_hcd [ 382.260609][T14166] FAULT_INJECTION: forcing a failure. [ 382.260609][T14166] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 382.260639][T14166] CPU: 3 UID: 0 PID: 14166 Comm: syz.7.2644 Tainted: G L syzkaller #0 PREEMPT(full) [ 382.260660][T14166] Tainted: [L]=SOFTLOCKUP [ 382.260667][T14166] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 382.260675][T14166] Call Trace: [ 382.260680][T14166] [ 382.260686][T14166] dump_stack_lvl+0x100/0x190 [ 382.260713][T14166] should_fail_ex.cold+0x5/0xa [ 382.260731][T14166] ? prepare_alloc_pages+0x16d/0x5b0 [ 382.260752][T14166] should_fail_alloc_page+0xeb/0x140 [ 382.260772][T14166] prepare_alloc_pages+0x1f0/0x5b0 [ 382.260792][T14166] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 382.260808][T14166] ? mlock_drain_local+0x254/0x4e0 [ 382.260827][T14166] ? try_to_migrate_one+0x14a6/0x30d0 [ 382.260849][T14166] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 382.260867][T14166] ? __pfx_try_to_migrate_one+0x10/0x10 [ 382.260888][T14166] ? lock_acquire+0x1d1/0x380 [ 382.260903][T14166] ? folio_lock_anon_vma_read+0x348/0xe30 [ 382.260927][T14166] ? folio_lock_anon_vma_read+0x348/0xe30 [ 382.260950][T14166] ? rcu_is_watching+0x13/0xc0 [ 382.260969][T14166] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 382.260986][T14166] ? policy_nodemask+0xed/0x4f0 [ 382.261006][T14166] alloc_pages_mpol+0x201/0x550 [ 382.261025][T14166] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 382.261049][T14166] folio_alloc_mpol_noprof+0x36/0x260 [ 382.261071][T14166] alloc_migration_target_by_mpol+0x2c1/0x650 [ 382.261093][T14166] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 382.261115][T14166] ? __pfx___might_resched+0x10/0x10 [ 382.261131][T14166] ? folio_get_anon_vma+0x16b/0x980 [ 382.261153][T14166] migrate_pages_batch+0x5c4/0x4680 [ 382.261185][T14166] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 382.261213][T14166] ? __pfx_migrate_pages_batch+0x10/0x10 [ 382.261232][T14166] ? trace_sched_exit_tp+0x120/0x160 [ 382.261256][T14166] ? __pfx_remove_migration_pte+0x10/0x10 [ 382.261282][T14166] migrate_pages_sync+0x12c/0x880 [ 382.261302][T14166] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 382.261325][T14166] ? lockdep_hardirqs_on+0x7d/0x110 [ 382.261346][T14166] ? irqentry_exit+0x24d/0xa10 [ 382.261366][T14166] ? __pfx_migrate_pages_sync+0x10/0x10 [ 382.261394][T14166] migrate_pages+0x1a83/0x2850 [ 382.261416][T14166] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 382.261442][T14166] ? __pfx_migrate_pages+0x10/0x10 [ 382.261465][T14166] ? do_mbind+0x555/0xfd0 [ 382.261492][T14166] do_mbind+0x5a4/0xfd0 [ 382.261517][T14166] ? __pfx_do_mbind+0x10/0x10 [ 382.261538][T14166] ? find_held_lock+0x2b/0x80 [ 382.261558][T14166] ? ksys_write+0x190/0x250 [ 382.261579][T14166] ? __pfx_get_nodes+0x10/0x10 [ 382.261596][T14166] ? __fget_files+0x21f/0x3d0 [ 382.261617][T14166] kernel_mbind+0x1b7/0x200 [ 382.261631][T14166] ? __pfx_kernel_mbind+0x10/0x10 [ 382.261658][T14166] do_syscall_64+0x123/0x790 [ 382.261681][T14166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.261697][T14166] RIP: 0033:0x7f771759e159 [ 382.261711][T14166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 382.261724][T14166] RSP: 002b:00007f77183d7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 382.261740][T14166] RAX: ffffffffffffffda RBX: 00007f7717825fa0 RCX: 00007f771759e159 [ 382.261749][T14166] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 0000200000000000 [ 382.261758][T14166] RBP: 00007f77183d7090 R08: 0000000000000000 R09: 0000000000000002 [ 382.261766][T14166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 382.261775][T14166] R13: 00007f7717826038 R14: 00007f7717825fa0 R15: 00007ffdee532ef8 [ 382.261794][T14166] [ 382.481432][ T5101] usb 11-1: Using ep0 maxpacket: 8 [ 382.496142][ T5101] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 382.527590][ T5101] usb 11-1: config 0 has no interfaces? [ 382.527624][ T5101] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.581535][T14180] Bluetooth: MGMT ver 1.23 [ 382.603455][T14180] Invalid argument reading file caps for ./file0 [ 382.606093][T14181] Invalid argument reading file caps for ./file0 [ 382.625262][ T5101] usb 11-1: config 0 descriptor?? [ 382.711972][T14161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 382.741933][T14161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 382.820993][T14186] ipt_REJECT: TCP_RESET invalid for non-tcp [ 382.837287][ T5678] usb 11-1: USB disconnect, device number 23 [ 384.055836][ T5882] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.055922][ T5882] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.055957][ T5882] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.055991][ T5882] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.624051][ T44] audit: type=1326 audit(1790027077.407:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14213 comm="syz.6.2660" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f225519e159 code=0x7ffc0000 [ 384.626604][ T44] audit: type=1326 audit(1790027077.407:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14213 comm="syz.6.2660" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f225519e159 code=0x7ffc0000 [ 384.690246][ T5088] Bluetooth: hci1: unexpected event for opcode 0x1408 [ 384.709608][ T5088] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 385.565539][T14244] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2671'. [ 385.628085][ T5735] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 385.811283][ T5735] usb 5-1: Using ep0 maxpacket: 8 [ 385.812083][ T5735] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 385.812615][ T5735] usb 5-1: config 0 has no interfaces? [ 385.812643][ T5735] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.815046][ T5735] usb 5-1: config 0 descriptor?? [ 385.897615][T14253] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2673'. [ 386.066088][ T5735] usb 5-1: USB disconnect, device number 24 [ 386.138229][T14244] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 386.277151][T14256] tmpfs: Unknown parameter 'm÷oer' [ 386.465839][ T44] audit: type=1400 audit(1790027079.237:1138): avc: denied { append } for pid=14262 comm="syz.6.2677" name="cpu_dma_latency" dev="devtmpfs" ino=1338 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 386.534792][ T5088] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 387.194244][T14282] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2683'. [ 387.207015][T14282] ip6erspan0: entered promiscuous mode [ 387.528223][T14289] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2686'. [ 387.528252][T14289] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2686'. [ 387.529689][T14289] syzkaller0: entered promiscuous mode [ 387.529708][T14289] syzkaller0: entered allmulticast mode [ 387.547524][ T44] audit: type=1400 audit(1790027080.317:1139): avc: denied { mount } for pid=14287 comm="syz.0.2686" name="/" dev="pstore" ino=5961 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 387.705368][ T44] audit: type=1400 audit(1790027080.477:1140): avc: denied { write } for pid=14298 comm="syz.8.2688" name="nullb" dev="configfs" ino=6316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 387.708139][ T9] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 387.716221][T14299] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2688'. [ 387.717162][ T44] audit: type=1400 audit(1790027080.487:1141): avc: denied { write } for pid=14298 comm="syz.8.2688" name="nullb" dev="configfs" ino=6316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 387.753511][ T44] audit: type=1400 audit(1790027080.527:1142): avc: denied { lock } for pid=14298 comm="syz.8.2688" path=2F35362F6D795F636F6E66696766732F6E756C6C622F6E756C6C62312F706F776572202864656C6574656429 dev="configfs" ino=61444 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 387.807797][T14305] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2691'. [ 387.830361][T14303] netlink: 'syz.6.2690': attribute type 2 has an invalid length. [ 387.843769][ T5088] Bluetooth: hci4: Malformed LE Event: 0x1d [ 387.848231][ T9] usb 5-1: device descriptor read/64, error -71 [ 388.100349][ T9] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 388.138089][ T5735] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 388.238169][ T9] usb 5-1: device descriptor read/64, error -71 [ 388.318109][ T5735] usb 13-1: Using ep0 maxpacket: 8 [ 388.318938][ T5735] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 388.319456][ T5735] usb 13-1: config 0 has no interfaces? [ 388.319481][ T5735] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.321687][ T5735] usb 13-1: config 0 descriptor?? [ 388.339928][ T9] usb usb5-port1: attempt power cycle [ 388.621032][ T5735] usb 13-1: USB disconnect, device number 3 [ 388.708970][ T9] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 388.740774][ T9] usb 5-1: device descriptor read/8, error -71 [ 389.007295][ T9] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 389.030281][ T9] usb 5-1: device descriptor read/8, error -71 [ 389.047351][T14322] netlink: 'syz.7.2696': attribute type 4 has an invalid length. [ 389.124494][T14322] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2696'. [ 389.124723][T14322] netlink: 152 bytes leftover after parsing attributes in process `syz.7.2696'. [ 389.138454][ T9] usb usb5-port1: unable to enumerate USB device [ 389.548434][ T44] audit: type=1400 audit(1790027082.307:1143): avc: denied { ioctl } for pid=14331 comm="syz.8.2701" path="socket:[60311]" dev="sockfs" ino=60311 ioctlcmd=0x8912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 389.779300][ T5735] usb 13-1: new high-speed USB device number 4 using dummy_hcd [ 389.978903][ T5735] usb 13-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 389.979990][ T5735] usb 13-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 389.980021][ T5735] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 389.980041][ T5735] usb 13-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 389.980076][ T5735] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.987043][T14332] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 390.054479][ T5735] cyberjack 13-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 390.091975][ T5735] usb 13-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 390.255194][T14332] cyberjack ttyUSB0: cyberjack_write - failed submitting write urb, error -90 [ 390.263896][T14345] bridge_slave_0: left allmulticast mode [ 390.263920][T14345] bridge_slave_0: left promiscuous mode [ 390.264104][T14345] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.291358][ T5735] usb 13-1: USB disconnect, device number 4 [ 390.332157][ T5735] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 390.359484][ T5735] cyberjack 13-1:1.0: device disconnected [ 390.367123][T14345] bridge_slave_1: left allmulticast mode [ 390.367150][T14345] bridge_slave_1: left promiscuous mode [ 390.367342][T14345] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.439921][T14345] bond0: (slave bond_slave_0): Releasing backup interface [ 390.519424][T14345] bond0: (slave bond_slave_1): Releasing backup interface [ 390.584917][T14345] team0: Port device team_slave_0 removed [ 390.586471][T14345] team0: Port device team_slave_1 removed [ 390.586776][T14345] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 390.587598][T14345] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 390.604285][T14345] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 390.809599][ T44] audit: type=1400 audit(1790027083.587:1144): avc: denied { mount } for pid=14351 comm="syz.7.2708" name="/" dev="rpc_pipefs" ino=61026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 390.899134][ T44] audit: type=1400 audit(1790027083.677:1145): avc: denied { unmount } for pid=12259 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 391.194495][T14356] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2710'. [ 391.489021][ T44] audit: type=1400 audit(1790027084.267:1146): avc: denied { watch watch_reads } for pid=14369 comm="syz.7.2716" path="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 391.691754][ T5088] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 391.783668][T14378] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2718'. [ 391.783693][T14378] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2718'. [ 392.054864][ T44] audit: type=1400 audit(1790027084.827:1147): avc: denied { append } for pid=14379 comm="syz.0.2719" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 392.056639][T14363] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input13 [ 392.357472][T12542] overlayfs: failed lookup in lower (newroot/128, name='file0', err=-40): overlapping layers [ 392.357620][T12542] overlayfs: failed lookup in lower (newroot/128, name='file0', err=-40): overlapping layers [ 392.388793][ T44] audit: type=1400 audit(1790027085.157:1148): avc: denied { listen } for pid=14389 comm="syz.8.2721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 392.389162][ T44] audit: type=1400 audit(1790027085.157:1149): avc: denied { read } for pid=14389 comm="syz.8.2721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 392.572868][T14394] ip6erspan0: entered allmulticast mode [ 392.744884][T14399] __nla_validate_parse: 4 callbacks suppressed [ 392.744905][T14399] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2725'. [ 392.988256][ T75] nvmet: connect request for invalid subsystem t! [ 393.039448][T14401] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "t" [ 393.921382][ T5736] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 393.939204][ T5736] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 393.963259][ T5736] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 394.007857][ T5736] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 394.023029][ T5736] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 394.031475][T14416] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2731'. [ 394.691717][ T13] bond0: (slave netdevsim1): Releasing backup interface [ 394.759855][ T44] audit: type=1400 audit(1790027087.537:1150): avc: denied { ioctl } for pid=14414 comm="syz.8.2731" path="socket:[60379]" dev="sockfs" ino=60379 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 395.462078][T14449] CUSE: unknown device info "" [ 395.462096][T14449] CUSE: unknown device info "" [ 395.462104][T14449] CUSE: unknown device info "" [ 395.462112][T14449] CUSE: unknown device info "" [ 395.462119][T14449] CUSE: zero length info key specified [ 395.999955][T14459] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2742'. [ 396.050338][T14460] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2742'. [ 396.100409][ T44] audit: type=1400 audit(1790027088.867:1151): avc: denied { bind } for pid=14457 comm="syz.7.2742" lport=33595 faddr=::ffff:172.30.0.8 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 396.158089][ T5088] Bluetooth: hci0: command tx timeout [ 396.419762][ T13] bridge_slave_1: left allmulticast mode [ 396.419783][ T13] bridge_slave_1: left promiscuous mode [ 396.419955][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.440236][ T13] bridge_slave_0: left allmulticast mode [ 396.440263][ T13] bridge_slave_0: left promiscuous mode [ 396.442258][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.484678][ T13] dvmrp6: left allmulticast mode [ 396.501327][ T44] audit: type=1400 audit(1790027089.257:1152): avc: denied { getopt } for pid=14475 comm="syz.8.2746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 396.578495][ T44] audit: type=1400 audit(1790027089.357:1153): avc: denied { write } for pid=14468 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 396.637195][T14481] netlink: 56 bytes leftover after parsing attributes in process `syz.8.2748'. [ 396.687365][ T5735] usb 12-1: new high-speed USB device number 8 using dummy_hcd [ 396.777529][ T44] audit: type=1400 audit(1790027089.537:1154): avc: denied { write } for pid=14483 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 396.831393][ T5735] usb 12-1: Using ep0 maxpacket: 8 [ 396.832219][ T5735] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 396.832761][ T5735] usb 12-1: config 0 has no interfaces? [ 396.832788][ T5735] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.836340][ T5735] usb 12-1: config 0 descriptor?? [ 396.958092][ T35] usb 11-1: new high-speed USB device number 24 using dummy_hcd [ 397.017235][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 397.054993][ T5735] usb 12-1: USB disconnect, device number 8 [ 397.077081][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 397.099066][ T35] usb 11-1: device descriptor read/64, error -71 [ 397.126383][ T13] bond0 (unregistering): Released all slaves [ 397.139059][ T13] bond1 (unregistering): Released all slaves [ 397.184282][ T5443] 8021q: adding VLAN 0 to HW filter on device eth18 [ 397.499444][ T44] audit: type=1400 audit(1790027090.257:1155): avc: denied { write } for pid=14488 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 397.619731][ T35] usb 11-1: new high-speed USB device number 25 using dummy_hcd [ 397.686813][ T44] audit: type=1400 audit(1790027090.467:1156): avc: denied { write } for pid=14494 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 397.748652][ T35] usb 11-1: device descriptor read/64, error -71 [ 397.833258][ T5443] 8021q: adding VLAN 0 to HW filter on device eth19 [ 397.833695][T14412] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.833765][T14412] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.833865][T14412] bridge_slave_0: entered allmulticast mode [ 397.835497][T14412] bridge_slave_0: entered promiscuous mode [ 397.867747][T14412] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.868260][T14412] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.868401][T14412] bridge_slave_1: entered allmulticast mode [ 397.869985][T14412] bridge_slave_1: entered promiscuous mode [ 397.893054][ T35] usb usb11-port1: attempt power cycle [ 397.919180][ T5088] Bluetooth: hci3: unexpected event for opcode 0x1408 [ 398.087337][T14412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 398.089915][T14412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 398.252384][ T35] usb 11-1: new high-speed USB device number 26 using dummy_hcd [ 398.269930][ T5088] Bluetooth: hci0: command tx timeout [ 398.287972][ T44] audit: type=1400 audit(1790027091.047:1157): avc: denied { write } for pid=14506 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 398.342712][T14412] team0: Port device team_slave_0 added [ 398.352642][ T35] usb 11-1: device descriptor read/8, error -71 [ 398.389482][T14412] team0: Port device team_slave_1 added [ 398.436812][T14412] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 398.436825][T14412] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 398.436838][T14412] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 398.437872][T14412] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 398.437887][T14412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 398.438757][T14412] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.577155][ T13] hsr_slave_0: left promiscuous mode [ 398.584305][ T13] hsr_slave_1: left promiscuous mode [ 398.585150][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 398.586356][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 398.605150][ T35] usb 11-1: new high-speed USB device number 27 using dummy_hcd [ 398.621514][ T44] audit: type=1400 audit(1790027091.387:1158): avc: denied { write } for pid=14516 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 398.641727][ T35] usb 11-1: device descriptor read/8, error -71 [ 398.753897][ T35] usb usb11-port1: unable to enumerate USB device [ 398.903687][T14521] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2756'. [ 399.034606][ T13] team0 (unregistering): Port device team_slave_1 removed [ 399.097156][ T13] team0 (unregistering): Port device team_slave_0 removed [ 399.466733][ T5443] 8021q: adding VLAN 0 to HW filter on device eth20 [ 399.561867][T14412] hsr_slave_0: entered promiscuous mode [ 399.562793][T14412] hsr_slave_1: entered promiscuous mode [ 399.563419][T14412] debugfs: 'hsr0' already exists in 'hsr' [ 399.563440][T14412] Cannot create hsr debugfs directory [ 399.662309][T14512] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 399.662433][T14512] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 399.662475][T14512] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 399.857473][T14512] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 399.859212][T14512] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 399.859309][T14512] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 399.997052][T14512] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 400.281923][ T44] audit: type=1400 audit(1790027093.047:1159): avc: denied { write } for pid=14533 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 400.621724][ T44] audit: type=1400 audit(1790027349.401:1160): avc: denied { write } for pid=14550 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 400.668027][T11712] usb 13-1: new high-speed USB device number 5 using dummy_hcd [ 400.706161][T14553] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2763'. [ 400.823172][T11712] usb 13-1: Using ep0 maxpacket: 8 [ 400.824267][T11712] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 400.825332][T11712] usb 13-1: config 0 has no interfaces? [ 400.825361][T11712] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.846671][T11712] usb 13-1: config 0 descriptor?? [ 400.889072][ T5443] 8021q: adding VLAN 0 to HW filter on device eth21 [ 400.891181][T14412] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 400.937142][T14412] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 400.937830][T14412] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 400.999055][T14412] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 401.002137][T14412] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 401.026400][T14412] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 401.027162][T14412] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 401.035457][T14412] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 401.073790][ T35] usb 13-1: USB disconnect, device number 5 [ 401.088120][ T13] IPVS: stop unused estimator thread 0... [ 401.242252][T14412] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.314745][T14412] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.366191][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.366264][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.395315][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.395414][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.418562][T14572] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2767'. [ 401.684384][ T5736] Bluetooth: hci3: command 0x0c1a tx timeout [ 401.684430][ T5736] Bluetooth: hci4: command 0x0406 tx timeout [ 401.754283][T14582] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2769'. [ 401.794064][T14586] netlink: 256 bytes leftover after parsing attributes in process `syz.6.2770'. [ 401.794086][T14586] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2770'. [ 401.928006][ T5088] Bluetooth: hci2: command 0x0c1a tx timeout [ 401.928050][ T5088] Bluetooth: hci0: command 0x0419 tx timeout [ 402.766244][T14615] netlink: 'syz.7.2776': attribute type 21 has an invalid length. [ 402.811921][T14615] bond4: option downdelay: invalid value (18446744073709551615) [ 402.811946][T14615] bond4: option downdelay: allowed values 0 - 2147483647 [ 402.872359][T14615] bond4 (unregistering): Released all slaves [ 402.912928][ T44] kauditd_printk_skb: 2 callbacks suppressed [ 402.912948][ T44] audit: type=1400 audit(1790027351.681:1163): avc: denied { shutdown } for pid=14614 comm="syz.7.2776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 403.037084][T14412] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 403.046172][T14619] netlink: 'syz.7.2776': attribute type 4 has an invalid length. [ 403.750489][ T5088] Bluetooth: hci3: unexpected event for opcode 0x1408 [ 403.959395][T14634] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2779'. [ 403.998702][ T5088] Bluetooth: hci0: command 0x0419 tx timeout [ 404.028181][T14634] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.029929][T14634] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.346196][T14634] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 404.381126][T14634] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 404.549977][ T44] audit: type=1400 audit(1790027353.331:1164): avc: denied { read } for pid=14636 comm="syz.7.2780" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 404.552120][ T44] audit: type=1400 audit(1790027353.331:1165): avc: denied { open } for pid=14636 comm="syz.7.2780" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 405.203097][T14412] veth0_vlan: entered promiscuous mode [ 405.203510][ T5882] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.236449][T14412] veth1_vlan: entered promiscuous mode [ 405.326093][T14412] veth0_macvtap: entered promiscuous mode [ 405.332446][T14412] veth1_macvtap: entered promiscuous mode [ 405.374364][ T12] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.377190][T14412] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 405.387710][T14635] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.388109][T14635] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.390291][T14412] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 405.625093][T14635] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.625150][T14635] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.625188][T14635] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.625226][T14635] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.773282][ T166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.773305][ T166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.960367][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.960390][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.107578][ T5736] Bluetooth: hci0: command 0x0419 tx timeout [ 408.180847][ T5736] Bluetooth: hci0: command 0x0419 tx timeout [ 410.252293][ T5736] Bluetooth: hci0: command 0x0419 tx timeout [ 412.250235][ T44] audit: type=1400 audit(1790027361.022:1166): avc: denied { write } for pid=14657 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 412.446118][ T44] audit: type=1400 audit(1790027361.222:1167): avc: denied { write } for pid=14660 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 412.690156][ T44] audit: type=1400 audit(1790027361.472:1168): avc: denied { write } for pid=14664 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 412.874008][ T44] audit: type=1400 audit(1790027361.652:1169): avc: denied { write } for pid=14667 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 413.128810][ T44] audit: type=1400 audit(1790027361.912:1170): avc: denied { write } for pid=14670 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 413.347557][ T44] audit: type=1400 audit(1790027362.112:1171): avc: denied { write } for pid=14673 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 413.693333][ T44] audit: type=1400 audit(1790027362.472:1172): avc: denied { write } for pid=14676 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 413.921469][ T44] audit: type=1400 audit(1790027362.702:1173): avc: denied { write } for pid=14679 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 417.080746][ T44] audit: type=1400 audit(1790027365.863:1174): avc: denied { write } for pid=14682 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 417.228313][ T44] audit: type=1400 audit(1790027366.013:1175): avc: denied { write } for pid=14685 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 436.758510][ T5736] Bluetooth: hci4: unexpected event for opcode 0x2060 [ 436.901683][ T44] audit: type=1400 audit(1790027385.675:1176): avc: denied { map } for pid=14696 comm="syz.6.2785" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 436.906821][ T44] audit: type=1400 audit(1790027385.675:1177): avc: denied { execute } for pid=14696 comm="syz.6.2785" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 437.863154][ T35] usb 12-1: new high-speed USB device number 9 using dummy_hcd [ 437.964183][T14722] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2792'. [ 438.005845][T14722] IPVS: set_ctl: invalid protocol: 103 127.0.0.1:20004 [ 438.035407][ T35] usb 12-1: Using ep0 maxpacket: 8 [ 438.036347][ T35] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 438.036877][ T35] usb 12-1: config 0 has no interfaces? [ 438.036903][ T35] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.039461][ T35] usb 12-1: config 0 descriptor?? [ 438.258725][ T35] usb 12-1: USB disconnect, device number 9 [ 438.305910][T14728] FAULT_INJECTION: forcing a failure. [ 438.305910][T14728] name failslab, interval 1, probability 0, space 0, times 0 [ 438.305945][T14728] CPU: 2 UID: 0 PID: 14728 Comm: syz.8.2793 Tainted: G L syzkaller #0 PREEMPT(full) [ 438.305971][T14728] Tainted: [L]=SOFTLOCKUP [ 438.305978][T14728] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 438.305989][T14728] Call Trace: [ 438.306002][T14728] [ 438.306010][T14728] dump_stack_lvl+0x100/0x190 [ 438.306054][T14728] should_fail_ex.cold+0x5/0xa [ 438.306084][T14728] should_failslab+0xc2/0x120 [ 438.306114][T14728] kmem_cache_alloc_noprof+0x92/0x6a0 [ 438.306135][T14728] ? lockdep_init_map_type+0x5c/0x250 [ 438.306157][T14728] ? copy_process+0x47c7/0x8370 [ 438.306182][T14728] copy_process+0x47c7/0x8370 [ 438.306217][T14728] ? __pfx_copy_process+0x10/0x10 [ 438.306238][T14728] ? futex_wake+0x4ea/0x5e0 [ 438.306265][T14728] kernel_clone+0x176/0x9d0 [ 438.306310][T14728] ? __pfx_kernel_clone+0x10/0x10 [ 438.306344][T14728] __do_sys_clone+0xd9/0x120 [ 438.306366][T14728] ? __pfx___do_sys_clone+0x10/0x10 [ 438.306407][T14728] do_syscall_64+0x123/0x790 [ 438.306452][T14728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.306472][T14728] RIP: 0033:0x7f42c1b9e159 [ 438.306490][T14728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 438.306508][T14728] RSP: 002b:00007f42c2b0efd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 438.306533][T14728] RAX: ffffffffffffffda RBX: 00007f42c1e25fa0 RCX: 00007f42c1b9e159 [ 438.306547][T14728] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000087002000 [ 438.306561][T14728] RBP: 00007f42c1c3506b R08: 0000000000000000 R09: 0000000000000000 [ 438.306572][T14728] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 438.306582][T14728] R13: 00007f42c1e26038 R14: 00007f42c1e25fa0 R15: 00007ffc111032e8 [ 438.306606][T14728] [ 439.223650][ T5736] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 439.322963][ T35] usb 12-1: new high-speed USB device number 10 using dummy_hcd [ 439.536348][ T35] usb 12-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 439.538907][ T35] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.083005][ T1443] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.083055][ T1443] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.684011][ T35] usb 12-1: ATUSB: AT86RF231 version 3 [ 440.846952][T14781] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 440.888284][ T35] usb 12-1: Firmware: major: 185, minor: 12, hardware type: HULUSB (4) [ 441.111339][ T35] usb 12-1: failed to fetch extended address, random address set [ 441.950329][T14801] FAULT_INJECTION: forcing a failure. [ 441.950329][T14801] name failslab, interval 1, probability 0, space 0, times 0 [ 441.950367][T14801] CPU: 1 UID: 0 PID: 14801 Comm: syz.6.2819 Tainted: G L syzkaller #0 PREEMPT(full) [ 441.950400][T14801] Tainted: [L]=SOFTLOCKUP [ 441.950410][T14801] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 441.950425][T14801] Call Trace: [ 441.950434][T14801] [ 441.950444][T14801] dump_stack_lvl+0x100/0x190 [ 441.950488][T14801] should_fail_ex.cold+0x5/0xa [ 441.950520][T14801] should_failslab+0xc2/0x120 [ 441.950551][T14801] __kmalloc_cache_node_noprof+0x94/0x720 [ 441.950580][T14801] ? sbitmap_queue_init_node+0x291/0x4a0 [ 441.950610][T14801] sbitmap_queue_init_node+0x291/0x4a0 [ 441.950634][T14801] blk_mq_init_tags+0x1ba/0x300 [ 441.950665][T14801] blk_mq_alloc_map_and_rqs+0x244/0xe30 [ 441.950693][T14801] ? blk_mq_update_queue_map+0x227/0x3a0 [ 441.950772][T14801] blk_mq_alloc_tag_set+0x848/0x1330 [ 441.950816][T14801] loop_add+0x3b7/0xb60 [ 441.950841][T14801] ? __pfx_loop_add+0x10/0x10 [ 441.950883][T14801] ? __fget_files+0x34/0x3d0 [ 441.950927][T14801] loop_control_ioctl+0xae/0x620 [ 441.950956][T14801] ? __pfx_loop_control_ioctl+0x10/0x10 [ 441.950985][T14801] ? selinux_file_ioctl+0x13b/0x290 [ 441.951014][T14801] ? selinux_file_ioctl+0xb6/0x290 [ 441.951046][T14801] ? __pfx_loop_control_ioctl+0x10/0x10 [ 441.951270][T14801] __x64_sys_ioctl+0x18e/0x210 [ 441.951304][T14801] do_syscall_64+0x123/0x790 [ 441.951350][T14801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.951378][T14801] RIP: 0033:0x7f225519e159 [ 441.951403][T14801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 441.951860][T14801] RSP: 002b:00007f225601b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 441.951890][T14801] RAX: ffffffffffffffda RBX: 00007f2255425fa0 RCX: 00007f225519e159 [ 441.951910][T14801] RDX: 00000000ffffffe4 RSI: 0000000000004c80 RDI: 0000000000000005 [ 441.951928][T14801] RBP: 00007f225523506b R08: 0000000000000000 R09: 0000000000000000 [ 441.951946][T14801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 441.951964][T14801] R13: 00007f2255426038 R14: 00007f2255425fa0 R15: 00007fff58f8e428 [ 441.952002][T14801] [ 441.952229][T14801] blk-mq: reduced tag depth (128 -> 64) [ 442.190669][T14755] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 442.443740][ T1165] IPVS: starting estimator thread 0... [ 442.508392][ T44] audit: type=1400 audit(1790027391.286:1178): avc: denied { write } for pid=14812 comm="syz.8.2824" name="cluster" dev="configfs" ino=2113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 442.529612][ T44] audit: type=1400 audit(1790027391.306:1179): avc: denied { write } for pid=14812 comm="syz.8.2824" name="node" dev="configfs" ino=64023 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 442.529675][ T44] audit: type=1400 audit(1790027391.306:1180): avc: denied { write } for pid=14812 comm="syz.8.2824" name="node" dev="configfs" ino=64023 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 442.548532][T14809] IPVS: using max 33 ests per chain, 79200 per kthread [ 442.789354][T14823] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 442.942902][T14663] usb 13-1: new high-speed USB device number 6 using dummy_hcd [ 443.113348][T14663] usb 13-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 443.117531][T14663] usb 13-1: config index 0 descriptor too short (expected 50, got 32) [ 443.117558][T14663] usb 13-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 443.120159][T14663] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.120186][T14663] usb 13-1: Product: syz [ 443.120201][T14663] usb 13-1: Manufacturer: syz [ 443.120217][T14663] usb 13-1: SerialNumber: syz [ 443.133352][T14663] usb_debug 13-1:1.0: debug converter detected [ 443.145889][T14663] usb 13-1: debug converter now attached to ttyUSB0 [ 443.256929][ T3379] usb 12-1: USB disconnect, device number 10 [ 443.569441][ T5736] Bluetooth: hci2: unexpected event for opcode 0x0434 [ 443.889561][T14834] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 444.026158][T14839] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 445.578938][T14872] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 445.759060][ T5678] usb 13-1: USB disconnect, device number 6 [ 445.765531][ T5678] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 445.765957][ T5678] usb_debug 13-1:1.0: device disconnected [ 446.091712][T14882] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 446.261230][T14885] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2851'. [ 446.584636][T14885] warn_alloc: 1 callbacks suppressed [ 446.584656][T14885] syz.8.2851: vmalloc error: size 20480, failed to allocate pages, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 446.584732][T14885] CPU: 1 UID: 0 PID: 14885 Comm: syz.8.2851 Tainted: G L syzkaller #0 PREEMPT(full) [ 446.584756][T14885] Tainted: [L]=SOFTLOCKUP [ 446.584763][T14885] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 446.584773][T14885] Call Trace: [ 446.584779][T14885] [ 446.584787][T14885] dump_stack_lvl+0x100/0x190 [ 446.584818][T14885] warn_alloc.cold+0x9e/0xb2 [ 446.584839][T14885] ? __pfx_warn_alloc+0x10/0x10 [ 446.584856][T14885] ? policy_nodemask+0xed/0x4f0 [ 446.584882][T14885] ? alloc_pages_mpol+0x260/0x550 [ 446.584906][T14885] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 446.584929][T14885] ? find_held_lock+0x2b/0x80 [ 446.584954][T14885] ? rcu_read_unlock+0x17/0x60 [ 446.584987][T14885] __vmalloc_node_range_noprof+0x111c/0x1420 [ 446.585022][T14885] ? hash_ipportnet6_resize+0x213/0x1eb0 [ 446.585058][T14885] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 446.585082][T14885] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 446.585107][T14885] ? rcu_is_watching+0x13/0xc0 [ 446.585136][T14885] __kvmalloc_node_noprof+0x3da/0x9b0 [ 446.585157][T14885] ? hash_ipportnet6_resize+0x213/0x1eb0 [ 446.585177][T14885] ? hash_ipportnet6_resize+0x213/0x1eb0 [ 446.585201][T14885] hash_ipportnet6_resize+0x213/0x1eb0 [ 446.585219][T14885] ? __pfx_hash_ipportnet6_add+0x10/0x10 [ 446.585240][T14885] ? __pfx_hash_ipportnet6_uadt+0x10/0x10 [ 446.585267][T14885] ? __pfx_hash_ipportnet6_resize+0x10/0x10 [ 446.585286][T14885] ? clockevents_program_event+0x1bf/0x820 [ 446.585318][T14885] call_ad.isra.0+0x37f/0x950 [ 446.585345][T14885] ? __pfx_hash_ipportnet6_resize+0x10/0x10 [ 446.585369][T14885] ? __pfx_call_ad.isra.0+0x10/0x10 [ 446.585394][T14885] ? __pfx___nla_validate_parse+0x10/0x10 [ 446.585431][T14885] ? __nla_parse+0x40/0x60 [ 446.585466][T14885] ip_set_ad.isra.0+0x3f1/0x8b0 [ 446.585487][T14885] ? __pfx_ip_set_ad.isra.0+0x10/0x10 [ 446.585504][T14885] ? trace_contention_end+0x126/0x160 [ 446.585567][T14885] ? find_held_lock+0x2b/0x80 [ 446.585599][T14885] nfnetlink_rcv_msg+0x9d5/0x11e0 [ 446.585631][T14885] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 446.585657][T14885] ? __lock_acquire+0x5c0/0x1f40 [ 446.585697][T14885] ? avc_has_perm_noaudit+0x145/0x470 [ 446.585729][T14885] netlink_rcv_skb+0x159/0x420 [ 446.585749][T14885] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 446.585777][T14885] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 446.585810][T14885] ? ns_capable+0xd2/0xf0 [ 446.585832][T14885] nfnetlink_rcv+0x1b3/0x440 [ 446.585859][T14885] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 446.585882][T14885] ? netlink_deliver_tap+0x1ae/0xcc0 [ 446.585906][T14885] netlink_unicast+0x585/0x850 [ 446.585930][T14885] ? __pfx_netlink_unicast+0x10/0x10 [ 446.585956][T14885] netlink_sendmsg+0x8b0/0xda0 [ 446.585981][T14885] ? __pfx_netlink_sendmsg+0x10/0x10 [ 446.586003][T14885] ? selinux_socket_sendmsg+0x198/0x2f0 [ 446.586027][T14885] ____sys_sendmsg+0xa4d/0xbe0 [ 446.586053][T14885] ? __pfx_netlink_sendmsg+0x10/0x10 [ 446.586076][T14885] ? __pfx_____sys_sendmsg+0x10/0x10 [ 446.586106][T14885] ? futex_unqueue+0x133/0x2c0 [ 446.586138][T14885] ___sys_sendmsg+0x190/0x1e0 [ 446.586158][T14885] ? __pfx____sys_sendmsg+0x10/0x10 [ 446.586174][T14885] ? __pfx___futex_wait+0x10/0x10 [ 446.586191][T14885] ? futex_hash+0x311/0x400 [ 446.586217][T14885] ? __fget_files+0x34/0x3d0 [ 446.586273][T14885] __sys_sendmmsg+0x20c/0x440 [ 446.586299][T14885] ? __pfx___sys_sendmmsg+0x10/0x10 [ 446.586320][T14885] ? file_init_path+0x48e/0x670 [ 446.586350][T14885] ? __pfx_do_futex+0x10/0x10 [ 446.586382][T14885] ? __sys_socket+0xac/0x260 [ 446.586400][T14885] ? xfd_validate_state+0x129/0x190 [ 446.586426][T14885] __x64_sys_sendmmsg+0x9c/0x100 [ 446.586453][T14885] ? lockdep_hardirqs_on+0x7d/0x110 [ 446.586480][T14885] do_syscall_64+0x123/0x790 [ 446.586509][T14885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.586528][T14885] RIP: 0033:0x7f42c1b9e159 [ 446.586544][T14885] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 446.586561][T14885] RSP: 002b:00007f42c2b0f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 446.586580][T14885] RAX: ffffffffffffffda RBX: 00007f42c1e25fa0 RCX: 00007f42c1b9e159 [ 446.586591][T14885] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000007 [ 446.586603][T14885] RBP: 00007f42c1c3506b R08: 0000000000000000 R09: 0000000000000000 [ 446.586614][T14885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 446.586625][T14885] R13: 00007f42c1e26038 R14: 00007f42c1e25fa0 R15: 00007ffc111032e8 [ 446.586648][T14885] [ 446.591347][T14885] Mem-Info: [ 446.591364][T14885] active_anon:8190 inactive_anon:1378 isolated_anon:0 [ 446.591364][T14885] active_file:10116 inactive_file:17117 isolated_file:0 [ 446.591364][T14885] unevictable:1000 dirty:82 writeback:0 [ 446.591364][T14885] slab_reclaimable:8216 slab_unreclaimable:77984 [ 446.591364][T14885] mapped:26390 shmem:1572 pagetables:6518 [ 446.591364][T14885] sec_pagetables:304 bounce:0 [ 446.591364][T14885] kernel_misc_reclaimable:0 [ 446.591364][T14885] free:464995 free_pcp:10061 free_cma:0 [ 446.591410][T14885] Node 0 active_anon:32736kB inactive_anon:5512kB active_file:40464kB inactive_file:67548kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:105560kB dirty:328kB writeback:0kB shmem:4288kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16448kB pagetables:7652kB sec_pagetables:1216kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 446.591468][T14885] Node 1 active_anon:24kB inactive_anon:0kB active_file:0kB inactive_file:920kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:18420kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 446.591513][T14885] Node 0 DMA free:15120kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:96kB local_pcp:0kB free_cma:0kB [ 446.591564][T14885] lowmem_reserve[]: 0 1223 1223 1223 1223 [ 446.591597][T14885] Node 0 DMA32 free:235816kB boost:0kB min:27356kB low:34192kB high:41028kB reserved_highatomic:0kB free_highatomic:0kB active_anon:32736kB inactive_anon:5512kB active_file:40460kB inactive_file:67548kB unevictable:2000kB writepending:328kB zspages:0kB present:2080628kB managed:1253224kB mlocked:0kB bounce:0kB free_pcp:30472kB local_pcp:4920kB free_cma:0kB [ 446.591648][T14885] lowmem_reserve[]: 0 0 0 0 0 [ 446.591678][T14885] Node 1 Normal free:1609044kB boost:0kB min:39880kB low:49848kB high:59816kB reserved_highatomic:0kB free_highatomic:0kB active_anon:24kB inactive_anon:0kB active_file:0kB inactive_file:920kB unevictable:2000kB writepending:0kB zspages:0kB present:2097152kB managed:1781880kB mlocked:0kB bounce:0kB free_pcp:9676kB local_pcp:2032kB free_cma:0kB [ 446.591728][T14885] lowmem_reserve[]: 0 0 0 0 0 [ 446.591758][T14885] Node 0 DMA: 8*4kB (UM) 8*8kB (UM) 11*16kB (UM) 10*32kB (UM) 11*64kB (UM) 10*128kB (UM) 7*256kB (UM) 5*512kB (UM) 8*1024kB (UM) 0*2048kB 0*4096kB = 15120kB [ 446.591890][T14885] Node 0 DMA32: 232*4kB (M) 671*8kB (UME) 349*16kB (UME) 386*32kB (UME) 352*64kB (UME) 109*128kB (UE) 54*256kB (UME) 51*512kB (UM) 38*1024kB (UM) 23*2048kB (UM) 12*4096kB (UM) = 235816kB [ 446.592033][T14885] Node 1 Normal: 461*4kB (UM) 590*8kB (UME) 575*16kB (UME) 594*32kB (UME) 540*64kB (UME) 529*128kB (UE) 510*256kB (U) 450*512kB (UE) 413*1024kB (UM) 12*2048kB (UE) 162*4096kB (UM) = 1609044kB [ 446.592273][T14885] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 446.592289][T14885] Node 0 hugepages_total=5 hugepages_free=5 hugepages_surp=0 hugepages_size=2048kB [ 446.592698][T14885] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 446.592717][T14885] Node 1 hugepages_total=5 hugepages_free=5 hugepages_surp=0 hugepages_size=2048kB [ 446.592732][T14885] 28801 total pagecache pages [ 446.592739][T14885] 0 pages in swap cache [ 446.592746][T14885] Free swap = 124996kB [ 446.592753][T14885] Total swap = 124996kB [ 446.592761][T14885] 1048443 pages RAM [ 446.592767][T14885] 0 pages HighMem/MovableOnly [ 446.592774][T14885] 285827 pages reserved [ 446.592780][T14885] 0 pages cma reserved [ 447.192450][ T35] usb 12-1: new high-speed USB device number 11 using dummy_hcd [ 447.337717][ T35] usb 12-1: New USB device found, idVendor=056a, idProduct=00ec, bcdDevice= 0.00 [ 447.354621][ T35] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 447.354671][ T35] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.376394][ T35] usb 12-1: config 0 descriptor?? [ 447.391004][ T35] usbhid 12-1:0.0: couldn't find an input interrupt endpoint [ 447.706292][ T3379] usb 12-1: USB disconnect, device number 11 [ 447.825385][T14916] nbd8: detected capacity change from 0 to 24 [ 447.825787][T14917] block nbd8: shutting down sockets [ 447.978026][T14914] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 448.341489][T14922] FAULT_INJECTION: forcing a failure. [ 448.341489][T14922] name failslab, interval 1, probability 0, space 0, times 0 [ 448.341529][T14922] CPU: 3 UID: 0 PID: 14922 Comm: syz.8.2863 Tainted: G L syzkaller #0 PREEMPT(full) [ 448.341561][T14922] Tainted: [L]=SOFTLOCKUP [ 448.341571][T14922] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 448.341583][T14922] Call Trace: [ 448.341590][T14922] [ 448.341599][T14922] dump_stack_lvl+0x100/0x190 [ 448.341638][T14922] should_fail_ex.cold+0x5/0xa [ 448.341669][T14922] should_failslab+0xc2/0x120 [ 448.341698][T14922] __kmalloc_noprof+0xfc/0x840 [ 448.341723][T14922] ? hash_ipmark4_add+0x1f80/0x26a0 [ 448.341755][T14922] hash_ipmark4_add+0x1f80/0x26a0 [ 448.341794][T14922] ? __pfx_hash_ipmark4_add+0x10/0x10 [ 448.341820][T14922] ? hash_ipmark_create+0xd54/0x1430 [ 448.341842][T14922] ? ip_set_create+0x6c4/0x1510 [ 448.341864][T14922] ? __asan_memset+0x23/0x50 [ 448.341890][T14922] hash_ipmark4_uadt+0x704/0x950 [ 448.341913][T14922] ? __pfx_hash_ipmark4_add+0x10/0x10 [ 448.341954][T14922] ? __pfx_hash_ipmark4_uadt+0x10/0x10 [ 448.341991][T14922] ? __asan_memset+0x23/0x50 [ 448.342018][T14922] call_ad.isra.0+0x171/0x950 [ 448.342055][T14922] ? __pfx_call_ad.isra.0+0x10/0x10 [ 448.342120][T14922] ? __pfx___nla_validate_parse+0x10/0x10 [ 448.342167][T14922] ? __nla_parse+0x40/0x60 [ 448.342201][T14922] ip_set_ad.isra.0+0x3f1/0x8b0 [ 448.342227][T14922] ? __pfx_ip_set_ad.isra.0+0x10/0x10 [ 448.342248][T14922] ? trace_contention_end+0x126/0x160 [ 448.342299][T14922] ? find_held_lock+0x2b/0x80 [ 448.342336][T14922] nfnetlink_rcv_msg+0x9d5/0x11e0 [ 448.342378][T14922] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 448.342412][T14922] ? __lock_acquire+0x5c0/0x1f40 [ 448.342457][T14922] ? avc_has_perm_noaudit+0x145/0x470 [ 448.342497][T14922] netlink_rcv_skb+0x159/0x420 [ 448.342523][T14922] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 448.342556][T14922] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 448.342590][T14922] ? ns_capable+0xd2/0xf0 [ 448.342611][T14922] nfnetlink_rcv+0x1b3/0x440 [ 448.342636][T14922] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 448.342660][T14922] ? netlink_deliver_tap+0x1ae/0xcc0 [ 448.342684][T14922] netlink_unicast+0x585/0x850 [ 448.342744][T14922] ? __pfx_netlink_unicast+0x10/0x10 [ 448.342769][T14922] ? __pfx_sock_has_perm+0x10/0x10 [ 448.342792][T14922] netlink_sendmsg+0x8b0/0xda0 [ 448.342817][T14922] ? __pfx_netlink_sendmsg+0x10/0x10 [ 448.342841][T14922] ? selinux_socket_sendmsg+0x198/0x2f0 [ 448.342864][T14922] ____sys_sendmsg+0xa4d/0xbe0 [ 448.342889][T14922] ? __pfx_netlink_sendmsg+0x10/0x10 [ 448.342911][T14922] ? __pfx_____sys_sendmsg+0x10/0x10 [ 448.342951][T14922] ? plist_check_list+0x1b8/0x280 [ 448.342974][T14922] ? plist_del+0x308/0x510 [ 448.342997][T14922] ___sys_sendmsg+0x190/0x1e0 [ 448.343016][T14922] ? __pfx____sys_sendmsg+0x10/0x10 [ 448.343033][T14922] ? futex_wake+0x220/0x5e0 [ 448.343059][T14922] ? find_held_lock+0x2b/0x80 [ 448.343099][T14922] __sys_sendmsg+0x160/0x210 [ 448.343122][T14922] ? __pfx___sys_sendmsg+0x10/0x10 [ 448.343158][T14922] do_syscall_64+0x123/0x790 [ 448.343188][T14922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.343207][T14922] RIP: 0033:0x7f42c1b9e159 [ 448.343225][T14922] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 448.343243][T14922] RSP: 002b:00007f42c2b0f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 448.343263][T14922] RAX: ffffffffffffffda RBX: 00007f42c1e25fa0 RCX: 00007f42c1b9e159 [ 448.343275][T14922] RDX: 0000000000000800 RSI: 00002000000001c0 RDI: 0000000000000004 [ 448.343287][T14922] RBP: 00007f42c1c3506b R08: 0000000000000000 R09: 0000000000000000 [ 448.343298][T14922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 448.343308][T14922] R13: 00007f42c1e26038 R14: 00007f42c1e25fa0 R15: 00007ffc111032e8 [ 448.343332][T14922] [ 448.604731][T14930] syzkaller0: entered promiscuous mode [ 448.604753][T14930] syzkaller0: entered allmulticast mode [ 448.607236][T14930] tipc: Started in network mode [ 448.607260][T14930] tipc: Node identity 8eb4cada8ab4, cluster identity 4711 [ 448.607519][T14930] tipc: Enabled bearer , priority 0 [ 448.668216][T14928] tipc: Resetting bearer [ 448.734692][T14933] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 448.910531][T14928] tipc: Disabling bearer [ 449.036054][T14938] FAULT_INJECTION: forcing a failure. [ 449.036054][T14938] name failslab, interval 1, probability 0, space 0, times 0 [ 449.036084][T14938] CPU: 0 UID: 0 PID: 14938 Comm: syz.8.2869 Tainted: G L syzkaller #0 PREEMPT(full) [ 449.036108][T14938] Tainted: [L]=SOFTLOCKUP [ 449.036115][T14938] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 449.036125][T14938] Call Trace: [ 449.036131][T14938] [ 449.036139][T14938] dump_stack_lvl+0x100/0x190 [ 449.036178][T14938] should_fail_ex.cold+0x5/0xa [ 449.036202][T14938] should_failslab+0xc2/0x120 [ 449.036226][T14938] kmem_cache_alloc_noprof+0x92/0x6a0 [ 449.036247][T14938] ? dup_fd+0x4d/0xd10 [ 449.036274][T14938] dup_fd+0x4d/0xd10 [ 449.036305][T14938] copy_process+0x2d11/0x8370 [ 449.036325][T14938] ? try_to_wake_up+0x70a/0x1c90 [ 449.036359][T14938] ? __pfx_copy_process+0x10/0x10 [ 449.036379][T14938] ? futex_wake+0x4ea/0x5e0 [ 449.036398][T14938] ? futex_private_hash_put.part.0+0xdc/0x180 [ 449.036435][T14938] kernel_clone+0x176/0x9d0 [ 449.036459][T14938] ? __pfx_futex_wake+0x10/0x10 [ 449.036476][T14938] ? __pfx_kernel_clone+0x10/0x10 [ 449.036512][T14938] __do_sys_clone+0xd9/0x120 [ 449.036533][T14938] ? __pfx___do_sys_clone+0x10/0x10 [ 449.036570][T14938] do_syscall_64+0x123/0x790 [ 449.036599][T14938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.036617][T14938] RIP: 0033:0x7f42c1b9e159 [ 449.036631][T14938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 449.036649][T14938] RSP: 002b:00007f42c2b0efd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 449.036669][T14938] RAX: ffffffffffffffda RBX: 00007f42c1e25fa0 RCX: 00007f42c1b9e159 [ 449.036682][T14938] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000087002000 [ 449.036694][T14938] RBP: 00007f42c1c3506b R08: 0000000000000000 R09: 0000000000000000 [ 449.036705][T14938] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 449.036716][T14938] R13: 00007f42c1e26038 R14: 00007f42c1e25fa0 R15: 00007ffc111032e8 [ 449.036740][T14938] [ 449.083199][T14935] md/raid:md0: not clean -- starting background reconstruction [ 449.084272][T14935] md/raid:md0: device ram0 operational as raid disk 0 [ 449.221848][T14935] md/raid:md0: raid level 5 active with 1 out of 1 devices, algorithm 0 [ 449.224123][T14935] ------------[ cut here ]------------ [ 449.224138][T14935] UBSAN: shift-out-of-bounds in ./include/linux/log2.h:57:13 [ 449.224155][T14935] shift exponent 64 is too large for 64-bit type 'long unsigned int' [ 449.224210][T14935] CPU: 1 UID: 0 PID: 14935 Comm: syz.7.2868 Tainted: G L syzkaller #0 PREEMPT(full) [ 449.224274][T14935] Tainted: [L]=SOFTLOCKUP [ 449.224281][T14935] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 449.224293][T14935] Call Trace: [ 449.224336][T14935] [ 449.224346][T14935] dump_stack_lvl+0x100/0x190 [ 449.224416][T14935] ubsan_epilogue+0xa/0x30 [ 449.224495][T14935] __ubsan_handle_shift_out_of_bounds+0x279/0x2a0 [ 449.224535][T14935] raid5_set_limits+0x310/0x53c [ 449.224637][T14935] ? sysfs_add_file_mode_ns+0x207/0x3c0 [ 449.224664][T14935] ? __pfx_raid5_set_limits+0x10/0x10 [ 449.224788][T14935] raid5_run.cold+0x55e/0xd51 [ 449.224911][T14935] md_run+0xc2f/0x2510 [ 449.224942][T14935] ? __pfx_md_run+0x10/0x10 [ 449.225038][T14935] ? set_disk_ro+0x1b7/0x210 [ 449.225067][T14935] ? __pfx_set_disk_ro+0x10/0x10 [ 449.225174][T14935] do_md_run+0x36/0x660 [ 449.225198][T14935] array_state_store+0x9c5/0xcf0 [ 449.225297][T14935] md_attr_store+0x1c5/0x330 [ 449.225324][T14935] ? __pfx_md_attr_store+0x10/0x10 [ 449.225411][T14935] sysfs_kf_write+0xf2/0x150 [ 449.225438][T14935] kernfs_fop_write_iter+0x3e0/0x5f0 [ 449.225534][T14935] ? __pfx_sysfs_kf_write+0x10/0x10 [ 449.225564][T14935] vfs_write+0x6af/0x1050 [ 449.225643][T14935] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 449.225669][T14935] ? __pfx_vfs_write+0x10/0x10 [ 449.225725][T14935] ? find_held_lock+0x2b/0x80 [ 449.225809][T14935] ksys_write+0x12a/0x250 [ 449.225916][T14935] ? __pfx_ksys_write+0x10/0x10 [ 449.225948][T14935] do_syscall_64+0x123/0x790 [ 449.226057][T14935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.226080][T14935] RIP: 0033:0x7f771759e159 [ 449.226099][T14935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 449.226191][T14935] RSP: 002b:00007f7718395028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 449.226214][T14935] RAX: ffffffffffffffda RBX: 00007f7717826180 RCX: 00007f771759e159 [ 449.226292][T14935] RDX: 0000000000000006 RSI: 0000200000000500 RDI: 0000000000000008 [ 449.226305][T14935] RBP: 00007f771763506b R08: 0000000000000000 R09: 0000000000000000 [ 449.226318][T14935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 449.226330][T14935] R13: 00007f7717826218 R14: 00007f7717826180 R15: 00007ffdee532ef8 [ 449.226406][T14935] [ 449.226754][T14935] ---[ end trace ]--- [ 449.226768][T14935] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 449.509140][T14935] CPU: 1 UID: 0 PID: 14935 Comm: syz.7.2868 Tainted: G L syzkaller #0 PREEMPT(full) [ 449.513795][T14935] Tainted: [L]=SOFTLOCKUP [ 449.515745][T14935] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 449.535068][T14935] Call Trace: [ 449.536746][T14935] [ 449.538111][T14935] dump_stack_lvl+0x100/0x190 [ 449.540365][T14935] vpanic+0x553/0x970 [ 449.542138][T14935] ? __pfx_vpanic+0x10/0x10 [ 449.544084][T14935] ? irqentry_exit+0x24d/0xa10 [ 449.545875][T14935] ? lockdep_hardirqs_on+0x7d/0x110 [ 449.564555][T14935] ? irqentry_exit+0x24d/0xa10 [ 449.566823][T14935] panic+0xd1/0xe0 [ 449.568593][T14935] ? __pfx_panic+0x10/0x10 [ 449.570628][T14935] ? dump_stack_lvl+0x176/0x190 [ 449.577701][T14935] check_panic_on_warn.cold+0x19/0x34 [ 449.580884][T14935] __ubsan_handle_shift_out_of_bounds+0x279/0x2a0 [ 449.590811][T14935] raid5_set_limits+0x310/0x53c [ 449.603356][T14935] ? sysfs_add_file_mode_ns+0x207/0x3c0 [ 449.608425][T14935] ? __pfx_raid5_set_limits+0x10/0x10 [ 449.612027][T14935] raid5_run.cold+0x55e/0xd51 [ 449.615074][T14935] md_run+0xc2f/0x2510 [ 449.628911][T14935] ? __pfx_md_run+0x10/0x10 [ 449.632074][T14935] ? set_disk_ro+0x1b7/0x210 [ 449.634322][T14935] ? __pfx_set_disk_ro+0x10/0x10 [ 449.636297][T14935] do_md_run+0x36/0x660 [ 449.641087][T14935] array_state_store+0x9c5/0xcf0 [ 449.646295][T14935] md_attr_store+0x1c5/0x330 [ 449.662982][T14935] ? __pfx_md_attr_store+0x10/0x10 [ 449.665899][T14935] sysfs_kf_write+0xf2/0x150 [ 449.668727][T14935] kernfs_fop_write_iter+0x3e0/0x5f0 [ 449.672200][T14935] ? __pfx_sysfs_kf_write+0x10/0x10 [ 449.675806][T14935] vfs_write+0x6af/0x1050 [ 449.678239][T14935] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 449.681828][T14935] ? __pfx_vfs_write+0x10/0x10 [ 449.684269][T14935] ? find_held_lock+0x2b/0x80 [ 449.686367][T14935] ksys_write+0x12a/0x250 [ 449.689433][T14935] ? __pfx_ksys_write+0x10/0x10 [ 449.692670][T14935] do_syscall_64+0x123/0x790 [ 449.695319][T14935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.698305][T14935] RIP: 0033:0x7f771759e159 [ 449.700626][T14935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 449.713033][T14935] RSP: 002b:00007f7718395028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 449.717513][T14935] RAX: ffffffffffffffda RBX: 00007f7717826180 RCX: 00007f771759e159 [ 449.721711][T14935] RDX: 0000000000000006 RSI: 0000200000000500 RDI: 0000000000000008 [ 449.725072][T14935] RBP: 00007f771763506b R08: 0000000000000000 R09: 0000000000000000 [ 449.728570][T14935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 449.732252][T14935] R13: 00007f7717826218 R14: 00007f7717826180 R15: 00007ffdee532ef8 [ 449.736363][T14935] [ 449.738664][T14935] Kernel Offset: disabled [ 449.740563][T14935] Rebooting in 86400 seconds.. VM DIAGNOSIS: 21:32:54 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000001 RCX=0000000000000000 RDX=ffff88802b988000 RSI=ffffffff81ff60fe RDI=ffff88802b988000 RBP=ffff88806a541900 RSP=ffffc9000341f8a0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffed10057312b3 R13=0000000000000003 R14=ffffed100d4a8321 R15=0000000000000001 RIP=ffffffff81ff6100 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 000fffff 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 000fffff 00000000 FS =0000 0000000000000000 000fffff 00000000 GS =0000 ffff8880d5b53000 000fffff 00000000 LDT=0000 0000000000000000 000fffff 00000000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c336946 CR3=000000000eb96000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000100001 Opmask01=000000000000001f Opmask02=000000000000001f Opmask03=0000000020411080 Opmask04=00000000fffffffb Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f68637461772f76 6564752f6e75722f ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f68637461772f76 6564752f6e75722f ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005645ae3a3010 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005645ae38a580 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f16b07f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1f115c435d431610 120300161e121d5c ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 431d1c1a1416015c 43000611171d5c43 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 772f766564752f6e 75722f00646c6f2e 68637461772f7665 64752f6e75722f00 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 520a534041500a4b 50570a0041494a0b 4d465144520a5340 41500a4b50570a00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f30737562646e2f 30303a3231303049 5043412f6d726f66 74616c702f736563 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005645ae396ca0 00005645ae38a818 0000000000000041 000000000000302d ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 46422c45422c4442 2c43422c42422c41 422c39422c38422c 37422c44412c4341 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c36412c35412c34 412c33412c46392c 45392c44392c4339 2c42392c46382c45 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 382c43382c30382c 46372c45372c4437 2c43372c42372c41 372c39372c37372c ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000100000023 0000000000000000 0000000000001011 00004e4553414552 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85b12205 RDI=ffffffff9bc71ea0 RBP=ffffffff9bc71e60 RSP=ffffc900034df020 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2e7a7973203a5043 R12=0000000000000000 R13=0000000000000020 R14=0000000000000009 R15=ffffc900034df338 RIP=ffffffff85b1222f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f77183956c0 ffffffff 00c00000 GS =0000 ffff8880d5c53000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f77175eb840 CR3=00000000597d1000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 64656772656d5f6f 692e7166622e6f69 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff58f8e916 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff58f8e916 00007fff58f8e91c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f225523564e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f225523568e ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f22552357f2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2255235680 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000020568d RBX=ffff88801f6ba580 RCX=ffffffff8bd181c5 RDX=0000000000000001 RSI=ffffffff8e38cf0c RDI=ffffffff8c623580 RBP=ffffed1003ed74b0 RSP=ffffc90000197e00 R8 =0000000000000001 R9 =ffffed100d4c67bd R10=ffff88806a633deb R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000032fc4 R15=dffffc0000000000 RIP=ffffffff8bd166ff RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5d53000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f42c1beb840 CR3=00000000597d1000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0065746174735f79 617272612f646d2f ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdee5333e6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdee5333e6 00007ffdee5333ec ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f771763564e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f771763568e ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f77176357f2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7717635680 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f77177f2600 00007f77177f25e0 00007f77177f25e8 00007f77177f2618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f77177f25f8 00007f77177f25c8 00007f77177f2600 00007f77177f25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffff888020617be0 RCX=0000000000000001 RDX=0000000000000000 RSI=ffff888020617be0 RDI=ffff888032718c00 RBP=ffff888032718000 RSP=ffffc900036df360 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=00000000ffffffff R13=0000000000000246 R14=ffff888032718c00 R15=0000000000000002 RIP=ffffffff8bd17041 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f16b0d94880 ffffffff 00c00000 GS =0000 ffff8880d5e53000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f16b03d5000 CR3=000000001d7c0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0d00000 Opmask01=0000000000000003 Opmask02=0000000000000003 Opmask03=0000000020411080 Opmask04=00000000fffffffb Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005645ae38e778 00005645ae38e778 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000004000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005645ae3957c0 00005645ae3957c0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f16b07f1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f16b07f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffff0000 ffffffff00000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 754f4645425d051a 474f475a05414945 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4648051a041a4f49 4b5a594f474b4405 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20676e6964616572 004b4f2034366f66 6e695f706f6f6c20 676e696461657200 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005645ae42ab60 00005645ae38ffd0 00005645ae385d90 00005645ae3a12a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005645ae396ca0 00005645ae38a818 0000000000000041 000000000000302d ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 46422c45422c4442 2c43422c42422c41 422c39422c38422c 37422c44412c4341 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c36412c35412c34 412c33412c46392c 45392c44392c4339 2c42392c46382c45 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 382c43382c30382c 46372c45372c4437 2c43372c42372c41 372c39372c37372c ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000100000023 0000000000000000 0000000000001011 00004e4553414552 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000