last executing test programs: 7.152033749s ago: executing program 2 (id=1800): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e0000000800000009"], 0x50) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, 0x0) 6.927373715s ago: executing program 2 (id=1806): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() socket$inet_sctp(0x2, 0x0, 0x84) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x5}}}}]}, 0x4c}}, 0x8000) sendto$inet(r0, &(0x7f0000000180)='{', 0x1, 0x0, 0x0, 0x0) 6.893451537s ago: executing program 2 (id=1808): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0x19}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x48, 0x7, r3, 0x0, 0x1, 0x0, 0x10000, 0x0, 0x32bf91}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ee222}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000002c0)={0x48, 0x6, r3, 0x3ee221, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}) 6.788313329s ago: executing program 2 (id=1810): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x106f) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)={0x248, 0x1e, 0x2, 0x70bd28, 0x25dfdbfb, {0x3}, [@generic="b5dd9d8af48dd737944ebc9a81a08c", @typed={0xb2, 0x7b, 0x0, 0x0, @binary="6c33639fbab014f151c01b2f553332a8a7c3df8d65ac80acc18edf60fb821e6e55ee4f2f0786f5f20010674a8d52d429502816080a50d513af9c1e635417e3dc3cb9a35bd8d6dfa679355a610389ffed4a8eda7674e83c7c190c3073a89fe19151a46e6b17f0e63d95b7ec55e9f6a314b0c0eb7ab35504d39bfaf8c7651f5a86507769e105869a7bf6956ea482f81a936bca311538e03a2fde1439ed3af599162a3d64ab4c3e487f5de763b8b37a"}, @nested={0xbe, 0x9e, 0x0, 0x1, [@typed={0x8, 0x47, 0x0, 0x0, @fd=r0}, @generic="f437a2d3d58fa05a4fcb2ebe5eb5a6e63ce10ccfdb9d127134a0cdaf11a24ece3b4610f50af3bf0561f7a0216806d13d59bc4c1c39b52c0d7c02581ce725be25d7fca0daaba40ab06d1f790d1fb7297f73cf17a4b3940aa527b3e0ef46303664a8d14e0410e99f72ef3e55b807dcd27085344e7f335977ec7c235a2a8ad0c6b6a9eb8fbb0ee28b86fe0316433e05e729ba7d5a37713f4f82a42299e712f486d2413b0276681535a34b3e", @typed={0x8, 0x8b, 0x0, 0x0, @fd=r2}]}, @generic="250ba57639f3599c0b835b362d6bfc18847725363dc85048fa393be31573eed57308cd607c61c69b9545c9f9faa7aef777a889a6ee5c", @nested={0x78, 0x1d, 0x0, 0x1, [@generic="3775490abf845f8a4c9d6460856a863755a3d8a3c47219b87390f724f58c4c8c878c99d6c1033b1989eceb8874313a4cb5645dd3a9312d12e76121bbcc006157625fa5103d27901299b45be08614d5f2f30f7388f06384bc3b2ffc858f9a4fdc0abe350110bddaa4a717dfd7db5dfb3f5f9dc62b"]}]}, 0x248}, 0x1, 0x0, 0x0, 0x40}, 0x40000) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000", @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa2000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) setrlimit(0x2, &(0x7f00000002c0)={0x80000000, 0xffff}) r4 = socket(0x10, 0x400000000080803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000480)=@ethtool_ringparam={0x4, 0x0, 0x5, 0x0, 0x8fc3, 0x1, 0x20000, 0x0, 0xf}}) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r4) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r5, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x5}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x2}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xff}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200040a4}, 0x24000040) 6.628170879s ago: executing program 2 (id=1811): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc02864ca, &(0x7f0000000340)={&(0x7f0000000480), 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x201, 0x1, &(0x7f0000000440)=[r2], &(0x7f0000000200), &(0x7f00000000c0)=[r3], &(0x7f0000000340), 0x1f}) 6.627949821s ago: executing program 2 (id=1812): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000080)) (async) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000080)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) r2 = io_uring_setup(0x355b, &(0x7f0000000140)={0x0, 0xe24b, 0x10, 0x5, 0x4000020}) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) io_uring_enter(r2, 0x7a05, 0xf6c, 0x9, 0x0, 0x0) recvmmsg(r3, &(0x7f0000004600)=[{{0x0, 0x0, 0x0}, 0xc4}], 0x1, 0x10123, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fsync(r6) ioctl$UFFDIO_ZEROPAGE(r6, 0xc020aa04, &(0x7f0000000280)={{&(0x7f00007fd000/0x800000)=nil, 0x800000}}) fcntl$notify(r5, 0x402, 0x8000001a) openat$cdrom(0xffffff9c, &(0x7f0000000040), 0x80880, 0x0) (async) r7 = openat$cdrom(0xffffff9c, &(0x7f0000000040), 0x80880, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000100)) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000100)) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r9, r8, 0x0) (async) r10 = dup3(r9, r8, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000800)=[@clear_death={0x400c630f, 0x2}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000800)=[@clear_death={0x400c630f, 0x2}], 0x0, 0x0, 0x0}) ioctl$CDROMVOLREAD(r7, 0x31f, &(0x7f0000000080)) fcntl$notify(r4, 0x402, 0x100000019) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000300), 0x60c804, 0x0) (async) r11 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000300), 0x60c804, 0x0) fcntl$notify(r11, 0x402, 0x80000003) r12 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x250000, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r12, 0xc4c03d09, &(0x7f0000000840)={0x14}) fcntl$notify(r4, 0x402, 0x0) (async) fcntl$notify(r4, 0x402, 0x0) ioctl$TCFLSH(r1, 0x400455c8, 0x8) (async) ioctl$TCFLSH(r1, 0x400455c8, 0x8) 3.067469033s ago: executing program 1 (id=1853): r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000000)=0x6, 0x4) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{&(0x7f00000004c0)={0xa, 0x4e1d, 0x1, @mcast2}, 0x1c, 0x0}}, {{&(0x7f00000007c0)={0xa, 0x4e24, 0x0, @mcast1, 0x10001}, 0x1c, 0x0, 0x0, &(0x7f0000000840)=[@flowinfo={{0x14, 0x29, 0xb, 0x401}}], 0x18}}], 0x2, 0x4040845) 2.99367399s ago: executing program 1 (id=1854): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='westwood\x00', 0x9) sendmmsg$inet(r0, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000bc0)="23004e4ee760d48ddc6b7a1ebfc6e0276028840fb20d526ffaaeace75a07a653ee918f67beb970cd36769470f7acb5cd5becfa3839cec05a81f9488931e0a9ba9a246f45fee8b5240bd1e078539b56973bfb", 0x52}], 0x1}}], 0x1, 0x0) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab", 0x3a, 0x0, 0x0, 0x0) 2.127597505s ago: executing program 3 (id=1859): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x109842, 0x0) write$dsp(r1, &(0x7f00000010c0)="ab", 0x1) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000600)=0x4) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x2, 0x7fffffff}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x4, r2}) ioctl$DMA_BUF_SET_NAME_A(r4, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000540)=0x1) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.073944524s ago: executing program 1 (id=1860): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)={0x214, 0x14, 0x1, 0x70bd2d, 0x0, "", [@nested={0x202, 0x0, 0x0, 0x1, [@generic="77273e417b3009a815e9152ce966702165ea3196bcec6ba4b0abf0018731d3d736", @generic="03b2b242f8c762d187a6852402a2c22160fd08cf61bc87c3158ca503f693d5fda534b375397d94e7a5", @generic="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", @generic="c6f7c5b183f7d0af47c5916b9f7e9017db195533c508ee7ad2c777e1eaf08d4b92281ead73ccbf53c3d41fb4d13dfa94f7c6ff516316f6170e9739a40ec3ac4b628c875b5b611834dad89811b2b747c3d36c2a0a3a30d908bd13fdd53ed8869babfb5cb1d290684d2cec34c5e7d358893ab00aa53800f024a51999d48f1f7c01b9d46406b900a0037a91a2393784ff82194712f19dd145bce5a08a827ecdca9eccc2d28f9f8f3976d16bd15cea091f358d2f63bededc8669"]}]}, 0x214}], 0x1}, 0x0) (fail_nth: 7) 2.073652589s ago: executing program 1 (id=1861): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101090, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x7, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xfff2, 0xa}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x12) sendto$inet(r0, &(0x7f0000000300)="ab", 0x34000, 0xfcff, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') chdir(&(0x7f0000000100)='./file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x1201080, 0x0) pivot_root(&(0x7f0000000080)='./file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') 1.99923598s ago: executing program 1 (id=1862): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) read$snddsp(r1, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) io_uring_enter(r2, 0x4e19, 0xca91, 0x1a, &(0x7f0000000300)={[0x6]}, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000002c0)=[@window, @mss, @mss={0x2, 0x8}, @window, @window={0x3, 0x3, 0x5}, @timestamp, @mss={0x2, 0x9}, @timestamp], 0x2000000000000135) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0x440) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f00000004c0)="3ce2de4d8d957a8de4e490b6cd03b988d4edef164bd3377aa381b5f50b7ca414516489f78c", 0x25, 0x805, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x11}, 0x4008050) mkdirat(r2, &(0x7f00000000c0)='./file0\x00', 0xc2) setsockopt$MRT_PIM(r2, 0x0, 0xcf, &(0x7f0000000080)=0x3, 0x4) write$bt_hci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e0021ca63d3010649993b960a83cc8d1be7e67c79b102604741f87832862b767810617664d67742eb94d5c13144697eb51d9ed2df5bc94cb404ab257874f496479ea9e5593c20ab210f87a27ca0a0ef0a61c97c7b7b376a4b7e3824214a563e46fb87808e9e78d5a0a36cc73e7c5f19a1cfb4f14439b3ccdf02064c19b2a9ffc6c48fb2c48aa802cf74eacec76965fdfa0ca70236de6fe6e25ad890490578c8ab84f5c49d5b3300000000000000000000000000c0f07ae1bb7d33c08a879d7b830cb023bc81250467cfe4300a6dd21c106851404f4662fe2bd47d6c9be9727722ff1de27b"], 0x8) 1.998814542s ago: executing program 1 (id=1863): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000380), 0xc1100, 0x0) ioctl$DVD_WRITE_STRUCT(r0, 0x5390, &(0x7f00000003c0)=@bca={0x3, 0xbc, "9ad1e58ca182cd4b6b588fe0cc5cfdd90ca0e9e9fb68ff30c024d9562055b1e2380edf2fb28fd3f9e7612c691c3c10e12af7a6f3a50e821c3314dab5241397b3ddca38f8f1533c66ab7e05279f7271f1b8a7103efc4fea7bd0d8de4077d224c44ec67e048e9e689cfff6a36fac22bfb684860440c01a67f233e1c36547e205f66843fb04e2a53fdd1f798492953645be0eefe089e00ed8a29c6116e782e9aa696ef68ee6516f4bfdec92b3b42333cc22240aa00a7b380053bbcd6c8d"}) syz_emit_ethernet(0x4a, &(0x7f0000000040)=ANY=[@ANYRES8=r0], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x161000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @private=0xa010101, 0x4e23, 0x3, 'sh\x00', 0x1, 0x7, 0x49}, 0x2c) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @loopback, 0x4e21, 0x3, 'lc\x00', 0x19, 0x81, 0x19}, {@local, 0x4e21, 0x2, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000080)={@val={0x0, 0xf7}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@igmp={{0x5, 0x4, 0x0, 0x3d, 0x3f, 0x67, 0x0, 0x60, 0x2, 0x0, @loopback, @remote}, {0x22, 0x7, 0x0, @multicast2, "5bf75589fa3c9fba0a4d488101c2675b63edb26929862e0ffccb91b3508fd8460da4c9"}}}}, 0x4d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000140)=ANY=[@ANYRES64=r1]) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) keyctl$set_timeout(0xf, 0x0, 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0xc, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1.379288796s ago: executing program 0 (id=1864): r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000100)=0x800400, 0x4) (async, rerun: 32) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @empty}, 0x1c) (rerun: 32) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e24, 0x9, @empty, 0x4}], 0x1c) (async, rerun: 32) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2e, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6}]}) (async, rerun: 32) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002cc0), 0x100, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000002d00)=0x1c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x5, 0x186, [0x0, 0x200000c0, 0x20000346, 0x2000049c], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x1, [{0x3, 0xc, 0x9, 'team0\x00', 'lo\x00', 'ip6gre0\x00', 'ip6erspan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0x0, 0x0, 0xff], @broadcast, [0x0, 0xff, 0xff, 0xff], 0xae, 0xae, 0xf6, [@connbytes={{'connbytes\x00', 0x0, 0x18}, {{[{0x8}, {0x8000000000000000}], 0x0, 0x2}}}], [], @common=@ERROR={'ERROR\x00', 0x20, {"627287d1a6ed1ad84142b485f457f1cf87758fcae8dc8059d2f34797536c"}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}]}, 0x1fe) (async, rerun: 64) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (rerun: 64) ioctl$KVM_GET_EMULATED_CPUID(r4, 0xc008ae09, &(0x7f0000000080)=""/161) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000280)={0x20, r8, 0x1, 0x0, 0x0, {0x21}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x20}}, 0x0) (async, rerun: 64) openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x2c0080, 0x0) (rerun: 64) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x1}) ioctl$HIDIOCGCOLLECTIONINDEX(r4, 0x40184810, &(0x7f0000000280)={0x1, 0x0, 0x6, 0xfffffe00, 0x2, 0x7}) 1.172195424s ago: executing program 3 (id=1865): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{&(0x7f00000004c0)={0xa, 0x4e1d, 0x1, @mcast2}, 0x1c, 0x0}}, {{&(0x7f00000007c0)={0xa, 0x4e24, 0x0, @mcast1, 0x10001}, 0x1c, 0x0, 0x0, &(0x7f0000000840)=[@flowinfo={{0x14, 0x29, 0xb, 0x401}}], 0x18, 0xf5ff}}], 0x2, 0x4040845) 1.171972518s ago: executing program 3 (id=1866): socket$inet6_sctp(0xa, 0x801, 0x84) openat$nullb(0xffffffffffffff9c, &(0x7f0000000440), 0x180, 0x0) r0 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x80, 0x100, 0x2, 0x335}, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0x3, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) io_uring_enter(r0, 0x47ba, 0x9dd4, 0x0, 0x0, 0x46) (fail_nth: 12) 1.1120508s ago: executing program 3 (id=1867): r0 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x4000000, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x58}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x2000000000000072, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x9, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_xfrm(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025bd7000000000000000000000000000000000000300000006"], 0x34c}}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/49, 0x31}, {&(0x7f0000000440)=""/233, 0xe9}], &(0x7f0000000340)=[0x19, 0x0, 0x1b36, 0x6], 0x2}, 0x20) 608.987425ms ago: executing program 0 (id=1868): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='westwood\x00', 0x9) sendmmsg$inet(r0, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000bc0)="23004e4ee760d48ddc6b7a1ebfc6e0276028840fb20d526ffaaeace75a07a653ee918f67beb970cd36769470f7acb5cd5becfa3839cec05a81f9488931e0a9ba9a246f45fee8b5240bd1e078539b56973bfb", 0x52}], 0x1}}], 0x1, 0x0) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab", 0x3a, 0x0, 0x0, 0x0) 607.647621ms ago: executing program 0 (id=1869): sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) r0 = openat$ttynull(0xffffffffffffff9c, 0x0, 0x80080, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(0x0) symlink(&(0x7f0000000100)='./file2\x00', &(0x7f0000000140)='./file1\x00') sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10100}, 0xc, &(0x7f0000000080)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x12}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWSETELEM={0x5628, 0xc, 0xa, 0x600, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x55f4, 0x3, 0x0, 0x1, [{0x258, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY={0x30, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7fff}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY_END={0x1fc, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0xe6, 0x1, "c6a41f4ee32eb9f15d8ec428848037721ffc94b15b6cb6a5d0c60724b64cb8cf5f2fd30b1de9f7a25002fba6ea71191ead0c61987564170040aa0503eab1f88cbef8d4aa6fa1f527bccd0b0fc0a053b1870a40494f973f6b2a6b45ea1bb47850a682d0e06472455df729c4423d05af6321ca0722da024db3de2ec7bba70193854af800b4ae6f0d8166beeedb82ca225e58ea72cfd46b6bf5321352709c1ad6f2a0ca5f828e106bb9b007d90a1b6400dce72d52a1fcf940ee1527c9ec40629de94fdc05a9b00280641a9f1abf373453d6c353fb35c3392ec096912235654a15dc47e2"}, @NFTA_DATA_VALUE={0x8e, 0x1, "409c49d711d38fda96bf83cfcbcf3223f83a86adbad6abb2074cb982f0da49a847efca6952fcb99081d86a446cee88cc6305b4cab82f8248b790dd2291e6ca94721112cea39a54ec358a00c435930b6e1903a4c227cf415d90110af2c6a3ff108f0a175bbabd4a710de4d288ce02ef8c1124343ab8a034434ac8c36880d61a34da1c6d4e047cfaaa26c2"}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7ffffffffffffff8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}]}, {0x33dc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x2098, 0x7, 0x0, 0x1, @target={{0xb}, @val={0x2088, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x1004, 0x3, "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"}, @NFTA_TARGET_NAME={0x9, 0x1, 'DSCP\x00'}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xb, 0x1, 'NETMAP\x00'}, @NFTA_TARGET_INFO={0x5a, 0x3, "85750da413533350e0026e7ad6767e1a0cfc8519d66d7ac53f51b21c2652582256964a6d015bd962eaaf7cb58bcc850cb95125fb35aa8768353bd61748f669c70aa10a279e3ea71a50af59b42cd751c38197e7bec65f"}, @NFTA_TARGET_INFO={0x1004, 0x3, "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"}]}}}, @NFTA_SET_ELEM_KEY={0x1340, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x103, 0x1, "b5f4663ca1b9fb6eadf9a2a8c514be3630d686eeca0903f6e648b7ba6c1c9ac369a324a9e6114265ee252baa38d4bb794d67be1602a1102b5318f5df1a8d3b9f5f76c250badd2d5af9129ed4015e493b1b3c454554a113ea0eba2689831228b0a2b0af4defb66667a82ae965084b444b0ca012a009202d3d2fa84506991c9d9445f42aa6032846b90c87ec857a62b0dfa1cc313475df69ddf9c9da53fe96c10ebf8fb9d7869af3ee4bee0778ff8cb5c72b0b59683ac19dce53faf379a4d383f79ada5cabbe5df97e1f4bbbf085e56abe836aeb16ea501dfe561353aad69ce037abed4e95267c8c0897a101c7625fc3b0a05603ed25e3c05456bbdca1a56674"}, @NFTA_DATA_VALUE={0xe4, 0x1, "2d90a0b94aff57214e21d02d2fd3a9f651a5e8cd4ea3f33a7abd1dad3c2dfca44ef2b3067558e83efdc3c5f701a49d74b6b64161b92ba799b4c18129e9b0de3f0f7589da9499a3eda121eb51020a578d0b33d20ec2c7219e2abf03bc3406868b1e3fea77b58dad90542ea40135d3ccec8a8d374b7bfccb82f222b686fed0fdf6ae921078a700df7c2761d8bbe34cd75d7e0a572fdd335216de600ddd32f19f2ad2489fda86c0c8bae92c3c9c0e7819f97b69ee47deb6b3beed69793e362b5fd6043afa424d5bf9b47f28de43fc20ce0c24711f042eba9b8ff64345b3b4570b7f"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}, {0x204, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x84, 0xb, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_CT_DIRECTION={0x5}]}}}, {0x48, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0xa1}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0xbc}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_USERDATA={0x102, 0x6, 0x1, 0x0, "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"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @immediate={{0xe}, @void}}, @NFTA_SET_ELEM_USERDATA={0x33, 0x6, 0x1, 0x0, "0d5bd944ca135f4db3180283139f348994dd6a76bdcf4c08959afd8b359896ddc709fc8b04e5e7bb05f3d534c7530e"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0xb420380cf6c5e9d6}]}, {0x1d8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x14c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x99, 0x1, "844c6b3288476782e1a3db3b3f9489f14d32a09f12b9b328f39536eb3589f0780c92bb8d1f29f71e7517645a473df8c32d517891bb484898d8a286f704891b212af7dfe5f68dfecbf528e4502ce8e7226c3693840a199582811c98c1191a110cfb5029d7642af5a51140b38481040f4f5c6583d20105e64a8cc92a9831be25aec15f3e19d421399378a75d647de079cab1a1d0c1e4"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x80, 0xb, 0x0, 0x1, [{0x7c, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x6c, 0x2, 0x0, 0x1, [@NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x41}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffff9}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0xff}]}}}]}, @NFTA_SET_ELEM_FLAGS={0x8}]}, {0x8c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_EXPRESSIONS={0x70, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x48, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x10}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x15}, @NFTA_CT_KEY={0x8}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_CT_DIRECTION={0x5}]}}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}]}]}, {0xa0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x60, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0x4c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_LEVEL={0x8, 0x3, 0xab}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x60}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0xe7}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x26}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_SET_ELEM_KEY={0x30, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}]}, {0x12c8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0x121c, 0xb, 0x0, 0x1, [{0x10fc, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x10f0, 0x2, 0x0, 0x1, [@NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_CMP_DATA={0x10dc, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x20, 0x1, "2b769e0c0147b3daf35a3f28c79e470b8af9a3428a8730d28bf2c4c4"}, @NFTA_DATA_VALUE={0x27, 0x1, "7fee985fb19b40e568fc8f1b2d1242c389ba564d3654dabdba0fcd72367d0d2d88ff21"}]}]}}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x20, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x15}]}}}, {0x64, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}, {0x70, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x60, 0x2, 0x0, 0x1, [@NFTA_BITWISE_MASK={0x4c, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x47, 0x1, "5d3397c1a3c7a27213027e17c57e8221837bf896cbcc5320f8fb0186e3a27801bfc797873b684035c596e6830922e3f1a840919c986a59b1b4ded19a15a6232be354f7"}]}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x10001}]}}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_KEY_END={0x88, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x4f, 0x1, "ce7b33bf28e54bb5e35e51bb2e729c3515e04754208452bc005538bb3c5f69740b00f50b92f9156837b52c7a425f11c123230b0de389a25d5e59d8ed485ef1723824b29135d9ec47fad2a5"}]}]}, {0x498, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x80, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_KEY_END={0x274, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa4, 0x1, "9bad7c80980ac7fc4cd4dfb218f8d7436baf551a58d27a27aa289ee55264237a0b80e91c7cafa14dee6cbf6a6291007a3dfee503eec4c1a22fac84a253485d9760d16ba8d56f3aac870f082f5744e2527dd12db1dabc21e9efe21e3cd543ca5d51e6f8197c37dde09d0bdefc7855f3756d460295bd3d1c7c2e42dc0029559064fdadf7e84e632f4e46c8b6552c7aa47c53aff1923383e84aa0233e1e3e11632a"}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x89, 0x1, "8fbc675cb02f3e729080b18df820b0faba296b3a7977aec3f6e2270618cb65972a2d46201850ab4cad04316d036df694a9cf2cee4ef3512453f50bcf6251ebdcb3ed62dee618618e3b745585572fd57bb912fec76eae6a534c51eeafb479de3fad070a9d60ee10757c218cf32abab370947af65a99b1083ebb74bf642f42f5771515aaab98"}, @NFTA_DATA_VALUE={0xb9, 0x1, "d8be00bb2cc1ea2d27cea5884f8de2f9adccadb5ea7db865eb6a0dc1f89cd702ae9289bba486008db2293f076fbcf7a747cf30ed41f0e96792f460a9c4e0b1b5580bfcccb34eede13f919e02466caada432080c528e142fb12af15476de40169f0a10a651432edc545810c0343b32f013fb0aca32513e1e9e0cf9964c294ce66e89ad5bb323fcd180749a82d7a184819a991f1a9cc3c6334aeed01bea93453a77f06a6052d96600d939da034de2ca2739239224778"}, @NFTA_DATA_VALUE={0x20, 0x1, "b6adc501196316dfbec552675dff80c03e898d138ea59b3c43dbba0f"}, @NFTA_DATA_VALUE={0xa, 0x1, "01c8d286b97b"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4d68}, @NFTA_SET_ELEM_KEY={0x170, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x2e, 0x1, "ee0b95210300f3649328a74fcf0cf09797278d54919a1dd6949d7489550638700b0357e53602d493c67c"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xba, 0x1, "1a68d8b1f4e4642d90def58b24c272e61885408a26e24a9c75d3a2df644e82b9c40d2fbe32ce093ea086c54b36fe04254ab0f418c645e828ceea521e13a0585aadd2724083df80553e3f52bc398a2ec520ae3c10e1800aca74f38e00ad43d146b366259e266da8c75da8d473fa5cfcd70efc2fda80883b0fa73f47fb460744042348ab40c2dd6056beb3961e2507267d00d614fe3258cd151a4165752426a1f67b7d97de5ac865c1bc057351543be52351bcb01e7191"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xcd}]}, {0x354, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x20, 0x7, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8}]}}}, @NFTA_SET_ELEM_USERDATA={0xf4, 0x6, 0x1, 0x0, "a9132938054cb7325a434ca942578f498e05f6e8e6d31888cfd010ceb1076679ba332da93dfb9c75dbf5a814666c408b98b138a35bc7e81fa44dbbb1b0840fa85d12a41b9bc10db65c384a1623e731786e17726139d337b2b3c1fa9890a7d491574ca90066ed4a72a71fb082f4e877619935f50bf52f99cbf3bea781232e8ad24dc5ffab2f4533266327b381366cf8e5184eb56c335577fe7fe081510d9661bbbd265a94fd26b97fdebce6ae9c3b8358787dbe3a86c6bf934112f1fd5e512e12f55907fb2103b816c912cca0b6665a84153c2d8172a4c1e9ed07928a6dbb2e65309933d3ad12b44e968e17f9fbfcf0db"}, @NFTA_SET_ELEM_DATA={0x190, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x2c, 0x1, "deb6a9a80b9f5a43be79051bfcc35e8e5b40575a84fc7eaf80a309532610e1d8355b37b13c6affde"}, @NFTA_DATA_VALUE={0x12, 0x1, "606d1a6aeee7624e7bf0cec06b9e"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xf6, 0x1, "d50843f7f7d06a379b47b96f3c75f1593131f222bd32441b1653dbb6e44a90c4c4c9aa1ff7e87fce5d7fb441d099fa03be3c3ceddb8d409102ab835b3502cf75c11cbc7252e02ebf382a4eae8728573d37ba94fe5f3acd7f7239058f6ed49b697643a232ad032aac37dd37f6f6bef41173ef6eb7af930e00a10232821a3c175b3783bec24c04cf67e41bfc977a5b3de923a519168970cf04bb892ca5e3c1ff49c73d24c29b415b1866604c118144afba49dc0e6c8975ab1eaac731c1ea83b1d69fd84616718f5b7133dc1193fc0770ba2c6fab32b5c00a84addf3afdf860744fe304e2b613343f1483fee907e4352c6aef4d"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_USERDATA={0x6e, 0x6, 0x1, 0x0, "87b9c8079f2d7cdcb7e27b7df3d22aa44755da5435a05b8e788caeed97fd51be5d5952f48840cc785ee5a18b434119b4403024653d2775870ea1b3f501f58d1d4340eafd252df3bfe35a94e1ae8b7ff1b8f100f744521c34de6d5a076d537cebc750389368c15106ccdb"}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @ct={{0x7}, @void}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xfffffffffffffffa}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x54c, 0x9, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_USERDATA={0xa0, 0xd, 0x1, 0x0, "da3ed142d80a5c650f86d32c0b59da1362677f48e3e571b44ed5774fd8d5f28a62b01287f4a8b16540ae8d01064bded096cf8694404db5f24dda0b117ef86851509658d7b00a93b3477991577342ae39ef7fbc4a7bcdb80c463be2db5583eb7b4f4693f8b5732a7723d5b28df8119488892dca02cc408b63c2b65ec243390b87757c5ccfbb584fe7145490d879b46788aacd9d9353040268c3831c64"}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x3}, @NFTA_SET_EXPRESSIONS={0xbc, 0x12, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x2c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x13}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x11}]}}}, {0x4c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x13}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x12}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_EXPRESSIONS={0x3a8, 0x12, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x31}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x11}]}}}, {0x254, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x244, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xc, 0x1, 'physdev\x00'}, @NFTA_MATCH_INFO={0x84, 0x3, "1ef3d08adbfdab0506be2fe4d497efe1fcbe81e9a2e9f0759fe8dbd061dfaf7db65c99ee38c32e9b1e5874a45ef1211dd9f52cc0f19e418386f3a45a1e12dc15ae516f73b426be15fc4ab9000c5ac2d6b291d4d9f87f22eb9ab716c0a56cb375ade2e07aba6bd970b9e9358faaf7248d11fdf0d4141abbcece4ffb8ee36a8b12"}, @NFTA_MATCH_INFO={0x84, 0x3, "294ab2aa0e8c9e8d9a38348b0eb6bbe5f7aeb88b48dd000558ed48b7e9d11755dddc4c71a09f8fc5a41e4c1cf27028c78fd73ae8d2a1abe9f5c9f0ca61dced0c4803a9e7dcd075e489d2bb3869c108d85e0172fa6fd3c3a4835732413279c0ce493b7a227b3218809f2485d5e36ae8873604ea5497b4a8b3005ed8a3f3bb057e"}, @NFTA_MATCH_INFO={0xbc, 0x3, "fabe96c7782f88581308c8aed1464993a68af6b22436c9095e1f45c030f837c2e4b56f87f76bc321990660c1ef225add67e20d8551f51846b4bc34a2bdbdae0bb7e74e5568445a427b71d7a2f0ab7df56175cad26a05356c0b11c4b8d2e2d929f7c43c6e8258da8af415580e7f1f20b029b92f66c5d0f801f85461c475033f1aab15be48a0f29cdeb1b18c730d6e644c1a96d2d105a03011ece02f7632106f638ba9d7dc1e4cd4a3b365831dd6d40f0c04404eaacd72b2e3"}, @NFTA_MATCH_INFO={0x6e, 0x3, "d213bdddd969b042fb9150736273a127005d39711c4379a44547dc65e509594f897fdf77dedb7a337e49855a41af7fb4a2ba030ac1613ce39b427a77df3965d7b1ac3222cbf5cd2a2e4ff182335ec673f889b4cc73835269a19130813a7668b2bc130bec3e3f7c4ca601"}]}}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x24, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_SET_ID={0x8}]}}}, {0x70, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x60, 0x2, 0x0, 0x1, [@NFTA_RANGE_TO_DATA={0x4c, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x46, 0x1, "f3ca1b47124e22b17766f4c47fa14ad6085bf190e99f39d8e7b8195d5d2d882b6c990f6550046fc688bec76e70a7dc6c8562d97929900fccca2e48d114cf3f1f84bf"}]}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}, {0x34, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_MODE={0x8}, @NFTA_TUNNEL_DREG={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}]}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x3}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELOBJ={0x2c, 0x14, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWFLOWTABLE={0x244, 0x16, 0xa, 0x400, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0x1d4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'pim6reg\x00'}, {0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'team_slave_0\x00'}, {0x14, 0x1, 'macsec0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'team0\x00'}, {0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'team_slave_1\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}, {0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'gretap0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'bridge0\x00'}, {0x14, 0x1, 'batadv_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vlan1\x00'}, {0x14, 0x1, 'team_slave_0\x00'}, {0x14, 0x1, 'vlan0\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x5e6c}, 0x1, 0x0, 0x0, 0x10}, 0x4000) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaaabb08004500452c00000000002f9078ac1e0001e00000210000655838689078040000000000000086ddffff00000000"], 0xfdef) 501.331506ms ago: executing program 0 (id=1870): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x0, 0x10100}, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r1}, 0x10) socket$kcm(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000005e0001000000", @ANYRES32=r4, @ANYRES8=r2], 0x1c}}, 0x0) 500.868052ms ago: executing program 0 (id=1871): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0xc8) r1 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x480, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x1c5, 0x0, 0x5}]}) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000840), r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000880)=0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000800000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000032ce8500000004000000850000000500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2400000000000000000000000700000001441009"], 0x28}, 0x0) r6 = socket(0x840000000002, 0x3, 0x100) connect$inet(r6, &(0x7f00000005c0)={0x2, 0x7fe, @remote}, 0x10) sendmmsg$inet(r6, &(0x7f0000005240)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xfffffdef}], 0x4000095, 0x401eb94) sendmsg$NFC_CMD_VENDOR(r0, &(0x7f0000000940)={&(0x7f0000000800), 0xc, &(0x7f0000000900)={&(0x7f0000000100)=ANY=[@ANYBLOB="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", @ANYRES16=r4, @ANYBLOB="010026bd7000fedbdf251d00000008000100", @ANYRES32=r5, @ANYBLOB="08001d000001000008001e0008000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x800) 352.195846ms ago: executing program 0 (id=1872): openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000240)={{0x1, 0x1, 0x18}, './file0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x15, 0x3, 'wrr\x00', 0x0, 0x4, 0x75}, 0x2c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'lc\x00', 0xb, 0x323b, 0x3a}, {@rand_addr=0x64010102, 0x4e23, 0x0, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) 191.102265ms ago: executing program 3 (id=1873): llistxattr(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYBLOB="01"]) r1 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x181) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x40045731, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) add_key$fscrypt_v1(0x0, &(0x7f00000002c0)={'fscrypt:', @desc1}, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x4a, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaabb0180c200000088e54800003c00000000000190780a010102ac1414aa440c2040000004f5000000010c0090780903000045140004006600097f2107ffac1e000100"], 0x0) 0s ago: executing program 3 (id=1874): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000fff5790172000040"]) 0s ago: executing program 3 (id=1875): r0 = socket(0x10, 0x803, 0x0) recvmsg(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)=""/120, 0x78}, {&(0x7f0000000240)=""/75, 0x4b}, {&(0x7f00000002c0)=""/52, 0x34}, {&(0x7f0000000300)=""/255, 0xff}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f0000000440)=""/160, 0xa0}], 0x6, &(0x7f00000015c0)=""/246, 0xf6}, 0x40000000) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4957, &(0x7f0000000480)={0x0, 0x0, 0x2}, &(0x7f0000000040), 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc0189436, &(0x7f00000018c0)=ANY=[@ANYBLOB="0000000000000000000000000000000003000000000000000000000000000000c8f0ed898bd8f45e5d84a6eb93bec9802622fee267107143b91691ae82200170867e8bea7f1569c52fc2"]) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001780)={'ip6_vti0\x00', &(0x7f0000001700)={'syztnl0\x00', 0x0, 0x2f, 0x6, 0x7, 0x2, 0x4, @private0, @mcast2, 0x20, 0x1, 0x400, 0x1ff}}) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000001880)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001840)={'syztnl0\x00', &(0x7f00000017c0)={'syztnl0\x00', r2, 0x2f, 0x2, 0x81, 0x6, 0x51, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x7800, 0x7800, 0x8, 0x5}}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x1f00, 0x12) r4 = socket(0x200000100000011, 0x3, 0x3) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000001400b59500000000000000000a000000", @ANYRES32=r5, @ANYBLOB="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"], 0x40}}, 0x0) kernel console output (not intermixed with test programs): acklog [ 158.072384][ T6297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.075772][ T63] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.350185][ T9774] FAULT_INJECTION: forcing a failure. [ 158.350185][ T9774] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.353750][ T9774] CPU: 3 UID: 0 PID: 9774 Comm: syz.0.1431 Not tainted 6.12.0-syzkaller-09734-g445d9f05fa14 #0 [ 158.357424][ T9774] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 158.360710][ T9774] Call Trace: [ 158.361714][ T9774] [ 158.362488][ T9774] dump_stack_lvl+0x16c/0x1f0 [ 158.363898][ T9774] should_fail_ex+0x497/0x5b0 [ 158.365352][ T9774] _copy_from_iter+0x2a1/0x1560 [ 158.366985][ T9774] ? trace_lock_acquire+0x146/0x1e0 [ 158.368551][ T9774] ? __alloc_skb+0x1fe/0x380 [ 158.370273][ T9774] ? __pfx__copy_from_iter+0x10/0x10 [ 158.372217][ T9774] ? __virt_addr_valid+0x1a4/0x590 [ 158.374087][ T9774] ? __virt_addr_valid+0x5e/0x590 [ 158.375933][ T9774] ? __phys_addr_symbol+0x30/0x80 [ 158.377717][ T9774] ? __check_object_size+0x488/0x710 [ 158.379630][ T9774] netlink_sendmsg+0x813/0xd70 [ 158.381363][ T9774] ? __pfx_netlink_sendmsg+0x10/0x10 [ 158.383269][ T9774] ____sys_sendmsg+0xaaf/0xc90 [ 158.385015][ T9774] ? copy_msghdr_from_user+0x10b/0x160 [ 158.386827][ T9774] ? __pfx_____sys_sendmsg+0x10/0x10 [ 158.388699][ T9774] ___sys_sendmsg+0x135/0x1e0 [ 158.390320][ T9774] ? __pfx____sys_sendmsg+0x10/0x10 [ 158.392158][ T9774] ? __pfx_lock_release+0x10/0x10 [ 158.393987][ T9774] ? trace_lock_acquire+0x146/0x1e0 [ 158.395925][ T9774] ? __fget_files+0x206/0x3a0 [ 158.397659][ T9774] __sys_sendmsg+0x16e/0x220 [ 158.399351][ T9774] ? __pfx___sys_sendmsg+0x10/0x10 [ 158.401229][ T9774] do_syscall_64+0xcd/0x250 [ 158.402895][ T9774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.405030][ T9774] RIP: 0033:0x7fdc59980809 [ 158.406649][ T9774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.413546][ T9774] RSP: 002b:00007fdc5a74f058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 158.416585][ T9774] RAX: ffffffffffffffda RBX: 00007fdc59b45fa0 RCX: 00007fdc59980809 [ 158.419380][ T9774] RDX: 0000000000008080 RSI: 0000000020000080 RDI: 0000000000000003 [ 158.422226][ T9774] RBP: 00007fdc5a74f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 158.425073][ T9774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.427916][ T9774] R13: 0000000000000000 R14: 00007fdc59b45fa0 R15: 00007ffc0600c4a8 [ 158.430754][ T9774] [ 158.461828][ T9776] tipc: Started in network mode [ 158.463177][ T9776] tipc: Node identity , cluster identity 4711 [ 158.464923][ T9776] tipc: Failed to set node id, please configure manually [ 158.466830][ T9776] tipc: Enabling of bearer rejected, failed to enable media [ 158.534889][ T2298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.797375][ T63] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 158.821390][ T6012] IPVS: starting estimator thread 0... [ 158.822001][ T9789] FAULT_INJECTION: forcing a failure. [ 158.822001][ T9789] name failslab, interval 1, probability 0, space 0, times 0 [ 158.829607][ T9789] CPU: 0 UID: 0 PID: 9789 Comm: syz.2.1437 Not tainted 6.12.0-syzkaller-09734-g445d9f05fa14 #0 [ 158.833363][ T9789] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 158.837259][ T9789] Call Trace: [ 158.838503][ T9789] [ 158.839606][ T9789] dump_stack_lvl+0x16c/0x1f0 [ 158.841360][ T9789] should_fail_ex+0x497/0x5b0 [ 158.843115][ T9789] ? fs_reclaim_acquire+0xae/0x150 [ 158.844991][ T9789] should_failslab+0xc2/0x120 [ 158.846739][ T9789] __kmalloc_node_noprof+0xd1/0x510 [ 158.848642][ T9789] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 158.850642][ T9789] ? __nf_unregister_net_hook+0x2d5/0x680 [ 158.852722][ T9789] __kvmalloc_node_noprof+0xad/0x1a0 [ 158.854649][ T9789] __nf_hook_entries_try_shrink+0x15f/0x400 [ 158.856828][ T9789] __nf_unregister_net_hook+0x2e5/0x680 [ 158.858860][ T9789] nf_unregister_net_hooks+0x11b/0x160 [ 158.860993][ T9789] nf_ct_netns_do_put+0x10d/0x2f0 [ 158.862837][ T9789] nf_ct_netns_put+0x71/0x80 [ 158.864543][ T9789] ip_vs_unlink_service+0x808/0xba0 [ 158.866470][ T9789] ? __might_fault+0xe3/0x190 [ 158.868173][ T9789] ip_vs_flush+0x1c0/0x230 [ 158.869833][ T9789] do_ip_vs_set_ctl+0xe8e/0x11c0 [ 158.871679][ T9789] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 158.873659][ T9789] ? nf_sockopt_find.constprop.0+0x221/0x290 [ 158.875840][ T9789] ? __pfx_lock_release+0x10/0x10 [ 158.877697][ T9789] ? rcu_is_watching+0x12/0xc0 [ 158.879471][ T9789] ? __mutex_lock+0x1cc/0xa60 [ 158.881168][ T9789] ? __mutex_unlock_slowpath+0x164/0x690 [ 158.882629][ T9789] ? nf_setsockopt+0x8a/0xf0 [ 158.883843][ T9789] nf_setsockopt+0x8a/0xf0 [ 158.885038][ T9789] ip_setsockopt+0xcb/0xf0 [ 158.886202][ T9789] sctp_setsockopt+0x16a/0xb810 [ 158.887469][ T9789] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 158.889223][ T9789] ? __pfx_sctp_setsockopt+0x10/0x10 [ 158.890605][ T9789] ? selinux_socket_setsockopt+0x6a/0x80 [ 158.892075][ T9789] ? sock_common_setsockopt+0x2e/0xf0 [ 158.893457][ T9789] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 158.894992][ T9789] do_sock_setsockopt+0x222/0x480 [ 158.896303][ T9789] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 158.897737][ T9789] ? lock_acquire+0x2f/0xb0 [ 158.898894][ T9789] __sys_setsockopt+0x1a0/0x230 [ 158.900160][ T9789] __x64_sys_setsockopt+0xbd/0x160 [ 158.901509][ T9789] ? do_syscall_64+0x91/0x250 [ 158.902729][ T9789] ? lockdep_hardirqs_on+0x7c/0x110 [ 158.904070][ T9789] do_syscall_64+0xcd/0x250 [ 158.905458][ T9789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.906983][ T9789] RIP: 0033:0x7f86a1180809 [ 158.908145][ T9789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.913109][ T9789] RSP: 002b:00007f86a1f34058 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 158.915246][ T9789] RAX: ffffffffffffffda RBX: 00007f86a1345fa0 RCX: 00007f86a1180809 [ 158.917285][ T9789] RDX: 0000000000000485 RSI: 0000000000000000 RDI: 0000000000000003 [ 158.919314][ T9789] RBP: 00007f86a1f340a0 R08: 0000000000000000 R09: 0000000000000000 [ 158.921338][ T9789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.923352][ T9789] R13: 0000000000000000 R14: 00007f86a1345fa0 R15: 00007ffde10de6f8 [ 158.925433][ T9789] [ 158.927121][ C0] vkms_vblank_simulate: vblank timer overrun [ 158.964265][ T63] usb 5-1: Invalid ep0 maxpacket: 16 [ 159.034293][ T9790] IPVS: using max 38 ests per chain, 91200 per kthread [ 159.099511][ T63] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 159.104923][ T6012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.115124][ T9798] trusted_key: syz.2.1441 sent an empty control message without MSG_MORE. [ 159.254168][ T63] usb 5-1: Invalid ep0 maxpacket: 16 [ 159.256320][ T63] usb usb5-port1: attempt power cycle [ 159.574219][ T66] Bluetooth: hci2: Opcode 0x206a failed: -110 [ 159.574235][ T5957] Bluetooth: hci2: command 0x0c1a tx timeout [ 159.604232][ T63] usb 5-1: new low-speed USB device number 14 using dummy_hcd [ 159.624587][ T63] usb 5-1: Invalid ep0 maxpacket: 16 [ 159.754274][ T63] usb 5-1: new low-speed USB device number 15 using dummy_hcd [ 159.776058][ T63] usb 5-1: Invalid ep0 maxpacket: 16 [ 159.778361][ T63] usb usb5-port1: unable to enumerate USB device [ 159.841374][ T9806] FAULT_INJECTION: forcing a failure. [ 159.841374][ T9806] name failslab, interval 1, probability 0, space 0, times 0 [ 159.844766][ T9806] CPU: 0 UID: 0 PID: 9806 Comm: syz.3.1442 Not tainted 6.12.0-syzkaller-09734-g445d9f05fa14 #0 [ 159.847516][ T9806] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 159.850338][ T9806] Call Trace: [ 159.851249][ T9806] [ 159.852050][ T9806] dump_stack_lvl+0x16c/0x1f0 [ 159.853326][ T9806] should_fail_ex+0x497/0x5b0 [ 159.854604][ T9806] ? fs_reclaim_acquire+0xae/0x150 [ 159.855966][ T9806] should_failslab+0xc2/0x120 [ 159.857232][ T9806] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 159.858657][ T9806] ? security_file_alloc+0x34/0x2b0 [ 159.860044][ T9806] security_file_alloc+0x34/0x2b0 [ 159.861400][ T9806] init_file+0x93/0x480 [ 159.862519][ T9806] alloc_empty_file+0x91/0x1e0 [ 159.863763][ T9806] path_openat+0xe1/0x2d60 [ 159.864962][ T9806] ? hlock_class+0x4e/0x130 [ 159.866179][ T9806] ? __lock_acquire+0x15a9/0x3c40 [ 159.867510][ T9806] ? __pfx_path_openat+0x10/0x10 [ 159.868827][ T9806] ? __pfx___lock_acquire+0x10/0x10 [ 159.870207][ T9806] ? lock_acquire.part.0+0x11b/0x380 [ 159.871637][ T9806] ? find_held_lock+0x2d/0x110 [ 159.873119][ T9806] do_filp_open+0x20c/0x470 [ 159.874511][ T9806] ? __pfx_do_filp_open+0x10/0x10 [ 159.876221][ T9806] ? find_held_lock+0x2d/0x110 [ 159.877558][ T9806] ? alloc_fd+0x41f/0x760 [ 159.878758][ T9806] do_sys_openat2+0x17a/0x1e0 [ 159.880047][ T9806] ? __pfx_do_sys_openat2+0x10/0x10 [ 159.881480][ T9806] ? __fget_files+0x206/0x3a0 [ 159.882743][ T9806] __x64_sys_openat+0x175/0x210 [ 159.884055][ T9806] ? __pfx___x64_sys_openat+0x10/0x10 [ 159.885496][ T9806] ? ksys_write+0x1ba/0x250 [ 159.886723][ T9806] do_syscall_64+0xcd/0x250 [ 159.887941][ T9806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.889522][ T9806] RIP: 0033:0x7fb21e180809 [ 159.890721][ T9806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.895872][ T9806] RSP: 002b:00007fb21eeb6058 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 159.898087][ T9806] RAX: ffffffffffffffda RBX: 00007fb21e345fa0 RCX: 00007fb21e180809 [ 159.900157][ T9806] RDX: 0000000000020840 RSI: 0000000020000880 RDI: 00000000ffffff9c [ 159.902265][ T9806] RBP: 00007fb21eeb60a0 R08: 0000000000000000 R09: 0000000000000000 [ 159.904366][ T9806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.906446][ T9806] R13: 0000000000000000 R14: 00007fb21e345fa0 R15: 00007ffe76b1a8e8 [ 159.909027][ T9806] [ 159.909956][ C0] vkms_vblank_simulate: vblank timer overrun [ 159.976198][ T9809] kvm: emulating exchange as write [ 159.979771][ T9809] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 160.054385][ T5958] Bluetooth: hci3: Opcode 0x206a failed: -110 [ 160.064126][ T5957] Bluetooth: hci3: command 0x206a tx timeout [ 160.140356][ T63] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.399784][ T9840] Bluetooth: MGMT ver 1.23 [ 160.432213][ T9845] overlayfs: missing 'lowerdir' [ 161.177825][ T63] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.243539][ T9854] tipc: Started in network mode [ 161.245008][ T9854] tipc: Node identity , cluster identity 4711 [ 161.246646][ T9854] tipc: Failed to set node id, please configure manually [ 161.248465][ T9854] tipc: Enabling of bearer rejected, failed to enable media [ 161.402499][ T9865] FAULT_INJECTION: forcing a failure. [ 161.402499][ T9865] name failslab, interval 1, probability 0, space 0, times 0 [ 161.406003][ T9865] CPU: 1 UID: 0 PID: 9865 Comm: syz.1.1460 Not tainted 6.12.0-syzkaller-09734-g445d9f05fa14 #0 [ 161.408742][ T9865] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 161.411566][ T9865] Call Trace: [ 161.412458][ T9865] [ 161.413251][ T9865] dump_stack_lvl+0x16c/0x1f0 [ 161.414516][ T9865] should_fail_ex+0x497/0x5b0 [ 161.415767][ T9865] should_failslab+0xc2/0x120 [ 161.417057][ T9865] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 161.418615][ T9865] ? hci_sock_sendmsg+0xdee/0x25e0 [ 161.419919][ T9865] ? __alloc_skb+0x2b1/0x380 [ 161.421156][ T9865] ? __pfx___mutex_lock+0x10/0x10 [ 161.422475][ T9865] __alloc_skb+0x2b1/0x380 [ 161.423672][ T9865] ? __pfx___alloc_skb+0x10/0x10 [ 161.424980][ T9865] hci_sock_sendmsg+0x1a47/0x25e0 [ 161.426298][ T9865] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 161.427734][ T9865] sock_write_iter+0x4fe/0x5b0 [ 161.428995][ T9865] ? __pfx_sock_write_iter+0x10/0x10 [ 161.430384][ T9865] ? bpf_lsm_file_permission+0x9/0x10 [ 161.431796][ T9865] ? security_file_permission+0x71/0x210 [ 161.433671][ T9865] vfs_write+0x5ae/0x1150 [ 161.434809][ T9865] ? __pfx_sock_write_iter+0x10/0x10 [ 161.436185][ T9865] ? __pfx_vfs_write+0x10/0x10 [ 161.437500][ T9865] ? __fget_files+0x40/0x3a0 [ 161.438788][ T9865] ksys_write+0x207/0x250 [ 161.439955][ T9865] ? __pfx_ksys_write+0x10/0x10 [ 161.441326][ T9865] do_syscall_64+0xcd/0x250 [ 161.442568][ T9865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.444110][ T9865] RIP: 0033:0x7f36add80809 [ 161.445336][ T9865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.450508][ T9865] RSP: 002b:00007f36aeb33058 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 161.452756][ T9865] RAX: ffffffffffffffda RBX: 00007f36adf45fa0 RCX: 00007f36add80809 [ 161.454907][ T9865] RDX: 0000000000000008 RSI: 00000000200005c0 RDI: 0000000000000004 [ 161.456945][ T9865] RBP: 00007f36aeb330a0 R08: 0000000000000000 R09: 0000000000000000 [ 161.458965][ T9865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.461095][ T9865] R13: 0000000000000000 R14: 00007f36adf45fa0 R15: 00007ffe852811c8 [ 161.463201][ T9865] [ 161.536079][ T9867] FAULT_INJECTION: forcing a failure. [ 161.536079][ T9867] name failslab, interval 1, probability 0, space 0, times 0 [ 161.539443][ T9867] CPU: 3 UID: 0 PID: 9867 Comm: syz.3.1461 Not tainted 6.12.0-syzkaller-09734-g445d9f05fa14 #0 [ 161.542128][ T9867] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 161.544933][ T9867] Call Trace: [ 161.545812][ T9867] [ 161.546595][ T9867] dump_stack_lvl+0x16c/0x1f0 [ 161.547878][ T9867] should_fail_ex+0x497/0x5b0 [ 161.549129][ T9867] ? fs_reclaim_acquire+0xae/0x150 [ 161.550473][ T9867] should_failslab+0xc2/0x120 [ 161.551719][ T9867] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 161.553121][ T9867] ? rcu_is_watching+0x12/0xc0 [ 161.554372][ T9867] ? security_file_alloc+0x34/0x2b0 [ 161.555743][ T9867] security_file_alloc+0x34/0x2b0 [ 161.557075][ T9867] init_file+0x93/0x480 [ 161.558167][ T9867] alloc_empty_file+0x91/0x1e0 [ 161.559420][ T9867] alloc_file_pseudo+0x147/0x210 [ 161.560715][ T9867] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 161.562138][ T9867] sock_alloc_file+0x50/0x1d0 [ 161.563367][ T9867] do_accept+0x23e/0x530 [ 161.564493][ T9867] ? do_raw_spin_lock+0x12d/0x2c0 [ 161.565816][ T9867] ? __pfx_do_accept+0x10/0x10 [ 161.567119][ T9867] __sys_accept4+0xfe/0x1b0 [ 161.568459][ T9867] ? __pfx___sys_accept4+0x10/0x10 [ 161.569801][ T9867] ? __pfx_ksys_write+0x10/0x10 [ 161.571079][ T9867] __x64_sys_accept4+0x96/0x100 [ 161.572364][ T9867] ? lockdep_hardirqs_on+0x7c/0x110 [ 161.573724][ T9867] do_syscall_64+0xcd/0x250 [ 161.574912][ T9867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.576440][ T9867] RIP: 0033:0x7fb21e180809 [ 161.577675][ T9867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.582795][ T9867] RSP: 002b:00007fb21eeb6058 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 161.585038][ T9867] RAX: ffffffffffffffda RBX: 00007fb21e345fa0 RCX: 00007fb21e180809 [ 161.587147][ T9867] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 161.589214][ T9867] RBP: 00007fb21eeb60a0 R08: 0000000000000000 R09: 0000000000000000 [ 161.591277][ T9867] R10: 0000000000080000 R11: 0000000000000246 R12: 0000000000000001 [ 161.593349][ T9867] R13: 0000000000000000 R14: 00007fb21e345fa0 R15: 00007ffe76b1a8e8 [ 161.595398][ T9867] [ 161.596558][ T2298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.631295][ T9876] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1465'. [ 161.634620][ T9876] FAULT_INJECTION: forcing a failure. [ 161.634620][ T9876] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.635988][ T9878] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1466'. [ 161.638164][ T9876] CPU: 3 UID: 0 PID: 9876 Comm: syz.3.1465 Not tainted 6.12.0-syzkaller-09734-g445d9f05fa14 #0 [ 161.643195][ T9876] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 161.646045][ T9876] Call Trace: [ 161.646926][ T9876] [ 161.647779][ T9876] dump_stack_lvl+0x16c/0x1f0 [ 161.649035][ T9876] should_fail_ex+0x497/0x5b0 [ 161.650280][ T9876] _copy_from_user+0x2e/0xd0 [ 161.651646][ T9876] move_addr_to_kernel+0x68/0x160 [ 161.653016][ T9876] __copy_msghdr+0x386/0x470 [ 161.654235][ T9876] copy_msghdr_from_user+0xc2/0x160 [ 161.655614][ T9876] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 161.657152][ T9876] ___sys_sendmsg+0xff/0x1e0 [ 161.658374][ T9876] ? __pfx____sys_sendmsg+0x10/0x10 [ 161.659742][ T9876] ? __pfx_lock_release+0x10/0x10 [ 161.661077][ T9876] ? trace_lock_acquire+0x146/0x1e0 [ 161.662464][ T9876] ? __fget_files+0x206/0x3a0 [ 161.663687][ T9876] __sys_sendmsg+0x16e/0x220 [ 161.664151][ T5958] Bluetooth: hci2: command 0x0c1a tx timeout [ 161.665165][ T9876] ? __pfx___sys_sendmsg+0x10/0x10 [ 161.668705][ T9876] do_syscall_64+0xcd/0x250 [ 161.669948][ T9876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.671752][ T9876] RIP: 0033:0x7fb21e180809 [ 161.673080][ T9876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.678362][ T9876] RSP: 002b:00007fb21eeb6058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 161.680546][ T9876] RAX: ffffffffffffffda RBX: 00007fb21e345fa0 RCX: 00007fb21e180809 [ 161.682635][ T9876] RDX: 0000000000040004 RSI: 0000000020000780 RDI: 0000000000000005 [ 161.684741][ T9876] RBP: 00007fb21eeb60a0 R08: 0000000000000000 R09: 0000000000000000 [ 161.686826][ T9876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.688897][ T9876] R13: 0000000000000000 R14: 00007fb21e345fa0 R15: 00007ffe76b1a8e8 [ 161.690999][ T9876] [ 161.716094][ T9880] FAULT_INJECTION: forcing a failure. [ 161.716094][ T9880] name failslab, interval 1, probability 0, space 0, times 0 [ 161.719450][ T9880] CPU: 3 UID: 0 PID: 9880 Comm: syz.3.1468 Not tainted 6.12.0-syzkaller-09734-g445d9f05fa14 #0 [ 161.722214][ T9880] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 161.725369][ T9880] Call Trace: [ 161.726543][ T9880] [ 161.727508][ T9880] dump_stack_lvl+0x16c/0x1f0 [ 161.728850][ T9880] should_fail_ex+0x497/0x5b0 [ 161.730164][ T9880] ? fs_reclaim_acquire+0xae/0x150 [ 161.731533][ T9880] should_failslab+0xc2/0x120 [ 161.732771][ T9880] __kmalloc_noprof+0xcb/0x510 [ 161.734038][ T9880] ? __pfx___mutex_trylock_common+0x10/0x10 [ 161.735628][ T9880] ? __kernel_text_address+0xd/0x40 [ 161.737023][ T9880] ? genl_rcv_msg+0x580/0x800 [ 161.738272][ T9880] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 161.740116][ T9880] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 161.741569][ T9880] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 161.743254][ T9880] ? genl_get_cmd+0x195/0x580 [ 161.744635][ T9880] ? __radix_tree_lookup+0x21f/0x2c0 [ 161.746104][ T9880] genl_rcv_msg+0x565/0x800 [ 161.747385][ T9880] ? __pfx_genl_rcv_msg+0x10/0x10 [ 161.748719][ T9880] ? __pfx_tipc_nl_bearer_enable+0x10/0x10 [ 161.750272][ T9880] ? __pfx___lock_acquire+0x10/0x10 [ 161.751670][ T9880] netlink_rcv_skb+0x16b/0x440 [ 161.753057][ T9880] ? __pfx_genl_rcv_msg+0x10/0x10 [ 161.754696][ T9880] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 161.756092][ T9880] ? down_read+0xc9/0x330 [ 161.757274][ T9880] ? __pfx_down_read+0x10/0x10 [ 161.758579][ T9880] ? netlink_deliver_tap+0x1ae/0xd30 [ 161.759972][ T9880] genl_rcv+0x28/0x40 [ 161.761057][ T9880] netlink_unicast+0x53c/0x7f0 [ 161.762318][ T9880] ? __pfx_netlink_unicast+0x10/0x10 [ 161.763710][ T9880] netlink_sendmsg+0x8b8/0xd70 [ 161.764979][ T9880] ? __pfx_netlink_sendmsg+0x10/0x10 [ 161.766373][ T9880] ____sys_sendmsg+0xaaf/0xc90 [ 161.767637][ T9880] ? copy_msghdr_from_user+0x10b/0x160 [ 161.769268][ T9880] ? __pfx_____sys_sendmsg+0x10/0x10 [ 161.770968][ T9880] ___sys_sendmsg+0x135/0x1e0 [ 161.772229][ T9880] ? __pfx____sys_sendmsg+0x10/0x10 [ 161.773739][ T9880] ? __pfx_lock_release+0x10/0x10 [ 161.775138][ T9880] ? trace_lock_acquire+0x146/0x1e0 [ 161.776522][ T9880] ? __fget_files+0x206/0x3a0 [ 161.777805][ T9880] __sys_sendmsg+0x16e/0x220 [ 161.779054][ T9880] ? __pfx___sys_sendmsg+0x10/0x10 [ 161.780423][ T9880] do_syscall_64+0xcd/0x250 [ 161.781646][ T9880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.783205][ T9880] RIP: 0033:0x7fb21e180809 [ 161.784361][ T9880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.789399][ T9880] RSP: 002b:00007fb21eeb6058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 161.791605][ T9880] RAX: ffffffffffffffda RBX: 00007fb21e345fa0 RCX: 00007fb21e180809 [ 161.793785][ T9880] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 161.795988][ T9880] RBP: 00007fb21eeb60a0 R08: 0000000000000000 R09: 0000000000000000 [ 161.798294][ T9880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.800585][ T9880] R13: 0000000000000000 R14: 00007fb21e345fa0 R15: 00007ffe76b1a8e8 [ 161.802730][ T9880] [ 161.808187][ T9882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.816205][ T9882] xt_hashlimit: size too large, truncated to 1048576 [ 162.134141][ T5958] Bluetooth: hci3: command 0x206a tx timeout [ 162.169924][ T9895] FAULT_INJECTION: forcing a failure. [ 162.169924][ T9895] name failslab, interval 1, probability 0, space 0, times 0 [ 162.174700][ T9895] CPU: 3 UID: 0 PID: 9895 Comm: syz.2.1472 Not tainted 6.12.0-syzkaller-09734-g445d9f05fa14 #0 [ 162.178200][ T9895] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 162.181867][ T9895] Call Trace: [ 162.183026][ T9895] [ 162.184054][ T9895] dump_stack_lvl+0x16c/0x1f0 [ 162.185710][ T9895] should_fail_ex+0x497/0x5b0 [ 162.187343][ T9895] ? fs_reclaim_acquire+0xae/0x150 [ 162.189111][ T9895] should_failslab+0xc2/0x120 [ 162.190760][ T9895] __kmalloc_noprof+0xcb/0x510 [ 162.192445][ T9895] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 162.194555][ T9895] tomoyo_realpath_from_path+0xb9/0x720 [ 162.196403][ T9895] ? tomoyo_path_number_perm+0x235/0x590 [ 162.198331][ T9895] ? tomoyo_path_number_perm+0x235/0x590 [ 162.200277][ T9895] tomoyo_path_number_perm+0x248/0x590 [ 162.202179][ T9895] ? tomoyo_path_number_perm+0x235/0x590 [ 162.204136][ T9895] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 162.206244][ T9895] ? __pfx_lock_release+0x10/0x10 [ 162.208007][ T9895] ? trace_lock_acquire+0x146/0x1e0 [ 162.209836][ T9895] ? lock_acquire+0x2f/0xb0 [ 162.211442][ T9895] ? __fget_files+0x40/0x3a0 [ 162.213069][ T9895] ? __fget_files+0x206/0x3a0 [ 162.214755][ T9895] security_file_ioctl+0x9b/0x240 [ 162.216503][ T9895] __x64_sys_ioctl+0xb7/0x200 [ 162.218154][ T9895] do_syscall_64+0xcd/0x250 [ 162.219741][ T9895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.221577][ T9895] RIP: 0033:0x7f86a1180809 [ 162.222743][ T9895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.227682][ T9895] RSP: 002b:00007f86a1f34058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 162.229835][ T9895] RAX: ffffffffffffffda RBX: 00007f86a1345fa0 RCX: 00007f86a1180809 [ 162.231904][ T9895] RDX: 0000000020000380 RSI: 00000000c03864bc RDI: 0000000000000003 [ 162.233982][ T9895] RBP: 00007f86a1f340a0 R08: 0000000000000000 R09: 0000000000000000 [ 162.236034][ T9895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.238086][ T9895] R13: 0000000000000000 R14: 00007f86a1345fa0 R15: 00007ffde10de6f8 [ 162.240141][ T9895] [ 162.241421][ T9895] ERROR: Out of memory at tomoyo_realpath_from_path. [ 162.359232][ T9899] overlayfs: failed to get inode (-116) [ 162.362019][ T9899] overlayfs: failed to get inode (-116) [ 162.364197][ T35] usb 8-1: new full-speed USB device number 11 using dummy_hcd [ 162.379032][ T9901] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1475'. [ 162.382175][ T9901] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1475'. [ 162.403366][ T9903] FAULT_INJECTION: forcing a failure. [ 162.403366][ T9903] name failslab, interval 1, probability 0, space 0, times 0 [ 162.410306][ T9903] CPU: 2 UID: 0 PID: 9903 Comm: syz.2.1476 Not tainted 6.12.0-syzkaller-09734-g445d9f05fa14 #0 [ 162.413917][ T9903] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 162.417653][ T9903] Call Trace: [ 162.418837][ T9903] [ 162.419895][ T9903] dump_stack_lvl+0x16c/0x1f0 [ 162.421574][ T9903] should_fail_ex+0x497/0x5b0 [ 162.423028][ T9903] ? fs_reclaim_acquire+0xae/0x150 [ 162.425493][ T9903] should_failslab+0xc2/0x120 [ 162.427149][ T9903] kmem_cache_alloc_lru_noprof+0x73/0x3d0 [ 162.428894][ T9903] ? __d_alloc+0x31/0xaa0 [ 162.430026][ T9903] __d_alloc+0x31/0xaa0 [ 162.431120][ T9903] ? mark_lock+0xb5/0xc60 [ 162.432384][ T9903] d_alloc+0x4a/0x1e0 [ 162.433855][ T9903] d_alloc_parallel+0xe9/0x12b0 [ 162.435602][ T9903] ? __d_lookup+0x25c/0x4a0 [ 162.437184][ T9903] ? trace_lock_acquire+0x146/0x1e0 [ 162.439030][ T9903] ? lookup_open.isra.0+0x229/0x14c0 [ 162.441072][ T9903] ? __pfx_d_alloc_parallel+0x10/0x10 [ 162.443132][ T9903] ? __d_lookup+0x266/0x4a0 [ 162.444837][ T9903] lookup_open.isra.0+0xab5/0x14c0 [ 162.446730][ T9903] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 162.448676][ T9903] ? path_openat+0x88a/0x2d60 [ 162.450355][ T9903] ? mnt_get_write_access+0x20c/0x300 [ 162.452277][ T9903] path_openat+0x904/0x2d60 [ 162.454084][ T9903] ? __pfx_path_openat+0x10/0x10 [ 162.455871][ T9903] ? __pfx___lock_acquire+0x10/0x10 [ 162.457776][ T9903] ? lock_acquire.part.0+0x11b/0x380 [ 162.459681][ T9903] ? find_held_lock+0x2d/0x110 [ 162.461368][ T9903] do_filp_open+0x20c/0x470 [ 162.462983][ T9903] ? __pfx_do_filp_open+0x10/0x10 [ 162.464791][ T9903] ? find_held_lock+0x2d/0x110 [ 162.466479][ T9903] ? alloc_fd+0x41f/0x760 [ 162.468022][ T9903] do_sys_openat2+0x17a/0x1e0 [ 162.469699][ T9903] ? __pfx_do_sys_openat2+0x10/0x10 [ 162.471547][ T9903] ? do_user_addr_fault+0xe50/0x13f0 [ 162.473238][ T9903] ? __pfx_lock_release+0x10/0x10 [ 162.474973][ T9903] __x64_sys_openat+0x175/0x210 [ 162.476701][ T9903] ? __pfx___x64_sys_openat+0x10/0x10 [ 162.478591][ T9903] ? do_user_addr_fault+0x83d/0x13f0 [ 162.480468][ T9903] do_syscall_64+0xcd/0x250 [ 162.482124][ T9903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.484222][ T9903] RIP: 0033:0x7f86a117f170 [ 162.485821][ T9903] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 8f 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 8f 02 00 8b 44 [ 162.492558][ T9903] RSP: 002b:00007f86a1f33b90 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 162.495490][ T9903] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f86a117f170 [ 162.498228][ T9903] RDX: 0000000000000002 RSI: 00007f86a1f33c30 RDI: 00000000ffffff9c [ 162.501020][ T9903] RBP: 00007f86a1f33c30 R08: 0000000000000000 R09: 0000000000000000 [ 162.503833][ T9903] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 162.506616][ T9903] R13: 0000000000000000 R14: 00007f86a1345fa0 R15: 00007ffde10de6f8 [ 162.509620][ T9903] [ 162.510819][ C2] vkms_vblank_simulate: vblank timer overrun [ 162.527028][ T35] usb 8-1: config 1 interface 0 has no altsetting 0 [ 162.533618][ T35] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 162.537497][ T35] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.539731][ T35] usb 8-1: Product: syz [ 162.540867][ T35] usb 8-1: Manufacturer: syz [ 162.542095][ T35] usb 8-1: SerialNumber: syz [ 162.619760][ T9910] FAULT_INJECTION: forcing a failure. [ 162.619760][ T9910] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.623464][ T9910] CPU: 2 UID: 0 PID: 9910 Comm: syz.2.1479 Not tainted 6.12.0-syzkaller-09734-g445d9f05fa14 #0 [ 162.626449][ T9910] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 162.629267][ T9910] Call Trace: [ 162.630170][ T9910] [ 162.631052][ T9910] dump_stack_lvl+0x16c/0x1f0 [ 162.632333][ T9910] should_fail_ex+0x497/0x5b0 [ 162.633607][ T9910] _copy_to_user+0x32/0xd0 [ 162.634801][ T9910] simple_read_from_buffer+0xd0/0x160 [ 162.636213][ T9910] proc_fail_nth_read+0x198/0x270 [ 162.637568][ T9910] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 162.639027][ T9910] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 162.640538][ T9910] vfs_read+0x1df/0xbe0 [ 162.641650][ T9910] ? __fget_files+0x1fc/0x3a0 [ 162.642906][ T9910] ? __pfx___mutex_lock+0x10/0x10 [ 162.643345][ T9905] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 162.644390][ T9910] ? __pfx_vfs_read+0x10/0x10 [ 162.644428][ T9910] ? __fget_files+0x206/0x3a0 [ 162.644443][ T9910] ksys_read+0x12b/0x250 [ 162.644452][ T9910] ? __pfx_ksys_read+0x10/0x10 [ 162.644467][ T9910] do_syscall_64+0xcd/0x250 [ 162.644482][ T9910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.644495][ T9910] RIP: 0033:0x7f86a117f21c [ 162.644505][ T9910] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 8e 02 00 48 [ 162.644515][ T9910] RSP: 002b:00007f86a1f34050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 162.664131][ T9910] RAX: ffffffffffffffda RBX: 00007f86a1345fa0 RCX: 00007f86a117f21c [ 162.666200][ T9910] RDX: 000000000000000f RSI: 00007f86a1f340b0 RDI: 0000000000000006 [ 162.668263][ T9910] RBP: 00007f86a1f340a0 R08: 0000000000000000 R09: 0000000000000000 [ 162.670350][ T9910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.672429][ T9910] R13: 0000000000000000 R14: 00007f86a1345fa0 R15: 00007ffde10de6f8 [ 162.674635][ T9910] [ 162.675566][ C2] vkms_vblank_simulate: vblank timer overrun [ 162.901634][ T39] kauditd_printk_skb: 3 callbacks suppressed [ 162.901681][ T39] audit: type=1326 audit(1732669578.009:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9918 comm="syz.0.1482" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdc59980809 code=0x0 [ 163.155775][ T35] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 163.176840][ C0] net_ratelimit: 267 callbacks suppressed [ 163.176858][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.183306][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.186436][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.189673][ T2298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.257211][ T63] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.285300][ T9929] FAULT_INJECTION: forcing a failure. [ 163.285300][ T9929] name failslab, interval 1, probability 0, space 0, times 0 [ 163.289155][ T9929] CPU: 2 UID: 0 PID: 9929 Comm: syz.1.1486 Not tainted 6.12.0-syzkaller-09734-g445d9f05fa14 #0 [ 163.291938][ T9929] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 163.294721][ T9929] Call Trace: [ 163.295591][ T9929] [ 163.296368][ T9929] dump_stack_lvl+0x16c/0x1f0 [ 163.297624][ T9929] should_fail_ex+0x497/0x5b0 [ 163.298855][ T9929] ? fs_reclaim_acquire+0xae/0x150 [ 163.300206][ T9929] should_failslab+0xc2/0x120 [ 163.301472][ T9929] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 163.303003][ T9929] ? __alloc_skb+0x2b1/0x380 [ 163.304230][ T9929] __alloc_skb+0x2b1/0x380 [ 163.305421][ T9929] ? __pfx___alloc_skb+0x10/0x10 [ 163.306732][ T9929] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 163.308322][ T9929] netlink_alloc_large_skb+0x69/0x130 [ 163.309744][ T9929] netlink_sendmsg+0x689/0xd70 [ 163.311007][ T9929] ? __pfx_netlink_sendmsg+0x10/0x10 [ 163.312417][ T9929] ____sys_sendmsg+0xaaf/0xc90 [ 163.313683][ T9929] ? copy_msghdr_from_user+0x10b/0x160 [ 163.315109][ T9929] ? __pfx_____sys_sendmsg+0x10/0x10 [ 163.316723][ T9929] ___sys_sendmsg+0x135/0x1e0 [ 163.317972][ T9929] ? __pfx____sys_sendmsg+0x10/0x10 [ 163.319337][ T9929] ? __pfx_lock_release+0x10/0x10 [ 163.320689][ T9929] ? trace_lock_acquire+0x146/0x1e0 [ 163.322064][ T9929] ? __fget_files+0x206/0x3a0 [ 163.323304][ T9929] __sys_sendmsg+0x16e/0x220 [ 163.324523][ T9929] ? __pfx___sys_sendmsg+0x10/0x10 [ 163.325881][ T9929] do_syscall_64+0xcd/0x250 [ 163.327076][ T9929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.328638][ T9929] RIP: 0033:0x7f36add80809 [ 163.329822][ T9929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.334818][ T9929] RSP: 002b:00007f36aeb33058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 163.336996][ T9929] RAX: ffffffffffffffda RBX: 00007f36adf45fa0 RCX: 00007f36add80809 [ 163.338802][ T9929] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 163.340574][ T9929] RBP: 00007f36aeb330a0 R08: 0000000000000000 R09: 0000000000000000 [ 163.342496][ T9929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.344552][ T9929] R13: 0000000000000000 R14: 00007f36adf45fa0 R15: 00007ffe852811c8 [ 163.346644][ T9929] [ 163.347529][ C2] vkms_vblank_simulate: vblank timer overrun [ 163.358744][ T9890] sp0: Synchronizing with TNC [ 163.364821][ T39] audit: type=1400 audit(1732669578.469:595): avc: denied { mounton } for pid=9889 comm="syz.3.1470" path="/433/file0" dev="tmpfs" ino=2258 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 163.370837][ T9890] exFAT-fs (nullb0): invalid boot record signature [ 163.372705][ T9890] exFAT-fs (nullb0): failed to read boot sector [ 163.374627][ T9890] exFAT-fs (nullb0): failed to recognize exfat type [ 163.450096][ T39] audit: type=1326 audit(1732669578.559:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9932 comm="syz.1.1488" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f36add80809 code=0x0 [ 163.744177][ T5958] Bluetooth: hci2: command 0x0c1a tx timeout [ 164.233161][ T9948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.238960][ T9948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.241985][ T9948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.247185][ T9948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.249834][ T9948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.274079][ T39] audit: type=1400 audit(1732669579.379:597): avc: denied { setopt } for pid=9951 comm="syz.1.1495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 164.278826][ T39] audit: type=1400 audit(1732669579.379:598): avc: denied { mount } for pid=9951 comm="syz.1.1495" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 164.285345][ T9952] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31254 sclass=netlink_route_socket pid=9952 comm=syz.1.1495 [ 164.309595][ T39] audit: type=1400 audit(1732669579.419:599): avc: denied { unmount } for pid=5946 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 164.666102][ T1322] libceph: connect (1)[c::]:6789 error -101 [ 164.668706][ T1322] libceph: mon0 (1)[c::]:6789 connect error [ 164.675016][ T1322] libceph: connect (1)[c::]:6789 error -101 [ 164.676667][ T1322] libceph: mon0 (1)[c::]:6789 connect error [ 164.705637][ T9975] ceph: No mds server is up or the cluster is laggy [ 165.078299][ T2298] usb 8-1: USB disconnect, device number 11 [ 165.081973][ T2298] usblp0: removed [ 165.251677][ T9993] tmpfs: Unknown parameter 'nr Ons' [ 165.254776][ T9993] netem: incorrect gi model size [ 165.256214][ T9993] netem: change failed [ 165.438153][ T39] audit: type=1400 audit(1732669580.549:600): avc: denied { write } for pid=10000 comm="syz.3.1512" path="socket:[27289]" dev="sockfs" ino=27289 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 165.444326][ T5958] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 165.744851][T10015] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1516'. [ 165.752976][T10015] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1516'. [ 165.814238][ T5958] Bluetooth: hci2: command 0x0c1a tx timeout [ 165.882610][T10024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1520'. [ 165.885586][T10024] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1520'. [ 165.887869][T10024] FAULT_INJECTION: forcing a failure. [ 165.887869][T10024] name failslab, interval 1, probability 0, space 0, times 0 [ 165.891157][T10024] CPU: 2 UID: 0 PID: 10024 Comm: syz.1.1520 Not tainted 6.12.0-syzkaller-09734-g445d9f05fa14 #0 [ 165.893827][T10024] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 165.897090][T10024] Call Trace: [ 165.897985][T10024] [ 165.898759][T10024] dump_stack_lvl+0x16c/0x1f0 [ 165.899934][T10024] should_fail_ex+0x497/0x5b0 [ 165.901355][T10024] ? fs_reclaim_acquire+0xae/0x150 [ 165.902660][T10024] should_failslab+0xc2/0x120 [ 165.903803][T10024] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 165.905252][T10024] ? __alloc_skb+0x2b1/0x380 [ 165.906446][T10024] __alloc_skb+0x2b1/0x380 [ 165.907622][T10024] ? __pfx___alloc_skb+0x10/0x10 [ 165.908910][T10024] ? genl_rcv_msg+0x4bd/0x800 [ 165.910131][T10024] netlink_ack+0x164/0xb90 [ 165.911313][T10024] ? __pfx___lock_acquire+0x10/0x10 [ 165.912693][T10024] netlink_rcv_skb+0x348/0x440 [ 165.913943][T10024] ? __pfx_genl_rcv_msg+0x10/0x10 [ 165.915265][T10024] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 165.916632][T10024] ? down_read+0xc9/0x330 [ 165.917770][T10024] ? __pfx_down_read+0x10/0x10 [ 165.919022][T10024] ? netlink_deliver_tap+0x1ae/0xd30 [ 165.920399][T10024] genl_rcv+0x28/0x40 [ 165.921452][T10024] netlink_unicast+0x53c/0x7f0 [ 165.922719][T10024] ? __pfx_netlink_unicast+0x10/0x10 [ 165.924095][T10024] netlink_sendmsg+0x8b8/0xd70 [ 165.925367][T10024] ? __pfx_netlink_sendmsg+0x10/0x10 [ 165.926751][T10024] ____sys_sendmsg+0xaaf/0xc90 [ 165.927989][T10024] ? copy_msghdr_from_user+0x10b/0x160 [ 165.929411][T10024] ? __pfx_____sys_sendmsg+0x10/0x10 [ 165.930781][T10024] ___sys_sendmsg+0x135/0x1e0 [ 165.932032][T10024] ? __pfx____sys_sendmsg+0x10/0x10 [ 165.933345][T10024] ? __pfx_lock_release+0x10/0x10 [ 165.934603][T10024] ? trace_lock_acquire+0x146/0x1e0 [ 165.935979][T10024] ? __fget_files+0x206/0x3a0 [ 165.937209][T10024] __sys_sendmsg+0x16e/0x220 [ 165.938412][T10024] ? __pfx___sys_sendmsg+0x10/0x10 [ 165.939736][T10024] do_syscall_64+0xcd/0x250 [ 165.940925][T10024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.942462][T10024] RIP: 0033:0x7f36add80809 [ 165.943624][T10024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.948549][T10024] RSP: 002b:00007f36aeb33058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 165.950637][T10024] RAX: ffffffffffffffda RBX: 00007f36adf45fa0 RCX: 00007f36add80809 [ 165.952631][T10024] RDX: 0000000000000000 RSI: 0000000020001280 RDI: 0000000000000004 [ 165.954628][T10024] RBP: 00007f36aeb330a0 R08: 0000000000000000 R09: 0000000000000000 [ 165.956592][T10024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.958563][T10024] R13: 0000000000000000 R14: 00007f36adf45fa0 R15: 00007ffe852811c8 [ 165.960605][T10024] [ 165.962058][ C2] vkms_vblank_simulate: vblank timer overrun [ 166.017160][T10027] netlink: 41060 bytes leftover after parsing attributes in process `syz.2.1521'. [ 166.239777][T10035] netlink: 512 bytes leftover after parsing attributes in process `syz.3.1523'. [ 166.360986][ T12] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xfd [ 166.684904][ T39] audit: type=1400 audit(1732669581.799:601): avc: denied { setopt } for pid=10046 comm="syz.0.1527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 166.690517][ T39] audit: type=1400 audit(1732669581.799:602): avc: denied { getopt } for pid=10046 comm="syz.0.1527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 166.696599][ T39] audit: type=1400 audit(1732669581.809:603): avc: denied { create } for pid=10046 comm="syz.0.1527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 166.835615][T10052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1528'. [ 167.048828][T10061] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 167.051920][T10061] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 167.056409][T10063] FAULT_INJECTION: forcing a failure. [ 167.056409][T10063] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 167.059732][T10063] CPU: 3 UID: 0 PID: 10063 Comm: syz.2.1530 Not tainted 6.12.0-syzkaller-09734-g445d9f05fa14 #0 [ 167.062414][T10063] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 167.065386][T10063] Call Trace: [ 167.066259][T10063] [ 167.067063][T10063] dump_stack_lvl+0x16c/0x1f0 [ 167.068269][T10063] should_fail_ex+0x497/0x5b0 [ 167.069657][T10063] _copy_to_user+0x32/0xd0 [ 167.070797][T10063] simple_read_from_buffer+0xd0/0x160 [ 167.072162][T10063] proc_fail_nth_read+0x198/0x270 [ 167.073475][T10063] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 167.074885][T10063] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 167.076290][T10063] vfs_read+0x1df/0xbe0 [ 167.077363][T10063] ? __fget_files+0x1fc/0x3a0 [ 167.078566][T10063] ? __pfx___mutex_lock+0x10/0x10 [ 167.079844][T10063] ? __pfx_vfs_read+0x10/0x10 [ 167.081080][T10063] ? __fget_files+0x206/0x3a0 [ 167.082278][T10063] ksys_read+0x12b/0x250 [ 167.083355][T10063] ? __pfx_ksys_read+0x10/0x10 [ 167.084553][T10063] do_syscall_64+0xcd/0x250 [ 167.085734][T10063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.087264][T10063] RIP: 0033:0x7f86a117f21c [ 167.088369][T10063] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 8e 02 00 48 [ 167.093663][T10063] RSP: 002b:00007f86a1f13050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 167.095794][T10063] RAX: ffffffffffffffda RBX: 00007f86a1346080 RCX: 00007f86a117f21c [ 167.098051][T10063] RDX: 000000000000000f RSI: 00007f86a1f130b0 RDI: 0000000000000005 [ 167.100100][T10063] RBP: 00007f86a1f130a0 R08: 0000000000000000 R09: 0000000000000000 [ 167.102090][T10063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.104050][T10063] R13: 0000000000000001 R14: 00007f86a1346080 R15: 00007ffde10de6f8 [ 167.106038][T10063] [ 167.904427][ T5958] Bluetooth: hci2: command 0x0c1a tx timeout [ 167.922058][ T39] kauditd_printk_skb: 2 callbacks suppressed [ 167.922069][ T39] audit: type=1400 audit(1732669583.029:606): avc: denied { setopt } for pid=10091 comm="syz.2.1541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 168.021852][T10101] fuse: Unknown parameter '000000000000000000030x0000000000000003' [ 168.136325][T10106] fuse: Unknown parameter '0x0000000000000000ö¶wO¾äYå%tw «g­ô»”PäÞ¼ÅUv2Á©³ÿž°jñ¼N' [ 168.276881][T10118] net_ratelimit: 40 callbacks suppressed [ 168.276891][T10118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.281557][T10118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.284513][ T39] audit: type=1400 audit(1732669583.399:607): avc: denied { read } for pid=10108 comm="syz.2.1547" laddr=::1 lport=36385 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 168.284625][T10118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.299503][T10118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.300954][ T39] audit: type=1400 audit(1732669583.409:608): avc: denied { map } for pid=10108 comm="syz.2.1547" path="socket:[26587]" dev="sockfs" ino=26587 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 168.301745][T10118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.308591][ T39] audit: type=1400 audit(1732669583.419:609): avc: denied { egress } for pid=24 comm="ksoftirqd/2" saddr=fe80::1b daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 168.310722][T10118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.316836][ T39] audit: type=1400 audit(1732669583.419:610): avc: denied { sendto } for pid=24 comm="ksoftirqd/2" saddr=fe80::1b daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 168.319188][T10118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.328306][T10118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.330908][T10118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.333576][T10118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.376670][ T39] audit: type=1326 audit(1732669583.489:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10119 comm="syz.0.1553" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdc59980809 code=0x0 [ 168.455674][T10131] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1556'. [ 168.484481][ T6011] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 168.498363][ T39] audit: type=1400 audit(1732669583.609:612): avc: denied { mount } for pid=10133 comm="syz.2.1557" name="/" dev="pstore" ino=5102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 168.504001][T10136] netlink: 47 bytes leftover after parsing attributes in process `syz.0.1558'. [ 168.510536][ T39] audit: type=1400 audit(1732669583.619:613): avc: denied { read } for pid=10135 comm="syz.0.1558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 168.645388][ T6011] usb 8-1: Using ep0 maxpacket: 8 [ 168.648669][ T6011] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 168.651581][ T6011] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 168.654245][ T6011] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.657399][ T6011] usb 8-1: config 0 descriptor?? [ 168.777824][T10158] netlink: 'syz.0.1566': attribute type 6 has an invalid length. [ 168.863175][ T6011] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 168.877664][ T39] audit: type=1400 audit(1732669583.989:614): avc: denied { execstack } for pid=10160 comm="syz.0.1567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 168.883701][T10162] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1567'. [ 169.087146][ T6011] usb 8-1: USB disconnect, device number 12 [ 169.090420][ T6011] iowarrior 8-1:0.0: I/O-Warror #0 now disconnected [ 169.469137][T10171] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1571'. [ 169.476712][ T39] audit: type=1400 audit(1732669584.589:615): avc: denied { write } for pid=10170 comm="syz.2.1571" name="task" dev="proc" ino=25486 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 169.524323][T10171] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1571'. [ 169.628051][T10174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1572'. [ 169.724828][T10179] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.054313][ T6011] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 170.204822][ T6011] usb 5-1: Using ep0 maxpacket: 8 [ 170.208066][ T6011] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 170.210803][ T6011] usb 5-1: config 0 has no interface number 0 [ 170.212875][ T6011] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 170.216012][ T6011] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 170.219060][ T6011] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.222861][ T6011] usb 5-1: config 0 descriptor?? [ 170.228149][ T6011] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 170.436200][ T6011] usb 5-1: USB disconnect, device number 16 [ 170.440467][ T6011] iowarrior 5-1:0.1: I/O-Warror #0 now disconnected [ 170.783079][T10228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1591'. [ 170.786190][T10228] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1591'. [ 170.825221][T10230] overlayfs: missing 'lowerdir' [ 171.676988][T10261] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1602'. [ 171.730597][T10264] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 171.733004][T10264] overlayfs: failed to set xattr on upper [ 171.735556][T10264] overlayfs: ...falling back to redirect_dir=nofollow. [ 171.737361][T10264] overlayfs: ...falling back to index=off. [ 171.738809][T10264] overlayfs: ...falling back to uuid=null. [ 171.740689][T10264] overlayfs: ...falling back to xino=off. [ 171.861348][T10274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1608'. [ 171.866985][T10274] vlan2: entered allmulticast mode [ 171.993236][T10282] netlink: 'syz.2.1612': attribute type 1 has an invalid length. [ 172.035290][T10284] random: crng reseeded on system resumption [ 172.544245][ T35] usb 7-1: new low-speed USB device number 8 using dummy_hcd [ 172.707323][ T35] usb 7-1: Invalid ep0 maxpacket: 64 [ 172.811005][T10307] FAULT_INJECTION: forcing a failure. [ 172.811005][T10307] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.815463][T10307] CPU: 1 UID: 0 PID: 10307 Comm: syz.1.1620 Not tainted 6.12.0-syzkaller-09734-g445d9f05fa14 #0 [ 172.819068][T10307] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 172.822864][T10307] Call Trace: [ 172.824080][T10307] [ 172.825008][T10307] dump_stack_lvl+0x16c/0x1f0 [ 172.826309][T10307] should_fail_ex+0x497/0x5b0 [ 172.827586][T10307] _copy_from_iter+0x2a1/0x1560 [ 172.828919][T10307] ? trace_lock_acquire+0x146/0x1e0 [ 172.830348][T10307] ? __alloc_skb+0x1fe/0x380 [ 172.831597][T10307] ? __pfx__copy_from_iter+0x10/0x10 [ 172.833112][T10307] ? __virt_addr_valid+0x1a4/0x590 [ 172.834473][T10307] ? __virt_addr_valid+0x5e/0x590 [ 172.835796][T10307] ? __phys_addr_symbol+0x30/0x80 [ 172.837154][T10307] ? __check_object_size+0x488/0x710 [ 172.838887][T10307] netlink_sendmsg+0x813/0xd70 [ 172.840662][T10307] ? __pfx_netlink_sendmsg+0x10/0x10 [ 172.842553][T10307] ____sys_sendmsg+0xaaf/0xc90 [ 172.844300][T10307] ? copy_msghdr_from_user+0x10b/0x160 [ 172.845827][T10307] ? __pfx_____sys_sendmsg+0x10/0x10 [ 172.847185][T10307] ___sys_sendmsg+0x135/0x1e0 [ 172.848435][T10307] ? __pfx____sys_sendmsg+0x10/0x10 [ 172.849792][T10307] ? __pfx_lock_release+0x10/0x10 [ 172.851143][T10307] ? trace_lock_acquire+0x146/0x1e0 [ 172.852920][T10307] ? __fget_files+0x206/0x3a0 [ 172.854638][T10307] __sys_sendmsg+0x16e/0x220 [ 172.856333][T10307] ? __pfx___sys_sendmsg+0x10/0x10 [ 172.858225][T10307] do_syscall_64+0xcd/0x250 [ 172.859744][T10307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.861582][T10307] RIP: 0033:0x7f36add80809 [ 172.862691][T10307] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.868814][T10307] RSP: 002b:00007f36aeb33058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 172.871842][T10307] RAX: ffffffffffffffda RBX: 00007f36adf45fa0 RCX: 00007f36add80809 [ 172.874448][T10307] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 172.876550][T10307] RBP: 00007f36aeb330a0 R08: 0000000000000000 R09: 0000000000000000 [ 172.877168][ T35] usb 7-1: new low-speed USB device number 9 using dummy_hcd [ 172.878595][T10307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.878605][T10307] R13: 0000000000000000 R14: 00007f36adf45fa0 R15: 00007ffe852811c8 [ 172.878618][T10307] [ 172.950451][T10311] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10311 comm=syz.1.1622 [ 172.954012][ T39] kauditd_printk_skb: 13 callbacks suppressed [ 172.954020][ T39] audit: type=1400 audit(1732669588.052:629): avc: denied { read } for pid=10309 comm="syz.1.1622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 173.131780][ T35] usb 7-1: Invalid ep0 maxpacket: 64 [ 173.133410][ T35] usb usb7-port1: attempt power cycle [ 173.326060][T10341] xt_hashlimit: size too large, truncated to 1048576 [ 173.493824][ T39] audit: type=1326 audit(1732669588.561:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10340 comm="syz.1.1636" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f36add80809 code=0x1000000 [ 173.504261][T10350] xt_l2tp: v2 sid > 0xffff: 150994944 [ 173.513613][ T35] usb 7-1: new low-speed USB device number 10 using dummy_hcd [ 173.552129][ T35] usb 7-1: Invalid ep0 maxpacket: 64 [ 173.693675][ T35] usb 7-1: new low-speed USB device number 11 using dummy_hcd [ 173.715244][ T35] usb 7-1: Invalid ep0 maxpacket: 64 [ 173.716921][ T35] usb usb7-port1: unable to enumerate USB device [ 173.810362][ T6011] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 173.884628][ T1322] net_ratelimit: 96 callbacks suppressed [ 173.884640][ T1322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.969367][ T6011] usb 5-1: Using ep0 maxpacket: 32 [ 173.973944][ T6011] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 173.976361][ T6011] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.987912][ T6011] usb 5-1: config 0 descriptor?? [ 173.991226][ T6011] as10x_usb: device has been detected [ 173.992960][ T6011] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 174.002312][ T6011] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 174.012655][ T6011] as10x_usb: error during firmware upload part1 [ 174.014968][ T6011] Registered device nBox DVB-T Dongle [ 174.225959][ T1322] usb 5-1: USB disconnect, device number 17 [ 174.239537][ T1322] Unregistered device nBox DVB-T Dongle [ 174.240258][ T1322] as10x_usb: device has been disconnected [ 174.274919][ T39] audit: type=1326 audit(1732669589.297:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10361 comm="syz.3.1643" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb21e180809 code=0x0 [ 174.668852][T10371] set match dimension is over the limit! [ 174.913603][ T66] Bluetooth: hci3: command 0x0405 tx timeout [ 174.988726][ T1322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.062876][T10396] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1655'. [ 175.066326][T10396] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1655'. [ 175.069608][T10396] FAULT_INJECTION: forcing a failure. [ 175.069608][T10396] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.073064][T10396] CPU: 0 UID: 0 PID: 10396 Comm: syz.0.1655 Not tainted 6.12.0-syzkaller-09734-g445d9f05fa14 #0 [ 175.076164][T10396] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 175.079039][T10396] Call Trace: [ 175.080201][T10396] [ 175.081246][T10396] dump_stack_lvl+0x16c/0x1f0 [ 175.082900][T10396] should_fail_ex+0x497/0x5b0 [ 175.084546][T10396] _copy_to_user+0x32/0xd0 [ 175.085759][T10396] simple_read_from_buffer+0xd0/0x160 [ 175.087179][T10396] proc_fail_nth_read+0x198/0x270 [ 175.088473][T10396] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 175.089922][T10396] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 175.091720][T10396] vfs_read+0x1df/0xbe0 [ 175.093271][T10396] ? __fget_files+0x1fc/0x3a0 [ 175.095004][T10396] ? __pfx___mutex_lock+0x10/0x10 [ 175.096835][T10396] ? __pfx_vfs_read+0x10/0x10 [ 175.098588][T10396] ? __fget_files+0x206/0x3a0 [ 175.100394][T10396] ksys_read+0x12b/0x250 [ 175.101941][T10396] ? __pfx_ksys_read+0x10/0x10 [ 175.103601][T10396] do_syscall_64+0xcd/0x250 [ 175.105207][T10396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.107160][T10396] RIP: 0033:0x7fdc5997f21c [ 175.108634][T10396] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 8e 02 00 48 [ 175.114710][T10396] RSP: 002b:00007fdc5a74f050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 175.117124][T10396] RAX: ffffffffffffffda RBX: 00007fdc59b45fa0 RCX: 00007fdc5997f21c [ 175.119835][T10396] RDX: 000000000000000f RSI: 00007fdc5a74f0b0 RDI: 0000000000000003 [ 175.122559][T10396] RBP: 00007fdc5a74f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 175.125261][T10396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.127796][T10396] R13: 0000000000000000 R14: 00007fdc59b45fa0 R15: 00007ffc0600c4a8 [ 175.129876][T10396] [ 175.131784][ T6095] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.148321][T10398] overlayfs: missing 'lowerdir' [ 175.164819][T10400] PKCS8: Unsupported PKCS#8 version [ 175.174960][ T39] audit: type=1400 audit(1732669590.139:632): avc: denied { getopt } for pid=10399 comm="syz.0.1657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 175.211298][ T5958] Bluetooth: hci2: unexpected event for opcode 0x0c1b [ 175.253431][T10412] netlink: 512 bytes leftover after parsing attributes in process `syz.2.1661'. [ 175.322186][T10402] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1658'. [ 175.338598][T10426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1666'. [ 175.344939][ T39] audit: type=1400 audit(1732669590.298:633): avc: denied { create } for pid=10425 comm="syz.1.1666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 175.348226][T10428] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 175.370909][ T39] audit: type=1400 audit(1732669590.326:634): avc: denied { name_bind } for pid=10429 comm="syz.2.1668" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 175.442643][T10440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.472939][T10440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.485760][T10441] FAULT_INJECTION: forcing a failure. [ 175.485760][T10441] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.490329][T10441] CPU: 0 UID: 0 PID: 10441 Comm: syz.2.1672 Not tainted 6.12.0-syzkaller-09734-g445d9f05fa14 #0 [ 175.493888][T10441] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 175.495439][T10440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.497507][T10441] Call Trace: [ 175.497517][T10441] [ 175.497523][T10441] dump_stack_lvl+0x16c/0x1f0 [ 175.501861][T10440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.501914][T10441] should_fail_ex+0x497/0x5b0 [ 175.505636][T10440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.506552][T10441] _copy_to_user+0x32/0xd0 [ 175.512738][T10441] simple_read_from_buffer+0xd0/0x160 [ 175.514656][T10441] proc_fail_nth_read+0x198/0x270 [ 175.515998][T10441] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 175.517498][T10441] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 175.517657][T10440] xt_CT: You must specify a L4 protocol and not use inversions on it [ 175.518955][T10441] vfs_read+0x1df/0xbe0 [ 175.522994][T10441] ? __fget_files+0x1fc/0x3a0 [ 175.524677][ T39] audit: type=1400 audit(1732669590.476:635): avc: denied { setopt } for pid=10438 comm="syz.0.1671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 175.526229][ T39] audit: type=1400 audit(1732669590.476:636): avc: denied { mount } for pid=10438 comm="syz.0.1671" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 175.528309][T10440] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 175.531951][T10441] ? __pfx___mutex_lock+0x10/0x10 [ 175.539581][ T39] audit: type=1400 audit(1732669590.476:637): avc: denied { mounton } for pid=10438 comm="syz.0.1671" path="/421/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 175.542796][T10438] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.543139][T10441] ? __pfx_vfs_read+0x10/0x10 [ 175.543161][T10441] ? __fget_files+0x206/0x3a0 [ 175.543180][T10441] ksys_read+0x12b/0x250 [ 175.543190][T10441] ? __pfx_ksys_read+0x10/0x10 [ 175.543203][T10441] do_syscall_64+0xcd/0x250 [ 175.564161][T10441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.566379][T10441] RIP: 0033:0x7f86a117f21c [ 175.568022][T10441] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 8e 02 00 48 [ 175.574910][T10441] RSP: 002b:00007f86a1f34050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 175.577894][T10441] RAX: ffffffffffffffda RBX: 00007f86a1345fa0 RCX: 00007f86a117f21c [ 175.580737][T10441] RDX: 000000000000000f RSI: 00007f86a1f340b0 RDI: 0000000000000007 [ 175.583521][T10441] RBP: 00007f86a1f340a0 R08: 0000000000000000 R09: 0000000000000000 [ 175.586126][T10441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.588564][T10441] R13: 0000000000000000 R14: 00007f86a1345fa0 R15: 00007ffde10de6f8 [ 175.590772][T10441] [ 175.608497][ T39] audit: type=1400 audit(1732669590.541:638): avc: denied { unmount } for pid=5947 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 175.643973][T10448] sp0: Synchronizing with TNC [ 175.653788][T10448] tmpfs: Bad value for 'mpol' [ 175.676541][T10450] FAULT_INJECTION: forcing a failure. [ 175.676541][T10450] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.680271][T10450] CPU: 3 UID: 0 PID: 10450 Comm: syz.3.1675 Not tainted 6.12.0-syzkaller-09734-g445d9f05fa14 #0 [ 175.683804][T10450] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 175.687254][T10450] Call Trace: [ 175.688437][T10450] [ 175.689499][T10450] dump_stack_lvl+0x16c/0x1f0 [ 175.691171][T10450] should_fail_ex+0x497/0x5b0 [ 175.692510][T10450] _copy_from_user+0x2e/0xd0 [ 175.693751][T10450] mon_bin_ioctl+0x168/0xcd0 [ 175.695239][T10450] ? __pfx_mon_bin_ioctl+0x10/0x10 [ 175.697073][T10450] ? selinux_file_ioctl+0x180/0x270 [ 175.698918][T10450] ? selinux_file_ioctl+0xb4/0x270 [ 175.700854][T10450] ? __pfx_mon_bin_ioctl+0x10/0x10 [ 175.702640][T10450] __x64_sys_ioctl+0x190/0x200 [ 175.704317][T10450] do_syscall_64+0xcd/0x250 [ 175.705998][T10450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.708086][T10450] RIP: 0033:0x7fb21e180809 [ 175.709682][T10450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.716291][T10450] RSP: 002b:00007fb21eeb6058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 175.717099][T10454] syzkaller1: entered promiscuous mode [ 175.719217][T10450] RAX: ffffffffffffffda RBX: 00007fb21e345fa0 RCX: 00007fb21e180809 [ 175.721175][T10454] syzkaller1: entered allmulticast mode [ 175.723885][T10450] RDX: 0000000020000080 RSI: 00000000c0109207 RDI: 0000000000000004 [ 175.723899][T10450] RBP: 00007fb21eeb60a0 R08: 0000000000000000 R09: 0000000000000000 [ 175.723910][T10450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.733987][T10450] R13: 0000000000000000 R14: 00007fb21e345fa0 R15: 00007ffe76b1a8e8 [ 175.736587][T10450] [ 176.256236][T10463] FAULT_INJECTION: forcing a failure. [ 176.256236][T10463] name failslab, interval 1, probability 0, space 0, times 0 [ 176.259504][T10463] CPU: 0 UID: 0 PID: 10463 Comm: syz.1.1678 Not tainted 6.12.0-syzkaller-09734-g445d9f05fa14 #0 [ 176.262216][T10463] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 176.264956][T10463] Call Trace: [ 176.265821][T10463] [ 176.266614][T10463] dump_stack_lvl+0x16c/0x1f0 [ 176.267851][T10463] should_fail_ex+0x497/0x5b0 [ 176.269095][T10463] ? fs_reclaim_acquire+0xae/0x150 [ 176.270451][T10463] should_failslab+0xc2/0x120 [ 176.271696][T10463] __kmalloc_cache_noprof+0x68/0x410 [ 176.273085][T10463] ? __pfx_mark_lock+0x10/0x10 [ 176.274359][T10463] drm_atomic_state_alloc+0xb8/0x120 [ 176.275778][T10463] drm_mode_atomic_ioctl+0x395/0x25d0 [ 176.277198][T10463] ? __pfx___lock_acquire+0x10/0x10 [ 176.278567][T10463] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 176.280106][T10463] ? do_raw_spin_unlock+0x172/0x230 [ 176.281478][T10463] drm_ioctl_kernel+0x1e6/0x3d0 [ 176.282773][T10463] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 176.284297][T10463] ? __might_fault+0x21/0x190 [ 176.285552][T10463] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 176.286951][T10463] ? __might_fault+0xe3/0x190 [ 176.288195][T10463] drm_ioctl+0x5d6/0xc00 [ 176.289336][T10463] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 176.290947][T10463] ? __pfx_drm_ioctl+0x10/0x10 [ 176.292284][T10463] ? __pfx_lock_release+0x10/0x10 [ 176.293636][T10463] ? selinux_file_ioctl+0x180/0x270 [ 176.295077][T10463] ? selinux_file_ioctl+0xb4/0x270 [ 176.296415][T10463] ? __pfx_drm_ioctl+0x10/0x10 [ 176.297690][T10463] __x64_sys_ioctl+0x190/0x200 [ 176.298953][T10463] do_syscall_64+0xcd/0x250 [ 176.300150][T10463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.301750][T10463] RIP: 0033:0x7f36add80809 [ 176.302925][T10463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.308362][T10463] RSP: 002b:00007f36aeb33058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 176.311330][T10463] RAX: ffffffffffffffda RBX: 00007f36adf45fa0 RCX: 00007f36add80809 [ 176.313886][T10463] RDX: 0000000020000380 RSI: 00000000c03864bc RDI: 0000000000000003 [ 176.315994][T10463] RBP: 00007f36aeb330a0 R08: 0000000000000000 R09: 0000000000000000 [ 176.318432][T10463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.321250][T10463] R13: 0000000000000000 R14: 00007f36adf45fa0 R15: 00007ffe852811c8 [ 176.323289][T10463] [ 176.386064][T10467] 9pnet_virtio: no channels available for device syz [ 176.732283][ T5957] Bluetooth: hci1: Opcode 0x206a failed: -112 [ 176.735912][T10470] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 176.737690][T10470] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 176.739529][T10470] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 176.969054][T10479] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1684'. [ 176.973408][T10479] FAULT_INJECTION: forcing a failure. [ 176.973408][T10479] name failslab, interval 1, probability 0, space 0, times 0 [ 176.977713][T10479] CPU: 0 UID: 0 PID: 10479 Comm: syz.0.1684 Not tainted 6.12.0-syzkaller-09734-g445d9f05fa14 #0 [ 176.981203][T10479] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 176.984874][T10479] Call Trace: [ 176.986015][T10479] [ 176.987015][T10479] dump_stack_lvl+0x16c/0x1f0 [ 176.988629][T10479] should_fail_ex+0x497/0x5b0 [ 176.990254][T10479] ? fs_reclaim_acquire+0xae/0x150 [ 176.992012][T10479] should_failslab+0xc2/0x120 [ 176.993632][T10479] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 176.995621][T10479] ? __up_read+0x1fb/0x760 [ 176.997147][T10479] ? __alloc_skb+0x2b1/0x380 [ 176.998737][T10479] __alloc_skb+0x2b1/0x380 [ 177.000574][T10479] ? __pfx___alloc_skb+0x10/0x10 [ 177.002274][T10479] netlink_ack+0x164/0xb90 [ 177.003810][T10479] ? __pfx___lock_acquire+0x10/0x10 [ 177.005594][T10479] ? hlock_class+0x4e/0x130 [ 177.007168][T10479] rdma_nl_rcv_skb.constprop.0.isra.0+0x346/0x450 [ 177.009394][T10479] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 177.011759][T10479] ? netlink_deliver_tap+0x1ae/0xd30 [ 177.013568][T10479] netlink_unicast+0x53c/0x7f0 [ 177.015213][T10479] ? __pfx_netlink_unicast+0x10/0x10 [ 177.017021][T10479] netlink_sendmsg+0x8b8/0xd70 [ 177.018699][T10479] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.020504][T10479] ____sys_sendmsg+0xaaf/0xc90 [ 177.022306][T10479] ? copy_msghdr_from_user+0x10b/0x160 [ 177.024175][T10479] ? __pfx_____sys_sendmsg+0x10/0x10 [ 177.026011][T10479] ___sys_sendmsg+0x135/0x1e0 [ 177.027639][T10479] ? __pfx____sys_sendmsg+0x10/0x10 [ 177.029435][T10479] ? __pfx_lock_release+0x10/0x10 [ 177.031179][T10479] ? trace_lock_acquire+0x146/0x1e0 [ 177.032960][T10479] ? __fget_files+0x206/0x3a0 [ 177.034592][T10479] __sys_sendmsg+0x16e/0x220 [ 177.036147][T10479] ? __pfx___sys_sendmsg+0x10/0x10 [ 177.037947][T10479] do_syscall_64+0xcd/0x250 [ 177.039523][T10479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.041555][T10479] RIP: 0033:0x7fdc59980809 [ 177.043095][T10479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.049649][T10479] RSP: 002b:00007fdc5a74f058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.052510][T10479] RAX: ffffffffffffffda RBX: 00007fdc59b45fa0 RCX: 00007fdc59980809 [ 177.055231][T10479] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 177.057942][T10479] RBP: 00007fdc5a74f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 177.060642][T10479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.063355][T10479] R13: 0000000000000000 R14: 00007fdc59b45fa0 R15: 00007ffc0600c4a8 [ 177.066060][T10479] [ 177.147496][T10486] input: syz0 as /devices/virtual/input/input20 [ 177.167453][T10486] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1687'. [ 178.164771][T10536] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 178.166995][T10536] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 178.170570][T10536] vhci_hcd vhci_hcd.0: Device attached [ 178.173842][T10537] vhci_hcd: unknown pdu 2 [ 178.176263][T10536] tipc: Started in network mode [ 178.177687][T10536] tipc: Node identity 7f000001, cluster identity 4711 [ 178.179772][ T64] vhci_hcd: stop threads [ 178.181103][T10536] tipc: Enabled bearer , priority 10 [ 178.181219][ T64] vhci_hcd: release socket [ 178.184588][ T64] vhci_hcd: disconnect device [ 178.349664][T10544] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1699'. [ 178.353640][T10544] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1699'. [ 178.386463][ T39] kauditd_printk_skb: 18 callbacks suppressed [ 178.386474][ T39] audit: type=1400 audit(1732669593.141:657): avc: denied { write } for pid=10545 comm="syz.3.1700" name="raw" dev="proc" ino=4026532913 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 178.394311][ T39] audit: type=1400 audit(1732669593.151:658): avc: denied { watch } for pid=10545 comm="syz.3.1700" path="/sys/power/pm_trace" dev="sysfs" ino=837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 178.400917][ T39] audit: type=1400 audit(1732669593.151:659): avc: denied { watch_sb watch_reads } for pid=10545 comm="syz.3.1700" path="/sys/power/pm_trace" dev="sysfs" ino=837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=file permissive=1 [ 178.451085][T10547] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 178.454487][T10547] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 178.456972][T10547] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 178.459233][T10547] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 178.461790][T10547] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 178.464275][T10547] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 178.466635][T10547] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 178.468997][T10547] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 178.471585][T10547] geneve2: entered promiscuous mode [ 178.472990][T10547] geneve2: entered allmulticast mode [ 178.934151][ T5957] Bluetooth: hci3: command 0x0405 tx timeout [ 178.935514][ T5958] Bluetooth: hci2: command 0x0c1a tx timeout [ 178.936225][ T5957] Bluetooth: hci1: command 0x0c1a tx timeout [ 178.940182][ T2298] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 178.942138][ T2298] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 179.255958][ T5993] tipc: Node number set to 2130706433 [ 179.349503][T10571] gtp0: entered promiscuous mode [ 179.350871][ T6011] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 179.352239][T10571] gtp0: entered allmulticast mode [ 179.403835][ C2] net_ratelimit: 17 callbacks suppressed [ 179.403852][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.435864][ T1322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.510545][ T6011] usb 7-1: Using ep0 maxpacket: 8 [ 179.513784][ T6011] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 179.516101][ T6011] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 179.518841][ T6011] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 179.522171][ T6011] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 179.524739][ T6011] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 179.528066][ T6011] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 179.530338][ T6011] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.535964][T10577] FAULT_INJECTION: forcing a failure. [ 179.535964][T10577] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.540227][T10577] CPU: 3 UID: 0 PID: 10577 Comm: syz.3.1710 Not tainted 6.12.0-syzkaller-09734-g445d9f05fa14 #0 [ 179.543754][T10577] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 179.547370][T10577] Call Trace: [ 179.548508][T10577] [ 179.549527][T10577] dump_stack_lvl+0x16c/0x1f0 [ 179.551143][T10577] should_fail_ex+0x497/0x5b0 [ 179.552767][T10577] _copy_to_user+0x32/0xd0 [ 179.554323][T10577] simple_read_from_buffer+0xd0/0x160 [ 179.556139][T10577] proc_fail_nth_read+0x198/0x270 [ 179.557849][T10577] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 179.559729][T10577] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 179.561588][T10577] vfs_read+0x1df/0xbe0 [ 179.563016][T10577] ? __fget_files+0x1fc/0x3a0 [ 179.564619][T10577] ? __pfx___mutex_lock+0x10/0x10 [ 179.566325][T10577] ? __pfx_vfs_read+0x10/0x10 [ 179.567931][T10577] ? __fget_files+0x206/0x3a0 [ 179.569532][T10577] ksys_read+0x12b/0x250 [ 179.570961][T10577] ? __pfx_ksys_read+0x10/0x10 [ 179.572591][T10577] do_syscall_64+0xcd/0x250 [ 179.574133][T10577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.576103][T10577] RIP: 0033:0x7fb21e17f21c [ 179.577621][T10577] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 8e 02 00 48 [ 179.583951][T10577] RSP: 002b:00007fb21eeb6050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 179.586660][T10577] RAX: ffffffffffffffda RBX: 00007fb21e345fa0 RCX: 00007fb21e17f21c [ 179.589298][T10577] RDX: 000000000000000f RSI: 00007fb21eeb60b0 RDI: 0000000000000005 [ 179.591940][T10577] RBP: 00007fb21eeb60a0 R08: 0000000000000000 R09: 0000000000000000 [ 179.594285][T10577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.596907][T10577] R13: 0000000000000000 R14: 00007fb21e345fa0 R15: 00007ffe76b1a8e8 [ 179.599538][T10577] [ 179.637046][T10580] tipc: Started in network mode [ 179.638392][T10580] tipc: Node identity , cluster identity 4711 [ 179.640095][T10580] tipc: Failed to set node id, please configure manually [ 179.641949][T10580] tipc: Enabling of bearer rejected, failed to enable media [ 179.666948][T10582] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1712'. [ 179.692328][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.709993][ T39] audit: type=1400 audit(1732669594.386:660): avc: denied { bind } for pid=10583 comm="syz.3.1713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 179.753747][ T6011] usb 7-1: usb_control_msg returned -32 [ 179.755328][ T6011] usbtmc 7-1:16.0: can't read capabilities [ 180.133487][T10593] overlayfs: missing 'lowerdir' [ 180.203058][ T39] audit: type=1400 audit(1732669594.844:661): avc: denied { module_request } for pid=10594 comm="syz.0.1718" kmod="crypto-cryptd(__generic-gcm-vaes-avx10_256)" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 180.254787][ T39] audit: type=1400 audit(1732669594.891:662): avc: denied { watch } for pid=10599 comm="syz.0.1719" path="/438/file0" dev="rpc_pipefs" ino=29402 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=dir permissive=1 [ 180.269635][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.292655][T10604] FAULT_INJECTION: forcing a failure. [ 180.292655][T10604] name failslab, interval 1, probability 0, space 0, times 0 [ 180.296007][T10604] CPU: 2 UID: 0 PID: 10604 Comm: syz.0.1720 Not tainted 6.12.0-syzkaller-09734-g445d9f05fa14 #0 [ 180.298709][T10604] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 180.301522][T10604] Call Trace: [ 180.302496][T10604] [ 180.303267][T10604] dump_stack_lvl+0x16c/0x1f0 [ 180.304499][T10604] should_fail_ex+0x497/0x5b0 [ 180.305741][T10604] ? fs_reclaim_acquire+0xae/0x150 [ 180.307065][T10604] should_failslab+0xc2/0x120 [ 180.308350][T10604] __kmalloc_noprof+0xcb/0x510 [ 180.309626][T10604] drm_atomic_state_init+0xe4/0x320 [ 180.310992][T10604] ? __kasan_kmalloc+0xaa/0xb0 [ 180.312299][T10604] drm_atomic_state_alloc+0xd3/0x120 [ 180.313721][T10604] drm_mode_atomic_ioctl+0x395/0x25d0 [ 180.315110][T10604] ? __pfx___lock_acquire+0x10/0x10 [ 180.316449][T10604] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 180.317967][T10604] ? do_raw_spin_unlock+0x172/0x230 [ 180.319298][T10604] drm_ioctl_kernel+0x1e6/0x3d0 [ 180.320553][T10604] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 180.322068][T10604] ? __might_fault+0x21/0x190 [ 180.323367][T10604] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 180.324785][T10604] ? __might_fault+0xe3/0x190 [ 180.326044][T10604] drm_ioctl+0x5d6/0xc00 [ 180.327266][T10604] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 180.328824][T10604] ? __pfx_drm_ioctl+0x10/0x10 [ 180.330070][T10604] ? __pfx_lock_release+0x10/0x10 [ 180.331411][T10604] ? selinux_file_ioctl+0x180/0x270 [ 180.332780][T10604] ? selinux_file_ioctl+0xb4/0x270 [ 180.334225][T10604] ? __pfx_drm_ioctl+0x10/0x10 [ 180.335801][T10604] __x64_sys_ioctl+0x190/0x200 [ 180.337082][T10604] do_syscall_64+0xcd/0x250 [ 180.338274][T10604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.339820][T10604] RIP: 0033:0x7fdc59980809 [ 180.341013][T10604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.346162][T10604] RSP: 002b:00007fdc5a74f058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 180.348443][T10604] RAX: ffffffffffffffda RBX: 00007fdc59b45fa0 RCX: 00007fdc59980809 [ 180.350568][T10604] RDX: 0000000020000380 RSI: 00000000c03864bc RDI: 0000000000000003 [ 180.352679][T10604] RBP: 00007fdc5a74f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 180.354773][T10604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.356987][T10604] R13: 0000000000000000 R14: 00007fdc59b45fa0 R15: 00007ffc0600c4a8 [ 180.359164][T10604] [ 180.360063][ C2] vkms_vblank_simulate: vblank timer overrun [ 180.537190][T10609] netlink: 512 bytes leftover after parsing attributes in process `syz.0.1722'. [ 180.548855][ T1322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.658642][T10614] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 180.924640][ T6011] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 180.958421][T10623] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 180.958421][T10623] program syz.1.1727 not setting count and/or reply_len properly [ 180.971047][ T39] audit: type=1400 audit(1732669595.564:663): avc: denied { write } for pid=10622 comm="syz.1.1727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 181.019475][T10625] netlink: zone id is out of range [ 181.020979][T10625] netlink: zone id is out of range [ 181.022629][T10625] netlink: set zone limit has 4 unknown bytes [ 181.092926][ T6011] usb 5-1: Using ep0 maxpacket: 8 [ 181.098715][ T6011] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 181.101600][ T6011] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 181.106283][ T6011] usb 5-1: config 0 has no interface number 0 [ 181.108592][ T6011] usb 5-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 181.112683][ T6011] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 181.116929][ T6011] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 181.119846][ T6011] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 181.124340][ T6011] usb 5-1: config 0 interface 52 has no altsetting 0 [ 181.127405][ T6011] usb 5-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 181.130837][ T6011] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.135111][ T6011] usb 5-1: config 0 descriptor?? [ 181.146195][ T2298] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 181.146245][ T5957] Bluetooth: hci2: command 0x0c1a tx timeout [ 181.148286][ T2298] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 181.293662][T10638] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1733'. [ 181.353472][ T6011] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.52/input/input21 [ 181.413507][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.706916][T10650] FAULT_INJECTION: forcing a failure. [ 181.706916][T10650] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.712392][T10650] CPU: 2 UID: 0 PID: 10650 Comm: syz.3.1737 Not tainted 6.12.0-syzkaller-09734-g445d9f05fa14 #0 [ 181.715094][T10650] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 181.717812][T10650] Call Trace: [ 181.718659][T10650] [ 181.719373][T10650] dump_stack_lvl+0x16c/0x1f0 [ 181.720751][T10650] should_fail_ex+0x497/0x5b0 [ 181.721899][T10650] _copy_from_user+0x2e/0xd0 [ 181.723071][T10650] kstrtouint_from_user+0xd7/0x1c0 [ 181.724377][T10650] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 181.725852][T10650] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 181.727338][T10650] proc_fail_nth_write+0x84/0x250 [ 181.728624][T10650] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 181.730065][T10650] ? ksys_write+0x12b/0x250 [ 181.731257][T10650] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 181.732695][T10650] vfs_write+0x24c/0x1150 [ 181.733796][T10650] ? __fget_files+0x1fc/0x3a0 [ 181.734991][T10650] ? __pfx___mutex_lock+0x10/0x10 [ 181.736310][T10650] ? __pfx_vfs_write+0x10/0x10 [ 181.737548][T10650] ? __fget_files+0x206/0x3a0 [ 181.738940][T10650] ksys_write+0x12b/0x250 [ 181.740397][T10650] ? __pfx_ksys_write+0x10/0x10 [ 181.741769][T10650] do_syscall_64+0xcd/0x250 [ 181.742942][T10650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.744444][T10650] RIP: 0033:0x7fb21e17f2bf [ 181.745579][T10650] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 8e 02 00 48 [ 181.750446][T10650] RSP: 002b:00007fb21eeb6050 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 181.752519][T10650] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb21e17f2bf [ 181.754534][T10650] RDX: 0000000000000001 RSI: 00007fb21eeb60b0 RDI: 0000000000000004 [ 181.756502][T10650] RBP: 00007fb21eeb60a0 R08: 0000000000000000 R09: 0000000000000000 [ 181.758715][T10650] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 181.760737][T10650] R13: 0000000000000000 R14: 00007fb21e345fa0 R15: 00007ffe76b1a8e8 [ 181.762705][T10650] [ 181.763581][ C2] vkms_vblank_simulate: vblank timer overrun [ 181.773818][ T5993] usb 5-1: USB disconnect, device number 18 [ 181.808059][ T39] audit: type=1400 audit(1732669596.341:664): avc: denied { sqpoll } for pid=10651 comm="syz.3.1738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 181.859168][ T39] audit: type=1400 audit(1732669596.397:665): avc: denied { append } for pid=10651 comm="syz.3.1738" name="qrtr-tun" dev="devtmpfs" ino=1333 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 181.995700][T10661] futex_wake_op: syz.3.1739 tries to shift op by -1; fix this program [ 182.397889][ T5993] usb 7-1: USB disconnect, device number 12 [ 182.410055][T10673] tipc: Enabling of bearer rejected, failed to enable media [ 182.631383][ T39] audit: type=1326 audit(1732669597.108:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10693 comm="syz.2.1751" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f86a1180809 code=0x0 [ 182.694275][T10698] FAULT_INJECTION: forcing a failure. [ 182.694275][T10698] name failslab, interval 1, probability 0, space 0, times 0 [ 182.699623][T10698] CPU: 0 UID: 0 PID: 10698 Comm: syz.0.1752 Not tainted 6.12.0-syzkaller-09734-g445d9f05fa14 #0 [ 182.702263][T10698] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 182.704969][T10698] Call Trace: [ 182.705839][T10698] [ 182.706619][T10698] dump_stack_lvl+0x16c/0x1f0 [ 182.707847][T10698] should_fail_ex+0x497/0x5b0 [ 182.709079][T10698] ? fs_reclaim_acquire+0xae/0x150 [ 182.710479][T10698] should_failslab+0xc2/0x120 [ 182.711747][T10698] __kmalloc_node_noprof+0xd1/0x510 [ 182.713141][T10698] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 182.714564][T10698] __kvmalloc_node_noprof+0xad/0x1a0 [ 182.715942][T10698] __nf_hook_entries_try_shrink+0x15f/0x400 [ 182.717493][T10698] __nf_unregister_net_hook+0x2e5/0x680 [ 182.718932][T10698] nf_unregister_net_hooks+0x11b/0x160 [ 182.720370][T10698] ip_vs_unregister_hooks+0xd8/0x140 [ 182.721791][T10698] ip_vs_unlink_service+0x954/0xba0 [ 182.723341][T10698] ? __might_fault+0xe3/0x190 [ 182.724570][T10698] ip_vs_flush+0x1c0/0x230 [ 182.725737][T10698] do_ip_vs_set_ctl+0xe8e/0x11c0 [ 182.727022][T10698] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 182.728396][T10698] ? nf_sockopt_find.constprop.0+0x221/0x290 [ 182.729987][T10698] ? __pfx_lock_release+0x10/0x10 [ 182.731355][T10698] ? rcu_is_watching+0x12/0xc0 [ 182.732618][T10698] ? __mutex_lock+0x1cc/0xa60 [ 182.733844][T10698] ? __mutex_unlock_slowpath+0x164/0x690 [ 182.735303][T10698] ? nf_setsockopt+0x8a/0xf0 [ 182.736509][T10698] nf_setsockopt+0x8a/0xf0 [ 182.737683][T10698] ip_setsockopt+0xcb/0xf0 [ 182.738847][T10698] sctp_setsockopt+0x16a/0xb810 [ 182.740160][T10698] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 182.742007][T10698] ? __pfx_sctp_setsockopt+0x10/0x10 [ 182.743403][T10698] ? selinux_socket_setsockopt+0x6a/0x80 [ 182.744890][T10698] ? sock_common_setsockopt+0x2e/0xf0 [ 182.746345][T10698] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 182.747896][T10698] do_sock_setsockopt+0x222/0x480 [ 182.749230][T10698] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 182.750711][T10698] ? lock_acquire+0x2f/0xb0 [ 182.751964][T10698] __sys_setsockopt+0x1a0/0x230 [ 182.753260][T10698] __x64_sys_setsockopt+0xbd/0x160 [ 182.754594][T10698] ? do_syscall_64+0x91/0x250 [ 182.755822][T10698] ? lockdep_hardirqs_on+0x7c/0x110 [ 182.757191][T10698] do_syscall_64+0xcd/0x250 [ 182.758382][T10698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.759914][T10698] RIP: 0033:0x7fdc59980809 [ 182.761220][T10698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.766423][T10698] RSP: 002b:00007fdc5a74f058 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 182.768554][T10698] RAX: ffffffffffffffda RBX: 00007fdc59b45fa0 RCX: 00007fdc59980809 [ 182.770633][T10698] RDX: 0000000000000485 RSI: 0000000000000000 RDI: 0000000000000003 [ 182.772765][T10698] RBP: 00007fdc5a74f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 182.774798][T10698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.776833][T10698] R13: 0000000000000000 R14: 00007fdc59b45fa0 R15: 00007ffc0600c4a8 [ 182.778864][T10698] [ 183.369919][ T66] Bluetooth: hci3: command 0x0405 tx timeout [ 183.370076][ T2298] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 183.374223][ T2298] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 183.614360][T10717] FAULT_INJECTION: forcing a failure. [ 183.614360][T10717] name failslab, interval 1, probability 0, space 0, times 0 [ 183.618445][T10717] CPU: 2 UID: 0 PID: 10717 Comm: syz.2.1758 Not tainted 6.12.0-syzkaller-09734-g445d9f05fa14 #0 [ 183.621193][T10717] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 183.623935][T10717] Call Trace: [ 183.624945][T10717] [ 183.625774][T10717] dump_stack_lvl+0x16c/0x1f0 [ 183.627042][T10717] should_fail_ex+0x497/0x5b0 [ 183.628266][T10717] ? fs_reclaim_acquire+0xae/0x150 [ 183.629610][T10717] should_failslab+0xc2/0x120 [ 183.630836][T10717] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 183.632388][T10717] ? __pfx_tcp_current_mss+0x10/0x10 [ 183.633776][T10717] ? __alloc_skb+0x2b1/0x380 [ 183.635014][T10717] __alloc_skb+0x2b1/0x380 [ 183.636163][T10717] ? __pfx___alloc_skb+0x10/0x10 [ 183.637603][T10717] ? hlock_class+0x4e/0x130 [ 183.638801][T10717] tcp_stream_alloc_skb+0x34/0x570 [ 183.640141][T10717] tcp_sendmsg_locked+0xed5/0x3770 [ 183.641573][T10717] ? __pfx___lock_acquire+0x10/0x10 [ 183.642926][T10717] ? __pfx_avc_has_perm+0x10/0x10 [ 183.644240][T10717] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 183.646140][T10717] ? tcp_sendmsg+0x20/0x50 [ 183.647732][T10717] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 183.649171][T10717] ? mark_held_locks+0x9f/0xe0 [ 183.650524][T10717] ? __local_bh_enable_ip+0xa4/0x120 [ 183.651959][T10717] tcp_sendmsg+0x2e/0x50 [ 183.653138][T10717] ? __pfx_tcp_sendmsg+0x10/0x10 [ 183.654574][T10717] inet_sendmsg+0xb9/0x140 [ 183.655740][T10717] __sys_sendto+0x42a/0x4f0 [ 183.656942][T10717] ? __pfx___sys_sendto+0x10/0x10 [ 183.658263][T10717] ? ksys_write+0x1ba/0x250 [ 183.659436][T10717] ? __pfx_ksys_write+0x10/0x10 [ 183.660714][T10717] __x64_sys_sendto+0xe0/0x1c0 [ 183.662012][T10717] ? do_syscall_64+0x91/0x250 [ 183.663232][T10717] ? lockdep_hardirqs_on+0x7c/0x110 [ 183.664615][T10717] do_syscall_64+0xcd/0x250 [ 183.665820][T10717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.667393][T10717] RIP: 0033:0x7f86a1180809 [ 183.668730][T10717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.673880][T10717] RSP: 002b:00007f86a1f34058 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 183.676401][T10717] RAX: ffffffffffffffda RBX: 00007f86a1345fa0 RCX: 00007f86a1180809 [ 183.679130][T10717] RDX: 0000000000000001 RSI: 0000000020000180 RDI: 0000000000000004 [ 183.681833][T10717] RBP: 00007f86a1f340a0 R08: 0000000000000000 R09: 0000000000000000 [ 183.683794][T10717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.685844][T10717] R13: 0000000000000000 R14: 00007f86a1345fa0 R15: 00007ffde10de6f8 [ 183.687867][T10717] [ 183.688770][ C2] vkms_vblank_simulate: vblank timer overrun [ 183.804026][T10728] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1761'. [ 183.806478][T10728] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1761'. [ 183.831673][ T39] kauditd_printk_skb: 4 callbacks suppressed [ 183.831690][ T39] audit: type=1400 audit(1732669598.230:671): avc: denied { getattr } for pid=10724 comm="syz.0.1760" name="/" dev="9p" ino=35922738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 183.833292][T10725] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 183.847334][ T39] audit: type=1400 audit(1732669598.249:672): avc: denied { read } for pid=10724 comm="syz.0.1760" name="file0" dev="overlay" ino=35922884 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 183.855651][ T39] audit: type=1400 audit(1732669598.249:673): avc: denied { open } for pid=10724 comm="syz.0.1760" path="/448/bus/file0" dev="overlay" ino=35922884 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 183.857133][T10725] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1760'. [ 184.003986][T10737] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1764'. [ 184.166280][T10743] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1767'. [ 184.234221][T10747] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1769'. [ 184.332694][T10750] 9pnet_fd: p9_fd_create_tcp (10750): problem connecting socket to 127.0.0.1 [ 184.642161][ T57] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 184.813135][ T57] usb 8-1: Using ep0 maxpacket: 32 [ 184.816035][ T57] usb 8-1: config 1 interface 0 altsetting 195 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 184.819447][ T57] usb 8-1: config 1 interface 0 has no altsetting 0 [ 184.822702][ T57] usb 8-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.40 [ 184.825132][ T57] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.827254][ T57] usb 8-1: Product: 䚆ᤊⴖ蛬î„嫨ê¹ä¥¯ãˆ‰ê´â®¾î†¼ë‚ºãœŽë§³ì£Œà°¥ä˜á®«ëºˆé”Œâ¢¶á‡æ°¥ç·´æ›€å˜Žîµ”ᖬשּ蘴ճ鵉仸íŒä•¹î…¢äŠ§ï¬“記ₜ㩙憒爺籜噜ì°äŠê¤“⥓ಶ鰦૫ë²á‡ºê‘’季ᜧྶç½âžœã±¬ë«€ä¨‰ë¸ºêºŠ [ 184.832828][ T57] usb 8-1: Manufacturer: ж [ 184.834062][ T57] usb 8-1: SerialNumber: ⡬澖◓äŽè®è› ê’±å½°Â‚Ԯꗳ◴㳌ì‹è£¶é¼“å´¥è¡ì®á’³ç¢ë’—å…‹î¹–î¢è§î€‡ê›¦î°¥âº§å±¤î¢»ì±ë”©é Ÿïª«ë‘‚刭뷴痮ꋒᰟ㮪æ™ì°³ìŽ§á‚ºêˆë äˆ³î…䡄⳼ʙë´ç«ºî‡ƒì»…éº‡ç¦¤ì¬²î¹¬é½ [ 184.834524][ C2] net_ratelimit: 41 callbacks suppressed [ 184.834534][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.060544][T10752] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 185.065101][T10752] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1771'. [ 185.073326][ T57] usbhid 8-1:1.0: can't add hid device: -71 [ 185.074945][ T57] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 185.077620][ T57] usb 8-1: USB disconnect, device number 13 [ 185.233031][T10759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.236101][T10759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.238385][T10759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.242121][T10759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.244554][T10759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.247767][T10758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.277228][T10761] FAULT_INJECTION: forcing a failure. [ 185.277228][T10761] name failslab, interval 1, probability 0, space 0, times 0 [ 185.280789][T10761] CPU: 0 UID: 0 PID: 10761 Comm: syz.0.1775 Not tainted 6.12.0-syzkaller-09734-g445d9f05fa14 #0 [ 185.283539][T10761] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 185.286457][T10761] Call Trace: [ 185.287376][T10761] [ 185.288209][T10761] dump_stack_lvl+0x16c/0x1f0 [ 185.289494][T10761] should_fail_ex+0x497/0x5b0 [ 185.290794][T10761] ? fs_reclaim_acquire+0xae/0x150 [ 185.292179][T10761] should_failslab+0xc2/0x120 [ 185.293542][T10761] __kmalloc_noprof+0xcb/0x510 [ 185.294833][T10761] ? __pfx___mutex_trylock_common+0x10/0x10 [ 185.296667][T10761] ? __kernel_text_address+0xd/0x40 [ 185.298079][T10761] ? genl_rcv_msg+0x580/0x800 [ 185.299355][T10761] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 185.301272][T10761] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 185.302844][T10761] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 185.304811][T10761] ? genl_get_cmd+0x195/0x580 [ 185.306495][T10761] ? __radix_tree_lookup+0x21f/0x2c0 [ 185.308243][T10761] genl_rcv_msg+0x565/0x800 [ 185.309674][T10761] ? __pfx_genl_rcv_msg+0x10/0x10 [ 185.311045][T10761] ? __pfx_thermal_genl_cmd_doit+0x10/0x10 [ 185.312720][T10761] ? __pfx___lock_acquire+0x10/0x10 [ 185.314195][T10761] netlink_rcv_skb+0x16b/0x440 [ 185.315499][T10761] ? __pfx_genl_rcv_msg+0x10/0x10 [ 185.316935][T10761] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 185.318324][T10761] ? down_read+0xc9/0x330 [ 185.319540][T10761] ? __pfx_down_read+0x10/0x10 [ 185.320861][T10761] ? netlink_deliver_tap+0x1ae/0xd30 [ 185.322245][T10761] genl_rcv+0x28/0x40 [ 185.323329][T10761] netlink_unicast+0x53c/0x7f0 [ 185.324646][T10761] ? __pfx_netlink_unicast+0x10/0x10 [ 185.326067][T10761] netlink_sendmsg+0x8b8/0xd70 [ 185.327352][T10761] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.328846][T10761] ____sys_sendmsg+0xaaf/0xc90 [ 185.330120][T10761] ? copy_msghdr_from_user+0x10b/0x160 [ 185.331638][T10761] ? __pfx_____sys_sendmsg+0x10/0x10 [ 185.333341][T10761] ___sys_sendmsg+0x135/0x1e0 [ 185.334798][T10761] ? __pfx____sys_sendmsg+0x10/0x10 [ 185.336303][T10761] ? __pfx_lock_release+0x10/0x10 [ 185.337701][T10761] ? trace_lock_acquire+0x146/0x1e0 [ 185.339053][T10761] ? __fget_files+0x206/0x3a0 [ 185.340270][T10761] __sys_sendmsg+0x16e/0x220 [ 185.341473][T10761] ? __pfx___sys_sendmsg+0x10/0x10 [ 185.342999][T10761] do_syscall_64+0xcd/0x250 [ 185.344211][T10761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.345776][T10761] RIP: 0033:0x7fdc59980809 [ 185.346927][T10761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.351845][T10761] RSP: 002b:00007fdc5a74f058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 185.354635][T10761] RAX: ffffffffffffffda RBX: 00007fdc59b45fa0 RCX: 00007fdc59980809 [ 185.356775][T10761] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000004 [ 185.358873][T10761] RBP: 00007fdc5a74f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 185.360933][T10761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.363042][T10761] R13: 0000000000000000 R14: 00007fdc59b45fa0 R15: 00007ffc0600c4a8 [ 185.365273][T10761] [ 185.399466][ T39] audit: type=1400 audit(1732669599.699:674): avc: denied { create } for pid=10762 comm="syz.0.1776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 185.404987][ T39] audit: type=1400 audit(1732669599.699:675): avc: denied { write } for pid=10762 comm="syz.0.1776" path="socket:[30397]" dev="sockfs" ino=30397 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 185.411660][ T39] audit: type=1400 audit(1732669599.699:676): avc: denied { nlmsg_read } for pid=10762 comm="syz.0.1776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 185.731248][T10774] netlink: 'syz.0.1779': attribute type 5 has an invalid length. [ 185.807037][T10782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.810193][T10782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.813562][T10782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.747400][ T39] audit: type=1400 audit(1732669600.961:677): avc: denied { setopt } for pid=10793 comm="syz.3.1784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 187.139194][T10811] FAULT_INJECTION: forcing a failure. [ 187.139194][T10811] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 187.144118][T10811] CPU: 2 UID: 0 PID: 10811 Comm: syz.1.1792 Not tainted 6.12.0-syzkaller-09734-g445d9f05fa14 #0 [ 187.147827][T10811] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 187.151585][T10811] Call Trace: [ 187.152584][T10811] [ 187.153621][T10811] dump_stack_lvl+0x16c/0x1f0 [ 187.155275][T10811] should_fail_ex+0x497/0x5b0 [ 187.156650][T10811] _copy_to_user+0x32/0xd0 [ 187.158242][T10811] simple_read_from_buffer+0xd0/0x160 [ 187.160202][T10811] proc_fail_nth_read+0x198/0x270 [ 187.162083][T10811] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 187.163953][T10811] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 187.165729][T10811] vfs_read+0x1df/0xbe0 [ 187.166810][T10811] ? __fget_files+0x1fc/0x3a0 [ 187.168040][T10811] ? __pfx___mutex_lock+0x10/0x10 [ 187.169372][T10811] ? __pfx_vfs_read+0x10/0x10 [ 187.170613][T10811] ? __fget_files+0x206/0x3a0 [ 187.171867][T10811] ksys_read+0x12b/0x250 [ 187.173378][T10811] ? __pfx_ksys_read+0x10/0x10 [ 187.174753][T10811] do_syscall_64+0xcd/0x250 [ 187.175950][T10811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.177730][T10811] RIP: 0033:0x7f36add7f21c [ 187.178867][T10811] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 8e 02 00 48 [ 187.184539][T10811] RSP: 002b:00007f36aeb33050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 187.187546][T10811] RAX: ffffffffffffffda RBX: 00007f36adf45fa0 RCX: 00007f36add7f21c [ 187.190057][T10811] RDX: 000000000000000f RSI: 00007f36aeb330b0 RDI: 0000000000000004 [ 187.192910][T10811] RBP: 00007f36aeb330a0 R08: 0000000000000000 R09: 0000000000000000 [ 187.195726][T10811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 187.198592][T10811] R13: 0000000000000000 R14: 00007f36adf45fa0 R15: 00007ffe852811c8 [ 187.201363][T10811] [ 187.202584][ C2] vkms_vblank_simulate: vblank timer overrun [ 187.250647][ T57] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 187.410905][ T57] usb 8-1: Using ep0 maxpacket: 32 [ 187.414013][ T57] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 187.417056][ T57] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 187.419997][ T57] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 187.425784][ T57] usb 8-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 187.428227][ T57] usb 8-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 187.430569][ T57] usb 8-1: Product: syz [ 187.431732][ T57] usb 8-1: Manufacturer: syz [ 187.433081][ T57] usb 8-1: SerialNumber: syz [ 187.437201][T10803] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 187.440485][ T57] input: appletouch as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/input/input22 [ 187.715569][ T8] usb 8-1: USB disconnect, device number 14 [ 187.719926][ T8] appletouch 8-1:1.0: input: appletouch disconnected [ 187.858853][T10825] ipvlan2: entered promiscuous mode [ 187.861793][T10825] bridge0: port 4(ipvlan2) entered blocking state [ 187.864012][T10825] bridge0: port 4(ipvlan2) entered disabled state [ 187.866075][T10825] ipvlan2: entered allmulticast mode [ 187.867456][T10825] bridge0: entered allmulticast mode [ 187.869369][T10825] ipvlan2: left allmulticast mode [ 187.870831][T10825] bridge0: left allmulticast mode [ 187.916125][T10826] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1798'. [ 188.208460][T10838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1802'. [ 188.284337][T10844] tipc: Started in network mode [ 188.285728][T10844] tipc: Node identity , cluster identity 4711 [ 188.287343][T10844] tipc: Failed to set node id, please configure manually [ 188.289379][T10844] tipc: Enabling of bearer rejected, failed to enable media [ 188.317443][T10851] FAULT_INJECTION: forcing a failure. [ 188.317443][T10851] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.322289][T10851] CPU: 0 UID: 0 PID: 10851 Comm: syz.3.1807 Not tainted 6.12.0-syzkaller-09734-g445d9f05fa14 #0 [ 188.325132][T10851] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 188.327944][T10851] Call Trace: [ 188.328829][T10851] [ 188.329608][T10851] dump_stack_lvl+0x16c/0x1f0 [ 188.331123][T10851] should_fail_ex+0x497/0x5b0 [ 188.332858][T10851] _copy_to_user+0x32/0xd0 [ 188.334094][T10851] simple_read_from_buffer+0xd0/0x160 [ 188.335484][T10851] proc_fail_nth_read+0x198/0x270 [ 188.336801][T10851] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 188.338275][T10851] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 188.339708][T10851] vfs_read+0x1df/0xbe0 [ 188.340855][T10851] ? __fget_files+0x1fc/0x3a0 [ 188.343265][T10851] ? __pfx___mutex_lock+0x10/0x10 [ 188.345089][T10851] ? __pfx_vfs_read+0x10/0x10 [ 188.346413][T10851] ? __fget_files+0x206/0x3a0 [ 188.347936][T10851] ksys_read+0x12b/0x250 [ 188.349119][T10851] ? __pfx_ksys_read+0x10/0x10 [ 188.350379][T10851] do_syscall_64+0xcd/0x250 [ 188.351608][T10851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.353222][T10851] RIP: 0033:0x7fb21e17f21c [ 188.354412][T10851] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 8e 02 00 48 [ 188.359477][T10851] RSP: 002b:00007fb21eeb6050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 188.362054][T10851] RAX: ffffffffffffffda RBX: 00007fb21e345fa0 RCX: 00007fb21e17f21c [ 188.364820][T10851] RDX: 000000000000000f RSI: 00007fb21eeb60b0 RDI: 0000000000000003 [ 188.367486][T10851] RBP: 00007fb21eeb60a0 R08: 0000000000000000 R09: 0000000000000000 [ 188.369581][T10851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 188.371651][T10851] R13: 0000000000000000 R14: 00007fb21e345fa0 R15: 00007ffe76b1a8e8 [ 188.373811][T10851] [ 188.537477][T10857] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10857 comm=syz.2.1810 [ 188.632310][ T39] audit: type=1400 audit(1732669602.729:678): avc: denied { read } for pid=10863 comm="syz.2.1812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 188.688255][ T39] audit: type=1400 audit(1732669602.785:679): avc: denied { watch } for pid=10863 comm="syz.2.1812" path="/proc/1115" dev="proc" ino=31678 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 188.690280][T10865] binder: BINDER_SET_CONTEXT_MGR already set [ 188.696961][ T39] audit: type=1326 audit(1732669602.795:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10866 comm="syz.3.1813" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb21e180809 code=0x0 [ 188.697983][T10865] binder: 10863:10865 ioctl 4018620d 20000100 returned -16 [ 189.597786][T10887] netlink: 512 bytes leftover after parsing attributes in process `syz.0.1819'. [ 189.600210][T10887] FAULT_INJECTION: forcing a failure. [ 189.600210][T10887] name failslab, interval 1, probability 0, space 0, times 0 [ 189.603546][T10887] CPU: 2 UID: 0 PID: 10887 Comm: syz.0.1819 Not tainted 6.12.0-syzkaller-09734-g445d9f05fa14 #0 [ 189.606919][T10887] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 189.609922][T10887] Call Trace: [ 189.610804][T10887] [ 189.611629][T10887] dump_stack_lvl+0x16c/0x1f0 [ 189.612872][T10887] should_fail_ex+0x497/0x5b0 [ 189.614432][T10887] ? fs_reclaim_acquire+0xae/0x150 [ 189.615819][T10887] should_failslab+0xc2/0x120 [ 189.617073][T10887] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 189.618868][T10887] ? __alloc_skb+0x2b1/0x380 [ 189.620461][T10887] __alloc_skb+0x2b1/0x380 [ 189.621939][T10887] ? __pfx___alloc_skb+0x10/0x10 [ 189.623229][T10887] ? __pfx___nla_validate_parse+0x10/0x10 [ 189.625159][T10887] thermal_genl_cmd_doit+0x10b/0x4b0 [ 189.627013][T10887] ? __pfx_thermal_genl_cmd_doit+0x10/0x10 [ 189.628871][T10887] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 189.631066][T10887] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 189.633202][T10887] genl_family_rcv_msg_doit+0x202/0x2f0 [ 189.634998][T10887] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 189.636647][T10887] ? genl_get_cmd+0x195/0x580 [ 189.637993][T10887] ? __radix_tree_lookup+0x21f/0x2c0 [ 189.639499][T10887] genl_rcv_msg+0x565/0x800 [ 189.640872][T10887] ? __pfx_genl_rcv_msg+0x10/0x10 [ 189.642441][T10887] ? __pfx_thermal_genl_cmd_doit+0x10/0x10 [ 189.644066][T10887] ? __pfx___lock_acquire+0x10/0x10 [ 189.645760][T10887] netlink_rcv_skb+0x16b/0x440 [ 189.647458][T10887] ? __pfx_genl_rcv_msg+0x10/0x10 [ 189.649252][T10887] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 189.651147][T10887] ? down_read+0xc9/0x330 [ 189.652732][T10887] ? __pfx_down_read+0x10/0x10 [ 189.654213][T10887] ? netlink_deliver_tap+0x1ae/0xd30 [ 189.655646][T10887] genl_rcv+0x28/0x40 [ 189.656708][T10887] netlink_unicast+0x53c/0x7f0 [ 189.657952][T10887] ? __pfx_netlink_unicast+0x10/0x10 [ 189.659331][T10887] netlink_sendmsg+0x8b8/0xd70 [ 189.660609][T10887] ? __pfx_netlink_sendmsg+0x10/0x10 [ 189.661986][T10887] ____sys_sendmsg+0xaaf/0xc90 [ 189.663590][T10887] ? copy_msghdr_from_user+0x10b/0x160 [ 189.665387][T10887] ? __pfx_____sys_sendmsg+0x10/0x10 [ 189.667136][T10887] ___sys_sendmsg+0x135/0x1e0 [ 189.668603][T10887] ? __pfx____sys_sendmsg+0x10/0x10 [ 189.670002][T10887] ? __pfx_lock_release+0x10/0x10 [ 189.671316][T10887] ? trace_lock_acquire+0x146/0x1e0 [ 189.672763][T10887] ? __fget_files+0x206/0x3a0 [ 189.673988][T10887] __sys_sendmsg+0x16e/0x220 [ 189.675460][T10887] ? __pfx___sys_sendmsg+0x10/0x10 [ 189.677295][T10887] do_syscall_64+0xcd/0x250 [ 189.678914][T10887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.681006][T10887] RIP: 0033:0x7fdc59980809 [ 189.682538][T10887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.689050][T10887] RSP: 002b:00007fdc5a74f058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 189.691886][T10887] RAX: ffffffffffffffda RBX: 00007fdc59b45fa0 RCX: 00007fdc59980809 [ 189.694558][T10887] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000004 [ 189.697246][T10887] RBP: 00007fdc5a74f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 189.699984][T10887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.702759][T10887] R13: 0000000000000000 R14: 00007fdc59b45fa0 R15: 00007ffc0600c4a8 [ 189.705542][T10887] [ 189.706714][ C2] vkms_vblank_simulate: vblank timer overrun [ 189.778397][T10890] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 189.780427][T10890] overlayfs: failed to set xattr on upper [ 189.781935][T10890] overlayfs: ...falling back to redirect_dir=nofollow. [ 189.783819][T10890] overlayfs: ...falling back to index=off. [ 189.785529][T10890] overlayfs: ...falling back to uuid=null. [ 189.787158][T10890] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 190.211580][T10906] tipc: Enabling of bearer rejected, failed to enable media [ 190.246907][T10908] kAFS: unable to lookup cell '/,c¾ûL' [ 190.382949][ C2] net_ratelimit: 78 callbacks suppressed [ 190.382962][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.475521][T10910] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1829'. [ 190.485244][T10912] FAULT_INJECTION: forcing a failure. [ 190.485244][T10912] name failslab, interval 1, probability 0, space 0, times 0 [ 190.489408][T10912] CPU: 0 UID: 0 PID: 10912 Comm: syz.3.1830 Not tainted 6.12.0-syzkaller-09734-g445d9f05fa14 #0 [ 190.493025][T10912] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 190.496742][T10912] Call Trace: [ 190.497872][T10912] [ 190.498845][T10912] dump_stack_lvl+0x16c/0x1f0 [ 190.500439][T10912] should_fail_ex+0x497/0x5b0 [ 190.502006][T10912] ? fs_reclaim_acquire+0xae/0x150 [ 190.503758][T10912] should_failslab+0xc2/0x120 [ 190.505349][T10912] __kmalloc_node_noprof+0xd1/0x510 [ 190.507069][T10912] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 190.508888][T10912] __kvmalloc_node_noprof+0xad/0x1a0 [ 190.510651][T10912] __nf_hook_entries_try_shrink+0x15f/0x400 [ 190.512631][T10912] __nf_unregister_net_hook+0x2e5/0x680 [ 190.514547][T10912] nf_unregister_net_hooks+0x11b/0x160 [ 190.516389][T10912] ip_vs_unregister_hooks+0xd8/0x140 [ 190.518265][T10912] ip_vs_unlink_service+0x954/0xba0 [ 190.520022][T10912] ? __might_fault+0xe3/0x190 [ 190.521615][T10912] ip_vs_flush+0x1c0/0x230 [ 190.523122][T10912] do_ip_vs_set_ctl+0xe8e/0x11c0 [ 190.524805][T10912] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 190.526602][T10912] ? nf_sockopt_find.constprop.0+0x221/0x290 [ 190.528649][T10912] ? __pfx_lock_release+0x10/0x10 [ 190.530415][T10912] ? rcu_is_watching+0x12/0xc0 [ 190.532143][T10912] ? __mutex_lock+0x1cc/0xa60 [ 190.533787][T10912] ? __mutex_unlock_slowpath+0x164/0x690 [ 190.535761][T10912] ? nf_setsockopt+0x8a/0xf0 [ 190.537392][T10912] nf_setsockopt+0x8a/0xf0 [ 190.538945][T10912] ip_setsockopt+0xcb/0xf0 [ 190.540497][T10912] sctp_setsockopt+0x16a/0xb810 [ 190.542216][T10912] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 190.543357][ T1322] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 190.544564][T10912] ? __pfx_sctp_setsockopt+0x10/0x10 [ 190.549124][T10912] ? selinux_socket_setsockopt+0x6a/0x80 [ 190.551117][T10912] ? sock_common_setsockopt+0x2e/0xf0 [ 190.553015][T10912] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 190.554975][T10912] do_sock_setsockopt+0x222/0x480 [ 190.556735][T10912] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 190.558593][T10912] ? lock_acquire+0x2f/0xb0 [ 190.560145][T10912] __sys_setsockopt+0x1a0/0x230 [ 190.561874][T10912] __x64_sys_setsockopt+0xbd/0x160 [ 190.563713][T10912] ? do_syscall_64+0x91/0x250 [ 190.565347][T10912] ? lockdep_hardirqs_on+0x7c/0x110 [ 190.567137][T10912] do_syscall_64+0xcd/0x250 [ 190.568716][T10912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.570770][T10912] RIP: 0033:0x7fb21e180809 [ 190.572358][T10912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.578817][T10912] RSP: 002b:00007fb21eeb6058 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 190.581530][T10912] RAX: ffffffffffffffda RBX: 00007fb21e345fa0 RCX: 00007fb21e180809 [ 190.584277][T10912] RDX: 0000000000000485 RSI: 0000000000000000 RDI: 0000000000000003 [ 190.586944][T10912] RBP: 00007fb21eeb60a0 R08: 0000000000000000 R09: 0000000000000000 [ 190.589743][T10912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 190.592541][T10912] R13: 0000000000000000 R14: 00007fb21e345fa0 R15: 00007ffe76b1a8e8 [ 190.595366][T10912] [ 190.725237][ T1322] usb 5-1: Using ep0 maxpacket: 32 [ 190.728552][ T1322] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 190.731285][T10922] cgroup: noprefix used incorrectly [ 190.732192][ T1322] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 190.732216][ T1322] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 190.735105][ T39] kauditd_printk_skb: 1 callbacks suppressed [ 190.735114][ T39] audit: type=1400 audit(1732669604.694:682): avc: denied { connect } for pid=10921 comm="syz.1.1834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 190.738886][ T1322] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 190.755704][ T1322] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 190.759031][ T1322] usb 5-1: Product: syz [ 190.760258][ T1322] usb 5-1: Manufacturer: syz [ 190.761584][ T1322] usb 5-1: SerialNumber: syz [ 190.768902][T10908] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 190.772071][ T1322] input: appletouch as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/input/input23 [ 190.824684][T10926] x_tables: duplicate underflow at hook 1 [ 191.060309][ T1322] usb 5-1: USB disconnect, device number 19 [ 191.066277][ T1322] appletouch 5-1:1.0: input: appletouch disconnected [ 191.494742][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.630692][ T39] audit: type=1400 audit(1732669605.535:683): avc: denied { mount } for pid=10930 comm="syz.0.1837" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 191.631223][T10931] devtmpfs: Unknown parameter '½ò9Ö…' [ 191.637336][ T39] audit: type=1400 audit(1732669605.535:684): avc: denied { remount } for pid=10930 comm="syz.0.1837" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 191.644029][T10931] fuse: Bad value for 'fd' [ 191.644270][ T39] audit: type=1400 audit(1732669605.545:685): avc: denied { mounton } for pid=10930 comm="syz.0.1837" path="/487/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 191.688370][ T39] audit: type=1400 audit(1732669605.592:686): avc: denied { setopt } for pid=10932 comm="syz.0.1839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 191.692418][T10934] netlink: 2384 bytes leftover after parsing attributes in process `syz.0.1839'. [ 191.829544][T10948] gfs2: path_lookup on ™6(ï+‰d‹QÌnB´!eU‚çVè!š`:Ñ 8×DSEíÄðÃÄèÎ Áy|YT¢®{-€íê°”,mb/ returned error -2 [ 191.972625][T10960] FAULT_INJECTION: forcing a failure. [ 191.972625][T10960] name failslab, interval 1, probability 0, space 0, times 0 [ 191.977824][T10960] CPU: 1 UID: 0 PID: 10960 Comm: syz.1.1849 Not tainted 6.12.0-syzkaller-09734-g445d9f05fa14 #0 [ 191.981398][T10960] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 191.984860][T10960] Call Trace: [ 191.986037][T10960] [ 191.987026][T10960] dump_stack_lvl+0x16c/0x1f0 [ 191.988683][T10960] should_fail_ex+0x497/0x5b0 [ 191.990084][T10960] ? fs_reclaim_acquire+0xae/0x150 [ 191.991584][T10960] should_failslab+0xc2/0x120 [ 191.993082][T10960] __kmalloc_cache_noprof+0x68/0x410 [ 191.994936][T10960] ? ww_mutex_lock_interruptible+0x37/0x160 [ 191.997040][T10960] ? ww_mutex_lock_interruptible+0x37/0x160 [ 191.999270][T10960] vkms_atomic_crtc_duplicate_state+0x78/0x1d0 [ 192.001413][T10960] drm_atomic_get_crtc_state+0x162/0x440 [ 192.003379][T10960] drm_atomic_set_property+0xbc7/0x3350 [ 192.005295][T10960] ? __pfx_drm_atomic_set_property+0x10/0x10 [ 192.007437][T10960] ? lock_acquire+0x2f/0xb0 [ 192.009068][T10960] ? __might_fault+0xe3/0x190 [ 192.010767][T10960] ? __might_fault+0xe3/0x190 [ 192.012483][T10960] drm_mode_atomic_ioctl+0x691/0x25d0 [ 192.014443][T10960] ? __pfx___lock_acquire+0x10/0x10 [ 192.016307][T10960] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 192.018376][T10960] ? do_raw_spin_unlock+0x172/0x230 [ 192.020155][T10960] drm_ioctl_kernel+0x1e6/0x3d0 [ 192.021787][T10960] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 192.023597][T10960] ? __might_fault+0x21/0x190 [ 192.025240][T10960] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 192.027104][T10960] ? __might_fault+0xe3/0x190 [ 192.028769][T10960] drm_ioctl+0x5d6/0xc00 [ 192.030234][T10960] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 192.032248][T10960] ? __pfx_drm_ioctl+0x10/0x10 [ 192.033942][T10960] ? __pfx_lock_release+0x10/0x10 [ 192.035754][T10960] ? selinux_file_ioctl+0x180/0x270 [ 192.037613][T10960] ? selinux_file_ioctl+0xb4/0x270 [ 192.039425][T10960] ? __pfx_drm_ioctl+0x10/0x10 [ 192.040966][T10960] __x64_sys_ioctl+0x190/0x200 [ 192.042658][T10960] do_syscall_64+0xcd/0x250 [ 192.044280][T10960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.046395][T10960] RIP: 0033:0x7f36add80809 [ 192.047984][T10960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.054635][T10960] RSP: 002b:00007f36aeb33058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 192.057584][T10960] RAX: ffffffffffffffda RBX: 00007f36adf45fa0 RCX: 00007f36add80809 [ 192.060071][T10960] RDX: 0000000020000380 RSI: 00000000c03864bc RDI: 0000000000000003 [ 192.062236][T10960] RBP: 00007f36aeb330a0 R08: 0000000000000000 R09: 0000000000000000 [ 192.064595][T10960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.066689][T10960] R13: 0000000000000000 R14: 00007f36adf45fa0 R15: 00007ffe852811c8 [ 192.068739][T10960] [ 192.608972][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.846502][T10976] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1856'. [ 192.849735][T10976] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1856'. [ 192.857583][T10976] erspan1: entered promiscuous mode [ 192.859591][T10976] erspan1: entered allmulticast mode [ 192.953841][T10979] ALSA: mixer_oss: invalid index 100000 [ 193.065895][T10982] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 193.131254][T10986] netlink: 512 bytes leftover after parsing attributes in process `syz.1.1860'. [ 193.165239][T10988] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 193.291582][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.294818][ T6095] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.298887][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.718448][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.827508][T10998] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.830277][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.839946][ T39] audit: type=1326 audit(1732669607.603:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10996 comm="syz.0.1864" exe="/syz-executor" sig=31 arch=c000003e syscall=317 compat=0 ip=0x7fdc59980809 code=0x0 [ 194.052465][ T39] audit: type=1400 audit(1732669607.799:688): avc: denied { read } for pid=11014 comm="syz.3.1866" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 194.058225][ T39] audit: type=1400 audit(1732669607.799:689): avc: denied { open } for pid=11014 comm="syz.3.1866" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 194.617197][T11022] overlayfs: missing 'lowerdir' [ 195.317431][T11038] [ 195.318309][T11038] ====================================================== [ 195.320692][T11038] WARNING: possible circular locking dependency detected [ 195.323065][T11038] 6.12.0-syzkaller-09734-g445d9f05fa14 #0 Not tainted [ 195.326581][T11038] ------------------------------------------------------ [ 195.329419][T11038] syz.3.1875/11038 is trying to acquire lock: [ 195.331230][T11038] ffff88805077f508 (&ovl_i_mutex_dir_key[depth]){++++}-{4:4}, at: walk_component+0x342/0x5b0 [ 195.334498][T11038] [ 195.334498][T11038] but task is already holding lock: [ 195.337020][T11038] ffff888043495c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x27b/0x500 [ 195.340102][T11038] [ 195.340102][T11038] which lock already depends on the new lock. [ 195.340102][T11038] [ 195.343576][T11038] [ 195.343576][T11038] the existing dependency chain (in reverse order) is: [ 195.344735][ T1414] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.346727][T11038] [ 195.346727][T11038] -> #3 (&of->mutex){+.+.}-{4:4}: [ 195.348870][ T1414] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.350802][T11038] __mutex_lock+0x19b/0xa60 [ 195.350821][T11038] kernfs_fop_write_iter+0x27b/0x500 [ 195.350835][T11038] iter_file_splice_write+0x90f/0x10b0 [ 195.358695][T11038] do_splice+0x145c/0x1f60 [ 195.360403][T11038] __do_splice+0x327/0x360 [ 195.362111][T11038] __x64_sys_splice+0x187/0x250 [ 195.363963][T11038] do_syscall_64+0xcd/0x250 [ 195.365728][T11038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.367959][T11038] [ 195.367959][T11038] -> #2 (&pipe->mutex){+.+.}-{4:4}: [ 195.370159][T11038] __mutex_lock+0x19b/0xa60 [ 195.371897][T11038] pipe_lock+0x64/0x80 [ 195.373290][T11038] iter_file_splice_write+0x1eb/0x10b0 [ 195.375274][T11038] do_splice+0x145c/0x1f60 [ 195.376878][T11038] __do_splice+0x327/0x360 [ 195.378490][T11038] __x64_sys_splice+0x187/0x250 [ 195.380324][T11038] do_syscall_64+0xcd/0x250 [ 195.382061][T11038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.384251][T11038] [ 195.384251][T11038] -> #1 (sb_writers#6){.+.+}-{0:0}: [ 195.386779][T11038] mnt_want_write+0x6f/0x450 [ 195.388570][T11038] ovl_create_object+0x12e/0x300 [ 195.390439][T11038] lookup_open.isra.0+0x1174/0x14c0 [ 195.392340][T11038] path_openat+0x904/0x2d60 [ 195.394023][T11038] do_filp_open+0x20c/0x470 [ 195.395708][T11038] do_sys_openat2+0x17a/0x1e0 [ 195.397496][T11038] __x64_sys_creat+0xcd/0x120 [ 195.399281][T11038] do_syscall_64+0xcd/0x250 [ 195.401010][T11038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.403157][T11038] [ 195.403157][T11038] -> #0 (&ovl_i_mutex_dir_key[depth]){++++}-{4:4}: [ 195.406052][T11038] __lock_acquire+0x249e/0x3c40 [ 195.407886][T11038] lock_acquire.part.0+0x11b/0x380 [ 195.409778][T11038] down_read+0x9a/0x330 [ 195.411357][T11038] walk_component+0x342/0x5b0 [ 195.413119][T11038] path_lookupat+0x17f/0x770 [ 195.414905][T11038] filename_lookup+0x221/0x5f0 [ 195.416731][T11038] kern_path+0x35/0x50 [ 195.418251][T11038] lookup_bdev+0xd9/0x280 [ 195.419872][T11038] resume_store+0x1d8/0x460 [ 195.421579][T11038] kobj_attr_store+0x55/0x80 [ 195.423363][T11038] sysfs_kf_write+0x117/0x170 [ 195.425107][T11038] kernfs_fop_write_iter+0x33d/0x500 [ 195.427074][T11038] vfs_write+0x5ae/0x1150 [ 195.428530][T11038] ksys_write+0x12b/0x250 [ 195.429829][T11038] do_syscall_64+0xcd/0x250 [ 195.431207][T11038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.432957][T11038] [ 195.432957][T11038] other info that might help us debug this: [ 195.432957][T11038] [ 195.436252][T11038] Chain exists of: [ 195.436252][T11038] &ovl_i_mutex_dir_key[depth] --> &pipe->mutex --> &of->mutex [ 195.436252][T11038] [ 195.440742][T11038] Possible unsafe locking scenario: [ 195.440742][T11038] [ 195.443272][T11038] CPU0 CPU1 [ 195.445105][T11038] ---- ---- [ 195.446920][T11038] lock(&of->mutex); [ 195.448055][T11038] lock(&pipe->mutex); [ 195.449846][T11038] lock(&of->mutex); [ 195.451997][T11038] rlock(&ovl_i_mutex_dir_key[depth]); [ 195.453878][T11038] [ 195.453878][T11038] *** DEADLOCK *** [ 195.453878][T11038] [ 195.456600][T11038] 4 locks held by syz.3.1875/11038: [ 195.458274][T11038] #0: ffff8880322b47f8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x267/0x390 [ 195.461360][T11038] #1: ffff88802961a420 (sb_writers#9){.+.+}-{0:0}, at: ksys_write+0x12b/0x250 [ 195.464409][T11038] #2: ffff888043495c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x27b/0x500 [ 195.467748][T11038] #3: ffff888100e97698 (kn->active#65){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x29e/0x500 [ 195.470508][T11038] [ 195.470508][T11038] stack backtrace: [ 195.472118][T11038] CPU: 0 UID: 0 PID: 11038 Comm: syz.3.1875 Not tainted 6.12.0-syzkaller-09734-g445d9f05fa14 #0 [ 195.475484][T11038] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 195.479117][T11038] Call Trace: [ 195.480267][T11038] [ 195.481312][T11038] dump_stack_lvl+0x116/0x1f0 [ 195.482948][T11038] print_circular_bug+0x419/0x5d0 [ 195.484764][T11038] check_noncircular+0x31a/0x400 [ 195.486483][T11038] ? stack_trace_save+0x95/0xd0 [ 195.488199][T11038] ? __pfx_check_noncircular+0x10/0x10 [ 195.490099][T11038] ? add_lock_to_list+0x17d/0x390 [ 195.491857][T11038] __lock_acquire+0x249e/0x3c40 [ 195.493551][T11038] ? __pfx___lock_acquire+0x10/0x10 [ 195.495339][T11038] ? lock_acquire.part.0+0x11b/0x380 [ 195.497372][T11038] ? find_held_lock+0x2d/0x110 [ 195.499009][T11038] lock_acquire.part.0+0x11b/0x380 [ 195.500765][T11038] ? walk_component+0x342/0x5b0 [ 195.502446][T11038] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 195.504375][T11038] ? rcu_is_watching+0x12/0xc0 [ 195.506047][T11038] ? trace_lock_acquire+0x146/0x1e0 [ 195.507831][T11038] ? walk_component+0x342/0x5b0 [ 195.509254][T11038] ? lock_acquire+0x2f/0xb0 [ 195.510631][T11038] ? walk_component+0x342/0x5b0 [ 195.511979][T11038] down_read+0x9a/0x330 [ 195.513245][T11038] ? walk_component+0x342/0x5b0 [ 195.514752][T11038] ? __pfx_down_read+0x10/0x10 [ 195.516360][T11038] ? lookup_fast+0x155/0x540 [ 195.517944][T11038] walk_component+0x342/0x5b0 [ 195.519383][T11038] path_lookupat+0x17f/0x770 [ 195.520982][T11038] filename_lookup+0x221/0x5f0 [ 195.522587][T11038] ? __pfx_filename_lookup+0x10/0x10 [ 195.523812][T11038] ? getname_kernel+0x52/0x370 [ 195.525052][T11038] ? __asan_memcpy+0x3c/0x60 [ 195.526569][T11038] kern_path+0x35/0x50 [ 195.527908][T11038] lookup_bdev+0xd9/0x280 [ 195.529337][T11038] ? __pfx_lookup_bdev+0x10/0x10 [ 195.530882][T11038] ? __asan_memcpy+0x3c/0x60 [ 195.532619][T11038] resume_store+0x1d8/0x460 [ 195.534054][T11038] ? __pfx_resume_store+0x10/0x10 [ 195.535436][T11038] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 195.536906][T11038] ? rcu_is_watching+0x12/0xc0 [ 195.538168][T11038] ? __pfx_resume_store+0x10/0x10 [ 195.539492][T11038] kobj_attr_store+0x55/0x80 [ 195.540702][T11038] ? __pfx_kobj_attr_store+0x10/0x10 [ 195.542028][T11038] sysfs_kf_write+0x117/0x170 [ 195.543229][T11038] kernfs_fop_write_iter+0x33d/0x500 [ 195.544566][T11038] ? __pfx_sysfs_kf_write+0x10/0x10 [ 195.545891][T11038] vfs_write+0x5ae/0x1150 [ 195.547038][T11038] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 195.548595][T11038] ? __pfx___mutex_lock+0x10/0x10 [ 195.549905][T11038] ? __pfx_vfs_write+0x10/0x10 [ 195.551186][T11038] ksys_write+0x12b/0x250 [ 195.552310][T11038] ? __pfx_ksys_write+0x10/0x10 [ 195.553578][T11038] do_syscall_64+0xcd/0x250 [ 195.554761][T11038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.556290][T11038] RIP: 0033:0x7fb21e180809 [ 195.557493][T11038] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.562444][T11038] RSP: 002b:00007fb21eeb6058 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 195.564609][T11038] RAX: ffffffffffffffda RBX: 00007fb21e345fa0 RCX: 00007fb21e180809 [ 195.566640][T11038] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 0000000000000007 [ 195.568671][T11038] RBP: 00007fb21e1f393e R08: 0000000000000000 R09: 0000000000000000 [ 195.570697][T11038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 195.572735][T11038] R13: 0000000000000000 R14: 00007fb21e345fa0 R15: 00007ffe76b1a8e8 [ 195.574775][T11038] [ 195.576388][T11038] PM: Image not found (code -22) [ 195.952747][ C2] net_ratelimit: 76 callbacks suppressed [ 195.952765][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.053918][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.225091][ T5993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.396572][ T64] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.400379][ T6095] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.403059][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.406223][ T63] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.165795][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.508218][ T63] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.277506][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.859079][ T1114] ata3: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 199.863564][ T1114] ata3.00: configured for UDMA/100 [ 201.501220][ C2] net_ratelimit: 4 callbacks suppressed [ 201.501239][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.843611][ T63] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.623689][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.955833][ T1322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.554023][ T6011] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.724837][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.727222][ T6095] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.067815][ T63] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.836685][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.178984][ T63] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog VM DIAGNOSIS: 01:06:49 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff8510fbe0 RDI=ffffffff9ab40b20 RBP=ffffffff9ab40ae0 RSP=ffffc9000c2e6ee0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=732d302e32312e36 R12=0000000000000000 R13=0000000000000020 R14=fffffbfff35681b6 R15=dffffc0000000000 RIP=ffffffff8510fc07 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007fb21eeb66c0 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000005a496000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000045c66c RBX=0000000000000001 RCX=ffffffff8b2f6ac9 RDX=ffffed100d4e6fee RSI=ffffffff8bd1e0c0 RDI=ffffffff81654169 RBP=ffffed10039df910 RSP=ffffc90000187e08 R8 =0000000000000000 R9 =ffffed100d4e6fed R10=ffff88806a737f6b R11=0000000000000000 R12=0000000000000001 R13=ffff88801cefc880 R14=ffffffff9060ae90 R15=0000000000000000 RIP=ffffffff8b2f7eaf RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005560c36f1908 CR3=0000000027d3e000 CR4=00352ef0 DR0=0000000100000001 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055558f3cf940 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055558f3d2074 000055558f3d2070 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055558f3c94a8 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055558f43ef12 000055558f43e810 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000031383835 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a0030008005b9003 03ffffffff045b80 0300080020861000 20100006004b9628 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a830783c847a40a9 d2d1ea184a398245 9475423ab1bc7cb4 4e7bc4683c3f23ba ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 f02d8abfbc2f1508 492ddc78168d8a0e 3cd2a8b0680ee1a5 7542fb7012291a2a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 59c39f06315be400 6c1332760ffe4be7 b217fccd8250ed0d 5c0ad43a81b46e30 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 e7eac6db5f4e6857 685b4f19b539506c 1ee97828727039a9 2129c2c83ae7a546 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100100001800401 0000000806060144 c200080001e00300 100001d003001000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 01c00302100001b0 0301801000169003 1be49a6a6010ab62 1f00009abc983a0b ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a23e15e54c99d63e f869c91d29198635 568a6a78cb072f08 3472f154d69eeb05 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0001e7eac6db5f4e 6857685b4f19b539 506c1ee978287270 39a92129c2c83ae7 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6220303263643363 6139666666666666 66660a6261745f6f 746f727020622030 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 656b5f5f20622030 3663643363613966 666666666666660a 392e79656b5f5f20 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a37312e79656b5f 5f20622030616364 3363613966666666 666666660a322e79 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 66660a312e79656b 5f5f206220303031 3334636139666666 66666666660a6469 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 72646f6d665f7063 74706d5f66706220 6220303431333463 6139666666666666 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e79656b5f5f2062 2030383133346361 3966666666666666 660a7364695f7465 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e5f656b61687364 6e61682062203063 3133346361396666 6666666666660a30 info registers vcpu 2 CPU#2 RAX=0000000000315ee4 RBX=0000000000000002 RCX=ffffffff8b2f6ac9 RDX=ffffed100d506fee RSI=ffffffff8bd1e0c0 RDI=ffffffff81654169 RBP=ffffed1003ad1000 RSP=ffffc90000197e08 R8 =0000000000000000 R9 =ffffed100d506fed R10=ffff88806a837f6b R11=0000000000000000 R12=0000000000000002 R13=ffff88801d688000 R14=ffffffff9060ae90 R15=0000000000000000 RIP=ffffffff8b2f7eaf RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c381b02 CR3=00000000527b6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000636c ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdc599f47e8 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdc599f47f5 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdc599f47ef ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdc599f4803 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdc599f4889 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdc599f4967 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdc59b10488 00007fdc59b10480 00007fdc59b10478 00007fdc59b10450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdc5a67d100 00007fdc59b10440 00007fdc59b10004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdc59b10498 00007fdc59b10490 00007fdc59b10488 00007fdc59b10480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000406344 RBX=0000000000000003 RCX=ffffffff8b2f6ac9 RDX=ffffed100d526fee RSI=ffffffff8bd1e0c0 RDI=ffffffff81654169 RBP=ffffed1003ad1488 RSP=ffffc900001a7e08 R8 =0000000000000000 R9 =ffffed100d526fed R10=ffff88806a937f6b R11=0000000000000000 R12=0000000000000003 R13=ffff88801d68a440 R14=ffffffff9060ae90 R15=0000000000000000 RIP=ffffffff8b2f7eaf RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c43a991 CR3=000000005a496000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0065766973727563 65725f6465677265 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb21e1f47e8 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb21e1f47f5 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb21e1f47ef ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb21e1f4803 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb21e1f4889 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb21e1f4967 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 70012082ae9116b9 43711067e2fe2226 80c9be93eba6845d 5ef4d88b89edf0c8 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c22fc569157fea8b 7e8670012082ae91 16b943711067e2fe 222680c9be93eba6 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 845d5ef4d88b89ed f0c8000000000000 0000000000000000 0003000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000