last executing test programs: 3m0.131080073s ago: executing program 1 (id=412): syz_emit_ethernet(0x3e, &(0x7f00000016c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x8, 0x3a, 0x0, @dev, @local, {[], @echo_request}}}}}, 0x0) syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d38461", @ANYRESHEX]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c76133", 0xc5}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc00510c"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9c", 0x2d}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e385", 0x1c}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a", 0x14}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462b", 0x84}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$loop(&(0x7f0000000500), 0x6, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x40000) 2m59.960531819s ago: executing program 1 (id=419): openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8) syz_emit_ethernet(0x3e, &(0x7f00000016c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x8, 0x3a, 0x0, @dev, @local, {[], @echo_request}}}}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c", 0x5b}], 0x1, 0x0, 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309d", 0x11}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d", 0x69}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$loop(&(0x7f0000000500), 0x6, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x7ffd) 2m59.798893338s ago: executing program 1 (id=423): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) r1 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000200)) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000500)=@mangle={'mangle\x00', 0x1f, 0x6, 0x600, 0x440, 0x440, 0x0, 0x440, 0x440, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, &(0x7f0000000280), {[{{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x7}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@loopback, @ipv4=@broadcast, 0x2d, 0x3b, 0x10}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xf39f9a452082bd1f}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@local, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x11, 0xfffe}}}, {{@ipv6={@private0, @private1={0xfc, 0x1, '\x00', 0x1}, [0xff, 0xff, 0xff], [0x0, 0xff, 0xffffff00, 0xff], 'veth0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2c, 0x80, 0x0, 0x2}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@rand_addr=0x64010102, @ipv4=@rand_addr=0x64010100, 0x25, 0x36, 0x5}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0x14}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x26}}, [0xff, 0xff000000, 0xffffff00, 0xffffff00], [0xff, 0xff000000, 0xff000000], 'ipvlan0\x00', 'vxcan1\x00', {0xff}, {}, 0x87, 0xc8, 0x5, 0x58}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast1, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0xb, 0x1d, 0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x40000000000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r4, 0x7}}, 0x48) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r6, 0x8b27, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r7, 0x10, 0x0, @in={0x2, 0x4e23, @loopback}}}, 0x90) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000000000180c200000e88a8000081000002180045000020000040000011907864010101e0000001000017c1000c907861040001"], 0x36) 2m59.570690791s ago: executing program 1 (id=427): mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x315901c, 0x0) chroot(&(0x7f0000001140)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00') socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x2a, &(0x7f0000000140), 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x2a, &(0x7f0000000140), 0x4) syz_emit_ethernet(0x68, &(0x7f0000005a40)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "75e700", 0x32, 0x3a, 0x0, @dev, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "a3579e", 0x0, 0x2c, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, [], "6be2"}}}}}}}, 0x0) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x55}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_FUTEX_WAITV={0x35, 0x4, 0x0, 0x0, 0x0, &(0x7f00000019c0)=[{0xf3, 0x0}], 0x1, 0x0, 0x1}) io_uring_enter(r1, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) (async) io_uring_enter(r1, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r5) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) syz_io_uring_setup(0x1575, &(0x7f0000000280)={0x0, 0x45cf, 0x1000, 0x0, 0xa5}, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000480)) (async) syz_io_uring_setup(0x1575, &(0x7f0000000280)={0x0, 0x45cf, 0x1000, 0x0, 0xa5}, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000480)) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r7}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000680)={r8, 0x1ff, 0x0, 0x1, 0x3, [], [0x7fdfffff, 0x0, 0x0, 0x4], [0x0, 0x1001000, 0x2], [0x100000000, 0x0, 0xfffffffffefffffc, 0x9]}) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000680)={r8, 0x1ff, 0x0, 0x1, 0x3, [0x0, 0x0, 0x0, 0x0], [0x7fdfffff, 0x0, 0x0, 0x4], [0x0, 0x1001000, 0x2], [0x100000000, 0x0, 0xfffffffffefffffc, 0x9]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r5, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r9, r10, 0x0, r10], [0x2b8], [0x0, 0x1]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x3f}) accept$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}, &(0x7f0000000040)=0x1c) (async) accept$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}, &(0x7f0000000040)=0x1c) 2m59.48976963s ago: executing program 1 (id=429): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000004680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004600)={0x18, 0x1404, 0x1, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x8001}]}, 0x18}, 0x1, 0x0, 0x0, 0x48081}, 0x4) 2m59.225846455s ago: executing program 1 (id=431): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc1105518, 0x0) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) socket$packet(0x11, 0x3, 0x300) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f002}) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000001c0)=0x7, 0x4) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x103000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2m59.085507138s ago: executing program 32 (id=431): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc1105518, 0x0) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) socket$packet(0x11, 0x3, 0x300) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f002}) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000001c0)=0x7, 0x4) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x103000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 52.435597801s ago: executing program 3 (id=2513): mkdir(&(0x7f0000000580)='./file0\x00', 0x1ff) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x20, 0x0, &(0x7f0000000240)=[@request_death={0x400c630e, 0x1}, @request_death={0x400c630e, 0x1}], 0x0, 0x0, 0x0}) mount(&(0x7f00000005c0)=@filename='ubi0_0\x00', &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='ubifs\x00', 0x0, 0x0) 52.360778939s ago: executing program 3 (id=2514): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) write$dsp(0xffffffffffffffff, &(0x7f00000001c0)='\\', 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4c01000010000100ffffff07000000000a01010100000000000000000000000000000000000000000000000000000000000800004e2100030a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000033000000ac1414aa000000000000000000000000cf030c4700000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000fcffffff00000000020000000a0001000c000000000000004c0012006d6f727573363430000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000000010000a002abd70002bbd70000b0000002a3caf3b6a891f7feff7e9c921a574d9ce39f4f1663e9316962b29f0becad9581a5a19262aaa8012357dcc8c1d3f402d01949f7a2e9eb467fe8ef6c246f5301696c95e65ee71ecc45a3117e7c5d4e31231ebcd27486af975bb3a0fcf3197f64336f0f0a09d51eea5816f12aadecd000000000000"], 0x14c}}, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000080)={0x1, 0x0, 0xffff5f11, 0xfffd, 0xfffffffffffffffb, 0xb, 0xfffffffffffffffa, 0x1fe, 0x4a, 0x28, 0x4, 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) link(&(0x7f0000000000)='./file1\x00', 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x5f}, @device_a, @device_a, @initial, {0x2}, @value=@ver_80211n={0x0, 0x1, 0x1, 0x3, 0x0, 0x2, 0x1, 0x0, 0x1}}, 0x35, @val={0x8c, 0x10, {0xa14, "fe69738ed750", @short="07e077f60c458bb7"}}}, 0x30) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) 51.778204568s ago: executing program 3 (id=2516): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000240)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0002}}}, 0x11) 51.715804638s ago: executing program 3 (id=2517): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x105842, 0xa9) writev(r0, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000e00)='t', 0x96200}, {0x0, 0x44000}, {&(0x7f0000001000)="d6", 0x21800}], 0x21) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000c40)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x27}}}, 0x400, 0xfffd, 0x2, 0x4, 0x40, 0x7, 0x2}, 0x9c) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r2, 0x4b72, &(0x7f0000001480)={0x2, 0x1, 0x5, 0x10, 0x1c2, &(0x7f0000000500)="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"}) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000100), &(0x7f00000001c0)=0x8) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000080)='./file0\x00') r3 = accept4$unix(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000280)=0x6e, 0x80800) recvmsg$unix(r3, &(0x7f0000000b80)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000a00)=[{&(0x7f0000000380)=""/134, 0x86}, {&(0x7f0000000440)=""/10, 0xa}, {&(0x7f0000000900)=""/51, 0x33}, {&(0x7f0000000940)=""/135, 0x87}], 0x4, &(0x7f0000000a40)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x138}, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_OPENQRY(r4, 0x5600, &(0x7f0000000040)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r5, &(0x7f0000000140)=ANY=[], 0x146) syz_open_dev$vim2m(0x0, 0x2000000f5, 0x2) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0), 0x4) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000300)="d3", 0x1}], 0x1) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000040)={0x202, 0xa, 0x4, 0x0, 0xfd}) ioctl$VIDIOC_REQBUFS(r6, 0xc0585609, &(0x7f0000000280)={0x0, 0xa}) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)) 51.475284838s ago: executing program 3 (id=2519): mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000440)='mqueue\x00', 0x320010, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) (async) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r2, 0x800448d7, &(0x7f0000000080)) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170478560f60eb8dc258ded60aee45b04b15db386", 0x30) (async) r4 = accept$alg(r3, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000002940)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="fb1add96e95c4cee3df251747b4c22fa", 0x10}], 0x1, 0x0, 0x0, 0x20000800}], 0x1, 0x24000800) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f0000000100)='fusectl\x00', 0x0, 0x0) (async) recvmsg(r4, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000003f80)=""/4109, 0x100d}], 0x1}, 0x20f2) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1a00003, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2b00b8, 0x0) (async) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1}) (async) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018000000000000000000000006000000000000000000"], 0x0, 0x1a, 0x0, 0x6}, 0x28) (async) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) (async) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x9, 0x0, 0x2}, 0x10) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000100000000000000080003000b000000", 0x24) 50.930951926s ago: executing program 3 (id=2522): mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x100) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x111) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x9}}, './file1\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc601}) socket$kcm(0x2, 0xa, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) r3 = syz_clone(0x4800000, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000340)={0x20071026}, &(0x7f0000000240)={0x0, 0x0, 0x6, 0x5, 0x0, 0x3}) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000300)={0x0, 0x0, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_DROP_MASTER(r5, 0x641f) mq_open(&(0x7f00000079c0)='.:-\\!\x00', 0x40, 0x12, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000280)={0xddc7, 0x2, [{0x1, 0x1}, {0x1, 0x1}]}) migrate_pages(r3, 0x3, 0x0, 0x0) write$tun(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd09032800050030000300600000000228290081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) setxattr$security_ima(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f00000001c0)=@md5={0x1, "a7015efb7e84e10883b049b9e4b2a465"}, 0x11, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) statx(r6, 0x0, 0x1000, 0x10, 0x0) syz_open_dev$evdev(&(0x7f0000000800), 0x0, 0x2840) 50.84567501s ago: executing program 33 (id=2522): mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x100) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x111) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x9}}, './file1\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc601}) socket$kcm(0x2, 0xa, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) r3 = syz_clone(0x4800000, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000340)={0x20071026}, &(0x7f0000000240)={0x0, 0x0, 0x6, 0x5, 0x0, 0x3}) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000300)={0x0, 0x0, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_DROP_MASTER(r5, 0x641f) mq_open(&(0x7f00000079c0)='.:-\\!\x00', 0x40, 0x12, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000280)={0xddc7, 0x2, [{0x1, 0x1}, {0x1, 0x1}]}) migrate_pages(r3, 0x3, 0x0, 0x0) write$tun(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd09032800050030000300600000000228290081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) setxattr$security_ima(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f00000001c0)=@md5={0x1, "a7015efb7e84e10883b049b9e4b2a465"}, 0x11, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) statx(r6, 0x0, 0x1000, 0x10, 0x0) syz_open_dev$evdev(&(0x7f0000000800), 0x0, 0x2840) 4.158939789s ago: executing program 0 (id=3052): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x40180, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xd, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x82, 0x7fffffff, 0x8, 0x1}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4040840) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$IOCTL_VMCI_SET_NOTIFY(r0, 0x7cb, &(0x7f0000000040)={0x6, 0x9, 0x9}) syz_open_procfs(0x0, &(0x7f0000000600)='net/xfrm_stat\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101302, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r7, 0x4018aee3, &(0x7f0000000140)=@attr_other={0x0, 0x1, 0x9d2, 0x0}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0386000000000000140012800b0001006970766c616e0080", @ANYRES32, @ANYBLOB="08001b"], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0xc03, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0/../file0/file0\x00', &(0x7f0000002100), 0x1803c44, &(0x7f00000006c0)=ANY=[@ANYBLOB="66643d6abea42875b7d938d4dbc786703c39c32415dd6d65d68e9ec0d36c34f08a84a1453515b8aad6a18c249f8e2200979c03edb9fdb6dc3117dc373ab9041a7c00d3fad79f538db7ef5d14adcdbf5aacfe4f082ad7f50100000015335226f3d0f80fb2688447501ab6abc703fb081a9b84ee613d998713d7972986ba8db9b5dbe5d1cc4fef82af62bfa8a893ee91f2bb7d15b1d514263098cff07cea", @ANYRESOCT=r11, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) rmdir(&(0x7f0000000040)='./file0/../file0/file0\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000008180)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r13 = socket$inet_smc(0x2b, 0x1, 0x0) accept$inet(r13, 0x0, 0x0) syz_fuse_handle_req(r11, &(0x7f000000c280)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x90, 0xffffffffffffffda, 0x8, {0x4, 0x3, 0x8000000000, 0x19, 0xebd, 0xebad, {0x5, 0x0, 0x4, 0x1, 0x20000, 0x20000, 0x3, 0x0, 0x0, 0x4000, 0x0, r12, 0x0, 0x4000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r11, &(0x7f0000006180)="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", 0x2000, &(0x7f0000000600)={&(0x7f00000010c0)={0xfffffffffffffeab, 0x0, 0x40000000000000, {0x7, 0x29, 0x80000000, 0x20011000, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_kvm_setup_cpu$x86(r9, r10, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000500)="670f79e80f381c530ef30f1633660f3880060f01c9360f212d66b831010f00d8c74424000a000000c74424027127ba45c7442406000000000f011c24b8060000000f23c80f21f835000080000f23f82edee0", 0x52}], 0x1, 0x10, &(0x7f0000000080)=[@cr0={0x0, 0x20000009}, @flags={0x3, 0x800}], 0x2) ioctl$KVM_GET_DIRTY_LOG(r9, 0x4010ae42, &(0x7f00000000c0)={0x2, 0x0, &(0x7f0000fef000/0x2000)=nil}) 1.210468808s ago: executing program 0 (id=3070): unshare(0x6a040000) (async) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async) mkdir(&(0x7f0000000340)='./sys/devices/platform/vhci_hcd.0/detach\x00', 0x36) (async) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0x9, @mcast2, 0x4}, 0x1c) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$netlink(r0, &(0x7f00000000c0)=@unspec, 0xc) (async) syz_emit_ethernet(0x84, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6a000000004e110000000000000000000000ffffac1414bbff0200000000000000000000000000014e1d4e20"], 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/devices/platform/vhci_hcd.0/detach\x00', 0x1, 0x0) write(r1, &(0x7f0000000500)='0', 0x1) (async) r2 = socket$inet(0x2, 0x5, 0x5) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x307, @local}, 0x48, {0x2, 0x0, @local}}) r3 = socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d0009000d0000000005000000", 0x29}], 0x1) r4 = socket(0x10, 0x5, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1b0000001a00626369750000000004001c1400000000000800010000000000"], 0x24}}, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c00078008000640"], 0x5c}}, 0x20084884) (async) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x300, 0x0, 0x10064053}, 0x4040000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xd0f, 0x470bd30, 0x25dfdbff, {0x60, 0x0, 0x0, r8, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0x5, 0x6}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x4048840) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a2c0000000b0a010100000000000000000a0000000c001040823e65f9d0696f3896af010073797a3100000000140000001100010000000000000000000100000a"], 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r6) 631.87152ms ago: executing program 2 (id=3081): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000002100)={0x802, 0x0, 0x0, 0x7fffffff}, 0x10) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) (async) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) (async) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000000), 0x8008, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchmodat(r2, &(0x7f00000000c0)='./file1\x00', 0x0) (async) unlink(&(0x7f0000000180)='./file1\x00') mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x20, 0x0) (async) openat(r2, &(0x7f0000000300)='./file1\x00', 0x88700, 0x36) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r0], 0x20}}, 0x0) 580.474837ms ago: executing program 2 (id=3083): sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0xfd}}, 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0xe, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20040055}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1de0000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018860000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 580.303165ms ago: executing program 2 (id=3084): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r0, 0x400, 0x1) fcntl$getflags(r0, 0x401) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r3, 0xc0845658, &(0x7f0000000000)={0x0, @bt={0x3ff, 0xa4c3, 0x0, 0x1, 0xfffffffffffffffc, 0x5, 0x70, 0x5, 0x100, 0x8, 0x4, 0x80, 0x3, 0x9, 0x16, 0x12, {0x7, 0x9}, 0x7, 0x6}}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="5000000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="1111020020980000280012800b0001006d61637365630000180002800c0004000300000100c2800008000500e7ffffff08000500", @ANYRES32=r4], 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x48, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40081e0}, 0x44000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0) sendmmsg$inet(r5, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 480.463597ms ago: executing program 0 (id=3085): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x18, 0x1409, 0x1, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x0) (fail_nth: 3) 480.358198ms ago: executing program 0 (id=3086): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$inet(r0, 0x0, 0x4) openat$selinux_relabel(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x9, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r2) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000fcdbdf2503000000180001801400020073797a5f74756e00000000000000000005000200030000000500050000000000050003"], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c4) 341.394194ms ago: executing program 4 (id=3088): r0 = socket$nl_crypto(0x10, 0x3, 0x15) write(r0, &(0x7f00000000c0)="e0000000120005000000000000000000736861332d3235360000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000736861332d3235362d6c696200"/192, 0xe0) 338.321097ms ago: executing program 0 (id=3089): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="7b87f20f01"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3f, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@newtclass={0x34, 0x28, 0x200, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xffff}, {0xfff2, 0x7}, {0x2, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0xb, 0x17}}, @tclass_kind_options=@c_red={0x8}]}, 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="340000001300050000000000feffffff07000000", @ANYRES32=r4, @ANYBLOB="003000000000000014001a80100004800c000980"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000100)='./cgroup.net/devices.allow\x00', &(0x7f0000000140), 0x0, 0x0, 0x2) 268.161125ms ago: executing program 4 (id=3090): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x4, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x6000, 0x4040000}, 0x80) 267.95103ms ago: executing program 5 (id=3091): mkdir(&(0x7f0000000580)='./file0\x00', 0x1ff) mount(&(0x7f00000005c0)=@filename='ubi0_0\x00', &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='ubifs\x00', 0xfffffff6, 0x0) 267.809241ms ago: executing program 4 (id=3092): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a03000000000000000000001302"], 0x0, 0x56}, 0x20) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_opts(r3, 0x0, 0x14, 0x0, 0x0) socket(0x11, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)={0x24, r1, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x29}]}, 0x24}, 0x1, 0x0, 0x0, 0x8c4}, 0x18) 220.757522ms ago: executing program 5 (id=3093): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x3a, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x2500}, 0x48) 220.581593ms ago: executing program 2 (id=3094): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x6, 0x9}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000480)="62042700590200000000332f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c", 0x28}], 0x1}, 0x8045) 220.322393ms ago: executing program 5 (id=3095): sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0xfd}}, 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0xe, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20040055}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000040210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 150.320856ms ago: executing program 4 (id=3096): ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$CDROMEJECT(r0, 0x5309) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="180000000914060000007000fbdbdf250800010040000000"], 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x0) 149.837489ms ago: executing program 2 (id=3097): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000400), 0x88800, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x8080, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x8080, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000640), 0x800, 0x0) preadv(r2, &(0x7f0000001b80)=[{&(0x7f0000000700)=""/12, 0xc}], 0x1, 0x7ff, 0x4f) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x101ff, 0x4, 0xd000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) symlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) (async) readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) ioctl$TIOCSLCKTRMIOS(r1, 0x80047456, &(0x7f00000010c0)) (async) ioctl$TIOCSLCKTRMIOS(r1, 0x80047456, &(0x7f00000010c0)) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000540)={0x4, 0x5, &(0x7f0000000440)=[0x2, 0x200, 0x89, 0x0, 0x4], &(0x7f0000000480), &(0x7f00000004c0), 0x0}) 149.613837ms ago: executing program 4 (id=3098): r0 = socket$inet_icmp(0x2, 0x2, 0x1) close(r0) r1 = socket(0x10, 0x803, 0x0) r2 = syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x0, 0x400, 0x2, 0x55}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f00000003c0)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r1, 0x0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0, 0x80000080, 0x1}) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000026c0)=[{{0x0, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="d3b6961c8b1591fa869ad7a2", 0xc}], 0x7}}], 0x1, 0x4008cd0) io_uring_enter(r2, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000540)=0x40d, 0x4) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r1) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha3-256)\x00'}, 0x58) r7 = socket$nl_crypto(0x10, 0x3, 0x15) write(r7, &(0x7f00000000c0)="e0000000120005000000000000000000736861332d3235360000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000736861332d3235362d6c696200"/192, 0xe0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x6d, 0x0, 0x4, 0x0, 0x0, @remote, @empty}}}}) 149.53458ms ago: executing program 5 (id=3099): r0 = socket$nl_crypto(0x10, 0x3, 0x15) write(r0, &(0x7f00000000c0)="e0000000120005000000000000000000736861332d3235360000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000736861332d3235362d6c696200"/192, 0xe0) 69.362709ms ago: executing program 2 (id=3100): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) link(&(0x7f0000000280)='./sys/file0\x00', &(0x7f00000002c0)='./sys/bus/pci/devices/0000:00:02.0/remove\x00') syz_emit_ethernet(0x4a, &(0x7f0000000500)={@local, @random="50a245d5cde0", @void, {@ipv4={0x86dd, @tipc={{0x5, 0x4, 0x2, 0x1, 0x3c, 0x68, 0x0, 0x1, 0x6, 0x0, @multicast1, @private=0xa010101}, @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x1, 0x0, 0x1, 0x6, 0x9, 0x3, 0x4e23, 0x4e20, 0x4, 0x3}}}}}}, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180)={0x1}) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000080)={[{0x5, 0x1, 0xa, 0xd, 0x1, 0x7, 0xc, 0x2d, 0x7f, 0x6, 0x8, 0xf5, 0x9}, {0xf, 0x9, 0x0, 0x6, 0x8, 0xe, 0xc, 0x1, 0x8, 0x3, 0x46, 0xe8}, {0x0, 0x7, 0xe8, 0x7f, 0x2, 0x7, 0x0, 0x4, 0x6, 0x8, 0x4, 0x4, 0x2b0d}], 0xf}) write(r0, &(0x7f0000000240)="aefc00001a0025f00385bc04fef7681d0a0b49ff708800008002280008020200ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:02.0/remove\x00', 0x1, 0x0) write(r3, &(0x7f0000000140)='1', 0x1) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r4 = socket(0x2d, 0x2, 0x0) connect$netlink(r4, &(0x7f0000000140)=@unspec={0x2d}, 0xc) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_int(r5, 0x0, 0x13, 0x0, &(0x7f0000000040)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) openat$cgroup_ro(r8, &(0x7f0000000040)='cgroup.stat\x00', 0x275a, 0x0) write(r6, &(0x7f00000001c0)='1', 0x1) 68.970441ms ago: executing program 5 (id=3101): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0xf000) 68.546523ms ago: executing program 0 (id=3102): openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8) syz_emit_ethernet(0x3e, &(0x7f00000016c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x8, 0x3a, 0x0, @dev, @local, {[], @echo_request}}}}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309d", 0x11}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d", 0x69}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$loop(&(0x7f0000000500), 0x6, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0xf800000000000000) 639.484µs ago: executing program 5 (id=3103): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="7520757365723a6e657f20"], 0x1a, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000280)={{0x9000, 0x0, 0xc, 0x6, 0x4, 0xa, 0x3, 0xe, 0x0, 0x1, 0x3, 0x3}, {0x2, 0x1000, 0xe, 0x13, 0x1, 0x8, 0x3, 0x8, 0x0, 0x46, 0x6}, {0x1, 0x315a4c100da1da58, 0x4, 0xf, 0x5, 0xff, 0xc3, 0x6, 0x3, 0x6, 0x1, 0x3}, {0x3000, 0x4000, 0x1a, 0xc, 0x7d, 0x6, 0x8, 0x7f, 0x9, 0x2, 0xf, 0x6}, {0x9000, 0x8000000, 0x0, 0xd, 0x59, 0x2d, 0x5, 0xc, 0xfc, 0x0, 0x3, 0xe5}, {0x2, 0x8092000, 0x8, 0xbd, 0x6, 0x7, 0x12, 0x1, 0xbf, 0x18, 0x2, 0x4}, {0x1, 0x1, 0xc, 0x9, 0x0, 0xf, 0x10, 0x3, 0x4, 0x0, 0x80, 0x9}, {0x26000, 0xffff, 0x10, 0x4, 0x3, 0x3, 0x0, 0xf9, 0x1, 0xfc, 0x0, 0xfe}, {0x4, 0xedd8}, {0xffff1000, 0x17}, 0x4004000f, 0x0, 0xd000, 0x100, 0x100000002, 0x0, 0xdddd1000, [0x5, 0x3, 0x4000000000000009, 0x7]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000180)={[0x1553, 0x8, 0x2800000000000, 0x1, 0xa, 0x1, 0x10000, 0x2, 0xc, 0x39, 0x5, 0x8, 0x3, 0x5, 0x7, 0x7], 0xa000, 0x200800}) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f00000002c0)=[@code={0xa, 0x5d, {"b8010000000f01c166bad104ec0fdb4d70b99f030000b8feffffffba000000000f300f20578f292098953200000066baf80cb8e68af88def66bafc0c66ed2666420fc737ff4d49c4c155f3e9"}}], 0x5d}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 4 (id=3104): mkdir(&(0x7f0000000100)='./file0\x00', 0x11c) (async) mkdir(&(0x7f0000000100)='./file0\x00', 0x11c) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000040)='vxfs\x00', 0x11, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)={0x800, 0x80, 0x21}, 0x18) (async) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)={0x800, 0x80, 0x21}, 0x18) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000100)=0x3) socket(0x10, 0x803, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000002000)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x200000}]}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x1b, 0x0, 0xfee00d00}]}) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000400)={"db516a4555048a44362f71d3c74bd20466ab29315ba37c837a25fe9d0ed41c13f35afafb7436880db448abd14020861a0438d2d906a494e630e441e6d4bacc47a0212ce279cb0c3f5dcaceb53503a67805ae8080de8584c197210d42b1e80b618d37e3aadf104bc63f7c1702a216d0ab1d8abd26c1937fa47f2992ca3c0c42deff4d54c7401de1982d6e8d69b335c618a5244e949abcd0ebecc7f18d97359ebf348123140ba911b8f107a7692b2908710a71060bb777f6b7b6c2895992702d6f78e209488bbaa2525e4c6d377f4ea69b843c38b1737b8e2cf7e2e4fc2f1556ad0be6038e51c2a462a2db757827a23be98595317c6e87e05759d5271da02933c0c34880f07c7c5d917f38621758f757bb8673bb163e7ca36bc6c99ab7d37526a2a0e04ad5afa5e883de40ef565142d4fe8a2be1c3fc9755da8b4d75e4d55251bc4574bdff73deed942d83cae89e14b2ff4308e62443c778d26287ae65689c08d22f8d11a1d2ccbbea106ab24561d8e455ade841dadec540268f07e926f15f605aa2691ff4611c9e31a3d81622738b22f02a0d69f282cb3fe3a293700cb7705499781fce54e10bd97d1015bd319112e6d590c1e28b5474a8ce61318405f2134c2f136c835cb46be9d77a9901aea07dbace1145ec4d811e5babb547d6d33e79537b2209f0bbb074b44da3e7dd711c700855790742bebda01b4ab002d474cdac5074890cc6d985e9cc379d1b03714a7a2f2b827208fba054b46a394590984df717eeb4336e53f8213fcd81fc4adb1ccda9b3bfc62717b9c2cad4847f3ac44ba1e9e9135f6d6efa8605853a94315df33abbae493072fcb7ad715b3ce7e7d4679e278d51ad4e3c29cd0bae01d45a75b03ba06e7e58be6c454e50350f0e07c1197eebd8b0a8e4b61066d2f56f3bd92a467879649274422599f603cf15e4beeadc3fd2c31257efe3be8f0b9dae7149a60f5de95947f9a0add966cc709f1e586f199c74730d746cc19ba03be84a7933261bc2be6abad19245ef331068000d643dbbe35bba1c660d2d6a62b6891942b08a090592f99f719d8b778160a015947575a7bb2f3cd79c1b4e67ce590c52576c009ed51d5ae68f177e517ca182fa267596e178eaa70e8cba93b542a613b7a67d10e7f4939b2aede5e1ce864d36b065f879f0727bb599c25579d95d256daffaf76266868b6f7f45dcdcf5dadd5e5b61b2d28627fa7ef7ca20ef79143ff0949ffe3fcbbf5aae010dc48db8cc38d2789c8b2debd7dd414fc82e6e112dd22f76ff655903ee7d7503916be04e66415e42e420ae7d9835bfd85074b604868a3053e0cd5dff8f3f15ccf97c32aa36616d245cd6b242173019e6599a727a9450dcdb5163ba47fdf2215b4f4e4b87dcc6cbf0349f25857b1c61d3d9c5f4618e65b340172fd7c8ddd486c7855890f9aa46581d8a4e68fb5d9e0a"}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000520000/0x1000)=nil, 0x1000) ioctl$KVM_GET_MSRS_cpu(r5, 0xc008ae88, &(0x7f0000001000)={0x1, 0x0, [{0x80a}]}) (async) ioctl$KVM_GET_MSRS_cpu(r5, 0xc008ae88, &(0x7f0000001000)={0x1, 0x0, [{0x80a}]}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtfilter={0x34, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) ioctl$VIDIOC_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000500)={0x1, 0x0, '\x00', {0x0, @bt={0xfffffff1, 0x8, 0x0, 0x0, 0xfff, 0x6, 0x280000, 0x3, 0x0, 0x5, 0xd, 0x9, 0x93f, 0x0, 0x4, 0x34, {0x4, 0xe2a4}, 0xca, 0x8}}}) r7 = openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000200)={0x200101, 0x40, 0x2e}, 0x18) linkat(r0, &(0x7f0000000180)='./file0\x00', r7, &(0x7f0000000240)='./file0\x00', 0x4f782d0ebbe6cdd5) kernel console output (not intermixed with test programs): 229.805169][T13956] should_fail_ex.cold+0x5/0xa [ 229.805182][T13956] ? prepare_alloc_pages+0x16d/0x5f0 [ 229.805200][T13956] should_fail_alloc_page+0xeb/0x140 [ 229.805217][T13956] prepare_alloc_pages+0x1f0/0x5f0 [ 229.805235][T13956] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 229.805249][T13956] ? __pfx_stack_trace_save+0x10/0x10 [ 229.805262][T13956] ? stack_depot_save_flags+0x27/0x9d0 [ 229.805282][T13956] ? kasan_save_stack+0x3f/0x50 [ 229.805294][T13956] ? kasan_save_stack+0x30/0x50 [ 229.805307][T13956] ? kasan_save_track+0x14/0x30 [ 229.805320][T13956] ? __kasan_kmalloc+0xaa/0xb0 [ 229.805332][T13956] ? __kvmalloc_node_noprof+0x34f/0x970 [ 229.805345][T13956] ? __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 229.805359][T13956] ? mmu_topup_memory_caches+0xbc/0x170 [ 229.805376][T13956] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 229.805389][T13956] ? kvm_vcpu_ioctl+0x730/0x1700 [ 229.805401][T13956] ? do_syscall_64+0x115/0x870 [ 229.805425][T13956] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 229.805440][T13956] ? policy_nodemask+0xed/0x4f0 [ 229.805457][T13956] alloc_pages_mpol+0x1fb/0x540 [ 229.805474][T13956] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 229.805490][T13956] ? __kvmalloc_node_noprof+0x36d/0x970 [ 229.805506][T13956] alloc_pages_noprof+0x1a/0x160 [ 229.805524][T13956] get_free_pages_noprof+0x10/0xb0 [ 229.805539][T13956] __kvm_mmu_topup_memory_cache+0x278/0x5f0 [ 229.805556][T13956] mmu_topup_memory_caches+0xbc/0x170 [ 229.805574][T13956] kvm_mmu_load+0xe2/0x2570 [ 229.805589][T13956] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 229.805601][T13956] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 229.805615][T13956] ? __pfx_kvm_mmu_load+0x10/0x10 [ 229.805630][T13956] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 229.805644][T13956] ? kvm_check_and_inject_events+0x873/0x12a0 [ 229.805661][T13956] ? record_steal_time+0x3a0/0xbb0 [ 229.805675][T13956] vcpu_run+0x3aaa/0x5de0 [ 229.805696][T13956] ? __pfx___schedule+0x10/0x10 [ 229.805707][T13956] ? __pfx_vcpu_run+0x10/0x10 [ 229.805729][T13956] ? rcu_is_watching+0x12/0xc0 [ 229.805748][T13956] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 229.805766][T13956] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 229.805787][T13956] kvm_vcpu_ioctl+0x730/0x1700 [ 229.805801][T13956] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 229.805814][T13956] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 229.805828][T13956] ? do_vfs_ioctl+0x226/0x13e0 [ 229.805846][T13956] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 229.805862][T13956] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 229.805886][T13956] ? __fget_files+0x215/0x3d0 [ 229.805897][T13956] ? hook_file_ioctl_common+0x140/0x440 [ 229.805913][T13956] ? selinux_file_ioctl+0x13b/0x290 [ 229.805931][T13956] ? selinux_file_ioctl+0xb6/0x290 [ 229.805949][T13956] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 229.805963][T13956] __x64_sys_ioctl+0x18e/0x210 [ 229.805981][T13956] do_syscall_64+0x115/0x870 [ 229.805993][T13956] ? clear_bhb_loop+0x40/0x90 [ 229.806008][T13956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.806021][T13956] RIP: 0033:0x7f3f5db9de99 [ 229.806031][T13956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.806042][T13956] RSP: 002b:00007f3f5e97e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 229.806054][T13956] RAX: ffffffffffffffda RBX: 00007f3f5de26090 RCX: 00007f3f5db9de99 [ 229.806062][T13956] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009 [ 229.806069][T13956] RBP: 00007f3f5e97e090 R08: 0000000000000000 R09: 0000000000000000 [ 229.806075][T13956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 229.806082][T13956] R13: 00007f3f5de26128 R14: 00007f3f5de26090 R15: 00007ffcc6cdff28 [ 229.806100][T13956] [ 230.417343][T13935] comedi comedi0: reset error (fatal) [ 230.488843][T13979] __nla_validate_parse: 6 callbacks suppressed [ 230.488855][T13979] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2790'. [ 230.501221][T13979] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.511826][T13979] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.526835][T13982] netlink: 268 bytes leftover after parsing attributes in process `syz.5.2791'. [ 230.617903][T13954] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.620290][T13954] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.622636][T13954] bridge_slave_0: entered allmulticast mode [ 230.625351][T13954] bridge_slave_0: entered promiscuous mode [ 230.627306][ T5092] Bluetooth: hci4: command tx timeout [ 230.636106][T13954] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.638496][T13954] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.640737][T13954] bridge_slave_1: entered allmulticast mode [ 230.645895][T13954] bridge_slave_1: entered promiscuous mode [ 230.685043][T13954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.690954][T13954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.697409][ T5092] Bluetooth: hci3: command tx timeout [ 230.715657][T13954] team0: Port device team_slave_0 added [ 230.720863][T13954] team0: Port device team_slave_1 added [ 230.738287][T13954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.740481][T13954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 230.748818][T13954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.753241][T13954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.755389][T13954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 230.763370][T13954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.794561][T13954] hsr_slave_0: entered promiscuous mode [ 230.796901][T13954] hsr_slave_1: entered promiscuous mode [ 230.799390][T13954] debugfs: 'hsr0' already exists in 'hsr' [ 230.801311][T13954] Cannot create hsr debugfs directory [ 231.026332][T13995] Bluetooth: MGMT ver 1.23 [ 231.034186][T13995] Bluetooth: hci0: invalid len left 7, exp >= 100 [ 231.334035][T14016] overlayfs: failed to resolve './file0': -2 [ 231.393246][T14019] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 231.398613][T14018] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 231.436474][T13954] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 231.449899][T13954] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 231.452857][T13954] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 231.459835][T13954] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 231.462606][T13954] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 231.467770][T13954] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 231.470843][T13954] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 231.475927][T13954] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 231.532393][T13954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.551424][T13954] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.559947][ T7735] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.562319][ T7735] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.574488][ T7735] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.576886][ T7735] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.827971][ T5092] Bluetooth: hci0: command tx timeout [ 231.963736][T13954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.049556][T14048] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2804'. [ 232.053153][T14048] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 232.058077][T14048] IPv6: NLM_F_CREATE should be set when creating new route [ 232.211243][T13954] veth0_vlan: entered promiscuous mode [ 232.219332][T13954] veth1_vlan: entered promiscuous mode [ 232.278532][T13954] veth0_macvtap: entered promiscuous mode [ 232.291064][T13954] veth1_macvtap: entered promiscuous mode [ 232.304707][T13954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.316225][T13954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.332369][ T5606] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.336225][ T5606] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.344161][ T5606] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.353021][ T5606] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.482704][ T1170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.482727][ T1170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.547235][T14031] comedi comedi0: reset error (fatal) [ 232.573024][ T1170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.573039][ T1170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.595069][T14067] could not allocate digest TFM handle cryptd(blake2b-160) [ 232.674219][T14081] FAULT_INJECTION: forcing a failure. [ 232.674219][T14081] name failslab, interval 1, probability 0, space 0, times 0 [ 232.674242][T14081] CPU: 1 UID: 0 PID: 14081 Comm: syz.5.2811 Tainted: G L syzkaller #0 PREEMPT(full) [ 232.674259][T14081] Tainted: [L]=SOFTLOCKUP [ 232.674263][T14081] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 232.674269][T14081] Call Trace: [ 232.674273][T14081] [ 232.674277][T14081] dump_stack_lvl+0x100/0x190 [ 232.674295][T14081] should_fail_ex.cold+0x5/0xa [ 232.674310][T14081] should_failslab+0xc2/0x120 [ 232.674327][T14081] kmem_cache_alloc_noprof+0x91/0x6a0 [ 232.674341][T14081] ? vm_area_dup+0x27/0x8e0 [ 232.674361][T14081] vm_area_dup+0x27/0x8e0 [ 232.674380][T14081] dup_mmap+0x6f6/0x21b0 [ 232.674402][T14081] ? __pfx_dup_mmap+0x10/0x10 [ 232.674418][T14081] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 232.674432][T14081] ? __lock_acquire+0x49f/0x1a40 [ 232.674448][T14081] ? find_held_lock+0x2b/0x80 [ 232.674465][T14081] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 232.674492][T14081] copy_process+0x4588/0x8030 [ 232.674516][T14081] ? __pfx_copy_process+0x10/0x10 [ 232.674536][T14081] ? _copy_from_user+0x59/0xd0 [ 232.674554][T14081] kernel_clone+0x176/0x9d0 [ 232.674569][T14081] ? get_pid_task+0xfc/0x250 [ 232.674588][T14081] ? __pfx_kernel_clone+0x10/0x10 [ 232.674607][T14081] ? find_held_lock+0x2b/0x80 [ 232.674628][T14081] __do_sys_clone3+0x214/0x290 [ 232.674645][T14081] ? __pfx___do_sys_clone3+0x10/0x10 [ 232.674660][T14081] ? ksys_write+0x190/0x250 [ 232.674684][T14081] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 232.674698][T14081] ? __fget_files+0x21f/0x3d0 [ 232.674720][T14081] do_syscall_64+0x115/0x870 [ 232.674733][T14081] ? clear_bhb_loop+0x40/0x90 [ 232.674747][T14081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.674759][T14081] RIP: 0033:0x7f6eabb9de99 [ 232.674769][T14081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.674780][T14081] RSP: 002b:00007f6eac9feef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 232.674792][T14081] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f6eabb9de99 [ 232.674799][T14081] RDX: 00007f6eac9fef10 RSI: 0000000000000058 RDI: 00007f6eac9fef10 [ 232.674806][T14081] RBP: 00007f6eac9ff090 R08: 0000000000000000 R09: 0000000000000058 [ 232.674813][T14081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 232.674820][T14081] R13: 00007f6eabe26038 R14: 00007f6eabe25fa0 R15: 00007ffff02a2a48 [ 232.674845][T14081] [ 232.690446][T14083] syzkaller0: entered promiscuous mode [ 232.690471][T14083] syzkaller0: entered allmulticast mode [ 232.698700][ T5092] Bluetooth: hci4: command tx timeout [ 232.718470][T14067] could not allocate digest TFM handle cryptd(blake2b-160) [ 232.794093][T14067] could not allocate digest TFM handle cryptd(blake2b-160) [ 232.946476][T14067] could not allocate digest TFM handle cryptd(blake2b-160) [ 233.004142][T14105] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2814'. [ 233.033013][T14067] could not allocate digest TFM handle cryptd(blake2b-160) [ 233.111430][T14109] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2815'. [ 233.121912][T14067] could not allocate digest TFM handle cryptd(blake2b-160) [ 233.181594][T14067] could not allocate digest TFM handle cryptd(blake2b-160) [ 233.211870][T14067] could not allocate digest TFM handle cryptd(blake2b-160) [ 233.271830][T14129] FAULT_INJECTION: forcing a failure. [ 233.271830][T14129] name failslab, interval 1, probability 0, space 0, times 0 [ 233.276871][T14129] CPU: 0 UID: 0 PID: 14129 Comm: syz.2.2818 Tainted: G L syzkaller #0 PREEMPT(full) [ 233.276890][T14129] Tainted: [L]=SOFTLOCKUP [ 233.276894][T14129] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 233.276901][T14129] Call Trace: [ 233.276905][T14129] [ 233.276914][T14129] dump_stack_lvl+0x100/0x190 [ 233.276933][T14129] should_fail_ex.cold+0x5/0xa [ 233.276947][T14129] should_failslab+0xc2/0x120 [ 233.276963][T14129] __kmalloc_noprof+0xfc/0x820 [ 233.276976][T14129] ? rcu_is_watching+0x12/0xc0 [ 233.276994][T14129] ? tomoyo_realpath_from_path+0xb6/0x690 [ 233.277010][T14129] tomoyo_realpath_from_path+0xb6/0x690 [ 233.277024][T14129] tomoyo_path_number_perm+0x23c/0x580 [ 233.277041][T14129] ? tomoyo_path_number_perm+0x22e/0x580 [ 233.277058][T14129] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 233.277088][T14129] ? find_held_lock+0x2b/0x80 [ 233.277105][T14129] ? __fget_files+0x215/0x3d0 [ 233.277129][T14129] ? hook_file_ioctl_common+0x140/0x440 [ 233.277142][T14129] ? __fget_files+0x215/0x3d0 [ 233.277156][T14129] ? __fget_files+0x21f/0x3d0 [ 233.277170][T14129] security_file_ioctl+0xd3/0x230 [ 233.277189][T14129] __x64_sys_ioctl+0xb7/0x210 [ 233.277207][T14129] do_syscall_64+0x115/0x870 [ 233.277220][T14129] ? clear_bhb_loop+0x40/0x90 [ 233.277234][T14129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.277246][T14129] RIP: 0033:0x7f79fab9de99 [ 233.277255][T14129] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.277266][T14129] RSP: 002b:00007f79fba8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 233.277278][T14129] RAX: ffffffffffffffda RBX: 00007f79fae25fa0 RCX: 00007f79fab9de99 [ 233.277286][T14129] RDX: 0000000000000007 RSI: 0000000000004c81 RDI: 0000000000000003 [ 233.277293][T14129] RBP: 00007f79fba8a090 R08: 0000000000000000 R09: 0000000000000000 [ 233.277299][T14129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.277306][T14129] R13: 00007f79fae26038 R14: 00007f79fae25fa0 R15: 00007ffdb3a696f8 [ 233.277320][T14129] [ 233.344665][T14129] ERROR: Out of memory at tomoyo_realpath_from_path. [ 233.366987][T14127] FAULT_INJECTION: forcing a failure. [ 233.366987][T14127] name failslab, interval 1, probability 0, space 0, times 0 [ 233.372325][T14127] CPU: 3 UID: 0 PID: 14127 Comm: syz.5.2817 Tainted: G L syzkaller #0 PREEMPT(full) [ 233.372353][T14127] Tainted: [L]=SOFTLOCKUP [ 233.372359][T14127] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 233.372370][T14127] Call Trace: [ 233.372377][T14127] [ 233.372384][T14127] dump_stack_lvl+0x100/0x190 [ 233.372418][T14127] should_fail_ex.cold+0x5/0xa [ 233.372442][T14127] should_failslab+0xc2/0x120 [ 233.372474][T14127] kmem_cache_alloc_noprof+0x91/0x6a0 [ 233.372497][T14127] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 233.372524][T14127] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 233.372553][T14127] mmu_topup_memory_caches+0x25/0x170 [ 233.372579][T14127] kvm_mmu_load+0xe2/0x2570 [ 233.372604][T14127] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 233.372622][T14127] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 233.372645][T14127] ? __pfx_kvm_mmu_load+0x10/0x10 [ 233.372668][T14127] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 233.372689][T14127] ? kvm_check_and_inject_events+0x873/0x12a0 [ 233.372715][T14127] ? record_steal_time+0x3a0/0xbb0 [ 233.372737][T14127] vcpu_run+0x3aaa/0x5de0 [ 233.372772][T14127] ? __pfx_vcpu_run+0x10/0x10 [ 233.372807][T14127] ? rcu_is_watching+0x12/0xc0 [ 233.372837][T14127] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 233.372863][T14127] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 233.372895][T14127] kvm_vcpu_ioctl+0x730/0x1700 [ 233.372918][T14127] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 233.372939][T14127] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 233.372963][T14127] ? do_vfs_ioctl+0x226/0x13e0 [ 233.372988][T14127] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 233.373015][T14127] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 233.373052][T14127] ? __fget_files+0x215/0x3d0 [ 233.373068][T14127] ? hook_file_ioctl_common+0x140/0x440 [ 233.373096][T14127] ? selinux_file_ioctl+0x13b/0x290 [ 233.373122][T14127] ? selinux_file_ioctl+0xb6/0x290 [ 233.373150][T14127] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 233.373171][T14127] __x64_sys_ioctl+0x18e/0x210 [ 233.373199][T14127] do_syscall_64+0x115/0x870 [ 233.373218][T14127] ? clear_bhb_loop+0x40/0x90 [ 233.373240][T14127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.373259][T14127] RIP: 0033:0x7f6eabb9de99 [ 233.373275][T14127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.373291][T14127] RSP: 002b:00007f6eac9ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 233.373309][T14127] RAX: ffffffffffffffda RBX: 00007f6eabe25fa0 RCX: 00007f6eabb9de99 [ 233.373321][T14127] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000e [ 233.373331][T14127] RBP: 00007f6eac9ff090 R08: 0000000000000000 R09: 0000000000000000 [ 233.373341][T14127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 233.373352][T14127] R13: 00007f6eabe26038 R14: 00007f6eabe25fa0 R15: 00007ffff02a2a48 [ 233.373377][T14127] [ 233.398201][T14136] sctp: [Deprecated]: syz.2.2821 (pid 14136) Use of struct sctp_assoc_value in delayed_ack socket option. [ 233.398201][T14136] Use struct sctp_sack_info instead [ 233.405154][T14137] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 233.456479][T14140] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 233.462747][T14139] syzkaller0: entered promiscuous mode [ 233.498265][T14139] syzkaller0: entered allmulticast mode [ 233.592808][T14142] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2823'. [ 233.632930][ T42] kauditd_printk_skb: 180 callbacks suppressed [ 233.632947][ T42] audit: type=1400 audit(2000000439.786:6625): avc: denied { map } for pid=14143 comm="syz.5.2824" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=76340 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 233.646073][ T42] audit: type=1400 audit(2000000439.786:6626): avc: denied { read write } for pid=14143 comm="syz.5.2824" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=76340 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 233.739852][ T42] audit: type=1400 audit(2000000439.896:6627): avc: denied { perfmon } for pid=14147 comm="syz.2.2826" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 233.746271][ T42] audit: type=1400 audit(2000000439.896:6628): avc: denied { read write } for pid=14147 comm="syz.2.2826" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 233.755268][ T42] audit: type=1400 audit(2000000439.896:6629): avc: denied { open } for pid=14147 comm="syz.2.2826" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 233.765108][ T42] audit: type=1400 audit(2000000439.896:6630): avc: denied { ioctl } for pid=14147 comm="syz.2.2826" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 233.776111][ T42] audit: type=1400 audit(2000000439.896:6631): avc: denied { set_context_mgr } for pid=14147 comm="syz.2.2826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 233.784548][ T42] audit: type=1400 audit(2000000439.916:6632): avc: denied { create } for pid=14147 comm="syz.2.2826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 233.792708][ T42] audit: type=1400 audit(2000000439.916:6633): avc: denied { read write } for pid=14147 comm="syz.2.2826" name="ocfs2_control" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 233.802615][ T42] audit: type=1400 audit(2000000439.916:6634): avc: denied { open } for pid=14147 comm="syz.2.2826" path="/dev/ocfs2_control" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 233.889572][T14154] FAULT_INJECTION: forcing a failure. [ 233.889572][T14154] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 233.894828][T14154] CPU: 1 UID: 0 PID: 14154 Comm: syz.5.2829 Tainted: G L syzkaller #0 PREEMPT(full) [ 233.894859][T14154] Tainted: [L]=SOFTLOCKUP [ 233.894865][T14154] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 233.894877][T14154] Call Trace: [ 233.894885][T14154] [ 233.894893][T14154] dump_stack_lvl+0x100/0x190 [ 233.894921][T14154] should_fail_ex.cold+0x5/0xa [ 233.894941][T14154] ? prepare_alloc_pages+0x16d/0x5f0 [ 233.894968][T14154] should_fail_alloc_page+0xeb/0x140 [ 233.894992][T14154] prepare_alloc_pages+0x1f0/0x5f0 [ 233.895020][T14154] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 233.895044][T14154] ? find_held_lock+0x2b/0x80 [ 233.895071][T14154] ? clockevents_program_event+0x1bf/0x820 [ 233.895099][T14154] ? clockevents_program_event+0x1bf/0x820 [ 233.895130][T14154] ? ktime_expiry_to_cycles+0xc0/0x2c0 [ 233.895153][T14154] ? ktime_expiry_to_cycles+0x3c/0x2c0 [ 233.895178][T14154] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 233.895201][T14154] ? clockevents_program_event+0x1ef/0x820 [ 233.895235][T14154] ? __pfx_clockevents_program_event+0x10/0x10 [ 233.895264][T14154] ? find_held_lock+0x2b/0x80 [ 233.895301][T14154] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 233.895324][T14154] ? policy_nodemask+0xed/0x4f0 [ 233.895350][T14154] alloc_pages_mpol+0x1fb/0x540 [ 233.895376][T14154] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 233.895415][T14154] alloc_pages_noprof+0x1a/0x160 [ 233.895443][T14154] pte_alloc_one+0x1c/0x3d0 [ 233.895463][T14154] __pte_alloc+0x6d/0x3e0 [ 233.895485][T14154] ? __pfx___pte_alloc+0x10/0x10 [ 233.895507][T14154] ? __pfx___might_resched+0x10/0x10 [ 233.895527][T14154] ? copy_page_range+0x1c4a/0x5b20 [ 233.895559][T14154] copy_page_range+0x3dd8/0x5b20 [ 233.895627][T14154] ? mas_wr_store_entry+0xa1/0x1e80 [ 233.895654][T14154] ? __pfx_copy_page_range+0x10/0x10 [ 233.895721][T14154] ? __pfx___might_resched+0x10/0x10 [ 233.895747][T14154] ? dup_mmap+0xcfe/0x21b0 [ 233.895771][T14154] ? down_write+0x146/0x1f0 [ 233.895797][T14154] ? up_write+0x2e5/0x5c0 [ 233.895824][T14154] dup_mmap+0xd44/0x21b0 [ 233.895859][T14154] ? __pfx_dup_mmap+0x10/0x10 [ 233.895884][T14154] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 233.895907][T14154] ? __lock_acquire+0x49f/0x1a40 [ 233.895930][T14154] ? find_held_lock+0x2b/0x80 [ 233.895957][T14154] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 233.896001][T14154] copy_process+0x4588/0x8030 [ 233.896042][T14154] ? __pfx_copy_process+0x10/0x10 [ 233.896078][T14154] ? _copy_from_user+0x59/0xd0 [ 233.896106][T14154] kernel_clone+0x176/0x9d0 [ 233.896130][T14154] ? get_pid_task+0xfc/0x250 [ 233.896159][T14154] ? __pfx_kernel_clone+0x10/0x10 [ 233.896192][T14154] ? find_held_lock+0x2b/0x80 [ 233.896227][T14154] __do_sys_clone3+0x214/0x290 [ 233.896259][T14154] ? __pfx___do_sys_clone3+0x10/0x10 [ 233.896286][T14154] ? ksys_write+0x190/0x250 [ 233.896325][T14154] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 233.896347][T14154] ? __fget_files+0x21f/0x3d0 [ 233.896393][T14154] do_syscall_64+0x115/0x870 [ 233.896420][T14154] ? clear_bhb_loop+0x40/0x90 [ 233.896443][T14154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.896465][T14154] RIP: 0033:0x7f6eabb9de99 [ 233.896482][T14154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.896498][T14154] RSP: 002b:00007f6eac9feef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 233.896516][T14154] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f6eabb9de99 [ 233.896528][T14154] RDX: 00007f6eac9fef10 RSI: 0000000000000058 RDI: 00007f6eac9fef10 [ 233.896542][T14154] RBP: 00007f6eac9ff090 R08: 0000000000000000 R09: 0000000000000058 [ 233.896554][T14154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 233.896564][T14154] R13: 00007f6eabe26038 R14: 00007f6eabe25fa0 R15: 00007ffff02a2a48 [ 233.896591][T14154] [ 233.897360][ T5092] Bluetooth: hci0: command tx timeout [ 234.187279][ T50] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 234.341896][T14170] syzkaller0: entered promiscuous mode [ 234.345893][T14170] syzkaller0: entered allmulticast mode [ 234.349995][ T50] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 234.359012][ T50] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 234.365931][ T50] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 234.377085][ T50] usb 7-1: config 0 interface 0 has no altsetting 0 [ 234.383994][ T50] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 234.392381][ T50] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 234.401911][ T50] usb 7-1: config 0 interface 0 has no altsetting 0 [ 234.405878][ T50] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 234.412860][ T50] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 234.418455][ T50] usb 7-1: config 0 interface 0 has no altsetting 0 [ 234.421942][ T50] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 234.424595][ T50] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 234.428054][ T50] usb 7-1: config 0 interface 0 has no altsetting 0 [ 234.430790][ T50] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 234.433578][ T50] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 234.436764][ T50] usb 7-1: config 0 interface 0 has no altsetting 0 [ 234.439930][ T50] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 234.442699][ T50] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 234.445963][ T50] usb 7-1: config 0 interface 0 has no altsetting 0 [ 234.449458][ T50] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 234.452336][ T50] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 234.455661][ T50] usb 7-1: config 0 interface 0 has no altsetting 0 [ 234.460891][ T50] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 234.463758][ T50] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 234.467089][ T50] usb 7-1: config 0 interface 0 has no altsetting 0 [ 234.471093][ T50] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 234.474013][ T50] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 234.476605][ T50] usb 7-1: Product: syz [ 234.478763][ T50] usb 7-1: Manufacturer: syz [ 234.480241][ T50] usb 7-1: SerialNumber: syz [ 234.483530][ T50] usb 7-1: config 0 descriptor?? [ 234.489303][ T50] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 234.742009][T14182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.745014][T14182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.750240][ C3] usb 7-1: yurex_control_callback - control failed: -71 [ 234.750466][ T9] usb 7-1: USB disconnect, device number 14 [ 234.762079][ T9] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 234.777233][ T5092] Bluetooth: hci4: command tx timeout [ 234.911299][T14188] FAULT_INJECTION: forcing a failure. [ 234.911299][T14188] name failslab, interval 1, probability 0, space 0, times 0 [ 234.915118][T14188] CPU: 1 UID: 0 PID: 14188 Comm: syz.5.2841 Tainted: G L syzkaller #0 PREEMPT(full) [ 234.915136][T14188] Tainted: [L]=SOFTLOCKUP [ 234.915140][T14188] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 234.915147][T14188] Call Trace: [ 234.915151][T14188] [ 234.915156][T14188] dump_stack_lvl+0x100/0x190 [ 234.915174][T14188] should_fail_ex.cold+0x5/0xa [ 234.915189][T14188] should_failslab+0xc2/0x120 [ 234.915204][T14188] kmem_cache_alloc_noprof+0x91/0x6a0 [ 234.915219][T14188] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 234.915236][T14188] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 234.915254][T14188] mmu_topup_memory_caches+0x25/0x170 [ 234.915272][T14188] kvm_mmu_load+0xe2/0x2570 [ 234.915288][T14188] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 234.915299][T14188] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 234.915313][T14188] ? __pfx_kvm_mmu_load+0x10/0x10 [ 234.915328][T14188] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 234.915342][T14188] ? kvm_check_and_inject_events+0x873/0x12a0 [ 234.915359][T14188] ? record_steal_time+0x3a0/0xbb0 [ 234.915373][T14188] vcpu_run+0x3aaa/0x5de0 [ 234.915388][T14188] ? mark_held_locks+0x40/0x70 [ 234.915408][T14188] ? __pfx_vcpu_run+0x10/0x10 [ 234.915434][T14188] ? rcu_is_watching+0x12/0xc0 [ 234.915454][T14188] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 234.915471][T14188] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 234.915492][T14188] kvm_vcpu_ioctl+0x730/0x1700 [ 234.915506][T14188] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 234.915519][T14188] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 234.915534][T14188] ? do_vfs_ioctl+0x226/0x13e0 [ 234.915552][T14188] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 234.915569][T14188] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 234.915592][T14188] ? __fget_files+0x215/0x3d0 [ 234.915603][T14188] ? hook_file_ioctl_common+0x140/0x440 [ 234.915620][T14188] ? selinux_file_ioctl+0x13b/0x290 [ 234.915638][T14188] ? selinux_file_ioctl+0xb6/0x290 [ 234.915656][T14188] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 234.915687][T14188] __x64_sys_ioctl+0x18e/0x210 [ 234.915708][T14188] do_syscall_64+0x115/0x870 [ 234.915720][T14188] ? clear_bhb_loop+0x40/0x90 [ 234.915734][T14188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.915746][T14188] RIP: 0033:0x7f6eabb9de99 [ 234.915757][T14188] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.915768][T14188] RSP: 002b:00007f6eac9ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 234.915779][T14188] RAX: ffffffffffffffda RBX: 00007f6eabe25fa0 RCX: 00007f6eabb9de99 [ 234.915786][T14188] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000d [ 234.915793][T14188] RBP: 00007f6eac9ff090 R08: 0000000000000000 R09: 0000000000000000 [ 234.915799][T14188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 234.915806][T14188] R13: 00007f6eabe26038 R14: 00007f6eabe25fa0 R15: 00007ffff02a2a48 [ 234.915820][T14188] [ 235.298716][T14194] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2843'. [ 235.321381][T14204] ieee802154 phy0 wpan0: encryption failed: -22 [ 235.324503][T14204] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2845'. [ 235.396493][T14215] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 235.402209][T14215] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 235.442623][T14220] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2851'. [ 235.701616][T14236] FAULT_INJECTION: forcing a failure. [ 235.701616][T14236] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 235.709184][T14236] CPU: 3 UID: 0 PID: 14236 Comm: syz.0.2857 Tainted: G L syzkaller #0 PREEMPT(full) [ 235.709216][T14236] Tainted: [L]=SOFTLOCKUP [ 235.709222][T14236] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 235.709233][T14236] Call Trace: [ 235.709239][T14236] [ 235.709247][T14236] dump_stack_lvl+0x100/0x190 [ 235.709275][T14236] should_fail_ex.cold+0x5/0xa [ 235.709299][T14236] _copy_from_user+0x2e/0xd0 [ 235.709325][T14236] input_event_from_user+0x123/0x310 [ 235.709353][T14236] ? __pfx_input_event_from_user+0x10/0x10 [ 235.709379][T14236] ? __pfx___might_resched+0x10/0x10 [ 235.709402][T14236] ? input_inject_event+0x198/0x380 [ 235.709430][T14236] evdev_write+0x342/0x610 [ 235.709461][T14236] ? __pfx_evdev_write+0x10/0x10 [ 235.709487][T14236] ? bpf_lsm_file_permission+0x9/0x10 [ 235.709514][T14236] ? security_file_permission+0x76/0x210 [ 235.709534][T14236] ? rw_verify_area+0xce/0x6d0 [ 235.709561][T14236] vfs_write+0x2aa/0x1050 [ 235.709588][T14236] ? __pfx_evdev_write+0x10/0x10 [ 235.709615][T14236] ? __pfx_vfs_write+0x10/0x10 [ 235.709639][T14236] ? find_held_lock+0x2b/0x80 [ 235.709666][T14236] ? __fget_files+0x215/0x3d0 [ 235.709683][T14236] ? __fget_files+0x215/0x3d0 [ 235.709705][T14236] ? __fget_files+0x21f/0x3d0 [ 235.709731][T14236] ksys_write+0x1f8/0x250 [ 235.709779][T14236] ? __pfx_ksys_write+0x10/0x10 [ 235.709813][T14236] do_syscall_64+0x115/0x870 [ 235.709833][T14236] ? clear_bhb_loop+0x40/0x90 [ 235.709855][T14236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.709873][T14236] RIP: 0033:0x7f3f5db9de99 [ 235.709890][T14236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.709907][T14236] RSP: 002b:00007f3f5e99f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 235.709925][T14236] RAX: ffffffffffffffda RBX: 00007f3f5de25fa0 RCX: 00007f3f5db9de99 [ 235.709937][T14236] RDX: 00000000000012d8 RSI: 0000200000000040 RDI: 0000000000000004 [ 235.709949][T14236] RBP: 00007f3f5e99f090 R08: 0000000000000000 R09: 0000000000000000 [ 235.709959][T14236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 235.709970][T14236] R13: 00007f3f5de26038 R14: 00007f3f5de25fa0 R15: 00007ffcc6cdff28 [ 235.709999][T14236] [ 235.738526][T14238] xt_CT: You must specify a L4 protocol and not use inversions on it [ 235.821952][T14243] tipc: Failed to obtain node identity [ 235.831652][T14243] tipc: Enabling of bearer rejected, failed to enable media [ 235.954221][T14252] blktrace: Concurrent blktraces are not allowed on sg0 [ 235.995904][T14254] FAULT_INJECTION: forcing a failure. [ 235.995904][T14254] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 236.001173][T14254] CPU: 1 UID: 0 PID: 14254 Comm: syz.5.2865 Tainted: G L syzkaller #0 PREEMPT(full) [ 236.001198][T14254] Tainted: [L]=SOFTLOCKUP [ 236.001204][T14254] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 236.001214][T14254] Call Trace: [ 236.001221][T14254] [ 236.001229][T14254] dump_stack_lvl+0x100/0x190 [ 236.001254][T14254] should_fail_ex.cold+0x5/0xa [ 236.001272][T14254] ? prepare_alloc_pages+0x16d/0x5f0 [ 236.001295][T14254] should_fail_alloc_page+0xeb/0x140 [ 236.001319][T14254] prepare_alloc_pages+0x1f0/0x5f0 [ 236.001345][T14254] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 236.001361][T14254] ? __pfx_stack_trace_save+0x10/0x10 [ 236.001378][T14254] ? stack_depot_save_flags+0x27/0x9d0 [ 236.001407][T14254] ? kasan_save_stack+0x3f/0x50 [ 236.001425][T14254] ? kasan_save_stack+0x30/0x50 [ 236.001443][T14254] ? kasan_save_track+0x14/0x30 [ 236.001460][T14254] ? __kasan_slab_alloc+0x89/0x90 [ 236.001476][T14254] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 236.001494][T14254] ? ptlock_alloc+0x1f/0x70 [ 236.001517][T14254] ? pte_alloc_one+0x82/0x3d0 [ 236.001533][T14254] ? __pte_alloc+0x6d/0x3e0 [ 236.001549][T14254] ? copy_page_range+0x3dd8/0x5b20 [ 236.001571][T14254] ? dup_mmap+0xd44/0x21b0 [ 236.001593][T14254] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 236.001610][T14254] ? do_syscall_64+0x115/0x870 [ 236.001637][T14254] ? look_up_lock_class+0x55/0x120 [ 236.001657][T14254] ? __lock_acquire+0x49f/0x1a40 [ 236.001680][T14254] ? look_up_lock_class+0x55/0x120 [ 236.001698][T14254] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 236.001719][T14254] ? policy_nodemask+0xed/0x4f0 [ 236.001743][T14254] alloc_pages_mpol+0x1fb/0x540 [ 236.001763][T14254] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 236.001788][T14254] ? do_raw_spin_lock+0x128/0x260 [ 236.001813][T14254] alloc_pages_noprof+0x1a/0x160 [ 236.001837][T14254] pte_alloc_one+0x1c/0x3d0 [ 236.001852][T14254] __pte_alloc+0x6d/0x3e0 [ 236.001872][T14254] ? __pfx___pte_alloc+0x10/0x10 [ 236.001891][T14254] ? __pfx___might_resched+0x10/0x10 [ 236.001911][T14254] ? copy_page_range+0x1c4a/0x5b20 [ 236.001939][T14254] copy_page_range+0x3dd8/0x5b20 [ 236.001985][T14254] ? mas_wr_store_entry+0xa1/0x1e80 [ 236.002009][T14254] ? __pfx_copy_page_range+0x10/0x10 [ 236.002042][T14254] ? __pfx___might_resched+0x10/0x10 [ 236.002062][T14254] ? dup_mmap+0xcfe/0x21b0 [ 236.002082][T14254] ? down_write+0x146/0x1f0 [ 236.002110][T14254] ? up_write+0x2e5/0x5c0 [ 236.002135][T14254] dup_mmap+0xd44/0x21b0 [ 236.002163][T14254] ? __pfx_dup_mmap+0x10/0x10 [ 236.002185][T14254] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 236.002207][T14254] ? __lock_acquire+0x49f/0x1a40 [ 236.002227][T14254] ? find_held_lock+0x2b/0x80 [ 236.002250][T14254] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 236.002285][T14254] copy_process+0x4588/0x8030 [ 236.002321][T14254] ? __pfx_copy_process+0x10/0x10 [ 236.002350][T14254] ? _copy_from_user+0x59/0xd0 [ 236.002372][T14254] kernel_clone+0x176/0x9d0 [ 236.002413][T14254] ? get_pid_task+0xfc/0x250 [ 236.002439][T14254] ? __pfx_kernel_clone+0x10/0x10 [ 236.002466][T14254] ? find_held_lock+0x2b/0x80 [ 236.002489][T14254] __do_sys_clone3+0x214/0x290 [ 236.002506][T14254] ? __pfx___do_sys_clone3+0x10/0x10 [ 236.002521][T14254] ? ksys_write+0x190/0x250 [ 236.002545][T14254] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 236.002559][T14254] ? __fget_files+0x21f/0x3d0 [ 236.002581][T14254] do_syscall_64+0x115/0x870 [ 236.002595][T14254] ? clear_bhb_loop+0x40/0x90 [ 236.002609][T14254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.002621][T14254] RIP: 0033:0x7f6eabb9de99 [ 236.002633][T14254] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.002647][T14254] RSP: 002b:00007f6eac9feef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 236.002659][T14254] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f6eabb9de99 [ 236.002666][T14254] RDX: 00007f6eac9fef10 RSI: 0000000000000058 RDI: 00007f6eac9fef10 [ 236.002673][T14254] RBP: 00007f6eac9ff090 R08: 0000000000000000 R09: 0000000000000058 [ 236.002680][T14254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 236.002686][T14254] R13: 00007f6eabe26038 R14: 00007f6eabe25fa0 R15: 00007ffff02a2a48 [ 236.002701][T14254] [ 236.137695][ T5092] Bluetooth: hci0: command tx timeout [ 236.381482][T14267] netlink: 228 bytes leftover after parsing attributes in process `syz.5.2868'. [ 236.447638][T14270] FAULT_INJECTION: forcing a failure. [ 236.447638][T14270] name failslab, interval 1, probability 0, space 0, times 0 [ 236.452548][T14270] CPU: 1 UID: 0 PID: 14270 Comm: syz.4.2869 Tainted: G L syzkaller #0 PREEMPT(full) [ 236.452571][T14270] Tainted: [L]=SOFTLOCKUP [ 236.452576][T14270] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 236.452583][T14270] Call Trace: [ 236.452587][T14270] [ 236.452593][T14270] dump_stack_lvl+0x100/0x190 [ 236.452611][T14270] should_fail_ex.cold+0x5/0xa [ 236.452626][T14270] should_failslab+0xc2/0x120 [ 236.452642][T14270] kmem_cache_alloc_noprof+0x91/0x6a0 [ 236.452656][T14270] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 236.452673][T14270] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 236.452691][T14270] mmu_topup_memory_caches+0x25/0x170 [ 236.452708][T14270] kvm_mmu_load+0xe2/0x2570 [ 236.452724][T14270] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 236.452737][T14270] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 236.452751][T14270] ? __pfx_kvm_mmu_load+0x10/0x10 [ 236.452766][T14270] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 236.452780][T14270] ? kvm_check_and_inject_events+0x873/0x12a0 [ 236.452797][T14270] ? record_steal_time+0x3a0/0xbb0 [ 236.452811][T14270] vcpu_run+0x3aaa/0x5de0 [ 236.452826][T14270] ? mark_held_locks+0x40/0x70 [ 236.452846][T14270] ? __pfx_vcpu_run+0x10/0x10 [ 236.452867][T14270] ? rcu_is_watching+0x12/0xc0 [ 236.452886][T14270] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 236.452904][T14270] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 236.452925][T14270] kvm_vcpu_ioctl+0x730/0x1700 [ 236.452939][T14270] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 236.452952][T14270] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 236.452967][T14270] ? do_vfs_ioctl+0x226/0x13e0 [ 236.452984][T14270] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 236.453001][T14270] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 236.453025][T14270] ? __fget_files+0x215/0x3d0 [ 236.453036][T14270] ? hook_file_ioctl_common+0x140/0x440 [ 236.453055][T14270] ? selinux_file_ioctl+0x13b/0x290 [ 236.453073][T14270] ? selinux_file_ioctl+0xb6/0x290 [ 236.453092][T14270] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 236.453106][T14270] __x64_sys_ioctl+0x18e/0x210 [ 236.453124][T14270] do_syscall_64+0x115/0x870 [ 236.453137][T14270] ? clear_bhb_loop+0x40/0x90 [ 236.453151][T14270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.453163][T14270] RIP: 0033:0x7f323ab9de99 [ 236.453173][T14270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.453184][T14270] RSP: 002b:00007f323bab0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 236.453196][T14270] RAX: ffffffffffffffda RBX: 00007f323ae25fa0 RCX: 00007f323ab9de99 [ 236.453203][T14270] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000e [ 236.453210][T14270] RBP: 00007f323bab0090 R08: 0000000000000000 R09: 0000000000000000 [ 236.453217][T14270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 236.453224][T14270] R13: 00007f323ae26038 R14: 00007f323ae25fa0 R15: 00007ffdfc9dba18 [ 236.453238][T14270] [ 236.678257][T12213] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 236.827339][T12213] usb 10-1: Using ep0 maxpacket: 32 [ 236.834742][T12213] usb 10-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 236.839508][T12213] usb 10-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 236.844350][T12213] usb 10-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 236.849276][T12213] usb 10-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 236.861030][T12213] usb 10-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 236.861058][T12213] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.861075][T12213] usb 10-1: Product: syz [ 236.861088][T12213] usb 10-1: Manufacturer: syz [ 236.861102][T12213] usb 10-1: SerialNumber: syz [ 236.865545][ C0] imon 10-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 236.869711][T12213] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:155.0/input/input17 [ 236.883149][T14286] libceph: secret too big 3051 [ 236.972626][T14291] syzkaller0: entered promiscuous mode [ 236.974678][T14291] syzkaller0: entered allmulticast mode [ 237.077513][T12213] imon 10-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 237.081134][T12213] (id 0x00) [ 237.137262][T12213] rc_core: IR keymap rc-imon-pad not found [ 237.139213][T12213] Registered IR keymap rc-empty [ 237.140876][T12213] imon 10-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 237.144837][T12213] imon 10-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 237.163999][T14296] FAULT_INJECTION: forcing a failure. [ 237.163999][T14296] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 237.168186][T14296] CPU: 3 UID: 0 PID: 14296 Comm: syz.2.2877 Tainted: G L syzkaller #0 PREEMPT(full) [ 237.168205][T14296] Tainted: [L]=SOFTLOCKUP [ 237.168209][T14296] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 237.168217][T14296] Call Trace: [ 237.168221][T14296] [ 237.168226][T14296] dump_stack_lvl+0x100/0x190 [ 237.168244][T14296] should_fail_ex.cold+0x5/0xa [ 237.168257][T14296] ? prepare_alloc_pages+0x16d/0x5f0 [ 237.168275][T14296] should_fail_alloc_page+0xeb/0x140 [ 237.168292][T14296] prepare_alloc_pages+0x1f0/0x5f0 [ 237.168310][T14296] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 237.168324][T14296] ? __pfx_stack_trace_save+0x10/0x10 [ 237.168337][T14296] ? stack_depot_save_flags+0x27/0x9d0 [ 237.168354][T14296] ? stack_depot_save_flags+0x27/0x9d0 [ 237.168372][T14296] ? kasan_save_stack+0x3f/0x50 [ 237.168385][T14296] ? kasan_save_stack+0x30/0x50 [ 237.168397][T14296] ? kasan_save_track+0x14/0x30 [ 237.168410][T14296] ? __kasan_kmalloc+0xaa/0xb0 [ 237.168423][T14296] ? __kvmalloc_node_noprof+0x34f/0x970 [ 237.168436][T14296] ? __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 237.168449][T14296] ? mmu_topup_memory_caches+0xbc/0x170 [ 237.168466][T14296] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 237.168479][T14296] ? kvm_vcpu_ioctl+0x730/0x1700 [ 237.168491][T14296] ? do_syscall_64+0x115/0x870 [ 237.168515][T14296] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 237.168531][T14296] ? policy_nodemask+0xed/0x4f0 [ 237.168547][T14296] alloc_pages_mpol+0x1fb/0x540 [ 237.168564][T14296] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 237.168584][T14296] ? __kvmalloc_node_noprof+0x36d/0x970 [ 237.168600][T14296] alloc_pages_noprof+0x1a/0x160 [ 237.168619][T14296] get_free_pages_noprof+0x10/0xb0 [ 237.168633][T14296] __kvm_mmu_topup_memory_cache+0x278/0x5f0 [ 237.168651][T14296] mmu_topup_memory_caches+0xbc/0x170 [ 237.168668][T14296] kvm_mmu_load+0xe2/0x2570 [ 237.168684][T14296] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 237.168697][T14296] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 237.168711][T14296] ? __pfx_kvm_mmu_load+0x10/0x10 [ 237.168725][T14296] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 237.168740][T14296] ? kvm_check_and_inject_events+0x873/0x12a0 [ 237.168756][T14296] ? record_steal_time+0x3a0/0xbb0 [ 237.168770][T14296] vcpu_run+0x3aaa/0x5de0 [ 237.168786][T14296] ? mark_held_locks+0x40/0x70 [ 237.168805][T14296] ? __pfx_vcpu_run+0x10/0x10 [ 237.168826][T14296] ? rcu_is_watching+0x12/0xc0 [ 237.168845][T14296] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 237.168862][T14296] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 237.168884][T14296] kvm_vcpu_ioctl+0x730/0x1700 [ 237.168898][T14296] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 237.168911][T14296] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 237.168925][T14296] ? do_vfs_ioctl+0x226/0x13e0 [ 237.168943][T14296] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 237.168960][T14296] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 237.168983][T14296] ? __fget_files+0x215/0x3d0 [ 237.168994][T14296] ? hook_file_ioctl_common+0x140/0x440 [ 237.169011][T14296] ? selinux_file_ioctl+0x13b/0x290 [ 237.169028][T14296] ? selinux_file_ioctl+0xb6/0x290 [ 237.169046][T14296] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 237.169060][T14296] __x64_sys_ioctl+0x18e/0x210 [ 237.169078][T14296] do_syscall_64+0x115/0x870 [ 237.169090][T14296] ? clear_bhb_loop+0x40/0x90 [ 237.169104][T14296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.169116][T14296] RIP: 0033:0x7f79fab9de99 [ 237.169127][T14296] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.169138][T14296] RSP: 002b:00007f79fba8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 237.169149][T14296] RAX: ffffffffffffffda RBX: 00007f79fae25fa0 RCX: 00007f79fab9de99 [ 237.169157][T14296] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009 [ 237.169163][T14296] RBP: 00007f79fba8a090 R08: 0000000000000000 R09: 0000000000000000 [ 237.169170][T14296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 237.169176][T14296] R13: 00007f79fae26038 R14: 00007f79fae25fa0 R15: 00007ffdb3a696f8 [ 237.169191][T14296] [ 237.331169][T12213] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:155.0/rc/rc0 [ 237.340449][T12213] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:155.0/rc/rc0/input18 [ 237.348116][T12213] imon 10-1:155.0: iMON device (15c2:ffdc, intf0) on usb<10:5> initialized [ 238.218124][ T5092] Bluetooth: hci0: command tx timeout [ 238.330468][T14320] syzkaller0: entered promiscuous mode [ 238.332793][T14320] syzkaller0: entered allmulticast mode [ 238.451477][T14322] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 238.487369][T14300] comedi comedi0: reset error (fatal) [ 238.667225][ T42] kauditd_printk_skb: 200 callbacks suppressed [ 238.667275][ T42] audit: type=1400 audit(2000000444.816:6835): avc: denied { ioctl } for pid=14331 comm="syz.4.2888" path="socket:[77262]" dev="sockfs" ino=77262 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 238.723980][T14332] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 238.728420][T14332] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 238.814121][ T42] audit: type=1400 audit(2000000444.966:6836): avc: denied { map_read map_write } for pid=14298 comm="syz.2.2878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 238.846558][ T42] audit: type=1400 audit(2000000444.996:6837): avc: denied { allowed } for pid=14334 comm="syz.2.2889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 238.853497][ T42] audit: type=1400 audit(2000000445.006:6838): avc: denied { create } for pid=14334 comm="syz.2.2889" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 238.899243][T14335] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2889'. [ 238.902274][T14335] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2889'. [ 238.916424][T14341] syzkaller0: entered promiscuous mode [ 238.918493][T14341] syzkaller0: entered allmulticast mode [ 238.949122][T14343] kvm: kvm [14266]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x40000019) = 0x1 [ 238.952562][ T42] audit: type=1400 audit(2000000445.106:6839): avc: denied { create } for pid=14266 comm="syz.5.2868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 239.024858][T14348] syzkaller0: entered promiscuous mode [ 239.026934][T14348] syzkaller0: entered allmulticast mode [ 239.159748][ T42] audit: type=1400 audit(2000000445.316:6840): avc: denied { connect } for pid=14266 comm="syz.5.2868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 239.165126][T14337] imon:send_packet: task interrupted [ 239.169076][T14337] imon:send_packet: packet tx failed (-512) [ 239.171079][T14337] imon:vfd_write: send packet #5 failed [ 239.204857][T14352] netlink: 'syz.2.2895': attribute type 3 has an invalid length. [ 239.234305][ T42] audit: type=1400 audit(2000000445.386:6841): avc: denied { read write } for pid=14353 comm="syz.2.2896" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 239.243531][ T42] audit: type=1400 audit(2000000445.386:6842): avc: denied { open } for pid=14353 comm="syz.2.2896" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 239.252171][ T42] audit: type=1400 audit(2000000445.386:6843): avc: denied { ioctl } for pid=14353 comm="syz.2.2896" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 239.279575][ T50] usb 10-1: USB disconnect, device number 5 [ 239.361845][ T42] audit: type=1400 audit(2000000445.516:6844): avc: denied { read } for pid=14357 comm="syz.4.2898" name="sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 239.961290][T14379] FAULT_INJECTION: forcing a failure. [ 239.961290][T14379] name failslab, interval 1, probability 0, space 0, times 0 [ 239.965457][T14379] CPU: 0 UID: 0 PID: 14379 Comm: syz.4.2907 Tainted: G L syzkaller #0 PREEMPT(full) [ 239.965477][T14379] Tainted: [L]=SOFTLOCKUP [ 239.965481][T14379] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 239.965489][T14379] Call Trace: [ 239.965493][T14379] [ 239.965499][T14379] dump_stack_lvl+0x100/0x190 [ 239.965518][T14379] should_fail_ex.cold+0x5/0xa [ 239.965534][T14379] should_failslab+0xc2/0x120 [ 239.965551][T14379] kmem_cache_alloc_noprof+0x91/0x6a0 [ 239.965567][T14379] ? vm_area_dup+0x27/0x8e0 [ 239.965588][T14379] vm_area_dup+0x27/0x8e0 [ 239.965608][T14379] dup_mmap+0x6f6/0x21b0 [ 239.965631][T14379] ? __pfx_dup_mmap+0x10/0x10 [ 239.965648][T14379] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 239.965664][T14379] ? __lock_acquire+0x49f/0x1a40 [ 239.965679][T14379] ? find_held_lock+0x2b/0x80 [ 239.965697][T14379] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 239.965723][T14379] copy_process+0x4588/0x8030 [ 239.965748][T14379] ? __pfx_copy_process+0x10/0x10 [ 239.965768][T14379] ? _copy_from_user+0x59/0xd0 [ 239.965786][T14379] kernel_clone+0x176/0x9d0 [ 239.965801][T14379] ? get_pid_task+0xfc/0x250 [ 239.965820][T14379] ? __pfx_kernel_clone+0x10/0x10 [ 239.965840][T14379] ? find_held_lock+0x2b/0x80 [ 239.965861][T14379] __do_sys_clone3+0x214/0x290 [ 239.965877][T14379] ? __pfx___do_sys_clone3+0x10/0x10 [ 239.965893][T14379] ? ksys_write+0x190/0x250 [ 239.965916][T14379] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 239.965935][T14379] ? __fget_files+0x21f/0x3d0 [ 239.965958][T14379] do_syscall_64+0x115/0x870 [ 239.965971][T14379] ? clear_bhb_loop+0x40/0x90 [ 239.965985][T14379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.965997][T14379] RIP: 0033:0x7f323ab9de99 [ 239.966007][T14379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.966017][T14379] RSP: 002b:00007f323baafef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 239.966029][T14379] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f323ab9de99 [ 239.966036][T14379] RDX: 00007f323baaff10 RSI: 0000000000000058 RDI: 00007f323baaff10 [ 239.966042][T14379] RBP: 00007f323bab0090 R08: 0000000000000000 R09: 0000000000000058 [ 239.966049][T14379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 239.966055][T14379] R13: 00007f323ae26038 R14: 00007f323ae25fa0 R15: 00007ffdfc9dba18 [ 239.966070][T14379] [ 240.142112][T14381] FAULT_INJECTION: forcing a failure. [ 240.142112][T14381] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 240.147829][T14381] CPU: 0 UID: 0 PID: 14381 Comm: syz.5.2908 Tainted: G L syzkaller #0 PREEMPT(full) [ 240.147848][T14381] Tainted: [L]=SOFTLOCKUP [ 240.147853][T14381] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 240.147859][T14381] Call Trace: [ 240.147863][T14381] [ 240.147868][T14381] dump_stack_lvl+0x100/0x190 [ 240.147886][T14381] should_fail_ex.cold+0x5/0xa [ 240.147899][T14381] ? prepare_alloc_pages+0x16d/0x5f0 [ 240.147922][T14381] should_fail_alloc_page+0xeb/0x140 [ 240.147938][T14381] prepare_alloc_pages+0x1f0/0x5f0 [ 240.147956][T14381] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 240.147970][T14381] ? __pfx_stack_trace_save+0x10/0x10 [ 240.147984][T14381] ? stack_depot_save_flags+0x27/0x9d0 [ 240.148000][T14381] ? stack_depot_save_flags+0x27/0x9d0 [ 240.148019][T14381] ? kasan_save_stack+0x3f/0x50 [ 240.148031][T14381] ? kasan_save_stack+0x30/0x50 [ 240.148044][T14381] ? kasan_save_track+0x14/0x30 [ 240.148056][T14381] ? __kasan_kmalloc+0xaa/0xb0 [ 240.148069][T14381] ? __kvmalloc_node_noprof+0x34f/0x970 [ 240.148082][T14381] ? __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 240.148096][T14381] ? mmu_topup_memory_caches+0xbc/0x170 [ 240.148113][T14381] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 240.148126][T14381] ? kvm_vcpu_ioctl+0x730/0x1700 [ 240.148138][T14381] ? do_syscall_64+0x115/0x870 [ 240.148162][T14381] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 240.148178][T14381] ? policy_nodemask+0xed/0x4f0 [ 240.148195][T14381] alloc_pages_mpol+0x1fb/0x540 [ 240.148212][T14381] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 240.148228][T14381] ? __kvmalloc_node_noprof+0x36d/0x970 [ 240.148244][T14381] alloc_pages_noprof+0x1a/0x160 [ 240.148263][T14381] get_free_pages_noprof+0x10/0xb0 [ 240.148277][T14381] __kvm_mmu_topup_memory_cache+0x278/0x5f0 [ 240.148295][T14381] mmu_topup_memory_caches+0xbc/0x170 [ 240.148312][T14381] kvm_mmu_load+0xe2/0x2570 [ 240.148328][T14381] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 240.148340][T14381] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 240.148354][T14381] ? __pfx_kvm_mmu_load+0x10/0x10 [ 240.148368][T14381] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 240.148382][T14381] ? kvm_check_and_inject_events+0x873/0x12a0 [ 240.148399][T14381] ? record_steal_time+0x3a0/0xbb0 [ 240.148416][T14381] vcpu_run+0x3aaa/0x5de0 [ 240.148432][T14381] ? mark_held_locks+0x40/0x70 [ 240.148452][T14381] ? __pfx_vcpu_run+0x10/0x10 [ 240.148473][T14381] ? rcu_is_watching+0x12/0xc0 [ 240.148493][T14381] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 240.148511][T14381] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 240.148532][T14381] kvm_vcpu_ioctl+0x730/0x1700 [ 240.148546][T14381] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 240.148560][T14381] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 240.148574][T14381] ? do_vfs_ioctl+0x226/0x13e0 [ 240.148592][T14381] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 240.148609][T14381] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 240.148633][T14381] ? __fget_files+0x215/0x3d0 [ 240.148644][T14381] ? hook_file_ioctl_common+0x140/0x440 [ 240.148661][T14381] ? selinux_file_ioctl+0x13b/0x290 [ 240.148678][T14381] ? selinux_file_ioctl+0xb6/0x290 [ 240.148697][T14381] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 240.148711][T14381] __x64_sys_ioctl+0x18e/0x210 [ 240.148729][T14381] do_syscall_64+0x115/0x870 [ 240.148741][T14381] ? clear_bhb_loop+0x40/0x90 [ 240.148755][T14381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.148767][T14381] RIP: 0033:0x7f6eabb9de99 [ 240.148777][T14381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.148788][T14381] RSP: 002b:00007f6eac9ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 240.148800][T14381] RAX: ffffffffffffffda RBX: 00007f6eabe25fa0 RCX: 00007f6eabb9de99 [ 240.148808][T14381] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009 [ 240.148814][T14381] RBP: 00007f6eac9ff090 R08: 0000000000000000 R09: 0000000000000000 [ 240.148821][T14381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 240.148828][T14381] R13: 00007f6eabe26038 R14: 00007f6eabe25fa0 R15: 00007ffff02a2a48 [ 240.148842][T14381] [ 240.292510][T14356] comedi comedi0: reset error (fatal) [ 240.321328][T14386] syzkaller0: entered promiscuous mode [ 240.323246][T14386] syzkaller0: entered allmulticast mode [ 240.372268][T14390] netlink: 'syz.5.2913': attribute type 3 has an invalid length. [ 240.391075][T14392] syzkaller0: entered promiscuous mode [ 240.393026][T14392] syzkaller0: entered allmulticast mode [ 240.450657][T14396] syzkaller0: entered promiscuous mode [ 240.452476][T14396] syzkaller0: entered allmulticast mode [ 240.507897][T14394] FAULT_INJECTION: forcing a failure. [ 240.507897][T14394] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 240.512738][T14394] CPU: 0 UID: 0 PID: 14394 Comm: syz.5.2914 Tainted: G L syzkaller #0 PREEMPT(full) [ 240.512757][T14394] Tainted: [L]=SOFTLOCKUP [ 240.512761][T14394] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 240.512767][T14394] Call Trace: [ 240.512771][T14394] [ 240.512776][T14394] dump_stack_lvl+0x100/0x190 [ 240.512794][T14394] should_fail_ex.cold+0x5/0xa [ 240.512807][T14394] ? prepare_alloc_pages+0x16d/0x5f0 [ 240.512826][T14394] should_fail_alloc_page+0xeb/0x140 [ 240.512842][T14394] prepare_alloc_pages+0x1f0/0x5f0 [ 240.512861][T14394] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 240.512875][T14394] ? __pfx_stack_trace_save+0x10/0x10 [ 240.512888][T14394] ? stack_depot_save_flags+0x27/0x9d0 [ 240.512905][T14394] ? stack_depot_save_flags+0x27/0x9d0 [ 240.512923][T14394] ? kasan_save_stack+0x3f/0x50 [ 240.512936][T14394] ? kasan_save_stack+0x30/0x50 [ 240.512949][T14394] ? kasan_save_track+0x14/0x30 [ 240.512962][T14394] ? __kasan_kmalloc+0xaa/0xb0 [ 240.512975][T14394] ? __kvmalloc_node_noprof+0x34f/0x970 [ 240.512988][T14394] ? __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 240.513004][T14394] ? mmu_topup_memory_caches+0xbc/0x170 [ 240.513021][T14394] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 240.513033][T14394] ? kvm_vcpu_ioctl+0x730/0x1700 [ 240.513045][T14394] ? do_syscall_64+0x115/0x870 [ 240.513071][T14394] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 240.513101][T14394] ? policy_nodemask+0xed/0x4f0 [ 240.513119][T14394] alloc_pages_mpol+0x1fb/0x540 [ 240.513136][T14394] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 240.513152][T14394] ? __kvmalloc_node_noprof+0x36d/0x970 [ 240.513169][T14394] alloc_pages_noprof+0x1a/0x160 [ 240.513187][T14394] get_free_pages_noprof+0x10/0xb0 [ 240.513201][T14394] __kvm_mmu_topup_memory_cache+0x278/0x5f0 [ 240.513220][T14394] mmu_topup_memory_caches+0xbc/0x170 [ 240.513237][T14394] kvm_mmu_load+0xe2/0x2570 [ 240.513252][T14394] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 240.513264][T14394] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 240.513278][T14394] ? __pfx_kvm_mmu_load+0x10/0x10 [ 240.513293][T14394] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 240.513308][T14394] ? kvm_check_and_inject_events+0x873/0x12a0 [ 240.513325][T14394] ? record_steal_time+0x3a0/0xbb0 [ 240.513339][T14394] vcpu_run+0x3aaa/0x5de0 [ 240.513355][T14394] ? mark_held_locks+0x40/0x70 [ 240.513375][T14394] ? __pfx_vcpu_run+0x10/0x10 [ 240.513396][T14394] ? rcu_is_watching+0x12/0xc0 [ 240.513416][T14394] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 240.513433][T14394] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 240.513455][T14394] kvm_vcpu_ioctl+0x730/0x1700 [ 240.513469][T14394] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 240.513482][T14394] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 240.513497][T14394] ? do_vfs_ioctl+0x226/0x13e0 [ 240.513518][T14394] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 240.513536][T14394] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 240.513560][T14394] ? __fget_files+0x215/0x3d0 [ 240.513571][T14394] ? hook_file_ioctl_common+0x140/0x440 [ 240.513605][T14394] ? selinux_file_ioctl+0x13b/0x290 [ 240.513623][T14394] ? selinux_file_ioctl+0xb6/0x290 [ 240.513641][T14394] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 240.513655][T14394] __x64_sys_ioctl+0x18e/0x210 [ 240.513673][T14394] do_syscall_64+0x115/0x870 [ 240.513686][T14394] ? clear_bhb_loop+0x40/0x90 [ 240.513700][T14394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.513711][T14394] RIP: 0033:0x7f6eabb9de99 [ 240.513722][T14394] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.513733][T14394] RSP: 002b:00007f6eac9ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 240.513744][T14394] RAX: ffffffffffffffda RBX: 00007f6eabe25fa0 RCX: 00007f6eabb9de99 [ 240.513752][T14394] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000e [ 240.513758][T14394] RBP: 00007f6eac9ff090 R08: 0000000000000000 R09: 0000000000000000 [ 240.513765][T14394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 240.513772][T14394] R13: 00007f6eabe26038 R14: 00007f6eabe25fa0 R15: 00007ffff02a2a48 [ 240.513786][T14394] [ 241.354830][T14426] ubi0 error: ubi_open_volume: cannot open device 0, volume 0, error -19 [ 241.358466][T14426] UBIFS error (pid: 14426): cannot open "ubi0_0", error -19 [ 241.490008][T14438] netlink: 'syz.5.2933': attribute type 3 has an invalid length. [ 241.678460][T14448] syzkaller0: entered promiscuous mode [ 241.680748][T14448] syzkaller0: entered allmulticast mode [ 241.787217][T14408] comedi comedi0: reset error (fatal) [ 241.822131][T14455] FAULT_INJECTION: forcing a failure. [ 241.822131][T14455] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 241.827396][T14455] CPU: 3 UID: 0 PID: 14455 Comm: syz.4.2939 Tainted: G L syzkaller #0 PREEMPT(full) [ 241.827426][T14455] Tainted: [L]=SOFTLOCKUP [ 241.827434][T14455] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 241.827445][T14455] Call Trace: [ 241.827452][T14455] [ 241.827460][T14455] dump_stack_lvl+0x100/0x190 [ 241.827495][T14455] should_fail_ex.cold+0x5/0xa [ 241.827518][T14455] _copy_from_user+0x2e/0xd0 [ 241.827544][T14455] input_event_from_user+0x123/0x310 [ 241.827571][T14455] ? __pfx_input_event_from_user+0x10/0x10 [ 241.827597][T14455] ? __pfx___might_resched+0x10/0x10 [ 241.827618][T14455] ? input_inject_event+0x198/0x380 [ 241.827668][T14455] evdev_write+0x342/0x610 [ 241.827700][T14455] ? __pfx_evdev_write+0x10/0x10 [ 241.827727][T14455] ? bpf_lsm_file_permission+0x9/0x10 [ 241.827754][T14455] ? security_file_permission+0x76/0x210 [ 241.827773][T14455] ? rw_verify_area+0xce/0x6d0 [ 241.827801][T14455] vfs_write+0x2aa/0x1050 [ 241.827828][T14455] ? __pfx_evdev_write+0x10/0x10 [ 241.827854][T14455] ? __pfx_vfs_write+0x10/0x10 [ 241.827879][T14455] ? find_held_lock+0x2b/0x80 [ 241.827905][T14455] ? __fget_files+0x215/0x3d0 [ 241.827922][T14455] ? __fget_files+0x215/0x3d0 [ 241.827945][T14455] ? __fget_files+0x21f/0x3d0 [ 241.827971][T14455] ksys_write+0x1f8/0x250 [ 241.827997][T14455] ? __pfx_ksys_write+0x10/0x10 [ 241.828030][T14455] do_syscall_64+0x115/0x870 [ 241.828050][T14455] ? clear_bhb_loop+0x40/0x90 [ 241.828072][T14455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.828091][T14455] RIP: 0033:0x7f323ab9de99 [ 241.828108][T14455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.828125][T14455] RSP: 002b:00007f323bab0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 241.828145][T14455] RAX: ffffffffffffffda RBX: 00007f323ae25fa0 RCX: 00007f323ab9de99 [ 241.828157][T14455] RDX: 00000000000012d8 RSI: 0000200000000040 RDI: 0000000000000004 [ 241.828168][T14455] RBP: 00007f323bab0090 R08: 0000000000000000 R09: 0000000000000000 [ 241.828179][T14455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 241.828190][T14455] R13: 00007f323ae26038 R14: 00007f323ae25fa0 R15: 00007ffdfc9dba18 [ 241.828216][T14455] [ 242.251597][T14484] binder: 14483:14484 ioctl c018620c 2000000005c0 returned -1 [ 242.288930][T14489] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 242.463967][T14497] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14497 comm=syz.4.2952 [ 242.471565][T14497] rdma_op ffff888026bb99f0 conn xmit_rdma 0000000000000000 [ 242.479222][T14497] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2952'. [ 242.482080][T14497] bridge_slave_1: left allmulticast mode [ 242.484238][T14497] bridge_slave_1: left promiscuous mode [ 242.486967][T14497] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.493752][T14497] bridge_slave_0: left allmulticast mode [ 242.496267][T14497] bridge_slave_0: left promiscuous mode [ 242.499002][T14497] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.735885][T14507] FAULT_INJECTION: forcing a failure. [ 242.735885][T14507] name failslab, interval 1, probability 0, space 0, times 0 [ 242.741358][T14507] CPU: 3 UID: 0 PID: 14507 Comm: syz.5.2954 Tainted: G L syzkaller #0 PREEMPT(full) [ 242.741388][T14507] Tainted: [L]=SOFTLOCKUP [ 242.741395][T14507] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 242.741406][T14507] Call Trace: [ 242.741413][T14507] [ 242.741421][T14507] dump_stack_lvl+0x100/0x190 [ 242.741449][T14507] should_fail_ex.cold+0x5/0xa [ 242.741472][T14507] should_failslab+0xc2/0x120 [ 242.741496][T14507] kmem_cache_alloc_noprof+0x91/0x6a0 [ 242.741518][T14507] ? ptlock_alloc+0x1f/0x70 [ 242.741551][T14507] ptlock_alloc+0x1f/0x70 [ 242.741578][T14507] pte_alloc_one+0x82/0x3d0 [ 242.741598][T14507] __pte_alloc+0x6d/0x3e0 [ 242.741620][T14507] ? __pfx___pte_alloc+0x10/0x10 [ 242.741642][T14507] ? __pfx___might_resched+0x10/0x10 [ 242.741663][T14507] ? copy_page_range+0x1c4a/0x5b20 [ 242.741695][T14507] copy_page_range+0x3dd8/0x5b20 [ 242.741752][T14507] ? mas_wr_store_entry+0xa1/0x1e80 [ 242.741778][T14507] ? __pfx_copy_page_range+0x10/0x10 [ 242.741815][T14507] ? __pfx___might_resched+0x10/0x10 [ 242.741841][T14507] ? dup_mmap+0xcfe/0x21b0 [ 242.741869][T14507] ? down_write+0x146/0x1f0 [ 242.741894][T14507] ? up_write+0x2e5/0x5c0 [ 242.741922][T14507] dup_mmap+0xd44/0x21b0 [ 242.741957][T14507] ? __pfx_dup_mmap+0x10/0x10 [ 242.741986][T14507] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 242.742010][T14507] ? __lock_acquire+0x49f/0x1a40 [ 242.742033][T14507] ? find_held_lock+0x2b/0x80 [ 242.742059][T14507] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 242.742105][T14507] copy_process+0x4588/0x8030 [ 242.742145][T14507] ? __pfx_copy_process+0x10/0x10 [ 242.742178][T14507] ? _copy_from_user+0x59/0xd0 [ 242.742206][T14507] kernel_clone+0x176/0x9d0 [ 242.742229][T14507] ? get_pid_task+0xfc/0x250 [ 242.742257][T14507] ? __pfx_kernel_clone+0x10/0x10 [ 242.742288][T14507] ? find_held_lock+0x2b/0x80 [ 242.742321][T14507] __do_sys_clone3+0x214/0x290 [ 242.742346][T14507] ? __pfx___do_sys_clone3+0x10/0x10 [ 242.742370][T14507] ? ksys_write+0x190/0x250 [ 242.742426][T14507] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 242.742448][T14507] ? __fget_files+0x21f/0x3d0 [ 242.742487][T14507] do_syscall_64+0x115/0x870 [ 242.742506][T14507] ? clear_bhb_loop+0x40/0x90 [ 242.742529][T14507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.742548][T14507] RIP: 0033:0x7f6eabb9de99 [ 242.742564][T14507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.742581][T14507] RSP: 002b:00007f6eac9feef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 242.742601][T14507] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f6eabb9de99 [ 242.742613][T14507] RDX: 00007f6eac9fef10 RSI: 0000000000000058 RDI: 00007f6eac9fef10 [ 242.742624][T14507] RBP: 00007f6eac9ff090 R08: 0000000000000000 R09: 0000000000000058 [ 242.742635][T14507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 242.742646][T14507] R13: 00007f6eabe26038 R14: 00007f6eabe25fa0 R15: 00007ffff02a2a48 [ 242.742673][T14507] [ 243.009360][T14513] syzkaller0: entered promiscuous mode [ 243.011051][T14513] syzkaller0: entered allmulticast mode [ 243.176781][T14518] FAULT_INJECTION: forcing a failure. [ 243.176781][T14518] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.187225][T14518] CPU: 2 UID: 0 PID: 14518 Comm: syz.5.2959 Tainted: G L syzkaller #0 PREEMPT(full) [ 243.187246][T14518] Tainted: [L]=SOFTLOCKUP [ 243.187250][T14518] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 243.187257][T14518] Call Trace: [ 243.187261][T14518] [ 243.187266][T14518] dump_stack_lvl+0x100/0x190 [ 243.187284][T14518] should_fail_ex.cold+0x5/0xa [ 243.187299][T14518] _copy_from_user+0x2e/0xd0 [ 243.187316][T14518] input_event_from_user+0x123/0x310 [ 243.187334][T14518] ? __pfx_input_event_from_user+0x10/0x10 [ 243.187351][T14518] ? __pfx___might_resched+0x10/0x10 [ 243.187365][T14518] ? input_inject_event+0x198/0x380 [ 243.187383][T14518] evdev_write+0x342/0x610 [ 243.187402][T14518] ? __pfx_evdev_write+0x10/0x10 [ 243.187420][T14518] ? bpf_lsm_file_permission+0x9/0x10 [ 243.187438][T14518] ? security_file_permission+0x76/0x210 [ 243.187450][T14518] ? rw_verify_area+0xce/0x6d0 [ 243.187468][T14518] vfs_write+0x2aa/0x1050 [ 243.187486][T14518] ? __pfx_evdev_write+0x10/0x10 [ 243.187503][T14518] ? __pfx_vfs_write+0x10/0x10 [ 243.187533][T14518] ? find_held_lock+0x2b/0x80 [ 243.187553][T14518] ? __fget_files+0x215/0x3d0 [ 243.187565][T14518] ? __fget_files+0x215/0x3d0 [ 243.187579][T14518] ? __fget_files+0x21f/0x3d0 [ 243.187594][T14518] ksys_write+0x1f8/0x250 [ 243.187612][T14518] ? __pfx_ksys_write+0x10/0x10 [ 243.187651][T14518] do_syscall_64+0x115/0x870 [ 243.187667][T14518] ? clear_bhb_loop+0x40/0x90 [ 243.187681][T14518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.187693][T14518] RIP: 0033:0x7f6eabb9de99 [ 243.187704][T14518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.187715][T14518] RSP: 002b:00007f6eac9ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 243.187726][T14518] RAX: ffffffffffffffda RBX: 00007f6eabe25fa0 RCX: 00007f6eabb9de99 [ 243.187734][T14518] RDX: 00000000000012d8 RSI: 0000200000000040 RDI: 0000000000000004 [ 243.187741][T14518] RBP: 00007f6eac9ff090 R08: 0000000000000000 R09: 0000000000000000 [ 243.187748][T14518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 243.187754][T14518] R13: 00007f6eabe26038 R14: 00007f6eabe25fa0 R15: 00007ffff02a2a48 [ 243.187768][T14518] [ 243.276224][T14525] hsr0: entered promiscuous mode [ 243.336918][T14530] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2963'. [ 243.343245][T14530] hsr_slave_0: left promiscuous mode [ 243.346026][T14530] hsr_slave_1: left promiscuous mode [ 243.355836][T14530] hsr0 (unregistering): left promiscuous mode [ 243.542400][T14531] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2965'. [ 245.122432][T14471] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 245.172315][ T42] kauditd_printk_skb: 94 callbacks suppressed [ 245.172345][ T42] audit: type=1400 audit(2000000451.326:6939): avc: denied { read } for pid=14535 comm="syz.5.2967" name="iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 245.186302][T14534] syzkaller0: entered promiscuous mode [ 245.186340][T14534] syzkaller0: entered allmulticast mode [ 245.193368][ T42] audit: type=1400 audit(2000000451.326:6940): avc: denied { open } for pid=14535 comm="syz.5.2967" path="/dev/iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 245.209227][T14537] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 245.253991][T14541] netlink: 'syz.4.2968': attribute type 3 has an invalid length. [ 245.266835][ T42] audit: type=1400 audit(2000000451.416:6941): avc: denied { write } for pid=14542 comm="syz.5.2969" name="comedi0" dev="devtmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 245.280392][ T42] audit: type=1400 audit(2000000451.436:6942): avc: denied { append } for pid=14544 comm="syz.4.2970" name="sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 245.292058][ T42] audit: type=1400 audit(2000000451.446:6943): avc: denied { create } for pid=14544 comm="syz.4.2970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 245.298612][ T42] audit: type=1400 audit(2000000451.446:6944): avc: denied { setopt } for pid=14544 comm="syz.4.2970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 245.318489][ T42] audit: type=1400 audit(2000000451.446:6945): avc: denied { bind } for pid=14544 comm="syz.4.2970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 245.325623][ T42] audit: type=1400 audit(2000000451.446:6946): avc: denied { node_bind } for pid=14544 comm="syz.4.2970" saddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 245.333751][ T42] audit: type=1400 audit(2000000451.446:6947): avc: denied { connect } for pid=14544 comm="syz.4.2970" laddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 245.347323][T14546] blktrace: Concurrent blktraces are not allowed on sg0 [ 245.353489][ T42] audit: type=1400 audit(2000000451.446:6948): avc: denied { write } for pid=14544 comm="syz.4.2970" laddr=172.20.20.187 faddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 245.568182][T14554] FAULT_INJECTION: forcing a failure. [ 245.568182][T14554] name failslab, interval 1, probability 0, space 0, times 0 [ 245.574073][T14554] CPU: 1 UID: 0 PID: 14554 Comm: syz.4.2974 Tainted: G L syzkaller #0 PREEMPT(full) [ 245.574102][T14554] Tainted: [L]=SOFTLOCKUP [ 245.574108][T14554] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 245.574119][T14554] Call Trace: [ 245.574127][T14554] [ 245.574135][T14554] dump_stack_lvl+0x100/0x190 [ 245.574162][T14554] should_fail_ex.cold+0x5/0xa [ 245.574186][T14554] should_failslab+0xc2/0x120 [ 245.574209][T14554] kmem_cache_alloc_noprof+0x91/0x6a0 [ 245.574231][T14554] ? ptlock_alloc+0x1f/0x70 [ 245.574261][T14554] ptlock_alloc+0x1f/0x70 [ 245.574287][T14554] pte_alloc_one+0x82/0x3d0 [ 245.574308][T14554] __pte_alloc+0x6d/0x3e0 [ 245.574329][T14554] ? __pfx___pte_alloc+0x10/0x10 [ 245.574349][T14554] ? __pfx___might_resched+0x10/0x10 [ 245.574370][T14554] ? copy_page_range+0x1c4a/0x5b20 [ 245.574401][T14554] copy_page_range+0x3dd8/0x5b20 [ 245.574452][T14554] ? mas_wr_store_entry+0xa1/0x1e80 [ 245.574484][T14554] ? __pfx_copy_page_range+0x10/0x10 [ 245.574520][T14554] ? __pfx___might_resched+0x10/0x10 [ 245.574546][T14554] ? dup_mmap+0xcfe/0x21b0 [ 245.574586][T14554] ? down_write+0x146/0x1f0 [ 245.574611][T14554] ? up_write+0x2e5/0x5c0 [ 245.574636][T14554] dup_mmap+0xd44/0x21b0 [ 245.574669][T14554] ? __pfx_dup_mmap+0x10/0x10 [ 245.574692][T14554] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 245.574717][T14554] ? __lock_acquire+0x49f/0x1a40 [ 245.574742][T14554] ? find_held_lock+0x2b/0x80 [ 245.574770][T14554] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 245.574813][T14554] copy_process+0x4588/0x8030 [ 245.574854][T14554] ? __pfx_copy_process+0x10/0x10 [ 245.574885][T14554] ? _copy_from_user+0x59/0xd0 [ 245.574912][T14554] kernel_clone+0x176/0x9d0 [ 245.574934][T14554] ? get_pid_task+0xfc/0x250 [ 245.574962][T14554] ? __pfx_kernel_clone+0x10/0x10 [ 245.574990][T14554] ? find_held_lock+0x2b/0x80 [ 245.575131][T14554] __do_sys_clone3+0x214/0x290 [ 245.575156][T14554] ? __pfx___do_sys_clone3+0x10/0x10 [ 245.575179][T14554] ? ksys_write+0x190/0x250 [ 245.575216][T14554] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 245.575239][T14554] ? __fget_files+0x21f/0x3d0 [ 245.575277][T14554] do_syscall_64+0x115/0x870 [ 245.575298][T14554] ? clear_bhb_loop+0x40/0x90 [ 245.575320][T14554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.575338][T14554] RIP: 0033:0x7f323ab9de99 [ 245.575358][T14554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.575375][T14554] RSP: 002b:00007f323baafef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 245.575394][T14554] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f323ab9de99 [ 245.575406][T14554] RDX: 00007f323baaff10 RSI: 0000000000000058 RDI: 00007f323baaff10 [ 245.575417][T14554] RBP: 00007f323bab0090 R08: 0000000000000000 R09: 0000000000000058 [ 245.575428][T14554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 245.575438][T14554] R13: 00007f323ae26038 R14: 00007f323ae25fa0 R15: 00007ffdfc9dba18 [ 245.575464][T14554] [ 245.768467][ T9] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 245.939413][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 245.945567][ T9] usb 7-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 245.949245][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.952419][ T9] usb 7-1: Product: syz [ 245.954103][ T9] usb 7-1: Manufacturer: syz [ 245.955896][ T9] usb 7-1: SerialNumber: syz [ 246.054200][T14575] FAULT_INJECTION: forcing a failure. [ 246.054200][T14575] name failslab, interval 1, probability 0, space 0, times 0 [ 246.059639][T14575] CPU: 3 UID: 0 PID: 14575 Comm: syz.4.2983 Tainted: G L syzkaller #0 PREEMPT(full) [ 246.059670][T14575] Tainted: [L]=SOFTLOCKUP [ 246.059677][T14575] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 246.059687][T14575] Call Trace: [ 246.059694][T14575] [ 246.059702][T14575] dump_stack_lvl+0x100/0x190 [ 246.059729][T14575] should_fail_ex.cold+0x5/0xa [ 246.059753][T14575] should_failslab+0xc2/0x120 [ 246.059778][T14575] kmem_cache_alloc_noprof+0x91/0x6a0 [ 246.059801][T14575] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 246.059828][T14575] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 246.059857][T14575] mmu_topup_memory_caches+0x25/0x170 [ 246.059891][T14575] kvm_mmu_load+0xe2/0x2570 [ 246.059915][T14575] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 246.059933][T14575] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 246.059955][T14575] ? __pfx_kvm_mmu_load+0x10/0x10 [ 246.059978][T14575] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 246.060000][T14575] ? kvm_check_and_inject_events+0x873/0x12a0 [ 246.060025][T14575] ? record_steal_time+0x3a0/0xbb0 [ 246.060046][T14575] vcpu_run+0x3aaa/0x5de0 [ 246.060079][T14575] ? __pfx___schedule+0x10/0x10 [ 246.060097][T14575] ? __pfx_vcpu_run+0x10/0x10 [ 246.060132][T14575] ? rcu_is_watching+0x12/0xc0 [ 246.060162][T14575] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 246.060187][T14575] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 246.060220][T14575] kvm_vcpu_ioctl+0x730/0x1700 [ 246.060243][T14575] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 246.060264][T14575] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 246.060288][T14575] ? do_vfs_ioctl+0x226/0x13e0 [ 246.060315][T14575] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 246.060341][T14575] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 246.060378][T14575] ? __fget_files+0x215/0x3d0 [ 246.060396][T14575] ? hook_file_ioctl_common+0x140/0x440 [ 246.060424][T14575] ? selinux_file_ioctl+0x13b/0x290 [ 246.060450][T14575] ? selinux_file_ioctl+0xb6/0x290 [ 246.060476][T14575] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 246.060495][T14575] __x64_sys_ioctl+0x18e/0x210 [ 246.060522][T14575] do_syscall_64+0x115/0x870 [ 246.060540][T14575] ? clear_bhb_loop+0x40/0x90 [ 246.060560][T14575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.060577][T14575] RIP: 0033:0x7f323ab9de99 [ 246.060592][T14575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.060621][T14575] RSP: 002b:00007f323bab0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 246.060636][T14575] RAX: ffffffffffffffda RBX: 00007f323ae25fa0 RCX: 00007f323ab9de99 [ 246.060643][T14575] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000d [ 246.060650][T14575] RBP: 00007f323bab0090 R08: 0000000000000000 R09: 0000000000000000 [ 246.060656][T14575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 246.060663][T14575] R13: 00007f323ae26038 R14: 00007f323ae25fa0 R15: 00007ffdfc9dba18 [ 246.060678][T14575] [ 246.347220][T14543] comedi comedi0: reset error (fatal) [ 246.374047][ T9] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 246.584953][T14602] FAULT_INJECTION: forcing a failure. [ 246.584953][T14602] name failslab, interval 1, probability 0, space 0, times 0 [ 246.589039][T14602] CPU: 2 UID: 0 PID: 14602 Comm: syz.4.2992 Tainted: G L syzkaller #0 PREEMPT(full) [ 246.589056][T14602] Tainted: [L]=SOFTLOCKUP [ 246.589061][T14602] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 246.589068][T14602] Call Trace: [ 246.589072][T14602] [ 246.589077][T14602] dump_stack_lvl+0x100/0x190 [ 246.589094][T14602] should_fail_ex.cold+0x5/0xa [ 246.589109][T14602] should_failslab+0xc2/0x120 [ 246.589124][T14602] kmem_cache_alloc_noprof+0x91/0x6a0 [ 246.589138][T14602] ? vm_area_dup+0x27/0x8e0 [ 246.589159][T14602] vm_area_dup+0x27/0x8e0 [ 246.589177][T14602] dup_mmap+0x6f6/0x21b0 [ 246.589199][T14602] ? __pfx_dup_mmap+0x10/0x10 [ 246.589215][T14602] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 246.589230][T14602] ? __lock_acquire+0x49f/0x1a40 [ 246.589245][T14602] ? find_held_lock+0x2b/0x80 [ 246.589262][T14602] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 246.589289][T14602] copy_process+0x4588/0x8030 [ 246.589313][T14602] ? __pfx_copy_process+0x10/0x10 [ 246.589333][T14602] ? _copy_from_user+0x59/0xd0 [ 246.589350][T14602] kernel_clone+0x176/0x9d0 [ 246.589365][T14602] ? get_pid_task+0xfc/0x250 [ 246.589384][T14602] ? __pfx_kernel_clone+0x10/0x10 [ 246.589403][T14602] ? find_held_lock+0x2b/0x80 [ 246.589424][T14602] __do_sys_clone3+0x214/0x290 [ 246.589440][T14602] ? __pfx___do_sys_clone3+0x10/0x10 [ 246.589456][T14602] ? ksys_write+0x190/0x250 [ 246.589479][T14602] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 246.589495][T14602] ? __fget_files+0x21f/0x3d0 [ 246.589517][T14602] do_syscall_64+0x115/0x870 [ 246.589531][T14602] ? clear_bhb_loop+0x40/0x90 [ 246.589544][T14602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.589556][T14602] RIP: 0033:0x7f323ab9de99 [ 246.589566][T14602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.589577][T14602] RSP: 002b:00007f323baafef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 246.589588][T14602] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f323ab9de99 [ 246.589595][T14602] RDX: 00007f323baaff10 RSI: 0000000000000058 RDI: 00007f323baaff10 [ 246.589602][T14602] RBP: 00007f323bab0090 R08: 0000000000000000 R09: 0000000000000058 [ 246.589609][T14602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 246.589615][T14602] R13: 00007f323ae26038 R14: 00007f323ae25fa0 R15: 00007ffdfc9dba18 [ 246.589630][T14602] [ 247.314926][T14650] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 247.439994][T14653] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 247.501644][T14655] blktrace: Concurrent blktraces are not allowed on sg0 [ 247.607499][T14657] FAULT_INJECTION: forcing a failure. [ 247.607499][T14657] name failslab, interval 1, probability 0, space 0, times 0 [ 247.614135][T14657] CPU: 3 UID: 0 PID: 14657 Comm: syz.5.3007 Tainted: G L syzkaller #0 PREEMPT(full) [ 247.614162][T14657] Tainted: [L]=SOFTLOCKUP [ 247.614168][T14657] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 247.614177][T14657] Call Trace: [ 247.614183][T14657] [ 247.614189][T14657] dump_stack_lvl+0x100/0x190 [ 247.614214][T14657] should_fail_ex.cold+0x5/0xa [ 247.614235][T14657] should_failslab+0xc2/0x120 [ 247.614256][T14657] kmem_cache_alloc_noprof+0x91/0x6a0 [ 247.614276][T14657] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 247.614300][T14657] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 247.614326][T14657] mmu_topup_memory_caches+0x25/0x170 [ 247.614351][T14657] kvm_mmu_load+0xe2/0x2570 [ 247.614376][T14657] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 247.614394][T14657] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 247.614416][T14657] ? __pfx_kvm_mmu_load+0x10/0x10 [ 247.614439][T14657] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 247.614461][T14657] ? kvm_check_and_inject_events+0x873/0x12a0 [ 247.614486][T14657] ? record_steal_time+0x3a0/0xbb0 [ 247.614509][T14657] vcpu_run+0x3aaa/0x5de0 [ 247.614551][T14657] ? __pfx_vcpu_run+0x10/0x10 [ 247.614585][T14657] ? rcu_is_watching+0x12/0xc0 [ 247.614616][T14657] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 247.614641][T14657] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 247.614674][T14657] kvm_vcpu_ioctl+0x730/0x1700 [ 247.614696][T14657] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 247.614717][T14657] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 247.614741][T14657] ? do_vfs_ioctl+0x226/0x13e0 [ 247.614768][T14657] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 247.614793][T14657] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 247.614831][T14657] ? __fget_files+0x215/0x3d0 [ 247.614849][T14657] ? hook_file_ioctl_common+0x140/0x440 [ 247.614877][T14657] ? selinux_file_ioctl+0x13b/0x290 [ 247.614903][T14657] ? selinux_file_ioctl+0xb6/0x290 [ 247.614931][T14657] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 247.614953][T14657] __x64_sys_ioctl+0x18e/0x210 [ 247.614978][T14657] do_syscall_64+0x115/0x870 [ 247.614996][T14657] ? clear_bhb_loop+0x40/0x90 [ 247.615017][T14657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.615035][T14657] RIP: 0033:0x7f6eabb9de99 [ 247.615051][T14657] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.615068][T14657] RSP: 002b:00007f6eac9ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 247.615104][T14657] RAX: ffffffffffffffda RBX: 00007f6eabe25fa0 RCX: 00007f6eabb9de99 [ 247.615117][T14657] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000d [ 247.615127][T14657] RBP: 00007f6eac9ff090 R08: 0000000000000000 R09: 0000000000000000 [ 247.615139][T14657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 247.615150][T14657] R13: 00007f6eabe26038 R14: 00007f6eabe25fa0 R15: 00007ffff02a2a48 [ 247.615176][T14657] [ 247.847217][T14621] comedi comedi0: reset error (fatal) [ 247.942866][ T149] IPVS: starting estimator thread 0... [ 248.037217][T14667] IPVS: using max 44 ests per chain, 105600 per kthread [ 248.153993][T14676] ceph: No mds server is up or the cluster is laggy [ 248.269327][T14687] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14687 comm=syz.4.3016 [ 248.333237][T14690] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3017'. [ 248.395388][T14693] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 3, id = 0 [ 248.396312][T14692] autofs4:pid:14692:validate_dev_ioctl: invalid path supplied for cmd(0xc0189375) [ 248.472982][ T9] usb 7-1: USB disconnect, device number 15 [ 248.491478][ T9] usblp0: removed [ 248.551990][T14696] netlink: 'syz.2.3018': attribute type 3 has an invalid length. [ 248.605825][T14700] syzkaller0: entered promiscuous mode [ 248.607677][T14700] syzkaller0: entered allmulticast mode [ 250.528950][T14704] syzkaller0: entered promiscuous mode [ 250.531265][T14704] syzkaller0: entered allmulticast mode [ 250.535005][T14707] tipc: Started in network mode [ 250.537759][T14707] tipc: Node identity 1000001, cluster identity 4369 [ 250.540403][T14707] tipc: Node number set to 16777217 [ 250.542781][T14707] tipc: Cannot configure node identity twice [ 250.711594][T14712] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3023'. [ 250.763485][ T42] kauditd_printk_skb: 193 callbacks suppressed [ 250.763497][ T42] audit: type=1400 audit(2000000456.926:7142): avc: denied { sys_module } for pid=14711 comm="syz.2.3023" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 250.842473][ T42] audit: type=1400 audit(2000000457.006:7143): avc: denied { create } for pid=14711 comm="syz.2.3023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 250.851811][ T42] audit: type=1400 audit(2000000457.006:7144): avc: denied { create } for pid=14711 comm="syz.2.3023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 250.861453][ T42] audit: type=1400 audit(2000000457.006:7145): avc: denied { setopt } for pid=14711 comm="syz.2.3023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 250.969922][ T42] audit: type=1400 audit(2000000457.116:7146): avc: denied { setopt } for pid=14711 comm="syz.2.3023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 250.979725][ T42] audit: type=1400 audit(2000000457.126:7147): avc: denied { create } for pid=14722 comm="syz.0.3024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 250.992763][ T42] audit: type=1400 audit(2000000457.126:7148): avc: denied { write } for pid=14722 comm="syz.0.3024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 251.020167][ T42] audit: type=1400 audit(2000000457.176:7149): avc: denied { create } for pid=14724 comm="syz.0.3025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 251.025978][ T42] audit: type=1400 audit(2000000457.176:7150): avc: denied { allowed } for pid=14724 comm="syz.0.3025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 251.032972][ T42] audit: type=1400 audit(2000000457.186:7151): avc: denied { create } for pid=14724 comm="syz.0.3025" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 252.565186][T14709] tipc: New replicast peer: 127.0.0.1 [ 252.569740][T14709] tipc: Enabled bearer , priority 10 [ 252.611255][T14733] FAULT_INJECTION: forcing a failure. [ 252.611255][T14733] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 252.615519][T14733] CPU: 2 UID: 0 PID: 14733 Comm: syz.0.3026 Tainted: G L syzkaller #0 PREEMPT(full) [ 252.615538][T14733] Tainted: [L]=SOFTLOCKUP [ 252.615543][T14733] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 252.615550][T14733] Call Trace: [ 252.615555][T14733] [ 252.615559][T14733] dump_stack_lvl+0x100/0x190 [ 252.615578][T14733] should_fail_ex.cold+0x5/0xa [ 252.615610][T14733] _copy_from_iter+0x1f4/0x1690 [ 252.615629][T14733] ? __asan_memset+0x23/0x50 [ 252.615642][T14733] ? __pfx__copy_from_iter+0x10/0x10 [ 252.615657][T14733] ? __pfx___alloc_skb+0x10/0x10 [ 252.615676][T14733] netlink_sendmsg+0x808/0xda0 [ 252.615691][T14733] ? __pfx_netlink_sendmsg+0x10/0x10 [ 252.615704][T14733] ? selinux_socket_sendmsg+0x198/0x2f0 [ 252.615723][T14733] ____sys_sendmsg+0xa4d/0xbe0 [ 252.615740][T14733] ? __pfx_netlink_sendmsg+0x10/0x10 [ 252.615753][T14733] ? __pfx_____sys_sendmsg+0x10/0x10 [ 252.615776][T14733] ___sys_sendmsg+0x190/0x1e0 [ 252.615795][T14733] ? __pfx____sys_sendmsg+0x10/0x10 [ 252.615813][T14733] ? __lock_acquire+0x49f/0x1a40 [ 252.615828][T14733] ? get_pid_task+0x106/0x250 [ 252.615860][T14733] __sys_sendmsg+0x160/0x210 [ 252.615875][T14733] ? __pfx___sys_sendmsg+0x10/0x10 [ 252.615896][T14733] do_syscall_64+0x115/0x870 [ 252.615909][T14733] ? clear_bhb_loop+0x40/0x90 [ 252.615923][T14733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.615935][T14733] RIP: 0033:0x7f3f5db9de99 [ 252.615945][T14733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.615956][T14733] RSP: 002b:00007f3f5e99f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 252.615968][T14733] RAX: ffffffffffffffda RBX: 00007f3f5de25fa0 RCX: 00007f3f5db9de99 [ 252.615976][T14733] RDX: 000000000400c000 RSI: 0000200000000300 RDI: 0000000000000004 [ 252.615982][T14733] RBP: 00007f3f5e99f090 R08: 0000000000000000 R09: 0000000000000000 [ 252.615989][T14733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.615995][T14733] R13: 00007f3f5de26038 R14: 00007f3f5de25fa0 R15: 00007ffcc6cdff28 [ 252.616009][T14733] [ 252.754267][T14744] syzkaller0: entered promiscuous mode [ 252.757944][T14744] syzkaller0: entered allmulticast mode [ 252.816500][T14753] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3035'. [ 252.820929][T14753] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3035'. [ 252.873783][T14762] FAULT_INJECTION: forcing a failure. [ 252.873783][T14762] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 252.878043][T14762] CPU: 0 UID: 0 PID: 14762 Comm: syz.0.3039 Tainted: G L syzkaller #0 PREEMPT(full) [ 252.878062][T14762] Tainted: [L]=SOFTLOCKUP [ 252.878067][T14762] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 252.878073][T14762] Call Trace: [ 252.878078][T14762] [ 252.878082][T14762] dump_stack_lvl+0x100/0x190 [ 252.878101][T14762] should_fail_ex.cold+0x5/0xa [ 252.878115][T14762] ? prepare_alloc_pages+0x16d/0x5f0 [ 252.878133][T14762] should_fail_alloc_page+0xeb/0x140 [ 252.878150][T14762] prepare_alloc_pages+0x1f0/0x5f0 [ 252.878173][T14762] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 252.878186][T14762] ? __pfx_stack_trace_save+0x10/0x10 [ 252.878200][T14762] ? stack_depot_save_flags+0x27/0x9d0 [ 252.878217][T14762] ? do_raw_spin_unlock+0x145/0x1e0 [ 252.878236][T14762] ? kasan_save_stack+0x3f/0x50 [ 252.878248][T14762] ? kasan_save_stack+0x30/0x50 [ 252.878261][T14762] ? kasan_save_track+0x14/0x30 [ 252.878274][T14762] ? __kasan_slab_alloc+0x89/0x90 [ 252.878288][T14762] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 252.878300][T14762] ? ptlock_alloc+0x1f/0x70 [ 252.878317][T14762] ? pte_alloc_one+0x82/0x3d0 [ 252.878329][T14762] ? __pte_alloc+0x6d/0x3e0 [ 252.878342][T14762] ? copy_page_range+0x3dd8/0x5b20 [ 252.878359][T14762] ? dup_mmap+0xd44/0x21b0 [ 252.878374][T14762] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 252.878387][T14762] ? do_syscall_64+0x115/0x870 [ 252.878411][T14762] ? look_up_lock_class+0x55/0x120 [ 252.878426][T14762] ? __lock_acquire+0x49f/0x1a40 [ 252.878442][T14762] ? look_up_lock_class+0x55/0x120 [ 252.878454][T14762] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 252.878469][T14762] ? policy_nodemask+0xed/0x4f0 [ 252.878486][T14762] alloc_pages_mpol+0x1fb/0x540 [ 252.878503][T14762] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 252.878520][T14762] ? do_raw_spin_lock+0x128/0x260 [ 252.878538][T14762] alloc_pages_noprof+0x1a/0x160 [ 252.878556][T14762] pte_alloc_one+0x1c/0x3d0 [ 252.878569][T14762] __pte_alloc+0x6d/0x3e0 [ 252.878583][T14762] ? __pfx___pte_alloc+0x10/0x10 [ 252.878596][T14762] ? __pfx___might_resched+0x10/0x10 [ 252.878610][T14762] ? copy_page_range+0x1c4a/0x5b20 [ 252.878630][T14762] copy_page_range+0x3dd8/0x5b20 [ 252.878663][T14762] ? mas_wr_store_entry+0xa1/0x1e80 [ 252.878680][T14762] ? __pfx_copy_page_range+0x10/0x10 [ 252.878703][T14762] ? __pfx___might_resched+0x10/0x10 [ 252.878719][T14762] ? dup_mmap+0xcfe/0x21b0 [ 252.878734][T14762] ? down_write+0x146/0x1f0 [ 252.878750][T14762] ? up_write+0x2e5/0x5c0 [ 252.878767][T14762] dup_mmap+0xd44/0x21b0 [ 252.878788][T14762] ? __pfx_dup_mmap+0x10/0x10 [ 252.878804][T14762] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 252.878819][T14762] ? __lock_acquire+0x49f/0x1a40 [ 252.878834][T14762] ? find_held_lock+0x2b/0x80 [ 252.878851][T14762] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 252.878877][T14762] copy_process+0x4588/0x8030 [ 252.878901][T14762] ? __pfx_copy_process+0x10/0x10 [ 252.878921][T14762] ? _copy_from_user+0x59/0xd0 [ 252.878938][T14762] kernel_clone+0x176/0x9d0 [ 252.878954][T14762] ? get_pid_task+0xfc/0x250 [ 252.878972][T14762] ? __pfx_kernel_clone+0x10/0x10 [ 252.878991][T14762] ? find_held_lock+0x2b/0x80 [ 252.879013][T14762] __do_sys_clone3+0x214/0x290 [ 252.879029][T14762] ? __pfx___do_sys_clone3+0x10/0x10 [ 252.879045][T14762] ? ksys_write+0x190/0x250 [ 252.879068][T14762] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 252.879083][T14762] ? __fget_files+0x21f/0x3d0 [ 252.879105][T14762] do_syscall_64+0x115/0x870 [ 252.879117][T14762] ? clear_bhb_loop+0x40/0x90 [ 252.879131][T14762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.879143][T14762] RIP: 0033:0x7f3f5db9de99 [ 252.879154][T14762] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.879164][T14762] RSP: 002b:00007f3f5e99eef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 252.879176][T14762] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f3f5db9de99 [ 252.879183][T14762] RDX: 00007f3f5e99ef10 RSI: 0000000000000058 RDI: 00007f3f5e99ef10 [ 252.879190][T14762] RBP: 00007f3f5e99f090 R08: 0000000000000000 R09: 0000000000000058 [ 252.879197][T14762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 252.879204][T14762] R13: 00007f3f5de26038 R14: 00007f3f5de25fa0 R15: 00007ffcc6cdff28 [ 252.879218][T14762] [ 252.903853][T14764] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3040'. [ 252.944310][T14768] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 252.995441][T14772] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 253.009752][T14774] FAULT_INJECTION: forcing a failure. [ 253.009752][T14774] name failslab, interval 1, probability 0, space 0, times 0 [ 253.062034][T14774] CPU: 0 UID: 0 PID: 14774 Comm: syz.5.3041 Tainted: G L syzkaller #0 PREEMPT(full) [ 253.062055][T14774] Tainted: [L]=SOFTLOCKUP [ 253.062060][T14774] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 253.062068][T14774] Call Trace: [ 253.062073][T14774] [ 253.062078][T14774] dump_stack_lvl+0x100/0x190 [ 253.062097][T14774] should_fail_ex.cold+0x5/0xa [ 253.062113][T14774] should_failslab+0xc2/0x120 [ 253.062131][T14774] kmem_cache_alloc_noprof+0x91/0x6a0 [ 253.062146][T14774] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 253.062164][T14774] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 253.062197][T14774] mmu_topup_memory_caches+0x25/0x170 [ 253.062217][T14774] kvm_mmu_load+0xe2/0x2570 [ 253.062234][T14774] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 253.062247][T14774] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 253.062261][T14774] ? __pfx_kvm_mmu_load+0x10/0x10 [ 253.062277][T14774] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 253.062292][T14774] ? kvm_check_and_inject_events+0x873/0x12a0 [ 253.062310][T14774] ? record_steal_time+0x3a0/0xbb0 [ 253.062324][T14774] vcpu_run+0x3aaa/0x5de0 [ 253.062341][T14774] ? mark_held_locks+0x40/0x70 [ 253.062362][T14774] ? __pfx_vcpu_run+0x10/0x10 [ 253.062385][T14774] ? rcu_is_watching+0x12/0xc0 [ 253.062410][T14774] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 253.062428][T14774] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 253.062451][T14774] kvm_vcpu_ioctl+0x730/0x1700 [ 253.062466][T14774] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 253.062480][T14774] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 253.062496][T14774] ? do_vfs_ioctl+0x226/0x13e0 [ 253.062514][T14774] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 253.062532][T14774] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 253.062558][T14774] ? __fget_files+0x215/0x3d0 [ 253.062570][T14774] ? hook_file_ioctl_common+0x140/0x440 [ 253.062588][T14774] ? selinux_file_ioctl+0x13b/0x290 [ 253.062607][T14774] ? selinux_file_ioctl+0xb6/0x290 [ 253.062626][T14774] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 253.062640][T14774] __x64_sys_ioctl+0x18e/0x210 [ 253.062660][T14774] do_syscall_64+0x115/0x870 [ 253.062673][T14774] ? clear_bhb_loop+0x40/0x90 [ 253.062688][T14774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.062700][T14774] RIP: 0033:0x7f6eabb9de99 [ 253.062711][T14774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.062735][T14774] RSP: 002b:00007f6eac9de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 253.062749][T14774] RAX: ffffffffffffffda RBX: 00007f6eabe26090 RCX: 00007f6eabb9de99 [ 253.062756][T14774] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000d [ 253.062763][T14774] RBP: 00007f6eac9de090 R08: 0000000000000000 R09: 0000000000000000 [ 253.062770][T14774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 253.062777][T14774] R13: 00007f6eabe26128 R14: 00007f6eabe26090 R15: 00007ffff02a2a48 [ 253.062793][T14774] [ 253.071395][T14770] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 253.182357][T14773] tipc: Failed to obtain node identity [ 253.184578][T14773] tipc: Enabling of bearer rejected, failed to enable media [ 253.348563][T14782] FAULT_INJECTION: forcing a failure. [ 253.348563][T14782] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 253.353358][T14782] CPU: 3 UID: 0 PID: 14782 Comm: syz.4.3047 Tainted: G L syzkaller #0 PREEMPT(full) [ 253.353385][T14782] Tainted: [L]=SOFTLOCKUP [ 253.353391][T14782] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 253.353401][T14782] Call Trace: [ 253.353408][T14782] [ 253.353414][T14782] dump_stack_lvl+0x100/0x190 [ 253.353441][T14782] should_fail_ex.cold+0x5/0xa [ 253.353459][T14782] ? prepare_alloc_pages+0x16d/0x5f0 [ 253.353484][T14782] should_fail_alloc_page+0xeb/0x140 [ 253.353507][T14782] prepare_alloc_pages+0x1f0/0x5f0 [ 253.353549][T14782] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 253.353568][T14782] ? __pfx_stack_trace_save+0x10/0x10 [ 253.353587][T14782] ? stack_depot_save_flags+0x27/0x9d0 [ 253.353610][T14782] ? stack_depot_save_flags+0x27/0x9d0 [ 253.353636][T14782] ? kasan_save_stack+0x3f/0x50 [ 253.353654][T14782] ? kasan_save_stack+0x30/0x50 [ 253.353672][T14782] ? kasan_save_track+0x14/0x30 [ 253.353688][T14782] ? __kasan_kmalloc+0xaa/0xb0 [ 253.353705][T14782] ? __kvmalloc_node_noprof+0x34f/0x970 [ 253.353723][T14782] ? __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 253.353742][T14782] ? mmu_topup_memory_caches+0xbc/0x170 [ 253.353766][T14782] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 253.353783][T14782] ? kvm_vcpu_ioctl+0x730/0x1700 [ 253.353801][T14782] ? do_syscall_64+0x115/0x870 [ 253.353843][T14782] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 253.353864][T14782] ? policy_nodemask+0xed/0x4f0 [ 253.353888][T14782] alloc_pages_mpol+0x1fb/0x540 [ 253.353912][T14782] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 253.353934][T14782] ? __kvmalloc_node_noprof+0x36d/0x970 [ 253.353958][T14782] alloc_pages_noprof+0x1a/0x160 [ 253.353983][T14782] get_free_pages_noprof+0x10/0xb0 [ 253.354003][T14782] __kvm_mmu_topup_memory_cache+0x278/0x5f0 [ 253.354028][T14782] mmu_topup_memory_caches+0xbc/0x170 [ 253.354052][T14782] kvm_mmu_load+0xe2/0x2570 [ 253.354074][T14782] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 253.354092][T14782] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 253.354111][T14782] ? __pfx_kvm_mmu_load+0x10/0x10 [ 253.354132][T14782] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 253.354153][T14782] ? kvm_check_and_inject_events+0x873/0x12a0 [ 253.354175][T14782] ? record_steal_time+0x3a0/0xbb0 [ 253.354195][T14782] vcpu_run+0x3aaa/0x5de0 [ 253.354216][T14782] ? mark_held_locks+0x40/0x70 [ 253.354245][T14782] ? __pfx_vcpu_run+0x10/0x10 [ 253.354275][T14782] ? rcu_is_watching+0x12/0xc0 [ 253.354302][T14782] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 253.354325][T14782] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 253.354355][T14782] kvm_vcpu_ioctl+0x730/0x1700 [ 253.354375][T14782] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 253.354394][T14782] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 253.354415][T14782] ? do_vfs_ioctl+0x226/0x13e0 [ 253.354439][T14782] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 253.354463][T14782] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 253.354496][T14782] ? __fget_files+0x215/0x3d0 [ 253.354512][T14782] ? hook_file_ioctl_common+0x140/0x440 [ 253.354536][T14782] ? selinux_file_ioctl+0x13b/0x290 [ 253.354560][T14782] ? selinux_file_ioctl+0xb6/0x290 [ 253.354585][T14782] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 253.354603][T14782] __x64_sys_ioctl+0x18e/0x210 [ 253.354628][T14782] do_syscall_64+0x115/0x870 [ 253.354645][T14782] ? clear_bhb_loop+0x40/0x90 [ 253.354666][T14782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.354684][T14782] RIP: 0033:0x7f323ab9de99 [ 253.354700][T14782] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.354716][T14782] RSP: 002b:00007f323bab0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 253.354733][T14782] RAX: ffffffffffffffda RBX: 00007f323ae25fa0 RCX: 00007f323ab9de99 [ 253.354744][T14782] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000e [ 253.354754][T14782] RBP: 00007f323bab0090 R08: 0000000000000000 R09: 0000000000000000 [ 253.354763][T14782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 253.354773][T14782] R13: 00007f323ae26038 R14: 00007f323ae25fa0 R15: 00007ffdfc9dba18 [ 253.354795][T14782] [ 253.572096][T14800] FAULT_INJECTION: forcing a failure. [ 253.572096][T14800] name failslab, interval 1, probability 0, space 0, times 0 [ 253.576642][T14800] CPU: 2 UID: 0 PID: 14800 Comm: syz.2.3054 Tainted: G L syzkaller #0 PREEMPT(full) [ 253.576661][T14800] Tainted: [L]=SOFTLOCKUP [ 253.576665][T14800] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 253.576673][T14800] Call Trace: [ 253.576687][T14800] [ 253.576693][T14800] dump_stack_lvl+0x100/0x190 [ 253.576739][T14800] should_fail_ex.cold+0x5/0xa [ 253.576754][T14800] should_failslab+0xc2/0x120 [ 253.576770][T14800] __kmalloc_noprof+0xfc/0x820 [ 253.576783][T14800] ? __pfx___mutex_lock+0x10/0x10 [ 253.576816][T14800] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 253.576836][T14800] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 253.576854][T14800] genl_start+0x18f/0x970 [ 253.576873][T14800] __netlink_dump_start+0x60e/0x990 [ 253.576894][T14800] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 253.576909][T14800] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 253.576927][T14800] ? __pfx_genl_get_cmd+0x10/0x10 [ 253.576938][T14800] ? __pfx_genl_start+0x10/0x10 [ 253.576950][T14800] ? __pfx_genl_dumpit+0x10/0x10 [ 253.576962][T14800] ? __pfx_genl_done+0x10/0x10 [ 253.576975][T14800] ? ____sys_sendmsg+0xa4d/0xbe0 [ 253.576992][T14800] ? ___sys_sendmsg+0x190/0x1e0 [ 253.577009][T14800] ? __radix_tree_lookup+0x217/0x2b0 [ 253.577024][T14800] genl_rcv_msg+0x471/0x800 [ 253.577044][T14800] ? __pfx_genl_rcv_msg+0x10/0x10 [ 253.577062][T14800] ? __pfx_nl802154_list_associations+0x10/0x10 [ 253.577090][T14800] ? __lock_acquire+0x49f/0x1a40 [ 253.577106][T14800] netlink_rcv_skb+0x159/0x420 [ 253.577130][T14800] ? __pfx_genl_rcv_msg+0x10/0x10 [ 253.577146][T14800] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 253.577163][T14800] ? netlink_deliver_tap+0x1ae/0xcc0 [ 253.577184][T14800] genl_rcv+0x28/0x40 [ 253.577195][T14800] netlink_unicast+0x585/0x850 [ 253.577208][T14800] ? __pfx_netlink_unicast+0x10/0x10 [ 253.577224][T14800] netlink_sendmsg+0x8b0/0xda0 [ 253.577237][T14800] ? __pfx_netlink_sendmsg+0x10/0x10 [ 253.577250][T14800] ? selinux_socket_sendmsg+0x198/0x2f0 [ 253.577277][T14800] ____sys_sendmsg+0xa4d/0xbe0 [ 253.577294][T14800] ? __pfx_netlink_sendmsg+0x10/0x10 [ 253.577306][T14800] ? __pfx_____sys_sendmsg+0x10/0x10 [ 253.577330][T14800] ___sys_sendmsg+0x190/0x1e0 [ 253.577349][T14800] ? __pfx____sys_sendmsg+0x10/0x10 [ 253.577369][T14800] ? __lock_acquire+0x49f/0x1a40 [ 253.577383][T14800] ? get_pid_task+0x106/0x250 [ 253.577417][T14800] __sys_sendmsg+0x160/0x210 [ 253.577432][T14800] ? __pfx___sys_sendmsg+0x10/0x10 [ 253.577454][T14800] do_syscall_64+0x115/0x870 [ 253.577466][T14800] ? clear_bhb_loop+0x40/0x90 [ 253.577481][T14800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.577493][T14800] RIP: 0033:0x7f79fab9de99 [ 253.577503][T14800] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.577514][T14800] RSP: 002b:00007f79fba8a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 253.577530][T14800] RAX: ffffffffffffffda RBX: 00007f79fae25fa0 RCX: 00007f79fab9de99 [ 253.577537][T14800] RDX: 000000000400c000 RSI: 0000200000000300 RDI: 0000000000000004 [ 253.577544][T14800] RBP: 00007f79fba8a090 R08: 0000000000000000 R09: 0000000000000000 [ 253.577551][T14800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.577558][T14800] R13: 00007f79fae26038 R14: 00007f79fae25fa0 R15: 00007ffdb3a696f8 [ 253.577572][T14800] [ 253.633815][T14801] syzkaller0: entered promiscuous mode [ 253.666376][T14804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3052'. [ 253.667017][T14801] syzkaller0: entered allmulticast mode [ 253.668771][T14804] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3052'. [ 253.824965][T14823] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 255.259981][T14831] Set syz1 is full, maxelem 65536 reached [ 255.421419][ T1443] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.423982][ T1443] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.584489][ T7176] wlan1: Trigger new scan to find an IBSS to join [ 256.490473][ T42] kauditd_printk_skb: 81 callbacks suppressed [ 256.490492][ T42] audit: type=1400 audit(2000000462.646:7233): avc: denied { read append } for pid=14860 comm="syz.2.3068" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 256.502663][ T42] audit: type=1400 audit(2000000462.646:7234): avc: denied { ioctl open } for pid=14860 comm="syz.2.3068" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 256.517075][T14861] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3068'. [ 256.519384][ T42] audit: type=1400 audit(2000000462.666:7235): avc: denied { read } for pid=14860 comm="syz.2.3068" dev="nsfs" ino=4026533501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 256.529439][T14861] netlink: 'syz.2.3068': attribute type 1 has an invalid length. [ 256.529550][ T42] audit: type=1400 audit(2000000462.666:7236): avc: denied { open } for pid=14860 comm="syz.2.3068" path="net:[4026533501]" dev="nsfs" ino=4026533501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 256.532857][T14861] nbd: error processing sock list [ 256.567729][ T42] audit: type=1400 audit(2000000462.726:7237): avc: denied { map_create } for pid=14869 comm="syz.4.3071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 256.587266][ T42] audit: type=1400 audit(2000000462.726:7238): avc: denied { map_read map_write } for pid=14869 comm="syz.4.3071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 256.593728][ T42] audit: type=1400 audit(2000000462.726:7239): avc: denied { bpf } for pid=14869 comm="syz.4.3071" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 256.602671][ T42] audit: type=1400 audit(2000000462.726:7240): avc: denied { perfmon } for pid=14869 comm="syz.4.3071" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 256.611227][ T42] audit: type=1400 audit(2000000462.736:7241): avc: denied { write } for pid=14860 comm="syz.2.3068" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 256.621088][ T42] audit: type=1400 audit(2000000462.766:7242): avc: denied { create } for pid=14872 comm="syz.4.3072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 256.756981][T14879] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.764784][T14879] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 257.008767][T14888] FAULT_INJECTION: forcing a failure. [ 257.008767][T14888] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 257.014194][T14888] CPU: 1 UID: 0 PID: 14888 Comm: syz.5.3078 Tainted: G L syzkaller #0 PREEMPT(full) [ 257.014223][T14888] Tainted: [L]=SOFTLOCKUP [ 257.014230][T14888] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 257.014241][T14888] Call Trace: [ 257.014249][T14888] [ 257.014256][T14888] dump_stack_lvl+0x100/0x190 [ 257.014285][T14888] should_fail_ex.cold+0x5/0xa [ 257.014310][T14888] _copy_to_user+0x32/0xd0 [ 257.014337][T14888] simple_read_from_buffer+0xcb/0x170 [ 257.014359][T14888] proc_fail_nth_read+0x1af/0x230 [ 257.014388][T14888] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 257.014417][T14888] ? rw_verify_area+0xce/0x6d0 [ 257.014442][T14888] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 257.014469][T14888] vfs_read+0x1e4/0xb40 [ 257.014499][T14888] ? __pfx_vfs_read+0x10/0x10 [ 257.014525][T14888] ? __fget_files+0x215/0x3d0 [ 257.014550][T14888] ? __fget_files+0x21f/0x3d0 [ 257.014575][T14888] ksys_read+0x12a/0x250 [ 257.014601][T14888] ? __pfx_ksys_read+0x10/0x10 [ 257.014636][T14888] do_syscall_64+0x115/0x870 [ 257.014656][T14888] ? clear_bhb_loop+0x40/0x90 [ 257.014678][T14888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.014696][T14888] RIP: 0033:0x7f6eabb5e6ce [ 257.014712][T14888] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 257.014729][T14888] RSP: 002b:00007f6eac9fefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 257.014747][T14888] RAX: ffffffffffffffda RBX: 00007f6eac9ff6c0 RCX: 00007f6eabb5e6ce [ 257.014758][T14888] RDX: 000000000000000f RSI: 00007f6eac9ff0a0 RDI: 0000000000000003 [ 257.014769][T14888] RBP: 00007f6eac9ff090 R08: 0000000000000000 R09: 0000000000000000 [ 257.014780][T14888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.014791][T14888] R13: 00007f6eabe26038 R14: 00007f6eabe25fa0 R15: 00007ffff02a2a48 [ 257.014816][T14888] [ 257.175792][T14899] FAULT_INJECTION: forcing a failure. [ 257.175792][T14899] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 257.179532][T14903] bond2: ARP target 9.0.0.0 is already present [ 257.180791][T14899] CPU: 0 UID: 0 PID: 14899 Comm: syz.5.3082 Tainted: G L syzkaller #0 PREEMPT(full) [ 257.180810][T14899] Tainted: [L]=SOFTLOCKUP [ 257.180814][T14899] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 257.180821][T14899] Call Trace: [ 257.180826][T14899] [ 257.180831][T14899] dump_stack_lvl+0x100/0x190 [ 257.180849][T14899] should_fail_ex.cold+0x5/0xa [ 257.180865][T14899] ? prepare_alloc_pages+0x16d/0x5f0 [ 257.180890][T14899] should_fail_alloc_page+0xeb/0x140 [ 257.180913][T14899] prepare_alloc_pages+0x1f0/0x5f0 [ 257.180943][T14899] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 257.180964][T14899] ? __pfx_stack_trace_save+0x10/0x10 [ 257.180985][T14899] ? stack_depot_save_flags+0x27/0x9d0 [ 257.181010][T14899] ? stack_depot_save_flags+0x27/0x9d0 [ 257.181035][T14899] ? kasan_save_stack+0x3f/0x50 [ 257.181052][T14899] ? kasan_save_stack+0x30/0x50 [ 257.181065][T14899] ? kasan_save_track+0x14/0x30 [ 257.181077][T14899] ? __kasan_kmalloc+0xaa/0xb0 [ 257.181090][T14899] ? __kvmalloc_node_noprof+0x34f/0x970 [ 257.181103][T14899] ? __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 257.181117][T14899] ? mmu_topup_memory_caches+0xbc/0x170 [ 257.181134][T14899] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 257.181146][T14899] ? kvm_vcpu_ioctl+0x730/0x1700 [ 257.181158][T14899] ? do_syscall_64+0x115/0x870 [ 257.181183][T14899] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 257.181198][T14899] ? policy_nodemask+0xed/0x4f0 [ 257.181215][T14899] alloc_pages_mpol+0x1fb/0x540 [ 257.181232][T14899] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 257.181248][T14899] ? __kvmalloc_node_noprof+0x36d/0x970 [ 257.181264][T14899] alloc_pages_noprof+0x1a/0x160 [ 257.181282][T14899] get_free_pages_noprof+0x10/0xb0 [ 257.181296][T14899] __kvm_mmu_topup_memory_cache+0x278/0x5f0 [ 257.181314][T14899] mmu_topup_memory_caches+0xbc/0x170 [ 257.181331][T14899] kvm_mmu_load+0xe2/0x2570 [ 257.181347][T14899] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 257.181364][T14899] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 257.181377][T14899] ? __pfx_kvm_mmu_load+0x10/0x10 [ 257.181392][T14899] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 257.181406][T14899] ? kvm_check_and_inject_events+0x873/0x12a0 [ 257.181423][T14899] ? record_steal_time+0x3a0/0xbb0 [ 257.181436][T14899] vcpu_run+0x3aaa/0x5de0 [ 257.181458][T14899] ? __pfx_vcpu_run+0x10/0x10 [ 257.181480][T14899] ? rcu_is_watching+0x12/0xc0 [ 257.181499][T14899] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 257.181516][T14899] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 257.181537][T14899] kvm_vcpu_ioctl+0x730/0x1700 [ 257.181551][T14899] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 257.181565][T14899] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 257.181579][T14899] ? do_vfs_ioctl+0x226/0x13e0 [ 257.181596][T14899] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 257.181613][T14899] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 257.181636][T14899] ? __fget_files+0x215/0x3d0 [ 257.181647][T14899] ? hook_file_ioctl_common+0x140/0x440 [ 257.181664][T14899] ? selinux_file_ioctl+0x13b/0x290 [ 257.181681][T14899] ? selinux_file_ioctl+0xb6/0x290 [ 257.181700][T14899] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 257.181713][T14899] __x64_sys_ioctl+0x18e/0x210 [ 257.181731][T14899] do_syscall_64+0x115/0x870 [ 257.181743][T14899] ? clear_bhb_loop+0x40/0x90 [ 257.181757][T14899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.181769][T14899] RIP: 0033:0x7f6eabb9de99 [ 257.181780][T14899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.181791][T14899] RSP: 002b:00007f6eac9ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 257.181802][T14899] RAX: ffffffffffffffda RBX: 00007f6eabe25fa0 RCX: 00007f6eabb9de99 [ 257.181810][T14899] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000e [ 257.181816][T14899] RBP: 00007f6eac9ff090 R08: 0000000000000000 R09: 0000000000000000 [ 257.181823][T14899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 257.181829][T14899] R13: 00007f6eabe26038 R14: 00007f6eabe25fa0 R15: 00007ffff02a2a48 [ 257.181844][T14899] [ 257.340210][T14903] bond2: option arp_ip_target: invalid value (9) [ 257.349586][T14903] bond2 (unregistering): Released all slaves [ 257.649514][T14946] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.3100'. [ 257.712759][T14956] trusted_key: encrypted_key: keyword 'u' not recognized [ 257.743707][T14959] vxfs: WRONG superblock magic 00000000 at 1 [ 257.745919][T14959] vxfs: WRONG superblock magic 00000000 at 8 [ 257.749584][T14946] ================================================================== [ 257.751173][T14959] vxfs: can't find superblock. [ 257.752116][T14946] BUG: KASAN: slab-use-after-free in __release_resource+0x276/0x2c0 [ 257.752140][T14946] Read of size 8 at addr ffff888055bb5438 by task syz.2.3100/14946 [ 257.752150][T14946] [ 257.752160][T14946] CPU: 2 UID: 0 PID: 14946 Comm: syz.2.3100 Tainted: G L syzkaller #0 PREEMPT(full) [ 257.752177][T14946] Tainted: [L]=SOFTLOCKUP [ 257.752182][T14946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 257.752189][T14946] Call Trace: [ 257.752194][T14946] [ 257.752199][T14946] dump_stack_lvl+0x100/0x190 [ 257.752214][T14946] print_report+0x13d/0x4b0 [ 257.752231][T14946] ? __virt_addr_valid+0x239/0x430 [ 257.752247][T14946] ? __release_resource+0x276/0x2c0 [ 257.752264][T14946] kasan_report+0xdf/0x1c0 [ 257.752280][T14946] ? __release_resource+0x276/0x2c0 [ 257.752298][T14946] __release_resource+0x276/0x2c0 [ 257.752314][T14946] release_resource+0x26/0x40 [ 257.752329][T14946] pci_remove_bus_device+0x2d3/0x3b0 [ 257.752344][T14946] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 257.752358][T14946] remove_store+0x123/0x140 [ 257.752372][T14946] ? __pfx_remove_store+0x10/0x10 [ 257.752386][T14946] ? find_held_lock+0x2b/0x80 [ 257.752409][T14946] ? sysfs_file_kobj+0xe4/0x290 [ 257.752424][T14946] ? sysfs_file_kobj+0xe4/0x290 [ 257.752440][T14946] ? __pfx_remove_store+0x10/0x10 [ 257.752455][T14946] dev_attr_store+0x58/0x80 [ 257.752470][T14946] ? __pfx_dev_attr_store+0x10/0x10 [ 257.752486][T14946] sysfs_kf_write+0xf2/0x150 [ 257.752504][T14946] kernfs_fop_write_iter+0x3e0/0x5f0 [ 257.752519][T14946] ? __pfx_sysfs_kf_write+0x10/0x10 [ 257.752536][T14946] vfs_write+0x6ac/0x1050 [ 257.752553][T14946] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 257.752569][T14946] ? __pfx_vfs_write+0x10/0x10 [ 257.752589][T14946] ksys_write+0x12a/0x250 [ 257.752726][T14946] ? __pfx_ksys_write+0x10/0x10 [ 257.752752][T14946] do_syscall_64+0x115/0x870 [ 257.752769][T14946] ? clear_bhb_loop+0x40/0x90 [ 257.752782][T14946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.752794][T14946] RIP: 0033:0x7f79fab9de99 [ 257.752803][T14946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.752815][T14946] RSP: 002b:00007f79fba8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 257.752827][T14946] RAX: ffffffffffffffda RBX: 00007f79fae25fa0 RCX: 00007f79fab9de99 [ 257.752835][T14946] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000006 [ 257.752842][T14946] RBP: 00007f79fac33eaf R08: 0000000000000000 R09: 0000000000000000 [ 257.752849][T14946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 257.752855][T14946] R13: 00007f79fae26038 R14: 00007f79fae25fa0 R15: 00007ffdb3a696f8 [ 257.752866][T14946] [ 257.752870][T14946] [ 257.860149][T14946] Allocated by task 6898: [ 257.861495][T14946] kasan_save_stack+0x30/0x50 [ 257.863264][T14946] kasan_save_track+0x14/0x30 [ 257.865208][T14946] __kasan_kmalloc+0xaa/0xb0 [ 257.866780][T14946] __kmalloc_node_track_caller_noprof+0x331/0x830 [ 257.869184][T14946] kmemdup_noprof+0x29/0x60 [ 257.870943][T14946] platform_device_add_resources+0x37/0x100 [ 257.872861][T14946] dwc2_pci_probe+0x1d3/0x360 [ 257.874709][T14946] local_pci_probe+0xdd/0x1b0 [ 257.876687][T14946] pci_call_probe+0x176/0x800 [ 257.878646][T14946] pci_device_probe+0x1cd/0x370 [ 257.880685][T14946] really_probe+0x241/0xa60 [ 257.882625][T14946] __driver_probe_device+0x20e/0x450 [ 257.884830][T14946] device_driver_attach+0xd1/0x220 [ 257.886568][T14946] bind_store+0xf4/0x190 [ 257.887957][T14946] drv_attr_store+0x74/0xb0 [ 257.889364][T14946] sysfs_kf_write+0xf2/0x150 [ 257.890798][T14946] kernfs_fop_write_iter+0x3e0/0x5f0 [ 257.892486][T14946] vfs_write+0x6ac/0x1050 [ 257.893842][T14946] ksys_write+0x12a/0x250 [ 257.895359][T14946] do_syscall_64+0x115/0x870 [ 257.897110][T14946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.899627][T14946] [ 257.900645][T14946] Freed by task 14946: [ 257.902326][T14946] kasan_save_stack+0x30/0x50 [ 257.904232][T14946] kasan_save_track+0x14/0x30 [ 257.906072][T14946] kasan_save_free_info+0x3b/0x70 [ 257.908141][T14946] __kasan_slab_free+0x5f/0x80 [ 257.910063][T14946] kfree+0x22b/0x6c0 [ 257.911668][T14946] platform_device_release+0x8a/0xb0 [ 257.913794][T14946] device_release+0xd2/0x270 [ 257.915678][T14946] kobject_put+0x1f7/0x640 [ 257.917493][T14946] put_device+0x1f/0x30 [ 257.919179][T14946] platform_device_unregister+0x45/0x50 [ 257.921406][T14946] dwc2_pci_remove+0x55/0xd0 [ 257.923341][T14946] pci_device_remove+0xb2/0x1d0 [ 257.925378][T14946] device_remove+0xcb/0x180 [ 257.927229][T14946] device_release_driver_internal+0x44e/0x620 [ 257.929730][T14946] pci_stop_bus_device+0x120/0x160 [ 257.931845][T14946] pci_stop_and_remove_bus_device+0x58/0xa0 [ 257.934298][T14946] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 257.936941][T14946] remove_store+0x123/0x140 [ 257.938816][T14946] dev_attr_store+0x58/0x80 [ 257.940724][T14946] sysfs_kf_write+0xf2/0x150 [ 257.942655][T14946] kernfs_fop_write_iter+0x3e0/0x5f0 [ 257.944848][T14946] vfs_write+0x6ac/0x1050 [ 257.946674][T14946] ksys_write+0x12a/0x250 [ 257.948507][T14946] do_syscall_64+0x115/0x870 [ 257.950423][T14946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.952897][T14946] [ 257.953826][T14946] The buggy address belongs to the object at ffff888055bb5400 [ 257.953826][T14946] which belongs to the cache kmalloc-128 of size 128 [ 257.959431][T14946] The buggy address is located 56 bytes inside of [ 257.959431][T14946] freed 128-byte region [ffff888055bb5400, ffff888055bb5480) [ 257.964794][T14946] [ 257.965767][T14946] The buggy address belongs to the physical page: [ 257.967996][T14946] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x55bb5 [ 257.971303][T14946] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 257.973978][T14946] page_type: f5(slab) [ 257.975585][T14946] raw: 00fff00000000000 ffff88801bc42a00 dead000000000100 dead000000000122 [ 257.979038][T14946] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 257.982574][T14946] page dumped because: kasan: bad access detected [ 257.985194][T14946] page_owner tracks the page as allocated [ 257.987541][T14946] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5738, tgid 5738 (syz-executor), ts 49434180658, free_ts 48969386343 [ 257.995855][T14946] post_alloc_hook+0xfd/0x120 [ 257.997839][T14946] get_page_from_freelist+0xf48/0x3530 [ 258.000120][T14946] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 258.002602][T14946] new_slab+0xa2/0x640 [ 258.004328][T14946] refill_objects+0xe3/0x410 [ 258.006269][T14946] __pcs_replace_empty_main+0x376/0x680 [ 258.008584][T14946] __kmalloc_cache_noprof+0x479/0x6c0 [ 258.010826][T14946] __hw_addr_create+0x57/0x220 [ 258.012839][T14946] __hw_addr_add_ex+0x32b/0x650 [ 258.014865][T14946] dev_mc_add+0xb6/0x110 [ 258.016629][T14946] igmp6_group_added+0x3e4/0x4c0 [ 258.018708][T14946] __ipv6_dev_mc_inc+0x701/0xbd0 [ 258.020784][T14946] ipv6_add_dev+0xb87/0x1520 [ 258.022621][T14946] addrconf_notify+0x5db/0x1ba0 [ 258.024654][T14946] notifier_call_chain+0x99/0x3f0 [ 258.026740][T14946] call_netdevice_notifiers_info+0xbe/0x110 [ 258.029162][T14946] page last free pid 1045 tgid 1045 stack trace: [ 258.031730][T14946] __free_frozen_pages+0x79f/0x1090 [ 258.033924][T14946] tlb_remove_table_rcu+0x2cf/0x380 [ 258.036080][T14946] rcu_core+0x5a2/0x10d0 [ 258.037842][T14946] handle_softirqs+0x1ea/0x9b0 [ 258.039823][T14946] do_softirq+0xac/0xe0 [ 258.041558][T14946] __local_bh_enable_ip+0xf8/0x120 [ 258.043683][T14946] __alloc_skb+0x5db/0x710 [ 258.045540][T14946] mld_newpack.isra.0+0x18e/0xa20 [ 258.047647][T14946] add_grhead+0x299/0x340 [ 258.049439][T14946] add_grec+0x1389/0x1930 [ 258.051181][T14946] mld_ifc_work+0x3c5/0xc10 [ 258.053046][T14946] process_one_work+0xa23/0x1940 [ 258.055117][T14946] worker_thread+0x5ef/0xe50 [ 258.057063][T14946] kthread+0x370/0x450 [ 258.058779][T14946] ret_from_fork+0x72b/0xd50 [ 258.060713][T14946] ret_from_fork_asm+0x1a/0x30 [ 258.062718][T14946] [ 258.063742][T14946] Memory state around the buggy address: [ 258.066022][T14946] ffff888055bb5300: 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc [ 258.069146][T14946] ffff888055bb5380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 258.072232][T14946] >ffff888055bb5400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 258.075307][T14946] ^ [ 258.077613][T14946] ffff888055bb5480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 258.080797][T14946] ffff888055bb5500: 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc [ 258.084107][T14946] ================================================================== [ 258.089158][T14946] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 258.092219][T14946] CPU: 2 UID: 0 PID: 14946 Comm: syz.2.3100 Tainted: G L syzkaller #0 PREEMPT(full) [ 258.096644][T14946] Tainted: [L]=SOFTLOCKUP [ 258.098487][T14946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 258.101771][T14946] Call Trace: [ 258.102832][T14946] [ 258.103768][T14946] dump_stack_lvl+0x100/0x190 [ 258.105224][T14946] vpanic+0x552/0x970 [ 258.106462][T14946] ? __pfx_vpanic+0x10/0x10 [ 258.107880][T14946] ? mark_held_locks+0x40/0x70 [ 258.109445][T14946] ? irqentry_exit+0x24d/0xa00 [ 258.111450][T14946] ? __release_resource+0x276/0x2c0 [ 258.113217][T14946] panic+0xd1/0xe0 [ 258.114407][T14946] ? __pfx_panic+0x10/0x10 [ 258.115791][T14946] check_panic_on_warn.cold+0x19/0x34 [ 258.117433][T14946] end_report.part.0+0x3a/0x90 [ 258.118913][T14946] kasan_report.cold+0xe/0x18 [ 258.120836][T14946] ? __release_resource+0x276/0x2c0 [ 258.122991][T14946] __release_resource+0x276/0x2c0 [ 258.125073][T14946] release_resource+0x26/0x40 [ 258.126734][T14946] pci_remove_bus_device+0x2d3/0x3b0 [ 258.128629][T14946] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 258.130657][T14946] remove_store+0x123/0x140 [ 258.132199][T14946] ? __pfx_remove_store+0x10/0x10 [ 258.133818][T14946] ? find_held_lock+0x2b/0x80 [ 258.135339][T14946] ? sysfs_file_kobj+0xe4/0x290 [ 258.136904][T14946] ? sysfs_file_kobj+0xe4/0x290 [ 258.138489][T14946] ? __pfx_remove_store+0x10/0x10 [ 258.140080][T14946] dev_attr_store+0x58/0x80 [ 258.141717][T14946] ? __pfx_dev_attr_store+0x10/0x10 [ 258.143427][T14946] sysfs_kf_write+0xf2/0x150 [ 258.144885][T14946] kernfs_fop_write_iter+0x3e0/0x5f0 [ 258.146509][T14946] ? __pfx_sysfs_kf_write+0x10/0x10 [ 258.148111][T14946] vfs_write+0x6ac/0x1050 [ 258.149465][T14946] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 258.151324][T14946] ? __pfx_vfs_write+0x10/0x10 [ 258.153101][T14946] ksys_write+0x12a/0x250 [ 258.154891][T14946] ? __pfx_ksys_write+0x10/0x10 [ 258.156522][T14946] do_syscall_64+0x115/0x870 [ 258.157948][T14946] ? clear_bhb_loop+0x40/0x90 [ 258.159689][T14946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.162032][T14946] RIP: 0033:0x7f79fab9de99 [ 258.163825][T14946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.169804][T14946] RSP: 002b:00007f79fba8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 258.172508][T14946] RAX: ffffffffffffffda RBX: 00007f79fae25fa0 RCX: 00007f79fab9de99 [ 258.175324][T14946] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000006 [ 258.177714][T14946] RBP: 00007f79fac33eaf R08: 0000000000000000 R09: 0000000000000000 [ 258.180071][T14946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 258.182377][T14946] R13: 00007f79fae26038 R14: 00007f79fae25fa0 R15: 00007ffdb3a696f8 [ 258.184806][T14946] [ 258.186561][T14946] Kernel Offset: disabled [ 258.188224][T14946] Rebooting in 86400 seconds.. VM DIAGNOSIS: 00:00:52 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000002 RCX=ffffffff81fdc702 RDX=ffff88803d318000 RSI=ffffffff81fdc6dc RDI=ffff88803d318000 RBP=ffff88806a641240 RSP=ffffc90007bcfb18 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000003 R13=ffffed100d4c8249 R14=0000000000000001 R15=ffff88806a43c880 RIP=ffffffff81fdc6de RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f323ba8f6c0 ffffffff 00c00000 GS =0000 ffff8880d5ddc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b34b63fff CR3=0000000025211000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000f802fefc Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7372656c6c6f7274 6e6f632e70756f72 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdb3a69be6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdb3a69be6 00007ffdb3a69bec ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f79fac34492 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f79fac344d2 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f79fac34636 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f79fac344c4 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000004000000 RBX=ffff888100aa19e0 RCX=000000000000001a RDX=ffff88803560a540 RSI=ffffc9000013d134 RDI=ffff88803560a540 RBP=ffff88802a2ce038 RSP=ffffc9000389f080 R8 =0000000000000005 R9 =000000000000001f R10=000000000000001a R11=0000000000000000 R12=ffffc9000013d100 R13=ffff888100aa1a3c R14=ffff888100aa19e8 R15=000000000000001a RIP=ffffffff86b2677f RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007fbd3fb8f300 ffffffff 00c01300 GS =0000 ffff8880d5edc000 ffffffff 00c01300 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000556a4d2acf40 CR3=000000003c034000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000001800 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000feffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000001000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=df7e321fdcdd78ff 9513cc620b50535a df7e321fdcdd78ff 9513cc620b50535a df7e321fdcdd78ff 9513cc620b50535a df7e321fdcdd78ff 9513cc620b50535a ZMM18=568fb894782927a0 78a64464ef408d66 568fb894782927a0 78a64464ef408d66 568fb894782927a0 78a64464ef408d66 568fb894782927a0 78a64464ef408d66 ZMM19=e70e000000000000 0000000000000004 e70e000000000000 0000000000000003 e70e000000000000 0000000000000002 e70e000000000000 0000000000000001 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 77ce000000000000 00000000000001ff ffffffffffffffe7 0810b80301080010 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b00301aa080010a0 0304080010980310 8008001090030008 0010880300080020 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8610002010000602 73fa010000000806 020103ee02080004 1000041000060074 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0003c80328048400 03c4030060908082 0003c20300208080 820003c2030840a0 ZMM25=78a6446478a64464 78a6446478a64464 78a6446478a64464 78a6446478a64464 78a6446478a64464 78a6446478a64464 78a6446478a64464 78a6446478a64464 ZMM26=782927a0782927a0 782927a0782927a0 782927a0782927a0 782927a0782927a0 782927a0782927a0 782927a0782927a0 782927a0782927a0 782927a0782927a0 ZMM27=568fb894568fb894 568fb894568fb894 568fb894568fb894 568fb894568fb894 568fb894568fb894 568fb894568fb894 568fb894568fb894 568fb894568fb894 ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=e60e0000e60e0000 e60e0000e60e0000 e60e0000e60e0000 e60e0000e60e0000 e60e0000e60e0000 e60e0000e60e0000 e60e0000e60e0000 e60e0000e60e0000 info registers vcpu 2 CPU#2 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a38525 RDI=ffffffff9ba07b40 RBP=ffffffff9ba07b00 RSP=ffffc90007abf548 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3530383838666666 R12=0000000000000000 R13=0000000000000020 R14=ffffffff9b6fa1e1 R15=ffffffff85a384c0 RIP=ffffffff85a3854f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f79fba8a6c0 ffffffff 00c00000 GS =0000 ffff8880d5fdc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f323b95da08 CR3=000000002b341000 CR4=00352ef0 DR0=0000000000000004 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 347a79732f74656e 2f70756f7267637a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdfc9dbf06 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdfc9dbf06 00007ffdfc9dbf0c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f323ac34492 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f323ac344d2 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f323ac34636 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f323ac344c4 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000019ed55 RBX=ffff88801eef2540 RCX=ffffffff8bbb22d5 RDX=0000000000000000 RSI=ffffffff8e1a5b18 RDI=ffffffff8c401580 RBP=ffffed1003dde4a8 RSP=ffffc90000197e00 R8 =0000000000000001 R9 =ffffed100d4e678d R10=ffff88806a733c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000032fc4 R15=dffffc0000000000 RIP=ffffffff8bbb089f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d60dc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c33c169 CR3=0000000036921000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 307a79732f74656e 2f70756f7267637a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcc6ce0416 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcc6ce0416 00007ffcc6ce041c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3f5dc34492 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3f5dc344d2 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3f5dc34636 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3f5dc344c4 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000