last executing test programs: 31.685279845s ago: executing program 0 (id=144): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x2, 0x0, 0x5, 0x40002, 0xbc15, 0x6, 0xcb, 0x44e1, 0x400003}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x304}, '\x00\x00\x00\x00\x00\x00\x00@', "de51e43bead03c41635dd3145f1f6100", "87d560d1", "24fdb55a99003858"}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r2, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) recvfrom(r1, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000000c0)=0xa7, 0x4) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_settings={0x8, 0x4, @te1=0x0}}) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) ioctl$sock_netdev_private(r3, 0x8947, &(0x7f0000000000)) ioctl$VIDIOC_G_PRIORITY(0xffffffffffffffff, 0x80045643, 0x1) 31.347771481s ago: executing program 0 (id=152): r0 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee00}}, './file0\x00'}) mount$9p_unix(&(0x7f0000000040)='./my_sys\x00', &(0x7f0000000140)='./my_sys\x00', &(0x7f0000000380), 0x2010403, &(0x7f00000002c0)={'trans=unix,', {[{@access_client}, {@version_L}, {@afid={'afid', 0x3d, 0x6}}, {@aname={'aname', 0x3d, '/sys/k\xdc\xcd\x88$l/debug/binder/transact\x86on_log\x00'}}, {@version_u}, {@version_L}]}}) mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_sys/bus/pci/rescan\x00', 0x1, 0x0) write(r1, &(0x7f0000000a00)='1', 0x1) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000007fc0)={0x2020}, 0x2020) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) lseek(r0, 0x2004, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') (async) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee00}}, './file0\x00'}) (async) mount$9p_unix(&(0x7f0000000040)='./my_sys\x00', &(0x7f0000000140)='./my_sys\x00', &(0x7f0000000380), 0x2010403, &(0x7f00000002c0)={'trans=unix,', {[{@access_client}, {@version_L}, {@afid={'afid', 0x3d, 0x6}}, {@aname={'aname', 0x3d, '/sys/k\xdc\xcd\x88$l/debug/binder/transact\x86on_log\x00'}}, {@version_u}, {@version_L}]}}) (async) mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_sys/bus/pci/rescan\x00', 0x1, 0x0) (async) write(r1, &(0x7f0000000a00)='1', 0x1) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) read$FUSE(r5, &(0x7f0000007fc0)={0x2020}, 0x2020) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) lseek(r0, 0x2004, 0x0) (async) 31.267132402s ago: executing program 0 (id=156): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1c1) pipe2$9p(&(0x7f0000000000), 0x0) (async) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000140)) (async) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) futimesat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={{0x77359400}, {r2, r3/1000+60000}}) dup(r1) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0), 0x8, &(0x7f0000000080)=ANY=[@ANYRES64=r1, @ANYRES8=r0, @ANYBLOB='9\x00\x00\x00\x00\x00\x00', @ANYRESDEC=r3, @ANYRES64]) 31.19567051s ago: executing program 0 (id=159): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) ioctl$VIDIOC_S_TUNER(r1, 0x4054561e, &(0x7f00000001c0)={0x0, "4f6ca9108dfb5d11d7da2926be514a8aacb2e92c5d96b3d7d64216efba835337", 0x4, 0x1000, 0x8, 0x626, 0x4, 0x3, 0x1, 0x7}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000200)=0x1b) r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0xb3d) ioctl$TCXONC(r3, 0x540a, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x21, 0x0, 0x3, 0x0, 0x144}, 0x48) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) ioctl$KVM_CHECK_EXTENSION_VM(r5, 0xae03, 0x81) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="044505dfc900c905"], 0x8) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="03c800b3c446636b32da52506f78fa265e10e13e92347e88b167723ff8f83a69d3287a79d819b2374e0a000800003c94079b947ba300cc15cf578eae08526b6ce84e6171707d5d9b3340f58c845fd0cb472e7c2a4771db66cf7feda5e4e870d6f7b3a1ad04198b4a95df730bbc880eafc15897825b9a641f7c5a4dde45ef51d13578566b5327c3bd33b231cfbcea57c3f3e3de543ac1aaa66cac0404a559d3d3a0b5796111ca5ee9ca37485dc07dd56858833b91435b18"], 0xb7) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)=0x10) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000001680)) 31.075048685s ago: executing program 0 (id=161): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000ac0), 0xffffffffffffffff) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800a4002100df4d00000000000000000200000000000000080000000c000c400000000000000005"], 0x28}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'vlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000780)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100d2f2d16eb32902ce2f0000000c00018008000100", @ANYRES32=r11], 0x20}}, 0x0) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r12 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, 0x0) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) ioctl$AUTOFS_IOC_PROTOSUBVER(r12, 0x40049366, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="440000004ec6"}) 30.894204164s ago: executing program 0 (id=165): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchmodat(r2, &(0x7f00000000c0)='./file1\x00', 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x20, 0x0) open$dir(&(0x7f0000000040)='./file0/file1\x00', 0x20482, 0x20) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)=@ipv4_newaddr={0x18, 0x14, 0x8, 0x70bd28, 0x25dfdbfd, {0x2, 0x0, 0x80, 0xfe, r3}}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d0001000000000004086aa42d"], 0x30}}, 0x0) socket(0xa, 0x800, 0xf3e) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000010025bff7bd7000fddbdf250000", @ANYRES32=r3, @ANYBLOB="38030600400202002c0012801100010056726964672c0b79ba617665000000001400058008002a"], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x40040c4) 15.833996059s ago: executing program 32 (id=165): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchmodat(r2, &(0x7f00000000c0)='./file1\x00', 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x20, 0x0) open$dir(&(0x7f0000000040)='./file0/file1\x00', 0x20482, 0x20) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)=@ipv4_newaddr={0x18, 0x14, 0x8, 0x70bd28, 0x25dfdbfd, {0x2, 0x0, 0x80, 0xfe, r3}}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d0001000000000004086aa42d"], 0x30}}, 0x0) socket(0xa, 0x800, 0xf3e) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000010025bff7bd7000fddbdf250000", @ANYRES32=r3, @ANYBLOB="38030600400202002c0012801100010056726964672c0b79ba617665000000001400058008002a"], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x40040c4) 5.729380419s ago: executing program 4 (id=483): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x12, r0, 0x100000000) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) (async) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000400)) (async) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) (async) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1}) (async) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000100)={0x1, 0x0, [{0x0, 0x6e, &(0x7f0000001540)=""/110}]}) (async) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x6}, 0x28) (async) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x4e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) (async) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/51, 0x0, &(0x7f0000000500)=""/4092}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000440)=0x8101) (async) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000340)={0x42}) 5.679282709s ago: executing program 4 (id=485): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x20) mount$9p_virtio(&(0x7f00000001c0), &(0x7f00000002c0)='./file0\x00', &(0x7f00000004c0), 0x8017, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=virtio,access=any']) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x448040, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x10000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) 5.610999936s ago: executing program 4 (id=486): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_pidfd_open(0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff}, 0x80) r2 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0xdd) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0xcb) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "dce02de9d7bd466b", "72e64b3892060025848c9f40363cf916", "ff0300", "e2b768b4bb9e0d9b"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r0, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000100)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/failslab/times\x00', 0x22480, 0x28) read$FUSE(r4, 0x0, 0x0) r5 = fanotify_init(0x252, 0x80000) fanotify_mark(r5, 0x2, 0x4800003e, r4, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000008c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r7, 0x80, 0xbb, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x4040000) mount$afs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x10005, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r7, @ANYBLOB="e4a570"]) r8 = open$dir(&(0x7f0000000280)='./debug\x00', 0x204300, 0x45) fanotify_mark(r5, 0x1, 0x0, r8, &(0x7f0000000340)='./debug/failslab/times\x00') 5.092154601s ago: executing program 4 (id=501): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x100) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000340)={0x8, 0x120, 0xfa00, {0x0, {0x6, 0x8, "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", 0x1, 0xb, 0x9, 0x9, 0x8, 0x53, 0x1}}}, 0x128) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 5.053807481s ago: executing program 4 (id=504): mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xd6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xfffffffffffffdf9, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) write$P9_RVERSION(r2, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0x7ffc, 0xe2fa5ad63e40a2e, '9P2000.L'}, 0x41) 4.750813932s ago: executing program 4 (id=513): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz1\x00', 0x219}) ioctl$UI_DEV_CREATE(r1, 0x5501) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='io\x00') lseek(r2, 0x1000000, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000080)={0x1d, r3}, 0x10) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000140)=0x7, 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/49, 0x210000, 0x800, 0x0, 0x2}, 0x1c) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r5 = socket(0x10, 0x3, 0x0) recvfrom$inet_nvme(r5, &(0x7f0000000200)=""/102, 0x66, 0x10002, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRESHEX=r5], 0x50) r6 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x890b, &(0x7f0000000000)) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r7, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d4", 0x20) r8 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r8, 0xc0485619, &(0x7f0000000180)={0x5, 0x100, "42b025eed78da350246bbf16e8d06bb9c8ffbf327d136c77", {0xffff, 0x32}, 0x5}) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x890c, &(0x7f0000000000)) write(r5, &(0x7f0000000000)="2400000011005f046389e1f10009041f81fe00000e000000000000000800b9520f000100", 0x24) 4.655808683s ago: executing program 33 (id=513): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz1\x00', 0x219}) ioctl$UI_DEV_CREATE(r1, 0x5501) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='io\x00') lseek(r2, 0x1000000, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000080)={0x1d, r3}, 0x10) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000140)=0x7, 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/49, 0x210000, 0x800, 0x0, 0x2}, 0x1c) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r5 = socket(0x10, 0x3, 0x0) recvfrom$inet_nvme(r5, &(0x7f0000000200)=""/102, 0x66, 0x10002, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRESHEX=r5], 0x50) r6 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x890b, &(0x7f0000000000)) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r7, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d4", 0x20) r8 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r8, 0xc0485619, &(0x7f0000000180)={0x5, 0x100, "42b025eed78da350246bbf16e8d06bb9c8ffbf327d136c77", {0xffff, 0x32}, 0x5}) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x890c, &(0x7f0000000000)) write(r5, &(0x7f0000000000)="2400000011005f046389e1f10009041f81fe00000e000000000000000800b9520f000100", 0x24) 2.785367149s ago: executing program 2 (id=520): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket(0x10, 0x803, 0x0) accept$packet(r3, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000002580), 0x200, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000026c0)={0x0, &(0x7f0000002600)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000200)={0x0, 0xffffffffffffff1e, r5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xa7e9, 0x0, 0x7, 0x4, 0x0, 0x10000, 0x406, 0x0, "427f4d0561864078b7f952fc7ebbfea1deee063e520cc38c6a002000"}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, 0x0, 0x0, 0x1008001, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x2c, r7, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x48050) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x30, r2, 0x1, 0x70bd2d, 0x25dfdbef, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'hsr0\x00'}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xab}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008051}, 0x20000841) 2.686468228s ago: executing program 2 (id=521): mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xd6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x300, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) write$P9_RVERSION(r2, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0x7ffc, 0xe2fa5ad63e40a2e, '9P2000.L'}, 0x41) 2.605816798s ago: executing program 2 (id=522): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x4000081) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="cc0000002100010027bd7000fefffffffc020000000000000000000000000000fc020000000000000000000000000001dffc0000000000000a00e00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000050001100fe800000000000000000000000000011ac1414aa000000000000000000000000ac1414aa000000000000000000000000fe8000000000000000000000000000bb3c000000000000000a000a002c0013"], 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000040)=0x8, 0x19) bind$inet(r1, &(0x7f0000003900)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00005f5a000000000c003f8008000100", @ANYRES32, @ANYBLOB="08001b"], 0x34}}, 0x0) sendto$inet(r1, &(0x7f0000000100)="f4188a9876a9431dee", 0x9, 0x4040004, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x3fffc, 0x180, 0x2, 0x0, 0x2000000000f1, 0x0, 0x3, 0x5, 0x4005, 0x80000000, 0x0, 0x45, 0xfffffffffffffffd, 0x8000000000bdb], 0xd5dd0000, 0x1c6017}) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x13) r7 = semget$private(0x0, 0x207, 0x200) semop(r7, &(0x7f0000000100)=[{0x3, 0x4, 0x800}, {0x3, 0xf, 0x1800}, {0x4, 0x0, 0x1000}], 0x3) ioctl$TCSETSW2(r6, 0x402c542c, &(0x7f0000000100)={0xfffffff8, 0x8, 0x4, 0x9, 0x5f, "0d418107009188b791e15b1b6f6ff88c6b00", 0x5, 0x140624}) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000040)=0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r9, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f00000000c0)={0x3c, r8, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x50) setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000200)="72303a02b359274cd33db065938f360af8a403afb98cf2c17307cec32413529bdf14f521d41b3aafd718087031eda6a898155603000000000000005eef2964a7e86c0fcf2edc44c1e0d2e693a6beb94294", 0x51, 0x1) r10 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r10, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r10, 0x7a0, &(0x7f0000000240)={@hyper}) 2.316886248s ago: executing program 2 (id=523): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000004c0), 0x80200, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000400)="390000002600034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f0000000200)={0xc, r4}) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r5, 0xffffd000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000000000/0x400000)=nil) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r4}) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r3, 0x3b65, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r7 = fsopen(&(0x7f0000000140)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000040)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) fsmount(r7, 0x0, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newtaction={0xb0, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x9c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0x7}}]}, {0x4}, {0xc}, {0xc}}}, @m_mirred={0x50, 0x2, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x0, 0xffffffffffffffff, 0xfffffff4}, 0x3, r6}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xb0}}, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f0000000600)={0x18, 0x1, 0x0, 0x0, r8, 0x1}) mount$nfs(0x0, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,timeo=0']) 2.195741419s ago: executing program 2 (id=526): setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x4, &(0x7f0000000400)=0x3c, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c000000020603000000000000000000070000000c00078008000640000075000500010006000000050005000200000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574"], 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c000000020603000000000000000000070000000c00078008000640000075000500010006000000050005000200000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574"], 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r1, &(0x7f0000000380)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000340)='./proc/fs/nfsd\x00', &(0x7f0000000380)='nfsd\x00', 0x0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x1, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x2, 0x1}, 0x50) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x1, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x2, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r3, 0x0, 0x0, 0x4}, 0x20) openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/fs/nfsd/threads\x00', 0x1, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/fs/nfsd/threads\x00', 0x1, 0x0) write(r4, &(0x7f0000000900)='*', 0x1) syz_usb_connect(0x2, 0x58, &(0x7f0000000080)=ANY=[@ANYBLOB="120110038e3ac6209406010013780102030109024600020e061003090439d8011adaa8080905081020000709800904e40503b956da020905080000040112fc09050b13200007039a0705d15b89"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) (async) r5 = syz_usb_connect(0x2, 0x58, &(0x7f0000000080)=ANY=[@ANYBLOB="120110038e3ac6209406010013780102030109024600020e061003090439d8011adaa8080905081020000709800904e40503b956da020905080000040112fc09050b13200007039a0705d15b89"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r5, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r5, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB='@\b\b'], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r5, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000000440)=ANY=[@ANYBLOB="201404"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000280)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ecff80", 0x48, 0x11, 0x0, @remote, @mcast2, {[], {0x0, 0x4e22, 0x48, 0x0, @wg=@cookie={0x4, 0x0, "7d91b3ccaf4c63521df8f969a9a3ef8377d86e2c440fb055", "8fc99fa615e832d5f00ce4a5807ebb53fbfc8fbe4761a7cfe44dcf957dbdc946"}}}}}}}, 0x0) (async) syz_emit_ethernet(0x7e, &(0x7f0000000280)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ecff80", 0x48, 0x11, 0x0, @remote, @mcast2, {[], {0x0, 0x4e22, 0x48, 0x0, @wg=@cookie={0x4, 0x0, "7d91b3ccaf4c63521df8f969a9a3ef8377d86e2c440fb055", "8fc99fa615e832d5f00ce4a5807ebb53fbfc8fbe4761a7cfe44dcf957dbdc946"}}}}}}}, 0x0) r6 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x38b1, 0x1c080, 0x4, 0x20002f7}) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000000)={0x14, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x2004c800}, 0x20040000) (async) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000000)={0x14, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x2004c800}, 0x20040000) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140)) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040), 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r7}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r7}, @ldst={0x1, 0x2, 0x4}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r7}, @ldst={0x1, 0x2, 0x4}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) 2.063642355s ago: executing program 2 (id=530): mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xd6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0xf9fd, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) write$P9_RVERSION(r2, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0x7ffc, 0xe2fa5ad63e40a2e, '9P2000.L'}, 0x41) 1.386480917s ago: executing program 3 (id=547): mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='binfmt_misc\x00', 0x100000, &(0x7f00000000c0)='.!/\x00') r0 = syz_io_uring_complete(0x0, 0x0) r1 = accept$inet(r0, &(0x7f0000000100), &(0x7f0000000140)=0x10) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000180)) r2 = socket$unix(0x1, 0x2, 0x0) listns(&(0x7f00000001c0)={0x20, 0x0, 0x94, 0x10000000, 0x0, 0x9}, &(0x7f0000000200)=[0x0], 0x1, 0x0) r3 = syz_clone(0x104080, &(0x7f0000000240)="08057b3cba473c02fb4117ddeece82a7ddbd66ab492f18c302a41f4217c010e6811ca517ab82a52516ed037f15a363b24cafbee252a0372c094b1f4fe8da0832f8df99394c555061443e52898d7609b32e0fa2571276dafac2a9696997475b98e935fe921c6213fa2bca39b0ce0352b7df8afebd64b2f6d5424463e7bde8496909a0156ac41372f3cdd3138e987094649e62669c12e660ff60a706675140097f38a8ccf3", 0xa4, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)="978f433545ad4a4811f0ccfd01a26d26491a808a80088e7c43684836f4519a86feec3dd829068d4b7e955dd3650476d7dc2ccae3ca973b1971d023135b306446757156d820127cb6bfedd365153e222c6b641a6bf3f9e355053b322c8f75a74eedc154c58c8b08fec3f5dfaa4cd2addd13b06828ec59d60c1ad46354c8a3f5ee02f235c99669de0765a92c4c5bc46900e2ec9b6f5440ebda7cc3613dfe9d50315c79405c") r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x15, 0x6d93, 0x3, 0x80000001, 0x1c40, r0, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2}, 0x50) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x34, 0x3, 0x7, 0x400, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x7}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8c044}, 0x48001) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000940)={&(0x7f00000005c0)="71ad5d962920e0e81aac165840f39d3887bfb3269c7027706eb92ed2d68c6e3177b73c4dbb1751bc5648267366e26ab1655cf449ace45772fa8d49986d7148bb7a16ca340b4807a95505b52e3eaca20c926b43cc0b6072c8fdeb2cc4ed0d6a548313c49e1022815f01abd9ab6d53c357d56f002af2b6b18bef2e118e35fae08c927bd0fc73d4bbe32ff0ba2202e36bedc712a8ad4dfbab6e5c4204aa6c9c2140f67423f80d85c2fcf223b82c30142088f01386025a80f9209c5adfed37edcd92c29b93", &(0x7f00000006c0)=""/157, &(0x7f0000000780)="e64a5e58fcdf36c0c99d9820c571ec3558fca13ebf90fda7fc55771196d0c6c924dbb725bd2cf04cd4ea882c2cd2f72fb780e1286e2abe10ab479b4805a8aa08792b8c3ca0c5ef3f286c4b698e361e0a46177a73ace6961bdcc4ee58c9009d17bca7ef269b19f939757b312c6564246a335cd6db8fcec4887277c9ad00acfa68e9903cce3708b29a817c746158a3cb1355e7a1c9ae00e3f86ce8062d495f10192f48a50449e1198b559121a79177ce455d33cd469c11428eb8709b524ced3d3068596c16e18e763a21706d807704aaab5ab0", &(0x7f0000000880)="c28a81d53ab67fdecd8d4f01e02a3bb8ed3c25fa4bfa241c2529974b077f787e36617979ae2b3e0b756587c126428668e75f2dbf7c4b5ac8d2746fbb385fc6f40d11556f593591984d71ad7ddddcda354cfb818aa016269b9527ace2c656671949a114e992599beccacc3016861c6eb0b18ca944b0f72f6a8be95ed88ef226c516467be67c34bbb35768d292044c8a68c565a82aa524cacdf89f7ae2a58bf2105aa3662c44d49d1f1e44c81f", 0xfff, r4, 0x4}, 0x38) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000980), &(0x7f00000009c0)=0x4) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000a00)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000a40)={0x6c413fa6, 0x9, 0x1, 'queue1\x00'}) r5 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_misc(r5, &(0x7f0000000b00)="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", 0xfe) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000002f00)={{{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f0000003000)=0xe8) getresgid(&(0x7f0000003040)=0x0, &(0x7f0000003080), &(0x7f00000030c0)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000003180)={{0x1, 0x1, 0x18, r5, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000003300)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee01}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000003340)={{0x1, 0x1, 0x18, r1, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) lstat(&(0x7f0000003440)='./file0\x00', &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r13 = geteuid() read$FUSE(r0, &(0x7f0000003600)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000000c00)="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", 0x2000, &(0x7f0000005780)={&(0x7f0000002c00)={0x50, 0x0, 0x9, {0x7, 0x2d, 0x8, 0x16000228, 0x91b8, 0xc9, 0x7, 0x9, 0x0, 0x0, 0x8, 0x8}}, &(0x7f0000002c80)={0x18, 0x0, 0x6, {0x68}}, &(0x7f0000002cc0)={0x18, 0x0, 0x0, {0x3ff}}, &(0x7f0000002d00)={0x18, 0x0, 0xffffffffffffff2c, {0x4}}, &(0x7f0000002d40)={0x18, 0x0, 0x2}, &(0x7f0000002d80)={0x28, 0x0, 0xfeb, {{0x8, 0xf, 0x2, r3}}}, &(0x7f0000002dc0)={0x60, 0x0, 0x8, {{0xf, 0x7, 0x0, 0x17b, 0x8, 0x8, 0x7, 0x4}}}, &(0x7f0000002e40)={0x18, 0x0, 0x2, {0x6}}, &(0x7f0000002e80)={0x14, 0xfffffffffffffff5, 0xffffffffffffffff, {'.!/\x00'}}, &(0x7f0000002ec0)={0x20, 0x0, 0x0, {0x0, 0x12}}, &(0x7f0000003100)={0x78, 0x0, 0x3, {0x6, 0x3, 0x0, {0x4, 0x5, 0xff, 0x6, 0xb, 0x5, 0x7, 0xf, 0xa, 0x4000, 0x3, r6, r7, 0x8, 0xffff}}}, &(0x7f00000031c0)={0x90, 0x0, 0xfffffffffffffff6, {0x2, 0x2, 0x1, 0x0, 0x1ff, 0x7, {0x6, 0x9, 0x2, 0x4, 0x440, 0xb, 0x10000, 0x0, 0x0, 0x8000, 0x619, 0xee00, r8, 0xffff307e, 0x3}}}, &(0x7f0000003280)={0x50, 0xfffffffffffffffe, 0x2, [{0x2, 0x3, 0x4, 0x0, '!!]\\'}, {0x5, 0x5, 0x1, 0x7, '!'}]}, &(0x7f0000003380)={0xb0, 0x0, 0x3, [{{0x5, 0x2, 0x9, 0x1e1, 0xc0, 0xfff, {0x3, 0x0, 0x4a9, 0x2178, 0x8000, 0x101, 0x200, 0x1, 0x2, 0x8000, 0x514f, r9, r11, 0x9, 0x7}}, {0x2, 0x7ff, 0x4, 0x3, '\\:^('}}]}, &(0x7f0000003500)={0xa0, 0x0, 0x7, {{0x6, 0x5, 0x1, 0x7d57, 0x6, 0x1, {0x4, 0x5, 0x2, 0x5, 0x2, 0x80000001, 0x4, 0x81, 0xfffffff7, 0xa000, 0x4fc5e193, 0xee01, r12, 0x4b29, 0x4}}, {0x0, 0x4}}}, &(0x7f00000035c0)={0x20, 0xb, 0x817, {0x7, 0x0, 0x81, 0x8}}, &(0x7f0000005640)={0x130, 0xfffffffffffffffe, 0x8, {0x4, 0x8, 0x0, '\x00', {0x1281, 0x1d66, 0x100000000, 0x5, r13, r14, 0x8000, '\x00', 0xa2, 0x2, 0x5, 0xfffffffffffffff9, {0x1a0a, 0xbc4d}, {0x800, 0x7}, {0xbf, 0x1ff}, {0x8, 0x4}, 0x0, 0x0, 0x1000, 0x2}}}}) ioctl$NILFS_IOCTL_GET_CPSTAT(r4, 0x80186e83, &(0x7f0000005840)) pselect6(0x40, &(0x7f0000005880)={0xfffffffffffffff7, 0x40, 0x8001, 0x5, 0x8, 0x9, 0x167, 0xf}, &(0x7f00000058c0)={0xf0c, 0xffffffff, 0x5, 0x4, 0x2, 0x1, 0x6, 0x2}, &(0x7f0000005900)={0xf73a, 0x4, 0x7, 0xffffffffffffffff, 0x1cc0000000000, 0x88, 0x1}, &(0x7f0000005940), &(0x7f00000059c0)={&(0x7f0000005980)={[0x7ff]}, 0x8}) sched_setscheduler(r3, 0x2, &(0x7f0000005a00)=0x7) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r10, 0x800448d3, &(0x7f0000005a40)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffffc, 0xffff, 0x59f, 0x6, 0x40, "ffbf18dd3a41e6c3d93d312dcd8cc38dd912ba44c5939caae8f3220ccee40fe63f24a88269d9741d50d2a56d23d10cff261d5cce5c64ed29a274ec8846cb7032f0f36a871fcd29e7a225b4694bd636658abc34e28fc43449157b585f03f44bac6039cf71a7f95c50f307f42e9a7931ddbe19aeec61b4c1cd7ac3dac2c13a6c1c"}) 1.385621419s ago: executing program 3 (id=548): r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETNEXTQUOTA(0xffffffffffffffff, 0xffffffff80000900, r1, &(0x7f00000001c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0)="a6", 0x1, 0x400c0, 0x0, 0x0) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)={0x20, 0x24, 0x107, 0x70bd28, 0x25dfdbfb, {0x2, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) 1.277696019s ago: executing program 3 (id=549): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000400)='nv', 0x2) sendto$inet6(r1, 0x0, 0x0, 0x20000045, &(0x7f0000000140)={0xa, 0x4001, 0xfffc, @loopback, 0xfffffffd}, 0x1c) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x13) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) eventfd2(0x0, 0x1) (async) r3 = eventfd2(0x0, 0x1) dup2(r3, 0xc8) (async) r4 = dup2(r3, 0xc8) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0xc, 0x5, 0x7, 0xc1}, 0x50) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000e40)={0x90, 0x0, &(0x7f0000000c40)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@flat=@weak_handle={0x77682a85, 0x100a, 0x3}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x20}, @flat=@handle={0x73682a85, 0x1100}}, &(0x7f00000004c0)={0x0, 0x18, 0x40}}}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000500)={@fd, @fd, @fda={0x66646185, 0x6, 0x2, 0x31}}, &(0x7f0000000580)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000500), 0x3f, r5}, 0x38) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffdbb}, 0x48) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001880), 0x0, 0x1, r5}, 0x38) ioctl(r2, 0x4048aec9, &(0x7f00000000c0)="030000000000000001000000050000000000000001000000c800"/72) (async) ioctl(r2, 0x4048aec9, &(0x7f00000000c0)="030000000000000001000000050000000000000001000000c800"/72) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x101, @ipv4={'\x00', '\xff\xff', @local}, 0x100}, 0x1c) (async) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x101, @ipv4={'\x00', '\xff\xff', @local}, 0x100}, 0x1c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001100)) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) recvfrom(r7, 0x0, 0xfffffffffffffeaf, 0x40000002, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r7) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r7) setsockopt$sock_int(r7, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) (async) setsockopt$sock_int(r7, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r8, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r8, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)={@map=r9, r9, 0x2f, 0x18, 0x4, @void, @value, @void, @void, r10}, 0x20) r11 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x3002a8d, 0x1) ioctl$TCSETSF2(r11, 0x402c542d, &(0x7f0000000000)={0x2, 0x2, 0x5fd69280, 0x6, 0x6, "2febb950ea33f268654a9e60dc6fcc71eb3150", 0x1, 0x95f}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000010c0)={r6, 0xe0, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2000000000000075, 0x5, &(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f0000000e80)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x14, &(0x7f0000000ec0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000f00), &(0x7f0000000f40), 0x8, 0x67, 0x8, 0x8, &(0x7f0000000f80)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000010c0)={r6, 0xe0, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2000000000000075, 0x5, &(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f0000000e80)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x14, &(0x7f0000000ec0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000f00), &(0x7f0000000f40), 0x8, 0x67, 0x8, 0x8, &(0x7f0000000f80)}}, 0x10) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000004880)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@type_tag={0xb, 0x0, 0x0, 0x12, 0x4}]}, {0x0, [0x0, 0x0, 0x5f, 0x2e]}}, &(0x7f0000003880)=""/4096, 0x2a, 0x1000, 0x1, 0x9a, 0x10000, @value=r4}, 0x28) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001140)={@fallback=r12, r4, 0xc, 0x200a, r6, @value=r4, @void, @void, @void, r10}, 0x20) 1.156151206s ago: executing program 3 (id=553): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) (async) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0x0, 0x41}, "5d389187f25fd288d8a8c1c3b99fc42dd41a124d1f40c9b379e8392c38927ac9965991cdb41585e4a61a3f334d6db69ca22282462e36f5b05eeaee543980694912"}, 0x45) (async) fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) (async) r3 = syz_open_procfs(r1, &(0x7f0000001500)='pagemap\x00') ioctl$DVB_DVR_DMX_EXPBUF(r3, 0xc00c6f3e, &(0x7f0000000040)={0x5, 0x0, r3}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@newlinkprop={0x28, 0x6c, 0x8, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, 0x2, 0x10a10}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c080}, 0x800) syz_usb_disconnect(0xffffffffffffffff) (async) close_range(r0, 0xffffffffffffffff, 0x0) 1.008584538s ago: executing program 5 (id=554): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000480)=[{0x20, 0x9, 0x0, 0xfffff01c}, {0x6, 0xfc, 0x1, 0x8000}]}, 0x10) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt(r2, 0xeb, 0x10, &(0x7f0000000140)=""/29, &(0x7f0000000400)=0x1d) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)=@sco, 0x80, &(0x7f0000000100)=[{&(0x7f00000000c0)="4b8b05004877d6791b46c1a71ee7add73cd98b2f6ab5", 0x16}], 0x1}, 0x4010) 837.60698ms ago: executing program 1 (id=555): write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x84, 0x74, 0x0, 0x0, @time={0xe, 0x425}, {0xfd}, {0x7}, @raw32={[0x2, 0x6, 0x7fffffe]}}], 0x1c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0xd}) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="0f00000004000000080000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000003663e3c69c10dff935a4891700000000000000"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) close(0x4) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x4, 0x8000007, 0x3, 0x180, 0x2, 0xc, 0xf1, 0xfab3, 0x5, 0x5, 0x0, 0xd, 0x0, 0x6, 0x0, 0xbd9], 0x1000, 0x43102}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="67727071756f74615f626c6f636b5f686172020000ea07114dad2a0a0069743d332c00"]) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000540), 0x200000b1, 0x8a681) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000001100)={r4, 0x0, {0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "244333791f045158d97405000000000000040000000100", [0xfffffffffeff7ffc]}}) ioctl$BTRFS_IOC_SPACE_INFO(r5, 0x4c08, 0x0) ioctl$LOOP_SET_DIRECT_IO(r5, 0x4c08, 0x9) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x16, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18040000000000000000000000000000180000002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="b9ff03316845268cb89614f00800", 0x0, 0x6000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000300)={[0x7, 0x1000000000, 0x0, 0x200000000000043, 0x7, 0x0, 0x2004cb, 0x0, 0xa7c, 0x68ff, 0x7, 0x8000000009, 0x803, 0x0, 0x9], 0x8003000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x1, 0xc, 0x8, 0xb, 0xe6, 0x40, 0x0, 0x0, 0x83, 0x80}, {0x5000, 0x3000, 0x10, 0xff, 0x42, 0x5, 0x75, 0x3, 0x36, 0xfe, 0x2, 0x8f}, {0x0, 0xdddf1000, 0xe, 0x5, 0x3, 0x1, 0x0, 0x9, 0x1, 0xa4, 0x20, 0x8}, {0x1, 0xeeee0000, 0x1c, 0x6, 0x2, 0x42, 0x0, 0xff, 0x3, 0x7, 0x9}, {0xf000, 0xd000, 0xf, 0x3, 0x12, 0x7, 0xa9, 0x8, 0x9, 0x9, 0xf2, 0x97}, {0xeeefa000, 0xdddd0000, 0x8, 0xa0, 0x1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x4, 0x9}, {0x3000, 0xb000, 0x8, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0x7000, 0x4000, 0xa, 0x4, 0xcd, 0x7, 0xb, 0x9, 0x2, 0x5, 0xb0, 0x81}, {0xeeef0000, 0x30}, {0x9000, 0x9}, 0x80000031, 0x0, 0xc000, 0x2024, 0x800000a, 0xc501, 0x100000, [0xe5b5, 0x4, 0x3, 0x8]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 778.958791ms ago: executing program 5 (id=556): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r0, 0x4b52, &(0x7f0000000100)=""/60) 778.570365ms ago: executing program 5 (id=557): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000680)="fe55fc2733656cd94cd632f708d5edc9bbe8b3ec7b6726cb", 0x18}], 0x1, 0x0, 0x0, 0x40000}], 0x1, 0xc0) recvmmsg(0xffffffffffffffff, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}, 0x7fff}, {{0x0, 0x0, 0x0}, 0x9}], 0x2, 0x10000, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], [0xffffff7f, 0xfffffefe, 0xff000000, 0xff], 'xfrm0\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x2f, 0xb7, 0x0, 0x1}, 0x0, 0x218, 0x238, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@statistic={{0x38}, {0x1, 0x0, 0x1, 0x3, 0x10001, {0x1}}}, @common=@rt={{0x138}, {0x5, [0x1, 0x4], 0x1, 0x2, 0x2, [@private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x39}, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @private2, @mcast1, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x44}, @local, @loopback, @remote, @mcast2, @remote], 0x6}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x6}, {0xffffffffffffffff, 0x8, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000003c0)) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)="aac1c667980bacb85ff0df16951a5501523076ebe2b944529178d22b164563f7ff1ce7f7b143bf7d9bd7a4d205fd632f830272d3a78302205252b9ae7d8be5638396a0fa0583974f3f28302280b7b4d3c9e13d74dbc7b9e8718956dd5fe482", 0x5f}, {&(0x7f0000000a00)="2e3b4d0793c0907a06a1c65afd96e5c997cc6fe980972c7c01fcfa7c85b0db039afd7c02884bfed5faf093fd548fca4f3a6e7391c8acfda620b96e71569873b28a43558b1c85f34b806418d36165411c9ebd66627a", 0x55}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da34476ae85425970a2b4accde6c711e12df583b78f6cd5d2eae194ae5f9f1f0b81fd6618f469933b16eca1f9e35798daafec41c54ec908440bc6f2a8c94e6bdf0c72c8e528f0778c5b5ad28a834e43f387c8282e50e7d6b0cd91a93f87f645b32c1f200f7d9f101c7bcf701e4462f36e5fe5503da319f5261659f63d203e503fc3476bb556d4987fbfbf", 0xbd}, {&(0x7f0000000440)="126ce0a7ad2d3c4b1b140fc7402f00828a02ec6c4e59757eda3f13f9d8a4376fed93dd5b8c0ba901c5305f", 0x2b}], 0x4, 0x0, 0x0, 0xc40}], 0x1, 0x240000c4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1e00000007", @ANYRES64, @ANYRES32, @ANYRESHEX, @ANYRESHEX, @ANYRES32], 0x50) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) (async) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r6, 0x5411, &(0x7f0000000080)) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x0, 0x268, 0x300, 0x0, 0x268, 0x390, 0x460, 0x460, 0x390, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0x230, 0x258, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x9}}}, @common=@unspec=@time={{0x38}, {0x0, 0x0, 0x10000000}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@private2, @remote, [], [], 'ip6gretap0\x00', 'ip6_vti0\x00'}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c0) 606.169014ms ago: executing program 5 (id=558): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'pim6reg0\x00', 0x400}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x1, 0x1, r2}}, 0x40) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) getpid() ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xd) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, 0x0, &(0x7f00000000c0)) ioctl$FIONREAD(r3, 0x541b, &(0x7f0000000000)) syz_pidfd_open(r2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x508, 0x98, 0x208, 0x208, 0x3a0, 0x208, 0x470, 0x470, 0x470, 0x470, 0x470, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x568) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)) bind(r0, &(0x7f0000000180)=@ieee802154={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0102}}}, 0x80) r7 = socket(0x26, 0x80000, 0x1) getsockopt$inet_mtu(r7, 0x0, 0xa, &(0x7f0000000280), &(0x7f0000000300)=0x4) r8 = syz_open_dev$cec(&(0x7f0000000200), 0x0, 0x6ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r8, 0xc05c6104, &(0x7f0000000040)={'\x00', 0x0, 0x5, 0x2, 0xfffffff9, 0x8, "0000000002000000f6ffffae29467f", "00000001", "0052008f", "0e00f807", ["fdd5c02900", "000000731700", "00f638000000007c0300", "000000feffddff0500000200"]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r9, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000480)="aa", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800) recvmmsg(r10, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x2040, 0x0) close_range(r6, 0xffffffffffffffff, 0x200000000000000) setsockopt$inet_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000380)=@ccm_128={{0x303}, "1ddc32ac6def0526", "5279582a9b8cc23c8904ac4198aba775", "6af415cb", "59e94db15e964e7a"}, 0x28) 605.485444ms ago: executing program 1 (id=559): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000080)) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000000)={'erspan0\x00', r3, 0x0, 0x80, 0x7, 0x800, {{0x7, 0x4, 0x0, 0x5, 0x1c, 0x64, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x25}, @loopback, {[@lsrr={0x83, 0x7, 0x6d, [@private=0xa010100]}]}}}}}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@dellinkprop={0x3c, 0x6d, 0x200, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r4, 0x1, 0x100}, [@IFLA_PHYS_SWITCH_ID={0x1a, 0x24, "d89ca96a049482ee296d6ed489ec3eb1246e713eeff5"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20a7d52d1a3e1087}, 0x30000010) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000400000/0xc00000)=nil) sendmmsg$inet(r0, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 518.030949ms ago: executing program 5 (id=560): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='sys_link\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='sys_link\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) lstat(&(0x7f00000000c0)='sys_link\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4}, [@ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xff70}], {0x95, 0x0, 0xb}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff4d, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) mount$afs(&(0x7f0000000000), &(0x7f0000000040)='sys_link\x00', &(0x7f0000000080), 0x2800040, &(0x7f0000000240)={[{@flock_openafs}], [{@subj_role={'subj_role', 0x3d, 'sysfs\x00'}}, {@flag='mand'}, {@euid_lt={'euid<', r0}}, {@dont_appraise}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='sys_link/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000500)='0000:00:02.0\x00', 0xd) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='sys_link/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0) write(r2, &(0x7f0000000900)='dwc2-pci\x00', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='sys_link/bus/pci/drivers/dwc2-pci/bind\x00', 0x1, 0x0) write(r3, &(0x7f0000000b00)='0000:00:02.0\x00', 0xd) 516.258087ms ago: executing program 1 (id=561): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='dev_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='dev_mnt\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='dev_mnt/zram0\x00', 0x2, 0x0) write(r0, &(0x7f0000000480)="0011", 0x2) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00') close_range(r1, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="1800000016009e0000000000000000000a0000000400ca80"], 0x18}}, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x26}}, 0x0, 0x0, 0x4, 0x2}}, 0x26) 516.112585ms ago: executing program 1 (id=562): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0x6100204) (async) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0x6100204) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/160, 0xa0}], 0x1, 0x6, 0x1) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040), 0x50) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r2, &(0x7f00000000c0)={@void, @val={0x1, 0x4, 0xdc7c, 0xf800, 0x8, 0x7}, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x8, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, @mcast2, @remote, @ipv4={'\x00', '\xff\xff', @empty}}}, 0x3e) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) (async) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000100)={0x0, @multicast2}, &(0x7f0000000140)=0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000300)={0x4, &(0x7f00000001c0)=[{0xe000, 0x8, 0xff, 0x9}, {0x8000, 0x5, 0x2c, 0x81}, {0xfc00, 0x68, 0x9, 0xec}, {0x8, 0x8, 0x8}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r1}, @ldst={0x1, 0x2, 0x3, 0x0, 0x2, 0x18b}]}, &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x94) 369.181514ms ago: executing program 3 (id=563): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x7, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000100)={0xd000, 0x10000, 0xff, 0x1, 0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 249.576498ms ago: executing program 3 (id=564): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pim6reg0\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x7) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_INSN(r1, 0x8028640c, &(0x7f0000022a00)={0x4000000, 0x5c, 0x0, 0x2, 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:02.0/remove\x00', 0x1, 0x0) write(r2, &(0x7f0000000140)='1', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r3, &(0x7f00000001c0)='1', 0x1) open(&(0x7f0000000080)='./sys\x00', 0x400802, 0x186) 68.635393ms ago: executing program 1 (id=565): ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {0x9}, 0x3, 0xf3, &(0x7f0000000040)={0x5, 0x7, 0x84b6, 0x4, 0x4}, 0x8, 0x7, 0x3, 0x0, 0x4, 0x3, &(0x7f0000000f00)}) (async, rerun: 32) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (rerun: 32) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000540)={0x1}, 0x2) write$selinux_load(r0, &(0x7f0000000080)=ANY=[@ANYRESDEC=r0], 0xfebc) 67.868132ms ago: executing program 1 (id=566): socket$inet6(0xa, 0x80803, 0x87) syz_emit_ethernet(0xaa, &(0x7f0000000080)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x74, 0x2b, 0x0, @rand_addr=' \x01\x00', @local, {[@hopopts={0x87}, @routing={0x3b, 0x0, 0x0, 0x2}], {0x4e21, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x4, "34e540e3dd227ff71fcd0abe58075273e435d14b3a977b28387a1ae7465338d4", "5cb275b40fd4031ec1941ebfaa96d7bf", {"cf69fd413d00", "0667f5c2b37bbd83be6ba638018bb23c"}}}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sg(&(0x7f0000000040), 0x8, 0x80103) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f0000000180)=0x10) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x200400, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f00000002c0)=0x2, 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000080)={r3, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x2, 0x80000003, 0x4, 0xe2d8f2eb1d010935, 0x9, 0x9}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={r3, @in={{0x2, 0x4e20, @empty}}, 0xd5, 0x6, 0x17f, 0x4, 0x11, 0x1, 0x8}, &(0x7f0000000040)=0x9c) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x14, 0x26, 0x107, 0x70bd2e, 0xa5dfdbfb, {0x1a, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c045}, 0x8010) 0s ago: executing program 5 (id=567): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a28000000000a01040000000000000000010080030900010073797a300000000008000240000000012c000000030a01010000000000000000010002000900010073797a300000000009000b"], 0x1a4}}, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000000000)={0x8000, {"8604a0a71359a294b7585622d5b25618", "398e9cb8b9ef106c55992b65958724b1", "04641700"}, 0x2, 0x6}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x72, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x3c, 0x3a, 0x0, @remote, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x4b, '\x00', {0x9, 0x6, "0dce78", 0x8, 0x2f, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @remote, [@fragment={0x3a, 0x0, 0xb, 0x1, 0x0, 0x1a, 0x66}], "5cdec169"}}}}}}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r0, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x14, 0xa, 0xb9, 0x0, 0x7, 0x10000, 0x2, '\x00', 0xc94}) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): ] FAULT_INJECTION: forcing a failure. [ 60.373757][ T6320] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 60.379065][ T6320] CPU: 2 UID: 0 PID: 6320 Comm: syz.2.119 Not tainted syzkaller #0 PREEMPT(full) [ 60.379088][ T6320] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 60.379109][ T6320] Call Trace: [ 60.379116][ T6320] [ 60.379123][ T6320] dump_stack_lvl+0x100/0x190 [ 60.379198][ T6320] should_fail_ex.cold+0x5/0xa [ 60.379222][ T6320] _copy_from_user+0x2e/0xd0 [ 60.379256][ T6320] memdup_user+0x6b/0xe0 [ 60.379283][ T6320] strndup_user+0x78/0xe0 [ 60.379301][ T6320] __x64_sys_mount+0x136/0x310 [ 60.379330][ T6320] ? __pfx___x64_sys_mount+0x10/0x10 [ 60.379356][ T6320] do_syscall_64+0x115/0x870 [ 60.379395][ T6320] ? clear_bhb_loop+0x40/0x90 [ 60.379416][ T6320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.379432][ T6320] RIP: 0033:0x7f6e4899de99 [ 60.379448][ T6320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.379462][ T6320] RSP: 002b:00007f6e498a8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 60.379495][ T6320] RAX: ffffffffffffffda RBX: 00007f6e48c25fa0 RCX: 00007f6e4899de99 [ 60.379505][ T6320] RDX: 0000200000004500 RSI: 00002000000000c0 RDI: 0000000000000000 [ 60.379515][ T6320] RBP: 00007f6e498a8090 R08: 0000200000000300 R09: 0000000000000000 [ 60.379524][ T6320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.379532][ T6320] R13: 00007f6e48c26038 R14: 00007f6e48c25fa0 R15: 00007ffde7ceb8a8 [ 60.379559][ T6320] [ 60.519576][ T6328] tipc: Started in network mode [ 60.521370][ T6328] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 60.529612][ T6328] tipc: Enabled bearer , priority 10 [ 60.585854][ T6330] bond1: Invalid ad_actor_system MAC address. [ 60.587880][ T6330] bond1: option ad_actor_system: invalid value (27571) [ 60.593270][ T6330] bond1 (unregistering): Released all slaves [ 60.836013][ T6338] 9p: Bad value for 'rfdno' [ 60.909203][ T6349] syzkaller0: entered promiscuous mode [ 60.911300][ T6349] syzkaller0: entered allmulticast mode [ 61.660319][ T50] tipc: Node number set to 4269801492 [ 61.837242][ T42] kauditd_printk_skb: 69 callbacks suppressed [ 61.837263][ T42] audit: type=1400 audit(1785350922.222:445): avc: denied { setopt } for pid=6378 comm="syz.3.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 61.847503][ T42] audit: type=1400 audit(1785350922.222:446): avc: denied { read } for pid=6378 comm="syz.3.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 61.861103][ T42] audit: type=1400 audit(1785350922.252:447): avc: denied { write } for pid=6378 comm="syz.3.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 62.043993][ T42] audit: type=1400 audit(1785350922.432:448): avc: denied { ioctl } for pid=6389 comm="syz.2.139" path="/dev/hpet" dev="devtmpfs" ino=630 ioctlcmd=0x6806 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 62.143450][ T6394] netlink: 'syz.2.140': attribute type 10 has an invalid length. [ 62.153077][ T6394] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 62.281494][ T6398] netlink: 'syz.2.141': attribute type 2 has an invalid length. [ 62.292900][ T6398] : entered promiscuous mode [ 63.835353][ T6342] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 63.839699][ T6356] netlink: 'syz.0.130': attribute type 1 has an invalid length. [ 63.842216][ T6356] __nla_validate_parse: 5 callbacks suppressed [ 63.842225][ T6356] netlink: 224 bytes leftover after parsing attributes in process `syz.0.130'. [ 64.144852][ T6413] netlink: 'syz.1.145': attribute type 1 has an invalid length. [ 64.152145][ T6413] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 64.276254][ T42] audit: type=1400 audit(1785350924.662:449): avc: denied { create } for pid=6419 comm="syz.3.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 64.285607][ T42] audit: type=1400 audit(1785350924.662:450): avc: denied { write } for pid=6419 comm="syz.3.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 64.295440][ T42] audit: type=1400 audit(1785350924.662:451): avc: denied { setopt } for pid=6419 comm="syz.3.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 64.428207][ T29] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 64.445674][ T6448] 9pnet_fd: p9_fd_create_unix (6448): problem connecting socket: ./my_sys: -111 [ 64.447555][ T6449] netlink: 108 bytes leftover after parsing attributes in process `syz.1.153'. [ 64.458689][ T6449] ======================================================= [ 64.458689][ T6449] WARNING: The mand mount option has been deprecated and [ 64.458689][ T6449] and is ignored by this kernel. Remove the mand [ 64.458689][ T6449] option from the mount to silence this warning. [ 64.458689][ T6449] ======================================================= [ 64.466844][ T42] audit: type=1400 audit(1785350924.852:452): avc: denied { set_context_mgr } for pid=6446 comm="syz.0.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 64.473767][ T6450] 9pnet_fd: p9_fd_create_unix (6450): problem connecting socket: ./my_sys: -111 [ 64.482385][ T42] audit: type=1400 audit(1785350924.862:453): avc: denied { mount } for pid=6447 comm="syz.1.153" name="/" dev="pipefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 64.492031][ T42] audit: type=1400 audit(1785350924.862:454): avc: denied { read } for pid=6447 comm="syz.1.153" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 64.581958][ T29] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 64.592005][ T29] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 12336, setting to 64 [ 64.598593][ T29] usb 7-1: config 0 interface 0 has no altsetting 0 [ 64.614453][ T29] usb 7-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 64.620277][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.622711][ T29] usb 7-1: Product: syz [ 64.623998][ T29] usb 7-1: Manufacturer: syz [ 64.625434][ T29] usb 7-1: SerialNumber: syz [ 64.628754][ T29] usb 7-1: config 0 descriptor?? [ 64.631207][ T6464] dummy_hcd dummy_hcd.0: remove, state 4 [ 64.643744][ T6464] usb usb5: USB disconnect, device number 1 [ 64.669788][ T6464] dummy_hcd dummy_hcd.0: stopped [ 64.671756][ T6464] dummy_hcd dummy_hcd.0: USB bus 5 deregistered [ 64.837346][ T29] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input6 [ 64.910939][ T6479] 9p: Bad value for 'wfdno' [ 64.957358][ T6485] openvswitch: netlink: Duplicate or invalid key (type 0). [ 64.960200][ T6485] openvswitch: netlink: Actions may not be safe on all matching packets [ 64.967703][ T6485] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.978477][ T6485] bridge_slave_0 (unregistering): left allmulticast mode [ 64.981220][ T6485] bridge_slave_0 (unregistering): left promiscuous mode [ 64.986722][ T6485] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.999329][ T5743] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 65.002490][ T5743] Bluetooth: hci1: Injecting HCI hardware error event [ 65.003285][ T6487] netlink: 'syz.3.167': attribute type 1 has an invalid length. [ 65.006060][ T5743] Bluetooth: hci1: hardware error 0x00 [ 65.122637][ T29] usb 7-1: USB disconnect, device number 3 [ 65.181048][ T6500] FAULT_INJECTION: forcing a failure. [ 65.181048][ T6500] name failslab, interval 1, probability 0, space 0, times 1 [ 65.186371][ T6500] CPU: 2 UID: 0 PID: 6500 Comm: syz.1.169 Not tainted syzkaller #0 PREEMPT(full) [ 65.186395][ T6500] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 65.186406][ T6500] Call Trace: [ 65.186413][ T6500] [ 65.186420][ T6500] dump_stack_lvl+0x100/0x190 [ 65.186496][ T6500] should_fail_ex.cold+0x5/0xa [ 65.186520][ T6500] should_failslab+0xc2/0x120 [ 65.186552][ T6500] kmem_cache_alloc_noprof+0x91/0x6a0 [ 65.186574][ T6500] ? do_getname+0x35/0x390 [ 65.186601][ T6500] do_getname+0x35/0x390 [ 65.186625][ T6500] user_path_at+0x26/0x60 [ 65.186644][ T6500] __x64_sys_mount+0x1fb/0x310 [ 65.186674][ T6500] ? __pfx___x64_sys_mount+0x10/0x10 [ 65.186715][ T6500] do_syscall_64+0x115/0x870 [ 65.186756][ T6500] ? clear_bhb_loop+0x40/0x90 [ 65.186778][ T6500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.186796][ T6500] RIP: 0033:0x7f792619de99 [ 65.186813][ T6500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.186829][ T6500] RSP: 002b:00007f7926ffa028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 65.186847][ T6500] RAX: ffffffffffffffda RBX: 00007f7926425fa0 RCX: 00007f792619de99 [ 65.186858][ T6500] RDX: 0000200000004500 RSI: 00002000000000c0 RDI: 0000000000000000 [ 65.186869][ T6500] RBP: 00007f7926ffa090 R08: 0000200000000300 R09: 0000000000000000 [ 65.186879][ T6500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.186889][ T6500] R13: 00007f7926426038 R14: 00007f7926425fa0 R15: 00007ffcfba0f508 [ 65.186912][ T6500] [ 65.290067][ T6502] netlink: 8 bytes leftover after parsing attributes in process `syz.1.170'. [ 65.293558][ T6502] netlink: 12 bytes leftover after parsing attributes in process `syz.1.170'. [ 65.297128][ T6502] netlink: 'syz.1.170': attribute type 19 has an invalid length. [ 65.311101][ T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.316901][ T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.316958][ T6502] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 65.320599][ T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.328609][ T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.399529][ T6504] netlink: 'syz.1.171': attribute type 4 has an invalid length. [ 65.715369][ T6521] FAULT_INJECTION: forcing a failure. [ 65.715369][ T6521] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 65.719616][ T6521] CPU: 3 UID: 0 PID: 6521 Comm: syz.2.178 Not tainted syzkaller #0 PREEMPT(full) [ 65.719632][ T6521] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 65.719638][ T6521] Call Trace: [ 65.719643][ T6521] [ 65.719648][ T6521] dump_stack_lvl+0x100/0x190 [ 65.719669][ T6521] should_fail_ex.cold+0x5/0xa [ 65.719684][ T6521] strncpy_from_user+0x3b/0x2d0 [ 65.719713][ T6521] do_getname+0x78/0x390 [ 65.719730][ T6521] user_path_at+0x26/0x60 [ 65.719741][ T6521] __x64_sys_mount+0x1fb/0x310 [ 65.719757][ T6521] ? __pfx___x64_sys_mount+0x10/0x10 [ 65.719776][ T6521] do_syscall_64+0x115/0x870 [ 65.719790][ T6521] ? clear_bhb_loop+0x40/0x90 [ 65.719803][ T6521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.719816][ T6521] RIP: 0033:0x7f6e4899de99 [ 65.719826][ T6521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.719837][ T6521] RSP: 002b:00007f6e498a8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 65.719849][ T6521] RAX: ffffffffffffffda RBX: 00007f6e48c25fa0 RCX: 00007f6e4899de99 [ 65.719856][ T6521] RDX: 0000200000004500 RSI: 00002000000000c0 RDI: 0000000000000000 [ 65.719862][ T6521] RBP: 00007f6e498a8090 R08: 0000200000000300 R09: 0000000000000000 [ 65.719869][ T6521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.719875][ T6521] R13: 00007f6e48c26038 R14: 00007f6e48c25fa0 R15: 00007ffde7ceb8a8 [ 65.719888][ T6521] [ 65.814627][ T6530] syzkaller0: entered promiscuous mode [ 65.816655][ T6530] syzkaller0: entered allmulticast mode [ 65.910472][ T6538] netlink: 'syz.2.185': attribute type 1 has an invalid length. [ 65.913550][ T6538] netlink: 28 bytes leftover after parsing attributes in process `syz.2.185'. [ 66.068466][ T6553] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 66.092673][ T6555] FAULT_INJECTION: forcing a failure. [ 66.092673][ T6555] name failslab, interval 1, probability 0, space 0, times 0 [ 66.099562][ T6555] CPU: 2 UID: 0 PID: 6555 Comm: syz.1.190 Tainted: G L syzkaller #0 PREEMPT(full) [ 66.099592][ T6555] Tainted: [L]=SOFTLOCKUP [ 66.099598][ T6555] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 66.099614][ T6555] Call Trace: [ 66.099620][ T6555] [ 66.099627][ T6555] dump_stack_lvl+0x100/0x190 [ 66.099658][ T6555] should_fail_ex.cold+0x5/0xa [ 66.099683][ T6555] should_failslab+0xc2/0x120 [ 66.099709][ T6555] __kmalloc_noprof+0xfc/0x820 [ 66.099728][ T6555] ? __lock_acquire+0x49f/0x1a40 [ 66.099768][ T6555] ? tomoyo_encode2+0xfb/0x3c0 [ 66.099800][ T6555] tomoyo_encode2+0xfb/0x3c0 [ 66.099822][ T6555] tomoyo_encode+0x29/0x50 [ 66.099839][ T6555] tomoyo_mount_acl+0x14c/0x8b0 [ 66.099865][ T6555] ? is_bpf_text_address+0x8a/0x1a0 [ 66.099891][ T6555] ? bpf_ksym_find+0x128/0x1c0 [ 66.099918][ T6555] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 66.099941][ T6555] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 66.099966][ T6555] ? kernel_text_address+0x8d/0x100 [ 66.099989][ T6555] ? unwind_get_return_address+0x59/0xa0 [ 66.100033][ T6555] ? tomoyo_domain+0xb2/0x150 [ 66.100053][ T6555] ? tomoyo_profile+0x47/0x60 [ 66.100075][ T6555] tomoyo_mount_permission+0x214/0x460 [ 66.100101][ T6555] ? tomoyo_mount_permission+0x1f6/0x460 [ 66.100129][ T6555] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 66.100172][ T6555] security_sb_mount+0xdd/0x270 [ 66.100200][ T6555] path_mount+0x158/0x23d0 [ 66.100228][ T6555] ? __pfx_path_mount+0x10/0x10 [ 66.100248][ T6555] ? lockdep_hardirqs_on+0x78/0x100 [ 66.100273][ T6555] ? putname+0xb1/0x110 [ 66.100291][ T6555] ? kmem_cache_free+0x127/0x6b0 [ 66.100327][ T6555] ? __x64_sys_mount+0x293/0x310 [ 66.100348][ T6555] __x64_sys_mount+0x293/0x310 [ 66.100393][ T6555] ? __pfx___x64_sys_mount+0x10/0x10 [ 66.100423][ T6555] do_syscall_64+0x115/0x870 [ 66.100442][ T6555] ? clear_bhb_loop+0x40/0x90 [ 66.100465][ T6555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.100483][ T6555] RIP: 0033:0x7f792619de99 [ 66.100500][ T6555] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.100516][ T6555] RSP: 002b:00007f7926ffa028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 66.100535][ T6555] RAX: ffffffffffffffda RBX: 00007f7926425fa0 RCX: 00007f792619de99 [ 66.100546][ T6555] RDX: 0000200000004500 RSI: 00002000000000c0 RDI: 0000000000000000 [ 66.100557][ T6555] RBP: 00007f7926ffa090 R08: 0000200000000300 R09: 0000000000000000 [ 66.100568][ T6555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.100578][ T6555] R13: 00007f7926426038 R14: 00007f7926425fa0 R15: 00007ffcfba0f508 [ 66.100607][ T6555] [ 66.231225][ T6560] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=77 sclass=netlink_route_socket pid=6560 comm=syz.1.192 [ 66.834946][ T6585] binder: 6584:6585 ioctl c0306201 200000000540 returned -22 [ 66.867095][ T6589] FAULT_INJECTION: forcing a failure. [ 66.867095][ T6589] name failslab, interval 1, probability 0, space 0, times 0 [ 66.872070][ T6589] CPU: 1 UID: 0 PID: 6589 Comm: syz.3.201 Tainted: G L syzkaller #0 PREEMPT(full) [ 66.872094][ T6589] Tainted: [L]=SOFTLOCKUP [ 66.872099][ T6589] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 66.872107][ T6589] Call Trace: [ 66.872112][ T6589] [ 66.872118][ T6589] dump_stack_lvl+0x100/0x190 [ 66.872144][ T6589] should_fail_ex.cold+0x5/0xa [ 66.872164][ T6589] should_failslab+0xc2/0x120 [ 66.872185][ T6589] __kmalloc_noprof+0xfc/0x820 [ 66.872202][ T6589] ? rcu_is_watching+0x12/0xc0 [ 66.872227][ T6589] ? tomoyo_realpath_from_path+0xb6/0x690 [ 66.872248][ T6589] tomoyo_realpath_from_path+0xb6/0x690 [ 66.872267][ T6589] tomoyo_mount_acl+0x1b6/0x8b0 [ 66.872290][ T6589] ? is_bpf_text_address+0x8a/0x1a0 [ 66.872311][ T6589] ? bpf_ksym_find+0x128/0x1c0 [ 66.872333][ T6589] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 66.872351][ T6589] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 66.872371][ T6589] ? kernel_text_address+0x8d/0x100 [ 66.872389][ T6589] ? unwind_get_return_address+0x59/0xa0 [ 66.872426][ T6589] ? tomoyo_domain+0xb2/0x150 [ 66.872442][ T6589] ? tomoyo_profile+0x47/0x60 [ 66.872460][ T6589] tomoyo_mount_permission+0x214/0x460 [ 66.872488][ T6589] ? tomoyo_mount_permission+0x1f6/0x460 [ 66.872510][ T6589] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 66.872545][ T6589] security_sb_mount+0xdd/0x270 [ 66.872568][ T6589] path_mount+0x158/0x23d0 [ 66.872613][ T6589] ? __pfx_path_mount+0x10/0x10 [ 66.872631][ T6589] ? lockdep_hardirqs_on+0x78/0x100 [ 66.872651][ T6589] ? putname+0xb1/0x110 [ 66.872666][ T6589] ? kmem_cache_free+0x127/0x6b0 [ 66.872689][ T6589] ? __x64_sys_mount+0x293/0x310 [ 66.872707][ T6589] __x64_sys_mount+0x293/0x310 [ 66.872727][ T6589] ? __pfx___x64_sys_mount+0x10/0x10 [ 66.872752][ T6589] do_syscall_64+0x115/0x870 [ 66.872768][ T6589] ? clear_bhb_loop+0x40/0x90 [ 66.872786][ T6589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.872831][ T6589] RIP: 0033:0x7f37ac59de99 [ 66.872845][ T6589] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.872858][ T6589] RSP: 002b:00007f37ad3c3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 66.872875][ T6589] RAX: ffffffffffffffda RBX: 00007f37ac825fa0 RCX: 00007f37ac59de99 [ 66.872884][ T6589] RDX: 0000200000004500 RSI: 00002000000000c0 RDI: 0000000000000000 [ 66.872894][ T6589] RBP: 00007f37ad3c3090 R08: 0000200000000300 R09: 0000000000000000 [ 66.872903][ T6589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.872911][ T6589] R13: 00007f37ac826038 R14: 00007f37ac825fa0 R15: 00007ffd3ff1f688 [ 66.872931][ T6589] [ 66.873485][ T6589] ERROR: Out of memory at tomoyo_realpath_from_path. [ 66.958711][ T6593] support for cryptoloop has been removed. Use dm-crypt instead. [ 67.000303][ T42] kauditd_printk_skb: 37 callbacks suppressed [ 67.000321][ T42] audit: type=1400 audit(1785350927.392:492): avc: denied { read } for pid=6595 comm="syz.3.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 67.070387][ T5743] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 67.268030][ T1045] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 67.281464][ T6618] lo speed is unknown, defaulting to 1000 [ 67.285235][ T6618] lo speed is unknown, defaulting to 1000 [ 67.289489][ T6618] lo speed is unknown, defaulting to 1000 [ 67.324975][ T6622] netlink: 8 bytes leftover after parsing attributes in process `syz.1.208'. [ 67.327688][ T6622] netlink: 'syz.1.208': attribute type 10 has an invalid length. [ 67.331400][ T6622] netlink: 12 bytes leftover after parsing attributes in process `syz.1.208'. [ 67.377361][ T42] audit: type=1400 audit(1785350927.762:493): avc: denied { create } for pid=6623 comm="syz.3.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 67.423650][ T42] audit: type=1400 audit(1785350927.812:494): avc: denied { ioctl } for pid=6623 comm="syz.3.209" path="socket:[11242]" dev="sockfs" ino=11242 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 67.427022][ T6618] infiniband syz1: set down [ 67.443202][ T50] lo speed is unknown, defaulting to 1000 [ 67.446571][ T42] audit: type=1400 audit(1785350927.822:495): avc: denied { write } for pid=6623 comm="syz.3.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 67.448574][ T6618] infiniband syz1: added lo [ 67.456032][ T1045] usb 7-1: no configurations [ 67.460414][ T1045] usb 7-1: can't read configurations, error -22 [ 67.463300][ T42] audit: type=1400 audit(1785350927.822:496): avc: denied { connect } for pid=6623 comm="syz.3.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 67.497253][ T6618] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 67.505443][ T6618] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 67.511767][ T6618] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 67.549750][ T6618] RDS/IB: syz1: added [ 67.555062][ T6618] smc: adding ib device syz1 with port count 1 [ 67.561536][ T6618] smc: ib device syz1 port 1 has no pnetid [ 67.565929][ T5889] lo speed is unknown, defaulting to 1000 [ 67.576508][ T6618] lo speed is unknown, defaulting to 1000 [ 67.607937][ T1045] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 67.724760][ T6618] lo speed is unknown, defaulting to 1000 [ 67.768458][ T1045] usb 7-1: no configurations [ 67.770069][ T1045] usb 7-1: can't read configurations, error -22 [ 67.776243][ T1045] usb usb7-port1: attempt power cycle [ 67.810686][ T6618] lo speed is unknown, defaulting to 1000 [ 67.905605][ T6618] lo speed is unknown, defaulting to 1000 [ 68.019849][ T6637] FAULT_INJECTION: forcing a failure. [ 68.019849][ T6637] name failslab, interval 1, probability 0, space 0, times 0 [ 68.023952][ T6637] CPU: 3 UID: 0 PID: 6637 Comm: syz.3.212 Tainted: G L syzkaller #0 PREEMPT(full) [ 68.023970][ T6637] Tainted: [L]=SOFTLOCKUP [ 68.023974][ T6637] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 68.023980][ T6637] Call Trace: [ 68.023985][ T6637] [ 68.023990][ T6637] dump_stack_lvl+0x100/0x190 [ 68.024011][ T6637] should_fail_ex.cold+0x5/0xa [ 68.024027][ T6637] should_failslab+0xc2/0x120 [ 68.024045][ T6637] __kmalloc_noprof+0xfc/0x820 [ 68.024058][ T6637] ? tomoyo_encode2+0xfb/0x3c0 [ 68.024073][ T6637] tomoyo_encode2+0xfb/0x3c0 [ 68.024089][ T6637] tomoyo_encode+0x29/0x50 [ 68.024099][ T6637] tomoyo_realpath_from_path+0x18c/0x690 [ 68.024114][ T6637] tomoyo_mount_acl+0x1b6/0x8b0 [ 68.024131][ T6637] ? is_bpf_text_address+0x8a/0x1a0 [ 68.024148][ T6637] ? bpf_ksym_find+0x128/0x1c0 [ 68.024166][ T6637] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 68.024180][ T6637] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 68.024197][ T6637] ? kernel_text_address+0x8d/0x100 [ 68.024211][ T6637] ? unwind_get_return_address+0x59/0xa0 [ 68.024236][ T6637] ? tomoyo_domain+0xb2/0x150 [ 68.024249][ T6637] ? tomoyo_profile+0x47/0x60 [ 68.024262][ T6637] tomoyo_mount_permission+0x214/0x460 [ 68.024280][ T6637] ? tomoyo_mount_permission+0x1f6/0x460 [ 68.024298][ T6637] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 68.024324][ T6637] security_sb_mount+0xdd/0x270 [ 68.024342][ T6637] path_mount+0x158/0x23d0 [ 68.024360][ T6637] ? __pfx_path_mount+0x10/0x10 [ 68.024373][ T6637] ? lockdep_hardirqs_on+0x78/0x100 [ 68.024390][ T6637] ? putname+0xb1/0x110 [ 68.024402][ T6637] ? kmem_cache_free+0x127/0x6b0 [ 68.024418][ T6637] ? __x64_sys_mount+0x293/0x310 [ 68.024432][ T6637] __x64_sys_mount+0x293/0x310 [ 68.024446][ T6637] ? __pfx___x64_sys_mount+0x10/0x10 [ 68.024466][ T6637] do_syscall_64+0x115/0x870 [ 68.024478][ T6637] ? clear_bhb_loop+0x40/0x90 [ 68.024492][ T6637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.024504][ T6637] RIP: 0033:0x7f37ac59de99 [ 68.024515][ T6637] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.024525][ T6637] RSP: 002b:00007f37ad3c3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 68.024537][ T6637] RAX: ffffffffffffffda RBX: 00007f37ac825fa0 RCX: 00007f37ac59de99 [ 68.024544][ T6637] RDX: 0000200000004500 RSI: 00002000000000c0 RDI: 0000000000000000 [ 68.024551][ T6637] RBP: 00007f37ad3c3090 R08: 0000200000000300 R09: 0000000000000000 [ 68.024557][ T6637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.024563][ T6637] R13: 00007f37ac826038 R14: 00007f37ac825fa0 R15: 00007ffd3ff1f688 [ 68.024589][ T6637] [ 68.024614][ T6637] ERROR: Out of memory at tomoyo_realpath_from_path. [ 68.127910][ T1045] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 68.150228][ T1045] usb 7-1: no configurations [ 68.152171][ T1045] usb 7-1: can't read configurations, error -22 [ 68.165739][ T42] audit: type=1400 audit(1785350928.552:497): avc: denied { remount } for pid=6646 comm="syz.3.215" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 68.173425][ T6647] netlink: 8 bytes leftover after parsing attributes in process `syz.3.215'. [ 68.176549][ T42] audit: type=1400 audit(1785350928.562:498): avc: denied { watch } for pid=6646 comm="syz.3.215" path="/53/file0" dev="tmpfs" ino=299 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 68.185907][ T42] audit: type=1400 audit(1785350928.562:499): avc: denied { mount } for pid=6646 comm="syz.3.215" name="/" dev="pstore" ino=5923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 68.193619][ T42] audit: type=1400 audit(1785350928.572:500): avc: denied { mount } for pid=6648 comm="syz.1.216" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 68.201031][ T42] audit: type=1400 audit(1785350928.572:501): avc: denied { search } for pid=6648 comm="syz.1.216" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 68.286144][ T6653] /dev/sg0: Can't lookup blockdev [ 68.288422][ T1045] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 68.295526][ T6651] kvm: pic: non byte write [ 68.318970][ T1045] usb 7-1: no configurations [ 68.320713][ T1045] usb 7-1: can't read configurations, error -22 [ 68.323439][ T1045] usb usb7-port1: unable to enumerate USB device [ 68.381277][ T6656] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 68.386086][ T6656] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 68.391711][ T6656] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 68.396287][ T6656] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 68.401194][ T6656] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 68.406001][ T6656] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 68.430470][ T6656] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.434014][ T6656] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.516164][ T6660] netlink: 8 bytes leftover after parsing attributes in process `syz.1.221'. [ 68.526164][ T6660] erspan0: entered promiscuous mode [ 68.584024][ T6665] FAULT_INJECTION: forcing a failure. [ 68.584024][ T6665] name failslab, interval 1, probability 0, space 0, times 0 [ 68.589223][ T6665] CPU: 3 UID: 0 PID: 6665 Comm: syz.3.223 Tainted: G L syzkaller #0 PREEMPT(full) [ 68.589242][ T6665] Tainted: [L]=SOFTLOCKUP [ 68.589246][ T6665] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 68.589252][ T6665] Call Trace: [ 68.589257][ T6665] [ 68.589263][ T6665] dump_stack_lvl+0x100/0x190 [ 68.589284][ T6665] should_fail_ex.cold+0x5/0xa [ 68.589300][ T6665] should_failslab+0xc2/0x120 [ 68.589316][ T6665] __kmalloc_noprof+0xfc/0x820 [ 68.589330][ T6665] ? tomoyo_encode2+0xfb/0x3c0 [ 68.589344][ T6665] tomoyo_encode2+0xfb/0x3c0 [ 68.589355][ T6665] ? __get_fs_type+0xe3/0x200 [ 68.589371][ T6665] tomoyo_encode+0x29/0x50 [ 68.589381][ T6665] tomoyo_mount_acl+0x388/0x8b0 [ 68.589399][ T6665] ? is_bpf_text_address+0x8a/0x1a0 [ 68.589415][ T6665] ? bpf_ksym_find+0x128/0x1c0 [ 68.589434][ T6665] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 68.589451][ T6665] ? kernel_text_address+0x8d/0x100 [ 68.589465][ T6665] ? unwind_get_return_address+0x59/0xa0 [ 68.589490][ T6665] ? tomoyo_domain+0xb2/0x150 [ 68.589503][ T6665] ? tomoyo_profile+0x47/0x60 [ 68.589516][ T6665] tomoyo_mount_permission+0x214/0x460 [ 68.589534][ T6665] ? tomoyo_mount_permission+0x1f6/0x460 [ 68.589552][ T6665] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 68.589578][ T6665] security_sb_mount+0xdd/0x270 [ 68.589601][ T6665] path_mount+0x158/0x23d0 [ 68.589618][ T6665] ? __pfx_path_mount+0x10/0x10 [ 68.589631][ T6665] ? lockdep_hardirqs_on+0x78/0x100 [ 68.589647][ T6665] ? putname+0xb1/0x110 [ 68.589659][ T6665] ? kmem_cache_free+0x127/0x6b0 [ 68.589674][ T6665] ? __x64_sys_mount+0x293/0x310 [ 68.589689][ T6665] __x64_sys_mount+0x293/0x310 [ 68.589704][ T6665] ? __pfx___x64_sys_mount+0x10/0x10 [ 68.589723][ T6665] do_syscall_64+0x115/0x870 [ 68.589735][ T6665] ? clear_bhb_loop+0x40/0x90 [ 68.589749][ T6665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.589760][ T6665] RIP: 0033:0x7f37ac59de99 [ 68.589771][ T6665] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.589782][ T6665] RSP: 002b:00007f37ad3c3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 68.589794][ T6665] RAX: ffffffffffffffda RBX: 00007f37ac825fa0 RCX: 00007f37ac59de99 [ 68.589801][ T6665] RDX: 0000200000004500 RSI: 00002000000000c0 RDI: 0000000000000000 [ 68.589807][ T6665] RBP: 00007f37ad3c3090 R08: 0000200000000300 R09: 0000000000000000 [ 68.589814][ T6665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 68.589820][ T6665] R13: 00007f37ac826038 R14: 00007f37ac825fa0 R15: 00007ffd3ff1f688 [ 68.589834][ T6665] [ 68.696764][ T6677] xt_hashlimit: size too large, truncated to 1048576 [ 68.769748][ T6677] xt_hashlimit: size too large, truncated to 1048576 [ 68.827417][ T6677] xt_hashlimit: size too large, truncated to 1048576 [ 68.880123][ T6677] xt_hashlimit: size too large, truncated to 1048576 [ 68.933289][ T6677] xt_hashlimit: size too large, truncated to 1048576 [ 68.999846][ T6677] xt_hashlimit: size too large, truncated to 1048576 [ 69.074991][ T6677] xt_hashlimit: size too large, truncated to 1048576 [ 69.153414][ T6677] xt_hashlimit: size too large, truncated to 1048576 [ 69.224741][ T6677] xt_hashlimit: size too large, truncated to 1048576 [ 69.294914][ T6677] xt_hashlimit: size too large, truncated to 1048576 [ 69.749655][ T6711] comedi comedi0: Minor 3 could not be opened [ 69.756488][ T6711] openvswitch: netlink: Unexpected mask (mask=4000010, allowed=10058) [ 69.957448][ T6724] FAULT_INJECTION: forcing a failure. [ 69.957448][ T6724] name failslab, interval 1, probability 0, space 0, times 0 [ 69.962069][ T6724] CPU: 3 UID: 0 PID: 6724 Comm: syz.1.236 Tainted: G L syzkaller #0 PREEMPT(full) [ 69.962097][ T6724] Tainted: [L]=SOFTLOCKUP [ 69.962103][ T6724] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 69.962114][ T6724] Call Trace: [ 69.962121][ T6724] [ 69.962128][ T6724] dump_stack_lvl+0x100/0x190 [ 69.962157][ T6724] should_fail_ex.cold+0x5/0xa [ 69.962182][ T6724] should_failslab+0xc2/0x120 [ 69.962206][ T6724] __kmalloc_cache_noprof+0x91/0x6c0 [ 69.962235][ T6724] ? find_held_lock+0x2b/0x80 [ 69.962262][ T6724] ? alloc_fs_context+0x57/0xf40 [ 69.962289][ T6724] alloc_fs_context+0x57/0xf40 [ 69.962310][ T6724] ? __get_fs_type+0xe3/0x200 [ 69.962334][ T6724] path_mount+0xdbd/0x23d0 [ 69.962359][ T6724] ? __pfx_path_mount+0x10/0x10 [ 69.962379][ T6724] ? lockdep_hardirqs_on+0x78/0x100 [ 69.962402][ T6724] ? putname+0xb1/0x110 [ 69.962420][ T6724] ? kmem_cache_free+0x127/0x6b0 [ 69.962445][ T6724] ? __x64_sys_mount+0x293/0x310 [ 69.962465][ T6724] __x64_sys_mount+0x293/0x310 [ 69.962488][ T6724] ? __pfx___x64_sys_mount+0x10/0x10 [ 69.962515][ T6724] do_syscall_64+0x115/0x870 [ 69.962534][ T6724] ? clear_bhb_loop+0x40/0x90 [ 69.962555][ T6724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.962572][ T6724] RIP: 0033:0x7f792619de99 [ 69.962589][ T6724] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.962605][ T6724] RSP: 002b:00007f7926ffa028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 69.962622][ T6724] RAX: ffffffffffffffda RBX: 00007f7926425fa0 RCX: 00007f792619de99 [ 69.962634][ T6724] RDX: 0000200000004500 RSI: 00002000000000c0 RDI: 0000000000000000 [ 69.962645][ T6724] RBP: 00007f7926ffa090 R08: 0000200000000300 R09: 0000000000000000 [ 69.962655][ T6724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 69.962665][ T6724] R13: 00007f7926426038 R14: 00007f7926425fa0 R15: 00007ffcfba0f508 [ 69.962705][ T6724] [ 70.047563][ T6726] netlink: 12 bytes leftover after parsing attributes in process `syz.2.237'. [ 70.073159][ T6728] nbd: must specify a device to reconfigure [ 70.080885][ T6730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.239'. [ 70.092634][ T6730] warning: `syz.2.239' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 70.238376][ T6749] FAULT_INJECTION: forcing a failure. [ 70.238376][ T6749] name failslab, interval 1, probability 0, space 0, times 0 [ 70.243649][ T6749] CPU: 1 UID: 0 PID: 6749 Comm: syz.1.247 Tainted: G L syzkaller #0 PREEMPT(full) [ 70.243676][ T6749] Tainted: [L]=SOFTLOCKUP [ 70.243682][ T6749] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 70.243692][ T6749] Call Trace: [ 70.243699][ T6749] [ 70.243706][ T6749] dump_stack_lvl+0x100/0x190 [ 70.243736][ T6749] should_fail_ex.cold+0x5/0xa [ 70.243759][ T6749] should_failslab+0xc2/0x120 [ 70.243784][ T6749] __kmalloc_cache_noprof+0x91/0x6c0 [ 70.243811][ T6749] ? v9fs_init_fs_context+0x47/0x5c0 [ 70.243855][ T6749] v9fs_init_fs_context+0x47/0x5c0 [ 70.243880][ T6749] alloc_fs_context+0x60c/0xf40 [ 70.243909][ T6749] path_mount+0xdbd/0x23d0 [ 70.243935][ T6749] ? __pfx_path_mount+0x10/0x10 [ 70.243957][ T6749] ? lockdep_hardirqs_on+0x78/0x100 [ 70.243980][ T6749] ? putname+0xb1/0x110 [ 70.244000][ T6749] ? kmem_cache_free+0x127/0x6b0 [ 70.244026][ T6749] ? __x64_sys_mount+0x293/0x310 [ 70.244047][ T6749] __x64_sys_mount+0x293/0x310 [ 70.244069][ T6749] ? __pfx___x64_sys_mount+0x10/0x10 [ 70.244095][ T6749] do_syscall_64+0x115/0x870 [ 70.244113][ T6749] ? clear_bhb_loop+0x40/0x90 [ 70.244134][ T6749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.244158][ T6749] RIP: 0033:0x7f792619de99 [ 70.244173][ T6749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.244189][ T6749] RSP: 002b:00007f7926ffa028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 70.244207][ T6749] RAX: ffffffffffffffda RBX: 00007f7926425fa0 RCX: 00007f792619de99 [ 70.244219][ T6749] RDX: 0000200000004500 RSI: 00002000000000c0 RDI: 0000000000000000 [ 70.244229][ T6749] RBP: 00007f7926ffa090 R08: 0000200000000300 R09: 0000000000000000 [ 70.244239][ T6749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 70.244249][ T6749] R13: 00007f7926426038 R14: 00007f7926425fa0 R15: 00007ffcfba0f508 [ 70.244273][ T6749] [ 70.380806][ T6761] overlayfs: missing 'workdir' [ 70.532197][ T6772] overlayfs: failed to resolve './cgroup': -2 [ 70.535115][ T6772] overlayfs: failed to resolve './cgroup': -2 [ 70.538144][ T6772] overlayfs: failed to resolve './cgroup': -2 [ 70.540865][ T6772] overlayfs: failed to resolve './cgroup': -2 [ 70.543605][ T6772] overlayfs: failed to resolve './cgroup': -2 [ 70.546329][ T6772] overlayfs: failed to resolve './cgroup': -2 [ 70.549163][ T6772] overlayfs: failed to resolve './cgroup': -2 [ 70.552004][ T6772] overlayfs: failed to resolve './cgroup': -2 [ 70.555067][ T6772] overlayfs: failed to resolve './cgroup': -2 [ 70.559317][ T6772] overlayfs: failed to resolve './cgroup': -2 [ 70.561966][ T6772] overlayfs: failed to resolve './cgroup': -2 [ 70.567182][ T6772] overlayfs: failed to resolve './cgroup': -2 [ 70.570212][ T6772] overlayfs: failed to resolve './cgroup': -2 [ 70.572829][ T6772] overlayfs: failed to resolve './cgroup': -2 [ 70.575235][ T6772] overlayfs: failed to resolve './cgroup': -2 [ 70.577600][ T6772] overlayfs: failed to resolve './cgroup': -2 [ 70.580334][ T6772] overlayfs: failed to resolve './cgroup': -2 [ 70.582761][ T6772] overlayfs: failed to resolve './cgroup': -2 [ 70.585365][ T6772] overlayfs: failed to resolve './cgroup': -2 [ 70.588459][ T6772] overlayfs: failed to resolve './cgroup': -2 [ 70.591571][ T6772] overlayfs: failed to resolve './cgroup': -2 [ 70.594714][ T6772] overlayfs: failed to resolve './cgroup': -2 [ 70.598278][ T6772] overlayfs: failed to resolve './cgroup': -2 [ 70.600800][ T6772] overlayfs: failed to resolve './cgroup': -2 [ 70.604092][ T6772] overlayfs: failed to resolve './cgroup': -2 [ 70.607583][ T6772] overlayfs: failed to resolve './cgroup': -2 [ 70.612179][ T6772] overlayfs: failed to resolve './cgroup': -2 [ 70.615471][ T6772] overlayfs: failed to resolve './cgroup': -2 [ 70.619444][ T6772] overlayfs: failed to resolve './cgroup': -2 [ 70.622885][ T6772] overlayfs: failed to resolve './cgroup': -2 [ 70.626096][ T6772] overlayfs: failed to resolve './cgroup': -2 [ 70.630359][ T6772] overlayfs: failed to resolve './cgroup': -2 [ 70.633926][ T6772] overlayfs: failed to resolve './cgroup': -2 [ 70.637997][ T6772] overlayfs: failed to resolve './cgroup': -2 [ 70.640405][ T6772] overlayfs: failed to resolve './cgroup': -2 [ 70.643348][ T6772] overlayfs: failed to resolve './cgroup': -2 [ 70.645136][ T6780] FAULT_INJECTION: forcing a failure. [ 70.645136][ T6780] name failslab, interval 1, probability 0, space 0, times 0 [ 70.650868][ T6772] overlayfs: failed to resolve './cgroup': -2 [ 70.652075][ T6780] CPU: 0 UID: 0 PID: 6780 Comm: syz.2.258 Tainted: G L syzkaller #0 PREEMPT(full) [ 70.652101][ T6780] Tainted: [L]=SOFTLOCKUP [ 70.652106][ T6780] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 70.652114][ T6780] Call Trace: [ 70.652125][ T6780] [ 70.652133][ T6780] dump_stack_lvl+0x100/0x190 [ 70.652162][ T6780] should_fail_ex.cold+0x5/0xa [ 70.652186][ T6780] should_failslab+0xc2/0x120 [ 70.652207][ T6780] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 70.652229][ T6780] ? __kasan_kmalloc+0xaa/0xb0 [ 70.652250][ T6780] ? v9fs_init_fs_context+0x13d/0x5c0 [ 70.652281][ T6780] kstrdup+0x51/0xe0 [ 70.652298][ T6780] v9fs_init_fs_context+0x13d/0x5c0 [ 70.652324][ T6780] alloc_fs_context+0x60c/0xf40 [ 70.652352][ T6780] path_mount+0xdbd/0x23d0 [ 70.652377][ T6780] ? __pfx_path_mount+0x10/0x10 [ 70.652394][ T6780] ? lockdep_hardirqs_on+0x78/0x100 [ 70.652418][ T6780] ? putname+0xb1/0x110 [ 70.652436][ T6780] ? kmem_cache_free+0x127/0x6b0 [ 70.652461][ T6780] ? __x64_sys_mount+0x293/0x310 [ 70.652480][ T6780] __x64_sys_mount+0x293/0x310 [ 70.652522][ T6780] ? __pfx___x64_sys_mount+0x10/0x10 [ 70.652551][ T6780] do_syscall_64+0x115/0x870 [ 70.652569][ T6780] ? clear_bhb_loop+0x40/0x90 [ 70.652589][ T6780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.652607][ T6780] RIP: 0033:0x7f6e4899de99 [ 70.652622][ T6780] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.652638][ T6780] RSP: 002b:00007f6e498a8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 70.652657][ T6780] RAX: ffffffffffffffda RBX: 00007f6e48c25fa0 RCX: 00007f6e4899de99 [ 70.652669][ T6780] RDX: 0000200000004500 RSI: 00002000000000c0 RDI: 0000000000000000 [ 70.652679][ T6780] RBP: 00007f6e498a8090 R08: 0000200000000300 R09: 0000000000000000 [ 70.652686][ T6780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 70.652711][ T6780] R13: 00007f6e48c26038 R14: 00007f6e48c25fa0 R15: 00007ffde7ceb8a8 [ 70.652734][ T6780] [ 70.688532][ T5821] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 70.734136][ T6772] overlayfs: failed to resolve './cgroup': -2 [ 70.736953][ T6772] overlayfs: failed to resolve './cgroup': -2 [ 70.739578][ T6772] overlayfs: failed to resolve './cgroup': -2 [ 70.742256][ T6772] overlayfs: failed to resolve './cgroup': -2 [ 70.745406][ T6772] overlayfs: failed to resolve './cgroup': -2 [ 70.746146][ T6782] "syz.2.259" (6782) uses obsolete ecb(arc4) skcipher [ 70.751066][ T6772] overlayfs: failed to resolve './cgroup': -2 [ 70.753874][ T6772] overlayfs: failed to resolve './cgroup': -2 [ 70.756883][ T6772] overlayfs: failed to resolve './cgroup': -2 [ 70.762838][ T6772] overlayfs: failed to resolve './cgroup': -2 [ 70.766283][ T6772] overlayfs: failed to resolve './cgroup': -2 [ 70.771219][ T6772] overlayfs: failed to resolve './cgroup': -2 [ 70.774164][ T6772] overlayfs: failed to resolve './cgroup': -2 [ 70.777075][ T6772] overlayfs: failed to resolve './cgroup': -2 [ 70.780676][ T6772] overlayfs: failed to resolve './cgroup': -2 [ 70.785116][ T6772] overlayfs: failed to resolve './cgroup': -2 [ 70.788222][ T6772] overlayfs: failed to resolve './cgroup': -2 [ 70.791289][ T6772] overlayfs: failed to resolve './cgroup': -2 [ 70.794259][ T6772] overlayfs: failed to resolve './cgroup': -2 [ 70.797340][ T6772] overlayfs: failed to resolve './cgroup': -2 [ 70.799853][ T6772] overlayfs: failed to resolve './cgroup': -2 [ 70.803537][ T6772] overlayfs: failed to resolve './cgroup': -2 [ 70.805784][ T6772] overlayfs: failed to resolve './cgroup': -2 [ 70.810464][ T6772] overlayfs: failed to resolve './cgroup': -2 [ 70.814124][ T6772] overlayfs: failed to resolve './cgroup': -2 [ 70.816711][ T6772] overlayfs: failed to resolve './cgroup': -2 [ 70.819716][ T6772] overlayfs: failed to resolve './cgroup': -2 [ 70.822452][ T6772] overlayfs: failed to resolve './cgroup': -2 [ 70.825556][ T6790] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 70.829039][ T6790] SELinux: failed to load policy [ 70.871572][ T6792] comedi comedi2: pcl726: I/O base address or length out of range [ 70.889455][ T5821] usb 8-1: Using ep0 maxpacket: 32 [ 70.893828][ T5821] usb 8-1: unable to get BOS descriptor or descriptor too short [ 70.900240][ T6794] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 70.903662][ T5821] usb 8-1: string descriptor 0 read error: -22 [ 70.905701][ T5821] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 70.909123][ T5821] usb 8-1: New USB device strings: Mfr=1, Product=252, SerialNumber=3 [ 70.915950][ T5821] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 70.920086][ T5821] dw2102: su3000_power_ctrl: 1, initialized 0 [ 70.922349][ T5821] dvb-usb: bulk message failed: -22 (2/0) [ 70.931841][ T5821] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 70.934223][ T6799] 9p: Bad value for 'wfdno' [ 70.935816][ T5821] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 70.940209][ T5821] usb 8-1: media controller created [ 70.942767][ T5821] dvb-usb: bulk message failed: -22 (6/0) [ 70.945294][ T5821] dw2102: i2c transfer failed. [ 70.947466][ T5821] dvb-usb: bulk message failed: -22 (6/0) [ 70.950045][ T5821] dw2102: i2c transfer failed. [ 70.951908][ T5821] dvb-usb: bulk message failed: -22 (6/0) [ 70.953776][ T5821] dw2102: i2c transfer failed. [ 70.955339][ T5821] dvb-usb: bulk message failed: -22 (6/0) [ 70.957113][ T5821] dw2102: i2c transfer failed. [ 70.959829][ T5821] dvb-usb: bulk message failed: -22 (6/0) [ 70.962069][ T5821] dw2102: i2c transfer failed. [ 70.965811][ T5821] dvb-usb: bulk message failed: -22 (6/0) [ 70.969260][ T5821] dw2102: i2c transfer failed. [ 70.971075][ T5821] dvb-usb: MAC address: 02:02:02:02:02:02 [ 70.982431][ T5821] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 70.996143][ T5821] dvb-usb: bulk message failed: -22 (3/0) [ 70.998977][ T5821] dw2102: command 0x0e transfer failed. [ 71.001116][ T5821] dvb-usb: bulk message failed: -22 (3/0) [ 71.003141][ T5821] dw2102: command 0x0e transfer failed. [ 71.174747][ T6805] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 71.311822][ T5821] dvb-usb: bulk message failed: -22 (3/0) [ 71.313085][ T1445] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.315846][ T5821] dw2102: command 0x0e transfer failed. [ 71.319578][ T5821] dvb-usb: bulk message failed: -22 (3/0) [ 71.321611][ T5821] dw2102: command 0x0e transfer failed. [ 71.323558][ T5821] dvb-usb: bulk message failed: -22 (1/0) [ 71.325747][ T5821] dw2102: command 0x51 transfer failed. [ 71.331372][ T6769] dvb-usb: bulk message failed: -22 (5/0) [ 71.334378][ T6769] dw2102: i2c transfer failed. [ 71.346342][ T5821] DVB: Unable to find symbol ds3000_attach() [ 71.348955][ T5821] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 71.407939][ T5821] rc_core: IR keymap rc-su3000 not found [ 71.410395][ T5821] Registered IR keymap rc-empty [ 71.417923][ T5821] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0 [ 71.423225][ T5821] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0/input8 [ 71.434521][ T5821] dvb-usb: schedule remote query interval to 150 msecs. [ 71.437410][ T5821] dw2102: su3000_power_ctrl: 0, initialized 1 [ 71.440137][ T5821] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 71.446210][ T5821] usb 8-1: USB disconnect, device number 3 [ 71.486263][ T5821] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 71.804044][ T6811] FAULT_INJECTION: forcing a failure. [ 71.804044][ T6811] name failslab, interval 1, probability 0, space 0, times 0 [ 71.809117][ T6811] CPU: 3 UID: 0 PID: 6811 Comm: syz.2.267 Tainted: G L syzkaller #0 PREEMPT(full) [ 71.809171][ T6811] Tainted: [L]=SOFTLOCKUP [ 71.809178][ T6811] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 71.809188][ T6811] Call Trace: [ 71.809194][ T6811] [ 71.809202][ T6811] dump_stack_lvl+0x100/0x190 [ 71.809230][ T6811] should_fail_ex.cold+0x5/0xa [ 71.809253][ T6811] should_failslab+0xc2/0x120 [ 71.809276][ T6811] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 71.809297][ T6811] ? __kasan_kmalloc+0x30/0xb0 [ 71.809316][ T6811] ? v9fs_init_fs_context+0x17f/0x5c0 [ 71.809345][ T6811] kstrdup+0x51/0xe0 [ 71.809366][ T6811] v9fs_init_fs_context+0x17f/0x5c0 [ 71.809389][ T6811] alloc_fs_context+0x60c/0xf40 [ 71.809417][ T6811] path_mount+0xdbd/0x23d0 [ 71.809443][ T6811] ? __pfx_path_mount+0x10/0x10 [ 71.809462][ T6811] ? lockdep_hardirqs_on+0x78/0x100 [ 71.809485][ T6811] ? putname+0xb1/0x110 [ 71.809502][ T6811] ? kmem_cache_free+0x127/0x6b0 [ 71.809526][ T6811] ? __x64_sys_mount+0x293/0x310 [ 71.809546][ T6811] __x64_sys_mount+0x293/0x310 [ 71.809567][ T6811] ? __pfx___x64_sys_mount+0x10/0x10 [ 71.809595][ T6811] do_syscall_64+0x115/0x870 [ 71.809614][ T6811] ? clear_bhb_loop+0x40/0x90 [ 71.809635][ T6811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.809652][ T6811] RIP: 0033:0x7f6e4899de99 [ 71.809667][ T6811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.809683][ T6811] RSP: 002b:00007f6e498a8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 71.809701][ T6811] RAX: ffffffffffffffda RBX: 00007f6e48c25fa0 RCX: 00007f6e4899de99 [ 71.809711][ T6811] RDX: 0000200000004500 RSI: 00002000000000c0 RDI: 0000000000000000 [ 71.809721][ T6811] RBP: 00007f6e498a8090 R08: 0000200000000300 R09: 0000000000000000 [ 71.809730][ T6811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 71.809739][ T6811] R13: 00007f6e48c26038 R14: 00007f6e48c25fa0 R15: 00007ffde7ceb8a8 [ 71.809762][ T6811] [ 71.915201][ T6818] mmap: syz.3.269 (6818) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 71.927199][ T6823] netlink: 20 bytes leftover after parsing attributes in process `syz.2.271'. [ 72.026925][ T6835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.031379][ T6835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.034800][ T6836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.038641][ T6836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.042785][ T6835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.046219][ T6835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.050808][ T6835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.053746][ T6835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.096925][ T6840] netlink: 128 bytes leftover after parsing attributes in process `syz.2.276'. [ 72.149764][ T6842] FAULT_INJECTION: forcing a failure. [ 72.149764][ T6842] name failslab, interval 1, probability 0, space 0, times 0 [ 72.153829][ T6842] CPU: 3 UID: 0 PID: 6842 Comm: syz.2.277 Tainted: G L syzkaller #0 PREEMPT(full) [ 72.153847][ T6842] Tainted: [L]=SOFTLOCKUP [ 72.153851][ T6842] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.153858][ T6842] Call Trace: [ 72.153862][ T6842] [ 72.153867][ T6842] dump_stack_lvl+0x100/0x190 [ 72.153888][ T6842] should_fail_ex.cold+0x5/0xa [ 72.153904][ T6842] should_failslab+0xc2/0x120 [ 72.153920][ T6842] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 72.153936][ T6842] ? vfs_parse_fs_qstr+0x112/0x1c0 [ 72.153958][ T6842] kmemdup_nul+0x49/0xd0 [ 72.153972][ T6842] vfs_parse_fs_qstr+0x112/0x1c0 [ 72.153988][ T6842] ? __pfx_vfs_parse_fs_qstr+0x10/0x10 [ 72.154007][ T6842] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 72.154023][ T6842] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 72.154037][ T6842] vfs_parse_monolithic_sep+0x195/0x210 [ 72.154054][ T6842] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 72.154070][ T6842] ? v9fs_init_fs_context+0x465/0x5c0 [ 72.154087][ T6842] ? alloc_fs_context+0x65a/0xf40 [ 72.154104][ T6842] path_mount+0x77f/0x23d0 [ 72.154122][ T6842] ? __pfx_path_mount+0x10/0x10 [ 72.154135][ T6842] ? lockdep_hardirqs_on+0x78/0x100 [ 72.154150][ T6842] ? putname+0xb1/0x110 [ 72.154162][ T6842] ? kmem_cache_free+0x127/0x6b0 [ 72.154177][ T6842] ? __x64_sys_mount+0x293/0x310 [ 72.154191][ T6842] __x64_sys_mount+0x293/0x310 [ 72.154206][ T6842] ? __pfx___x64_sys_mount+0x10/0x10 [ 72.154224][ T6842] do_syscall_64+0x115/0x870 [ 72.154236][ T6842] ? clear_bhb_loop+0x40/0x90 [ 72.154250][ T6842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.154262][ T6842] RIP: 0033:0x7f6e4899de99 [ 72.154272][ T6842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.154283][ T6842] RSP: 002b:00007f6e498a8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 72.154295][ T6842] RAX: ffffffffffffffda RBX: 00007f6e48c25fa0 RCX: 00007f6e4899de99 [ 72.154301][ T6842] RDX: 0000200000004500 RSI: 00002000000000c0 RDI: 0000000000000000 [ 72.154308][ T6842] RBP: 00007f6e498a8090 R08: 0000200000000300 R09: 0000000000000000 [ 72.154314][ T6842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 72.154320][ T6842] R13: 00007f6e48c26038 R14: 00007f6e48c25fa0 R15: 00007ffde7ceb8a8 [ 72.154334][ T6842] [ 72.291008][ T42] kauditd_printk_skb: 22 callbacks suppressed [ 72.291027][ T42] audit: type=1400 audit(1785350932.682:524): avc: denied { read } for pid=6846 comm="syz.2.279" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 72.303014][ T42] audit: type=1400 audit(1785350932.682:525): avc: denied { open } for pid=6846 comm="syz.2.279" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 72.432274][ T42] audit: type=1400 audit(1785350932.822:526): avc: denied { ioctl } for pid=6853 comm="syz.2.281" path="socket:[15589]" dev="sockfs" ino=15589 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 72.841243][ T6861] netlink: 8 bytes leftover after parsing attributes in process `syz.1.284'. [ 72.844010][ T6861] netlink: 12 bytes leftover after parsing attributes in process `syz.1.284'. [ 72.941816][ T6863] netlink: 40 bytes leftover after parsing attributes in process `syz.3.283'. [ 72.991198][ T6871] FAULT_INJECTION: forcing a failure. [ 72.991198][ T6871] name failslab, interval 1, probability 0, space 0, times 0 [ 72.995213][ T6871] CPU: 2 UID: 0 PID: 6871 Comm: syz.1.286 Tainted: G L syzkaller #0 PREEMPT(full) [ 72.995240][ T6871] Tainted: [L]=SOFTLOCKUP [ 72.995246][ T6871] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.995272][ T6871] Call Trace: [ 72.995293][ T6871] [ 72.995301][ T6871] dump_stack_lvl+0x100/0x190 [ 72.995391][ T6871] should_fail_ex.cold+0x5/0xa [ 72.995439][ T6871] should_failslab+0xc2/0x120 [ 72.995481][ T6871] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 72.995504][ T6871] ? kasan_quarantine_put+0x104/0x240 [ 72.995524][ T6871] ? lockdep_hardirqs_on+0x78/0x100 [ 72.995588][ T6871] ? vfs_parse_fs_qstr+0x112/0x1c0 [ 72.995624][ T6871] kmemdup_nul+0x49/0xd0 [ 72.995646][ T6871] vfs_parse_fs_qstr+0x112/0x1c0 [ 72.995670][ T6871] ? __pfx_vfs_parse_fs_qstr+0x10/0x10 [ 72.995701][ T6871] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 72.995725][ T6871] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 72.995748][ T6871] vfs_parse_monolithic_sep+0x195/0x210 [ 72.995774][ T6871] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 72.995796][ T6871] ? v9fs_init_fs_context+0x465/0x5c0 [ 72.995845][ T6871] ? alloc_fs_context+0x65a/0xf40 [ 72.995872][ T6871] path_mount+0x77f/0x23d0 [ 72.995899][ T6871] ? __pfx_path_mount+0x10/0x10 [ 72.995919][ T6871] ? lockdep_hardirqs_on+0x78/0x100 [ 72.995946][ T6871] ? putname+0xb1/0x110 [ 72.995964][ T6871] ? kmem_cache_free+0x127/0x6b0 [ 72.995990][ T6871] ? __x64_sys_mount+0x293/0x310 [ 72.996012][ T6871] __x64_sys_mount+0x293/0x310 [ 72.996035][ T6871] ? __pfx___x64_sys_mount+0x10/0x10 [ 72.996065][ T6871] do_syscall_64+0x115/0x870 [ 72.996083][ T6871] ? clear_bhb_loop+0x40/0x90 [ 72.996107][ T6871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.996125][ T6871] RIP: 0033:0x7f792619de99 [ 72.996143][ T6871] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.996161][ T6871] RSP: 002b:00007f7926ffa028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 72.996189][ T6871] RAX: ffffffffffffffda RBX: 00007f7926425fa0 RCX: 00007f792619de99 [ 72.996200][ T6871] RDX: 0000200000004500 RSI: 00002000000000c0 RDI: 0000000000000000 [ 72.996211][ T6871] RBP: 00007f7926ffa090 R08: 0000200000000300 R09: 0000000000000000 [ 72.996222][ T6871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 72.996233][ T6871] R13: 00007f7926426038 R14: 00007f7926425fa0 R15: 00007ffcfba0f508 [ 72.996257][ T6871] [ 73.113400][ T6873] netlink: 32 bytes leftover after parsing attributes in process `syz.1.287'. [ 73.578286][ T40] Bluetooth: hci4: Frame reassembly failed (-84) [ 73.598091][ T5889] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 73.747912][ T5889] usb 8-1: Using ep0 maxpacket: 16 [ 73.753497][ T5889] usb 8-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 73.757196][ T5889] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.760396][ T5889] usb 8-1: Product: syz [ 73.762077][ T5889] usb 8-1: Manufacturer: syz [ 73.763915][ T5889] usb 8-1: SerialNumber: syz [ 73.975820][ T42] audit: type=1400 audit(1785350934.362:527): avc: denied { mount } for pid=6883 comm="syz.3.292" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 73.981005][ T5889] usb 8-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 73.989428][ T5889] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 73.992817][ T5889] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 73.996783][ T5889] usb 8-1: media controller created [ 74.005569][ T5889] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 74.230521][ T5889] zl10353_read_register: readreg error (reg=127, ret==-110) [ 74.250911][ T5889] dvb_usb_gl861 8-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 74.255086][ T5889] usb 8-1: USB disconnect, device number 4 [ 74.448864][ T42] audit: type=1400 audit(1785350934.842:528): avc: denied { write } for pid=6895 comm="syz.1.294" name="ptp1" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 74.449703][ T6897] netlink: 8 bytes leftover after parsing attributes in process `syz.1.294'. [ 74.458705][ T6897] netlink: 12 bytes leftover after parsing attributes in process `syz.1.294'. [ 74.641751][ T42] audit: type=1400 audit(1785350935.032:529): avc: denied { append } for pid=6899 comm="syz.1.295" name="loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 74.652538][ T6900] loop5: detected capacity change from 0 to 7 [ 74.660617][ T6900] Dev loop5: unable to read RDB block 7 [ 74.664637][ T6900] loop5: AHDI p2 p4 [ 74.665939][ T6900] loop5: partition table partially beyond EOD, truncated [ 74.671028][ T6900] loop5: p4 start 252 is beyond EOD, truncated [ 74.703243][ T6902] FAULT_INJECTION: forcing a failure. [ 74.703243][ T6902] name failslab, interval 1, probability 0, space 0, times 0 [ 74.707513][ T6902] CPU: 0 UID: 0 PID: 6902 Comm: syz.1.296 Tainted: G L syzkaller #0 PREEMPT(full) [ 74.707533][ T6902] Tainted: [L]=SOFTLOCKUP [ 74.707537][ T6902] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.707552][ T6902] Call Trace: [ 74.707558][ T6902] [ 74.707564][ T6902] dump_stack_lvl+0x100/0x190 [ 74.707689][ T6902] should_fail_ex.cold+0x5/0xa [ 74.707718][ T6902] should_failslab+0xc2/0x120 [ 74.707748][ T6902] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 74.707763][ T6902] ? kasan_quarantine_put+0x104/0x240 [ 74.707788][ T6902] ? lockdep_hardirqs_on+0x78/0x100 [ 74.707841][ T6902] ? vfs_parse_fs_qstr+0x112/0x1c0 [ 74.707865][ T6902] kmemdup_nul+0x49/0xd0 [ 74.707881][ T6902] vfs_parse_fs_qstr+0x112/0x1c0 [ 74.707897][ T6902] ? __pfx_vfs_parse_fs_qstr+0x10/0x10 [ 74.707916][ T6902] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 74.707944][ T6902] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 74.707972][ T6902] vfs_parse_monolithic_sep+0x195/0x210 [ 74.707989][ T6902] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 74.708005][ T6902] ? v9fs_init_fs_context+0x465/0x5c0 [ 74.708042][ T6902] ? alloc_fs_context+0x65a/0xf40 [ 74.708060][ T6902] path_mount+0x77f/0x23d0 [ 74.708078][ T6902] ? __pfx_path_mount+0x10/0x10 [ 74.708092][ T6902] ? lockdep_hardirqs_on+0x78/0x100 [ 74.708106][ T6902] ? putname+0xb1/0x110 [ 74.708119][ T6902] ? kmem_cache_free+0x127/0x6b0 [ 74.708134][ T6902] ? __x64_sys_mount+0x293/0x310 [ 74.708149][ T6902] __x64_sys_mount+0x293/0x310 [ 74.708164][ T6902] ? __pfx___x64_sys_mount+0x10/0x10 [ 74.708183][ T6902] do_syscall_64+0x115/0x870 [ 74.708195][ T6902] ? clear_bhb_loop+0x40/0x90 [ 74.708211][ T6902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.708224][ T6902] RIP: 0033:0x7f792619de99 [ 74.708240][ T6902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.708257][ T6902] RSP: 002b:00007f7926ffa028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 74.708284][ T6902] RAX: ffffffffffffffda RBX: 00007f7926425fa0 RCX: 00007f792619de99 [ 74.708295][ T6902] RDX: 0000200000004500 RSI: 00002000000000c0 RDI: 0000000000000000 [ 74.708308][ T6902] RBP: 00007f7926ffa090 R08: 0000200000000300 R09: 0000000000000000 [ 74.708320][ T6902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 74.708330][ T6902] R13: 00007f7926426038 R14: 00007f7926425fa0 R15: 00007ffcfba0f508 [ 74.708348][ T6902] [ 74.815277][ T42] audit: type=1400 audit(1785350935.202:530): avc: denied { getopt } for pid=6904 comm="syz.1.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 74.902487][ T42] audit: type=1400 audit(1785350935.282:531): avc: denied { append } for pid=6910 comm="syz.3.300" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 74.918790][ T6911] geneve1: entered allmulticast mode [ 74.983515][ T42] audit: type=1400 audit(1785350935.372:532): avc: denied { mount } for pid=6922 comm="syz.1.303" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 74.991358][ T42] audit: type=1400 audit(1785350935.382:533): avc: denied { remount } for pid=6922 comm="syz.1.303" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 75.274447][ T6936] FAULT_INJECTION: forcing a failure. [ 75.274447][ T6936] name failslab, interval 1, probability 0, space 0, times 0 [ 75.278532][ T6936] CPU: 1 UID: 0 PID: 6936 Comm: syz.3.306 Tainted: G L syzkaller #0 PREEMPT(full) [ 75.278566][ T6936] Tainted: [L]=SOFTLOCKUP [ 75.278573][ T6936] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 75.278582][ T6936] Call Trace: [ 75.278590][ T6936] [ 75.278597][ T6936] dump_stack_lvl+0x100/0x190 [ 75.278632][ T6936] should_fail_ex.cold+0x5/0xa [ 75.278656][ T6936] should_failslab+0xc2/0x120 [ 75.278675][ T6936] __kmalloc_cache_noprof+0x91/0x6c0 [ 75.278694][ T6936] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 75.278737][ T6936] ? v9fs_get_tree+0x9c/0xb50 [ 75.278757][ T6936] v9fs_get_tree+0x9c/0xb50 [ 75.278772][ T6936] ? rcu_is_watching+0x12/0xc0 [ 75.278801][ T6936] ? __pfx_v9fs_get_tree+0x10/0x10 [ 75.278819][ T6936] ? bpf_lsm_capable+0x9/0x10 [ 75.278832][ T6936] ? security_capable+0x80/0x260 [ 75.278859][ T6936] vfs_get_tree+0x92/0x320 [ 75.278877][ T6936] path_mount+0x7d0/0x23d0 [ 75.278895][ T6936] ? __pfx_path_mount+0x10/0x10 [ 75.278908][ T6936] ? lockdep_hardirqs_on+0x78/0x100 [ 75.278925][ T6936] ? putname+0xb1/0x110 [ 75.278937][ T6936] ? kmem_cache_free+0x127/0x6b0 [ 75.278953][ T6936] ? __x64_sys_mount+0x293/0x310 [ 75.278967][ T6936] __x64_sys_mount+0x293/0x310 [ 75.278982][ T6936] ? __pfx___x64_sys_mount+0x10/0x10 [ 75.279000][ T6936] do_syscall_64+0x115/0x870 [ 75.279013][ T6936] ? clear_bhb_loop+0x40/0x90 [ 75.279026][ T6936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.279039][ T6936] RIP: 0033:0x7f37ac59de99 [ 75.279051][ T6936] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.279064][ T6936] RSP: 002b:00007f37ad3c3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 75.279086][ T6936] RAX: ffffffffffffffda RBX: 00007f37ac825fa0 RCX: 00007f37ac59de99 [ 75.279096][ T6936] RDX: 0000200000004500 RSI: 00002000000000c0 RDI: 0000000000000000 [ 75.279107][ T6936] RBP: 00007f37ad3c3090 R08: 0000200000000300 R09: 0000000000000000 [ 75.279117][ T6936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 75.279130][ T6936] R13: 00007f37ac826038 R14: 00007f37ac825fa0 R15: 00007ffd3ff1f688 [ 75.279153][ T6936] [ 75.366998][ T6938] afs: Unknown parameter 'd9n' [ 75.369139][ T6938] netlink: 'syz.3.307': attribute type 49 has an invalid length. [ 75.377969][ T6938] bond0: (slave bond_slave_0): Releasing backup interface [ 75.435544][ T6938] bond_slave_0: entered promiscuous mode [ 75.437359][ T6938] bond_slave_0: entered allmulticast mode [ 75.627918][ T5097] Bluetooth: hci4: command 0x1003 tx timeout [ 75.632333][ T5743] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 75.896004][ T6973] sg_read: process 312 (syz.1.313) changed security contexts after opening file descriptor, this is not allowed. [ 75.924059][ T6977] netlink: 'syz.3.314': attribute type 3 has an invalid length. [ 76.089174][ T6987] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 76.096279][ T6987] i2c i2c-1: dtv_property_process_set: SET cmd 0x0000dead undefined [ 76.110474][ T1136] ata1.00: exception Emask 0x0 SAct 0x40 SErr 0x0 action 0x6 [ 76.115240][ T1136] ata1.00: waking up from sleep [ 76.116689][ T1136] ata1: hard resetting link [ 76.170295][ T6990] F2FS-fs: Conflicting test_dummy_encryption options [ 76.225909][ T6993] xt_hashlimit: overflow, rate too high: 0 [ 76.442525][ T1136] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 76.450917][ T1136] ata1.00: configured for UDMA/100 [ 76.456139][ T1136] ata1: EH complete [ 76.796349][ T7029] IPVS: Error joining to the multicast group [ 76.898203][ T7043] hub 8-0:1.0: USB hub found [ 76.900692][ T7043] hub 8-0:1.0: 1 port detected [ 77.228817][ T7055] __nla_validate_parse: 4 callbacks suppressed [ 77.228839][ T7055] netlink: 28 bytes leftover after parsing attributes in process `syz.1.334'. [ 77.228852][ T7056] netlink: 28 bytes leftover after parsing attributes in process `syz.1.334'. [ 77.315978][ T7058] netlink: 4 bytes leftover after parsing attributes in process `syz.1.335'. [ 77.318854][ T7058] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.321272][ T7058] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.324438][ T7058] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.326733][ T7058] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.505155][ T7060] netlink: 'syz.1.336': attribute type 12 has an invalid length. [ 77.507595][ T7060] netlink: 132 bytes leftover after parsing attributes in process `syz.1.336'. [ 77.548794][ T7062] dvmrp0: entered allmulticast mode [ 78.555293][ T42] kauditd_printk_skb: 20 callbacks suppressed [ 78.555323][ T42] audit: type=1400 audit(1785875226.959:554): avc: denied { write } for pid=7074 comm="syz.1.341" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 78.567850][ T42] audit: type=1400 audit(1785875226.969:555): avc: denied { open } for pid=7074 comm="syz.1.341" path="/115/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 78.581008][ T42] audit: type=1400 audit(1785875226.969:556): avc: denied { ioctl } for pid=7074 comm="syz.1.341" path="/115/file0/file0" dev="fuse" ino=64 ioctlcmd=0x4d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 78.621915][ T7086] netlink: 4 bytes leftover after parsing attributes in process `syz.1.343'. [ 78.841342][ T7099] netlink: 12 bytes leftover after parsing attributes in process `syz.2.346'. [ 78.906456][ T7111] Bluetooth: hci4: Frame reassembly failed (-84) [ 78.995738][ T42] audit: type=1400 audit(1785875227.400:557): avc: denied { egress } for pid=5836 comm="napi/wg2-0" saddr=fe80::1b daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 79.003791][ T42] audit: type=1400 audit(1785875227.400:558): avc: denied { sendto } for pid=5836 comm="napi/wg2-0" saddr=fe80::1b daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 79.319881][ T42] audit: type=1400 audit(1785875227.711:559): avc: denied { execmod } for pid=7135 comm="syz.2.356" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=17147 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 79.974085][ T42] audit: type=1400 audit(1785875228.374:560): avc: denied { execute } for pid=7138 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 79.982034][ T42] audit: type=1400 audit(1785875228.374:561): avc: denied { execute_no_trans } for pid=7138 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 80.079172][ T5745] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 80.089220][ T5745] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 80.092766][ T5745] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 80.095988][ T5745] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 80.102329][ T5745] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 80.152761][ T7150] MTD: Couldn't look up '/dev/sg0': -15 [ 80.155363][ T7150] /dev/sg0: Can't lookup blockdev [ 80.275028][ T42] audit: type=1400 audit(1785875228.675:562): avc: denied { ioctl } for pid=7148 comm="syz.2.360" path="socket:[14318]" dev="sockfs" ino=14318 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 80.421900][ T5816] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.441664][ T7144] lo speed is unknown, defaulting to 1000 [ 80.534615][ T5816] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.600145][ T7172] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7172 comm=syz.2.362 [ 80.879845][ T5816] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.909577][ T7175] netlink: 36 bytes leftover after parsing attributes in process `syz.2.363'. [ 80.976578][ T5743] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 80.977586][ T5745] Bluetooth: hci4: command 0x1003 tx timeout [ 81.035112][ T42] audit: type=1400 audit(1785875229.437:563): avc: denied { ioctl } for pid=7180 comm="syz.2.365" path="socket:[18433]" dev="sockfs" ino=18433 ioctlcmd=0x9362 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 81.115296][ T5816] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.191520][ T7190] FAULT_INJECTION: forcing a failure. [ 81.191520][ T7190] name failslab, interval 1, probability 0, space 0, times 0 [ 81.197655][ T7190] CPU: 0 UID: 0 PID: 7190 Comm: syz.2.368 Tainted: G L syzkaller #0 PREEMPT(full) [ 81.197676][ T7190] Tainted: [L]=SOFTLOCKUP [ 81.197680][ T7190] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 81.197693][ T7190] Call Trace: [ 81.197699][ T7190] [ 81.197703][ T7190] dump_stack_lvl+0x100/0x190 [ 81.197741][ T7190] should_fail_ex.cold+0x5/0xa [ 81.197757][ T7190] should_failslab+0xc2/0x120 [ 81.197775][ T7190] __kmalloc_cache_noprof+0x91/0x6c0 [ 81.197794][ T7190] ? __kasan_kmalloc+0xaa/0xb0 [ 81.197807][ T7190] ? p9_fd_create+0x163/0x460 [ 81.197823][ T7190] p9_fd_create+0x163/0x460 [ 81.197834][ T7190] p9_client_create+0x563/0xd40 [ 81.197851][ T7190] ? __pfx_p9_client_create+0x10/0x10 [ 81.197870][ T7190] ? lockdep_init_map_type+0x5c/0x250 [ 81.197903][ T7190] ? __raw_spin_lock_init+0x3a/0x110 [ 81.197922][ T7190] v9fs_session_init+0x3c/0xdd0 [ 81.197962][ T7190] ? v9fs_get_tree+0x9c/0xb50 [ 81.197980][ T7190] v9fs_get_tree+0xb8/0xb50 [ 81.197996][ T7190] ? rcu_is_watching+0x12/0xc0 [ 81.198028][ T7190] ? __pfx_v9fs_get_tree+0x10/0x10 [ 81.198046][ T7190] ? bpf_lsm_capable+0x9/0x10 [ 81.198059][ T7190] ? security_capable+0x80/0x260 [ 81.198094][ T7190] vfs_get_tree+0x92/0x320 [ 81.198114][ T7190] path_mount+0x7d0/0x23d0 [ 81.198132][ T7190] ? __pfx_path_mount+0x10/0x10 [ 81.198147][ T7190] ? lockdep_hardirqs_on+0x78/0x100 [ 81.198163][ T7190] ? putname+0xb1/0x110 [ 81.198175][ T7190] ? kmem_cache_free+0x127/0x6b0 [ 81.198190][ T7190] ? __x64_sys_mount+0x293/0x310 [ 81.198205][ T7190] __x64_sys_mount+0x293/0x310 [ 81.198222][ T7190] ? __pfx___x64_sys_mount+0x10/0x10 [ 81.198240][ T7190] do_syscall_64+0x115/0x870 [ 81.198252][ T7190] ? clear_bhb_loop+0x40/0x90 [ 81.198266][ T7190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.198278][ T7190] RIP: 0033:0x7f6e4899de99 [ 81.198288][ T7190] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.198300][ T7190] RSP: 002b:00007f6e498a8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 81.198320][ T7190] RAX: ffffffffffffffda RBX: 00007f6e48c25fa0 RCX: 00007f6e4899de99 [ 81.198327][ T7190] RDX: 0000200000004500 RSI: 00002000000000c0 RDI: 0000000000000000 [ 81.198334][ T7190] RBP: 00007f6e498a8090 R08: 0000200000000300 R09: 0000000000000000 [ 81.198341][ T7190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 81.198347][ T7190] R13: 00007f6e48c26038 R14: 00007f6e48c25fa0 R15: 00007ffde7ceb8a8 [ 81.198361][ T7190] [ 81.393585][ T5450] veth1_vlan: left promiscuous mode [ 81.477285][ T7198] bond1 (unregistering): Released all slaves [ 81.528782][ T7144] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.532944][ T7144] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.560960][ T7144] bridge_slave_0: entered allmulticast mode [ 81.569818][ T7144] bridge_slave_0: entered promiscuous mode [ 81.577367][ T1353] cfg80211: failed to load regulatory.db [ 81.587161][ T7144] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.618843][ T7144] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.629207][ T7144] bridge_slave_1: entered allmulticast mode [ 81.642411][ T7144] bridge_slave_1: entered promiscuous mode [ 81.737193][ T7221] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 81.757276][ T7144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.791903][ T7144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.806742][ T7227] FAULT_INJECTION: forcing a failure. [ 81.806742][ T7227] name failslab, interval 1, probability 0, space 0, times 0 [ 81.828278][ T7227] CPU: 0 UID: 0 PID: 7227 Comm: syz.3.376 Tainted: G L syzkaller #0 PREEMPT(full) [ 81.828309][ T7227] Tainted: [L]=SOFTLOCKUP [ 81.828315][ T7227] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 81.828325][ T7227] Call Trace: [ 81.828331][ T7227] [ 81.828339][ T7227] dump_stack_lvl+0x100/0x190 [ 81.828367][ T7227] should_fail_ex.cold+0x5/0xa [ 81.828389][ T7227] should_failslab+0xc2/0x120 [ 81.828412][ T7227] kmem_cache_alloc_noprof+0x91/0x6a0 [ 81.828430][ T7227] ? stack_trace_save+0x8e/0xc0 [ 81.828462][ T7227] ? p9_tag_alloc+0x9c/0x860 [ 81.828488][ T7227] p9_tag_alloc+0x9c/0x860 [ 81.828511][ T7227] ? __pfx_p9_tag_alloc+0x10/0x10 [ 81.828532][ T7227] ? __lock_acquire+0x49f/0x1a40 [ 81.828555][ T7227] ? __lock_acquire+0x49f/0x1a40 [ 81.828578][ T7227] p9_client_prepare_req+0x19b/0x4d0 [ 81.828601][ T7227] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 81.828623][ T7227] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 81.828647][ T7227] ? do_raw_spin_lock+0x128/0x260 [ 81.828669][ T7227] ? _raw_spin_lock_irqsave+0x52/0x60 [ 81.828696][ T7227] ? find_held_lock+0x2b/0x80 [ 81.828748][ T7227] p9_client_rpc+0x1c4/0xd60 [ 81.828774][ T7227] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 81.828792][ T7227] ? __pfx_p9_client_rpc+0x10/0x10 [ 81.828815][ T7227] ? unix_poll+0x39e/0x450 [ 81.828880][ T7227] ? __pfx_unix_poll+0x10/0x10 [ 81.828895][ T7227] ? sock_poll+0x16b/0x510 [ 81.828938][ T7227] ? p9_fd_poll+0x1db/0x2c0 [ 81.828963][ T7227] ? p9_conn_create+0x42f/0x550 [ 81.828982][ T7227] p9_client_create+0x7a6/0xd40 [ 81.829005][ T7227] ? __pfx_p9_client_create+0x10/0x10 [ 81.829031][ T7227] ? lockdep_init_map_type+0x5c/0x250 [ 81.829060][ T7227] ? __raw_spin_lock_init+0x3a/0x110 [ 81.829086][ T7227] v9fs_session_init+0x3c/0xdd0 [ 81.829107][ T7227] ? v9fs_get_tree+0x9c/0xb50 [ 81.829134][ T7227] v9fs_get_tree+0xb8/0xb50 [ 81.829155][ T7227] ? rcu_is_watching+0x12/0xc0 [ 81.829179][ T7227] ? __pfx_v9fs_get_tree+0x10/0x10 [ 81.829203][ T7227] ? bpf_lsm_capable+0x9/0x10 [ 81.829220][ T7227] ? security_capable+0x80/0x260 [ 81.829244][ T7227] vfs_get_tree+0x92/0x320 [ 81.829268][ T7227] path_mount+0x7d0/0x23d0 [ 81.829293][ T7227] ? __pfx_path_mount+0x10/0x10 [ 81.829311][ T7227] ? lockdep_hardirqs_on+0x78/0x100 [ 81.829332][ T7227] ? putname+0xb1/0x110 [ 81.829348][ T7227] ? kmem_cache_free+0x127/0x6b0 [ 81.829372][ T7227] ? __x64_sys_mount+0x293/0x310 [ 81.829391][ T7227] __x64_sys_mount+0x293/0x310 [ 81.829412][ T7227] ? __pfx___x64_sys_mount+0x10/0x10 [ 81.829437][ T7227] do_syscall_64+0x115/0x870 [ 81.829455][ T7227] ? clear_bhb_loop+0x40/0x90 [ 81.829476][ T7227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.829493][ T7227] RIP: 0033:0x7f37ac59de99 [ 81.829509][ T7227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.829524][ T7227] RSP: 002b:00007f37ad3c3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 81.829543][ T7227] RAX: ffffffffffffffda RBX: 00007f37ac825fa0 RCX: 00007f37ac59de99 [ 81.829554][ T7227] RDX: 0000200000004500 RSI: 00002000000000c0 RDI: 0000000000000000 [ 81.829564][ T7227] RBP: 00007f37ad3c3090 R08: 0000200000000300 R09: 0000000000000000 [ 81.829573][ T7227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 81.829582][ T7227] R13: 00007f37ac826038 R14: 00007f37ac825fa0 R15: 00007ffd3ff1f688 [ 81.829605][ T7227] [ 81.861334][ T7144] team0: Port device team_slave_0 added [ 81.975622][ T7144] team0: Port device team_slave_1 added [ 81.978102][ T5450] veth1_vlan: entered promiscuous mode [ 82.045299][ T5816] bridge_slave_1: left allmulticast mode [ 82.048801][ T5816] bridge_slave_1: left promiscuous mode [ 82.053835][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.071104][ T5816] bridge_slave_0: left allmulticast mode [ 82.073020][ T5816] bridge_slave_0: left promiscuous mode [ 82.075038][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.154207][ T7242] netlink: 24 bytes leftover after parsing attributes in process `syz.3.380'. [ 82.185497][ T5745] Bluetooth: hci5: command tx timeout [ 82.223625][ T5816] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 82.230267][ T5816] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 82.235186][ T5816] bond0 (unregistering): Released all slaves [ 82.241736][ T7144] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.246822][ T7144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.255295][ T7144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.259783][ T7144] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.262195][ T7144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.270301][ T7144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.359005][ T5816] tipc: Left network mode [ 82.455664][ T7144] hsr_slave_0: entered promiscuous mode [ 82.458618][ T7144] hsr_slave_1: entered promiscuous mode [ 82.461998][ T7144] debugfs: 'hsr0' already exists in 'hsr' [ 82.464291][ T7144] Cannot create hsr debugfs directory [ 82.475811][ T7241] lo speed is unknown, defaulting to 1000 [ 82.682457][ T7254] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 82.798507][ T7259] random: crng reseeded on system resumption [ 82.976183][ T7269] netlink: 8 bytes leftover after parsing attributes in process `syz.1.384'. [ 82.996677][ T7273] FAULT_INJECTION: forcing a failure. [ 82.996677][ T7273] name failslab, interval 1, probability 0, space 0, times 0 [ 83.002386][ T7273] CPU: 2 UID: 0 PID: 7273 Comm: syz.2.385 Tainted: G L syzkaller #0 PREEMPT(full) [ 83.002405][ T7273] Tainted: [L]=SOFTLOCKUP [ 83.002409][ T7273] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 83.002416][ T7273] Call Trace: [ 83.002421][ T7273] [ 83.002426][ T7273] dump_stack_lvl+0x100/0x190 [ 83.002448][ T7273] should_fail_ex.cold+0x5/0xa [ 83.002464][ T7273] should_failslab+0xc2/0x120 [ 83.002480][ T7273] __kvmalloc_node_noprof+0x116/0x970 [ 83.002493][ T7273] ? rcu_is_watching+0x12/0xc0 [ 83.002512][ T7273] ? __kasan_slab_alloc+0x89/0x90 [ 83.002526][ T7273] ? p9_fcall_init+0x227/0x420 [ 83.002547][ T7273] p9_fcall_init+0x227/0x420 [ 83.002563][ T7273] p9_tag_alloc+0x16c/0x860 [ 83.002579][ T7273] ? __pfx_p9_tag_alloc+0x10/0x10 [ 83.002596][ T7273] ? __lock_acquire+0x49f/0x1a40 [ 83.002612][ T7273] p9_client_prepare_req+0x19b/0x4d0 [ 83.002628][ T7273] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 83.002643][ T7273] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 83.002661][ T7273] ? do_raw_spin_lock+0x128/0x260 [ 83.002676][ T7273] ? _raw_spin_lock_irqsave+0x52/0x60 [ 83.002697][ T7273] ? find_held_lock+0x2b/0x80 [ 83.002716][ T7273] p9_client_rpc+0x1c4/0xd60 [ 83.002732][ T7273] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 83.002744][ T7273] ? __pfx_p9_client_rpc+0x10/0x10 [ 83.002759][ T7273] ? unix_poll+0x39e/0x450 [ 83.002774][ T7273] ? __pfx_unix_poll+0x10/0x10 [ 83.002784][ T7273] ? sock_poll+0x16b/0x510 [ 83.002805][ T7273] ? p9_fd_poll+0x1db/0x2c0 [ 83.002823][ T7273] ? p9_conn_create+0x42f/0x550 [ 83.002836][ T7273] p9_client_create+0x7a6/0xd40 [ 83.002853][ T7273] ? __pfx_p9_client_create+0x10/0x10 [ 83.002872][ T7273] ? lockdep_init_map_type+0x5c/0x250 [ 83.002888][ T7273] ? __raw_spin_lock_init+0x3a/0x110 [ 83.002906][ T7273] v9fs_session_init+0x3c/0xdd0 [ 83.002921][ T7273] ? v9fs_get_tree+0x9c/0xb50 [ 83.002944][ T7273] v9fs_get_tree+0xb8/0xb50 [ 83.002960][ T7273] ? rcu_is_watching+0x12/0xc0 [ 83.002978][ T7273] ? __pfx_v9fs_get_tree+0x10/0x10 [ 83.002995][ T7273] ? bpf_lsm_capable+0x9/0x10 [ 83.003008][ T7273] ? security_capable+0x80/0x260 [ 83.003025][ T7273] vfs_get_tree+0x92/0x320 [ 83.003042][ T7273] path_mount+0x7d0/0x23d0 [ 83.003060][ T7273] ? __pfx_path_mount+0x10/0x10 [ 83.003074][ T7273] ? lockdep_hardirqs_on+0x78/0x100 [ 83.003089][ T7273] ? putname+0xb1/0x110 [ 83.003101][ T7273] ? kmem_cache_free+0x127/0x6b0 [ 83.003117][ T7273] ? __x64_sys_mount+0x293/0x310 [ 83.003131][ T7273] __x64_sys_mount+0x293/0x310 [ 83.003147][ T7273] ? __pfx___x64_sys_mount+0x10/0x10 [ 83.003166][ T7273] do_syscall_64+0x115/0x870 [ 83.003179][ T7273] ? clear_bhb_loop+0x40/0x90 [ 83.003193][ T7273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.003205][ T7273] RIP: 0033:0x7f6e4899de99 [ 83.003217][ T7273] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.003228][ T7273] RSP: 002b:00007f6e498a8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 83.003241][ T7273] RAX: ffffffffffffffda RBX: 00007f6e48c25fa0 RCX: 00007f6e4899de99 [ 83.003249][ T7273] RDX: 0000200000004500 RSI: 00002000000000c0 RDI: 0000000000000000 [ 83.003256][ T7273] RBP: 00007f6e498a8090 R08: 0000200000000300 R09: 0000000000000000 [ 83.003263][ T7273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 83.003270][ T7273] R13: 00007f6e48c26038 R14: 00007f6e48c25fa0 R15: 00007ffde7ceb8a8 [ 83.003284][ T7273] [ 83.009427][ T5816] hsr_slave_0: left promiscuous mode [ 83.120379][ T5816] hsr_slave_1: left promiscuous mode [ 83.122611][ T5816] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.124955][ T5816] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.127967][ T5816] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.132362][ T5816] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.143723][ T5816] veth1_macvtap: left promiscuous mode [ 83.146277][ T5816] veth0_macvtap: left promiscuous mode [ 83.148240][ T5816] veth1_vlan: left promiscuous mode [ 83.151164][ T5816] veth0_vlan: left promiscuous mode [ 83.298883][ T5816] team0 (unregistering): Port device team_slave_1 removed [ 83.320414][ T5816] team0 (unregistering): Port device team_slave_0 removed [ 83.457119][ T5450] 8021q: adding VLAN 0 to HW filter on device eth2 [ 83.464675][ T7144] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 83.469884][ T7144] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.473338][ T7144] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 83.486176][ T7144] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.501195][ T7279] syzkaller1: entered promiscuous mode [ 83.502995][ T7279] syzkaller1: entered allmulticast mode [ 83.524975][ T7144] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 83.543678][ T7144] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.547270][ T7144] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 83.573308][ T7144] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.594823][ T7285] veth0_vlan: entered allmulticast mode [ 83.705211][ T42] kauditd_printk_skb: 20 callbacks suppressed [ 83.705232][ T42] audit: type=1400 audit(1785875232.115:584): avc: denied { write } for pid=7296 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.706380][ T7144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.734732][ T7144] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.748638][ T468] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.751535][ T468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.759566][ T468] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.761862][ T468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.761936][ T42] audit: type=1400 audit(1785875232.175:585): avc: denied { write } for pid=7302 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.847211][ T5450] 8021q: adding VLAN 0 to HW filter on device eth3 [ 83.847839][ T42] audit: type=1400 audit(1785875232.265:586): avc: denied { remount } for pid=7294 comm="syz.2.389" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 83.947525][ T7305] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 83.953009][ T42] audit: type=1400 audit(1785875232.365:587): avc: denied { write } for pid=7319 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.022083][ T42] audit: type=1400 audit(1785875232.436:588): avc: denied { write } for pid=7325 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.063546][ T5450] 8021q: adding VLAN 0 to HW filter on device eth4 [ 84.071047][ T7144] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.131541][ T42] audit: type=1400 audit(1785875232.546:589): avc: denied { write } for pid=7333 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.183752][ T42] audit: type=1400 audit(1785875232.596:590): avc: denied { write } for pid=7342 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.218206][ T5450] 8021q: adding VLAN 0 to HW filter on device eth5 [ 84.220842][ T7346] overlayfs: missing 'workdir' [ 84.239691][ T42] audit: type=1400 audit(1785875232.656:591): avc: denied { create } for pid=7345 comm="syz.3.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 84.248537][ T5745] Bluetooth: hci5: command tx timeout [ 84.263433][ T7144] veth0_vlan: entered promiscuous mode [ 84.274341][ T7144] veth1_vlan: entered promiscuous mode [ 84.278704][ T42] audit: type=1400 audit(1785875232.696:592): avc: denied { sys_admin } for pid=7345 comm="syz.3.393" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 84.291252][ T7349] overlayfs: failed to resolve './bus': -2 [ 84.315301][ T7144] veth0_macvtap: entered promiscuous mode [ 84.320836][ T7144] veth1_macvtap: entered promiscuous mode [ 84.331326][ T7144] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.342756][ T42] audit: type=1400 audit(1785875232.756:593): avc: denied { write } for pid=7350 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.350575][ T7354] FAULT_INJECTION: forcing a failure. [ 84.350575][ T7354] name failslab, interval 1, probability 0, space 0, times 0 [ 84.354429][ T7354] CPU: 0 UID: 0 PID: 7354 Comm: syz.3.394 Tainted: G L syzkaller #0 PREEMPT(full) [ 84.354448][ T7354] Tainted: [L]=SOFTLOCKUP [ 84.354452][ T7354] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 84.354459][ T7354] Call Trace: [ 84.354463][ T7354] [ 84.354468][ T7354] dump_stack_lvl+0x100/0x190 [ 84.354489][ T7354] should_fail_ex.cold+0x5/0xa [ 84.354505][ T7354] should_failslab+0xc2/0x120 [ 84.354521][ T7354] __kvmalloc_node_noprof+0x116/0x970 [ 84.354535][ T7354] ? rcu_is_watching+0x11/0xc0 [ 84.354554][ T7354] ? __kasan_slab_alloc+0x89/0x90 [ 84.354568][ T7354] ? p9_fcall_init+0x227/0x420 [ 84.354586][ T7354] p9_fcall_init+0x227/0x420 [ 84.354601][ T7354] p9_tag_alloc+0x20d/0x860 [ 84.354617][ T7354] ? __pfx_p9_tag_alloc+0x10/0x10 [ 84.354634][ T7354] ? __lock_acquire+0x49f/0x1a40 [ 84.354650][ T7354] p9_client_prepare_req+0x19b/0x4d0 [ 84.354666][ T7354] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 84.354681][ T7354] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 84.354699][ T7354] ? do_raw_spin_lock+0x128/0x260 [ 84.354714][ T7354] ? _raw_spin_lock_irqsave+0x52/0x60 [ 84.354733][ T7354] ? find_held_lock+0x2b/0x80 [ 84.354753][ T7354] p9_client_rpc+0x1c4/0xd60 [ 84.354769][ T7354] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 84.354780][ T7354] ? __pfx_p9_client_rpc+0x10/0x10 [ 84.354796][ T7354] ? unix_poll+0x39e/0x450 [ 84.354808][ T7354] ? __pfx_unix_poll+0x10/0x10 [ 84.354819][ T7354] ? sock_poll+0x16b/0x510 [ 84.354837][ T7354] ? p9_fd_poll+0x1db/0x2c0 [ 84.354855][ T7354] ? p9_conn_create+0x42f/0x550 [ 84.354867][ T7354] p9_client_create+0x7a6/0xd40 [ 84.354884][ T7354] ? __pfx_p9_client_create+0x10/0x10 [ 84.354902][ T7354] ? lockdep_init_map_type+0x5c/0x250 [ 84.354917][ T7354] ? __raw_spin_lock_init+0x3a/0x110 [ 84.354936][ T7354] v9fs_session_init+0x3c/0xdd0 [ 84.354950][ T7354] ? v9fs_get_tree+0x9c/0xb50 [ 84.354968][ T7354] v9fs_get_tree+0xb8/0xb50 [ 84.354983][ T7354] ? rcu_is_watching+0x12/0xc0 [ 84.355001][ T7354] ? __pfx_v9fs_get_tree+0x10/0x10 [ 84.355018][ T7354] ? bpf_lsm_capable+0x9/0x10 [ 84.355030][ T7354] ? security_capable+0x80/0x260 [ 84.355046][ T7354] vfs_get_tree+0x92/0x320 [ 84.355068][ T7354] path_mount+0x7d0/0x23d0 [ 84.355086][ T7354] ? __pfx_path_mount+0x10/0x10 [ 84.355099][ T7354] ? lockdep_hardirqs_on+0x78/0x100 [ 84.355113][ T7354] ? putname+0xb1/0x110 [ 84.355125][ T7354] ? kmem_cache_free+0x127/0x6b0 [ 84.355140][ T7354] ? __x64_sys_mount+0x293/0x310 [ 84.355154][ T7354] __x64_sys_mount+0x293/0x310 [ 84.355169][ T7354] ? __pfx___x64_sys_mount+0x10/0x10 [ 84.355187][ T7354] do_syscall_64+0x115/0x870 [ 84.355200][ T7354] ? clear_bhb_loop+0x40/0x90 [ 84.355214][ T7354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.355226][ T7354] RIP: 0033:0x7f37ac59de99 [ 84.355236][ T7354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.355247][ T7354] RSP: 002b:00007f37ad3c3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 84.355260][ T7354] RAX: ffffffffffffffda RBX: 00007f37ac825fa0 RCX: 00007f37ac59de99 [ 84.355266][ T7144] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.355267][ T7354] RDX: 0000200000004500 RSI: 00002000000000c0 RDI: 0000000000000000 [ 84.355274][ T7354] RBP: 00007f37ad3c3090 R08: 0000200000000300 R09: 0000000000000000 [ 84.355280][ T7354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 84.355287][ T7354] R13: 00007f37ac826038 R14: 00007f37ac825fa0 R15: 00007ffd3ff1f688 [ 84.355302][ T7354] [ 84.505487][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.516226][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.529222][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.532077][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.597222][ T7367] netlink: 60 bytes leftover after parsing attributes in process `syz.3.397'. [ 84.625516][ T104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.634516][ T104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.678933][ T104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.689019][ T104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.824782][ T7388] syzkaller1: entered promiscuous mode [ 84.824800][ T7388] syzkaller1: entered allmulticast mode [ 85.024851][ T7406] SELinux: security_context_str_to_sid (ramfs) failed with errno=-22 [ 85.053759][ T7406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.408'. [ 85.057188][ T7406] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.059803][ T7406] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.062665][ T7406] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.065246][ T7406] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.245600][ T7411] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 85.252199][ T5745] Bluetooth: hci2: unexpected event for opcode 0x2011 [ 85.442998][ T7419] netlink: 'syz.2.412': attribute type 1 has an invalid length. [ 85.460376][ T7419] 8021q: adding VLAN 0 to HW filter on device bond1 [ 85.467368][ T7419] netlink: 12 bytes leftover after parsing attributes in process `syz.2.412'. [ 85.610117][ T7391] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 85.617109][ T7391] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 85.630119][ T7391] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 85.638275][ T7391] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 85.642464][ T7391] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 85.645896][ T7431] trusted_key: syz.2.415 sent an empty control message without MSG_MORE. [ 85.657119][ T7391] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 85.661568][ T7391] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 85.666523][ T7391] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 85.671481][ T7391] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 85.752386][ T7442] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 85.806990][ T7449] dlm: no locking on control device [ 85.823483][ T7449] netlink: 20 bytes leftover after parsing attributes in process `syz.2.420'. [ 85.914200][ T7465] IPv6: NLM_F_CREATE should be specified when creating new route [ 85.981510][ T7474] netlink: 'syz.1.427': attribute type 2 has an invalid length. [ 85.986552][ T7474] netlink: 'syz.1.427': attribute type 2 has an invalid length. [ 86.026736][ T7475] netlink: 52 bytes leftover after parsing attributes in process `syz.2.426'. [ 86.035258][ T7482] netlink: 4 bytes leftover after parsing attributes in process `syz.1.430'. [ 86.168635][ T7492] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 86.205119][ T7492] bond1: Removing last ns target with arp_interval on [ 86.209228][ T7492] netlink: 8 bytes leftover after parsing attributes in process `syz.3.433'. [ 86.212139][ T7492] netlink: 'syz.3.433': attribute type 26 has an invalid length. [ 86.214804][ T7492] netlink: 4 bytes leftover after parsing attributes in process `syz.3.433'. [ 86.218147][ T7492] netlink: 8 bytes leftover after parsing attributes in process `syz.3.433'. [ 86.221145][ T7492] netlink: 'syz.3.433': attribute type 26 has an invalid length. [ 86.284435][ T7510] [U]  [ 86.368264][ T7524] hsr_slave_0: left promiscuous mode [ 86.368546][ T7513] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 86.380317][ T7524] hsr_slave_1: left promiscuous mode [ 86.445720][ T7533] netlink: 'syz.2.447': attribute type 1 has an invalid length. [ 86.448191][ T7533] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 86.450530][ T7533] IPv6: NLM_F_CREATE should be set when creating new route [ 86.456039][ T7533] netlink: 'syz.2.447': attribute type 1 has an invalid length. [ 86.458471][ T7533] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 86.463707][ T7527] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 86.465832][ T7527] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 86.472318][ T7530] hfs: unable to load iocharset "io#harset" [ 88.477058][ T5743] Bluetooth: hci5: command 0x0419 tx timeout [ 88.477166][ T5097] Bluetooth: hci3: command 0x0c1a tx timeout [ 88.477868][ T5749] Bluetooth: hci2: command 0x0c1a tx timeout [ 88.482620][ T7527] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 88.563680][ T7553] xt_bpf: check failed: parse error [ 88.576582][ T7560] __nla_validate_parse: 4 callbacks suppressed [ 88.576602][ T7560] netlink: 88 bytes leftover after parsing attributes in process `syz.2.451'. [ 88.588991][ T7560] netlink: 24 bytes leftover after parsing attributes in process `syz.2.451'. [ 88.639995][ T7572] netlink: 17 bytes leftover after parsing attributes in process `syz.2.455'. [ 88.655299][ T7574] netlink: 'syz.1.456': attribute type 64 has an invalid length. [ 88.662403][ T7571] gretap0: entered promiscuous mode [ 88.707125][ T42] kauditd_printk_skb: 27 callbacks suppressed [ 88.707144][ T42] audit: type=1400 audit(1785875237.136:621): avc: denied { mounton } for pid=7573 comm="syz.1.456" path="/146/file3" dev="tmpfs" ino=815 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 88.713980][ T7571] A link change request failed with some changes committed already. Interface vlaj0 may have been left with an inconsistent configuration, please check. [ 88.725116][ T7581] cgroup: Unknown subsys name 'cpuset' [ 88.779954][ T42] audit: type=1400 audit(1785875237.206:622): avc: denied { write } for pid=7584 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.784090][ T7589] binder: 7588:7589 ioctl c0306201 200000001040 returned -14 [ 88.793350][ T42] audit: type=1400 audit(1785875237.206:623): avc: denied { set_context_mgr } for pid=7588 comm="syz.2.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 88.798565][ T7589] binder: 7588:7589 ioctl c0306201 2000000001c0 returned -14 [ 88.805543][ T42] audit: type=1400 audit(1785875237.226:624): avc: denied { accept } for pid=7582 comm="syz.3.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 88.827396][ T7587] lo speed is unknown, defaulting to 1000 [ 88.837285][ T42] audit: type=1400 audit(1785875237.266:625): avc: denied { write } for pid=7592 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.901866][ T7593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.460'. [ 88.938273][ T42] audit: type=1400 audit(1785875237.367:626): avc: denied { read write } for pid=7599 comm="syz.2.462" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 88.939535][ T7609] base or size exceeds the MTRR width [ 88.947096][ T42] audit: type=1400 audit(1785875237.367:627): avc: denied { open } for pid=7599 comm="syz.2.462" path="/150/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 88.958053][ T42] audit: type=1400 audit(1785875237.367:628): avc: denied { ioctl } for pid=7599 comm="syz.2.462" path="/150/proc/mtrr" dev="proc" ino=4026531995 ioctlcmd=0x4d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 88.961690][ T7609] base or size exceeds the MTRR width [ 88.969118][ T42] audit: type=1400 audit(1785875237.397:629): avc: denied { mounton } for pid=7599 comm="syz.2.462" path="/150/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 89.061941][ T7620] FAULT_INJECTION: forcing a failure. [ 89.061941][ T7620] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 89.070684][ T7620] CPU: 2 UID: 0 PID: 7620 Comm: syz.2.466 Tainted: G L syzkaller #0 PREEMPT(full) [ 89.070712][ T7620] Tainted: [L]=SOFTLOCKUP [ 89.070718][ T7620] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 89.070729][ T7620] Call Trace: [ 89.070735][ T7620] [ 89.070743][ T7620] dump_stack_lvl+0x100/0x190 [ 89.070829][ T7620] should_fail_ex.cold+0x5/0xa [ 89.070854][ T7620] _copy_to_user+0x32/0xd0 [ 89.070907][ T7620] simple_read_from_buffer+0xcb/0x170 [ 89.070937][ T7620] proc_fail_nth_read+0x1af/0x230 [ 89.070964][ T7620] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 89.070991][ T7620] ? rw_verify_area+0xce/0x6d0 [ 89.071023][ T7620] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 89.071049][ T7620] vfs_read+0x1e4/0xb40 [ 89.071078][ T7620] ? __pfx_vfs_read+0x10/0x10 [ 89.071104][ T7620] ? __fget_files+0x215/0x3d0 [ 89.071128][ T7620] ? __fget_files+0x21f/0x3d0 [ 89.071153][ T7620] ksys_read+0x12a/0x250 [ 89.071179][ T7620] ? __pfx_ksys_read+0x10/0x10 [ 89.071213][ T7620] do_syscall_64+0x115/0x870 [ 89.071283][ T7620] ? clear_bhb_loop+0x40/0x90 [ 89.071306][ T7620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.071324][ T7620] RIP: 0033:0x7f6e4895e6ce [ 89.071339][ T7620] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 89.071356][ T7620] RSP: 002b:00007f6e498a7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 89.071376][ T7620] RAX: ffffffffffffffda RBX: 00007f6e498a86c0 RCX: 00007f6e4895e6ce [ 89.071387][ T7620] RDX: 000000000000000f RSI: 00007f6e498a80a0 RDI: 0000000000000007 [ 89.071398][ T7620] RBP: 00007f6e498a8090 R08: 0000000000000000 R09: 0000000000000000 [ 89.071407][ T7620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 89.071416][ T7620] R13: 00007f6e48c26038 R14: 00007f6e48c25fa0 R15: 00007ffde7ceb8a8 [ 89.071438][ T7620] [ 89.256593][ T42] audit: type=1804 audit(1785875237.687:630): pid=7634 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.470" name="bus" dev="ramfs" ino=19063 res=1 errno=0 [ 89.283439][ T7636] netlink: 'syz.1.471': attribute type 12 has an invalid length. [ 89.346965][ T7639] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 89.365607][ T5824] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 89.525354][ T5824] usb 9-1: Using ep0 maxpacket: 8 [ 89.532984][ T5824] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 89.538920][ T5824] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 89.543836][ T5824] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 89.549793][ T5824] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 89.553885][ T5824] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 89.559513][ T5824] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.689437][ T7653] bond2: entered promiscuous mode [ 89.691322][ T7653] 8021q: adding VLAN 0 to HW filter on device bond2 [ 89.697591][ T7653] overlayfs: failed to resolve './file0': -2 [ 89.723045][ T7656] gretap0: entered promiscuous mode [ 89.737126][ T7656] netlink: 56 bytes leftover after parsing attributes in process `syz.1.478'. [ 89.741770][ T7656] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7656 comm=syz.1.478 [ 89.769574][ T5824] usb 9-1: GET_CAPABILITIES returned 0 [ 89.771376][ T5824] usbtmc 9-1:16.0: can't read capabilities [ 89.846304][ T7668] netlink: 'syz.1.482': attribute type 39 has an invalid length. [ 89.890605][ T7666] SELinux: policydb magic number 0xf97cdf8c does not match expected magic number 0xf97cff8c [ 89.893959][ T7666] SELinux: failed to load policy [ 89.985430][ C2] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 90.016062][ T50] usb 9-1: USB disconnect, device number 2 [ 90.245400][ T7694] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 90.251024][ T7694] qnx6: unable to read the first superblock [ 90.254437][ T7694] qnx6: unable to read the first superblock [ 90.258021][ T7694] qnx6: unable to read the first superblock [ 90.285677][ T7699] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 90.288492][ T7699] overlayfs: missing 'lowerdir' [ 90.319551][ T7701] process 'syz.2.491' launched './file0' with NULL argv: empty string added [ 90.341644][ T7704] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 90.499954][ T7718] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 90.502726][ T7718] afs: Unknown parameter '0x000000000000000dp' [ 90.553922][ T5745] Bluetooth: hci2: command 0x0c1a tx timeout [ 90.554277][ T5743] Bluetooth: hci3: command 0x0c1a tx timeout [ 90.554634][ T5749] Bluetooth: hci5: command 0x0419 tx timeout [ 90.579296][ T7728] usb usb8: usbfs: process 7728 (syz.3.497) did not claim interface 0 before use [ 90.666929][ T7744] loop5: detected capacity change from 0 to 7 [ 90.674816][ T7744] Dev loop5: unable to read RDB block 7 [ 90.676613][ T7744] loop5: AHDI p2 p4 [ 90.678314][ T7744] loop5: partition table partially beyond EOD, truncated [ 90.680677][ T7744] loop5: p4 start 254 is beyond EOD, truncated [ 90.874507][ T7769] xt_nat: multiple ranges no longer supported [ 90.928891][ T7772] EXT4-fs (nbd2): unable to read superblock [ 90.994373][ T1353] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 91.055740][ T7779] netlink: 'syz.2.511': attribute type 13 has an invalid length. [ 91.069231][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.132239][ T1353] usb 6-1: device descriptor read/64, error -71 [ 91.154251][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.225685][ T7797] netlink: 24 bytes leftover after parsing attributes in process `syz.3.516'. [ 91.225897][ T5745] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.234834][ T5745] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.239240][ T5745] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.245690][ T5745] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.251655][ T5745] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.300606][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.382186][ T1353] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 91.403051][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.451479][ T7794] lo speed is unknown, defaulting to 1000 [ 91.471923][ T5824] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 91.531609][ T1353] usb 6-1: device descriptor read/64, error -71 [ 91.544229][ T13] bridge_slave_1: left allmulticast mode [ 91.547183][ T13] bridge_slave_1: left promiscuous mode [ 91.550402][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.558862][ T13] bridge_slave_0: left allmulticast mode [ 91.561122][ T13] bridge_slave_0: left promiscuous mode [ 91.564827][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.567101][ C3] vcan0: j1939_tp_rxtimer: 0xffff888060a78400: rx timeout, send abort [ 91.638609][ T5824] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 16 [ 91.642213][ T5824] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 91.646810][ T5824] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 91.651220][ T5824] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 91.653118][ T1353] usb usb6-port1: attempt power cycle [ 91.657121][ T5824] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 91.664087][ T5824] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 91.668090][ T5824] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.671526][ T5824] usb 7-1: Product: 뾤谑响௸샘㩪︭ࡠ猸䍉ዩ헵駸㏅肳죩ힳ쉜抭ꘁ敕孫휗蓃Ⓡ쨣酩䮅⣧躲㘑灃▁㈿켫蜴彋쎏䙵郀蚩ꅫ昍㐽飡芧ⶉ눘凮栫苅㽑㫸䄐蛿㎣᭒ㄉ⨦ᎃ怊﯇叐쥌╝伕됔醴෽莳섩ேᎷ㵎曥쾝棖攉簎鷆胵⸾ᕌ䉉仐Պ䑗ꤟ䔎ᔴ玳ᾲϚṳ✣ꝷ뮃౑粆뮥쮊 [ 91.682035][ T5824] usb 7-1: Manufacturer: Я [ 91.683508][ T5824] usb 7-1: SerialNumber: ж [ 91.685458][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 91.688126][ T7799] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 91.697434][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 91.706173][ T13] bond0 (unregistering): Released all slaves [ 91.717963][ T5450] 8021q: adding VLAN 0 to HW filter on device eth6 [ 91.921510][ T5450] 8021q: adding VLAN 0 to HW filter on device eth7 [ 91.981416][ T7794] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.983891][ T7794] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.986909][ T7794] bridge_slave_0: entered allmulticast mode [ 91.996118][ T7794] bridge_slave_0: entered promiscuous mode [ 92.001397][ T7794] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.004462][ T7794] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.007510][ T7794] bridge_slave_1: entered allmulticast mode [ 92.010880][ T1353] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 92.011467][ T7794] bridge_slave_1: entered promiscuous mode [ 92.031301][ T1353] usb 6-1: device descriptor read/8, error -71 [ 92.042366][ T7794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.047134][ T7794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.071723][ C3] vcan0: j1939_tp_rxtimer: 0xffff888060a78400: abort rx timeout. Force session deactivation [ 92.094614][ T7794] team0: Port device team_slave_0 added [ 92.110732][ T7794] team0: Port device team_slave_1 added [ 92.156512][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.158916][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.169054][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.171707][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.182541][ T13] veth1_macvtap: left promiscuous mode [ 92.184905][ T13] veth0_macvtap: left promiscuous mode [ 92.186741][ T13] veth1_vlan: left promiscuous mode [ 92.188502][ T13] veth0_vlan: left promiscuous mode [ 92.280437][ T1353] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 92.303091][ T1353] usb 6-1: device descriptor read/8, error -71 [ 92.329987][ T7799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.335797][ T7799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.356209][ T5824] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 92.359122][ T5824] usb 7-1: MIDIStreaming interface descriptor not found [ 92.367133][ T13] team0 (unregistering): Port device team_slave_1 removed [ 92.380799][ T13] team0 (unregistering): Port device team_slave_0 removed [ 92.412552][ T1353] usb usb6-port1: unable to enumerate USB device [ 92.427502][ T5824] usb 7-1: USB disconnect, device number 8 [ 92.464398][ T7794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.466599][ T7794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.474476][ T7794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.494590][ T5450] 8021q: adding VLAN 0 to HW filter on device eth8 [ 92.501612][ T7794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.504545][ T7794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.506222][ T5756] udevd[5756]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 92.517427][ T7794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.568902][ T7794] hsr_slave_0: entered promiscuous mode [ 92.571511][ T7794] hsr_slave_1: entered promiscuous mode [ 92.573795][ T7794] debugfs: 'hsr0' already exists in 'hsr' [ 92.576094][ T7794] Cannot create hsr debugfs directory [ 92.639853][ T5745] Bluetooth: hci3: command 0x0c1a tx timeout [ 92.663327][ T7844] netlink: 'syz.3.518': attribute type 5 has an invalid length. [ 92.736104][ T5450] 8021q: adding VLAN 0 to HW filter on device eth9 [ 92.745434][ T7794] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 92.750809][ T7794] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.753637][ T7794] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 92.757480][ T7794] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.760355][ T7794] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 92.775433][ T7794] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.778702][ T7794] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 92.791043][ T7794] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.838471][ T7794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.851530][ T7794] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.856860][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.859751][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.869164][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.872017][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.152731][ T7794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.186528][ T7880] netlink: 'syz.2.522': attribute type 63 has an invalid length. [ 93.270521][ T5745] Bluetooth: hci0: command tx timeout [ 93.308459][ T7794] veth0_vlan: entered promiscuous mode [ 93.323426][ T7794] veth1_vlan: entered promiscuous mode [ 93.341118][ T7794] veth0_macvtap: entered promiscuous mode [ 93.345893][ T7794] veth1_macvtap: entered promiscuous mode [ 93.356633][ T7794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.362465][ T7794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.367982][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.371111][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.376586][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.379352][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.457209][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.462535][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.473401][ T7890] netlink: 17 bytes leftover after parsing attributes in process `syz.2.523'. [ 93.479980][ T223] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.482462][ T223] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.490527][ T7890] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 93.553133][ T7892] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 93.563238][ T7892] romfs: unable to set blocksize [ 93.563238][ T7892] [ 93.589909][ T7899] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 93.674658][ T7902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.685812][ T7902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.719761][ T7913] syzkaller0: entered promiscuous mode [ 93.722186][ T7913] syzkaller0: entered allmulticast mode [ 93.727372][ T7914] tipc: Started in network mode [ 93.730284][ T7914] tipc: Node identity aae424d1006a, cluster identity 4711 [ 93.732774][ T7914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.735495][ T7914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.738026][ T7914] tipc: Enabled bearer , priority 0 [ 93.744351][ T7912] tipc: Resetting bearer [ 93.748417][ T7916] netlink: 12 bytes leftover after parsing attributes in process `syz.3.531'. [ 93.758376][ T7912] tipc: Disabling bearer [ 93.778771][ T7916] 8021q: adding VLAN 0 to HW filter on device bond3 [ 93.813342][ T7916] bond3: (slave veth5): Enslaving as an active interface with an up link [ 93.843316][ T42] kauditd_printk_skb: 53 callbacks suppressed [ 93.843340][ T42] audit: type=1400 audit(1785875242.275:684): avc: denied { mount } for pid=7922 comm="syz.3.533" name="/" dev="hugetlbfs" ino=23928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 93.865868][ T42] audit: type=1400 audit(1785875242.285:685): avc: denied { remount } for pid=7922 comm="syz.3.533" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 93.876382][ T42] audit: type=1400 audit(1785875242.285:686): avc: denied { write } for pid=7922 comm="syz.3.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 93.882477][ T42] audit: type=1400 audit(1785875242.305:687): avc: denied { unmount } for pid=5738 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 93.905398][ T7928] Illegal XDP return value 3643167041 on prog (id 106) dev N/A, expect packet loss! [ 93.929684][ T7931] ptrace attach of "/syz-executor exec"[7933] was attempted by "/syz-executor exec"[7931] [ 93.943870][ T42] audit: type=1400 audit(1785875242.375:688): avc: denied { connect } for pid=7935 comm="syz.1.537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 93.959136][ T7937] netlink: 232 bytes leftover after parsing attributes in process `syz.5.534'. [ 93.962476][ T42] audit: type=1400 audit(1785875242.395:689): avc: denied { write } for pid=7925 comm="syz.5.534" name="/" dev="9p" ino=81788961 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 94.004629][ T42] audit: type=1400 audit(1785875242.435:690): avc: denied { map } for pid=7929 comm="syz.3.536" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 94.026702][ T42] audit: type=1400 audit(1785875242.445:691): avc: denied { name_bind } for pid=7925 comm="syz.5.534" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 94.041546][ T7945] netlink: 4 bytes leftover after parsing attributes in process `syz.1.539'. [ 94.125446][ T7955] netlink: 'syz.3.542': attribute type 10 has an invalid length. [ 94.155393][ T7955] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.160112][ T7955] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 94.165253][ T7955] netlink: 14 bytes leftover after parsing attributes in process `syz.3.542'. [ 94.170042][ T42] audit: type=1400 audit(1785875242.605:692): avc: denied { accept } for pid=7951 comm="syz.1.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 94.185211][ T7955] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.197639][ T7955] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 94.212431][ T7955] bond0 (unregistering): Released all slaves [ 94.244866][ T7964] netlink: 28 bytes leftover after parsing attributes in process `syz.1.543'. [ 94.301823][ T42] audit: type=1400 audit(1785875242.735:693): avc: denied { map } for pid=7963 comm="syz.1.543" path="/170/proc/522/net/rpc/auth.rpcsec.context/channel" dev="proc" ino=4026533198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_rpc_t tclass=file permissive=1 [ 94.465364][ T7990] netlink: 'syz.3.548': attribute type 2 has an invalid length. [ 94.467991][ T7990] netlink: 'syz.3.548': attribute type 2 has an invalid length. [ 94.581790][ T8010] ocfs2: Unknown parameter 'grpquota' [ 94.989686][ T8041] tmpfs: Unknown parameter 'grpquota_block_har' [ 95.000961][ T8041] loop9: detected capacity change from 0 to 524287936 [ 95.042159][ T8045] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 95.214655][ T8052] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 95.222486][ T8052] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 95.316013][ T8068] afs: Unknown parameter 'subj_role' [ 95.332179][ T8068] e1000e 0000:00:02.0 eth1: removed PHC [ 95.346195][ T5745] Bluetooth: hci0: command tx timeout [ 95.472850][ T8068] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 95.660307][ T8077] usb_phy_generic usb_phy_generic.2.auto: dummy supplies not allowed for exclusive requests (id=vbus) [ 95.673569][ T8077] dwc2 dwc2.3.auto: supply vusb_d not found, using dummy regulator [ 95.691839][ T8077] dwc2 dwc2.3.auto: supply vusb_a not found, using dummy regulator [ 95.701939][ T8077] dwc2 dwc2.3.auto: Configuration mismatch. dr_mode forced to host [ 95.704775][ T8077] dwc2 dwc2.3.auto: Bad value for GSNPSID: 0x52540012 [ 95.710871][ T8098] SELinux: policydb magic number 0x30303030 does not match expected magic number 0xf97cff8c [ 95.714109][ T8098] SELinux: failed to load policy [ 95.797434][ T8106] netlink: 'syz.5.567': attribute type 11 has an invalid length. [ 95.875602][ T8087] ================================================================== [ 95.878145][ T8087] BUG: KASAN: slab-use-after-free in __release_resource+0x276/0x2c0 [ 95.881251][ T8087] Read of size 8 at addr ffff88802647c938 by task syz.3.564/8087 [ 95.885136][ T8087] [ 95.886197][ T8087] CPU: 2 UID: 0 PID: 8087 Comm: syz.3.564 Tainted: G L syzkaller #0 PREEMPT(full) [ 95.886218][ T8087] Tainted: [L]=SOFTLOCKUP [ 95.886222][ T8087] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 95.886237][ T8087] Call Trace: [ 95.886243][ T8087] [ 95.886249][ T8087] dump_stack_lvl+0x100/0x190 [ 95.886287][ T8087] print_report+0x13d/0x4b0 [ 95.886318][ T8087] ? __virt_addr_valid+0x239/0x430 [ 95.886337][ T8087] ? __release_resource+0x276/0x2c0 [ 95.886360][ T8087] kasan_report+0xdf/0x1c0 [ 95.886390][ T8087] ? __release_resource+0x276/0x2c0 [ 95.886411][ T8087] __release_resource+0x276/0x2c0 [ 95.886430][ T8087] release_resource+0x26/0x40 [ 95.886448][ T8087] pci_remove_bus_device+0x2d3/0x3b0 [ 95.886496][ T8087] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 95.886513][ T8087] remove_store+0x123/0x140 [ 95.886532][ T8087] ? __pfx_remove_store+0x10/0x10 [ 95.886547][ T8087] ? find_held_lock+0x2b/0x80 [ 95.886575][ T8087] ? sysfs_file_kobj+0xe4/0x290 [ 95.886598][ T8087] ? sysfs_file_kobj+0xe4/0x290 [ 95.886615][ T8087] ? __pfx_remove_store+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 95.886630][ T8087] dev_attr_store+0x58/0x80 [ 95.886679][ T8087] ? __pfx_dev_attr_store+0x10/0x10 [ 95.886696][ T8087] sysfs_kf_write+0xf2/0x150 [ 95.886715][ T8087] kernfs_fop_write_iter+0x3e0/0x5f0 [ 95.886732][ T8087] ? __pfx_sysfs_kf_write+0x10/0x10 [ 95.886751][ T8087] vfs_write+0x6ac/0x1050 [ 95.886773][ T8087] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 95.886790][ T8087] ? __pfx_vfs_write+0x10/0x10 [ 95.886811][ T8087] ksys_write+0x12a/0x250 [ 95.886828][ T8087] ? __pfx_ksys_write+0x10/0x10 [ 95.886853][ T8087] do_syscall_64+0x115/0x870 [ 95.886914][ T8087] ? clear_bhb_loop+0x40/0x90 [ 95.886929][ T8087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.886942][ T8087] RIP: 0033:0x7f37ac59de99 [ 95.886954][ T8087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.886965][ T8087] RSP: 002b:00007f37ad3c3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 95.886983][ T8087] RAX: ffffffffffffffda RBX: 00007f37ac825fa0 RCX: 00007f37ac59de99 [ 95.886991][ T8087] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000005 [ 95.886999][ T8087] RBP: 00007f37ac633eaf R08: 0000000000000000 R09: 0000000000000000 [ 95.887006][ T8087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.887014][ T8087] R13: 00007f37ac826038 R14: 00007f37ac825fa0 R15: 00007ffd3ff1f688 [ 95.887026][ T8087] [ 95.887030][ T8087] [ 95.977418][ T8087] Allocated by task 8077: [ 95.978786][ T8087] kasan_save_stack+0x30/0x50 [ 95.980294][ T8087] kasan_save_track+0x14/0x30 [ 95.981784][ T8087] __kasan_kmalloc+0xaa/0xb0 [ 95.983238][ T8087] __kmalloc_node_track_caller_noprof+0x331/0x830 [ 95.985248][ T8087] kmemdup_noprof+0x29/0x60 [ 95.986700][ T8087] platform_device_add_resources+0x37/0x100 [ 95.988555][ T8087] dwc2_pci_probe+0x1d3/0x360 [ 95.990381][ T8087] local_pci_probe+0xdd/0x1b0 [ 95.992303][ T8087] pci_call_probe+0x176/0x800 [ 95.994260][ T8087] pci_device_probe+0x1cd/0x370 [ 95.996145][ T8087] really_probe+0x241/0xa60 [ 95.997684][ T8087] __driver_probe_device+0x20e/0x450 [ 95.999375][ T8087] device_driver_attach+0xd1/0x220 [ 96.001004][ T8087] bind_store+0xf4/0x190 [ 96.002336][ T8087] drv_attr_store+0x74/0xb0 [ 96.003767][ T8087] sysfs_kf_write+0xf2/0x150 [ 96.005224][ T8087] kernfs_fop_write_iter+0x3e0/0x5f0 [ 96.006804][ T8087] vfs_write+0x6ac/0x1050 [ 96.008126][ T8087] ksys_write+0x12a/0x250 [ 96.009543][ T8087] do_syscall_64+0x115/0x870 [ 96.011011][ T8087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.012881][ T8087] [ 96.013654][ T8087] Freed by task 8087: [ 96.014930][ T8087] kasan_save_stack+0x30/0x50 [ 96.016454][ T8087] kasan_save_track+0x14/0x30 [ 96.018110][ T8087] kasan_save_free_info+0x3b/0x70 [ 96.020153][ T8087] __kasan_slab_free+0x5f/0x80 [ 96.021716][ T8087] kfree+0x22b/0x6c0 [ 96.022964][ T8087] platform_device_release+0x8a/0xb0 [ 96.024656][ T8087] device_release+0xd2/0x270 [ 96.026141][ T8087] kobject_put+0x1f7/0x640 [ 96.027570][ T8087] put_device+0x1f/0x30 [ 96.028891][ T8087] platform_device_unregister+0x45/0x50 [ 96.031168][ T8087] dwc2_pci_remove+0x55/0xd0 [ 96.033161][ T8087] pci_device_remove+0xb2/0x1d0 [ 96.034952][ T8087] device_remove+0xcb/0x180 [ 96.036377][ T8087] device_release_driver_internal+0x44e/0x620 [ 96.038280][ T8087] pci_stop_bus_device+0x120/0x160 [ 96.039905][ T8087] pci_stop_and_remove_bus_device+0x58/0xa0 [ 96.041762][ T8087] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 96.043787][ T8087] remove_store+0x123/0x140 [ 96.045251][ T8087] dev_attr_store+0x58/0x80 [ 96.046712][ T8087] sysfs_kf_write+0xf2/0x150 [ 96.048177][ T8087] kernfs_fop_write_iter+0x3e0/0x5f0 [ 96.049889][ T8087] vfs_write+0x6ac/0x1050 [ 96.051291][ T8087] ksys_write+0x12a/0x250 [ 96.052632][ T8087] do_syscall_64+0x115/0x870 [ 96.054051][ T8087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.055905][ T8087] [ 96.056853][ T8087] The buggy address belongs to the object at ffff88802647c900 [ 96.056853][ T8087] which belongs to the cache kmalloc-128 of size 128 [ 96.062417][ T8087] The buggy address is located 56 bytes inside of [ 96.062417][ T8087] freed 128-byte region [ffff88802647c900, ffff88802647c980) [ 96.067736][ T8087] [ 96.068773][ T8087] The buggy address belongs to the physical page: [ 96.071401][ T8087] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2647c [ 96.075021][ T8087] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 96.077944][ T8087] page_type: f5(slab) [ 96.079636][ T8087] raw: 00fff00000000000 ffff88801bc42a00 dead000000000100 dead000000000122 [ 96.083207][ T8087] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 96.086546][ T8087] page dumped because: kasan: bad access detected [ 96.089099][ T8087] page_owner tracks the page as allocated [ 96.090850][ T8087] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5148, tgid 5148 (udevd), ts 66055661392, free_ts 66050120633 [ 96.096959][ T8087] post_alloc_hook+0xfd/0x120 [ 96.098441][ T8087] get_page_from_freelist+0xf48/0x3530 [ 96.100189][ T8087] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 96.102003][ T8087] new_slab+0xa2/0x640 [ 96.103297][ T8087] refill_objects+0xe3/0x410 [ 96.104782][ T8087] __pcs_replace_empty_main+0x376/0x680 [ 96.106516][ T8087] __kmalloc_cache_noprof+0x479/0x6c0 [ 96.108215][ T8087] kernfs_fop_open+0x9fa/0xd50 [ 96.109762][ T8087] do_dentry_open+0x6ab/0x14d0 [ 96.111266][ T8087] vfs_open+0x82/0x3f0 [ 96.112560][ T8087] path_openat+0x2873/0x4280 [ 96.114026][ T8087] do_file_open+0x20e/0x430 [ 96.115485][ T8087] do_sys_openat2+0x10f/0x1e0 [ 96.117000][ T8087] __x64_sys_openat+0x12d/0x210 [ 96.118532][ T8087] do_syscall_64+0x115/0x870 [ 96.120217][ T8087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.122118][ T8087] page last free pid 5738 tgid 5738 stack trace: [ 96.124085][ T8087] __free_frozen_pages+0x79f/0x1090 [ 96.126019][ T8087] __kasan_populate_vmalloc+0x164/0x210 [ 96.128347][ T8087] alloc_vmap_area+0x95d/0x2bb0 [ 96.130391][ T8087] __get_vm_area_node+0x1ca/0x330 [ 96.132491][ T8087] __vmalloc_node_range_noprof+0x228/0x1630 [ 96.134951][ T8087] __vmalloc_node_noprof+0xad/0xf0 [ 96.137079][ T8087] do_ip6t_get_ctl+0x7e0/0xc30 [ 96.139100][ T8087] nf_getsockopt+0x7c/0xe0 [ 96.141059][ T8087] ipv6_getsockopt+0x207/0x2a0 [ 96.143087][ T8087] tcp_getsockopt+0xa1/0x110 [ 96.145057][ T8087] do_sock_getsockopt+0x50a/0x6e0 [ 96.147179][ T8087] __sys_getsockopt+0x148/0x260 [ 96.149229][ T8087] __x64_sys_getsockopt+0xbd/0x160 [ 96.151357][ T8087] do_syscall_64+0x115/0x870 [ 96.153324][ T8087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.155812][ T8087] [ 96.156601][ T8087] Memory state around the buggy address: [ 96.158353][ T8087] ffff88802647c800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 96.161301][ T8087] ffff88802647c880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 96.163820][ T8087] >ffff88802647c900: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 96.166311][ T8087] ^ [ 96.168165][ T8087] ffff88802647c980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 96.170669][ T8087] ffff88802647ca00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 96.173151][ T8087] ================================================================== [ 96.175978][ T8087] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 96.178275][ T8087] CPU: 2 UID: 0 PID: 8087 Comm: syz.3.564 Tainted: G L syzkaller #0 PREEMPT(full) [ 96.181730][ T8087] Tainted: [L]=SOFTLOCKUP [ 96.183089][ T8087] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.186243][ T8087] Call Trace: [ 96.187320][ T8087] [ 96.188264][ T8087] dump_stack_lvl+0x100/0x190 [ 96.189988][ T8087] vpanic+0x552/0x970 [ 96.191597][ T8087] ? __pfx_vpanic+0x10/0x10 [ 96.193105][ T8087] ? mark_held_locks+0x40/0x70 [ 96.195109][ T8087] ? irqentry_exit+0x24d/0xa00 [ 96.197153][ T8087] ? __release_resource+0x276/0x2c0 [ 96.199315][ T8087] panic+0xd1/0xe0 [ 96.200903][ T8087] ? __pfx_panic+0x10/0x10 [ 96.202762][ T8087] check_panic_on_warn.cold+0x19/0x34 [ 96.205007][ T8087] end_report.part.0+0x3a/0x90 [ 96.207036][ T8087] kasan_report.cold+0xe/0x18 [ 96.209007][ T8087] ? __release_resource+0x276/0x2c0 [ 96.211319][ T8087] __release_resource+0x276/0x2c0 [ 96.213533][ T8087] release_resource+0x26/0x40 [ 96.215507][ T8087] pci_remove_bus_device+0x2d3/0x3b0 [ 96.217741][ T8087] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 96.220168][ T8087] remove_store+0x123/0x140 [ 96.221644][ T8087] ? __pfx_remove_store+0x10/0x10 [ 96.223221][ T8087] ? find_held_lock+0x2b/0x80 [ 96.224740][ T8087] ? sysfs_file_kobj+0xe4/0x290 [ 96.226294][ T8087] ? sysfs_file_kobj+0xe4/0x290 [ 96.227840][ T8087] ? __pfx_remove_store+0x10/0x10 [ 96.229460][ T8087] dev_attr_store+0x58/0x80 [ 96.230891][ T8087] ? __pfx_dev_attr_store+0x10/0x10 [ 96.232517][ T8087] sysfs_kf_write+0xf2/0x150 [ 96.233977][ T8087] kernfs_fop_write_iter+0x3e0/0x5f0 [ 96.235649][ T8087] ? __pfx_sysfs_kf_write+0x10/0x10 [ 96.237278][ T8087] vfs_write+0x6ac/0x1050 [ 96.238636][ T8087] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 96.240487][ T8087] ? __pfx_vfs_write+0x10/0x10 [ 96.242001][ T8087] ksys_write+0x12a/0x250 [ 96.243303][ T8087] ? __pfx_ksys_write+0x10/0x10 [ 96.244773][ T8087] do_syscall_64+0x115/0x870 [ 96.246237][ T8087] ? clear_bhb_loop+0x40/0x90 [ 96.247736][ T8087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.249619][ T8087] RIP: 0033:0x7f37ac59de99 [ 96.251031][ T8087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.257054][ T8087] RSP: 002b:00007f37ad3c3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 96.259846][ T8087] RAX: ffffffffffffffda RBX: 00007f37ac825fa0 RCX: 00007f37ac59de99 [ 96.262932][ T8087] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000005 [ 96.265412][ T8087] RBP: 00007f37ac633eaf R08: 0000000000000000 R09: 0000000000000000 [ 96.267878][ T8087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.270351][ T8087] R13: 00007f37ac826038 R14: 00007f37ac825fa0 R15: 00007ffd3ff1f688 [ 96.272817][ T8087] [ 96.274425][ T8087] Kernel Offset: disabled [ 96.275788][ T8087] Rebooting in 86400 seconds.. VM DIAGNOSIS: 18:49:16 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000046 RBX=0000000000000000 RCX=0f6c850f7c064f93 RDX=0000000000000000 RSI=ffffffff8e29c3e6 RDI=ffffffff8c401680 RBP=ffffffff825dbf65 RSP=ffffc9000636f848 R8 =0000000000000001 R9 =00000000000001d2 R10=0000000000000200 R11=0000000000000000 R12=ffff88803a6ea540 R13=ffffffff825dbf65 R14=0000000000000283 R15=0000000000001000 RIP=ffffffff8bbb2a80 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f36b6b336c0 ffffffff 00c00000 GS =0000 ffff8880d5ddc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fca3954ee9c CR3=0000000059e90000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010001 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdea311e96 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdea311e96 00007ffdea311e9c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f36b5c34492 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f36b5c344d2 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f36b5c34636 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f36b5c344c4 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f36b5df05f8 00007f36b5df05c8 00007f36b5df0600 00007f36b5df05e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000002 RCX=ffffffff81fdc702 RDX=ffff888028314a80 RSI=ffffffff81fdc6dc RDI=ffff888028314a80 RBP=ffff88806a643520 RSP=ffffc9000160f488 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000003 R13=ffffed100d4c86a5 R14=0000000000000001 R15=ffff88806a53c880 RIP=ffffffff81fdc6de RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5edc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f9420957e20 CR3=000000002f723000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe840935b0 00007ffe840935b0 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f941fdf0823 00007f941fdf0823 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f941fdf0e80 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f941fdf0e80 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557027a008 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100100005ba8008 0001000004080606 0120a0098004089a 85ba9a0800010000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000806060120b400 08000fb80332a808 000fb00300000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e206c6c61637379 7320746820737320 3265737320657373 207273786620786d ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6373745f746e6174 736e6f63206d6c20 7063737464722062 6731657064702078 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 706f74736e6f6e20 79676f6c6f706f74 78206c706f6e2064 6f6f675f70657220 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6973796870207374 6962203634203a09 73657a6973207373 65726464610a3436 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 67616e616d207265 776f700a6c617574 7269762073746962 203834202c6c6163 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000060000006f 666e697570632f63 6f72702f0000000d 0a0a3a746e656d65 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 01000000ffffffb0 0000000400000018 0000002c00000040 0000005400000070 info registers vcpu 2 CPU#2 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff85a38c20 RDI=ffffffff9ba07b40 RBP=ffffffff9ba07b00 RSP=ffffc900064c74f0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000020 R14=fffffbfff3740fba R15=dffffc0000000000 RIP=ffffffff85a38c47 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f37ad3c36c0 ffffffff 00c00000 GS =0000 ffff8880d5fdc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f36b6b11ff8 CR3=000000003e151000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f37ad35d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd3ff1fb76 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd3ff1fb76 00007ffd3ff1fb7c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f37ac634492 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f37ac6344d2 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f37ac634636 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f37ac6344c4 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f37ac7f0600 00007f37ac7f05e0 00007f37ac7f05e8 00007f37ac7f0618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f37ac7f05f8 00007f37ac7f05c8 00007f37ac7f0600 00007f37ac7f05e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=fffff52000d4af83 RBX=dffffc0000000000 RCX=ffffc90006a57d40 RDX=00000000000001b8 RSI=ffffc90006a57f48 RDI=ffffc90006a57de8 RBP=0000000004000000 RSP=ffffc90006a57bd0 R8 =0000000000000007 R9 =0000000000000000 R10=0000000004000000 R11=0000000000000000 R12=ffff88802ecd4a80 R13=ffffc90006a57de8 R14=ffffc90006a57f48 R15=ffffc90006a57de8 RIP=ffffffff81aab97f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f6402f9fc80 ffffffff 00c00000 GS =0000 ffff8880d60dc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f79261eb580 CR3=000000005d505000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 357a79732f74656e 2f70756f7267637a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdea311e96 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdea311e96 00007ffdea311e9c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f36b5c34492 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f36b5c344d2 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f36b5c34636 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f36b5c344c4 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000050 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000