last executing test programs: 7m58.899820861s ago: executing program 32 (id=251): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x16) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x21) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = ioctl$KVM_GET_STATS_FD_cpu(r4, 0xaece) read$FUSE(r5, 0x0, 0x0) ioctl(r0, 0x40204706, &(0x7f0000000200)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000, 0xffffffffffffffff}) dup(r6) ioctl(r4, 0x404c4701, &(0x7f0000000240)="0100000000000000010000000100000001000200010000000000000020000000200000000100000001f7eb0cea56e2ba69a1e1dbbfda35409aee617035303f079869c6a75a8f7d0179de6b164340a46c80cb0267f8984c3836312fb3173847df9aec221add11abb209f48c9f5963ce7bb34204598a4272bef2c332442d07") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000800000000020000002c0004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a30000000000900010073797a30000000000900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x80) 7m26.998331676s ago: executing program 3 (id=781): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f00000001c0)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000240)="086a8333", 0x4}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e24, 0x4, @empty, 0x3}}, 0x800, 0x6, 0xffff1891, 0x0, 0xb23be0fbe66397b6, 0x9, 0x1b}, 0x9c) 7m26.863574404s ago: executing program 3 (id=783): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000008000000000000000900000073117f000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7m26.863251697s ago: executing program 3 (id=785): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1b"], 0x0, 0x10002, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000040)={'veth0_vlan\x00', @random='\x00\x00\x00\x00\x00 '}) 7m26.763625967s ago: executing program 3 (id=787): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101) 7m26.704059044s ago: executing program 3 (id=789): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 7m26.473974855s ago: executing program 3 (id=797): r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f00000001c0)="110000000200000000000c000000", 0xe) 7m26.280911285s ago: executing program 33 (id=797): r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f00000001c0)="110000000200000000000c000000", 0xe) 5m34.442135554s ago: executing program 4 (id=3190): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys_mnt\x00', 0x110) mount(0x0, &(0x7f00000000c0)='sys_mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='sys_mnt/block/zram0/comp_algorithm\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='lzo-rle', 0x7) (fail_nth: 1) 5m34.372524165s ago: executing program 4 (id=3192): r0 = add_key(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000005800)={r1, 0xa9}, 0x0, &(0x7f0000000780)="010040b6dcb8c658c8b9a7dcffd1bbdae49b8764c8cfeeb2dd200f6d3cdf5c69138da8463ffda45302d788a5c3fd0d82add6092e4edc32ee1405ef00000e25e5dce03e1191cabfd7c6beacd97746cfda01ed0f52ff54a611fe424e3561dbba6794b02cc3ae989632507bf94633f947611862a9267e5612ceba7a66affb0983077dbc088c9a4b6b6293294a51c8214732e04a56638c7911d73ac25dd3e6c7d1cd8c928c357207fca2e9", 0x0) 5m34.232479325s ago: executing program 4 (id=3193): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) write(r0, &(0x7f00000001a0)='1', 0x1) 5m34.183636664s ago: executing program 4 (id=3195): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0x10012, r1, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo/3\x00') read$FUSE(r2, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000001a00010000000000000000001c14cfbf19a1000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 5m34.120517742s ago: executing program 4 (id=3197): userfaultfd(0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x178) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800040, 0x0) chdir(&(0x7f0000000240)='./file0\x00') symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000000)='./bus\x00') ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'gretap0\x00', &(0x7f0000000340)={'sit0\x00', 0x0, 0x7800, 0x8, 0x4, 0x2, {{0x23, 0x4, 0x2, 0xc, 0x8c, 0x65, 0x0, 0x0, 0x4, 0x0, @rand_addr=0x64010102, @multicast1, {[@timestamp_prespec={0x44, 0xc, 0x22, 0x3, 0x3, [{@empty, 0x16}]}, @noop, @cipso={0x86, 0xc, 0x1, [{0x5, 0x6, "5d89329c"}]}, @timestamp_addr={0x44, 0x1c, 0x35, 0x1, 0x9, [{@private=0xa010100, 0x81}, {@loopback, 0x1000}, {@private=0xa010102, 0x6}]}, @cipso={0x86, 0x3f, 0x3, [{0x2, 0xe, "4629efd64f96d4c66a88fe7a"}, {0x6, 0xf, "c5b3f4f2c89918a2289dab5bc8"}, {0x6, 0x2}, {0x2, 0x3, '9'}, {0x1, 0x5, "d6eb71"}, {0x6, 0x8, "205cea413912"}, {0x5, 0xa, "3f65a40edcc9ff91"}]}, @noop]}}}}}) rename(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)='.\x02\x00') syz_emit_ethernet(0x23, &(0x7f0000000040)=ANY=[@ANYBLOB="efb7f252d3dfaaaaaaaaaabb00000000001142424597eb9a2254c6ab1014101a5aba50"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5m33.847359141s ago: executing program 4 (id=3201): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0d00000004000000040000000c00000000000000", @ANYRES32=r0, @ANYBLOB], 0x50) 5m33.76569243s ago: executing program 34 (id=3201): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0d00000004000000040000000c00000000000000", @ANYRES32=r0, @ANYBLOB], 0x50) 4m54.199683286s ago: executing program 6 (id=3823): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x4000000, 0x0, &(0x7f0000000480)=""/72, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x4a81, &(0x7f0000000040)={[{}]}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)={0x1, 0x0, [{0x0, 0x6e, &(0x7f0000001540)=""/110}]}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x6}, 0x28) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x4e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/51, 0x0, &(0x7f0000000500)=""/4092}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000440)=0x8101) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000100001e456b8aa00000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440080000000900010073797a3000000000080003400000000114000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4000010) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03000000000000000000020000000900020073797a310000000008000340000000010900010073797a30"], 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000080), 0x814, 0x480000) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_HWPT_ALLOC$TEST(r4, 0x3b89, &(0x7f00000001c0)={0x28, 0x2, r6, r5, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000180)}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r4, 0x3b8b, &(0x7f0000000000)={0x10, 0x1, r7}) ioctl$KVM_DIRTY_TLB(r3, 0x4010aeaa, &(0x7f00000001c0)={0x8, 0x57}) 4m54.051482151s ago: executing program 6 (id=3826): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x3c, 0x1, 0x4, 0x801, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFULA_CFG_QTHRESH={0x8}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x3}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xfff}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008180}, 0x24004010) 4m53.949599055s ago: executing program 6 (id=3828): socket$inet6_sctp(0xa, 0x801, 0x84) open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) socket$netlink(0x10, 0x3, 0x8000000004) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x4004000) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r5], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) (fail_nth: 2) 4m53.578413261s ago: executing program 6 (id=3832): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/kmsg\x00', 0x0, 0x0) close(0xffffffffffffffff) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./nfsd/nfsv4gracetime\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_clone3(0x0, 0x0) write(r2, &(0x7f00000006c0)='1', 0x1) readv(r1, &(0x7f0000000540)=[{&(0x7f0000000280)=""/40, 0x28}, {&(0x7f00000005c0)=""/111, 0x6f}], 0x2) write$tun(r0, 0x0, 0x11) mount$9p_fd(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000380), 0x4801, &(0x7f0000000800)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/kmsg\x00', 0x0, 0x0) (async) close(0xffffffffffffffff) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000680)='./nfsd/nfsv4gracetime\x00', 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) syz_clone3(0x0, 0x0) (async) write(r2, &(0x7f00000006c0)='1', 0x1) (async) readv(r1, &(0x7f0000000540)=[{&(0x7f0000000280)=""/40, 0x28}, {&(0x7f00000005c0)=""/111, 0x6f}], 0x2) (async) write$tun(r0, 0x0, 0x11) (async) mount$9p_fd(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000380), 0x4801, &(0x7f0000000800)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) (async) 4m53.26084034s ago: executing program 6 (id=3838): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/mdstat\x00', 0x1800, 0x0) setns(0xc9, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYBLOB="0300000000000000280012800a0001"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) preadv(r0, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/198, 0xc6}], 0x1, 0x7, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/sda\x00', 0x8042, 0x0) ioctl$SG_SET_RESERVED_SIZE(r2, 0x401070c9, &(0x7f0000000280)=0x7) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000c40)=@raw={'raw\x00', 0x8, 0x3, 0x3d8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@local, @mcast1, [0xff000000, 0x0, 0xffffff00], [0xff000000, 0xffffff00, 0x0, 0xffffffff], 'veth1_to_batadv\x00', 'veth0_to_hsr\x00', {0xff}, {0xff}, 0x2f, 0x51, 0x4, 0x15}, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@unspec=@physdev={{0x68}, {'dummy0\x00', {0xff}, 'macvtap0\x00', {0xff}, 0x0, 0x2}}, @common=@srh1={{0x90}, {0x1, 0x1, 0x0, 0x0, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3a}, @ipv4={'\x00', '\xff\xff', @remote}, [0xff000000, 0xff, 0xffffffff, 0xffffffff], [0x0, 0x0, 0x0, 0xffffff00], [0xff, 0xffffffff, 0xff], 0x1, 0x1aeeb7877a132835}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, [0xffffff00, 0xff000000, 0x0, 0xffffff00], [0x0, 0xffffffff, 0xffffffff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {0xff}, {0x101}, 0x11, 0x2, 0x5, 0x5}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x3, 0x2, 0x3, 0x1, 0x2}}, @common=@inet=@set1={{0x28}, {{0x0, 0x2, 0x1}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x100, 0x700000, 0x8, 'syz0\x00', {0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) 4m51.571699978s ago: executing program 6 (id=3856): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000740)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x1000}}}}}}}, 0x0) (fail_nth: 2) 4m51.278367808s ago: executing program 35 (id=3856): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000740)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x1000}}}}}}}, 0x0) (fail_nth: 2) 4m12.846847427s ago: executing program 2 (id=4432): socket$inet6(0xa, 0x3, 0x3a) syz_emit_ethernet(0x0, 0x0, 0x0) 4m12.67426767s ago: executing program 2 (id=4435): setns(0xc9, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8) writev(r0, &(0x7f0000000100), 0x0) 4m12.56226345s ago: executing program 2 (id=4436): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2800000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000dc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8000002}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x128, 0x0, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x71, 0x6, "8d2fdeccbc358ed77d685ba765260f52f680360d9f4c38a65aadc4da8452475537c40c3c623ef7c015330748f183c560661019a6627e6bfa8f5447ae9cc4fef4603a7e0b1c28ad2e5990748be7945293415106e16ff715ca93b5bddbe8d80b880290c62bdf1a250d324fec9331"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x6e, 0x6, "1e457fc9f56ff14d561bd02c0dec518023c49cd63b4ddac700029debff7c59424b47a2b37c45ad23a4af729859cc7d4c8ea589c8245d565a15fa4a22df31d69537f6ec7b030c0e7499e71088189766a7900db203e21ddf6c305bff6f610bbe9d37a67397cc6b3f591554"}, @NFTA_TABLE_FLAGS={0x8}]}, @NFT_MSG_DELTABLE={0x2c, 0x2, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x801, 0x0, 0x0, {0x8, 0x0, 0x5}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x1e4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x4000) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_sctp(0x2, 0x5, 0x84) syz_init_net_socket$llc(0x1a, 0x3, 0x0) shutdown(0xffffffffffffffff, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000480)={0x36e, 0x5, 0x0, 0x1000000, 0x2, 0x0, [{0x400, 0x4, 0x9, '\x00', 0x800}, {0x80000000, 0x1000, 0x3}]}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) readv(0xffffffffffffffff, &(0x7f0000000a80)=[{&(0x7f0000000a40)=""/35, 0x23}], 0x1) ioctl$sock_inet_SIOCSIFADDR(r4, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @empty}}) 4m12.411554568s ago: executing program 2 (id=4439): r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0xffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000033c0)={0x53, 0xfffffffffffffffb, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000004c0)="a0353ff2eb00", 0x0, 0x0, 0x10032, 0x2000, 0x0}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0x1df) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x12, 0x8031, 0xffffffffffffffff, 0x6a855000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) bind$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000002c0)={0x4, 0x980900, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./lower\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./upper\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./work\x00', 0x1ed) mount(0x0, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000140)='lowerdir=./lower,upperdir=./upper,workdir=./work,override_creds\x00') syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r3 = memfd_create(0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x0, 0x1, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x24000000) sendto$inet(r4, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) write(r3, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54", 0x3f) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) 4m11.941038458s ago: executing program 2 (id=4444): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0xe00, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000002100090002000000ff1d85dbdf2501"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 4m11.19345586s ago: executing program 2 (id=4452): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'geneve1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x1c8, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0x2}, {0x10, 0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x198, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0x0, 0x1}}, @TCA_GRED_LIMIT={0x8, 0x5, 0x401}, @TCA_GRED_PARMS={0x38, 0x1, {0x9, 0xb, 0x1, 0xc, 0x2, 0x6, 0x7, 0x7, 0x10, 0x8, 0x1d, 0xf, 0x2, 0xd, 0x7, 0x7}}, @TCA_GRED_MAX_P={0x8, 0x4, 0x4}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_PARMS={0x38, 0x1, {0x4, 0xbaa, 0x8, 0xa, 0xb988, 0x0, 0x1, 0xe149, 0xa, 0x8, 0xa, 0x1c, 0xf, 0x0, 0x9, 0x32}}]}}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x3, 0x0}, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x13, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f00000011c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0x2f, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000a00)="6d64300a9e550fa8df08c97eccca60d184ad5a523e6fa579071a3e266da77a351ee94057fe0aae07b6587060a1f9ddd0276e0a7fb376d1e3a34185e593a47b8ff53b18856aa197e1101f133b68d9b82f768c999a7b4c95d6f3f7cd157b2c8c98a57e9751a563c7dcf756e650eb43fac8a500"/128, 0x80) r7 = openat(r4, &(0x7f0000000180)='./sys/block/md0/md/level\x00', 0x0, 0x1) write(r7, &(0x7f00000001c0)='raid1\n', 0x6) r8 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r8, &(0x7f0000000240)='2\n', 0x2) r9 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r9, &(0x7f00000002c0)='1:0\n', 0x4) r10 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x8001, 0x0) write(r10, &(0x7f0000000340)='1:1\n', 0x4) r11 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1, 0x0) write(r11, &(0x7f00000003c0)='0\n', 0x2) r12 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md0/md/dev-ram1/slot\x00', 0x1, 0x0) write(r12, &(0x7f0000000440)='1\n', 0x2) write(r6, &(0x7f0000000940)='\n=\x00', 0x3) r13 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r13, &(0x7f0000000640)='readonly\n', 0x9) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ffffff085d37512eb281d10543", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m11.151724837s ago: executing program 36 (id=4452): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'geneve1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x1c8, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0x2}, {0x10, 0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x198, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0x0, 0x1}}, @TCA_GRED_LIMIT={0x8, 0x5, 0x401}, @TCA_GRED_PARMS={0x38, 0x1, {0x9, 0xb, 0x1, 0xc, 0x2, 0x6, 0x7, 0x7, 0x10, 0x8, 0x1d, 0xf, 0x2, 0xd, 0x7, 0x7}}, @TCA_GRED_MAX_P={0x8, 0x4, 0x4}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_PARMS={0x38, 0x1, {0x4, 0xbaa, 0x8, 0xa, 0xb988, 0x0, 0x1, 0xe149, 0xa, 0x8, 0xa, 0x1c, 0xf, 0x0, 0x9, 0x32}}]}}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x3, 0x0}, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x13, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f00000011c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0x2f, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000a00)="6d64300a9e550fa8df08c97eccca60d184ad5a523e6fa579071a3e266da77a351ee94057fe0aae07b6587060a1f9ddd0276e0a7fb376d1e3a34185e593a47b8ff53b18856aa197e1101f133b68d9b82f768c999a7b4c95d6f3f7cd157b2c8c98a57e9751a563c7dcf756e650eb43fac8a500"/128, 0x80) r7 = openat(r4, &(0x7f0000000180)='./sys/block/md0/md/level\x00', 0x0, 0x1) write(r7, &(0x7f00000001c0)='raid1\n', 0x6) r8 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r8, &(0x7f0000000240)='2\n', 0x2) r9 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r9, &(0x7f00000002c0)='1:0\n', 0x4) r10 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x8001, 0x0) write(r10, &(0x7f0000000340)='1:1\n', 0x4) r11 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1, 0x0) write(r11, &(0x7f00000003c0)='0\n', 0x2) r12 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md0/md/dev-ram1/slot\x00', 0x1, 0x0) write(r12, &(0x7f0000000440)='1\n', 0x2) write(r6, &(0x7f0000000940)='\n=\x00', 0x3) r13 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r13, &(0x7f0000000640)='readonly\n', 0x9) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ffffff085d37512eb281d10543", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m0.016231485s ago: executing program 5 (id=4586): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40800) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x218, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1ec, 0x3, 0x0, 0x1, [{0x1e8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_USERDATA={0xb5, 0x6, 0x1, 0x0, "21697f307c3e07ff1a4c08a53a25f645970845f02bd7918be89071f3da92abfeaeeaa281fb7c2c676c393bbb811ce1bd48adea5ad5a7d51b6ca90d8dca44b805c0596f76d019231504fbc62c1584854343f982e35d6d9d74dbb986f5bbb079e9c361a85bb822abf03a6b9777a2cad1376688c8985a2f4c64424e0670bad3a7d7ffcfe1ef59b555ae6ba6c13a79db65245eff2b9c6add1c8269ab3db985e25a58dce737a4528b5778249d49c212f390755b"}, @NFTA_SET_ELEM_EXPRESSIONS={0x120, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0xc4, 0x1, 0x0, 0x1, @target={{0xb}, @val={0xb4, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_NAME={0x9, 0x1, 'DNAT\x00'}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_INFO={0x81, 0x3, "cf8963a6913f9801d2a494f3fdff4917fe3e7123418f82cae09c1fef68578cbdb8391d92750c78ccd0ca93d8992a8562d1c1416ccc8dfc7f85ce8ca6ab1038d0ca4f3ab55bf9a93a6816eef34306444dd796612b4772507b45d925494737f0b7c45a54365a0d4ab745135122ffe99017b1b2062e317eceee1fc5d4d257"}]}}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x240}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3m59.921780722s ago: executing program 5 (id=4587): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x1c, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040004}, 0x880) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001040)='/proc/key-users\x00', 0x0, 0x0) preadv2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)=""/114, 0x72}], 0x1, 0x2f, 0x100000c0, 0x6) (async) preadv2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)=""/114, 0x72}], 0x1, 0x2f, 0x100000c0, 0x6) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000001a000100000000000000000081"], 0x30}}, 0x0) 3m59.920073645s ago: executing program 5 (id=4589): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x94, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x30}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x49}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x42}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x20048004}, 0x820) 3m59.833559128s ago: executing program 5 (id=4590): setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000340)) write(r0, &(0x7f0000000100)='slave-24c02 0x1', 0xf) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000100)={0x0, 0x60, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r4, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r5, &(0x7f0000000400)='!sub:evt:mod:', 0xd) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount$bind(&(0x7f00000000c0)='./file0/../file0/../file0\x00', &(0x7f0000000100)='./file0/../file0/../file0\x00', &(0x7f0000000140), 0x404, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0\x00') 3m59.748398573s ago: executing program 5 (id=4592): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/kernel/sem\x00', 0x1, 0x0) stat(&(0x7f00000000c0)='./proc/sys/kernel/sem\x00', &(0x7f0000000140)) 3m59.51243053s ago: executing program 5 (id=4600): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x30, &(0x7f00000001c0), 0x10}, 0x94) writev(r0, &(0x7f0000000cc0)=[{&(0x7f0000000080)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) 3m59.373586562s ago: executing program 37 (id=4600): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x30, &(0x7f00000001c0), 0x10}, 0x94) writev(r0, &(0x7f0000000cc0)=[{&(0x7f0000000080)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) 3m27.558998707s ago: executing program 0 (id=4948): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000200fc0000000800050064000000050006"], 0x44}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) 3m27.479980937s ago: executing program 0 (id=4950): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r4, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x5) write$bt_hci(r1, 0x0, 0x8) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r6) sendmsg$inet6(r6, &(0x7f00000000c0)={&(0x7f0000000340)={0xa, 0x4e24, 0xb, @loopback, 0x5}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)='\x00', 0x1}], 0x1}, 0x48043) r7 = dup(r6) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffd, 0x2, 0x2, 0x91, 0x48, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0xfffffff7, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) ioctl$KDGKBDIACR(r7, 0x4b4a, &(0x7f0000000300)=""/174) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r8, r10, 0x25, 0x2, @void}, 0x10) write$tun(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="034886dd120012000000140000006000000003"], 0xfdef) socket$nl_route(0x10, 0x3, 0x0) 3m26.391286866s ago: executing program 0 (id=4963): r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) syz_emit_ethernet(0x10c6, &(0x7f00000001c0)={@broadcast, @random="9e4338bf2d14", @void, {@ipv6={0x86dd, @udp={0xd, 0x6, "fc19a4", 0x1090, 0x11, 0x1, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[@srh={0x32, 0x10, 0x4, 0x8, 0x8, 0x20, 0x9, [@loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, @remote, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}], {0x4e22, 0x4e23, 0x1008, 0x0, @opaque="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"}}}}}}, 0x0) 3m26.390924564s ago: executing program 0 (id=4964): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000000)=0xb2e, 0x4) (async) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BTRFS_IOC_ENCODED_WRITE(r1, 0x40809440, &(0x7f0000000180)={&(0x7f0000000140)=[{&(0x7f0000000080)="eb2884436176f11ce2c30c0ffb32d70c7f126dcb4bcbe156f42d6307274ecc9ad8397050d8b48e857391ad4da583770d32c38f9393a803f7c3a86402000eb8129807385e97d46998b8d748a3a0ebef3b7f45f174b5eb94d0f8fbd5e1639d6933af86ee8a742f8e2c1da2570ee1db4483b85480b46d2dfb3d3af45500ac3284077e498b636bbe77e524c7c2f1f72c7ba41c7ad61475f1986a2c2bb099a7e9021fe95f153b6db5bf6a6be69d50a5bda8", 0xaf}], 0x1, 0x859, 0x0, 0x2, 0x1000, 0x10000, 0x2}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) (async) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x1d, r3}, 0x10, &(0x7f0000000340)={&(0x7f00000002c0)={0x7, 0x104, 0x4196, {r4, r5/1000+60000}, {0x77359400}, {0x4, 0x1, 0x0, 0x1}, 0x1, @canfd={{0x4, 0x1, 0x0, 0x1}, 0xf, 0x7, 0x0, 0x0, "d905451b1ac0ffe0a036d8bb0a7433b535317deff147a4da84f098b7cf09c0e201f7a1eba6b12122e81b21cd1271543e0d09cf6cb4d72b64f9f6ca95cb9f20cd"}}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) r6 = accept$packet(r1, 0x0, &(0x7f00000003c0)) (async) r7 = mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x7ff, 0x2000002, 0x10, r1, 0x20000000) (async) syz_ublk_setup_queues(r1, 0x0, &(0x7f0000000400)={0x0, 0xdc29, 0x8000, 0x0, 0x3e2}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcaa3, 0x4, 0x2, 0x23e, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8b81, 0x800, 0x1, 0x11b}, 0xffffffffffffffff, 0x0, 0x0}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd90d, 0x40, 0x3, 0xe7, 0x0, r1}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2f85, 0x2, 0x3, 0x3ba}}], 0x4, &(0x7f0000001700)={0x2e, 0x15, 0x0, r1, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x388}, 0x0, 0x0, '\x00', {0x0, 0x1a5, 0x0, &(0x7f0000000700)=@buf_4k="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"}}, &(0x7f0000001780)) (async) r10 = mmap$IORING_OFF_SQES(0x0, 0x0, 0x1000002, 0x12, r1, 0x10000000) syz_io_uring_submit(r7, r8, r10, &(0x7f00000017c0)=@IORING_OP_SOCKET={0x2d, 0x4c, 0x0, 0x800, 0x6a9, 0x0, 0x3, 0x0, 0x1, {0x0, 0x0, 0x3}}) (async) ioctl$XFS_IOC_SCRUB_METADATA(r2, 0xc040583c, &(0x7f0000001840)={0xd, 0x6, 0xe9f, 0x955, 0xe}) (async) mount(&(0x7f0000001880)=@sg0, &(0x7f00000018c0)='./file0\x00', &(0x7f0000001900)='tracefs\x00', 0x2180000, &(0x7f0000001940)='\x81!/^*(*\x00') r11 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r12 = dup(r11) syz_kvm_setup_cpu$x86(r12, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001a00)=[@text64={0x40, &(0x7f0000001980)="36f2470f7db4f78600000048b801000000000000000f23d80f21f835800000800f23f8c442795994225a6f000066b821010f00d8420f205166ba4100edc4214b7c5293430f01c40f01f4470fc79ff4ffffff", 0x52}], 0x1, 0x49, &(0x7f0000001a40)=[@flags={0x3, 0x40000}], 0x1) (async) write$P9_RREAD(r9, &(0x7f0000001a80)={0x4a, 0x75, 0x2, {0x3f, "80bca60fdfaac3c85f091db7e5ffd913349df4f701631e1c0518a31ec7ed3c725b68fd464087aa4b98307d729bf7cfec9fe10a8368a778e31f3caa754929cf"}}, 0x4a) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x20010, r9, 0x61976000) (async) fremovexattr(r11, &(0x7f0000001b00)=@random={'osx.', '\x81!/^*(*\x00'}) (async) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), r12) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000001bc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000001cc0)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c00)={0x68, r13, 0x4, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x2, 0x36}}}}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x1}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x1}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x99}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x12}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x80}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0xff}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0xff}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x65}]}, 0x68}}, 0x40044) (async) ioctl$XFS_IOC_GET_RESBLKS(r9, 0x80105873, &(0x7f0000001d00)) (async) syz_open_dev$dvb_frontend(&(0x7f0000001d40), 0x7246, 0x50a00) (async) r15 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_misc(r15, &(0x7f0000001d80)="43d566c96ad25013701e696ee2eba5ae55b6d344b877b1486d3d59985f378c2c79d56a02e6eea0037136bab3e62434c20251668ede4ba72d325872b25de056", 0x3f) (async) setsockopt$IP_VS_SO_SET_STARTDAEMON(r12, 0x0, 0x48b, &(0x7f0000001dc0)={0x0, 'pim6reg\x00', 0x4}, 0x18) (async) recvmsg$can_bcm(r1, &(0x7f0000003040)={&(0x7f0000001e00)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000002f40)=[{&(0x7f0000001e80)=""/138, 0x8a}, {&(0x7f0000001f40)=""/4096, 0x1000}], 0x2, &(0x7f0000002f80)=""/153, 0x99}, 0x140) 3m26.308553632s ago: executing program 0 (id=4966): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sec\x00', &(0x7f0000000100)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r0, &(0x7f00000005c0)="386b65726e656c3e202f6e65775f646f6d61696e0a666968652072656164202f6574632f706173737764207461736b2e7569643d30207461736b0e657569643d300a73656c65637420646f6d61696e3d3c6b65726e656c3e202f6e65775f646f6d61696e0a", 0x65) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r1 = userfaultfd(0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) socket$kcm(0x10, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x26}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004041) r2 = io_uring_setup(0x1978, &(0x7f0000000040)={0x0, 0xca72, 0x1cc90, 0x0, 0x20002fb}) r3 = socket$inet(0x2, 0x80001, 0x84) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x13d, 0x0, 0x3, {0x11, 0x0, 0x0, '\x00', {0x9ca7a16b958dcf33, 0xf602, 0x6, 0x8, 0x0, 0x0, 0x0, '\x00', 0xfffffffffffffffe, 0x0, 0x1ff, 0x0, {}, {0x200005, 0x4}, {0xfffffffffffffffb, 0x4}, {0x5}, 0x60, 0x0, 0x7fff}}}}) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_clone3(&(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r4, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r5, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) 3m26.063187121s ago: executing program 0 (id=4970): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_complete(0x0, r0) ioctl$TUNSETIFF(r1, 0x6628, 0x0) 3m10.973050347s ago: executing program 38 (id=4970): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_complete(0x0, r0) ioctl$TUNSETIFF(r1, 0x6628, 0x0) 3.073299598s ago: executing program 7 (id=6463): alarm(0x709abc910000) alarm(0x0) setns(0xc9, 0x0) r0 = socket$kcm(0x10, 0x0, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x400001, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(r1, 0x3ba0, &(0x7f0000000440)={0x48, 0x8, r2, 0x0, 0xa, 0x1cca0b, 0xd3, &(0x7f0000000340)="9b15da630c3c1994e7abf47dc2e8681cb0e3c318c9948e7d3d1f446751923743d39bdda69f9b914548ff5ed7eae4ea3f2af170e4065b1919402318bca1f8cb34698bc6e474993a8fe529bb26ec5bc437992df9c8ec3aa987b39192476795a2f02705bf7eb1128771791ea0379ea33d5f350143cf4810a329ded81690e814d9eeaa928eb71b53609edf51117a0d92285a0ef97696d1403c8a38ef5dd502249d7d6d5b7b022201db0ede354abd153edeed9a4b544c989ff01eb23af2e0bda1e6e3b3c4c558c4bf44b44b3e28221ffc2dd813a166", 0x30001}) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r4, &(0x7f0000000000)="1016cadcc7", &(0x7f0000000180)=""/56}, 0x20) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000280)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) 2.958165932s ago: executing program 7 (id=6464): syz_emit_ethernet(0x3b6, &(0x7f0000000c40)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd60cabf0003803afffe8000000000000000000000000000bbff02000000000000000000000000000186009078000000000000000000000000000aa78ce54006598080a8030037004023493b87aafaffffffd6d5ffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac150f901fd566b41e5af250200010000000500000000260004000118fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea068423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934dc4731f3f61effc978001606aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7baad830f2dc8674b87ba8f58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000000b17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f0032107b8a3e100908f61640000000200fe80ffff00000000000000ff0bc0fe00000000008879e66485201a0015ca83747357a02745000400000000145e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac3cd5cdd53f96c6c6d328f61129017fb632dbf04542188b196e213408c0005d5170000dce9674a36da018dff16e70b8b14e18e88605aa6be1a02a326a6bce65f81ed00000000a36cf6cfc39bde57dd015e45faf1839fb92e856913c6a2b09aafae5e54801b0f81cb4c79d6064033901e129594ae3b32ca0cdbf7787142878d23c6d241be047519db4656b4b5e6a400"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xc9) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000840)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6, 0xe}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0xffffffa8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) mount(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000040)='smb3\x00', 0x4010, &(0x7f0000000000)='rdma') ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r3}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000580)={0x401, 0x1, &(0x7f0000000180)=[r3], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r6, r4, r5], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000b40)={0x1, 0x0, &(0x7f0000000b00)=[0x0]}) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r8, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r8, 0xc02064b6, &(0x7f00000001c0)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r8, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000300), 0x3, r10}) ioctl$DRM_IOCTL_MODE_ATOMIC(r8, 0xc03864bc, &(0x7f0000000580)={0x600, 0x1, &(0x7f0000000180)=[r10], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r12, r11, r12], &(0x7f00000003c0), 0x0, 0x2}) r13 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r13, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r13, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r13, 0xc02064b6, &(0x7f00000001c0)={r14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r13, 0xc02064b9, &(0x7f0000000300)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r15}) ioctl$DRM_IOCTL_MODE_ATOMIC(r13, 0xc03864bc, &(0x7f0000000580)={0x1, 0x2, &(0x7f0000000100)=[r15, r16], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r18, r17, r17], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) r19 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r19, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r19, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r19, 0xc02064b6, &(0x7f00000001c0)={r20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r19, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000300), 0x3, r21}) ioctl$DRM_IOCTL_MODE_ATOMIC(r19, 0xc03864bc, &(0x7f0000000580)={0x400, 0x1, &(0x7f0000000180)=[r21], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r23, r22, r22], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000c00)={0x400, 0x5, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x1, 0x9858, 0x2, 0x81, 0x1, 0x7, 0x1c5], &(0x7f0000000b80)=[0x0, 0x0, 0x0, 0x0, r4, r7, r12, r18, r23], &(0x7f0000000bc0)=[0xfffffffffffffeff, 0x1], 0x0, 0x8}) 2.760256745s ago: executing program 7 (id=6471): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, 0x39, 0x301, 0x70bd25, 0x25dfdbfd, {0x12}}, 0x14}, 0x1, 0x0, 0x0, 0x200448d3}, 0x0) 2.709731912s ago: executing program 7 (id=6472): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000004380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006e80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2082) statx(0xffffffffffffff9c, &(0x7f0000002180)='./file0/file0/file0\x00', 0x2000, 0x7ff, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0/file0\x00', 0x0) syz_fuse_handle_req(r0, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004480)={0x90, 0xfffffffffffffff5, 0x6, {0x3, 0x0, 0x7fffffff, 0x1fff7fffffffd, 0x6, 0xc, {0x6, 0x9, 0x8, 0x1, 0x1, 0x4, 0x8, 0x123, 0xdab5, 0xa000, 0xfffffffe, r1, r2, 0x6, 0xffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.900325851s ago: executing program 8 (id=6479): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000004380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006e80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2082) statx(0xffffffffffffff9c, &(0x7f0000002180)='./file0/file0/file0\x00', 0x2000, 0x7ff, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0/file0\x00', 0x0) syz_fuse_handle_req(r0, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004480)={0x90, 0xfffffffffffffff5, 0x6, {0x3, 0x0, 0x7fffffff, 0x1fff7fffffffd, 0x6, 0xc, {0x6, 0x9, 0x8, 0x1, 0x1, 0x4, 0x8, 0x123, 0xdab5, 0xa000, 0xfffffffe, r1, r2, 0x6, 0xffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.829767673s ago: executing program 7 (id=6480): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x1) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000100", 0x14, 0x6, 0xff, @remote, @local, {[], {{0x1234, 0x4e22, 0x10002000, 0x0, 0x0, 0x0, 0x5, 0x2, 0x1000}}}}}}}, 0x0) socket$netlink(0x10, 0x3, 0x9) syz_emit_ethernet(0x4a, &(0x7f0000000400)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000100", 0x14, 0x6, 0xff, @remote, @local, {[], {{0x1234, 0x4e22, 0x10002001, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x1000}}}}}}}, 0x0) 1.718605877s ago: executing program 7 (id=6481): syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x501800) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000140)=0x400030, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000500)={@broadcast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 1.588292225s ago: executing program 1 (id=6484): mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x7) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000180)={0x9, 0x2, 0x0, 0x6, 0x200}) ioctl$VHOST_VDPA_SET_STATUS(r0, 0x4001af72, &(0x7f0000000140)=0x3) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(r2, 0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x95, 0x0, &(0x7f0000000340)=[@acquire_done={0x40106309, 0x1}], 0x0, 0x0, 0x0}) recvfrom$inet6(r1, &(0x7f0000000000)=""/245, 0xf5, 0x10121, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x0, 0x4c, 0x1a, 0x0, 0x73, 0x288, 0x258, 0x258, 0x288, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'wg2\x00', 'veth1_virt_wifi\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0xfffffffe, 0x0, 0x2, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0x0, 0x0, 0xffffff00]}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x0, {@ipv4=@remote, 'team_slave_1\x00'}}}, {{@uncond, 0x0, 0xf8, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='attr\x00') getdents(r4, &(0x7f0000000040)=""/50, 0x32) getdents64(r4, 0x0, 0x43) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f00000001c0)={0x20000004}) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x7) (async) openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000180)={0x9, 0x2, 0x0, 0x6, 0x200}) (async) ioctl$VHOST_VDPA_SET_STATUS(r0, 0x4001af72, &(0x7f0000000140)=0x3) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) dup3(r2, 0xffffffffffffffff, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x95, 0x0, &(0x7f0000000340)=[@acquire_done={0x40106309, 0x1}], 0x0, 0x0, 0x0}) (async) recvfrom$inet6(r1, &(0x7f0000000000)=""/245, 0xf5, 0x10121, 0x0, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x0, 0x4c, 0x1a, 0x0, 0x73, 0x288, 0x258, 0x258, 0x288, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'wg2\x00', 'veth1_virt_wifi\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0xfffffffe, 0x0, 0x2, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0x0, 0x0, 0xffffff00]}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x0, {@ipv4=@remote, 'team_slave_1\x00'}}}, {{@uncond, 0x0, 0xf8, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) (async) syz_open_procfs(0x0, &(0x7f00000001c0)='attr\x00') (async) getdents(r4, &(0x7f0000000040)=""/50, 0x32) (async) getdents64(r4, 0x0, 0x43) (async) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f00000001c0)={0x20000004}) (async) 971.510383ms ago: executing program 8 (id=6490): mkdirat(0xffffffffffffff9c, 0x0, 0x1ef) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='1', 0x1) 660.365036ms ago: executing program 8 (id=6492): mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./dev\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x240, 0x310) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0xfffffe01, 0xffffffffffffffff, 0x1, 0x6b9f}}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x7, 0x3, @void}]}]}, {0x4, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000000200000000000008fe", 0x1e) ioctl(r0, 0xc138fd02, &(0x7f0000000000)="0400000000000000") 598.508219ms ago: executing program 1 (id=6493): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) r0 = syz_open_procfs(0x0, &(0x7f0000000580)='attr/keycreate\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000200)={0x0, 0x0}) sched_setscheduler(r1, 0x1, &(0x7f00000001c0)=0x7) socket$unix(0x1, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000000800)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000007c0)={&(0x7f00000005c0)={0x9c, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x811c, 0x13}}}}, [@NL80211_ATTR_IE={0x7b, 0x2a, [@dsss={0x3, 0x1, 0xa1}, @rann={0x7e, 0x15, {{0x1, 0x4a}, 0xf, 0x4f, @device_b, 0xfffff525, 0x48000, 0x1}}, @mic={0x8c, 0x10, {0x803, "438cd044c6b5", @short="03abee2ee566296a"}}, @prep={0x83, 0x1f, {{}, 0xd8, 0x10, @device_a, 0x6, @void, 0xc, 0x5, @broadcast, 0x2}}, @prep={0x83, 0x1f, {{}, 0x9, 0x20, @device_b, 0xffffffff, @void, 0x200, 0x0, @broadcast, 0x5}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x3, 0x1}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x20008805) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)={0x1, 0x355, 0x40000507, {}, {0x0, 0x2710}, {}, 0x1, @can={{0x1, 0x1}, 0x7, 0x0, 0x0, 0x0, "35cf52530599b474"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x20048090) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'lo\x00', 0x2000}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000280)={0x9}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'erspan0\x00'}) 539.458733ms ago: executing program 8 (id=6494): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x0, 0x18}, {0x6, 0x0, 0x5, 0x9, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x8a}}}, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff2}, 0x94) 475.518671ms ago: executing program 9 (id=6495): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x0) 474.799813ms ago: executing program 8 (id=6496): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x501, 0x0) ioctl$XFS_IOC_SET_RESBLKS(r0, 0xc0105872, &(0x7f0000000040)={0x3, 0x3}) (async) r1 = epoll_create(0x27b) epoll_pwait(r1, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0xa, 0x4, &(0x7f0000000100), 0x8) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/crypto\x00', 0x0, 0x0) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000180), 0x4) (async) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000200)={0x7, 0x7, {0x0}, {0xee00}, 0x7fffffffffffffff, 0x6}) (async, rerun: 64) getgroups(0x7, &(0x7f0000000240)=[0x0, 0xee00, 0xffffffffffffffff, 0xee00, 0xee00, 0xee01, 0xffffffffffffffff]) (async, rerun: 64) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) read$FUSE(r2, &(0x7f0000000340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) getresgid(&(0x7f0000002380)=0x0, &(0x7f00000023c0), &(0x7f0000002400)) getgroups(0x3, &(0x7f0000002440)=[0xee00, 0xee01, 0xee01]) (async) r11 = getegid() fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000002480)={{}, {0x1, 0x4}, [{0x2, 0x0, 0xee00}, {0x2, 0x6, r4}], {0x4, 0x1}, [{0x8, 0x1, r5}, {0x8, 0x4, r6}, {0x8, 0x6, r8}, {0x8, 0x7, 0xee00}, {0x8, 0x1, r9}, {0x8, 0x6, 0xee01}, {0x8, 0x5, r10}, {0x8, 0x4, r11}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x1) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000002500)={{0x1, 0x1, 0x18, r0, {r7, r8}}, './file0\x00'}) (async) r13 = syz_open_procfs(r3, &(0x7f0000002540)='net/icmp\x00') (async) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000002580)={0x0, 0x1000, "9e744011514ccd5c5fedd3eeb761d2655e4f244bca658a652b10696125b4fcfdfb05eb5a6401bb6078244139f78de00eb95bc7e71be21b0102929ea7b2a16aa9304727aa3258fe3ca081aea220ba4f0780e7641c052eabb210b6136575a0b914611288d90b3f3927ead69675de24ed59a7d6fe987d11db995a32696844eb5bc31a2cc98ee4ecb0476285e08f539be5512bbe11648f86845859f7c28584319a4191e21903daaec3cef65841d3852d4c281fb756d01175a9ec5d039ea69eaffc288859f38ab6c50cb0360767d3a2d09ab19fab56061d34acdc1b91872fe5b27a98a14e405953ddf1db10f43200aef4b1ca512f7ac974879e15a3639df03b1689acb248764bcf739aeec68f9f0cfaffbc6b8c8061af25410ef22f063f27e499654b7714e8ed15679a079ab22f959c4fdf8b1f351f162d2c3f15200591bfd543cca1000b6274a6c63b67d4056cd99b7a6f1db909fed512cea9da91d3d14b3b68edcf5681fa247ff38aee8ed43a2b450968be0381b1e740f5525f5be276e9add86fc2b98c0bfbdebfce80dbe6f3d33d51b987cf51e8e188855ab50eca0a4d407df130854b82160c3ac257d826c286ba1658caad03d9e0df981af23618859d57d73f0946c6a1b67840ca6bbacbd330aa4a830c7d1000427e24f8d5b10903db5d69dd5838a385bfe90fb9e78dc010d5cd720e9b29b0fe6d27c9bd4b901dd8f72cdcf9236add1ce66de9692536dca20976a81afee6ac5738cc259f7d315015a502cf147b6d77e3d7b83dc24b466317141ebccb61fba9b2dc4381b884420e19edec605813763b6d8529aa845f6840516947ccc91d5f80ac0edbffb04418e8b592c349b30e91fa1b5021e02a08c765c289ad0ecd4b1e7acdc5890a59b6fef8355fdf420664c4efdc15e9fb56cb849c1c6d778de7291e807327ddf9c1d1127a8ea674a8faeacef7fc1b3987c1fb36bc6d2a088f847117e9678845b7edd30eec8c3827732bbadd36dce42019bf04c8cc8e64c14430e6df445e1ec853da249d2434181c060e9d39479fe42e2f6b5a5b9198567643ba0917490714466d6813de4f45950668b49f7e43b4d91bea97b3a4d2f05d25780519dac1ae2e5b16d6c629d58241b973d1a357d9360dfed8d6d6859923b7759d80b427c47d000b641addddcd93fcc798546caf3c0205b9355dc978750fc7e29d2aa943f104e20cc7bf28c206318c7fd1797b65d5cb7c8175ed76d3b7f5af927fb5408ef3a940912fd25a0e078ca723125944600668e22d2311f3682e8dd1aebfcd2699e4050942291177d0165cf2b1432fe73480f519ed186195d77f532920e4c6b3f3cccc0ee9e36153ce0808a892f55fdaf3120ee77bcfa67ba74817d1418f322f3c8e1e1cda72791be73eb63b3c3107ea72eb403cde97d4b50b91f77269d58eddee2128276a89e47a2565dfd9d368733f549a60144f08c5403aa0d600ac5f3261a35724937235dccdcc2a6f473564824bdf7b78266e25829092fc052d8c3c7f4eb3571cb531f6ae87e08875812153f5b957ac836610c54ca79eeda3616fd5347e1daea929ce7680ede6506d3ba3dbc095875fd772cc75ecf604650fa8359acf5f28bd0d98a121f31fc7e85cf77fa6fa22b772ca617e537b18bd261baa63ee7355ee12e2ab64e6a75402811c793207d3446107692eb4c6887ab8217fa4be7a618e68e08fd1189e5d797d8c111773d4f357ad0e1deeef14eb29b89092b5b760417d55c0d797f1d486a573dda8f71347f3f71e19a30718313dfeb803ac2ec9245a266ae5121d369f68e72f9a376c1b63c05cd5eb3d61ae2c841b36928fe76958da8a29bc22a6cc3cdcd42cc6d8fe74d71a0f977f3c44ac313aa49a5a8e318c664b618f3d9a407a484a20b5c71522339ad9b895523c4ae59d51091978dfecc4db5d0c035ec1cad478d92af7e482a9c92375b2c1d188c514662a24c0d6ae92b4a9f59b56368d3389a23c15cb87a6c81c063d26395fca0c7078f879b8eba0d295005a21e73573d6c6993158e65023e342b75b2391f0189be1c2af20ca1149fe175cb1163566e975f674ef4b80eaaeff7637f6c664335c104605153030723ba4962914814a574fae1ec16efa304437b5c811a4a184bda305bb03c7eed301ae56b6e16e8ddb2422e53029a90d1414f55d72f90c8fa65fffff369835406683c45751e117b329a1f92744107f52233f3b22ddc833cd9d37a49d7672b8831c44971a8da606569eb59c17b7254d21e35196cb639350be4dcf7a79d84ffe56b1ac397ef8c178c8dabe7aa7d4ca17766ef951b354371bb1a6637210d39ab913cbcee42e09fc85180ae564fafaf034f74e301ee4f636f4d417ce5dfc590b33ce12d1b432059b55f17e5514fc031e00d8022e6cc1268ab9b2ce6b9c849c1240d04589b192b9763678d23a1ae71261af9671374decdad8f238760dd9b6ebe36af3b08f92e39a45971e8372ccfe323a24dc198d6abb4b914cccf415b9ce0299da2b204cef9aa43c6692b4666908eb6358c970f07ae05d8a25cf954552d7acb9a3612f94b9b4d8d38874703630189e9411b3cc789a372b4439c5c1468fe93b303a37e3b5f5f2821f45888e75cf9572fc182c60c43bab61819e256f41bdb448f52405258f7f60efbeb9bba45fedb11941372ef0e81955e2b81e4db4181f29d358e54e09fee1bb0b2ec2456ec8093f4daf6ee5d9a4cc5806230c1d98462a112c3595ce51dd61aa4a42988412b20fd744a42ce89527f3e8ccdf54eb44baa0fa9a54281951e11a309d8397bc10903570fd753c38b4c8337bb62f29f8495b002e4d3d86706d20c90195cf73486f0441625927f9357b5658aeead86cd07e4e7e3c772bb4ddc7b96000bba6b3330167eb7f6733f1c07c443031520060f883cc024aca9a8422dbb9ee923d0ea05b367fbb494b9c04244bdd932fecce9aeca8cc46771db3c44226081d316040c6841c11f5adaaaa2a6a7c1a6bbd0326c0c945317a8a993aebec2e0f1bf28dcf0e79499227eedef103381a1bedf159fb4d601ba35f24494e819eb1b5406a36f96b48efad3f643952ab098d4420be833efc5f7c12667fb106338b2971be5aff0d7aaad3345de13779567920e8a8c43e9b00e5548d2be72742fadd95cfa6ebaa45a72fa9be6174c4b2cb9712a3946e67b9353e1f83a1080bb688080699f73d783c4733ddae56fa1f8134d5a08b04c0388aa48b17cc009b6e8cf60c0730895d4a3fc9ea26934b815b7704b60b337b868b7458829e9deb8891a804364a2dd7e9a8887833339db415ac7a31f55a28a6c86a304717690f35a62db58fb5b4dec12e7583ed1e5f74cb79b2428fded090c368c3ac0cba99d6dff74785d54bb76bb50ffa6ab97530ae3a65eef2035cdca8f0787cb29fa3be9c6ad4a8815332ccd3cfc5c5e26fbd964cbbfdb85b014d174cec6caf6fbf2d8f7f977b95738a8fbf8236a3ddc9c78ad44ca8d87cca33944f651d20db9d32e9ec91e9a6d65b7e7b089f489782f856a445423e45285e70ebc6ae2488a3c9925b47c9e735cda900d495f35ea09d29fea30729c2eeb8799c62acd3f2fe608459e07a08c0822fb55086b201364f02d00eb73d26a3453f9a758b34fa18563c9e2a0da5c68de6d6849155972564190922306912d40ee8fdcde0b8ff7ea88d18d280c28e33cc015232ea9e1623293c98dd78b61baa718ece26eb0b0c0c8cab06e1546c6cddb143a46720579830917e0e77e00e218555462b38465290e79d070f5b623c4233f904007214df15ca3a2e871d0ed5227ae6b570ada69e106003bc945fce188addc4d9b07d9e2755347e4dac75f4dc3e852c4126bfde06a92a403aca9e920cbc4ed7411267b661a36b57aaf0e9177c7c147fc798d9949996f691a293d0597148a4678893a9fc22a006195a820f128109872d218878b38e18b6b2e1df99897bb56da974f5eb04c6d46b2df20bdb2f2c14d7e9f7fc862e706e5ac674ea03b66344690ecb8839780b5adae5c39be4ced4cc073a5198a21ba4f82c94cbd23f6150ecb3dc199f86d6e752f7bb21c960055e71e42eeb8387088a291ae362c63d6890831c45e01bc433f23b956ad7ebcfcc7affb85f0dbaa81d2c8a13b71cf267f97eab0d0de6ee2f6f907f67d04690888e96daf648a57e31686e07bc93a55ecf3577e55720136b00625a7cd28e7940827d2d8c5657771c405b6eb8199d42fab92f8db21e7c74c7fc0b95715f3a3ba58313c3bbf6b4c53316c3920a94e4d45d8f8dd618e6e92849eb0c606c66bc5684038defbe03a21fe394f7136f8d73c8ca413da100a003c295120772114f5a90aaa6245dc75d46263e297f542bf18b08903ec51cbdfd7ec0537b013710b7f2486c41a7fca582ae3629f9253fba7e63898d2d40159db33c07fb9977b19856cc31f5d0e2687aafa295923be982ba44f51ca52340806631675ea1d40dba8c6069e632d5f4a6b62662857b905067ed53eba67516dd71418c9e36914bfeb552ee2cc13f23d00c52baf60bb4cfe86e0f28f5e918104b1dc9a6f79bd868cf7e9231f82c83d786502256e6ef3a560b6e66097d945a95eeea0b3d99fcde3c97f49f4997abb9dac750130764a8ac0d4e9b7d0f674a9607c056f6b5fab43748f5d95d45c36bf16b65b050ff9c59d5ef8a1dc0702351b6531b18cd82dd529d81bc4c48eeda1f3dbe1d7c262de229827319b19d518a242e3db3e0ac9e9f598df48b23bf839b7bf2a7ba41313dc41699e714982ea25a8619c5b3efa00c0b41e0261cc546d3d9e5999faf4a9dcbd5c580ae2790684a38abcb7e4b97d6242498819701bdede73700f7d54f5558502963e4d0457c1552d454e9e938380fc4f2eabef39caa42d217878b43eaaa787cde36d8adf0f6e1e7baff00a074bdc02fd395918ab63a65cb49be4a1e6fbc01f7927b22e0f3f9997693bf69eb67096d673601b36d494604d0e069642610eda36b4a53a5fb69220756658a13b359735e21ee53d71b9ecd034e55f7d3259e9b4c3f5a79e5a0b7fd95f0eb213b26e34a0871120759374906ef4fe963d33481a76e24f9f992f9ef7465e530d5d86c4cd09aa3a1a9258e098b11d78d2fa842006ed76064d370518796b8a357f80b7f7ed3271a650d01a64881ffeaf9df89a6b571f3422ceed6d73a8b52b99ba427d641b0eba08e6ad7882138dfc2dae351efdc13f51c4a63c201eb2cae79f0c73ebcf20c53d6107ddee6085534089b419591e5debbbdfb1ce4e4335629a65ca4b4cb59885eb584dacf4f5e884dae18b0cfe208ee6c62c566d17b0d707f5be7efe18b9ed6ee6956344f309a7f59025cc6955d921e30cfecb19203d5369af077567f4298517a41a1dc9fa3b0bb103417a4ade3bfac2d542da222bf8aadf6f8376d081e42674144da32e2b51e4a2f8e1c6ef8c17705a1ee604c5e65a6b0106de344f8c21e8de50721d7362aed8fbdfd91e9b0a0bd60d8ff4b4eb7732a869a782223376998f724d2159c1c662ae4dc7b0e49647130ced2c4743afd8bc309f1223baf33a5be83f4d095c96f922482792dd8d963455267ddcec911ddf139be8a69e6092005d089b29476d7584d24aaaf4af5e26ff9fe244a18ecaa65f27f36f88e8eb407488186eac6ffdb4200a97929038bf5436416f654337a0589f7dfc6d28659e42f1b7adf1291fb46fdd238fb58b65bdfc531e0f62618cc3a0494acb0d22e5746b0cd95a1e222baaba52eae1709b177039a69ec11ce597879898f9a91a3cb34184421a07fdc01e9be2cd8faf07940b7828c78da445fd4bffc12d5aeb7c0c34e855960cbe5"}, &(0x7f00000035c0)=0x1008) setsockopt$inet_sctp_SCTP_RTOINFO(r13, 0x84, 0x0, &(0x7f0000003600)={r14, 0x401, 0x4, 0x7fffffff}, 0x10) epoll_create1(0x80000) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000003640)=""/65, &(0x7f00000036c0)=0x41) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000003700)) (async) r15 = syz_ublk_setup_io_uring(0x1634, &(0x7f0000003740)={0x0, 0x47d2, 0x20, 0x0, 0xf1, 0x0, r2}, &(0x7f00000037c0), &(0x7f0000003800), &(0x7f0000003840)) io_uring_register$IORING_REGISTER_PBUF_RING(r15, 0x16, &(0x7f0000003b00)={&(0x7f0000004000)={[{&(0x7f0000003880)="17998f4b2174a7e91668e628dfe4dd4d07430062edcc263eaf26ee50ad737e20f16d185bbdb974c917b4d5b37c8cfc32c5a8b2cb84140196e29d528daa2fbf88ad69abd40c2e70fb5df4bd47e9ffe774487e9a9cb83e33cc3695ab210ceae1b86d70ecd796ac505fde3e9e90d885d8bd65562ccef3f24ac6523348c9e718e840bc7c03fa4d100de2a168ba3a3a497a4b612f990d2a", 0x95, 0x3}, {&(0x7f0000003940)="1d8ae3e3ec7efbb55a8a81188ede459bf847558a035a2a03990cfa6a835c5c2afdc735875cb6416faf6874e3f30338250c5d78138b3c462910b12db05a1d934ff135960be74d5e27a131293319f6a2203c1f7ed102423234c9c50052b1eec487f993b3520310edec57cd2f63ca6d17c3b73bd0f8e419987afeb2844c53c3c0585c50a77293bb9feab2ea237a14b665a15ba1a1bd1940ad455fe12467d7ff05290b9f0bf81eecf2cf60f47a43c768ba296fb68ab0a595e1057134", 0xba, 0x1}, {&(0x7f0000003a00)="949bdc884bb9e1fa9da043e36f47217835581c96175eba819f3952afdc495b9990e5ea467d4157bc3fa8adeb6f99a0ab1f752c239edde8668d7235a130a740f5caed2174e07af00da4da5e273611633ab1788d611e700630b0c6a6e8f712fbe1bf761428847c13958a0515ff285e150c5728dc9342596e954ddde47c78dc8feaf1edd09c1be90dc3035e12de569d778ff6d7cdbb3616b5ebd1dec47793f6848a8782c43b628f9098a09ea6d4e70f9d30bd651e92b33e7a3785a5f8420733ac84a5fdc94f16c5f9ee57af139887f5a6c0ef2fcbfc84b5805c690dc70f40276b85560b46e89b0f87a4846e6267af", 0xed, 0x2}]}, 0x3, 0x1, 0x2}, 0x1) (async) getsockopt$packet_buf(r13, 0x107, 0x6, &(0x7f0000003b40)=""/168, &(0x7f0000003c00)=0xa8) (async) r16 = request_key(&(0x7f0000003c40)='cifs.spnego\x00', &(0x7f0000003c80)={'syz', 0x1}, &(0x7f0000003cc0)='\'$:{-#\x00', 0xfffffffffffffff9) keyctl$get_security(0x11, r16, &(0x7f0000005000)=""/4096, 0x1000) (async, rerun: 64) request_key(&(0x7f0000006000)='big_key\x00', &(0x7f0000006040)={'syz', 0x0}, &(0x7f0000006080)='\'$:{-#\x00', r16) (async, rerun: 64) mount$9p_rdma(&(0x7f00000060c0), &(0x7f0000006100)='./file1\x00', &(0x7f0000006140), 0x4c000, &(0x7f0000006180)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@sq={'sq', 0x3d, 0xea1}}, {@rq={'rq', 0x3d, 0xffffffff7fffffff}}, {@sq={'sq', 0x3d, 0x400}}, {@rq={'rq', 0x3d, 0x9}}], [{@euid_lt={'euid<', r12}}, {@subj_type={'subj_type', 0x3d, '\')@%$%'}}]}}) keyctl$get_security(0x11, 0x0, &(0x7f0000006240)=""/16, 0x10) (async) syz_open_dev$dvb_frontend(&(0x7f0000006280), 0x5, 0x4000) 474.248828ms ago: executing program 1 (id=6497): open(&(0x7f0000000140)='./bus\x00', 0x2242, 0x1c0) open(&(0x7f00000001c0)='./bus\x00', 0x4ab42, 0xf1) socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x2) fanotify_init(0x200, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmmsg(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003040)=""/243, 0xf3}, 0x1}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80)=""/114, 0x72}, 0x3}], 0x2, 0x40000002, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score\x00') r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES64=r4], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x6f, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 399.395235ms ago: executing program 9 (id=6498): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), 0x4) 317.794997ms ago: executing program 8 (id=6499): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000004380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006e80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2082) statx(0xffffffffffffff9c, &(0x7f0000002180)='./file0/file0/file0\x00', 0x2000, 0x7ff, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0/file0\x00', 0x0) syz_fuse_handle_req(r0, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004480)={0x90, 0xfffffffffffffff5, 0x6, {0x3, 0x0, 0x7fffffff, 0x1fff7fffffffd, 0x6, 0xc, {0x6, 0x9, 0x8, 0x1, 0x1, 0x4, 0x8, 0x123, 0xdab5, 0xa000, 0xfffffffe, r1, r2, 0x6, 0xffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 317.455662ms ago: executing program 9 (id=6500): mkdirat(0xffffffffffffff9c, 0x0, 0x1ef) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='1', 0x1) 317.167575ms ago: executing program 1 (id=6501): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x76, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x4, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20846, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000240)="3e66366466420f788152ea65d38aa6e67f420f0666b89d000f00d8c4820993a46b5c1e0000660f4a1cb8010000000f01d942c1d20d2e653ef623b805000000b9faffffff0f01d9", 0x47}], 0x1, 0x18, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x1000001, 0x4c032, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0xec6f, 0x1, 0x1}}, 0x40) write$9p(r4, &(0x7f0000000340)="50ccbde162d465deff", 0x9) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r4, 0x0) write$P9_RLERRORu(r3, &(0x7f0000000240)=ANY=[], 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x80, @any, 0x0, 0x1}, 0x10) listen(r0, 0x5) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_ecred_conn_req={{0x17, 0x42, 0xa}, {0x80, 0x200, 0x200, 0xa, [0x40]}}}}, 0x17) accept4(r0, 0x0, 0x0, 0x800) 208.871618ms ago: executing program 9 (id=6502): mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x240, 0x310) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0xfffffe01, 0xffffffffffffffff, 0x1, 0x6b9f}}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x7, 0x3, @void}]}]}, {0x4, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000000200000000000008fe", 0x1e) ioctl(r0, 0xc138fd02, &(0x7f0000000000)="0400000000000000") 208.58184ms ago: executing program 1 (id=6503): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000880)='veth0\x00', 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000040000000200000000000000", @ANYRES32, @ANYBLOB="fc0000000000000000129d62642005a8336a5c0d343353be397e7db596fe599b9b81476772ffa0b63e38fd0eb4a67cb921b3639c5f4008593b44f50bf30a19b4374cca8aaf97ac4110", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a555"], 0x1c}, 0x1, 0x0, 0x0, 0x40050}, 0x20048000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$key(0xf, 0x3, 0x2) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x90, [0x4, 0x80, 0xffffffffffffffc0, 0xfff, 0xfffffffffffffff7, 0xd], 0x600, 0x0, 0x0}, &(0x7f0000000240)=0x108) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) setsockopt$sock_int(r3, 0x1, 0x31, &(0x7f0000001600), 0x4) socketpair(0x2, 0x1, 0x100, &(0x7f0000000440)) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22, 0x0, @empty, 0x80002}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000005000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="04221d82"], 0x20) sendto$inet6(r0, 0x0, 0x0, 0xb00, &(0x7f0000000a00)={0xa, 0x4e23, 0xffffffff, @ipv4={'\x00', '\xff\xff', @remote}, 0x4000}, 0x1c) socket$inet6_udp(0xa, 0x2, 0x0) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000880)='veth0\x00', 0x6) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000040000000200000000000000", @ANYRES32, @ANYBLOB="fc0000000000000000129d62642005a8336a5c0d343353be397e7db596fe599b9b81476772ffa0b63e38fd0eb4a67cb921b3639c5f4008593b44f50bf30a19b4374cca8aaf97ac4110", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) socket(0x10, 0x80002, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a555"], 0x1c}, 0x1, 0x0, 0x0, 0x40050}, 0x20048000) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$key(0xf, 0x3, 0x2) (async) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) (async) socket$inet6(0xa, 0x2, 0x0) (async) socket$inet(0x2, 0x1, 0x0) (async) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x90, [0x4, 0x80, 0xffffffffffffffc0, 0xfff, 0xfffffffffffffff7, 0xd], 0x600, 0x0, 0x0}, &(0x7f0000000240)=0x108) (async) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) (async) setsockopt$sock_int(r3, 0x1, 0x31, &(0x7f0000001600), 0x4) (async) socketpair(0x2, 0x1, 0x100, &(0x7f0000000440)) (async) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22, 0x0, @empty, 0x80002}, 0x1c) (async) socket$netlink(0x10, 0x3, 0x8000000004) (async) writev(r5, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000005000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) (async) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="04221d82"], 0x20) (async) sendto$inet6(r0, 0x0, 0x0, 0xb00, &(0x7f0000000a00)={0xa, 0x4e23, 0xffffffff, @ipv4={'\x00', '\xff\xff', @remote}, 0x4000}, 0x1c) (async) 96.35144ms ago: executing program 9 (id=6504): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r0, @ANYRES32=r0], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f7410262e66f36d0f330f09660f3a0cb90000a6752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x31}], 0x1, 0x4498bda7e2139f17, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) pwrite64(r1, &(0x7f0000000000)="ff", 0x4f250, 0x2200) 96.104131ms ago: executing program 1 (id=6505): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xb}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000880)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000340)={0x30, 0x30, 0x30}}, 0x40}], 0x50, 0x0, &(0x7f0000000780)="fda55f4ee5d8e7079311be6ab8d85283f048753e3c6afecf5e1787f8dcedcc670ab68e9597671f7faf9cf6bd98e182d39297faaf2d6d9f35fc24d54fa0f9431a9f638e653d094e5efcbb5b9d25f74fc4"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000680)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd0a) 0s ago: executing program 9 (id=6506): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): 454.329253][T21790] [ 455.399310][T21808] FAULT_INJECTION: forcing a failure. [ 455.399310][T21808] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 455.399333][T21808] CPU: 2 UID: 0 PID: 21808 Comm: syz.8.5676 Tainted: G L syzkaller #0 PREEMPT(full) [ 455.399349][T21808] Tainted: [L]=SOFTLOCKUP [ 455.399353][T21808] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 455.399360][T21808] Call Trace: [ 455.399364][T21808] [ 455.399370][T21808] dump_stack_lvl+0x100/0x190 [ 455.399390][T21808] should_fail_ex.cold+0x5/0xa [ 455.399406][T21808] _copy_from_iter+0x1f4/0x1690 [ 455.399420][T21808] ? __asan_memset+0x23/0x50 [ 455.399432][T21808] ? __pfx__copy_from_iter+0x10/0x10 [ 455.399443][T21808] ? __pfx___alloc_skb+0x10/0x10 [ 455.399461][T21808] netlink_sendmsg+0x808/0xda0 [ 455.399476][T21808] ? __pfx_netlink_sendmsg+0x10/0x10 [ 455.399489][T21808] ? selinux_socket_sendmsg+0x198/0x2f0 [ 455.399510][T21808] ____sys_sendmsg+0xa4d/0xbe0 [ 455.399525][T21808] ? __pfx_netlink_sendmsg+0x10/0x10 [ 455.399538][T21808] ? __pfx_____sys_sendmsg+0x10/0x10 [ 455.399557][T21808] ? lock_acquire+0x1d1/0x380 [ 455.399569][T21808] ? get_pid_task+0x2a/0x250 [ 455.399587][T21808] ___sys_sendmsg+0x190/0x1e0 [ 455.399604][T21808] ? __pfx____sys_sendmsg+0x10/0x10 [ 455.399620][T21808] ? get_pid_task+0x106/0x250 [ 455.399640][T21808] ? find_held_lock+0x2b/0x80 [ 455.399664][T21808] __sys_sendmsg+0x160/0x210 [ 455.399678][T21808] ? __pfx___sys_sendmsg+0x10/0x10 [ 455.399698][T21808] do_syscall_64+0x123/0x790 [ 455.399715][T21808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.399727][T21808] RIP: 0033:0x7f5c4959e159 [ 455.399737][T21808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 455.399748][T21808] RSP: 002b:00007f5c4a4e4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 455.399764][T21808] RAX: ffffffffffffffda RBX: 00007f5c49825fa0 RCX: 00007f5c4959e159 [ 455.399771][T21808] RDX: 0000000000000044 RSI: 00002000000000c0 RDI: 0000000000000003 [ 455.399778][T21808] RBP: 00007f5c4a4e4090 R08: 0000000000000000 R09: 0000000000000000 [ 455.399784][T21808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 455.399791][T21808] R13: 00007f5c49826038 R14: 00007f5c49825fa0 R15: 00007fff58e341a8 [ 455.399805][T21808] [ 455.890891][T21822] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 455.902155][T21822] @0Ù: renamed from bond_slave_1 (while UP) [ 456.065206][T21815] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 456.065272][T21815] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 456.065295][T21815] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 456.084451][ T43] audit: type=1400 audit(1789038842.637:1459): avc: denied { ioctl } for pid=21813 comm="syz.8.5677" path="socket:[113375]" dev="sockfs" ino=113375 ioctlcmd=0x4800 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 456.140949][T21815] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 456.307418][T21815] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 457.423505][ T43] audit: type=1800 audit(1789038843.977:1460): pid=21843 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.8.5684" name="bus" dev="tmpfs" ino=1672 res=0 errno=0 [ 457.616022][T21846] ip_tables: iptables: counters copy to user failed while replacing table [ 457.656223][T21843] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 458.290282][T21862] __nla_validate_parse: 46 callbacks suppressed [ 458.290295][T21862] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5691'. [ 458.290311][T21862] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5691'. [ 458.319607][T21862] erspan0: entered promiscuous mode [ 458.320346][T21862] gretap0: entered promiscuous mode [ 458.483522][T21876] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5 sclass=netlink_route_socket pid=21876 comm=syz.8.5695 [ 458.532355][T21870] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5695'. [ 461.267138][T21916] wg0 speed is unknown, defaulting to 1000 [ 461.267171][T21916] wg0 speed is unknown, defaulting to 1000 [ 461.267521][T21916] wg0 speed is unknown, defaulting to 1000 [ 461.292792][T21916] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 461.292815][T21916] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 461.292838][T21916] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 461.391458][T21916] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 461.487645][T21916] wg0 speed is unknown, defaulting to 1000 [ 461.499533][T21916] wg0 speed is unknown, defaulting to 1000 [ 461.505975][T21916] wg0 speed is unknown, defaulting to 1000 [ 461.513321][T21916] wg0 speed is unknown, defaulting to 1000 [ 461.516462][T21916] wg0 speed is unknown, defaulting to 1000 [ 461.525293][T21916] wg0 speed is unknown, defaulting to 1000 [ 461.735494][T21919] netlink: 48 bytes leftover after parsing attributes in process `syz.8.5711'. [ 461.947393][T21929] fuse: fd is not a fuse device [ 462.149416][ T43] audit: type=1400 audit(1789038848.707:1461): avc: denied { create } for pid=21936 comm="syz.7.5719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 463.302164][ T1168] Bluetooth: Error in BCSP hdr checksum [ 463.588705][ T6073] Bluetooth: Error in BCSP hdr checksum [ 463.633002][T21974] siw: device registration error -23 [ 463.667009][T21967] overlayfs: failed to resolve 'uuid=on': -2 [ 463.848326][ T224] Bluetooth: Error in BCSP hdr checksum [ 465.098311][ T5739] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 465.241371][T22004] siw: device registration error -23 [ 465.780789][ T5739] Bluetooth: hci0: unexpected event for opcode 0x0002 [ 465.783383][ T5739] Bluetooth: hci1: unexpected event for opcode 0x2087 [ 465.796878][ T43] audit: type=1400 audit(1789038852.347:1462): avc: denied { setopt } for pid=22018 comm="syz.9.5750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 466.341635][T22043] xt_LOG: level 197 >= 8 [ 466.440073][T22047] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5760'. [ 466.663924][T22053] syzkaller0: entered promiscuous mode [ 466.663938][T22053] syzkaller0: entered allmulticast mode [ 466.679486][T22053] FAULT_INJECTION: forcing a failure. [ 466.679486][T22053] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 466.679515][T22053] CPU: 2 UID: 0 PID: 22053 Comm: syz.7.5761 Tainted: G L syzkaller #0 PREEMPT(full) [ 466.679531][T22053] Tainted: [L]=SOFTLOCKUP [ 466.679536][T22053] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 466.679543][T22053] Call Trace: [ 466.679547][T22053] [ 466.679552][T22053] dump_stack_lvl+0x100/0x190 [ 466.679579][T22053] should_fail_ex.cold+0x5/0xa [ 466.679595][T22053] _copy_from_iter+0x1f4/0x1690 [ 466.679614][T22053] ? __pfx__copy_from_iter+0x10/0x10 [ 466.679625][T22053] ? _copy_from_iter+0x270/0x1690 [ 466.679639][T22053] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 466.679656][T22053] skb_copy_datagram_from_iter+0x11f/0x720 [ 466.679678][T22053] packet_sendmsg+0x2251/0x4ef0 [ 466.679709][T22053] ? sock_has_perm+0x25a/0x2f0 [ 466.679728][T22053] ? __pfx_sock_has_perm+0x10/0x10 [ 466.679752][T22053] ? __pfx_packet_sendmsg+0x10/0x10 [ 466.679764][T22053] ? __might_fault+0xc5/0x140 [ 466.679785][T22053] ? selinux_socket_sendmsg+0x198/0x2f0 [ 466.679805][T22053] __sys_sendto+0x48b/0x4e0 [ 466.679816][T22053] ? __pfx_packet_sendmsg+0x10/0x10 [ 466.679829][T22053] ? __pfx___sys_sendto+0x10/0x10 [ 466.679844][T22053] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 466.679869][T22053] ? ksys_write+0x1ac/0x250 [ 466.679881][T22053] ? __pfx_ksys_write+0x10/0x10 [ 466.679894][T22053] __x64_sys_sendto+0xe0/0x1c0 [ 466.679905][T22053] ? do_syscall_64+0xae/0x790 [ 466.679919][T22053] ? lockdep_hardirqs_on+0x7d/0x110 [ 466.679934][T22053] do_syscall_64+0x123/0x790 [ 466.679949][T22053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.679961][T22053] RIP: 0033:0x7fe9d319e159 [ 466.679971][T22053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 466.679982][T22053] RSP: 002b:00007fe9d3fd1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 466.679994][T22053] RAX: ffffffffffffffda RBX: 00007fe9d3425fa0 RCX: 00007fe9d319e159 [ 466.680001][T22053] RDX: 000000000000fdef RSI: 00002000000002c0 RDI: 0000000000000005 [ 466.680008][T22053] RBP: 00007fe9d3fd1090 R08: 0000200000000140 R09: 0000000000000014 [ 466.680015][T22053] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 466.680021][T22053] R13: 00007fe9d3426038 R14: 00007fe9d3425fa0 R15: 00007ffe085eb048 [ 466.680036][T22053] [ 466.985915][ T43] audit: type=1400 audit(1789038853.537:1463): avc: denied { setattr } for pid=22057 comm="syz.8.5763" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 467.735925][T22073] veth0_to_team: entered allmulticast mode [ 467.817969][ T5739] Bluetooth: hci1: command 0x0c1a tx timeout [ 469.596828][ T43] audit: type=1326 audit(1789038856.147:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22106 comm="syz.7.5777" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe9d319e159 code=0x3fff0000 [ 469.898403][ T5739] Bluetooth: hci1: command 0x0c1a tx timeout [ 470.223331][T22115] ufs: You didn't specify the type of your ufs filesystem [ 470.223331][T22115] [ 470.223331][T22115] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 470.223331][T22115] [ 470.223331][T22115] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 470.223352][T22115] ufs: failed to set blocksize [ 471.018764][T22127] netlink: 'syz.1.5784': attribute type 1 has an invalid length. [ 471.200735][T22130] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5784'. [ 471.200749][T22130] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5784'. [ 471.220567][T22127] 8021q: adding VLAN 0 to HW filter on device bond1 [ 471.353086][T22127] tipc: Started in network mode [ 471.353106][T22127] tipc: Node identity 329b589e4b12, cluster identity 4711 [ 471.353587][T22127] tipc: Enabled bearer , priority 1 [ 471.935779][ T43] audit: type=1400 audit(1789038858.487:1465): avc: denied { name_bind } for pid=22150 comm="syz.7.5791" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 471.953071][T22151] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 472.349906][ T850] tipc: Node number set to 2039044254 [ 472.435866][T22168] mac80211_hwsim hwsim33 : renamed from wlan1 (while UP) [ 472.538951][T22168] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 472.745126][T22179] syzkaller0: entered promiscuous mode [ 472.745142][T22179] syzkaller0: entered allmulticast mode [ 472.811222][T22182] overlayfs: failed to clone upperpath [ 473.447961][T22174] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 473.448130][T22174] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 473.448296][T22174] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 473.448425][T22174] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 473.802468][T22197] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 473.942409][T22199] fuse: fd is not a fuse device [ 474.473652][T22214] faux_driver vgem: [drm] Unknown color mode 7; guessing buffer size. [ 474.482959][T22213] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5810'. [ 474.548417][T22215] xt_hashlimit: size too large, truncated to 1048576 [ 474.777926][ T5739] Bluetooth: hci1: command 0x0c1a tx timeout [ 474.948071][T22219] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=22219 comm=syz.7.5812 [ 475.499376][ T5739] Bluetooth: hci3: command 0x0c1a tx timeout [ 475.499414][ T5739] Bluetooth: hci0: command 0x0c1a tx timeout [ 475.499444][ T5739] Bluetooth: hci2: command 0x0c1a tx timeout [ 476.028592][T22244] ptrace attach of "/syz-executor exec"[19654] was attempted by "/syz-executor exec"[22244] [ 476.029864][T22244] ptrace attach of "/syz-executor exec"[19654] was attempted by "/syz-executor exec"[22244] [ 476.037544][T22244] hugetlbfs: syz.1.5820 (22244): Using mlock ulimits for SHM_HUGETLB is obsolete [ 476.768348][T22267] overlayfs: upper fs does not support file handles, falling back to index=off. [ 476.822514][T22262] syz.7.5824 (22262): drop_caches: 2 [ 477.617461][T22287] can0: slcan on ptm0. [ 477.822827][ T43] audit: type=1400 audit(1789038864.377:1466): avc: denied { map } for pid=22290 comm="syz.8.5834" path="/327/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=1502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 477.843507][ T43] audit: type=1400 audit(1789038864.387:1467): avc: denied { create } for pid=22290 comm="syz.8.5834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 478.361098][T22285] can0 (unregistered): slcan off ptm0. [ 478.563740][ T43] audit: type=1400 audit(1789038865.117:1468): avc: denied { write } for pid=22302 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 478.686856][T22308] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 478.906838][T22315] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 478.924755][ T43] audit: type=1400 audit(1789038865.477:1469): avc: denied { write } for pid=22312 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 479.325309][ T43] audit: type=1400 audit(1789038865.877:1470): avc: denied { write } for pid=22325 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 479.657518][ T43] audit: type=1400 audit(1789038866.207:1471): avc: denied { write } for pid=22335 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 479.930223][ T43] audit: type=1326 audit(1789038866.487:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22293 comm="syz.9.5835" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2e3439e159 code=0x0 [ 479.938076][ T43] audit: type=1326 audit(1789038866.497:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22293 comm="syz.9.5835" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2e3439e159 code=0x0 [ 482.304454][T22340] syz.8.5845 (22340): drop_caches: 2 [ 482.626113][T22359] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 482.708498][T14482] usb 12-1: new high-speed USB device number 45 using dummy_hcd [ 482.861471][T14482] usb 12-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 482.862297][T14482] usb 12-1: config 0 has an invalid interface number: 50 but max is 0 [ 482.862312][T14482] usb 12-1: config 0 has no interface number 0 [ 482.862330][T14482] usb 12-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 482.863956][T14482] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.863969][T14482] usb 12-1: Product: syz [ 482.863977][T14482] usb 12-1: Manufacturer: syz [ 482.863985][T14482] usb 12-1: SerialNumber: syz [ 482.865516][T14482] usb 12-1: config 0 descriptor?? [ 482.926165][T14482] yurex 12-1:0.50: USB YUREX device now attached to Yurex #0 [ 483.034660][ T5842] usb 14-1: new high-speed USB device number 36 using dummy_hcd [ 483.082738][T14482] usb 12-1: USB disconnect, device number 45 [ 483.097339][T22353] FAULT_INJECTION: forcing a failure. [ 483.097339][T22353] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 483.097361][T22353] CPU: 2 UID: 0 PID: 22353 Comm: syz.7.5850 Tainted: G L syzkaller #0 PREEMPT(full) [ 483.097376][T22353] Tainted: [L]=SOFTLOCKUP [ 483.097381][T22353] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 483.097388][T22353] Call Trace: [ 483.097392][T22353] [ 483.097397][T22353] dump_stack_lvl+0x100/0x190 [ 483.097417][T22353] should_fail_ex.cold+0x5/0xa [ 483.097447][T22353] _copy_from_user+0x2e/0xd0 [ 483.097460][T22353] yurex_write+0x20b/0x910 [ 483.097477][T22353] ? find_held_lock+0x2b/0x80 [ 483.097492][T22353] ? get_pid_task+0xfc/0x250 [ 483.097507][T22353] ? __pfx_yurex_write+0x10/0x10 [ 483.097523][T22353] ? __pfx_autoremove_wake_function+0x10/0x10 [ 483.097541][T22353] ? avc_policy_seqno+0x9/0x20 [ 483.097556][T22353] ? selinux_file_permission+0x8f/0x6d0 [ 483.097570][T22353] ? bpf_lsm_file_permission+0x9/0x10 [ 483.097584][T22353] ? security_file_permission+0x76/0x210 [ 483.097598][T22353] ? rw_verify_area+0xce/0x6d0 [ 483.097617][T22353] vfs_write+0x2aa/0x1050 [ 483.097629][T22353] ? __pfx_yurex_write+0x10/0x10 [ 483.097644][T22353] ? lock_acquire+0x1d1/0x380 [ 483.097655][T22353] ? __fget_files+0x34/0x3d0 [ 483.097669][T22353] ? __pfx_vfs_write+0x10/0x10 [ 483.097680][T22353] ? find_held_lock+0x2b/0x80 [ 483.097694][T22353] ? __fget_files+0x215/0x3d0 [ 483.097707][T22353] ? __fget_files+0x215/0x3d0 [ 483.097723][T22353] ? __fget_files+0x21f/0x3d0 [ 483.097740][T22353] ksys_write+0x12a/0x250 [ 483.097751][T22353] ? __pfx_ksys_write+0x10/0x10 [ 483.097766][T22353] do_syscall_64+0x123/0x790 [ 483.097783][T22353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.097795][T22353] RIP: 0033:0x7fe9d319e159 [ 483.097805][T22353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 483.097815][T22353] RSP: 002b:00007fe9d3fd1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 483.097827][T22353] RAX: ffffffffffffffda RBX: 00007fe9d3425fa0 RCX: 00007fe9d319e159 [ 483.097834][T22353] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000004 [ 483.097846][T22353] RBP: 00007fe9d3fd1090 R08: 0000000000000000 R09: 0000000000000000 [ 483.097852][T22353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 483.097859][T22353] R13: 00007fe9d3426038 R14: 00007fe9d3425fa0 R15: 00007ffe085eb048 [ 483.097874][T22353] [ 483.210221][T14482] yurex 12-1:0.50: USB YUREX #0 now disconnected [ 483.250331][ T5842] usb 14-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 483.250747][ T5842] usb 14-1: config 0 has no interfaces? [ 483.250764][ T5842] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.252592][ T5842] usb 14-1: config 0 descriptor?? [ 483.462189][T22357] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5852'. [ 483.481281][T14482] usb 14-1: USB disconnect, device number 36 [ 483.738646][T22379] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 483.888210][T22389] netlink: 'syz.1.5863': attribute type 1 has an invalid length. [ 483.963948][T22389] bond2: (slave gretap1): making interface the new active one [ 483.990637][T22389] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 484.006285][T22389] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5863'. [ 484.007179][T22389] 8021q: adding VLAN 0 to HW filter on device bond2 [ 484.134075][T22400] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5865'. [ 484.430703][ T5842] usb 14-1: new high-speed USB device number 37 using dummy_hcd [ 484.583032][ T5842] usb 14-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 484.584637][ T5842] usb 14-1: config 0 has an invalid interface number: 50 but max is 0 [ 484.584657][ T5842] usb 14-1: config 0 has no interface number 0 [ 484.584688][ T5842] usb 14-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 484.607161][ T5842] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.607185][ T5842] usb 14-1: Product: syz [ 484.607204][ T5842] usb 14-1: Manufacturer: syz [ 484.607216][ T5842] usb 14-1: SerialNumber: syz [ 484.631680][ T5842] usb 14-1: config 0 descriptor?? [ 484.646722][ T5842] yurex 14-1:0.50: USB YUREX device now attached to Yurex #0 [ 484.862939][ T5842] usb 14-1: USB disconnect, device number 37 [ 484.870824][ T5842] yurex 14-1:0.50: USB YUREX #0 now disconnected [ 484.951304][T22406] batman_adv: batadv0: Interface deactivated: dummy0 [ 484.951327][T22406] batman_adv: batadv0: Removing interface: dummy0 [ 484.970732][T14482] syz_tun: tun_net_xmit 110 [ 484.988368][T22406] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 485.048636][ T1168] tipc: Resetting bearer [ 485.056502][T22417] syz.7.5869 (22417): drop_caches: 2 [ 485.074037][T22406] tipc: Enabling of bearer rejected, already enabled [ 485.158353][T14482] syz_tun: tun_net_xmit 110 [ 486.168826][T22449] fuse: fd is not a fuse device [ 486.473716][T22456] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5883'. [ 486.570675][T22456] 8021q: adding VLAN 0 to HW filter on device bond3 [ 486.775930][T22464] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 488.958580][T14482] usb 14-1: new high-speed USB device number 38 using dummy_hcd [ 489.051359][T22482] netlink: 'syz.1.5892': attribute type 3 has an invalid length. [ 489.051373][T22482] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5892'. [ 489.108561][T14482] usb 14-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 489.109507][T14482] usb 14-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 489.115107][T14482] usb 14-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 489.132024][T14482] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.132039][T14482] usb 14-1: Product: syz [ 489.132047][T14482] usb 14-1: Manufacturer: syz [ 489.132055][T14482] usb 14-1: SerialNumber: syz [ 489.152146][T14482] ti_usb_3410_5052 14-1:2.0: TI USB 5052 2 port adapter converter detected [ 489.169560][T14482] usb 14-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 489.178187][T14482] usb 14-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 489.713203][T22488] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 490.318146][T22486] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5890'. [ 490.353935][T22486] l2tp_ppp: sess 2/0: no socket in recv [ 490.743633][T22499] syz.8.5897 (22499): drop_caches: 2 [ 491.112690][T22478] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot clear input buffers, -110 [ 491.153789][ T10] usb 14-1: USB disconnect, device number 38 [ 491.208622][ T10] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 491.225460][ T10] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 491.226579][ T10] ti_usb_3410_5052 14-1:2.0: device disconnected [ 491.874746][T22511] netlink: 'syz.9.5902': attribute type 1 has an invalid length. [ 491.874759][T22511] nbd: error processing sock list [ 491.874864][T22511] block nbd0: shutting down sockets [ 491.922693][T22516] netlink: 'syz.1.5903': attribute type 33 has an invalid length. [ 491.922883][T22516] syz_tun: left promiscuous mode [ 492.265124][T22531] xt_hashlimit: size too large, truncated to 1048576 [ 492.362929][ T43] audit: type=1400 audit(1789038878.917:1474): avc: denied { write } for pid=22530 comm="syz.7.5907" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 492.546989][T22538] syz.8.5908 (22538): drop_caches: 2 [ 492.800794][T22551] netlink: 'syz.9.5913': attribute type 1 has an invalid length. [ 492.859696][T22551] 8021q: adding VLAN 0 to HW filter on device bond2 [ 492.867195][T22551] bond1: (slave bond2): making interface the new active one [ 492.867933][T22551] bond1: (slave bond2): Enslaving as an active interface with an up link [ 493.529329][ T5842] usb 13-1: new high-speed USB device number 39 using dummy_hcd [ 493.678754][ T5842] usb 13-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 493.679661][ T5842] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 493.679735][ T5842] usb 13-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 493.679755][ T5842] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.690968][ T5842] idmouse 13-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 494.196513][T22590] SELinux: DCCP has been removed, pid=22590 comm=syz.1.5924 [ 494.592379][ T43] audit: type=1400 audit(1789038881.147:1475): avc: denied { read write } for pid=22570 comm="syz.8.5917" name="idmouse0" dev="devtmpfs" ino=4552 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 494.592590][ T43] audit: type=1400 audit(1789038881.147:1476): avc: denied { open } for pid=22570 comm="syz.8.5917" path="/dev/idmouse0" dev="devtmpfs" ino=4552 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 495.235329][T22569] syz.7.5915 (22569): drop_caches: 2 [ 495.268694][T14482] usb 14-1: new high-speed USB device number 39 using dummy_hcd [ 495.355621][T22613] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5931'. [ 495.421315][T14482] usb 14-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 495.422456][T14482] usb 14-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 495.422479][T14482] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 62016, setting to 1024 [ 495.422493][T14482] usb 14-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 495.422505][T14482] usb 14-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 495.423769][T14482] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 495.423782][T14482] usb 14-1: Product: syz [ 495.423789][T14482] usb 14-1: Manufacturer: syz [ 495.425982][T22599] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 495.438924][T14482] garmin_gps 14-1:1.0: Garmin GPS usb/tty converter detected [ 495.468989][T14482] usb 14-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 495.563064][T22571] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 495.565286][T22571] netlink: 'syz.8.5917': attribute type 33 has an invalid length. [ 495.605847][T14482] syz1: Port: 1 Link DOWN [ 495.788351][T14482] usb 14-1: USB disconnect, device number 39 [ 495.802452][T14482] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 495.802750][T14482] garmin_gps 14-1:1.0: device disconnected [ 496.398842][T22653] FAULT_INJECTION: forcing a failure. [ 496.398842][T22653] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 496.398865][T22653] CPU: 2 UID: 0 PID: 22653 Comm: syz.7.5944 Tainted: G L syzkaller #0 PREEMPT(full) [ 496.398880][T22653] Tainted: [L]=SOFTLOCKUP [ 496.398885][T22653] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 496.398892][T22653] Call Trace: [ 496.398896][T22653] [ 496.398901][T22653] dump_stack_lvl+0x100/0x190 [ 496.398922][T22653] should_fail_ex.cold+0x5/0xa [ 496.398939][T22653] _copy_from_user+0x2e/0xd0 [ 496.398951][T22653] sco_sock_setsockopt+0x974/0x10b0 [ 496.398969][T22653] ? __pfx_sco_sock_setsockopt+0x10/0x10 [ 496.398984][T22653] ? devm_alloc_workqueue_noprof+0x30/0x170 [ 496.399013][T22653] ? selinux_socket_setsockopt+0x6a/0x80 [ 496.399032][T22653] ? __pfx_sco_sock_setsockopt+0x10/0x10 [ 496.399048][T22653] do_sock_setsockopt+0xf3/0x1d0 [ 496.399065][T22653] __sys_setsockopt+0x195/0x220 [ 496.399080][T22653] __x64_sys_setsockopt+0xbd/0x160 [ 496.399092][T22653] ? do_syscall_64+0xae/0x790 [ 496.399106][T22653] ? lockdep_hardirqs_on+0x7d/0x110 [ 496.399120][T22653] do_syscall_64+0x123/0x790 [ 496.399135][T22653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.399148][T22653] RIP: 0033:0x7fe9d319e159 [ 496.399158][T22653] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 496.399168][T22653] RSP: 002b:00007fe9d3fd1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 496.399180][T22653] RAX: ffffffffffffffda RBX: 00007fe9d3425fa0 RCX: 00007fe9d319e159 [ 496.399187][T22653] RDX: 0000000000000007 RSI: 0000000000000112 RDI: 0000000000000004 [ 496.399193][T22653] RBP: 00007fe9d3fd1090 R08: 0000000000000004 R09: 0000000000000000 [ 496.399200][T22653] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 496.399206][T22653] R13: 00007fe9d3426038 R14: 00007fe9d3425fa0 R15: 00007ffe085eb048 [ 496.399221][T22653] [ 496.700916][T22662] netlink: 'syz.7.5946': attribute type 1 has an invalid length. [ 496.973787][ T43] audit: type=1400 audit(1789038883.527:1477): avc: denied { bind } for pid=22673 comm="syz.1.5954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 496.992900][ T43] audit: type=1400 audit(1789038883.547:1478): avc: denied { listen } for pid=22673 comm="syz.1.5954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 497.033369][ T43] audit: type=1400 audit(1789038883.587:1479): avc: denied { write } for pid=22677 comm="syz.7.5955" name="nullb" dev="configfs" ino=2310 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 497.050303][T22678] null_blk: nullb1: using native zone append [ 497.074692][T22674] bond4: invalid ARP target 0.0.0.0 specified for addition [ 497.074708][T22674] bond4: option arp_ip_target: invalid value (0) [ 497.141682][T22678] null_blk: disk nullb1 created [ 497.159745][T22674] bond4 (unregistering): Released all slaves [ 497.233400][T14482] usb 13-1: USB disconnect, device number 39 [ 497.244684][T14482] idmouse 13-1:1.0: disconnected [ 497.380176][ T43] audit: type=1800 audit(1789038883.937:1480): pid=22689 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.7.5957" name=0F01CB650F7410262E66F36D0F330F09660F3A0CB9 dev="sda1" ino=2042 res=0 errno=0 [ 497.488460][T22694] netlink: 'syz.1.5958': attribute type 1 has an invalid length. [ 497.561804][T22694] 8021q: adding VLAN 0 to HW filter on device bond5 [ 497.566704][T22694] bond4: (slave bond5): making interface the new active one [ 497.567022][T22694] bond4: (slave bond5): Enslaving as an active interface with an up link [ 497.933011][T22713] FAULT_INJECTION: forcing a failure. [ 497.933011][T22713] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 497.933033][T22713] CPU: 2 UID: 0 PID: 22713 Comm: syz.8.5965 Tainted: G L syzkaller #0 PREEMPT(full) [ 497.933048][T22713] Tainted: [L]=SOFTLOCKUP [ 497.933053][T22713] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 497.933059][T22713] Call Trace: [ 497.933064][T22713] [ 497.933069][T22713] dump_stack_lvl+0x100/0x190 [ 497.933089][T22713] should_fail_ex.cold+0x5/0xa [ 497.933105][T22713] _copy_from_user+0x2e/0xd0 [ 497.933118][T22713] kstrtouint_from_user+0xd6/0x1d0 [ 497.933132][T22713] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 497.933150][T22713] ? lock_acquire+0x1d1/0x380 [ 497.933165][T22713] proc_fail_nth_write+0x83/0x220 [ 497.933180][T22713] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 497.933210][T22713] vfs_write+0x2aa/0x1050 [ 497.933235][T22713] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 497.933251][T22713] ? lock_acquire+0x1d1/0x380 [ 497.933262][T22713] ? __fget_files+0x34/0x3d0 [ 497.933276][T22713] ? __pfx_vfs_write+0x10/0x10 [ 497.933285][T22713] ? find_held_lock+0x2b/0x80 [ 497.933301][T22713] ? __fget_files+0x215/0x3d0 [ 497.933317][T22713] ? __fget_files+0x21f/0x3d0 [ 497.933335][T22713] ksys_write+0x12a/0x250 [ 497.933346][T22713] ? __pfx_ksys_write+0x10/0x10 [ 497.933362][T22713] do_syscall_64+0x123/0x790 [ 497.933378][T22713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.933390][T22713] RIP: 0033:0x7f5c4955e98e [ 497.933400][T22713] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 497.933411][T22713] RSP: 002b:00007f5c4a4e3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 497.933423][T22713] RAX: ffffffffffffffda RBX: 00007f5c4a4e46c0 RCX: 00007f5c4955e98e [ 497.933430][T22713] RDX: 0000000000000001 RSI: 00007f5c4a4e40a0 RDI: 0000000000000004 [ 497.933437][T22713] RBP: 00007f5c4a4e4090 R08: 0000000000000000 R09: 0000000000000000 [ 497.933443][T22713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 497.933450][T22713] R13: 00007f5c49826038 R14: 00007f5c49825fa0 R15: 00007fff58e341a8 [ 497.933464][T22713] [ 498.135316][T22723] loop2: detected capacity change from 0 to 14 [ 498.197296][T22723] Dev loop2: unable to read RDB block 14 [ 498.197363][T22723] loop2: unable to read partition table [ 498.197452][T22723] loop2: partition table beyond EOD, truncated [ 498.197470][T22723] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 498.351046][ T43] audit: type=1400 audit(1789038884.897:1481): avc: denied { read } for pid=22725 comm="syz.8.5968" name="usbmon0" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 498.351077][ T43] audit: type=1400 audit(1789038884.897:1482): avc: denied { open } for pid=22725 comm="syz.8.5968" path="/dev/usbmon0" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 498.428338][ T43] audit: type=1400 audit(1789038884.977:1483): avc: denied { ioctl } for pid=22725 comm="syz.8.5968" path="/dev/usbmon0" dev="devtmpfs" ino=736 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 498.535606][ T43] audit: type=1400 audit(1789038885.087:1484): avc: denied { create } for pid=22725 comm="syz.8.5968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 498.536885][ T43] audit: type=1400 audit(1789038885.087:1485): avc: denied { write } for pid=22725 comm="syz.8.5968" path="socket:[117890]" dev="sockfs" ino=117890 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 498.900897][T22745] tipc: Enabling of bearer rejected, already enabled [ 498.927913][T14482] usb 14-1: new high-speed USB device number 40 using dummy_hcd [ 499.080456][T14482] usb 14-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 499.082153][T14482] usb 14-1: config 0 has an invalid interface number: 50 but max is 0 [ 499.082175][T14482] usb 14-1: config 0 has no interface number 0 [ 499.082207][T14482] usb 14-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 499.086438][T14482] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.086459][T14482] usb 14-1: Product: syz [ 499.086471][T14482] usb 14-1: Manufacturer: syz [ 499.086483][T14482] usb 14-1: SerialNumber: syz [ 499.135769][T14482] usb 14-1: config 0 descriptor?? [ 499.150514][T14482] yurex 14-1:0.50: USB YUREX device now attached to Yurex #0 [ 499.349396][T14482] usb 14-1: USB disconnect, device number 40 [ 499.352990][T14482] yurex 14-1:0.50: USB YUREX #0 now disconnected [ 499.413928][T22740] tipc: Resetting bearer [ 499.440733][ T25] syz_tun: tun_net_xmit 110 [ 499.446914][T22740] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 499.509635][T22747] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5976'. [ 499.509650][T22747] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5976'. [ 499.509746][T22747] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5976'. [ 499.509754][T22747] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5976'. [ 500.039903][T22763] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5982'. [ 500.383494][ T5842] syz_tun: tun_net_xmit 110 [ 500.787960][T22773] bond6: down delay (12) is not a multiple of miimon (100), value rounded to 0 ms [ 501.226829][T22779] tcf_pedit_act: 7 callbacks suppressed [ 501.226843][T22779] tc action pedit 'at' offset 5 out of bounds [ 501.226852][T22779] tc action pedit 'at' offset 5 out of bounds [ 501.226857][T22779] tc action pedit 'at' offset 5 out of bounds [ 501.226864][T22779] tc action pedit 'at' offset 5 out of bounds [ 501.226869][T22779] tc action pedit 'at' offset 5 out of bounds [ 501.226875][T22779] tc action pedit 'at' offset 5 out of bounds [ 501.226881][T22779] tc action pedit 'at' offset 5 out of bounds [ 501.226887][T22779] tc action pedit 'at' offset 5 out of bounds [ 501.226893][T22779] tc action pedit 'at' offset 5 out of bounds [ 501.226899][T22779] tc action pedit 'at' offset 5 out of bounds [ 501.226911][T22779] 0: reclassify loop, rule prio 0, protocol 800 [ 501.266563][ T1444] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.266595][ T1444] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.099190][T22789] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5992'. [ 502.134938][T22789] 8021q: adding VLAN 0 to HW filter on device bond3 [ 503.185190][T22803] jffs2: notice: (22803) jffs2_build_xattr_subsystem: complete building xattr subsystem, 4 of xdatum (0 unchecked, 4 orphan) and 16 of xref (0 dead, 16 orphan) found. [ 504.041262][T22812] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.041569][T22812] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.041622][T22812] bridge0: port 1(bridge_slave_0) entered forwarding state [ 504.401738][T22839] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 504.402934][T22839] overlayfs: missing 'workdir' [ 504.449522][T22836] netlink: 'syz.1.6007': attribute type 1 has an invalid length. [ 504.697535][T22842] 8021q: adding VLAN 0 to HW filter on device bond8 [ 504.731373][T22842] bond7: (slave bond8): making interface the new active one [ 504.746814][T22842] bond7: (slave bond8): Enslaving as an active interface with an up link [ 504.917526][T22849] syzkaller0: entered promiscuous mode [ 504.917543][T22849] syzkaller0: entered allmulticast mode [ 505.384744][T22860] 0: reclassify loop, rule prio 0, protocol 800 [ 505.881016][T22878] netlink: 48 bytes leftover after parsing attributes in process `syz.8.6018'. [ 506.826956][T22904] tcf_pedit_act: 24 callbacks suppressed [ 506.826970][T22904] tc action pedit 'at' offset 5 out of bounds [ 506.826977][T22904] tc action pedit 'at' offset 5 out of bounds [ 506.826983][T22904] tc action pedit 'at' offset 5 out of bounds [ 506.826989][T22904] tc action pedit 'at' offset 5 out of bounds [ 506.826995][T22904] tc action pedit 'at' offset 5 out of bounds [ 506.827001][T22904] tc action pedit 'at' offset 5 out of bounds [ 506.827007][T22904] tc action pedit 'at' offset 5 out of bounds [ 506.827014][T22904] tc action pedit 'at' offset 5 out of bounds [ 506.827019][T22904] tc action pedit 'at' offset 5 out of bounds [ 506.827026][T22904] tc action pedit 'at' offset 5 out of bounds [ 506.827038][T22904] 0: reclassify loop, rule prio 0, protocol 800 [ 507.065201][T22909] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.065667][T22909] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.065721][T22909] bridge0: port 1(bridge_slave_0) entered forwarding state [ 507.382629][T22926] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6032'. [ 508.349243][T22950] xt_CT: You must specify a L4 protocol and not use inversions on it [ 508.361873][T22944] 0: reclassify loop, rule prio 0, protocol 800 [ 508.626989][T22962] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6045'. [ 508.627009][T22962] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 508.628356][T22962] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6045'. [ 508.628373][T22962] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 508.674414][T22958] netlink: 'syz.7.6043': attribute type 1 has an invalid length. [ 508.723211][T22969] FAULT_INJECTION: forcing a failure. [ 508.723211][T22969] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 508.723271][T22969] CPU: 2 UID: 0 PID: 22969 Comm: syz.9.6047 Tainted: G L syzkaller #0 PREEMPT(full) [ 508.723287][T22969] Tainted: [L]=SOFTLOCKUP [ 508.723291][T22969] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 508.723298][T22969] Call Trace: [ 508.723302][T22969] [ 508.723308][T22969] dump_stack_lvl+0x100/0x190 [ 508.723327][T22969] should_fail_ex.cold+0x5/0xa [ 508.723345][T22969] _copy_to_user+0x32/0xd0 [ 508.723358][T22969] simple_read_from_buffer+0xcb/0x170 [ 508.723373][T22969] proc_fail_nth_read+0x1af/0x230 [ 508.723388][T22969] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 508.723407][T22969] ? rw_verify_area+0xce/0x6d0 [ 508.723424][T22969] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 508.723437][T22969] vfs_read+0x1e4/0xb40 [ 508.723449][T22969] ? lock_acquire+0x1d1/0x380 [ 508.723461][T22969] ? __fget_files+0x34/0x3d0 [ 508.723474][T22969] ? __pfx_vfs_read+0x10/0x10 [ 508.723484][T22969] ? find_held_lock+0x2b/0x80 [ 508.723499][T22969] ? __fget_files+0x215/0x3d0 [ 508.723515][T22969] ? __fget_files+0x21f/0x3d0 [ 508.723532][T22969] ksys_read+0x12a/0x250 [ 508.723543][T22969] ? __pfx_ksys_read+0x10/0x10 [ 508.723562][T22969] do_syscall_64+0x123/0x790 [ 508.723579][T22969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.723591][T22969] RIP: 0033:0x7f2e3435e98e [ 508.723601][T22969] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 508.723612][T22969] RSP: 002b:00007f2e35272fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 508.723623][T22969] RAX: ffffffffffffffda RBX: 00007f2e352736c0 RCX: 00007f2e3435e98e [ 508.723630][T22969] RDX: 000000000000000f RSI: 00007f2e352730a0 RDI: 0000000000000004 [ 508.723637][T22969] RBP: 00007f2e35273090 R08: 0000000000000000 R09: 0000000000000000 [ 508.723643][T22969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 508.723650][T22969] R13: 00007f2e34626038 R14: 00007f2e34625fa0 R15: 00007ffe1afbbac8 [ 508.723664][T22969] [ 509.357331][T22988] FAULT_INJECTION: forcing a failure. [ 509.357331][T22988] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 509.357354][T22988] CPU: 0 UID: 0 PID: 22988 Comm: syz.7.6052 Tainted: G L syzkaller #0 PREEMPT(full) [ 509.357370][T22988] Tainted: [L]=SOFTLOCKUP [ 509.357374][T22988] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 509.357381][T22988] Call Trace: [ 509.357385][T22988] [ 509.357390][T22988] dump_stack_lvl+0x100/0x190 [ 509.357410][T22988] should_fail_ex.cold+0x5/0xa [ 509.357424][T22988] ? prepare_alloc_pages+0x16d/0x5b0 [ 509.357440][T22988] should_fail_alloc_page+0xeb/0x140 [ 509.357455][T22988] prepare_alloc_pages+0x1f0/0x5b0 [ 509.357469][T22988] ? __memcg_kmem_charge_page+0x373/0x4d0 [ 509.357488][T22988] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 509.357508][T22988] ? stack_trace_save+0x8e/0xc0 [ 509.357526][T22988] ? __pfx_stack_trace_save+0x10/0x10 [ 509.357544][T22988] ? stack_depot_save_flags+0x27/0x9f0 [ 509.357561][T22988] ? kasan_save_stack+0x3f/0x50 [ 509.357573][T22988] ? kasan_save_stack+0x30/0x50 [ 509.357584][T22988] ? kasan_save_track+0x14/0x30 [ 509.357597][T22988] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 509.357615][T22988] ? mmu_topup_memory_caches+0xbc/0x170 [ 509.357627][T22988] ? vcpu_run+0x395d/0x5e80 [ 509.357640][T22988] ? kvm_vcpu_ioctl+0x730/0x1700 [ 509.357655][T22988] ? __x64_sys_ioctl+0x18e/0x210 [ 509.357665][T22988] ? do_syscall_64+0x123/0x790 [ 509.357679][T22988] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.357702][T22988] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 509.357716][T22988] ? policy_nodemask+0xed/0x4f0 [ 509.357731][T22988] alloc_pages_mpol+0x201/0x550 [ 509.357763][T22988] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 509.357779][T22988] ? __kvmalloc_node_noprof+0x377/0x9b0 [ 509.357795][T22988] alloc_pages_noprof+0x1a/0x160 [ 509.357813][T22988] get_free_pages_noprof+0x10/0xb0 [ 509.357825][T22988] __kvm_mmu_topup_memory_cache+0x278/0x5f0 [ 509.357845][T22988] mmu_topup_memory_caches+0xbc/0x170 [ 509.357858][T22988] kvm_mmu_load+0xe8/0x2580 [ 509.357870][T22988] ? apic_has_interrupt_for_ppr+0xb4/0x210 [ 509.357884][T22988] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 509.357901][T22988] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 509.357920][T22988] ? __pfx_kvm_mmu_load+0x10/0x10 [ 509.357932][T22988] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 509.357944][T22988] ? kvm_check_and_inject_events+0x896/0x1050 [ 509.357959][T22988] vcpu_run+0x395d/0x5e80 [ 509.357989][T22988] ? wakeup_preempt_fair+0x5c3/0xdc0 [ 509.358004][T22988] ? vmx_vcpu_load_vmcs+0x21d/0x760 [ 509.358024][T22988] ? __pfx_vcpu_run+0x10/0x10 [ 509.358040][T22988] ? lock_acquire+0x1d1/0x380 [ 509.358051][T22988] ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1dd0 [ 509.358066][T22988] ? fpu_swap_kvm_fpstate+0x217/0x460 [ 509.358082][T22988] ? __local_bh_enable_ip+0xa5/0x120 [ 509.358097][T22988] ? kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 509.358111][T22988] kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 509.358128][T22988] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 509.358142][T22988] ? lock_acquire+0x1d1/0x380 [ 509.358154][T22988] ? do_raw_write_lock+0x11e/0x260 [ 509.358168][T22988] ? find_held_lock+0x2b/0x80 [ 509.358183][T22988] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 509.358198][T22988] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 509.358229][T22988] kvm_vcpu_ioctl+0x730/0x1700 [ 509.358246][T22988] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 509.358261][T22988] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 509.358275][T22988] ? do_vfs_ioctl+0x226/0x13e0 [ 509.358286][T22988] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 509.358296][T22988] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 509.358310][T22988] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 509.358325][T22988] ? __fget_files+0x34/0x3d0 [ 509.358344][T22988] ? selinux_file_ioctl+0x13b/0x290 [ 509.358356][T22988] ? selinux_file_ioctl+0xb6/0x290 [ 509.358368][T22988] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 509.358384][T22988] __x64_sys_ioctl+0x18e/0x210 [ 509.358396][T22988] do_syscall_64+0x123/0x790 [ 509.358412][T22988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.358424][T22988] RIP: 0033:0x7fe9d319e159 [ 509.358433][T22988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 509.358444][T22988] RSP: 002b:00007fe9d3faf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 509.358456][T22988] RAX: ffffffffffffffda RBX: 00007fe9d3426090 RCX: 00007fe9d319e159 [ 509.358464][T22988] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 509.358470][T22988] RBP: 00007fe9d3faf090 R08: 0000000000000000 R09: 0000000000000000 [ 509.358477][T22988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 509.358484][T22988] R13: 00007fe9d3426128 R14: 00007fe9d3426090 R15: 00007ffe085eb048 [ 509.358498][T22988] [ 509.947250][ T43] audit: type=1400 audit(1789038896.497:1486): avc: denied { ioctl } for pid=23005 comm="syz.8.6058" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 509.999329][T23008] netlink: 'syz.7.6057': attribute type 1 has an invalid length. [ 510.410702][T23016] fuse: Bad value for 'group_id' [ 510.410715][T23016] fuse: Bad value for 'group_id' [ 510.424508][T23018] fuse: fd is not a fuse device [ 510.637956][T23024] 0: reclassify loop, rule prio 0, protocol 800 [ 510.689414][T23026] netlink: 'syz.7.6063': attribute type 1 has an invalid length. [ 510.689427][T23026] nbd: error processing sock list [ 510.689652][T23026] block nbd0: shutting down sockets [ 511.802724][T23053] 0: reclassify loop, rule prio 0, protocol 800 [ 512.060721][T23057] FAULT_INJECTION: forcing a failure. [ 512.060721][T23057] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 512.060742][T23057] CPU: 2 UID: 0 PID: 23057 Comm: syz.7.6075 Tainted: G L syzkaller #0 PREEMPT(full) [ 512.060758][T23057] Tainted: [L]=SOFTLOCKUP [ 512.060763][T23057] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 512.060769][T23057] Call Trace: [ 512.060774][T23057] [ 512.060778][T23057] dump_stack_lvl+0x100/0x190 [ 512.060798][T23057] should_fail_ex.cold+0x5/0xa [ 512.060814][T23057] _copy_from_user+0x2e/0xd0 [ 512.060827][T23057] do_ip_setsockopt+0xb22/0x3310 [ 512.060846][T23057] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 512.060862][T23057] ? __pfx_sock_has_perm+0x10/0x10 [ 512.060880][T23057] ? selinux_netlbl_socket_setsockopt+0x134/0x470 [ 512.060894][T23057] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 512.060911][T23057] ip_setsockopt+0x5a/0xf0 [ 512.060929][T23057] raw_setsockopt+0x60/0x1b0 [ 512.060945][T23057] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 512.060961][T23057] do_sock_setsockopt+0xf3/0x1d0 [ 512.060977][T23057] __sys_setsockopt+0x195/0x220 [ 512.060993][T23057] __x64_sys_setsockopt+0xbd/0x160 [ 512.061004][T23057] ? do_syscall_64+0xae/0x790 [ 512.061019][T23057] ? lockdep_hardirqs_on+0x7d/0x110 [ 512.061033][T23057] do_syscall_64+0x123/0x790 [ 512.061049][T23057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.061061][T23057] RIP: 0033:0x7fe9d319e159 [ 512.061070][T23057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 512.061081][T23057] RSP: 002b:00007fe9d3fd1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 512.061093][T23057] RAX: ffffffffffffffda RBX: 00007fe9d3425fa0 RCX: 00007fe9d319e159 [ 512.061100][T23057] RDX: 0000000000000016 RSI: 0000000000000000 RDI: 0000000000000003 [ 512.061107][T23057] RBP: 00007fe9d3fd1090 R08: 0000000000000004 R09: 0000000000000000 [ 512.061114][T23057] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 512.061121][T23057] R13: 00007fe9d3426038 R14: 00007fe9d3425fa0 R15: 00007ffe085eb048 [ 512.061135][T23057] [ 512.939823][ T5746] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 513.605057][T23086] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0, syncid = 0, id = 0 [ 514.453416][T23098] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 514.658981][T14482] usb 14-1: new high-speed USB device number 41 using dummy_hcd [ 514.811453][T14482] usb 14-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 514.818870][T14482] usb 14-1: config 0 has an invalid interface number: 50 but max is 0 [ 514.818889][T14482] usb 14-1: config 0 has no interface number 0 [ 514.818907][T14482] usb 14-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 514.833554][T14482] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.833569][T14482] usb 14-1: Product: syz [ 514.833577][T14482] usb 14-1: Manufacturer: syz [ 514.833585][T14482] usb 14-1: SerialNumber: syz [ 514.835785][T14482] usb 14-1: config 0 descriptor?? [ 514.876254][T23108] FAULT_INJECTION: forcing a failure. [ 514.876254][T23108] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 514.876323][T23108] CPU: 2 UID: 0 PID: 23108 Comm: syz.7.6092 Tainted: G L syzkaller #0 PREEMPT(full) [ 514.876340][T23108] Tainted: [L]=SOFTLOCKUP [ 514.876344][T23108] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 514.876351][T23108] Call Trace: [ 514.876356][T23108] [ 514.876361][T23108] dump_stack_lvl+0x100/0x190 [ 514.876381][T23108] should_fail_ex.cold+0x5/0xa [ 514.876395][T23108] ? prepare_alloc_pages+0x16d/0x5b0 [ 514.876411][T23108] should_fail_alloc_page+0xeb/0x140 [ 514.876426][T23108] prepare_alloc_pages+0x1f0/0x5b0 [ 514.876454][T23108] ? __memcg_kmem_charge_page+0x373/0x4d0 [ 514.876473][T23108] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 514.876492][T23108] ? stack_trace_save+0x8e/0xc0 [ 514.876510][T23108] ? __pfx_stack_trace_save+0x10/0x10 [ 514.876527][T23108] ? stack_depot_save_flags+0x27/0x9f0 [ 514.876546][T23108] ? stack_depot_save_flags+0x27/0x9f0 [ 514.876561][T23108] ? kasan_save_stack+0x3f/0x50 [ 514.876573][T23108] ? kasan_save_stack+0x30/0x50 [ 514.876586][T23108] ? kasan_save_track+0x14/0x30 [ 514.876598][T23108] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 514.876616][T23108] ? mmu_topup_memory_caches+0xbc/0x170 [ 514.876629][T23108] ? vcpu_run+0x395d/0x5e80 [ 514.876643][T23108] ? kvm_vcpu_ioctl+0x730/0x1700 [ 514.876658][T23108] ? __x64_sys_ioctl+0x18e/0x210 [ 514.876668][T23108] ? do_syscall_64+0x123/0x790 [ 514.876683][T23108] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.876706][T23108] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 514.876720][T23108] ? policy_nodemask+0xed/0x4f0 [ 514.876736][T23108] alloc_pages_mpol+0x201/0x550 [ 514.876751][T23108] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 514.876766][T23108] ? __kvmalloc_node_noprof+0x377/0x9b0 [ 514.876782][T23108] alloc_pages_noprof+0x1a/0x160 [ 514.876799][T23108] get_free_pages_noprof+0x10/0xb0 [ 514.876811][T23108] __kvm_mmu_topup_memory_cache+0x278/0x5f0 [ 514.876832][T23108] mmu_topup_memory_caches+0xbc/0x170 [ 514.876845][T23108] kvm_mmu_load+0xe8/0x2580 [ 514.876858][T23108] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 514.876874][T23108] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 514.876892][T23108] ? __pfx_kvm_mmu_load+0x10/0x10 [ 514.876905][T23108] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 514.876916][T23108] ? kvm_check_and_inject_events+0x896/0x1050 [ 514.876931][T23108] vcpu_run+0x395d/0x5e80 [ 514.876944][T23108] ? vmx_vcpu_load_vmcs+0x21d/0x760 [ 514.876965][T23108] ? __pfx_vcpu_run+0x10/0x10 [ 514.876980][T23108] ? lock_acquire+0x1d1/0x380 [ 514.876992][T23108] ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1dd0 [ 514.877007][T23108] ? fpu_swap_kvm_fpstate+0x217/0x460 [ 514.877023][T23108] ? __local_bh_enable_ip+0xa5/0x120 [ 514.877038][T23108] ? kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 514.877051][T23108] kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 514.877069][T23108] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 514.877082][T23108] ? lock_acquire+0x1d1/0x380 [ 514.877094][T23108] ? do_raw_write_lock+0x11e/0x260 [ 514.877108][T23108] ? find_held_lock+0x2b/0x80 [ 514.877123][T23108] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 514.877137][T23108] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 514.877155][T23108] kvm_vcpu_ioctl+0x730/0x1700 [ 514.877172][T23108] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 514.877187][T23108] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 514.877201][T23108] ? do_vfs_ioctl+0x226/0x13e0 [ 514.877212][T23108] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 514.877222][T23108] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 514.877236][T23108] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 514.877251][T23108] ? __fget_files+0x34/0x3d0 [ 514.877270][T23108] ? selinux_file_ioctl+0x13b/0x290 [ 514.877281][T23108] ? selinux_file_ioctl+0xb6/0x290 [ 514.877294][T23108] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 514.877309][T23108] __x64_sys_ioctl+0x18e/0x210 [ 514.877322][T23108] do_syscall_64+0x123/0x790 [ 514.877337][T23108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.877349][T23108] RIP: 0033:0x7fe9d319e159 [ 514.877360][T23108] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 514.877371][T23108] RSP: 002b:00007fe9d3fb0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 514.877382][T23108] RAX: ffffffffffffffda RBX: 00007fe9d3426090 RCX: 00007fe9d319e159 [ 514.877389][T23108] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 514.877396][T23108] RBP: 00007fe9d3fb0090 R08: 0000000000000000 R09: 0000000000000000 [ 514.877403][T23108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 514.877409][T23108] R13: 00007fe9d3426128 R14: 00007fe9d3426090 R15: 00007ffe085eb048 [ 514.877424][T23108] [ 514.877568][T14482] yurex 14-1:0.50: USB YUREX device now attached to Yurex #0 [ 515.077336][T23111] xt_hashlimit: size too large, truncated to 1048576 [ 515.132444][ T5842] usb 14-1: USB disconnect, device number 41 [ 515.136529][ T5842] yurex 14-1:0.50: USB YUREX #0 now disconnected [ 515.416796][T23100] tipc: Resetting bearer [ 515.439610][ T850] syz_tun: tun_net_xmit 110 [ 515.508846][T23100] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 515.555614][T23119] netlink: 'syz.8.6095': attribute type 1 has an invalid length. [ 515.555628][T23119] nbd: error processing sock list [ 515.556067][T23119] block nbd0: shutting down sockets [ 515.621065][T16130] syz_tun: tun_net_xmit 110 [ 515.766718][ T43] audit: type=1400 audit(1789038902.317:1487): avc: denied { mount } for pid=23120 comm="syz.7.6096" name="/" dev="pstore" ino=6316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 515.784790][T23124] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 516.522019][ T43] audit: type=1800 audit(1789038903.077:1488): pid=23131 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.9.6099" name=0F01CB650F7410262E66F36D0F330F09660F3A0CB9 dev="sda1" ino=2042 res=0 errno=0 [ 516.840795][T23139] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0, syncid = 0, id = 0 [ 517.570271][T23157] netlink: 11 bytes leftover after parsing attributes in process `syz.9.6104'. [ 517.965228][T23163] FAULT_INJECTION: forcing a failure. [ 517.965228][T23163] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 517.965250][T23163] CPU: 0 UID: 0 PID: 23163 Comm: syz.8.6106 Tainted: G L syzkaller #0 PREEMPT(full) [ 517.965266][T23163] Tainted: [L]=SOFTLOCKUP [ 517.965270][T23163] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 517.965277][T23163] Call Trace: [ 517.965281][T23163] [ 517.965286][T23163] dump_stack_lvl+0x100/0x190 [ 517.965309][T23163] should_fail_ex.cold+0x5/0xa [ 517.965332][T23163] _copy_to_user+0x32/0xd0 [ 517.965351][T23163] simple_read_from_buffer+0xcb/0x170 [ 517.965368][T23163] proc_fail_nth_read+0x1af/0x230 [ 517.965383][T23163] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 517.965397][T23163] ? rw_verify_area+0xce/0x6d0 [ 517.965414][T23163] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 517.965428][T23163] vfs_read+0x1e4/0xb40 [ 517.965439][T23163] ? lock_acquire+0x1d1/0x380 [ 517.965451][T23163] ? __fget_files+0x34/0x3d0 [ 517.965483][T23163] ? __pfx_vfs_read+0x10/0x10 [ 517.965493][T23163] ? find_held_lock+0x2b/0x80 [ 517.965509][T23163] ? __fget_files+0x215/0x3d0 [ 517.965525][T23163] ? __fget_files+0x21f/0x3d0 [ 517.965542][T23163] ksys_read+0x12a/0x250 [ 517.965553][T23163] ? __pfx_ksys_read+0x10/0x10 [ 517.965568][T23163] do_syscall_64+0x123/0x790 [ 517.965584][T23163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.965596][T23163] RIP: 0033:0x7f5c4955e98e [ 517.965606][T23163] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 517.965617][T23163] RSP: 002b:00007f5c4a4e3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 517.965628][T23163] RAX: ffffffffffffffda RBX: 00007f5c4a4e46c0 RCX: 00007f5c4955e98e [ 517.965635][T23163] RDX: 000000000000000f RSI: 00007f5c4a4e40a0 RDI: 0000000000000004 [ 517.965642][T23163] RBP: 00007f5c4a4e4090 R08: 0000000000000000 R09: 0000000000000000 [ 517.965649][T23163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 517.965655][T23163] R13: 00007f5c49826038 R14: 00007f5c49825fa0 R15: 00007fff58e341a8 [ 517.965670][T23163] [ 518.232024][ T5746] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 518.232092][ T5746] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 518.531496][T23175] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6108'. [ 518.820231][T23179] netlink: 'syz.9.6111': attribute type 4 has an invalid length. [ 518.820248][T23179] netlink: 152 bytes leftover after parsing attributes in process `syz.9.6111'. [ 518.935272][T23179] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 519.701413][T23210] fuse: Unknown parameter 'us' [ 519.871722][ T43] audit: type=1400 audit(1789038906.427:1489): avc: denied { mounton } for pid=23211 comm="syz.8.6120" path="/389/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 520.016694][T23212] fuseblk: Unknown parameter 'fowner>00000000000000000000' [ 520.076527][ T43] audit: type=1400 audit(1789038906.627:1490): avc: denied { mounton } for pid=23219 comm="syz.1.6122" path="/331/file0" dev="tmpfs" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 520.163523][T23220] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 520.918103][ T5842] syz_tun: tun_net_xmit 110 [ 521.039558][T23250] xt_hashlimit: size too large, truncated to 1048576 [ 521.144390][T23256] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6134'. [ 521.161929][T23256] syzkaller1: entered promiscuous mode [ 521.162279][T23256] syzkaller1: entered allmulticast mode [ 521.321900][T23261] netlink: 244 bytes leftover after parsing attributes in process `syz.7.6134'. [ 521.322983][T23261] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 521.488295][ T5842] usb 14-1: new high-speed USB device number 42 using dummy_hcd [ 521.532465][T23266] fuse: fd is not a fuse device [ 521.642016][ T5842] usb 14-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 521.645882][ T5842] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 521.645898][ T5842] usb 14-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 521.645938][ T5842] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.672117][ T5842] idmouse 14-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 521.675682][ T5842] syz_tun: tun_net_xmit 110 [ 521.866819][ T43] audit: type=1800 audit(1789038908.417:1491): pid=23277 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.7.6141" name=0F01CB650F7410262E66F36D0F330F09660F3A0CB9 dev="sda1" ino=2042 res=0 errno=0 [ 522.365027][T23290] netlink: 168 bytes leftover after parsing attributes in process `syz.7.6143'. [ 522.423475][T23289] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.423721][T23289] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.507462][ T43] audit: type=1400 audit(1789038909.057:1492): avc: denied { kexec_image_load } for pid=23291 comm="syz.8.6144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 522.753971][T23289] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 522.780820][T23289] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 523.430347][ T5821] wg0 speed is unknown, defaulting to 1000 [ 523.430364][ T5821] syz0: Port: 1 Link DOWN [ 523.441889][ T5791] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.441939][ T5791] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.441958][ T5791] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.441976][ T5791] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.588310][T23307] macsec0: entered allmulticast mode [ 523.588325][T23307] veth1_macvtap: entered allmulticast mode [ 523.693305][ T5842] usb 14-1: USB disconnect, device number 42 [ 523.703586][ T5842] idmouse 14-1:1.0: disconnected [ 523.816686][T23313] netlink: 'syz.8.6151': attribute type 1 has an invalid length. [ 523.829106][T23313] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 523.910982][T23313] bond2 (unregistering): Released all slaves [ 523.979445][T23324] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 4294967295 (only 8 groups) [ 524.142787][T23333] fuse: Invalid rootmode [ 524.145811][ T43] audit: type=1400 audit(1789038910.697:1493): avc: denied { read write } for pid=23332 comm="syz.8.6156" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 524.146831][ T43] audit: type=1400 audit(1789038910.697:1494): avc: denied { open } for pid=23332 comm="syz.8.6156" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 524.256381][T23340] openvswitch: netlink: Flow actions attr not present in new flow. [ 524.580036][T23357] fuse: fd is not a fuse device [ 527.575477][T23393] netlink: 'syz.7.6178': attribute type 39 has an invalid length. [ 527.612123][T23393] hsr_slave_0 (unregistering): left promiscuous mode [ 527.657066][T23398] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6178'. [ 527.657083][T23398] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6178'. [ 527.769379][T23389] bond0: (slave syz_tun): Releasing backup interface [ 527.849411][T23389] bridge_slave_0: left allmulticast mode [ 527.849484][T23389] bridge_slave_0: left promiscuous mode [ 527.849592][T23389] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.853267][T23399] pci 0000:00:01.0: [1af4:1050] type 00 class 0x030000 conventional PCI endpoint [ 527.904430][T23399] pci 0000:00:01.0: BAR 0 [mem 0xfe000000-0xfe7fffff pref] [ 527.904625][T23399] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref] [ 527.904705][T23399] pci 0000:00:01.0: BAR 4 [mem 0xfeaf4000-0xfeaf4fff] [ 527.904836][T23399] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 527.905857][T23399] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 527.943433][T23399] pci 0000:00:01.0: Adding to iommu group 1 [ 527.951077][T23399] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 527.951091][T23399] pci 0000:00:01.0: vgaarb: bridge control possible [ 527.951099][T23399] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 527.955952][T23399] pci 0000:00:03.0: [1af4:1005] type 00 class 0x00ff00 conventional PCI endpoint [ 527.973416][T23399] pci 0000:00:03.0: BAR 0 [io 0xc0a0-0xc0bf] [ 527.973491][T23399] pci 0000:00:03.0: BAR 1 [mem 0xfeaf5000-0xfeaf5fff] [ 527.973726][T23399] pci 0000:00:03.0: BAR 4 [mem 0x380800004000-0x380800007fff 64bit pref] [ 528.031096][T23389] bridge_slave_1: left allmulticast mode [ 528.031781][T23389] bridge_slave_1: left promiscuous mode [ 528.033241][T23389] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.132448][T23389] bond0: (slave bond_slave_0): Releasing backup interface [ 528.159208][T23389] bond0: (slave c@0Ù): Releasing backup interface [ 528.164954][T23399] pci 0000:00:03.0: Adding to iommu group 3 [ 528.220732][T23389] team0: Port device team_slave_0 removed [ 528.227395][T23399] pci 0000:00:1f.0: [8086:2918] type 00 class 0x060100 conventional PCI endpoint [ 528.250446][T23399] pci 0000:00:1f.0: quirk: [io 0x0600-0x067f] claimed by ICH6 ACPI/GPIO/TCO [ 528.272669][T23389] team0: Port device team_slave_1 removed [ 528.273069][T23389] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 528.273085][T23389] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 528.276343][T23399] pci 0000:00:1f.0: Adding to iommu group 8 [ 528.288456][T23389] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 528.288471][T23389] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 528.294651][T23399] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x807fffff pref]: assigned [ 528.309679][T23399] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref]: assigned [ 528.314885][T23399] pci 0000:00:03.0: BAR 4 [mem 0x380800004000-0x380800007fff 64bit pref]: assigned [ 528.317121][T23399] pci 0000:00:01.0: BAR 4 [mem 0x80800000-0x80800fff]: assigned [ 528.329660][T23399] pci 0000:00:03.0: BAR 1 [mem 0x80801000-0x80801fff]: assigned [ 528.330565][T23399] pci 0000:00:03.0: BAR 0 [io 0x2000-0x201f]: assigned [ 528.383693][T23389] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 528.384028][T23394] tipc: Enabled bearer , priority 0 [ 528.396522][ T6069] tipc: Resetting bearer [ 528.426474][T23399] [drm] pci: virtio-vga detected at 0000:00:01.0 [ 528.426582][T23399] virtio-pci 0000:00:01.0: vgaarb: deactivate vga console [ 528.432817][T23399] [drm] features: -virgl +edid -resource_blob -host_visible [ 528.432827][T23399] [drm] features: -context_init -blob_alignment [ 528.451259][T23399] [drm] number of scanouts: 1 [ 528.451294][T23399] [drm] number of cap sets: 0 [ 528.479197][T23399] virtio-pci 0000:00:01.0: [drm] [PLANE:36:plane-1] pixel format with alpha exposed but blend mode not setup. Please fix. [ 528.496179][T23399] [drm] Initialized virtio_gpu 0.1.0 for 0000:00:01.0 on minor 1 [ 528.529090][T23417] syzkaller0: entered promiscuous mode [ 528.529104][T23417] syzkaller0: entered allmulticast mode [ 528.532585][T23417] FAULT_INJECTION: forcing a failure. [ 528.532585][T23417] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 528.532604][T23417] CPU: 2 UID: 0 PID: 23417 Comm: syz.9.6184 Tainted: G L syzkaller #0 PREEMPT(full) [ 528.532626][T23417] Tainted: [L]=SOFTLOCKUP [ 528.532631][T23417] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 528.532637][T23417] Call Trace: [ 528.532642][T23417] [ 528.532647][T23417] dump_stack_lvl+0x100/0x190 [ 528.532708][T23417] should_fail_ex.cold+0x5/0xa [ 528.532724][T23417] _copy_from_iter+0x1f4/0x1690 [ 528.532757][T23417] ? _copy_from_iter+0x270/0x1690 [ 528.532769][T23417] ? __pfx__copy_from_iter+0x10/0x10 [ 528.532782][T23417] ? __pfx__copy_from_iter+0x10/0x10 [ 528.532795][T23417] ? _copy_from_iter+0x270/0x1690 [ 528.532809][T23417] copy_page_from_iter+0x238/0x300 [ 528.532822][T23417] skb_copy_datagram_from_iter+0x399/0x720 [ 528.532863][T23417] packet_sendmsg+0x2251/0x4ef0 [ 528.532883][T23417] ? sock_has_perm+0x25a/0x2f0 [ 528.532900][T23417] ? __pfx_sock_has_perm+0x10/0x10 [ 528.532920][T23417] ? __pfx_packet_sendmsg+0x10/0x10 [ 528.532932][T23417] ? __might_fault+0xc5/0x140 [ 528.532951][T23417] ? selinux_socket_sendmsg+0x198/0x2f0 [ 528.532976][T23417] __sys_sendto+0x48b/0x4e0 [ 528.532992][T23417] ? __pfx_packet_sendmsg+0x10/0x10 [ 528.533010][T23417] ? __pfx___sys_sendto+0x10/0x10 [ 528.533036][T23417] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 528.533091][T23417] ? ksys_write+0x1ac/0x250 [ 528.533103][T23417] ? __pfx_ksys_write+0x10/0x10 [ 528.533116][T23417] __x64_sys_sendto+0xe0/0x1c0 [ 528.533127][T23417] ? do_syscall_64+0xae/0x790 [ 528.533141][T23417] ? lockdep_hardirqs_on+0x7d/0x110 [ 528.533155][T23417] do_syscall_64+0x123/0x790 [ 528.533171][T23417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.533183][T23417] RIP: 0033:0x7f2e3439e159 [ 528.533193][T23417] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 528.533205][T23417] RSP: 002b:00007f2e35273028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 528.533217][T23417] RAX: ffffffffffffffda RBX: 00007f2e34625fa0 RCX: 00007f2e3439e159 [ 528.533237][T23417] RDX: 000000000000fdef RSI: 00002000000002c0 RDI: 0000000000000005 [ 528.533244][T23417] RBP: 00007f2e35273090 R08: 0000200000000140 R09: 0000000000000014 [ 528.533251][T23417] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 528.533258][T23417] R13: 00007f2e34626038 R14: 00007f2e34625fa0 R15: 00007ffe1afbbac8 [ 528.533272][T23417] [ 528.909429][T23399] Console: switching to colour frame buffer device 160x50 [ 528.974949][T23399] virtio-pci 0000:00:01.0: [drm] fb0: virtio_gpudrmfb frame buffer device [ 529.036464][ T43] audit: type=1400 audit(1789038915.587:1495): avc: denied { mount } for pid=23423 comm="syz.9.6187" name="/" dev="configfs" ino=1099 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 529.060981][ T5746] Bluetooth: hci0: unexpected event for opcode 0x202d [ 529.063941][T23424] overlayfs: failed to resolve './work': -2 [ 529.123270][T23399] virtio-pci 0000:00:03.0: PCI INT A: failed to register GSI [ 529.123307][T23399] virtio-pci 0000:00:03.0: probe with driver virtio-pci failed with error -16 [ 529.145170][T23424] netlink: 36 bytes leftover after parsing attributes in process `syz.9.6187'. [ 529.154632][T23399] lpc_ich 0000:00:1f.0: I/O space for GPIO uninitialized [ 529.247887][ T43] audit: type=1400 audit(1789038915.797:1496): avc: denied { unmount } for pid=18433 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 529.307819][ T43] audit: type=1400 audit(1789038915.857:1497): avc: denied { read } for pid=23427 comm="syz.9.6189" path="socket:[122035]" dev="sockfs" ino=122035 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 529.667961][T16130] usb 13-1: new high-speed USB device number 40 using dummy_hcd [ 529.808380][T16130] usb 13-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 529.809715][T16130] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 529.809729][T16130] usb 13-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 529.809747][T16130] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.831773][T16130] idmouse 13-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 530.777973][ T850] usb 14-1: new high-speed USB device number 43 using dummy_hcd [ 531.213594][ T850] usb 14-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 531.222197][ T850] usb 14-1: config 0 has an invalid interface number: 50 but max is 0 [ 531.222213][ T850] usb 14-1: config 0 has no interface number 0 [ 531.222232][ T850] usb 14-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 531.231644][ T850] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.231657][ T850] usb 14-1: Product: syz [ 531.231664][ T850] usb 14-1: Manufacturer: syz [ 531.231672][ T850] usb 14-1: SerialNumber: syz [ 531.236173][ T850] usb 14-1: config 0 descriptor?? [ 531.421610][ T850] yurex 14-1:0.50: USB YUREX device now attached to Yurex #1 [ 531.496313][ T850] usb 14-1: USB disconnect, device number 43 [ 531.667639][T23432] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 531.674261][T16346] usb 13-1: USB disconnect, device number 40 [ 531.725062][ T850] yurex 14-1:0.50: USB YUREX #1 now disconnected [ 531.736388][T16346] idmouse 13-1:1.0: disconnected [ 531.789105][ T5746] Bluetooth: hci0: Ignoring connect complete event for invalid link type [ 532.596828][T23445] syzkaller0: entered promiscuous mode [ 532.596843][T23445] syzkaller0: entered allmulticast mode [ 532.855484][T23472] openvswitch: netlink: ERSPAN option length err (len 5413, max 255). [ 532.864930][T23472] fuse: fd is not a fuse device [ 532.865956][T23472] fuse: fd is not a fuse device [ 533.318037][ T9] usb 13-1: new high-speed USB device number 41 using dummy_hcd [ 533.461960][T23492] netlink: 'syz.9.6205': attribute type 1 has an invalid length. [ 533.466135][ T43] audit: type=1400 audit(1789038920.017:1498): avc: denied { shutdown } for pid=23497 comm="syz.1.6208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 533.531188][ T9] usb 13-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 533.532053][ T9] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 533.532067][ T9] usb 13-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 533.532085][ T9] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.543761][ T9] idmouse 13-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 533.620533][T23492] 8021q: adding VLAN 0 to HW filter on device bond6 [ 533.632614][T23492] bond5: (slave bond6): making interface the new active one [ 533.632934][T23492] bond5: (slave bond6): Enslaving as an active interface with an up link [ 533.799441][T23508] netlink: 260 bytes leftover after parsing attributes in process `syz.9.6211'. [ 533.912108][T23514] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=260 sclass=netlink_tcpdiag_socket pid=23514 comm=syz.9.6213 [ 534.093965][ T43] audit: type=1800 audit(1789038920.647:1499): pid=23521 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.6217" name="nullb0" dev="tmpfs" ino=236 res=0 errno=0 [ 534.099133][ T5739] Bluetooth: hci0: unexpected event for opcode 0x202d [ 534.100685][T23524] overlayfs: failed to resolve './work': -2 [ 534.690665][ T5746] Bluetooth: hci3: unexpected event for opcode 0x202d [ 534.694846][T23547] FAULT_INJECTION: forcing a failure. [ 534.694846][T23547] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 534.694867][T23547] CPU: 2 UID: 0 PID: 23547 Comm: syz.9.6227 Tainted: G L syzkaller #0 PREEMPT(full) [ 534.694883][T23547] Tainted: [L]=SOFTLOCKUP [ 534.694887][T23547] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 534.694894][T23547] Call Trace: [ 534.694898][T23547] [ 534.694903][T23547] dump_stack_lvl+0x100/0x190 [ 534.694945][T23547] should_fail_ex.cold+0x5/0xa [ 534.694962][T23547] _copy_to_iter+0x5a4/0x1720 [ 534.694980][T23547] ? __pfx__copy_to_iter+0x10/0x10 [ 534.694990][T23547] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 534.695016][T23547] seq_read_iter+0xdab/0x1270 [ 534.695035][T23547] seq_read+0x344/0x4d0 [ 534.695048][T23547] ? __pfx_seq_read+0x10/0x10 [ 534.695059][T23547] ? get_pid_task+0x2a/0x250 [ 534.695077][T23547] ? lock_acquire+0x1d1/0x380 [ 534.695096][T23547] full_proxy_read+0x135/0x1a0 [ 534.695109][T23547] ? __pfx_full_proxy_read+0x10/0x10 [ 534.695123][T23547] vfs_read+0x1e4/0xb40 [ 534.695135][T23547] ? lock_acquire+0x1d1/0x380 [ 534.695145][T23547] ? __fget_files+0x34/0x3d0 [ 534.695159][T23547] ? __pfx_vfs_read+0x10/0x10 [ 534.695169][T23547] ? find_held_lock+0x2b/0x80 [ 534.695184][T23547] ? __fget_files+0x215/0x3d0 [ 534.695200][T23547] ? __fget_files+0x21f/0x3d0 [ 534.695218][T23547] ksys_read+0x12a/0x250 [ 534.695229][T23547] ? __pfx_ksys_read+0x10/0x10 [ 534.695244][T23547] do_syscall_64+0x123/0x790 [ 534.695260][T23547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.695272][T23547] RIP: 0033:0x7f2e3439e159 [ 534.695282][T23547] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 534.695293][T23547] RSP: 002b:00007f2e35273028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 534.695304][T23547] RAX: ffffffffffffffda RBX: 00007f2e34625fa0 RCX: 00007f2e3439e159 [ 534.695312][T23547] RDX: 0000000000002020 RSI: 0000200000000480 RDI: 0000000000000004 [ 534.695319][T23547] RBP: 00007f2e35273090 R08: 0000000000000000 R09: 0000000000000000 [ 534.695326][T23547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 534.695332][T23547] R13: 00007f2e34626038 R14: 00007f2e34625fa0 R15: 00007ffe1afbbac8 [ 534.695347][T23547] [ 534.765634][T23549] overlayfs: failed to resolve './work': -2 [ 535.425334][T23479] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 535.438209][T16346] usb 13-1: USB disconnect, device number 41 [ 535.444976][T16346] idmouse 13-1:1.0: disconnected [ 535.628672][T23570] netlink: 'syz.1.6236': attribute type 39 has an invalid length. [ 535.643342][T23570] hsr_slave_0 (unregistering): left promiscuous mode [ 535.658633][T23572] FAULT_INJECTION: forcing a failure. [ 535.658633][T23572] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 535.658655][T23572] CPU: 2 UID: 0 PID: 23572 Comm: syz.7.6237 Tainted: G L syzkaller #0 PREEMPT(full) [ 535.658670][T23572] Tainted: [L]=SOFTLOCKUP [ 535.658682][T23572] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 535.658688][T23572] Call Trace: [ 535.658693][T23572] [ 535.658697][T23572] dump_stack_lvl+0x100/0x190 [ 535.658724][T23572] should_fail_ex.cold+0x5/0xa [ 535.658740][T23572] strncpy_from_user+0x3b/0x2d0 [ 535.658758][T23572] do_getname+0x271/0x390 [ 535.658776][T23572] do_sys_openat2+0xc7/0x1e0 [ 535.658791][T23572] ? __pfx_do_sys_openat2+0x10/0x10 [ 535.658806][T23572] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 535.658826][T23572] ? __fget_files+0x21f/0x3d0 [ 535.658843][T23572] __x64_sys_creat+0xcc/0x120 [ 535.658859][T23572] ? __pfx___x64_sys_creat+0x10/0x10 [ 535.658874][T23572] ? __pfx_ksys_write+0x10/0x10 [ 535.658888][T23572] ? do_syscall_64+0xae/0x790 [ 535.658904][T23572] do_syscall_64+0x123/0x790 [ 535.658920][T23572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.658932][T23572] RIP: 0033:0x7fe9d319e159 [ 535.658942][T23572] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 535.658953][T23572] RSP: 002b:00007fe9d3fd1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 535.658964][T23572] RAX: ffffffffffffffda RBX: 00007fe9d3425fa0 RCX: 00007fe9d319e159 [ 535.658972][T23572] RDX: 0000000000000000 RSI: 00000000000001f1 RDI: 00002000000000c0 [ 535.658979][T23572] RBP: 00007fe9d3fd1090 R08: 0000000000000000 R09: 0000000000000000 [ 535.658985][T23572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 535.658992][T23572] R13: 00007fe9d3426038 R14: 00007fe9d3425fa0 R15: 00007ffe085eb048 [ 535.659006][T23572] [ 535.683146][T23573] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6236'. [ 535.683163][T23573] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6236'. [ 535.787137][T23575] netlink: 6060 bytes leftover after parsing attributes in process `syz.7.6239'. [ 536.294631][T23592] fuse: fd is not a fuse device [ 536.382501][T23594] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 536.672020][T23604] netlink: 'syz.8.6252': attribute type 1 has an invalid length. [ 536.820714][T23604] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 536.827168][T23604] bond4 (unregistering): Released all slaves [ 536.989052][T23607] tipc: Resetting bearer [ 537.057173][T23607] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 537.057683][T23614] vlan0: entered promiscuous mode [ 537.057922][ T25] usb 14-1: new high-speed USB device number 44 using dummy_hcd [ 537.107152][T23616] tipc: Enabling of bearer rejected, already enabled [ 537.210978][ T25] usb 14-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 537.213513][ T25] usb 14-1: config 0 has an invalid interface number: 50 but max is 0 [ 537.213533][ T25] usb 14-1: config 0 has no interface number 0 [ 537.213551][ T25] usb 14-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 537.215359][ T25] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.215373][ T25] usb 14-1: Product: syz [ 537.215381][ T25] usb 14-1: Manufacturer: syz [ 537.215389][ T25] usb 14-1: SerialNumber: syz [ 537.252004][ T25] usb 14-1: config 0 descriptor?? [ 537.265199][ T25] yurex 14-1:0.50: USB YUREX device now attached to Yurex #0 [ 537.499865][ T850] usb 14-1: USB disconnect, device number 44 [ 537.508517][ T850] yurex 14-1:0.50: USB YUREX #0 now disconnected [ 537.602072][T23612] tipc: Resetting bearer [ 537.613298][T23612] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 537.629967][ T25] syz_tun: tun_net_xmit 110 [ 537.650852][T23632] Cannot find set identified by id 0 to match [ 537.682084][T23612] tipc: Enabling of bearer rejected, already enabled [ 537.744500][T23637] FAULT_INJECTION: forcing a failure. [ 537.744500][T23637] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 537.744528][T23637] CPU: 2 UID: 0 PID: 23637 Comm: syz.8.6262 Tainted: G L syzkaller #0 PREEMPT(full) [ 537.744544][T23637] Tainted: [L]=SOFTLOCKUP [ 537.744549][T23637] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 537.744556][T23637] Call Trace: [ 537.744560][T23637] [ 537.744565][T23637] dump_stack_lvl+0x100/0x190 [ 537.744585][T23637] should_fail_ex.cold+0x5/0xa [ 537.744602][T23637] _copy_from_user+0x2e/0xd0 [ 537.744614][T23637] do_ipt_set_ctl+0x9ac/0xcf0 [ 537.744638][T23637] ? nf_sockopt_find.isra.0+0x222/0x290 [ 537.744652][T23637] ? nf_sockopt_find.isra.0+0x222/0x290 [ 537.744666][T23637] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 537.744682][T23637] ? __mutex_unlock_slowpath+0x35d/0x930 [ 537.744699][T23637] ? sockopt_release_sock+0x5c/0x70 [ 537.744713][T23637] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 537.744734][T23637] ? nf_sockopt_find.isra.0+0x222/0x290 [ 537.744749][T23637] nf_setsockopt+0x8d/0xf0 [ 537.744764][T23637] ip_setsockopt+0xcb/0xf0 [ 537.744783][T23637] tcp_setsockopt+0xa7/0x100 [ 537.744794][T23637] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 537.744810][T23637] do_sock_setsockopt+0xf3/0x1d0 [ 537.744827][T23637] __sys_setsockopt+0x195/0x220 [ 537.744842][T23637] __x64_sys_setsockopt+0xbd/0x160 [ 537.744854][T23637] ? do_syscall_64+0xae/0x790 [ 537.744868][T23637] ? lockdep_hardirqs_on+0x7d/0x110 [ 537.744883][T23637] do_syscall_64+0x123/0x790 [ 537.744898][T23637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.744911][T23637] RIP: 0033:0x7f5c4959e159 [ 537.744920][T23637] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 537.744931][T23637] RSP: 002b:00007f5c4a4e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 537.744943][T23637] RAX: ffffffffffffffda RBX: 00007f5c49825fa0 RCX: 00007f5c4959e159 [ 537.744950][T23637] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 537.744957][T23637] RBP: 00007f5c4a4e4090 R08: 0000000000000468 R09: 0000000000000000 [ 537.744964][T23637] R10: 0000200000000480 R11: 0000000000000246 R12: 0000000000000001 [ 537.744970][T23637] R13: 00007f5c49826038 R14: 00007f5c49825fa0 R15: 00007fff58e341a8 [ 537.744984][T23637] [ 537.906184][T23643] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6265'. [ 537.989881][T23647] FAULT_INJECTION: forcing a failure. [ 537.989881][T23647] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 537.989903][T23647] CPU: 2 UID: 0 PID: 23647 Comm: syz.8.6266 Tainted: G L syzkaller #0 PREEMPT(full) [ 537.989919][T23647] Tainted: [L]=SOFTLOCKUP [ 537.989923][T23647] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 537.989930][T23647] Call Trace: [ 537.989934][T23647] [ 537.989939][T23647] dump_stack_lvl+0x100/0x190 [ 537.989959][T23647] should_fail_ex.cold+0x5/0xa [ 537.989975][T23647] _copy_from_user+0x2e/0xd0 [ 537.989987][T23647] copy_msghdr_from_user+0x9f/0x4c0 [ 537.990005][T23647] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 537.990028][T23647] ? lock_acquire+0x1d1/0x380 [ 537.990041][T23647] ? get_pid_task+0x2a/0x250 [ 537.990058][T23647] ___sys_sendmsg+0x106/0x1e0 [ 537.990075][T23647] ? __pfx____sys_sendmsg+0x10/0x10 [ 537.990091][T23647] ? get_pid_task+0x106/0x250 [ 537.990111][T23647] ? find_held_lock+0x2b/0x80 [ 537.990134][T23647] __sys_sendmsg+0x160/0x210 [ 537.990148][T23647] ? __pfx___sys_sendmsg+0x10/0x10 [ 537.990167][T23647] do_syscall_64+0x123/0x790 [ 537.990184][T23647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.990196][T23647] RIP: 0033:0x7f5c4959e159 [ 537.990206][T23647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 537.990217][T23647] RSP: 002b:00007f5c4a4e4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 537.990241][T23647] RAX: ffffffffffffffda RBX: 00007f5c49825fa0 RCX: 00007f5c4959e159 [ 537.990249][T23647] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 537.990256][T23647] RBP: 00007f5c4a4e4090 R08: 0000000000000000 R09: 0000000000000000 [ 537.990263][T23647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 537.990270][T23647] R13: 00007f5c49826038 R14: 00007f5c49825fa0 R15: 00007fff58e341a8 [ 537.990284][T23647] [ 538.459700][ T25] syz_tun: tun_net_xmit 110 [ 538.482875][ T43] audit: type=1400 audit(1789038925.037:1500): avc: denied { ioctl } for pid=23656 comm="syz.9.6270" path="socket:[121281]" dev="sockfs" ino=121281 ioctlcmd=0x61f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 538.485246][T23659] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.9.6270:23659 [ 538.587848][ T43] audit: type=1400 audit(1789038925.127:1501): avc: denied { connect } for pid=23657 comm="syz.8.6271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 538.902489][ T43] audit: type=1400 audit(1789038925.457:1502): avc: denied { write } for pid=23661 comm="syz.7.6273" name="/" dev="9p" ino=76043921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 538.902523][ T43] audit: type=1400 audit(1789038925.457:1503): avc: denied { unlink } for pid=23661 comm="syz.7.6273" name="file0" dev="9p" ino=76043923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 538.969299][ T43] audit: type=1400 audit(1789038925.527:1504): avc: denied { write } for pid=23661 comm="syz.7.6273" name="/" dev="9p" ino=76043921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 538.969343][ T43] audit: type=1400 audit(1789038925.527:1505): avc: denied { create } for pid=23661 comm="syz.7.6273" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1 [ 539.566085][ T43] audit: type=1400 audit(1789038926.117:1506): avc: denied { getopt } for pid=23697 comm="syz.1.6288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 539.586781][ T43] audit: type=1400 audit(1789038926.137:1507): avc: denied { mounton } for pid=23697 comm="syz.1.6288" path="/394/file0" dev="tmpfs" ino=2220 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 539.587698][T23698] bpf: Bad value for 'gid' [ 539.831200][ T43] audit: type=1804 audit(1789038926.377:1508): pid=23700 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.9.6289" name="/newroot/392/file0" dev="tmpfs" ino=2183 res=1 errno=0 [ 540.245817][T23715] netlink: 'syz.1.6296': attribute type 39 has an invalid length. [ 540.248215][ T25] usb 12-1: new high-speed USB device number 46 using dummy_hcd [ 540.377794][T23719] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6295'. [ 540.400369][ T25] usb 12-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 540.401196][ T25] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 540.401211][ T25] usb 12-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 540.401267][ T25] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.405681][ T25] idmouse 12-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 541.008850][T23735] netlink: 416 bytes leftover after parsing attributes in process `syz.1.6303'. [ 541.025176][ T43] audit: type=1400 audit(1789038927.577:1509): avc: denied { read } for pid=23734 comm="syz.1.6303" laddr=fe80::1c33:e1ff:fe1a:de55 lport=7989 faddr=ff02::1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 541.345539][T23744] netlink: 'syz.1.6306': attribute type 39 has an invalid length. [ 541.393080][T23747] FAULT_INJECTION: forcing a failure. [ 541.393080][T23747] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 541.393103][T23747] CPU: 2 UID: 0 PID: 23747 Comm: syz.9.6307 Tainted: G L syzkaller #0 PREEMPT(full) [ 541.393119][T23747] Tainted: [L]=SOFTLOCKUP [ 541.393123][T23747] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 541.393130][T23747] Call Trace: [ 541.393135][T23747] [ 541.393139][T23747] dump_stack_lvl+0x100/0x190 [ 541.393173][T23747] should_fail_ex.cold+0x5/0xa [ 541.393189][T23747] _copy_from_user+0x2e/0xd0 [ 541.393203][T23747] kstrtouint_from_user+0xd6/0x1d0 [ 541.393217][T23747] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 541.393235][T23747] ? lock_acquire+0x1d1/0x380 [ 541.393250][T23747] proc_fail_nth_write+0x83/0x220 [ 541.393265][T23747] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 541.393282][T23747] vfs_write+0x2aa/0x1050 [ 541.393295][T23747] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 541.393308][T23747] ? lock_acquire+0x1d1/0x380 [ 541.393319][T23747] ? __fget_files+0x34/0x3d0 [ 541.393332][T23747] ? __pfx_vfs_write+0x10/0x10 [ 541.393343][T23747] ? find_held_lock+0x2b/0x80 [ 541.393359][T23747] ? __fget_files+0x215/0x3d0 [ 541.393375][T23747] ? __fget_files+0x21f/0x3d0 [ 541.393392][T23747] ksys_write+0x12a/0x250 [ 541.393403][T23747] ? __pfx_ksys_write+0x10/0x10 [ 541.393418][T23747] do_syscall_64+0x123/0x790 [ 541.393436][T23747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.393448][T23747] RIP: 0033:0x7f2e3435e98e [ 541.393458][T23747] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 541.393468][T23747] RSP: 002b:00007f2e35272fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 541.393479][T23747] RAX: ffffffffffffffda RBX: 00007f2e352736c0 RCX: 00007f2e3435e98e [ 541.393487][T23747] RDX: 0000000000000001 RSI: 00007f2e352730a0 RDI: 0000000000000012 [ 541.393493][T23747] RBP: 00007f2e35273090 R08: 0000000000000000 R09: 0000000000000000 [ 541.393500][T23747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 541.393507][T23747] R13: 00007f2e34626038 R14: 00007f2e34625fa0 R15: 00007ffe1afbbac8 [ 541.393522][T23747] [ 541.767868][ T5821] usb 14-1: new high-speed USB device number 45 using dummy_hcd [ 541.920179][ T5821] usb 14-1: Using ep0 maxpacket: 8 [ 541.921377][ T5821] usb 14-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 541.922481][ T5821] usb 14-1: config 168 descriptor has 1 excess byte, ignoring [ 541.922499][ T5821] usb 14-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 541.922518][ T5821] usb 14-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 541.922533][ T5821] usb 14-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 541.922546][ T5821] usb 14-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 541.922560][ T5821] usb 14-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 541.922574][ T5821] usb 14-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 541.922638][ T5821] usb 14-1: config 168 interface 0 has no altsetting 0 [ 541.923633][ T5821] usb 14-1: config 168 descriptor has 1 excess byte, ignoring [ 541.923649][ T5821] usb 14-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 541.923668][ T5821] usb 14-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 541.923681][ T5821] usb 14-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 541.923693][ T5821] usb 14-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 541.923706][ T5821] usb 14-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 541.923719][ T5821] usb 14-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 541.923778][ T5821] usb 14-1: config 168 interface 0 has no altsetting 0 [ 541.924672][ T5821] usb 14-1: config 168 descriptor has 1 excess byte, ignoring [ 541.924696][ T5821] usb 14-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 541.924771][ T5821] usb 14-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 541.924793][ T5821] usb 14-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 541.924812][ T5821] usb 14-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 541.924828][ T5821] usb 14-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 541.924841][ T5821] usb 14-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 541.924854][ T5821] usb 14-1: config 168 interface 0 has no altsetting 0 [ 541.944917][ T5821] usb 14-1: string descriptor 0 read error: -22 [ 541.945072][ T5821] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.004779][ T5821] adutux 14-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 542.063874][T23772] fuse: Bad value for 'fd' [ 542.070484][T23766] bridge0: port 1(ipvlan2) entered blocking state [ 542.072914][T23766] bridge0: port 1(ipvlan2) entered disabled state [ 542.073000][T23766] ipvlan2: entered allmulticast mode [ 542.073011][T23766] bridge0: entered allmulticast mode [ 542.084918][T23770] overlayfs: failed to resolve './file1': -2 [ 542.093282][T23766] ipvlan2: left allmulticast mode [ 542.093295][T23766] bridge0: left allmulticast mode [ 542.197501][ T43] audit: type=1400 audit(1789038928.747:1510): avc: denied { read } for pid=23769 comm="syz.8.6313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 542.253657][T14482] usb 14-1: USB disconnect, device number 45 [ 542.303990][ T5821] usb 12-1: USB disconnect, device number 46 [ 542.313698][ T5821] idmouse 12-1:1.0: disconnected [ 542.767254][T23786] fuse: fd is not a fuse device [ 542.793583][T23788] netlink: 'syz.1.6316': attribute type 1 has an invalid length. [ 542.823942][T23788] bond9 (unregistering): Released all slaves [ 542.864190][T23790] bond9: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 542.865027][T23790] bond9 (unregistering): Released all slaves [ 543.000846][ T5746] Bluetooth: hci1: unexpected event for opcode 0x202d [ 543.152553][T23801] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6320'. [ 543.152575][T23801] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6320'. [ 543.269629][T14482] syz_tun: tun_net_xmit 110 [ 543.980994][T14482] syz_tun: tun_net_xmit 110 [ 544.287926][T14482] usb 12-1: new high-speed USB device number 47 using dummy_hcd [ 544.375452][T23828] netlink: 'syz.1.6328': attribute type 1 has an invalid length. [ 544.389601][T23828] bond9 (unregistering): Released all slaves [ 544.397128][T23834] FAULT_INJECTION: forcing a failure. [ 544.397128][T23834] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 544.397148][T23834] CPU: 2 UID: 0 PID: 23834 Comm: syz.9.6327 Tainted: G L syzkaller #0 PREEMPT(full) [ 544.397164][T23834] Tainted: [L]=SOFTLOCKUP [ 544.397168][T23834] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 544.397175][T23834] Call Trace: [ 544.397179][T23834] [ 544.397184][T23834] dump_stack_lvl+0x100/0x190 [ 544.397204][T23834] should_fail_ex.cold+0x5/0xa [ 544.397233][T23834] _copy_from_user+0x2e/0xd0 [ 544.397248][T23834] copy_from_sockptr_offset.constprop.0+0x12c/0x150 [ 544.397266][T23834] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 544.397285][T23834] ? __local_bh_enable_ip+0xa5/0x120 [ 544.397300][T23834] nfc_llcp_setsockopt+0x265/0x550 [ 544.397318][T23834] ? __pfx_nfc_llcp_setsockopt+0x10/0x10 [ 544.397335][T23834] ? selinux_socket_setsockopt+0x6a/0x80 [ 544.397354][T23834] ? __pfx_nfc_llcp_setsockopt+0x10/0x10 [ 544.397371][T23834] do_sock_setsockopt+0xf3/0x1d0 [ 544.397392][T23834] __sys_setsockopt+0x195/0x220 [ 544.397408][T23834] __x64_sys_setsockopt+0xbd/0x160 [ 544.397420][T23834] ? do_syscall_64+0xae/0x790 [ 544.397434][T23834] ? lockdep_hardirqs_on+0x7d/0x110 [ 544.397449][T23834] do_syscall_64+0x123/0x790 [ 544.397464][T23834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.397476][T23834] RIP: 0033:0x7f2e3439e159 [ 544.397487][T23834] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 544.397498][T23834] RSP: 002b:00007f2e35273028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 544.397510][T23834] RAX: ffffffffffffffda RBX: 00007f2e34625fa0 RCX: 00007f2e3439e159 [ 544.397517][T23834] RDX: 0000000000000001 RSI: 0000000000000118 RDI: 0000000000000004 [ 544.397524][T23834] RBP: 00007f2e35273090 R08: 0000000000000004 R09: 0000000000000000 [ 544.397531][T23834] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 544.397537][T23834] R13: 00007f2e34626038 R14: 00007f2e34625fa0 R15: 00007ffe1afbbac8 [ 544.397552][T23834] [ 544.442175][T14482] usb 12-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 544.450843][T23840] bond9: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 544.453332][T23840] bond9 (unregistering): Released all slaves [ 544.454326][T14482] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 544.454341][T14482] usb 12-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 544.454359][T14482] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.463756][T14482] idmouse 12-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 544.652889][ T43] audit: type=1400 audit(1789038931.207:1511): avc: denied { bind } for pid=23846 comm="syz.1.6332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 544.867826][T14482] usb 13-1: new high-speed USB device number 42 using dummy_hcd [ 544.998533][T14482] usb 13-1: device descriptor read/64, error -71 [ 545.156478][T23875] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6342'. [ 545.156494][T23875] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6342'. [ 545.156595][T23875] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6342'. [ 545.156604][T23875] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6342'. [ 545.238355][T14482] usb 13-1: new high-speed USB device number 43 using dummy_hcd [ 545.320992][T23880] xt_hashlimit: size too large, truncated to 1048576 [ 545.367934][T14482] usb 13-1: device descriptor read/64, error -71 [ 545.481782][T14482] usb usb13-port1: attempt power cycle [ 545.818647][T14482] usb 13-1: new high-speed USB device number 44 using dummy_hcd [ 545.840469][T14482] usb 13-1: device descriptor read/8, error -71 [ 546.078584][T14482] usb 13-1: new high-speed USB device number 45 using dummy_hcd [ 546.107133][T14482] usb 13-1: device descriptor read/8, error -71 [ 546.213377][T14482] usb usb13-port1: unable to enumerate USB device [ 546.311198][ T25] usb 12-1: USB disconnect, device number 47 [ 546.312528][ T25] idmouse 12-1:1.0: disconnected [ 547.057511][T23899] netlink: 'syz.7.6349': attribute type 21 has an invalid length. [ 547.057534][T23899] netlink: 128 bytes leftover after parsing attributes in process `syz.7.6349'. [ 547.115429][T23900] netlink: 224 bytes leftover after parsing attributes in process `syz.7.6349'. [ 547.974422][ T25] usb 13-1: new high-speed USB device number 46 using dummy_hcd [ 548.121802][ T25] usb 13-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 548.132448][ T25] usb 13-1: config 0 has an invalid interface number: 50 but max is 0 [ 548.132468][ T25] usb 13-1: config 0 has no interface number 0 [ 548.132488][ T25] usb 13-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 548.161667][ T25] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.161684][ T25] usb 13-1: Product: syz [ 548.161692][ T25] usb 13-1: Manufacturer: syz [ 548.161699][ T25] usb 13-1: SerialNumber: syz [ 548.163444][ T25] usb 13-1: config 0 descriptor?? [ 548.183508][ T25] yurex 13-1:0.50: USB YUREX device now attached to Yurex #0 [ 548.212476][T23899] netlink: 'syz.7.6349': attribute type 4 has an invalid length. [ 548.212490][T23899] netlink: 'syz.7.6349': attribute type 5 has an invalid length. [ 548.212498][T23899] netlink: 3 bytes leftover after parsing attributes in process `syz.7.6349'. [ 548.360270][T23910] fuse: fd is not a fuse device [ 548.393486][T16346] usb 13-1: USB disconnect, device number 46 [ 548.394704][T16346] yurex 13-1:0.50: USB YUREX #0 now disconnected [ 548.433743][T23906] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 548.444389][T23906] vlan0: entered promiscuous mode [ 548.447650][T23906] team0: Port device vlan0 added [ 548.456560][T23906] tipc: Started in network mode [ 548.456576][T23906] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 548.456666][T23906] tipc: Enabled bearer , priority 0 [ 548.503254][T23919] netlink: 'syz.1.6355': attribute type 1 has an invalid length. [ 548.519737][T23919] bond9 (unregistering): Released all slaves [ 548.589567][T23925] bond9: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 548.590579][T23925] bond9 (unregistering): Released all slaves [ 549.007923][T16346] usb 14-1: new high-speed USB device number 46 using dummy_hcd [ 549.158543][T16346] usb 14-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 549.159454][T16346] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 549.159469][T16346] usb 14-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 549.159487][T16346] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.184783][T16346] idmouse 14-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 550.065593][T23952] fuse: fd is not a fuse device [ 550.094194][ T43] audit: type=1400 audit(1789038936.647:1512): avc: denied { mount } for pid=23951 comm="syz.1.6364" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 551.055294][T14482] usb 14-1: USB disconnect, device number 46 [ 551.057511][T14482] idmouse 14-1:1.0: disconnected [ 552.345105][T16346] tipc: Node number set to 11578026 [ 552.513558][T23978] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 552.599658][T23970] vlan2: entered allmulticast mode [ 552.599682][T23970] bridge_slave_0: entered allmulticast mode [ 552.605913][T23973] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 552.618201][T23974] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 552.761044][T23984] zram: Can't change algorithm for initialized device [ 553.229592][T24003] netlink: 'syz.8.6381': attribute type 5 has an invalid length. [ 553.297918][ T10] usb 14-1: new high-speed USB device number 47 using dummy_hcd [ 553.301876][T24010] bond5 (unregistering): Released all slaves [ 553.350806][T24014] netlink: 116 bytes leftover after parsing attributes in process `syz.8.6385'. [ 553.510302][ T10] usb 14-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 553.511144][ T10] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 553.511158][ T10] usb 14-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 553.511176][ T10] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.619138][T24012] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 554.005198][T24012] bond5 (unregistering): Released all slaves [ 554.010239][ T10] idmouse 14-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 554.424834][T24033] FAULT_INJECTION: forcing a failure. [ 554.424834][T24033] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 554.424855][T24033] CPU: 0 UID: 0 PID: 24033 Comm: syz.7.6392 Tainted: G L syzkaller #0 PREEMPT(full) [ 554.424871][T24033] Tainted: [L]=SOFTLOCKUP [ 554.424875][T24033] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 554.424882][T24033] Call Trace: [ 554.424887][T24033] [ 554.424892][T24033] dump_stack_lvl+0x100/0x190 [ 554.424912][T24033] should_fail_ex.cold+0x5/0xa [ 554.424929][T24033] _copy_from_user+0x2e/0xd0 [ 554.424941][T24033] copy_msghdr_from_user+0x9f/0x4c0 [ 554.424959][T24033] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 554.424979][T24033] ? lock_acquire+0x1d1/0x380 [ 554.424991][T24033] ? get_pid_task+0x2a/0x250 [ 554.425013][T24033] ___sys_sendmsg+0x106/0x1e0 [ 554.425030][T24033] ? __pfx____sys_sendmsg+0x10/0x10 [ 554.425047][T24033] ? get_pid_task+0x106/0x250 [ 554.425066][T24033] ? find_held_lock+0x2b/0x80 [ 554.425091][T24033] __sys_sendmsg+0x160/0x210 [ 554.425107][T24033] ? __pfx___sys_sendmsg+0x10/0x10 [ 554.425127][T24033] do_syscall_64+0x123/0x790 [ 554.425144][T24033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.425156][T24033] RIP: 0033:0x7fe9d319e159 [ 554.425166][T24033] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 554.425178][T24033] RSP: 002b:00007fe9d3fd1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 554.425190][T24033] RAX: ffffffffffffffda RBX: 00007fe9d3425fa0 RCX: 00007fe9d319e159 [ 554.425197][T24033] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000003 [ 554.425204][T24033] RBP: 00007fe9d3fd1090 R08: 0000000000000000 R09: 0000000000000000 [ 554.425211][T24033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 554.425218][T24033] R13: 00007fe9d3426038 R14: 00007fe9d3425fa0 R15: 00007ffe085eb048 [ 554.425232][T24033] [ 554.602575][T24038] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6393'. [ 554.774514][T24046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6397'. [ 554.911486][T24049] bond5 (unregistering): Released all slaves [ 555.121994][T24051] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 555.123759][T24051] bond5 (unregistering): Released all slaves [ 555.461400][ T5821] usb 14-1: USB disconnect, device number 47 [ 555.462695][ T5821] idmouse 14-1:1.0: disconnected [ 555.563203][T24055] netlink: 'syz.8.6399': attribute type 39 has an invalid length. [ 555.596437][T24061] xt_l2tp: missing protocol rule (udp|l2tpip) [ 556.063377][T24082] bond7 (unregistering): Released all slaves [ 556.108495][T24086] bond7: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 556.109460][T24086] bond7 (unregistering): Released all slaves [ 557.919618][T24158] bond9 (unregistering): Released all slaves [ 558.008529][ T5821] usb 13-1: new high-speed USB device number 47 using dummy_hcd [ 558.019985][T24163] bond9: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 558.027552][T24163] bond9 (unregistering): Released all slaves [ 558.159052][ T5821] usb 13-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 558.160327][ T5821] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 558.160351][ T5821] usb 13-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 558.160380][ T5821] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.193552][ T5821] idmouse 13-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 558.602654][ C2] vcan0: j1939_tp_rxtimer: 0xffff88804c384000: rx timeout, send abort [ 558.637960][ T43] audit: type=1400 audit(1789038945.167:1513): avc: denied { read } for pid=5127 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 558.637993][ T43] audit: type=1400 audit(1789038945.167:1514): avc: denied { search } for pid=5127 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 558.638015][ T43] audit: type=1400 audit(1789038945.167:1515): avc: denied { write search } for pid=5127 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 558.638035][ T43] audit: type=1400 audit(1789038945.167:1516): avc: denied { add_name } for pid=5127 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 558.638058][ T43] audit: type=1400 audit(1789038945.167:1517): avc: denied { create } for pid=5127 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 558.638077][ T43] audit: type=1400 audit(1789038945.167:1518): avc: denied { append open } for pid=5127 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 558.638098][ T43] audit: type=1400 audit(1789038945.167:1519): avc: denied { getattr } for pid=5127 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 559.102984][ C2] vcan0: j1939_tp_rxtimer: 0xffff88804c387400: rx timeout, send abort [ 559.104730][ C2] vcan0: j1939_tp_rxtimer: 0xffff88804c384000: abort rx timeout. Force session deactivation [ 559.162155][ C2] vcan0: j1939_simple_recv: Received already invalidated message [ 559.603056][ C2] vcan0: j1939_tp_rxtimer: 0xffff88804c387400: abort rx timeout. Force session deactivation [ 559.635702][T24197] bond9 (unregistering): Released all slaves [ 559.727086][T24200] bond9: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 559.815917][T24200] bond9 (unregistering): Released all slaves [ 560.004708][ T5821] usb 13-1: USB disconnect, device number 47 [ 560.010821][ T5821] idmouse 13-1:1.0: disconnected [ 560.147990][ T25] usb 12-1: new high-speed USB device number 48 using dummy_hcd [ 560.241034][T24211] netlink: 156 bytes leftover after parsing attributes in process `syz.9.6444'. [ 560.301449][ T25] usb 12-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 560.302657][ T25] usb 12-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 560.302681][ T25] usb 12-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 560.302700][ T25] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 48, changing to 9 [ 560.302721][ T25] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 26217, setting to 1024 [ 560.302754][ T25] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.344666][T24205] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 560.344810][T24205] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 560.344964][T24205] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 560.347556][ T25] pl2303 12-1:1.0: pl2303 converter detected [ 560.376940][ T25] usb 12-1: pl2303 converter now attached to ttyUSB0 [ 560.415087][T24212] fuse: Unknown parameter 'Ÿ' [ 560.672302][T24205] pl2303 12-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 560.672555][T24205] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 560.673027][T24205] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 560.687150][T24205] pl2303 12-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 560.687479][T24205] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 560.721228][ T5746] Bluetooth: hci3: unexpected event for opcode 0x202d [ 560.948521][T24205] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 560.949205][T24205] pl2303 ttyUSB0: error sending break = -32 [ 560.950621][ T25] usb 12-1: USB disconnect, device number 48 [ 560.972321][ T25] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 560.972935][ T25] pl2303 12-1:1.0: device disconnected [ 561.081912][T24222] random: crng reseeded on system resumption [ 561.107957][ T43] audit: type=1400 audit(1789038947.627:1520): avc: denied { write } for pid=24221 comm="syz.8.6449" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 561.431733][ T5746] Bluetooth: hci3: unexpected event for opcode 0x202d [ 561.826559][T24260] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 561.826830][T24260] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 561.838863][T24261] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 561.838877][T24261] CIFS mount error: No usable UNC path provided in device string! [ 561.838877][T24261] [ 561.841360][T24261] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 561.844033][T24260] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6466'. [ 561.925294][ T5746] Bluetooth: hci2: unexpected event for opcode 0x202d [ 562.228853][ T43] audit: type=1400 audit(1789038948.787:1521): avc: denied { read } for pid=24284 comm="syz.1.6475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 562.699889][ T1444] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.699934][ T1444] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.826864][ T5746] Bluetooth: hci2: unexpected event for opcode 0x202d [ 563.248755][T24311] xt_l2tp: v2 tid > 0xffff: 4294967294 [ 563.265355][T24314] xt_l2tp: v2 tid > 0xffff: 4294967294 [ 563.298070][ T9] usb 12-1: new high-speed USB device number 49 using dummy_hcd [ 563.407027][ T5746] Bluetooth: hci0: unexpected event for opcode 0x202d [ 563.488509][ T9] usb 12-1: Using ep0 maxpacket: 8 [ 563.489000][ T9] usb 12-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 563.490272][ T9] usb 12-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 563.490296][ T9] usb 12-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 563.490322][ T9] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 563.490344][ T9] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 563.490375][ T9] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.544421][ T9] hub 12-1:1.0: bad descriptor, ignoring hub [ 563.544438][ T9] hub 12-1:1.0: probe with driver hub failed with error -5 [ 563.544665][ T9] cdc_wdm 12-1:1.0: skipping garbage [ 563.544672][ T9] cdc_wdm 12-1:1.0: skipping garbage [ 563.555937][ T9] cdc_wdm 12-1:1.0: cdc-wdm0: USB WDM device [ 563.555949][ T9] cdc_wdm 12-1:1.0: Unknown control protocol [ 563.749268][ T43] audit: type=1400 audit(1789038950.307:1522): avc: denied { read write } for pid=24297 comm="syz.7.6481" name="cdc-wdm0" dev="devtmpfs" ino=4659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 563.749552][ T43] audit: type=1400 audit(1789038950.307:1523): avc: denied { open } for pid=24297 comm="syz.7.6481" path="/dev/cdc-wdm0" dev="devtmpfs" ino=4659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 563.790607][ T43] audit: type=1400 audit(1789038950.347:1524): avc: denied { bind } for pid=24329 comm="syz.9.6489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 563.834580][ T43] audit: type=1400 audit(1789038950.387:1525): avc: denied { connect } for pid=24331 comm="syz.9.6491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 563.916417][ T43] audit: type=1400 audit(1789038950.467:1526): avc: denied { ioctl } for pid=24331 comm="syz.9.6491" path="socket:[128404]" dev="sockfs" ino=128404 ioctlcmd=0x586b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 564.323018][ T43] audit: type=1400 audit(1789038950.877:1527): avc: denied { setattr } for pid=24345 comm="syz.8.6496" name="renderD128" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 564.584677][ T5746] Bluetooth: hci3: Malformed HCI Event: 0x22 [ 564.596479][ T5746] Bluetooth: hci3: Malformed HCI Event: 0x22 [ 564.684212][ T43] audit: type=1800 audit(1789038951.237:1528): pid=24378 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.9.6504" name=0F01CB650F7410262E66F36D0F330F09660F3A0CB9 dev="sda1" ino=2042 res=0 errno=0 [ 564.792926][T24382] CIFS mount error: No usable UNC path provided in device string! [ 564.792926][T24382] [ 564.792939][T24382] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 564.807208][ T6863] ================================================================== [ 564.807228][ T6863] BUG: KASAN: slab-use-after-free in drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0 [ 564.807263][ T6863] Read of size 1 at addr ffff88804c386809 by task kworker/u33:26/6863 [ 564.807272][ T6863] [ 564.807280][ T6863] CPU: 2 UID: 0 PID: 6863 Comm: kworker/u33:26 Tainted: G L syzkaller #0 PREEMPT(full) [ 564.807297][ T6863] Tainted: [L]=SOFTLOCKUP [ 564.807301][ T6863] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 564.807309][ T6863] Workqueue: events_unbound commit_work [ 564.807324][ T6863] Call Trace: [ 564.807330][ T6863] [ 564.807336][ T6863] dump_stack_lvl+0x100/0x190 [ 564.807352][ T6863] print_report+0x13d/0x4b0 [ 564.807370][ T6863] ? __virt_addr_valid+0x239/0x430 [ 564.807382][ T6863] ? drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0 [ 564.807397][ T6863] kasan_report+0xdf/0x1c0 [ 564.807412][ T6863] ? drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0 [ 564.807428][ T6863] drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0 [ 564.807443][ T6863] ? preempt_schedule_common+0x3c/0xb0 [ 564.807461][ T6863] ? preempt_schedule_thunk+0x16/0x40 [ 564.807475][ T6863] ? __pfx_drm_atomic_helper_wait_for_vblanks.part.0+0x10/0x10 [ 564.807490][ T6863] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 564.807503][ T6863] ? drm_atomic_helper_commit_hw_done+0x36d/0x490 [ 564.807519][ T6863] drm_atomic_helper_commit_tail+0xff/0x130 [ 564.807534][ T6863] commit_tail+0x338/0x430 [ 564.807548][ T6863] process_one_work+0xac7/0x1b10 [ 564.807567][ T6863] ? __pfx_process_one_work+0x10/0x10 [ 564.807583][ T6863] ? lock_acquire+0x1d1/0x380 [ 564.807596][ T6863] ? __pfx_commit_work+0x10/0x10 [ 564.807610][ T6863] worker_thread+0x5ef/0xe50 [ 564.807628][ T6863] ? kthread+0x13a/0x450 [ 564.807643][ T6863] ? __pfx_worker_thread+0x10/0x10 [ 564.807659][ T6863] kthread+0x373/0x450 [ 564.807673][ T6863] ? __pfx_kthread+0x10/0x10 [ 564.807687][ T6863] ret_from_fork+0x730/0xd60 [ 564.807700][ T6863] ? __pfx_ret_from_fork+0x10/0x10 [ 564.807712][ T6863] ? __switch_to+0x800/0x10f0 [ 564.807726][ T6863] ? __pfx_kthread+0x10/0x10 [ 564.807741][ T6863] ret_from_fork_asm+0x1a/0x30 [ 564.807755][ T6863] [ 564.807760][ T6863] [ 564.807762][ T6863] Allocated by task 24382: [ 564.807768][ T6863] kasan_save_stack+0x30/0x50 [ 564.807779][ T6863] kasan_save_track+0x14/0x30 [ 564.807790][ T6863] __kasan_kmalloc+0xaa/0xb0 [ 564.807801][ T6863] __kmalloc_cache_noprof+0x2f8/0x6d0 [ 564.807816][ T6863] drm_atomic_helper_crtc_duplicate_state+0x72/0xd0 [ 564.807832][ T6863] drm_atomic_get_crtc_state+0x1de/0x690 [ 564.807843][ T6863] drm_atomic_set_property+0x165/0x3f90 [ 564.807856][ T6863] drm_mode_atomic_ioctl+0x6ed/0x27c0 [ 564.807869][ T6863] drm_ioctl_kernel+0x1f3/0x3e0 [ 564.807884][ T6863] drm_ioctl+0x5e6/0xc60 [ 564.807895][ T6863] __x64_sys_ioctl+0x18e/0x210 [ 564.807905][ T6863] do_syscall_64+0x123/0x790 [ 564.807918][ T6863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.807929][ T6863] [ 564.807931][ T6863] Freed by task 5821: [ 564.807936][ T6863] kasan_save_stack+0x30/0x50 [ 564.807947][ T6863] kasan_save_track+0x14/0x30 [ 564.807958][ T6863] kasan_save_free_info+0x3b/0x70 [ 564.807973][ T6863] __kasan_slab_free+0x5f/0x80 [ 564.807984][ T6863] kfree+0x22b/0x6d0 [ 564.807998][ T6863] drm_atomic_commit_default_clear+0x465/0x10c0 [ 564.808010][ T6863] __drm_atomic_commit_free+0x185/0x2f0 [ 564.808023][ T6863] drm_atomic_helper_dirtyfb+0x578/0x790 [ 564.808039][ T6863] drm_fbdev_shmem_helper_fb_dirty+0x1cc/0x350 [ 564.808056][ T6863] drm_fb_helper_damage_work ** replaying previous printk message ** [ 564.808056][ T6863] drm_fb_helper_damage_work+0x4c8/0xab0 [ 564.808070][ T6863] process_one_work+0xac7/0x1b10 [ 564.808086][ T6863] worker_thread+0x5ef/0xe50 [ 564.808101][ T6863] kthread+0x373/0x450 [ 564.808114][ T6863] ret_from_fork+0x730/0xd60 [ 564.808124][ T6863] ret_from_fork_asm+0x1a/0x30 [ 564.808134][ T6863] [ 564.808137][ T6863] The buggy address belongs to the object at ffff88804c386800 [ 564.808137][ T6863] which belongs to the cache kmalloc-512 of size 512 [ 564.808145][ T6863] The buggy address is located 9 bytes inside of [ 564.808145][ T6863] freed 512-byte region [ffff88804c386800, ffff88804c386a00) [ 564.808155][ T6863] [ 564.808158][ T6863] The buggy address belongs to the physical page: [ 564.808163][ T6863] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4c384 [ 564.808172][ T6863] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 564.808181][ T6863] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 564.808191][ T6863] page_type: f5(slab) [ 564.808200][ T6863] raw: 00fff00000000040 ffff88801c042c80 dead000000000100 dead000000000122 [ 564.808210][ T6863] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 564.808219][ T6863] head: 00fff00000000040 ffff88801c042c80 dead000000000100 dead000000000122 [ 564.808228][ T6863] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 564.808237][ T6863] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 564.808246][ T6863] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 564.808252][ T6863] page dumped because: kasan: bad access detected [ 564.808257][ T6863] page_owner tracks the page as allocated [ 564.808261][ T6863] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 22776, tgid 22775 (syz.1.5987), ts 503236417913 [ 564.808279][ T6863] post_alloc_hook+0xfd/0x120 [ 564.808293][ T6863] get_page_from_freelist+0x110d/0x35d0 [ 564.808310][ T6863] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 564.808326][ T6863] new_slab+0xa9/0x6e0 [ 564.808340][ T6863] refill_objects+0xe3/0x410 [ 564.808356][ T6863] __pcs_replace_empty_main+0x35e/0x650 [ 564.808372][ T6863] __kmalloc_cache_noprof+0x4f4/0x6d0 [ 564.808387][ T6863] create_io_worker+0xc6/0x5b0 [ 564.808397][ T6863] io_wq_enqueue+0x4d8/0x970 [ 564.808407][ T6863] io_queue_iowq+0x238/0x5b0 [ 564.808422][ T6863] io_req_task_submit+0x1c1/0x290 [ 564.808432][ T6863] tctx_task_work_run+0xabe/0xbf0 [ 564.808444][ T6863] tctx_task_work+0x7a/0xa0 [ 564.808454][ T6863] task_work_run+0x150/0x240 [ 564.808469][ T6863] get_signal+0x1bd/0x21e0 [ 564.808480][ T6863] arch_do_signal_or_restart+0x91/0x7e0 [ 564.808496][ T6863] page last free pid 850 tgid 850 ts 493657072728 stack trace: [ 564.808503][ T6863] __free_frozen_pages+0x79f/0x10f0 [ 564.808516][ T6863] kasan_depopulate_vmalloc_pte+0x5d/0x80 [ 564.808527][ T6863] __apply_to_page_range+0xb1d/0x1520 [ 564.808541][ T6863] __kasan_release_vmalloc+0xd7/0xe0 [ 564.808551][ T6863] purge_vmap_node+0x210/0xb40 [ 564.808561][ T6863] process_one_work+0xac7/0x1b10 [ 564.808576][ T6863] worker_thread+0x5ef/0xe50 [ 564.808590][ T6863] kthread+0x373/0x450 [ 564.808603][ T6863] ret_from_fork+0x730/0xd60 [ 564.808614][ T6863] ret_from_fork_asm+0x1a/0x30 [ 564.808624][ T6863] [ 564.808627][ T6863] Memory state around the buggy address: [ 564.808632][ T6863] ffff88804c386700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 564.808639][ T6863] ffff88804c386780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 564.808647][ T6863] >ffff88804c386800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 564.808652][ T6863] ^ [ 564.808658][ T6863] ffff88804c386880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 564.808665][ T6863] ffff88804c386900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 564.808670][ T6863] ================================================================== [ 564.927891][ T6863] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 565.047455][ T6863] CPU: 0 UID: 0 PID: 6863 Comm: kworker/u33:26 Tainted: G L syzkaller #0 PREEMPT(full) [ 565.050856][ T6863] Tainted: [L]=SOFTLOCKUP [ 565.052173][ T6863] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 565.055247][ T6863] Workqueue: events_unbound commit_work [ 565.056961][ T6863] Call Trace: [ 565.058017][ T6863] [ 565.058968][ T6863] dump_stack_lvl+0x100/0x190 [ 565.060535][ T6863] vpanic+0x553/0x970 [ 565.061744][ T6863] ? __pfx_vpanic+0x10/0x10 [ 565.063111][ T6863] ? mark_held_locks+0x40/0x70 [ 565.064650][ T6863] ? drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0 [ 565.067385][ T6863] panic+0xd1/0xe0 [ 565.068920][ T6863] ? __pfx_panic+0x10/0x10 [ 565.070567][ T6863] ? drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0 [ 565.073400][ T6863] ? preempt_schedule_common+0x3c/0xb0 [ 565.075452][ T6863] check_panic_on_warn.cold+0x19/0x34 [ 565.077426][ T6863] end_report.part.0+0x3a/0x90 [ 565.078943][ T6863] kasan_report.cold+0xe/0x18 [ 565.080412][ T6863] ? drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0 [ 565.082682][ T6863] drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0 [ 565.084850][ T6863] ? preempt_schedule_common+0x3c/0xb0 [ 565.086592][ T6863] ? preempt_schedule_thunk+0x16/0x40 [ 565.088261][ T6863] ? __pfx_drm_atomic_helper_wait_for_vblanks.part.0+0x10/0x10 [ 565.090585][ T6863] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 565.092394][ T6863] ? drm_atomic_helper_commit_hw_done+0x36d/0x490 [ 565.094429][ T6863] drm_atomic_helper_commit_tail+0xff/0x130 [ 565.096244][ T6863] commit_tail+0x338/0x430 [ 565.097636][ T6863] process_one_work+0xac7/0x1b10 [ 565.099199][ T6863] ? __pfx_process_one_work+0x10/0x10 [ 565.100945][ T6863] ? lock_acquire+0x1d1/0x380 [ 565.102362][ T6863] ? __pfx_commit_work+0x10/0x10 [ 565.103900][ T6863] worker_thread+0x5ef/0xe50 [ 565.105654][ T6863] ? kthread+0x13a/0x450 [ 565.107028][ T6863] ? __pfx_worker_thread+0x10/0x10 [ 565.108565][ T6863] kthread+0x373/0x450 [ 565.109833][ T6863] ? __pfx_kthread+0x10/0x10 [ 565.111286][ T6863] ret_from_fork+0x730/0xd60 [ 565.112751][ T6863] ? __pfx_ret_from_fork+0x10/0x10 [ 565.114349][ T6863] ? __switch_to+0x800/0x10f0 [ 565.116115][ T6863] ? __pfx_kthread+0x10/0x10 [ 565.118005][ T6863] ret_from_fork_asm+0x1a/0x30 [ 565.119546][ T6863] [ 565.121105][ T6863] Kernel Offset: disabled [ 565.122403][ T6863] Rebooting in 86400 seconds.. VM DIAGNOSIS: 11:15:50 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000000 RBX=ffffffff948d9de8 RCX=0000000000000006 RDX=1ffffffff1cd7324 RSI=ffffffff8c622700 RDI=ffffffff8e6b9920 RBP=0000000000000000 RSP=ffffc90000007b98 R8 =0000000000000001 R9 =fffff52000000f70 R10=0000000000000003 R11=0000000000000001 R12=0000000000000001 R13=dffffc0000000000 R14=ffffc90007fcfd50 R15=1ffff92000000f84 RIP=ffffffff81efc892 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f1f08942c80 ffffffff 00c00000 GS =0000 ffff8880d5b5a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f2e34627dac CR3=00000000269d7000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000005000001 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe47604f0b 00007ffe47604f0b ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe47605410 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe47605410 0000003000000018 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65746e6f63007325 203a726f72726520 64656e7275746572 2072657672657300 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 40514b4a46005600 051f574a57574005 41404b5750514057 0557405357405600 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 775f7265706c6568 5f63696d6f74615f 6d72645f7866705f 5f203f20205d3336 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 72726520303d7365 7220323430323d6f 6e69202231616473 223d766564203942 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 303d6f6e72726520 303d736572203234 30323d6f6e692022 31616473223d7665 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6420394243304133 4630363639304630 3333463044363346 3636453236323031 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3437463035364243 313046303d656d61 6e2022343035362e 392e7a7973223d6d ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6d6f6320296f6974 6365726964286465 6c6961663d657375 616320617461645f ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000006 RCX=0000000000000001 RDX=ffff88801f69cb00 RSI=ffffffff81b6be9e RDI=ffff88801f69cb00 RBP=0000000000000001 RSP=ffffc90000187df8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000006 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000030fc4 R15=0000000000000000 RIP=ffffffff81b6be9f RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5c5a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c2d89b1 CR3=000000000eb96000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcca2e4556 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcca2e4556 00007ffcca2e455c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd1ebc3561e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd1ebc3565e ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd1ebc357c2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd1ebc35650 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd1ebdf25f8 00007fd1ebdf25c8 00007fd1ebdf2600 00007fd1ebdf25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000080080783 RBX=ffff8880271c4000 RCX=0000000001000101 RDX=00000000ffffffff RSI=ffffffff8705cacb RDI=ffff88801eee8000 RBP=0000000000000000 RSP=ffffc90000658d18 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=ffff8880271c5808 R14=ffff8880271c5420 R15=0000000000000000 RIP=ffffffff8705cb05 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5d5a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c375108 CR3=000000003cb22000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b90c3a0f66090f33 0f6df3662e261074 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff58e34696 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff58e34696 00007fff58e3469c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5c4963561e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5c4963565e ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5c496357c2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5c49635650 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000006 RCX=0000000000000001 RDX=ffff88801f698000 RSI=ffffffff81b6be9e RDI=ffff88801f698000 RBP=0000000000000003 RSP=ffffc900001a7df8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000006 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000034fc4 R15=0000000000000000 RIP=ffffffff81b6be9f RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5e5a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f9c5c3f2b60 CR3=000000000eb96000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 337a79732f74656e 2f70756f7267637a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff6f9c9256 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff6f9c9256 00007fff6f9c925c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0f55e3561e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0f55e3565e ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0f55e357c2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0f55e35650 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000050 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000