last executing test programs: 1m17.148815726s ago: executing program 2 (id=249): r0 = socket$netlink(0x10, 0x3, 0x0) ioprio_set$pid(0x2, 0x0, 0x4004) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) pread64(r1, &(0x7f0000000400), 0x8, 0x1000) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x6, 0x4) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000000100)=0x5, 0x4) socket$kcm(0x29, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000008c80)=ANY=[], 0x2c}}, 0x8040800) close(0xffffffffffffffff) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_GET_DEBUGREGS(0xffffffffffffffff, 0x8080aea1, &(0x7f0000000580)) sendto(r3, &(0x7f0000000280)="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", 0xfc, 0x4800, &(0x7f0000000380)=@un=@abs={0x1, 0x0, 0x4e24}, 0x80) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000140)={"59476ed4", 0x0, 0x1, 0x3a, 0x6, 0x9dc, "4c91f77ef5e1f38ad19a87798d0f21", "00002410", "cd90170b", "e3cf2d92", ["af0a00d9dee9b2d98a3f7da4", '\x00', "8d00", '\x00\x00\x00\x00\x00\x00\x00\x00\f\x00']}) 1m17.09042803s ago: executing program 2 (id=250): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0x9, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x10) r3 = syz_usb_connect(0x2, 0x58, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000040)={0x40, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, &(0x7f0000000bc0)={0x14, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x21, @string={0x21, 0x3, "a86a83c604e9086177513532b9018899699168f57e63b3f8488ce0a811e4d3"}}, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000280)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4a300", 0x50, 0x3a, 0x1, @empty, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x6, {0xc, 0x6, "f6cd53", 0xffff, 0x3c, 0x0, @dev={0xfe, 0x80, '\x00', 0x35}, @local, [@srh={0x2f, 0x2, 0x4, 0x1, 0x3, 0x28, 0x2, [@ipv4={'\x00', '\xff\xff', @remote}]}], "13d86558da0a7f6b"}}}}}}}, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000500)={0x14, &(0x7f0000000140)={0x40, 0x8, 0x8, "3ea3d6983e06f1d6a06f93891543b3746f1916420695f010a7a5723a1a295969ce49ab99de921a2e2029d7f74def2892ad0634ab69bc2a291f32449233b7dd738aee5be6bd824796c01006ffdb031f2698940307df02a62a4a3bcc97233e3072efd129d1187f6636879e081f91085dcc0a26c94f5ce556faaf38e5f251b01c2168819bb398fbf3dce39da2536a4dba81f7f460001682fb37bab4f6609a13a679b255d8a58149d09167987142a288813fe034901e506e075976325b413b38d17380ac4bfe8794075e79d9dc754bbedbf314"}, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x1) syz_usb_control_io$hid(r3, &(0x7f00000004c0)={0x24, &(0x7f0000000240)={0x0, 0x2, 0xd4, {0xd4, 0x31, "615edb5d7829c30f332b54a2a86d5112648f4a6738152c81802cdaaac6ce8855df31ce8bcaec03b3d6ddb41f2bafdfa243243a33e877846daca9469df8be2a9f7c594cf17da2ebe7fe7bd4fa60fb96382018bc20103d2bdd595bb77eedacd498709aa64713ed77d83e14cdbaab3ec6852e2a4e47a78d767a7367aa8c4f13a01fa3beceeaacb6c08fe796660ebbd933902e0fa79d3a2e25729c46d70b9d708f4abf587c8806841d839a4b89aeb55d5e23eed2f72a1af9fb2b2a17b0208d4d064539ea89da2da125cf141e3e3dbf6a9310133c"}}, &(0x7f0000000340)={0x0, 0x3, 0xf6, @string={0xf6, 0x3, "d9496fbdf44eed5f14d45d9a575dd49cf81eec232bcc6dbe6e3cffc2e5ff07cd1dd0a6ec2fef6631e82458d8e5915d4aae90b917f02b76db776a4542791d4fb0ff51e1113e7f02e05a6d8200674cdd76b712658294e95736d42521252ad0add38b73167d6776e3c7a61d5c8908623e0d6e38c2ef36932da59da0f7ba3720f4de46025b5ac4027b8e1d3740408e4369437685061239b4655e4020bca2d2e431b62386b53cd8ed8bef54dbc147c9ba2806c31f53ef377fcb288e93454df037a8b522ba5b1f0c3449979135b08e1931d706741ad861f1f91398f5603a0b67fc68e38fc752a762043b22ce1d342cbeea08879dbac443"}}, &(0x7f0000000440)={0x0, 0x22, 0xc, {[@local=@item_012={0x0, 0x2, 0x1}, @local=@item_012={0x2, 0x2, 0x5, '/B'}, @global=@item_012={0x1, 0x1, 0x2, "1f"}, @global, @local=@item_4={0x3, 0x2, 0x0, "c82036f2"}]}}, &(0x7f0000000480)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x5, 0x1, {0x22, 0xd41}}}}, &(0x7f0000000680)={0x2c, &(0x7f0000000540)={0x20, 0x30, 0x2f, "afb744d8a023865d23f85895400a1c3b79d61c6de2d2dafd362df5b4201cf3efbe2e1c2bba0699625e288f77ca75f3"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0xf}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000600)={0x20, 0x1, 0xb, "de06fc7c553261e4041171"}, &(0x7f0000000640)={0x20, 0x3, 0x1, 0x4}}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r4, 0x0, 0xee01) ioctl$HIDIOCSREPORT(r4, 0x400c4808, &(0x7f0000000100)={0x5, 0x303, 0x78d}) 1m14.008171995s ago: executing program 2 (id=289): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="2497ff002f00090027bd9f0000000000040000000c00180002ac0f0002ac0f"], 0x24}, 0x1, 0x0, 0x0, 0x42804}, 0x4) 1m14.007929591s ago: executing program 2 (id=290): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x1f}, 0x4000000) 1m13.94064628s ago: executing program 2 (id=293): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x20008044}, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x101) write(r0, &(0x7f0000000000)='3', 0x4e) mount$afs(0x0, &(0x7f0000000180)='./cgroup\x00', &(0x7f00000001c0), 0x1, &(0x7f0000000580)=ANY=[]) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) 1m13.870561914s ago: executing program 2 (id=294): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x40800) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r1, 0x2000009) sendfile(r0, r1, 0x0, 0x7ffff004) 58.855759008s ago: executing program 32 (id=294): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x40800) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r1, 0x2000009) sendfile(r0, r1, 0x0, 0x7ffff004) 58.179760752s ago: executing program 1 (id=559): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x6e35, 0x40, 0x0, 0x191}, &(0x7f0000000140)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd2, 0x1, 0x2, 0x320}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5290, 0x400, 0x1, 0x9c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4bd1, 0x4, 0x1, 0x2a9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6f50, 0x400, 0x2, 0x35}}], 0x4, &(0x7f00000013c0)={0x2e, 0x49, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x65}, 0x0, 0x0, '\x00', {0x4, 0x91f, 0x0, &(0x7f00000003c0)=@buf_4k="0a03dabaf5529afaed7c64e656627ed2b6b3a71617757e0fcb59f7db44eddb220eb1fd5fa00153987186e2ecefa371bc6a66bec53f388239eaa26546c5126a7f042a282400c8b9df1860147405a220da30fe4160b24d5d6fbceb2e2560ebbb961fc6c7847d15ae29d1315abbd60f0802ffe69386ba7b06d744039b1ddc7a2dcc51a5a410529be401e914a5fb800147205fa54ad24fc76610b4ee760d6502af8da45537a3779ee2b4134ffd09858c0b50b38aef2fc7bff12d52d5403dd1eb960e0c1b9ad7ad8edf105e8904ba2f4b6708c23ef41ee8eb68673256088f26845a1adfa65830bf3b343aea6c3e8ced877a4552b0785acc072466fb7033e76b80d73ef1c5213204c1ab3bc0c714d9df6ee10be34b85d5045465f2617d3085f14139c950abc4338c8c71ffe2fe325b0d638eb260de7b2a873a9dfda3f172e8a552084ee20eee51f36b47ee718d6224958588b5467922d2aa98be2f37dae129757d81b9b378bf26de65793e627d4192a633bdb62464643a69fcd49af069bcc083f0ecdd90e81d91f24957047bc1a7b906bc58b58897249a7d532b89d595099ed633b54a7488a26d8847dfb2d3ed194c8ec1aaf73af48965ec87e5aaca38653fc4be5be2c18c2f29ad867868ada00d73748931a87e82686213326ddbb026ae392aa566bbbb1ce720516f856e3ef10ebdb2902a56b372f76790de108e244d45f7da9d67c7f33a167d25a1d0b1121c8aabe559173813c71d751a0a4693568fcdffbc26ba06513a9b324ee41b67377cb2b2f9640fc2d5ad984ebae88dae47300b9dad6edf5ad940057b26e65fa6cce9c84e97b77290a227864599293adbb0306825b2dbcc92b8213417244493acab9bc1378bf350376d5a8ed79b5d7444975959857f8255cc6722c4053cbc954620d255ac64f4ad56434eae5cc9748241a7e1086dcc703c5cdfb1bc2562373343e9e9090f41f60ee649b5e854bbe6b69c9e011279384a57cabe0179067a9ab0b7dc24f43c4ecdc05ac95412e9a4b35ebd6c48bee9eda156824e2392bbfef83457ef56222f3b71c6c66006ee36e7b87f395cb5ff74bf611ecfacea166f06729323de2257cb84e5ed1a51e26ade3d17ce2387525a5b977b682354ad9ecb03f91ba41d5b4afd4a232f7d444658841db74c4dbd400bd936547fee692ddd5789ef22771b85bdf92527b4310a519bd2824a4d5b16ffd134cf6ff66456c3598b074464fba3c509489394e7b0de3ef6396c8a36f429dc21b279c5bda1e3318d1b640d5d5743cab567e90d34b6aae34c4b3fdaba393793bafaff6c438f6532a0a1c81063f4cf0a069ef2542583d5018366bd20666a1eca137f8cc3b0c15f08dbc7ba34241819df94b8acf5007c2f233ce2034f34a02099e5772c3bab5143e6e50532fbb7d97f1302c4a64556de1a73bd100e298109edf9f4f962f1bb3a4e0274777ec76a522675018d356a5959c3355002f6ec1d5d5c43611b8adfc8afa6810b1765b5807cc394c5cee5c824e7a5bc10b2fd71d5cccbcb9474a3b1deea992c66aaf3a3258b3fccfdbe6a61aa336161956e35997d46c5617d97978ceea76c21cfc17353fc5f78a0abb78ee6a7092b743974954dd8ba8b70c4c56f4d9a38eb7970451e87f16e70dc8e1b178987924e7b804803f1bca4874f6862d5c8680ef6b05e72329f81862300e152b171fde5b6ec7739ca02ec1324372fb879bee6dea40a19a8aa50cd1206e0029f73dcfa1d1ceedf77242f79bc727365133b02c1689ef328799f999655737645496bd992eea0f143ae7ab53d5eba8780ce35e3a1368fd6982048426c6af3f70835ef71d704f03757305d3463085438ee39d78d34185a3d3cca9ca7a3f981507fb0e94b399104b96bb0cac373ecc4827eb2703b4a730a38780eaa31c8c522eefacfe569773ff187634e6273dc81403e40bd208930571e77d09ce1c8bd5b681c2d017d85a7408ad6000dd8427683b1d2fc4233f609fbb7c93f3c6eb0f2f615d56e0fe99ecadf7e43fe8efd6ad5afaf7cb5c56f9678f1c02cd30a372569d72945498d898afa735f9282e1bd7ffa9885f535b0c1a8d554a910777e7e2ffe8fd92e80c24c606ec41c9b448532e145f6ef27927c64307dde4fa90944858186bd8727da4e2170b96c4bea3e675459d3cde82d7144b6af68f72140930bbfdda90c68c02573235b667737133c5641aeac8b35077695f8a032370dccff1264824c7de8e8f19b2fd70a633b9620401ad148c49267c8abeb949c7d78e9be9eab829cf200c74725f8c61964e6c84887372b3bb5be17e75dc0a1a4c64266ffe116cdc603f642cb762779e2f48c6e79c788fe261a9fca38b7e045344ec296ed65c258be3a1877a1e10a57ddafb8c77b3cad437dbdc1aa4a11c0c789640ce5edf23122f6147bac3a20261ac9d952559a09a4b56c2e39a7dce01a783166952f53f534bade723930acc39769b100c8e2850ccc57e989009ef4ef10e799593e8ce1620d2350b6d37d42a905ecc3cc59d0f20c3541260e0cef89b0178a7eb01ca95d7006d5dff6ceca8022b6b4951fe3997a5d0eabf1ce4497799f3109390a8251bbe7a70ec1b26b38a6e971f3bd4e25ec442342de3fbef14dfc2d9df13fa8566310bfd9b026bb3ad8b034857d833c6ebc983853e9e1577981957d0899fda93b7fe890c9a3962eadc64dd7ce98a695fd9a965c157ad51b3be47ca2045c913c31c939166f2bf8a76b1f7a21021ad638072d46b829354583bc962a111c55cbe8e830d5256e76089fabbc79307a38077aec6f3450660da33652bc695aa95671e75023f27bd16211d54b66a85965c2b9bc3c953c2b38aa3d90453573dfbaa16569ca081ff3bdbe4dff5f6eaedd8ddbc7189d3d1bdecde2d3ff328943b2407edd83f82cda29319f194f53557d133a11fede429e8a1bf0016d65ec037b42ca8c083e305a17f88d0d3acafdc45ac600a0ce56a5c6d6eec8ec05b0dafdb40a1aefd10df82e30c9a5c99bc7e5cb9c1e9d575d8a9395ca6419ac7e0fe9ab1c67e3ee74a47c01c85815fdf549189ff4b8d86e1134bc77d62a3f752fcc36235b457701cfb361fdacfbdf62f7be042d80ab790ebfcdd3510953e8b7ef8a0f33cb65b59e974f22c5cbf23bc627464a04bc22d836bab2b030b70c51a92cc7b693193ad11ffe49e1eb514a1d2c119a791d3291d48b4afe56caea7a7af77cb09f831e899f99107b522afbff84f6e45507e6177e3797501d304544cd363b7b0faaa97f6ea5163fd3fe8b2f4c00c3f64fab6da969cd09572fd993357fdf9ece53f63036988b6c78930e9594bed5ce73a79698c612ac7c8dd121b567e45077963b68f1b46aad99fa0de28628e31218a2d82e1ca7baf7ddbb2bdeea3b660bccd7a8b76f7bb4a81c077934f105d139f8a34dda69ced31b780d583df65fd60306cb39e1913f26c211789386785e7d3800289a05dc0dcd393550f4a0a621eeda1f21e90b005a1e9db9b71630e311e3040f722a62bf6750e338db060bbbfe1fdb1c1da1c7e081c4bcd5dff53199c180b0e8d8d98d036be8d277b4fce3774866c4f3474d7ff5bf37ed66c87cc88fe159a6729fe7d01aa521a376d217a898e32435c979a1ec32f833d30380384e066bb3433fda27cb23d9faa7ac912b4332dc955aa4fa490b15c852c03ef1a853cb0f07e1f07319ba9f8a9b5a4428b5284bc1cc69135fb9dd097880b311e557d941a925a29d76f5a916cf414674b1984bfd64f5c6e518d46171cfe738d460b458b8146c05251b2bfe3582b6c6a6fa4a18bf0df6d2a75e8f5055ab995f24b73eb355efece33ed1c9fe3c573fc691681e595c6627693eb00298b9e728bd0b434823d16fc7b776e607b4a81ff875fa444aabfb472a90821f5bd67f274a3e58dd5707d313141cd0663541bc985a32ce0a9b6d07c300f6dfb50ffce949e2eaa22a15f9907327c9bcb14c7affa13945ad339bcdd2e3c91196fdae1b9b7f5ac03bc5f4dd748a1eea5d0fc4a5a854d0698db531690612bd5d6f0691bbe55daa19a5f67216947cf9c26b3e73663ea79cde0b3d47733d458aff5da1129dd8282a356ac07adf244b46c34d69669ff487b018042f169d1e0edf601eac209f288575588548af237a4a65b9bd34c3420bdb9cf190043a488e38f30bd478125c34cd0e233e3a08e0ad7ee2c4464ff42817685716edf5d8f41a393f637a7939bbb2a705d8c19e4aa4824078400b17df1f3f74de05793721335e377b938f1e9e76305cc7147c73793cb1cc812334cff9c5a55242c34cb01a4e67aa171ae80a48c780e25b6cab619013cc85fc011f79baeb0ab783183a97cabb1a7f4d47eaa5bd4dd51d3ef2fcc3647fdfb5e7d883c05f6e82eb63939b41d1b0db93653b07ffd7a4276d11a64883e6cb2b87c3a63649949526ce3022cda2d9ea5ffb41ed0ab8be6926759503a68705d75497ecfc9f45712c42f9cca007816913c34880103dee569998275bb3993d7e1c09d1521f3b46774478232c22eab18be2ff10a409b30640d90a5e9bdbe2395705589519e47eed32b2e7cf27534bf36254a179e7f524ff2cfea1981c69fc45cf1a9d40dbddda7022508af4ed7a8a59e9480978075e58e07850ee27acb3662e8fda48cb3da0aebb1dd3f9e7226e0ec78c3849a79f2981c3204f713eb2667a8a636f3e548e55ecb109841fbfa9ecd4c9bbed7af3ee3ab2221174d332758f5c83ba9c2be136c32ef15a666cce933837476f5fc709466af7df97df95cd2abb70f349a4c3efb036a13d40933d819fdfb0e4f0ee8f2c7ea25b45467edf09b8d24de39b695d87c4fd9f5633be0a60ba42364255d7ba1ea882f94e600dac9db90766fb5fdd9de232de1f0194ffee6891e868caa7842fc62fc225cd015da2233cd2185cc8205ef9d30f48276d7f81a73ca7182aac954be2957786918b0bdb11049213c6d3869fe83d355f8a9f208651b1219812e2ee287ca0fa89fb0f4bd6004d73c23a7c64936e31c4931b22842c8a183db7a0761d123bd61119c11851a0070a61a817a739b72b6ce57876eb38b7c955a05c527f7ea97db709cf256dbb2c24976a8b1f6e3e2ef233fa51914251e8b138eec67db719d3a774c6e1cc688ac234e210acb083212c492c7a3af1a53c32d890766b8b42b04fda0a9941ea05c17698ee4b4140f8bc748b2d9d1c163050356322f36a189fb6e8aaceafa35ca309db4952b7069bc2358da2f72c4359bde3f90f30554937ac3a71031d3addf7a5bb6cff0eda6c4f95d20bf26c650bb962282bd3450a74f147271ba0e6ddc8079193f516aae22f1e02012c37de35bcf8bdce05a7b20c147cd997cf20f87a23b5243747e1044a5f162febc07a9cdc400140886e022237244e1c7c753778e5cbd3f52de2c765fb760fa6ceb32c2054ff4c74ff21c85a55540b6b49b39f2190e4a4748dd0d43251e52c6d1cbf855b9279f176f8b0199e22c3756877b635518bdacae2307895659f1c5558ffe411482382fe9f6171e5a2f1d739e9ccc8cb73ae3d5a40167ae53f0a01cffb8004dd30f64b4a6e24801f85c214fc2e72b062c6e0bf2e8b0383aaf27e7624b4cb981f6dfda1fdc310d76e828afe75fa8a3ed40cee0cda3953b023cba14892dc6f2a213abf781e8be23d0cdfbfbe5c3e24fe8995c8ab51374132e3a693ee105ba4aee09d8534fbc59cf4b059e12584f6bc1fd5bad8831c056a6bbfaf18087359777901fe187bb7b4129fd9ca6d15069b5eb2ef3dc1a9425ee2ababd53a94ec6e7b754947c10d385376d41e6f7e2623a4f1b049a3a6e58b574f11265a6e1c2892"}}, &(0x7f0000001440)) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r0}]}, 0x3c}}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000ffdbdf2505000000080009000100000008000b0001000000080500000100000006000100050000001400080074756e00"/66], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203ff"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r4, &(0x7f0000000280)='L', 0x1) write$char_usb(r3, &(0x7f00000003c0)='0', 0x1) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x6) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000019c0)={0x0, &(0x7f0000001780)=[@nested_amd_invlpga={0x17d, 0x20, {0x2000, 0x9992}}, @nested_load_code={0x12e, 0x81, {0x2, "b96b0b0000b8ee7250b9ba4b3d9a380f30b9800000c00f3235000100000f30440fd13166baf80cb8e0ae4e8fef66bafc0c66ed40d34100f0108e0b00000066baf80cb8d1b23281ef66bafc0cb004ee410fc72d00000000471b8bf9ffffff0f20c035020000000f22c0"}}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @nested_amd_clgi={0x17f, 0x10}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @cpuid={0x64, 0x18, {0x24, 0x7}}, @wrmsr={0x65, 0x20, {0x37f, 0xc}}, @nested_amd_stgi={0x17e, 0x10}, @set_irq_handler={0xc8, 0x20, {0x6f, 0x2}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @host64=0x2c02, 0x27, 0x9, 0x6}}, @nested_vmresume={0x130, 0x18, 0x2}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @wrmsr={0x65, 0x20, {0x257, 0x3}}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0x10001, 0x80, 0x1}}], 0x201}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r7 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r7, 0x7) connect$inet(r6, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r9, 0x0, 0x0) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000014c0), r1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000015c0)={'syztnl1\x00', &(0x7f0000001500)={'syztnl1\x00', r8, 0x8, 0x80, 0x8000, 0x4, {{0x28, 0x4, 0x0, 0x8, 0xa0, 0x65, 0x0, 0x8, 0x29, 0x0, @private=0xa010102, @local, {[@timestamp_prespec={0x44, 0x1c, 0xe0, 0x3, 0x8, [{@local, 0x80000000}, {@dev={0xac, 0x14, 0x14, 0x24}, 0x80000000}, {@broadcast}]}, @ssrr={0x89, 0x17, 0xda, [@private=0xa010100, @remote, @broadcast, @remote, @local]}, @generic={0x89, 0x9, "c87c0632e20b00"}, @ssrr={0x89, 0x13, 0x71, [@rand_addr=0x64010101, @private=0xa010101, @loopback, @loopback]}, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x3, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@loopback, 0x6c7}, {@loopback, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1ff}, {@empty, 0x3}, {@empty, 0x8}]}]}}}}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r9, &(0x7f0000001740)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001700)={&(0x7f0000001600)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r10, @ANYBLOB="0200260200001bfa585df9c1d9e400018008000300031e000008000100", @ANYRES32=r8, @ANYBLOB="14000200766972745f77696669300000000000003000018008000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="140002007665746830000000000000000000000008000300020000002c0001801400020070696d367265670000000000000000001400020073797a6b616c6c6572310000000000001400018008000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="40000180080003000100000008000100", @ANYRES32=r11, @ANYBLOB="08000300030000001400020067726530000000000000000000000000080003000200000008000100", @ANYRES32=r8, @ANYBLOB], 0xec}, 0x1, 0x0, 0x0, 0x1}, 0x20044000) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@setlink={0x20, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x1, 0x1}}, 0x20}}, 0x0) r13 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r13, &(0x7f0000000500)='testpacketdata', 0xe, 0x0, &(0x7f0000000600)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @broadcast}, 0x14) 56.679982762s ago: executing program 1 (id=565): socket$inet6(0xa, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x700) 56.679645034s ago: executing program 1 (id=566): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x90}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000880)={0x0, 0xfffffffe, 0x800, 0x4, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x0, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c84, 0x8000, 0x5, 0xbab}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2ced, 0x2, 0x1, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x20ec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0x42795000) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r8, 0x0, 0x8000f28, 0x5) sendmmsg$inet(r7, &(0x7f0000003240)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000e80)="2389", 0x2}], 0x1}}], 0x1, 0x4040040) socket$inet_tcp(0x2, 0x1, 0x0) 53.636925453s ago: executing program 1 (id=610): r0 = socket$inet(0x2, 0x801, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) mount$nfs4(&(0x7f0000000040)='hash', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0xa00000, &(0x7f0000000440)={[{']%[\xad\xf6\''}, {'[.\\*^.@,)'}, {'(&%)/\\.'}, {}, {'appraise_type=imasig'}, {'addR=127.0.0.1'}, {'^-[[,'}, {':-'}, {'-^+(*\':})\''}], [{@smackfsroot={'smackfsroot', 0x3d, 'appraise_type=imasig'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@flag='async'}, {@pcr={'pcr', 0x3d, 0x14}}, {@uid_lt}, {@permit_directio}, {@smackfsdef}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]}) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000300)='127.0.0.1:/root\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400), 0x1043091, &(0x7f0000000080)={[{'addR=127.0.0.1'}], [{@appraise_type}, {@hash}]}) shutdown(r0, 0x1) 53.579746357s ago: executing program 1 (id=612): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x20008044}, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x101) write(r0, &(0x7f0000000000)='3', 0x4e) mount$afs(0x0, 0x0, &(0x7f00000001c0), 0x1, &(0x7f0000000580)=ANY=[]) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) 53.529763293s ago: executing program 1 (id=615): syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) sendfile(r0, r0, 0x0, 0x400000007ff) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) 53.360497439s ago: executing program 4 (id=620): r0 = syz_open_dev$video4linux(&(0x7f0000001380), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000040)={0x1, 0xe7, {0x1, 0x6, 0x400, 0xf00}}) 53.290412341s ago: executing program 4 (id=621): r0 = syz_open_dev$sg(&(0x7f0000000540), 0xb4, 0x42) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x0, 0xfffffffffffffffc, 0x0, 0x5, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1, 0x2, 0x2001, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f00000001c0)={0x28, 0x6, 0x0, 0x0, &(0x7f0000000000/0x11000)=nil, 0x11000, 0x3}) (async) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x5393, &(0x7f00000001c0)=ANY=[]) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000340)={{0x2, 0x4e23, @multicast1}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x2a, {0x2, 0x0, @empty}, 'lo\x00'}) (async) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) r3 = fanotify_init(0x8, 0x80000) fanotify_mark(r3, 0x105, 0x4800003a, r2, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x8840, 0xa2) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) 53.290205698s ago: executing program 4 (id=622): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000600)={{{@in=@multicast2, @in=@dev}}, {{@in6=@private2}, 0x0, @in6=@private2}}, &(0x7f0000000700)=0xe8) mount$fuse(0x0, 0x0, 0x0, 0x10080, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x61) sendmsg$nl_generic(r2, &(0x7f00000017c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001780)={&(0x7f0000000740)={0x1030, 0x3a, 0x100, 0x70bd27, 0x25dfdbfd, {0x10}, [@generic="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", @generic="37bb422a2a57a125e2179be3e967e8ff54f42f10937ffdf784"]}, 0x1030}, 0x1, 0x0, 0x0, 0x4004010}, 0x20008080) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone3(&(0x7f0000000040)={0x2a0a00300, 0x0, 0x0, 0x0, {0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58) 53.209232476s ago: executing program 4 (id=623): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SET_UNIQUE(r1, 0x40106410, &(0x7f00000012c0)={0x1000, &(0x7f00000002c0)="c9bf07cfd2d9091fe75da2aaedac898d89f521f809012a228785fa158ad85810339dcd2783af233e4807656ed4998b427888548e85a977f4b6ea40aa4190c9e026fd6946d73df73e2a9f0de73c081d1d6b8aed108f9f89feba5892ce599c4d67f95e09e2a94d19e34be1091e2506678b211c35e6680ff68233854a18bb41284addc26b1238a747fa442d0feff4b50d9788646e2c26a7a1fc9653f2e5cbe7ddb503fe97b43b78099aa91c07312786239f4961a284251b30718a6f1fde0c3d41cfbbb5d345051928a56f0e9ff2c5115c2717fcccbddce773d19139de14f79cbdeb7012683d0d1495467f8cb4addbb584264705db3665f0089316e1b74b976c4d766a21c78e84900910982bcbe03d168ee93f702010deef7a9fa7c7d902d93c58ee0b174dab06e3512d6d61dcd4b9436b724778e19ec100743920adffaf1bc8da1eab464d82b1903f11ef52103a2600de0a60ba7e4e04bba9489c0a14a74d70ce09d51fda4ab3c8f7dd20588ed9ab7cf916cc77e8b1923ee0b24ee40be1aca88c3df1c7887170b1f2993617705b1bbe24e21759f2bbf354315c24225c3d2edf2ac6ce57da8adc9073ab60506a63cfa0b39f426bb2b40b1492103cc8830e85d6f3bb614880ee03512a84bd3d7cd9c96af6ea1cb6ed59f50c1d15d78e44c7d48824428b868961105224957317a8caba132982c7ba74e4d5419b1324a7a90aa977d3fcc0ef3c7c74a9e98e277e601edff17b550d851511ecc3a9fb31bab505845ba8f8546c769c556575f35b6f7534ee4f409e9b56d47158b8dcf557af8c02c7534a5fee64776a43c80a29ef22c6ae02caf58f9c8dc41c69616b87cbf12b5a2edd69a7ca678a51280edb90a53eb40253d7fe57fff718e44bddea7f631a6d18b2038c2cb4999e6c61b57c28bab452e07b37ea04c645550e1be7a5a88476c1b2ece49e4ae0819fcaf9eb925bfb310a98454cfd9551bc686a2a658e2e04f31fc4ff1c08adfe4b4d5c0124f7def145e6a814ed6115d8972ee9fdf9d45e090756381bf2b5d4ac87c926013c076243e67d387de11faca6f9b3b009b24ebae865fd74b297c92c805e6eaf5ddfdc442f2bd9d091cd161c5d62736198a41b74fe475c6c5c20c0360ae1cb1a2b14691809d0ac7b16e082bff520295283c837072d3a836dd0ab3ab1b00393e286edff5c810c5c68b74b7a9265ca9bdd5b4b5c210aa76d5e1a4f4060b0641b49ad737104b296d26971bdc6a918ea786941a2ad83587f418e3eacc5096f4da21ec89d0b58e040ef265c1d76d4a595385f6cd5ef9cd6b9636da85656964b13c8069f5af994fb94b0e7b2cbeffe055fd0a486a2332e6610d957091355d2b52c061b322143af8692cdca41f933d524e7fddf9ae1d746c2fd279251a02a53dd61089f9af0920a757a6371f63fd4cd2d9f43bc7a32982b849f23ab17a7a8ee0481848f407d5eae0b52c9cd1466370c97331279c4efef180cb2395ea785897865dd5177b3c229d8b17b2025d6530adcedf73ac027482a41a64d9881033a230d467f8139a4a75eaa1ed5053d81f92d016b24e76924210123042b1606df8a473a81a146108644da839f6ac64c4f95a54ee6c575070c566ea3be689b57c419b61a158e86cdceb69609f2ceb330dd7f4a605f43befbd7a49263076d42b67aa67d65391c007c2877fedebe9d6766389ee5f323102f31680be2c58627efdfc51c73b96690b0f9b26133d96d1a122c2e076b55c9cd1052f91ca0a6c9f3ab7fcecd25e76fc3535e95170a91fa14dea2ca3ca5f198336f238740991680362c4f55948ab44fcd6a3ca70c8e945d8e3869f8143dfaaa6cecaef5cfab62a22a17c9ea1d133658e58f149ebbcee15ef25b4e4b099b620f93c74f71872033e008b33c188c27b764b61d3cfd2eaa6e272386166223e6ca07f92f8aebf36246101c49b8d54a26ae60dad444480066314fddfca7d4f6a7a49df503dfb5a2b9d8cafcd7226d0fccaf2fb2e0a01c766e78736be3b23746d9ab3a3ee10a9606bdc344763b84db1730fa64f32545e9d701146f63d5fa01f538e32fd5f95bc8849809862cfc82b678ff95573f59dca5d90f945c5990609c8bc68ba3defaf29b60e58c58afa851d9f410daa26cecd8ef057581e7b81a079c44a2ca7ca723c03484b3e14b5e8286f820d3f00461390f7e81d594ab311edf1b449390141f71f0dfdb3bf4a436e6417c4de7f226b0871ed0387e32f56ff458c21df2371d56c52af6750290df8585acef765c78c31833623f049196ad4379a97cec595457a872986e96592f0d4bcf9dbd0b11ea4b8b8970074aa16d99d9e95e1e0d56bde172549834381873e3893ca32c5d6f0c82ef6cb6a1de7b6b53eb22ad7578ecbaa66a7207e947b715c50cece7ed5b541f2bbc7885b2f4b0dc9849b3bc7d09199c1f4c5c4a66eafa0540866ab5854930ba8476e5809fa20738734c794b185bc6e55bcc476633137ccdfcf8b0557a52a6db192aacc8a83169d85a0bdf86d12354701e6067c47d82687cee2a6f95ae1aa9dbe67c244b373263727eb3c5ba25dd13f6003493a21a60465bbc9b10e3fc8efefa20c418245213b4a80eb7631549e7a3b1c03702813b71df4826a0eec226e70561fb71b55a420107fda5bd274fe99467f5ab333cbaa2d81b12cdda93cf3e07a1a822c1e41aa5fc2ab6be46b5c7b2fb05bb57373a7e3fb3ac4498b0a2d37b3143afa27187f254021a76663fd787adc7bf7fa04a3edd3dc2125b7306283a399c2f5070c4a6703594b5df384b224f0bd4255b195a466478143bc0f9e2018907a3b77976f390a54acd1b49e33c2d3eac2deeceaf88559b22597ad2344a6ee65be50af6973b6d64dca18bf038e0aae89c53fee11afa3543ce66f4ad4e968fbb9e021db96444a6519b7f96d8e0c324708be7fdd9b0e0d8eccfd03be99f7a357b3324736b365a11387b29f5a2b44cfbad6fc219a2d81bb7b484379f0c58b7093c095ac2451dad10f186b0f2c60141a88b07c8b281091e31e9def6e2525b28442070bc856b56e542ba3c776dc643ebb9ae14d197b5c893b1c4f5e0f0cfeda587311599ee2c6cdf560bb6bee6a1b38d0964f06e696105679c7d675793f9fcebecc6fe0a408397d4ac7ee1ce58bf9eedafa42793f187f8e35d15078fc3c32b08e9e05a1cbf70e7a2cb4eae1a82d499e24020965e6199ecca8cc5de6340ffd31fe05a9b1b3a71bd1b3ef77a9ec4cdbe56f8e45e489fb1600a4356ab94b651fd25c89843f073299d9280e7387f438df702520dc4b79e3d05c18e0d3b9684d75e4a79a9babca1824f9660788ed708af3619c64dd7f90acf377dc0444bf8f7f19a65a27600159d33cc85e460e5ed10fa18373ddb5f5ecae0a685718d73ef2de0f070d756a5b1a499fe2e69691c4269600520e269fe84b386a0ea875c1b82d3296154cfb53c12cbb87ae0b804d7a989ff8750bad019b84aae636f60917c96060c42a150304cf5d064d2bac2de7e6f5439b7233bd55b65ffebb6d48f4e57fce0269931bceeabc83b1348ddfd021232468209e0d09cdc60d816a822200a025a5e1a853cb5bc51d90d040a73bce1c8f8daa63faaa78d215b9bdabbfcf97cb98cf937d4e69132818e980f76077b78ea6174ef9d2074d36c684c8c84e3f6f9fb733f3c6ff98b5ab17c3115309666d8da57df67138c8825d7a88a510aa43183d109a93dfaa5ff2232e2f0a20aa5e19ce6d7e930d2454d3ec9fef7b72e01c8b3c6da9b5e90a8f3dbdd7d172f244cd60d0c0ac80da415e1623ea38a5579d71a383a572b08db3a9c168e71efe9e0b1220385102488765d013e7856b4a4d331953c3b77b6e1b7918cc42adcfe685c7360e7426e5c084eea2d57f8fe77da8304a3a1d460c1b061fb44ab91e0d156d1f88ecbc6c5c3241153e0d1c0437e03a7faa1f2e3030133279112e636ca8c45f5ff2dd6c8e8fc12a78fa1a62abb3b136ca7f124385bf2d6922b71a59762de33ae677bdb4b124b9724848bb8c6721591f2d31c8208ae25a0f88701cef02cd9332e4f32a4147d48d91fb01921b813151ddfbd5b443c1b57b387f3e624411119486d499cac2195d66794f3895e6ad19350ad4dfb8d319d28e6559add902e3c28944aafe900320a689260e3b6b7937cba1cf0b25912a391e127571dbf9b1fe025d9ebda4fa91042076221a288730f98402767a0f56efc7d02bfed18d30154158a8129b7917a2a4b71cf19f56cec22f5bca4eecd01d4d76f4f4d782541d3089d987608ec6ebfe33ec1c6d04465422f456772405954a94d99ee2578e1091ce48bfbf9e45ffe799c6c038984e2622c9f8178efb45690a96dcff53eb4f7bfed9cfa200ecd2e8570938c95a9facd01cc0b974d94073eb5d3d82c38e5c9e172378101865e6fefd52eb54f312f81c923dd2fc94282564f5a34ff7398ce15d56c6bfbc51720919c9e233d16c1965d2e810880dcecd44566c555381acdab4e25260aed03e10a5728c6e6efa68dc607c96e4af97ac9ad7840a8e4747147d88beb3d6833c491ebb2578b346a83f9f5b3e0439644a931307e1d5d20b2b980020721c4bb55003b4bcc493ddb45e5add4043a569d004bcdb983f26a5855c6aa01770cd149693a24e0f1c4db0edf9f7cf4625a88807692f2124d2325a8170f469d016d5af3b41f2e4723625cdab9722264827a1f81739830cf2a799b3af0524eba1a10a68c089de9d463153dd318c9d74429e14fb8ec14d5a31271cf5ad0553cf6a53e7993addded1f8c95097c989c504a39a9b3327aff052e5910e2b832b68359c194af59a7bb0e38818326231dfc853f5db67c962636d984c782c1d67f2fed53c1cfd3196a5e0f9a3cc042116884b2f22fd9deec7d0394d3dd74abcf951446854d08985e76d2aef8fcaae5bd62bd4b6688a50df57b48e270a80e9cc74fc13680e99a0584a75df19e791ac97eb6892114f590802e8de950e899c8d66f786ecc026fe1cb85da29df17696cf39c63bd580be42dc464c5245615934ad77ea0c1c6d41221f5a7609c6cdeec9dcc35eb1f71683f8ae06a8cf44696e818d15857bb320f7d567c7497fe1a5a87bcf4c686612268af86fcc982c442d7a264ea1542681750696ab55755858bdd908131b398921b0d3b0a81a8d8154f2e78e13f571686c1c92b43c697be76f8ea8d588a7e253540073b23c04fda20abc38e112d93f2133b39371da418914744a6b24cf2556314d9e721c39cdfb0b8f317d9f1931b3da06a7cd3a1105fed046103c3b3a3601fc644c74e70e5c728b954044757dfe530fa8b603bf41008bb9369730d4731d9dd115894ae6aa38560933237053f7002998334703a1c9b6d316ef3a8115faec6150534d3ccdd2bc400a3d657581251680eaa95e4f62296f729560f096c1e7f410199b77ab555b83a5192ccebfb49bd7fef6b21788a0445366ac74013df26f4163e0490364ad4f37cc065b79d4cf1154a8c3163997580d06603a7a5339c7d73c9b4bf5c7aaaf2eb2bea4897d901b62949c2df301d7a96fe35c8075d7290d4bbf9ca38eb44434bc53a30ee46236329927bd174ef5a18e2afc9ecc4f50ed8cce4455dca57641b86d6912d66eb571882a7c3aaa00b7e269a5649bc9ed780ace26e2bb78eeba32687d48b5ef332bb14a66cd517a21f055bfeca8c8237f1d5886d7afde1b63ae917b78b373f941730f6ce1eb109ca64196382840ee4702e6ef74851d8864c75644918081970c642d11dbc2f43db5b8b82dc643ca197ae9bd3023ecfb32559101e8a041711400bc7b81709e5ce03381aa015bada5f97433146"}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x1fa, 0x1, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$XFS_IOC_FREE_EOFBLOCKS(r2, 0x8080583a, &(0x7f0000000000)={0x9, 0x5, 0x10, 0x0, 0x2, 0x0, 0x6e2}) r3 = syz_open_dev$video(&(0x7f0000000280), 0x101, 0xab02) ioctl$VIDIOC_S_CROP(r3, 0x4014563c, &(0x7f0000000100)={0xa, {0x3, 0x8000, 0xfc5, 0x10010e}}) 53.069694891s ago: executing program 4 (id=624): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x20008044}, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x101) write(r0, &(0x7f0000000000)='3', 0x4e) mount$afs(0x0, 0x0, &(0x7f00000001c0), 0x1, &(0x7f0000000580)=ANY=[]) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) 53.009673224s ago: executing program 4 (id=625): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000980)=@ethtool_per_queue_op={0x4b, 0xe, [0x81, 0x9, 0x3, 0x0, 0x10000, 0x6, 0x800, 0x6, 0x5, 0x2, 0x5, 0x7, 0x2, 0xfff, 0x81, 0x33, 0x9, 0xffffff7f, 0x3c4, 0x2, 0x1000, 0x80000000, 0x8, 0x5, 0x7, 0x3, 0x7, 0x200, 0x5, 0xffffffff, 0x7f, 0x9, 0xff, 0x125d829d, 0x0, 0x7, 0x8c5c, 0x4, 0xe, 0x4, 0x4, 0xfffff231, 0x7fffffff, 0x9, 0x7fffffff, 0x3, 0xffffffff, 0x8001, 0x6, 0x6, 0x2, 0x8, 0x7, 0xffff8001, 0xb, 0x5, 0x1, 0xff, 0x6, 0x401, 0x8, 0x86, 0x24000, 0x75a, 0x4, 0x6, 0x0, 0x0, 0x0, 0xc25f, 0xfffffff8, 0x81, 0xd, 0x5, 0x100, 0x7, 0x0, 0x5, 0x4d, 0xfffffc01, 0x9, 0xc7, 0x7f, 0x1, 0x1, 0x3, 0x3, 0x4, 0xd7f, 0x6, 0x8001, 0x7fffffff, 0x1, 0x3, 0xffffff81, 0xe2, 0x80, 0x5a, 0x5, 0x9, 0x200, 0x7, 0x5, 0x4, 0x7, 0x1, 0x6, 0x10001, 0x8, 0x1, 0xc, 0x80000000, 0x1, 0xf, 0x0, 0x3f1, 0x1, 0x3, 0x101, 0x9, 0x8a, 0x3, 0xb, 0x5, 0x96, 0x7fb, 0x3, 0x3]}}) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x24, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x44040080) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x85) (async, rerun: 64) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) (async, rerun: 32) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/firmware/acpi/tables/NFIT\x00', 0x0, 0x0) (rerun: 32) read(r1, &(0x7f0000000140), 0x100) (async) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) stat(&(0x7f0000000380)='./sys/firmware/acpi/tables/NFIT\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETQUOTA(0xffffffff80000702, &(0x7f0000000200)=@nbd={'/dev/nbd', 0x0}, r2, &(0x7f0000000480)) (async, rerun: 32) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 32) chdir(&(0x7f0000000140)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000005c0)={'#! ', '', [{}], 0xa, "9bbd22564dc64fd036ed16bad17f090c61321e2fd34b3539e00f514a50d95f5fc0f1c1e733f9c429f39853d3d8ae48ac94b728549c6c32521e5bb012ce1994f5aa912c0000000000000000"}, 0x50) (async) r4 = dup3(r3, r3, 0x80000) fcntl$setflags(r4, 0x2, 0x1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0xfffffffb) (async) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001114d3fd27bd7000fcdbdf2508004b00130000000800030003000000080001"], 0x38}, 0x1, 0x0, 0x0, 0x48810}, 0x4000) (async, rerun: 32) socket$alg(0x26, 0x5, 0x0) (rerun: 32) r6 = syz_io_uring_setup(0x3aeb, &(0x7f0000000540)={0x0, 0x69ee, 0x8, 0x5, 0x35}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r6, 0xfffffffd, 0x1, 0x1, 0x0, 0x37) (async) mount$tmpfs(0x0, &(0x7f0000000540)='./sys\x00', &(0x7f0000000000), 0x0, &(0x7f0000000640)=ANY=[]) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x11, r3, 0x0) (async) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f00000003c0)={0x10, 0xfffffffffffffffd, 0x6, 0x6}) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x7fda8000) (rerun: 64) 52.180513583s ago: executing program 3 (id=628): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="9c0000001000fdff289f7000fedbdf4300010000d9338c829a0495172a532b22b65a580287f9b3a3ac66db9abe4c5bb387390069f211451b43321e87844801e688d442c9c694ded581a0cefe45f526d948", @ANYRES32=0x0, @ANYBLOB="20ba01006f1000007400128009000100766c616e00000000640002800600010004000000580004800c00010001800000020000000c000100fcffffff050000000c00010000020000040000000c00010001000080a97500000c00010003000000080000000c00010010000000000000000c000100030000000600000008000500", @ANYRES32=r1, @ANYBLOB], 0x9c}}, 0x8008006) 52.074795267s ago: executing program 3 (id=630): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c0000000206010800000000000000000200000814000780080012400000000505001500090000000500010006000000050005000a00000005000400000000000900020073797a300000000010000300686173683a69702c6d6163"], 0x5c}, 0x1, 0x0, 0x0, 0xc0d1}, 0x8800) 52.071417424s ago: executing program 3 (id=631): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f00000001c0)={{0x1000, 0x4, 0xffed, 0xa001}, 'syz0\x00', 0xfffffffd}) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x2f) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000000)={0xa4, 0x0, 0x1}) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000280)={0x0, 0x0}) ioctl(r3, 0x4040aea0, &(0x7f0000000100)="00045f3b5b77422d4c000000000000000000000010") ioctl$KVM_RUN(r3, 0xae80, 0x0) 52.048366681s ago: executing program 3 (id=632): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x2, 0x12) r1 = semget(0x1, 0x2, 0xd9) mount$nfs4(0x0, &(0x7f00000019c0)='.\x00', &(0x7f0000001a00), 0x10080, &(0x7f0000001a80)=ANY=[@ANYBLOB='noacl']) syz_emit_ethernet(0x36, &(0x7f0000000700)={@multicast, @random="dbc326dc9c69", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x1, 0x2, 0x0, @rand_addr=0x1010164, @loopback}, "2200354f0000000104000001e1010203c0a80101"}}}}, 0x0) semop(r1, &(0x7f0000000000)=[{0x3, 0x1002, 0x1000}, {0x2, 0xf, 0x800}, {0x1, 0x2f}, {0x3, 0x3, 0x800}, {0x4, 0xbbaa, 0x1800}, {0x1, 0xb, 0x1800}, {0x2, 0x2}], 0x7) 52.003857019s ago: executing program 3 (id=633): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x20008044}, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x101) write(r0, &(0x7f0000000000)='3', 0x4e) mount$afs(0x0, 0x0, &(0x7f00000001c0), 0x1, &(0x7f0000000580)=ANY=[]) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) 51.950489855s ago: executing program 3 (id=634): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x40) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x5, @remote}, {0xa, 0x0, 0x0, @local, 0x2}, r3, 0x2}}, 0x48) (async) close(0x3) (async) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000200)="0f72f7a08fc878c2c30df20f79dfb9800000c00f3235010000000f3026f30f0966baa100b009ee650f2005b8010000000f01d966b8ae008ec8f264660f20a3"}], 0x1, 0x73, 0x0, 0xfffffffffffffe01) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) r5 = openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x35c, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) (async) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) bind$can_j1939(r6, &(0x7f0000000140)={0x1d, r7, 0x102030405060708, {0x0, 0x1, 0x4}, 0x2}, 0x54) (async) connect$can_j1939(r6, &(0x7f0000000180)={0x1d, r7, 0x0, {0x0, 0xee}, 0xff}, 0x18) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async, rerun: 32) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async, rerun: 32) sendmsg$NL80211_CMD_REGISTER_BEACONS(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="010026", @ANYBLOB="0c009900050020005d000000"], 0x30}, 0x1, 0x0, 0x0, 0x20044041}, 0x20008090) (async, rerun: 32) sendmsg$NL80211_CMD_REGISTER_BEACONS(r8, &(0x7f0000003900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8c4}, 0x2000c010) (rerun: 32) preadv(r5, &(0x7f0000000080), 0x0, 0x2, 0x5) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x400ad80, &(0x7f00000000c0)={0xa, 0x4e23, 0x5b3, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, 0x1c) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$can_j1939(0x1d, 0x2, 0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) (rerun: 32) bind$can_j1939(r9, &(0x7f0000000480)={0x1d, r10, 0x0, {0x2, 0xf0, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r9, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r9, &(0x7f00000002c0)=[{{0x0, 0xfffffffffffffd0f, &(0x7f0000000700)=[{&(0x7f0000000540)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041) 38.521896623s ago: executing program 33 (id=615): syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) sendfile(r0, r0, 0x0, 0x400000007ff) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) 38.027122497s ago: executing program 34 (id=625): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000980)=@ethtool_per_queue_op={0x4b, 0xe, [0x81, 0x9, 0x3, 0x0, 0x10000, 0x6, 0x800, 0x6, 0x5, 0x2, 0x5, 0x7, 0x2, 0xfff, 0x81, 0x33, 0x9, 0xffffff7f, 0x3c4, 0x2, 0x1000, 0x80000000, 0x8, 0x5, 0x7, 0x3, 0x7, 0x200, 0x5, 0xffffffff, 0x7f, 0x9, 0xff, 0x125d829d, 0x0, 0x7, 0x8c5c, 0x4, 0xe, 0x4, 0x4, 0xfffff231, 0x7fffffff, 0x9, 0x7fffffff, 0x3, 0xffffffff, 0x8001, 0x6, 0x6, 0x2, 0x8, 0x7, 0xffff8001, 0xb, 0x5, 0x1, 0xff, 0x6, 0x401, 0x8, 0x86, 0x24000, 0x75a, 0x4, 0x6, 0x0, 0x0, 0x0, 0xc25f, 0xfffffff8, 0x81, 0xd, 0x5, 0x100, 0x7, 0x0, 0x5, 0x4d, 0xfffffc01, 0x9, 0xc7, 0x7f, 0x1, 0x1, 0x3, 0x3, 0x4, 0xd7f, 0x6, 0x8001, 0x7fffffff, 0x1, 0x3, 0xffffff81, 0xe2, 0x80, 0x5a, 0x5, 0x9, 0x200, 0x7, 0x5, 0x4, 0x7, 0x1, 0x6, 0x10001, 0x8, 0x1, 0xc, 0x80000000, 0x1, 0xf, 0x0, 0x3f1, 0x1, 0x3, 0x101, 0x9, 0x8a, 0x3, 0xb, 0x5, 0x96, 0x7fb, 0x3, 0x3]}}) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x24, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x44040080) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x85) (async, rerun: 64) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) (async, rerun: 32) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/firmware/acpi/tables/NFIT\x00', 0x0, 0x0) (rerun: 32) read(r1, &(0x7f0000000140), 0x100) (async) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) stat(&(0x7f0000000380)='./sys/firmware/acpi/tables/NFIT\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETQUOTA(0xffffffff80000702, &(0x7f0000000200)=@nbd={'/dev/nbd', 0x0}, r2, &(0x7f0000000480)) (async, rerun: 32) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 32) chdir(&(0x7f0000000140)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000005c0)={'#! ', '', [{}], 0xa, "9bbd22564dc64fd036ed16bad17f090c61321e2fd34b3539e00f514a50d95f5fc0f1c1e733f9c429f39853d3d8ae48ac94b728549c6c32521e5bb012ce1994f5aa912c0000000000000000"}, 0x50) (async) r4 = dup3(r3, r3, 0x80000) fcntl$setflags(r4, 0x2, 0x1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0xfffffffb) (async) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001114d3fd27bd7000fcdbdf2508004b00130000000800030003000000080001"], 0x38}, 0x1, 0x0, 0x0, 0x48810}, 0x4000) (async, rerun: 32) socket$alg(0x26, 0x5, 0x0) (rerun: 32) r6 = syz_io_uring_setup(0x3aeb, &(0x7f0000000540)={0x0, 0x69ee, 0x8, 0x5, 0x35}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r6, 0xfffffffd, 0x1, 0x1, 0x0, 0x37) (async) mount$tmpfs(0x0, &(0x7f0000000540)='./sys\x00', &(0x7f0000000000), 0x0, &(0x7f0000000640)=ANY=[]) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x11, r3, 0x0) (async) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f00000003c0)={0x10, 0xfffffffffffffffd, 0x6, 0x6}) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x7fda8000) (rerun: 64) 36.710280849s ago: executing program 35 (id=634): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x40) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x5, @remote}, {0xa, 0x0, 0x0, @local, 0x2}, r3, 0x2}}, 0x48) (async) close(0x3) (async) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000200)="0f72f7a08fc878c2c30df20f79dfb9800000c00f3235010000000f3026f30f0966baa100b009ee650f2005b8010000000f01d966b8ae008ec8f264660f20a3"}], 0x1, 0x73, 0x0, 0xfffffffffffffe01) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) r5 = openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x35c, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) (async) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) bind$can_j1939(r6, &(0x7f0000000140)={0x1d, r7, 0x102030405060708, {0x0, 0x1, 0x4}, 0x2}, 0x54) (async) connect$can_j1939(r6, &(0x7f0000000180)={0x1d, r7, 0x0, {0x0, 0xee}, 0xff}, 0x18) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async, rerun: 32) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async, rerun: 32) sendmsg$NL80211_CMD_REGISTER_BEACONS(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="010026", @ANYBLOB="0c009900050020005d000000"], 0x30}, 0x1, 0x0, 0x0, 0x20044041}, 0x20008090) (async, rerun: 32) sendmsg$NL80211_CMD_REGISTER_BEACONS(r8, &(0x7f0000003900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8c4}, 0x2000c010) (rerun: 32) preadv(r5, &(0x7f0000000080), 0x0, 0x2, 0x5) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x400ad80, &(0x7f00000000c0)={0xa, 0x4e23, 0x5b3, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, 0x1c) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$can_j1939(0x1d, 0x2, 0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) (rerun: 32) bind$can_j1939(r9, &(0x7f0000000480)={0x1d, r10, 0x0, {0x2, 0xf0, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r9, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r9, &(0x7f00000002c0)=[{{0x0, 0xfffffffffffffd0f, &(0x7f0000000700)=[{&(0x7f0000000540)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041) 6.10929053s ago: executing program 5 (id=1126): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) getcwd(&(0x7f0000000200)=""/197, 0xc5) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f00000000c0)=0x7, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x58d002, 0x15) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000000)={0x1, 0x2, {0x4, 0x39, 0x11, 0xd, 0x4, 0xe80, 0x5, 0x40, 0x1}}) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000100)=0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='270', 0x3) syz_io_uring_setup(0x2, &(0x7f0000000000)={0x0, 0x0, 0x20, 0x3}, 0x0, 0x0, 0x0) socket(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0x6b1d, &(0x7f0000000140)={0x0, 0x1b60, 0x400, 0x0, 0x1a9}, &(0x7f0000000100), 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)=ANY=[@ANYBLOB="140000002100010326bd7078fadbdf2505"], 0x14}}, 0x0) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x0, 0x3}, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000003000)='./dir0\x00', 0x1ff) mount(&(0x7f0000003100)=@filename='127.0.0.1:6789:/\x00', &(0x7f0000003000)='./dir0\x00', &(0x7f0000003200)='ceph\x00', 0x0, 0x0) 5.939694271s ago: executing program 5 (id=1128): r0 = syz_io_uring_setup(0xd3a, &(0x7f0000000080)={0x0, 0x2, 0x3010, 0x3, 0x3}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit$UBLK(r1, r2, r3, &(0x7f00000014c0)=@ublk_io_fetch_sqe={0x2e, 0x2, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, '\x00', {0x1, 0xd25, 0x0, 0x0}}) r4 = eventfd2(0x1, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000200)=r4, 0x1) io_uring_enter(r0, 0x6516, 0x6d93, 0x8, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) write(r5, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00 ', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x5, 0x80, 0x1000}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000000000140640fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e224e22e2286ccf6e48e8b0e1"], 0x0) 5.878226295s ago: executing program 5 (id=1129): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000007980), 0xffffffffffffffff) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) (async) userfaultfd(0x80001) (async) socket(0x1e, 0x805, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r1, r4, &(0x7f0000000380)={0x0, 0xd82b, 0x8, 0x1, 0x28f, 0x0, r6}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3f8c, 0x2000, 0x0, 0x305, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcf98, 0x80, 0x1, 0x1cd, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6eb0, 0x8000, 0x1, 0x34d, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xff36, 0x0, 0x2, 0x167, 0x0, r6}}], 0x4, &(0x7f0000001d00)={0x2e, 0x59, 0x0, r1, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, '\x00', {0x1, 0xf70, 0x0, &(0x7f0000000d00)=@buf_max_buf="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"}}, &(0x7f0000001d80)) syz_ublk_setup_queues(r7, r4, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000005, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x25c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x8000, 0x1, 0x90}}], 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) (async) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r8, &(0x7f0000000300)="70f65f6573742f5f76656e7431202e2f66696c65303a30", 0x17) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r8, 0x7a8, &(0x7f0000000280)={{@any, 0x2}, @host, 0x5, 0x6, 0x17ac, 0x0, 0x2, 0x3, 0x5}) (async) setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x41, &(0x7f00000001c0)=0x59ca, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) (async) setsockopt$CAN_RAW_FD_FRAMES(r10, 0x65, 0x5, &(0x7f0000000180)=0x1, 0x4) (async) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000001c0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r12, 0x2000000, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sendmsg$can_raw(r10, &(0x7f0000000340)={&(0x7f0000000080)={0x1d, r11}, 0x10, &(0x7f0000000000)={&(0x7f0000000100)=@canfd={{0x2, 0x0, 0x1}, 0x40, 0x2, 0x0, 0x0, "559c4157df5c5fc0a343bdfd992c89ec7c178d3d401a0657e948c1e50e9f29438946924347e8c9a7f1d228cf082056214904d6e39350c2d1bf5443d0ef0296b0"}, 0x48}, 0x1, 0x0, 0x0, 0x4000051}, 0x811) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(r9, &(0x7f00000082c0)={0x0, 0x0, &(0x7f0000008280)={&(0x7f0000000200)={0x74, r0, 0x526, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4006801}, 0x24000814) 5.749328111s ago: executing program 5 (id=1134): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000000088}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\', @ANYBLOB="01"], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf8d77", 0x8, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x300) 5.580250982s ago: executing program 5 (id=1136): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x20008044}, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x101) write(r0, &(0x7f0000000000)='3', 0x4e) mount$afs(0x0, &(0x7f0000000180)='./cgroup\x00', &(0x7f00000001c0), 0x1, &(0x7f0000000580)=ANY=[]) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) 5.51695123s ago: executing program 5 (id=1138): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x20008044}, 0x0) mount(0x0, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', &(0x7f0000000140)='squashfs\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x101) write(r0, &(0x7f0000000240)="80", 0x1) splice(r0, &(0x7f0000000280)=0x2, r0, &(0x7f0000000300)=0x8, 0x0, 0x4) mount$afs(0x0, &(0x7f0000000180)='./cgroup\x00', &(0x7f00000001c0), 0x1, &(0x7f0000000580)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000880)={0x18, 0x5e, 0xe25, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}]}, 0x18}], 0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) 3.239370165s ago: executing program 6 (id=1176): r0 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040), 0x106, 0x9}}, 0x20) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000200)={0x0, [[0x6, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x3, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x3], [0xffffffff, 0xffffffff, 0xffffffff, 0x20000001, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x0, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0xfd, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4244, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x0, 0x8, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000b00)='./sys\x00', &(0x7f0000000b10)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/class/iscsi_transport/iser/handle\x00', 0x0, 0x0) read(r2, &(0x7f0000000700), 0x64) ppoll(&(0x7f0000000000)=[{r1, 0x1000}], 0x1, 0x0, 0x0, 0x0) 2.368993772s ago: executing program 6 (id=1184): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000207, 0x0, 0x0, 0x1d, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000200f97a640d35a7386700", "28094cf00000000000004ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac000000000000000000080000000000000000001900", "90be8b1c55080021000c147d03daa0f4bd00", [0x7f, 0x1009]}}) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000340)) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0xfc, 0x1, 0x7fff8000}]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[], 0x0, 0x4d, 0x0, 0x0, 0x4}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e000000000000000800000002"], 0x48) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/4\x00') read$FUSE(r4, &(0x7f0000000a00)={0x2020}, 0x2020) close_range(r3, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000008009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000680)=ANY=[@ANYRES32=0x1, @ANYRES32=r5, @ANYBLOB='/\x00\x00\x00\b\x00\x00\x00', @ANYRES32, @ANYBLOB="ceb7700559fc9c9e378cb38bd5823087c2d65905bcbdc0e2de135d8290ba8c7bd2361d7c672926cfc3a7975a02cf12f66ca882380b9e2407ad806ba7d0a828ead069d64c408b3a17b990c0cdb8d592ef510865831a9c57a4986f2344b881a4d7f4fb5f4959ed9700", @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @dev={0xac, 0x14, 0x14, 0x45}, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x8001}, 0x3c) r6 = syz_open_procfs(0x0, &(0x7f0000002140)='net/ip_tables_targets\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000400000791090000000000069010a000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @flow_dissector}, 0x94) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r7 = io_uring_setup(0xaae, &(0x7f0000000080)={0x0, 0xdf4, 0x80, 0x7, 0x2e8}) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r8 = openat(r6, &(0x7f00000000c0)='./dev/sda\x00', 0x101042, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x40000000) io_uring_register$IORING_REGISTER_FILES_UPDATE(r8, 0x6, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000100)=[r1]}, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000e77c00000000000000000500000a140000001100010000000000000000000200000a"], 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000002200)=ANY=[], 0x50) 2.259824831s ago: executing program 6 (id=1187): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d2) mkdir(&(0x7f00000001c0)='./file1\x00', 0xb) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') name_to_handle_at(r0, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x400) r1 = open(&(0x7f0000000040)='./file1\x00', 0x808400, 0x43) mount$overlay(0x0, &(0x7f0000000180)='./bus/file0\x00', 0x0, 0x4, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(r1, &(0x7f0000000340)='./file0\x00', 0xf3) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x481, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_TDX_CAPABILITIES(r3, 0xc008aeba, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x412080, 0x22) openat(r4, &(0x7f0000000040)='./file0\x00', 0x1a1803, 0x10) 2.119854969s ago: executing program 6 (id=1190): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x2a05004, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0xa14000, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') lsetxattr$security_ima(&(0x7f0000000300)='./file0\x00', &(0x7f0000000080), &(0x7f0000000200)=ANY=[@ANYBLOB="045ccda61c8d44615a00"/23], 0xa, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x12c) write(r0, &(0x7f0000000000)='270', 0x3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xd0, &(0x7f00000002c0)=""/208, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x1) r1 = socket(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0xcd, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000490000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000008c0)="89", 0x0, 0x1000000}, 0x32) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000180), 0x800) openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) 1.989328534s ago: executing program 6 (id=1191): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x3f, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x3c}}, 0x0) 1.630067888s ago: executing program 6 (id=1193): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) dup(r1) r2 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="91f8a984851bdef38491bbc4173c3c6f357d028feff84ab17c417789f9fc9b8572c98172b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d508891e58a3f117fc203f787901de99a6a1b851ff5c85244beacba25d854577d68ca555e88fc249340ab9bdd8680abbbde02b0307ef45cb7ffffffff984c7bbb7bb3c689ef8daa63ca62e496be091cc1c7d4f371acaaec43337aee38542c35292cf3fdbfc45af8630174371535dbab0b2ec6403658ab3b48a93093de50c743a4f987cc433b546f194f00ba2d1cb675b44bdec6b6", 0x148}], 0x1}}], 0x1, 0x2090) sendmmsg(r0, &(0x7f0000008d80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000007c0)="c8b7df938dc9c0fcc8a7e84a57fa9059b9cfa4132462f9c45b583e8ce1f19a82364b01b4bc3436dcea3f3380b3269f2c986b7f8205fa231eac99a9de63cd1a85c820fc43c24662a22f18183bb042a742ac921efe546daedbd31cd4b5cda70186dd7ec449169ea58ebc3f3456774e", 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000003300)=[{&(0x7f00000000c0)="88a69f5139292fe55d24310330d349370620dd2737877e864a0d6d86ec395b", 0x1f}, {&(0x7f0000002240)="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", 0x27e}], 0x2}}], 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000044) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r4, 0x0, 0xd, 0x0, 0x0) write(r3, &(0x7f0000000000)='3', 0x4e) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) 1.57528193s ago: executing program 36 (id=1193): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) dup(r1) r2 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="91f8a984851bdef38491bbc4173c3c6f357d028feff84ab17c417789f9fc9b8572c98172b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d508891e58a3f117fc203f787901de99a6a1b851ff5c85244beacba25d854577d68ca555e88fc249340ab9bdd8680abbbde02b0307ef45cb7ffffffff984c7bbb7bb3c689ef8daa63ca62e496be091cc1c7d4f371acaaec43337aee38542c35292cf3fdbfc45af8630174371535dbab0b2ec6403658ab3b48a93093de50c743a4f987cc433b546f194f00ba2d1cb675b44bdec6b6", 0x148}], 0x1}}], 0x1, 0x2090) sendmmsg(r0, &(0x7f0000008d80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000007c0)="c8b7df938dc9c0fcc8a7e84a57fa9059b9cfa4132462f9c45b583e8ce1f19a82364b01b4bc3436dcea3f3380b3269f2c986b7f8205fa231eac99a9de63cd1a85c820fc43c24662a22f18183bb042a742ac921efe546daedbd31cd4b5cda70186dd7ec449169ea58ebc3f3456774e", 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000003300)=[{&(0x7f00000000c0)="88a69f5139292fe55d24310330d349370620dd2737877e864a0d6d86ec395b", 0x1f}, {&(0x7f0000002240)="321f349be984b668f593bf16c2f60e4b01783ed59dcd6a4105711458d2cf86696caad21a4387232f7ae8dbda478307058ab2ffec546f49907b7d4c54fe1fa76d99f5c80956c6769c810b895a00ab69f114794c1e3ee671204a47d3153305395d1e523e504927505590c078bc1a7d6e82b332bf141f662f26ad9ba4c11b87d5abbc3340ef989b3a8e666f8f82ca82aab6d33c953938b30b61c91cbc926b2a58d67d8198e458ed8f10ad8975356af9dab25f718147ae2a3e81187adaa46d247e3a8c437053bb01b855c6fb0ee0e7024fa61bd2af5aa1d918fcc93b3ffadf3a982efefa3b47727caafee6246ee147d676a5e2879e351f5ac51e6b62aaedb5cd03d16cb4f8bfaac498397b3dc22c063fbd87b2912647948430488fb45ca42096e08a6760c831b06d4582b7440f9123f3711a87b71a4a3a4614b2bf8dcdb84d985777893889120fb820ffe525acbf530869895f2caf84922e5a8aee6a0f887145b0d961bfa9c8f71788ccb8d2ee73676c2f68427b776f537afb9a8c97e055e35204ec09fd3f2c9a0b9f8b33ef0343ef22c99a7fe463550d074b626c1173f34fc49f1431460881ccd35b679f186dd10ac84e2f9aa370443a75938812c1b1888e57b0a79001965832e7cd8c85865081a16938fc81e72c26e686078692dad56ca4a2371a6b370268da843aa7ba9e498a7ae8a6317907b2d5114acf3d35522e4c8cb4e014c7d3f5f60c57b1293ec9956bed6abb25b5e2f90cf3eba7adc060b00dcb50480282b649e9c601bf0a400290a337e46af9be19d489e8693750a0be63313307b51db7726d4c6643f6f8ab22ce41310043728ffd414567f6e514c5e88b5614195b9ba893c8980949974f1eae80d27f7f90b251a094469561598e3dcd2bc143ed", 0x27e}], 0x2}}], 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000044) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r4, 0x0, 0xd, 0x0, 0x0) write(r3, &(0x7f0000000000)='3', 0x4e) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) 1.329268041s ago: executing program 0 (id=1195): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, 0x3, 0x6, 0x5, 0x0, 0xffffffff, {0x5, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40855}, 0x40000) 1.247336306s ago: executing program 7 (id=1196): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$rds(0x15, 0x5, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x20182, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xb337856b502c60f4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x24004031) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb25210014001f000300", @ANYRES32=r5, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) 1.247162448s ago: executing program 0 (id=1197): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty=0xa7ff}, 0x10) 1.241874627s ago: executing program 0 (id=1198): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000380)=0x8) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYRESOCT=r3], 0x98}, 0x1, 0x0, 0x0, 0x240040d0}, 0x40) sendto$inet(r2, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0xffffffb6, 0x0, 0x0, 0x4d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x100) ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x8000000, 0xd, 0x10001, 0xfffffffe, 0x0, [{0x2, 0x2, 0x86, '\x00', 0x8}, {0xd, 0x8, 0x40, '\x00', 0xb}, {0xff, 0x7f, 0x9, '\x00', 0x67}, {0x0, 0x5, 0xd4, '\x00', 0x9}, {0x7, 0x9, 0xe, '\x00', 0xfb}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x2, 0xd5, 0xf1, '\x00', 0x7b}, {0x3, 0x4, 0xc}, {0x7c, 0xd, 0xb, '\x00', 0xb}, {0xd5, 0xd, 0x8, '\x00', 0x6}, {0x2, 0x28, 0x80, '\x00', 0x5}, {0xff, 0x5, 0xfe, '\x00', 0xff}, {0xfe, 0xa, 0x26, '\x00', 0x6}, {0xcf, 0x8, 0x1, '\x00', 0x6}, {0xf, 0x4, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x7, '\x00', 0xb}, {0x10, 0x6, 0x2, '\x00', 0x8}, {0x5, 0x9, 0x0, '\x00', 0xc}, {0x3, 0xe1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0x10, '\x00', 0x1}, {0x21, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4}]}}) ioctl$KVM_GET_MP_STATE(r8, 0x8004ae98, &(0x7f0000000180)) move_pages(0x0, 0x2, &(0x7f00000017c0)=[&(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil], &(0x7f00000001c0), &(0x7f0000001840), 0x2) r9 = openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) ioctl$DVD_READ_STRUCT(r9, 0x5390, &(0x7f0000000f00)=@manufact={0x4, 0x3, 0x800, "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"}) io_uring_enter(r5, 0x48fe, 0x9603, 0x5a, 0x0, 0x0) listen(r2, 0xda90) 1.149763998s ago: executing program 7 (id=1199): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r3], 0x50}}, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000240)) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r1, 0x4068aea3, &(0x7f0000000080)={0xc7, 0x0, 0x1}) r5 = syz_io_uring_complete(0x0, 0x0) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x2000}, 0x4) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x581, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2002, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 914.041899ms ago: executing program 7 (id=1200): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x8282, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@can_newroute={0x2c, 0x18, 0x1, 0x0, 0x25dfdbfe, {}, [@CGW_MOD_OR={0x15, 0x2, {{{0x2, 0x1, 0x1}, 0x2, 0x7, 0x0, 0x0, "b90316a140a9f4f2"}, 0x7}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x64044050}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fdf000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000040)="c4e17d51ffb9800000c00f3235000100000f30b8010000000f01c10f881dd1154364f72a0f01cbf23e6467260f300fc7b2460000002e660f38816d09b9800000c00f3235004000000f30", 0x4a}], 0x1, 0x9f6a364b3fac2a63, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 689.641288ms ago: executing program 7 (id=1201): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0x44b, 0x70bd28, 0x600, {0x7a, 0x0, 0x1200, 0x0, 0x4002, 0x1400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x3, 0x21}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) 600.265865ms ago: executing program 7 (id=1202): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)={0x20, r3, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000815}, 0x850) (fail_nth: 10) 320.404683ms ago: executing program 0 (id=1203): setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000003100)={0x0, 0x0, &(0x7f00000030c0)={&(0x7f0000000240)={0x2c, r0, 0x1, 0x70bd23, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0x4}, @NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c054}, 0x0) 88.79578ms ago: executing program 7 (id=1204): io_setup(0x6, &(0x7f00000003c0)=0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) io_pgetevents(r0, 0x6, 0x9, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000005c0), &(0x7f0000000680)={&(0x7f0000000600)={[0x10000]}, 0x8}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000300), 0x3, r3}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=@bridge_getvlan={0x20, 0x72, 0x301, 0x4000001, 0x4, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0xf00, 0x0, 0x80}, 0x4000810) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000580)={0x600, 0x1, &(0x7f0000000180)=[r3], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r5, r4, r5], &(0x7f00000003c0), 0x0, 0x2}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r9 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r9, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x7}}, 0x10) r10 = socket$tipc(0x1e, 0x5, 0x0) r11 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r11, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r11, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10) bind$tipc(r10, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x2, {{0x42, 0x80000004}}}, 0x10) r12 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r12, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) close_range(r8, 0xffffffffffffffff, 0x0) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002abd7000fddbff250c000000200005801400028008000300840f000008000402ff0700000800010075647000"], 0x38}, 0x1, 0x0, 0x0, 0x24000881}, 0x2404c804) 88.303632ms ago: executing program 0 (id=1205): openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfe1b) lstat(&(0x7f0000000180)='./dev/mapper/control\x00', &(0x7f00000001c0)) ioctl(0xffffffffffffffff, 0x4c01, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, 0x0) read$FUSE(r0, &(0x7f0000000280)={0x2020}, 0x2020) write(0xffffffffffffffff, &(0x7f0000000138)="0000000000000000008000000000000000000000000000007468696e2d706f6f6c00000000000000373a3020373a31203132382030", 0x35) ioctl(r0, 0xc138fd09, &(0x7f0000000000)="0400000000000000000000006e01000038010000010000000000000000000000000000000000000000000000000000006d79706f") 0s ago: executing program 0 (id=1206): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1d5) r2 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) copy_file_range(r2, 0x0, r2, 0x0, 0x4, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd7000fddbdf251900000008000300", @ANYRES32=r4, @ANYBLOB="05001c"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4814) kernel console output (not intermixed with test programs): etdevsim1 [ 108.274512][ T8156] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 108.288367][ T8156] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 108.292747][ T8156] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 108.303446][ T8156] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 108.414597][ T8073] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.509487][ T8156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.526113][ T8156] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.534253][ T6540] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.534331][ T6540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.541232][ T6573] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.541276][ T6573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.705292][ T8103] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.740037][ T8073] veth0_vlan: entered promiscuous mode [ 108.753579][ T8073] veth1_vlan: entered promiscuous mode [ 108.781060][ T8073] veth0_macvtap: entered promiscuous mode [ 108.784723][ T8073] veth1_macvtap: entered promiscuous mode [ 108.793865][ T8073] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.800012][ T8073] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.818334][ T5808] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.818663][ T5808] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.818696][ T5808] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.818720][ T5808] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.902390][ T6573] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.902404][ T6573] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.933620][ T6540] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.933637][ T6540] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.946651][ T8156] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.986741][ T8103] veth0_vlan: entered promiscuous mode [ 108.992254][ T8103] veth1_vlan: entered promiscuous mode [ 109.012203][ T8103] veth0_macvtap: entered promiscuous mode [ 109.015002][ T8103] veth1_macvtap: entered promiscuous mode [ 109.036748][ T8103] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.048753][ T5733] Bluetooth: hci0: command tx timeout [ 109.053552][ T8103] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.089722][ T5808] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.090325][ T5808] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.090576][ T5808] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.090596][ T5808] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.178796][ T6574] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.178817][ T6574] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.207900][ T5733] Bluetooth: hci4: command tx timeout [ 109.220787][ T8156] veth0_vlan: entered promiscuous mode [ 109.231480][ T6578] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.231498][ T6578] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.235792][ T8156] veth1_vlan: entered promiscuous mode [ 109.289733][ T8156] veth0_macvtap: entered promiscuous mode [ 109.297055][ T8156] veth1_macvtap: entered promiscuous mode [ 109.324527][ T8156] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.339106][ T8156] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.473011][ T8338] FAULT_INJECTION: forcing a failure. [ 109.473011][ T8338] name failslab, interval 1, probability 0, space 0, times 0 [ 109.473055][ T8338] CPU: 3 UID: 0 PID: 8338 Comm: syz.6.733 Not tainted syzkaller #0 PREEMPT(full) [ 109.473068][ T8338] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 109.473075][ T8338] Call Trace: [ 109.473079][ T8338] [ 109.473084][ T8338] dump_stack_lvl+0x100/0x190 [ 109.473104][ T8338] should_fail_ex.cold+0x5/0xa [ 109.473120][ T8338] should_failslab+0xc2/0x120 [ 109.473136][ T8338] __kmalloc_cache_noprof+0x91/0x6d0 [ 109.473148][ T8338] ? register_netdevice+0x50c/0x25a0 [ 109.473169][ T8338] register_netdevice+0x50c/0x25a0 [ 109.473187][ T8338] ? __pfx_validate_linkmsg+0x10/0x10 [ 109.473204][ T8338] ? __pfx_register_netdevice+0x10/0x10 [ 109.473225][ T8338] br_dev_newlink+0x6a/0x170 [ 109.473241][ T8338] ? __pfx_br_dev_newlink+0x10/0x10 [ 109.473255][ T8338] rtnl_newlink+0x1697/0x2620 [ 109.473291][ T8338] ? __pfx_rtnl_newlink+0x10/0x10 [ 109.473307][ T8338] ? avc_has_perm_noaudit+0x56/0x470 [ 109.473325][ T8338] ? find_held_lock+0x2b/0x80 [ 109.473342][ T8338] ? avc_has_perm_noaudit+0x11e/0x470 [ 109.473359][ T8338] ? avc_has_perm_noaudit+0x11e/0x470 [ 109.473390][ T8338] ? lock_acquire+0x1d1/0x380 [ 109.473402][ T8338] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 109.473412][ T8338] ? find_held_lock+0x2b/0x80 [ 109.473428][ T8338] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 109.473438][ T8338] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 109.473449][ T8338] ? __pfx_rtnl_newlink+0x10/0x10 [ 109.473466][ T8338] rtnetlink_rcv_msg+0x95e/0xe90 [ 109.473477][ T8338] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 109.473492][ T8338] ? ref_tracker_free+0x37e/0x6c0 [ 109.473510][ T8338] netlink_rcv_skb+0x159/0x420 [ 109.473526][ T8338] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 109.473537][ T8338] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 109.473557][ T8338] ? netlink_deliver_tap+0x1ae/0xcc0 [ 109.473574][ T8338] netlink_unicast+0x585/0x850 [ 109.473591][ T8338] ? __pfx_netlink_unicast+0x10/0x10 [ 109.473609][ T8338] netlink_sendmsg+0x8b0/0xda0 [ 109.473627][ T8338] ? __pfx_netlink_sendmsg+0x10/0x10 [ 109.473643][ T8338] ? selinux_socket_sendmsg+0x198/0x2f0 [ 109.473659][ T8338] ____sys_sendmsg+0xa4d/0xbe0 [ 109.473675][ T8338] ? __pfx_netlink_sendmsg+0x10/0x10 [ 109.473691][ T8338] ? __pfx_____sys_sendmsg+0x10/0x10 [ 109.473706][ T8338] ? lock_acquire+0x1d1/0x380 [ 109.473717][ T8338] ? get_pid_task+0x2a/0x250 [ 109.473734][ T8338] ___sys_sendmsg+0x190/0x1e0 [ 109.473747][ T8338] ? __pfx____sys_sendmsg+0x10/0x10 [ 109.473759][ T8338] ? get_pid_task+0x106/0x250 [ 109.473780][ T8338] ? find_held_lock+0x2b/0x80 [ 109.473805][ T8338] __sys_sendmsg+0x160/0x210 [ 109.473821][ T8338] ? __pfx___sys_sendmsg+0x10/0x10 [ 109.473845][ T8338] do_syscall_64+0x123/0x790 [ 109.473859][ T8338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.473871][ T8338] RIP: 0033:0x7f1e4d79e159 [ 109.473880][ T8338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.473891][ T8338] RSP: 002b:00007f1e4e5e3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 109.473902][ T8338] RAX: ffffffffffffffda RBX: 00007f1e4da25fa0 RCX: 00007f1e4d79e159 [ 109.473909][ T8338] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 109.473916][ T8338] RBP: 00007f1e4e5e3090 R08: 0000000000000000 R09: 0000000000000000 [ 109.473922][ T8338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 109.473929][ T8338] R13: 00007f1e4da26038 R14: 00007f1e4da25fa0 R15: 00007ffef73daf78 [ 109.473944][ T8338] [ 109.477630][ T6571] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.477648][ T6571] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.505083][ T7659] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.505119][ T7659] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.505146][ T7659] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.508073][ T7659] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.553052][ T6573] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.553066][ T6573] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.558272][ T8348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.558533][ T8348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.558573][ T8350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.558750][ T8350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.559248][ T8347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.559448][ T8347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.559470][ T8350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.559642][ T8350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.612745][ T8354] FAULT_INJECTION: forcing a failure. [ 109.612745][ T8354] name failslab, interval 1, probability 0, space 0, times 0 [ 109.612775][ T8354] CPU: 3 UID: 0 PID: 8354 Comm: syz.5.736 Not tainted syzkaller #0 PREEMPT(full) [ 109.612798][ T8354] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 109.612812][ T8354] Call Trace: [ 109.612819][ T8354] [ 109.612827][ T8354] dump_stack_lvl+0x100/0x190 [ 109.612861][ T8354] should_fail_ex.cold+0x5/0xa [ 109.612888][ T8354] should_failslab+0xc2/0x120 [ 109.612933][ T8354] kmem_cache_alloc_noprof+0x92/0x6a0 [ 109.612957][ T8354] ? __proc_create+0xc1/0x8f0 [ 109.612978][ T8354] ? __proc_create+0x247/0x8f0 [ 109.613004][ T8354] __proc_create+0x247/0x8f0 [ 109.613045][ T8354] ? __pfx___proc_create+0x10/0x10 [ 109.613070][ T8354] ? _raw_write_unlock+0x28/0x50 [ 109.613093][ T8354] ? proc_register+0x56d/0x910 [ 109.613118][ T8354] proc_create_reg+0x75/0x170 [ 109.613144][ T8354] proc_create_data+0x86/0x110 [ 109.613172][ T8354] ? __pfx_proc_create_data+0x10/0x10 [ 109.613196][ T8354] ? cache_register_net+0x137/0x5e0 [ 109.613224][ T8354] ? cache_register_net+0x137/0x5e0 [ 109.613257][ T8354] cache_register_net+0x2d6/0x5e0 [ 109.613286][ T8354] nfsd_export_init+0x16e/0x250 [ 109.613306][ T8354] ? __pfx_nfsd_net_init+0x10/0x10 [ 109.613331][ T8354] nfsd_net_init+0x69/0x480 [ 109.613361][ T8354] ? __pfx_nfsd_net_init+0x10/0x10 [ 109.613388][ T8354] ops_init+0x1e2/0x5f0 [ 109.613419][ T8354] setup_net+0x118/0x3a0 [ 109.613450][ T8354] ? __pfx_setup_net+0x10/0x10 [ 109.613487][ T8354] copy_net_ns+0x345/0x7a0 [ 109.613510][ T8354] create_new_namespaces+0x3ea/0xac0 [ 109.613540][ T8354] unshare_nsproxy_namespaces+0xf2/0x220 [ 109.613565][ T8354] ksys_unshare+0x4a2/0xa70 [ 109.613589][ T8354] ? __pfx_ksys_unshare+0x10/0x10 [ 109.613621][ T8354] __x64_sys_unshare+0x31/0x40 [ 109.613644][ T8354] do_syscall_64+0x123/0x790 [ 109.613670][ T8354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.613689][ T8354] RIP: 0033:0x7fb76379e159 [ 109.613707][ T8354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.613725][ T8354] RSP: 002b:00007fb76460c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 109.613747][ T8354] RAX: ffffffffffffffda RBX: 00007fb763a25fa0 RCX: 00007fb76379e159 [ 109.613760][ T8354] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 109.613770][ T8354] RBP: 00007fb76383506b R08: 0000000000000000 R09: 0000000000000000 [ 109.613784][ T8354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.613798][ T8354] R13: 00007fb763a26038 R14: 00007fb763a25fa0 R15: 00007ffdba635b88 [ 109.613826][ T8354] [ 109.767701][ T5733] Bluetooth: hci2: command tx timeout [ 109.807678][ T35] usb 11-1: new low-speed USB device number 2 using dummy_hcd [ 109.977561][ T35] usb 11-1: Invalid ep0 maxpacket: 16 [ 110.107879][ T35] usb 11-1: new low-speed USB device number 3 using dummy_hcd [ 110.277570][ T35] usb 11-1: Invalid ep0 maxpacket: 16 [ 110.277718][ T35] usb usb11-port1: attempt power cycle [ 110.489312][ T43] kauditd_printk_skb: 2 callbacks suppressed [ 110.489329][ T43] audit: type=1400 audit(1791171146.326:707): avc: denied { map } for pid=8377 comm="syz.7.743" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 110.541217][ T8383] netlink: 'syz.7.744': attribute type 34 has an invalid length. [ 110.541231][ T8383] netlink: 8 bytes leftover after parsing attributes in process `syz.7.744'. [ 110.564191][ T8383] bond1: option lacp_strict: invalid value (20) [ 110.565731][ T8383] bond1 (unregistering): Released all slaves [ 110.627504][ T35] usb 11-1: new low-speed USB device number 4 using dummy_hcd [ 110.647844][ T35] usb 11-1: Invalid ep0 maxpacket: 16 [ 110.650574][ T43] audit: type=1400 audit(1791171146.486:708): avc: denied { write } for pid=8385 comm="syz.7.745" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 110.650939][ T43] audit: type=1400 audit(1791171146.486:709): avc: denied { open } for pid=8385 comm="syz.7.745" path="/dev/ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 110.716808][ T43] audit: type=1400 audit(1791171146.546:710): avc: denied { ioctl } for pid=8385 comm="syz.7.745" path="/dev/ndctl0" dev="devtmpfs" ino=109 ioctlcmd=0x640a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 110.777501][ T35] usb 11-1: new low-speed USB device number 5 using dummy_hcd [ 110.798126][ T35] usb 11-1: Invalid ep0 maxpacket: 16 [ 110.798380][ T35] usb usb11-port1: unable to enumerate USB device [ 110.889364][ T8392] netlink: 16 bytes leftover after parsing attributes in process `syz.5.747'. [ 111.117950][ T5733] Bluetooth: hci0: command tx timeout [ 111.123536][ T8397] FAULT_INJECTION: forcing a failure. [ 111.123536][ T8397] name failslab, interval 1, probability 0, space 0, times 0 [ 111.123557][ T8397] CPU: 0 UID: 0 PID: 8397 Comm: syz.5.749 Not tainted syzkaller #0 PREEMPT(full) [ 111.123570][ T8397] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 111.123577][ T8397] Call Trace: [ 111.123581][ T8397] [ 111.123586][ T8397] dump_stack_lvl+0x100/0x190 [ 111.123619][ T8397] should_fail_ex.cold+0x5/0xa [ 111.123636][ T8397] should_failslab+0xc2/0x120 [ 111.123667][ T8397] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 111.123685][ T8397] ? sock_alloc_inode+0x26/0x2c0 [ 111.123701][ T8397] ? __pfx_sock_alloc_inode+0x10/0x10 [ 111.123714][ T8397] sock_alloc_inode+0x26/0x2c0 [ 111.123725][ T8397] ? __pfx_sock_alloc_inode+0x10/0x10 [ 111.123735][ T8397] alloc_inode+0x68/0x250 [ 111.123748][ T8397] sock_alloc+0x44/0x280 [ 111.123764][ T8397] ? security_socket_create+0x7f/0x250 [ 111.123778][ T8397] __sock_create+0xc2/0x860 [ 111.123795][ T8397] __sys_socket+0x14d/0x260 [ 111.123808][ T8397] ? __pfx___sys_socket+0x10/0x10 [ 111.123825][ T8397] __x64_sys_socket+0x72/0xb0 [ 111.123837][ T8397] ? lockdep_hardirqs_on+0x7d/0x110 [ 111.123855][ T8397] do_syscall_64+0x123/0x790 [ 111.123869][ T8397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.123881][ T8397] RIP: 0033:0x7fb76379e159 [ 111.123891][ T8397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.123902][ T8397] RSP: 002b:00007fb76460c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 111.123916][ T8397] RAX: ffffffffffffffda RBX: 00007fb763a25fa0 RCX: 00007fb76379e159 [ 111.123924][ T8397] RDX: 0000000000000106 RSI: 0000000000000001 RDI: 0000000000000002 [ 111.123931][ T8397] RBP: 00007fb76383506b R08: 0000000000000000 R09: 0000000000000000 [ 111.123938][ T8397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.123945][ T8397] R13: 00007fb763a26038 R14: 00007fb763a25fa0 R15: 00007ffdba635b88 [ 111.123961][ T8397] [ 111.123967][ T8397] socket: no more sockets [ 111.277608][ T5733] Bluetooth: hci4: command tx timeout [ 111.357544][ T10] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 111.507551][ T10] usb 10-1: Using ep0 maxpacket: 32 [ 111.508143][ T10] usb 10-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 111.509177][ T10] usb 10-1: config 0 has an invalid interface number: 119 but max is 0 [ 111.509194][ T10] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.509211][ T10] usb 10-1: config 0 has no interface number 0 [ 111.509235][ T10] usb 10-1: config 0 interface 119 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 111.511354][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.511373][ T10] usb 10-1: Product: syz [ 111.511384][ T10] usb 10-1: Manufacturer: syz [ 111.511397][ T10] usb 10-1: SerialNumber: syz [ 111.513751][ T10] usb 10-1: config 0 descriptor?? [ 111.519531][ T8399] bridge_slave_1: left allmulticast mode [ 111.519551][ T8399] bridge_slave_1: left promiscuous mode [ 111.519758][ T8399] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.528485][ T8399] bridge_slave_0: left allmulticast mode [ 111.528502][ T8399] bridge_slave_0: left promiscuous mode [ 111.528620][ T8399] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.538889][ T10] input: bcm5974 as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.119/input/input7 [ 111.721704][ T10] usb 10-1: USB disconnect, device number 2 [ 111.758548][ T8412] netlink: 'syz.0.753': attribute type 39 has an invalid length. [ 111.765276][ T8412] hsr_slave_0 (unregistering): left promiscuous mode [ 111.837482][ T5733] Bluetooth: hci2: command tx timeout [ 112.189001][ T43] audit: type=1400 audit(1791171148.026:711): avc: denied { mount } for pid=8423 comm="syz.0.758" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 112.190471][ T8424] fuse: fd is not a fuse device [ 112.273777][ T8431] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8431 comm=syz.5.760 [ 112.310316][ T43] audit: type=1400 audit(1791171148.146:712): avc: denied { perfmon } for pid=8434 comm="syz.5.762" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 112.310941][ T43] audit: type=1400 audit(1791171148.146:713): avc: denied { bpf } for pid=8434 comm="syz.5.762" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 112.339448][ T8437] overlayfs: failed to clone upperpath [ 112.355553][ T8439] FAULT_INJECTION: forcing a failure. [ 112.355553][ T8439] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 112.355576][ T8439] CPU: 1 UID: 0 PID: 8439 Comm: syz.5.764 Not tainted syzkaller #0 PREEMPT(full) [ 112.355589][ T8439] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 112.355596][ T8439] Call Trace: [ 112.355600][ T8439] [ 112.355605][ T8439] dump_stack_lvl+0x100/0x190 [ 112.355624][ T8439] should_fail_ex.cold+0x5/0xa [ 112.355638][ T8439] ? prepare_alloc_pages+0x16d/0x5b0 [ 112.355655][ T8439] should_fail_alloc_page+0xeb/0x140 [ 112.355672][ T8439] prepare_alloc_pages+0x1f0/0x5b0 [ 112.355687][ T8439] ? arch_stack_walk+0xa6/0xf0 [ 112.355703][ T8439] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 112.355719][ T8439] ? stack_trace_save+0x8e/0xc0 [ 112.355731][ T8439] ? __pfx_stack_trace_save+0x10/0x10 [ 112.355742][ T8439] ? stack_depot_save_flags+0x27/0x9f0 [ 112.355761][ T8439] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 112.355778][ T8439] ? __lock_acquire+0x5c0/0x1f40 [ 112.355792][ T8439] ? __lock_acquire+0x5c0/0x1f40 [ 112.355804][ T8439] ? __css_rstat_updated+0x1ce/0x590 [ 112.355822][ T8439] ? lock_acquire+0x1d1/0x380 [ 112.355834][ T8439] ? page_table_check_set+0x11d/0x580 [ 112.355850][ T8439] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 112.355865][ T8439] ? policy_nodemask+0xed/0x4f0 [ 112.355882][ T8439] alloc_pages_mpol+0x201/0x550 [ 112.355899][ T8439] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 112.355915][ T8439] ? __page_table_check_ptes_set+0x1d5/0x530 [ 112.355934][ T8439] folio_alloc_mpol_noprof+0x36/0x260 [ 112.355946][ T8439] vma_alloc_folio_noprof+0xed/0x1d0 [ 112.355957][ T8439] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 112.355968][ T8439] ? rcu_read_unlock+0x2d/0xb0 [ 112.355983][ T8439] do_anonymous_page+0xac9/0x2050 [ 112.356004][ T8439] ? __pfx_do_anonymous_page+0x10/0x10 [ 112.356020][ T8439] ? rcu_read_unlock+0x2d/0xb0 [ 112.356030][ T8439] ? rcu_read_unlock+0x2d/0xb0 [ 112.356040][ T8439] ? __pte_offset_map+0x179/0x310 [ 112.356056][ T8439] __handle_mm_fault+0x1ff3/0x2f60 [ 112.356081][ T8439] ? __pfx___handle_mm_fault+0x10/0x10 [ 112.356098][ T8439] ? pte_offset_map_lock+0x174/0x320 [ 112.356111][ T8439] ? find_held_lock+0x2b/0x80 [ 112.356128][ T8439] ? find_held_lock+0x2b/0x80 [ 112.356143][ T8439] ? follow_page_pte+0x536/0x1050 [ 112.356165][ T8439] handle_mm_fault+0x363/0xa20 [ 112.356184][ T8439] __get_user_pages+0x8ae/0x2c30 [ 112.356202][ T8439] ? __pfx_mt_find+0x10/0x10 [ 112.356216][ T8439] ? __pfx___get_user_pages+0x10/0x10 [ 112.356235][ T8439] populate_vma_page_range+0x267/0x3f0 [ 112.356251][ T8439] ? __pfx_populate_vma_page_range+0x10/0x10 [ 112.356266][ T8439] ? __pfx_find_vma_intersection+0x10/0x10 [ 112.356284][ T8439] __mm_populate+0x107/0x3a0 [ 112.356299][ T8439] ? __pfx___mm_populate+0x10/0x10 [ 112.356315][ T8439] ? up_write+0x2dc/0x5b0 [ 112.356331][ T8439] do_mlock+0x3f0/0x800 [ 112.356359][ T8439] ? __pfx_do_mlock+0x10/0x10 [ 112.356384][ T8439] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 112.356399][ T8439] ? __fget_files+0x21f/0x3d0 [ 112.356418][ T8439] __x64_sys_mlock+0xce/0x120 [ 112.356430][ T8439] ? __pfx___x64_sys_mlock+0x10/0x10 [ 112.356446][ T8439] do_syscall_64+0x123/0x790 [ 112.356459][ T8439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.356471][ T8439] RIP: 0033:0x7fb76379e159 [ 112.356480][ T8439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.356491][ T8439] RSP: 002b:00007fb76460c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 112.356502][ T8439] RAX: ffffffffffffffda RBX: 00007fb763a25fa0 RCX: 00007fb76379e159 [ 112.356509][ T8439] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 112.356516][ T8439] RBP: 00007fb76460c090 R08: 0000000000000000 R09: 0000000000000000 [ 112.356522][ T8439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 112.356529][ T8439] R13: 00007fb763a26038 R14: 00007fb763a25fa0 R15: 00007ffdba635b88 [ 112.356544][ T8439] [ 112.441435][ T8443] FAULT_INJECTION: forcing a failure. [ 112.441435][ T8443] name failslab, interval 1, probability 0, space 0, times 0 [ 112.441465][ T8443] CPU: 2 UID: 0 PID: 8443 Comm: syz.7.766 Not tainted syzkaller #0 PREEMPT(full) [ 112.441487][ T8443] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 112.441499][ T8443] Call Trace: [ 112.441507][ T8443] [ 112.441515][ T8443] dump_stack_lvl+0x100/0x190 [ 112.441547][ T8443] should_fail_ex.cold+0x5/0xa [ 112.441576][ T8443] should_failslab+0xc2/0x120 [ 112.441615][ T8443] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 112.441645][ T8443] ? kvasprintf_const+0x66/0x1a0 [ 112.441675][ T8443] kvasprintf+0xbc/0x150 [ 112.441699][ T8443] ? __pfx_kvasprintf+0x10/0x10 [ 112.441724][ T8443] ? ida_alloc_range+0x70d/0x830 [ 112.441749][ T8443] ? rcu_is_watching+0x13/0xc0 [ 112.441777][ T8443] ? ida_alloc_range+0x70d/0x830 [ 112.441797][ T8443] ? kfree+0x1e5/0x6d0 [ 112.441820][ T8443] kvasprintf_const+0x66/0x1a0 [ 112.441846][ T8443] kobject_set_name_vargs+0x5a/0x140 [ 112.441874][ T8443] dev_set_name+0xc7/0x100 [ 112.441896][ T8443] ? __pfx_dev_set_name+0x10/0x10 [ 112.441921][ T8443] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 112.441949][ T8443] nfc_allocate_device+0x206/0x5e0 [ 112.441975][ T8443] nci_allocate_device+0x23b/0x410 [ 112.442005][ T8443] virtual_ncidev_open+0x6f/0x220 [ 112.442026][ T8443] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 112.442045][ T8443] misc_open+0x26d/0x450 [ 112.442069][ T8443] ? __pfx_misc_open+0x10/0x10 [ 112.442096][ T8443] chrdev_open+0x234/0x6a0 [ 112.442123][ T8443] ? __pfx_chrdev_open+0x10/0x10 [ 112.442150][ T8443] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 112.442178][ T8443] do_dentry_open+0x6ab/0x14d0 [ 112.442201][ T8443] ? __pfx_chrdev_open+0x10/0x10 [ 112.442232][ T8443] vfs_open+0x82/0x3f0 [ 112.442262][ T8443] path_openat+0x19fa/0x2440 [ 112.442295][ T8443] ? __pfx_path_openat+0x10/0x10 [ 112.442329][ T8443] do_file_open+0x20e/0x430 [ 112.442358][ T8443] ? __pfx_do_file_open+0x10/0x10 [ 112.442403][ T8443] ? _raw_spin_unlock+0x28/0x50 [ 112.442432][ T8443] ? alloc_fd+0x471/0x7a0 [ 112.442467][ T8443] do_sys_openat2+0x10f/0x1e0 [ 112.442496][ T8443] ? __pfx_do_sys_openat2+0x10/0x10 [ 112.442525][ T8443] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 112.442549][ T8443] ? __fget_files+0x21f/0x3d0 [ 112.442580][ T8443] __x64_sys_openat+0x12d/0x210 [ 112.442609][ T8443] ? __pfx___x64_sys_openat+0x10/0x10 [ 112.442638][ T8443] ? ksys_write+0x1ac/0x250 [ 112.442670][ T8443] do_syscall_64+0x123/0x790 [ 112.442694][ T8443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.442715][ T8443] RIP: 0033:0x7fe7c999e159 [ 112.442731][ T8443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.442750][ T8443] RSP: 002b:00007fe7ca7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 112.442770][ T8443] RAX: ffffffffffffffda RBX: 00007fe7c9c25fa0 RCX: 00007fe7c999e159 [ 112.442784][ T8443] RDX: 0000000000000002 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 112.442795][ T8443] RBP: 00007fe7ca7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 112.442807][ T8443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 112.442818][ T8443] R13: 00007fe7c9c26038 R14: 00007fe7c9c25fa0 R15: 00007fff25009808 [ 112.442845][ T8443] [ 112.486102][ T8449] netlink: 'syz.5.767': attribute type 4 has an invalid length. [ 112.543356][ T8441] ref_ctr increment failed for inode: 0x761 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888037779880 [ 112.561093][ T8452] ISOFS: Unable to identify CD-ROM format. [ 112.573184][ T8452] netlink: 72 bytes leftover after parsing attributes in process `syz.5.768'. [ 112.575908][ T43] audit: type=1400 audit(1791171148.406:714): avc: denied { ioctl } for pid=8451 comm="syz.5.768" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=21765 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 112.646127][ T43] audit: type=1400 audit(1791171148.476:715): avc: denied { map } for pid=8459 comm="syz.6.771" path="/4/dev/sda" dev="devtmpfs" ino=723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 112.796845][ T8470] netlink: 4 bytes leftover after parsing attributes in process `syz.0.775'. [ 112.796859][ T8470] netlink: 4 bytes leftover after parsing attributes in process `syz.0.775'. [ 112.796866][ T8470] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Remote Mapping info ret = -22) [ 112.822307][ T8473] netlink: 124 bytes leftover after parsing attributes in process `syz.6.776'. [ 112.884059][ T8473] netlink: 20 bytes leftover after parsing attributes in process `syz.6.776'. [ 112.946481][ T8481] ip_tables: iptables: counters copy to user failed while replacing table [ 112.948490][ T8481] ip_tables: iptables: counters copy to user failed while replacing table [ 112.995908][ T8484] random: crng reseeded on system resumption [ 113.004830][ T8484] FAULT_INJECTION: forcing a failure. [ 113.004830][ T8484] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 113.004863][ T8484] CPU: 1 UID: 0 PID: 8484 Comm: syz.5.779 Not tainted syzkaller #0 PREEMPT(full) [ 113.004886][ T8484] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 113.004899][ T8484] Call Trace: [ 113.004906][ T8484] [ 113.004915][ T8484] dump_stack_lvl+0x100/0x190 [ 113.004948][ T8484] should_fail_ex.cold+0x5/0xa [ 113.004974][ T8484] ? prepare_alloc_pages+0x16d/0x5b0 [ 113.005027][ T8484] should_fail_alloc_page+0xeb/0x140 [ 113.005060][ T8484] prepare_alloc_pages+0x1f0/0x5b0 [ 113.005088][ T8484] ? unwind_get_return_address+0x59/0xa0 [ 113.005120][ T8484] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 113.005153][ T8484] ? stack_trace_save+0x8e/0xc0 [ 113.005176][ T8484] ? __pfx_stack_trace_save+0x10/0x10 [ 113.005198][ T8484] ? stack_depot_save_flags+0x27/0x9f0 [ 113.005231][ T8484] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 113.005256][ T8484] ? kasan_save_stack+0x3f/0x50 [ 113.005282][ T8484] ? kasan_save_track+0x14/0x30 [ 113.005306][ T8484] ? __kasan_kmalloc+0xaa/0xb0 [ 113.005330][ T8484] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 113.005352][ T8484] ? memory_bm_create+0x12c/0xcf0 [ 113.005382][ T8484] ? create_basic_memory_bitmaps+0xbd/0x350 [ 113.005413][ T8484] ? snapshot_open+0x23b/0x2b0 [ 113.005433][ T8484] ? misc_open+0x26d/0x450 [ 113.005455][ T8484] ? chrdev_open+0x234/0x6a0 [ 113.005481][ T8484] ? do_dentry_open+0x6ab/0x14d0 [ 113.005504][ T8484] ? vfs_open+0x82/0x3f0 [ 113.005529][ T8484] ? path_openat+0x19fa/0x2440 [ 113.005554][ T8484] ? do_file_open+0x20e/0x430 [ 113.005579][ T8484] ? do_sys_openat2+0x10f/0x1e0 [ 113.005606][ T8484] ? __x64_sys_openat+0x12d/0x210 [ 113.005632][ T8484] ? do_syscall_64+0x123/0x790 [ 113.005659][ T8484] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.005695][ T8484] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 113.005724][ T8484] ? policy_nodemask+0xed/0x4f0 [ 113.005757][ T8484] alloc_pages_mpol+0x201/0x550 [ 113.005786][ T8484] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 113.005815][ T8484] ? kasan_save_track+0x14/0x30 [ 113.005840][ T8484] ? __kasan_kmalloc+0xaa/0xb0 [ 113.005869][ T8484] alloc_pages_noprof+0x1a/0x160 [ 113.005889][ T8484] get_zeroed_page_noprof+0x18/0xb0 [ 113.005917][ T8484] get_image_page+0x18/0x1a0 [ 113.005947][ T8484] memory_bm_create+0x66a/0xcf0 [ 113.005985][ T8484] create_basic_memory_bitmaps+0xbd/0x350 [ 113.006018][ T8484] snapshot_open+0x23b/0x2b0 [ 113.006036][ T8484] ? __pfx_snapshot_open+0x10/0x10 [ 113.006054][ T8484] misc_open+0x26d/0x450 [ 113.006078][ T8484] ? __pfx_misc_open+0x10/0x10 [ 113.006100][ T8484] chrdev_open+0x234/0x6a0 [ 113.006128][ T8484] ? __pfx_chrdev_open+0x10/0x10 [ 113.006157][ T8484] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 113.006185][ T8484] do_dentry_open+0x6ab/0x14d0 [ 113.006209][ T8484] ? __pfx_chrdev_open+0x10/0x10 [ 113.006242][ T8484] vfs_open+0x82/0x3f0 [ 113.006275][ T8484] path_openat+0x19fa/0x2440 [ 113.006307][ T8484] ? __pfx_path_openat+0x10/0x10 [ 113.006344][ T8484] do_file_open+0x20e/0x430 [ 113.006373][ T8484] ? __pfx_do_file_open+0x10/0x10 [ 113.006420][ T8484] ? _raw_spin_unlock+0x28/0x50 [ 113.006451][ T8484] ? alloc_fd+0x471/0x7a0 [ 113.006488][ T8484] do_sys_openat2+0x10f/0x1e0 [ 113.006518][ T8484] ? __pfx_do_sys_openat2+0x10/0x10 [ 113.006550][ T8484] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 113.006580][ T8484] __x64_sys_openat+0x12d/0x210 [ 113.006606][ T8484] ? __pfx___x64_sys_openat+0x10/0x10 [ 113.006633][ T8484] ? ksys_write+0x1ac/0x250 [ 113.006668][ T8484] do_syscall_64+0x123/0x790 [ 113.006693][ T8484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.006709][ T8484] RIP: 0033:0x7fb76379e159 [ 113.006726][ T8484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.006743][ T8484] RSP: 002b:00007fb76460c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 113.006763][ T8484] RAX: ffffffffffffffda RBX: 00007fb763a25fa0 RCX: 00007fb76379e159 [ 113.006774][ T8484] RDX: 0000000000000001 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 113.006784][ T8484] RBP: 00007fb76383506b R08: 0000000000000000 R09: 0000000000000000 [ 113.006795][ T8484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.006806][ T8484] R13: 00007fb763a26038 R14: 00007fb763a25fa0 R15: 00007ffdba635b88 [ 113.006829][ T8484] [ 113.199840][ T5733] Bluetooth: hci0: command tx timeout [ 113.255217][ T8508] netlink: NAT attribute has 5 unknown bytes [ 113.255236][ T8508] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 113.295298][ T8511] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 113.302944][ T8511] cramfs: wrong magic [ 113.333426][ T8513] 9pnet_fd: Insufficient options for proto=fd [ 113.335053][ T8513] netlink: 17 bytes leftover after parsing attributes in process `syz.7.789'. [ 113.414276][ T8517] netlink: 'syz.5.791': attribute type 1 has an invalid length. [ 113.418478][ T8517] gretap1: entered promiscuous mode [ 113.440920][ T8519] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(838860804.0.0), cmd(9) [ 113.523899][ T43] audit: type=1400 audit(1791171149.356:716): avc: denied { write } for pid=8524 comm="syz.6.794" name="ptp0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 113.630530][ T8535] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 113.777980][ T8553] netlink: 8 bytes leftover after parsing attributes in process `syz.7.802'. [ 113.788333][ T3378] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 113.820983][ T8555] sctp: [Deprecated]: syz.0.805 (pid 8555) Use of int in maxseg socket option. [ 113.820983][ T8555] Use struct sctp_assoc_value instead [ 113.826126][ T8556] netlink: 84 bytes leftover after parsing attributes in process `syz.6.804'. [ 113.826151][ T8556] nbd: must specify at least one socket [ 113.927480][ T3378] usb 10-1: device descriptor read/64, error -71 [ 113.973530][ T8565] binder: 8564:8565 ioctl 4018620d 0 returned -22 [ 114.167617][ T3378] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 114.308208][ T3378] usb 10-1: device descriptor read/64, error -71 [ 114.429219][ T3378] usb usb10-port1: attempt power cycle [ 114.666183][ T8570] FAULT_INJECTION: forcing a failure. [ 114.666183][ T8570] name failslab, interval 1, probability 0, space 0, times 0 [ 114.666203][ T8570] CPU: 2 UID: 0 PID: 8570 Comm: syz.6.810 Not tainted syzkaller #0 PREEMPT(full) [ 114.666216][ T8570] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 114.666223][ T8570] Call Trace: [ 114.666227][ T8570] [ 114.666231][ T8570] dump_stack_lvl+0x100/0x190 [ 114.666259][ T8570] should_fail_ex.cold+0x5/0xa [ 114.666275][ T8570] should_failslab+0xc2/0x120 [ 114.666307][ T8570] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 114.666321][ T8570] ? __alloc_skb+0x140/0x710 [ 114.666343][ T8570] __alloc_skb+0x140/0x710 [ 114.666357][ T8570] ? __alloc_skb+0x5b7/0x710 [ 114.666371][ T8570] ? __pfx___alloc_skb+0x10/0x10 [ 114.666385][ T8570] ? if_nlmsg_size+0x4b/0xdc0 [ 114.666405][ T8570] rtmsg_ifinfo_build_skb+0x81/0x260 [ 114.666420][ T8570] rtmsg_ifinfo+0xa4/0x1b0 [ 114.666434][ T8570] __dev_notify_flags+0x362/0x4b0 [ 114.666451][ T8570] ? __pfx___dev_notify_flags+0x10/0x10 [ 114.666466][ T8570] ? __dev_change_flags+0x548/0x850 [ 114.666482][ T8570] ? __pfx___dev_change_flags+0x10/0x10 [ 114.666496][ T8570] ? is_bpf_text_address+0x94/0x1a0 [ 114.666511][ T8570] ? validate_linkmsg+0x57c/0xba0 [ 114.666527][ T8570] ? kernel_text_address+0x8d/0x100 [ 114.666547][ T8570] netif_change_flags+0x108/0x160 [ 114.666564][ T8570] do_setlink.isra.0+0x1ac4/0x3e60 [ 114.666585][ T8570] ? __lock_acquire+0x5c0/0x1f40 [ 114.666597][ T8570] ? __pfx_do_setlink.isra.0+0x10/0x10 [ 114.666616][ T8570] ? __lock_acquire+0x5c0/0x1f40 [ 114.666634][ T8570] ? lock_acquire+0x1d1/0x380 [ 114.666646][ T8570] ? avc_has_perm_noaudit+0x56/0x470 [ 114.666665][ T8570] ? lock_acquire+0x1d1/0x380 [ 114.666677][ T8570] ? rtnl_newlink+0xac3/0x2620 [ 114.666696][ T8570] ? rcu_is_watching+0x13/0xc0 [ 114.666712][ T8570] ? trace_contention_end+0x126/0x160 [ 114.666727][ T8570] ? __mutex_lock+0x26c/0x1bd0 [ 114.666750][ T8570] ? rtnl_newlink+0xac3/0x2620 [ 114.666781][ T8570] ? __pfx___mutex_lock+0x10/0x10 [ 114.666802][ T8570] ? rcu_is_watching+0x13/0xc0 [ 114.666827][ T8570] ? cap_capable+0x107/0x430 [ 114.666862][ T8570] rtnl_newlink+0x13c1/0x2620 [ 114.666899][ T8570] ? __pfx_rtnl_newlink+0x10/0x10 [ 114.666925][ T8570] ? avc_has_perm_noaudit+0x56/0x470 [ 114.666952][ T8570] ? find_held_lock+0x2b/0x80 [ 114.666973][ T8570] ? avc_has_perm_noaudit+0x11e/0x470 [ 114.666990][ T8570] ? avc_has_perm_noaudit+0x11e/0x470 [ 114.667014][ T8570] ? __lock_acquire+0x5c0/0x1f40 [ 114.667035][ T8570] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 114.667045][ T8570] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 114.667056][ T8570] ? __pfx_rtnl_newlink+0x10/0x10 [ 114.667073][ T8570] rtnetlink_rcv_msg+0x95e/0xe90 [ 114.667085][ T8570] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 114.667099][ T8570] ? ref_tracker_free+0x37e/0x6c0 [ 114.667117][ T8570] netlink_rcv_skb+0x159/0x420 [ 114.667134][ T8570] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 114.667146][ T8570] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 114.667166][ T8570] ? netlink_deliver_tap+0x1ae/0xcc0 [ 114.667182][ T8570] netlink_unicast+0x585/0x850 [ 114.667199][ T8570] ? __pfx_netlink_unicast+0x10/0x10 [ 114.667218][ T8570] netlink_sendmsg+0x8b0/0xda0 [ 114.667235][ T8570] ? __pfx_netlink_sendmsg+0x10/0x10 [ 114.667251][ T8570] ? selinux_socket_sendmsg+0x198/0x2f0 [ 114.667267][ T8570] ____sys_sendmsg+0xa4d/0xbe0 [ 114.667278][ T8570] ? __pfx_netlink_sendmsg+0x10/0x10 [ 114.667294][ T8570] ? __pfx_____sys_sendmsg+0x10/0x10 [ 114.667309][ T8570] ? lock_acquire+0x1d1/0x380 [ 114.667321][ T8570] ? get_pid_task+0x2a/0x250 [ 114.667337][ T8570] ___sys_sendmsg+0x190/0x1e0 [ 114.667355][ T8570] ? __pfx____sys_sendmsg+0x10/0x10 [ 114.667374][ T8570] ? get_pid_task+0x106/0x250 [ 114.667408][ T8570] ? find_held_lock+0x2b/0x80 [ 114.667448][ T8570] __sys_sendmsg+0x160/0x210 [ 114.667474][ T8570] ? __pfx___sys_sendmsg+0x10/0x10 [ 114.667505][ T8570] do_syscall_64+0x123/0x790 [ 114.667519][ T8570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.667531][ T8570] RIP: 0033:0x7f1e4d79e159 [ 114.667541][ T8570] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.667552][ T8570] RSP: 002b:00007f1e4e5e3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 114.667563][ T8570] RAX: ffffffffffffffda RBX: 00007f1e4da25fa0 RCX: 00007f1e4d79e159 [ 114.667570][ T8570] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 114.667577][ T8570] RBP: 00007f1e4e5e3090 R08: 0000000000000000 R09: 0000000000000000 [ 114.667583][ T8570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 114.667590][ T8570] R13: 00007f1e4da26038 R14: 00007f1e4da25fa0 R15: 00007ffef73daf78 [ 114.667605][ T8570] [ 114.780035][ T3378] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 114.818213][ T3378] usb 10-1: device descriptor read/8, error -71 [ 114.831245][ T8580] sctp: [Deprecated]: syz.0.814 (pid 8580) Use of int in maxseg socket option. [ 114.831245][ T8580] Use struct sctp_assoc_value instead [ 114.986704][ T8588] netlink: 180 bytes leftover after parsing attributes in process `syz.0.818'. [ 114.989951][ T8589] netlink: 180 bytes leftover after parsing attributes in process `syz.0.818'. [ 115.079608][ T3378] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 115.099775][ T3378] usb 10-1: device descriptor read/8, error -71 [ 115.125440][ T8595] overlayfs: failed to resolve './file1/file0': -2 [ 115.125827][ T8596] overlayfs: failed to resolve './file1/file0': -2 [ 115.211073][ T3378] usb usb10-port1: unable to enumerate USB device [ 115.569212][ T43] kauditd_printk_skb: 1 callbacks suppressed [ 115.569232][ T43] audit: type=1400 audit(1791171151.406:718): avc: denied { write } for pid=8598 comm="syz.6.822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 116.355293][ T43] audit: type=1400 audit(1791171152.186:719): avc: denied { bind } for pid=8622 comm="syz.0.831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 116.501020][ T8628] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 116.523014][ T8630] sctp: [Deprecated]: syz.6.834 (pid 8630) Use of int in maxseg socket option. [ 116.523014][ T8630] Use struct sctp_assoc_value instead [ 116.612352][ T8632] ecryptfs_verify_version: Minor version number mismatch. Expected [4]; got [0] [ 116.612374][ T8632] Data structure version mismatch. Userspace tools must match eCryptfs kernel module with major version [0] and minor version [4] [ 116.612389][ T8632] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 116.612399][ T8632] One or more global auth toks could not properly register; rc = [-22] [ 116.612428][ T8632] Error validating options; rc = [-22] [ 116.665500][ T8644] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 116.714508][ T8648] netlink: 'syz.0.841': attribute type 10 has an invalid length. [ 116.733796][ T8646] syzkaller0: entered promiscuous mode [ 116.733819][ T8646] syzkaller0: entered allmulticast mode [ 116.735299][ T12] syzkaller0: tun_net_xmit 70 [ 116.743211][ T8646] syzkaller0: tun_net_xmit 663 [ 116.743242][ T8646] syzkaller0: tun_net_xmit 663 [ 116.743256][ T8646] syzkaller0: tun_net_xmit 663 [ 116.743272][ T8646] syzkaller0: tun_net_xmit 663 [ 116.743284][ T8646] syzkaller0: tun_net_xmit 663 [ 116.743297][ T8646] syzkaller0: tun_net_xmit 663 [ 116.743311][ T8646] syzkaller0: tun_net_xmit 663 [ 116.743324][ T8646] syzkaller0: tun_net_xmit 663 [ 116.743338][ T8646] syzkaller0: tun_net_xmit 663 [ 116.743960][ T8646] syzkaller0: tun_net_xmit 663 [ 116.743980][ T8646] syzkaller0: tun_net_xmit 663 [ 116.743994][ T8646] syzkaller0: tun_net_xmit 663 [ 116.744009][ T8646] syzkaller0: tun_net_xmit 663 [ 116.744021][ T8646] syzkaller0: tun_net_xmit 663 [ 116.744035][ T8646] syzkaller0: tun_net_xmit 663 [ 116.744048][ T8646] syzkaller0: tun_net_xmit 663 [ 116.744061][ T8646] syzkaller0: tun_net_xmit 663 [ 116.744075][ T8646] syzkaller0: tun_net_xmit 663 [ 116.744088][ T8646] syzkaller0: tun_net_xmit 663 [ 116.744100][ T8646] syzkaller0: tun_net_xmit 663 [ 116.744113][ T8646] syzkaller0: tun_net_xmit 663 [ 116.744127][ T8646] syzkaller0: tun_net_xmit 663 [ 116.744140][ T8646] syzkaller0: tun_net_xmit 663 [ 116.744153][ T8646] syzkaller0: tun_net_xmit 663 [ 116.744166][ T8646] syzkaller0: tun_net_xmit 663 [ 116.744179][ T8646] syzkaller0: tun_net_xmit 663 [ 116.744191][ T8646] syzkaller0: tun_net_xmit 663 [ 116.744204][ T8646] syzkaller0: tun_net_xmit 663 [ 116.744217][ T8646] syzkaller0: tun_net_xmit 663 [ 116.744231][ T8646] syzkaller0: tun_net_xmit 663 [ 116.744243][ T8646] syzkaller0: tun_net_xmit 663 [ 116.744256][ T8646] syzkaller0: tun_net_xmit 663 [ 116.744269][ T8646] syzkaller0: tun_net_xmit 663 [ 116.744282][ T8646] syzkaller0: tun_net_xmit 663 [ 116.744295][ T8646] syzkaller0: tun_net_xmit 663 [ 116.744309][ T8646] syzkaller0: tun_net_xmit 663 [ 116.744323][ T8646] syzkaller0: tun_net_xmit 663 [ 116.744336][ T8646] syzkaller0: tun_net_xmit 663 [ 116.744391][ T8646] syzkaller0: tun_net_xmit 663 [ 116.744407][ T8646] syzkaller0: tun_net_xmit 663 [ 116.744422][ T8646] syzkaller0: tun_net_xmit 663 [ 116.744436][ T8646] syzkaller0: tun_net_xmit 663 [ 116.744450][ T8646] syzkaller0: tun_net_xmit 663 [ 116.744462][ T8646] syzkaller0: tun_net_xmit 663 [ 116.744475][ T8646] syzkaller0: tun_net_xmit 663 [ 116.744489][ T8646] syzkaller0: tun_net_xmit 663 [ 116.744502][ T8646] syzkaller0: tun_net_xmit 663 [ 116.744515][ T8646] syzkaller0: tun_net_xmit 663 [ 116.744528][ T8646] syzkaller0: tun_net_xmit 663 [ 116.744541][ T8646] syzkaller0: tun_net_xmit 663 [ 116.744553][ T8646] syzkaller0: tun_net_xmit 663 [ 116.744567][ T8646] syzkaller0: tun_net_xmit 663 [ 116.744581][ T8646] syzkaller0: tun_net_xmit 663 [ 116.744594][ T8646] syzkaller0: tun_net_xmit 663 [ 116.744607][ T8646] syzkaller0: tun_net_xmit 663 [ 116.744621][ T8646] syzkaller0: tun_net_xmit 663 [ 116.744635][ T8646] syzkaller0: tun_net_xmit 663 [ 116.744648][ T8646] syzkaller0: tun_net_xmit 663 [ 116.744661][ T8646] syzkaller0: tun_net_xmit 663 [ 116.744675][ T8646] syzkaller0: tun_net_xmit 663 [ 116.744688][ T8646] syzkaller0: tun_net_xmit 663 [ 116.744701][ T8646] syzkaller0: tun_net_xmit 663 [ 116.744714][ T8646] syzkaller0: tun_net_xmit 663 [ 116.744735][ T8646] syzkaller0: tun_net_xmit 663 [ 116.744750][ T8646] syzkaller0: tun_net_xmit 663 [ 116.744765][ T8646] syzkaller0: tun_net_xmit 663 [ 116.744779][ T8646] syzkaller0: tun_net_xmit 663 [ 116.744793][ T8646] syzkaller0: tun_net_xmit 663 [ 116.744806][ T8646] syzkaller0: tun_net_xmit 663 [ 116.744818][ T8646] syzkaller0: tun_net_xmit 663 [ 116.744831][ T8646] syzkaller0: tun_net_xmit 663 [ 116.744845][ T8646] syzkaller0: tun_net_xmit 663 [ 116.744858][ T8646] syzkaller0: tun_net_xmit 663 [ 116.744871][ T8646] syzkaller0: tun_net_xmit 663 [ 116.744884][ T8646] syzkaller0: tun_net_xmit 663 [ 116.744897][ T8646] syzkaller0: tun_net_xmit 663 [ 116.744910][ T8646] syzkaller0: tun_net_xmit 663 [ 116.744923][ T8646] syzkaller0: tun_net_xmit 663 [ 116.744936][ T8646] syzkaller0: tun_net_xmit 663 [ 116.744949][ T8646] syzkaller0: tun_net_xmit 663 [ 116.744962][ T8646] syzkaller0: tun_net_xmit 663 [ 116.744975][ T8646] syzkaller0: tun_net_xmit 663 [ 116.745042][ T8646] syzkaller0: tun_net_xmit 663 [ 116.745057][ T8646] syzkaller0: tun_net_xmit 663 [ 116.745072][ T8646] syzkaller0: tun_net_xmit 663 [ 116.745086][ T8646] syzkaller0: tun_net_xmit 663 [ 116.745099][ T8646] syzkaller0: tun_net_xmit 663 [ 116.745112][ T8646] syzkaller0: tun_net_xmit 663 [ 116.745126][ T8646] syzkaller0: tun_net_xmit 663 [ 116.745139][ T8646] syzkaller0: tun_net_xmit 663 [ 116.745153][ T8646] syzkaller0: tun_net_xmit 663 [ 116.745166][ T8646] syzkaller0: tun_net_xmit 663 [ 116.745179][ T8646] syzkaller0: tun_net_xmit 663 [ 116.745191][ T8646] syzkaller0: tun_net_xmit 663 [ 116.745205][ T8646] syzkaller0: tun_net_xmit 663 [ 116.745218][ T8646] syzkaller0: tun_net_xmit 663 [ 116.745231][ T8646] syzkaller0: tun_net_xmit 663 [ 116.745245][ T8646] syzkaller0: tun_net_xmit 663 [ 116.745261][ T8646] syzkaller0: tun_net_xmit 663 [ 116.745276][ T8646] syzkaller0: tun_net_xmit 663 [ 116.745289][ T8646] syzkaller0: tun_net_xmit 663 [ 116.745302][ T8646] syzkaller0: tun_net_xmit 663 [ 116.745316][ T8646] syzkaller0: tun_net_xmit 663 [ 116.745329][ T8646] syzkaller0: tun_net_xmit 663 [ 116.745342][ T8646] syzkaller0: tun_net_xmit 663 [ 116.745407][ T8646] syzkaller0: tun_net_xmit 663 [ 116.745422][ T8646] syzkaller0: tun_net_xmit 663 [ 116.745438][ T8646] syzkaller0: tun_net_xmit 663 [ 116.745451][ T8646] syzkaller0: tun_net_xmit 97 [ 116.899348][ T43] audit: type=1400 audit(1791171152.736:720): avc: denied { read } for pid=8650 comm="syz.5.842" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 116.899581][ T43] audit: type=1400 audit(1791171152.736:721): avc: denied { open } for pid=8650 comm="syz.5.842" path="/27/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 116.919409][ T8652] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 116.919443][ T8652] block device autoloading is deprecated and will be removed. [ 116.921630][ T43] audit: type=1400 audit(1791171152.756:722): avc: denied { ioctl } for pid=8650 comm="syz.5.842" path="/27/file0/file0" dev="fuse" ino=64 ioctlcmd=0x923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 116.972910][ T43] audit: type=1400 audit(1791171152.806:723): avc: denied { ioctl } for pid=8650 comm="syz.5.842" path="socket:[23758]" dev="sockfs" ino=23758 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 116.973892][ T43] audit: type=1400 audit(1791171152.806:724): avc: denied { bind } for pid=8650 comm="syz.5.842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 117.047007][ T8654] FAULT_INJECTION: forcing a failure. [ 117.047007][ T8654] name failslab, interval 1, probability 0, space 0, times 0 [ 117.047040][ T8654] CPU: 3 UID: 0 PID: 8654 Comm: syz.7.843 Not tainted syzkaller #0 PREEMPT(full) [ 117.047063][ T8654] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 117.047075][ T8654] Call Trace: [ 117.047082][ T8654] [ 117.047090][ T8654] dump_stack_lvl+0x100/0x190 [ 117.047130][ T8654] should_fail_ex.cold+0x5/0xa [ 117.047158][ T8654] should_failslab+0xc2/0x120 [ 117.047187][ T8654] __kmalloc_cache_noprof+0x91/0x6d0 [ 117.047209][ T8654] ? proc_self_get_link+0x189/0x1f0 [ 117.047244][ T8654] proc_self_get_link+0x189/0x1f0 [ 117.047273][ T8654] pick_link+0xac2/0x13c0 [ 117.047295][ T8654] ? selinux_inode_permission+0x14a/0x1130 [ 117.047340][ T8654] ? __pfx_proc_self_get_link+0x10/0x10 [ 117.047373][ T8654] step_into_slowpath+0x9ba/0xf90 [ 117.047402][ T8654] ? __pfx_step_into_slowpath+0x10/0x10 [ 117.047430][ T8654] ? lookup_fast+0x2da/0x600 [ 117.047450][ T8654] ? inode_permission+0x374/0x620 [ 117.047472][ T8654] link_path_walk+0xf28/0x1cc0 [ 117.047506][ T8654] path_openat+0x1ac/0x2440 [ 117.047537][ T8654] ? __pfx_path_openat+0x10/0x10 [ 117.047570][ T8654] do_file_open+0x20e/0x430 [ 117.047599][ T8654] ? __pfx_do_file_open+0x10/0x10 [ 117.047639][ T8654] ? _raw_spin_unlock+0x28/0x50 [ 117.047668][ T8654] ? alloc_fd+0x471/0x7a0 [ 117.047703][ T8654] do_sys_openat2+0x10f/0x1e0 [ 117.047732][ T8654] ? __pfx_do_sys_openat2+0x10/0x10 [ 117.047762][ T8654] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 117.047785][ T8654] ? __fget_files+0x21f/0x3d0 [ 117.047816][ T8654] __x64_sys_openat+0x12d/0x210 [ 117.047846][ T8654] ? __pfx___x64_sys_openat+0x10/0x10 [ 117.047874][ T8654] ? ksys_write+0x1ac/0x250 [ 117.047905][ T8654] do_syscall_64+0x123/0x790 [ 117.047930][ T8654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.047950][ T8654] RIP: 0033:0x7fe7c995e98e [ 117.047967][ T8654] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 117.047986][ T8654] RSP: 002b:00007fe7ca7f5ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 117.048006][ T8654] RAX: ffffffffffffffda RBX: 00007fe7ca7f66c0 RCX: 00007fe7c995e98e [ 117.048019][ T8654] RDX: 0000000000000002 RSI: 00007fe7ca7f5f90 RDI: ffffffffffffff9c [ 117.048032][ T8654] RBP: 00007fe7ca7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 117.048044][ T8654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.048056][ T8654] R13: 00007fe7c9c26038 R14: 00007fe7c9c25fa0 R15: 00007fff25009808 [ 117.048082][ T8654] [ 117.053013][ T43] audit: type=1400 audit(1791171152.886:725): avc: denied { read } for pid=8656 comm="syz.6.844" dev="nsfs" ino=4026533989 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 117.053295][ T43] audit: type=1400 audit(1791171152.886:726): avc: denied { open } for pid=8656 comm="syz.6.844" path="net:[4026533989]" dev="nsfs" ino=4026533989 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 117.180149][ T8666] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2052 sclass=netlink_route_socket pid=8666 comm=syz.5.847 [ 117.236447][ T8670] netlink: 'syz.5.847': attribute type 2 has an invalid length. [ 117.388530][ T43] audit: type=1400 audit(1791171153.226:727): avc: denied { read } for pid=8677 comm="syz.6.852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 117.576919][ T8685] sctp: [Deprecated]: syz.0.854 (pid 8685) Use of int in maxseg socket option. [ 117.576919][ T8685] Use struct sctp_assoc_value instead [ 117.638225][ T8689] tmpfs: Unknown parameter 'grpquota8' [ 117.754346][ T8695] libceph: resolve '0.0' (ret=-3): failed [ 117.796499][ T8698] netlink: 'syz.0.859': attribute type 1 has an invalid length. [ 117.796516][ T8698] netlink: 'syz.0.859': attribute type 2 has an invalid length. [ 117.800380][ T8698] netlink: 'syz.0.859': attribute type 4 has an invalid length. [ 117.800396][ T8698] __nla_validate_parse: 8 callbacks suppressed [ 117.800405][ T8698] netlink: 17 bytes leftover after parsing attributes in process `syz.0.859'. [ 117.906643][ T8704] netlink: 4 bytes leftover after parsing attributes in process `syz.0.862'. [ 117.999431][ T8711] sctp: [Deprecated]: syz.0.864 (pid 8711) Use of int in maxseg socket option. [ 117.999431][ T8711] Use struct sctp_assoc_value instead [ 118.046948][ T8716] ip_tables: iptables: counters copy to user failed while replacing table [ 118.115472][ T8720] tipc: Resetting bearer [ 118.254971][ T8729] binder: 8728:8729 ioctl c0306201 200000000640 returned -22 [ 118.300764][ T8735] netlink: 8 bytes leftover after parsing attributes in process `syz.6.872'. [ 118.434975][ T8752] Bluetooth: MGMT ver 1.23 [ 118.435007][ T8752] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 28 bytes [ 118.521530][ T8760] netlink: 8 bytes leftover after parsing attributes in process `syz.7.878'. [ 118.529636][ T8758] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 118.529653][ T8758] CIFS: Attempting to mount //127.0.0.1/test [ 118.531093][ T8758] CIFS: VFS: Error connecting to socket. Aborting operation. [ 118.531115][ T8758] CIFS: VFS: cifs_mount failed w/return code = -111 [ 118.532902][ T5733] Bluetooth: to_multiplier 0 < 10 [ 118.607307][ T5733] Bluetooth: hci0: Malformed HCI Event: 0x22 [ 119.165207][ T8782] netlink: 84 bytes leftover after parsing attributes in process `syz.5.883'. [ 119.165234][ T8782] nbd: must specify at least one socket [ 119.363336][ T8789] bq24190-charger 0-006b: Can't get irq info [ 119.363501][ T8789] bq24190-charger 0-006b: probe with driver bq24190-charger failed with error -22 [ 119.364921][ T8789] i2c i2c-0: new_device: Instantiated device bq24190 at 0x6b [ 119.380664][ T8789] device-mapper: ioctl: Invalid ioctl structure: name m, dev f800 [ 119.385182][ T8792] netlink: 256 bytes leftover after parsing attributes in process `syz.0.887'. [ 119.441003][ T8796] netlink: 8 bytes leftover after parsing attributes in process `syz.6.888'. [ 119.487233][ T8798] MINIX-fs: blocksize too small for device [ 119.512032][ T8798] capability: warning: `syz.6.889' uses 32-bit capabilities (legacy support in use) [ 119.579099][ T8809] xt_CT: No such helper "pptp" [ 119.585682][ T8815] sctp: [Deprecated]: syz.6.894 (pid 8815) Use of int in maxseg socket option. [ 119.585682][ T8815] Use struct sctp_assoc_value instead [ 119.591624][ T8809] netlink: 8 bytes leftover after parsing attributes in process `syz.0.892'. [ 119.596817][ T8809] netlink: 'syz.0.892': attribute type 10 has an invalid length. [ 119.714518][ T8827] device-mapper: ioctl: populate_table: target parameters not NUL-terminated [ 119.802248][ T8836] sctp: [Deprecated]: syz.0.903 (pid 8836) Use of int in maxseg socket option. [ 119.802248][ T8836] Use struct sctp_assoc_value instead [ 120.007882][ T35] usb 12-1: new full-speed USB device number 2 using dummy_hcd [ 120.168995][ T8872] netlink: 12 bytes leftover after parsing attributes in process `syz.5.912'. [ 120.169670][ T35] usb 12-1: unable to get BOS descriptor or descriptor too short [ 120.170166][ T35] usb 12-1: not running at top speed; connect to a high speed hub [ 120.170189][ T35] usb 12-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 120.171411][ T35] usb 12-1: config 14 has an invalid interface number: 57 but max is 1 [ 120.171432][ T35] usb 12-1: config 14 has an invalid interface number: 228 but max is 1 [ 120.171449][ T35] usb 12-1: config 14 has no interface number 0 [ 120.171462][ T35] usb 12-1: config 14 has no interface number 1 [ 120.171505][ T35] usb 12-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 120.171524][ T35] usb 12-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 120.171544][ T35] usb 12-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 120.171566][ T35] usb 12-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 120.171588][ T35] usb 12-1: config 14 interface 57 has no altsetting 0 [ 120.171601][ T35] usb 12-1: config 14 interface 228 has no altsetting 0 [ 120.176792][ T35] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.176812][ T35] usb 12-1: Product: syz [ 120.176824][ T35] usb 12-1: Manufacturer: syz [ 120.176836][ T35] usb 12-1: SerialNumber: syz [ 120.264563][ T8874] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 120.566189][ T8898] netlink: 20 bytes leftover after parsing attributes in process `syz.0.917'. [ 120.568573][ T5733] Bluetooth: hci4: command tx timeout [ 120.610702][ T35] legousbtower 12-1:14.57: interrupt endpoints not found [ 120.689823][ T43] kauditd_printk_skb: 14 callbacks suppressed [ 120.689838][ T43] audit: type=1400 audit(1791171156.526:742): avc: denied { read } for pid=8910 comm="syz.5.921" path="socket:[22451]" dev="sockfs" ino=22451 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 120.746206][ T8913] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 121.008118][ T35] legousbtower 12-1:14.228: LEGO USB Tower firmware version is 170.80 build 16178 [ 121.011936][ T35] legousbtower 12-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 121.047547][ T42] usb 11-1: new full-speed USB device number 6 using dummy_hcd [ 121.177459][ T42] usb 11-1: device descriptor read/64, error -71 [ 121.427442][ T42] usb 11-1: new full-speed USB device number 7 using dummy_hcd [ 121.568646][ T42] usb 11-1: device descriptor read/64, error -71 [ 121.591408][ T8929] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 121.608173][ T8929] FAULT_INJECTION: forcing a failure. [ 121.608173][ T8929] name failslab, interval 1, probability 0, space 0, times 0 [ 121.608205][ T8929] CPU: 0 UID: 0 PID: 8929 Comm: syz.5.927 Not tainted syzkaller #0 PREEMPT(full) [ 121.608231][ T8929] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 121.608242][ T8929] Call Trace: [ 121.608251][ T8929] [ 121.608259][ T8929] dump_stack_lvl+0x100/0x190 [ 121.608307][ T8929] should_fail_ex.cold+0x5/0xa [ 121.608337][ T8929] should_failslab+0xc2/0x120 [ 121.608369][ T8929] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 121.608393][ T8929] ? __alloc_workqueue+0x107a/0x1950 [ 121.608425][ T8929] __alloc_workqueue+0x107a/0x1950 [ 121.608459][ T8929] alloc_workqueue_noprof+0xc7/0x130 [ 121.608484][ T8929] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 121.608515][ T8929] ? __ceph_monc_want_map+0x189/0x360 [ 121.608551][ T8929] ceph_get_tree+0x43d/0x1fd0 [ 121.608571][ T8929] ? security_capable+0x80/0x260 [ 121.608594][ T8929] vfs_get_tree+0x92/0x320 [ 121.608617][ T8929] path_mount+0x7d0/0x24c0 [ 121.608641][ T8929] ? __pfx_path_mount+0x10/0x10 [ 121.608658][ T8929] ? lockdep_hardirqs_on+0x7d/0x110 [ 121.608690][ T8929] ? putname+0xb1/0x110 [ 121.608719][ T8929] ? kmem_cache_free+0x127/0x6c0 [ 121.608747][ T8929] ? __x64_sys_mount+0x293/0x310 [ 121.608767][ T8929] __x64_sys_mount+0x293/0x310 [ 121.608788][ T8929] ? __pfx___x64_sys_mount+0x10/0x10 [ 121.608816][ T8929] do_syscall_64+0x123/0x790 [ 121.608839][ T8929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.608860][ T8929] RIP: 0033:0x7fb76379e159 [ 121.608875][ T8929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.608895][ T8929] RSP: 002b:00007fb76460c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 121.608914][ T8929] RAX: ffffffffffffffda RBX: 00007fb763a25fa0 RCX: 00007fb76379e159 [ 121.608928][ T8929] RDX: 0000200000003200 RSI: 0000200000003000 RDI: 0000200000003100 [ 121.608939][ T8929] RBP: 00007fb76383506b R08: 0000000000000000 R09: 0000000000000000 [ 121.608951][ T8929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.608988][ T8929] R13: 00007fb763a26038 R14: 00007fb763a25fa0 R15: 00007ffdba635b88 [ 121.609015][ T8929] [ 121.686274][ T42] usb usb11-port1: attempt power cycle [ 122.027645][ T42] usb 11-1: new full-speed USB device number 8 using dummy_hcd [ 122.048214][ T42] usb 11-1: device descriptor read/8, error -71 [ 122.187108][ T8938] nbd: must specify at least one socket [ 122.252428][ T8832] usb 12-1: LEGO USB Tower reset control request failed [ 122.253827][ T35] usb 12-1: USB disconnect, device number 2 [ 122.271648][ T35] legousbtower 12-1:14.228: LEGO USB Tower #-160 now disconnected [ 122.287572][ T42] usb 11-1: new full-speed USB device number 9 using dummy_hcd [ 122.318235][ T42] usb 11-1: device descriptor read/8, error -71 [ 122.338583][ T8946] fuse: fd is not a fuse device [ 122.339197][ T8946] batadv_slave_0: Caught tx_queue_len zero misconfig [ 122.406102][ T43] audit: type=1400 audit(1791171158.236:743): avc: denied { getopt } for pid=8949 comm="syz.0.936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 122.427855][ T42] usb usb11-port1: unable to enumerate USB device [ 122.482501][ T8954] fuse: fd is not a fuse device [ 122.785063][ T8958] nbd: must specify at least one socket [ 122.819060][ T8963] FAULT_INJECTION: forcing a failure. [ 122.819060][ T8963] name fail_futex, interval 1, probability 0, space 0, times 1 [ 122.819082][ T8963] CPU: 0 UID: 0 PID: 8963 Comm: syz.5.942 Not tainted syzkaller #0 PREEMPT(full) [ 122.819095][ T8963] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 122.819102][ T8963] Call Trace: [ 122.819106][ T8963] [ 122.819110][ T8963] dump_stack_lvl+0x100/0x190 [ 122.819132][ T8963] should_fail_ex.cold+0x5/0xa [ 122.819149][ T8963] get_futex_key+0x1d0/0x14f0 [ 122.819187][ T8963] ? __pfx_get_futex_key+0x10/0x10 [ 122.819209][ T8963] futex_wait_setup+0x91/0x540 [ 122.819226][ T8963] __futex_wait+0x19f/0x300 [ 122.819240][ T8963] ? __pfx___futex_wait+0x10/0x10 [ 122.819253][ T8963] ? __pfx_try_to_wake_up+0x10/0x10 [ 122.819267][ T8963] ? futex_hash+0x311/0x400 [ 122.819284][ T8963] ? __pfx_futex_wake_mark+0x10/0x10 [ 122.819312][ T8963] ? find_held_lock+0x2b/0x80 [ 122.819328][ T8963] ? futex_wake+0x4ea/0x5e0 [ 122.819343][ T8963] futex_wait+0xe6/0x370 [ 122.819355][ T8963] ? __pfx_futex_wait+0x10/0x10 [ 122.819369][ T8963] ? rcu_read_lock_any_held+0x6a/0x90 [ 122.819387][ T8963] ? find_held_lock+0x2b/0x80 [ 122.819403][ T8963] ? ksys_write+0x190/0x250 [ 122.819416][ T8963] ? ksys_write+0x190/0x250 [ 122.819431][ T8963] do_futex+0x265/0x440 [ 122.819449][ T8963] ? __pfx_do_futex+0x10/0x10 [ 122.819466][ T8963] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 122.819482][ T8963] __x64_sys_futex+0x34f/0x4d0 [ 122.819499][ T8963] ? fput+0x7c/0x100 [ 122.819514][ T8963] ? __pfx___x64_sys_futex+0x10/0x10 [ 122.819529][ T8963] ? ksys_write+0x1ac/0x250 [ 122.819542][ T8963] ? __pfx_ksys_write+0x10/0x10 [ 122.819559][ T8963] do_syscall_64+0x123/0x790 [ 122.819572][ T8963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.819584][ T8963] RIP: 0033:0x7fb76379e159 [ 122.819594][ T8963] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.819610][ T8963] RSP: 002b:00007fb76460c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 122.819623][ T8963] RAX: ffffffffffffffda RBX: 00007fb763a25fa8 RCX: 00007fb76379e159 [ 122.819631][ T8963] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb763a25fa8 [ 122.819639][ T8963] RBP: 00007fb763a25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 122.819647][ T8963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.819654][ T8963] R13: 00007fb763a26038 R14: 00007ffdba635aa0 R15: 00007ffdba635b88 [ 122.819670][ T8963] [ 122.869410][ T43] audit: type=1400 audit(1791171158.706:744): avc: denied { unmount } for pid=8156 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 122.900143][ T8968] __nla_validate_parse: 4 callbacks suppressed [ 122.900216][ T8968] netlink: 52 bytes leftover after parsing attributes in process `syz.7.944'. [ 123.256197][ T8982] IPv6: NLM_F_CREATE should be specified when creating new route [ 123.363778][ T8988] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 123.363929][ T8988] qnx6: wrong signature (magic) in superblock #1. [ 123.363937][ T8988] qnx6: unable to read the first superblock [ 123.424209][ T8992] FAULT_INJECTION: forcing a failure. [ 123.424209][ T8992] name failslab, interval 1, probability 0, space 0, times 0 [ 123.424242][ T8992] CPU: 0 UID: 0 PID: 8992 Comm: syz.7.955 Not tainted syzkaller #0 PREEMPT(full) [ 123.424265][ T8992] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 123.424278][ T8992] Call Trace: [ 123.424286][ T8992] [ 123.424295][ T8992] dump_stack_lvl+0x100/0x190 [ 123.424329][ T8992] should_fail_ex.cold+0x5/0xa [ 123.424357][ T8992] should_failslab+0xc2/0x120 [ 123.424386][ T8992] kmem_cache_alloc_noprof+0x92/0x6a0 [ 123.424409][ T8992] ? __proc_create+0xc1/0x8f0 [ 123.424430][ T8992] ? __proc_create+0x247/0x8f0 [ 123.424454][ T8992] __proc_create+0x247/0x8f0 [ 123.424476][ T8992] ? __pfx___proc_create+0x10/0x10 [ 123.424502][ T8992] ? _raw_write_unlock+0x28/0x50 [ 123.424521][ T8992] ? proc_register+0x56d/0x910 [ 123.424546][ T8992] proc_create_reg+0x75/0x170 [ 123.424568][ T8992] ? __pfx_netstat_seq_show+0x10/0x10 [ 123.424601][ T8992] proc_create_net_single+0x86/0x180 [ 123.424625][ T8992] ? __pfx_proc_create_net_single+0x10/0x10 [ 123.424649][ T8992] ? __pfx_proc_create_net_data+0x10/0x10 [ 123.424678][ T8992] ? __pfx_ip_proc_init_net+0x10/0x10 [ 123.424700][ T8992] ip_proc_init_net+0xa3/0x1c0 [ 123.424723][ T8992] ops_init+0x1e2/0x5f0 [ 123.424752][ T8992] setup_net+0x118/0x3a0 [ 123.424781][ T8992] ? __pfx_setup_net+0x10/0x10 [ 123.424817][ T8992] copy_net_ns+0x345/0x7a0 [ 123.424837][ T8992] create_new_namespaces+0x3ea/0xac0 [ 123.424865][ T8992] unshare_nsproxy_namespaces+0xf2/0x220 [ 123.424890][ T8992] ksys_unshare+0x4a2/0xa70 [ 123.424913][ T8992] ? __pfx_ksys_unshare+0x10/0x10 [ 123.424944][ T8992] __x64_sys_unshare+0x31/0x40 [ 123.424995][ T8992] do_syscall_64+0x123/0x790 [ 123.425018][ T8992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.425044][ T8992] RIP: 0033:0x7fe7c999e159 [ 123.425062][ T8992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.425081][ T8992] RSP: 002b:00007fe7ca7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 123.425101][ T8992] RAX: ffffffffffffffda RBX: 00007fe7c9c25fa0 RCX: 00007fe7c999e159 [ 123.425113][ T8992] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 123.425125][ T8992] RBP: 00007fe7c9a3506b R08: 0000000000000000 R09: 0000000000000000 [ 123.425136][ T8992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.425146][ T8992] R13: 00007fe7c9c26038 R14: 00007fe7c9c25fa0 R15: 00007fff25009808 [ 123.425171][ T8992] [ 123.605837][ T43] audit: type=1400 audit(1791171159.436:745): avc: denied { write } for pid=9000 comm="syz.7.958" name="/" dev="9p" ino=71827733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 123.607691][ T43] audit: type=1400 audit(1791171159.446:746): avc: denied { write } for pid=9000 comm="syz.7.958" name="file0" dev="9p" ino=71827737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 123.911091][ T6578] IPVS: starting estimator thread 0... [ 124.007534][ T9008] IPVS: using max 42 ests per chain, 100800 per kthread [ 124.114581][ T43] audit: type=1400 audit(1791171159.946:747): avc: denied { map } for pid=9013 comm="syz.7.963" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=757 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 124.183310][ T9020] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=9020 comm=syz.6.965 [ 124.243100][ T9025] FAULT_INJECTION: forcing a failure. [ 124.243100][ T9025] name failslab, interval 1, probability 0, space 0, times 0 [ 124.243130][ T9025] CPU: 0 UID: 0 PID: 9025 Comm: syz.7.967 Not tainted syzkaller #0 PREEMPT(full) [ 124.243151][ T9025] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 124.243162][ T9025] Call Trace: [ 124.243169][ T9025] [ 124.243177][ T9025] dump_stack_lvl+0x100/0x190 [ 124.243210][ T9025] should_fail_ex.cold+0x5/0xa [ 124.243238][ T9025] should_failslab+0xc2/0x120 [ 124.243264][ T9025] __kmalloc_cache_noprof+0x91/0x6d0 [ 124.243285][ T9025] ? alloc_netdev_mqs+0xea8/0x15c0 [ 124.243318][ T9025] alloc_netdev_mqs+0xea8/0x15c0 [ 124.243351][ T9025] rtnl_create_link+0xc13/0xf80 [ 124.243384][ T9025] rtnl_newlink+0x15bc/0x2620 [ 124.243422][ T9025] ? __pfx_rtnl_newlink+0x10/0x10 [ 124.243449][ T9025] ? avc_has_perm_noaudit+0x56/0x470 [ 124.243481][ T9025] ? find_held_lock+0x2b/0x80 [ 124.243508][ T9025] ? avc_has_perm_noaudit+0x11e/0x470 [ 124.243536][ T9025] ? avc_has_perm_noaudit+0x11e/0x470 [ 124.243593][ T9025] ? lock_acquire+0x1d1/0x380 [ 124.243613][ T9025] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 124.243631][ T9025] ? find_held_lock+0x2b/0x80 [ 124.243663][ T9025] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 124.243680][ T9025] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 124.243699][ T9025] ? __pfx_rtnl_newlink+0x10/0x10 [ 124.243728][ T9025] rtnetlink_rcv_msg+0x95e/0xe90 [ 124.243749][ T9025] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 124.243774][ T9025] ? ref_tracker_free+0x37e/0x6c0 [ 124.243805][ T9025] netlink_rcv_skb+0x159/0x420 [ 124.243832][ T9025] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 124.243851][ T9025] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 124.243884][ T9025] ? netlink_deliver_tap+0x1ae/0xcc0 [ 124.243911][ T9025] netlink_unicast+0x585/0x850 [ 124.243937][ T9025] ? __pfx_netlink_unicast+0x10/0x10 [ 124.243967][ T9025] netlink_sendmsg+0x8b0/0xda0 [ 124.243997][ T9025] ? __pfx_netlink_sendmsg+0x10/0x10 [ 124.244025][ T9025] ? selinux_socket_sendmsg+0x198/0x2f0 [ 124.244053][ T9025] ____sys_sendmsg+0xa4d/0xbe0 [ 124.244074][ T9025] ? __pfx_netlink_sendmsg+0x10/0x10 [ 124.244099][ T9025] ? __pfx_____sys_sendmsg+0x10/0x10 [ 124.244128][ T9025] ? lock_acquire+0x1d1/0x380 [ 124.244147][ T9025] ? get_pid_task+0x2a/0x250 [ 124.244176][ T9025] ___sys_sendmsg+0x190/0x1e0 [ 124.244199][ T9025] ? __pfx____sys_sendmsg+0x10/0x10 [ 124.244221][ T9025] ? get_pid_task+0x106/0x250 [ 124.244257][ T9025] ? find_held_lock+0x2b/0x80 [ 124.244302][ T9025] __sys_sendmsg+0x160/0x210 [ 124.244329][ T9025] ? __pfx___sys_sendmsg+0x10/0x10 [ 124.244372][ T9025] do_syscall_64+0x123/0x790 [ 124.244395][ T9025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.244415][ T9025] RIP: 0033:0x7fe7c999e159 [ 124.244430][ T9025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.244464][ T9025] RSP: 002b:00007fe7ca7f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 124.244485][ T9025] RAX: ffffffffffffffda RBX: 00007fe7c9c25fa0 RCX: 00007fe7c999e159 [ 124.244497][ T9025] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 124.244509][ T9025] RBP: 00007fe7ca7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 124.244520][ T9025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 124.244531][ T9025] R13: 00007fe7c9c26038 R14: 00007fe7c9c25fa0 R15: 00007fff25009808 [ 124.244559][ T9025] [ 124.347547][ T9038] netlink: 4 bytes leftover after parsing attributes in process `syz.6.973'. [ 124.347620][ T9038] bridge_slave_1: left allmulticast mode [ 124.347640][ T9038] bridge_slave_1: left promiscuous mode [ 124.347844][ T9038] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.361610][ T9038] bridge_slave_0: left allmulticast mode [ 124.361637][ T9038] bridge_slave_0: left promiscuous mode [ 124.361893][ T9038] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.406118][ T9049] netlink: 32 bytes leftover after parsing attributes in process `syz.6.973'. [ 124.438148][ T9051] i2c i2c-0: Failed to register i2c client fsa4480 at 0x42 (-16) [ 124.601319][ T43] audit: type=1400 audit(1791171160.436:748): avc: denied { listen } for pid=9063 comm="syz.6.982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 124.653697][ T43] audit: type=1400 audit(1791171160.486:749): avc: denied { accept } for pid=9063 comm="syz.6.982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 124.666682][ T9064] netlink: 27 bytes leftover after parsing attributes in process `syz.6.982'. [ 124.765157][ T9080] netlink: 52 bytes leftover after parsing attributes in process `syz.6.987'. [ 124.874949][ T9086] netlink: 'syz.6.990': attribute type 10 has an invalid length. [ 124.893553][ T9086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x0050 instead [ 124.893578][ T9086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0xffda instead [ 124.893594][ T9086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0x0007 instead [ 124.893609][ T9086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0x002d instead [ 124.893624][ T9086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x0003 instead [ 124.893639][ T9086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0x2000 instead [ 124.893655][ T9086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0x8000 instead [ 124.893670][ T9086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0x0002 instead [ 124.893685][ T9086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000028: 0x0001 instead [ 124.893699][ T9086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000030: 0x0008 instead [ 124.893714][ T9086] jffs2: Further such events for this erase block will not be printed [ 124.898384][ T9086] jffs2: notice: (9086) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 125.010324][ T43] audit: type=1400 audit(1791171160.846:750): avc: denied { create } for pid=9098 comm="syz.6.994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 125.076190][ T9104] input: syz0 as /devices/virtual/input/input9 [ 125.096193][ T43] audit: type=1400 audit(1791171160.926:751): avc: denied { load_policy } for pid=9101 comm="syz.6.995" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 125.150126][ T9102] SELinux: invalid class [ 125.190284][ T9102] SELinux: failed to load policy [ 125.756519][ T43] audit: type=1400 audit(1791171161.586:752): avc: denied { search } for pid=9112 comm="syz.7.998" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 125.760935][ T9113] FAULT_INJECTION: forcing a failure. [ 125.760935][ T9113] name fail_futex, interval 1, probability 0, space 0, times 0 [ 125.760992][ T9113] CPU: 0 UID: 0 PID: 9113 Comm: syz.7.998 Not tainted syzkaller #0 PREEMPT(full) [ 125.761010][ T9113] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 125.761022][ T9113] Call Trace: [ 125.761028][ T9113] [ 125.761037][ T9113] dump_stack_lvl+0x100/0x190 [ 125.761069][ T9113] should_fail_ex.cold+0x5/0xa [ 125.761097][ T9113] get_futex_key+0x1d0/0x14f0 [ 125.761127][ T9113] ? __pfx_get_futex_key+0x10/0x10 [ 125.761152][ T9113] ? find_held_lock+0x2b/0x80 [ 125.761180][ T9113] ? futex_wake+0x4ea/0x5e0 [ 125.761206][ T9113] futex_wake+0xf4/0x5e0 [ 125.761230][ T9113] ? __pfx_futex_wake+0x10/0x10 [ 125.761254][ T9113] ? do_accept+0x3e3/0x530 [ 125.761278][ T9113] ? do_raw_spin_lock+0x128/0x260 [ 125.761309][ T9113] do_futex+0x2b2/0x440 [ 125.761338][ T9113] ? __pfx_do_futex+0x10/0x10 [ 125.761372][ T9113] __x64_sys_futex+0x34f/0x4d0 [ 125.761403][ T9113] ? __pfx___x64_sys_futex+0x10/0x10 [ 125.761441][ T9113] do_syscall_64+0x123/0x790 [ 125.761465][ T9113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.761485][ T9113] RIP: 0033:0x7fe7c999e159 [ 125.761501][ T9113] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.761518][ T9113] RSP: 002b:00007fe7ca7f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 125.761539][ T9113] RAX: ffffffffffffffda RBX: 00007fe7c9c25fa8 RCX: 00007fe7c999e159 [ 125.761553][ T9113] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe7c9c25fac [ 125.761565][ T9113] RBP: 00007fe7c9c25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 125.761577][ T9113] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 125.761589][ T9113] R13: 00007fe7c9c26038 R14: 00007fff25009720 R15: 00007fff25009808 [ 125.761615][ T9113] [ 125.820853][ T43] audit: type=1400 audit(1791171161.656:753): avc: denied { mounton } for pid=9112 comm="syz.7.998" path="/75/trace" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 125.830020][ T43] audit: type=1400 audit(1791171161.666:754): avc: denied { mounton } for pid=9112 comm="syz.7.998" path="/75/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 125.862808][ T9124] sctp: [Deprecated]: syz.0.999 (pid 9124) Use of struct sctp_assoc_value in delayed_ack socket option. [ 125.862808][ T9124] Use struct sctp_sack_info instead [ 125.929018][ T9131] overlayfs: missing 'workdir' [ 125.935417][ T9131] overlayfs: missing 'workdir' [ 126.001588][ T9142] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1005'. [ 126.016882][ T9144] fuse: fd is not a fuse device [ 126.020087][ T43] audit: type=1400 audit(1791171161.856:755): avc: denied { bind } for pid=9143 comm="syz.0.1006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 126.102216][ T43] audit: type=1400 audit(1791171161.936:756): avc: denied { name_bind } for pid=9152 comm="syz.6.1010" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 126.129258][ T9158] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1012'. [ 126.129281][ T9158] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1012'. [ 126.129293][ T9158] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1012'. [ 126.186734][ T43] audit: type=1400 audit(1791171162.016:757): avc: denied { mounton } for pid=9163 comm="syz.5.1015" path="/56/loop0" dev="tmpfs" ino=320 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 126.190830][ T9164] XFS (loop0): Invalid device [./loop0], error=-16 [ 126.230700][ T9171] netlink: 'syz.5.1017': attribute type 1 has an invalid length. [ 126.244398][ T9170] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1017'. [ 126.265547][ T9171] 8021q: adding VLAN 0 to HW filter on device bond1 [ 126.266275][ T9171] netlink: 'syz.5.1017': attribute type 1 has an invalid length. [ 126.266462][ T9171] netlink: 'syz.5.1017': attribute type 1 has an invalid length. [ 126.266633][ T9171] netlink: 'syz.5.1017': attribute type 1 has an invalid length. [ 126.266806][ T9171] netlink: 'syz.5.1017': attribute type 1 has an invalid length. [ 126.271289][ T9171] netlink: 'syz.5.1017': attribute type 1 has an invalid length. [ 126.294641][ T9170] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1011 sclass=netlink_route_socket pid=9170 comm=syz.5.1017 [ 126.327786][ T43] audit: type=1400 audit(1791171162.156:758): avc: denied { setattr } for pid=9179 comm="syz.6.1020" name="[io_uring]" dev="anon_inodefs" ino=27000 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 126.333425][ T9171] netlink: 'syz.5.1017': attribute type 1 has an invalid length. [ 126.339928][ T43] audit: type=1400 audit(1791171162.176:759): avc: denied { getopt } for pid=9179 comm="syz.6.1020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 126.359810][ T9177] bond1: (slave bridge2): making interface the new active one [ 126.372174][ T9177] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 126.372535][ T9171] netlink: 'syz.5.1017': attribute type 1 has an invalid length. [ 126.372693][ T9171] netlink: 'syz.5.1017': attribute type 1 has an invalid length. [ 126.423257][ T9183] Illegal XDP return value 9 on prog (id 82) dev N/A, expect packet loss! [ 126.431447][ T9183] FAULT_INJECTION: forcing a failure. [ 126.431447][ T9183] name failslab, interval 1, probability 0, space 0, times 0 [ 126.431480][ T9183] CPU: 1 UID: 0 PID: 9183 Comm: syz.6.1020 Tainted: G L syzkaller #0 PREEMPT(full) [ 126.431507][ T9183] Tainted: [L]=SOFTLOCKUP [ 126.431516][ T9183] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 126.431529][ T9183] Call Trace: [ 126.431536][ T9183] [ 126.431543][ T9183] dump_stack_lvl+0x100/0x190 [ 126.431577][ T9183] should_fail_ex.cold+0x5/0xa [ 126.431622][ T9183] should_failslab+0xc2/0x120 [ 126.431651][ T9183] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 126.431679][ T9183] ? setup_ipc_sysctls+0x5e/0x300 [ 126.431714][ T9183] kmemdup_noprof+0x29/0x60 [ 126.431736][ T9183] setup_ipc_sysctls+0x5e/0x300 [ 126.431785][ T9183] copy_ipcs+0x57a/0x7e0 [ 126.431812][ T9183] create_new_namespaces+0x20a/0xac0 [ 126.431836][ T9183] ? security_capable+0x80/0x260 [ 126.431861][ T9183] unshare_nsproxy_namespaces+0xf2/0x220 [ 126.431888][ T9183] ksys_unshare+0x4a2/0xa70 [ 126.431915][ T9183] ? __pfx_ksys_unshare+0x10/0x10 [ 126.431951][ T9183] __x64_sys_unshare+0x31/0x40 [ 126.431976][ T9183] do_syscall_64+0x123/0x790 [ 126.432002][ T9183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.432022][ T9183] RIP: 0033:0x7f1e4d79e159 [ 126.432040][ T9183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.432059][ T9183] RSP: 002b:00007f1e4e5c2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 126.432080][ T9183] RAX: ffffffffffffffda RBX: 00007f1e4da26090 RCX: 00007f1e4d79e159 [ 126.432094][ T9183] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000a040080 [ 126.432106][ T9183] RBP: 00007f1e4d83506b R08: 0000000000000000 R09: 0000000000000000 [ 126.432118][ T9183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.432136][ T9183] R13: 00007f1e4da26128 R14: 00007f1e4da26090 R15: 00007ffef73daf78 [ 126.432162][ T9183] [ 126.436711][ T9180] smbdirect: ib_dev[©÷Å]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 126.436735][ T9180] smbdirect: ib_dev[©÷Å]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 126.436760][ T9180] smbdirect: ib_dev[©÷Å]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 126.442126][ T9180] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 126.449548][ T9180] infiniband ©÷Å: RDMA CMA: cma_listen_on_dev, error -98 [ 126.519765][ T9185] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 126.521439][ T9185] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 126.611732][ T43] audit: type=1400 audit(1791171162.446:760): avc: denied { connect } for pid=9189 comm="syz.6.1024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 126.645970][ T43] audit: type=1400 audit(1791171162.476:761): avc: denied { ioctl } for pid=9187 comm="syz.5.1023" path="/59/file0/file0" dev="9p" ino=71827737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 126.653556][ T9192] 9pnet_virtio: no channels available for device syz [ 126.714126][ T9126] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 126.714297][ T9126] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 126.714344][ T9126] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 126.728782][ T9126] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 126.738180][ T9126] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 126.738269][ T9126] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 126.744394][ T9126] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 126.750344][ T9126] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 126.750396][ T9126] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 126.754768][ T9126] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 126.773735][ T9198] fuse: Bad value for 'fd' [ 127.058675][ T9216] vlan2: entered promiscuous mode [ 127.058704][ T9216] hsr0: entered promiscuous mode [ 127.058896][ T9216] vlan2: entered allmulticast mode [ 127.058909][ T9216] hsr0: entered allmulticast mode [ 127.058921][ T9216] hsr_slave_0: entered allmulticast mode [ 127.058936][ T9216] hsr_slave_1: entered allmulticast mode [ 127.120043][ T5733] Bluetooth: hci0: unexpected event for opcode 0x1804 [ 127.158641][ T9222] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.419015][ T9244] loop0: detected capacity change from 0 to 32768 [ 127.570140][ T9244] device-mapper: thin: Data device (loop1) discard unsupported: Disabling discard passdown. [ 127.776531][ T9279] CIFS: Attempting to mount //127.0.0.1/share [ 127.796407][ T5733] Bluetooth: hci0: unexpected cc 0x042d length: 41 > 7 [ 127.797184][ T5733] Bluetooth: hci0: unexpected event for opcode 0x042d [ 127.843693][ T9272] syzkaller0: entered promiscuous mode [ 127.843717][ T9272] syzkaller0: entered allmulticast mode [ 127.845044][ T9279] CIFS: VFS: cifs_mount failed w/return code = -112 [ 128.007552][ T5733] Bluetooth: hci3: command 0x0c1a tx timeout [ 128.454842][ T9308] syz.0.1044 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 128.727541][ T5733] Bluetooth: hci4: command 0x0c1a tx timeout [ 128.773033][ T9288] cgroup: fork rejected by pids controller in /syz5 [ 128.798533][ T5733] Bluetooth: hci2: command 0x0c1a tx timeout [ 129.569247][ T9333] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=70 sclass=netlink_route_socket pid=9333 comm=syz.5.1046 [ 129.760229][ T5733] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 130.077532][ T5733] Bluetooth: hci3: command 0x0c1a tx timeout [ 130.170735][ T9347] validate_nla: 26 callbacks suppressed [ 130.170748][ T9347] netlink: 'syz.0.1051': attribute type 7 has an invalid length. [ 130.170755][ T9347] __nla_validate_parse: 1 callbacks suppressed [ 130.170761][ T9347] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1051'. [ 130.170777][ T9347] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1051'. [ 130.359699][ T9360] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 130.359714][ T9360] Error validating options; rc = [-22] [ 130.485890][ T9363] tls_set_device_offload_rx: netdev not found [ 130.563865][ T5733] Bluetooth: hci3: unexpected event for opcode 0x042e [ 130.625110][ T9373] blktrace: Concurrent blktraces are not allowed on sg0 [ 130.716244][ T9382] FAULT_INJECTION: forcing a failure. [ 130.716244][ T9382] name failslab, interval 1, probability 0, space 0, times 0 [ 130.716275][ T9382] CPU: 0 UID: 0 PID: 9382 Comm: syz.7.1065 Tainted: G L syzkaller #0 PREEMPT(full) [ 130.716300][ T9382] Tainted: [L]=SOFTLOCKUP [ 130.716308][ T9382] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 130.716318][ T9382] Call Trace: [ 130.716325][ T9382] [ 130.716332][ T9382] dump_stack_lvl+0x100/0x190 [ 130.716366][ T9382] should_fail_ex.cold+0x5/0xa [ 130.716393][ T9382] should_failslab+0xc2/0x120 [ 130.716421][ T9382] __kvmalloc_node_noprof+0x113/0x9b0 [ 130.716445][ T9382] ? do_raw_spin_lock+0x128/0x260 [ 130.716476][ T9382] ? alloc_fdtable+0x17f/0x2d0 [ 130.716503][ T9382] alloc_fdtable+0x17f/0x2d0 [ 130.716530][ T9382] dup_fd+0x995/0xd10 [ 130.716564][ T9382] copy_process+0x2d11/0x8380 [ 130.716602][ T9382] ? __pfx_copy_process+0x10/0x10 [ 130.716628][ T9382] ? _copy_from_user+0x59/0xd0 [ 130.716655][ T9382] kernel_clone+0x176/0x9d0 [ 130.716676][ T9382] ? get_pid_task+0xfc/0x250 [ 130.716701][ T9382] ? __pfx_kernel_clone+0x10/0x10 [ 130.716728][ T9382] ? find_held_lock+0x2b/0x80 [ 130.716764][ T9382] __do_sys_clone3+0x214/0x290 [ 130.716786][ T9382] ? __pfx___do_sys_clone3+0x10/0x10 [ 130.716824][ T9382] ? ksys_write+0x190/0x250 [ 130.716857][ T9382] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 130.716881][ T9382] ? __fget_files+0x21f/0x3d0 [ 130.716948][ T9382] do_syscall_64+0x123/0x790 [ 130.716973][ T9382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.716994][ T9382] RIP: 0033:0x7fe7c999e159 [ 130.717009][ T9382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.717025][ T9382] RSP: 002b:00007fe7ca7f5ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 130.717045][ T9382] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fe7c999e159 [ 130.717056][ T9382] RDX: 00007fe7ca7f5f10 RSI: 0000000000000058 RDI: 00007fe7ca7f5f10 [ 130.717068][ T9382] RBP: 00007fe7ca7f6090 R08: 0000000000000000 R09: 0000000000000058 [ 130.717080][ T9382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 130.717089][ T9382] R13: 00007fe7c9c26038 R14: 00007fe7c9c25fa0 R15: 00007fff25009808 [ 130.717116][ T9382] [ 130.732400][ T9384] netlink: 84 bytes leftover after parsing attributes in process `syz.6.1066'. [ 130.732422][ T9384] nbd: must specify at least one socket [ 130.808862][ T5733] Bluetooth: hci4: command 0x0c1a tx timeout [ 130.887828][ T5733] Bluetooth: hci2: command 0x0c1a tx timeout [ 130.935782][ T9401] ALSA: seq fatal error: cannot create timer (-19) [ 130.969616][ T9401] e1000e 0000:00:02.0 eth1: removed PHC [ 131.004403][ T9406] FAULT_INJECTION: forcing a failure. [ 131.004403][ T9406] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 131.004450][ T9406] CPU: 2 UID: 0 PID: 9406 Comm: syz.7.1070 Tainted: G L syzkaller #0 PREEMPT(full) [ 131.004477][ T9406] Tainted: [L]=SOFTLOCKUP [ 131.004484][ T9406] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 131.004497][ T9406] Call Trace: [ 131.004503][ T9406] [ 131.004512][ T9406] dump_stack_lvl+0x100/0x190 [ 131.004545][ T9406] should_fail_ex.cold+0x5/0xa [ 131.004573][ T9406] _copy_to_user+0x32/0xd0 [ 131.004601][ T9406] simple_read_from_buffer+0xcb/0x170 [ 131.004631][ T9406] proc_fail_nth_read+0x1af/0x230 [ 131.004661][ T9406] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 131.004691][ T9406] ? rw_verify_area+0xce/0x6d0 [ 131.004711][ T9406] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 131.004737][ T9406] vfs_read+0x1e4/0xb40 [ 131.004761][ T9406] ? lock_acquire+0x1d1/0x380 [ 131.004784][ T9406] ? __fget_files+0x34/0x3d0 [ 131.004811][ T9406] ? __pfx_vfs_read+0x10/0x10 [ 131.004830][ T9406] ? find_held_lock+0x2b/0x80 [ 131.004860][ T9406] ? __fget_files+0x215/0x3d0 [ 131.004890][ T9406] ? __fget_files+0x21f/0x3d0 [ 131.004946][ T9406] ksys_read+0x12a/0x250 [ 131.004975][ T9406] ? __pfx_ksys_read+0x10/0x10 [ 131.004996][ T9406] ? v4l2_ioctl+0x1c5/0x250 [ 131.005023][ T9406] do_syscall_64+0x123/0x790 [ 131.005049][ T9406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.005069][ T9406] RIP: 0033:0x7fe7c995e98e [ 131.005087][ T9406] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 131.005105][ T9406] RSP: 002b:00007fe7ca7f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 131.005124][ T9406] RAX: ffffffffffffffda RBX: 00007fe7ca7f66c0 RCX: 00007fe7c995e98e [ 131.005138][ T9406] RDX: 000000000000000f RSI: 00007fe7ca7f60a0 RDI: 0000000000000004 [ 131.005150][ T9406] RBP: 00007fe7ca7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 131.005162][ T9406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.005174][ T9406] R13: 00007fe7c9c26038 R14: 00007fe7c9c25fa0 R15: 00007fff25009808 [ 131.005200][ T9406] [ 131.059371][ T43] kauditd_printk_skb: 29 callbacks suppressed [ 131.059387][ T43] audit: type=1400 audit(1791171166.886:791): avc: denied { write } for pid=9403 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.148327][ T43] audit: type=1400 audit(1791171166.986:792): avc: denied { write } for pid=9413 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.150253][ T9414] FAULT_INJECTION: forcing a failure. [ 131.150253][ T9414] name failslab, interval 1, probability 0, space 0, times 0 [ 131.150288][ T9414] CPU: 2 UID: 60928 PID: 9414 Comm: syz.6.1069 Tainted: G L syzkaller #0 PREEMPT(full) [ 131.150318][ T9414] Tainted: [L]=SOFTLOCKUP [ 131.150326][ T9414] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 131.150340][ T9414] Call Trace: [ 131.150348][ T9414] [ 131.150357][ T9414] dump_stack_lvl+0x100/0x190 [ 131.150395][ T9414] should_fail_ex.cold+0x5/0xa [ 131.150426][ T9414] should_failslab+0xc2/0x120 [ 131.150455][ T9414] __kmalloc_noprof+0xfc/0x840 [ 131.150480][ T9414] ? lsm_blob_alloc+0x68/0x90 [ 131.150507][ T9414] lsm_blob_alloc+0x68/0x90 [ 131.150529][ T9414] security_key_alloc+0x34/0x310 [ 131.150556][ T9414] key_alloc+0x876/0x1310 [ 131.150594][ T9414] ? __pfx_key_alloc+0x10/0x10 [ 131.150628][ T9414] __key_create_or_update+0x720/0xe30 [ 131.150661][ T9414] ? __pfx___key_create_or_update+0x10/0x10 [ 131.150692][ T9414] ? lookup_user_key+0x3f3/0x1300 [ 131.150731][ T9414] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 131.150763][ T9414] key_create_or_update+0x42/0x60 [ 131.150812][ T9414] __do_sys_add_key+0x2e8/0x460 [ 131.150838][ T9414] ? __pfx___do_sys_add_key+0x10/0x10 [ 131.150872][ T9414] do_syscall_64+0x123/0x790 [ 131.150900][ T9414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.150923][ T9414] RIP: 0033:0x7f1e4d79e159 [ 131.150941][ T9414] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.150961][ T9414] RSP: 002b:00007f1e4e580028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 131.150988][ T9414] RAX: ffffffffffffffda RBX: 00007f1e4da26270 RCX: 00007f1e4d79e159 [ 131.151002][ T9414] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000200000000000 [ 131.151016][ T9414] RBP: 00007f1e4d83506b R08: fffffffffffffffe R09: 0000000000000000 [ 131.151029][ T9414] R10: 0000000000000048 R11: 0000000000000246 R12: 0000000000000000 [ 131.151041][ T9414] R13: 00007f1e4da26308 R14: 00007f1e4da26270 R15: 00007ffef73daf78 [ 131.151070][ T9414] [ 131.156965][ T9401] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 131.236647][ T9419] No such timeout policy "" [ 131.236665][ T9419] netlink: Failed to associated timeout policy '' [ 131.250033][ T9419] netdevsim netdevsim7: Direct firmware load for . [ 131.250033][ T9419] failed with error -2 [ 131.252409][ T43] audit: type=1400 audit(1791171167.086:793): avc: denied { firmware_load } for pid=9408 comm="syz.7.1071" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 131.252495][ T9419] netdevsim netdevsim7: Falling back to sysfs fallback for: . [ 131.252495][ T9419] [ 131.519868][ T43] audit: type=1400 audit(1791171167.356:794): avc: denied { write } for pid=9423 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.597449][ T43] audit: type=1400 audit(1791171167.426:795): avc: denied { write } for pid=9428 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.699747][ T43] audit: type=1400 audit(1791171167.536:796): avc: denied { write } for pid=9432 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.713133][ T9436] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1075'. [ 131.713156][ T9436] nbd: must specify at least one socket [ 131.756770][ T9404] pci 0000:00:02.0: [8086:10d3] type 00 class 0x020000 PCIe Root Complex Integrated Endpoint [ 131.771740][ T9404] pci 0000:00:02.0: BAR 0 [mem 0xfea80000-0xfea9ffff] [ 131.771804][ T9404] pci 0000:00:02.0: BAR 1 [mem 0xfeaa0000-0xfeabffff] [ 131.771858][ T9404] pci 0000:00:02.0: BAR 2 [io 0xc080-0xc09f] [ 131.771911][ T9404] pci 0000:00:02.0: BAR 3 [mem 0xfeaf0000-0xfeaf3fff] [ 131.772045][ T9404] pci 0000:00:02.0: ROM [mem 0xfea00000-0xfea3ffff pref] [ 131.772304][ T9404] pci 0000:00:02.0: enabling Extended Tags [ 131.780671][ T43] audit: type=1400 audit(1791171167.616:797): avc: denied { write } for pid=9437 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.788366][ T9404] pci 0000:00:02.0: Adding to iommu group 2 [ 131.806409][ T9404] pci 0000:00:02.0: ROM [mem 0x80000000-0x8003ffff pref]: assigned [ 131.806432][ T9404] pci 0000:00:02.0: BAR 0 [mem 0x80040000-0x8005ffff]: assigned [ 131.808226][ T9404] pci 0000:00:02.0: BAR 1 [mem 0x80060000-0x8007ffff]: assigned [ 131.810273][ T9404] pci 0000:00:02.0: BAR 3 [mem 0x80080000-0x80083fff]: assigned [ 131.811202][ T9404] pci 0000:00:02.0: BAR 2 [io 0x2000-0x201f]: assigned [ 131.873541][ T43] audit: type=1400 audit(1791171167.706:798): avc: denied { write } for pid=9439 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.891211][ T9404] e1000e 0000:00:02.0: Interrupt Throttling Rate (ints/sec) set to dynamic conservative mode [ 131.955386][ T43] audit: type=1400 audit(1791171167.786:799): avc: denied { write } for pid=9442 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.982443][ T9404] e1000e 0000:00:02.0 0000:00:02.0 (uninitialized): registered PHC clock [ 132.050261][ T43] audit: type=1400 audit(1791171167.886:800): avc: denied { write } for pid=9444 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.112108][ T9404] e1000e 0000:00:02.0 eth1: (PCI Express:2.5GT/s:Width x1) 52:54:00:12:34:56 [ 132.112129][ T9404] e1000e 0000:00:02.0 eth1: Intel(R) PRO/1000 Network Connection [ 132.112308][ T9404] e1000e 0000:00:02.0 eth1: MAC: 3, PHY: 8, PBA No: 000000-000 [ 132.307468][ T58] usb 12-1: new low-speed USB device number 3 using dummy_hcd [ 132.463914][ T58] usb 12-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 132.464992][ T58] usb 12-1: config 168 descriptor has 1 excess byte, ignoring [ 132.465031][ T58] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 132.465054][ T58] usb 12-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 132.465077][ T58] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 132.465101][ T58] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 132.467327][ T58] usb 12-1: config 168 descriptor has 1 excess byte, ignoring [ 132.467559][ T58] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 132.467584][ T58] usb 12-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 132.467607][ T58] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 132.467629][ T58] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 132.471113][ T9477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1084'. [ 132.524740][ T58] usb 12-1: config 168 descriptor has 1 excess byte, ignoring [ 132.524840][ T58] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 132.524864][ T58] usb 12-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 132.524887][ T58] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 132.524951][ T58] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 132.532732][ T58] usb 12-1: string descriptor 0 read error: -22 [ 132.532839][ T58] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.580501][ T58] adutux 12-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 132.641729][ T9490] tmpfs: Unknown parameter '00000000000000001110' [ 132.642644][ T9490] veth1_to_hsr: Caught tx_queue_len zero misconfig [ 132.718940][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.718990][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.889396][ T5733] Bluetooth: hci4: command 0x0c1a tx timeout [ 132.957651][ T5733] Bluetooth: hci2: command 0x0c1a tx timeout [ 133.100607][ T5445] 8021q: adding VLAN 0 to HW filter on device eth1 [ 133.411182][ T9529] kvm: MWAIT instruction emulated as NOP! [ 133.563671][ T2334] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 134.000381][ T9562] ip_tables: iptables: counters copy to user failed while replacing table [ 134.101452][ T9566] overlayfs: missing 'lowerdir' [ 134.194037][ T9575] netlink: 'syz.5.1107': attribute type 2 has an invalid length. [ 134.194377][ T5733] Bluetooth: hci4: unexpected event for opcode 0x2028 [ 134.398949][ T9580] netlink: 88 bytes leftover after parsing attributes in process `syz.6.1113'. [ 134.759801][ T9591] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 134.784214][ T9591] macvtap1: entered allmulticast mode [ 134.784236][ T9591] veth1_vlan: entered allmulticast mode [ 134.879556][ T10] usb 12-1: USB disconnect, device number 3 [ 135.169273][ T9610] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1121'. [ 135.169297][ T9610] nbd: must specify at least one socket [ 135.265258][ T9614] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1123'. [ 135.359430][ T9620] FAULT_INJECTION: forcing a failure. [ 135.359430][ T9620] name failslab, interval 1, probability 0, space 0, times 0 [ 135.359457][ T9620] CPU: 0 UID: 0 PID: 9620 Comm: syz.5.1126 Tainted: G L syzkaller #0 PREEMPT(full) [ 135.359474][ T9620] Tainted: [L]=SOFTLOCKUP [ 135.359478][ T9620] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 135.359485][ T9620] Call Trace: [ 135.359489][ T9620] [ 135.359494][ T9620] dump_stack_lvl+0x100/0x190 [ 135.359537][ T9620] should_fail_ex.cold+0x5/0xa [ 135.359554][ T9620] should_failslab+0xc2/0x120 [ 135.359572][ T9620] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 135.359587][ T9620] ? sidtab_sid2str_get+0x84/0x670 [ 135.359605][ T9620] ? sidtab_sid2str_get+0x17a/0x670 [ 135.359624][ T9620] kmemdup_noprof+0x29/0x60 [ 135.359637][ T9620] sidtab_sid2str_get+0x17a/0x670 [ 135.359655][ T9620] security_sid_to_context_core+0x373/0x700 [ 135.359673][ T9620] selinux_inode_init_security+0x477/0x680 [ 135.359691][ T9620] ? __pfx_selinux_inode_init_security+0x10/0x10 [ 135.359708][ T9620] ? __kmalloc_noprof+0x350/0x840 [ 135.359721][ T9620] ? security_inode_init_security+0x113/0x370 [ 135.359737][ T9620] security_inode_init_security+0x1bc/0x370 [ 135.359748][ T9620] ? __pfx_shmem_initxattrs+0x10/0x10 [ 135.359762][ T9620] ? __pfx_security_inode_init_security+0x10/0x10 [ 135.359786][ T9620] shmem_mknod+0x2ce/0x480 [ 135.359799][ T9620] ? __pfx_may_create+0x10/0x10 [ 135.359816][ T9620] ? __pfx_shmem_mknod+0x10/0x10 [ 135.359831][ T9620] ? inode_permission+0x374/0x620 [ 135.359846][ T9620] shmem_mkdir+0x31/0x80 [ 135.359861][ T9620] vfs_mkdir+0x364/0x850 [ 135.359876][ T9620] filename_mkdirat+0x48b/0x5e0 [ 135.359894][ T9620] ? __pfx_filename_mkdirat+0x10/0x10 [ 135.359910][ T9620] ? strncpy_from_user+0x19d/0x2d0 [ 135.359931][ T9620] ? do_getname+0x191/0x390 [ 135.359943][ T9620] __x64_sys_mkdirat+0x89/0xc0 [ 135.359965][ T9620] do_syscall_64+0x123/0x790 [ 135.359981][ T9620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.359994][ T9620] RIP: 0033:0x7fb76379e159 [ 135.360005][ T9620] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.360021][ T9620] RSP: 002b:00007fb76460c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 135.360038][ T9620] RAX: ffffffffffffffda RBX: 00007fb763a25fa0 RCX: 00007fb76379e159 [ 135.360048][ T9620] RDX: 00000000000001ff RSI: 0000200000003000 RDI: ffffffffffffff9c [ 135.360058][ T9620] RBP: 00007fb76383506b R08: 0000000000000000 R09: 0000000000000000 [ 135.360068][ T9620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.360081][ T9620] R13: 00007fb763a26038 R14: 00007fb763a25fa0 R15: 00007ffdba635b88 [ 135.360108][ T9620] [ 135.408479][ T9623] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2305 sclass=netlink_route_socket pid=9623 comm=syz.6.1127 [ 135.522980][ T9586] ceph: No mds server is up or the cluster is laggy [ 135.571592][ T9639] netlink: 84 bytes leftover after parsing attributes in process `syz.6.1130'. [ 135.571610][ T9639] nbd: must specify at least one socket [ 135.612711][ T9641] overlayfs: workdir and upperdir must be separate subtrees [ 135.714645][ T9650] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1133'. [ 135.841804][ T9654] FAULT_INJECTION: forcing a failure. [ 135.841804][ T9654] name failslab, interval 1, probability 0, space 0, times 0 [ 135.841840][ T9654] CPU: 0 UID: 0 PID: 9654 Comm: syz.5.1136 Tainted: G L syzkaller #0 PREEMPT(full) [ 135.841872][ T9654] Tainted: [L]=SOFTLOCKUP [ 135.841880][ T9654] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 135.841892][ T9654] Call Trace: [ 135.841898][ T9654] [ 135.841905][ T9654] dump_stack_lvl+0x100/0x190 [ 135.841927][ T9654] should_fail_ex.cold+0x5/0xa [ 135.841945][ T9654] should_failslab+0xc2/0x120 [ 135.841963][ T9654] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 135.841981][ T9654] ? security_context_to_sid_core+0x7e7/0x8a0 [ 135.842001][ T9654] kstrdup+0x51/0xe0 [ 135.842013][ T9654] security_context_to_sid_core+0x7e7/0x8a0 [ 135.842032][ T9654] ? __pfx_security_context_to_sid_core+0x10/0x10 [ 135.842053][ T9654] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 135.842065][ T9654] ? do_raw_spin_lock+0x128/0x260 [ 135.842081][ T9654] ? inode_doinit_use_xattr+0x54/0x330 [ 135.842098][ T9654] inode_doinit_use_xattr+0x105/0x330 [ 135.842112][ T9654] inode_doinit_with_dentry+0xb7a/0x1340 [ 135.842132][ T9654] ? __pfx_inode_doinit_with_dentry+0x10/0x10 [ 135.842173][ T9654] selinux_d_instantiate+0x26/0x40 [ 135.842193][ T9654] security_d_instantiate+0x14c/0x1b0 [ 135.842217][ T9654] d_splice_alias_ops+0xd7/0x15b0 [ 135.842234][ T9654] ? kasan_quarantine_put+0x104/0x240 [ 135.842248][ T9654] ? lockdep_hardirqs_on+0x7d/0x110 [ 135.842263][ T9654] ? __pfx_d_splice_alias_ops+0x10/0x10 [ 135.842278][ T9654] ? rcu_is_watching+0x13/0xc0 [ 135.842295][ T9654] ? ovl_lookup+0x58f/0x6b0 [ 135.842310][ T9654] ? kfree+0x1e5/0x6d0 [ 135.842323][ T9654] ovl_lookup+0x5b0/0x6b0 [ 135.842340][ T9654] ? __pfx_ovl_lookup+0x10/0x10 [ 135.842358][ T9654] ? do_raw_spin_lock+0x128/0x260 [ 135.842379][ T9654] ? do_raw_spin_unlock+0x145/0x1e0 [ 135.842396][ T9654] ? _raw_spin_unlock+0x28/0x50 [ 135.842417][ T9654] lookup_one_qstr_excl+0x1cd/0x250 [ 135.842429][ T9654] ? mnt_want_write+0x164/0x420 [ 135.842445][ T9654] filename_create+0x1cf/0x400 [ 135.842460][ T9654] ? __pfx_filename_create+0x10/0x10 [ 135.842475][ T9654] ? lock_acquire+0x1d1/0x380 [ 135.842490][ T9654] ? find_held_lock+0x2b/0x80 [ 135.842511][ T9654] filename_mkdirat+0xb9/0x5e0 [ 135.842530][ T9654] ? __pfx_filename_mkdirat+0x10/0x10 [ 135.842548][ T9654] ? strncpy_from_user+0x19d/0x2d0 [ 135.842566][ T9654] ? do_getname+0x191/0x390 [ 135.842579][ T9654] __x64_sys_mkdirat+0x89/0xc0 [ 135.842597][ T9654] do_syscall_64+0x123/0x790 [ 135.842613][ T9654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.842626][ T9654] RIP: 0033:0x7fb76379e159 [ 135.842638][ T9654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.842650][ T9654] RSP: 002b:00007fb76460c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 135.842670][ T9654] RAX: ffffffffffffffda RBX: 00007fb763a25fa0 RCX: 00007fb76379e159 [ 135.842681][ T9654] RDX: 00000000000001ff RSI: 0000200000000100 RDI: ffffffffffffff9c [ 135.842689][ T9654] RBP: 00007fb76383506b R08: 0000000000000000 R09: 0000000000000000 [ 135.842698][ T9654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.842706][ T9654] R13: 00007fb763a26038 R14: 00007fb763a25fa0 R15: 00007ffdba635b88 [ 135.842725][ T9654] [ 135.842809][ T9654] SELinux: inode_doinit_use_xattr: context_to_sid(system_u:object_r:sysfs_t) returned 12 for dev=overlay ino=4 [ 135.987454][ T9605] comedi comedi1: reset error (fatal) [ 136.548021][ T9668] netlink: 84 bytes leftover after parsing attributes in process `syz.7.1139'. [ 136.548044][ T9668] nbd: must specify at least one socket [ 136.571700][ T9670] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1140'. [ 136.664153][ T9675] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1142'. [ 136.664859][ T43] kauditd_printk_skb: 29 callbacks suppressed [ 136.664875][ T43] audit: type=1400 audit(1791171172.496:830): avc: denied { read } for pid=9674 comm="syz.7.1142" path="socket:[30791]" dev="sockfs" ino=30791 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 136.724725][ T43] audit: type=1400 audit(1791171172.556:831): avc: denied { write } for pid=9678 comm="syz.6.1144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 136.790877][ T9682] syzkaller0: entered promiscuous mode [ 136.790900][ T9682] syzkaller0: entered allmulticast mode [ 136.793416][ T9682] syzkaller0: mtu less than device minimum [ 136.934410][ T43] audit: type=1400 audit(1791171172.766:832): avc: denied { getopt } for pid=9688 comm="syz.7.1150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 137.035317][ T9698] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1149'. [ 137.035339][ T9698] nbd: must specify at least one socket [ 137.041425][ T43] audit: type=1400 audit(1791171172.876:833): avc: denied { ioctl } for pid=9697 comm="syz.7.1153" path="socket:[30499]" dev="sockfs" ino=30499 ioctlcmd=0x5513 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 137.089990][ T43] audit: type=1400 audit(1791171172.926:834): avc: denied { append } for pid=9700 comm="syz.7.1154" name="nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 137.090505][ T9704] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 137.094602][ T9704] cramfs: block size(16384) > page size(4096) not supported by filesystem [ 137.094978][ T9704] cramfs: wrong magic [ 137.318321][ T9716] netlink: 'syz.7.1157': attribute type 3 has an invalid length. [ 137.318336][ T9716] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1157'. [ 137.352293][ T6573] IPVS: starting estimator thread 0... [ 137.457830][ T9719] IPVS: using max 44 ests per chain, 105600 per kthread [ 137.490441][ T9727] Bluetooth: hci0: Invalid link address type 18 for 00:40:00:00:00:00 [ 137.490841][ T9727] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1161'. [ 137.596034][ T43] audit: type=1400 audit(1791171173.426:835): avc: denied { map } for pid=9733 comm="syz.6.1164" path="/dev/dlm-monitor" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 137.871991][ T43] audit: type=1400 audit(1791171173.706:836): avc: denied { map } for pid=9746 comm="syz.6.1169" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 137.872022][ T43] audit: type=1400 audit(1791171173.706:837): avc: denied { execute } for pid=9746 comm="syz.6.1169" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 138.001490][ T43] audit: type=1400 audit(1791171173.836:838): avc: denied { ioctl } for pid=9746 comm="syz.6.1169" path="socket:[29651]" dev="sockfs" ino=29651 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 138.004293][ T9747] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1169'. [ 138.153738][ T43] audit: type=1400 audit(1791171173.986:839): avc: denied { map } for pid=9761 comm="syz.0.1173" path="socket:[29675]" dev="sockfs" ino=29675 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 138.176253][ T9769] nbd: must specify at least one socket [ 138.937239][ T9783] FAULT_INJECTION: forcing a failure. [ 138.937239][ T9783] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 138.937262][ T9783] CPU: 0 UID: 0 PID: 9783 Comm: syz.7.1180 Tainted: G L syzkaller #0 PREEMPT(full) [ 138.937278][ T9783] Tainted: [L]=SOFTLOCKUP [ 138.937283][ T9783] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 138.937289][ T9783] Call Trace: [ 138.937293][ T9783] [ 138.937298][ T9783] dump_stack_lvl+0x100/0x190 [ 138.937318][ T9783] should_fail_ex.cold+0x5/0xa [ 138.937337][ T9783] ? prepare_alloc_pages+0x16d/0x5b0 [ 138.937370][ T9783] should_fail_alloc_page+0xeb/0x140 [ 138.937387][ T9783] prepare_alloc_pages+0x1f0/0x5b0 [ 138.937403][ T9783] ? arch_stack_walk+0xa6/0xf0 [ 138.937423][ T9783] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 138.937440][ T9783] ? stack_trace_save+0x8e/0xc0 [ 138.937452][ T9783] ? __pfx_stack_trace_save+0x10/0x10 [ 138.937463][ T9783] ? stack_depot_save_flags+0x27/0x9f0 [ 138.937480][ T9783] ? kasan_save_stack+0x3f/0x50 [ 138.937493][ T9783] ? kasan_save_stack+0x30/0x50 [ 138.937507][ T9783] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 138.937525][ T9783] ? __lock_acquire+0x5c0/0x1f40 [ 138.937539][ T9783] ? __lock_acquire+0x5c0/0x1f40 [ 138.937551][ T9783] ? __css_rstat_updated+0x1ce/0x590 [ 138.937570][ T9783] ? lock_acquire+0x1d1/0x380 [ 138.937582][ T9783] ? page_table_check_set+0x11d/0x580 [ 138.937599][ T9783] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 138.937614][ T9783] ? policy_nodemask+0xed/0x4f0 [ 138.937631][ T9783] alloc_pages_mpol+0x201/0x550 [ 138.937648][ T9783] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 138.937664][ T9783] ? __page_table_check_ptes_set+0x1d5/0x530 [ 138.937683][ T9783] folio_alloc_mpol_noprof+0x36/0x260 [ 138.937695][ T9783] vma_alloc_folio_noprof+0xed/0x1d0 [ 138.937706][ T9783] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 138.937718][ T9783] ? rcu_read_unlock+0x2d/0xb0 [ 138.937732][ T9783] do_anonymous_page+0xac9/0x2050 [ 138.937754][ T9783] ? __pfx_do_anonymous_page+0x10/0x10 [ 138.937770][ T9783] ? rcu_read_unlock+0x2d/0xb0 [ 138.937780][ T9783] ? rcu_read_unlock+0x2d/0xb0 [ 138.937790][ T9783] ? __pte_offset_map+0x179/0x310 [ 138.937805][ T9783] __handle_mm_fault+0x1ff3/0x2f60 [ 138.937826][ T9783] ? __pfx___handle_mm_fault+0x10/0x10 [ 138.937842][ T9783] ? pte_offset_map_lock+0x174/0x320 [ 138.937856][ T9783] ? find_held_lock+0x2b/0x80 [ 138.937874][ T9783] ? find_held_lock+0x2b/0x80 [ 138.937889][ T9783] ? follow_page_pte+0x536/0x1050 [ 138.937916][ T9783] handle_mm_fault+0x363/0xa20 [ 138.937936][ T9783] __get_user_pages+0x8ae/0x2c30 [ 138.937954][ T9783] ? __pfx_mt_find+0x10/0x10 [ 138.937969][ T9783] ? __pfx___get_user_pages+0x10/0x10 [ 138.937988][ T9783] populate_vma_page_range+0x267/0x3f0 [ 138.938004][ T9783] ? __pfx_populate_vma_page_range+0x10/0x10 [ 138.938019][ T9783] ? __pfx_find_vma_intersection+0x10/0x10 [ 138.938037][ T9783] __mm_populate+0x107/0x3a0 [ 138.938056][ T9783] ? __pfx___mm_populate+0x10/0x10 [ 138.938072][ T9783] ? up_write+0x2dc/0x5b0 [ 138.938087][ T9783] do_mlock+0x3f0/0x800 [ 138.938100][ T9783] ? __pfx_do_mlock+0x10/0x10 [ 138.938115][ T9783] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 138.938129][ T9783] ? __fget_files+0x21f/0x3d0 [ 138.938148][ T9783] __x64_sys_mlock+0xce/0x120 [ 138.938160][ T9783] ? __pfx___x64_sys_mlock+0x10/0x10 [ 138.938175][ T9783] do_syscall_64+0x123/0x790 [ 138.938189][ T9783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.938200][ T9783] RIP: 0033:0x7fe7c999e159 [ 138.938210][ T9783] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.938221][ T9783] RSP: 002b:00007fe7ca7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 138.938232][ T9783] RAX: ffffffffffffffda RBX: 00007fe7c9c25fa0 RCX: 00007fe7c999e159 [ 138.938239][ T9783] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 138.938246][ T9783] RBP: 00007fe7ca7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 138.938253][ T9783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 138.938259][ T9783] R13: 00007fe7c9c26038 R14: 00007fe7c9c25fa0 R15: 00007fff25009808 [ 138.938274][ T9783] [ 139.104965][ T9793] nbd: must specify at least one socket [ 139.160413][ T9795] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9795 comm=syz.7.1186 [ 139.323939][ T9804] evm: overlay not supported [ 139.404957][ T8103] overlayfs: failed lookup in lower (newroot/106, name='bus', err=-40): overlapping layers [ 139.405061][ T8103] overlayfs: failed lookup in lower (newroot/106, name='bus', err=-40): overlapping layers [ 139.469233][ T850] infiniband ©÷Å: ib_query_port failed (-19) [ 139.478479][ T6546] smbdirect: ib_dev[©÷Å] removed [ 139.592914][ T5733] Bluetooth: hci3: Unable to find connection with handle 0x00c8 [ 139.796748][ T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.862839][ T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.925575][ T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.941672][ T5742] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 139.945103][ T5742] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 139.952131][ T5742] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 139.955767][ T5742] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 139.957027][ T5742] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 139.997111][ T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.203759][ T9826] netlink: 'syz.7.1196': attribute type 3 has an invalid length. [ 140.398922][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 140.400803][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 140.401931][ T13] bond0 (unregistering): Released all slaves [ 140.409632][ T13] bond1 (unregistering): Released all slaves [ 140.422047][ T13] bond2 (unregistering): Released all slaves [ 140.447010][ T5445] 8021q: adding VLAN 0 to HW filter on device eth10 [ 140.696906][ T5445] 8021q: adding VLAN 0 to HW filter on device eth11 [ 140.803380][ T13] hsr_slave_0: left promiscuous mode [ 140.803824][ T13] hsr_slave_1: left promiscuous mode [ 140.804194][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.804205][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.804712][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.804722][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.826031][ T13] veth1_macvtap: left promiscuous mode [ 140.826053][ T13] veth0_macvtap: left promiscuous mode [ 140.826115][ T13] veth1_vlan: left promiscuous mode [ 140.826145][ T13] veth0_vlan: left promiscuous mode [ 141.090072][ T13] team0 (unregistering): Port device team_slave_1 removed [ 141.103065][ T13] team0 (unregistering): Port device team_slave_0 removed [ 141.280135][ T9860] FAULT_INJECTION: forcing a failure. [ 141.280135][ T9860] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 141.280165][ T9860] CPU: 0 UID: 0 PID: 9860 Comm: syz.7.1202 Tainted: G L syzkaller #0 PREEMPT(full) [ 141.280189][ T9860] Tainted: [L]=SOFTLOCKUP [ 141.280196][ T9860] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 141.280206][ T9860] Call Trace: [ 141.280211][ T9860] [ 141.280218][ T9860] dump_stack_lvl+0x100/0x190 [ 141.280246][ T9860] should_fail_ex.cold+0x5/0xa [ 141.280273][ T9860] _copy_to_user+0x32/0xd0 [ 141.280297][ T9860] simple_read_from_buffer+0xcb/0x170 [ 141.280323][ T9860] proc_fail_nth_read+0x1af/0x230 [ 141.280348][ T9860] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 141.280375][ T9860] ? rw_verify_area+0xce/0x6d0 [ 141.280394][ T9860] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 141.280419][ T9860] vfs_read+0x1e4/0xb40 [ 141.280439][ T9860] ? lock_acquire+0x1d1/0x380 [ 141.280457][ T9860] ? __fget_files+0x34/0x3d0 [ 141.280480][ T9860] ? __pfx_vfs_read+0x10/0x10 [ 141.280499][ T9860] ? find_held_lock+0x2b/0x80 [ 141.280526][ T9860] ? __fget_files+0x215/0x3d0 [ 141.280555][ T9860] ? __fget_files+0x21f/0x3d0 [ 141.280593][ T9860] ksys_read+0x12a/0x250 [ 141.280615][ T9860] ? __pfx_ksys_read+0x10/0x10 [ 141.280642][ T9860] do_syscall_64+0x123/0x790 [ 141.280669][ T9860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.280689][ T9860] RIP: 0033:0x7fe7c995e98e [ 141.280705][ T9860] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 141.280724][ T9860] RSP: 002b:00007fe7ca7f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 141.280743][ T9860] RAX: ffffffffffffffda RBX: 00007fe7ca7f66c0 RCX: 00007fe7c995e98e [ 141.280756][ T9860] RDX: 000000000000000f RSI: 00007fe7ca7f60a0 RDI: 0000000000000005 [ 141.280767][ T9860] RBP: 00007fe7ca7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 141.280780][ T9860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 141.280792][ T9860] R13: 00007fe7c9c26038 R14: 00007fe7c9c25fa0 R15: 00007fff25009808 [ 141.280835][ T9860] [ 141.297832][ T9813] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.297879][ T9813] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.297947][ T9813] bridge_slave_0: entered allmulticast mode [ 141.304527][ T9813] bridge_slave_0: entered promiscuous mode [ 141.305805][ T9813] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.308073][ T9813] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.308145][ T9813] bridge_slave_1: entered allmulticast mode [ 141.312085][ T9813] bridge_slave_1: entered promiscuous mode [ 141.374778][ T9813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.378530][ T9813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.409235][ T9813] team0: Port device team_slave_0 added [ 141.424310][ T9875] __nla_validate_parse: 7 callbacks suppressed [ 141.424328][ T9875] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1206'. [ 141.426470][ T9813] team0: Port device team_slave_1 added [ 141.459084][ T5445] 8021q: adding VLAN 0 to HW filter on device eth12 [ 141.475082][ T6573] ================================================================== [ 141.475096][ T6573] BUG: KASAN: slab-use-after-free in drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 141.475134][ T6573] Read of size 1 at addr ffff88802cc8e809 by task kworker/u33:48/6573 [ 141.475150][ T6573] [ 141.475163][ T6573] CPU: 3 UID: 0 PID: 6573 Comm: kworker/u33:48 Tainted: G L syzkaller #0 PREEMPT(full) [ 141.475190][ T6573] Tainted: [L]=SOFTLOCKUP [ 141.475198][ T6573] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 141.475212][ T6573] Workqueue: events_unbound commit_work [ 141.475242][ T6573] Call Trace: [ 141.475249][ T6573] [ 141.475258][ T6573] dump_stack_lvl+0x100/0x190 [ 141.475287][ T6573] print_report+0x13d/0x4b0 [ 141.475316][ T6573] ? __virt_addr_valid+0x239/0x430 [ 141.475339][ T6573] ? drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0 [ 141.475383][ T6573] kasan_report+0xdf/0x1c0 [ 141.475411][ T6573] ? drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0 [ 141.475444][ T6573] drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0 [ 141.475476][ T6573] ? preempt_schedule_common+0x3c/0xb0 [ 141.475498][ T6573] ? preempt_schedule_thunk+0x16/0x40 [ 141.475523][ T6573] ? __pfx_drm_atomic_helper_wait_for_vblanks.part.0+0x10/0x10 [ 141.475554][ T6573] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 141.475574][ T6573] ? drm_atomic_helper_commit_hw_done+0x36d/0x490 [ 141.475606][ T6573] drm_atomic_helper_commit_tail+0xff/0x130 [ 141.475636][ T6573] commit_tail+0x338/0x430 [ 141.475667][ T6573] process_one_work+0xac7/0x1b10 [ 141.475701][ T6573] ? __pfx_process_one_work+0x10/0x10 [ 141.475731][ T6573] ? lock_acquire+0x1d1/0x380 [ 141.475756][ T6573] ? __pfx_commit_work+0x10/0x10 [ 141.475786][ T6573] worker_thread+0x5ef/0xe50 [ 141.475808][ T6573] ? kthread+0x13a/0x450 [ 141.475834][ T6573] ? __pfx_worker_thread+0x10/0x10 [ 141.475852][ T6573] kthread+0x373/0x450 [ 141.475878][ T6573] ? __pfx_kthread+0x10/0x10 [ 141.475905][ T6573] ret_from_fork+0x730/0xd60 [ 141.475928][ T6573] ? __pfx_ret_from_fork+0x10/0x10 [ 141.475951][ T6573] ? __switch_to+0x800/0x10f0 [ 141.475978][ T6573] ? __pfx_kthread+0x10/0x10 [ 141.476006][ T6573] ret_from_fork_asm+0x1a/0x30 [ 141.476032][ T6573] [ 141.476039][ T6573] [ 141.476044][ T6573] Allocated by task 9874: [ 141.476053][ T6573] kasan_save_stack+0x30/0x50 [ 141.476081][ T6573] kasan_save_track+0x14/0x30 [ 141.476103][ T6573] __kasan_kmalloc+0xaa/0xb0 [ 141.476124][ T6573] __kmalloc_cache_noprof+0x2f8/0x6d0 [ 141.476142][ T6573] drm_atomic_helper_crtc_duplicate_state+0x72/0xd0 [ 141.476162][ T6573] drm_atomic_get_crtc_state+0x1de/0x690 [ 141.476187][ T6573] drm_atomic_set_property+0x165/0x3f90 [ 141.476210][ T6573] drm_mode_atomic_ioctl+0x6ed/0x2940 [ 141.476236][ T6573] drm_ioctl_kernel+0x1f3/0x3e0 [ 141.476261][ T6573] drm_ioctl+0x5e6/0xc60 [ 141.476284][ T6573] __x64_sys_ioctl+0x18e/0x210 [ 141.476303][ T6573] do_syscall_64+0x123/0x790 [ 141.476323][ T6573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.476340][ T6573] [ 141.476344][ T6573] Freed by task 5085: [ 141.476353][ T6573] kasan_save_stack+0x30/0x50 [ 141.476375][ T6573] kasan_save_track+0x14/0x30 [ 141.476396][ T6573] kasan_save_free_info+0x3b/0x70 [ 141.476415][ T6573] __kasan_slab_free+0x5f/0x80 [ 141.476437][ T6573] kfree+0x22b/0x6d0 [ 141.476452][ T6573] drm_atomic_commit_default_clear+0x465/0x10c0 [ 141.476478][ T6573] __drm_atomic_commit_free+0x185/0x2f0 [ 141.476538][ T6573] drm_atomic_helper_dirtyfb+0x578/0x790 [ 141.476559][ T6573] drm_fbdev_shmem_helper_fb_dirty+0x1cc/0x350 [ 141.476580][ T6573] drm_fb_helper_damage_work+0x4c8/0xab0 [ 141.476608][ T6573] process_one_work+0xac7/0x1b10 [ 141.476633][ T6573] worker_thread+0x5ef/0xe50 [ 141.476648][ T6573] kthread+0x373/0x450 [ 141.476671][ T6573] ret_from_fork+0x730/0xd60 [ 141.476689][ T6573] ret_from_fork_asm+0x1a/0x30 [ 141.476707][ T6573] [ 141.476713][ T6573] The buggy address belongs to the object at ffff88802cc8e800 [ 141.476713][ T6573] which belongs to the cache kmalloc-512 of size 512 [ 141.476727][ T6573] The buggy address is located 9 bytes inside of [ 141.476727][ T6573] freed 512-byte region [ffff88802cc8e800, ffff88802cc8ea00) [ 141.476744][ T6573] [ 141.476748][ T6573] The buggy address belongs to the physical page: [ 141.476755][ T6573] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2cc8c [ 141.476773][ T6573] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 141.476787][ T6573] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 141.476805][ T6573] page_type: f5(slab) [ 141.476822][ T6573] raw: 00fff00000000040 ffff88801c042c80 dead000000000100 dead000000000122 [ 141.476839][ T6573] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 141.476856][ T6573] head: 00fff00000000040 ffff88801c042c80 dead000000000100 dead000000000122 [ 141.476896][ T6573] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 141.476945][ T6573] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 141.476962][ T6573] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 141.476973][ T6573] page dumped because: kasan: bad access detected [ 141.476981][ T6573] page_owner tracks the page as allocated [ 141.476986][ T6573] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6574, tgid 6574 (kworker/u33:49), ts 109141601384 [ 141.477016][ T6573] post_alloc_hook+0xfd/0x120 [ 141.477034][ T6573] get_page_from_freelist+0x110d/0x35d0 [ 141.477053][ T6573] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 141.477078][ T6573] new_slab+0xa9/0x6e0 [ 141.477094][ T6573] refill_objects+0xe3/0x410 [ 141.477111][ T6573] __pcs_replace_empty_main+0x35e/0x650 [ 141.477128][ T6573] __kmalloc_noprof+0x67c/0x840 [ 141.477147][ T6573] fib6_info_alloc+0x40/0x160 [ 141.477169][ T6573] ip6_route_info_create+0x14c/0xad0 [ 141.477191][ T6573] ip6_route_add+0x4b/0x1d0 [ 141.477206][ T6573] addrconf_prefix_route+0x2fb/0x510 [ 141.477225][ T6573] addrconf_add_linklocal+0x329/0x500 [ 141.477248][ T6573] addrconf_addr_gen+0x364/0x3b0 [ 141.477269][ T6573] addrconf_init_auto_addrs+0x1cb/0x780 [ 141.477291][ T6573] addrconf_notify+0xa10/0x1ba0 [ 141.477315][ T6573] notifier_call_chain+0x99/0x3f0 [ 141.477339][ T6573] page last free pid 8177 tgid 8177 ts 105588029085 stack trace: [ 141.477352][ T6573] __free_frozen_pages+0x79f/0x10f0 [ 141.477378][ T6573] qlist_free_all+0x47/0xf0 [ 141.477397][ T6573] kasan_quarantine_reduce+0x1a0/0x1f0 [ 141.477417][ T6573] __kasan_slab_alloc+0x69/0x90 [ 141.477439][ T6573] kmem_cache_alloc_noprof+0x269/0x6a0 [ 141.477459][ T6573] vm_area_dup+0x27/0x9d0 [ 141.477484][ T6573] __split_vma+0x19c/0x1de0 [ 141.477499][ T6573] vma_modify+0x137b/0x29b0 [ 141.477514][ T6573] vma_modify_flags+0x2c3/0x460 [ 141.477531][ T6573] mprotect_fixup+0x27a/0xe00 [ 141.477547][ T6573] do_mprotect_pkey+0xa51/0xdd0 [ 141.477563][ T6573] __x64_sys_mprotect+0x78/0xc0 [ 141.477578][ T6573] do_syscall_64+0x123/0x790 [ 141.477597][ T6573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.477614][ T6573] [ 141.477620][ T6573] Memory state around the buggy address: [ 141.477629][ T6573] ffff88802cc8e700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 141.477642][ T6573] ffff88802cc8e780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 141.477655][ T6573] >ffff88802cc8e800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 141.477679][ T6573] ^ [ 141.477690][ T6573] ffff88802cc8e880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 141.477702][ T6573] ffff88802cc8e900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 141.477712][ T6573] ================================================================== [ 141.490329][ T9813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.490345][ T9813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 141.490365][ T9813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.500000][ T9813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.500014][ T9813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 141.500036][ T9813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.537893][ T6573] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 141.764691][ T6573] CPU: 2 UID: 0 PID: 6573 Comm: kworker/u33:48 Tainted: G L syzkaller #0 PREEMPT(full) [ 141.768101][ T6573] Tainted: [L]=SOFTLOCKUP [ 141.769458][ T6573] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 141.772593][ T6573] Workqueue: events_unbound commit_work [ 141.774337][ T6573] Call Trace: [ 141.775394][ T6573] [ 141.776336][ T6573] dump_stack_lvl+0x100/0x190 [ 141.777834][ T6573] vpanic+0x553/0x970 [ 141.779095][ T6573] ? __pfx_vpanic+0x10/0x10 [ 141.780529][ T6573] ? mark_held_locks+0x40/0x70 [ 141.782056][ T6573] ? drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0 [ 141.784291][ T6573] panic+0xd1/0xe0 [ 141.785494][ T6573] ? __pfx_panic+0x10/0x10 [ 141.786878][ T6573] ? drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0 [ 141.789123][ T6573] ? preempt_schedule_common+0x3c/0xb0 [ 141.790834][ T6573] check_panic_on_warn.cold+0x19/0x34 [ 141.792541][ T6573] end_report.part.0+0x3a/0x90 [ 141.794068][ T6573] kasan_report.cold+0xe/0x18 [ 141.795575][ T6573] ? drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0 [ 141.797835][ T6573] drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0 [ 141.799991][ T6573] ? preempt_schedule_common+0x3c/0xb0 [ 141.801941][ T6573] ? preempt_schedule_thunk+0x16/0x40 [ 141.803625][ T6573] ? __pfx_drm_atomic_helper_wait_for_vblanks.part.0+0x10/0x10 [ 141.805969][ T6573] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 141.807787][ T6573] ? drm_atomic_helper_commit_hw_done+0x36d/0x490 [ 141.810135][ T6573] drm_atomic_helper_commit_tail+0xff/0x130 [ 141.812095][ T6573] commit_tail+0x338/0x430 [ 141.813697][ T6573] process_one_work+0xac7/0x1b10 [ 141.815518][ T6573] ? __pfx_process_one_work+0x10/0x10 [ 141.817480][ T6573] ? lock_acquire+0x1d1/0x380 [ 141.819179][ T6573] ? __pfx_commit_work+0x10/0x10 [ 141.821036][ T6573] worker_thread+0x5ef/0xe50 [ 141.822692][ T6573] ? kthread+0x13a/0x450 [ 141.824218][ T6573] ? __pfx_worker_thread+0x10/0x10 [ 141.825950][ T6573] kthread+0x373/0x450 [ 141.827234][ T6573] ? __pfx_kthread+0x10/0x10 [ 141.828726][ T6573] ret_from_fork+0x730/0xd60 [ 141.830260][ T6573] ? __pfx_ret_from_fork+0x10/0x10 [ 141.831876][ T6573] ? __switch_to+0x800/0x10f0 [ 141.833607][ T6573] ? __pfx_kthread+0x10/0x10 [ 141.835313][ T6573] ret_from_fork_asm+0x1a/0x30 [ 141.836973][ T6573] [ 141.838512][ T6573] Kernel Offset: disabled [ 141.839708][ T6573] Rebooting in 86400 seconds.. VM DIAGNOSIS: 03:32:57 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000000 RBX=ffffc90005e6f738 RCX=ffffc90005e6f5cc RDX=1ffff92000bcdef7 RSI=ffffffff827fc50b RDI=ffffc90005e6f744 RBP=ffffc90005e6f7b8 RSP=ffffc90005e6f658 R8 =ffffffff91f7842a R9 =0000000000000007 R10=0000000000000200 R11=0000000000017f97 R12=ffffffff81f61260 R13=ffffc90005e6f738 R14=0000000000000000 R15=ffff88802aae8000 RIP=ffffffff81f61337 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00005555817b3500 ffffffff 00c00000 GS =0000 ffff8880d5b4e000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fe7ca75da08 CR3=0000000064d64000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000020081 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdba630a40 0000003000000018 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f697461725f6761 726665645f65646f ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdba636076 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdba636076 00007ffdba63607c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb76383564e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb76383568e ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb7638357f2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb763835680 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 2074657365720064 656c696166202973 2528746174736c00 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 0551405640570041 40494c4443050c56 000d514451564900 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffffc90005d60000 RBX=ffff888023a40000 RCX=0000000001000000 RDX=1ffff11004748284 RSI=ffffffff8707428f RDI=0000000000000016 RBP=0000000000000080 RSP=ffffc900006b0ec0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffff88802a74a07c R13=dffffc0000000000 R14=ffff888023a41420 R15=0000000000000000 RIP=ffffffff870742b7 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5c4e000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f86cb357e20 CR3=0000000034ab4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=00000000000000ff Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe6ec56e50 00007ffe6ec56e50 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f86ca7f2823 00007f86ca7f2823 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f86ca7f2e80 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f86ca7f2e80 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055558f36dad8 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 02800307fe10000a 800401c708000601 44ba00316d2f6765 706a6d2f676e696d ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 10000be080800406 0143ce0280040fff ffffffffff040108 00060108fa000800 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100100000100000 1000088080801000 08808080040a015a c012100004808080 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 10000be080800406 0143ce0280040fff ffffffffff040108 00060108fa000800 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 02800307fe10000a 800401c708000601 44ba00316d2f6765 706a6d2f676e696d ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 61657274732f302e 6376752f736e6f69 74636e75662f3167 2f7465676461675f ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=dffffc0000000000 RBX=ffffc900284e7690 RCX=ffffc900284e7668 RDX=1ffff9200509ced4 RSI=ffffffff81f6150e RDI=ffffc900284e76a0 RBP=ffffc900284e7660 RSP=ffffc900284e75b0 R8 =0000000000000001 R9 =0000000000000007 R10=0000000000000200 R11=000000000000b0c2 R12=ffffffff81f61260 R13=ffffc900284e7690 R14=0000000000000000 R15=ffff888026accb00 RIP=ffffffff81f61282 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f1f205cac80 ffffffff 00c00000 GS =0000 ffff8880d5d4e000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c2dd3b9 CR3=0000000034561000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000005000001 Opmask01=0000000000000001 Opmask02=0000000001000000 Opmask03=0000000000000000 Opmask04=00000000feffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd36ec970b 00007ffd36ec970b ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd36ec9c10 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd36ec9c10 0000003000000018 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65746e6f63007325 203a726f72726520 64656e7275746572 2072657672657300 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 40514b4a46005600 051f574a57574005 41404b5750514057 0557405357405600 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 735f76656462665f 6d726420205d3337 353654205b5d3935 353637342e313431 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3830206365203338 2038342030302030 3020303020303020 3038206631206630 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2030302030302030 3020303020303020 3438206631206630 206532203636203e ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 33633c2035302066 3020383020343220 6335203938206334 2030312034322063 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3420623820633420 3830203432203434 2062382063342061 6320393820643420 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 373639323d6f6e69 202273666b636f73 223d76656420225d 35373639325b3a74 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000000000a RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85b1c805 RDI=ffffffff9bc76fa0 RBP=ffffffff9bc76f60 RSP=ffffc900001379e0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3863633230386552 R12=0000000000000000 R13=000000000000000a R14=000000000000000b R15=ffffc90000137da8 RIP=ffffffff85b1c82f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5e4e000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fe7c9987780 CR3=0000000023408000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000001 Opmask01=0000000000000001 Opmask02=0000000001000000 Opmask03=0000000000000000 Opmask04=00000000feffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd36ec970b 00007ffd36ec970b ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd36ec9c10 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd36ec9c10 0000003000000018 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2038203a6b6e696c 74656e205d353738 3954205b5d383233 3432342e31343100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2032203061646366 7465642057353732 3354205157323233 3432342431343100 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 414c5620676e6964 6461203a71313230 38205d3534343554 205b5d3438303935 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3830206365203338 2038342030302030 3020303020303020 3038206631206630 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2030302030302030 3020303020303020 3438206631206630 206532203636203e ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 33633c2035302066 3020383020343220 6335203938206334 2030312034322063 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3420623820633420 3830203432203434 2062382063342061 6320393820643420 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 373639323d6f6e69 202273666b636f73 223d76656420225d 35373639325b3a74 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000