last executing test programs: 10.649738807s ago: executing program 3 (id=7): symlinkat(&(0x7f0000000000)='./file7/file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00') (async) symlinkat(&(0x7f0000000000)='./file7/file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./bus\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./bus\x00', 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, 0x15, 0x1, 0x70bd29, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) mount$overlay(0x0, &(0x7f0000001b40)='./bus\x00', &(0x7f0000001b80), 0x0, &(0x7f0000001bc0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000001c00)='./bus\x00') (async) chdir(&(0x7f0000001c00)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1ac) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000001c0)=0x19) ioctl(r1, 0x40085500, 0x0) (async) ioctl(r1, 0x40085500, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000001c80)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000001cc0)='./file7/file0\x00', 0x0) 10.598732683s ago: executing program 3 (id=10): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000009000000000000000000000300"], 0x0, 0x51}, 0x28) r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000040)) 10.597514189s ago: executing program 3 (id=12): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB=' \x00'/20, @ANYRES32=0x0, @ANYBLOB="0000000041260400"], 0x20}, 0x1, 0x0, 0x0, 0x200080c0}, 0x4000844) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000007, 0x2000002, 0x401c031, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x10b442, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt(r2, 0x1, 0x4b, 0x0, &(0x7f0000001780)) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) writev(r1, &(0x7f0000001540)=[{&(0x7f00000015c0)='4', 0x1}], 0x1) pwrite64(r0, 0x0, 0x0, 0x10001) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0406618, &(0x7f0000001600)={@id={0x2, 0x0, @c}}) recvmmsg(r4, &(0x7f00000000c0)=[{{&(0x7f0000000100)=@un=@abs, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/1}, {&(0x7f0000000200)=""/102}, {&(0x7f00000004c0)=""/4096}, {&(0x7f00000014c0)=""/111}]}}], 0x700, 0x40002002, 0x0) write$binfmt_misc(r3, &(0x7f0000001540), 0xffc1) setsockopt$sock_int(r4, 0x1, 0x10, &(0x7f0000001580)=0x55b7, 0x4) clock_gettime(0x0, &(0x7f00000016c0)={0x0, 0x0}) epoll_pwait2(0xffffffffffffffff, &(0x7f0000001640)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0xa, &(0x7f0000001700)={r5, r6+60000000}, &(0x7f0000001740)={[0x401]}, 0x8) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="4801000010000100feffffff00010000fc0000000000000000000000000000000a010100000000000000000000000000000107144e230005000000803a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d86c000000ac1414aa0000000000000000000000000000000000000000920100000000000f0100000000000000ffff0000000000003c250800000000000a0e000000000000f8ffffffffffffff0000000000000000ffffffffffffffff0000000000000000000800000000000001000000000000000300000008000000000000002cbd700004350000020001002000000000000000480003006c7a7300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500210001000000080018"], 0x148}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 10.423491011s ago: executing program 3 (id=16): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x7, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000ae0000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94) 10.36849458s ago: executing program 3 (id=18): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)}], 0x1}, 0x4000000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f00000012c0)={0x18, {"a2e3ad2119c752f91b5e09091bf70e0dd038e7ff7fc6e5539b324d078b089b3b0838721a0890e0878f0e1ac6e7049b3d63959b509a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31320d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70d998ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f0000000c558cdc0a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5af098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000108000e0a37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b2fc652c54e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d3a6df40babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f794c9eee1198751adaa13d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f39a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60559516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2dc19a3a375e71e078342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb0100008051fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d8872fe174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0559be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f980000000203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./dev\x00', &(0x7f0000000440)='devtmpfs\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt\x00', 0x1ff) mount(&(0x7f00000004c0)=@filename='./dev/sda1\x00', &(0x7f0000000500)='./mnt\x00', &(0x7f0000000540)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f0000000580)='./mnt\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000010c0)='sys_mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001180)='./bus\x00', 0xefb8b6f4896c1f8c) mkdirat(0xffffffffffffff9c, &(0x7f00000011c0)='./file0\x00', 0x28) r3 = accept4$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x6e, 0x0) recvfrom$unix(r3, &(0x7f00000000c0)=""/94, 0x5e, 0x20, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000001200)='./file0\x00', &(0x7f0000001240), 0x8, &(0x7f0000001280)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, 'sys_mnt'}}]}) 10.287189454s ago: executing program 3 (id=21): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) (async) r1 = syz_open_dev$mtd(&(0x7f0000000480), 0x0, 0x2) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$MEMREADOOB64(r1, 0xc0184d16, &(0x7f00000004c0)={0x7ff, 0x0, 0x0, 0x0}) (async) syz_open_procfs$pagemap(r0, &(0x7f0000000080)) r2 = openat$kvm(0x0, &(0x7f00000005c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0xfffffffffffffffd) r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f0000000600)={0x0, &(0x7f0000000640)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_syzos={0x136, 0x40, {0x0, 0x1000, [@nested_load_syzos={0x136, 0x20, {0x0, 0x122}}]}}, @nested_vmlaunch={0x12f, 0x18}], 0x88}) r6 = syz_open_dev$I2C(&(0x7f0000000300), 0x1, 0x0) ioctl$I2C_PEC(r6, 0x708, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) sched_setaffinity(r0, 0x8, &(0x7f0000000440)=0x8) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendto$packet(r7, &(0x7f00000003c0)="ffffffffffff0211223344550806000108000604000242054305123400000000ff4305029afe00000000", 0x2a, 0x24048010, &(0x7f0000000400)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @broadcast}, 0x14) mount(&(0x7f0000000100)=@sg0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='ntfs3\x00', 0x0, &(0x7f00000001c0)='\x00') r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r9, 0xffffffffffffffff, 0x0) ioctl$XFS_IOC_FSGEOMETRY(0xffffffffffffffff, 0x8100587e, &(0x7f0000000200)) 5.199663502s ago: executing program 1 (id=70): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x1d, r1}, 0x10, &(0x7f0000000080)={&(0x7f0000000180)=@canfd={{0x2, 0x1}, 0x28, 0x2, 0x0, 0x0, "4ebbddcec61e342dc333313375ebb0edf619831d1a9869fa82baec379729ec75a4287655fecab300bcb8a7715b7000ec5f21b04b2c7c84ce7910ca897973b170"}, 0x48}, 0x1, 0x0, 0x0, 0x84844}, 0x4090) 5.128666014s ago: executing program 1 (id=71): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="60040000", @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000080003"], 0x460}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$l2tp6(0xa, 0x2, 0x73) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000280)=0x1, 0x4) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 5.123044859s ago: executing program 1 (id=72): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x81, 0x8, 0x0, 0x9, 0x0, 0x6, 0x4}}, {0x4}}]}]}, 0x54}}, 0x0) r9 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r4, &(0x7f00000003c0)={0x2c, 0xa, r8, 0x29, r9}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa, 0x0, 0x6}}}}]}, 0x44}}, 0x44080) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd26, 0x60000000, {0x60, 0x0, 0x0, r6, {0x0, 0x9}, {0x0, 0xa}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7, 0x8}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x55}, 0x4000) move_pages(0x0, 0x1efe, &(0x7f0000000000), 0x0, &(0x7f0000000040), 0x0) r10 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8914, &(0x7f0000000580)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0xfff8}, {0x1, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x9, 0x6, 0x5, 0x1}, @multicast2, @multicast2, 0x0, 0x8001}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000008004500001c000100004011"], 0xfdef) 4.979466787s ago: executing program 1 (id=73): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_mreqsrc(r0, 0x0, 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r1, &(0x7f00000004c0)=""/16384, 0x4000) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x10}, 0x28) r2 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000400)) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x101700) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x1) getsockopt$sock_int(r3, 0x1, 0x55, &(0x7f0000000100), &(0x7f0000000140)=0x4) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)="e9", 0x2f}, 0x1, 0x0, 0x0, 0x810}, 0x24004014) 4.974511829s ago: executing program 1 (id=75): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000100)="a5ce", 0xfed0) r2 = openat$cuse(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0xaaa, 0x9) syz_clone3(&(0x7f0000000000)={0x2140280, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, &(0x7f0000000080)=[0x0], 0x1}, 0x58) r3 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r3, &(0x7f0000000340)={0xa, 0x4e22, 0x1, @private1, 0x5}, 0x1c) 4.527389049s ago: executing program 2 (id=79): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001440)='./dev\x00', &(0x7f00000016c0)='devtmpfs\x00', 0x4010, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './mnt'}, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x6611, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000600)={'vcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000540)={'syztnl2\x00', &(0x7f0000000140)={'syztnl1\x00', r1, 0x0, 0x3, 0xff, 0x10001, 0x61, @remote, @ipv4={'\x00', '\xff\xff', @remote}, 0x7800, 0x8, 0xa, 0x8}}) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={'\x00', 0x2, 0xf99, 0x800, 0xff, 0x9, 0xffffffffffffffff}) r4 = syz_clone(0x1400000, &(0x7f00000002c0)="439352b4c1faca04707a5df5e0981df615ee6ac0a241683f4a5e4ad45cf4ce9e1a07d6aae01573d730960e77349df5282918e0197663e1194dc6c4a2f0e547d71610fe8bbd3e3199580bbb02b84ba961bec3b4b86c09f8073d476e9f83f7278f", 0x60, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)="6d469d7ab8631e5e0dd5fb263149cfbc8a39fd7c7aae4af1895446d39539fa5a13e6a1e44686f6633de9fea3fdbe8cb17a772a53ce8cdd1bddee7e0dcf6819cb9fbbaa3d520d8636176259f27be931c3190ddcf13913bc35f6faeb97996b180418cd167e84caf53640d519b763b1fe1ba233ac4e26bf2809c2d4a656c3259add308b96eb3e091afab5b649a189457c2266176cb1cb9c8bf6c209b5e17b8d21686b6710ae7e8fc1f138aea191d08aaa2b08b62524c09334ea628906a3202fffce63636b6d27816d7903bb602eb92eee009e93c1eaf2dda241b7b126118d3a63f9fa670a21e6f3dbd5e7daf0a8a052b422cccc1e22080572") bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, r2, 0x25, 0x8, @val=@iter={&(0x7f00000004c0)=@task={r3, r4, r0}, 0x10}}, 0x20) r5 = syz_usb_connect(0x0, 0x39, &(0x7f0000000080)=ANY=[@ANYRESHEX, @ANYRES64=r0, @ANYRES8=r0, @ANYRESOCT=0x0, @ANYRESDEC=r0], 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @private=0xa010100}, 0x10) syz_usb_control_io$uac1(r5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001780)='./dev/ttyUSB0\x00', 0x12df00, 0x0) syz_usb_control_io$uac2(r5, &(0x7f0000002f80)={0x14, 0x0, 0x0}, &(0x7f0000000580)={0x44, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0xd1d15cf91d1b7df1, 0x0) 4.069617752s ago: executing program 1 (id=80): syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904"], 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x1, 0x802) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x72, 0x0, 0x7ffefffe}]}) openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.005837721s ago: executing program 0 (id=85): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'syzkaller0\x00', 0x7101}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0x9, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0xfffffffffffffc91}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async) r4 = socket$unix(0x1, 0x1, 0x0) (async) r5 = socket$kcm(0x11, 0x3, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x20a201, 0x0) close(r6) (async) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000005c0)={'syzkaller0\x00', @multicast}) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newtfilter={0xb4, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x80, 0x2, [@TCA_MATCHALL_ACT={0x7c, 0x2, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @mcast2}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x8, 0x7, 0x7fff, 0x7}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000740)={'syzkaller0\x00', 0x0}) (async) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000780), 0x56) sendmsg$kcm(r5, &(0x7f00000007c0)={&(0x7f0000000800)=@xdp={0x2c, 0x0, r7, 0x36}, 0x80, &(0x7f0000000880)=[{&(0x7f00000008c0)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000900)="442ea407603a16ff", 0x300}], 0x2}, 0x20000085) (async) r8 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x402800, 0x0) ioctl$SOUND_OLD_MIXER_INFO(r8, 0x80304d65, &(0x7f0000000100)) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0xcb) (async) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='ecryptfs\x00', 0x40002, &(0x7f0000000180)='ecryptfs_sig=0123456789abcdef\x00') (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) fcntl$lock(r9, 0x25, &(0x7f0000000200)={0x2, 0x0, 0x1001}) (async) getdents64(r8, &(0x7f00000002c0)=""/238, 0xee) (async) getdents64(r9, &(0x7f0000000240)=""/92, 0x5c) 1.469653337s ago: executing program 2 (id=86): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r1 = socket(0x10, 0x3, 0x0) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000540), 0x101000, 0x0) ioctl$CDROMVOLCTRL(r2, 0x31e, &(0x7f0000000580)={0x23, 0xa, 0x9}) setsockopt$sock_int(r1, 0x1, 0x56, &(0x7f0000000300)=0x7fffffff, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'team_slave_0\x00', 0x0}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000980)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fsopen(&(0x7f0000000280)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r7, 0x5, &(0x7f00000002c0)='rd', 0x0, r6) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) setns(0xffffffffffffffff, 0x24020000) close_range(r5, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x13, &(0x7f0000000880)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0xfffa}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, @exit, @alu={0x6, 0x0, 0x6, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000940)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) syz_clone(0x42000000, &(0x7f00000004c0)="64333764a760a17d02fa4bd91221cb95", 0x10, &(0x7f0000000500), &(0x7f00000005c0), &(0x7f0000000600)="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") r8 = mq_open(&(0x7f0000000000)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000380)={0x2000000000002000, 0x1, 0x56, 0x8000000000000001}) mq_timedsend(r8, 0x0, 0x0, 0x3, 0x0) mq_timedreceive(r8, &(0x7f00000003c0)=""/202, 0xca, 0x200000200009, 0x0) r9 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000dc0)={r0, r4, 0x25, 0x4, @val=@iter={0x0}}, 0x20) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r9, 0x4) 1.129762485s ago: executing program 0 (id=87): r0 = syz_open_dev$video(&(0x7f0000000000), 0x9, 0x101900) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0xb014, 0x4, 0x3, 0x0, 0xfd}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000001580)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x130, 0x1c8, 0xffffffff, 0xffffffff, 0x98, 0x130, 0x1c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xf, 0x7, 0x5b4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 1.079616443s ago: executing program 0 (id=88): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc_mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$CDROM_DEBUG(r1, 0x5330, 0x1) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000080)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) pipe2(0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$DM_TABLE_LOAD(0xffffffffffffffff, 0xc138fd09, 0x0) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x178, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@snap_origin={0x0, 0x1000, 0x0, 0x40, 'snapshot-origin\x00', @ram_num={'1:', 0x0}}]}) r3 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, 0x0) ioctl$DM_DEV_SUSPEND(r0, 0xc138fd06, &(0x7f0000000580)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x5800, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}}) mknodat$dm(0xffffffffffffff9c, &(0x7f00000006c0)='./dm0\x00', 0x6180, r2) r4 = openat$dm_dev(0xffffffffffffff9c, &(0x7f0000000700)='./dm0\x00', 0x2, 0x0) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) pwrite64(r4, &(0x7f0000000740)="010203", 0x3, 0x1000) 1.019798546s ago: executing program 0 (id=89): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, &(0x7f0000000380)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000400)=0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x82002, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f0000000280)={r3, &(0x7f0000000180)='#.\x00', 0x100, &(0x7f00000001c0)={@_ha_fsid={[0x2, 0xfffffffd]}, {0x8, 0x8, 0x7f, 0x1}}, 0xa, &(0x7f0000000200)={@_ha_fsid}, &(0x7f0000000240)=0x8}) r5 = syz_open_dev$video(&(0x7f0000000440), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000480)={0x1, 0x2, 0x2, 0x0, 0x39}) ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000004c0)={0x1, 0x1, 0x2}) socket$netlink(0x10, 0x3, 0x10) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f00000006c0)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r4, &(0x7f0000000700)=[{{&(0x7f0000000740)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040045) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_sctp_SCTP_REMOTE_UDP_ENCAPS_PORT(r6, 0x84, 0x84, 0x0, &(0x7f0000000780)) ioctl$VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000500)=@userptr={0x0, 0x1, 0x400000, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000000580)}, 0x400000}) ioctl$VIDIOC_STREAMON(r5, 0x40045612, &(0x7f00000005c0)=0x2) ioctl$VIDIOC_STREAMON(r5, 0x40045612, &(0x7f0000000600)=0x1) ioctl$VIDIOC_DECODER_CMD(r5, 0xc0485660, &(0x7f0000000640)={0x1}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x59401, 0x0) 779.682062ms ago: executing program 2 (id=90): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x92, 0x92, 0x9, [@ptr={0x5, 0x0, 0x0, 0x2, 0x4}, @type_tag={0x10, 0x0, 0x0, 0x12, 0x1}, @datasec={0x1, 0x2, 0x0, 0xf, 0x2, [{0x3, 0x1, 0xfffffffa}, {0x4, 0x7ff, 0x4}], "0daf"}, @enum={0x7, 0x3, 0x0, 0x6, 0x4, [{0x4, 0x8}, {0x2, 0x1}, {0x10, 0x7}]}, @float={0x3, 0x0, 0x0, 0x10, 0xc}, @const={0xe, 0x0, 0x0, 0xa, 0x1}, @volatile={0x3, 0x0, 0x0, 0x9, 0x1}, @typedef={0x7, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x30, 0x0, 0x5f, 0x61, 0x5f, 0x2e, 0x2e]}}, &(0x7f0000000140)=""/92, 0xb5, 0x5c, 0x1, 0x18c2, 0x10000}, 0x28) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.events\x00', 0x275a, 0x0) syncfs(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1b, 0x0, 0x0, 0x8000, 0x100, r0}, 0x50) setuid(0xee01) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f00000004c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x54}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x10000000}}}, &(0x7f0000000580)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x92, 0x92, 0x9, [@ptr={0x5, 0x0, 0x0, 0x2, 0x4}, @type_tag={0x10, 0x0, 0x0, 0x12, 0x1}, @datasec={0x1, 0x2, 0x0, 0xf, 0x2, [{0x3, 0x1, 0xfffffffa}, {0x4, 0x7ff, 0x4}], "0daf"}, @enum={0x7, 0x3, 0x0, 0x6, 0x4, [{0x4, 0x8}, {0x2, 0x1}, {0x10, 0x7}]}, @float={0x3, 0x0, 0x0, 0x10, 0xc}, @const={0xe, 0x0, 0x0, 0xa, 0x1}, @volatile={0x3, 0x0, 0x0, 0x9, 0x1}, @typedef={0x7, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x30, 0x0, 0x5f, 0x61, 0x5f, 0x2e, 0x2e]}}, &(0x7f0000000140)=""/92, 0xb5, 0x5c, 0x1, 0x18c2, 0x10000}, 0x28) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.events\x00', 0x275a, 0x0) (async) syncfs(r0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1b, 0x0, 0x0, 0x8000, 0x100, r0}, 0x50) (async) setuid(0xee01) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f00000004c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x54}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x10000000}}}, &(0x7f0000000580)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) (async) 779.38546ms ago: executing program 2 (id=91): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xffff}, 0x38) r2 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x700, 0x0) r3 = openat$dm_control(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$DM_DEV_CREATE(r3, 0xc138fd03, &(0x7f00000001c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x800, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}}}) ioctl$DM_TABLE_LOAD(r2, 0xc138fd09, &(0x7f0000000300)={0x4, 0x0, 0x0, 0x1f8, 0x138, 0x1, 0x0, 0x4600, 0x0, 0x0, @by_dev={r4}, [@raid={0x0, 0x400, 0x0, 0xc0, 'raid\x00', {'raid5_rs', 0x20, '2 64 nosync', 0x20, 0x4, [{0x20, @none, 0x20, @ram_num={'1:', 0x1}}, {0x20, @none, 0x20, @ram={'/dev/ram', 0x1}}, {0x20, @none, 0x20, @ram_num={'1:', 0x0}}, {0x20, @dev=@ram_num={'1:', 0x1}, 0x20, @ram_num={'1:', 0x0}}]}}]}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001d0001008a0000000000000007000000", @ANYRES32=r1, @ANYBLOB="f60012000a0002"], 0x28}}, 0x10) 709.839205ms ago: executing program 2 (id=92): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x22080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x1fd, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000240)="0f09f5ea97000d0066b80500000066b9f0ffffff0f01d9660f74220f01c57a080f4252000f3026f20f1aed", 0x2b}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1000000000) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xc}, @hci_rp_le_read_local_features={{0x1}, {0x0, "ffffffffffffffff"}}}}, 0xf) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001180), r3) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2002, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000180)={0x1, 0x0, [{0xc0000001, 0x0, 0x526, 0x2928}]}) ioctl$SNDCTL_SEQ_RESETSAMPLES(r5, 0x40045109, &(0x7f0000000200)=0x4) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)={0x58, r4, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wlan0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040801}, 0x400c850) 69.624169ms ago: executing program 2 (id=93): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x3) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x14bc41, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x100}, 0x0) r5 = syz_open_dev$dvb_frontend(&(0x7f0000000240), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r5, 0x40106f52, &(0x7f0000000280)={0x2, &(0x7f00000002c0)=[{0x20, '\x00', @data=0x37ad, 0xfff}]}) write$vga_arbiter(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='trylock '], 0xc) ioctl$TCFLSH(r1, 0x80047437, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_cmd={0x62, 0x8, 0x3, 0x7, 0x3, 0x2, 0x9, 0x4, 0x67, 0x81, 0x3, 0x3, 0x7, 0x80, 0x3, 0x2, [0x8, 0x9566]}}) socket$nl_route(0x10, 0x3, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x3) (async) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x14bc41, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x100}, 0x0) (async) syz_open_dev$dvb_frontend(&(0x7f0000000240), 0x0, 0x2) (async) ioctl$FE_SET_PROPERTY(r5, 0x40106f52, &(0x7f0000000280)={0x2, &(0x7f00000002c0)=[{0x20, '\x00', @data=0x37ad, 0xfff}]}) (async) write$vga_arbiter(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='trylock '], 0xc) (async) ioctl$TCFLSH(r1, 0x80047437, 0x1) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_cmd={0x62, 0x8, 0x3, 0x7, 0x3, 0x2, 0x9, 0x4, 0x67, 0x81, 0x3, 0x3, 0x7, 0x80, 0x3, 0x2, [0x8, 0x9566]}}) (async) 69.174504ms ago: executing program 0 (id=94): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x4}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x80, 0x10000, 0x1, {0x1, @win={{0x9, 0x80000000, 0x3, 0x401}, 0x5, 0x3, 0x0, 0x8, 0x0, 0x2}}, 0x1cdb}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003) mount$fuse(0x0, &(0x7f0000000080)='./dev\x00', 0x0, 0x88820, 0x0) 0s ago: executing program 0 (id=95): add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000300)="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", 0x1d8, 0xfffffffffffffffc) r0 = syz_open_dev$dvb_frontend(&(0x7f00000000c0), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000100)={0x4, &(0x7f00000001c0)=[{0x1d, '\x00', @data=0x7ffff801, 0x5}, {0x28, '\x00', @buffer={"321734a8fbbf5b0d33cbd3ece430772381dd70c90a624a4ad85b38eb96b4d103", 0x20}, 0x2}, {0x1a, '\x00', @data=0x2, 0x9}, {0x20, '\x00', @st={0x4, [{0x0, @svalue=0x4}, {0x2, @svalue=0x6}, {0x0, @svalue=0x6}, {0x0, @svalue=0x200}]}, 0x8b}]}) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:29752' (ED25519) to the list of known hosts. [ 40.043369][ T42] kauditd_printk_skb: 17 callbacks suppressed [ 40.043391][ T42] audit: type=1400 audit(1793861043.451:138): avc: denied { name_bind } for pid=5768 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 40.083511][ T42] audit: type=1400 audit(1793861043.491:139): avc: denied { execute } for pid=5769 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 40.086344][ T42] audit: type=1400 audit(1793861043.501:140): avc: denied { execute_no_trans } for pid=5769 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 42.529439][ T42] audit: type=1400 audit(1793861045.941:141): avc: denied { mounton } for pid=5769 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 42.531187][ T42] audit: type=1400 audit(1793861045.941:142): avc: denied { mount } for pid=5769 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.532936][ T5769] cgroup: Unknown subsys name 'net' [ 42.534124][ T42] audit: type=1400 audit(1793861045.951:143): avc: denied { unmount } for pid=5769 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.657830][ T5769] cgroup: Unknown subsys name 'cpuset' [ 42.663226][ T5769] cgroup: Unknown subsys name 'rlimit' [ 42.799118][ T42] audit: type=1400 audit(1793861046.211:144): avc: denied { setattr } for pid=5769 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.799479][ T42] audit: type=1400 audit(1793861046.211:145): avc: denied { create } for pid=5769 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.799673][ T42] audit: type=1400 audit(1793861046.211:146): avc: denied { write } for pid=5769 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.799904][ T42] audit: type=1400 audit(1793861046.211:147): avc: denied { read } for pid=5769 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.876513][ T5774] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 43.701574][ T5769] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 47.239967][ T42] kauditd_printk_skb: 6 callbacks suppressed [ 47.239985][ T42] audit: type=1400 audit(1793861050.651:154): avc: denied { execmem } for pid=5777 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 47.496476][ T42] audit: type=1400 audit(1793861050.911:155): avc: denied { create } for pid=5781 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.496527][ T42] audit: type=1400 audit(1793861050.911:156): avc: denied { read write } for pid=5781 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.496565][ T42] audit: type=1400 audit(1793861050.911:157): avc: denied { open } for pid=5781 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.515625][ T5783] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 47.516838][ T5783] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 47.519639][ T5783] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 47.521020][ T5783] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 47.521923][ T5783] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 47.527962][ T42] audit: type=1400 audit(1793861050.941:158): avc: denied { ioctl } for pid=5785 comm="syz-executor" path="socket:[6923]" dev="sockfs" ino=6923 ioctlcmd=0x400448c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.528439][ T5783] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 47.530384][ T5783] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 47.531611][ T5783] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 47.532802][ T42] audit: type=1400 audit(1793861050.941:159): avc: denied { read } for pid=5781 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.533335][ T42] audit: type=1400 audit(1793861050.941:160): avc: denied { open } for pid=5781 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.536209][ T42] audit: type=1400 audit(1793861050.951:161): avc: denied { mounton } for pid=5781 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 47.543198][ T42] audit: type=1400 audit(1793861050.951:162): avc: denied { module_request } for pid=5781 comm="syz-executor" kmod="netdev-nr2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 47.543342][ T67] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 47.545389][ T67] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 47.545786][ T67] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 47.546603][ T67] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 47.547478][ T67] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 47.551871][ T5793] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 47.556065][ T5140] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 47.561061][ T42] audit: type=1400 audit(1793861050.971:163): avc: denied { mounton } for pid=5785 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 47.564414][ T5788] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 47.571793][ T5140] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 47.583697][ T5140] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 47.584519][ T5140] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 47.585017][ T5140] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 47.800713][ T5781] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.801472][ T5781] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.803402][ T5781] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.810932][ T5785] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 47.837986][ T5787] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 47.906191][ T5781] infiniband rxe0: set active [ 47.907246][ T5781] infiniband rxe0: added rxe_eth0 [ 47.915264][ T5790] rxe0: rxe_newlink: already configured on rxe_eth0 [ 47.915613][ T5781] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 47.915641][ T5781] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 47.915671][ T5781] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 47.931266][ T24] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.940781][ T5781] RDS/IB: rxe0: added [ 47.940958][ T5790] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.941178][ T5781] smc: adding ib device rxe0 with port count 1 [ 47.941214][ T5781] smc: ib device rxe0 port 1 has no pnetid [ 47.951111][ T9] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.051914][ T5781] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.146040][ T5781] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.169687][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.170333][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.170400][ T5787] bridge_slave_0: entered allmulticast mode [ 48.171246][ T5787] bridge_slave_0: entered promiscuous mode [ 48.174219][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.174260][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.174326][ T5787] bridge_slave_1: entered allmulticast mode [ 48.175227][ T5787] bridge_slave_1: entered promiscuous mode [ 48.224841][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.232953][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.233039][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.233198][ T5785] bridge_slave_0: entered allmulticast mode [ 48.234069][ T5785] bridge_slave_0: entered promiscuous mode [ 48.236232][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.243228][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.243270][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.243414][ T5785] bridge_slave_1: entered allmulticast mode [ 48.244830][ T5785] bridge_slave_1: entered promiscuous mode [ 48.267654][ T5787] team0: Port device team_slave_0 added [ 48.269515][ T5787] team0: Port device team_slave_1 added [ 48.270636][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.272818][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.302215][ T5785] team0: Port device team_slave_0 added [ 48.302689][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.302698][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.302712][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.309463][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.309496][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.309519][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.316492][ T5785] team0: Port device team_slave_1 added [ 48.380733][ T5781] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.400655][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.400673][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.400695][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.413098][ T5787] hsr_slave_0: entered promiscuous mode [ 48.414166][ T5787] hsr_slave_1: entered promiscuous mode [ 48.416816][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.416830][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.416850][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.469195][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.469273][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.469333][ T5790] bridge_slave_0: entered allmulticast mode [ 48.470056][ T5790] bridge_slave_0: entered promiscuous mode [ 48.471764][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.471806][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.471862][ T5790] bridge_slave_1: entered allmulticast mode [ 48.472625][ T5790] bridge_slave_1: entered promiscuous mode [ 48.521617][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.543468][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.554060][ T5785] hsr_slave_0: entered promiscuous mode [ 48.554830][ T5785] hsr_slave_1: entered promiscuous mode [ 48.555141][ T5785] debugfs: 'hsr0' already exists in 'hsr' [ 48.555150][ T5785] Cannot create hsr debugfs directory [ 48.576985][ T5790] team0: Port device team_slave_0 added [ 48.598353][ T5790] team0: Port device team_slave_1 added [ 48.673704][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.673717][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.673731][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.689252][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.689268][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.689291][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.797919][ T5790] hsr_slave_0: entered promiscuous mode [ 48.798769][ T5790] hsr_slave_1: entered promiscuous mode [ 48.799451][ T5790] debugfs: 'hsr0' already exists in 'hsr' [ 48.799464][ T5790] Cannot create hsr debugfs directory [ 48.866335][ T5787] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.871937][ T5787] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.893304][ T5787] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.898687][ T5787] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.918143][ T5787] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.920476][ T5787] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.941240][ T5787] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.944072][ T5787] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.010251][ T5785] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 49.015643][ T5785] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.028524][ T5785] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.030399][ T5785] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.030829][ T5785] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 49.034768][ T5785] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.035228][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.035300][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.035401][ T5781] bridge_slave_0: entered allmulticast mode [ 49.036636][ T5781] bridge_slave_0: entered promiscuous mode [ 49.039659][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.039735][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.039870][ T5781] bridge_slave_1: entered allmulticast mode [ 49.041085][ T5781] bridge_slave_1: entered promiscuous mode [ 49.042468][ T5785] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.046881][ T5785] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.079043][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.081763][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.122115][ T5781] team0: Port device team_slave_0 added [ 49.127415][ T5781] team0: Port device team_slave_1 added [ 49.149264][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.149277][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.149291][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.150740][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.150749][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.150763][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.176949][ T5790] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 49.188795][ T5790] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.189331][ T5790] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.192482][ T5790] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.203736][ T5781] hsr_slave_0: entered promiscuous mode [ 49.204304][ T5781] hsr_slave_1: entered promiscuous mode [ 49.204693][ T5781] debugfs: 'hsr0' already exists in 'hsr' [ 49.204702][ T5781] Cannot create hsr debugfs directory [ 49.205035][ T5790] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 49.207912][ T5790] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.208367][ T5790] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 49.210544][ T5790] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.361173][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.371158][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.372261][ T5781] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 49.375101][ T5781] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.375488][ T5781] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 49.378148][ T5781] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.379139][ T5781] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 49.381651][ T5781] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.382108][ T5781] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 49.384284][ T5781] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.405760][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.412927][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.413001][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.432770][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.436555][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.436600][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.443604][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.445974][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.446088][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.457623][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.457700][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.483716][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.499593][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.499646][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.525364][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.525411][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.554807][ T5140] Bluetooth: hci1: command tx timeout [ 49.565192][ T5140] Bluetooth: hci0: command tx timeout [ 49.573183][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.602396][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.613846][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.614037][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.628147][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.628269][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.644646][ T5140] Bluetooth: hci2: command tx timeout [ 49.644804][ T5792] Bluetooth: hci3: command tx timeout [ 49.788089][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.817908][ T5787] veth0_vlan: entered promiscuous mode [ 49.826484][ T5787] veth1_vlan: entered promiscuous mode [ 49.839467][ T5787] veth0_macvtap: entered promiscuous mode [ 49.842373][ T5787] veth1_macvtap: entered promiscuous mode [ 49.847756][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.852768][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.860402][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.862961][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.895096][ T5785] veth0_vlan: entered promiscuous mode [ 49.915416][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.919658][ T5785] veth1_vlan: entered promiscuous mode [ 49.939591][ T5790] veth0_vlan: entered promiscuous mode [ 49.954174][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.954201][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.954221][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.962989][ T5790] veth1_vlan: entered promiscuous mode [ 49.965287][ T238] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.965318][ T238] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.969039][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.991942][ T5785] veth0_macvtap: entered promiscuous mode [ 50.001231][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.001291][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.005552][ T5785] veth1_macvtap: entered promiscuous mode [ 50.018515][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.026543][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.040453][ T5790] veth0_macvtap: entered promiscuous mode [ 50.041966][ T5781] veth0_vlan: entered promiscuous mode [ 50.047429][ T5790] veth1_macvtap: entered promiscuous mode [ 50.054799][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.059381][ T5781] veth1_vlan: entered promiscuous mode [ 50.069182][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.091121][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.113716][ T5787] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 50.114951][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.115091][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.116129][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.116274][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.116456][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.116591][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.116998][ T238] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.117009][ T238] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.145784][ T5781] veth0_macvtap: entered promiscuous mode [ 50.156774][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.156789][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.169542][ T5781] veth1_macvtap: entered promiscuous mode [ 50.195527][ T238] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.195547][ T238] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.196386][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.204153][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.214612][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.222368][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.222381][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.229613][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.229664][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.229695][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.266775][ T238] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.266795][ T238] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.294683][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.294698][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.324111][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.411117][ T5952] netlink: 300 bytes leftover after parsing attributes in process `syz.3.4'. [ 50.412358][ T5952] netlink: 'syz.3.4': attribute type 1 has an invalid length. [ 50.412374][ T5952] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 50.459933][ T5955] FAULT_INJECTION: forcing a failure. [ 50.459933][ T5955] name failslab, interval 1, probability 0, space 0, times 0 [ 50.459963][ T5955] CPU: 3 UID: 0 PID: 5955 Comm: syz.3.6 Not tainted syzkaller #0 PREEMPT(full) [ 50.459987][ T5955] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 50.459998][ T5955] Call Trace: [ 50.460022][ T5955] [ 50.460032][ T5955] dump_stack_lvl+0x100/0x190 [ 50.460072][ T5955] should_fail_ex.cold+0x5/0xa [ 50.460101][ T5955] should_failslab+0xc2/0x120 [ 50.460122][ T5955] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 50.460151][ T5955] ? __alloc_skb+0x140/0x710 [ 50.460177][ T5955] __alloc_skb+0x140/0x710 [ 50.460199][ T5955] ? __alloc_skb+0x5b7/0x710 [ 50.460221][ T5955] ? __pfx___alloc_skb+0x10/0x10 [ 50.460240][ T5955] ? netlink_has_listeners+0x20f/0x430 [ 50.460262][ T5955] ? netlink_has_listeners+0x20f/0x430 [ 50.460302][ T5955] alloc_uevent_skb+0x7d/0x210 [ 50.460339][ T5955] kobject_uevent_env+0xd2d/0x18b0 [ 50.460376][ T5955] ? bus_to_subsys+0x114/0x150 [ 50.460409][ T5955] device_add+0x1173/0x1970 [ 50.460438][ T5955] ? __pfx_device_add+0x10/0x10 [ 50.460470][ T5955] nfc_register_device+0x41/0x3e0 [ 50.460498][ T5955] nci_register_device+0x7f1/0xb80 [ 50.460529][ T5955] ? __pfx_nci_register_device+0x10/0x10 [ 50.460559][ T5955] ? lockdep_init_map_type+0x5c/0x250 [ 50.460596][ T5955] virtual_ncidev_open+0x141/0x220 [ 50.460622][ T5955] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 50.460653][ T5955] misc_open+0x26d/0x450 [ 50.460683][ T5955] ? __pfx_misc_open+0x10/0x10 [ 50.460709][ T5955] chrdev_open+0x234/0x6a0 [ 50.460731][ T5955] ? __pfx_chrdev_open+0x10/0x10 [ 50.460753][ T5955] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 50.460789][ T5955] do_dentry_open+0x674/0x1470 [ 50.460812][ T5955] ? __pfx_chrdev_open+0x10/0x10 [ 50.460840][ T5955] vfs_open_consume+0xcc/0x460 [ 50.460867][ T5955] path_openat+0x1547/0x23f0 [ 50.460893][ T5955] ? __pfx_path_openat+0x10/0x10 [ 50.460921][ T5955] do_file_open+0x20e/0x430 [ 50.460947][ T5955] ? __pfx_do_file_open+0x10/0x10 [ 50.460992][ T5955] ? _raw_spin_unlock+0x28/0x50 [ 50.461018][ T5955] ? alloc_fd+0x471/0x7a0 [ 50.461047][ T5955] do_sys_openat2+0x163/0x1d0 [ 50.461071][ T5955] ? __pfx_do_sys_openat2+0x10/0x10 [ 50.461106][ T5955] __x64_sys_openat+0x12d/0x210 [ 50.461136][ T5955] ? __pfx___x64_sys_openat+0x10/0x10 [ 50.461171][ T5955] do_syscall_64+0x123/0x790 [ 50.461192][ T5955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.461211][ T5955] RIP: 0033:0x7f2d4859fb19 [ 50.461226][ T5955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.461243][ T5955] RSP: 002b:00007f2d493f9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 50.461281][ T5955] RAX: ffffffffffffffda RBX: 00007f2d48825fa0 RCX: 00007f2d4859fb19 [ 50.461296][ T5955] RDX: 0000000000000002 RSI: 00002000000002c0 RDI: ffffffffffffff9c [ 50.461308][ T5955] RBP: 00007f2d48637b70 R08: 0000000000000000 R09: 0000000000000000 [ 50.461319][ T5955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 50.461331][ T5955] R13: 00007f2d48826038 R14: 00007f2d48825fa0 R15: 00007ffd9ffd5048 [ 50.461358][ T5955] [ 50.518411][ T5963] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 50.526923][ T5963] ======================================================= [ 50.526923][ T5963] WARNING: The mand mount option has been deprecated and [ 50.526923][ T5963] and is ignored by this kernel. Remove the mand [ 50.526923][ T5963] option from the mount to silence this warning. [ 50.526923][ T5963] ======================================================= [ 50.527437][ T5965] overlayfs: failed to resolve './file0': -2 [ 50.530217][ T5963] warning: `syz.1.2' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 50.723288][ T5992] ip_tables: iptables: counters copy to user failed while replacing table [ 50.826219][ T6000] Zero length message leads to an empty skb [ 50.873750][ T6003] device-mapper: table: 248:0: cache: Error opening cache device (-ENOENT) [ 50.873767][ T6003] device-mapper: ioctl: error adding target to table [ 51.131079][ T6016] ip6t_REJECT: ECHOREPLY is not supported [ 51.177702][ T6018] overlayfs: conflicting options: nfs_export=on,index=off [ 51.193684][ T6020] overlayfs: conflicting options: nfs_export=on,index=off [ 51.367087][ T6026] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 51.367659][ T6027] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 51.399534][ T6029] netlink: 'syz.1.27': attribute type 1 has an invalid length. [ 51.399641][ T6030] netlink: 'syz.1.27': attribute type 1 has an invalid length. [ 51.447762][ T6033] xt_LOG: prefix is not null-terminated [ 51.450428][ T6030] veth0_virt_wifi: entered promiscuous mode [ 51.509774][ T6037] netlink: 24 bytes leftover after parsing attributes in process `syz.1.30'. [ 51.509906][ T6037] netlink: 24 bytes leftover after parsing attributes in process `syz.1.30'. [ 51.569667][ T12] smpboot: CPU 1 is now offline [ 51.597422][ T6044] nvme nvme0: failed to connect socket: -111 [ 51.634241][ T5792] Bluetooth: hci1: command tx timeout [ 51.647043][ T6047] netlink: 12 bytes leftover after parsing attributes in process `syz.1.33'. [ 51.714095][ T5792] Bluetooth: hci3: command tx timeout [ 51.714117][ T5792] Bluetooth: hci2: command tx timeout [ 51.719299][ T5191] udevd[5191]: could not touch /run/udev/queue: No such file or directory [ 51.727577][ T6051] rxe_eth0 speed is unknown, defaulting to 1000 [ 52.237055][ T5191] udevd[5191]: could not touch /run/udev/queue: No such file or directory [ 52.249419][ T42] kauditd_printk_skb: 143 callbacks suppressed [ 52.249432][ T42] audit: type=1400 audit(1793861055.661:307): avc: denied { write } for pid=6065 comm="syz.2.37" name="renderD128" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 52.275656][ T42] audit: type=1400 audit(1793861055.691:308): avc: denied { read write } for pid=6067 comm="syz.2.38" name="vbi9" dev="devtmpfs" ino=1027 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 52.276594][ T42] audit: type=1400 audit(1793861055.691:309): avc: denied { open } for pid=6067 comm="syz.2.38" path="/dev/vbi9" dev="devtmpfs" ino=1027 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 52.283428][ T42] audit: type=1400 audit(1793861055.691:310): avc: denied { execmem } for pid=6067 comm="syz.2.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 52.284093][ T42] audit: type=1400 audit(1793861055.701:311): avc: denied { ioctl } for pid=6067 comm="syz.2.38" path="/dev/raw-gadget" dev="devtmpfs" ino=848 ioctlcmd=0x41015500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 52.288928][ T5191] udevd[5191]: could not touch /run/udev/queue: No such file or directory [ 52.291818][ T5191] udevd[5191]: could not touch /run/udev/queue: No such file or directory [ 52.293673][ T5191] udevd[5191]: could not touch /run/udev/queue: No such file or directory [ 52.312557][ T5191] udevd[5191]: could not touch /run/udev/queue: No such file or directory [ 52.403208][ T42] audit: type=1400 audit(1793861055.811:312): avc: denied { unmount } for pid=5787 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 52.524171][ T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 52.594120][ T5140] Bluetooth: hci0: command tx timeout [ 52.654820][ T10] usb 7-1: device descriptor read/64, error -71 [ 52.664065][ T5888] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 52.777551][ T42] audit: type=1400 audit(1793861056.191:313): avc: denied { mount } for pid=6073 comm="syz.1.40" name="/" dev="gadgetfs" ino=9327 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 52.783372][ T6074] gadgetfs: bound to dummy_udc driver [ 52.814534][ T5888] usb 5-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 52.816440][ T5888] usb 5-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 52.816459][ T5888] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 4 [ 52.816477][ T5888] usb 5-1: config 0 interface 0 has no altsetting 0 [ 52.818225][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 52.818247][ T5888] usb 5-1: Product: syz [ 52.818258][ T5888] usb 5-1: Manufacturer: syz [ 52.818269][ T5888] usb 5-1: SerialNumber: syz [ 52.820939][ T5888] usb 5-1: config 0 descriptor?? [ 52.831009][ T5888] usb 5-1: selecting invalid altsetting 0 [ 52.856715][ T6076] process 'syz.1.40' launched './file0' with NULL argv: empty string added [ 52.857106][ T42] audit: type=1400 audit(1793861056.271:314): avc: denied { execute_no_trans } for pid=6073 comm="syz.1.40" path="/8/file0" dev="tmpfs" ino=66 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 52.863552][ T6076] device-mapper: raid: Ignoring chunk size parameter for RAID 1 [ 52.863569][ T6076] device-mapper: raid: Choosing default region size of 4MiB [ 52.884150][ T6076] device-mapper: raid: Superblocks created for new raid set [ 52.893994][ T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 52.937788][ T6076] md/raid1:mdX: active with 1 out of 1 mirrors [ 52.966530][ T6073] gadgetfs: suspended from state 2 [ 52.985124][ T42] audit: type=1400 audit(1793861056.401:315): avc: denied { unmount } for pid=5790 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 53.025626][ T10] usb 7-1: device descriptor read/64, error -71 [ 53.027483][ T42] audit: type=1400 audit(1793861056.441:316): avc: denied { read append } for pid=6069 comm="syz.0.39" name="rtc0" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 53.034041][ T5887] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 53.036022][ T5888] usb 5-1: USB disconnect, device number 2 [ 53.135088][ T10] usb usb7-port1: attempt power cycle [ 53.474046][ T10] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 53.494491][ T10] usb 7-1: device descriptor read/8, error -71 [ 53.714229][ T5140] Bluetooth: hci1: command tx timeout [ 53.735397][ T10] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 53.755647][ T10] usb 7-1: device descriptor read/8, error -71 [ 53.794096][ T5792] Bluetooth: hci3: command tx timeout [ 53.794190][ T5140] Bluetooth: hci2: command tx timeout [ 53.864676][ T10] usb usb7-port1: unable to enumerate USB device [ 54.008632][ T6097] netlink: 28 bytes leftover after parsing attributes in process `syz.1.45'. [ 54.008656][ T6097] netlink: 'syz.1.45': attribute type 7 has an invalid length. [ 54.008663][ T6097] netlink: 'syz.1.45': attribute type 8 has an invalid length. [ 54.008670][ T6097] netlink: 4 bytes leftover after parsing attributes in process `syz.1.45'. [ 54.011308][ T6097] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 54.016129][ T6097] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 54.018043][ T6097] erspan0: entered promiscuous mode [ 54.021903][ T6097] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 54.183698][ T6107] capability: warning: `syz.1.48' uses deprecated v2 capabilities in a way that may be insecure [ 54.184255][ T6107] capability: warning: `syz.1.48' uses 32-bit capabilities (legacy support in use) [ 54.239415][ T6112] team0: Port device syz_tun added [ 54.247497][ T1047] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 54.250925][ T1047] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 54.480740][ T6120] netlink: 'syz.0.50': attribute type 1 has an invalid length. [ 54.505712][ T10] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 54.577489][ T6124] FAULT_INJECTION: forcing a failure. [ 54.577489][ T6124] name failslab, interval 1, probability 0, space 0, times 0 [ 54.577518][ T6124] CPU: 3 UID: 0 PID: 6124 Comm: syz.0.51 Not tainted syzkaller #0 PREEMPT(full) [ 54.577539][ T6124] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 54.577550][ T6124] Call Trace: [ 54.577588][ T6124] [ 54.577596][ T6124] dump_stack_lvl+0x100/0x190 [ 54.577697][ T6124] should_fail_ex.cold+0x5/0xa [ 54.577735][ T6124] should_failslab+0xc2/0x120 [ 54.577783][ T6124] kmem_cache_alloc_noprof+0x92/0x6a0 [ 54.577823][ T6124] ? stack_depot_save_flags+0x456/0xa10 [ 54.577908][ T6124] ? __kernfs_new_node+0xd2/0xa10 [ 54.577960][ T6124] __kernfs_new_node+0xd2/0xa10 [ 54.577978][ T6124] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 54.578002][ T6124] ? netdev_register_kobject+0x225/0x410 [ 54.578069][ T6124] ? register_netdevice+0x1313/0x26b0 [ 54.578094][ T6124] ? map_id_range_down+0x2bc/0x3b0 [ 54.578135][ T6124] ? __pfx___kernfs_new_node+0x10/0x10 [ 54.578156][ T6124] ? lock_acquire+0x1d1/0x380 [ 54.578191][ T6124] ? kernfs_root+0x23/0x2a0 [ 54.578219][ T6124] ? find_held_lock+0x2b/0x80 [ 54.578238][ T6124] ? kernfs_root+0xee/0x2a0 [ 54.578264][ T6124] ? kernfs_root+0xee/0x2a0 [ 54.578297][ T6124] kernfs_create_dir_ns+0xa4/0x2b0 [ 54.578322][ T6124] sysfs_create_dir_ns+0x13a/0x2b0 [ 54.578350][ T6124] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 54.578376][ T6124] ? kobject_set_name_vargs+0xfe/0x140 [ 54.578477][ T6124] ? kobject_set_name+0xc7/0x100 [ 54.578503][ T6124] ? __pfx_kobject_set_name+0x10/0x10 [ 54.578535][ T6124] kobject_add_internal+0x2c8/0x930 [ 54.578566][ T6124] kset_register+0x198/0x290 [ 54.578593][ T6124] kset_create_and_add+0x123/0x190 [ 54.578621][ T6124] netdev_register_kobject+0x225/0x410 [ 54.578644][ T6124] register_netdevice+0x1313/0x26b0 [ 54.578675][ T6124] ? __pfx_register_netdevice+0x10/0x10 [ 54.578708][ T6124] vif_add+0xbb5/0x1180 [ 54.578762][ T6124] ? __pfx_vif_add+0x10/0x10 [ 54.578795][ T6124] ? lock_acquire+0x1d1/0x380 [ 54.578824][ T6124] ? __might_fault+0xc5/0x140 [ 54.578861][ T6124] ? pti_set_user_pgtbl+0x50/0x50 [ 54.578894][ T6124] ip_mroute_setsockopt+0x108f/0x12b0 [ 54.578919][ T6124] ? __pfx_ip_mroute_setsockopt+0x10/0x10 [ 54.578940][ T6124] ? avc_has_perm_noaudit+0x3a2/0x470 [ 54.578983][ T6124] ? __pfx_avc_has_perm+0x10/0x10 [ 54.579011][ T6124] do_ip_setsockopt+0x382/0x3310 [ 54.579040][ T6124] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 54.579064][ T6124] ? __pfx_sock_has_perm+0x10/0x10 [ 54.579090][ T6124] ? selinux_netlbl_socket_setsockopt+0x134/0x470 [ 54.579133][ T6124] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 54.579175][ T6124] ip_setsockopt+0x5a/0xf0 [ 54.579199][ T6124] raw_setsockopt+0x60/0x1b0 [ 54.579224][ T6124] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 54.579254][ T6124] do_sock_setsockopt+0xf3/0x1d0 [ 54.579282][ T6124] __sys_setsockopt+0x195/0x220 [ 54.579308][ T6124] __x64_sys_setsockopt+0xbd/0x160 [ 54.579329][ T6124] ? do_syscall_64+0xae/0x790 [ 54.579348][ T6124] ? lockdep_hardirqs_on+0x7d/0x110 [ 54.579369][ T6124] do_syscall_64+0x123/0x790 [ 54.579391][ T6124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.579410][ T6124] RIP: 0033:0x7fb96f99fb19 [ 54.579434][ T6124] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.579451][ T6124] RSP: 002b:00007fb970939028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 54.579489][ T6124] RAX: ffffffffffffffda RBX: 00007fb96fc25fa0 RCX: 00007fb96f99fb19 [ 54.579501][ T6124] RDX: 00000000000000ca RSI: 0000000000000000 RDI: 0000000000000007 [ 54.579513][ T6124] RBP: 00007fb96fa37b70 R08: 0000000000000010 R09: 0000000000000000 [ 54.579524][ T6124] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 54.579536][ T6124] R13: 00007fb96fc26038 R14: 00007fb96fc25fa0 R15: 00007fffe6f78498 [ 54.579562][ T6124] [ 54.579572][ T6124] kobject: kobject_add_internal failed for queues (error: -12 parent: pimreg) [ 54.684763][ T5140] Bluetooth: hci0: command tx timeout [ 54.784584][ T6135] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 54.792198][ T6137] serio: Serial port ptm1 [ 55.014786][ T9] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 55.052673][ T6110] ceph: No mds server is up or the cluster is laggy [ 55.406276][ T6155] FAULT_INJECTION: forcing a failure. [ 55.406276][ T6155] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 55.406322][ T6155] CPU: 0 UID: 0 PID: 6155 Comm: syz.1.62 Not tainted syzkaller #0 PREEMPT(full) [ 55.406346][ T6155] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 55.406358][ T6155] Call Trace: [ 55.406366][ T6155] [ 55.406374][ T6155] dump_stack_lvl+0x100/0x190 [ 55.406411][ T6155] should_fail_ex.cold+0x5/0xa [ 55.406441][ T6155] should_fail_alloc_page+0xeb/0x140 [ 55.406467][ T6155] prepare_alloc_pages+0x1f0/0x5b0 [ 55.406511][ T6155] __alloc_frozen_pages_noprof+0x1b1/0x3280 [ 55.406545][ T6155] ? __pfx_get_page_from_freelist+0x10/0x10 [ 55.406578][ T6155] ? rcu_is_watching+0x13/0xc0 [ 55.406614][ T6155] ? trace_mm_page_alloc+0x164/0x1c0 [ 55.406639][ T6155] ? __alloc_frozen_pages_noprof+0x306/0x3280 [ 55.406672][ T6155] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 55.406701][ T6155] ? lock_acquire+0x1d1/0x380 [ 55.406729][ T6155] ? is_bpf_text_address+0x25/0x1a0 [ 55.406768][ T6155] ? find_held_lock+0x2b/0x80 [ 55.406792][ T6155] ? is_bpf_text_address+0x8a/0x1a0 [ 55.406817][ T6155] ? is_bpf_text_address+0x8a/0x1a0 [ 55.406844][ T6155] ? bpf_ksym_find+0x128/0x1c0 [ 55.406885][ T6155] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 55.406924][ T6155] ? kernel_text_address+0x8d/0x100 [ 55.406980][ T6155] alloc_pages_bulk_noprof+0x5f0/0x1480 [ 55.407012][ T6155] ? lock_acquire+0x1d1/0x380 [ 55.407044][ T6155] ? policy_nodemask+0xed/0x5e0 [ 55.407073][ T6155] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 55.407119][ T6155] __kasan_populate_vmalloc+0xf0/0x210 [ 55.407157][ T6155] alloc_vmap_area+0x963/0x2bc0 [ 55.407197][ T6155] ? kasan_save_track+0x14/0x30 [ 55.407218][ T6155] ? __kasan_kmalloc+0xaa/0xb0 [ 55.407238][ T6155] ? __pfx_alloc_vmap_area+0x10/0x10 [ 55.407271][ T6155] ? __get_vm_area_node+0x124/0x350 [ 55.407290][ T6155] __get_vm_area_node+0x1ed/0x350 [ 55.407316][ T6155] __vmalloc_node_range_noprof+0x2ad/0x1440 [ 55.407338][ T6155] ? vhost_task_create+0x1db/0x370 [ 55.407363][ T6155] ? lock_acquire+0x1d1/0x380 [ 55.407390][ T6155] ? rcu_lock_acquire.constprop.0+0x7/0x30 [ 55.407423][ T6155] ? find_held_lock+0x2b/0x80 [ 55.407446][ T6155] ? rcu_read_unlock+0x17/0x60 [ 55.407474][ T6155] ? vhost_task_create+0x1db/0x370 [ 55.407501][ T6155] ? __memcg_slab_post_alloc_hook+0x715/0x10b0 [ 55.407532][ T6155] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 55.407559][ T6155] ? rcu_is_watching+0x13/0xc0 [ 55.407582][ T6155] ? trace_kmem_cache_alloc+0xdd/0x100 [ 55.407608][ T6155] ? vhost_task_create+0x1db/0x370 [ 55.407632][ T6155] __vmalloc_node_noprof+0xad/0xf0 [ 55.407654][ T6155] ? vhost_task_create+0x1db/0x370 [ 55.407680][ T6155] copy_process+0x80b/0x8510 [ 55.407722][ T6155] ? __pfx_copy_process+0x10/0x10 [ 55.407746][ T6155] ? kasan_save_track+0x14/0x30 [ 55.407780][ T6155] ? __kasan_kmalloc+0xaa/0xb0 [ 55.407801][ T6155] ? lockdep_init_map_type+0x5c/0x250 [ 55.407833][ T6155] ? lockdep_init_map_type+0x5c/0x250 [ 55.407864][ T6155] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 55.407890][ T6155] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 55.407928][ T6155] vhost_task_create+0x1db/0x370 [ 55.407954][ T6155] ? __pfx_vhost_task_create+0x10/0x10 [ 55.407987][ T6155] ? __pfx_vhost_task_fn+0x10/0x10 [ 55.408015][ T6155] ? register_lock_class+0x3f/0x7b0 [ 55.408044][ T6155] ? rcu_is_watching+0x13/0xc0 [ 55.408066][ T6155] ? trace_contention_end+0x126/0x160 [ 55.408100][ T6155] kvm_mmu_post_init_vm+0x1b3/0x360 [ 55.408129][ T6155] kvm_arch_vcpu_ioctl_run+0xb5/0x1de0 [ 55.408160][ T6155] ? __pfx___mutex_lock+0x10/0x10 [ 55.408182][ T6155] ? kasan_quarantine_put+0x104/0x240 [ 55.408214][ T6155] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 55.408242][ T6155] ? lock_acquire+0x1d1/0x380 [ 55.408271][ T6155] ? do_raw_write_lock+0x11e/0x260 [ 55.408292][ T6155] ? find_held_lock+0x2b/0x80 [ 55.408313][ T6155] ? kvm_vcpu_ioctl+0x15c6/0x17b0 [ 55.408343][ T6155] ? kvm_vcpu_ioctl+0x15c6/0x17b0 [ 55.408378][ T6155] kvm_vcpu_ioctl+0x735/0x17b0 [ 55.408412][ T6155] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 55.408443][ T6155] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 55.408475][ T6155] ? do_vfs_ioctl+0x226/0x13e0 [ 55.408508][ T6155] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 55.408526][ T6155] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 55.408563][ T6155] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 55.408600][ T6155] ? __fget_files+0x34/0x3d0 [ 55.408649][ T6155] ? selinux_file_ioctl+0x1e0/0x290 [ 55.408679][ T6155] ? selinux_file_ioctl+0x1e7/0x290 [ 55.408712][ T6155] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 55.408746][ T6155] __x64_sys_ioctl+0x18e/0x210 [ 55.408769][ T6155] do_syscall_64+0x123/0x790 [ 55.408789][ T6155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.408811][ T6155] RIP: 0033:0x7f6619f9fb19 [ 55.408829][ T6155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.408847][ T6155] RSP: 002b:00007f661af4f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 55.408866][ T6155] RAX: ffffffffffffffda RBX: 00007f661a225fa0 RCX: 00007f6619f9fb19 [ 55.408879][ T6155] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 55.408891][ T6155] RBP: 00007f661a037b70 R08: 0000000000000000 R09: 0000000000000000 [ 55.408902][ T6155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 55.408920][ T6155] R13: 00007f661a226038 R14: 00007f661a225fa0 R15: 00007ffedb596668 [ 55.408948][ T6155] [ 55.409425][ T6155] syz.1.62: vmalloc error: size 32768, align 0x8000, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 55.409496][ T6155] CPU: 0 UID: 0 PID: 6155 Comm: syz.1.62 Not tainted syzkaller #0 PREEMPT(full) [ 55.409511][ T6155] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 55.409518][ T6155] Call Trace: [ 55.409522][ T6155] [ 55.409527][ T6155] dump_stack_lvl+0x100/0x190 [ 55.409549][ T6155] warn_alloc.cold+0x9e/0xb2 [ 55.409563][ T6155] ? __pfx_warn_alloc+0x10/0x10 [ 55.409579][ T6155] ? lockdep_hardirqs_on+0x7d/0x110 [ 55.409593][ T6155] ? __get_vm_area_node+0x2f0/0x350 [ 55.409607][ T6155] ? __get_vm_area_node+0x22b/0x350 [ 55.409622][ T6155] __vmalloc_node_range_noprof+0xdc6/0x1440 [ 55.409658][ T6155] ? lock_acquire+0x1d1/0x380 [ 55.409675][ T6155] ? rcu_lock_acquire.constprop.0+0x7/0x30 [ 55.409694][ T6155] ? find_held_lock+0x2b/0x80 [ 55.409708][ T6155] ? rcu_read_unlock+0x17/0x60 [ 55.409729][ T6155] ? vhost_task_create+0x1db/0x370 [ 55.409752][ T6155] ? __memcg_slab_post_alloc_hook+0x715/0x10b0 [ 55.409783][ T6155] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 55.409805][ T6155] ? rcu_is_watching+0x13/0xc0 [ 55.409818][ T6155] ? trace_kmem_cache_alloc+0xdd/0x100 [ 55.409850][ T6155] ? vhost_task_create+0x1db/0x370 [ 55.409866][ T6155] __vmalloc_node_noprof+0xad/0xf0 [ 55.409879][ T6155] ? vhost_task_create+0x1db/0x370 [ 55.409896][ T6155] copy_process+0x80b/0x8510 [ 55.409926][ T6155] ? __pfx_copy_process+0x10/0x10 [ 55.409947][ T6155] ? kasan_save_track+0x14/0x30 [ 55.409966][ T6155] ? __kasan_kmalloc+0xaa/0xb0 [ 55.409984][ T6155] ? lockdep_init_map_type+0x5c/0x250 [ 55.410014][ T6155] ? lockdep_init_map_type+0x5c/0x250 [ 55.410043][ T6155] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 55.410062][ T6155] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 55.410090][ T6155] vhost_task_create+0x1db/0x370 [ 55.410114][ T6155] ? __pfx_vhost_task_create+0x10/0x10 [ 55.410146][ T6155] ? __pfx_vhost_task_fn+0x10/0x10 [ 55.410172][ T6155] ? register_lock_class+0x3f/0x7b0 [ 55.410198][ T6155] ? rcu_is_watching+0x13/0xc0 [ 55.410220][ T6155] ? trace_contention_end+0x126/0x160 [ 55.410253][ T6155] kvm_mmu_post_init_vm+0x1b3/0x360 [ 55.410283][ T6155] kvm_arch_vcpu_ioctl_run+0xb5/0x1de0 [ 55.410314][ T6155] ? __pfx___mutex_lock+0x10/0x10 [ 55.410335][ T6155] ? kasan_quarantine_put+0x104/0x240 [ 55.410369][ T6155] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 55.410397][ T6155] ? lock_acquire+0x1d1/0x380 [ 55.410423][ T6155] ? do_raw_write_lock+0x11e/0x260 [ 55.410441][ T6155] ? find_held_lock+0x2b/0x80 [ 55.410462][ T6155] ? kvm_vcpu_ioctl+0x15c6/0x17b0 [ 55.410492][ T6155] ? kvm_vcpu_ioctl+0x15c6/0x17b0 [ 55.410528][ T6155] kvm_vcpu_ioctl+0x735/0x17b0 [ 55.410562][ T6155] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 55.410592][ T6155] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 55.410626][ T6155] ? do_vfs_ioctl+0x226/0x13e0 [ 55.410647][ T6155] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 55.410664][ T6155] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 55.410698][ T6155] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 55.410732][ T6155] ? __fget_files+0x34/0x3d0 [ 55.410768][ T6155] ? selinux_file_ioctl+0x1e0/0x290 [ 55.410797][ T6155] ? selinux_file_ioctl+0x1e7/0x290 [ 55.410829][ T6155] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 55.410860][ T6155] __x64_sys_ioctl+0x18e/0x210 [ 55.410882][ T6155] do_syscall_64+0x123/0x790 [ 55.410906][ T6155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.410935][ T6155] RIP: 0033:0x7f6619f9fb19 [ 55.410952][ T6155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.410971][ T6155] RSP: 002b:00007f661af4f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 55.410990][ T6155] RAX: ffffffffffffffda RBX: 00007f661a225fa0 RCX: 00007f6619f9fb19 [ 55.411001][ T6155] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 55.411013][ T6155] RBP: 00007f661a037b70 R08: 0000000000000000 R09: 0000000000000000 [ 55.411024][ T6155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 55.411036][ T6155] R13: 00007f661a226038 R14: 00007f661a225fa0 R15: 00007ffedb596668 [ 55.411066][ T6155] [ 55.411197][ T6155] Mem-Info: [ 55.411207][ T6155] active_anon:9244 inactive_anon:0 isolated_anon:0 [ 55.411207][ T6155] active_file:0 inactive_file:54888 isolated_file:0 [ 55.411207][ T6155] unevictable:1000 dirty:13 writeback:0 [ 55.411207][ T6155] slab_reclaimable:12028 slab_unreclaimable:70568 [ 55.411207][ T6155] mapped:24499 shmem:1557 pagetables:1165 [ 55.411207][ T6155] sec_pagetables:298 bounce:0 [ 55.411207][ T6155] kernel_misc_reclaimable:0 [ 55.411207][ T6155] free:452875 free_pcp:14727 free_cma:0 [ 55.411259][ T6155] Node 0 active_anon:36976kB inactive_anon:0kB active_file:0kB inactive_file:219360kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:97996kB dirty:52kB writeback:0kB shmem:4228kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13336kB pagetables:4440kB sec_pagetables:1192kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 55.411312][ T6155] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:220kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 55.411361][ T6155] Node 0 DMA free:15360kB boost:0kB min:344kB low:428kB high:512kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 55.411414][ T6155] lowmem_reserve[]: 0 1201 1201 1201 1201 [ 55.411449][ T6155] Node 0 DMA32 free:140320kB boost:0kB min:27068kB low:33832kB high:40596kB reserved_highatomic:0kB free_highatomic:0kB active_anon:36976kB inactive_anon:0kB active_file:0kB inactive_file:219360kB unevictable:2000kB writepending:52kB zspages:0kB present:2080628kB managed:1230692kB mlocked:0kB bounce:0kB free_pcp:58060kB local_pcp:16920kB free_cma:0kB [ 55.411505][ T6155] lowmem_reserve[]: 0 0 0 0 0 [ 55.411539][ T6155] Node 1 Normal free:1655820kB boost:0kB min:40168kB low:50208kB high:60248kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:2000kB writepending:0kB zspages:0kB present:2097152kB managed:1781880kB mlocked:0kB bounce:0kB free_pcp:816kB local_pcp:220kB free_cma:0kB [ 55.411592][ T6155] lowmem_reserve[]: 0 0 0 0 0 [ 55.411625][ T6155] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 55.411764][ T6155] Node 0 DMA32: 4*4kB (UME) 8*8kB (ME) 13*16kB (UE) 2*32kB (UM) 3*64kB (UME) 2*128kB (UE) 3*256kB (UME) 5*512kB (UME) 1*1024kB (M) 0*2048kB 33*4096kB (M) = 140320kB [ 55.411935][ T6155] Node 1 Normal: 1*4kB (U) 1*8kB (M) 2*16kB (UM) 3*32kB (M) 6*64kB (UM) 4*128kB (UM) 2*256kB (U) 5*512kB (UM) 1*1024kB (U) 2*2048kB (UM) 402*4096kB (M) = 1655820kB [ 55.412105][ T6155] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 55.412122][ T6155] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 55.412138][ T6155] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 55.412151][ T6155] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 55.412167][ T6155] 56441 total pagecache pages [ 55.412186][ T6155] 0 pages in swap cache [ 55.412193][ T6155] Free swap = 124996kB [ 55.412299][ T6155] Total swap = 124996kB [ 55.412309][ T6155] 1048443 pages RAM [ 55.412316][ T6155] 0 pages HighMem/MovableOnly [ 55.412323][ T6155] 291460 pages reserved [ 55.412329][ T6155] 0 pages cma reserved [ 55.794075][ T5140] Bluetooth: hci1: command tx timeout [ 55.884527][ T5792] Bluetooth: hci3: command tx timeout [ 55.884557][ T5140] Bluetooth: hci2: command tx timeout [ 55.916731][ T6178] x_tables: duplicate underflow at hook 2 [ 55.920150][ T6177] input: syz0 as /devices/virtual/input/input5 [ 56.038074][ T6185] netlink: 1092 bytes leftover after parsing attributes in process `syz.1.71'. [ 56.107292][ T6187] TC_ACT_REPEAT abuse ? [ 56.155986][ T855] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 56.196598][ T6189] ieee802154 phy0 wpan0: encryption failed: -22 [ 56.202345][ T6191] fuse: Unknown parameter 'user_' [ 56.304057][ T855] usb 5-1: device descriptor read/64, error -71 [ 56.534096][ T855] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 56.667503][ T855] usb 5-1: device descriptor read/64, error -71 [ 56.774362][ T855] usb usb5-port1: attempt power cycle [ 56.914019][ T5872] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 57.063991][ T5872] usb 7-1: device descriptor read/64, error -71 [ 57.124410][ T855] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 57.146574][ T855] usb 5-1: device descriptor read/8, error -71 [ 57.314689][ T5872] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 57.374059][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 57.386630][ T855] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 57.404425][ T855] usb 5-1: device descriptor read/8, error -71 [ 57.454067][ T5872] usb 7-1: device descriptor read/64, error -71 [ 57.515667][ T855] usb usb5-port1: unable to enumerate USB device [ 57.544513][ T10] usb 6-1: New USB device found: idVendor=1ba6, idProduct=0001, bcdDevice=0.01 [ 57.545319][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 57.545344][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.568359][ T10] as10x_usb: device has been detected [ 57.568752][ T10] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 57.574181][ T5872] usb usb7-port1: attempt power cycle [ 57.581016][ T10] usb 6-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 57.588900][ T10] usb 6-1: Direct firmware load for as102_data1_st.hex failed with error -2 [ 57.592642][ T42] kauditd_printk_skb: 46 callbacks suppressed [ 57.592653][ T42] audit: type=1400 audit(1793861061.001:363): avc: denied { firmware_load } for pid=10 comm="kworker/0:1" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 57.592692][ T10] usb 6-1: Falling back to sysfs fallback for: as102_data1_st.hex [ 57.806327][ T42] audit: type=1326 audit(1793861061.221:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6206 comm="syz.1.80" exe=2F73797A2D6578656375746F72202864656C6574656429 sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6619f9fb19 code=0x7ffe0000 [ 57.924082][ T5872] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 57.945083][ T5872] usb 7-1: device descriptor read/8, error -71 [ 58.184013][ T5872] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 58.204718][ T5872] usb 7-1: device descriptor read/8, error -71 [ 58.317093][ T5872] usb usb7-port1: unable to enumerate USB device [ 58.938121][ T42] audit: type=1400 audit(1793861062.351:365): avc: denied { mounton } for pid=6209 comm="syz.0.81" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 58.941087][ T6210] ufs: You didn't specify the type of your ufs filesystem [ 58.941087][ T6210] [ 58.941087][ T6210] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 58.941087][ T6210] [ 58.941087][ T6210] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 58.941105][ T6210] ufs: failed to set blocksize [ 58.944185][ T42] audit: type=1400 audit(1793861062.361:366): avc: denied { name_bind } for pid=6209 comm="syz.0.81" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 58.948523][ T42] audit: type=1400 audit(1793861062.361:367): avc: denied { setopt } for pid=6209 comm="syz.0.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.090599][ T42] audit: type=1400 audit(1793861062.501:368): avc: denied { getopt } for pid=6215 comm="syz.0.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 59.093471][ T6216] netlink: 72 bytes leftover after parsing attributes in process `syz.0.84'. [ 59.093654][ T6216] netlink: 72 bytes leftover after parsing attributes in process `syz.0.84'. [ 59.093882][ T6216] netlink: 72 bytes leftover after parsing attributes in process `syz.0.84'. [ 59.096941][ T6216] netlink: 72 bytes leftover after parsing attributes in process `syz.0.84'. [ 59.097160][ T6216] netlink: 72 bytes leftover after parsing attributes in process `syz.0.84'. [ 59.097331][ T6216] netlink: 72 bytes leftover after parsing attributes in process `syz.0.84'. [ 59.097498][ T6216] netlink: 72 bytes leftover after parsing attributes in process `syz.0.84'. [ 59.097720][ T6216] netlink: 72 bytes leftover after parsing attributes in process `syz.0.84'. [ 59.097920][ T6216] netlink: 72 bytes leftover after parsing attributes in process `syz.0.84'. [ 59.099731][ T1047] rxe_eth0 speed is unknown, defaulting to 1000 [ 59.149368][ T42] audit: type=1400 audit(1793861062.561:369): avc: denied { sys_module } for pid=6219 comm="syz.0.85" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 59.156271][ T42] audit: type=1400 audit(1793861062.571:370): avc: denied { setopt } for pid=6219 comm="syz.0.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 59.174237][ T6221] syzkaller0: entered promiscuous mode [ 59.174252][ T6221] syzkaller0: entered allmulticast mode [ 60.013634][ T6229] rxe_eth0 speed is unknown, defaulting to 1000 [ 60.040741][ T42] audit: type=1400 audit(1793861063.451:371): avc: denied { ioctl } for pid=6230 comm="syz.0.87" path="/dev/video9" dev="devtmpfs" ino=979 ioctlcmd=0xc0145608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 60.044184][ T6232] ip_tables: iptables: counters copy to user failed while replacing table [ 60.106421][ T42] audit: type=1400 audit(1793861063.521:372): avc: denied { create } for pid=6233 comm="syz.0.88" name="dm0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 60.248809][ T6238] kvm: pic: non byte write [ 60.425164][ T6246] device-mapper: raid: Choosing default region size of 4MiB [ 60.425976][ T6246] device-mapper: table: 248:5: raid: Target length not divisible by number of data devices (-EINVAL) [ 60.425990][ T6246] device-mapper: ioctl: error adding target to table [ 62.857031][ T6256] ================================================================== [ 62.857043][ T6256] BUG: KASAN: slab-use-after-free in dvb_frontend_release+0x4f3/0x5d0 [ 62.857118][ T6256] Read of size 4 at addr ffff88802fdba63c by task syz.0.95/6256 [ 62.857127][ T6256] [ 62.857134][ T6256] CPU: 3 UID: 0 PID: 6256 Comm: syz.0.95 Not tainted syzkaller #0 PREEMPT(full) [ 62.857147][ T6256] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 62.857154][ T6256] Call Trace: [ 62.857166][ T6256] [ 62.857170][ T6256] dump_stack_lvl+0x100/0x190 [ 62.857197][ T6256] print_report+0x13d/0x4b0 [ 62.857215][ T6256] ? __virt_addr_valid+0x239/0x430 [ 62.857230][ T6256] ? dvb_frontend_release+0x4f3/0x5d0 [ 62.857244][ T6256] kasan_report+0xdf/0x1c0 [ 62.857258][ T6256] ? dvb_frontend_release+0x4f3/0x5d0 [ 62.857273][ T6256] dvb_frontend_release+0x4f3/0x5d0 [ 62.857288][ T6256] ? __pfx_dvb_frontend_release+0x10/0x10 [ 62.857303][ T6256] __fput+0x3fb/0xb50 [ 62.857319][ T6256] fput_close_sync+0x118/0x250 [ 62.857334][ T6256] ? __pfx_fput_close_sync+0x10/0x10 [ 62.857351][ T6256] filp_close_sync+0x75/0xa0 [ 62.857368][ T6256] put_files_struct+0x1f7/0x390 [ 62.857384][ T6256] exit_files+0x85/0xb0 [ 62.857398][ T6256] do_exit+0x896/0x2a00 [ 62.857415][ T6256] ? __pfx_do_exit+0x10/0x10 [ 62.857430][ T6256] ? do_raw_spin_lock+0x128/0x260 [ 62.857440][ T6256] ? find_held_lock+0x2b/0x80 [ 62.857452][ T6256] ? get_signal+0xa28/0x22e0 [ 62.857466][ T6256] do_group_exit+0xd5/0x2a0 [ 62.857483][ T6256] get_signal+0x1f58/0x22e0 [ 62.857501][ T6256] ? kmem_cache_free+0x127/0x6c0 [ 62.857517][ T6256] ? __pfx_get_signal+0x10/0x10 [ 62.857531][ T6256] ? putname+0xb6/0x110 [ 62.857546][ T6256] arch_do_signal_or_restart+0x91/0x7e0 [ 62.857559][ T6256] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 62.857575][ T6256] ? __x64_sys_openat+0x12d/0x210 [ 62.857592][ T6256] exit_to_user_mode_loop+0x139/0x700 [ 62.857611][ T6256] ? rcu_is_watching+0x13/0xc0 [ 62.857625][ T6256] do_syscall_64+0x661/0x790 [ 62.857661][ T6256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.857673][ T6256] RIP: 0033:0x7fb96f96034e [ 62.857682][ T6256] Code: Unable to access opcode bytes at 0x7fb96f960324. [ 62.857694][ T6256] RSP: 002b:00007fb970938b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 62.857706][ T6256] RAX: 0000000000000003 RBX: 00007fb9709396c0 RCX: 00007fb96f96034e [ 62.857713][ T6256] RDX: 0000000000000000 RSI: 00007fb970938c00 RDI: ffffffffffffff9c [ 62.857720][ T6256] RBP: 00007fb970938c00 R08: 0000000000000000 R09: 0000000000000000 [ 62.857727][ T6256] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 62.857734][ T6256] R13: 00007fb96fc26038 R14: 00007fb96fc25fa0 R15: 00007fffe6f78498 [ 62.857744][ T6256] [ 62.857748][ T6256] [ 62.857750][ T6256] Allocated by task 1: [ 62.857756][ T6256] kasan_save_stack+0x30/0x50 [ 62.857766][ T6256] kasan_save_track+0x14/0x30 [ 62.857776][ T6256] __kasan_kmalloc+0xaa/0xb0 [ 62.857785][ T6256] __kmalloc_cache_noprof+0x2f8/0x6d0 [ 62.857818][ T6256] dvb_register_device+0x1d6/0x1e20 [ 62.857834][ T6256] dvb_register_frontend+0x552/0x820 [ 62.857847][ T6256] vidtv_bridge_probe+0x447/0xa50 [ 62.857864][ T6256] platform_probe+0x106/0x1d0 [ 62.857890][ T6256] really_probe+0x241/0xa60 [ 62.857902][ T6256] __driver_probe_device+0x210/0x460 [ 62.857913][ T6256] driver_probe_device+0x4a/0x140 [ 62.857925][ T6256] __driver_attach+0x231/0x5b0 [ 62.857937][ T6256] bus_for_each_dev+0x13e/0x1d0 [ 62.857953][ T6256] bus_add_driver+0x4bf/0x620 [ 62.857962][ T6256] driver_register+0x1e2/0x360 [ 62.857975][ T6256] vidtv_bridge_init+0x52/0x80 [ 62.858027][ T6256] do_one_initcall+0x11c/0x6f0 [ 62.858039][ T6256] kernel_init_freeable+0x6ea/0x7b0 [ 62.858058][ T6256] kernel_init+0x21/0x1e0 [ 62.858071][ T6256] ret_from_fork+0x730/0xd60 [ 62.858084][ T6256] ret_from_fork_asm+0x1a/0x30 [ 62.858097][ T6256] [ 62.858099][ T6256] Freed by task 6256: [ 62.858105][ T6256] kasan_save_stack+0x30/0x50 [ 62.858114][ T6256] kasan_save_track+0x14/0x30 [ 62.858124][ T6256] kasan_save_free_info+0x3b/0x70 [ 62.858138][ T6256] __kasan_slab_free+0x5f/0x80 [ 62.858148][ T6256] kfree+0x22b/0x6d0 [ 62.858160][ T6256] dvb_device_put.part.0+0x57/0x90 [ 62.858174][ T6256] dvb_generic_release+0xe2/0x160 [ 62.858188][ T6256] dvb_frontend_release+0x13d/0x5d0 [ 62.858201][ T6256] __fput+0x3fb/0xb50 [ 62.858213][ T6256] fput_close_sync+0x118/0x250 [ 62.858227][ T6256] filp_close_sync+0x75/0xa0 [ 62.858241][ T6256] put_files_struct+0x1f7/0x390 [ 62.858255][ T6256] exit_files+0x85/0xb0 [ 62.858267][ T6256] do_exit+0x896/0x2a00 [ 62.858281][ T6256] do_group_exit+0xd5/0x2a0 [ 62.858295][ T6256] get_signal+0x1f58/0x22e0 [ 62.858307][ T6256] arch_do_signal_or_restart+0x91/0x7e0 [ 62.858318][ T6256] exit_to_user_mode_loop+0x139/0x700 [ 62.858327][ T6256] do_syscall_64+0x661/0x790 [ 62.858337][ T6256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.858347][ T6256] [ 62.858350][ T6256] The buggy address belongs to the object at ffff88802fdba600 [ 62.858350][ T6256] which belongs to the cache kmalloc-256 of size 256 [ 62.858358][ T6256] The buggy address is located 60 bytes inside of [ 62.858358][ T6256] freed 256-byte region [ffff88802fdba600, ffff88802fdba700) [ 62.858369][ T6256] [ 62.858371][ T6256] The buggy address belongs to the physical page: [ 62.858377][ T6256] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2fdba [ 62.858387][ T6256] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 62.858395][ T6256] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 62.858405][ T6256] page_type: f5(slab) [ 62.858414][ T6256] raw: 00fff00000000040 ffff88801d442b40 dead000000000100 dead000000000122 [ 62.858424][ T6256] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 62.858434][ T6256] head: 00fff00000000040 ffff88801d442b40 dead000000000100 dead000000000122 [ 62.858443][ T6256] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 62.858453][ T6256] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 62.858462][ T6256] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 62.858468][ T6256] page dumped because: kasan: bad access detected [ 62.858473][ T6256] page_owner tracks the page as allocated [ 62.858477][ T6256] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 8928460494 [ 62.858495][ T6256] post_alloc_hook+0xfd/0x120 [ 62.858512][ T6256] get_page_from_freelist+0x1113/0x35e0 [ 62.858527][ T6256] __alloc_frozen_pages_noprof+0x2bd/0x3280 [ 62.858542][ T6256] new_slab+0xb1/0x6d0 [ 62.858555][ T6256] refill_objects+0xe3/0x410 [ 62.858569][ T6256] __pcs_replace_empty_main+0x35e/0x650 [ 62.858583][ T6256] __kmalloc_cache_noprof+0x4ef/0x6d0 [ 62.858597][ T6256] bus_add_driver+0xdc/0x620 [ 62.858607][ T6256] driver_register+0x1e2/0x360 [ 62.858620][ T6256] do_one_initcall+0x11c/0x6f0 [ 62.858640][ T6256] kernel_init_freeable+0x6ea/0x7b0 [ 62.858651][ T6256] kernel_init+0x21/0x1e0 [ 62.858664][ T6256] ret_from_fork+0x730/0xd60 [ 62.858677][ T6256] ret_from_fork_asm+0x1a/0x30 [ 62.858689][ T6256] page_owner free stack trace missing [ 62.858693][ T6256] [ 62.858695][ T6256] Memory state around the buggy address: [ 62.858700][ T6256] ffff88802fdba500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 62.858708][ T6256] ffff88802fdba580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 62.858715][ T6256] >ffff88802fdba600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 62.858721][ T6256] ^ [ 62.858726][ T6256] ffff88802fdba680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 62.858734][ T6256] ffff88802fdba700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 62.858739][ T6256] ================================================================== [ 62.858746][ T6256] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 63.129727][ T6256] CPU: 3 UID: 0 PID: 6256 Comm: syz.0.95 Not tainted syzkaller #0 PREEMPT(full) [ 63.132377][ T6256] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 63.135270][ T6256] Call Trace: [ 63.136313][ T6256] [ 63.137236][ T6256] dump_stack_lvl+0x100/0x190 [ 63.138660][ T6256] vpanic+0x2dc/0x6f8 [ 63.139847][ T6256] panic+0xd1/0xe0 [ 63.140988][ T6256] ? __pfx_panic+0x10/0x10 [ 63.142334][ T6256] ? end_report.part.0+0x23/0x90 [ 63.143794][ T6256] ? rcu_is_watching+0x13/0xc0 [ 63.145210][ T6256] check_panic_on_warn.cold+0x19/0x34 [ 63.146864][ T6256] end_report.part.0+0x3a/0x90 [ 63.148292][ T6256] kasan_report.cold+0xe/0x18 [ 63.149661][ T6256] ? dvb_frontend_release+0x4f3/0x5d0 [ 63.151251][ T6256] dvb_frontend_release+0x4f3/0x5d0 [ 63.152776][ T6256] ? __pfx_dvb_frontend_release+0x10/0x10 [ 63.154438][ T6256] __fput+0x3fb/0xb50 [ 63.155665][ T6256] fput_close_sync+0x118/0x250 [ 63.157155][ T6256] ? __pfx_fput_close_sync+0x10/0x10 [ 63.158713][ T6256] filp_close_sync+0x75/0xa0 [ 63.160101][ T6256] put_files_struct+0x1f7/0x390 [ 63.162080][ T6256] exit_files+0x85/0xb0 [ 63.163787][ T6256] do_exit+0x896/0x2a00 [ 63.165546][ T6256] ? __pfx_do_exit+0x10/0x10 [ 63.167507][ T6256] ? do_raw_spin_lock+0x128/0x260 [ 63.169159][ T6256] ? find_held_lock+0x2b/0x80 [ 63.170587][ T6256] ? get_signal+0xa28/0x22e0 [ 63.172019][ T6256] do_group_exit+0xd5/0x2a0 [ 63.173347][ T6256] get_signal+0x1f58/0x22e0 [ 63.174723][ T6256] ? kmem_cache_free+0x127/0x6c0 [ 63.176176][ T6256] ? __pfx_get_signal+0x10/0x10 [ 63.177571][ T6256] ? putname+0xb6/0x110 [ 63.178880][ T6256] arch_do_signal_or_restart+0x91/0x7e0 [ 63.180511][ T6256] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 63.182390][ T6256] ? __x64_sys_openat+0x12d/0x210 [ 63.183915][ T6256] exit_to_user_mode_loop+0x139/0x700 [ 63.185543][ T6256] ? rcu_is_watching+0x13/0xc0 [ 63.187079][ T6256] do_syscall_64+0x661/0x790 [ 63.188489][ T6256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.190237][ T6256] RIP: 0033:0x7fb96f96034e [ 63.191549][ T6256] Code: Unable to access opcode bytes at 0x7fb96f960324. [ 63.193547][ T6256] RSP: 002b:00007fb970938b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 63.196207][ T6256] RAX: 0000000000000003 RBX: 00007fb9709396c0 RCX: 00007fb96f96034e [ 63.199445][ T6256] RDX: 0000000000000000 RSI: 00007fb970938c00 RDI: ffffffffffffff9c [ 63.202250][ T6256] RBP: 00007fb970938c00 R08: 0000000000000000 R09: 0000000000000000 [ 63.204569][ T6256] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 63.206925][ T6256] R13: 00007fb96fc26038 R14: 00007fb96fc25fa0 R15: 00007fffe6f78498 [ 63.209258][ T6256] [ 63.210822][ T6256] Kernel Offset: disabled [ 63.212118][ T6256] Rebooting in 86400 seconds.. VM DIAGNOSIS: 06:44:26 Registers: info registers vcpu 0 CPU#0 RAX=fffff52000813e42 RBX=1ffff92000813e42 RCX=0000000f1dcc7dd0 RDX=0000000ea315f6dd RSI=0000000000000001 RDI=00000000000d2040 RBP=0000000000000000 RSP=ffffc9000409f208 R8 =0000000000001000 R9 =0000000000000000 R10=ffffed100b970000 R11=dffffc0000000000 R12=dffffc0000000000 R13=1ffff92000813e6a R14=00000000000d2040 R15=dffffc0000000000 RIP=ffffffff820e64e0 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 000055557f1b3500 ffffffff 00c00000 GS =0000 ffff8880d447c000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055557f1cea28 CR3=000000005017e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000020081 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc8f037880 0000003000000018 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6572757373657270 5f79726f6d656d2e ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc8f038af6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc8f038af6 00007ffc8f038afc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f66fae381ad ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f66fae381e7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f66fae3834b ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f66fae381d9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 2074657365720064 656c696166202973 2528746174736c00 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 0551405640570041 40494c4443050c56 000d514451564900 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 Failed reading regs: qemu hmp command 'info registers' (qemu kill: ): {GenericError Parameter 'cpu-index' expects a CPU number} info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffffc90003a4f5e0 RCX=0000000000000000 RDX=0000000000000060 RSI=0000000000000000 RDI=ffffc90003a4f550 RBP=ffff88802b0fcb00 RSP=ffffc90003a4f4f8 R8 =0000000000000001 R9 =0000000000000000 R10=ffffc90003a4f550 R11=0000000000000001 R12=0000000000000000 R13=ffffc90003a4f610 R14=ffffc90003a4f550 R15=ffffc90003a4f578 RIP=ffffffff8bee565a RFL=00000247 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00005555567ea500 ffffffff 00c00000 GS =0000 ffff8880d467c000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c2634ad CR3=0000000051f4b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000020081 Opmask01=0000000001000003 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd9ffd31d0 0000003000000018 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 436b535238512e72 656c6c616b7a7973 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd9ffd5536 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd9ffd5536 00007ffd9ffd553c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2d486381ad ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2d486381e7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2d4863834b ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2d486381d9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 2074657365720064 656c696166202973 2528746174736c00 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 0551405640570041 40494c4443050c56 000d514451564900 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 646e756f46206950 2079727265627073 61522e6f6964732d 353534333463616d ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000007 0000000000000000 0000000000000000 000000000000020c ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff85c2bcb0 RDI=ffffffff9cf4c040 RBP=ffffffff9cf4c000 RSP=ffffc90004ba7110 R8 =000000000000001f R9 =0000000000000000 R10=0000000000000003 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000020 R14=fffffbfff39e985d R15=dffffc0000000000 RIP=ffffffff85c2bcd7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d477c000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fb970918d58 CR3=000000000fd96000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000020081 Opmask01=0000000001000003 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd9ffd31d0 0000003000000018 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 436b535238512e72 656c6c616b7a7973 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd9ffd5536 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd9ffd5536 00007ffd9ffd553c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2d486381ad ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2d486381e7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2d4863834b ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2d486381d9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 2074657365720064 656c696166202973 2528746174736c00 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 0551405640570041 40494c4443050c56 000d514451564900 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 646e756f46206950 2079727265627073 61522e6f6964732d 353534333463616d ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000007 0000000000000000 0000000000000000 000000000000020c ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000