last executing test programs: 2m54.374171941s ago: executing program 2 (id=558): socket$inet_udp(0x2, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0xae, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010120", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000400260004000000"}, {0x1, 0x1, "fe906d17efe3"}]}}}}}}, 0x0) 2m53.843126339s ago: executing program 2 (id=562): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', &(0x7f0000000380), 0x2000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x88082, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES16=r0], 0x48) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002cc0)={r2, 0x0, 0x0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={r2}, 0x4) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000006c0)='fdinfo/3\x00') pread64(r3, &(0x7f0000000200)=""/107, 0x6b, 0x3) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1c8, r4, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x138, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffffffc}, @ETHTOOL_A_BITSET_MASK={0xc0, 0x5, "14849051a95a89c75f44dc3a4c79f10edb4b196ec77157dceb1f5a1e0f6583a99f5215c60dd56680ad5f4db434f7598891f46ea09031796dd93cfda1df14618fc7de9e642e124da713bf1e4b12591146a31d34872b05c314d1b1f97612314ea7b5d38b92273786918f281270dad22fa5439960146c3acecbc6d0c775dbc4ffd12eec1326ff5ede2cca4e332aa036dbf43946e0228325faf811dfbea05aace55cea0ca0c9861d3843437fa6299b1c73c9455f810bca03d58e02d6a6cb"}, @ETHTOOL_A_BITSET_BITS={0x30, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, ']\\$.--\'-(}$+.\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x16}]}]}, @ETHTOOL_A_BITSET_VALUE={0x3b, 0x4, "bfcb3650fc9f36fd3100c881e8f73d46840ec5e2f32420ad9366b32c7f9b547af490e27b21e7254b698033c41deeb92d9744c319aa7f92"}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x7c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x69, 0x5, "43b0a7ed2420b8b32a82c578c77aa5d9e4cf25c8d91e4f405225df0aa6c3b0970d182d013a10d4ae70aeb8386e75fdf68ae47e00bab016135bccbf6b9195adb246691ce353a21145aaa20853f13e49f4bef13a9104aa69b7825812266206cceb221bada6f4"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x8095}, 0x100400c0) 2m52.490917497s ago: executing program 2 (id=566): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0xfffffffffffffffe, 0x1, {0x6, 0x1, 0x3, 0xfffffffffffffffd, 0x0, 0xffffffff, {0x40, 0x0, 0xb, 0xfffc, 0x1, 0x7fff, 0x4, 0x2009a11, 0x4, 0xa000, 0x0, 0x0, 0xffffffffffffffff, 0x505, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f0000000080)='nfs\x00', 0x0, &(0x7f00000001c0)='\x05\x00\x00\x00\x04\xb0\xfe\x98\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\xc77\x8b') r0 = syz_open_dev$loop(&(0x7f0000000280), 0x40ffff, 0xa6400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000000000000000400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0xa, 0x8000000000000000]}}) 2m51.565648157s ago: executing program 2 (id=568): sendmmsg(0xffffffffffffffff, &(0x7f0000002400)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000600)="fc6fe7dd037ce4808baff0e23a21c0e27bcb8ec8579f09800bb45689b798ad32f95754aec9abeddadaa16eace8d6c2743ad365e4acd129e3b6223c3fa1bb07e428", 0x41}], 0x1}}], 0x1, 0x4) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) r1 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) r2 = dup(r1) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@multicast, @local, @val={@val={0x88a8, 0x5, 0x1, 0x1}, {0x8100, 0x0, 0x1, 0x4}}, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x9, @remote, @private0, @broadcast, @ipv4={'\x00', '\xff\xff', @broadcast}}}}}, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000040)={r5, 0xd}, 0x8) write$binfmt_elf64(r2, &(0x7f0000000800)=ANY=[@ANYBLOB="7f454c4606ff7aa33e0200000400000002003e00cd000000b8010000000000004000000000000000ea02000000000010000001000300380001000600b106040403000000810200007000000000000000f50f00000000000080ffffffffffffff97"], 0x178) mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x315901c, 0x0) chroot(&(0x7f0000001140)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00') execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) syz_emit_ethernet(0xc2, &(0x7f0000000580)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x5, 0x4000, 0x1, 0xffff, 0x0, 0x1, 0x7, @empty, @multicast1, {[@cipso={0x86, 0x77, 0xffffffffffffffff, [{0x0, 0xe, "00020000da6ee06cb8dd9452"}, {0x5, 0x9, "02270e000042eb"}, {0x2, 0x12, '\x00'/16}, {0x0, 0x9, "00de6c83d50800"}, {0x7, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a8525dc91e5c6"}, {0x6, 0xa, "0000000000800000"}, {0x2, 0x11, "73bc23f9ffffffa30900a301c84600"}, {0x1, 0xd, "c8f46976e79ea788f03d9d"}]}, @cipso={0x86, 0x6, 0x20}]}}}}}}}, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)={0xa0042, 0x101, 0xd}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x1000000, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f00000000c0)={0x7, 0x2, 0x2, 0x86ce, r5}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000200)={0x7, 0x5, 0x203, 0x6, 0xffff, 0x10, 0x9, 0x2, r6}, &(0x7f0000000280)=0x20) r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/clk/clk_dump\x00', 0x0, 0x0) openat$cgroup_ro(r7, &(0x7f0000000080)='cpu.stat\x00', 0x0, 0x0) 2m50.730011497s ago: executing program 2 (id=571): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x7, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x200000000009, 0x0, 0xfffffffffffffffe, 0x8000000000000000, 0x0, 0x4002004c4, 0x1004, 0x8000000000000003, 0xdd37, 0xfda, 0xfffffffffffffffe, 0xffffffffffffffff, 0x3, 0xb3, 0x48d], 0xeeee8000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 9) 2m49.595680975s ago: executing program 2 (id=576): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x42) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x275a, 0x0) add_key(0x0, 0x0, &(0x7f0000000040)="308201d43082017ba00302010202142eea648d7f17e62e9e5869c887c68e1bd0f86fde300a06082a8648ce3d040301751892a6eb270cf3a2900b04030c2f4367", 0x40, 0xfffffffffffffffd) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)={0x1c, r5, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendto(r6, 0x0, 0x63, 0x4, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r3, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0xffff, 0x2, 0x2, '\x00', 0x654}) ioctl$KVM_RUN(r7, 0xae80, 0x0) read$FUSE(r0, &(0x7f0000002600)={0x2020}, 0x2020) madvise(&(0x7f00004c5000/0xc000)=nil, 0xc000, 0xa) 2m47.288947548s ago: executing program 32 (id=576): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x42) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x275a, 0x0) add_key(0x0, 0x0, &(0x7f0000000040)="308201d43082017ba00302010202142eea648d7f17e62e9e5869c887c68e1bd0f86fde300a06082a8648ce3d040301751892a6eb270cf3a2900b04030c2f4367", 0x40, 0xfffffffffffffffd) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)={0x1c, r5, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendto(r6, 0x0, 0x63, 0x4, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r3, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0xffff, 0x2, 0x2, '\x00', 0x654}) ioctl$KVM_RUN(r7, 0xae80, 0x0) read$FUSE(r0, &(0x7f0000002600)={0x2020}, 0x2020) madvise(&(0x7f00004c5000/0xc000)=nil, 0xc000, 0xa) 13.081264587s ago: executing program 4 (id=1026): socket(0x400000000010, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) pwrite64(r1, &(0x7f0000000000)='100', 0x3, 0x800000000000000) 11.585021713s ago: executing program 4 (id=1030): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x2, 0x0) read(r0, 0x0, 0x0) 11.068891404s ago: executing program 4 (id=1031): add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1001, 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x3, 0xb, 0x2172, 0xffffffffffffffff, 0x0) r1 = io_uring_setup(0x1694, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000001300)={0xe, 0x18, 0xfa00, @id_tos={0x0, 0xffffffffffffffff, 0x0, 0x3, 0x1b}}, 0x20) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x3, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x7d}, 0x94) r3 = io_uring_setup(0x180e, &(0x7f0000000140)={0x0, 0x4178, 0x400, 0x8001000, 0x1c3}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r4, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x4, @empty, 0x9}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x8000) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @local}, 0xffff}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000000680)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xab, @loopback, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x20000014) close_range(r3, 0xffffffffffffffff, 0x0) io_uring_enter(r2, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000001300)={0xe, 0x18, 0xfa00, @id_tos={0x0, 0xffffffffffffffff, 0x0, 0x3, 0x1b}}, 0x20) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)=@o_path={&(0x7f0000000240)='./file0\x00'}, 0x18) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r6, 0x58}, 0x10) r7 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x7d}, 0x94) io_uring_enter(r7, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) syz_io_uring_setup(0x5c02, &(0x7f0000000400)={0x0, 0xd353, 0x100, 0x0, 0x19a, 0x0, r1}, 0x0, &(0x7f0000000900), 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) 10.972862472s ago: executing program 3 (id=1032): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="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", 0x2000, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8.177977574s ago: executing program 3 (id=1037): r0 = socket$kcm(0x23, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0xa, &(0x7f0000000000), 0x75) r1 = gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x4) read(r2, &(0x7f0000000440)=""/247, 0x26) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000040)={0x31, @tick=0xfffff797, 0x0, {0xfd, 0x2}, 0x0, 0x0, 0x4}) tkill(r1, 0x7) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x541b, &(0x7f0000000940)={r0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06"], 0x48) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') read$FUSE(r3, &(0x7f0000003080)={0x2020}, 0x2020) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x93, 0x0, &(0x7f00000004c0)="5351e31d94c9f8291396b461802305624443ed3373010082d7c68e785968cb15539ab8469f765b4762f07aaa4b460c5f1b3a0000986919d5d5fe00c6fd6ef8526b41ed0000000000000100ee936390009c5bbdae29298f294846a2dc6144cfdcac5f5fa03524a008d7b748247a69dbbacb78def6177a0d840900000057ac3e69e56703a5c68368a0dfe5c9584d2ff5ce000000", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007112240000000000950000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r4 = syz_open_dev$sg(&(0x7f00000000c0), 0x43, 0x72302) ioctl$FIBMAP(r4, 0x1, &(0x7f0000000040)=0x85) 8.17615745s ago: executing program 3 (id=1040): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f00000003c0)={r0, &(0x7f0000000040)='E,\x00', 0x60000, &(0x7f0000000100)={@_ha_fsid={[0x7, 0xfffffffb]}, {0x4, 0x23, 0x5, 0x8000000000000001}}, 0x40, &(0x7f0000000200), &(0x7f0000000380)=0x4}) openat$kvm(0xffffffffffffff9c, &(0x7f0000001a00), 0xb41c2, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r2, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r3 = dup(r2) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000100)={0x7, 0xffffffffffffffea, 0xfa00, {0xffffffffffffffff, 0x673e7a39}}, 0x5) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x200000000037) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r6, &(0x7f0000000240)={@val={0x0, 0x8864}, @val={0x4, 0x0, 0x4, 0x0, 0x7, 0x7}, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x8, @multicast, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast, @multicast1}}, 0x2a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000180)="66b9361001c00f320f01d166b9180a000066b82130d6aa66ba8f22f1610f30ba4200b000ee0f20d86635080000000f22d867660f38801f0fc772000f20e06635004000000f22e0660fc7b70c00ff5403", 0x50}], 0x1, 0x17, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x0, 0x4}}) sendmsg$sock(r7, &(0x7f00000019c0)={&(0x7f0000000280)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000001840)=[{&(0x7f0000000300)="273f396afa49d49889b0cc6b832a07bef7853cb22e8c89fa61a9002bc12f3a12eff0cd66d8a17fece8be2bf43b5c0362ee88da2546fc75bfa090ee77c1fd47918ffaa3df5a9a1746c396f20b3d7c8ac59b380fe048c8b19da7a61c9da46be7", 0x5f}, {&(0x7f0000000440)="98a11bec5dbfb610ba59685ddd33dd5212239a2ff7587002612a9b7839bb6a539e8a8c4626450c715d9677cb8ec331bb396d556a8a9e8ffc93dd8364a07a5f1c5671bbe5dcc578b807964e321b70d9aa45ca4db8bf0391547d3a6b507044d816811297498836891b59f2d5b2d170a65f8bc5c7893427af27c42ca43986fba671a6e7ba9b45632f222584cc1a8ff83926026aa0aa7a00257ac764d98071ebca077229f08ea42ed8895e8503c66c1c9b0fdbdb04747881d9a146515da7e0b51d118ac9f6bbaee9908fe87f00fa4d1d61042a3378bba61590", 0xd7}, {&(0x7f0000000540)="a05615b25c1da679499d6b75cd158d3751e3685e4fcfe495d08f1375b269eddf9db6735f25d0fb1007279551de2ce5e9942a0564e97304c9fc9d93aad0e2840e4baa5e4d51798c5f7f96ee290de183d29d3272", 0x53}, {&(0x7f00000005c0)="d7607e15080bf93c3b1c07cc077ad7d59d0b8ed80cfdf4d5dc6616e4d1b66ea00fe85090122ecfaff9baf1a45063cb30c046f8792665eed569a047f421983a570c25e8c66c7dd91e6b06b167594309c59421a0139d134949a5f588fc1e4dfd371307bf13b743acf04b741feda92132aaa27f13f181da464e8839bc2df0f13851d4bef3007da3fdc07b602669fa1543b2146ce308297040", 0x97}, {&(0x7f0000000680)="29e887ca4038d2090e53dd6d55723e36c90d379c476b1cda918c869a8b838e833892d257c302922fcb6e24547d24e68e2545438f9d8839dfdfa5289d257fd57109a4746be462832a9d9122f7fbdf58a619ce3df554b7dadc6a7c897c68fbd7c06a4e0d4dd62b9fd25bf4568fb9fb5945cfe4c301fa9f7631fa955bcca1eb4879999291a2b3e7b5e6d34075b4a3107380d1feaa0f8d06422ad4ae4fc83f89096117ced82db5de545b75f0d197685000041881af8cebd8e2996c0f0b78ef36b4e3d13f2b8bfe4233ea8b2bb12d0fdc26285a29767e6954a8ceec9cd82ffcb38699a73b5e83cc7874f038d3f4122fc388f38a2d71c908b9636b087c3707be57b25113f7d9a175ce77dcf51830d89804ba8349b0e32e3be7208ca554b60c907bf70b51590671c349d6bc840c8dab1452e76804aa7d9d5e362b82be709cfcdedca9ea559161de9f78633e535826013e6cd13318ea5a927d6f2c7ae54b7ab386e35e58a066ec9ffa7fea529711911ab3954e78167f00696a7da5e86fc66924a44733ab28384213d1df3447c10e0a0e368fcae5300df1b773aff7bd0e699154e089fa07abd762938391d03ec768581fabc398540c761c2aa7413dd4f2641adf79eb239d368b80ab23c33860ae741a05b52b53bcafd8ba03609c4ec1c29828a603eb433d0d2cdfe51e793cf85effcba8def66e773ef79e2ab48dbe6c695e39e3e89863d0e8acc5ab2115df4c3274fa10262a5d63b96c3be2660af018ef922b79223dfa437f67fde1654feee0a05c9763fcdbef17f8fa7b391b66c9e9ae06e7d3fa9c8ca495f49bb5ee32f51f823c139abd5a3dcf534fa7a491b3e447467cc9668f1c7cfb1ba0b49bcb4f793bcdc3b9d025c5192866d803330b175a7cdf1dab1c9d4118870ae8d7c46cfcad7156941be7488bd559f06bc8e09b0bbe14ece9ab308e0b00d48aa478d619f6da944e30608c34393013d6e8cdb74b5d6e3bba51e5c11a838302a21ac3f356461398c849f4d3dbd230f282fa8d7b4a9af532f50a41bcf1fea5ed4e417b6dea15832202384cccb6766c143bb73b6dec60a311a6aec80a31e75786461625530809e9345d3bf6a133e99d7c519738b08403ae4b5c3eedea47db0e2fa3e4f7392599f47b43a1bf3a564966546cf6e566350d1edb7d798c941782759752577e47b18f5601bca2191796839016d107bea46f529efd9bba44d2f16fab50c72df11d73088fda5f7655616b4a9fc5abffcff082ebdc1e8f84cf494b1dd06b816c49c67ce1d4de896cc9c06f85aa1d31878536fb987e6ce2f390f9c3f1762beb524a6759ff4a126c13ebe99c5f3e19bee536f5454571bfe0c8e4e6709291d17ac288c83736b0054d4b6c985669fb9982a3842e71fb2f835f326d991b0e7d592bc50e5f5a7fe2b641ff18774bbbe3d5fa40f8ee1de2d3918b938d2d56b17e18eb9e4bbfffbd9e6b7affce73cdc93c63fd6240cd9545dddc99771a6f8d5686d407d2435b74bc635dc07743a3159a97bd075ee758d6735bb7136c47c326998674814cdc04df71067cdb48216b8a85fab38ff08232d470fcc060f58601b0f95378c297b3dfb94f9ed17296ca6afd4fd364bd0210572763207f6c8bf0789e658d1f2da8e0343f71cb7d7a26e7cc243b34c965fca5642c46cb82e5703fc35dfc2a4012cd3d7369f0b701a9f58d4d5300c1c97b93f6db1b3e47908f357a7b06195a5ab972800145be813e8399990aab8abbf7a97df593df91b28f23f8680ada6ff005825967f02a1e6d85177a1ab624f1676dc4f3a5aa6b1993cf9fec2fa6824c906e7a721612e5f77721c2eb20c16686c45401b956961c6df859bc5fc1e9f651ccde7ec0559613a9dea6258d4bf641bd4909cf954d8df669ef5867013335a1bb87e6fe83ccd26e59955df06039fe3992aec22cbcbac8658383ad2ba3525353e20c40cab4448a3bbea559fb5697b9eb4d76a510fb4838e2689afb105f8011450b7e7749b53c35f11cdf64202cc546c105bafa16130f15425d4c49f707bbfe4f99d28721e44457f383488825fe88d646ed13fc48d072adc607ee53bbedc87ebdff5189f66cb06ae4ab18a707e496e5c5a5de0659886302ed22dd10c253e3e5277cf53c64f2447274b3703bfcecb9d890848d228d07906388a98b4f78a874dda79a1c53bf0f5affa9b52cffe28bd6cc06c1654e54b0685c5856b758e9a6d19054f7583e1789818dcccc7246a529f81752f1ea4f8202efc692422c3ed893266604be1774ceddf4a80cd81f305880787ef085908227f772e9b441eb20f17e8d8fafb7aa9960777cb98603eefdacf916201d8f4609a20b81d9d0199a3fd016c5241071227d775357bcf445c65b72540396acddc886d5300d12a84cd3f2d167efece047793b47f217ef8748da289119724684494d6178a31618c8ef43a97eab0038d09a66d693fbaf2bfc65d960ea8658c5ce90630e8b07c3d8cd052a8432f75d354b53c50caf39bda274b9a05837aa1f08205c455b390a5771b9403655ac3cb016d4bac59ff0ca7bf95340ab344406f6c8de696497e6b6ea763df046bb355d06dce6611c1fc1d4b2ad1bd9953af283b07d1a0fef01bc0c1c601e7f5c953e0d33d38743f76da9e9f219e5ffc844b9f2494b586c2cdc6774875fc29fa7bf1d8827fbcb81f40bf43d0957e02c62ae0b123ff316730cab53b60e98267f5dab5c6de30d71e96ec4caf8a29583afbfbfcc1c0d07e2597af112c5e04d25e39e2d5ca589a45134c4c709a1027b6c3daac4530a66297f8e09a5f801bb7c730af606cbe46cc528908a1715bc2d52d76e493f001565eb86463f76d1dc3391949760e9c06a979ed04c08acc4c83cb5f4ac694bb1f83e1e3b054ddb1fbf4f0000c002975ff2a86fa2f2e3663f7d614af401c85b543512f704e7b70d7062784101429467210c85b4c730f25b049621cf2155974da0cc43cb82c46775a824d79fd0f8e9588dd568d8f9104c53f4007f91148ebb5882f8e5c35814668574394c7bc3704e40ed2ed0f1e575bfecebc2733114ee9f8a4af3552dbd30cf48bb5d9a61ae97844c55dda394eb6eb22335d444db6599c502d4558535ff5c39f0c6b9bf34d7afed9852f38312c5f9ce49cf066eed264413f6aed5247a2ae2b6ebbe7b8bb7bc585e9c42e09915e02a286a1d74ba41806207a200e2048a556e9a2c239796fe6b71ad1956c639755da9c3b7ca289828d75af2d33dc301447c99d2ddddd1dae501c89f3bb3a1e41e65b54194ce36afd749dae893b0d1382db9ef535b0956962a3a38aa4706556de2926abd4b091f8e74a6daa27eed7ad253442a3f7d62c86eefd44cdaca45fd018e1e47d117af66c74b5870502002addd88343e6b865d4c7139d14be46794330eba7e1db35650f032a0bb6ea49347e3f6af5a490da6a3d639b0215aaad5e850d03b8ed950901c6e0ab53a43d276cf065bbea4da706e305135625bc12f031008290c79f7c9e2d9b9d3a5349ff4a78b9c3edb7ef1d536bd5666318cce04317fd5d1f0fb1eedab29c7d36be31f066aae82d3af89ecd57b212c0de1c0dd0d6410e3ef7573c3326525c52c19ad2b307a3664cd1bcfd89ad67caa75bd0b75884f78c66853784060db7fe04d4722ac8cf24519ca63ad6f5a399589b322e23fe0b4771d9760bd4307691837a86d988378aa5c6b41f428d1e08f273cb1220b07c462e88518a39f4cd703459e7d639c3d978bc2841b3d946c23f0d6ff66c70c5a07af12ab1c7f7b18a5aa03bf96663a9aa6399da72b12a1362a24b8c83133e250d5c6a0cc97bde04da5113cc4a55a05b9a84aa12b1c5200f64ff8b5f40ddaae249c5f4b38de55cef12e646eafe249f1161ab2fbf5cc8120df7c3d1b2635961583e0e1d55c8d24503edec1f830877a202c584e24d5028f20ca66a908c3298203686b5b475116be1e3b100a4f6508727a85e0e2ba9519eed2adb3f91ee5fa04c99bc3836db97692159e216addeb989c021f6c36249d4092352e2c1f570a980a9f8148ced3df2eab8dd5d978ae50cb3384e9e2e0967ca7eccf58702a01af3514de469dcf7095e19e9dec89abb7c065887cfeda0126eac9943c712ab5d420837f2b3c794b2ca6a281f2d500f12785d7afa1f5eeb8814bd8d56fcf73ae0099ead19ee5e1ad8e0b89bd7d5f813343473dd80d85cec240731fdce81fca07d9abb379a7df83ee48a3ba3b9ad10eff5e7c40664bfe449e0c29c0139339778bb0dfe8b494d57eaee50ab04b9fd436cc2d4ec7f104ba1728c5cb0be86e5de4819832e0a9d5ca02409ff4109169715b8317137964c6d6de3a61a30fbb998ea9405c84c86334aa89f0ebe3a292e69b8f8db3f28a2ea4bd424e20ac94f484ebd4dec0431c246a0650ec0bf68d3cb023da55e72a767b29a6ebf751a68fb7986350fba5bb318c11924ef2c485f21baf02bd95f02dc8e33f0fc0d3333eb1b17738c305562d7e71fe044d53c88e3d42d49d4daa952268a62bb72ebe64f60a50f04d0e967adaa8b9ef82a966d619ac961977398ce6a907825417903e19cfffb28f5eeea970f56949dfd2e8b7485816be29c02210a6560e4fb73f6b467263e04ea7bdc2e4ffc5434cc152ae574929a93c2b39e47a4b4746234f3b0e1b56111d5281c9f8ef955f81aa41da81b7f45d88ec35136f21453d8ce6637e15a36cbb471188b969117825ee278862352a7240f8ddacc8f317f03fceb9794e5c85e6b765c27262d9abb3e888a0b2859f17aaadd1e53362accd0f48be3c51c25575c10e85ae0717cde21910ad7ae4940132486765adf2a86ea060ad2dac12f1740988dd74c4c862fbdb7bea32927e03932e8ca9d1c64f98a2a0f1eec980906a3b71f00920737101bca4b42d2c08277486019e93a29825cac5bce6460e2ca2d16340e37d067bee89a23a3b1cbee6c8f2e601d3fb6e9d9f1809a669d57de647b9d40ea112ed52305475f73129d6398b318a97ec15e5d223a7aee96ad675e542b00b30a321ff190b9fe7e5143519e40930e99d26dfce9ab203fd3c36d2378f2f109dc22b1339710b001b48ccf8b734c6e76d5d4726f6e1e396b8c88db88c3925cd00425433538b172353a4f7d9f3638ff8fd429096020496a82f07fa7bd98c5bc9ad64e3b696404318e344fff0f294075303f46ad19fef1f629be5f592757350c2cf63d55822ff3b9be8cb25291061569ce25fec2a705a6058efafcd0519d650c052b3db219e56b1237763e40e123387e15646687e45d1964b56a3cf2ba955ae136bd7a82d4a3afb76c56a7817d21fbef1c327c6d599b57dab1f926804fffef589c51a3f85ace5d6631e5fd3e8467ceb940d9c9cde54c1f07dfe0a199ad001f1baefef8ef765d51f323d29c3138f6468eb16e1494fb81890442bce8e1cb86dfc996f026c26925ef8a0ad6d319f1b176117c7e51b41d263312e11c19fdb486f73312ddfc127759d9fa57bb78dd1054d8cd4254a6cfd707ec5fb9e9feb3dfc429e9e135354ade884cd8f98c4667b251b66dd81a1c16ba3cc54b23929828cd655131cf76fb0b1e328a88974130be4b9fdd586ec42a3cd36cec72eb3d80af3e28ab0b322c81752ede2bd3904a39756a6cb5befd8fd61ad07d1b85ef086aca34a64f6dc561755ee2d4ce9642e70b47ca68de9b045b43f0eda3de26a172617a5c3e41133fb4c053b99621879879a7d9a967d0188b752c3104cfb7e79030f4d9c68d7e62606fea6bc51c5c3ac22b23746a2f87678bc8d82308f8ba0e5ef2470d1403235cb2bf95f4fcaa6a1327f66ea4d028160e29b42fddbc43276014616", 0x1000}, {&(0x7f0000001680)="63d1352569f7089403b7a62643eb7514d4a0fec919f5a7fa99454e8ee68e02b647fd9704c86c6b167b1eade0b3d404220673873b3a3323489a87cacbce979e0b552b039facb5fbddaecc6ffb06223ac09c3c807a3e96a793c6be605101cc971ddfcbd6c94175f6594df21bd2aab1fd567282adf5b25e1a56848bed40fe1f71e301940853bbb3", 0x86}, {&(0x7f0000001740)="e99ca2ef769e3852b8f9d1c0e9f5dd4daf844a240229f0f64fb9131b0c620d16d9cb353c4f28071a81f393e8767595f9ba082855a09670e63e543c93736166fe1ef5dde81d60cff0b83d", 0x4a}, {&(0x7f00000017c0)="ec8ee8101950f2dee09b500be25065bbcd6a8b016650673b42f1ff24f8f3f2cff8054852c1c5e76be94bf70a25fcdac8a9c19a9595601afe8a2b71f7ded2c2484cca8481b5b140ddbc77068f90ed57115a7d1acc837851f91d661f3214794e182484a7c0497b6fcf8d721e9fe28aa861c681403b3438fc6eb3b66d6cf2", 0x7d}], 0x8, &(0x7f00000018c0)=[@timestamping={{0x14, 0x1, 0x25, 0xfbe1}}, @timestamping={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x8c3f}}, @timestamping={{0x14, 0x1, 0x25, 0xfffffc01}}, @txtime={{0x18}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x7fff}}], 0xd8}, 0x40c0) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080a5}, 0x20008040) 7.509335465s ago: executing program 0 (id=1042): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) timer_create(0x7, &(0x7f00000001c0)={0x0, 0x41, 0x1, @thr={&(0x7f0000000000)="4fbefcea4f24dec5285482e8e97e074306016fcac04a85923dfa50cd2f5d414af4787b8610b9be1f78288f686368e3822ab34399ff5814679c2d430753b84781ef95b31b63f95736304d3baf3eff5b7d173c03072bbce85e4feee30af10fbfde9fd50b3c3ff8913e7bd0477b081dc66dbeacd95b0fd04c24", &(0x7f00000000c0)="c2956a645c11ac2beaeb90dbe62ee82984232e382e09e96c5d197f6221"}}, &(0x7f0000000240)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) pwritev(r2, &(0x7f0000000740)=[{&(0x7f0000000200)='3', 0x1}], 0x1, 0x800, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000180)={0x0, 0x3}, 0xc) 7.262180674s ago: executing program 4 (id=1043): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="5a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080), 0x1) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000000)='M', 0x1}], 0x1}, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netfilter\x00') getdents64(r2, &(0x7f0000000240)=""/44, 0x7a) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8a000, 0x0) ioctl$TCXONC(r3, 0x540a, 0x2) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000000)) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000300)=0x1a) r4 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x6) ioctl$TCXONC(r4, 0x540a, 0x2) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000440), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000000)={0x2, 0x0, 0xffe, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000100)={0x4}) 6.80136544s ago: executing program 1 (id=1044): socket$unix(0x1, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00030000100000001c001a80", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x2040800) 6.383379461s ago: executing program 0 (id=1045): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) syz_emit_vhci(&(0x7f0000001140)=ANY=[@ANYBLOB="040e07050514", @ANYBLOB="fc70a92063"], 0xa) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x2040851}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x80002, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socket$nl_route(0x10, 0x3, 0x0) mount$cgroup2(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f00000000c0), 0xe020, &(0x7f0000000180)={[{@favordynmods}, {@subsystem='rdma'}, {@memory_hugetlb_accounting}]}) mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000001d40)="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", 0xf4f, 0x3, 0x0) 6.272062516s ago: executing program 3 (id=1046): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) sendto(r0, &(0x7f0000000080)="9b81e79372bf264e6b7e719ac323e6cd513e43de5ef52aff55", 0x19, 0x40880, &(0x7f00000000c0)=@generic={0x2c, "8954348701a10a942ba185a7e3b7e4d0d08fb7095777e17781340b88c1ea6ad8c5bdc84414b361e08482e19b9ed107eeed810cd46812f221d1ea130584d83c7daa8777ade7a4a729018a8ef10c180c79c9828c0bd5c0ccd085b8e19ea82f14fde36e921c019fb2297bf2ca3f465ed5977328de886ca75752091f9a876028"}, 0x80) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900038073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x25}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x6000000, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_mtu(r2, 0x0, 0xa, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @address_request={0x11, 0x0, 0x0, 0x90b6}}}}}, 0x0) 6.161725255s ago: executing program 1 (id=1047): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "dce02de9d7bd466b", "72e64b3892cb7025848c9f40363cf916", "d9260c66", "e2b768b4bb9e0d9b"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "dce02de9d7bd466b", "72e64b3892cb7025848c9f40363cf916", "cfff3c66", "e2b768b4bb9e0d9b"}, 0x28) syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0006001c0000001f000000060001000700000008000500", @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x20000811}, 0x0) r4 = fcntl$dupfd(r1, 0x406, r1) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x42000, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000001a00)={'pcmmio\x00', [0x2000, 0x2, 0x4, 0x20000000, 0x10000025, 0x0, 0x4, 0x4, 0x54c6cff3, 0x1356, 0x2, 0x1006, 0xfffffff7, 0x400001, 0x6, 0x8, 0x0, 0x7f, 0x3, 0x5, 0x202089, 0x2, 0x2, 0x30001e5b, 0x3c8e, 0x8, 0x3, 0x80080006, 0x4002, 0x0, 0x3]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000380)=@delqdisc={0x434, 0x25, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xd, 0x10}, {0xa, 0x7}, {0x0, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x3, 0xfffffff8, 0x4, 0x40, 0x2, 0x2, 0x5, 0x7fff, 0x4, 0x1, 0x6, 0x1c8, 0x7, 0x0, 0x5, 0x1, 0x8, 0x9, 0x9, 0x9, 0xf9, 0x200, 0x1, 0x5, 0x6, 0xfff, 0x9, 0x1, 0x80, 0x10000, 0x0, 0x6, 0xff, 0x4, 0x6, 0x9, 0xe6c1, 0x2, 0x65, 0x6, 0x5, 0x71, 0x1f146d7e, 0x80000001, 0x89, 0xe9, 0x80000001, 0x2, 0xff, 0x8, 0xffff8dc2, 0x400, 0x0, 0x2, 0xffff, 0x10001, 0x0, 0x2, 0x8, 0xa000000, 0x0, 0x5, 0x8, 0x3, 0x4, 0x401, 0x5, 0x8, 0x4ad1, 0x1, 0x25b1, 0x5, 0xfff, 0x0, 0xe, 0xffffffff, 0x3, 0x5, 0x3ff, 0xfff, 0x8, 0xf, 0x0, 0x4, 0x626cfd3b, 0x0, 0x60df8662, 0x2, 0x5, 0x4, 0xc6, 0x8, 0x7, 0xfffffffa, 0x8, 0x4, 0xffffffff, 0xa80, 0x0, 0x7, 0x2, 0x0, 0xff, 0x8, 0x7, 0xc, 0xfdc1, 0x77f, 0x4, 0xfffffff0, 0x4, 0x7fff, 0x1000, 0x1, 0x1f1f, 0x3, 0x665195e5, 0x5, 0x7, 0x5, 0x6, 0x7, 0x4, 0x800, 0x101, 0x400, 0x2, 0x6, 0xd, 0x9, 0x7, 0xc5, 0x99, 0x4, 0x2e9, 0x4, 0x3, 0x401, 0xfffffffe, 0x7, 0x80000000, 0x8, 0x0, 0x4, 0x37, 0x4, 0x31, 0x2, 0x2, 0x3, 0x6, 0x1, 0x690c, 0x368d, 0x9, 0x2, 0xe, 0x8, 0x7, 0x5597, 0x3, 0x7, 0x7fff, 0x62, 0xf6, 0x5, 0x0, 0x7fffffff, 0xd, 0x9, 0x2, 0x100, 0x6, 0x101, 0x5, 0x2, 0x3, 0x4, 0xfc8d, 0x8, 0x3ff, 0x3, 0x0, 0x3, 0x5, 0x9, 0x5, 0x8000, 0x1, 0x7, 0x20000, 0x4, 0x2, 0x9f85, 0x65, 0x4, 0x0, 0x7ff, 0x4, 0x6, 0x7, 0xd92, 0x40, 0xfff, 0xe1, 0x8, 0x426, 0x5, 0x9, 0x1, 0x1000, 0x9, 0x36ae765f, 0x401, 0x9, 0x200000, 0x3, 0x4, 0x5, 0x0, 0x89, 0x5, 0x80000000, 0x9c4, 0x1, 0x41632842, 0x6, 0x10, 0x2, 0x8001, 0x5, 0x100, 0x8, 0x9, 0xfe64, 0xd, 0x1c2, 0x2, 0x6, 0x2, 0x80000001, 0xa, 0x6, 0xfffffffc, 0x5, 0x3, 0x7f, 0x400000, 0x5, 0x3, 0x6, 0x8001, 0x10001, 0x5, 0x4, 0x7]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r4, 0xf505, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r4, &(0x7f0000000380)=ANY=[], 0x540) close_range(r0, 0xffffffffffffffff, 0x0) 5.46236968s ago: executing program 4 (id=1048): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) r1 = io_uring_setup(0x46eb, &(0x7f0000000080)={0x0, 0x18cc, 0x10000, 0x1, 0xa}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000240)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}}) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x158, 0x0, 0x148, 0x158, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xb, [0x10, 0x31, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r5, 0x5760, 0x1f) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x2481, 0x0) ioctl$COMEDI_CMD(r7, 0x80506409, &(0x7f0000000200)={0x0, 0x8, 0x2, 0x0, 0x4, 0x0, 0x10, 0x2710, 0x20, 0xc6ba, 0x1, 0x0, &(0x7f0000000300)=[0x0], 0x1, 0x0}) ioctl(r6, 0x40186f40, &(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev_mnt\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev_mnt/ubi0\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000042000100000000000000000003010000000000002600010009112233445566778899aabb08004500001400000000011700000102d9040506070800000c00020006000600080000000c0003000800190004000000"], 0x58}}, 0x0) ioctl(r8, 0x40986f00, &(0x7f0000000340)) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0x5b) write$binfmt_misc(r5, &(0x7f0000000000)="0425ff125379ff45582350a5cd1fa1a1e8faf6b600bfa4c3d7226c7eb48171adae0214f3e5b76cf09dca51bf5afffcb94d36fa100e0be1e6470ddb03c0f7970c8136f78f7f0804ee4df9244f3d0d41a1818ff7a21428e8c1601a7d547485a58f1ba9f22483ba0d05c14f1ffe4556d1f16d678fd9fb07ca70df7eee328bf771899552684805e713a44caaec86c8e3959ebf61bda4f7816059e50e", 0x9a) sendto$inet(r3, &(0x7f0000000280)="0c788a67cb9e311c591b", 0x20, 0x0, &(0x7f00000001c0), 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000200)={0x42, 0x4, 0x2}, 0x10) bpf$OBJ_GET_PROG(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000380)='./dev_mnt\x00', 0x0, 0x10}, 0x18) 5.222558928s ago: executing program 3 (id=1049): r0 = socket$inet_tcp(0x2, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x220800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="8ee8c9b8ee088ed8660f3801b2d6352ed9ff660f3882040f01cf0fc72d2626652e0f01ca0fc7386635002000000f22e0", 0xffffffffffffff8b}], 0x1, 0x50, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) pipe(&(0x7f0000000240)) ioctl$KVM_RUN(r4, 0xae80, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='cdg', 0x3) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) 5.041090032s ago: executing program 1 (id=1050): r0 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000700)={0x8f, 0x0, 0x2}) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000004c0)={0x0, 0x0}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1/file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x40, 0x0) r6 = openat(0xffffffffffffff9c, 0x0, 0x400, 0x9) getdents64(r6, &(0x7f0000000140)=""/62, 0x3e) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r5, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) syz_open_procfs(0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) read$usbmon(r4, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x4, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000efffffffffffffff000000940a0000000000009500000006000000fc556ddd4fad84de72df6adae67b96fe3757b5b97f01775383e13dc9ca6e6acbd6eb8ff1cc2c1ed2f1c7f4315bcb5492abeb221d702824440a9c9f9faca2b4e4b585542769adf3480a6cca4ab7d8b740dbf19173de71d3bfd405f074955ec0cbcf829441dc658d869a015bfe940931d93e723c185653e95d7ed245f998ef589a092d153c60340376ac4df908c8ed8c0508c9f69405a4677a110532ff"], &(0x7f00000003c0)='syzkaller\x00'}, 0x90) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x4048587b, &(0x7f0000000ac0)={{r0, &(0x7f0000000040)='/dev/dlm-control\x00', 0x200000, &(0x7f0000000080)={@_ha_fsid={[0x3, 0x9c35]}, {0x7bff, 0x5, 0x7, 0x5}}, 0x5, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x1}, 0x8, &(0x7f00000009c0)=[{0x3, 0x101, &(0x7f0000000140)='/dev/kvm\x00', &(0x7f0000000180)="d5bd44a7823c073b3a955057c8942df370dc858ed131ce1520596b2051d213acbb795c1919ce203feb44735a3112cb85e53eb31dbe58a4bd1b7dce5d9b2188346453f1dd1b00c0efc31267b26cbbf28e1cc9d8fd78a7cb2b6b3dedc9d7c4f4b921a022175b76e33376bd7dcba2d8a1abf645f1724b5a794994d9391b89ca589b3584c111", 0x84, 0x32}, {0x3, 0x2, &(0x7f0000000280)='].\x00', &(0x7f00000002c0)="6785054d9d95bf539d8df7d146d49e", 0xf, 0x12}, {0x1, 0x0, &(0x7f0000000300)='[\\)()\x00', &(0x7f0000000340)="56bb1abc11c259814fe15edf6741fd621ae5352da5273cdcee8391d305c06665f15a6c0ec64ea196f885dcdc19cd6e70fb80ff28fbe2d4fa7da2cb7e558861a739d080c661366cf63c70a92f799a5b311b8506dca4dad324f137b22c19a4f85018bd392a1bef01aa43fdcfcbdd885764400da85c4bbedf7aeed7a120eeb7b5f20528874412ce1285d5c6569051a05b3e2ca7b1fa13de8a5076d9364d82594923ee13e5c7c07668a9ccf72a442b53799f6ee1f37fc4145e6fda967b70a2bf884d75622d133cc2c0cfd595", 0xca, 0x10}, {0x1, 0x1ff, &(0x7f0000000440)='\'%\'[\x00', &(0x7f0000000480)="ff7ac558ac20065d7de2", 0xa}, {0x3, 0x200, &(0x7f0000000500)='/dev/kvm\x00', &(0x7f0000000540)="9cb48faf02e3b61fd80298e9f894bd130c6386276cda11ffe3c3c8fd72a390fcc7270ac792e27723ce46ef7ea9d240297627a6bc560ab72b118b182d31a8bb45f9ee3c0d411da82c80eaefe41dbcc312bf53852b05da43dd6ad5be00d934a92c80050b0572d9ae2dd43a9ccc28446e4c1fa6b7414823d643d83c34008c2a2c9ea3e6967b9614b66f3e7237df5191a80fcf7df4680027a6be0f9b192c146745c5ccb819083dbb2c0c2ad3829b8eed5be88262a7dcdfad51243a57e634dde5d82b4b78c08680a088137a086d1c4e", 0xcd, 0x20}, {0x3, 0x100, &(0x7f0000000640)='/dev/kvm\x00', &(0x7f0000000780)="c1d2ce7a72c38059a4d897a30874d72d0336bc065bdc661e97748442fe9dcc6afcf3a013715233f1b9a4db522ad34d04f838bd798932c8d6adbecd690f72f27965463641c6bdefaec89a77b54dff99db54ad1b46a102693e20607346ce9dda87b3f89ca3d9557d0aa3378d61ad8f1620f9aa46a3935945926acb9e4a799c0da2702c2e085c1ed974e3d42e2dfd357ea022c111179efc3fa3f05ca7c49e9d6a6c82669c48d36031d7c72f3b761b1611b37682e0c1fc979861504063f83ab7092dbeab43959895a25fa2fb39b5861f417b08dc338a", 0xd4, 0x12}, {0x3, 0x9, &(0x7f0000000880)='a%\\.\x00', &(0x7f00000008c0)="3caa9b5ad9ff0d9e6240f75450010371449c694aeb148309a6193bc4b6453798fcd9cb49161eff238f39db476806e9e166ca61b17631b1689f", 0x39, 0x28}, {0x1, 0x8, &(0x7f0000000900)='/dev/dlm-control\x00', &(0x7f0000000940)="a06e9de38f6804dafaae425fcf616d05f7583605589d5715d875c5c950bf9b0cd55680945133885761c1c30f90f99687abde0cb6a929bbc520a46aaf6113760fb0326cf3561324b1bbeb07a2751c7cde51e14c3838be5a52495a1b6e33dccbcf1328c8608a84e0a14e7ff3af2665ff33cd7688423346279c72a52eab", 0x7c, 0x28}]}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.831642379s ago: executing program 0 (id=1051): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x158, 0x0, 0x148, 0x158, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xb, [0x10, 0x31, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r1, &(0x7f0000000280)="0c788a67cb9e311c591b", 0x20, 0x7000000, &(0x7f00000001c0), 0x10) 2.875635076s ago: executing program 0 (id=1052): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x7, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x200000000009, 0x0, 0xfffffffffffffffe, 0x8000000000000000, 0x0, 0x4002004c4, 0x1004, 0x8000000000000003, 0xdd37, 0xfda, 0xfffffffffffffffe, 0xffffffffffffffff, 0x3, 0xb3, 0x48d], 0xeeee8000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x100000000000000) 2.637017989s ago: executing program 3 (id=1053): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22003, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$qrtrtun(0xffffffffffffffff, &(0x7f0000001300)="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", 0x1021) socketpair(0x1a, 0x3, 0x78, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$nfc_llcp(r2, 0x118, 0x4, &(0x7f0000000200)=""/215, 0xd7) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="0400"/700, 0x2bc, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./lower\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./lower/test\x00', 0x42, 0x1ff) write(r4, &(0x7f0000000200)='test payload data for ecryptfs lower\x00', 0x25) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) ioctl$BLKOPENZONE(r4, 0x40101286, &(0x7f00000003c0)={0x1ff, 0x8000000000000001}) close(r4) mount(&(0x7f0000000100), &(0x7f0000000140)='./mnt\x00', &(0x7f0000000300)='ecryptfs\x00', 0x0, &(0x7f0000000340)='ecryptfs_sig=syz0,ecryptfs_cipher=aes,ecryptfs_key_bytes=16,ecryptfs_passthrough\x00') r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1400000037000107000000000000000003"], 0x14}}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt/test\x00', 0x0, 0x0) read(r6, &(0x7f0000000500)=""/128, 0x80) close(r6) syz_emit_ethernet(0x76, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x40, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x10, 0x2, 0x0, 0x0, 0x400, {[@timestamp={0x8, 0xa, 0x2, 0x98c6}, @window={0x3, 0x3, 0xd7}, @timestamp={0x8, 0xa, 0x2, 0xad}, @md5sig={0x13, 0x12, "8098cf093cc9cd7b8ec814f9bcfdfea9"}]}}}}}}}}, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x41, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x10}, &(0x7f0000000140)=0x8) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x40000020, 0x0, 0x1}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=@ethtool_pauseparam={0x12, 0x9, 0x1}}) 2.636249535s ago: executing program 1 (id=1054): arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) (async) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000080), &(0x7f0000000140)=0x4) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)) (async) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000080)="0000000000000002ff690000000000010000001300000006000200861fa72e5b01504104bfeacdd5a9007d167c71e3b8a93aa64d957a684161c833020a6da8881fb79e110483bfadf224a22c76ecc7a56843a85f7df51293f0eb84ef8f0f07342db3b0e5a5647b7bed1fbf069ca713670adf7d9fb6d2600fd9c1981fe9f095cfe9d2fe1e1e34f6096bf02543747b2c792890f07c0da0fa25e6101062e6c9176a70e41698814a213711764f88495994cfd8a57c1e13f6b5298e7ab3a2bfb58dde34d58536633c27882e51ced17d67999b00094461", 0xd4, 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0xff}, [{}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {0x6, 0x0, 0x0, 0x0, 0x0, 0x930c}, {}, {}, {}, {}, {}, {}, {}, {0x4, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x1000000}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x3, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x5}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x200}, {}, {}, {}, {0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) (async) syslog(0x9, &(0x7f0000000180)=""/167, 0xa7) (async) syslog(0x2, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x0, 0x7, 0x6}, @empty, @rand_addr=0x64010100, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) (async) write$tun(r2, &(0x7f0000000840)={@val={0x0, 0x7}, @void, @mpls={[], @ipv6=@tcp={0x3, 0x6, "9ee722", 0x14, 0x6, 0xff, @ipv4={'\x00', '\xff\xff', @multicast1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[], {{0x4e23, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xdf, 0x0, 0x3}}}}}}, 0x40) r6 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$yama_ptrace_scope(r6, &(0x7f0000000040)='1\x00', 0x2) (async) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) 1.488917929s ago: executing program 0 (id=1055): syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r0 = socket$netlink(0x10, 0x3, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xe2002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r2, 0x4068aea3, &(0x7f0000000000)={0xc0, 0x0, 0x10000}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = mmap$KVM_VCPU(&(0x7f0000bff000/0x400000)=nil, 0x50000, 0x3, 0x11, r3, 0x0) syz_memcpy_off$KVM_EXIT_MMIO(r4, 0x40000, &(0x7f0000000100)="020000000000000000000000000000000200", 0x0, 0x30) ioctl$KVM_RESET_DIRTY_RINGS(r2, 0xaec7) 897.334991ms ago: executing program 4 (id=1056): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f00009b3000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x1, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b3000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f00000001c0)="c4e1c95c31c421fb125800b9880a0000b800700000ba000000000f30f30f09c74424001d010000c74424020001c0feff2c240f71d0b5440f20c03505000000440f22c066450f388128440f381c1500d8ffff670f01df", 0x56}], 0x1, 0x3, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 894.083771ms ago: executing program 1 (id=1057): ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x10) 191.121238ms ago: executing program 0 (id=1058): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "dce02de9d7bd466b", "72e64b3892cb7025848c9f40363cf916", "d9260c66", "e2b768b4bb9e0d9b"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "dce02de9d7bd466b", "72e64b3892cb7025848c9f40363cf916", "cfff3c66", "e2b768b4bb9e0d9b"}, 0x28) syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0006001c0000001f000000060001000700000008000500", @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x20000811}, 0x0) r4 = fcntl$dupfd(r1, 0x406, r1) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x42000, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000001a00)={'pcmmio\x00', [0x2000, 0x2, 0x4, 0x20000000, 0x10000025, 0x0, 0x4, 0x4, 0x54c6cff3, 0x1356, 0x2, 0x1006, 0xfffffff7, 0x400001, 0x6, 0x8, 0x0, 0x7f, 0x3, 0x5, 0x202089, 0x2, 0x2, 0x30001e5b, 0x3c8e, 0x8, 0x3, 0x80080006, 0x4002, 0x0, 0x3]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000380)=@delqdisc={0x434, 0x25, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xd, 0x10}, {0xa, 0x7}, {0x0, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x3, 0xfffffff8, 0x4, 0x40, 0x2, 0x2, 0x5, 0x7fff, 0x4, 0x1, 0x6, 0x1c8, 0x7, 0x0, 0x5, 0x1, 0x8, 0x9, 0x9, 0x9, 0xf9, 0x200, 0x1, 0x5, 0x6, 0xfff, 0x9, 0x1, 0x80, 0x10000, 0x0, 0x6, 0xff, 0x4, 0x6, 0x9, 0xe6c1, 0x2, 0x65, 0x6, 0x5, 0x71, 0x1f146d7e, 0x80000001, 0x89, 0xe9, 0x80000001, 0x2, 0xff, 0x8, 0xffff8dc2, 0x400, 0x0, 0x2, 0xffff, 0x10001, 0x0, 0x2, 0x8, 0xa000000, 0x0, 0x5, 0x8, 0x3, 0x4, 0x401, 0x5, 0x8, 0x4ad1, 0x1, 0x25b1, 0x5, 0xfff, 0x0, 0xe, 0xffffffff, 0x3, 0x5, 0x3ff, 0xfff, 0x8, 0xf, 0x0, 0x4, 0x626cfd3b, 0x0, 0x60df8662, 0x2, 0x5, 0x4, 0xc6, 0x8, 0x7, 0xfffffffa, 0x8, 0x4, 0xffffffff, 0xa80, 0x0, 0x7, 0x2, 0x0, 0xff, 0x8, 0x7, 0xc, 0xfdc1, 0x77f, 0x4, 0xfffffff0, 0x4, 0x7fff, 0x1000, 0x1, 0x1f1f, 0x3, 0x665195e5, 0x5, 0x7, 0x5, 0x6, 0x7, 0x4, 0x800, 0x101, 0x400, 0x2, 0x6, 0xd, 0x9, 0x7, 0xc5, 0x99, 0x4, 0x2e9, 0x4, 0x3, 0x401, 0xfffffffe, 0x7, 0x80000000, 0x8, 0x0, 0x4, 0x37, 0x4, 0x31, 0x2, 0x2, 0x3, 0x6, 0x1, 0x690c, 0x368d, 0x9, 0x2, 0xe, 0x8, 0x7, 0x5597, 0x3, 0x7, 0x7fff, 0x62, 0xf6, 0x5, 0x0, 0x7fffffff, 0xd, 0x9, 0x2, 0x100, 0x6, 0x101, 0x5, 0x2, 0x3, 0x4, 0xfc8d, 0x8, 0x3ff, 0x3, 0x0, 0x3, 0x5, 0x9, 0x5, 0x8000, 0x1, 0x7, 0x20000, 0x4, 0x2, 0x9f85, 0x65, 0x4, 0x0, 0x7ff, 0x4, 0x6, 0x7, 0xd92, 0x40, 0xfff, 0xe1, 0x8, 0x426, 0x5, 0x9, 0x1, 0x1000, 0x9, 0x36ae765f, 0x401, 0x9, 0x200000, 0x3, 0x4, 0x5, 0x0, 0x89, 0x5, 0x80000000, 0x9c4, 0x1, 0x41632842, 0x6, 0x10, 0x2, 0x8001, 0x5, 0x100, 0x8, 0x9, 0xfe64, 0xd, 0x1c2, 0x2, 0x6, 0x2, 0x80000001, 0xa, 0x6, 0xfffffffc, 0x5, 0x3, 0x7f, 0x400000, 0x5, 0x3, 0x6, 0x8001, 0x10001, 0x5, 0x4, 0x7]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r4, 0xf505, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r4, &(0x7f0000000380)=ANY=[], 0x540) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=1059): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0) copy_file_range(r3, &(0x7f0000000000)=0x7, r3, 0x0, 0x7, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./lower\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./lower\x00', &(0x7f0000000100)='./mnt\x00', &(0x7f0000000140)='ecryptfs\x00', 0x0, &(0x7f0000000180)='ecryptfs_sig=0123456789abcdef\x00') ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): ect_to_actor+0x10/0x10 [ 150.730222][ T8069] ? __pfx___file_has_perm+0x10/0x10 [ 150.730414][ T8069] do_splice_direct+0x174/0x240 [ 150.730541][ T8069] ? __pfx_do_splice_direct+0x10/0x10 [ 150.730684][ T8069] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 150.730760][ T8069] ? bpf_lsm_file_permission+0x9/0x10 [ 150.730801][ T8069] ? security_file_permission+0x76/0x210 [ 150.730887][ T8069] ? rw_verify_area+0xce/0x6d0 [ 150.731085][ T8069] do_sendfile+0xadc/0xe20 [ 150.731280][ T8069] ? __pfx_do_sendfile+0x10/0x10 [ 150.731319][ T8069] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 150.731426][ T8069] ? __fget_files+0x21f/0x3d0 [ 150.731667][ T8069] __x64_sys_sendfile64+0x1d8/0x220 [ 150.731718][ T8069] ? ksys_write+0x1ac/0x250 [ 150.731800][ T8069] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 150.732069][ T8069] do_syscall_64+0x123/0x790 [ 150.732223][ T8069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.732286][ T8069] RIP: 0033:0x7f2cdad9e159 [ 150.732377][ T8069] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.732398][ T8069] RSP: 002b:00007f2cdbc21028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 150.732422][ T8069] RAX: ffffffffffffffda RBX: 00007f2cdb025fa0 RCX: 00007f2cdad9e159 [ 150.732437][ T8069] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000006 [ 150.732452][ T8069] RBP: 00007f2cdbc21090 R08: 0000000000000000 R09: 0000000000000000 [ 150.732466][ T8069] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000001 [ 150.732481][ T8069] R13: 00007f2cdb026038 R14: 00007f2cdb025fa0 R15: 00007ffeb1bda568 [ 150.732876][ T8069] [ 151.838037][ T43] audit: type=1400 audit(1790499432.181:604): avc: denied { write } for pid=8077 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 151.916330][ T8080] ip_tables: iptables: counters copy to user failed while replacing table [ 151.943239][ T8080] binder: binder_mmap: 8078 200000000000-200000200000 bad vm_flags failed -1 [ 152.000219][ T8080] binder: 8078:8080 ioctl c0189379 200000000380 returned -22 [ 152.287335][ T8085] iommufd_mock iommufd_mock0: Adding to iommu group 5 [ 152.400293][ T7725] veth0_vlan: entered promiscuous mode [ 152.569602][ T7725] veth1_vlan: entered promiscuous mode [ 152.640580][ T8089] xt_hashlimit: size too large, truncated to 1048576 [ 152.673862][ T43] audit: type=1400 audit(1790499433.021:605): avc: denied { write } for pid=8086 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 153.144328][ T43] audit: type=1400 audit(1790499433.481:606): avc: denied { getopt } for pid=8088 comm="syz.1.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 153.545261][ T7725] veth0_macvtap: entered promiscuous mode [ 153.934151][ T7725] veth1_macvtap: entered promiscuous mode [ 154.127350][ T8103] xt_hashlimit: size too large, truncated to 1048576 [ 154.261140][ T8105] FAULT_INJECTION: forcing a failure. [ 154.261140][ T8105] name failslab, interval 1, probability 0, space 0, times 0 [ 154.261178][ T8105] CPU: 2 UID: 0 PID: 8105 Comm: syz.0.661 Not tainted syzkaller #0 PREEMPT(full) [ 154.261198][ T8105] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 154.261211][ T8105] Call Trace: [ 154.261234][ T8105] [ 154.261260][ T8105] dump_stack_lvl+0x100/0x190 [ 154.261376][ T8105] should_fail_ex.cold+0x5/0xa [ 154.261505][ T8105] should_failslab+0xc2/0x120 [ 154.261602][ T8105] __kmalloc_flags_noprof+0x122/0x8e0 [ 154.261713][ T8105] ? find_held_lock+0x2b/0x80 [ 154.261804][ T8105] ? __pcs_replace_empty_main+0x132/0x650 [ 154.261863][ T8105] ? __pcs_replace_empty_main+0x3fa/0x650 [ 154.262036][ T8105] __pcs_replace_empty_main+0x3fa/0x650 [ 154.262282][ T8105] kmem_cache_alloc_noprof+0x4c4/0x6a0 [ 154.262337][ T8105] ? __nf_conntrack_alloc+0xb7/0x5e0 [ 154.262469][ T8105] __nf_conntrack_alloc+0xb7/0x5e0 [ 154.262635][ T8105] init_conntrack.isra.0+0xf51/0x1380 [ 154.262698][ T8105] ? __nf_conntrack_find_get+0xa0d/0xd00 [ 154.262750][ T8105] ? __pfx_init_conntrack.isra.0+0x10/0x10 [ 154.262827][ T8105] ? ipv6_get_l4proto+0x13a/0x220 [ 154.262942][ T8105] ? __local_bh_enable_ip+0xa5/0x120 [ 154.262979][ T8105] ? ip6t_do_table+0xc1d/0x1c90 [ 154.263138][ T8105] nf_conntrack_in+0xe9e/0x16d0 [ 154.263363][ T8105] ? __pfx_nf_conntrack_in+0x10/0x10 [ 154.263447][ T8105] ? __do_replace+0x944/0x990 [ 154.263599][ T8105] ? netlbl_enabled+0x54/0x70 [ 154.263721][ T8105] nf_hook_slow+0xbf/0x220 [ 154.263811][ T8105] __ip6_local_out+0x4c0/0xaf0 [ 154.263899][ T8105] ? __pfx___ip6_local_out+0x10/0x10 [ 154.264016][ T8105] ? __pfx_dst_output+0x10/0x10 [ 154.264040][ T8105] ? lock_acquire+0x1d1/0x380 [ 154.264071][ T8105] ? ip6_send_skb+0xb9/0x430 [ 154.264295][ T8105] ip6_local_out+0x2a/0x1f0 [ 154.264380][ T8105] ip6_send_skb+0x112/0x430 [ 154.264505][ T8105] ip6_push_pending_frames+0x3b/0x50 [ 154.264588][ T8105] rawv6_sendmsg+0x2d2f/0x4450 [ 154.264629][ T8105] ? find_held_lock+0x2b/0x80 [ 154.264841][ T8105] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 154.265240][ T8105] ? trace_event_buffer_commit+0x20a/0xa80 [ 154.265393][ T8105] ? __pfx_sock_has_perm+0x10/0x10 [ 154.265416][ T8105] ? trace_event_raw_event_lock+0x1e2/0x2b0 [ 154.265736][ T8105] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 154.265858][ T8105] ? inet_sendmsg+0x11c/0x140 [ 154.265891][ T8105] inet_sendmsg+0x11c/0x140 [ 154.265934][ T8105] ____sys_sendmsg+0x9c9/0xbe0 [ 154.265960][ T8105] ? __pfx_inet_sendmsg+0x10/0x10 [ 154.266050][ T8105] ? __pfx_____sys_sendmsg+0x10/0x10 [ 154.266193][ T8105] ? trace_buffer_unlock_commit_regs+0x37b/0x540 [ 154.266338][ T8105] ___sys_sendmsg+0x190/0x1e0 [ 154.266442][ T8105] ? __pfx____sys_sendmsg+0x10/0x10 [ 154.266475][ T8105] ? trace_event_raw_event_lock+0x1e2/0x2b0 [ 154.266718][ T8105] ? find_held_lock+0x2b/0x80 [ 154.267049][ T8105] __sys_sendmsg+0x160/0x210 [ 154.267144][ T8105] ? __pfx___sys_sendmsg+0x10/0x10 [ 154.267451][ T8105] do_syscall_64+0x123/0x790 [ 154.267522][ T8105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.267554][ T8105] RIP: 0033:0x7f61deb9e159 [ 154.267607][ T8105] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.267625][ T8105] RSP: 002b:00007f61dfb23028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 154.267650][ T8105] RAX: ffffffffffffffda RBX: 00007f61dee26090 RCX: 00007f61deb9e159 [ 154.267664][ T8105] RDX: 0000000000044004 RSI: 00002000000000c0 RDI: 0000000000000004 [ 154.267678][ T8105] RBP: 00007f61dfb23090 R08: 0000000000000000 R09: 0000000000000000 [ 154.267692][ T8105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.267706][ T8105] R13: 00007f61dee26128 R14: 00007f61dee26090 R15: 00007ffd637dd418 [ 154.267959][ T8105] [ 154.448021][ T7725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.506656][ T7725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.753133][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.753237][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.753280][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.753337][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.952108][ T8110] FAULT_INJECTION: forcing a failure. [ 154.952108][ T8110] name failslab, interval 1, probability 0, space 0, times 0 [ 154.952142][ T8110] CPU: 3 UID: 0 PID: 8110 Comm: syz.1.662 Not tainted syzkaller #0 PREEMPT(full) [ 154.952174][ T8110] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 154.952188][ T8110] Call Trace: [ 154.952210][ T8110] [ 154.952234][ T8110] dump_stack_lvl+0x100/0x190 [ 154.952344][ T8110] should_fail_ex.cold+0x5/0xa [ 154.952423][ T8110] should_failslab+0xc2/0x120 [ 154.952481][ T8110] __kmalloc_cache_noprof+0x91/0x6d0 [ 154.952564][ T8110] ? ovl_encode_real_fh+0xca/0x410 [ 154.952680][ T8110] ovl_encode_real_fh+0xca/0x410 [ 154.952738][ T8110] ? __pfx_ovl_encode_real_fh+0x10/0x10 [ 154.952948][ T8110] ovl_verify_origin_xattr+0x64/0x140 [ 154.953074][ T8110] ovl_lookup_index+0x3c2/0x660 [ 154.953188][ T8110] ? __pfx_ovl_lookup_index+0x10/0x10 [ 154.953248][ T8110] ? ovl_verify_origin_xattr+0xbe/0x140 [ 154.953389][ T8110] ovl_lookup_layers+0x60b/0x2ac0 [ 154.953684][ T8110] ? __pfx_ovl_lookup_layers+0x10/0x10 [ 154.953705][ T8110] ? __pfx_trace_event_raw_event_lock+0x10/0x10 [ 154.953916][ T8110] ? find_held_lock+0x2b/0x80 [ 154.953963][ T8110] ? d_alloc_parallel+0x46e/0x14c0 [ 154.953987][ T8110] ? d_alloc_parallel+0x46e/0x14c0 [ 154.954077][ T8110] ovl_lookup+0x4a8/0x6b0 [ 154.954124][ T8110] ? d_alloc_parallel+0x9f6/0x14c0 [ 154.954243][ T8110] ? __pfx_ovl_lookup+0x10/0x10 [ 154.954347][ T8110] ? __pfx_d_alloc_parallel+0x10/0x10 [ 154.954534][ T8110] ? down_read+0x13b/0x4c0 [ 154.954584][ T8110] ? __pfx_down_read+0x10/0x10 [ 154.954698][ T8110] __lookup_slow+0x155/0x320 [ 154.954794][ T8110] lookup_slow+0x50/0x70 [ 154.954854][ T8110] path_lookupat+0x5e8/0xc40 [ 154.955030][ T8110] filename_lookup+0x202/0x590 [ 154.955115][ T8110] ? __pfx_filename_lookup+0x10/0x10 [ 154.955166][ T8110] ? trace_event_buffer_commit+0x20a/0xa80 [ 154.955534][ T8110] ? __might_fault+0xc5/0x140 [ 154.955574][ T8110] ? find_held_lock+0x2b/0x80 [ 154.955607][ T8110] ? __might_fault+0xc5/0x140 [ 154.955644][ T8110] ? __might_fault+0xc5/0x140 [ 154.955805][ T8110] vfs_statx+0xff/0x3f0 [ 154.955875][ T8110] ? __pfx_vfs_statx+0x10/0x10 [ 154.955971][ T8110] ? do_getname+0x191/0x390 [ 154.956105][ T8110] vfs_fstatat+0x77/0xe0 [ 154.956167][ T8110] __do_sys_newfstatat+0x9d/0x120 [ 154.956225][ T8110] ? __pfx___do_sys_newfstatat+0x10/0x10 [ 154.956551][ T8110] ? __pfx_ksys_write+0x10/0x10 [ 154.956729][ T8110] do_syscall_64+0x123/0x790 [ 154.956851][ T8110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.956897][ T8110] RIP: 0033:0x7efd4539e159 [ 154.956955][ T8110] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.956968][ T8110] RSP: 002b:00007efd462e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 154.956985][ T8110] RAX: ffffffffffffffda RBX: 00007efd45626090 RCX: 00007efd4539e159 [ 154.956995][ T8110] RDX: 0000200000000380 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 154.957004][ T8110] RBP: 00007efd462e3090 R08: 0000000000000000 R09: 0000000000000000 [ 154.957014][ T8110] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000001 [ 154.957024][ T8110] R13: 00007efd45626128 R14: 00007efd45626090 R15: 00007fff36eaefd8 [ 154.957268][ T8110] [ 154.959737][ T8110] overlayfs: failed to verify upper (file0/file1, ino=857, err=-12) [ 155.563029][ T8115] netlink: 12 bytes leftover after parsing attributes in process `syz.1.663'. [ 155.791007][ T8120] No source specified [ 155.990463][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.990481][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.716973][ T223] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.716997][ T223] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.861571][ T43] audit: type=1400 audit(1790499437.201:607): avc: denied { write } for pid=8122 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 157.024006][ T43] audit: type=1400 audit(1790499437.371:608): avc: denied { mounton } for pid=7725 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2834 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 157.099279][ T43] audit: type=1400 audit(1790499437.441:609): avc: denied { mounton } for pid=7725 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 157.289675][ T8133] ip_tables: iptables: counters copy to user failed while replacing table [ 157.781118][ T43] audit: type=1400 audit(1790499438.111:610): avc: denied { write } for pid=8136 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 158.804053][ T8144] FAULT_INJECTION: forcing a failure. [ 158.804053][ T8144] name failslab, interval 1, probability 0, space 0, times 0 [ 158.804082][ T8144] CPU: 2 UID: 0 PID: 8144 Comm: syz.4.577 Not tainted syzkaller #0 PREEMPT(full) [ 158.804099][ T8144] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 158.804108][ T8144] Call Trace: [ 158.804120][ T8144] [ 158.804134][ T8144] dump_stack_lvl+0x100/0x190 [ 158.804214][ T8144] should_fail_ex.cold+0x5/0xa [ 158.804365][ T8144] should_failslab+0xc2/0x120 [ 158.804417][ T8144] __kmalloc_noprof+0xfc/0x840 [ 158.804440][ T8144] ? rcu_is_watching+0x13/0xc0 [ 158.804481][ T8144] ? tomoyo_realpath_from_path+0xb6/0x690 [ 158.804644][ T8144] tomoyo_realpath_from_path+0xb6/0x690 [ 158.804795][ T8144] tomoyo_check_open_permission+0x2af/0x3c0 [ 158.804867][ T8144] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 158.804953][ T8144] ? trace_buffer_unlock_commit_regs+0x37b/0x540 [ 158.805069][ T8144] ? hook_file_open+0x248/0x8e0 [ 158.805472][ T8144] ? __raw_callee_save_pv_queued_spin_unlock_traced+0x15/0x40 [ 158.805562][ T8144] tomoyo_file_open+0x6b/0x90 [ 158.805636][ T8144] security_file_open+0xb5/0x1e0 [ 158.805701][ T8144] do_dentry_open+0x588/0x14d0 [ 158.805869][ T8144] vfs_open+0x82/0x3f0 [ 158.806023][ T8144] dentry_open+0x71/0xd0 [ 158.806079][ T8144] ovl_path_open+0x182/0x1d0 [ 158.806149][ T8144] ovl_dir_open+0x178/0x3a0 [ 158.806220][ T8144] ? __pfx_ovl_dir_open+0x10/0x10 [ 158.806352][ T8144] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 158.806457][ T8144] do_dentry_open+0x6ab/0x14d0 [ 158.806498][ T8144] ? __pfx_ovl_dir_open+0x10/0x10 [ 158.806671][ T8144] vfs_open+0x82/0x3f0 [ 158.806778][ T8144] dentry_open+0x71/0xd0 [ 158.806861][ T8144] ovl_path_open+0x182/0x1d0 [ 158.806954][ T8144] ovl_dir_read_merged+0x2e8/0x790 [ 158.807063][ T8144] ? __pfx_ovl_dir_read_merged+0x10/0x10 [ 158.807224][ T8144] ? __pfx_ovl_fill_merge+0x10/0x10 [ 158.807370][ T8144] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 158.807453][ T8144] ? ovl_iterate+0xa74/0x10d0 [ 158.807558][ T8144] ovl_iterate+0xb2a/0x10d0 [ 158.807681][ T8144] ? __pfx_down_read_killable+0x10/0x10 [ 158.807774][ T8144] ? __pfx_ovl_iterate+0x10/0x10 [ 158.807813][ T8144] wrap_directory_iterator+0xa2/0xe0 [ 158.807896][ T8144] iterate_dir+0x296/0xae0 [ 158.808048][ T8144] __x64_sys_getdents64+0x13b/0x2c0 [ 158.808103][ T8144] ? __pfx___x64_sys_getdents64+0x10/0x10 [ 158.808129][ T8144] ? fput+0x7c/0x100 [ 158.808180][ T8144] ? __pfx_filldir64+0x10/0x10 [ 158.808400][ T8144] do_syscall_64+0x123/0x790 [ 158.808521][ T8144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.808564][ T8144] RIP: 0033:0x7ff01519e159 [ 158.808608][ T8144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.808622][ T8144] RSP: 002b:00007ff015fa1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 158.808639][ T8144] RAX: ffffffffffffffda RBX: 00007ff015425fa0 RCX: 00007ff01519e159 [ 158.808650][ T8144] RDX: 00000000000000eb RSI: 0000200000000280 RDI: 0000000000000003 [ 158.808659][ T8144] RBP: 00007ff015fa1090 R08: 0000000000000000 R09: 0000000000000000 [ 158.808669][ T8144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.808679][ T8144] R13: 00007ff015426038 R14: 00007ff015425fa0 R15: 00007fff2fbb9938 [ 158.808949][ T8144] [ 158.813830][ T8144] ERROR: Out of memory at tomoyo_realpath_from_path. [ 160.262322][ T5735] Bluetooth: hci0: command 0x0406 tx timeout [ 161.371228][ T43] audit: type=1400 audit(1790499441.711:611): avc: denied { write } for pid=8162 comm="syz.4.678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 161.652546][ T8164] netlink: 'syz.4.678': attribute type 13 has an invalid length. [ 161.652574][ T8164] netlink: 44 bytes leftover after parsing attributes in process `syz.4.678'. [ 162.069802][ T8172] netlink: 16 bytes leftover after parsing attributes in process `syz.3.679'. [ 162.592670][ T8176] FAULT_INJECTION: forcing a failure. [ 162.592670][ T8176] name failslab, interval 1, probability 0, space 0, times 0 [ 162.592706][ T8176] CPU: 3 UID: 0 PID: 8176 Comm: syz.0.683 Not tainted syzkaller #0 PREEMPT(full) [ 162.592750][ T8176] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 162.592768][ T8176] Call Trace: [ 162.592792][ T8176] [ 162.592813][ T8176] dump_stack_lvl+0x100/0x190 [ 162.592926][ T8176] should_fail_ex.cold+0x5/0xa [ 162.593029][ T8176] should_failslab+0xc2/0x120 [ 162.593078][ T8176] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 162.593112][ T8176] ? start_dirop+0x79/0xb0 [ 162.593166][ T8176] ? alloc_inode+0x68/0x250 [ 162.593272][ T8176] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 162.593336][ T8176] alloc_inode+0x68/0x250 [ 162.593385][ T8176] new_inode+0x22/0x1c0 [ 162.593506][ T8176] __debugfs_create_file+0xd8/0x4d0 [ 162.593631][ T8176] debugfs_create_file_full+0x41/0x60 [ 162.593734][ T8176] kvm_dev_ioctl+0x1797/0x1b50 [ 162.593939][ T8176] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 162.594110][ T8176] ? selinux_file_ioctl+0x13b/0x290 [ 162.594151][ T8176] ? selinux_file_ioctl+0xb6/0x290 [ 162.594213][ T8176] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 162.594285][ T8176] __x64_sys_ioctl+0x18e/0x210 [ 162.594403][ T8176] do_syscall_64+0x123/0x790 [ 162.594495][ T8176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.594522][ T8176] RIP: 0033:0x7f61deb9e159 [ 162.594563][ T8176] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.594580][ T8176] RSP: 002b:00007f61dfb44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 162.594603][ T8176] RAX: ffffffffffffffda RBX: 00007f61dee25fa0 RCX: 00007f61deb9e159 [ 162.594616][ T8176] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000007 [ 162.594629][ T8176] RBP: 00007f61dec3506b R08: 0000000000000000 R09: 0000000000000000 [ 162.594642][ T8176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 162.594655][ T8176] R13: 00007f61dee26038 R14: 00007f61dee25fa0 R15: 00007ffd637dd418 [ 162.594914][ T8176] [ 162.597523][ T8176] debugfs: out of free dentries, can not create file 'nmi_window_exits' [ 162.720522][ T8181] random: crng reseeded on system resumption [ 163.524318][ T8188] netlink: 24 bytes leftover after parsing attributes in process `syz.4.685'. [ 164.911982][ T43] audit: type=1400 audit(1790499445.251:612): avc: denied { shutdown } for pid=8209 comm="syz.3.692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 164.921561][ T8211] CUSE: unknown device info "" [ 164.921580][ T8211] CUSE: unknown device info "" [ 164.921591][ T8211] CUSE: unknown device info "" [ 164.921603][ T8211] CUSE: unknown device info "" [ 164.922573][ T8211] CUSE: zero length info key specified [ 164.975187][ T8212] qnx4: unable to read the superblock [ 165.615812][ T8218] syzkaller0: entered promiscuous mode [ 165.615831][ T8218] syzkaller0: entered allmulticast mode [ 166.359830][ T8227] netlink: 28 bytes leftover after parsing attributes in process `syz.4.697'. [ 166.819369][ T43] audit: type=1400 audit(1790499447.161:613): avc: denied { getopt } for pid=8234 comm="syz.3.701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 166.821061][ T43] audit: type=1400 audit(1790499447.161:614): avc: denied { ioctl } for pid=8234 comm="syz.3.701" path="socket:[37114]" dev="sockfs" ino=37114 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 167.264332][ T8237] netlink: 12 bytes leftover after parsing attributes in process `syz.0.702'. [ 167.514626][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 167.514646][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 167.514659][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x6955 instead [ 167.514673][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x19a1 instead [ 167.514685][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 167.514698][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 167.514711][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 167.514727][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 167.514750][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 167.514773][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 167.514786][ T8239] jffs2: Further such events for this erase block will not be printed [ 167.515133][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 167.515150][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 167.515168][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x6955 instead [ 167.515187][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x19a1 instead [ 167.515204][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 167.515222][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 167.515237][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 167.515250][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 167.515270][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 167.515290][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 167.515301][ T8239] jffs2: Further such events for this erase block will not be printed [ 167.515610][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 167.515626][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 167.515642][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x6955 instead [ 167.515659][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0x19a1 instead [ 167.515817][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 167.515830][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 167.515844][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x6955 instead [ 167.515859][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0x19a1 instead [ 167.518440][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 167.518468][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 167.518491][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x6955 instead [ 167.518516][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0x19a1 instead [ 167.518826][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 167.518857][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 167.518887][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x6955 instead [ 167.518916][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0x19a1 instead [ 167.519127][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 167.519154][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 167.519181][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x6955 instead [ 167.519210][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0x19a1 instead [ 167.519515][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 167.519538][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 167.519561][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x6955 instead [ 167.519585][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0x19a1 instead [ 167.533075][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 167.533113][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 167.533146][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x6955 instead [ 167.533167][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0x19a1 instead [ 167.533389][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 167.533415][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 167.533497][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x6955 instead [ 167.533528][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0x19a1 instead [ 167.663456][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 167.663485][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 167.663505][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x6955 instead [ 167.663526][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0x19a1 instead [ 167.663743][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 167.663762][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 167.663781][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x6955 instead [ 167.663800][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0x19a1 instead [ 167.663929][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 167.663944][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 167.663960][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x6955 instead [ 167.663977][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0x19a1 instead [ 167.664152][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 167.664165][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 167.664179][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x6955 instead [ 167.664193][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0x19a1 instead [ 167.664357][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 167.664374][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 167.664392][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x6955 instead [ 167.664411][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0x19a1 instead [ 167.664554][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 167.664569][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 167.664584][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x6955 instead [ 167.664600][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0x19a1 instead [ 167.664816][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 167.664838][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 167.664851][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x6955 instead [ 167.664864][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0x19a1 instead [ 167.664993][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 167.665009][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 167.665026][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x6955 instead [ 167.665044][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0x19a1 instead [ 167.675278][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 167.675301][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 167.675318][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x6955 instead [ 167.675335][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0x19a1 instead [ 167.675500][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 167.675513][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 167.675527][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x6955 instead [ 167.675542][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0x19a1 instead [ 167.675713][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 167.675730][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 167.675748][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x6955 instead [ 167.675767][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0x19a1 instead [ 167.675898][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 167.675913][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 167.675929][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x6955 instead [ 167.675945][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0x19a1 instead [ 167.676126][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 167.676139][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 167.676152][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x6955 instead [ 167.676166][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0x19a1 instead [ 167.676311][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 167.676328][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 167.676345][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x6955 instead [ 167.676363][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x19a1 instead [ 167.676509][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 167.676524][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 167.676538][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x6955 instead [ 167.676554][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x19a1 instead [ 167.676760][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 167.676779][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 167.676799][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x6955 instead [ 167.676812][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x19a1 instead [ 167.676938][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 167.676954][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 167.676970][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x6955 instead [ 167.676987][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x19a1 instead [ 167.677156][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 167.677169][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 167.677182][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x6955 instead [ 167.677197][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x19a1 instead [ 167.677362][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 167.677379][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 167.677398][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x6955 instead [ 167.677418][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x19a1 instead [ 167.689815][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 167.689846][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 167.689866][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x6955 instead [ 167.689885][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x19a1 instead [ 167.690020][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 167.690035][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 167.690051][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x6955 instead [ 167.690067][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x19a1 instead [ 167.690256][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 167.690269][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 167.690282][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x6955 instead [ 167.690296][ T8239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x19a1 instead [ 167.690321][ T8239] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 167.690329][ T8239] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 170.715761][ T8272] device-mapper: ioctl: Invalid ioctl structure: name t, dev f802 [ 170.917561][ T64] Bluetooth: hci0: unexpected event for opcode 0x1004 [ 171.035546][ T43] audit: type=1400 audit(1790499451.381:615): avc: denied { write } for pid=8275 comm="syz.3.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 171.311527][ T8282] ip_tables: iptables: counters copy to user failed while replacing table [ 171.380742][ T43] audit: type=1400 audit(1790499451.721:616): avc: denied { connect } for pid=8280 comm="syz.0.716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 173.061782][ T5735] Bluetooth: hci0: command 0x0406 tx timeout [ 173.062043][ T64] Bluetooth: hci0: Opcode 0x0c56 failed: -110 [ 173.406013][ T64] Bluetooth: hci0: unexpected event for opcode 0x0803 [ 174.213423][ T8314] netlink: 28 bytes leftover after parsing attributes in process `syz.1.725'. [ 174.291106][ T43] audit: type=1400 audit(1790499454.631:617): avc: denied { bind } for pid=8313 comm="syz.1.725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 174.315072][ T43] audit: type=1400 audit(1790499454.651:618): avc: denied { ioctl } for pid=8313 comm="syz.1.725" path="socket:[35722]" dev="sockfs" ino=35722 ioctlcmd=0x6615 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 174.315317][ T43] audit: type=1400 audit(1790499454.651:619): avc: denied { write } for pid=8313 comm="syz.1.725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 174.336560][ T8314] atomic_op ffff88802ae511e0 conn xmit_atomic 0000000000000000 [ 174.941775][ T43] audit: type=1400 audit(1790499455.281:620): avc: denied { write } for pid=8315 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.068871][ T8322] lo: entered allmulticast mode [ 175.077244][ T8322] bond0: entered allmulticast mode [ 175.079377][ T8322] dummy0: entered allmulticast mode [ 175.087261][ T8322] eql: entered allmulticast mode [ 175.088279][ T8322] ifb0: entered allmulticast mode [ 175.102467][ T8322] ifb1: entered allmulticast mode [ 175.118389][ T8322] e1000 0000:00:06.0 eth0: entered allmulticast mode [ 175.165768][ T8322] e1000e 0000:00:02.0 eth1: entered allmulticast mode [ 175.176988][ T8322] mac80211_hwsim hwsim0 wlan0: entered allmulticast mode [ 175.190538][ T8322] mac80211_hwsim hwsim1 wlan1: entered allmulticast mode [ 175.198010][ T8322] hwsim0: entered allmulticast mode [ 175.198946][ T8322] ieee802154 phy0 wpan0: entered allmulticast mode [ 175.199940][ T8322] ieee802154 phy1 wpan1: entered allmulticast mode [ 175.200968][ T8322] teql0: entered allmulticast mode [ 175.216242][ T8322] tunl0: entered allmulticast mode [ 175.217091][ T8322] gre0: entered allmulticast mode [ 175.217636][ T8322] gretap0: entered allmulticast mode [ 175.218173][ T8322] erspan0: entered allmulticast mode [ 175.218588][ T8322] ip_vti0: entered allmulticast mode [ 175.219349][ T8322] ip6_vti0: entered allmulticast mode [ 175.219845][ T8322] sit0: entered allmulticast mode [ 175.220314][ T8322] ip6tnl0: entered allmulticast mode [ 175.220752][ T8322] ip6gre0: entered allmulticast mode [ 175.221223][ T8322] lapb0: entered allmulticast mode [ 175.238558][ T8322] lapb1: entered allmulticast mode [ 175.263303][ T8322] lapb2: entered allmulticast mode [ 175.269849][ T8322] lapb3: entered allmulticast mode [ 175.288285][ T8322] lapb4: entered allmulticast mode [ 175.292614][ T8322] lapb5: entered allmulticast mode [ 175.297102][ T8322] lapb6: entered allmulticast mode [ 175.309611][ T8322] lowpan0: entered allmulticast mode [ 175.313419][ T8322] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 175.335119][ T8322] netdevsim netdevsim2 eth2: entered allmulticast mode [ 175.348985][ T8322] netdevsim netdevsim2 eth3: entered allmulticast mode [ 175.354560][ T8322] netdevsim netdevsim2 eth4: entered allmulticast mode [ 175.369606][ T8322] netdevsim netdevsim2 eth5: entered allmulticast mode [ 175.379816][ T8322] ieee802154 phy1 wpan2: entered allmulticast mode [ 175.935749][ T43] audit: type=1400 audit(1790499456.281:621): avc: denied { write } for pid=8328 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 176.163068][ T8335] netlink: 'syz.4.731': attribute type 2 has an invalid length. [ 176.163093][ T8335] netlink: 8 bytes leftover after parsing attributes in process `syz.4.731'. [ 176.322485][ T43] audit: type=1400 audit(1790499456.661:622): avc: denied { create } for pid=8336 comm="syz.3.732" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 176.347271][ T43] audit: type=1400 audit(1790499456.691:623): avc: denied { write } for pid=8336 comm="syz.3.732" name="file0" dev="tmpfs" ino=1050 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 176.360308][ T43] audit: type=1400 audit(1790499456.691:624): avc: denied { open } for pid=8336 comm="syz.3.732" path="/183/file0" dev="tmpfs" ino=1050 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 176.373931][ T43] audit: type=1400 audit(1790499456.711:625): avc: denied { ioctl } for pid=8336 comm="syz.3.732" path="/183/file0" dev="tmpfs" ino=1050 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 176.542377][ T43] audit: type=1400 audit(1790499456.881:626): avc: denied { unlink } for pid=5719 comm="syz-executor" name="file0" dev="tmpfs" ino=1050 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 177.693168][ T8348] program syz.4.735 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 177.845693][ T43] audit: type=1800 audit(1790499458.181:627): pid=8351 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.736" name="(" dev="sda1" ino=2038 res=0 errno=0 [ 177.904182][ T8351] FAULT_INJECTION: forcing a failure. [ 177.904182][ T8351] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.904225][ T8351] CPU: 2 UID: 0 PID: 8351 Comm: syz.3.736 Not tainted syzkaller #0 PREEMPT(full) [ 177.904246][ T8351] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 177.904261][ T8351] Call Trace: [ 177.904292][ T8351] [ 177.904321][ T8351] dump_stack_lvl+0x100/0x190 [ 177.904387][ T8351] should_fail_ex.cold+0x5/0xa [ 177.904489][ T8351] _copy_to_user+0x32/0xd0 [ 177.904615][ T8351] simple_read_from_buffer+0xcb/0x170 [ 177.904697][ T8351] proc_fail_nth_read+0x1af/0x230 [ 177.904786][ T8351] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 177.904915][ T8351] ? rw_verify_area+0xce/0x6d0 [ 177.904950][ T8351] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 177.905005][ T8351] vfs_read+0x1e4/0xb40 [ 177.905081][ T8351] ? lock_acquire+0x1d1/0x380 [ 177.905126][ T8351] ? __fget_files+0x34/0x3d0 [ 177.905193][ T8351] ? __pfx_vfs_read+0x10/0x10 [ 177.905226][ T8351] ? find_held_lock+0x2b/0x80 [ 177.905268][ T8351] ? __fget_files+0x215/0x3d0 [ 177.905392][ T8351] ? __fget_files+0x21f/0x3d0 [ 177.905568][ T8351] ksys_read+0x12a/0x250 [ 177.905620][ T8351] ? __pfx_ksys_read+0x10/0x10 [ 177.905802][ T8351] do_syscall_64+0x123/0x790 [ 177.905893][ T8351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.905930][ T8351] RIP: 0033:0x7f2cdad5e98e [ 177.905990][ T8351] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 177.906010][ T8351] RSP: 002b:00007f2cdbc20fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 177.906038][ T8351] RAX: ffffffffffffffda RBX: 00007f2cdbc216c0 RCX: 00007f2cdad5e98e [ 177.906054][ T8351] RDX: 000000000000000f RSI: 00007f2cdbc210a0 RDI: 0000000000000004 [ 177.906066][ T8351] RBP: 00007f2cdbc21090 R08: 0000000000000000 R09: 0000000000000000 [ 177.906075][ T8351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.906085][ T8351] R13: 00007f2cdb026038 R14: 00007f2cdb025fa0 R15: 00007ffeb1bda568 [ 177.906330][ T8351] [ 179.088987][ T8363] FAULT_INJECTION: forcing a failure. [ 179.088987][ T8363] name failslab, interval 1, probability 0, space 0, times 0 [ 179.090455][ T8363] CPU: 1 UID: 0 PID: 8363 Comm: syz.0.741 Not tainted syzkaller #0 PREEMPT(full) [ 179.090479][ T8363] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 179.090494][ T8363] Call Trace: [ 179.090520][ T8363] [ 179.090547][ T8363] dump_stack_lvl+0x100/0x190 [ 179.090626][ T8363] should_fail_ex.cold+0x5/0xa [ 179.090722][ T8363] should_failslab+0xc2/0x120 [ 179.090788][ T8363] __kmalloc_noprof+0xfc/0x840 [ 179.090845][ T8363] ? rcu_is_watching+0x13/0xc0 [ 179.090895][ T8363] ? tomoyo_encode2+0xfb/0x3c0 [ 179.090993][ T8363] tomoyo_encode2+0xfb/0x3c0 [ 179.091156][ T8363] tomoyo_encode+0x29/0x50 [ 179.091184][ T8363] tomoyo_realpath_from_path+0x18c/0x690 [ 179.091320][ T8363] tomoyo_check_open_permission+0x2af/0x3c0 [ 179.091404][ T8363] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 179.091466][ T8363] ? trace_buffer_unlock_commit_regs+0x37b/0x540 [ 179.091586][ T8363] ? hook_file_open+0x248/0x8e0 [ 179.091987][ T8363] ? __raw_callee_save_pv_queued_spin_unlock_traced+0x15/0x40 [ 179.092088][ T8363] tomoyo_file_open+0x6b/0x90 [ 179.092184][ T8363] security_file_open+0xb5/0x1e0 [ 179.092255][ T8363] do_dentry_open+0x588/0x14d0 [ 179.092408][ T8363] vfs_open+0x82/0x3f0 [ 179.092538][ T8363] dentry_open+0x71/0xd0 [ 179.092592][ T8363] ovl_path_open+0x182/0x1d0 [ 179.092705][ T8363] ovl_dir_open+0x178/0x3a0 [ 179.092796][ T8363] ? __pfx_ovl_dir_open+0x10/0x10 [ 179.092858][ T8363] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 179.092978][ T8363] do_dentry_open+0x6ab/0x14d0 [ 179.093031][ T8363] ? __pfx_ovl_dir_open+0x10/0x10 [ 179.093170][ T8363] vfs_open+0x82/0x3f0 [ 179.093322][ T8363] dentry_open+0x71/0xd0 [ 179.093388][ T8363] ovl_path_open+0x182/0x1d0 [ 179.093454][ T8363] ovl_dir_read_merged+0x2e8/0x790 [ 179.093605][ T8363] ? __pfx_ovl_dir_read_merged+0x10/0x10 [ 179.093740][ T8363] ? __pfx_ovl_fill_merge+0x10/0x10 [ 179.093930][ T8363] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 179.093971][ T8363] ? ovl_iterate+0xa74/0x10d0 [ 179.094100][ T8363] ovl_iterate+0xb2a/0x10d0 [ 179.094230][ T8363] ? __pfx_down_read_killable+0x10/0x10 [ 179.094298][ T8363] ? __pfx_ovl_iterate+0x10/0x10 [ 179.094350][ T8363] wrap_directory_iterator+0xa2/0xe0 [ 179.094456][ T8363] iterate_dir+0x296/0xae0 [ 179.094569][ T8363] __x64_sys_getdents64+0x13b/0x2c0 [ 179.094646][ T8363] ? __pfx___x64_sys_getdents64+0x10/0x10 [ 179.094679][ T8363] ? fput+0x7c/0x100 [ 179.094743][ T8363] ? __pfx_filldir64+0x10/0x10 [ 179.094953][ T8363] do_syscall_64+0x123/0x790 [ 179.095054][ T8363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.095078][ T8363] RIP: 0033:0x7f61deb9e159 [ 179.095115][ T8363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.095131][ T8363] RSP: 002b:00007f61dfb44028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 179.095152][ T8363] RAX: ffffffffffffffda RBX: 00007f61dee25fa0 RCX: 00007f61deb9e159 [ 179.095164][ T8363] RDX: 00000000000000eb RSI: 0000200000000280 RDI: 0000000000000003 [ 179.095176][ T8363] RBP: 00007f61dfb44090 R08: 0000000000000000 R09: 0000000000000000 [ 179.095191][ T8363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 179.095204][ T8363] R13: 00007f61dee26038 R14: 00007f61dee25fa0 R15: 00007ffd637dd418 [ 179.095451][ T8363] [ 179.095882][ T8363] ERROR: Out of memory at tomoyo_realpath_from_path. [ 179.279085][ T43] audit: type=1800 audit(1790499459.611:628): pid=8364 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.740" name="(" dev="sda1" ino=2038 res=0 errno=0 [ 180.895034][ T8380] netlink: 24 bytes leftover after parsing attributes in process `syz.1.744'. [ 181.182910][ T8385] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8385 comm=syz.1.744 [ 181.461593][ T8387] netlink: 'syz.4.746': attribute type 11 has an invalid length. [ 181.807777][ T43] audit: type=1400 audit(1790499462.151:629): avc: denied { create } for pid=8389 comm="syz.0.747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 181.876577][ T43] audit: type=1400 audit(1790499462.221:630): avc: denied { bpf } for pid=8389 comm="syz.0.747" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 182.024446][ T43] audit: type=1400 audit(1790499462.351:631): avc: denied { perfmon } for pid=8389 comm="syz.0.747" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 182.113861][ T43] audit: type=1400 audit(1790499462.441:632): avc: denied { bind } for pid=8389 comm="syz.0.747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 182.226645][ T8398] smbdirect: ib_dev[©÷Å]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 182.226678][ T8398] smbdirect: ib_dev[©÷Å]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 182.226703][ T8398] smbdirect: ib_dev[©÷Å]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 182.264727][ T43] audit: type=1326 audit(1790499462.611:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8394 comm="syz.4.749" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff01519e159 code=0x0 [ 182.287813][ T8393] netlink: 'syz.3.748': attribute type 1 has an invalid length. [ 182.287835][ T8393] netlink: 84 bytes leftover after parsing attributes in process `syz.3.748'. [ 182.287851][ T8393] netlink: 'syz.3.748': attribute type 2 has an invalid length. [ 182.287867][ T8393] netlink: 4 bytes leftover after parsing attributes in process `syz.3.748'. [ 182.388702][ T8398] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 182.515375][ T8398] infiniband ©÷Å: RDMA CMA: cma_listen_on_dev, error -98 [ 182.896362][ T43] audit: type=1400 audit(1790499463.231:634): avc: denied { cmd } for pid=8401 comm="syz.1.750" path="/dev/ublk-control" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 183.092517][ T8402] FAULT_INJECTION: forcing a failure. [ 183.092517][ T8402] name failslab, interval 1, probability 0, space 0, times 0 [ 183.092560][ T8402] CPU: 1 UID: 0 PID: 8402 Comm: syz.1.750 Not tainted syzkaller #0 PREEMPT(full) [ 183.092582][ T8402] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 183.092598][ T8402] Call Trace: [ 183.092649][ T8402] [ 183.092679][ T8402] dump_stack_lvl+0x100/0x190 [ 183.092767][ T8402] should_fail_ex.cold+0x5/0xa [ 183.092866][ T8402] should_failslab+0xc2/0x120 [ 183.092933][ T8402] __kvmalloc_node_noprof+0x113/0x9b0 [ 183.092975][ T8402] ? nla_strdup+0xc3/0x150 [ 183.093082][ T8402] ? nf_tables_addchain.constprop.0+0x9be/0x1ca0 [ 183.093205][ T8402] nf_tables_addchain.constprop.0+0x9be/0x1ca0 [ 183.093398][ T8402] ? nft_chain_lookup+0x59c/0xa60 [ 183.093520][ T8402] ? __pfx_nf_tables_addchain.constprop.0+0x10/0x10 [ 183.093599][ T8402] ? __pfx_nft_chain_lookup+0x10/0x10 [ 183.094009][ T8402] ? nla_strcmp+0xff/0x130 [ 183.094158][ T8402] ? nft_table_lookup.part.0+0x1e3/0x230 [ 183.094228][ T8402] nf_tables_newchain+0x1824/0x2a50 [ 183.094276][ T8402] ? trace_buffer_unlock_commit_regs+0x37a/0x540 [ 183.094428][ T8402] ? trace_event_buffer_commit+0x20a/0xa80 [ 183.094642][ T8402] ? __pfx_nf_tables_newchain+0x10/0x10 [ 183.094819][ T8402] ? __pfx___nla_validate_parse+0x10/0x10 [ 183.094895][ T8402] ? lock_acquire+0x1d1/0x380 [ 183.094955][ T8402] ? net_generic+0x25/0x2a0 [ 183.095291][ T8402] ? __nla_parse+0x40/0x60 [ 183.095460][ T8402] nfnetlink_rcv_batch+0x1410/0x2880 [ 183.095994][ T8402] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 183.096295][ T8402] ? lock_acquire+0x1d1/0x380 [ 183.096342][ T8402] ? avc_has_perm_noaudit+0x56/0x470 [ 183.096780][ T8402] ? avc_has_perm_noaudit+0x145/0x470 [ 183.097677][ T8402] ? __nla_parse+0x40/0x60 [ 183.097843][ T8402] nfnetlink_rcv+0x3bd/0x440 [ 183.097982][ T8402] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 183.098309][ T8402] netlink_unicast+0x585/0x850 [ 183.098576][ T8402] ? __pfx_netlink_unicast+0x10/0x10 [ 183.098870][ T8402] netlink_sendmsg+0x8b0/0xda0 [ 183.099136][ T8402] ? __pfx_netlink_sendmsg+0x10/0x10 [ 183.099277][ T8402] ? selinux_socket_sendmsg+0x198/0x2f0 [ 183.099450][ T8402] ____sys_sendmsg+0xa4d/0xbe0 [ 183.099473][ T8402] ? __pfx_netlink_sendmsg+0x10/0x10 [ 183.099551][ T8402] ? __pfx_____sys_sendmsg+0x10/0x10 [ 183.099728][ T8402] ? trace_buffer_unlock_commit_regs+0x37b/0x540 [ 183.099848][ T8402] ___sys_sendmsg+0x190/0x1e0 [ 183.099975][ T8402] ? __pfx____sys_sendmsg+0x10/0x10 [ 183.100022][ T8402] ? trace_event_raw_event_lock+0x1e2/0x2b0 [ 183.100284][ T8402] ? find_held_lock+0x2b/0x80 [ 183.100607][ T8402] __sys_sendmsg+0x160/0x210 [ 183.100711][ T8402] ? __pfx___sys_sendmsg+0x10/0x10 [ 183.101054][ T8402] do_syscall_64+0x123/0x790 [ 183.101129][ T8402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.101159][ T8402] RIP: 0033:0x7efd4539e159 [ 183.101205][ T8402] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.101223][ T8402] RSP: 002b:00007efd46304028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 183.101248][ T8402] RAX: ffffffffffffffda RBX: 00007efd45625fa0 RCX: 00007efd4539e159 [ 183.101267][ T8402] RDX: 0000000020004450 RSI: 0000200000000000 RDI: 000000000000000a [ 183.101281][ T8402] RBP: 00007efd4543506b R08: 0000000000000000 R09: 0000000000000000 [ 183.101295][ T8402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 183.101309][ T8402] R13: 00007efd45626038 R14: 00007efd45625fa0 R15: 00007fff36eaefd8 [ 183.101573][ T8402] [ 184.592747][ T43] audit: type=1400 audit(1790499464.931:635): avc: denied { write } for pid=8415 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 185.990374][ T64] Bluetooth: hci0: unexpected Set CIG Parameters response data [ 185.990483][ T64] Bluetooth: hci0: unexpected event for opcode 0x2062 [ 186.020105][ T43] audit: type=1400 audit(1790499466.361:636): avc: denied { write } for pid=8432 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 186.162303][ T8440] netlink: 'syz.3.758': attribute type 1 has an invalid length. [ 186.393065][ T8445] random: crng reseeded on system resumption [ 187.051528][ T8440] bond1: entered promiscuous mode [ 187.056859][ T8440] 8021q: adding VLAN 0 to HW filter on device bond1 [ 187.323542][ T8446] 8021q: adding VLAN 0 to HW filter on device bond1 [ 187.325046][ T8446] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 187.325064][ T8446] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 187.362497][ T8446] bond1: (slave ip6gre1): making interface the new active one [ 187.362519][ T8446] ip6gre1: entered promiscuous mode [ 187.370770][ T8446] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 187.640880][ T64] Bluetooth: hci2: unexpected cc 0x200b length: 2 > 1 [ 187.640920][ T64] Bluetooth: hci2: unexpected event for opcode 0x200b [ 187.660511][ T43] audit: type=1400 audit(1790499468.001:637): avc: denied { connect } for pid=8452 comm="syz.0.763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 189.419953][ T8473] i2c i2c-0: new_device: Extra parameters [ 189.433422][ T43] audit: type=1400 audit(1790499469.771:638): avc: denied { create } for pid=8471 comm="syz.3.768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 189.435926][ T43] audit: type=1400 audit(1790499469.781:639): avc: denied { ioctl } for pid=8471 comm="syz.3.768" path="socket:[38188]" dev="sockfs" ino=38188 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 189.546535][ T43] audit: type=1107 audit(1790499469.871:640): pid=8471 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 189.590181][ T8477] netlink: 'syz.0.769': attribute type 2 has an invalid length. [ 189.590214][ T8477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.769'. [ 190.292756][ T8481] netlink: 20 bytes leftover after parsing attributes in process `syz.4.770'. [ 190.295452][ T8481] 8021q: VLANs not supported on sit0 [ 190.840484][ T43] audit: type=1400 audit(1790499471.181:641): avc: denied { read } for pid=8468 comm="syz.1.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 191.855547][ T8491] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 192.323519][ T1662] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 192.502436][ T1662] usb 9-1: Using ep0 maxpacket: 8 [ 192.507795][ T1662] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 192.524882][ T1662] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 192.524903][ T1662] usb 9-1: config 0 has no interface number 0 [ 192.525132][ T1662] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 192.525211][ T1662] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.660947][ T1662] usb 9-1: config 0 descriptor?? [ 192.810938][ T1662] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 193.232614][ T850] usb 9-1: USB disconnect, device number 2 [ 193.634013][ T8511] netlink: 4 bytes leftover after parsing attributes in process `syz.3.776'. [ 193.912028][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 193.936969][ T43] audit: type=1400 audit(1790499474.281:642): avc: denied { read } for pid=8508 comm="syz.3.776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 194.023600][ T1438] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.023874][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.052470][ T10] usb 5-1: device descriptor read/64, error -71 [ 194.342004][ T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 194.389011][ T8520] netlink: 'syz.1.779': attribute type 2 has an invalid length. [ 194.389049][ T8520] netlink: 8 bytes leftover after parsing attributes in process `syz.1.779'. [ 194.493835][ T10] usb 5-1: device descriptor read/64, error -71 [ 194.604484][ T10] usb usb5-port1: attempt power cycle [ 194.985799][ T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 195.040397][ T10] usb 5-1: device descriptor read/8, error -71 [ 195.302218][ T10] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 195.339831][ T10] usb 5-1: device descriptor read/8, error -71 [ 195.450961][ T10] usb usb5-port1: unable to enumerate USB device [ 198.125996][ T8559] netlink: 'syz.4.789': attribute type 2 has an invalid length. [ 198.126022][ T8559] netlink: 8 bytes leftover after parsing attributes in process `syz.4.789'. [ 198.745574][ T8564] bridge_slave_0: left allmulticast mode [ 198.745606][ T8564] bridge_slave_0: left promiscuous mode [ 198.747537][ T8564] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.854005][ T8564] bridge_slave_1: left allmulticast mode [ 198.854037][ T8564] bridge_slave_1: left promiscuous mode [ 198.855883][ T8564] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.021884][ T8564] bond0: (slave bond_slave_0): Releasing backup interface [ 199.110404][ T8564] bond0: (slave bond_slave_1): Releasing backup interface [ 199.337853][ T8564] team0: Port device team_slave_0 removed [ 199.462409][ T8564] team0: Port device team_slave_1 removed [ 199.474569][ T8564] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.474631][ T8564] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.536537][ T8564] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.536621][ T8564] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.637773][ T8564] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 201.003302][ T8580] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.003710][ T8580] FAULT_INJECTION: forcing a failure. [ 201.003710][ T8580] name failslab, interval 1, probability 0, space 0, times 0 [ 201.003744][ T8580] CPU: 2 UID: 0 PID: 8580 Comm: syz.0.796 Not tainted syzkaller #0 PREEMPT(full) [ 201.003763][ T8580] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 201.003776][ T8580] Call Trace: [ 201.003801][ T8580] [ 201.003826][ T8580] dump_stack_lvl+0x100/0x190 [ 201.003928][ T8580] should_fail_ex.cold+0x5/0xa [ 201.004001][ T8580] ? __pfx_switchdev_port_attr_set_deferred+0x10/0x10 [ 201.004036][ T8580] should_failslab+0xc2/0x120 [ 201.004110][ T8580] __kmalloc_noprof+0xfc/0x840 [ 201.004164][ T8580] ? trace_event_buffer_commit+0x20a/0xa80 [ 201.004221][ T8580] ? switchdev_deferred_enqueue+0x3e/0x2d0 [ 201.004319][ T8580] ? __pfx_switchdev_port_attr_set_deferred+0x10/0x10 [ 201.004352][ T8580] switchdev_deferred_enqueue+0x3e/0x2d0 [ 201.004464][ T8580] switchdev_port_attr_set+0xb5/0x100 [ 201.004582][ T8580] br_set_state+0x243/0x620 [ 201.004661][ T8580] ? __pfx_br_set_state+0x10/0x10 [ 201.004822][ T8580] ? do_raw_spin_lock+0x128/0x260 [ 201.004881][ T8580] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 201.004974][ T8580] br_init_port+0xc9/0x210 [ 201.005057][ T8580] br_stp_enable_port+0x15/0x50 [ 201.005112][ T8580] br_port_carrier_check+0x26f/0x4d0 [ 201.005213][ T8580] br_device_event+0x821/0xa00 [ 201.005268][ T8580] ? __pfx_br_device_event+0x10/0x10 [ 201.005383][ T8580] ? lockdep_rtnl_is_held+0x26/0x40 [ 201.005478][ T8580] notifier_call_chain+0x99/0x3f0 [ 201.005626][ T8580] call_netdevice_notifiers_info+0xbe/0x110 [ 201.005725][ T8580] netif_state_change+0x165/0x380 [ 201.005764][ T8580] ? __pfx_netif_state_change+0x10/0x10 [ 201.005893][ T8580] ? netif_change_flags+0x10d/0x160 [ 201.006013][ T8580] do_setlink.isra.0+0x31ce/0x3e60 [ 201.006096][ T8580] ? trace_buffer_unlock_commit_regs+0x37b/0x540 [ 201.006221][ T8580] ? __pfx_do_setlink.isra.0+0x10/0x10 [ 201.006259][ T8580] ? trace_event_buffer_commit+0x20a/0xa80 [ 201.006387][ T8580] ? trace_event_raw_event_lock+0x1e2/0x2b0 [ 201.006453][ T8580] ? __pfx_trace_event_raw_event_lock+0x10/0x10 [ 201.006515][ T8580] ? trace_event_raw_event_lock+0x1e2/0x2b0 [ 201.006616][ T8580] ? lock_acquire+0x1d1/0x380 [ 201.006806][ T8580] ? __local_bh_enable_ip+0xa5/0x120 [ 201.006848][ T8580] ? lockdep_hardirqs_on+0x7d/0x110 [ 201.006878][ T8580] ? br_multicast_set_port_router+0x324/0x9d0 [ 201.006899][ T8580] ? __local_bh_enable_ip+0xa5/0x120 [ 201.006937][ T8580] ? br_multicast_set_port_router+0x324/0x9d0 [ 201.007028][ T8580] ? br_setport+0x1330/0x1960 [ 201.007161][ T8580] ? __pfx_br_setport+0x10/0x10 [ 201.007184][ T8580] ? cap_capable+0x107/0x430 [ 201.007484][ T8580] rtnl_newlink+0x13c1/0x2620 [ 201.007706][ T8580] ? __pfx_rtnl_newlink+0x10/0x10 [ 201.007828][ T8580] ? ring_buffer_unlock_commit+0x2e7/0x700 [ 201.007935][ T8580] ? trace_buffer_unlock_commit_regs+0x37b/0x540 [ 201.008030][ T8580] ? trace_event_buffer_commit+0x20a/0xa80 [ 201.008232][ T8580] ? __pfx_trace_event_raw_event_lock+0x10/0x10 [ 201.008462][ T8580] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 201.008496][ T8580] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 201.008591][ T8580] ? __pfx_rtnl_newlink+0x10/0x10 [ 201.008692][ T8580] rtnetlink_rcv_msg+0x95e/0xe90 [ 201.008787][ T8580] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 201.008821][ T8580] ? trace_event_buffer_commit+0x20a/0xa80 [ 201.008990][ T8580] ? trace_event_raw_event_lock+0x1e2/0x2b0 [ 201.009084][ T8580] netlink_rcv_skb+0x159/0x420 [ 201.009133][ T8580] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 201.009228][ T8580] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 201.009432][ T8580] ? netlink_deliver_tap+0x1ae/0xcc0 [ 201.009594][ T8580] netlink_unicast+0x585/0x850 [ 201.009710][ T8580] ? __pfx_netlink_unicast+0x10/0x10 [ 201.009888][ T8580] netlink_sendmsg+0x8b0/0xda0 [ 201.010046][ T8580] ? __pfx_netlink_sendmsg+0x10/0x10 [ 201.010128][ T8580] ? selinux_socket_sendmsg+0x198/0x2f0 [ 201.010280][ T8580] ____sys_sendmsg+0xa4d/0xbe0 [ 201.010321][ T8580] ? __pfx_netlink_sendmsg+0x10/0x10 [ 201.010396][ T8580] ? __pfx_____sys_sendmsg+0x10/0x10 [ 201.010536][ T8580] ? trace_buffer_unlock_commit_regs+0x37b/0x540 [ 201.010672][ T8580] ___sys_sendmsg+0x190/0x1e0 [ 201.010764][ T8580] ? __pfx____sys_sendmsg+0x10/0x10 [ 201.010822][ T8580] ? trace_event_raw_event_lock+0x1e2/0x2b0 [ 201.011062][ T8580] ? find_held_lock+0x2b/0x80 [ 201.011403][ T8580] __sys_sendmsg+0x160/0x210 [ 201.011464][ T8580] ? __pfx___sys_sendmsg+0x10/0x10 [ 201.011773][ T8580] do_syscall_64+0x123/0x790 [ 201.011895][ T8580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.011916][ T8580] RIP: 0033:0x7f61deb9e159 [ 201.011948][ T8580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.011963][ T8580] RSP: 002b:00007f61dfb44028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 201.011983][ T8580] RAX: ffffffffffffffda RBX: 00007f61dee25fa0 RCX: 00007f61deb9e159 [ 201.011995][ T8580] RDX: 0000000000004040 RSI: 0000200000000180 RDI: 0000000000000003 [ 201.012007][ T8580] RBP: 00007f61dfb44090 R08: 0000000000000000 R09: 0000000000000000 [ 201.012018][ T8580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 201.012030][ T8580] R13: 00007f61dee26038 R14: 00007f61dee25fa0 R15: 00007ffd637dd418 [ 201.012279][ T8580] [ 201.012782][ T8580] bridge0: error setting offload STP state on port 1(bridge_slave_0) [ 201.013790][ T8580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.069219][ T43] audit: type=1400 audit(1790499481.411:643): avc: denied { read } for pid=8582 comm="syz.4.797" name="usbmon0" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 201.090223][ T43] audit: type=1400 audit(1790499481.421:644): avc: denied { open } for pid=8582 comm="syz.4.797" path="/dev/usbmon0" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 201.163732][ T8583] overlayfs: failed to resolve './file2': -2 [ 201.820691][ T8586] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.822035][ T8586] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.823165][ T8586] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.604950][ T8597] netlink: 'syz.0.801': attribute type 2 has an invalid length. [ 202.604992][ T8597] netlink: 8 bytes leftover after parsing attributes in process `syz.0.801'. [ 203.626179][ T8607] fuse: Unknown parameter 'rooYmpde' [ 204.689034][ T8618] netlink: 8 bytes leftover after parsing attributes in process `syz.4.808'. [ 205.180153][ T8621] FAULT_INJECTION: forcing a failure. [ 205.180153][ T8621] name failslab, interval 1, probability 0, space 0, times 0 [ 205.180197][ T8621] CPU: 2 UID: 0 PID: 8621 Comm: syz.0.809 Not tainted syzkaller #0 PREEMPT(full) [ 205.180217][ T8621] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 205.180230][ T8621] Call Trace: [ 205.180252][ T8621] [ 205.180276][ T8621] dump_stack_lvl+0x100/0x190 [ 205.180407][ T8621] should_fail_ex.cold+0x5/0xa [ 205.180483][ T8621] should_failslab+0xc2/0x120 [ 205.180564][ T8621] __kmalloc_cache_noprof+0x91/0x6d0 [ 205.180612][ T8621] ? lockdep_init_map_type+0x5c/0x250 [ 205.180673][ T8621] ? fuse_pqueue_alloc+0x44/0xe0 [ 205.180806][ T8621] fuse_pqueue_alloc+0x44/0xe0 [ 205.180882][ T8621] fuse_dev_chan_new+0x2a/0x2b0 [ 205.180923][ T8621] ? pv_queued_spin_unlock_traced+0x62/0x1d0 [ 205.180984][ T8621] cuse_channel_open+0x1f/0x8f0 [ 205.181077][ T8621] ? __pfx_cuse_channel_open+0x10/0x10 [ 205.181124][ T8621] misc_open+0x26d/0x450 [ 205.181185][ T8621] ? __pfx_misc_open+0x10/0x10 [ 205.181240][ T8621] chrdev_open+0x234/0x6a0 [ 205.181347][ T8621] ? __pfx_chrdev_open+0x10/0x10 [ 205.181429][ T8621] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 205.181542][ T8621] do_dentry_open+0x6ab/0x14d0 [ 205.181594][ T8621] ? __pfx_chrdev_open+0x10/0x10 [ 205.181773][ T8621] vfs_open+0x82/0x3f0 [ 205.181916][ T8621] path_openat+0x19fa/0x2440 [ 205.182037][ T8621] ? __pfx_path_openat+0x10/0x10 [ 205.182126][ T8621] ? trace_event_buffer_commit+0x20a/0xa80 [ 205.182288][ T8621] do_file_open+0x20e/0x430 [ 205.182363][ T8621] ? __pfx_do_file_open+0x10/0x10 [ 205.182393][ T8621] ? __pfx_trace_event_raw_event_lock+0x10/0x10 [ 205.182787][ T8621] ? _raw_spin_unlock+0x28/0x50 [ 205.182845][ T8621] ? alloc_fd+0x471/0x7a0 [ 205.183020][ T8621] do_sys_openat2+0x10f/0x1e0 [ 205.183116][ T8621] ? __pfx_do_sys_openat2+0x10/0x10 [ 205.183369][ T8621] __x64_sys_openat+0x12d/0x210 [ 205.183444][ T8621] ? __pfx___x64_sys_openat+0x10/0x10 [ 205.183691][ T8621] do_syscall_64+0x123/0x790 [ 205.183756][ T8621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.183787][ T8621] RIP: 0033:0x7f61deb9e159 [ 205.183835][ T8621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.183853][ T8621] RSP: 002b:00007f61dfb44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 205.183879][ T8621] RAX: ffffffffffffffda RBX: 00007f61dee25fa0 RCX: 00007f61deb9e159 [ 205.183893][ T8621] RDX: 0000000000002842 RSI: 0000200000000300 RDI: ffffffffffffff9c [ 205.183907][ T8621] RBP: 00007f61dec3506b R08: 0000000000000000 R09: 0000000000000000 [ 205.183922][ T8621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 205.183936][ T8621] R13: 00007f61dee26038 R14: 00007f61dee25fa0 R15: 00007ffd637dd418 [ 205.184213][ T8621] [ 205.586926][ T8626] overlayfs: failed to resolve './file1/file0': -2 [ 205.619744][ T8626] netlink: 36 bytes leftover after parsing attributes in process `syz.4.811'. [ 206.342027][ T8632] netlink: 'syz.4.814': attribute type 2 has an invalid length. [ 206.342073][ T8632] netlink: 8 bytes leftover after parsing attributes in process `syz.4.814'. [ 206.930825][ T8639] netlink: 'syz.0.815': attribute type 10 has an invalid length. [ 207.102853][ T8636] bond1: entered allmulticast mode [ 207.105514][ T8636] 8021q: adding VLAN 0 to HW filter on device bond1 [ 207.347155][ T8639] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 207.416581][ T8639] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 207.446198][ T8649] program syz.1.817 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 207.463872][ T8649] netlink: 'syz.1.817': attribute type 1 has an invalid length. [ 207.635178][ T8653] netlink: 8 bytes leftover after parsing attributes in process `syz.4.818'. [ 207.635209][ T8653] netlink: 12 bytes leftover after parsing attributes in process `syz.4.818'. [ 207.989265][ T8649] 8021q: adding VLAN 0 to HW filter on device bond2 [ 208.097742][ T8652] bond2: (slave gretap1): making interface the new active one [ 208.109522][ T8652] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 208.294699][ T8654] bond1: option xmit_hash_policy: invalid value (6) [ 208.318483][ T8654] bond1 (unregistering): Released all slaves [ 209.421344][ T43] audit: type=1400 audit(1790499489.761:645): avc: denied { write } for pid=8661 comm="syz.4.821" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 210.008962][ T8669] netlink: 8 bytes leftover after parsing attributes in process `syz.1.825'. [ 210.051403][ T8670] netlink: 'syz.0.826': attribute type 2 has an invalid length. [ 210.051434][ T8670] netlink: 8 bytes leftover after parsing attributes in process `syz.0.826'. [ 210.198378][ T8672] ip_tables: iptables: counters copy to user failed while replacing table [ 211.124485][ T8682] FAULT_INJECTION: forcing a failure. [ 211.124485][ T8682] name failslab, interval 1, probability 0, space 0, times 0 [ 211.124539][ T8682] CPU: 3 UID: 0 PID: 8682 Comm: syz.3.828 Not tainted syzkaller #0 PREEMPT(full) [ 211.124559][ T8682] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 211.124572][ T8682] Call Trace: [ 211.124594][ T8682] [ 211.124617][ T8682] dump_stack_lvl+0x100/0x190 [ 211.124744][ T8682] should_fail_ex.cold+0x5/0xa [ 211.124817][ T8682] should_failslab+0xc2/0x120 [ 211.124876][ T8682] __kmalloc_cache_noprof+0x91/0x6d0 [ 211.124957][ T8682] ? alloc_fs_context+0x57/0xf40 [ 211.125077][ T8682] alloc_fs_context+0x57/0xf40 [ 211.125112][ T8682] ? __get_fs_type+0xe3/0x200 [ 211.125259][ T8682] __x64_sys_fsopen+0xed/0x220 [ 211.125338][ T8682] do_syscall_64+0x123/0x790 [ 211.125411][ T8682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.125443][ T8682] RIP: 0033:0x7f2cdad9e159 [ 211.125493][ T8682] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.125511][ T8682] RSP: 002b:00007f2cdbc21028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 211.125537][ T8682] RAX: ffffffffffffffda RBX: 00007f2cdb025fa0 RCX: 00007f2cdad9e159 [ 211.125551][ T8682] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000100 [ 211.125565][ T8682] RBP: 00007f2cdbc21090 R08: 0000000000000000 R09: 0000000000000000 [ 211.125579][ T8682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.125594][ T8682] R13: 00007f2cdb026038 R14: 00007f2cdb025fa0 R15: 00007ffeb1bda568 [ 211.125841][ T8682] [ 211.343001][ T5822] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.343104][ T5822] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.343151][ T5822] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.343212][ T5822] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.422840][ T30] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 211.630070][ T30] usb 5-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 1.00 [ 211.675236][ T30] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 211.675258][ T30] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 211.724282][ T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.724317][ T30] usb 5-1: Product: syz [ 211.724342][ T30] usb 5-1: Manufacturer: syz [ 211.724356][ T30] usb 5-1: SerialNumber: syz [ 211.899581][ T30] usb 5-1: NFC: intf ffff88802c348000 id ffffffff8fe92d20 [ 212.165902][ T30] nfcmrvl 5-1:1.0: NFC: registered with nci successfully [ 212.239146][ T30] usb 5-1: USB disconnect, device number 13 [ 212.278206][ T30] usb 5-1: NFC: intf ffff88802c348000 [ 212.467181][ T43] audit: type=1400 audit(1790499492.811:646): avc: denied { getopt } for pid=8699 comm="syz.3.833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 213.196455][ T8707] netlink: 20 bytes leftover after parsing attributes in process `syz.0.835'. [ 213.199452][ T8707] 8021q: VLANs not supported on sit0 [ 213.376109][ T8709] erspan0: entered promiscuous mode [ 213.377839][ T8709] netlink: 8 bytes leftover after parsing attributes in process `syz.3.836'. [ 213.377879][ T8709] erspan0: left promiscuous mode [ 213.405218][ T8711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.836'. [ 213.405377][ T8709] netlink: 8 bytes leftover after parsing attributes in process `syz.3.836'. [ 214.214661][ T8722] netlink: 'syz.3.839': attribute type 2 has an invalid length. [ 214.214688][ T8722] netlink: 8 bytes leftover after parsing attributes in process `syz.3.839'. [ 214.930192][ T8728] xt_policy: output policy not valid in PREROUTING and INPUT [ 214.953479][ T43] audit: type=1400 audit(1790499495.301:647): avc: denied { name_bind } for pid=8726 comm="syz.4.841" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 215.092795][ T8730] tmpfs: Bad value for 'mpol' [ 215.213326][ T8732] netlink: 16 bytes leftover after parsing attributes in process `syz.3.842'. [ 215.546102][ T8737] ip_tables: iptables: counters copy to user failed while replacing table [ 215.564854][ T8737] ip_tables: iptables: counters copy to user failed while replacing table [ 216.071070][ T8740] netlink: 12 bytes leftover after parsing attributes in process `syz.0.844'. [ 216.403060][ T8748] netlink: 'syz.4.845': attribute type 39 has an invalid length. [ 216.490765][ T8747] netlink: 20 bytes leftover after parsing attributes in process `syz.3.846'. [ 216.621180][ T8748] hsr_slave_0 (unregistering): left promiscuous mode [ 216.762674][ T8747] 8021q: VLANs not supported on sit0 [ 217.920536][ T8758] netlink: 'syz.0.850': attribute type 2 has an invalid length. [ 217.920562][ T8758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.850'. [ 218.464538][ T8763] program syz.3.852 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 219.039405][ T43] audit: type=1400 audit(1790499499.381:648): avc: denied { connect } for pid=8764 comm="syz.1.853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 219.283786][ T8768] FAULT_INJECTION: forcing a failure. [ 219.283786][ T8768] name failslab, interval 1, probability 0, space 0, times 0 [ 219.283821][ T8768] CPU: 1 UID: 60928 PID: 8768 Comm: syz.3.855 Not tainted syzkaller #0 PREEMPT(full) [ 219.283841][ T8768] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 219.283867][ T8768] Call Trace: [ 219.283886][ T8768] [ 219.283908][ T8768] dump_stack_lvl+0x100/0x190 [ 219.284040][ T8768] should_fail_ex.cold+0x5/0xa [ 219.284129][ T8768] should_failslab+0xc2/0x120 [ 219.284180][ T8768] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 219.284263][ T8768] ? security_context_to_sid_core+0xcc/0x8a0 [ 219.284399][ T8768] kmemdup_nul+0x49/0xd0 [ 219.284488][ T8768] security_context_to_sid_core+0xcc/0x8a0 [ 219.284623][ T8768] ? __pfx_security_context_to_sid_core+0x10/0x10 [ 219.284760][ T8768] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 219.284832][ T8768] ? inode_doinit_use_xattr+0x54/0x330 [ 219.284968][ T8768] inode_doinit_use_xattr+0x105/0x330 [ 219.285063][ T8768] inode_doinit_with_dentry+0xb7a/0x1340 [ 219.285224][ T8768] ? __pfx_inode_doinit_with_dentry+0x10/0x10 [ 219.285410][ T8768] selinux_d_instantiate+0x26/0x40 [ 219.285472][ T8768] security_d_instantiate+0x14c/0x1b0 [ 219.285518][ T8768] d_splice_alias_ops+0xd7/0x15b0 [ 219.285575][ T8768] ? kasan_quarantine_put+0x104/0x240 [ 219.285615][ T8768] ? lockdep_hardirqs_on+0x7d/0x110 [ 219.285690][ T8768] ? __pfx_d_splice_alias_ops+0x10/0x10 [ 219.285740][ T8768] ? rcu_is_watching+0x13/0xc0 [ 219.285794][ T8768] ? ovl_lookup+0x58f/0x6b0 [ 219.285813][ T8768] ? kfree+0x1e5/0x6d0 [ 219.285920][ T8768] ovl_lookup+0x5b0/0x6b0 [ 219.286073][ T8768] ? __pfx_ovl_lookup+0x10/0x10 [ 219.286178][ T8768] ? __pfx_d_alloc_parallel+0x10/0x10 [ 219.286219][ T8768] ? __d_lookup+0x25c/0x4a0 [ 219.286361][ T8768] ? __d_lookup+0x266/0x4a0 [ 219.286516][ T8768] ? __pfx_ovl_lookup+0x10/0x10 [ 219.286550][ T8768] lookup_open+0xa79/0x1990 [ 219.286796][ T8768] path_openat+0xa2c/0x2440 [ 219.286907][ T8768] ? __pfx_path_openat+0x10/0x10 [ 219.287002][ T8768] ? trace_event_buffer_commit+0x20a/0xa80 [ 219.287137][ T8768] do_file_open+0x20e/0x430 [ 219.287207][ T8768] ? __pfx_do_file_open+0x10/0x10 [ 219.287236][ T8768] ? __pfx_trace_event_raw_event_lock+0x10/0x10 [ 219.287624][ T8768] ? _raw_spin_unlock+0x28/0x50 [ 219.287666][ T8768] ? alloc_fd+0x471/0x7a0 [ 219.287843][ T8768] do_sys_openat2+0x10f/0x1e0 [ 219.287927][ T8768] ? __pfx_do_sys_openat2+0x10/0x10 [ 219.287974][ T8768] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 219.288027][ T8768] ? __fget_files+0x21f/0x3d0 [ 219.288190][ T8768] __x64_sys_openat+0x12d/0x210 [ 219.288240][ T8768] ? __pfx___x64_sys_openat+0x10/0x10 [ 219.288266][ T8768] ? ksys_write+0x1ac/0x250 [ 219.288506][ T8768] do_syscall_64+0x123/0x790 [ 219.288576][ T8768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.288609][ T8768] RIP: 0033:0x7f2cdad9e159 [ 219.288659][ T8768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.288677][ T8768] RSP: 002b:00007f2cdbc21028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 219.288702][ T8768] RAX: ffffffffffffffda RBX: 00007f2cdb025fa0 RCX: 00007f2cdad9e159 [ 219.288717][ T8768] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 219.288731][ T8768] RBP: 00007f2cdbc21090 R08: 0000000000000000 R09: 0000000000000000 [ 219.288745][ T8768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 219.288760][ T8768] R13: 00007f2cdb026038 R14: 00007f2cdb025fa0 R15: 00007ffeb1bda568 [ 219.289022][ T8768] [ 219.294251][ T8768] SELinux: inode_doinit_use_xattr: context_to_sid(system_u:object_r:cgroup_t) returned 12 for dev=overlay ino=9 [ 219.306131][ T43] audit: type=1400 audit(1790499499.651:649): avc: denied { read } for pid=8767 comm="syz.3.855" name="cpu.stat" dev="overlay" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 219.309917][ T43] audit: type=1400 audit(1790499499.651:650): avc: denied { open } for pid=8767 comm="syz.3.855" path="/214/file0/cpu.stat" dev="overlay" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 220.435416][ T43] audit: type=1400 audit(1790499500.771:651): avc: denied { module_load } for pid=8779 comm="syz.3.857" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=41001 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=system permissive=1 [ 220.920033][ T8785] netlink: 20 bytes leftover after parsing attributes in process `syz.1.859'. [ 220.923983][ T8785] 8021q: VLANs not supported on sit0 [ 221.386892][ T8792] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 0, id = 0 [ 221.393995][ T8794] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 0, id = 1 [ 221.401025][ T8795] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 0, id = 2 [ 221.417460][ T8796] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 0, id = 3 [ 221.520813][ T8793] FAULT_INJECTION: forcing a failure. [ 221.520813][ T8793] name failslab, interval 1, probability 0, space 0, times 0 [ 221.520843][ T8793] CPU: 2 UID: 0 PID: 8793 Comm: syz.1.863 Not tainted syzkaller #0 PREEMPT(full) [ 221.520859][ T8793] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 221.520870][ T8793] Call Trace: [ 221.520883][ T8793] [ 221.520898][ T8793] dump_stack_lvl+0x100/0x190 [ 221.520983][ T8793] should_fail_ex.cold+0x5/0xa [ 221.521157][ T8793] should_failslab+0xc2/0x120 [ 221.521208][ T8793] __kmalloc_cache_noprof+0x91/0x6d0 [ 221.521240][ T8793] ? lockdep_init_map_type+0x5c/0x250 [ 221.521281][ T8793] ? fuse_pqueue_alloc+0x44/0xe0 [ 221.521441][ T8793] fuse_pqueue_alloc+0x44/0xe0 [ 221.521523][ T8793] fuse_dev_chan_new+0x2a/0x2b0 [ 221.521553][ T8793] ? pv_queued_spin_unlock_traced+0x62/0x1d0 [ 221.521594][ T8793] cuse_channel_open+0x1f/0x8f0 [ 221.521662][ T8793] ? __pfx_cuse_channel_open+0x10/0x10 [ 221.521752][ T8793] misc_open+0x26d/0x450 [ 221.521835][ T8793] ? __pfx_misc_open+0x10/0x10 [ 221.521867][ T8793] chrdev_open+0x234/0x6a0 [ 221.521934][ T8793] ? __pfx_chrdev_open+0x10/0x10 [ 221.522034][ T8793] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 221.522184][ T8793] do_dentry_open+0x6ab/0x14d0 [ 221.522222][ T8793] ? __pfx_chrdev_open+0x10/0x10 [ 221.522404][ T8793] vfs_open+0x82/0x3f0 [ 221.522509][ T8793] path_openat+0x19fa/0x2440 [ 221.522662][ T8793] ? __pfx_path_openat+0x10/0x10 [ 221.522746][ T8793] ? trace_event_buffer_commit+0x20a/0xa80 [ 221.522852][ T8793] do_file_open+0x20e/0x430 [ 221.522984][ T8793] ? __pfx_do_file_open+0x10/0x10 [ 221.523016][ T8793] ? __pfx_trace_event_raw_event_lock+0x10/0x10 [ 221.523377][ T8793] ? _raw_spin_unlock+0x28/0x50 [ 221.523424][ T8793] ? alloc_fd+0x471/0x7a0 [ 221.523628][ T8793] do_sys_openat2+0x10f/0x1e0 [ 221.523695][ T8793] ? __pfx_do_sys_openat2+0x10/0x10 [ 221.523931][ T8793] __x64_sys_openat+0x12d/0x210 [ 221.524022][ T8793] ? __pfx___x64_sys_openat+0x10/0x10 [ 221.524257][ T8793] do_syscall_64+0x123/0x790 [ 221.524381][ T8793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.524425][ T8793] RIP: 0033:0x7efd4539e159 [ 221.524489][ T8793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.524511][ T8793] RSP: 002b:00007efd46304028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 221.524567][ T8793] RAX: ffffffffffffffda RBX: 00007efd45625fa0 RCX: 00007efd4539e159 [ 221.524597][ T8793] RDX: 0000000000002842 RSI: 0000200000000300 RDI: ffffffffffffff9c [ 221.524677][ T8793] RBP: 00007efd4543506b R08: 0000000000000000 R09: 0000000000000000 [ 221.524697][ T8793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 221.524714][ T8793] R13: 00007efd45626038 R14: 00007efd45625fa0 R15: 00007fff36eaefd8 [ 221.525045][ T8793] [ 222.359160][ T8805] nbd: must specify at least one socket [ 222.607872][ T8808] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1540 sclass=netlink_tcpdiag_socket pid=8808 comm=syz.1.867 [ 223.617658][ T8819] netlink: 20 bytes leftover after parsing attributes in process `syz.0.871'. [ 223.627630][ T8819] 8021q: VLANs not supported on sit0 [ 224.626983][ T8832] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 225.473309][ T8835] FAULT_INJECTION: forcing a failure. [ 225.473309][ T8835] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 225.473345][ T8835] CPU: 1 UID: 0 PID: 8835 Comm: syz.0.876 Not tainted syzkaller #0 PREEMPT(full) [ 225.473364][ T8835] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 225.473376][ T8835] Call Trace: [ 225.473395][ T8835] [ 225.473417][ T8835] dump_stack_lvl+0x100/0x190 [ 225.473533][ T8835] should_fail_ex.cold+0x5/0xa [ 225.473653][ T8835] _copy_from_user+0x2e/0xd0 [ 225.473748][ T8835] get_bitmap+0xde/0x1a0 [ 225.473851][ T8835] get_nodes+0x1df/0x210 [ 225.473942][ T8835] ? __pfx_get_nodes+0x10/0x10 [ 225.474117][ T8835] kernel_mbind+0xf8/0x200 [ 225.474270][ T8835] ? __pfx_kernel_mbind+0x10/0x10 [ 225.474454][ T8835] do_syscall_64+0x123/0x790 [ 225.474548][ T8835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.474574][ T8835] RIP: 0033:0x7f61deb9e159 [ 225.474614][ T8835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.474630][ T8835] RSP: 002b:00007f61dfb44028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 225.474653][ T8835] RAX: ffffffffffffffda RBX: 00007f61dee25fa0 RCX: 00007f61deb9e159 [ 225.474667][ T8835] RDX: 0000000000000002 RSI: 0000000000003000 RDI: 0000200000ffc000 [ 225.474679][ T8835] RBP: 00007f61dec3506b R08: 0000000000000002 R09: 0000000000000006 [ 225.474692][ T8835] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 225.474705][ T8835] R13: 00007f61dee26038 R14: 00007f61dee25fa0 R15: 00007ffd637dd418 [ 225.475049][ T8835] [ 225.488977][ T43] audit: type=1400 audit(1790499505.831:652): avc: denied { getopt } for pid=8834 comm="syz.0.876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 226.603479][ T43] audit: type=1400 audit(1790499506.951:653): avc: denied { getopt } for pid=8844 comm="syz.3.878" lport=40331 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 227.412307][ T43] audit: type=1400 audit(1790499507.751:654): avc: denied { write } for pid=8851 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 227.752141][ T8866] ip_tables: iptables: counters copy to user failed while replacing table [ 228.151044][ T43] audit: type=1400 audit(1790499508.491:655): avc: denied { read open } for pid=8864 comm="syz.4.884" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 228.528622][ T43] audit: type=1400 audit(1790499508.871:656): avc: denied { write } for pid=8871 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 229.251392][ T8880] netlink: 20 bytes leftover after parsing attributes in process `syz.0.886'. [ 229.257989][ T8880] 8021q: VLANs not supported on sit0 [ 230.224286][ T43] audit: type=1400 audit(1790499510.571:657): avc: denied { write } for pid=8882 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 230.227617][ T8887] fuse: Bad value for 'fd' [ 230.303469][ T43] audit: type=1400 audit(1790499510.601:658): avc: denied { read } for pid=8886 comm="syz.1.890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 230.585031][ T8890] netlink: 20 bytes leftover after parsing attributes in process `syz.4.891'. [ 230.598748][ T8890] 8021q: VLANs not supported on sit0 [ 231.051847][ T8899] netlink: 72 bytes leftover after parsing attributes in process `syz.3.892'. [ 231.389499][ T43] audit: type=1400 audit(1790499511.731:659): avc: denied { write } for pid=8901 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 231.393966][ T8904] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8904 comm=syz.0.893 [ 231.543684][ T43] audit: type=1400 audit(1790499511.891:660): avc: denied { write } for pid=8902 comm="syz.0.893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 231.555550][ T8903] macvlan0: entered promiscuous mode [ 231.555588][ T8903] bridge0: entered promiscuous mode [ 232.242818][ T43] audit: type=1400 audit(1790499512.571:661): avc: denied { setattr } for pid=8907 comm="syz.4.894" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 232.949560][ T8918] netlink: 20 bytes leftover after parsing attributes in process `syz.0.897'. [ 232.963943][ T8918] 8021q: VLANs not supported on sit0 [ 233.349808][ T8921] openvswitch: netlink: IPv4 tunnel dst address is zero [ 233.349960][ T8921] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 233.745677][ T8927] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 233.867811][ T8928] netlink: 8 bytes leftover after parsing attributes in process `syz.1.901'. [ 234.484631][ T8936] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8936 comm=syz.4.903 [ 235.008150][ T8936] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 235.008181][ T8936] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.406809][ T8944] netlink: 44 bytes leftover after parsing attributes in process `syz.1.905'. [ 235.472484][ T8945] x_tables: duplicate underflow at hook 3 [ 235.547368][ T8944] ip_tables: iptables: counters copy to user failed while replacing table [ 235.715093][ T8936] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 235.715124][ T8936] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.957641][ T8949] netlink: 20 bytes leftover after parsing attributes in process `syz.0.907'. [ 235.991501][ T8949] 8021q: VLANs not supported on sit0 [ 236.207118][ T8936] bond0: (slave netdevsim1): Releasing backup interface [ 236.228584][ T8953] netlink: 20 bytes leftover after parsing attributes in process `syz.1.908'. [ 236.251907][ T8936] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 236.251938][ T8936] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.393305][ T8953] 8021q: VLANs not supported on sit0 [ 236.684709][ T8936] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 236.684737][ T8936] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.983308][ T5808] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 237.171569][ T5808] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 237.184385][ T5808] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 237.184407][ T5808] usb 5-1: config 1 has no interface number 0 [ 237.214861][ T5808] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.214903][ T5808] usb 5-1: Product: syz [ 237.214932][ T5808] usb 5-1: Manufacturer: syz [ 237.214961][ T5808] usb 5-1: SerialNumber: syz [ 237.351382][ T5808] usb 5-1: 3:1 : does not exist [ 237.351402][ T5808] usb 5-1: 3:2 : does not exist [ 238.234185][ T30] usb 5-1: USB disconnect, device number 14 [ 238.651553][ T8702] udevd[8702]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 239.153657][ T64] Bluetooth: hci0: unexpected event for opcode 0x0c5e [ 239.182449][ T8978] sock: sock_set_timeout: `syz.1.916' (pid 8978) tries to set negative timeout [ 239.261300][ T8979] netlink: 'syz.3.917': attribute type 1 has an invalid length. [ 239.896842][ T8985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.919'. [ 239.915854][ T8979] bond2: entered promiscuous mode [ 239.916179][ T8979] bond2: entered allmulticast mode [ 239.919078][ T8979] 8021q: adding VLAN 0 to HW filter on device bond2 [ 240.080751][ T8980] erspan1: entered allmulticast mode [ 240.124685][ T8980] bond2: (slave erspan1): making interface the new active one [ 240.124709][ T8980] erspan1: entered promiscuous mode [ 240.136988][ T8980] bond2: (slave erspan1): Enslaving as an active interface with an up link [ 240.893163][ T8996] FAULT_INJECTION: forcing a failure. [ 240.893163][ T8996] name failslab, interval 1, probability 0, space 0, times 0 [ 240.893206][ T8996] CPU: 2 UID: 0 PID: 8996 Comm: syz.1.923 Not tainted syzkaller #0 PREEMPT(full) [ 240.893229][ T8996] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 240.893244][ T8996] Call Trace: [ 240.893270][ T8996] [ 240.893282][ T8996] dump_stack_lvl+0x100/0x190 [ 240.893347][ T8996] should_fail_ex.cold+0x5/0xa [ 240.893464][ T8996] should_failslab+0xc2/0x120 [ 240.893538][ T8996] __kvmalloc_node_noprof+0x113/0x9b0 [ 240.893585][ T8996] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 240.893617][ T8996] ? pv_queued_spin_unlock_traced+0x62/0x1d0 [ 240.893649][ T8996] ? alloc_fdtable+0x110/0x2d0 [ 240.893793][ T8996] alloc_fdtable+0x110/0x2d0 [ 240.893886][ T8996] dup_fd+0x995/0xd10 [ 240.894112][ T8996] copy_process+0x2d11/0x8370 [ 240.894454][ T8996] ? __pfx_copy_process+0x10/0x10 [ 240.894721][ T8996] kernel_clone+0x176/0x9d0 [ 240.894751][ T8996] ? find_held_lock+0x2b/0x80 [ 240.894838][ T8996] ? __pfx_kernel_clone+0x10/0x10 [ 240.894993][ T8996] ? ksys_write+0x190/0x250 [ 240.895035][ T8996] ? lock_acquire+0x1d1/0x380 [ 240.895209][ T8996] __do_sys_clone+0xd9/0x120 [ 240.895250][ T8996] ? __pfx___do_sys_clone+0x10/0x10 [ 240.895273][ T8996] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 240.895505][ T8996] ? ksys_write+0x1ac/0x250 [ 240.895541][ T8996] ? __pfx_ksys_write+0x10/0x10 [ 240.895748][ T8996] do_syscall_64+0x123/0x790 [ 240.895811][ T8996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.895842][ T8996] RIP: 0033:0x7efd4539e159 [ 240.895894][ T8996] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.895912][ T8996] RSP: 002b:00007efd46303fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 240.895936][ T8996] RAX: ffffffffffffffda RBX: 00007efd45625fa0 RCX: 00007efd4539e159 [ 240.895951][ T8996] RDX: 0000000000000000 RSI: 0000000000000010 RDI: 0000000000000000 [ 240.895964][ T8996] RBP: 00007efd46304090 R08: 0000000000000000 R09: 0000000000000000 [ 240.895978][ T8996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 240.895992][ T8996] R13: 00007efd45626038 R14: 00007efd45625fa0 R15: 00007fff36eaefd8 [ 240.896241][ T8996] [ 241.340157][ T9000] netlink: 20 bytes leftover after parsing attributes in process `syz.4.925'. [ 241.350276][ T9000] 8021q: VLANs not supported on sit0 [ 241.550241][ T9003] raw_sendmsg: syz.1.926 forgot to set AF_INET. Fix it! [ 241.838882][ T9009] EXT4-fs (nbd0): unable to read superblock [ 242.172844][ T64] Bluetooth: hci1: command 0x0406 tx timeout [ 242.721214][ T43] audit: type=1807 audit(1790499523.061:662): action=measure func=FI res=0 [ 242.728204][ T43] audit: type=1802 audit(1790499523.071:663): pid=9020 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=update_policy cause=invalid-policy comm="syz.0.930" res=0 errno=0 [ 242.857477][ T9019] ima: policy update failed [ 242.866072][ T43] audit: type=1802 audit(1790499523.201:664): pid=9019 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.0.930" res=0 errno=0 [ 243.929701][ T9034] netlink: 20 bytes leftover after parsing attributes in process `syz.4.936'. [ 243.958412][ T9034] 8021q: VLANs not supported on sit0 [ 244.344801][ T9039] misc userio: The device must be registered before sending interrupts [ 245.336046][ T43] audit: type=1400 audit(1790499525.681:665): avc: denied { setopt } for pid=9049 comm="syz.4.941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 245.493669][ T9052] loop8: detected capacity change from 0 to 16384 [ 245.546536][ T9056] loop8: detected capacity change from 16384 to 16383 [ 245.573540][ T9052] xt_hashlimit: overflow, rate too high: 1 [ 246.376061][ T9064] netlink: 20 bytes leftover after parsing attributes in process `syz.0.945'. [ 246.379088][ T9064] 8021q: VLANs not supported on sit0 [ 248.381838][ T43] audit: type=1400 audit(1790499528.721:666): avc: denied { write } for pid=9084 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 248.874824][ T5735] Bluetooth: hci1: ISO packet too small [ 248.875299][ T5735] Bluetooth: hci1: ISO packet too small [ 248.877383][ T5735] Bluetooth: hci1: ISO packet too small [ 249.494660][ T43] audit: type=1400 audit(1790499529.841:667): avc: denied { write } for pid=9105 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 249.804368][ T9114] FAULT_INJECTION: forcing a failure. [ 249.804368][ T9114] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 249.804604][ T9114] CPU: 0 UID: 0 PID: 9114 Comm: syz.3.959 Not tainted syzkaller #0 PREEMPT(full) [ 249.804622][ T9114] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 249.804634][ T9114] Call Trace: [ 249.804649][ T9114] [ 249.804665][ T9114] dump_stack_lvl+0x100/0x190 [ 249.804753][ T9114] should_fail_ex.cold+0x5/0xa [ 249.804900][ T9114] _copy_from_user+0x2e/0xd0 [ 249.804946][ T9114] do_ipt_set_ctl+0x9ac/0xcf0 [ 249.804991][ T9114] ? nf_sockopt_find.isra.0+0x222/0x290 [ 249.805039][ T9114] ? nf_sockopt_find.isra.0+0x222/0x290 [ 249.805168][ T9114] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 249.805235][ T9114] ? __mutex_unlock_slowpath+0x35d/0x930 [ 249.805272][ T9114] ? sockopt_release_sock+0x5c/0x70 [ 249.805332][ T9114] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 249.805558][ T9114] ? nf_sockopt_find.isra.0+0x222/0x290 [ 249.805684][ T9114] nf_setsockopt+0x8d/0xf0 [ 249.805813][ T9114] ip_setsockopt+0xcb/0xf0 [ 249.805895][ T9114] tcp_setsockopt+0xa7/0x100 [ 249.805955][ T9114] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 249.806074][ T9114] do_sock_setsockopt+0xf3/0x1d0 [ 249.806184][ T9114] __sys_setsockopt+0x195/0x220 [ 249.806373][ T9114] __x64_sys_setsockopt+0xbd/0x160 [ 249.806412][ T9114] ? do_syscall_64+0xae/0x790 [ 249.806435][ T9114] ? lockdep_hardirqs_on+0x7d/0x110 [ 249.806477][ T9114] do_syscall_64+0x123/0x790 [ 249.806569][ T9114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.806609][ T9114] RIP: 0033:0x7f2cdad9e159 [ 249.806671][ T9114] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.806690][ T9114] RSP: 002b:00007f2cdbc21028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 249.806719][ T9114] RAX: ffffffffffffffda RBX: 00007f2cdb025fa0 RCX: 00007f2cdad9e159 [ 249.806736][ T9114] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000006 [ 249.806752][ T9114] RBP: 00007f2cdae3506b R08: 0000000000000310 R09: 0000000000000000 [ 249.806762][ T9114] R10: 0000200000000800 R11: 0000000000000246 R12: 0000000000000000 [ 249.806771][ T9114] R13: 00007f2cdb026038 R14: 00007f2cdb025fa0 R15: 00007ffeb1bda568 [ 249.807028][ T9114] [ 249.840559][ T9114] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 250.390274][ T5808] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 250.512186][ T43] audit: type=1400 audit(1790499530.851:668): avc: denied { mounton } for pid=9115 comm="syz.1.960" path="/proc/687/task" dev="proc" ino=43396 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 250.533939][ T5808] usb 6-1: device descriptor read/64, error -71 [ 250.782346][ T5808] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 251.330618][ T43] audit: type=1400 audit(1790499531.671:669): avc: denied { write } for pid=9122 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 251.560235][ T9134] netlink: 20 bytes leftover after parsing attributes in process `syz.4.964'. [ 251.567813][ T9134] 8021q: VLANs not supported on sit0 [ 252.445559][ T43] audit: type=1400 audit(1790499532.791:670): avc: denied { write } for pid=9136 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 253.375911][ T5438] veth1_vlan: left promiscuous mode [ 254.641123][ T43] audit: type=1400 audit(1790499534.981:671): avc: denied { write } for pid=9161 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 254.663585][ T9166] ip_tables: iptables: counters copy to user failed while replacing table [ 254.853020][ T9168] netlink: 20 bytes leftover after parsing attributes in process `syz.4.973'. [ 254.858596][ T9168] 8021q: VLANs not supported on sit0 [ 255.491436][ T1438] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.495987][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.527722][ T43] audit: type=1400 audit(1790499535.871:672): avc: denied { setopt } for pid=9176 comm="syz.0.977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 255.809309][ T43] audit: type=1400 audit(1790499536.151:673): avc: denied { write } for pid=9175 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 256.797030][ T5438] veth1_vlan: entered promiscuous mode [ 257.014092][ T43] audit: type=1400 audit(1790499537.351:674): avc: denied { read write } for pid=9194 comm="syz.4.984" name="cpu_dma_latency" dev="devtmpfs" ino=1338 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 257.017951][ T43] audit: type=1400 audit(1790499537.361:675): avc: denied { open } for pid=9194 comm="syz.4.984" path="/77/dev/cpu_dma_latency" dev="devtmpfs" ino=1338 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 258.125048][ T43] audit: type=1400 audit(1790499538.441:676): avc: denied { write } for pid=9200 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 258.195266][ T43] audit: type=1800 audit(1790499538.541:677): pid=9208 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.987" name="(" dev="sda1" ino=2038 res=0 errno=0 [ 258.348244][ T9210] netlink: 20 bytes leftover after parsing attributes in process `syz.0.986'. [ 258.353025][ T9210] 8021q: VLANs not supported on sit0 [ 258.977469][ T43] audit: type=1400 audit(1790499539.321:678): avc: denied { write } for pid=9214 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 259.464792][ T9219] bridge_slave_0: left allmulticast mode [ 259.464819][ T9219] bridge_slave_0: left promiscuous mode [ 259.471122][ T9219] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.542070][ T9223] bridge_slave_1: left allmulticast mode [ 259.542113][ T9223] bridge_slave_1: left promiscuous mode [ 259.543535][ T9223] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.910208][ T9227] FAULT_INJECTION: forcing a failure. [ 259.910208][ T9227] name failslab, interval 1, probability 0, space 0, times 0 [ 259.910244][ T9227] CPU: 1 UID: 60928 PID: 9227 Comm: syz.3.991 Not tainted syzkaller #0 PREEMPT(full) [ 259.910264][ T9227] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 259.910277][ T9227] Call Trace: [ 259.910300][ T9227] [ 259.910324][ T9227] dump_stack_lvl+0x100/0x190 [ 259.910443][ T9227] should_fail_ex.cold+0x5/0xa [ 259.910524][ T9227] should_failslab+0xc2/0x120 [ 259.910582][ T9227] __kmalloc_noprof+0xfc/0x840 [ 259.910619][ T9227] ? rcu_is_watching+0x13/0xc0 [ 259.910684][ T9227] ? tomoyo_realpath_from_path+0xb6/0x690 [ 259.910799][ T9227] tomoyo_realpath_from_path+0xb6/0x690 [ 259.910977][ T9227] tomoyo_check_open_permission+0x2af/0x3c0 [ 259.911032][ T9227] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 259.911084][ T9227] ? trace_buffer_unlock_commit_regs+0x37b/0x540 [ 259.911240][ T9227] ? hook_file_open+0x248/0x8e0 [ 259.911606][ T9227] ? __raw_callee_save_pv_queued_spin_unlock_traced+0x15/0x40 [ 259.911736][ T9227] tomoyo_file_open+0x6b/0x90 [ 259.911819][ T9227] security_file_open+0xb5/0x1e0 [ 259.911859][ T9227] do_dentry_open+0x588/0x14d0 [ 259.912065][ T9227] vfs_open+0x82/0x3f0 [ 259.912161][ T9227] path_openat+0x19fa/0x2440 [ 259.912331][ T9227] ? __pfx_path_openat+0x10/0x10 [ 259.912405][ T9227] ? trace_event_buffer_commit+0x20a/0xa80 [ 259.912513][ T9227] do_file_open+0x20e/0x430 [ 259.912639][ T9227] ? __pfx_do_file_open+0x10/0x10 [ 259.912660][ T9227] ? __pfx_trace_event_raw_event_lock+0x10/0x10 [ 259.912996][ T9227] ? _raw_spin_unlock+0x28/0x50 [ 259.913040][ T9227] ? alloc_fd+0x471/0x7a0 [ 259.913230][ T9227] do_sys_openat2+0x10f/0x1e0 [ 259.913298][ T9227] ? __pfx_do_sys_openat2+0x10/0x10 [ 259.913387][ T9227] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 259.913453][ T9227] ? __fget_files+0x21f/0x3d0 [ 259.913568][ T9227] __x64_sys_openat+0x12d/0x210 [ 259.913648][ T9227] ? __pfx___x64_sys_openat+0x10/0x10 [ 259.913685][ T9227] ? ksys_write+0x1ac/0x250 [ 259.913883][ T9227] do_syscall_64+0x123/0x790 [ 259.914004][ T9227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.914026][ T9227] RIP: 0033:0x7f2cdad9e159 [ 259.914058][ T9227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.914073][ T9227] RSP: 002b:00007f2cdbc21028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 259.914094][ T9227] RAX: ffffffffffffffda RBX: 00007f2cdb025fa0 RCX: 00007f2cdad9e159 [ 259.914106][ T9227] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 259.914117][ T9227] RBP: 00007f2cdbc21090 R08: 0000000000000000 R09: 0000000000000000 [ 259.914129][ T9227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 259.914140][ T9227] R13: 00007f2cdb026038 R14: 00007f2cdb025fa0 R15: 00007ffeb1bda568 [ 259.914387][ T9227] [ 259.927681][ T9227] ERROR: Out of memory at tomoyo_realpath_from_path. [ 259.997345][ T9230] overlay: filesystem on ./file0 not supported as upperdir [ 260.056601][ T9228] FAULT_INJECTION: forcing a failure. [ 260.056601][ T9228] name failslab, interval 1, probability 0, space 0, times 0 [ 260.056634][ T9228] CPU: 0 UID: 0 PID: 9228 Comm: syz.0.992 Not tainted syzkaller #0 PREEMPT(full) [ 260.056652][ T9228] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 260.056664][ T9228] Call Trace: [ 260.056682][ T9228] [ 260.056702][ T9228] dump_stack_lvl+0x100/0x190 [ 260.056809][ T9228] should_fail_ex.cold+0x5/0xa [ 260.056909][ T9228] should_failslab+0xc2/0x120 [ 260.056955][ T9228] __kmalloc_flags_noprof+0x122/0x8e0 [ 260.057062][ T9228] ? alloc_slab_obj_exts+0x6a/0x170 [ 260.057189][ T9228] alloc_slab_obj_exts+0x6a/0x170 [ 260.057252][ T9228] __memcg_slab_post_alloc_hook+0x3fc/0x10c0 [ 260.057443][ T9228] ? kasan_unpoison+0x27/0x60 [ 260.057524][ T9228] __kmalloc_noprof+0x653/0x840 [ 260.057596][ T9228] ? __d_alloc+0x650/0xa50 [ 260.057729][ T9228] __d_alloc+0x650/0xa50 [ 260.057768][ T9228] ? __lock_acquire+0x5c0/0x1f40 [ 260.057861][ T9228] d_alloc_parallel+0x105/0x14c0 [ 260.058024][ T9228] ? lock_acquire+0x1d1/0x380 [ 260.058058][ T9228] ? lookup_slow+0x42/0x70 [ 260.058105][ T9228] ? __pfx_d_alloc_parallel+0x10/0x10 [ 260.058176][ T9228] ? __pfx___might_resched+0x10/0x10 [ 260.058209][ T9228] ? find_held_lock+0x2b/0x80 [ 260.058265][ T9228] ? __d_lookup+0x25c/0x4a0 [ 260.058363][ T9228] ? down_read+0x13b/0x4c0 [ 260.058438][ T9228] ? __pfx_down_read+0x10/0x10 [ 260.058571][ T9228] __lookup_slow+0x98/0x320 [ 260.058643][ T9228] lookup_slow+0x50/0x70 [ 260.058712][ T9228] lookup_one_positive_unlocked+0x129/0x170 [ 260.058810][ T9228] ovl_lookup_index+0x1d6/0x660 [ 260.058902][ T9228] ? __pfx_ovl_lookup_index+0x10/0x10 [ 260.058926][ T9228] ? __kmalloc_noprof+0x350/0x840 [ 260.058980][ T9228] ? ovl_lookup_layers+0x13ff/0x2ac0 [ 260.059142][ T9228] ovl_lookup_layers+0x60b/0x2ac0 [ 260.059414][ T9228] ? __pfx_ovl_lookup_layers+0x10/0x10 [ 260.059437][ T9228] ? __pfx_trace_event_raw_event_lock+0x10/0x10 [ 260.059659][ T9228] ? find_held_lock+0x2b/0x80 [ 260.059688][ T9228] ? d_alloc_parallel+0x46e/0x14c0 [ 260.059717][ T9228] ? d_alloc_parallel+0x46e/0x14c0 [ 260.059825][ T9228] ovl_lookup+0x4a8/0x6b0 [ 260.059879][ T9228] ? d_alloc_parallel+0x9f6/0x14c0 [ 260.059967][ T9228] ? __pfx_ovl_lookup+0x10/0x10 [ 260.060097][ T9228] ? __pfx_d_alloc_parallel+0x10/0x10 [ 260.060289][ T9228] ? down_read+0x13b/0x4c0 [ 260.060349][ T9228] ? __pfx_down_read+0x10/0x10 [ 260.060485][ T9228] __lookup_slow+0x155/0x320 [ 260.060554][ T9228] lookup_slow+0x50/0x70 [ 260.060627][ T9228] path_lookupat+0x5e8/0xc40 [ 260.060781][ T9228] filename_lookup+0x202/0x590 [ 260.060887][ T9228] ? __pfx_filename_lookup+0x10/0x10 [ 260.060946][ T9228] ? trace_event_buffer_commit+0x20a/0xa80 [ 260.061292][ T9228] ? __might_fault+0xc5/0x140 [ 260.061342][ T9228] ? find_held_lock+0x2b/0x80 [ 260.061380][ T9228] ? __might_fault+0xc5/0x140 [ 260.061427][ T9228] ? __might_fault+0xc5/0x140 [ 260.061588][ T9228] vfs_statx+0xff/0x3f0 [ 260.061649][ T9228] ? __pfx_vfs_statx+0x10/0x10 [ 260.061758][ T9228] ? do_getname+0x191/0x390 [ 260.061877][ T9228] vfs_fstatat+0x77/0xe0 [ 260.061945][ T9228] __do_sys_newfstatat+0x9d/0x120 [ 260.062016][ T9228] ? __pfx___do_sys_newfstatat+0x10/0x10 [ 260.062345][ T9228] ? __pfx_ksys_write+0x10/0x10 [ 260.062510][ T9228] do_syscall_64+0x123/0x790 [ 260.062631][ T9228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.062668][ T9228] RIP: 0033:0x7f61deb9e159 [ 260.062696][ T9228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.062711][ T9228] RSP: 002b:00007f61dfb44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 260.062730][ T9228] RAX: ffffffffffffffda RBX: 00007f61dee25fa0 RCX: 00007f61deb9e159 [ 260.062742][ T9228] RDX: 0000200000000380 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 260.062753][ T9228] RBP: 00007f61dfb44090 R08: 0000000000000000 R09: 0000000000000000 [ 260.062764][ T9228] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000002 [ 260.062775][ T9228] R13: 00007f61dee26038 R14: 00007f61dee25fa0 R15: 00007ffd637dd418 [ 260.063022][ T9228] [ 261.074892][ T9243] xt_CT: You must specify a L4 protocol and not use inversions on it [ 261.600700][ T43] audit: type=1400 audit(1790499541.941:679): avc: denied { write } for pid=9240 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 261.956715][ T9245] program syz.1.997 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 262.663780][ T43] audit: type=1400 audit(1790499543.011:680): avc: denied { write } for pid=9255 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 262.914473][ T9257] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1000'. [ 262.921151][ T9257] 8021q: VLANs not supported on sit0 [ 263.944580][ T9262] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1001'. [ 264.490728][ T43] audit: type=1400 audit(1790499544.831:681): avc: denied { connect } for pid=9267 comm="syz.0.1003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 264.529099][ T43] audit: type=1400 audit(1790499544.871:682): avc: denied { read } for pid=9267 comm="syz.0.1003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 265.638407][ T43] audit: type=1400 audit(1790499545.981:683): avc: denied { watch watch_reads } for pid=9281 comm="syz.1.1005" path="/243/file1" dev="tmpfs" ino=1350 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 265.650356][ T43] audit: type=1400 audit(1790499545.991:684): avc: denied { write } for pid=9281 comm="syz.1.1005" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 265.669251][ T9282] binder: 9281:9282 ioctl 40046210 0 returned -14 [ 265.767633][ T9286] overlayfs: failed to resolve './file1/file0': -20 [ 267.537708][ T9313] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1011'. [ 267.544793][ T9313] 8021q: VLANs not supported on sit0 [ 269.133146][ T43] audit: type=1400 audit(1790499549.471:685): avc: denied { write } for pid=9320 comm="syz.1.1015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 269.621436][ T9332] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1017'. [ 269.630509][ T43] audit: type=1400 audit(1790499549.971:686): avc: denied { bind } for pid=9328 comm="syz.3.1017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 269.987724][ T9335] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1019'. [ 270.416937][ T9340] sch_tbf: burst 0 is lower than device veth1 mtu (1514) ! [ 271.335089][ T9355] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1024'. [ 271.371395][ T9355] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1024'. [ 271.493014][ T9358] FAULT_INJECTION: forcing a failure. [ 271.493014][ T9358] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 271.493047][ T9358] CPU: 3 UID: 0 PID: 9358 Comm: syz.1.1025 Not tainted syzkaller #0 PREEMPT(full) [ 271.493065][ T9358] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 271.493077][ T9358] Call Trace: [ 271.493095][ T9358] [ 271.493129][ T9358] dump_stack_lvl+0x100/0x190 [ 271.493236][ T9358] should_fail_ex.cold+0x5/0xa [ 271.493344][ T9358] _copy_to_user+0x32/0xd0 [ 271.493429][ T9358] simple_read_from_buffer+0xcb/0x170 [ 271.493548][ T9358] proc_fail_nth_read+0x1af/0x230 [ 271.493624][ T9358] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 271.493711][ T9358] ? rw_verify_area+0xce/0x6d0 [ 271.493771][ T9358] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 271.493867][ T9358] vfs_read+0x1e4/0xb40 [ 271.493921][ T9358] ? lock_acquire+0x1d1/0x380 [ 271.493953][ T9358] ? __fget_files+0x34/0x3d0 [ 271.493999][ T9358] ? __pfx_vfs_read+0x10/0x10 [ 271.494027][ T9358] ? find_held_lock+0x2b/0x80 [ 271.494096][ T9358] ? __fget_files+0x215/0x3d0 [ 271.494228][ T9358] ? __fget_files+0x21f/0x3d0 [ 271.494436][ T9358] ksys_read+0x12a/0x250 [ 271.494478][ T9358] ? __pfx_ksys_read+0x10/0x10 [ 271.494656][ T9358] do_syscall_64+0x123/0x790 [ 271.494745][ T9358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.494771][ T9358] RIP: 0033:0x7efd4535e98e [ 271.494810][ T9358] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 271.494828][ T9358] RSP: 002b:00007efd462e2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 271.494850][ T9358] RAX: ffffffffffffffda RBX: 00007efd462e36c0 RCX: 00007efd4535e98e [ 271.494863][ T9358] RDX: 000000000000000f RSI: 00007efd462e30a0 RDI: 0000000000000005 [ 271.494875][ T9358] RBP: 00007efd462e3090 R08: 0000000000000000 R09: 0000000000000000 [ 271.494888][ T9358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.494902][ T9358] R13: 00007efd45626128 R14: 00007efd45626090 R15: 00007fff36eaefd8 [ 271.495151][ T9358] [ 274.658650][ T9392] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1036'. [ 276.808314][ T43] audit: type=1400 audit(1790499557.151:687): avc: denied { write } for pid=9403 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 277.084112][ T9414] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1041'. [ 277.796700][ T43] audit: type=1400 audit(1790499558.121:688): avc: denied { write } for pid=9418 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 278.417518][ T9429] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1046'. [ 278.431083][ T5735] Bluetooth: hci2: unexpected event for opcode 0x1405 [ 278.526518][ T43] audit: type=1400 audit(1790499558.871:689): avc: denied { remount } for pid=9424 comm="syz.0.1045" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 278.527151][ T9427] proc: Unknown parameter 'favordynmods' [ 278.527542][ T9427] FAULT_INJECTION: forcing a failure. [ 278.527542][ T9427] name fail_futex, interval 1, probability 0, space 0, times 0 [ 278.527578][ T9427] CPU: 1 UID: 0 PID: 9427 Comm: syz.0.1045 Tainted: G L syzkaller #0 PREEMPT(full) [ 278.527604][ T9427] Tainted: [L]=SOFTLOCKUP [ 278.527617][ T9427] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 278.527632][ T9427] Call Trace: [ 278.527658][ T9427] [ 278.527688][ T9427] dump_stack_lvl+0x100/0x190 [ 278.527776][ T9427] should_fail_ex.cold+0x5/0xa [ 278.527879][ T9427] get_futex_key+0x1d0/0x14f0 [ 278.528040][ T9427] ? __pfx_get_futex_key+0x10/0x10 [ 278.528063][ T9427] ? kasan_save_free_info+0x3b/0x70 [ 278.528096][ T9427] ? kfree+0x22b/0x6d0 [ 278.528123][ T9427] ? __x64_sys_mount+0x239/0x310 [ 278.528192][ T9427] ? do_syscall_64+0x123/0x790 [ 278.528219][ T9427] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.528426][ T9427] futex_wake+0xf4/0x5e0 [ 278.528515][ T9427] ? __pfx_futex_wake+0x10/0x10 [ 278.528787][ T9427] do_futex+0x2b2/0x440 [ 278.528896][ T9427] ? __pfx_do_futex+0x10/0x10 [ 278.529031][ T9427] ? kasan_quarantine_put+0x104/0x240 [ 278.529065][ T9427] ? lockdep_hardirqs_on+0x7d/0x110 [ 278.529187][ T9427] __x64_sys_futex+0x34f/0x4d0 [ 278.529344][ T9427] ? __pfx___x64_sys_futex+0x10/0x10 [ 278.529388][ T9427] ? __pfx___x64_sys_mount+0x10/0x10 [ 278.529612][ T9427] do_syscall_64+0x123/0x790 [ 278.529681][ T9427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.529711][ T9427] RIP: 0033:0x7f61deb9e159 [ 278.529758][ T9427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 278.529776][ T9427] RSP: 002b:00007f61dfb440e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 278.529801][ T9427] RAX: ffffffffffffffda RBX: 00007f61dee25fa8 RCX: 00007f61deb9e159 [ 278.529815][ T9427] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f61dee25fac [ 278.529834][ T9427] RBP: 00007f61dee25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 278.529848][ T9427] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 278.529862][ T9427] R13: 00007f61dee26038 R14: 00007ffd637dd330 R15: 00007ffd637dd418 [ 278.530123][ T9427] [ 278.609941][ T9428] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1047'. [ 279.411194][ T43] audit: type=1400 audit(1790499559.751:690): avc: denied { write } for pid=9432 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 280.360848][ T43] audit: type=1400 audit(1790499560.701:691): avc: denied { write } for pid=9451 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 280.580741][ T9434] ubi: mtd0 is already attached to ubi0 [ 280.669611][ T9434] ubi0 error: ubi_cdev_ioctl: bad volume creation request [ 280.669655][ T9434] Volume creation request dump: [ 280.669669][ T9434] vol_id 131084 [ 280.669682][ T9434] alignment 393222 [ 280.669694][ T9434] bytes 844476469739528 [ 280.669708][ T9434] vol_type 8 [ 280.669720][ T9434] name_len 25 [ 280.669733][ T9434] 1st 16 characters of name: [ 282.348874][ T43] audit: type=1400 audit(1790499562.691:692): avc: denied { write } for pid=9456 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 283.388888][ T43] audit: type=1400 audit(1790499563.731:693): avc: denied { write } for pid=9474 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 284.335265][ T9461] ================================================================== [ 284.335286][ T9461] BUG: KASAN: slab-out-of-bounds in ecryptfs_verify_auth_tok_from_key+0x3b7/0x400 [ 284.335322][ T9461] Read of size 2 at addr ffff8880348d3998 by task syz.3.1053/9461 [ 284.335337][ T9461] [ 284.335357][ T9461] CPU: 0 UID: 0 PID: 9461 Comm: syz.3.1053 Tainted: G L syzkaller #0 PREEMPT(full) [ 284.335383][ T9461] Tainted: [L]=SOFTLOCKUP [ 284.335394][ T9461] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 284.335408][ T9461] Call Trace: [ 284.335432][ T9461] [ 284.335458][ T9461] dump_stack_lvl+0x100/0x190 [ 284.335577][ T9461] print_report+0x13d/0x4b0 [ 284.335679][ T9461] ? __virt_addr_valid+0x239/0x430 [ 284.335812][ T9461] ? ecryptfs_verify_auth_tok_from_key+0x3b7/0x400 [ 284.335870][ T9461] kasan_report+0xdf/0x1c0 [ 284.336052][ T9461] ? ecryptfs_verify_auth_tok_from_key+0x3b7/0x400 [ 284.336292][ T9461] ecryptfs_verify_auth_tok_from_key+0x3b7/0x400 [ 284.336391][ T9461] ecryptfs_keyring_auth_tok_for_sig+0x9e/0x1f0 [ 284.336443][ T9461] ecryptfs_get_tree+0x57b/0x15b0 [ 284.336600][ T9461] ? __pfx_ecryptfs_get_tree+0x10/0x10 [ 284.336675][ T9461] ? cap_capable+0x107/0x430 [ 284.336738][ T9461] ? bpf_lsm_capable+0x9/0x10 [ 284.336770][ T9461] ? security_capable+0x80/0x260 [ 284.336890][ T9461] vfs_get_tree+0x92/0x320 [ 284.336987][ T9461] path_mount+0x7d0/0x24c0 [ 284.337102][ T9461] ? __pfx_path_mount+0x10/0x10 [ 284.337150][ T9461] ? lockdep_hardirqs_on+0x7d/0x110 [ 284.337282][ T9461] ? putname+0xb1/0x110 [ 284.337305][ T9461] ? kmem_cache_free+0x127/0x6c0 [ 284.337520][ T9461] ? __x64_sys_mount+0x293/0x310 [ 284.337567][ T9461] __x64_sys_mount+0x293/0x310 [ 284.337614][ T9461] ? __pfx___x64_sys_mount+0x10/0x10 [ 284.337830][ T9461] do_syscall_64+0x123/0x790 [ 284.337894][ T9461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.337924][ T9461] RIP: 0033:0x7f2cdad9e159 [ 284.337970][ T9461] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.337989][ T9461] RSP: 002b:00007f2cdbc21028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 284.338014][ T9461] RAX: ffffffffffffffda RBX: 00007f2cdb025fa0 RCX: 00007f2cdad9e159 [ 284.338029][ T9461] RDX: 0000200000000300 RSI: 0000200000000140 RDI: 0000200000000100 [ 284.338043][ T9461] RBP: 00007f2cdae3506b R08: 0000200000000340 R09: 0000000000000000 [ 284.338057][ T9461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 284.338072][ T9461] R13: 00007f2cdb026038 R14: 00007f2cdb025fa0 R15: 00007ffeb1bda568 [ 284.338326][ T9461] [ 284.338338][ T9461] [ 284.338348][ T9461] Allocated by task 9449: [ 284.338362][ T9461] kasan_save_stack+0x30/0x ** replaying previous printk message ** [ 284.338362][ T9461] kasan_save_stack+0x30/0x50 [ 284.338401][ T9461] kasan_save_track+0x14/0x30 [ 284.338438][ T9461] __kasan_kmalloc+0xaa/0xb0 [ 284.338476][ T9461] __kmalloc_noprof+0x32f/0x840 [ 284.338494][ T9461] user_preparse+0x9b/0x1c0 [ 284.338515][ T9461] __key_create_or_update+0x463/0xe30 [ 284.338538][ T9461] key_create_or_update+0x42/0x60 [ 284.338562][ T9461] __do_sys_add_key+0x2e8/0x460 [ 284.338590][ T9461] do_syscall_64+0x123/0x790 [ 284.338612][ T9461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.338638][ T9461] [ 284.338646][ T9461] The buggy address belongs to the object at ffff8880348d3980 [ 284.338646][ T9461] which belongs to the cache kmalloc-32 of size 32 [ 284.338661][ T9461] The buggy address is located 24 bytes inside of [ 284.338661][ T9461] allocated 25-byte region [ffff8880348d3980, ffff8880348d3999) [ 284.338677][ T9461] [ 284.338701][ T9461] The buggy address belongs to the physical page: [ 284.338713][ T9461] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x348d3 [ 284.338730][ T9461] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 284.338745][ T9461] page_type: f5(slab) [ 284.338762][ T9461] raw: 00fff00000000000 ffff88801c042780 dead000000000100 dead000000000122 [ 284.338779][ T9461] raw: 0000000000000000 0000000000400040 00000000f5000000 0000000000000000 [ 284.338792][ T9461] page dumped because: kasan: bad access detected [ 284.338809][ T9461] page_owner tracks the page as allocated [ 284.338820][ T9461] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 9441, tgid 9441 (cmp), ts 279541371812 [ 284.338845][ T9461] post_alloc_hook+0xfd/0x120 [ 284.338884][ T9461] get_page_from_freelist+0x110d/0x35d0 [ 284.338918][ T9461] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 284.338954][ T9461] new_slab+0xa9/0x6e0 [ 284.338979][ T9461] refill_objects+0xe3/0x410 [ 284.338996][ T9461] __pcs_replace_empty_main+0x35e/0x650 [ 284.339021][ T9461] __kmalloc_cache_noprof+0x4f4/0x6d0 [ 284.339048][ T9461] kmem_cache_free+0x40f/0x6c0 [ 284.339068][ T9461] tear_down_vmas+0x2a5/0x610 [ 284.339094][ T9461] exit_mmap+0x469/0xa00 [ 284.339121][ T9461] __mmput+0x12a/0x410 [ 284.339146][ T9461] mmput+0x67/0x80 [ 284.339173][ T9461] setup_new_exec+0x1d9/0x2a0 [ 284.339200][ T9461] load_elf_binary+0x598/0x51a0 [ 284.339232][ T9461] bprm_execve+0x8cd/0x1940 [ 284.339263][ T9461] do_execveat_common.isra.0+0x4a5/0x580 [ 284.339297][ T9461] page last free pid 9441 tgid 9441 ts 279536019212 stack trace: [ 284.339313][ T9461] __free_frozen_pages+0x79f/0x10f0 [ 284.339352][ T9461] tlb_finish_mmu+0x27d/0x810 [ 284.339395][ T9461] exit_mmap+0x454/0xa00 [ 284.339425][ T9461] __mmput+0x12a/0x410 [ 284.339442][ T9461] mmput+0x67/0x80 [ 284.339461][ T9461] setup_new_exec+0x1d9/0x2a0 [ 284.339480][ T9461] load_elf_binary+0x598/0x51a0 [ 284.339503][ T9461] bprm_execve+0x8cd/0x1940 [ 284.339526][ T9461] do_execveat_common.isra.0+0x4a5/0x580 [ 284.339552][ T9461] __x64_sys_execve+0x93/0xd0 [ 284.339579][ T9461] do_syscall_64+0x123/0x790 [ 284.339605][ T9461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.339637][ T9461] [ 284.339646][ T9461] Memory state around the buggy address: [ 284.339658][ T9461] ffff8880348d3880: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc [ 284.339673][ T9461] ffff8880348d3900: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc [ 284.339688][ T9461] >ffff8880348d3980: 00 00 00 01 fc fc fc fc 00 00 00 00 fc fc fc fc [ 284.339701][ T9461] ^ [ 284.339714][ T9461] ffff8880348d3a00: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc [ 284.339730][ T9461] ffff8880348d3a80: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc [ 284.339744][ T9461] ================================================================== [ 284.443898][ T9461] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 284.556716][ T9461] CPU: 1 UID: 0 PID: 9461 Comm: syz.3.1053 Tainted: G L syzkaller #0 PREEMPT(full) [ 284.560057][ T9461] Tainted: [L]=SOFTLOCKUP [ 284.561459][ T9461] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 284.564604][ T9461] Call Trace: [ 284.565690][ T9461] [ 284.566655][ T9461] dump_stack_lvl+0x100/0x190 [ 284.568272][ T9461] vpanic+0x553/0x970 [ 284.569564][ T9461] ? __pfx_vpanic+0x10/0x10 [ 284.571007][ T9461] ? mark_held_locks+0x40/0x70 [ 284.572604][ T9461] ? ecryptfs_verify_auth_tok_from_key+0x3b7/0x400 [ 284.574572][ T9461] panic+0xd1/0xe0 [ 284.575757][ T9461] ? __pfx_panic+0x10/0x10 [ 284.577144][ T9461] ? ecryptfs_verify_auth_tok_from_key+0x3b7/0x400 [ 284.579049][ T9461] ? preempt_schedule_common+0x3c/0xb0 [ 284.580872][ T9461] check_panic_on_warn.cold+0x19/0x34 [ 284.582526][ T9461] end_report.part.0+0x3a/0x90 [ 284.584026][ T9461] kasan_report.cold+0xe/0x18 [ 284.585604][ T9461] ? ecryptfs_verify_auth_tok_from_key+0x3b7/0x400 [ 284.587694][ T9461] ecryptfs_verify_auth_tok_from_key+0x3b7/0x400 [ 284.589701][ T9461] ecryptfs_keyring_auth_tok_for_sig+0x9e/0x1f0 [ 284.591820][ T9461] ecryptfs_get_tree+0x57b/0x15b0 [ 284.593562][ T9461] ? __pfx_ecryptfs_get_tree+0x10/0x10 [ 284.595334][ T9461] ? cap_capable+0x107/0x430 [ 284.597039][ T9461] ? bpf_lsm_capable+0x9/0x10 [ 284.598578][ T9461] ? security_capable+0x80/0x260 [ 284.600287][ T9461] vfs_get_tree+0x92/0x320 [ 284.602203][ T9461] path_mount+0x7d0/0x24c0 [ 284.604249][ T9461] ? __pfx_path_mount+0x10/0x10 [ 284.606317][ T9461] ? lockdep_hardirqs_on+0x7d/0x110 [ 284.608234][ T9461] ? putname+0xb1/0x110 [ 284.609560][ T9461] ? kmem_cache_free+0x127/0x6c0 [ 284.611281][ T9461] ? __x64_sys_mount+0x293/0x310 [ 284.612918][ T9461] __x64_sys_mount+0x293/0x310 [ 284.614515][ T9461] ? __pfx___x64_sys_mount+0x10/0x10 [ 284.616330][ T9461] do_syscall_64+0x123/0x790 [ 284.617882][ T9461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.619747][ T9461] RIP: 0033:0x7f2cdad9e159 [ 284.621187][ T9461] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.627137][ T9461] RSP: 002b:00007f2cdbc21028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 284.629760][ T9461] RAX: ffffffffffffffda RBX: 00007f2cdb025fa0 RCX: 00007f2cdad9e159 [ 284.632218][ T9461] RDX: 0000200000000300 RSI: 0000200000000140 RDI: 0000200000000100 [ 284.634803][ T9461] RBP: 00007f2cdae3506b R08: 0000200000000340 R09: 0000000000000000 [ 284.637213][ T9461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 284.639675][ T9461] R13: 00007f2cdb026038 R14: 00007f2cdb025fa0 R15: 00007ffeb1bda568 [ 284.642416][ T9461] [ 284.643939][ T9461] Kernel Offset: disabled [ 284.645303][ T9461] Rebooting in 86400 seconds.. VM DIAGNOSIS: 08:59:24 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000073 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85b18d35 RDI=ffffffff9bc73f60 RBP=ffffffff9bc73f20 RSP=ffffc900001379e0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000073 R14=0000000000000004 R15=ffffc90000137da8 RIP=ffffffff85b18d5f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5b51000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007efd455f14b8 CR3=0000000034a38000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000101 Opmask02=00000000f802fefe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 25803bc5fc0067a0 e3616a1725e5662f ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 336b9b98e6ad0b7b 44fb28688bd6c115 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff36eaf4c6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff36eaf4c6 00007fff36eaf4cc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1f610db725e5662f 25e5662f00000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efd4543568e ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efd454357f2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efd45435680 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000200980070 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000028 0000000000000094 0000000000000002 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000026 RCX=0000000000000003 RDX=1ffff11003ad8b1a RSI=0000000000000000 RDI=ffff888055d52580 RBP=0000000000000100 RSP=ffffc900006b03c8 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000100 R11=0000000000017ca4 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=ffff88801d6c5800 RIP=ffffffff820f1705 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055558f2da500 ffffffff 00c00000 GS =0000 ffff8880d5c51000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f61dee26080 CR3=0000000062490000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=00000000ffffffff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f61df95d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd637dd906 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd637dd906 00007ffd637dd90c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f61dec3564e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f61dec3568e ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f61dec357f2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f61dec35680 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f61dedf2600 00007f61dedf25e0 00007f61dedf25e8 00007f61dedf2618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f61df95d020 00007f61dedf25c0 00007f61dedf25d0 00007f61dedf2610 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f61dedf25f8 00007f61dedf25c8 00007f61dedf2600 00007f61dedf25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff88801f6a319c RCX=ffffffff820ebd0d RDX=00000000000001c4 RSI=00000000000006b8 RDI=00000000000006b8 RBP=00000000000001c4 RSP=ffffc9000640f3a0 R8 =0000000000000004 R9 =0000000000000038 R10=000000000000052c R11=0000000000000000 R12=00000000000006b8 R13=0000000000000038 R14=0000004235d2a650 R15=ffff88801f6a3010 RIP=ffffffff820c2c6c RFL=00000212 [----A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f027413ac80 ffffffff 00c00000 GS =0000 ffff8880d5d51000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f9f3c082368 CR3=00000000251c8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000005000001 Opmask01=0000000000000001 Opmask02=0000000000202000 Opmask03=0000000000000000 Opmask04=00000000fffffbff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffd333b06b 00007fffd333b06b ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffd333b570 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffd333b570 0000003000000018 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65746e6f63007325 203a726f72726520 64656e7275746572 2072657672657300 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 40514b4a46005600 051f574a57574005 41404b5750514057 0557405357405600 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3120534f4942202c 2939303032202c39 484349202b203533 5128204350206472 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 313d657669737369 6d72657020726964 3d7373616c637420 745f7366706d743a ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 725f7463656a626f 3a755f6d65747379 733d747865746e6f 637420745f637063 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 68643a725f6d6574 7379733a755f6d65 747379733d747865 746e6f6373203933 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 38313d6f6e692022 7366706d74223d76 6564202265746174 732d6b6f6f68223d ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 38313d6f6e692022 7366706d74223d76 6564202265746174 732d6b6f6f68223d ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000003 RBX=1ffff920009c2e41 RCX=0000000000000002 RDX=0000000000000002 RSI=ffffffff8c623900 RDI=ffffffff8c623940 RBP=000000000000055c RSP=ffffc90004e171d8 R8 =0000000000000006 R9 =000000000000055c R10=000000000000055c R11=000000000000c783 R12=ffffc90004e17408 R13=ffff88801d6c4800 R14=ffff88801faf0000 R15=0000000000000000 RIP=ffffffff820ec6b1 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5e51000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffd165af408 CR3=0000000049d3c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000003 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7570637265705f65 676173752e746363 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff2fbb9e26 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff2fbb9e26 00007fff2fbb9e2c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff01523564e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff01523568e ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff0152357f2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff015235680 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000007 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000230 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000007 0000000000000000 0000000000000000 0000000000000230 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000