last executing test programs: 20.552839696s ago: executing program 1 (id=357): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYRES32=0x0], 0x0, 0x37}, 0x28) close_range(r0, 0xffffffffffffffff, 0x100000000000000) 20.498659723s ago: executing program 1 (id=358): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0xf1, @empty, 0x19f4929}], 0x1c) listen(r0, 0x100) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000300)="d9", 0x1e000}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @local}], 0x18, 0x40048d5}, 0x8050) (fail_nth: 39) 20.44207884s ago: executing program 1 (id=359): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x65, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x4000, @private=0x1000000, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e20fffc}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@rand_addr=0x64010102}, {@remote}, {@private=0xa010101}, {@private, 0x800}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0) 20.441930742s ago: executing program 1 (id=360): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="4c108416b9c57b", 0x7}], 0x1, 0x7, 0xb0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x21001, 0x0) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000180)) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40086602, &(0x7f0000000000)) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000015c0), 0x80000, 0x0) symlinkat(&(0x7f0000000040)='./bus\x00', r2, &(0x7f00000000c0)='./file0\x00') ioctl$RTC_IRQP_READ(r3, 0x8008700b, &(0x7f0000001600)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 20.310807305s ago: executing program 1 (id=362): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x400a01, 0x0) ioctl$NILFS_IOCTL_SET_SUINFO(r0, 0x40186e8d, &(0x7f0000000240)={&(0x7f0000000200)=[{0xb, 0x1, 0x0, {0xb, 0x3}}], 0x1, 0x20, 0x1ff, 0x8}) (async) ioctl$NILFS_IOCTL_SET_SUINFO(r0, 0x40186e8d, &(0x7f0000000240)={&(0x7f0000000200)=[{0xb, 0x1, 0x0, {0xb, 0x3}}], 0x1, 0x20, 0x1ff, 0x8}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYRES16=r0, @ANYBLOB="13570fbd30d8f7413a82442fa712234475644742cb25ebe28748a34cf180262d15442049b0f332d2b072454b841dde40ad442d317da4b410c6de145fea4c676592f01a0399953edfc9572b8249a7c8aeb02c2c4f45e3e2fd47650bfe79db4ccbe08672de0d4644aa6aef645840a738bc7ff979a34c0671430385de05d350f677fa9938ed72de3057c6c6fe4c", @ANYRES8], 0x2c}, 0x1, 0x0, 0x0, 0x24008000}, 0x400c004) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYRES16=r0, @ANYBLOB="13570fbd30d8f7413a82442fa712234475644742cb25ebe28748a34cf180262d15442049b0f332d2b072454b841dde40ad442d317da4b410c6de145fea4c676592f01a0399953edfc9572b8249a7c8aeb02c2c4f45e3e2fd47650bfe79db4ccbe08672de0d4644aa6aef645840a738bc7ff979a34c0671430385de05d350f677fa9938ed72de3057c6c6fe4c", @ANYRES8], 0x2c}, 0x1, 0x0, 0x0, 0x24008000}, 0x400c004) r1 = socket$inet(0x2, 0x800, 0x8) r2 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRESHEX=r1, @ANYRES8=r1, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES8=r5], 0x3c}, 0x1, 0x0, 0x0, 0x8805}, 0x4000) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r5], 0x5c}}, 0x40) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r1, 0x1, 0x53, &(0x7f0000000100)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000000140)=0x2c) (async) getsockopt$IP_SET_OP_GET_FNAME(r1, 0x1, 0x53, &(0x7f0000000100)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000000140)=0x2c) 20.310632565s ago: executing program 2 (id=363): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x40000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/nullb0/queue/nr_requests\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='4_', 0x2) 20.253218514s ago: executing program 2 (id=364): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r1, 0x3b71, &(0x7f0000000080)={0x20, 0x0, 0x0, 0x40000000000006, 0x6}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000041100001c00128009000100626f6e64000000000c00028005001d0007000000"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x0, 0x298, 0x200, 0x200, 0x298, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x98}}, {{@ip={@remote, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) r3 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000380), 0x40, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f00000003c0)={0x48, 0x7, r3, 0x0, 0x1, 0x0, 0x8, 0x1fbf95, 0xd0822}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_io_uring_setup(0xf04, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x3, 0x10000051}, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd589, 0x80, 0x2, 0x1e1}, &(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000180)) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="6c0100001000130700000000fcdbdf25e0000001000000000000000000000000ff02000000000000000000000000000100040b6e4e2100020000008021000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x2094) syz_io_uring_submit(r8, r6, r7, &(0x7f0000000280)=@IORING_OP_FUTEX_WAITV={0x35, 0x4, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[{0x100000001, 0x0, 0x82}], 0x1, 0x0, 0x1}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f00000006c0)="0004000000", 0x0, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4}, 0x50) r10 = socket$l2tp(0x2, 0x2, 0x73) ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f00000005c0)) connect$inet(r10, &(0x7f0000000580)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r11 = syz_io_uring_setup(0xf00, &(0x7f0000000000)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f00000002c0)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r15 = io_uring_register$IORING_REGISTER_PERSONALITY(r11, 0x9, 0x0, 0x0) syz_io_uring_submit(r12, r13, r14, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}, 0x0, {0x0, r15}}) r16 = gettid() syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f00000004c0)={0x2e, 0x52, 0x0, r3, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, r15, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000480)=@any_dev={0x4, 0x564, 0x0, 0x0, 0x1000, 0x3, r16}}}, &(0x7f0000000540)) io_uring_enter(r4, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) socket$inet_tcp(0x2, 0x1, 0x0) 20.062854715s ago: executing program 2 (id=366): openat$sr(0xffffffffffffff9c, &(0x7f0000000c80), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=@base={0x3, 0x4, 0x59, 0x1, 0x431, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0xffce, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000c40)={r5, &(0x7f0000000ac0)="7f2c02fb9a410e60c14c252c030055989d08c0c4988a493be7cab29484727d236689481a9e360a4e1c36f9e52db2791db3b04d9c90231ae2ee1cc53d2e5cabd739eee87a334d348b1308e4d0fb9b2fda2486eb15cfa14f33938d768d5b7edb0cfd7f246ba0cb1a3343e98985a14a2ee17191527ad3faa6077eb88ed6c5369884dd17b202", &(0x7f0000000b80)=""/153}, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x24, r7, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @empty}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e25}]}, 0x24}, 0x1, 0x0, 0x0, 0x60044831}, 0x40080) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, &(0x7f0000000380)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x6a, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x5c, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x84, 0x84, 0x5, [@struct={0x8, 0xa, 0x0, 0x4, 0x0, 0x10000, [{0xd, 0x0, 0x10000}, {0x6, 0x3, 0x1000}, {0xa, 0x5, 0x7}, {0x1, 0x0, 0x6}, {0x5, 0x4, 0x3}, {0x0, 0x5, 0xc}, {0x4, 0x5, 0x81}, {0x8, 0x3, 0x80000000}, {0xa, 0x2, 0x8}, {0x6, 0x2, 0x3}]}]}, {0x0, [0x61, 0x2e, 0x61]}}, &(0x7f0000000740)=""/125, 0xa1, 0x7d, 0x1, 0x80}, 0x28) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000880)={0x7, r0, 0x1}) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)={0x1b, 0x0, 0x0, 0x2, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xa, 0x5, &(0x7f0000000080)=@raw=[@map_idx={0x18, 0x2, 0x5, 0x0, 0xa}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_val={0x18, 0x1, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x1}], &(0x7f00000000c0)='syzkaller\x00', 0xb5, 0x93, &(0x7f0000000240)=""/147, 0x41000, 0x4c, '\x00', r8, @fallback=0x17, r9, 0x8, &(0x7f0000000800)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x0, 0x2dc, 0x20000000}, 0x10, 0x0, r10, 0x7, &(0x7f0000000940)=[r0, r0, r0, r0, r11, r0, r0], &(0x7f0000000980)=[{0x5, 0x3, 0x1, 0x4}, {0x2, 0x3, 0xc, 0x4}, {0x2, 0x5, 0x9, 0xa}, {0x0, 0x4, 0xd, 0x4}, {0x0, 0x5, 0xf, 0x9}, {0x0, 0x2, 0x7, 0x6}, {0x5, 0x1, 0x5, 0x6}], 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x8, &(0x7f0000000200)=@raw=[@generic={0xb7}, @generic={0x63, 0xa, 0x0, 0xfffc}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffffc}, @call={0x85, 0x0, 0x0, 0x1}, @exit], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 19.992829821s ago: executing program 2 (id=367): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0xf1, @empty, 0x19f4929}], 0x1c) listen(r0, 0x100) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000300)="d9", 0x1e000}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @local}], 0x18, 0x40048d5}, 0x8050) (fail_nth: 40) 19.90718534s ago: executing program 1 (id=368): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) listen(r1, 0x5) socket(0x10, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="190000000400000004"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r3}, &(0x7f0000000240), &(0x7f0000000280)=r4}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={r4, 0x0, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000540)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @remote}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x33, 0x0, @loopback, @private}}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfs_mnt\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='127.0.0.1:/export\x00', &(0x7f00000000c0)='./nfs_mnt\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000140)='addr=127.0.0.1,proto=tcp,port=2049,mountport=2049,mountproto=tcp,mountvers=3,vers=3,clientaddr=127.0.0.1\x00') close_range(r0, 0xffffffffffffffff, 0x0) 19.792649565s ago: executing program 32 (id=368): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) listen(r1, 0x5) socket(0x10, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="190000000400000004"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r3}, &(0x7f0000000240), &(0x7f0000000280)=r4}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={r4, 0x0, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000540)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @remote}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x33, 0x0, @loopback, @private}}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfs_mnt\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='127.0.0.1:/export\x00', &(0x7f00000000c0)='./nfs_mnt\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000140)='addr=127.0.0.1,proto=tcp,port=2049,mountport=2049,mountproto=tcp,mountvers=3,vers=3,clientaddr=127.0.0.1\x00') close_range(r0, 0xffffffffffffffff, 0x0) 19.731666143s ago: executing program 2 (id=370): socket(0xa, 0x1, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x13, 0x0, &(0x7f0000000240)=0xfffffffffffffcab) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x6, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x7, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$sndctrl(0x0, 0x0, 0x115480) getpid() syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f917240685", 0x14}], 0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x1000000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r3, &(0x7f00000000c0)='1', 0x1) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1a1) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) dup(0xffffffffffffffff) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getrandom(&(0x7f0000000640)=""/288, 0x145, 0x0) 19.542907937s ago: executing program 2 (id=371): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) syz_emit_ethernet(0x4e, &(0x7f0000001500)=ANY=[@ANYBLOB="ffffffffffe9ffffffffffff86dd60f9edff00183a00fe8000000000000000000000000000bbff0200000000000000000000000000018a0090781000ffff00000000000000000000000000000001"], 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) (async) r2 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) (async) preadv(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x9, 0xd) (async) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0x40025b0c, &(0x7f0000000040)) (async) r4 = socket$can_j1939(0x1d, 0x2, 0x7) (async, rerun: 32) prctl$PR_SET_SECUREBITS(0x1c, 0x15) (async, rerun: 32) setuid(0xee00) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0xb, 0x5, 0xff}, 0x3a, [0x8003, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0xa, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff04, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000005, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x6, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x3, 0x17, 0x1, 0x7, 0x4000200, 0x3e, 0x88, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x0, 0x6, 0x48, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x8, 0x9578, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x5, 0x6, 0x7fff, 0x6, 0x400, 0x10000401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0xd69, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8021, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x3, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x4000009, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x9, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x3a, 0x800003, 0x200, 0x80, 0x3, 0xc, 0x6, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x9, 0x1000000b, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80e2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x10000, 0x93b, 0x2000006, 0x1000006, 0x7ff, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0xfffc, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x2, 0x95, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc5, 0x1, 0xfffff003, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1c, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) r5 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) (async, rerun: 64) r6 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r6, 0x81785501, &(0x7f0000002000)=""/4096) (async) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2566e506bce1e8", 0x14}], 0x1}, 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=']) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async) read$FUSE(r5, &(0x7f00000047c0)={0x2020}, 0x2020) (async) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYRESOCT=r7, @ANYRESDEC], 0xc0}}, 0x0) (async) setsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, &(0x7f0000000040)=0x3, 0x4) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x2020000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6, 0x6, 0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r5) (async) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000080)=0x100) (async) ioctl$XFS_IOC_GETPARENTS(r0, 0xc028583e, &(0x7f0000000140)={{[0x4a, 0x2, 0x81, 0x401]}, 0x0, 0x1, 0x3, 0x0, &(0x7f0000000000)=[{{@_ha_fsid={[0x1]}, {0x5657, 0x8, 0x7, 0x10001}}, 0xfffffff9, 0x0, 'GPL\x00'}, {{@align=0x4, {0xfff, 0xfe1e, 0x0, 0x8000}}, 0x7, 0x0, ',X*)@@\\,-$%,\\)\x00'}]}) 7.349822226s ago: executing program 3 (id=521): sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x10000485, 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x4000) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008040}, 0x40048110) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x60042, 0x0) poll(&(0x7f0000004200)=[{}], 0x1, 0x0) syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300"], 0x78) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa88a}]}}}]}, 0x3c}}, 0x4008080) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) r2 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, r3, 0x20, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xffff, 0x1b}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}}, 0x4040000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000000300)) 5.249613937s ago: executing program 4 (id=548): r0 = openat$kvm(0xffffff9c, &(0x7f0000000180), 0x129102, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x2f, 0x10}, 0x20) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x71, 0x2, 0x2, 0x2d7, 0x8000000000000000, 0x8000000000000000, 0x5, 0x0, 0x4, 0x401, 0x2, 0x5, 0x8d], 0xeeee8000, 0x284e97}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x4a282, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 1) 4.992773409s ago: executing program 4 (id=549): r0 = openat$kvm(0xffffff9c, &(0x7f0000000180), 0x129102, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) mkdir(&(0x7f00000001c0)='./bus\x00', 0x40) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4000, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$OCFS2_IOC_GROUP_ADD(r0, 0x40186f02, &(0x7f0000000380)={0x6, 0x1ff, 0x3, 0xd5}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000680)={0x6c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x2}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x6c}}, 0x20004000) sendmsg$nl_netfilter(r3, &(0x7f0000000640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000400)={0x1f0, 0x10, 0x8, 0x101, 0x70bd2b, 0x25dfdbfe, {0x3, 0x0, 0x4}, [@generic="64679f83b02135acca49000505eae12753db720bec6b768b466148a53dc338dd", @generic="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", @generic="7870f1a641a411704af18a26d3737c84f0c3689975714de980a4e2f467cc5df79095f07a91fc976a983fc3a1cfe4b61d88f03ac4b1b2665b85353b0f439ee5fbd9538b29b426b860c25c0fb01ab3bb57453d146a99459e006527a8bb59a6f8221623fbe60ac596ebde513be92f4f281aeb2d8dee3229af94a8f59b42eb736d1e66a89765f4bd4fa7f596bd554d940fed4915ec79b8323eb39bfc219b7af00c006cf07bd9b81ea0dd025d6382decf597e1621655507d61471614bcf"]}, 0x1f0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x2f, 0x10}, 0x20) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x71, 0x2, 0x2, 0x2d7, 0x8000000000000000, 0x8000000000000000, 0x5, 0x0, 0x4, 0x401, 0x2, 0x5, 0x8d], 0xeeee8000, 0x284e97}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x4a282, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x7, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000300)={&(0x7f00000003c0)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0), &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x4, 0x0, 0x3}) ioctl$DRM_IOCTL_MODE_CURSOR2(r4, 0xc02464bb, &(0x7f0000000340)={0x1, r5, 0x7, 0xe, 0x8, 0x3, 0xf6d, 0x6, 0x9}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) fremovexattr(r6, &(0x7f00000001c0)=@known='user.incfs.metadata\x00') ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.772517237s ago: executing program 4 (id=550): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) chdir(&(0x7f0000000b00)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00') symlink(&(0x7f00000000c0)='streaming/header/h\x00', &(0x7f0000000080)='./file0\x00') 4.771640505s ago: executing program 4 (id=551): ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000001180)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000a00000000008000f0fffeffe809005300fff5dd00000010000100070c10000000000000000000", 0x58}], 0x1) r1 = openat$kvm(0xffffff9c, &(0x7f0000000180), 0x129102, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000001500)={0x2020}, 0x2020) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000040)={0x0, 0x7ff, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, &(0x7f0000000780)={0x0, 0x80, 0x1, 'queue0\x00', 0x101}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) r6 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000400)=ANY=[@ANYBLOB="12010002000000405a0609000001000000010902190001010080320904000001ff0000000705810240"], 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/ttyUSB0\x00', 0x2, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000040)={0x20, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0x6}}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x17, &(0x7f00000002c0)=ANY=[], &(0x7f0000000380)='GPL\x00', 0xb, 0x7, &(0x7f00000003c0)=""/7, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x4, 0x0, 0xfffffff8}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000480)=[{0x5, 0x3, 0x5, 0x1}, {0x4, 0x6, 0xa, 0x6}, {0x4, 0x3, 0xb, 0x4}, {0x4, 0x4, 0x2, 0xc}, {0x2, 0x3, 0xe, 0xa}, {0x2, 0x3, 0x6, 0x3}]}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x2f, 0x10, 0x0, @void, @value=r8}, 0x20) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x71, 0x2, 0x2, 0x2d7, 0x8000000000000000, 0x8000000000000000, 0x5, 0x0, 0x4, 0x401, 0x2, 0x5, 0x8d], 0xeeee8000, 0x284e97}) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x4a282, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_emit_ethernet(0x25, &(0x7f0000000200)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x17, 0x0, 0x0, 0x0, 0x6c, 0x0, @remote, @local}, "000012"}}}}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4.276498784s ago: executing program 33 (id=371): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) syz_emit_ethernet(0x4e, &(0x7f0000001500)=ANY=[@ANYBLOB="ffffffffffe9ffffffffffff86dd60f9edff00183a00fe8000000000000000000000000000bbff0200000000000000000000000000018a0090781000ffff00000000000000000000000000000001"], 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) (async) r2 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) (async) preadv(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x9, 0xd) (async) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0x40025b0c, &(0x7f0000000040)) (async) r4 = socket$can_j1939(0x1d, 0x2, 0x7) (async, rerun: 32) prctl$PR_SET_SECUREBITS(0x1c, 0x15) (async, rerun: 32) setuid(0xee00) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0xb, 0x5, 0xff}, 0x3a, [0x8003, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0xa, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff04, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000005, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x6, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x3, 0x17, 0x1, 0x7, 0x4000200, 0x3e, 0x88, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x0, 0x6, 0x48, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x8, 0x9578, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x5, 0x6, 0x7fff, 0x6, 0x400, 0x10000401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0xd69, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8021, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x3, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x4000009, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x9, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x3a, 0x800003, 0x200, 0x80, 0x3, 0xc, 0x6, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x9, 0x1000000b, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80e2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x10000, 0x93b, 0x2000006, 0x1000006, 0x7ff, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0xfffc, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x2, 0x95, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc5, 0x1, 0xfffff003, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1c, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) r5 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) (async, rerun: 64) r6 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r6, 0x81785501, &(0x7f0000002000)=""/4096) (async) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2566e506bce1e8", 0x14}], 0x1}, 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=']) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async) read$FUSE(r5, &(0x7f00000047c0)={0x2020}, 0x2020) (async) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYRESOCT=r7, @ANYRESDEC], 0xc0}}, 0x0) (async) setsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, &(0x7f0000000040)=0x3, 0x4) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x2020000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6, 0x6, 0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r5) (async) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000080)=0x100) (async) ioctl$XFS_IOC_GETPARENTS(r0, 0xc028583e, &(0x7f0000000140)={{[0x4a, 0x2, 0x81, 0x401]}, 0x0, 0x1, 0x3, 0x0, &(0x7f0000000000)=[{{@_ha_fsid={[0x1]}, {0x5657, 0x8, 0x7, 0x10001}}, 0xfffffff9, 0x0, 'GPL\x00'}, {{@align=0x4, {0xfff, 0xfe1e, 0x0, 0x8000}}, 0x7, 0x0, ',X*)@@\\,-$%,\\)\x00'}]}) 4.231678473s ago: executing program 3 (id=553): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="4001000010000100feffffff00010000fe880000000000000000000000000001fe8000000000000000000000000000bb000100014e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x75}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000180)=""/88, 0x58}], 0x1, 0x78, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, r2, 0x210, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0xc}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfffffffffffffff7}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xbba}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r3}, @L2TP_ATTR_MRU={0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x880) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x7) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) 4.100577329s ago: executing program 3 (id=555): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x65, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x1000000, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e20fffc}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@rand_addr=0x64010102}, {@remote, 0x4000}, {@private=0xa010101}, {@private, 0x800}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0) 4.017141947s ago: executing program 3 (id=556): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0xf72cb191e650caa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000500), 0x800000000ffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$VIDIOC_QBUF(r1, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x6, 0x4, 0x4, 0x0, {}, {0x0, 0x0, 0x96, 0x0, 0x0, 0xa, "fd0f09a2"}, 0x5, 0x2, {}, 0x80000}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000700, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89df3b7fbebffe60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x31]}}) (fail_nth: 51) 3.816927116s ago: executing program 3 (id=559): r0 = openat$kvm(0xffffff9c, &(0x7f0000000180), 0x129102, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x2f, 0x10}, 0x20) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x71, 0x2, 0x2, 0x2d7, 0x8000000000000000, 0x8000000000000000, 0x5, 0x0, 0x4, 0x401, 0x2, 0x5, 0x8d], 0xeeee8000, 0x284e97}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x4a282, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 2) 3.322765013s ago: executing program 3 (id=562): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000840)) r2 = syz_io_uring_setup(0x2d64, &(0x7f0000000100)={0x0, 0x100577, 0x2, 0x4000, 0x42}, &(0x7f0000000400), &(0x7f0000000040), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, &(0x7f00000000c0)={0x4, r2, 0xf, {0x100, 0x1}, 0x8}, 0x1) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0) clock_gettime(0x0, &(0x7f0000000540)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000005c0)={{r4, r5+10000000}, {0x77359400}}, &(0x7f0000000600)) r6 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_XRUN(r6, 0x4148, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r7 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r8 = syz_usb_connect(0x0, 0x55, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002020000402505a7a400010000000109024300020100c001090400000102020100052400100104240202052401000105240600010705810308000a09040100020a00000007058202000200070503020002"], 0x0) syz_usb_control_io(r8, 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/ttyACM0\x00', 0x2, 0x1) syz_usb_control_io$hid(r8, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r9, 0x89f8, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x4e0, 0x378, 0x180, 0x0, 0x2e0, 0x180, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, 0x0, {[{{@uncond, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@remote, [], @ipv6=@local, [], @ipv4=@private, [], @ipv6=@private1}}}, @common=@ttl={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x218}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}}]}, @ECN={0x28}}, {{@ip={@rand_addr, @dev, 0x0, 0x0, 'syzkaller0\x00', 'macvlan1\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x540) getsockname(r7, &(0x7f00000000c0)=@phonet, &(0x7f0000000240)=0x80) r10 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r10, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0x100000c01, 0xad, 0x0, 0x30, 0x66}) 2.976679074s ago: executing program 0 (id=566): r0 = openat$kvm(0xffffff9c, &(0x7f0000000180), 0x129102, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x2f, 0x10}, 0x20) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x71, 0x2, 0x2, 0x2d7, 0x8000000000000000, 0x8000000000000000, 0x5, 0x0, 0x4, 0x401, 0x2, 0x5, 0x8d], 0xeeee8000, 0x284e97}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x4a282, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.836029513s ago: executing program 0 (id=567): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local}, {0xa, 0x0, 0x0, @empty}, 0x1}, 0x5c) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, 0x0, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e24, 0x100, @local, 0x4}, {0xa, 0x4e23, 0x7, @empty, 0xd473}, 0x0, {[0x4, 0x7, 0x3, 0x8001, 0xe10, 0xe, 0x3]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x15, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='htcp', 0x4) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 1.973017216s ago: executing program 0 (id=568): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x4}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x63, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2}}}}}, 0x0) syz_usb_connect$midi(0x0, 0x31, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1f, 0x1, 0x1, 0x4, 0x90, 0x5, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0xde9f8f615f94a193, 0x4, [], [{{0x9, 0x5, 0x5, 0x0, 0x0, 0x0, 0x9, 0x40, {0x4}}}]}}}}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x9, [{0x45, &(0x7f0000000040)=@string={0x45, 0x3, "9071f9439302476fb07a5393763c2083ee9c6ed62a760002be29a7b6f7f26bd0ddb98f5f339911419ad282cd3f91ac0607ba40011e5daeada0e17222be61d90a39869f"}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x810}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x415}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0xc0c}}, {0x85, &(0x7f0000000180)=@string={0x85, 0x3, "2480cfcc68a52369b4f81159aec9fbdc7842c71acf0edb8753b79b774182c533cfa8106e14d8bb7f96a0b0df5d7d4c17f1701d2dff931445ff3f0a5cea80984f361a1f039a9b4d3696294d71eb039c595470200f9600e3fc999c2b16b032b18024b2fe36b22c4727058722d8e741bea6016f80a266e1e741ebb7cdb0b532da9447b610"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x3c01}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x446}}, {0x15, &(0x7f00000002c0)=@string={0x15, 0x3, "d2e437cac0f6be645e4d437b51c9895f6df6b3"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x425}}]}) 1.582134188s ago: executing program 4 (id=569): mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='sys\x00', 0x1ff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="2a003300d0000000080211000000080211000000fffffffffffff00f04"], 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r4 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8}}}}]}, 0x38}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) pselect6(0x40, &(0x7f0000000100)={0x3, 0x0, 0x0, 0x4000000000, 0x800, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x1f, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./sys/devices/platform/vhci_hcd.0/attach\x00', 0x1, 0x0) ioctl$USBDEVFS_REAPURB(r6, 0x4008550c, &(0x7f0000000000)) writev(r6, &(0x7f0000000900)=[{&(0x7f0000000980)='0 ', 0x2}, {&(0x7f00000009a0)='4 ', 0x2}, {&(0x7f00000009c0)='0 3', 0x3}], 0x3) 652.536388ms ago: executing program 0 (id=571): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@mcast2, @remote, @ipv4={'\x00', '\xff\xff', @loopback}, 0x3, 0x6, 0x8, 0x0, 0x4, 0x500000, r1}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x6, 0x0, 0x100, 0x6, 0x180107, r1}) setns(0xc9, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x20, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000070000000000", @ANYRES32=0x0, @ANYBLOB="1546010007ef0000540012800c0001006d6163766c616e004400028006000200010000000800090001efa8000800030003000000080007000500000008000100100000000600020001000000040005800a000400aaaaaaaaaa2e000008000500", @ANYRES16=r3], 0x84}}, 0x20008040) 518.491079ms ago: executing program 0 (id=572): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="b4050000000000006110a400000000001f150000000000009500000000000000704fff7649b0983f42d01eccd13e9ec8a0a0ba6f00720c38fb17c6973e6361f5710065aaf625b96d173daf810865508ce8e9e1fa28e8bc8620294d24b6e609fa8a42156ea7394b8e0f09362f9e2576fd38cecff65abf747c96f88c9e0d54c135a1666ac39044329aaff9afb6"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x7, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030064766d727009000000000000000000001800128008000100707070000c00028008000100", @ANYRES8=r0], 0x4c}}, 0x0) 517.095577ms ago: executing program 5 (id=574): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x200000) pwrite64(r0, &(0x7f0000000100)="0000010042", 0x5, 0x1be) pwrite64(r0, &(0x7f0000000100)="55aa", 0x2, 0x1fe) pwrite64(r0, &(0x7f0000000100)='PRIVHEAD', 0x8, 0xc00) pwrite64(r0, &(0x7f0000000100)="0002000b", 0x4, 0xc0c) pwrite64(r0, &(0x7f0000000100)='12345678-1234-1234-1234-123456789612', 0x24, 0xc30) pwrite64(r0, &(0x7f0000000100)="0000000000000001", 0x8, 0xd1b) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\a', 0x7, 0xd23) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\b', 0x7, 0xd2b) pwrite64(r0, &(0x7f0000000100)='PRIVHEAD', 0x8, 0x1e8000) pwrite64(r0, &(0x7f0000000100)="0002000b", 0x4, 0x1e800c) pwrite64(r0, &(0x7f0000000100)='12345678-1234-1234-1234-123456789612', 0x24, 0x1e8030) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\a', 0x7, 0x1e8123) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\b', 0x7, 0x1e812b) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', '\x00', '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}) 511.576268ms ago: executing program 0 (id=575): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="010000000300000000"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000600)={r1, 0x0, 0x0, 0x4}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x1000}]}, 0x24}}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r7, &(0x7f0000000000), 0x0, 0x20004015, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f00000001c0)='htcp', 0x4) socket$inet(0x2, 0x80000, 0x9) r8 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24000084) socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) 411.226102ms ago: executing program 5 (id=576): r0 = socket$kcm(0xa, 0x2, 0x0) pwrite64(r0, &(0x7f0000000080)="2a4a56e3b2c1dba34fc14e04adb94cae49c5399260d77517d0333615316ddb84cdfeff3c2c20837d404163e6120b2f0a6c414fc0d85c7add711bf7ffabf1538b32bb8c3db65089e789a2fe9fa077a903fff34ee14170e78fe2f53ba6b3b0de35d42c007c6ed58725fd45cd0949b28f4a6fb38b14dea467cc43850e0f8dfbf2db9d7539fd2cac78fe83b6b1b366a2acf193", 0x91, 0xa) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x2f, &(0x7f0000000480), 0x4) sendmsg$sock(r1, &(0x7f00000017c0)={&(0x7f0000000140)=@l2tp={0x2, 0x0, @multicast2, 0x1}, 0x80, &(0x7f00000016c0)=[{&(0x7f00000001c0)="3de8cee809faa858a66f993274c014adca47432d591e1a7e5a8cfb0e8be74bb396b1e618b84e0bb2cf52fceb1075c6817491c146", 0x34}, {&(0x7f0000000200)="2e3ee54c78efd998402bf1c2954bf892747947e3cd24954e5eba7e0842bd9774c4a095cda59d26185cab35f8a4140a3e164bcf684ae04fbc110ad5602b959c1e518b654d8687618160becae72b11a6e51812aeffcd7fb70505d4c8c52675508555", 0x61}, {&(0x7f0000001380)="f3c61dab919bf8f341c86cc83ec321fb28e4e6d0d1290fe778e1ca09e5f69991e9fc386c37078d3265a2ddb18164f8fe6f20d6ce246ac71e8885a8621fd20fb4b4d8de1d04a2621f29dc75c471360368e39fd8a7cbca18c6d61eff1432c88dcbe6e53454374fa6f97107ee9314150d5bacd5eebaefee4e8a894a2a8931308bb0f623953c5331787320fa23", 0x8b}, {&(0x7f0000001440)="9c8edf4bbdb08b238f8924e1a08e60a3201afb7199784652d5449d2713b5478481a9c150e94cdf29fc7c80ccecf5cb6606b251a5461dc944698e693976f4d2d217dd40c49acfa2020b383d7345f91f8b061d00505fbd32cf6ad49814b08fd2346ec7ecbc7213db9f0aaa9396aac17c861e435202089539b9b15d79eebae2825ac08598da41590bf0cf715e34a6e50bf51329632105796ea690435c24a7189dedc553e0283f3a53fb2a43b55c", 0xac}, {&(0x7f0000001500)="fb9aabdbeae71aa3182bfd46c2d9b1939f2c030c2b4bd4c5c44e6d9373d0be377df5dd7ca97a9df3d5feeb9360176dcd2058e7a487554e70eaf7cfedc105403674cf80689c8e9368886131ac3862c01675dcd9a45840250c49a43e89243dedc8620b1a2d10e400af2c1aea28514b65449216de492d8dddb008efbabec77522dfe4", 0x81}, {&(0x7f00000015c0)="4ef41d8ac7f8e4857a75449b3b00382612b9f3e8108897e88853f44e5fce2569280f4e6654e823f18c7ef7c87188f12d7616e132c490b1804a75dfceb881e7b7c655b33ecd629ff58b291e3ac469ec67e851664fb7c1f31b11637f8217276523bef39d0440e973866973bc", 0x6b}, {&(0x7f0000001640)="5e0ab2de16834307bcd8f942f9a4033b4bda41aaa0f91de255555b41d43a30fa682a93f0ecef6bdd527396482e0fa32a1fc929d7dc70bdb89035ff3c0f8159781ec2637a4cc703bd76cc5e6afc6467b242e4dcf38c56fe1d5c71ca7387", 0x5d}], 0x7, &(0x7f0000001740)=[@txtime={{0x18, 0x1, 0x3d, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x80000001}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffff9}}, @mark={{0x14, 0x1, 0x24, 0x8000}}], 0x60}, 0x81) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000001340)={0x2, 0x1000, &(0x7f0000000340)="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"}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r2, 0x3b8c, &(0x7f0000000300)={0x30, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1000, 0x0}) fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000040)) 362.920438ms ago: executing program 5 (id=577): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x65, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x1000000, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e20fffc}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@rand_addr=0x64010102}, {@remote, 0x40000000}, {@private=0xa010101}, {@private, 0x800}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0) 362.688463ms ago: executing program 5 (id=578): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0xf72cb191e650caa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000500), 0x800000000ffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$VIDIOC_QBUF(r1, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x6, 0x4, 0x4, 0x0, {}, {0x0, 0x0, 0x96, 0x0, 0x0, 0xa, "fd0f09a2"}, 0x5, 0x2, {}, 0x80000}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000700, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89df3b7fbebffe60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x31]}}) (fail_nth: 56) 137.712114ms ago: executing program 5 (id=579): ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd26, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x29, 0x5, 0x8, 0x5a, 0x2c, @remote, @private0, 0x10, 0x7800, 0x11cdc, 0x3}}) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x100, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r2, 0x0, 0x48}}, 0x20}, 0x1, 0x0, 0x0, 0x44001}, 0x8040) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r4, &(0x7f00000064c0)=[{{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x8004}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001500)=""/4112, 0x1010}, {&(0x7f0000000100)=""/7, 0x7}, {&(0x7f0000000080)=""/82, 0x52}, {&(0x7f0000000340)=""/99, 0x63}, {&(0x7f0000000200)=""/209, 0xd1}, {&(0x7f0000000300)=""/24, 0x18}], 0x6}, 0x400000}, {{0x0, 0x0, 0x0}}], 0x4, 0x30100, 0x0) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x7, 0x5, 0x41, 0x8001, 0x56f7, 0x2004cb, 0xffffffdfffffffff, 0xa1d, 0x7, 0x100005, 0x7c, 0x1, 0x2, 0x6de30b4], 0x3332d000, 0x202}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0xffff1000, 0xe000, 0x0, 0x77, 0x0, 0x3, 0xcb, 0x2, 0x0, 0x6, 0x6, 0xf4}, {0x36b002, 0xdddd1000, 0x3, 0xeb, 0x2, 0x0, 0x0, 0xff, 0x4, 0x0, 0x3}, {0xeeee0000, 0xc000, 0xe, 0x0, 0x7, 0xc4, 0x5, 0x1, 0x55, 0x3, 0x4, 0xfc}, {0x1, 0x0, 0x9, 0x4, 0x81, 0x2, 0xa, 0x0, 0x3, 0x0, 0x9}, {0x0, 0xffff1000, 0x9, 0x1, 0x0, 0x4, 0x2, 0x6, 0x12, 0x34, 0xff}, {0xffff1000, 0x1, 0x0, 0x78, 0x8, 0x8, 0x2, 0x1c, 0xa3, 0xff, 0x5}, {0xeeee8000, 0xdddd1000, 0xa, 0x7, 0x0, 0x0, 0x7, 0x20, 0x0, 0x23}, {0x0, 0x6000, 0xa, 0x0, 0xa4, 0x7, 0x8, 0x40, 0x24, 0x0, 0x0, 0xfe}, {0x80a0000, 0x5}, {0x3000, 0xfffd}, 0xddf8ffdb, 0x0, 0x0, 0x120, 0x0, 0xf801, 0xdddd1000, [0x80000001, 0xffffffffffffffff, 0xfffffdffffffffff, 0xfffffffeffffffff]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000340)={0x2, &(0x7f0000000040)=[{0x35, 0x0, 0x6}, {0xa, 0x0, 0xfd}]}) 2.901258ms ago: executing program 4 (id=580): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x2, @rand_addr=0x64010101}, 0x10) listen(r1, 0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f680, 0x0, 0x39d}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000099e7000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000004850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r2, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_GET_PROPERTY(r3, 0x80106f53, &(0x7f0000000040)={0x20, &(0x7f0000001240)=[{0x1f, '\x00', @data=0xc, 0x7}, {0x6, '\x00', @buffer={"f8c042d7a8781c094069bb0ebdee0ef4186c06dcf1c52699f69880b0d7000004", 0x20}, 0x6}]}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x8884}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x3, 0x10000, 0x6, 0x7, 0x7}, 0x1}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x46f83}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x40000) 0s ago: executing program 5 (id=581): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000040)={0xa, 0x4}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x281, 0x0, 0xf7}]}) mkdir(&(0x7f00000001c0)='./file1\x00', 0xb) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) getresuid(&(0x7f0000000100)=0x0, &(0x7f0000000180), &(0x7f0000000200)) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}, {@workdir={'workdir', 0x3d, './bus'}}, {@volatile}, {@volatile}, {@redirect_dir_off}, {@metacopy_off}, {@metacopy_off}], [{@fowner_eq={'fowner', 0x3d, r3}}, {@context={'context', 0x3d, 'root'}}]}) r4 = open(&(0x7f0000000040)='./file1\x00', 0x808400, 0x43) chdir(&(0x7f00000003c0)='./bus\x00') unlink(&(0x7f0000000140)='./file0\x00') mkdirat(r4, &(0x7f0000000340)='./file0\x00', 0xf3) open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x9a) kernel console output (not intermixed with test programs): 8021q: adding VLAN 0 to HW filter on device eth4 [ 81.162279][ T7032] Invalid logical block size (33554432) [ 81.202265][ T5538] hsr_slave_0: left promiscuous mode [ 81.217613][ T5538] hsr_slave_1: left promiscuous mode [ 81.220565][ T7034] SELinux: policydb string does not match my string SE Linux [ 81.220629][ T5538] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.224402][ T7034] SELinux: failed to load policy [ 81.226644][ T5538] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.240369][ T5538] veth1_macvtap: left promiscuous mode [ 81.242593][ T5538] veth0_macvtap: left promiscuous mode [ 81.244998][ T5538] veth1_vlan: left promiscuous mode [ 81.249242][ T5538] veth0_vlan: left promiscuous mode [ 81.272724][ T7036] netlink: 16 bytes leftover after parsing attributes in process `syz.3.380'. [ 81.400433][ T5538] team0 (unregistering): Port device team_slave_1 removed [ 81.426812][ T5538] team0 (unregistering): Port device team_slave_0 removed [ 81.555080][ T849] cfg80211: failed to load regulatory.db [ 81.578686][ T6982] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.581224][ T6982] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.583631][ T6982] bridge_slave_0: entered allmulticast mode [ 81.587251][ T6982] bridge_slave_0: entered promiscuous mode [ 81.590829][ T6982] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.593216][ T6982] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.595786][ T6982] bridge_slave_1: entered allmulticast mode [ 81.599204][ T6982] bridge_slave_1: entered promiscuous mode [ 81.609477][ T7036] netlink: 16 bytes leftover after parsing attributes in process `syz.3.380'. [ 81.680703][ T6982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.699534][ T6982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.760327][ T6982] team0: Port device team_slave_0 added [ 81.764887][ T6982] team0: Port device team_slave_1 added [ 81.809819][ T6982] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.812116][ T6982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.823999][ T6982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.829237][ T6982] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.831809][ T6982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.845356][ T6982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.904578][ T6982] hsr_slave_0: entered promiscuous mode [ 81.908118][ T6982] hsr_slave_1: entered promiscuous mode [ 81.912076][ T5438] 8021q: adding VLAN 0 to HW filter on device eth5 [ 81.927142][ T5735] Bluetooth: hci2: command tx timeout [ 82.160848][ T6982] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 82.171250][ T6982] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.174350][ T6982] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 82.178419][ T6982] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.181447][ T6982] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 82.185790][ T6982] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.188732][ T6982] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 82.193876][ T6982] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.252004][ T6982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.272209][ T6982] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.282891][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.285300][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.292665][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.294848][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.310454][ T7070] loop3: detected capacity change from 0 to 7 [ 82.319956][ T7070] loop3: p1 p4 [ 82.321185][ T7070] loop3: partition table partially beyond EOD, truncated [ 82.327863][ T7070] FAULT_INJECTION: forcing a failure. [ 82.327863][ T7070] name failslab, interval 1, probability 0, space 0, times 0 [ 82.331794][ T7070] CPU: 2 UID: 0 PID: 7070 Comm: syz.0.386 Tainted: G L syzkaller #0 PREEMPT(full) [ 82.331812][ T7070] Tainted: [L]=SOFTLOCKUP [ 82.331816][ T7070] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 82.331827][ T7070] Call Trace: [ 82.331832][ T7070] [ 82.331837][ T7070] dump_stack_lvl+0x100/0x190 [ 82.331868][ T7070] should_fail_ex.cold+0x5/0xa [ 82.331883][ T7070] should_failslab+0xc2/0x120 [ 82.331898][ T7070] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 82.331914][ T7070] ? add_partition+0x529/0xa60 [ 82.331938][ T7070] kmemdup_noprof+0x29/0x60 [ 82.331951][ T7070] add_partition+0x529/0xa60 [ 82.331969][ T7070] bdev_disk_changed+0xc6a/0x1260 [ 82.331989][ T7070] ? __pfx_bdev_disk_changed+0x10/0x10 [ 82.332005][ T7070] ? kobject_uevent_env+0x2e7/0x18b0 [ 82.332055][ T7070] loop_reread_partitions+0x68/0xe0 [ 82.332127][ T7070] loop_configure+0x1120/0x15b0 [ 82.332152][ T7070] ? __pfx_loop_configure+0x10/0x10 [ 82.332178][ T7070] lo_ioctl+0xcf3/0x1bc0 [ 82.332199][ T7070] ? __pfx_lo_ioctl+0x10/0x10 [ 82.332213][ T7070] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 82.332233][ T7070] ? kasan_quarantine_put+0x104/0x240 [ 82.332245][ T7070] ? blk_get_meta_cap+0xd4/0x6c0 [ 82.332260][ T7070] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 82.332275][ T7070] ? blkdev_common_ioctl+0x515/0x2b80 [ 82.332300][ T7070] ? __fget_files+0x215/0x3d0 [ 82.332318][ T7070] ? __pfx_lo_ioctl+0x10/0x10 [ 82.332333][ T7070] blkdev_ioctl+0x5ad/0x6f0 [ 82.332343][ T7070] ? __pfx_blkdev_ioctl+0x10/0x10 [ 82.332354][ T7070] ? selinux_file_ioctl+0x13b/0x290 [ 82.332370][ T7070] ? selinux_file_ioctl+0xb6/0x290 [ 82.332386][ T7070] ? __pfx_blkdev_ioctl+0x10/0x10 [ 82.332397][ T7070] __x64_sys_ioctl+0x18e/0x210 [ 82.332416][ T7070] do_syscall_64+0x115/0x870 [ 82.332436][ T7070] ? clear_bhb_loop+0x70/0xc0 [ 82.332449][ T7070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.332460][ T7070] RIP: 0033:0x7fa2a599e0d9 [ 82.332475][ T7070] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.332486][ T7070] RSP: 002b:00007fa2a67f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 82.332503][ T7070] RAX: ffffffffffffffda RBX: 00007fa2a5c25fa0 RCX: 00007fa2a599e0d9 [ 82.332510][ T7070] RDX: 00002000000002c0 RSI: 0000000000004c0a RDI: 0000000000000003 [ 82.332517][ T7070] RBP: 00007fa2a67f1090 R08: 0000000000000000 R09: 0000000000000000 [ 82.332523][ T7070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 82.332529][ T7070] R13: 00007fa2a5c26038 R14: 00007fa2a5c25fa0 R15: 00007ffc13517838 [ 82.332542][ T7070] [ 82.332587][ T7070] loop3: p1 could not be added: -ENOMEM [ 82.475677][ T5908] udevd[5908]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 82.533264][ T7083] Invalid logical block size (50331648) [ 82.581856][ T6982] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.771624][ T7099] FAULT_INJECTION: forcing a failure. [ 82.771624][ T7099] name failslab, interval 1, probability 0, space 0, times 0 [ 82.777347][ T7099] CPU: 2 UID: 0 PID: 7099 Comm: syz.3.392 Tainted: G L syzkaller #0 PREEMPT(full) [ 82.777406][ T7099] Tainted: [L]=SOFTLOCKUP [ 82.777414][ T7099] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 82.777440][ T7099] Call Trace: [ 82.777454][ T7099] [ 82.777462][ T7099] dump_stack_lvl+0x100/0x190 [ 82.777507][ T7099] should_fail_ex.cold+0x5/0xa [ 82.777530][ T7099] should_failslab+0xc2/0x120 [ 82.777554][ T7099] __kmalloc_cache_noprof+0x91/0x6c0 [ 82.777574][ T7099] ? sctp_add_bind_addr+0xae/0x3e0 [ 82.777651][ T7099] sctp_add_bind_addr+0xae/0x3e0 [ 82.777677][ T7099] sctp_copy_local_addr_list+0x349/0x550 [ 82.777699][ T7099] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 82.777720][ T7099] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 82.777743][ T7099] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 82.777769][ T7099] sctp_bind_addr_copy+0xe0/0x530 [ 82.777802][ T7099] sctp_connect_new_asoc+0x1c9/0x770 [ 82.777828][ T7099] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 82.777861][ T7099] sctp_sendmsg+0x1743/0x22e0 [ 82.777890][ T7099] ? __pfx_sctp_sendmsg+0x10/0x10 [ 82.777909][ T7099] ? sock_has_perm+0x25a/0x2f0 [ 82.777940][ T7099] ? __pfx_sock_has_perm+0x10/0x10 [ 82.777979][ T7099] ? __pfx_sctp_sendmsg+0x10/0x10 [ 82.778001][ T7099] inet_sendmsg+0x11c/0x140 [ 82.778054][ T7099] ____sys_sendmsg+0x9c9/0xbe0 [ 82.778087][ T7099] ? __pfx_inet_sendmsg+0x10/0x10 [ 82.778109][ T7099] ? __pfx_____sys_sendmsg+0x10/0x10 [ 82.778149][ T7099] ___sys_sendmsg+0x190/0x1e0 [ 82.778175][ T7099] ? __pfx____sys_sendmsg+0x10/0x10 [ 82.778196][ T7099] ? __lock_acquire+0x49f/0x1a40 [ 82.778218][ T7099] ? get_pid_task+0x106/0x250 [ 82.778263][ T7099] __sys_sendmsg+0x160/0x210 [ 82.778289][ T7099] ? __pfx___sys_sendmsg+0x10/0x10 [ 82.778320][ T7099] do_syscall_64+0x115/0x870 [ 82.778369][ T7099] ? clear_bhb_loop+0x70/0xc0 [ 82.778390][ T7099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.778408][ T7099] RIP: 0033:0x7f937a39e0d9 [ 82.778432][ T7099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.778449][ T7099] RSP: 002b:00007f937b2c1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 82.778478][ T7099] RAX: ffffffffffffffda RBX: 00007f937a625fa0 RCX: 00007f937a39e0d9 [ 82.778490][ T7099] RDX: 0000000000008050 RSI: 00002000000000c0 RDI: 0000000000000004 [ 82.778501][ T7099] RBP: 00007f937b2c1090 R08: 0000000000000000 R09: 0000000000000000 [ 82.778512][ T7099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 82.778523][ T7099] R13: 00007f937a626038 R14: 00007f937a625fa0 R15: 00007fff0b2bb978 [ 82.778548][ T7099] [ 82.813986][ T6982] veth0_vlan: entered promiscuous mode [ 82.908219][ T5735] Bluetooth: hci0: Malformed LE Event: 0x0b [ 82.913550][ T6982] veth1_vlan: entered promiscuous mode [ 82.954258][ T6982] veth0_macvtap: entered promiscuous mode [ 82.962876][ T6982] veth1_macvtap: entered promiscuous mode [ 82.983875][ T6982] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.994328][ T6982] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.034962][ T849] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 83.042723][ T5538] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.061192][ T5538] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.066876][ T5538] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.070460][ T5538] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.148437][ T535] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.154546][ T535] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.155943][ T42] kauditd_printk_skb: 28 callbacks suppressed [ 83.155962][ T42] audit: type=1400 audit(1787084023.112:689): avc: denied { mounton } for pid=7107 comm="syz.3.395" path="/123/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 83.183067][ T535] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.190052][ T535] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.205048][ T42] audit: type=1400 audit(1787084023.162:690): avc: denied { mounton } for pid=6982 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2834 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 83.205349][ T849] usb 5-1: Using ep0 maxpacket: 8 [ 83.217811][ T849] usb 5-1: New USB device found, idVendor=ee8d, idProduct=001e, bcdDevice=61.00 [ 83.223022][ T849] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 83.226807][ T849] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 83.230976][ T849] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 83.235046][ T849] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 83.240663][ T849] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 83.246228][ T849] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.281883][ T7114] loop0: detected capacity change from 0 to 4096 [ 83.361303][ T7114] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 83.368832][ T7114] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 83.373362][ T7114] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 83.377155][ T7114] ldm_validate_privheads(): Cannot find PRIVHEAD 3. [ 83.379450][ T7114] ldm_validate_privheads(): Primary and backup PRIVHEADs don't match. [ 83.382307][ T7114] loop0: [ 83.581346][ T7119] Invalid logical block size (67108864) [ 83.630170][ T42] audit: type=1400 audit(1787084023.592:691): avc: denied { write } for pid=7121 comm="syz.4.398" name="uvc.usb0" dev="configfs" ino=10004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 83.652199][ T42] audit: type=1400 audit(1787084023.592:692): avc: denied { write } for pid=7121 comm="syz.4.398" name="uvc.usb0" dev="configfs" ino=10004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 83.679651][ T42] audit: type=1400 audit(1787084023.642:693): avc: denied { mount } for pid=7124 comm="syz.4.399" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 83.702953][ T42] audit: type=1400 audit(1787084023.662:694): avc: denied { unmount } for pid=6982 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 83.736035][ T7128] FAULT_INJECTION: forcing a failure. [ 83.736035][ T7128] name failslab, interval 1, probability 0, space 0, times 0 [ 83.740128][ T7128] CPU: 1 UID: 0 PID: 7128 Comm: syz.4.400 Tainted: G L syzkaller #0 PREEMPT(full) [ 83.740146][ T7128] Tainted: [L]=SOFTLOCKUP [ 83.740151][ T7128] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 83.740157][ T7128] Call Trace: [ 83.740174][ T7128] [ 83.740180][ T7128] dump_stack_lvl+0x100/0x190 [ 83.740198][ T7128] should_fail_ex.cold+0x5/0xa [ 83.740213][ T7128] should_failslab+0xc2/0x120 [ 83.740228][ T7128] __kmalloc_cache_noprof+0x91/0x6c0 [ 83.740240][ T7128] ? sctp_add_bind_addr+0xae/0x3e0 [ 83.740264][ T7128] sctp_add_bind_addr+0xae/0x3e0 [ 83.740282][ T7128] sctp_copy_local_addr_list+0x349/0x550 [ 83.740296][ T7128] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 83.740308][ T7128] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 83.740321][ T7128] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 83.740336][ T7128] sctp_bind_addr_copy+0xe0/0x530 [ 83.740356][ T7128] sctp_connect_new_asoc+0x1c9/0x770 [ 83.740371][ T7128] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 83.740390][ T7128] sctp_sendmsg+0x1743/0x22e0 [ 83.740407][ T7128] ? __pfx_sctp_sendmsg+0x10/0x10 [ 83.740419][ T7128] ? sock_has_perm+0x25a/0x2f0 [ 83.740433][ T7128] ? __pfx_sock_has_perm+0x10/0x10 [ 83.740455][ T7128] ? __pfx_sctp_sendmsg+0x10/0x10 [ 83.740469][ T7128] inet_sendmsg+0x11c/0x140 [ 83.740483][ T7128] ____sys_sendmsg+0x9c9/0xbe0 [ 83.740497][ T7128] ? __pfx_inet_sendmsg+0x10/0x10 [ 83.740510][ T7128] ? __pfx_____sys_sendmsg+0x10/0x10 [ 83.740530][ T7128] ___sys_sendmsg+0x190/0x1e0 [ 83.740545][ T7128] ? __pfx____sys_sendmsg+0x10/0x10 [ 83.740558][ T7128] ? __lock_acquire+0x49f/0x1a40 [ 83.740572][ T7128] ? get_pid_task+0x106/0x250 [ 83.740597][ T7128] __sys_sendmsg+0x160/0x210 [ 83.740608][ T7128] ? __pfx___sys_sendmsg+0x10/0x10 [ 83.740626][ T7128] do_syscall_64+0x115/0x870 [ 83.740642][ T7128] ? clear_bhb_loop+0x70/0xc0 [ 83.740655][ T7128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.740666][ T7128] RIP: 0033:0x7fa91ed9e0d9 [ 83.740677][ T7128] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.740687][ T7128] RSP: 002b:00007fa91fcef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 83.740700][ T7128] RAX: ffffffffffffffda RBX: 00007fa91f025fa0 RCX: 00007fa91ed9e0d9 [ 83.740706][ T7128] RDX: 0000000000008050 RSI: 00002000000000c0 RDI: 0000000000000004 [ 83.740713][ T7128] RBP: 00007fa91fcef090 R08: 0000000000000000 R09: 0000000000000000 [ 83.740719][ T7128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 83.740725][ T7128] R13: 00007fa91f026038 R14: 00007fa91f025fa0 R15: 00007ffed8423058 [ 83.740739][ T7128] [ 83.870950][ T7130] netlink: 28 bytes leftover after parsing attributes in process `syz.4.401'. [ 83.930231][ T7133] netlink: 4 bytes leftover after parsing attributes in process `syz.4.402'. [ 83.954711][ T7133] hsr_slave_1 (unregistering): left promiscuous mode [ 84.000729][ T42] audit: type=1400 audit(1787084023.962:695): avc: denied { unmount } for pid=5724 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 84.008231][ T5735] Bluetooth: hci2: command tx timeout [ 84.066802][ T7137] usbtmc 5-1:16.0: simple usb_control_msg failed -32 [ 84.071669][ T6475] usb 5-1: USB disconnect, device number 8 [ 84.621876][ T7142] jffs2: notice: (7142) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 84.633989][ T42] audit: type=1400 audit(1787084024.592:696): avc: denied { write } for pid=7140 comm="syz.3.406" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 84.656759][ T42] audit: type=1400 audit(1787084024.592:697): avc: denied { add_name } for pid=7140 comm="syz.3.406" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 84.671255][ T42] audit: type=1400 audit(1787084024.602:698): avc: denied { write } for pid=7140 comm="syz.3.406" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 84.677186][ T7143] FAULT_INJECTION: forcing a failure. [ 84.677186][ T7143] name failslab, interval 1, probability 0, space 0, times 0 [ 84.686331][ T7143] CPU: 3 UID: 0 PID: 7143 Comm: syz.0.405 Tainted: G L syzkaller #0 PREEMPT(full) [ 84.686362][ T7143] Tainted: [L]=SOFTLOCKUP [ 84.686369][ T7143] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 84.686380][ T7143] Call Trace: [ 84.686387][ T7143] [ 84.686394][ T7143] dump_stack_lvl+0x100/0x190 [ 84.686426][ T7143] should_fail_ex.cold+0x5/0xa [ 84.686450][ T7143] should_failslab+0xc2/0x120 [ 84.686474][ T7143] kmem_cache_alloc_noprof+0x91/0x6a0 [ 84.686497][ T7143] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 84.686525][ T7143] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 84.686559][ T7143] mmu_topup_memory_caches+0x11a/0x170 [ 84.686588][ T7143] kvm_mmu_load+0xe2/0x2570 [ 84.686609][ T7143] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 84.686627][ T7143] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 84.686649][ T7143] ? __pfx_kvm_mmu_load+0x10/0x10 [ 84.686669][ T7143] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 84.686692][ T7143] ? kvm_check_and_inject_events+0x873/0x12a0 [ 84.686715][ T7143] ? record_steal_time+0x440/0xbb0 [ 84.686736][ T7143] vcpu_run+0x3aaa/0x5de0 [ 84.686770][ T7143] ? trace_event_raw_event_kvm_fpu+0x146/0x200 [ 84.686792][ T7143] ? __pfx_vcpu_run+0x10/0x10 [ 84.686824][ T7143] ? rcu_is_watching+0x12/0xc0 [ 84.686855][ T7143] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 84.686881][ T7143] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 84.686915][ T7143] kvm_vcpu_ioctl+0x730/0x1700 [ 84.686939][ T7143] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 84.686960][ T7143] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 84.686985][ T7143] ? do_vfs_ioctl+0x226/0x13e0 [ 84.687024][ T7143] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 84.687052][ T7143] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 84.687088][ T7143] ? __fget_files+0x215/0x3d0 [ 84.687109][ T7143] ? hook_file_ioctl_common+0x140/0x440 [ 84.687144][ T7143] ? selinux_file_ioctl+0x13b/0x290 [ 84.687170][ T7143] ? selinux_file_ioctl+0xb6/0x290 [ 84.687199][ T7143] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 84.687222][ T7143] __x64_sys_ioctl+0x18e/0x210 [ 84.687254][ T7143] do_syscall_64+0x115/0x870 [ 84.687280][ T7143] ? clear_bhb_loop+0x70/0xc0 [ 84.687303][ T7143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.687321][ T7143] RIP: 0033:0x7fa2a599e0d9 [ 84.687337][ T7143] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.687487][ T7143] RSP: 002b:00007fa2a67f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 84.687507][ T7143] RAX: ffffffffffffffda RBX: 00007fa2a5c25fa0 RCX: 00007fa2a599e0d9 [ 84.687516][ T7143] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009 [ 84.687525][ T7143] RBP: 00007fa2a67f1090 R08: 0000000000000000 R09: 0000000000000000 [ 84.687534][ T7143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 84.687548][ T7143] R13: 00007fa2a5c26038 R14: 00007fa2a5c25fa0 R15: 00007ffc13517838 [ 84.687571][ T7143] [ 85.022702][ T7155] loop3: detected capacity change from 0 to 7 [ 85.027814][ T7155] loop3: p1 p4 [ 85.029372][ T7155] loop3: partition table partially beyond EOD, truncated [ 85.032663][ T7155] FAULT_INJECTION: forcing a failure. [ 85.032663][ T7155] name failslab, interval 1, probability 0, space 0, times 0 [ 85.037465][ T7155] CPU: 2 UID: 0 PID: 7155 Comm: syz.0.410 Tainted: G L syzkaller #0 PREEMPT(full) [ 85.037483][ T7155] Tainted: [L]=SOFTLOCKUP [ 85.037487][ T7155] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.037495][ T7155] Call Trace: [ 85.037500][ T7155] [ 85.037507][ T7155] dump_stack_lvl+0x100/0x190 [ 85.037534][ T7155] should_fail_ex.cold+0x5/0xa [ 85.037555][ T7155] should_failslab+0xc2/0x120 [ 85.037576][ T7155] kmem_cache_alloc_noprof+0x91/0x6a0 [ 85.037594][ T7155] ? __asan_memcpy+0x3c/0x60 [ 85.037611][ T7155] ? __kernfs_new_node+0xd2/0xa10 [ 85.037651][ T7155] __kernfs_new_node+0xd2/0xa10 [ 85.037674][ T7155] ? stack_trace_save+0x8e/0xc0 [ 85.037686][ T7155] ? __pfx_stack_trace_save+0x10/0x10 [ 85.037704][ T7155] ? __pfx___kernfs_new_node+0x10/0x10 [ 85.037726][ T7155] ? stack_depot_save_flags+0x27/0x9d0 [ 85.037758][ T7155] ? find_held_lock+0x2b/0x80 [ 85.037788][ T7155] ? kernfs_root+0xee/0x2a0 [ 85.037807][ T7155] ? kernfs_root+0xee/0x2a0 [ 85.037833][ T7155] kernfs_create_dir_ns+0xa6/0x2b0 [ 85.037862][ T7155] sysfs_create_dir_ns+0x13a/0x2b0 [ 85.037883][ T7155] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 85.037898][ T7155] ? find_held_lock+0x2b/0x80 [ 85.037914][ T7155] ? kobject_add_internal+0x25f/0x930 [ 85.037933][ T7155] ? kobject_add_internal+0x25f/0x930 [ 85.037954][ T7155] ? do_raw_spin_unlock+0x145/0x1e0 [ 85.037975][ T7155] kobject_add_internal+0x2c8/0x930 [ 85.037996][ T7155] kobject_add+0x16a/0x1e0 [ 85.038014][ T7155] ? __pfx_kobject_add+0x10/0x10 [ 85.038031][ T7155] ? class_to_subsys+0x10f/0x150 [ 85.038064][ T7155] ? kobject_put+0xb9/0x640 [ 85.038077][ T7155] ? _raw_spin_unlock+0x28/0x50 [ 85.038101][ T7155] ? device_add+0x253/0x1970 [ 85.038123][ T7155] device_add+0x294/0x1970 [ 85.038144][ T7155] ? __pfx_device_add+0x10/0x10 [ 85.038162][ T7155] ? add_partition+0x529/0xa60 [ 85.038192][ T7155] ? __asan_memcpy+0x3c/0x60 [ 85.038212][ T7155] add_partition+0x59e/0xa60 [ 85.038240][ T7155] bdev_disk_changed+0xc6a/0x1260 [ 85.038266][ T7155] ? __pfx_bdev_disk_changed+0x10/0x10 [ 85.038288][ T7155] ? kobject_uevent_env+0x2e7/0x18b0 [ 85.038315][ T7155] loop_reread_partitions+0x68/0xe0 [ 85.038347][ T7155] loop_configure+0x1120/0x15b0 [ 85.038381][ T7155] ? __pfx_loop_configure+0x10/0x10 [ 85.038425][ T7155] lo_ioctl+0xcf3/0x1bc0 [ 85.038458][ T7155] ? __pfx_lo_ioctl+0x10/0x10 [ 85.038480][ T7155] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 85.038498][ T7155] ? kasan_quarantine_put+0x104/0x240 [ 85.038516][ T7155] ? blk_get_meta_cap+0xd4/0x6c0 [ 85.038541][ T7155] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 85.038565][ T7155] ? blkdev_common_ioctl+0x515/0x2b80 [ 85.038603][ T7155] ? __fget_files+0x215/0x3d0 [ 85.038623][ T7155] ? __pfx_lo_ioctl+0x10/0x10 [ 85.038646][ T7155] blkdev_ioctl+0x5ad/0x6f0 [ 85.038659][ T7155] ? __pfx_blkdev_ioctl+0x10/0x10 [ 85.038674][ T7155] ? selinux_file_ioctl+0x13b/0x290 [ 85.038697][ T7155] ? selinux_file_ioctl+0xb6/0x290 [ 85.038823][ T7155] ? __pfx_blkdev_ioctl+0x10/0x10 [ 85.038838][ T7155] __x64_sys_ioctl+0x18e/0x210 [ 85.038865][ T7155] do_syscall_64+0x115/0x870 [ 85.038889][ T7155] ? clear_bhb_loop+0x70/0xc0 [ 85.038909][ T7155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.038926][ T7155] RIP: 0033:0x7fa2a599e0d9 [ 85.038936][ T7155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.038953][ T7155] RSP: 002b:00007fa2a67f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 85.038971][ T7155] RAX: ffffffffffffffda RBX: 00007fa2a5c25fa0 RCX: 00007fa2a599e0d9 [ 85.038982][ T7155] RDX: 00002000000002c0 RSI: 0000000000004c0a RDI: 0000000000000003 [ 85.038992][ T7155] RBP: 00007fa2a67f1090 R08: 0000000000000000 R09: 0000000000000000 [ 85.039002][ T7155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 85.039010][ T7155] R13: 00007fa2a5c26038 R14: 00007fa2a5c25fa0 R15: 00007ffc13517838 [ 85.039029][ T7155] [ 85.039144][ T7155] kobject: kobject_add_internal failed for loop3p1 (error: -12 parent: loop3) [ 85.187069][ T7155] loop3: p1 could not be added: -ENOMEM [ 85.241729][ T5908] udevd[5908]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 85.250179][ T7157] support for cryptoloop has been removed. Use dm-crypt instead. [ 85.317928][ T7159] loop0: detected capacity change from 0 to 4096 [ 85.385888][ T7159] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 85.389410][ T7159] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 85.392500][ T7159] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 85.395955][ T7159] ldm_validate_privheads(): Cannot find PRIVHEAD 3. [ 85.398219][ T7159] ldm_validate_privheads(): Primary and backup PRIVHEADs don't match. [ 85.401756][ T7159] loop0: [ 85.676040][ T7167] FAULT_INJECTION: forcing a failure. [ 85.676040][ T7167] name failslab, interval 1, probability 0, space 0, times 0 [ 85.680984][ T7167] CPU: 2 UID: 0 PID: 7167 Comm: syz.3.416 Tainted: G L syzkaller #0 PREEMPT(full) [ 85.681011][ T7167] Tainted: [L]=SOFTLOCKUP [ 85.681017][ T7167] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.681027][ T7167] Call Trace: [ 85.681034][ T7167] [ 85.681040][ T7167] dump_stack_lvl+0x100/0x190 [ 85.681074][ T7167] should_fail_ex.cold+0x5/0xa [ 85.681096][ T7167] should_failslab+0xc2/0x120 [ 85.681119][ T7167] kmem_cache_alloc_noprof+0x91/0x6a0 [ 85.681141][ T7167] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 85.681166][ T7167] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 85.681193][ T7167] mmu_topup_memory_caches+0x11a/0x170 [ 85.681218][ T7167] kvm_mmu_load+0xe2/0x2570 [ 85.681240][ T7167] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 85.681258][ T7167] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 85.681280][ T7167] ? __pfx_kvm_mmu_load+0x10/0x10 [ 85.681300][ T7167] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 85.681320][ T7167] ? kvm_check_and_inject_events+0x873/0x12a0 [ 85.681352][ T7167] ? record_steal_time+0x440/0xbb0 [ 85.681383][ T7167] vcpu_run+0x3aaa/0x5de0 [ 85.681414][ T7167] ? trace_event_raw_event_kvm_fpu+0x146/0x200 [ 85.681436][ T7167] ? __pfx_vcpu_run+0x10/0x10 [ 85.681468][ T7167] ? rcu_is_watching+0x12/0xc0 [ 85.681496][ T7167] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 85.681520][ T7167] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 85.681549][ T7167] kvm_vcpu_ioctl+0x730/0x1700 [ 85.681570][ T7167] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 85.681589][ T7167] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 85.681611][ T7167] ? do_vfs_ioctl+0x226/0x13e0 [ 85.681637][ T7167] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 85.681662][ T7167] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 85.681695][ T7167] ? __fget_files+0x215/0x3d0 [ 85.681714][ T7167] ? hook_file_ioctl_common+0x140/0x440 [ 85.681739][ T7167] ? selinux_file_ioctl+0x13b/0x290 [ 85.681761][ T7167] ? selinux_file_ioctl+0xb6/0x290 [ 85.681786][ T7167] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 85.681806][ T7167] __x64_sys_ioctl+0x18e/0x210 [ 85.681832][ T7167] do_syscall_64+0x115/0x870 [ 85.681857][ T7167] ? clear_bhb_loop+0x70/0xc0 [ 85.681878][ T7167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.681895][ T7167] RIP: 0033:0x7f937a39e0d9 [ 85.681910][ T7167] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.681926][ T7167] RSP: 002b:00007f937b2c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 85.681945][ T7167] RAX: ffffffffffffffda RBX: 00007f937a625fa0 RCX: 00007f937a39e0d9 [ 85.681955][ T7167] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009 [ 85.681965][ T7167] RBP: 00007f937b2c1090 R08: 0000000000000000 R09: 0000000000000000 [ 85.681975][ T7167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 85.681984][ T7167] R13: 00007f937a626038 R14: 00007f937a625fa0 R15: 00007fff0b2bb978 [ 85.682006][ T7167] [ 86.033231][ T7182] loop3: detected capacity change from 0 to 7 [ 86.041418][ T7182] loop3: p1 p4 [ 86.043026][ T7182] loop3: partition table partially beyond EOD, truncated [ 86.047036][ T7182] FAULT_INJECTION: forcing a failure. [ 86.047036][ T7182] name failslab, interval 1, probability 0, space 0, times 0 [ 86.052326][ T7182] CPU: 3 UID: 0 PID: 7182 Comm: syz.3.420 Tainted: G L syzkaller #0 PREEMPT(full) [ 86.052345][ T7182] Tainted: [L]=SOFTLOCKUP [ 86.052349][ T7182] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.052356][ T7182] Call Trace: [ 86.052360][ T7182] [ 86.052365][ T7182] dump_stack_lvl+0x100/0x190 [ 86.052384][ T7182] should_fail_ex.cold+0x5/0xa [ 86.052398][ T7182] should_failslab+0xc2/0x120 [ 86.052414][ T7182] kmem_cache_alloc_noprof+0x91/0x6a0 [ 86.052427][ T7182] ? __asan_memcpy+0x3c/0x60 [ 86.052438][ T7182] ? __kernfs_new_node+0xd2/0xa10 [ 86.052456][ T7182] __kernfs_new_node+0xd2/0xa10 [ 86.052474][ T7182] ? __pfx___kernfs_new_node+0x10/0x10 [ 86.052492][ T7182] ? find_held_lock+0x2b/0x80 [ 86.052502][ T7182] ? kernfs_root+0xee/0x2a0 [ 86.052515][ T7182] ? kernfs_root+0xee/0x2a0 [ 86.052531][ T7182] kernfs_new_node+0x117/0x150 [ 86.052549][ T7182] kernfs_create_link+0xcc/0x240 [ 86.052561][ T7182] sysfs_do_create_link_sd+0x90/0x140 [ 86.052576][ T7182] sysfs_create_link+0x61/0xc0 [ 86.052590][ T7182] device_add+0x675/0x1970 [ 86.052604][ T7182] ? __pfx_device_add+0x10/0x10 [ 86.052616][ T7182] ? add_partition+0x529/0xa60 [ 86.052634][ T7182] ? __asan_memcpy+0x3c/0x60 [ 86.052646][ T7182] add_partition+0x59e/0xa60 [ 86.052664][ T7182] bdev_disk_changed+0xc6a/0x1260 [ 86.052685][ T7182] ? __pfx_bdev_disk_changed+0x10/0x10 [ 86.052700][ T7182] ? kobject_uevent_env+0x2e7/0x18b0 [ 86.052719][ T7182] loop_reread_partitions+0x68/0xe0 [ 86.052734][ T7182] loop_configure+0x1120/0x15b0 [ 86.052758][ T7182] ? __pfx_loop_configure+0x10/0x10 [ 86.052784][ T7182] lo_ioctl+0xcf3/0x1bc0 [ 86.052800][ T7182] ? __pfx_lo_ioctl+0x10/0x10 [ 86.052814][ T7182] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 86.052829][ T7182] ? kasan_quarantine_put+0x104/0x240 [ 86.052841][ T7182] ? blk_get_meta_cap+0xd4/0x6c0 [ 86.052852][ T7182] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 86.052866][ T7182] ? blkdev_common_ioctl+0x515/0x2b80 [ 86.052891][ T7182] ? __fget_files+0x215/0x3d0 [ 86.052904][ T7182] ? __pfx_lo_ioctl+0x10/0x10 [ 86.052919][ T7182] blkdev_ioctl+0x5ad/0x6f0 [ 86.052930][ T7182] ? __pfx_blkdev_ioctl+0x10/0x10 [ 86.052939][ T7182] ? selinux_file_ioctl+0x13b/0x290 [ 86.052955][ T7182] ? selinux_file_ioctl+0xb6/0x290 [ 86.052971][ T7182] ? __pfx_blkdev_ioctl+0x10/0x10 [ 86.052983][ T7182] __x64_sys_ioctl+0x18e/0x210 [ 86.053001][ T7182] do_syscall_64+0x115/0x870 [ 86.053017][ T7182] ? clear_bhb_loop+0x70/0xc0 [ 86.053030][ T7182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.053041][ T7182] RIP: 0033:0x7f937a39e0d9 [ 86.053052][ T7182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.053063][ T7182] RSP: 002b:00007f937b2c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 86.053074][ T7182] RAX: ffffffffffffffda RBX: 00007f937a625fa0 RCX: 00007f937a39e0d9 [ 86.053081][ T7182] RDX: 00002000000002c0 RSI: 0000000000004c0a RDI: 0000000000000003 [ 86.053088][ T7182] RBP: 00007f937b2c1090 R08: 0000000000000000 R09: 0000000000000000 [ 86.053094][ T7182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 86.053100][ T7182] R13: 00007f937a626038 R14: 00007f937a625fa0 R15: 00007fff0b2bb978 [ 86.053113][ T7182] [ 86.053251][ T7182] loop3: p1 could not be added: -ENOMEM [ 86.085395][ T5735] Bluetooth: hci2: command tx timeout [ 86.112394][ T5908] udevd[5908]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 86.182648][ T7186] Invalid logical block size (150994944) [ 86.297358][ T7188] XFS (loop3): SB validate failed with error -5. [ 86.381607][ T7201] batman_adv: batadv0: Adding interface: dummy0 [ 86.384373][ T7201] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.400870][ T7201] batman_adv: batadv0: Interface activated: dummy0 [ 86.437229][ T7203] netlink: 'syz.4.426': attribute type 21 has an invalid length. [ 86.449054][ T7201] batadv0: mtu less than device minimum [ 86.453377][ T7201] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 86.460707][ T7201] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 86.467036][ T7201] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 86.472374][ T7201] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 86.477627][ T7201] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 86.482939][ T7201] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 86.488461][ T7201] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 86.493903][ T7201] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 86.499157][ T7201] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 86.514948][ T7203] netlink: 'syz.4.426': attribute type 6 has an invalid length. [ 86.518340][ T7203] netlink: 132 bytes leftover after parsing attributes in process `syz.4.426'. [ 86.581195][ T7212] loop3: detected capacity change from 0 to 7 [ 86.591928][ T7212] loop3: p1 p4 [ 86.593056][ T7212] loop3: partition table partially beyond EOD, truncated [ 86.596929][ T7212] FAULT_INJECTION: forcing a failure. [ 86.596929][ T7212] name failslab, interval 1, probability 0, space 0, times 0 [ 86.600800][ T7212] CPU: 0 UID: 0 PID: 7212 Comm: syz.3.429 Tainted: G L syzkaller #0 PREEMPT(full) [ 86.600818][ T7212] Tainted: [L]=SOFTLOCKUP [ 86.600821][ T7212] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.600836][ T7212] Call Trace: [ 86.600843][ T7212] [ 86.600848][ T7212] dump_stack_lvl+0x100/0x190 [ 86.600879][ T7212] should_fail_ex.cold+0x5/0xa [ 86.600893][ T7212] should_failslab+0xc2/0x120 [ 86.600909][ T7212] kmem_cache_alloc_noprof+0x91/0x6a0 [ 86.600922][ T7212] ? kernfs_add_one+0x611/0xaa0 [ 86.600943][ T7212] ? kernfs_add_one+0x611/0xaa0 [ 86.600958][ T7212] ? __kernfs_new_node+0xd2/0xa10 [ 86.600975][ T7212] __kernfs_new_node+0xd2/0xa10 [ 86.600991][ T7212] ? kernfs_add_one+0x214/0xaa0 [ 86.601006][ T7212] ? __pfx___kernfs_new_node+0x10/0x10 [ 86.601024][ T7212] ? find_held_lock+0x2b/0x80 [ 86.601034][ T7212] ? kernfs_root+0xee/0x2a0 [ 86.601047][ T7212] ? kernfs_root+0xee/0x2a0 [ 86.601063][ T7212] kernfs_new_node+0x117/0x150 [ 86.601081][ T7212] kernfs_create_link+0xcc/0x240 [ 86.601093][ T7212] sysfs_do_create_link_sd+0x90/0x140 [ 86.601108][ T7212] sysfs_create_link+0x61/0xc0 [ 86.601122][ T7212] device_add+0x553/0x1970 [ 86.601146][ T7212] ? __pfx_device_add+0x10/0x10 [ 86.601158][ T7212] ? add_partition+0x529/0xa60 [ 86.601180][ T7212] ? __asan_memcpy+0x3c/0x60 [ 86.601192][ T7212] add_partition+0x59e/0xa60 [ 86.601210][ T7212] bdev_disk_changed+0xc6a/0x1260 [ 86.601231][ T7212] ? __pfx_bdev_disk_changed+0x10/0x10 [ 86.601246][ T7212] ? kobject_uevent_env+0x2e7/0x18b0 [ 86.601309][ T7212] loop_reread_partitions+0x68/0xe0 [ 86.601328][ T7212] loop_configure+0x1120/0x15b0 [ 86.601352][ T7212] ? __pfx_loop_configure+0x10/0x10 [ 86.601378][ T7212] lo_ioctl+0xcf3/0x1bc0 [ 86.601399][ T7212] ? __pfx_lo_ioctl+0x10/0x10 [ 86.601414][ T7212] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 86.601434][ T7212] ? kasan_quarantine_put+0x104/0x240 [ 86.601446][ T7212] ? blk_get_meta_cap+0xd4/0x6c0 [ 86.601462][ T7212] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 86.601476][ T7212] ? blkdev_common_ioctl+0x515/0x2b80 [ 86.601502][ T7212] ? __fget_files+0x215/0x3d0 [ 86.601520][ T7212] ? __pfx_lo_ioctl+0x10/0x10 [ 86.601535][ T7212] blkdev_ioctl+0x5ad/0x6f0 [ 86.601546][ T7212] ? __pfx_blkdev_ioctl+0x10/0x10 [ 86.601556][ T7212] ? selinux_file_ioctl+0x13b/0x290 [ 86.601576][ T7212] ? selinux_file_ioctl+0xb6/0x290 [ 86.601592][ T7212] ? __pfx_blkdev_ioctl+0x10/0x10 [ 86.601603][ T7212] __x64_sys_ioctl+0x18e/0x210 [ 86.601621][ T7212] do_syscall_64+0x115/0x870 [ 86.601643][ T7212] ? clear_bhb_loop+0x70/0xc0 [ 86.601656][ T7212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.601667][ T7212] RIP: 0033:0x7f937a39e0d9 [ 86.601683][ T7212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.601694][ T7212] RSP: 002b:00007f937b2c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 86.601713][ T7212] RAX: ffffffffffffffda RBX: 00007f937a625fa0 RCX: 00007f937a39e0d9 [ 86.601720][ T7212] RDX: 00002000000002c0 RSI: 0000000000004c0a RDI: 0000000000000003 [ 86.601726][ T7212] RBP: 00007f937b2c1090 R08: 0000000000000000 R09: 0000000000000000 [ 86.601732][ T7212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 86.601739][ T7212] R13: 00007f937a626038 R14: 00007f937a625fa0 R15: 00007fff0b2bb978 [ 86.601752][ T7212] [ 86.601947][ T7212] loop3: p1 could not be added: -ENOMEM [ 86.794863][ T5908] udevd[5908]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 86.808488][ T7222] team0: No ports can be present during mode change [ 86.937440][ T7228] netlink: 'syz.3.435': attribute type 9 has an invalid length. [ 87.062471][ T7234] loop0: detected capacity change from 0 to 4096 [ 87.126876][ T7234] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 87.131233][ T7234] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 87.136146][ T7234] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 87.140479][ T7234] ldm_validate_privheads(): Cannot find PRIVHEAD 3. [ 87.143429][ T7234] ldm_validate_privheads(): Primary and backup PRIVHEADs don't match. [ 87.147435][ T7234] loop0: [ 87.231023][ T7240] loop3: detected capacity change from 0 to 7 [ 87.234350][ T7240] loop3: p1 p4 [ 87.236791][ T7240] loop3: partition table partially beyond EOD, truncated [ 87.239428][ T7240] FAULT_INJECTION: forcing a failure. [ 87.239428][ T7240] name failslab, interval 1, probability 0, space 0, times 0 [ 87.243875][ T7240] CPU: 0 UID: 0 PID: 7240 Comm: syz.0.441 Tainted: G L syzkaller #0 PREEMPT(full) [ 87.243893][ T7240] Tainted: [L]=SOFTLOCKUP [ 87.243897][ T7240] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 87.243904][ T7240] Call Trace: [ 87.243908][ T7240] [ 87.243912][ T7240] dump_stack_lvl+0x100/0x190 [ 87.243932][ T7240] should_fail_ex.cold+0x5/0xa [ 87.243946][ T7240] should_failslab+0xc2/0x120 [ 87.243961][ T7240] kmem_cache_alloc_noprof+0x91/0x6a0 [ 87.243974][ T7240] ? __asan_memcpy+0x3c/0x60 [ 87.243985][ T7240] ? __kernfs_new_node+0xd2/0xa10 [ 87.244003][ T7240] __kernfs_new_node+0xd2/0xa10 [ 87.244020][ T7240] ? __pfx___kernfs_new_node+0x10/0x10 [ 87.244038][ T7240] ? find_held_lock+0x2b/0x80 [ 87.244048][ T7240] ? kernfs_root+0xee/0x2a0 [ 87.244060][ T7240] ? kernfs_root+0xee/0x2a0 [ 87.244076][ T7240] kernfs_new_node+0x117/0x150 [ 87.244094][ T7240] kernfs_create_link+0xcc/0x240 [ 87.244107][ T7240] sysfs_do_create_link_sd+0x90/0x140 [ 87.244122][ T7240] sysfs_create_link+0x61/0xc0 [ 87.244135][ T7240] device_add+0x675/0x1970 [ 87.244150][ T7240] ? __pfx_device_add+0x10/0x10 [ 87.244162][ T7240] ? add_partition+0x529/0xa60 [ 87.244179][ T7240] ? __asan_memcpy+0x3c/0x60 [ 87.244191][ T7240] add_partition+0x59e/0xa60 [ 87.244208][ T7240] bdev_disk_changed+0xc6a/0x1260 [ 87.244231][ T7240] ? __pfx_bdev_disk_changed+0x10/0x10 [ 87.244247][ T7240] ? kobject_uevent_env+0x2e7/0x18b0 [ 87.244265][ T7240] loop_reread_partitions+0x68/0xe0 [ 87.244284][ T7240] loop_configure+0x1120/0x15b0 [ 87.244308][ T7240] ? __pfx_loop_configure+0x10/0x10 [ 87.244334][ T7240] lo_ioctl+0xcf3/0x1bc0 [ 87.244351][ T7240] ? __pfx_lo_ioctl+0x10/0x10 [ 87.244364][ T7240] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 87.244380][ T7240] ? kasan_quarantine_put+0x104/0x240 [ 87.244391][ T7240] ? blk_get_meta_cap+0xd4/0x6c0 [ 87.244402][ T7240] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 87.244416][ T7240] ? blkdev_common_ioctl+0x515/0x2b80 [ 87.244442][ T7240] ? __fget_files+0x215/0x3d0 [ 87.244455][ T7240] ? __pfx_lo_ioctl+0x10/0x10 [ 87.244469][ T7240] blkdev_ioctl+0x5ad/0x6f0 [ 87.244480][ T7240] ? __pfx_blkdev_ioctl+0x10/0x10 [ 87.244490][ T7240] ? selinux_file_ioctl+0x13b/0x290 [ 87.244506][ T7240] ? selinux_file_ioctl+0xb6/0x290 [ 87.244522][ T7240] ? __pfx_blkdev_ioctl+0x10/0x10 [ 87.244533][ T7240] __x64_sys_ioctl+0x18e/0x210 [ 87.244551][ T7240] do_syscall_64+0x115/0x870 [ 87.244585][ T7240] ? clear_bhb_loop+0x70/0xc0 [ 87.244600][ T7240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.244612][ T7240] RIP: 0033:0x7fa2a599e0d9 [ 87.244622][ T7240] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.244634][ T7240] RSP: 002b:00007fa2a67f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 87.244646][ T7240] RAX: ffffffffffffffda RBX: 00007fa2a5c25fa0 RCX: 00007fa2a599e0d9 [ 87.244653][ T7240] RDX: 00002000000002c0 RSI: 0000000000004c0a RDI: 0000000000000003 [ 87.244660][ T7240] RBP: 00007fa2a67f1090 R08: 0000000000000000 R09: 0000000000000000 [ 87.244666][ T7240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 87.244672][ T7240] R13: 00007fa2a5c26038 R14: 00007fa2a5c25fa0 R15: 00007ffc13517838 [ 87.244685][ T7240] [ 87.245093][ T7240] loop3: p1 could not be added: -ENOMEM [ 87.395498][ T5908] udevd[5908]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 87.421630][ T5735] Bluetooth: hci1: Malformed LE Event: 0x0b [ 87.444649][ T7245] team0: No ports can be present during mode change [ 87.534627][ T7248] syzkaller1: entered promiscuous mode [ 87.540101][ T7248] syzkaller1: entered allmulticast mode [ 87.702323][ T7264] FAULT_INJECTION: forcing a failure. [ 87.702323][ T7264] name failslab, interval 1, probability 0, space 0, times 0 [ 87.709058][ T7264] CPU: 3 UID: 0 PID: 7264 Comm: syz.4.449 Tainted: G L syzkaller #0 PREEMPT(full) [ 87.709091][ T7264] Tainted: [L]=SOFTLOCKUP [ 87.709097][ T7264] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 87.709108][ T7264] Call Trace: [ 87.709115][ T7264] [ 87.709123][ T7264] dump_stack_lvl+0x100/0x190 [ 87.709154][ T7264] should_fail_ex.cold+0x5/0xa [ 87.709178][ T7264] should_failslab+0xc2/0x120 [ 87.709208][ T7264] __kmalloc_cache_noprof+0x91/0x6c0 [ 87.709228][ T7264] ? sctp_add_bind_addr+0xae/0x3e0 [ 87.709281][ T7264] sctp_add_bind_addr+0xae/0x3e0 [ 87.709310][ T7264] sctp_copy_local_addr_list+0x349/0x550 [ 87.709333][ T7264] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 87.709353][ T7264] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 87.709375][ T7264] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 87.709401][ T7264] sctp_bind_addr_copy+0xe0/0x530 [ 87.709433][ T7264] sctp_connect_new_asoc+0x1c9/0x770 [ 87.709458][ T7264] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 87.709490][ T7264] sctp_sendmsg+0x1743/0x22e0 [ 87.709517][ T7264] ? __pfx_sctp_sendmsg+0x10/0x10 [ 87.709536][ T7264] ? sock_has_perm+0x25a/0x2f0 [ 87.709560][ T7264] ? __pfx_sock_has_perm+0x10/0x10 [ 87.709599][ T7264] ? __pfx_sctp_sendmsg+0x10/0x10 [ 87.709622][ T7264] inet_sendmsg+0x11c/0x140 [ 87.709672][ T7264] ____sys_sendmsg+0x9c9/0xbe0 [ 87.709706][ T7264] ? __pfx_inet_sendmsg+0x10/0x10 [ 87.709728][ T7264] ? __pfx_____sys_sendmsg+0x10/0x10 [ 87.709762][ T7264] ___sys_sendmsg+0x190/0x1e0 [ 87.709787][ T7264] ? __pfx____sys_sendmsg+0x10/0x10 [ 87.709805][ T7264] ? __lock_acquire+0x49f/0x1a40 [ 87.709829][ T7264] ? get_pid_task+0x106/0x250 [ 87.709867][ T7264] __sys_sendmsg+0x160/0x210 [ 87.709894][ T7264] ? __pfx___sys_sendmsg+0x10/0x10 [ 87.709924][ T7264] do_syscall_64+0x115/0x870 [ 87.709950][ T7264] ? clear_bhb_loop+0x70/0xc0 [ 87.709973][ T7264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.709994][ T7264] RIP: 0033:0x7fa91ed9e0d9 [ 87.710012][ T7264] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.710031][ T7264] RSP: 002b:00007fa91fcef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 87.710052][ T7264] RAX: ffffffffffffffda RBX: 00007fa91f025fa0 RCX: 00007fa91ed9e0d9 [ 87.710066][ T7264] RDX: 0000000000008050 RSI: 00002000000000c0 RDI: 0000000000000004 [ 87.710078][ T7264] RBP: 00007fa91fcef090 R08: 0000000000000000 R09: 0000000000000000 [ 87.710088][ T7264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 87.710100][ T7264] R13: 00007fa91f026038 R14: 00007fa91f025fa0 R15: 00007ffed8423058 [ 87.710125][ T7264] [ 87.713940][ T7267] loop0: detected capacity change from 0 to 4096 [ 87.780278][ T7271] netlink: 12 bytes leftover after parsing attributes in process `syz.0.447'. [ 87.847508][ T7268] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 87.850949][ T7268] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 87.854087][ T7268] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 87.858044][ T7268] ldm_validate_privheads(): Cannot find PRIVHEAD 3. [ 87.860697][ T7268] ldm_validate_privheads(): Primary and backup PRIVHEADs don't match. [ 87.864696][ T7268] loop0: [ 87.875973][ T7273] overlayfs: overlapping lowerdir path [ 87.928136][ T7275] team0: No ports can be present during mode change [ 87.945799][ T7277] loop3: detected capacity change from 0 to 7 [ 87.950515][ T7277] loop3: p1 p4 [ 87.951850][ T7277] loop3: partition table partially beyond EOD, truncated [ 87.961418][ T7277] FAULT_INJECTION: forcing a failure. [ 87.961418][ T7277] name failslab, interval 1, probability 0, space 0, times 0 [ 87.967922][ T7277] CPU: 1 UID: 0 PID: 7277 Comm: syz.0.453 Tainted: G L syzkaller #0 PREEMPT(full) [ 87.967950][ T7277] Tainted: [L]=SOFTLOCKUP [ 87.967956][ T7277] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 87.967966][ T7277] Call Trace: [ 87.967972][ T7277] [ 87.967979][ T7277] dump_stack_lvl+0x100/0x190 [ 87.968006][ T7277] should_fail_ex.cold+0x5/0xa [ 87.968029][ T7277] should_failslab+0xc2/0x120 [ 87.968052][ T7277] kmem_cache_alloc_noprof+0x91/0x6a0 [ 87.968071][ T7277] ? find_held_lock+0x2b/0x80 [ 87.968087][ T7277] ? kernfs_root+0xee/0x2a0 [ 87.968106][ T7277] ? __kernfs_new_node+0xd2/0xa10 [ 87.968133][ T7277] __kernfs_new_node+0xd2/0xa10 [ 87.968157][ T7277] ? kernfs_xattr_get+0x5f/0x80 [ 87.968178][ T7277] ? __pfx___kernfs_new_node+0x10/0x10 [ 87.968207][ T7277] ? find_held_lock+0x2b/0x80 [ 87.968222][ T7277] ? kernfs_root+0xee/0x2a0 [ 87.968241][ T7277] ? kernfs_root+0xee/0x2a0 [ 87.968268][ T7277] kernfs_new_node+0x117/0x150 [ 87.968295][ T7277] __kernfs_create_file+0x53/0x350 [ 87.968315][ T7277] sysfs_add_file_mode_ns+0x207/0x3c0 [ 87.968341][ T7277] internal_create_group+0x593/0xfb0 [ 87.968368][ T7277] ? __pfx_internal_create_group+0x10/0x10 [ 87.968394][ T7277] ? kernfs_create_link+0x1bd/0x240 [ 87.968415][ T7277] internal_create_groups+0x9d/0x150 [ 87.968440][ T7277] device_add+0x77a/0x1970 [ 87.968461][ T7277] ? __pfx_device_add+0x10/0x10 [ 87.968480][ T7277] ? add_partition+0x529/0xa60 [ 87.968524][ T7277] ? __asan_memcpy+0x3c/0x60 [ 87.968544][ T7277] add_partition+0x59e/0xa60 [ 87.968574][ T7277] bdev_disk_changed+0xc6a/0x1260 [ 87.968606][ T7277] ? __pfx_bdev_disk_changed+0x10/0x10 [ 87.968629][ T7277] ? kobject_uevent_env+0x2e7/0x18b0 [ 87.968659][ T7277] loop_reread_partitions+0x68/0xe0 [ 87.968680][ T7277] loop_configure+0x1120/0x15b0 [ 87.968719][ T7277] ? __pfx_loop_configure+0x10/0x10 [ 87.968767][ T7277] lo_ioctl+0xcf3/0x1bc0 [ 87.968793][ T7277] ? __pfx_lo_ioctl+0x10/0x10 [ 87.968815][ T7277] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 87.968837][ T7277] ? kasan_quarantine_put+0x104/0x240 [ 87.968854][ T7277] ? blk_get_meta_cap+0xd4/0x6c0 [ 87.968872][ T7277] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 87.968895][ T7277] ? blkdev_common_ioctl+0x515/0x2b80 [ 87.968942][ T7277] ? __fget_files+0x215/0x3d0 [ 87.968962][ T7277] ? __pfx_lo_ioctl+0x10/0x10 [ 87.968985][ T7277] blkdev_ioctl+0x5ad/0x6f0 [ 87.969002][ T7277] ? __pfx_blkdev_ioctl+0x10/0x10 [ 87.969017][ T7277] ? selinux_file_ioctl+0x13b/0x290 [ 87.969041][ T7277] ? selinux_file_ioctl+0xb6/0x290 [ 87.969066][ T7277] ? __pfx_blkdev_ioctl+0x10/0x10 [ 87.969084][ T7277] __x64_sys_ioctl+0x18e/0x210 [ 87.969111][ T7277] do_syscall_64+0x115/0x870 [ 87.969134][ T7277] ? clear_bhb_loop+0x70/0xc0 [ 87.969154][ T7277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.969170][ T7277] RIP: 0033:0x7fa2a599e0d9 [ 87.969186][ T7277] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.969213][ T7277] RSP: 002b:00007fa2a67f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 87.969231][ T7277] RAX: ffffffffffffffda RBX: 00007fa2a5c25fa0 RCX: 00007fa2a599e0d9 [ 87.969242][ T7277] RDX: 00002000000002c0 RSI: 0000000000004c0a RDI: 0000000000000003 [ 87.969252][ T7277] RBP: 00007fa2a67f1090 R08: 0000000000000000 R09: 0000000000000000 [ 87.969262][ T7277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 87.969271][ T7277] R13: 00007fa2a5c26038 R14: 00007fa2a5c25fa0 R15: 00007ffc13517838 [ 87.969294][ T7277] [ 87.969617][ T7277] loop3: p1 could not be added: -ENOMEM [ 87.993392][ T7279] binder: 7278:7279 ioctl c0306201 2000000004c0 returned -14 [ 88.052796][ T5908] udevd[5908]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 88.058765][ T5735] Bluetooth: hci0: Malformed LE Event: 0x0b [ 88.132989][ T7284] veth0_to_bond: entered allmulticast mode [ 88.166026][ T5735] Bluetooth: hci2: command tx timeout [ 88.205080][ T7289] vivid-000: disconnect [ 88.211108][ T7289] vivid-000: reconnect [ 88.275028][ T7293] FAULT_INJECTION: forcing a failure. [ 88.275028][ T7293] name failslab, interval 1, probability 0, space 0, times 0 [ 88.291936][ T7296] loop0: detected capacity change from 0 to 4096 [ 88.296263][ T7293] CPU: 2 UID: 0 PID: 7293 Comm: syz.0.459 Tainted: G L syzkaller #0 PREEMPT(full) [ 88.296282][ T7293] Tainted: [L]=SOFTLOCKUP [ 88.296286][ T7293] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 88.296293][ T7293] Call Trace: [ 88.296297][ T7293] [ 88.296301][ T7293] dump_stack_lvl+0x100/0x190 [ 88.296320][ T7293] should_fail_ex.cold+0x5/0xa [ 88.296334][ T7293] should_failslab+0xc2/0x120 [ 88.296362][ T7293] __kmalloc_cache_noprof+0x91/0x6c0 [ 88.296375][ T7293] ? sctp_add_bind_addr+0xae/0x3e0 [ 88.296396][ T7293] sctp_add_bind_addr+0xae/0x3e0 [ 88.296413][ T7293] sctp_copy_local_addr_list+0x349/0x550 [ 88.296427][ T7293] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 88.296439][ T7293] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 88.296452][ T7293] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 88.296467][ T7293] sctp_bind_addr_copy+0xe0/0x530 [ 88.296486][ T7293] sctp_connect_new_asoc+0x1c9/0x770 [ 88.296501][ T7293] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 88.296520][ T7293] sctp_sendmsg+0x1743/0x22e0 [ 88.296536][ T7293] ? __pfx_sctp_sendmsg+0x10/0x10 [ 88.296549][ T7293] ? sock_has_perm+0x25a/0x2f0 [ 88.296563][ T7293] ? __pfx_sock_has_perm+0x10/0x10 [ 88.296585][ T7293] ? __pfx_sctp_sendmsg+0x10/0x10 [ 88.296598][ T7293] inet_sendmsg+0x11c/0x140 [ 88.296613][ T7293] ____sys_sendmsg+0x9c9/0xbe0 [ 88.296626][ T7293] ? __pfx_inet_sendmsg+0x10/0x10 [ 88.296639][ T7293] ? __pfx_____sys_sendmsg+0x10/0x10 [ 88.296659][ T7293] ___sys_sendmsg+0x190/0x1e0 [ 88.296673][ T7293] ? __pfx____sys_sendmsg+0x10/0x10 [ 88.296686][ T7293] ? __lock_acquire+0x49f/0x1a40 [ 88.296700][ T7293] ? get_pid_task+0x106/0x250 [ 88.296725][ T7293] __sys_sendmsg+0x160/0x210 [ 88.296737][ T7293] ? __pfx___sys_sendmsg+0x10/0x10 [ 88.296755][ T7293] do_syscall_64+0x115/0x870 [ 88.296771][ T7293] ? clear_bhb_loop+0x70/0xc0 [ 88.296783][ T7293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.296795][ T7293] RIP: 0033:0x7fa2a599e0d9 [ 88.296805][ T7293] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.296816][ T7293] RSP: 002b:00007fa2a67f1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 88.296828][ T7293] RAX: ffffffffffffffda RBX: 00007fa2a5c25fa0 RCX: 00007fa2a599e0d9 [ 88.296835][ T7293] RDX: 0000000000008050 RSI: 00002000000000c0 RDI: 0000000000000004 [ 88.296842][ T7293] RBP: 00007fa2a67f1090 R08: 0000000000000000 R09: 0000000000000000 [ 88.296848][ T7293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 88.296854][ T7293] R13: 00007fa2a5c26038 R14: 00007fa2a5c25fa0 R15: 00007ffc13517838 [ 88.296867][ T7293] [ 88.315252][ T7298] team0: No ports can be present during mode change [ 88.456948][ T7296] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 88.467539][ T7296] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 88.471070][ T7296] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 88.474157][ T42] kauditd_printk_skb: 11 callbacks suppressed [ 88.474186][ T42] audit: type=1400 audit(1787084028.432:710): avc: denied { ioctl } for pid=7302 comm="syz.0.463" path="/dev/vhost-net" dev="devtmpfs" ino=1297 ioctlcmd=0xaf75 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 88.476962][ T7296] ldm_validate_privheads(): Cannot find PRIVHEAD 3. [ 88.482563][ T7303] netlink: 'syz.0.463': attribute type 34 has an invalid length. [ 88.500954][ T7303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.463'. [ 88.506777][ T7296] ldm_validate_privheads(): Primary and backup PRIVHEADs don't match. [ 88.510272][ T7296] loop0: [ 88.521813][ T7306] loop3: detected capacity change from 0 to 7 [ 88.523832][ T7303] bond2: option lacp_strict: invalid value (255) [ 88.536113][ T7303] bond2 (unregistering): Released all slaves [ 88.543210][ T7306] loop3: p1 p4 [ 88.544389][ T7306] loop3: partition table partially beyond EOD, truncated [ 88.555581][ T7306] FAULT_INJECTION: forcing a failure. [ 88.555581][ T7306] name failslab, interval 1, probability 0, space 0, times 0 [ 88.560974][ T7306] CPU: 3 UID: 0 PID: 7306 Comm: syz.3.465 Tainted: G L syzkaller #0 PREEMPT(full) [ 88.560993][ T7306] Tainted: [L]=SOFTLOCKUP [ 88.560996][ T7306] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 88.561003][ T7306] Call Trace: [ 88.561007][ T7306] [ 88.561012][ T7306] dump_stack_lvl+0x100/0x190 [ 88.561031][ T7306] should_fail_ex.cold+0x5/0xa [ 88.561053][ T7306] should_failslab+0xc2/0x120 [ 88.561068][ T7306] kmem_cache_alloc_noprof+0x91/0x6a0 [ 88.561082][ T7306] ? __kernfs_new_node+0xd2/0xa10 [ 88.561100][ T7306] __kernfs_new_node+0xd2/0xa10 [ 88.561117][ T7306] ? __pfx___kernfs_new_node+0x10/0x10 [ 88.561135][ T7306] ? find_held_lock+0x2b/0x80 [ 88.561145][ T7306] ? kernfs_root+0xee/0x2a0 [ 88.561158][ T7306] ? kernfs_root+0xee/0x2a0 [ 88.561174][ T7306] kernfs_new_node+0x117/0x150 [ 88.561191][ T7306] __kernfs_create_file+0x53/0x350 [ 88.561204][ T7306] sysfs_add_file_mode_ns+0x207/0x3c0 [ 88.561220][ T7306] internal_create_group+0x593/0xfb0 [ 88.561250][ T7306] ? __pfx_internal_create_group+0x10/0x10 [ 88.561267][ T7306] ? kernfs_create_link+0x1bd/0x240 [ 88.561280][ T7306] internal_create_groups+0x9d/0x150 [ 88.561295][ T7306] device_add+0x77a/0x1970 [ 88.561310][ T7306] ? __pfx_device_add+0x10/0x10 [ 88.561322][ T7306] ? add_partition+0x529/0xa60 [ 88.561340][ T7306] ? __asan_memcpy+0x3c/0x60 [ 88.561352][ T7306] add_partition+0x59e/0xa60 [ 88.561369][ T7306] bdev_disk_changed+0xc6a/0x1260 [ 88.561390][ T7306] ? __pfx_bdev_disk_changed+0x10/0x10 [ 88.561405][ T7306] ? kobject_uevent_env+0x2e7/0x18b0 [ 88.561424][ T7306] loop_reread_partitions+0x68/0xe0 [ 88.561439][ T7306] loop_configure+0x1120/0x15b0 [ 88.561463][ T7306] ? __pfx_loop_configure+0x10/0x10 [ 88.561488][ T7306] lo_ioctl+0xcf3/0x1bc0 [ 88.561505][ T7306] ? __pfx_lo_ioctl+0x10/0x10 [ 88.561519][ T7306] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 88.561533][ T7306] ? kasan_quarantine_put+0x104/0x240 [ 88.561544][ T7306] ? blk_get_meta_cap+0xd4/0x6c0 [ 88.561556][ T7306] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 88.561590][ T7306] ? blkdev_common_ioctl+0x515/0x2b80 [ 88.561618][ T7306] ? __fget_files+0x215/0x3d0 [ 88.561632][ T7306] ? __pfx_lo_ioctl+0x10/0x10 [ 88.561647][ T7306] blkdev_ioctl+0x5ad/0x6f0 [ 88.561658][ T7306] ? __pfx_blkdev_ioctl+0x10/0x10 [ 88.561668][ T7306] ? selinux_file_ioctl+0x13b/0x290 [ 88.561684][ T7306] ? selinux_file_ioctl+0xb6/0x290 [ 88.561700][ T7306] ? __pfx_blkdev_ioctl+0x10/0x10 [ 88.561716][ T7306] __x64_sys_ioctl+0x18e/0x210 [ 88.561748][ T7306] do_syscall_64+0x115/0x870 [ 88.561764][ T7306] ? clear_bhb_loop+0x70/0xc0 [ 88.561777][ T7306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.561789][ T7306] RIP: 0033:0x7f937a39e0d9 [ 88.561800][ T7306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.561811][ T7306] RSP: 002b:00007f937b2c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 88.561823][ T7306] RAX: ffffffffffffffda RBX: 00007f937a625fa0 RCX: 00007f937a39e0d9 [ 88.561830][ T7306] RDX: 00002000000002c0 RSI: 0000000000004c0a RDI: 0000000000000003 [ 88.561837][ T7306] RBP: 00007f937b2c1090 R08: 0000000000000000 R09: 0000000000000000 [ 88.561843][ T7306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 88.561849][ T7306] R13: 00007f937a626038 R14: 00007f937a625fa0 R15: 00007fff0b2bb978 [ 88.561863][ T7306] [ 88.562636][ T7306] loop3: p1 could not be added: -ENOMEM [ 88.713241][ T5908] udevd[5908]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 88.714145][ T7314] SELinux: Context system_u:object_r:auditd_initrc_exec_t:s0 is not valid (left unmapped). [ 88.723234][ T42] audit: type=1400 audit(1787084028.682:711): avc: denied { relabelto } for pid=7313 comm="syz.3.467" name="sys" dev="tmpfs" ino=840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:auditd_initrc_exec_t:s0" [ 88.728568][ T7308] netlink: 12 bytes leftover after parsing attributes in process `syz.4.466'. [ 88.736407][ T42] audit: type=1400 audit(1787084028.682:712): avc: denied { associate } for pid=7313 comm="syz.3.467" name="sys" dev="tmpfs" ino=840 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:auditd_initrc_exec_t:s0" [ 88.818924][ T7321] gadgetfs: bound to dummy_udc driver [ 88.841145][ T7321] synth uevent: /bus/platform/drivers/usb-conn-gpio: unknown uevent action string [ 88.860678][ T7321] netlink: 20 bytes leftover after parsing attributes in process `syz.0.469'. [ 88.936857][ T7324] input: syz1 as /devices/virtual/input/input8 [ 88.940375][ T7324] input: failed to attach handler leds to device input8, error: -6 [ 89.034210][ T7328] zram0: detected capacity change from 0 to 1960 [ 89.042282][ T42] audit: type=1400 audit(1787084029.002:713): avc: denied { read } for pid=7331 comm="syz.0.473" path="socket:[18541]" dev="sockfs" ino=18541 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 89.072703][ T42] audit: type=1400 audit(1787084029.032:714): avc: denied { getopt } for pid=7331 comm="syz.0.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 89.103515][ T7337] loop0: detected capacity change from 0 to 4096 [ 89.139173][ T7337] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 89.151115][ T7337] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 89.157076][ T7337] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 89.160586][ T7337] ldm_validate_privheads(): Cannot find PRIVHEAD 3. [ 89.163036][ T7337] ldm_validate_privheads(): Primary and backup PRIVHEADs don't match. [ 89.166056][ T42] audit: type=1400 audit(1787084029.122:715): avc: denied { bind } for pid=7342 comm="syz.0.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 89.172814][ T7337] loop0: [ 89.174103][ T42] audit: type=1400 audit(1787084029.122:716): avc: denied { setopt } for pid=7342 comm="syz.0.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 89.283502][ T7351] misc userio: The device must be registered before sending interrupts [ 89.290085][ T7351] netlink: 16 bytes leftover after parsing attributes in process `syz.0.479'. [ 89.395950][ T7359] netlink: 16 bytes leftover after parsing attributes in process `syz.3.480'. [ 89.457139][ T7355] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 89.471357][ T7369] xt_TPROXY: Can be used only with -p tcp or -p udp [ 89.623632][ T7378] loop0: detected capacity change from 0 to 4096 [ 89.689192][ T7378] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 89.699268][ T7378] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 89.709065][ T7378] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 89.713660][ T7378] ldm_validate_privheads(): Cannot find PRIVHEAD 3. [ 89.717446][ T7378] ldm_validate_privheads(): Primary and backup PRIVHEADs don't match. [ 89.721017][ T7378] loop0: [ 89.767356][ T7388] sg_write: data in/out 1935872156/136 bytes for SCSI command 0x0-- guessing data in; [ 89.767356][ T7388] program syz.0.490 not setting count and/or reply_len properly [ 89.913098][ T7399] 9pnet_virtio: no channels available for device syz [ 90.001566][ T42] audit: type=1400 audit(1787084029.962:717): avc: denied { mounton } for pid=7403 comm="syz.0.494" path="/124/bus" dev="tmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 90.010145][ T7404] ======================================================= [ 90.010145][ T7404] WARNING: The mand mount option has been deprecated and [ 90.010145][ T7404] and is ignored by this kernel. Remove the mand [ 90.010145][ T7404] option from the mount to silence this warning. [ 90.010145][ T7404] ======================================================= [ 90.029407][ T7404] FAT-fs (nullb0): bogus number of reserved sectors [ 90.032874][ T7404] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 90.192733][ T7419] netlink: 20 bytes leftover after parsing attributes in process `syz.0.498'. [ 90.201172][ T42] audit: type=1400 audit(1787084030.162:718): avc: denied { watch watch_reads } for pid=7418 comm="syz.0.498" path="/127" dev="tmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 90.231712][ T7421] loop0: detected capacity change from 0 to 4096 [ 90.299408][ T7421] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 90.303804][ T7421] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 90.307828][ T7421] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 90.312147][ T7421] ldm_validate_privheads(): Cannot find PRIVHEAD 3. [ 90.315220][ T7421] ldm_validate_privheads(): Primary and backup PRIVHEADs don't match. [ 90.318920][ T7421] loop0: [ 90.486149][ T5515] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 90.591828][ T7431] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 90.646138][ T5515] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 90.653214][ T5515] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 90.657543][ T5515] usb 5-1: Product: syz [ 90.663602][ T5515] usb 5-1: Manufacturer: syz [ 90.665911][ T5515] usb 5-1: SerialNumber: syz [ 90.676320][ T5515] usb 5-1: config 0 descriptor?? [ 90.755282][ T42] audit: type=1400 audit(1787084030.712:719): avc: denied { mount } for pid=7437 comm="syz.4.505" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 90.800962][ T7438] syzkaller0: entered promiscuous mode [ 90.802643][ T7438] syzkaller0: entered allmulticast mode [ 90.899661][ T7419] lo: entered allmulticast mode [ 90.902763][ T7419] bond0: entered allmulticast mode [ 90.907831][ T7419] dummy0: entered allmulticast mode [ 90.923125][ T7419] eql: entered allmulticast mode [ 90.925905][ T7419] ifb0: entered allmulticast mode [ 90.928932][ T7419] ifb1: entered allmulticast mode [ 90.934889][ T7419] e1000 0000:00:06.0 eth0: entered allmulticast mode [ 90.946956][ T7446] program syz.0.498 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 90.953662][ T7419] e1000e 0000:00:02.0 eth1: entered allmulticast mode [ 90.961121][ T7419] mac80211_hwsim hwsim0 wlan0: entered allmulticast mode [ 90.965603][ T7419] mac80211_hwsim hwsim1 wlan1: entered allmulticast mode [ 90.969736][ T7419] hwsim0: entered allmulticast mode [ 90.972475][ T7419] ieee802154 phy0 wpan0: entered allmulticast mode [ 90.976828][ T7419] ieee802154 phy1 wpan1: entered allmulticast mode [ 90.980381][ T7419] teql0: entered allmulticast mode [ 90.981132][ T5136] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 90.982944][ T7419] tunl0: entered allmulticast mode [ 90.988764][ T5136] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 90.994155][ T5136] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 90.997831][ T5136] ldm_validate_privheads(): Cannot find PRIVHEAD 3. [ 91.002138][ T5136] ldm_validate_privheads(): Primary and backup PRIVHEADs don't match. [ 91.002557][ T7419] gre0: entered allmulticast mode [ 91.008731][ T5136] loop0: [ 91.009424][ T7419] gretap0: entered allmulticast mode [ 91.013166][ T7419] erspan0: entered allmulticast mode [ 91.023341][ T7419] ip_vti0: entered allmulticast mode [ 91.026131][ T7419] ip6_vti0: entered allmulticast mode [ 91.028788][ T7419] sit0: entered allmulticast mode [ 91.031433][ T7419] ip6tnl0: entered allmulticast mode [ 91.034065][ T7419] ip6gre0: entered allmulticast mode [ 91.037251][ T7419] lapb0: entered allmulticast mode [ 91.040124][ T7419] lapb1: entered allmulticast mode [ 91.047923][ T7419] lapb2: entered allmulticast mode [ 91.053631][ T7419] lapb3: entered allmulticast mode [ 91.057572][ T7419] lapb4: entered allmulticast mode [ 91.060091][ T7419] lapb5: entered allmulticast mode [ 91.063748][ T7419] lapb6: entered allmulticast mode [ 91.067589][ T7419] lowpan0: entered allmulticast mode [ 91.070935][ T7419] netdevsim netdevsim1 eth2: entered allmulticast mode [ 91.080395][ T7419] netdevsim netdevsim1 eth3: entered allmulticast mode [ 91.084143][ T7419] netdevsim netdevsim1 eth4: entered allmulticast mode [ 91.088190][ T7419] netdevsim netdevsim1 eth5: entered allmulticast mode [ 91.099677][ T5515] usb 5-1: USB disconnect, device number 9 [ 91.974820][ T7472] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 91.979633][ T7474] loop0: detected capacity change from 0 to 4096 [ 91.982578][ T7472] netlink: 32 bytes leftover after parsing attributes in process `syz.4.518'. [ 92.029073][ T7474] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 92.033516][ T7474] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 92.039032][ T7474] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 92.043187][ T7474] ldm_validate_privheads(): Cannot find PRIVHEAD 3. [ 92.046371][ T7474] ldm_validate_privheads(): Primary and backup PRIVHEADs don't match. [ 92.051026][ T7474] loop0: [ 92.121653][ T7483] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 92.154142][ T7487] netlink: 'syz.3.521': attribute type 8 has an invalid length. [ 92.443379][ T7494] sock: sock_timestamping_bind_phc: sock not bind to device [ 92.589868][ T7500] SELinux: Context system_u:object_r:dlm_control_device_t:s0 is not valid (left unmapped). [ 92.836500][ T7510] loop0: detected capacity change from 0 to 4096 [ 92.926332][ T7510] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 92.929951][ T7510] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 92.932989][ T7510] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 92.937660][ T7510] ldm_validate_privheads(): Cannot find PRIVHEAD 3. [ 92.939941][ T7510] ldm_validate_privheads(): Primary and backup PRIVHEADs don't match. [ 92.942712][ T7510] loop0: [ 92.975585][ T7512] FAULT_INJECTION: forcing a failure. [ 92.975585][ T7512] name failslab, interval 1, probability 0, space 0, times 0 [ 92.987888][ T7512] CPU: 0 UID: 0 PID: 7512 Comm: syz.0.531 Tainted: G L syzkaller #0 PREEMPT(full) [ 92.987910][ T7512] Tainted: [L]=SOFTLOCKUP [ 92.987914][ T7512] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 92.987932][ T7512] Call Trace: [ 92.987940][ T7512] [ 92.987945][ T7512] dump_stack_lvl+0x100/0x190 [ 92.987977][ T7512] should_fail_ex.cold+0x5/0xa [ 92.987991][ T7512] should_failslab+0xc2/0x120 [ 92.988007][ T7512] __kmalloc_cache_noprof+0x91/0x6c0 [ 92.988019][ T7512] ? sctp_add_bind_addr+0xae/0x3e0 [ 92.988077][ T7512] sctp_add_bind_addr+0xae/0x3e0 [ 92.988095][ T7512] sctp_copy_local_addr_list+0x349/0x550 [ 92.988108][ T7512] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 92.988121][ T7512] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 92.988133][ T7512] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 92.988153][ T7512] sctp_bind_addr_copy+0xe0/0x530 [ 92.988181][ T7512] sctp_connect_new_asoc+0x1c9/0x770 [ 92.988205][ T7512] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 92.988237][ T7512] sctp_sendmsg+0x1743/0x22e0 [ 92.988267][ T7512] ? __pfx_sctp_sendmsg+0x10/0x10 [ 92.988286][ T7512] ? sock_has_perm+0x25a/0x2f0 [ 92.988309][ T7512] ? __pfx_sock_has_perm+0x10/0x10 [ 92.988331][ T7512] ? __pfx_sctp_sendmsg+0x10/0x10 [ 92.988344][ T7512] inet_sendmsg+0x11c/0x140 [ 92.988387][ T7512] ____sys_sendmsg+0x9c9/0xbe0 [ 92.988409][ T7512] ? __pfx_inet_sendmsg+0x10/0x10 [ 92.988422][ T7512] ? __pfx_____sys_sendmsg+0x10/0x10 [ 92.988441][ T7512] ___sys_sendmsg+0x190/0x1e0 [ 92.988457][ T7512] ? __pfx____sys_sendmsg+0x10/0x10 [ 92.988470][ T7512] ? __lock_acquire+0x49f/0x1a40 [ 92.988483][ T7512] ? get_pid_task+0x106/0x250 [ 92.988507][ T7512] __sys_sendmsg+0x160/0x210 [ 92.988524][ T7512] ? __pfx___sys_sendmsg+0x10/0x10 [ 92.988544][ T7512] do_syscall_64+0x115/0x870 [ 92.988578][ T7512] ? clear_bhb_loop+0x70/0xc0 [ 92.988591][ T7512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.988602][ T7512] RIP: 0033:0x7fa2a599e0d9 [ 92.988618][ T7512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.988629][ T7512] RSP: 002b:00007fa2a67f1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 92.988648][ T7512] RAX: ffffffffffffffda RBX: 00007fa2a5c25fa0 RCX: 00007fa2a599e0d9 [ 92.988655][ T7512] RDX: 0000000000008050 RSI: 00002000000000c0 RDI: 0000000000000004 [ 92.988661][ T7512] RBP: 00007fa2a67f1090 R08: 0000000000000000 R09: 0000000000000000 [ 92.988667][ T7512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 92.988674][ T7512] R13: 00007fa2a5c26038 R14: 00007fa2a5c25fa0 R15: 00007ffc13517838 [ 92.988687][ T7512] [ 93.107285][ T7518] CIFS mount error: No usable UNC path provided in device string! [ 93.107285][ T7518] [ 93.121815][ T7518] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 93.194273][ T7526] loop3: detected capacity change from 0 to 7 [ 93.215945][ T7526] loop3: p1 p4 [ 93.217309][ T7526] loop3: partition table partially beyond EOD, truncated [ 93.220710][ T7526] FAULT_INJECTION: forcing a failure. [ 93.220710][ T7526] name failslab, interval 1, probability 0, space 0, times 0 [ 93.227450][ T7526] CPU: 1 UID: 0 PID: 7526 Comm: syz.0.534 Tainted: G L syzkaller #0 PREEMPT(full) [ 93.227473][ T7526] Tainted: [L]=SOFTLOCKUP [ 93.227478][ T7526] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 93.227489][ T7526] Call Trace: [ 93.227495][ T7526] [ 93.227501][ T7526] dump_stack_lvl+0x100/0x190 [ 93.227529][ T7526] should_fail_ex.cold+0x5/0xa [ 93.227550][ T7526] should_failslab+0xc2/0x120 [ 93.227568][ T7526] kmem_cache_alloc_noprof+0x91/0x6a0 [ 93.227590][ T7526] ? __kernfs_new_node+0xd2/0xa10 [ 93.227627][ T7526] __kernfs_new_node+0xd2/0xa10 [ 93.227651][ T7526] ? __pfx___kernfs_new_node+0x10/0x10 [ 93.227677][ T7526] ? find_held_lock+0x2b/0x80 [ 93.227693][ T7526] ? kernfs_root+0xee/0x2a0 [ 93.227713][ T7526] ? kernfs_root+0xee/0x2a0 [ 93.227739][ T7526] kernfs_new_node+0x117/0x150 [ 93.227766][ T7526] __kernfs_create_file+0x53/0x350 [ 93.227785][ T7526] sysfs_add_file_mode_ns+0x207/0x3c0 [ 93.227806][ T7526] internal_create_group+0x593/0xfb0 [ 93.227835][ T7526] ? __pfx_internal_create_group+0x10/0x10 [ 93.227861][ T7526] ? kernfs_create_link+0x1bd/0x240 [ 93.227875][ T7526] internal_create_groups+0x9d/0x150 [ 93.227899][ T7526] device_add+0x77a/0x1970 [ 93.227930][ T7526] ? __pfx_device_add+0x10/0x10 [ 93.227948][ T7526] ? add_partition+0x529/0xa60 [ 93.227977][ T7526] ? __asan_memcpy+0x3c/0x60 [ 93.227997][ T7526] add_partition+0x59e/0xa60 [ 93.228033][ T7526] bdev_disk_changed+0xc6a/0x1260 [ 93.228059][ T7526] ? __pfx_bdev_disk_changed+0x10/0x10 [ 93.228081][ T7526] ? kobject_uevent_env+0x2e7/0x18b0 [ 93.228110][ T7526] loop_reread_partitions+0x68/0xe0 [ 93.228142][ T7526] loop_configure+0x1120/0x15b0 [ 93.228177][ T7526] ? __pfx_loop_configure+0x10/0x10 [ 93.228225][ T7526] lo_ioctl+0xcf3/0x1bc0 [ 93.228268][ T7526] ? __pfx_lo_ioctl+0x10/0x10 [ 93.228291][ T7526] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 93.228314][ T7526] ? kasan_quarantine_put+0x104/0x240 [ 93.228332][ T7526] ? blk_get_meta_cap+0xd4/0x6c0 [ 93.228357][ T7526] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 93.228377][ T7526] ? blkdev_common_ioctl+0x515/0x2b80 [ 93.228422][ T7526] ? __fget_files+0x215/0x3d0 [ 93.228452][ T7526] ? __pfx_lo_ioctl+0x10/0x10 [ 93.228475][ T7526] blkdev_ioctl+0x5ad/0x6f0 [ 93.228491][ T7526] ? __pfx_blkdev_ioctl+0x10/0x10 [ 93.228507][ T7526] ? selinux_file_ioctl+0x13b/0x290 [ 93.228527][ T7526] ? selinux_file_ioctl+0xb6/0x290 [ 93.228551][ T7526] ? __pfx_blkdev_ioctl+0x10/0x10 [ 93.228570][ T7526] __x64_sys_ioctl+0x18e/0x210 [ 93.228597][ T7526] do_syscall_64+0x115/0x870 [ 93.228621][ T7526] ? clear_bhb_loop+0x70/0xc0 [ 93.228642][ T7526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.228657][ T7526] RIP: 0033:0x7fa2a599e0d9 [ 93.228669][ T7526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.228684][ T7526] RSP: 002b:00007fa2a67f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 93.228702][ T7526] RAX: ffffffffffffffda RBX: 00007fa2a5c25fa0 RCX: 00007fa2a599e0d9 [ 93.228712][ T7526] RDX: 00002000000002c0 RSI: 0000000000004c0a RDI: 0000000000000003 [ 93.228722][ T7526] RBP: 00007fa2a67f1090 R08: 0000000000000000 R09: 0000000000000000 [ 93.228732][ T7526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 93.228750][ T7526] R13: 00007fa2a5c26038 R14: 00007fa2a5c25fa0 R15: 00007ffc13517838 [ 93.228773][ T7526] [ 93.247270][ T7526] loop3: p1 could not be added: -ENOMEM [ 93.391403][ T5908] udevd[5908]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 93.564299][ T42] kauditd_printk_skb: 34 callbacks suppressed [ 93.564325][ T42] audit: type=1400 audit(1787084033.522:754): avc: denied { write } for pid=7539 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.586465][ T7542] team0: No ports can be present during mode change [ 93.601716][ T7545] loop0: detected capacity change from 0 to 4096 [ 93.649989][ T5735] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 93.651324][ T42] audit: type=1400 audit(1787084033.612:755): avc: denied { write } for pid=7546 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.662239][ T7548] capability: warning: `syz.4.542' uses 32-bit capabilities (legacy support in use) [ 93.662854][ T7545] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 93.678794][ T7545] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 93.683057][ T7545] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 93.687475][ T7545] ldm_validate_privheads(): Cannot find PRIVHEAD 3. [ 93.690694][ T7545] ldm_validate_privheads(): Primary and backup PRIVHEADs don't match. [ 93.693719][ T7545] loop0: [ 93.748184][ T42] audit: type=1400 audit(1787084033.712:756): avc: denied { write } for pid=7553 comm="syz.0.544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 93.757087][ T7552] net_ratelimit: 12 callbacks suppressed [ 93.757114][ T7552] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 93.762973][ T7552] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 93.772680][ T7554] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 93.775887][ T7554] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 1th superblock [ 93.779440][ T7554] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 93.781962][ T7554] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 2th superblock [ 93.794787][ T42] audit: type=1400 audit(1787084033.752:757): avc: denied { write } for pid=7555 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.851845][ T42] audit: type=1400 audit(1787084033.812:758): avc: denied { write } for pid=7559 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.884005][ T7565] loop3: detected capacity change from 0 to 7 [ 93.892822][ T7565] loop3: p1 p4 [ 93.894398][ T7565] loop3: partition table partially beyond EOD, truncated [ 93.898979][ T7565] FAULT_INJECTION: forcing a failure. [ 93.898979][ T7565] name failslab, interval 1, probability 0, space 0, times 0 [ 93.904107][ T7565] CPU: 3 UID: 0 PID: 7565 Comm: syz.4.546 Tainted: G L syzkaller #0 PREEMPT(full) [ 93.904133][ T7565] Tainted: [L]=SOFTLOCKUP [ 93.904140][ T7565] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 93.904160][ T7565] Call Trace: [ 93.904166][ T7565] [ 93.904173][ T7565] dump_stack_lvl+0x100/0x190 [ 93.904215][ T7565] should_fail_ex.cold+0x5/0xa [ 93.904238][ T7565] should_failslab+0xc2/0x120 [ 93.904261][ T7565] kmem_cache_alloc_noprof+0x91/0x6a0 [ 93.904283][ T7565] ? __kernfs_new_node+0xd2/0xa10 [ 93.904320][ T7565] __kernfs_new_node+0xd2/0xa10 [ 93.904343][ T7565] ? kernfs_add_one+0x611/0xaa0 [ 93.904368][ T7565] ? __pfx___kernfs_new_node+0x10/0x10 [ 93.904397][ T7565] ? find_held_lock+0x2b/0x80 [ 93.904413][ T7565] ? kernfs_root+0xee/0x2a0 [ 93.904433][ T7565] ? kernfs_root+0xee/0x2a0 [ 93.904459][ T7565] kernfs_new_node+0x117/0x150 [ 93.904487][ T7565] __kernfs_create_file+0x53/0x350 [ 93.904508][ T7565] sysfs_add_file_mode_ns+0x207/0x3c0 [ 93.904534][ T7565] sysfs_create_file_ns+0x145/0x1e0 [ 93.904552][ T7565] ? rcu_is_watching+0x12/0xc0 [ 93.904578][ T7565] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 93.904599][ T7565] ? __pfx___up_read+0x10/0x10 [ 93.904627][ T7565] ? acpi_device_notify+0x464/0x500 [ 93.904654][ T7565] ? kobject_put+0xb9/0x640 [ 93.904723][ T7565] device_create_file+0xf2/0x1d0 [ 93.904762][ T7565] device_add+0x2cb/0x1970 [ 93.904783][ T7565] ? __pfx_device_add+0x10/0x10 [ 93.904801][ T7565] ? add_partition+0x529/0xa60 [ 93.904835][ T7565] ? __asan_memcpy+0x3c/0x60 [ 93.904854][ T7565] add_partition+0x59e/0xa60 [ 93.904882][ T7565] bdev_disk_changed+0xc6a/0x1260 [ 93.904914][ T7565] ? __pfx_bdev_disk_changed+0x10/0x10 [ 93.904937][ T7565] ? kobject_uevent_env+0x2e7/0x18b0 [ 93.904964][ T7565] loop_reread_partitions+0x68/0xe0 [ 93.904993][ T7565] loop_configure+0x1120/0x15b0 [ 93.905032][ T7565] ? __pfx_loop_configure+0x10/0x10 [ 93.905095][ T7565] lo_ioctl+0xcf3/0x1bc0 [ 93.905131][ T7565] ? __pfx_lo_ioctl+0x10/0x10 [ 93.905151][ T7565] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 93.905183][ T7565] ? kasan_quarantine_put+0x104/0x240 [ 93.905201][ T7565] ? blk_get_meta_cap+0xd4/0x6c0 [ 93.905226][ T7565] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 93.905250][ T7565] ? blkdev_common_ioctl+0x515/0x2b80 [ 93.905297][ T7565] ? __fget_files+0x215/0x3d0 [ 93.905326][ T7565] ? __pfx_lo_ioctl+0x10/0x10 [ 93.905349][ T7565] blkdev_ioctl+0x5ad/0x6f0 [ 93.905366][ T7565] ? __pfx_blkdev_ioctl+0x10/0x10 [ 93.905381][ T7565] ? selinux_file_ioctl+0x13b/0x290 [ 93.905405][ T7565] ? selinux_file_ioctl+0xb6/0x290 [ 93.905430][ T7565] ? __pfx_blkdev_ioctl+0x10/0x10 [ 93.905448][ T7565] __x64_sys_ioctl+0x18e/0x210 [ 93.905477][ T7565] do_syscall_64+0x115/0x870 [ 93.905510][ T7565] ? clear_bhb_loop+0x70/0xc0 [ 93.905531][ T7565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.905548][ T7565] RIP: 0033:0x7fa91ed9e0d9 [ 93.905571][ T7565] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.905587][ T7565] RSP: 002b:00007fa91fcef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 93.905614][ T7565] RAX: ffffffffffffffda RBX: 00007fa91f025fa0 RCX: 00007fa91ed9e0d9 [ 93.905629][ T7565] RDX: 00002000000002c0 RSI: 0000000000004c0a RDI: 0000000000000003 [ 93.905639][ T7565] RBP: 00007fa91fcef090 R08: 0000000000000000 R09: 0000000000000000 [ 93.905649][ T7565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 93.905659][ T7565] R13: 00007fa91f026038 R14: 00007fa91f025fa0 R15: 00007ffed8423058 [ 93.905682][ T7565] [ 94.029182][ T7565] loop3: p1 could not be added: -ENOMEM [ 94.072092][ T42] audit: type=1400 audit(1787084034.032:759): avc: denied { write } for pid=7567 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.083377][ T5908] udevd[5908]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 94.100876][ T7571] FAULT_INJECTION: forcing a failure. [ 94.100876][ T7571] name failslab, interval 1, probability 0, space 0, times 0 [ 94.106330][ T7571] CPU: 3 UID: 0 PID: 7571 Comm: syz.4.547 Tainted: G L syzkaller #0 PREEMPT(full) [ 94.106351][ T7571] Tainted: [L]=SOFTLOCKUP [ 94.106357][ T7571] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 94.106367][ T7571] Call Trace: [ 94.106372][ T7571] [ 94.106379][ T7571] dump_stack_lvl+0x100/0x190 [ 94.106407][ T7571] should_fail_ex.cold+0x5/0xa [ 94.106431][ T7571] should_failslab+0xc2/0x120 [ 94.106455][ T7571] __kmalloc_cache_noprof+0x91/0x6c0 [ 94.106473][ T7571] ? sctp_add_bind_addr+0xae/0x3e0 [ 94.106528][ T7571] sctp_add_bind_addr+0xae/0x3e0 [ 94.106557][ T7571] sctp_copy_local_addr_list+0x349/0x550 [ 94.106579][ T7571] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 94.106601][ T7571] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 94.106629][ T7571] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 94.106653][ T7571] sctp_bind_addr_copy+0xe0/0x530 [ 94.106686][ T7571] sctp_connect_new_asoc+0x1c9/0x770 [ 94.106710][ T7571] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 94.106744][ T7571] sctp_sendmsg+0x1743/0x22e0 [ 94.106772][ T7571] ? __pfx_sctp_sendmsg+0x10/0x10 [ 94.106793][ T7571] ? sock_has_perm+0x25a/0x2f0 [ 94.106816][ T7571] ? __pfx_sock_has_perm+0x10/0x10 [ 94.106849][ T7571] ? __pfx_sctp_sendmsg+0x10/0x10 [ 94.106872][ T7571] inet_sendmsg+0x11c/0x140 [ 94.106922][ T7571] ____sys_sendmsg+0x9c9/0xbe0 [ 94.106950][ T7571] ? __pfx_inet_sendmsg+0x10/0x10 [ 94.106964][ T7571] ? __pfx_____sys_sendmsg+0x10/0x10 [ 94.106985][ T7571] ___sys_sendmsg+0x190/0x1e0 [ 94.107001][ T7571] ? __pfx____sys_sendmsg+0x10/0x10 [ 94.107015][ T7571] ? __lock_acquire+0x49f/0x1a40 [ 94.107030][ T7571] ? get_pid_task+0x106/0x250 [ 94.107055][ T7571] __sys_sendmsg+0x160/0x210 [ 94.107074][ T7571] ? __pfx___sys_sendmsg+0x10/0x10 [ 94.107093][ T7571] do_syscall_64+0x115/0x870 [ 94.107110][ T7571] ? clear_bhb_loop+0x70/0xc0 [ 94.107126][ T7571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.107138][ T7571] RIP: 0033:0x7fa91ed9e0d9 [ 94.107149][ T7571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.107160][ T7571] RSP: 002b:00007fa91fcef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 94.107188][ T7571] RAX: ffffffffffffffda RBX: 00007fa91f025fa0 RCX: 00007fa91ed9e0d9 [ 94.107197][ T7571] RDX: 0000000000008050 RSI: 00002000000000c0 RDI: 0000000000000004 [ 94.107204][ T7571] RBP: 00007fa91fcef090 R08: 0000000000000000 R09: 0000000000000000 [ 94.107210][ T7571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 94.107216][ T7571] R13: 00007fa91f026038 R14: 00007fa91f025fa0 R15: 00007ffed8423058 [ 94.107230][ T7571] [ 94.195326][ T42] audit: type=1400 audit(1787084034.122:760): avc: denied { write } for pid=7572 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.222932][ T7576] FAULT_INJECTION: forcing a failure. [ 94.222932][ T7576] name failslab, interval 1, probability 0, space 0, times 0 [ 94.228828][ T7576] CPU: 0 UID: 0 PID: 7576 Comm: syz.4.548 Tainted: G L syzkaller #0 PREEMPT(full) [ 94.228848][ T7576] Tainted: [L]=SOFTLOCKUP [ 94.228852][ T7576] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 94.228859][ T7576] Call Trace: [ 94.228863][ T7576] [ 94.228867][ T7576] dump_stack_lvl+0x100/0x190 [ 94.228886][ T7576] should_fail_ex.cold+0x5/0xa [ 94.228900][ T7576] should_failslab+0xc2/0x120 [ 94.228916][ T7576] __kmalloc_noprof+0xfc/0x820 [ 94.228928][ T7576] ? rcu_is_watching+0x12/0xc0 [ 94.228945][ T7576] ? tomoyo_realpath_from_path+0xb6/0x690 [ 94.228974][ T7576] tomoyo_realpath_from_path+0xb6/0x690 [ 94.228994][ T7576] tomoyo_path_number_perm+0x23c/0x580 [ 94.229008][ T7576] ? tomoyo_path_number_perm+0x22e/0x580 [ 94.229023][ T7576] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 94.229051][ T7576] ? find_held_lock+0x2b/0x80 [ 94.229060][ T7576] ? __fget_files+0x215/0x3d0 [ 94.229073][ T7576] ? hook_file_ioctl_common+0x140/0x440 [ 94.229084][ T7576] ? __fget_files+0x215/0x3d0 [ 94.229098][ T7576] ? __fget_files+0x21f/0x3d0 [ 94.229112][ T7576] security_file_ioctl+0xd3/0x230 [ 94.229129][ T7576] __x64_sys_ioctl+0xb7/0x210 [ 94.229147][ T7576] do_syscall_64+0x115/0x870 [ 94.229164][ T7576] ? clear_bhb_loop+0x70/0xc0 [ 94.229178][ T7576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.229190][ T7576] RIP: 0033:0x7fa91ed9e0d9 [ 94.229216][ T7576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.229228][ T7576] RSP: 002b:00007fa91fcef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 94.229240][ T7576] RAX: ffffffffffffffda RBX: 00007fa91f025fa0 RCX: 00007fa91ed9e0d9 [ 94.229247][ T7576] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 94.229253][ T7576] RBP: 00007fa91fcef090 R08: 0000000000000000 R09: 0000000000000000 [ 94.229259][ T7576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.229265][ T7576] R13: 00007fa91f026038 R14: 00007fa91f025fa0 R15: 00007ffed8423058 [ 94.229278][ T7576] [ 94.229306][ T7576] ERROR: Out of memory at tomoyo_realpath_from_path. [ 94.461999][ T7579] overlayfs: failed to resolve './file0': -2 [ 94.660544][ T42] audit: type=1400 audit(1787084034.622:761): avc: denied { write } for pid=7581 comm="syz.4.550" name="uvc.usb0" dev="configfs" ino=10004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 94.671940][ T42] audit: type=1400 audit(1787084034.622:762): avc: denied { write } for pid=7581 comm="syz.4.550" name="uvc.usb0" dev="configfs" ino=10004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 95.015388][ T5802] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 95.173760][ T5802] usb 9-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 95.187131][ T5802] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 95.200656][ T5802] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.236773][ T7584] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 95.243928][ T5802] opticon 9-1:1.0: opticon converter detected [ 95.261082][ T5733] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 95.269437][ T5733] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 95.273334][ T5733] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 95.275048][ T5802] usb 9-1: opticon converter now attached to ttyUSB0 [ 95.282827][ T5733] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 95.288752][ T5733] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 95.412278][ T7601] loop3: detected capacity change from 0 to 7 [ 95.420597][ T7601] loop3: p1 p4 [ 95.421856][ T7601] loop3: partition table partially beyond EOD, truncated [ 95.424609][ T7601] FAULT_INJECTION: forcing a failure. [ 95.424609][ T7601] name failslab, interval 1, probability 0, space 0, times 0 [ 95.428786][ T7601] CPU: 0 UID: 0 PID: 7601 Comm: syz.3.556 Tainted: G L syzkaller #0 PREEMPT(full) [ 95.428814][ T7601] Tainted: [L]=SOFTLOCKUP [ 95.428821][ T7601] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 95.428841][ T7601] Call Trace: [ 95.428849][ T7601] [ 95.428856][ T7601] dump_stack_lvl+0x100/0x190 [ 95.428889][ T7601] should_fail_ex.cold+0x5/0xa [ 95.428903][ T7601] should_failslab+0xc2/0x120 [ 95.428918][ T7601] kmem_cache_alloc_noprof+0x91/0x6a0 [ 95.428932][ T7601] ? __kernfs_new_node+0xd2/0xa10 [ 95.428958][ T7601] __kernfs_new_node+0xd2/0xa10 [ 95.428975][ T7601] ? __pfx___kernfs_new_node+0x10/0x10 [ 95.428993][ T7601] ? find_held_lock+0x2b/0x80 [ 95.429003][ T7601] ? kernfs_root+0xee/0x2a0 [ 95.429016][ T7601] ? kernfs_root+0xee/0x2a0 [ 95.429032][ T7601] kernfs_new_node+0x117/0x150 [ 95.429049][ T7601] __kernfs_create_file+0x53/0x350 [ 95.429062][ T7601] sysfs_add_file_mode_ns+0x207/0x3c0 [ 95.429079][ T7601] internal_create_group+0x593/0xfb0 [ 95.429096][ T7601] ? __pfx_internal_create_group+0x10/0x10 [ 95.429112][ T7601] ? kernfs_create_link+0x1bd/0x240 [ 95.429125][ T7601] internal_create_groups+0x9d/0x150 [ 95.429145][ T7601] device_add+0x77a/0x1970 [ 95.429171][ T7601] ? __pfx_device_add+0x10/0x10 [ 95.429183][ T7601] ? add_partition+0x529/0xa60 [ 95.429205][ T7601] ? __asan_memcpy+0x3c/0x60 [ 95.429217][ T7601] add_partition+0x59e/0xa60 [ 95.429235][ T7601] bdev_disk_changed+0xc6a/0x1260 [ 95.429255][ T7601] ? __pfx_bdev_disk_changed+0x10/0x10 [ 95.429270][ T7601] ? kobject_uevent_env+0x2e7/0x18b0 [ 95.429324][ T7601] loop_reread_partitions+0x68/0xe0 [ 95.429344][ T7601] loop_configure+0x1120/0x15b0 [ 95.429368][ T7601] ? __pfx_loop_configure+0x10/0x10 [ 95.429393][ T7601] lo_ioctl+0xcf3/0x1bc0 [ 95.429415][ T7601] ? __pfx_lo_ioctl+0x10/0x10 [ 95.429429][ T7601] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 95.429449][ T7601] ? kasan_quarantine_put+0x104/0x240 [ 95.429460][ T7601] ? blk_get_meta_cap+0xd4/0x6c0 [ 95.429476][ T7601] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 95.429490][ T7601] ? blkdev_common_ioctl+0x515/0x2b80 [ 95.429514][ T7601] ? __fget_files+0x215/0x3d0 [ 95.429534][ T7601] ? __pfx_lo_ioctl+0x10/0x10 [ 95.429549][ T7601] blkdev_ioctl+0x5ad/0x6f0 [ 95.429559][ T7601] ? __pfx_blkdev_ioctl+0x10/0x10 [ 95.429569][ T7601] ? selinux_file_ioctl+0x13b/0x290 [ 95.429586][ T7601] ? selinux_file_ioctl+0xb6/0x290 [ 95.429602][ T7601] ? __pfx_blkdev_ioctl+0x10/0x10 [ 95.429613][ T7601] __x64_sys_ioctl+0x18e/0x210 [ 95.429632][ T7601] do_syscall_64+0x115/0x870 [ 95.429655][ T7601] ? clear_bhb_loop+0x70/0xc0 [ 95.429667][ T7601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.429679][ T7601] RIP: 0033:0x7f937a39e0d9 [ 95.429695][ T7601] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.429705][ T7601] RSP: 002b:00007f937b2c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 95.429724][ T7601] RAX: ffffffffffffffda RBX: 00007f937a625fa0 RCX: 00007f937a39e0d9 [ 95.429731][ T7601] RDX: 00002000000002c0 RSI: 0000000000004c0a RDI: 0000000000000003 [ 95.429737][ T7601] RBP: 00007f937b2c1090 R08: 0000000000000000 R09: 0000000000000000 [ 95.429743][ T7601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 95.429749][ T7601] R13: 00007f937a626038 R14: 00007f937a625fa0 R15: 00007fff0b2bb978 [ 95.429762][ T7601] [ 95.430083][ T7601] loop3: p1 could not be added: -ENOMEM [ 95.599674][ T5908] udevd[5908]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 95.632924][ T7615] FAULT_INJECTION: forcing a failure. [ 95.632924][ T7615] name failslab, interval 1, probability 0, space 0, times 0 [ 95.640545][ T7615] CPU: 1 UID: 0 PID: 7615 Comm: syz.0.558 Tainted: G L syzkaller #0 PREEMPT(full) [ 95.640577][ T7615] Tainted: [L]=SOFTLOCKUP [ 95.640584][ T7615] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 95.640596][ T7615] Call Trace: [ 95.640603][ T7615] [ 95.640611][ T7615] dump_stack_lvl+0x100/0x190 [ 95.640643][ T7615] should_fail_ex.cold+0x5/0xa [ 95.640668][ T7615] should_failslab+0xc2/0x120 [ 95.640694][ T7615] __kmalloc_cache_noprof+0x91/0x6c0 [ 95.640715][ T7615] ? sctp_add_bind_addr+0xae/0x3e0 [ 95.640771][ T7615] sctp_add_bind_addr+0xae/0x3e0 [ 95.640802][ T7615] sctp_copy_local_addr_list+0x349/0x550 [ 95.640825][ T7615] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 95.640847][ T7615] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 95.640889][ T7615] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 95.640917][ T7615] sctp_bind_addr_copy+0xe0/0x530 [ 95.640950][ T7615] sctp_connect_new_asoc+0x1c9/0x770 [ 95.640974][ T7615] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 95.641007][ T7615] sctp_sendmsg+0x1743/0x22e0 [ 95.641034][ T7615] ? __pfx_sctp_sendmsg+0x10/0x10 [ 95.641055][ T7615] ? sock_has_perm+0x25a/0x2f0 [ 95.641080][ T7615] ? __pfx_sock_has_perm+0x10/0x10 [ 95.641121][ T7615] ? __pfx_sctp_sendmsg+0x10/0x10 [ 95.641145][ T7615] inet_sendmsg+0x11c/0x140 [ 95.641198][ T7615] ____sys_sendmsg+0x9c9/0xbe0 [ 95.641234][ T7615] ? __pfx_inet_sendmsg+0x10/0x10 [ 95.641257][ T7615] ? __pfx_____sys_sendmsg+0x10/0x10 [ 95.641292][ T7615] ___sys_sendmsg+0x190/0x1e0 [ 95.641320][ T7615] ? __pfx____sys_sendmsg+0x10/0x10 [ 95.641341][ T7615] ? __lock_acquire+0x49f/0x1a40 [ 95.641366][ T7615] ? get_pid_task+0x106/0x250 [ 95.641415][ T7615] __sys_sendmsg+0x160/0x210 [ 95.641444][ T7615] ? __pfx___sys_sendmsg+0x10/0x10 [ 95.641475][ T7615] do_syscall_64+0x115/0x870 [ 95.641501][ T7615] ? clear_bhb_loop+0x70/0xc0 [ 95.641528][ T7615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.641548][ T7615] RIP: 0033:0x7fa2a599e0d9 [ 95.641564][ T7615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.641580][ T7615] RSP: 002b:00007fa2a67f1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 95.641599][ T7615] RAX: ffffffffffffffda RBX: 00007fa2a5c25fa0 RCX: 00007fa2a599e0d9 [ 95.641611][ T7615] RDX: 0000000000008050 RSI: 00002000000000c0 RDI: 0000000000000004 [ 95.641622][ T7615] RBP: 00007fa2a67f1090 R08: 0000000000000000 R09: 0000000000000000 [ 95.641632][ T7615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 95.641642][ T7615] R13: 00007fa2a5c26038 R14: 00007fa2a5c25fa0 R15: 00007ffc13517838 [ 95.641666][ T7615] [ 95.703249][ T7617] FAULT_INJECTION: forcing a failure. [ 95.703249][ T7617] name failslab, interval 1, probability 0, space 0, times 0 [ 95.738661][ T42] audit: type=1400 audit(1787084035.692:763): avc: denied { write } for pid=7619 comm="syz.0.560" name="configs" dev="configfs" ino=10000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 95.743381][ T7617] CPU: 2 UID: 0 PID: 7617 Comm: syz.3.559 Tainted: G L syzkaller #0 PREEMPT(full) [ 95.743425][ T7617] Tainted: [L]=SOFTLOCKUP [ 95.743431][ T7617] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 95.743452][ T7617] Call Trace: [ 95.743465][ T7617] [ 95.743475][ T7617] dump_stack_lvl+0x100/0x190 [ 95.743522][ T7617] should_fail_ex.cold+0x5/0xa [ 95.743548][ T7617] should_failslab+0xc2/0x120 [ 95.743576][ T7617] __kmalloc_noprof+0xfc/0x820 [ 95.743598][ T7617] ? __pfx_dynamic_dname+0x10/0x10 [ 95.743626][ T7617] ? tomoyo_encode2+0xfb/0x3c0 [ 95.743665][ T7617] tomoyo_encode2+0xfb/0x3c0 [ 95.743695][ T7617] tomoyo_encode+0x29/0x50 [ 95.743721][ T7617] tomoyo_realpath_from_path+0x18c/0x690 [ 95.743753][ T7617] tomoyo_path_number_perm+0x23c/0x580 [ 95.743776][ T7617] ? tomoyo_path_number_perm+0x22e/0x580 [ 95.743801][ T7617] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 95.743849][ T7617] ? find_held_lock+0x2b/0x80 [ 95.743866][ T7617] ? __fget_files+0x215/0x3d0 [ 95.743886][ T7617] ? hook_file_ioctl_common+0x140/0x440 [ 95.743904][ T7617] ? __fget_files+0x215/0x3d0 [ 95.743929][ T7617] ? __fget_files+0x21f/0x3d0 [ 95.743951][ T7617] security_file_ioctl+0xd3/0x230 [ 95.743986][ T7617] __x64_sys_ioctl+0xb7/0x210 [ 95.744015][ T7617] do_syscall_64+0x115/0x870 [ 95.744088][ T7617] ? clear_bhb_loop+0x70/0xc0 [ 95.744108][ T7617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.744127][ T7617] RIP: 0033:0x7f937a39e0d9 [ 95.744152][ T7617] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.744170][ T7617] RSP: 002b:00007f937b2c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 95.744199][ T7617] RAX: ffffffffffffffda RBX: 00007f937a625fa0 RCX: 00007f937a39e0d9 [ 95.744210][ T7617] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 95.744219][ T7617] RBP: 00007f937b2c1090 R08: 0000000000000000 R09: 0000000000000000 [ 95.744231][ T7617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.744241][ T7617] R13: 00007f937a626038 R14: 00007f937a625fa0 R15: 00007fff0b2bb978 [ 95.744266][ T7617] [ 95.744302][ T7617] ERROR: Out of memory at tomoyo_realpath_from_path. [ 95.924948][ T5538] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.932300][ T7620] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 95.934838][ T7620] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 95.937495][ T7620] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 95.939687][ T7620] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 95.966464][ T7620] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 95.972699][ T7620] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 95.974685][ T7620] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 95.984914][ T7620] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 96.053048][ T5538] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.071886][ T7628] netlink: 12 bytes leftover after parsing attributes in process `syz.0.561'. [ 96.158039][ T5538] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.220521][ T7588] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.222814][ T7588] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.225280][ T7588] bridge_slave_0: entered allmulticast mode [ 96.229424][ T7588] bridge_slave_0: entered promiscuous mode [ 96.232746][ T7588] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.232971][ T7638] netlink: 12 bytes leftover after parsing attributes in process `syz.0.563'. [ 96.235009][ T7588] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.240720][ T7588] bridge_slave_1: entered allmulticast mode [ 96.243707][ T7588] bridge_slave_1: entered promiscuous mode [ 96.267788][ T7588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.288488][ T5538] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.324370][ T7588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.359628][ T7645] netlink: 8 bytes leftover after parsing attributes in process `syz.0.565'. [ 96.363524][ T7645] netlink: 24 bytes leftover after parsing attributes in process `syz.0.565'. [ 96.367198][ T7588] team0: Port device team_slave_0 added [ 96.368603][ T7588] team0: Port device team_slave_1 added [ 96.373396][ T7645] netlink: 'syz.0.565': attribute type 3 has an invalid length. [ 96.385093][ T7588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.385888][ T7645] netlink: 340 bytes leftover after parsing attributes in process `syz.0.565'. [ 96.387430][ T7588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.399046][ T7588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.403652][ T7588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.406423][ T7588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.414460][ T7588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.465378][ T7588] hsr_slave_0: entered promiscuous mode [ 96.469448][ T7588] hsr_slave_1: entered promiscuous mode [ 96.471704][ T7588] debugfs: 'hsr0' already exists in 'hsr' [ 96.477847][ T7588] Cannot create hsr debugfs directory [ 96.547937][ T61] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 96.605379][ T5538] bridge_slave_1: left allmulticast mode [ 96.607567][ T5538] bridge_slave_1: left promiscuous mode [ 96.612435][ T5538] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.623432][ T5538] bridge_slave_0: left allmulticast mode [ 96.626803][ T5538] bridge_slave_0: left promiscuous mode [ 96.631767][ T5538] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.697151][ T61] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 96.701424][ T61] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.814769][ T5538] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.820358][ T5538] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.824250][ T5538] bond0 (unregistering): Released all slaves [ 96.935367][ T61] cdc_acm 8-1:1.0: ttyACM0: USB ACM device [ 97.009789][ T7588] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 97.016953][ T7588] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.020275][ T7588] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 97.028495][ T7588] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.033566][ T7588] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 97.057758][ T7588] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.062287][ T5438] 8021q: adding VLAN 0 to HW filter on device eth6 [ 97.092226][ T7588] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 97.102652][ T7588] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.181779][ T5538] hsr_slave_0: left promiscuous mode [ 97.184878][ T5538] hsr_slave_1: left promiscuous mode [ 97.187691][ T5538] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.190090][ T5538] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.197820][ T5538] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.200881][ T5538] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.217904][ T5538] veth1_macvtap: left promiscuous mode [ 97.220356][ T5538] veth0_macvtap: left promiscuous mode [ 97.222813][ T5538] veth1_vlan: left promiscuous mode [ 97.227953][ T5538] veth0_vlan: left promiscuous mode [ 97.378669][ T7631] Cannot find add_set index 0 as target [ 97.420556][ T5538] team0 (unregistering): Port device team_slave_1 removed [ 97.430471][ T5538] team0 (unregistering): Port device team_slave_0 removed [ 97.555965][ T5438] 8021q: adding VLAN 0 to HW filter on device eth7 [ 97.583511][ T7588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.615901][ T7588] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.627699][ T535] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.630860][ T535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.675096][ T223] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.677919][ T223] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.733458][ T5515] usb 9-1: USB disconnect, device number 2 [ 97.746689][ T5515] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 97.749653][ T5515] opticon 9-1:1.0: device disconnected [ 97.805851][ T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 97.806120][ T5438] 8021q: adding VLAN 0 to HW filter on device eth8 [ 97.861541][ T7684] netlink: 8 bytes leftover after parsing attributes in process `syz.4.569'. [ 97.903778][ T5538] IPVS: stop unused estimator thread 0... [ 97.956145][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 97.964806][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 97.969282][ T10] usb 5-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 97.974189][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 97.974761][ T5438] 8021q: adding VLAN 0 to HW filter on device eth9 [ 97.980301][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.983619][ T10] usb 5-1: Product: Е [ 97.985814][ T10] usb 5-1: Manufacturer: ࠐ [ 97.987749][ T10] usb 5-1: SerialNumber: ఌ [ 98.005357][ T5735] Bluetooth: hci4: command 0x041b tx timeout [ 98.005844][ T5733] Bluetooth: hci2: command 0x0c1a tx timeout [ 98.005911][ T5733] Bluetooth: hci1: command 0x0c1a tx timeout [ 98.005929][ T5084] Bluetooth: hci0: command 0x0c1a tx timeout [ 98.134820][ T7588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.168276][ T5515] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 98.214075][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 98.216634][ T10] usb 5-1: MIDIStreaming interface descriptor not found [ 98.243254][ T10] usb 5-1: USB disconnect, device number 10 [ 98.274231][ T5734] udevd[5734]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 98.315297][ T5515] usb 9-1: Using ep0 maxpacket: 32 [ 98.318165][ T5515] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 98.325417][ T5515] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 98.328121][ T5515] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 98.330901][ T5515] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 98.333769][ T5515] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 98.337771][ T5515] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 98.340868][ T5515] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 98.342509][ T7588] veth0_vlan: entered promiscuous mode [ 98.344896][ T5515] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.351062][ T7588] veth1_vlan: entered promiscuous mode [ 98.351548][ T5515] usb 9-1: config 0 descriptor?? [ 98.381124][ T7588] veth0_macvtap: entered promiscuous mode [ 98.387984][ T7588] veth1_macvtap: entered promiscuous mode [ 98.413066][ T7588] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.424844][ T7588] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.445360][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.449099][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.465790][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.469435][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.508869][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.517494][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.550424][ T223] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.553931][ T223] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.574061][ T5515] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 98.578930][ T42] kauditd_printk_skb: 14 callbacks suppressed [ 98.578948][ T42] audit: type=1400 audit(1787084038.532:778): avc: denied { mounton } for pid=7588 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 98.664871][ T7713] FAULT_INJECTION: forcing a failure. [ 98.664871][ T7713] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 98.670430][ T7713] CPU: 1 UID: 0 PID: 7713 Comm: syz.5.570 Tainted: G L syzkaller #0 PREEMPT(full) [ 98.670462][ T7713] Tainted: [L]=SOFTLOCKUP [ 98.670469][ T7713] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 98.670490][ T7713] Call Trace: [ 98.670497][ T7713] [ 98.670505][ T7713] dump_stack_lvl+0x100/0x190 [ 98.670552][ T7713] should_fail_ex.cold+0x5/0xa [ 98.670576][ T7713] __kvm_read_guest_page+0x186/0x250 [ 98.670601][ T7713] kvm_fetch_guest_virt+0x128/0x1a0 [ 98.670624][ T7713] __do_insn_fetch_bytes+0x5e2/0x7b0 [ 98.670653][ T7713] ? __pfx___do_insn_fetch_bytes+0x10/0x10 [ 98.670680][ T7713] ? __pfx_trace_clock_local+0x10/0x10 [ 98.670708][ T7713] ? __rb_reserve_next.constprop.0+0x6f6/0x1640 [ 98.670732][ T7713] x86_decode_insn+0x3ca/0x6da0 [ 98.670757][ T7713] ? ring_buffer_lock_reserve+0x48b/0x11c0 [ 98.670782][ T7713] ? __pfx_x86_decode_insn+0x10/0x10 [ 98.670803][ T7713] ? vmx_secondary_exec_control+0xf0/0x1140 [ 98.670831][ T7713] ? init_decode_cache+0xd/0x2b0 [ 98.670850][ T7713] ? init_emulate_ctxt+0x43c/0x700 [ 98.670869][ T7713] ? __pfx_init_emulate_ctxt+0x10/0x10 [ 98.670892][ T7713] ? ring_buffer_unlock_commit+0x2e6/0x6f0 [ 98.670920][ T7713] x86_emulate_instruction+0x1052/0x1df0 [ 98.670955][ T7713] handle_ud+0x100/0x5b0 [ 98.670981][ T7713] ? __pfx_handle_ud+0x10/0x10 [ 98.671005][ T7713] ? rcu_qs+0x2a/0xe0 [ 98.671031][ T7713] ? rcu_note_context_switch+0x174/0x19c0 [ 98.671061][ T7713] ? __lock_acquire+0x49f/0x1a40 [ 98.671087][ T7713] ? __vmx_complete_interrupts+0x129/0x570 [ 98.671120][ T7713] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 98.671147][ T7713] handle_exception_nmi+0xd0c/0x1af0 [ 98.671174][ T7713] ? __pfx_handle_exception_nmi+0x10/0x10 [ 98.671201][ T7713] vmx_handle_exit+0x4d6/0x1ef0 [ 98.671228][ T7713] vcpu_run+0x35ab/0x5de0 [ 98.671260][ T7713] ? __pfx_vcpu_run+0x10/0x10 [ 98.671291][ T7713] ? complete_emulated_mmio+0x102/0x710 [ 98.671344][ T7713] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 98.671371][ T7713] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 98.671405][ T7713] kvm_vcpu_ioctl+0x730/0x1700 [ 98.671429][ T7713] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 98.671451][ T7713] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 98.671475][ T7713] ? do_vfs_ioctl+0x226/0x13e0 [ 98.671517][ T7713] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 98.671546][ T7713] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 98.671593][ T7713] ? __fget_files+0x215/0x3d0 [ 98.671613][ T7713] ? hook_file_ioctl_common+0x140/0x440 [ 98.671651][ T7713] ? selinux_file_ioctl+0x13b/0x290 [ 98.671676][ T7713] ? selinux_file_ioctl+0xb6/0x290 [ 98.671704][ T7713] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 98.671726][ T7713] __x64_sys_ioctl+0x18e/0x210 [ 98.671757][ T7713] do_syscall_64+0x115/0x870 [ 98.671838][ T7713] ? clear_bhb_loop+0x70/0xc0 [ 98.671861][ T7713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.671880][ T7713] RIP: 0033:0x7ff646d9e0d9 [ 98.671898][ T7713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.671915][ T7713] RSP: 002b:00007ff644ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 98.671945][ T7713] RAX: ffffffffffffffda RBX: 00007ff647025fa0 RCX: 00007ff646d9e0d9 [ 98.671957][ T7713] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 98.671968][ T7713] RBP: 00007ff644ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 98.671979][ T7713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.671989][ T7713] R13: 00007ff647026038 R14: 00007ff647025fa0 R15: 00007ffdc1e55fd8 [ 98.672014][ T7713] [ 98.801540][ T42] audit: type=1400 audit(1787084038.762:779): avc: denied { read write } for pid=7683 comm="syz.4.569" name="lp0" dev="devtmpfs" ino=3050 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 98.816095][ T42] audit: type=1400 audit(1787084038.762:780): avc: denied { open } for pid=7683 comm="syz.4.569" path="/dev/usb/lp0" dev="devtmpfs" ino=3050 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 98.836429][ T7717] netlink: 8 bytes leftover after parsing attributes in process `syz.0.571'. [ 98.849235][ T7717] mac80211_hwsim hwsim0 wlan0: entered promiscuous mode [ 98.856746][ T7717] macvlan0: entered allmulticast mode [ 98.880752][ T5802] usb 9-1: USB disconnect, device number 3 [ 98.902542][ T5802] usblp0: removed [ 98.957078][ T7729] loop0: detected capacity change from 0 to 4096 [ 98.962134][ T42] audit: type=1400 audit(1787084038.922:781): avc: denied { write } for pid=7720 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.973839][ T7729] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 98.977277][ T7729] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 98.980423][ T7729] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 98.983862][ T7729] ldm_validate_privheads(): Cannot find PRIVHEAD 3. [ 98.986194][ T7729] ldm_validate_privheads(): Primary and backup PRIVHEADs don't match. [ 98.988832][ T7729] loop0: [ 99.029145][ T42] audit: type=1400 audit(1787084038.992:782): avc: denied { write } for pid=7733 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.109524][ T7743] loop3: detected capacity change from 0 to 7 [ 99.112922][ T7743] loop3: p1 p4 [ 99.114074][ T7743] loop3: partition table partially beyond EOD, truncated [ 99.117158][ T7743] FAULT_INJECTION: forcing a failure. [ 99.117158][ T7743] name failslab, interval 1, probability 0, space 0, times 0 [ 99.121444][ T7743] CPU: 2 UID: 0 PID: 7743 Comm: syz.5.578 Tainted: G L syzkaller #0 PREEMPT(full) [ 99.121467][ T7743] Tainted: [L]=SOFTLOCKUP [ 99.121472][ T7743] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 99.121481][ T7743] Call Trace: [ 99.121487][ T7743] [ 99.121493][ T7743] dump_stack_lvl+0x100/0x190 [ 99.121517][ T7743] should_fail_ex.cold+0x5/0xa [ 99.121536][ T7743] should_failslab+0xc2/0x120 [ 99.121556][ T7743] kmem_cache_alloc_noprof+0x91/0x6a0 [ 99.121575][ T7743] ? __kernfs_new_node+0xd2/0xa10 [ 99.121609][ T7743] __kernfs_new_node+0xd2/0xa10 [ 99.121632][ T7743] ? __pfx___kernfs_new_node+0x10/0x10 [ 99.121657][ T7743] ? find_held_lock+0x2b/0x80 [ 99.121670][ T7743] ? kernfs_root+0xee/0x2a0 [ 99.121687][ T7743] ? kernfs_root+0xee/0x2a0 [ 99.121709][ T7743] kernfs_new_node+0x117/0x150 [ 99.121732][ T7743] __kernfs_create_file+0x53/0x350 [ 99.121749][ T7743] sysfs_add_file_mode_ns+0x207/0x3c0 [ 99.121770][ T7743] internal_create_group+0x593/0xfb0 [ 99.121794][ T7743] ? __pfx_internal_create_group+0x10/0x10 [ 99.121816][ T7743] ? kernfs_create_link+0x1bd/0x240 [ 99.121834][ T7743] internal_create_groups+0x9d/0x150 [ 99.121854][ T7743] device_add+0x77a/0x1970 [ 99.121889][ T7743] ? __pfx_device_add+0x10/0x10 [ 99.121904][ T7743] ? add_partition+0x529/0xa60 [ 99.121934][ T7743] ? __asan_memcpy+0x3c/0x60 [ 99.121950][ T7743] add_partition+0x59e/0xa60 [ 99.121974][ T7743] bdev_disk_changed+0xc6a/0x1260 [ 99.122002][ T7743] ? __pfx_bdev_disk_changed+0x10/0x10 [ 99.122025][ T7743] ? kobject_uevent_env+0x2e7/0x18b0 [ 99.122049][ T7743] loop_reread_partitions+0x68/0xe0 [ 99.122074][ T7743] loop_configure+0x1120/0x15b0 [ 99.122107][ T7743] ? __pfx_loop_configure+0x10/0x10 [ 99.122145][ T7743] lo_ioctl+0xcf3/0x1bc0 [ 99.122173][ T7743] ? __pfx_lo_ioctl+0x10/0x10 [ 99.122191][ T7743] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 99.122211][ T7743] ? kasan_quarantine_put+0x104/0x240 [ 99.122226][ T7743] ? blk_get_meta_cap+0xd4/0x6c0 [ 99.122248][ T7743] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 99.122268][ T7743] ? blkdev_common_ioctl+0x515/0x2b80 [ 99.122308][ T7743] ? __fget_files+0x215/0x3d0 [ 99.122325][ T7743] ? __pfx_lo_ioctl+0x10/0x10 [ 99.122344][ T7743] blkdev_ioctl+0x5ad/0x6f0 [ 99.122358][ T7743] ? __pfx_blkdev_ioctl+0x10/0x10 [ 99.122371][ T7743] ? selinux_file_ioctl+0x13b/0x290 [ 99.122392][ T7743] ? selinux_file_ioctl+0xb6/0x290 [ 99.122412][ T7743] ? __pfx_blkdev_ioctl+0x10/0x10 [ 99.122427][ T7743] __x64_sys_ioctl+0x18e/0x210 [ 99.122451][ T7743] do_syscall_64+0x115/0x870 [ 99.122472][ T7743] ? clear_bhb_loop+0x70/0xc0 [ 99.122490][ T7743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.122504][ T7743] RIP: 0033:0x7ff646d9e0d9 [ 99.122518][ T7743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.122532][ T7743] RSP: 002b:00007ff644ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 99.122547][ T7743] RAX: ffffffffffffffda RBX: 00007ff647025fa0 RCX: 00007ff646d9e0d9 [ 99.122556][ T7743] RDX: 00002000000002c0 RSI: 0000000000004c0a RDI: 0000000000000003 [ 99.122565][ T7743] RBP: 00007ff644ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 99.122574][ T7743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 99.122582][ T7743] R13: 00007ff647026038 R14: 00007ff647025fa0 R15: 00007ffdc1e55fd8 [ 99.122601][ T7743] [ 99.122865][ T7743] loop3: p1 could not be added: -ENOMEM [ 99.236369][ T42] audit: type=1400 audit(1787084039.162:783): avc: denied { write } for pid=7745 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.277637][ T5908] udevd[5908]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 99.284027][ T42] audit: type=1400 audit(1787084039.242:784): avc: denied { write } for pid=7751 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.348658][ T7754] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 99.439429][ T42] audit: type=1400 audit(1787084039.402:785): avc: denied { name_connect } for pid=7758 comm="syz.4.580" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 99.468343][ T42] audit: type=1400 audit(1787084039.432:786): avc: denied { accept } for pid=7758 comm="syz.4.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 99.468759][ T7759] ================================================================== [ 99.476747][ T7759] BUG: KASAN: slab-out-of-bounds in try_module_get+0x4c/0xd0 [ 99.478925][ T7759] Write of size 4 at addr ffff88802e244d08 by task syz.4.580/7759 [ 99.481431][ T7759] [ 99.483098][ T7759] CPU: 1 UID: 0 PID: 7759 Comm: syz.4.580 Tainted: G L syzkaller #0 PREEMPT(full) [ 99.483118][ T7759] Tainted: [L]=SOFTLOCKUP [ 99.483123][ T7759] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 99.483131][ T7759] Call Trace: [ 99.483136][ T7759] [ 99.483142][ T7759] dump_stack_lvl+0x100/0x190 [ 99.483158][ T7759] print_report+0x13d/0x4b0 [ 99.483177][ T7759] ? __virt_addr_valid+0x239/0x430 [ 99.483193][ T7759] ? try_module_get+0x4c/0xd0 [ 99.483205][ T7759] kasan_report+0xdf/0x1c0 [ 99.483220][ T7759] ? try_module_get+0x4c/0xd0 [ 99.483233][ T7759] kasan_check_range+0x10f/0x1e0 [ 99.483251][ T7759] try_module_get+0x4c/0xd0 [ 99.483264][ T7759] dvb_device_open+0x124/0x3b0 [ 99.483338][ T7759] ? __pfx_dvb_device_open+0x10/0x10 [ 99.483355][ T7759] chrdev_open+0x234/0x6a0 [ 99.483370][ T7759] ? __pfx_chrdev_open+0x10/0x10 [ 99.483384][ T7759] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 99.483408][ T7759] do_dentry_open+0x6ab/0x14d0 [ 99.483418][ T7759] ? __pfx_chrdev_open+0x10/0x10 [ 99.483432][ T7759] vfs_open+0x82/0x3f0 [ 99.483446][ T7759] path_openat+0x19fa/0x2440 [ 99.483460][ T7759] ? __pfx_path_openat+0x10/0x10 [ 99.483477][ T7759] do_file_open+0x20e/0x430 [ 99.483492][ T7759] ? __pfx_do_file_open+0x10/0x10 [ 99.483519][ T7759] ? alloc_fd+0x471/0x7a0 [ 99.483533][ T7759] ? do_getname+0x191/0x390 [ 99.483552][ T7759] do_sys_openat2+0x10f/0x1e0 [ 99.483569][ T7759] ? __pfx_do_sys_openat2+0x10/0x10 [ 99.483588][ T7759] __x64_sys_openat+0x12d/0x210 [ 99.483604][ T7759] ? __pfx___x64_sys_openat+0x10/0x10 [ 99.483625][ T7759] do_syscall_64+0x115/0x870 [ 99.483641][ T7759] ? clear_bhb_loop+0x70/0xc0 [ 99.483654][ T7759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.483665][ T7759] RIP: 0033:0x7fa91ed5e90e [ 99.483676][ T7759] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 99.483688][ T7759] RSP: 002b:00007fa91fceeb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 99.483701][ T7759] RAX: ffffffffffffffda RBX: 00007fa91fcef6c0 RCX: 00007fa91ed5e90e [ 99.483709][ T7759] RDX: 0000000000000002 RSI: 00007fa91fceec00 RDI: ffffffffffffff9c [ 99.483717][ T7759] RBP: 00007fa91fceec00 R08: 0000000000000000 R09: 0000000000000000 [ 99.483725][ T7759] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 99.483733][ T7759] R13: 00007fa91f026038 R14: 00007fa91f025fa0 R15: 00007ffed8423058 [ 99.483745][ T7759] [ 99.483749][ T7759] [ 99.558020][ T7763] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 99.558337][ T7759] Allocated by task 1: [ 99.558361][ T7759] kasan_save_stack+0x30/0x50 [ 99.558383][ T7759] kasan_save_track+0x14/0x30 [ 99.569643][ T7759] __kasan_kmalloc+0xaa/0xb0 [ 99.571303][ T7759] __kvmalloc_node_noprof+0x34f/0x970 [ 99.573241][ T7759] v4l2_ctrl_new+0x4a6/0x23a0 [ 99.575102][ T7759] v4l2_ctrl_new_custom+0x41b/0xa20 [ 99.577045][ T7759] vimc_sensor_add+0xb9/0x5b0 [ 99.578482][ T7759] vimc_probe+0x3a0/0xfb0 [ 99.579808][ T7759] platform_probe+0x106/0x1d0 [ 99.581322][ T7759] really_probe+0x241/0xa60 [ 99.582767][ T7759] __driver_probe_device+0x20e/0x450 [ 99.584441][ T7759] driver_probe_device+0x4a/0x140 [ 99.586031][ T7759] __driver_attach+0x21f/0x5b0 [ 99.587569][ T7759] bus_for_each_dev+0x13e/0x1d0 [ 99.589140][ T7759] bus_add_driver+0x305/0x5b0 [ 99.590635][ T7759] driver_register+0x1e2/0x360 [ 99.592176][ T7759] vimc_init+0x67/0xb0 [ 99.593481][ T7759] do_one_initcall+0x11d/0x700 [ 99.594935][ T7759] kernel_init_freeable+0x6ea/0x7b0 [ 99.596724][ T7759] kernel_init+0x21/0x1e0 [ 99.598095][ T7759] ret_from_fork+0x72b/0xd50 [ 99.599567][ T7759] ret_from_fork_asm+0x1a/0x30 [ 99.601133][ T7759] [ 99.601956][ T7759] The buggy address belongs to the object at ffff88802e244c00 [ 99.601956][ T7759] which belongs to the cache kmalloc-256 of size 256 [ 99.606409][ T7759] The buggy address is located 16 bytes to the right of [ 99.606409][ T7759] allocated 248-byte region [ffff88802e244c00, ffff88802e244cf8) [ 99.610924][ T7759] [ 99.611699][ T7759] The buggy address belongs to the physical page: [ 99.613733][ T7759] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2e244 [ 99.616540][ T7759] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 99.619477][ T7759] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 99.622172][ T7759] page_type: f5(slab) [ 99.623443][ T7759] raw: 00fff00000000040 ffff88801c042b40 dead000000000100 dead000000000122 [ 99.626095][ T7759] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 99.628684][ T7759] head: 00fff00000000040 ffff88801c042b40 dead000000000100 dead000000000122 [ 99.631392][ T7759] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 99.634083][ T7759] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 99.636798][ T7759] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 99.639418][ T7759] page dumped because: kasan: bad access detected [ 99.641533][ T7759] page_owner tracks the page as allocated [ 99.643923][ T7759] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 12763447309, free_ts 0 [ 99.651584][ T7759] post_alloc_hook+0xfd/0x120 [ 99.653588][ T7759] get_page_from_freelist+0xf48/0x3530 [ 99.655879][ T7759] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 99.658269][ T7759] new_slab+0xa2/0x640 [ 99.659989][ T7759] refill_objects+0xe3/0x410 [ 99.661879][ T7759] __pcs_replace_empty_main+0x376/0x680 [ 99.664081][ T7759] __kmalloc_cache_noprof+0x479/0x6c0 [ 99.666180][ T7759] dvb_register_device+0x1d6/0x1e20 [ 99.668265][ T7759] dvb_register_frontend+0x552/0x820 [ 99.669949][ T7759] vidtv_bridge_probe+0x44b/0xa30 [ 99.671661][ T7759] platform_probe+0x106/0x1d0 [ 99.673106][ T7759] really_probe+0x241/0xa60 [ 99.674761][ T7759] __driver_probe_device+0x20e/0x450 [ 99.676495][ T7759] driver_probe_device+0x4a/0x140 [ 99.678209][ T7759] __driver_attach+0x21f/0x5b0 [ 99.679733][ T7759] bus_for_each_dev+0x13e/0x1d0 [ 99.681331][ T7759] page_owner free stack trace missing [ 99.683364][ T7759] [ 99.684339][ T7759] Memory state around the buggy address: [ 99.686478][ T7759] ffff88802e244c00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 99.689364][ T7759] ffff88802e244c80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc [ 99.691981][ T7759] >ffff88802e244d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 99.695053][ T7759] ^ [ 99.696735][ T7759] ffff88802e244d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 99.699856][ T7759] ffff88802e244e00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 99.702379][ T7759] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 99.709704][ T7759] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 99.711884][ T7759] CPU: 0 UID: 0 PID: 7759 Comm: syz.4.580 Tainted: G L syzkaller #0 PREEMPT(full) [ 99.715020][ T7759] Tainted: [L]=SOFTLOCKUP [ 99.716292][ T7759] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 99.719175][ T7759] Call Trace: [ 99.720183][ T7759] [ 99.721116][ T7759] dump_stack_lvl+0x100/0x190 [ 99.722535][ T7759] vpanic+0x552/0x970 [ 99.723727][ T7759] ? __pfx_vpanic+0x10/0x10 [ 99.725063][ T7759] ? mark_held_locks+0x40/0x70 [ 99.726495][ T7759] ? try_module_get+0x4c/0xd0 [ 99.727924][ T7759] panic+0xd1/0xe0 [ 99.729050][ T7759] ? __pfx_panic+0x10/0x10 [ 99.730388][ T7759] ? try_module_get+0x4c/0xd0 [ 99.731828][ T7759] ? preempt_schedule_common+0x42/0xc0 [ 99.733443][ T7759] check_panic_on_warn.cold+0x19/0x34 [ 99.735032][ T7759] end_report.part.0+0x3a/0x90 [ 99.736484][ T7759] kasan_report.cold+0xe/0x18 [ 99.738098][ T7759] ? try_module_get+0x4c/0xd0 [ 99.739537][ T7759] kasan_check_range+0x10f/0x1e0 [ 99.741041][ T7759] try_module_get+0x4c/0xd0 [ 99.742366][ T7759] dvb_device_open+0x124/0x3b0 [ 99.743807][ T7759] ? __pfx_dvb_device_open+0x10/0x10 [ 99.745400][ T7759] chrdev_open+0x234/0x6a0 [ 99.746772][ T7759] ? __pfx_chrdev_open+0x10/0x10 [ 99.748294][ T7759] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 99.750217][ T7759] do_dentry_open+0x6ab/0x14d0 [ 99.751726][ T7759] ? __pfx_chrdev_open+0x10/0x10 [ 99.753273][ T7759] vfs_open+0x82/0x3f0 [ 99.754553][ T7759] path_openat+0x19fa/0x2440 [ 99.756003][ T7759] ? __pfx_path_openat+0x10/0x10 [ 99.757549][ T7759] do_file_open+0x20e/0x430 [ 99.758999][ T7759] ? __pfx_do_file_open+0x10/0x10 [ 99.760541][ T7759] ? alloc_fd+0x471/0x7a0 [ 99.762025][ T7759] ? do_getname+0x191/0x390 [ 99.763677][ T7759] do_sys_openat2+0x10f/0x1e0 [ 99.765509][ T7759] ? __pfx_do_sys_openat2+0x10/0x10 [ 99.767537][ T7759] __x64_sys_openat+0x12d/0x210 [ 99.769066][ T7759] ? __pfx___x64_sys_openat+0x10/0x10 [ 99.770772][ T7759] do_syscall_64+0x115/0x870 [ 99.772449][ T7759] ? clear_bhb_loop+0x70/0xc0 [ 99.774101][ T7759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.775868][ T7759] RIP: 0033:0x7fa91ed5e90e [ 99.777284][ T7759] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 99.784314][ T7759] RSP: 002b:00007fa91fceeb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 99.786847][ T7759] RAX: ffffffffffffffda RBX: 00007fa91fcef6c0 RCX: 00007fa91ed5e90e [ 99.789897][ T7759] RDX: 0000000000000002 RSI: 00007fa91fceec00 RDI: ffffffffffffff9c [ 99.793015][ T7759] RBP: 00007fa91fceec00 R08: 0000000000000000 R09: 0000000000000000 [ 99.795453][ T7759] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 99.798005][ T7759] R13: 00007fa91f026038 R14: 00007fa91f025fa0 R15: 00007ffed8423058 [ 99.801019][ T7759] [ 99.802916][ T7759] Kernel Offset: disabled [ 99.804721][ T7759] Rebooting in 86400 seconds.. VM DIAGNOSIS: 20:13:59 Registers: info registers vcpu 0 CPU#0 RAX=ffffffff981b4e38 RBX=000000000000016d RCX=00000000000003ed RDX=ffffffff968be6f8 RSI=00000000000003ed RDI=ffffffff98103dd8 RBP=0000000000000030 RSP=ffffc900065c6c98 R8 =ffffffff968be728 R9 =0000000000000281 R10=ffffc900065c6e28 R11=0000000000000000 R12=ffffffff81e590e0 R13=ffffc900065c6d40 R14=ffffffff81e59ef0 R15=ffffffff98103dd8 RIP=ffffffff81e5a9b7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fa2a67f16c0 ffffffff 00c00000 GS =0000 ffff8880d5bd6000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffde3f70678 CR3=000000002aaf2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 307a79732f74656e 2f70756f7267637a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc13517d26 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc13517d26 00007ffc13517d2c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa2a5a35607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa2a5a35647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa2a5a357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa2a5a35639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000037 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a50315 RDI=ffffffff9bc0e240 RBP=ffffffff9bc0e200 RSP=ffffc90005aff320 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000035373754 R12=0000000000000000 R13=0000000000000037 R14=ffffffff9b9001f2 R15=ffffffff85a502b0 RIP=ffffffff85a5033f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fa91fcef6c0 ffffffff 00c00000 GS =0000 ffff8880d5cd6000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fa91ed87700 CR3=0000000055f5c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000f8000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffed8423546 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffed8423546 00007ffed842354c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa91ee35607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa91ee35647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa91ee357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa91ee35639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000030646e 65746e6f72662f30 726574706164612f 6276642f7665642f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000013474d 46574d4c51450c13 514657534247420c 4155470c5546470c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa91eff25f8 00007fa91eff25c8 00007fa91eff2600 00007fa91eff25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 00000000000000a0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=dffffc0000000000 RBX=0000000000000000 RCX=fffff52000c93f2c RDX=ffff888033da0000 RSI=ffffffff8266ae7f RDI=ffff888033da0000 RBP=ffffea000123d100 RSP=ffffc9000649f920 R8 =0000000000000007 R9 =0000000000002000 R10=0000000000000000 R11=0000000000000000 R12=dffffc0000000000 R13=ffffc9000649f980 R14=00000000080000f9 R15=ffffc9000649f9b0 RIP=ffffffff8266ae91 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555584294500 ffffffff 00c00000 GS =0000 ffff8880d5dd6000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c3d1a5b CR3=000000004f316000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000030100 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff647b5d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdc1e564c6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdc1e564c6 00007ffdc1e564cc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff646e35607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff646e35647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff646e357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff646e35639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff646ff2600 00007ff646ff25e0 00007ff646ff25e8 00007ff646ff2618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff647b5d020 00007ff646ff25c0 00007ff646ff25d0 00007ff646ff2610 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff646ff25f8 00007ff646ff25c8 00007ff646ff2600 00007ff646ff25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000130 0000000000000004 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffc900046475dc RDX=1ffff920008c8ed1 RSI=ffffffff8297288f RDI=ffffc90004647688 RBP=ffffc90004647718 RSP=ffffc90004647618 R8 =0000000000000001 R9 =0000000000000007 R10=0000000000000200 R11=0000000000019726 R12=ffffffff81f48300 R13=ffffc90004647688 R14=0000000000000000 R15=ffff88802775a580 RIP=ffffffff81b8733a RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f47c115e880 ffffffff 00c00000 GS =0000 ffff8880d5ed6000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ff646fed158 CR3=000000002feec000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000100001 Opmask01=000000000000001f Opmask02=00000000ffff7fdf Opmask03=0000000000400004 Opmask04=00000000fffff7ff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f68637461772f76 6564752f6e75722f ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f68637461772f76 6564752f6e75722f ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055a0f7163a60 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f47c0bf1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f47c0bf1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff0000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 737326d384651483 737326d6df8ef559 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 10fdfc0da1347492 73737376297c0202 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 772f766564752f6e 75722f00646c6f2e 68637461772f7665 64752f6e75722f00 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 520a534041500a4b 50570a0041494a0b 4d465144520a5340 41500a4b50570a00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055a0f71bf3a8 000055a0f71bf3a8 0000000000000041 000000000000302e ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7766736c6d612c38 2c312c30722c4339 312c3739312c3938 312c3838312c3538 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 312c3937312c3136 312c3131312c3031 312c32452c34442c 30442c45412c3841 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c34412c42382c30 382c33372c32372c 31376b2c34312c32 2c312c30652d3033 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4442654344464670 3243353176333030 30623a7475706e69 3d5341494c41444f ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000014100 000000000000303d 44440045525f5346 0054242044492065 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000