last executing test programs: 7.604005027s ago: executing program 2 (id=116): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000700000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0x0, 0x0}, 0x8) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0)=r1, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r2, 0x4) 7.531090853s ago: executing program 2 (id=117): syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) 7.530512771s ago: executing program 2 (id=118): r0 = syz_open_dev$vbi(0x0, 0x3, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000001c0)={0xf010000, 0xff, 0x6, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x9909e4, 0x5, '\x00', @value=0x6}}) 7.471614179s ago: executing program 2 (id=119): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1a7) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000980)=@newsa={0x10c, 0x10, 0x1, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80}, {@in6=@loopback, 0x0, 0x2b}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {0x0, 0x0, 0x7}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in6=@loopback}, @XFRMA_SET_MARK={0x8, 0x1d, 0xffff}]}, 0x10c}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x2b}, 0xa, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x2}}, 0xe8) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000700)={0xa, 0x1234, 0x0, @loopback}, 0x1c) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r2 = open$dir(&(0x7f0000000040)='./mnt\x00', 0x0, 0x2) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0xc0406618, &(0x7f0000000240)={@desc={0x1, 0x0, @desc2}}) 7.471354291s ago: executing program 2 (id=120): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r0 = io_uring_setup(0x1781, &(0x7f0000000140)={0x0, 0x5dda, 0x40, 0x0, 0x268}) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYRESDEC=r3], 0xe8}, 0x1, 0x0, 0x0, 0x84}, 0x0) close(r2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) write$UHID_CREATE2(r1, &(0x7f0000001000)={0xb, {'syz1\x00', 'syz0\x00', 'syz0\x00', 0x35, 0x5, 0x57e, 0x330, 0x0, 0x0, "0600ff0901a101150026ff007508951f852009018102852109018102852209018102851609019102851709019102851509019102c0"}}, 0x14d) close_range(r0, 0xffffffffffffffff, 0x0) 6.270989667s ago: executing program 0 (id=129): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha512)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept$alg(r2, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0x68}}, 0x40) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x20188bc, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) readlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', &(0x7f0000000200)=""/34, 0x22) fsconfig$FSCONFIG_SET_STRING(r6, 0x8, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)=@newqdisc={0x24, 0x2a, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0x10}, {0x2, 0x7}}}, 0x24}}, 0x4008000) write(r5, &(0x7f0000000000)='3', 0x4e) mkdirat(r5, 0x0, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) 6.078548033s ago: executing program 0 (id=130): ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000380)={{}, "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"}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) (async, rerun: 32) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) (rerun: 32) ioctl(r0, 0x40104d05, &(0x7f0000000900)) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) (async, rerun: 64) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xa, 0x1, 'limit\x00'}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x4}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xd0}}, 0x0) (async, rerun: 64) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01052dbd6000fddbdf250400000008000800e0000002080002000000000008000700ac1414bb2cca55db597badc72b3e63a51182f32effdba39adefd04c51142a05dcb3b33d88b6b772cfb5aee7d2021edaa11e91148011070375044d91bb5d675aa34d438a9727dd73e9e826915c62ec0a3794635a7d2767340c2e1d53684bb0f83ec897b3c629affe224098b566009f777f78a9791cc4f96ba345b7a39d2566ccd375517cd3fe3e920f21ce3e19944efc9c3b6cea3382f61c6066f0b8100c5bf9cc7147e58c3802abdcbf8912175b8cfbb0b56bbc6f2ad7b"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4040000) (async) r4 = fsopen(&(0x7f0000000000)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='127.0.0.1:/export\x00', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000000c0)='addr\x00', &(0x7f0000000100)='127.0.0.1\x00', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000140)='vers\x00', &(0x7f0000000180)='3\x00', 0x0) (async, rerun: 64) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) (rerun: 64) 5.9612615s ago: executing program 0 (id=131): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x81d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x401}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.711553358s ago: executing program 0 (id=134): r0 = syz_open_dev$video(&(0x7f0000000280), 0x20004, 0x2) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x2, 0x1, 0x1}) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000600)=0x1) 5.581829862s ago: executing program 0 (id=137): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r0 = io_uring_setup(0x1781, &(0x7f0000000140)={0x0, 0x5dda, 0x40, 0x0, 0x268}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYRESDEC=r4], 0xe8}, 0x1, 0x0, 0x0, 0x84}, 0x0) close(r3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$AUTOFS_IOC_FAIL(r6, 0x4c80, 0xffffffe4) write$UHID_CREATE2(r2, &(0x7f0000001000)={0xb, {'syz1\x00', 'syz0\x00', 'syz0\x00', 0x35, 0x5, 0x57e, 0x330, 0x0, 0x0, "0600ff0901a101150026ff007508951f852009018102852109018102852209018102851609019102851709019102851509019102c0"}}, 0x14d) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000040)={0xc, {0x5, "2200e01500"}}, 0xb) sendmmsg$inet6(r1, &(0x7f000000cf00)=[{{&(0x7f00000084c0)={0xa, 0xfffc, 0x0, @loopback}, 0x1c, &(0x7f0000008900)=[{&(0x7f0000008500)="88", 0xff12}], 0x1}}], 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xae, 0x66, 0x0, 0x0, 0xfffffffe}, [@call={0x16}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x23) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f0000000100)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./mnt\x00', &(0x7f00000001c0)='proc\x00', 0x90410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') openat(r5, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 2.051148324s ago: executing program 1 (id=153): r0 = syz_open_dev$vbi(&(0x7f0000000a00), 0x3, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000001c0)={0xf010000, 0xff, 0x6, 0xffffffffffffffff, 0x0, 0x0}) 1.981101531s ago: executing program 1 (id=154): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000005c00)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r0}, &(0x7f0000000840), &(0x7f0000000140)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[], 0x0) 1.980612129s ago: executing program 1 (id=155): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000400000004000000ff00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000d40000000002000000040000000000000000"], 0x50) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000040)=0x80, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendto(r2, &(0x7f0000000000)="240000003f0005000a0000000000000002020000000000000c0001006f76732d64703000", 0x24, 0x0, 0x0, 0x0) sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000200)="0ee55c601f410a3e94620391ff0c449bb7d79ffd603dd3fd177430f13ce2bf4e6728422c213b3ec31d919f525ef6a0210e6bba55044f6e659ead8cec69ef8ba2d0384933921c60166976c610f2307e2cfab276ea01118439a54ba187efb4c87958a8b775fd2db1c466ec71e8bed4f87e0cd0165faf8766a40501e4d901ceabbd3fd2b4a7cba0521fbb7399d5be5b715d7fd96c8aca657bee19ceccb5621d5df04c508e35806e2337a7c2e6e2042ac24b1540c960e7135550660b6f10a3f0817ef3cc0e082c276ea314b9fd50cb4a7715a72f4112bb73b8f112c83a41258831b7b47bb9ac8c4af7e3c52a7af76bd25857c33fac0352ce58fadef152088b", 0xfd, 0x81, &(0x7f0000000400)=@un=@file={0x1, './file0\x00'}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) recvmsg(r2, &(0x7f0000001880)={&(0x7f0000000500)=@tipc=@id, 0x80, &(0x7f0000001780)=[{&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/158, 0x9e}, {&(0x7f0000001640)=""/11, 0xb}, {&(0x7f0000001680)=""/199, 0xc7}], 0x4, &(0x7f00000017c0)=""/155, 0x9b}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000018c0)=ANY=[@ANYBLOB="640000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="7b8a0500000000004400128c0b000100697036745ef65e6e6c00003400028008000100", @ANYRES32=r6, @ANYBLOB="14000300fe8000000000000000000000000000bb14000200fe880000000000000000000000000301"], 0x64}}, 0x4008000) sendmsg$nl_route_sched_retired(r4, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)=@deltfilter={0x54, 0x2d, 0x4, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x9, 0x10}, {0x9, 0xb}, {0x5, 0xb}}, [@f_tcindex={{0xc}, {0x24, 0x2, [@TCA_TCINDEX_SHIFT={0x8, 0x3, 0x1}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0x0, 0xa}}, @TCA_TCINDEX_FALL_THROUGH={0x8, 0x4, 0x1}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0x8, 0x8}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x404c041) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000001a40)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001940)=ANY=[@ANYBLOB="fffff77f", @ANYRES16=0x0, @ANYBLOB="000225bd7000ffdbdf256800000008000300", @ANYRES32=r3, @ANYBLOB="0c009900ff030000150000002000c7000004a5040105060106030c03d004080400069a04ad192624917c9c8f1c00c7000904600508030104090701040703070484a8efcbd5804c983400c70010060505bf000103070101010003f80605030505fd0740020206100038060306ff00e40308030805cc73838c78d5ed09"], 0x98}, 0x1, 0x0, 0x0, 0x40040}, 0x1) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f00000001c0)=0x3) socket$unix(0x1, 0x0, 0x0) ioctl$PPPIOCSPASS(r8, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x60, 0x6}]}) close(0x3) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r0, &(0x7f0000000200), 0x0}, 0x20) 1.841300515s ago: executing program 1 (id=156): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000010c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r1, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, 0x0, 0x0, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000000180)={0x50, 0x0, r2, {0x7, 0x2b, 0x69, 0x3d411004, 0x2, 0xb, 0x6, 0xcccb, 0x0, 0x0, 0x40, 0x7}}, 0x50) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r3, 0x2) 1.151419079s ago: executing program 0 (id=157): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000000)='jffs2\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r0, 0x103, 0x1) mlockall(0x3) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup(r1, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, 0x0, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x1, 0x252}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r4, 0xc0107520, 0x0, 0x0, 0x700, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000140)={0x1d, r2, 0x102030405060708, {0x0, 0x1, 0x4}, 0xff}, 0x18) mlockall(0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) syz_io_uring_setup(0x1a7, &(0x7f00000000c0)={0x0, 0x62a8, 0x1, 0x2, 0x50}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0xc, 0x6000, @fd=r0, 0x9, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) 960.863377ms ago: executing program 1 (id=158): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x249}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000734000/0x400000)=nil) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000009200)={0x2020}, 0x2020) syz_fuse_handle_req(r2, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x26d01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r4, 0x1, &(0x7f0000000700)=[&(0x7f0000000000)={0xfff0, 0x20000000, 0x4, 0x1, 0xc, r3, &(0x7f00000009c0)='1', 0x1, 0xf, 0x0, 0x0, r3}]) 441.250876ms ago: executing program 3 (id=160): socket$inet_tcp(0x2, 0x1, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 440.86693ms ago: executing program 3 (id=161): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 291.543429ms ago: executing program 3 (id=162): r0 = syz_open_dev$vbi(&(0x7f0000000a00), 0x3, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000001c0)={0xf010000, 0xff, 0x6, 0xffffffffffffffff, 0x0, 0x0}) 291.14895ms ago: executing program 3 (id=163): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000005c00)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r0}, &(0x7f0000000840), &(0x7f0000000140)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[], 0x0) 290.772599ms ago: executing program 3 (id=164): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000380)={0x203, 0x5, 0x800ff5, 0x0, 0x0}) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000040), 0x0, 0x0, 0x1) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(r1, 0xc0106441, &(0x7f0000000280)={0x0, 0x0, 0x4}) ioctl$DRM_IOCTL_PANTHOR_VM_DESTROY(r0, 0xc0086442, &(0x7f0000000680)={r4}) setreuid(0x0, 0xee01) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0xfffffffffffffe20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xa, 0x5, &(0x7f00000006c0)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x7, 0x93, &(0x7f00000003c0)=""/147, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x2, 0x2}, 0x8, 0x10, &(0x7f00000004c0)={0x4, 0xb, 0x4, 0xc}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000500)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0xc4}, 0x94) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x800, 0x0, 0xff, 0x1, 0x0, 0xffff}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000600)={'gretap0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x0, 0x8000, 0x8001, 0x6, {{0x9, 0x4, 0x2, 0x34, 0x24, 0x68, 0x0, 0x10, 0x29, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0xf, 0x14, [@loopback, @multicast2, @loopback]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x0, &(0x7f0000000640), &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000380)={0x2, 0x8001, 0x8000}) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000380)={0x6, 0x2006, 0x4}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r8, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_IPV6_DSTOPTS(r8, 0x29, 0x3b, &(0x7f0000000100)=ANY=[@ANYRESHEX=r2], 0x8) setsockopt$inet6_int(r8, 0x29, 0x3c, &(0x7f0000000240)=0xbc4, 0x4) sendto$inet6(r8, &(0x7f0000000840)="a6", 0x1, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x9000, @loopback, 0x9}, 0x1c) ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, 0x0) syz_clone(0x24100000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000, 0x810, r3, 0x3b2a2000) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 206.142957ms ago: executing program 3 (id=165): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r0 = io_uring_setup(0x1781, &(0x7f0000000140)={0x0, 0x5dda, 0x40, 0x0, 0x268}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYRESDEC=r4], 0xe8}, 0x1, 0x0, 0x0, 0x84}, 0x0) close(r3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$AUTOFS_IOC_FAIL(r6, 0x4c80, 0xffffffe4) write$UHID_CREATE2(r2, &(0x7f0000001000)={0xb, {'syz1\x00', 'syz0\x00', 'syz0\x00', 0x35, 0x5, 0x57e, 0x330, 0x0, 0x0, "0600ff0901a101150026ff007508951f852009018102852109018102852209018102851609019102851709019102851509019102c0"}}, 0x14d) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000040)={0xc, {0x5, "2200e01500"}}, 0xb) sendmmsg$inet6(r1, &(0x7f000000cf00)=[{{&(0x7f00000084c0)={0xa, 0xfffc, 0x0, @loopback}, 0x1c, &(0x7f0000008900)=[{&(0x7f0000008500)="88", 0xff12}], 0x1}}], 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xae, 0x66, 0x0, 0x0, 0xfffffffe}, [@call={0x16}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x23) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f0000000100)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./mnt\x00', &(0x7f00000001c0)='proc\x00', 0x90410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') openat(r5, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 819.607µs ago: executing program 1 (id=166): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000010c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r1, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, 0x0, 0x0, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000000180)={0x50, 0x0, r2, {0x7, 0x2b, 0x69, 0x3d411004, 0x2, 0xb, 0x6, 0xcccb, 0x0, 0x0, 0x40, 0x7}}, 0x50) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r3, 0x2) 0s ago: executing program 2 (id=167): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000400000004000000ff00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000d40000000002000000040000000000000000"], 0x50) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000040)=0x80, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendto(r2, &(0x7f0000000000)="240000003f0005000a0000000000000002020000000000000c0001006f76732d64703000", 0x24, 0x0, 0x0, 0x0) sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000200)="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", 0xfd, 0x81, &(0x7f0000000400)=@un=@file={0x1, './file0\x00'}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) recvmsg(r2, &(0x7f0000001880)={&(0x7f0000000500)=@tipc=@id, 0x80, &(0x7f0000001780)=[{&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/158, 0x9e}, {&(0x7f0000001640)=""/11, 0xb}, {&(0x7f0000001680)=""/199, 0xc7}], 0x4, &(0x7f00000017c0)=""/155, 0x9b}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000018c0)=ANY=[@ANYBLOB="640000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="7b8a0500000000004400128c0b000100697036745ef65e6e6c00003400028008000100", @ANYRES32=r6, @ANYBLOB="14000300fe8000000000000000000000000000bb14000200fe880000000000000000000000000301"], 0x64}}, 0x4008000) sendmsg$nl_route_sched_retired(r4, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)=@deltfilter={0x54, 0x2d, 0x4, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x9, 0x10}, {0x9, 0xb}, {0x5, 0xb}}, [@f_tcindex={{0xc}, {0x24, 0x2, [@TCA_TCINDEX_SHIFT={0x8, 0x3, 0x1}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0x0, 0xa}}, @TCA_TCINDEX_FALL_THROUGH={0x8, 0x4, 0x1}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0x8, 0x8}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x404c041) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000001a40)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001940)=ANY=[@ANYBLOB="fffff77f", @ANYRES16=0x0, @ANYBLOB="000225bd7000ffdbdf256800000008000300", @ANYRES32=r3, @ANYBLOB="0c009900ff030000150000002000c7000004a5040105060106030c03d004080400069a04ad192624917c9c8f1c00c7000904600508030104090701040703070484a8efcbd5804c983400c70010060505bf000103070101010003f80605030505fd0740020206100038060306ff00e40308030805cc73838c78d5ed09"], 0x98}, 0x1, 0x0, 0x0, 0x40040}, 0x1) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f00000001c0)=0x3) socket$unix(0x1, 0x0, 0x0) ioctl$PPPIOCSPASS(r8, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x60, 0x6}]}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r0, &(0x7f0000000200), 0x0}, 0x20) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:8229' (ED25519) to the list of known hosts. [ 42.482627][ T43] kauditd_printk_skb: 20 callbacks suppressed [ 42.482640][ T43] audit: type=1400 audit(1791250425.390:141): avc: denied { mounton } for pid=5721 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 42.484757][ T43] audit: type=1400 audit(1791250425.390:142): avc: denied { mount } for pid=5721 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.485540][ T5721] cgroup: Unknown subsys name 'net' [ 42.486851][ T43] audit: type=1400 audit(1791250425.390:143): avc: denied { unmount } for pid=5721 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.660575][ T5721] cgroup: Unknown subsys name 'cpuset' [ 42.662836][ T5721] cgroup: Unknown subsys name 'rlimit' [ 42.800457][ T43] audit: type=1400 audit(1791250425.710:144): avc: denied { setattr } for pid=5721 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.803028][ T43] audit: type=1400 audit(1791250425.710:145): avc: denied { create } for pid=5721 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.803056][ T43] audit: type=1400 audit(1791250425.710:146): avc: denied { write } for pid=5721 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.803075][ T43] audit: type=1400 audit(1791250425.710:147): avc: denied { read } for pid=5721 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.810113][ T43] audit: type=1400 audit(1791250425.720:148): avc: denied { mounton } for pid=5721 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 42.810391][ T43] audit: type=1400 audit(1791250425.720:149): avc: denied { mount } for pid=5721 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 42.834910][ T43] audit: type=1400 audit(1791250425.740:150): avc: denied { read } for pid=5445 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 42.858782][ T5727] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 43.532516][ T5721] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 47.657092][ T43] kauditd_printk_skb: 8 callbacks suppressed [ 47.657111][ T43] audit: type=1400 audit(1791250430.570:159): avc: denied { create } for pid=5734 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.658344][ T43] audit: type=1400 audit(1791250430.570:160): avc: denied { read write } for pid=5734 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.658831][ T43] audit: type=1400 audit(1791250430.570:162): avc: denied { open } for pid=5734 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.660402][ T43] audit: type=1400 audit(1791250430.570:161): avc: denied { read write } for pid=5735 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.677420][ T43] audit: type=1400 audit(1791250430.590:163): avc: denied { ioctl } for pid=5737 comm="syz-executor" path="socket:[3670]" dev="sockfs" ino=3670 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.690948][ T5739] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 47.694391][ T5741] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 47.698040][ T5748] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 47.699414][ T5748] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 47.702248][ T5743] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 47.702834][ T5743] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 47.704188][ T5743] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 47.704642][ T5743] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 47.706337][ T5743] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 47.707318][ T5743] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 47.708178][ T5743] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 47.708632][ T5743] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 47.712445][ T5748] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 47.714920][ T43] audit: type=1400 audit(1791250430.620:164): avc: denied { read } for pid=5735 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.715355][ T5743] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 47.717640][ T5090] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 47.721355][ T5748] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 47.722719][ T5748] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 47.726338][ T5750] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 47.731800][ T43] audit: type=1400 audit(1791250430.640:165): avc: denied { open } for pid=5734 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.731827][ T43] audit: type=1400 audit(1791250430.640:166): avc: denied { mounton } for pid=5735 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 47.733586][ T5748] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 47.734396][ T5748] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 47.738956][ T43] audit: type=1400 audit(1791250430.650:167): avc: denied { module_request } for pid=5735 comm="syz-executor" kmod="netdev-nr2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 47.759242][ T43] audit: type=1400 audit(1791250430.670:168): avc: denied { sys_module } for pid=5735 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 48.492359][ T5737] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.493036][ T5737] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.493144][ T5737] bridge_slave_0: entered allmulticast mode [ 48.494478][ T5737] bridge_slave_0: entered promiscuous mode [ 48.497486][ T5735] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.497542][ T5735] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.497623][ T5735] bridge_slave_0: entered allmulticast mode [ 48.498766][ T5735] bridge_slave_0: entered promiscuous mode [ 48.523688][ T5737] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.523787][ T5737] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.523891][ T5737] bridge_slave_1: entered allmulticast mode [ 48.525254][ T5737] bridge_slave_1: entered promiscuous mode [ 48.527079][ T5735] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.527120][ T5735] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.527178][ T5735] bridge_slave_1: entered allmulticast mode [ 48.527890][ T5735] bridge_slave_1: entered promiscuous mode [ 48.614377][ T5737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.614564][ T5744] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.615320][ T5744] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.615415][ T5744] bridge_slave_0: entered allmulticast mode [ 48.626840][ T5744] bridge_slave_0: entered promiscuous mode [ 48.630538][ T5735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.631241][ T5744] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.631327][ T5744] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.631437][ T5744] bridge_slave_1: entered allmulticast mode [ 48.632666][ T5744] bridge_slave_1: entered promiscuous mode [ 48.634986][ T5734] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.635064][ T5734] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.635356][ T5734] bridge_slave_0: entered allmulticast mode [ 48.638137][ T5734] bridge_slave_0: entered promiscuous mode [ 48.640369][ T5734] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.640476][ T5734] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.640759][ T5734] bridge_slave_1: entered allmulticast mode [ 48.642515][ T5734] bridge_slave_1: entered promiscuous mode [ 48.646090][ T5737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.647768][ T5735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.673553][ T5744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.681181][ T5744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.728170][ T5735] team0: Port device team_slave_0 added [ 48.729897][ T5737] team0: Port device team_slave_0 added [ 48.730935][ T5744] team0: Port device team_slave_0 added [ 48.733467][ T5737] team0: Port device team_slave_1 added [ 48.735088][ T5734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.736327][ T5735] team0: Port device team_slave_1 added [ 48.738410][ T5734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.749479][ T5744] team0: Port device team_slave_1 added [ 48.816617][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.816635][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.816656][ T5735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.818290][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.818301][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.818320][ T5744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.819624][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.819634][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.819653][ T5735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.821575][ T5734] team0: Port device team_slave_0 added [ 48.829671][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.829685][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.829727][ T5737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.831229][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.831239][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.831260][ T5737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.832172][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.832183][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.832203][ T5744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.838240][ T5734] team0: Port device team_slave_1 added [ 48.889119][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.889133][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.889154][ T5734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.924415][ T5737] hsr_slave_0: entered promiscuous mode [ 48.925175][ T5737] hsr_slave_1: entered promiscuous mode [ 48.926905][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.926917][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.926936][ T5734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.932213][ T5735] hsr_slave_0: entered promiscuous mode [ 48.932988][ T5735] hsr_slave_1: entered promiscuous mode [ 48.933496][ T5735] debugfs: 'hsr0' already exists in 'hsr' [ 48.933567][ T5735] Cannot create hsr debugfs directory [ 48.950253][ T5744] hsr_slave_0: entered promiscuous mode [ 48.950677][ T5744] hsr_slave_1: entered promiscuous mode [ 48.950976][ T5744] debugfs: 'hsr0' already exists in 'hsr' [ 48.950988][ T5744] Cannot create hsr debugfs directory [ 49.059670][ T5734] hsr_slave_0: entered promiscuous mode [ 49.060551][ T5734] hsr_slave_1: entered promiscuous mode [ 49.061077][ T5734] debugfs: 'hsr0' already exists in 'hsr' [ 49.061092][ T5734] Cannot create hsr debugfs directory [ 49.307253][ T5737] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 49.313646][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.314486][ T5737] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.317947][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.318841][ T5737] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 49.324835][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.332672][ T5737] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.334932][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.376180][ T5735] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 49.380000][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.380772][ T5735] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 49.387583][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.395822][ T5735] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 49.398358][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.398763][ T5735] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 49.403195][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.457246][ T5744] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 49.462266][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.462631][ T5744] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.466182][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.468772][ T5744] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 49.471715][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.473499][ T5744] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 49.477590][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.545773][ T5737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.570202][ T5734] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.572466][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.576269][ T5734] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.578355][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.585852][ T5734] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.588759][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.590233][ T5737] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.590456][ T5734] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.593568][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.599634][ T5735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.617772][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.617960][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.632590][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.632672][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.641428][ T5735] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.661064][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.661132][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.674512][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.674558][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.706891][ T5744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.739380][ T5744] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.753690][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.753760][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.761106][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.761150][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.777679][ T67] Bluetooth: hci3: command tx timeout [ 49.777798][ T67] Bluetooth: hci2: command tx timeout [ 49.777845][ T67] Bluetooth: hci0: command tx timeout [ 49.777885][ T67] Bluetooth: hci1: command tx timeout [ 49.792100][ T5734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.811345][ T5734] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.824879][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.824965][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.832760][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.832809][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.993977][ T5735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.000982][ T5737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.036346][ T5735] veth0_vlan: entered promiscuous mode [ 50.050890][ T5735] veth1_vlan: entered promiscuous mode [ 50.053015][ T5737] veth0_vlan: entered promiscuous mode [ 50.063207][ T5737] veth1_vlan: entered promiscuous mode [ 50.075208][ T5744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.095086][ T5735] veth0_macvtap: entered promiscuous mode [ 50.105245][ T5737] veth0_macvtap: entered promiscuous mode [ 50.107402][ T5734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.108210][ T5735] veth1_macvtap: entered promiscuous mode [ 50.124272][ T5737] veth1_macvtap: entered promiscuous mode [ 50.144303][ T5744] veth0_vlan: entered promiscuous mode [ 50.151180][ T5744] veth1_vlan: entered promiscuous mode [ 50.152820][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.164432][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.179789][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.188079][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.193919][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.195391][ T5734] veth0_vlan: entered promiscuous mode [ 50.217270][ T5734] veth1_vlan: entered promiscuous mode [ 50.229520][ T5744] veth0_macvtap: entered promiscuous mode [ 50.239751][ T5744] veth1_macvtap: entered promiscuous mode [ 50.270864][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.270876][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.293074][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.296130][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.296142][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.304320][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.319380][ T5734] veth0_macvtap: entered promiscuous mode [ 50.332420][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.332437][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.345348][ T5734] veth1_macvtap: entered promiscuous mode [ 50.353842][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.353868][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.391427][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.403517][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.407861][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.407879][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.411262][ T5737] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 50.452050][ T222] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.452064][ T222] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.477324][ T5814] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.477648][ T5814] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.477951][ T5814] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.477982][ T5814] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.478010][ T5814] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.478039][ T5814] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.478069][ T5814] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.478098][ T5814] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.478125][ T5814] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.478152][ T5814] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.478180][ T5814] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.478208][ T5814] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.478237][ T5814] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.478265][ T5814] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.478293][ T5814] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.500269][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.500282][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.553347][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.553367][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.567537][ T5887] Bluetooth: MGMT ver 1.23 [ 50.622979][ T5889] FAULT_INJECTION: forcing a failure. [ 50.622979][ T5889] name failslab, interval 1, probability 0, space 0, times 1 [ 50.623009][ T5889] CPU: 2 UID: 0 PID: 5889 Comm: syz.1.2 Not tainted syzkaller #0 PREEMPT(full) [ 50.623030][ T5889] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 50.623041][ T5889] Call Trace: [ 50.623048][ T5889] [ 50.623056][ T5889] dump_stack_lvl+0x100/0x190 [ 50.623089][ T5889] should_fail_ex.cold+0x5/0xa [ 50.623117][ T5889] should_failslab+0xc2/0x120 [ 50.623144][ T5889] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 50.623172][ T5889] ? __d_alloc+0x35/0xa50 [ 50.623224][ T5889] __d_alloc+0x35/0xa50 [ 50.623258][ T5889] d_alloc+0x4a/0x1e0 [ 50.623288][ T5889] lookup_one_qstr_excl+0x171/0x250 [ 50.623313][ T5889] start_dirop+0x59/0xb0 [ 50.623339][ T5889] simple_start_creating+0xf9/0x110 [ 50.623367][ T5889] ? __pfx_simple_start_creating+0x10/0x10 [ 50.623395][ T5889] ? mntput+0x70/0xa0 [ 50.623418][ T5889] ? simple_pin_fs+0xa3/0x190 [ 50.623444][ T5889] debugfs_start_creating.part.0+0x7b/0x150 [ 50.623467][ T5889] __debugfs_create_file+0xa9/0x500 [ 50.623491][ T5889] debugfs_create_file_full+0x41/0x60 [ 50.623515][ T5889] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 50.623546][ T5889] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 50.623594][ T5889] ? kasan_save_track+0x14/0x30 [ 50.623620][ T5889] ? __kasan_kmalloc+0xaa/0xb0 [ 50.623645][ T5889] ? lockdep_init_map_type+0x5c/0x250 [ 50.623673][ T5889] preinit_net+0x252/0x920 [ 50.623704][ T5889] copy_net_ns+0x1dd/0x7a0 [ 50.623725][ T5889] create_new_namespaces+0x3ea/0xac0 [ 50.623755][ T5889] unshare_nsproxy_namespaces+0xf2/0x220 [ 50.623781][ T5889] ksys_unshare+0x4a2/0xa70 [ 50.623805][ T5889] ? __pfx_ksys_unshare+0x10/0x10 [ 50.623839][ T5889] __x64_sys_unshare+0x31/0x40 [ 50.623862][ T5889] do_syscall_64+0x123/0x790 [ 50.623886][ T5889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.623906][ T5889] RIP: 0033:0x7f503479e199 [ 50.623928][ T5889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.623947][ T5889] RSP: 002b:00007f5035747028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 50.623967][ T5889] RAX: ffffffffffffffda RBX: 00007f5034a25fa0 RCX: 00007f503479e199 [ 50.623981][ T5889] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 50.623993][ T5889] RBP: 00007f50348358e0 R08: 0000000000000000 R09: 0000000000000000 [ 50.624005][ T5889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 50.624017][ T5889] R13: 00007f5034a26038 R14: 00007f5034a25fa0 R15: 00007ffc589970c8 [ 50.624046][ T5889] [ 50.698603][ T5892] MTD: Attempt to mount non-MTD device "/dev/nbd0" [ 50.894747][ T5908] FAULT_INJECTION: forcing a failure. [ 50.894747][ T5908] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 50.894806][ T5908] CPU: 0 UID: 0 PID: 5908 Comm: syz.2.10 Not tainted syzkaller #0 PREEMPT(full) [ 50.894824][ T5908] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 50.894832][ T5908] Call Trace: [ 50.894838][ T5908] [ 50.894845][ T5908] dump_stack_lvl+0x100/0x190 [ 50.894874][ T5908] should_fail_ex.cold+0x5/0xa [ 50.894898][ T5908] strncpy_from_user+0x3b/0x2d0 [ 50.894924][ T5908] do_getname+0x78/0x390 [ 50.894941][ T5908] do_sys_openat2+0xc7/0x1e0 [ 50.894963][ T5908] ? __pfx_do_sys_openat2+0x10/0x10 [ 50.894995][ T5908] __x64_sys_openat+0x12d/0x210 [ 50.895020][ T5908] ? __pfx___x64_sys_openat+0x10/0x10 [ 50.895054][ T5908] do_syscall_64+0x123/0x790 [ 50.895070][ T5908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.895087][ T5908] RIP: 0033:0x7fe2fff5e9ce [ 50.895101][ T5908] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 50.895116][ T5908] RSP: 002b:00007fe300da7f98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 50.895133][ T5908] RAX: ffffffffffffffda RBX: 00007fe300da86c0 RCX: 00007fe2fff5e9ce [ 50.895144][ T5908] RDX: 0000000000000002 RSI: 00007fe3000351da RDI: ffffffffffffff9c [ 50.895154][ T5908] RBP: 00007fe3000358e0 R08: 0000000000000000 R09: 0000000000000000 [ 50.895164][ T5908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.895174][ T5908] R13: 00007fe300226038 R14: 00007fe300225fa0 R15: 00007ffcf6051638 [ 50.895189][ T5908] [ 50.968068][ T5912] syzkaller0: entered promiscuous mode [ 50.968082][ T5912] syzkaller0: entered allmulticast mode [ 51.005080][ T5917] FAULT_INJECTION: forcing a failure. [ 51.005080][ T5917] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 51.005099][ T5917] CPU: 0 UID: 0 PID: 5917 Comm: syz.3.14 Not tainted syzkaller #0 PREEMPT(full) [ 51.005112][ T5917] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.005118][ T5917] Call Trace: [ 51.005122][ T5917] [ 51.005126][ T5917] dump_stack_lvl+0x100/0x190 [ 51.005145][ T5917] should_fail_ex.cold+0x5/0xa [ 51.005161][ T5917] _copy_from_user+0x2e/0xd0 [ 51.005176][ T5917] copy_msghdr_from_user+0x9f/0x4c0 [ 51.005189][ T5917] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 51.005205][ T5917] ? lock_acquire+0x1d1/0x380 [ 51.005217][ T5917] ? get_pid_task+0x2a/0x250 [ 51.005233][ T5917] ___sys_sendmsg+0x106/0x1e0 [ 51.005246][ T5917] ? __pfx____sys_sendmsg+0x10/0x10 [ 51.005258][ T5917] ? get_pid_task+0x106/0x250 [ 51.005277][ T5917] ? find_held_lock+0x2b/0x80 [ 51.005301][ T5917] __sys_sendmsg+0x160/0x210 [ 51.005317][ T5917] ? __pfx___sys_sendmsg+0x10/0x10 [ 51.005339][ T5917] do_syscall_64+0x123/0x790 [ 51.005352][ T5917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.005363][ T5917] RIP: 0033:0x7f80a059e199 [ 51.005372][ T5917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.005382][ T5917] RSP: 002b:00007f80a13a4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 51.005394][ T5917] RAX: ffffffffffffffda RBX: 00007f80a0825fa0 RCX: 00007f80a059e199 [ 51.005400][ T5917] RDX: 0000000000000044 RSI: 0000200000000000 RDI: 0000000000000003 [ 51.005407][ T5917] RBP: 00007f80a13a4090 R08: 0000000000000000 R09: 0000000000000000 [ 51.005413][ T5917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.005419][ T5917] R13: 00007f80a0826038 R14: 00007f80a0825fa0 R15: 00007ffc815641a8 [ 51.005432][ T5917] [ 51.231604][ T42] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 51.399265][ T42] usb 6-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 51.406281][ T42] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.406300][ T42] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 51.406319][ T42] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.446926][ T42] idmouse 6-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 51.457813][ T5933] kvm [5931]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x100000080 [ 51.851683][ T5947] FAULT_INJECTION: forcing a failure. [ 51.851683][ T5947] name failslab, interval 1, probability 0, space 0, times 0 [ 51.851703][ T5947] CPU: 3 UID: 0 PID: 5947 Comm: syz.2.20 Not tainted syzkaller #0 PREEMPT(full) [ 51.851716][ T5947] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.851724][ T5947] Call Trace: [ 51.851728][ T5947] [ 51.851733][ T5947] dump_stack_lvl+0x100/0x190 [ 51.851752][ T5947] should_fail_ex.cold+0x5/0xa [ 51.851768][ T5947] should_failslab+0xc2/0x120 [ 51.851784][ T5947] __kmalloc_noprof+0xfc/0x840 [ 51.851797][ T5947] ? rcu_is_watching+0x13/0xc0 [ 51.851813][ T5947] ? tomoyo_realpath_from_path+0xb6/0x690 [ 51.851832][ T5947] tomoyo_realpath_from_path+0xb6/0x690 [ 51.851850][ T5947] tomoyo_path_number_perm+0x23c/0x580 [ 51.851863][ T5947] ? tomoyo_path_number_perm+0x22e/0x580 [ 51.851877][ T5947] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 51.851895][ T5947] ? __lock_acquire+0x5c0/0x1f40 [ 51.851914][ T5947] ? __fget_files+0x34/0x3d0 [ 51.851929][ T5947] ? find_held_lock+0x2b/0x80 [ 51.851945][ T5947] ? hook_file_ioctl_common+0x140/0x440 [ 51.851964][ T5947] ? __fget_files+0x21f/0x3d0 [ 51.851981][ T5947] security_file_ioctl+0xd3/0x230 [ 51.851996][ T5947] __x64_sys_ioctl+0xb7/0x210 [ 51.852009][ T5947] do_syscall_64+0x123/0x790 [ 51.852024][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.852035][ T5947] RIP: 0033:0x7fe2fff9e199 [ 51.852045][ T5947] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.852055][ T5947] RSP: 002b:00007fe300da8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 51.852067][ T5947] RAX: ffffffffffffffda RBX: 00007fe300225fa0 RCX: 00007fe2fff9e199 [ 51.852074][ T5947] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 51.852080][ T5947] RBP: 00007fe300da8090 R08: 0000000000000000 R09: 0000000000000000 [ 51.852086][ T5947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.852092][ T5947] R13: 00007fe300226038 R14: 00007fe300225fa0 R15: 00007ffcf6051638 [ 51.852106][ T5947] [ 51.852110][ T5947] ERROR: Out of memory at tomoyo_realpath_from_path. [ 51.857139][ T5750] Bluetooth: hci1: command tx timeout [ 51.857161][ T5750] Bluetooth: hci0: command tx timeout [ 51.857174][ T5750] Bluetooth: hci2: command tx timeout [ 51.857186][ T5750] Bluetooth: hci3: command tx timeout [ 51.897969][ T5947] kvm [5946]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x100000080 [ 52.116864][ T25] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 52.268994][ T25] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 52.271024][ T25] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 52.271054][ T25] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24879, setting to 1024 [ 52.271077][ T25] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 52.271107][ T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.275094][ T5951] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 52.298057][ T25] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 52.490685][ T25] usb 8-1: USB disconnect, device number 2 [ 53.019603][ T43] kauditd_printk_skb: 84 callbacks suppressed [ 53.019622][ T43] audit: type=1400 audit(1791250435.930:253): avc: denied { unmount } for pid=5737 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 53.085956][ T43] audit: type=1400 audit(1791250435.990:254): avc: denied { name_bind } for pid=5972 comm="syz.3.24" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 53.085999][ T43] audit: type=1400 audit(1791250435.990:255): avc: denied { node_bind } for pid=5972 comm="syz.3.24" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 53.260740][ T5981] MTD: Attempt to mount non-MTD device "/dev/nbd3" [ 53.690616][ T43] audit: type=1400 audit(1791250436.600:256): avc: denied { read write } for pid=5983 comm="syz.0.28" name="radio0" dev="devtmpfs" ino=977 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 53.946957][ T5750] Bluetooth: hci2: command tx timeout [ 53.946980][ T5750] Bluetooth: hci0: command tx timeout [ 53.946995][ T5750] Bluetooth: hci1: command tx timeout [ 53.947135][ T67] Bluetooth: hci3: command tx timeout [ 54.150911][ T5994] Zero length message leads to an empty skb [ 54.155336][ T43] audit: type=1400 audit(1791250437.060:257): avc: denied { watch } for pid=5993 comm="syz.0.31" path="/3" dev="tmpfs" ino=32 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 54.216879][ T6000] netlink: 'syz.0.33': attribute type 1 has an invalid length. [ 54.279616][ T43] audit: type=1400 audit(1791250437.190:258): avc: denied { read } for pid=6002 comm="syz.2.34" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 54.282001][ T43] audit: type=1400 audit(1791250437.190:259): avc: denied { open } for pid=6002 comm="syz.2.34" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 54.415654][ T43] audit: type=1400 audit(1791250437.320:260): avc: denied { create } for pid=6010 comm="syz.3.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 54.417882][ T43] audit: type=1400 audit(1791250437.330:261): avc: denied { ioctl } for pid=6010 comm="syz.3.37" path="/dev/vhost-vsock" dev="devtmpfs" ino=1298 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 54.435678][ T43] audit: type=1400 audit(1791250437.340:262): avc: denied { setopt } for pid=6010 comm="syz.3.37" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 54.523479][ T6021] mmap: syz.2.39 (6021) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 54.600933][ T1480] usb 6-1: USB disconnect, device number 2 [ 54.608127][ T1480] idmouse 6-1:1.0: disconnected [ 54.652099][ T6032] MTD: Attempt to mount non-MTD device "/dev/nbd3" [ 54.734307][ T6038] FAULT_INJECTION: forcing a failure. [ 54.734307][ T6038] name failslab, interval 1, probability 0, space 0, times 0 [ 54.734338][ T6038] CPU: 1 UID: 0 PID: 6038 Comm: syz.0.46 Not tainted syzkaller #0 PREEMPT(full) [ 54.734359][ T6038] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 54.734370][ T6038] Call Trace: [ 54.734376][ T6038] [ 54.734383][ T6038] dump_stack_lvl+0x100/0x190 [ 54.734414][ T6038] should_fail_ex.cold+0x5/0xa [ 54.734441][ T6038] should_failslab+0xc2/0x120 [ 54.734468][ T6038] __kmalloc_noprof+0xfc/0x840 [ 54.734489][ T6038] ? rcu_is_watching+0x13/0xc0 [ 54.734516][ T6038] ? tomoyo_realpath_from_path+0xb6/0x690 [ 54.734548][ T6038] tomoyo_realpath_from_path+0xb6/0x690 [ 54.734579][ T6038] tomoyo_path_number_perm+0x23c/0x580 [ 54.734601][ T6038] ? tomoyo_path_number_perm+0x22e/0x580 [ 54.734625][ T6038] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 54.734658][ T6038] ? __lock_acquire+0x5c0/0x1f40 [ 54.734692][ T6038] ? __fget_files+0x34/0x3d0 [ 54.734717][ T6038] ? find_held_lock+0x2b/0x80 [ 54.734744][ T6038] ? hook_file_ioctl_common+0x140/0x440 [ 54.734778][ T6038] ? __fget_files+0x21f/0x3d0 [ 54.734806][ T6038] security_file_ioctl+0xd3/0x230 [ 54.734831][ T6038] __x64_sys_ioctl+0xb7/0x210 [ 54.734850][ T6038] do_syscall_64+0x123/0x790 [ 54.734870][ T6038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.734895][ T6038] RIP: 0033:0x7fdf3939e199 [ 54.734911][ T6038] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.734927][ T6038] RSP: 002b:00007fdf3a29e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 54.734946][ T6038] RAX: ffffffffffffffda RBX: 00007fdf39625fa0 RCX: 00007fdf3939e199 [ 54.734958][ T6038] RDX: 0000200000000000 RSI: 0000000040187013 RDI: 0000000000000003 [ 54.734968][ T6038] RBP: 00007fdf3a29e090 R08: 0000000000000000 R09: 0000000000000000 [ 54.734979][ T6038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.734990][ T6038] R13: 00007fdf39626038 R14: 00007fdf39625fa0 R15: 00007ffe48289488 [ 54.735018][ T6038] [ 54.735027][ T6038] ERROR: Out of memory at tomoyo_realpath_from_path. [ 54.786651][ T6037] capability: warning: `syz.1.47' uses 32-bit capabilities (legacy support in use) [ 54.853238][ T6041] usb usb9: usbfs: process 6041 (syz.1.47) did not claim interface 22 before use [ 54.883151][ T6041] loop5: detected capacity change from 0 to 7 [ 54.898708][ T6041] Dev loop5: unable to read RDB block 7 [ 54.898737][ T6041] loop5: AHDI p1 p2 p3 [ 54.898754][ T6041] loop5: partition table partially beyond EOD, truncated [ 54.900446][ T6041] loop5: p1 start 1601398130 is beyond EOD, truncated [ 54.901964][ T6041] loop5: p2 start 1702059890 is beyond EOD, truncated [ 55.075583][ T6040] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 55.126133][ T6053] FAULT_INJECTION: forcing a failure. [ 55.126133][ T6053] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 55.126153][ T6053] CPU: 0 UID: 0 PID: 6053 Comm: syz.1.51 Not tainted syzkaller #0 PREEMPT(full) [ 55.126165][ T6053] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 55.126172][ T6053] Call Trace: [ 55.126176][ T6053] [ 55.126180][ T6053] dump_stack_lvl+0x100/0x190 [ 55.126200][ T6053] should_fail_ex.cold+0x5/0xa [ 55.126216][ T6053] _copy_from_user+0x2e/0xd0 [ 55.126230][ T6053] copy_msghdr_from_user+0x9f/0x4c0 [ 55.126245][ T6053] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 55.126260][ T6053] ? lock_acquire+0x1d1/0x380 [ 55.126273][ T6053] ? get_pid_task+0x2a/0x250 [ 55.126294][ T6053] ___sys_sendmsg+0x106/0x1e0 [ 55.126307][ T6053] ? __pfx____sys_sendmsg+0x10/0x10 [ 55.126320][ T6053] ? get_pid_task+0x106/0x250 [ 55.126339][ T6053] ? find_held_lock+0x2b/0x80 [ 55.126363][ T6053] __sys_sendmsg+0x160/0x210 [ 55.126379][ T6053] ? __pfx___sys_sendmsg+0x10/0x10 [ 55.126401][ T6053] do_syscall_64+0x123/0x790 [ 55.126415][ T6053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.126426][ T6053] RIP: 0033:0x7f503479e199 [ 55.126436][ T6053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.126446][ T6053] RSP: 002b:00007f5035747028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 55.126457][ T6053] RAX: ffffffffffffffda RBX: 00007f5034a25fa0 RCX: 00007f503479e199 [ 55.126464][ T6053] RDX: 000000000400c804 RSI: 0000200000000180 RDI: 0000000000000003 [ 55.126471][ T6053] RBP: 00007f5035747090 R08: 0000000000000000 R09: 0000000000000000 [ 55.126477][ T6053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.126483][ T6053] R13: 00007f5034a26038 R14: 00007f5034a25fa0 R15: 00007ffc589970c8 [ 55.126496][ T6053] [ 55.271389][ T6061] netlink: 4 bytes leftover after parsing attributes in process `syz.0.54'. [ 55.303644][ T6063] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 55.305133][ T6063] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 55.360342][ T6067] binder: 6065:6067 ioctl c0306201 0 returned -14 [ 55.375488][ T6069] FAULT_INJECTION: forcing a failure. [ 55.375488][ T6069] name failslab, interval 1, probability 0, space 0, times 0 [ 55.375507][ T6069] CPU: 0 UID: 0 PID: 6069 Comm: syz.2.58 Not tainted syzkaller #0 PREEMPT(full) [ 55.375519][ T6069] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 55.375526][ T6069] Call Trace: [ 55.375530][ T6069] [ 55.375534][ T6069] dump_stack_lvl+0x100/0x190 [ 55.375553][ T6069] should_fail_ex.cold+0x5/0xa [ 55.375569][ T6069] should_failslab+0xc2/0x120 [ 55.375585][ T6069] __kmalloc_noprof+0xfc/0x840 [ 55.375597][ T6069] ? rcu_is_watching+0x13/0xc0 [ 55.375613][ T6069] ? tomoyo_realpath_from_path+0xb6/0x690 [ 55.375631][ T6069] tomoyo_realpath_from_path+0xb6/0x690 [ 55.375649][ T6069] tomoyo_path_number_perm+0x23c/0x580 [ 55.375662][ T6069] ? tomoyo_path_number_perm+0x22e/0x580 [ 55.375676][ T6069] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 55.375694][ T6069] ? __lock_acquire+0x5c0/0x1f40 [ 55.375712][ T6069] ? __fget_files+0x34/0x3d0 [ 55.375728][ T6069] ? find_held_lock+0x2b/0x80 [ 55.375743][ T6069] ? hook_file_ioctl_common+0x140/0x440 [ 55.375763][ T6069] ? __fget_files+0x21f/0x3d0 [ 55.375780][ T6069] security_file_ioctl+0xd3/0x230 [ 55.375794][ T6069] __x64_sys_ioctl+0xb7/0x210 [ 55.375808][ T6069] do_syscall_64+0x123/0x790 [ 55.375821][ T6069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.375833][ T6069] RIP: 0033:0x7fe2fff9e199 [ 55.375842][ T6069] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.375852][ T6069] RSP: 002b:00007fe300da8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 55.375863][ T6069] RAX: ffffffffffffffda RBX: 00007fe300225fa0 RCX: 00007fe2fff9e199 [ 55.375870][ T6069] RDX: 0000200000000040 RSI: 0000000000003b85 RDI: 0000000000000003 [ 55.375877][ T6069] RBP: 00007fe300da8090 R08: 0000000000000000 R09: 0000000000000000 [ 55.375883][ T6069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.375889][ T6069] R13: 00007fe300226038 R14: 00007fe300225fa0 R15: 00007ffcf6051638 [ 55.375903][ T6069] [ 55.375907][ T6069] ERROR: Out of memory at tomoyo_realpath_from_path. [ 55.471074][ T6074] binder: BINDER_SET_CONTEXT_MGR already set [ 55.471087][ T6074] binder: 6072:6074 ioctl 4018620d 200000000000 returned -16 [ 55.584726][ T6081] device-mapper: ioctl: Unable to rename non-existent device, to [ 55.719191][ T6087] FAULT_INJECTION: forcing a failure. [ 55.719191][ T6087] name failslab, interval 1, probability 0, space 0, times 0 [ 55.719211][ T6087] CPU: 0 UID: 0 PID: 6087 Comm: syz.2.64 Not tainted syzkaller #0 PREEMPT(full) [ 55.719223][ T6087] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 55.719230][ T6087] Call Trace: [ 55.719234][ T6087] [ 55.719238][ T6087] dump_stack_lvl+0x100/0x190 [ 55.719257][ T6087] should_fail_ex.cold+0x5/0xa [ 55.719273][ T6087] should_failslab+0xc2/0x120 [ 55.719289][ T6087] kmem_cache_alloc_noprof+0x92/0x6a0 [ 55.719302][ T6087] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 55.719322][ T6087] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 55.719359][ T6087] mmu_topup_memory_caches+0x25/0x170 [ 55.719374][ T6087] kvm_mmu_load+0xe8/0x2580 [ 55.719388][ T6087] ? vmx_vcpu_load_vmcs+0x21d/0x760 [ 55.719405][ T6087] ? __pfx_kvm_mmu_load+0x10/0x10 [ 55.719420][ T6087] ? __lock_acquire+0x5c0/0x1f40 [ 55.719438][ T6087] kvm_arch_vcpu_pre_fault_memory+0x693/0x7f0 [ 55.719451][ T6087] ? lock_acquire+0x1d1/0x380 [ 55.719463][ T6087] ? __pfx_kvm_arch_vcpu_pre_fault_memory+0x10/0x10 [ 55.719480][ T6087] kvm_vcpu_ioctl+0x100d/0x1700 [ 55.719496][ T6087] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 55.719512][ T6087] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 55.719526][ T6087] ? do_vfs_ioctl+0x226/0x13e0 [ 55.719539][ T6087] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 55.719550][ T6087] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 55.719570][ T6087] ? __fget_files+0x34/0x3d0 [ 55.719590][ T6087] ? selinux_file_ioctl+0x13b/0x290 [ 55.719603][ T6087] ? selinux_file_ioctl+0xb6/0x290 [ 55.719618][ T6087] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 55.719634][ T6087] __x64_sys_ioctl+0x18e/0x210 [ 55.719647][ T6087] do_syscall_64+0x123/0x790 [ 55.719661][ T6087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.719672][ T6087] RIP: 0033:0x7fe2fff9e199 [ 55.719681][ T6087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.719691][ T6087] RSP: 002b:00007fe300da8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 55.719703][ T6087] RAX: ffffffffffffffda RBX: 00007fe300225fa0 RCX: 00007fe2fff9e199 [ 55.719710][ T6087] RDX: 0000200000000340 RSI: 00000000c040aed5 RDI: 0000000000000005 [ 55.719716][ T6087] RBP: 00007fe300da8090 R08: 0000000000000000 R09: 0000000000000000 [ 55.719722][ T6087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 55.719729][ T6087] R13: 00007fe300226038 R14: 00007fe300225fa0 R15: 00007ffcf6051638 [ 55.719743][ T6087] [ 55.750674][ T6088] process 'syz.0.63' launched './file0' with NULL argv: empty string added [ 55.820167][ T6084] FAULT_INJECTION: forcing a failure. [ 55.820167][ T6084] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 55.820186][ T6084] CPU: 3 UID: 0 PID: 6084 Comm: syz.0.63 Not tainted syzkaller #0 PREEMPT(full) [ 55.820199][ T6084] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 55.820205][ T6084] Call Trace: [ 55.820209][ T6084] [ 55.820213][ T6084] dump_stack_lvl+0x100/0x190 [ 55.820232][ T6084] should_fail_ex.cold+0x5/0xa [ 55.820246][ T6084] ? prepare_alloc_pages+0x16d/0x5b0 [ 55.820262][ T6084] should_fail_alloc_page+0xeb/0x140 [ 55.820279][ T6084] prepare_alloc_pages+0x1f0/0x5b0 [ 55.820296][ T6084] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 55.820310][ T6084] ? prepare_alloc_pages+0x1f0/0x5b0 [ 55.820326][ T6084] ? rcu_is_watching+0x13/0xc0 [ 55.820342][ T6084] ? __alloc_frozen_pages_noprof+0x56b/0x3300 [ 55.820356][ T6084] ? tomoyo_path_number_perm+0x46d/0x580 [ 55.820370][ T6084] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 55.820383][ T6084] ? __pfx_stack_trace_save+0x10/0x10 [ 55.820395][ T6084] ? stack_depot_save_flags+0x27/0x9f0 [ 55.820411][ T6084] ? __lock_acquire+0x5c0/0x1f40 [ 55.820424][ T6084] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 55.820437][ T6084] ? __kasan_slab_free+0x5f/0x80 [ 55.820451][ T6084] ? kfree+0x22b/0x6d0 [ 55.820460][ T6084] ? tomoyo_path_number_perm+0x46d/0x580 [ 55.820472][ T6084] ? security_file_ioctl+0xd3/0x230 [ 55.820486][ T6084] ? __x64_sys_ioctl+0xb7/0x210 [ 55.820498][ T6084] ? do_syscall_64+0x123/0x790 [ 55.820512][ T6084] ? lock_acquire+0x1d1/0x380 [ 55.820524][ T6084] ? avc_has_extended_perms+0x201/0x1080 [ 55.820541][ T6084] ? look_up_lock_class+0x64/0x120 [ 55.820553][ T6084] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 55.820567][ T6084] ? policy_nodemask+0xed/0x4f0 [ 55.820584][ T6084] alloc_pages_mpol+0x201/0x550 [ 55.820600][ T6084] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 55.820616][ T6084] ? lock_acquire+0x1d1/0x380 [ 55.820628][ T6084] ? lruvec_stat_mod_folio+0x76/0x2e0 [ 55.820645][ T6084] ___kmalloc_large_node+0xe8/0x130 [ 55.820660][ T6084] ? lock_acquire+0x1d1/0x380 [ 55.820673][ T6084] __kmalloc_large_node_noprof+0x1c/0x70 [ 55.820690][ T6084] __kmalloc_noprof+0x5a8/0x840 [ 55.820703][ T6084] ? trace_kmalloc+0xeb/0x110 [ 55.820716][ T6084] ? vhost_dev_set_owner+0x330/0xa30 [ 55.820731][ T6084] vhost_dev_set_owner+0x330/0xa30 [ 55.820747][ T6084] vhost_dev_ioctl+0x521/0xe70 [ 55.820759][ T6084] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 55.820773][ T6084] ? do_vfs_ioctl+0x226/0x13e0 [ 55.820785][ T6084] ? __pfx_vhost_dev_ioctl+0x10/0x10 [ 55.820798][ T6084] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 55.820814][ T6084] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 55.820833][ T6084] vhost_vsock_dev_ioctl+0x320/0xb70 [ 55.820847][ T6084] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 55.820868][ T6084] ? selinux_file_ioctl+0x13b/0x290 [ 55.820881][ T6084] ? selinux_file_ioctl+0xb6/0x290 [ 55.820896][ T6084] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 55.820910][ T6084] __x64_sys_ioctl+0x18e/0x210 [ 55.820923][ T6084] do_syscall_64+0x123/0x790 [ 55.820936][ T6084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.820948][ T6084] RIP: 0033:0x7fdf3939e199 [ 55.820957][ T6084] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.820967][ T6084] RSP: 002b:00007fdf3a29e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 55.820978][ T6084] RAX: ffffffffffffffda RBX: 00007fdf39625fa0 RCX: 00007fdf3939e199 [ 55.820985][ T6084] RDX: 0000000000000000 RSI: 000000000000af01 RDI: 0000000000000005 [ 55.820991][ T6084] RBP: 00007fdf3a29e090 R08: 0000000000000000 R09: 0000000000000000 [ 55.820998][ T6084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.821004][ T6084] R13: 00007fdf39626038 R14: 00007fdf39625fa0 R15: 00007ffe48289488 [ 55.821017][ T6084] [ 55.904205][ T6092] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=58 sclass=netlink_xfrm_socket pid=6092 comm=syz.2.66 [ 56.018280][ T5748] Bluetooth: hci3: command tx timeout [ 56.018307][ T5750] Bluetooth: hci0: command tx timeout [ 56.018317][ T5748] Bluetooth: hci2: command tx timeout [ 56.018348][ T67] Bluetooth: hci1: command tx timeout [ 56.364814][ T6067] syz.1.56 (6067): drop_caches: 2 [ 56.414783][ T6095] syz.1.67 uses obsolete (PF_INET,SOCK_PACKET) [ 56.712246][ T6092] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 57.088517][ T6124] netlink: 200 bytes leftover after parsing attributes in process `syz.2.78'. [ 57.168676][ T25] wiimote 0005:057E:0330.0002: hidraw1: BLUETOOTH HID v0.00 Device [syz1] on syz0 [ 57.173187][ T25] wiimote 0005:057E:0330.0002: New device registered [ 57.180594][ T6124] wiimote 0005:057E:0330.0002: Device removed [ 57.234656][ T6127] fido_id[6127]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 57.477792][ T6131] netlink: 200 bytes leftover after parsing attributes in process `syz.0.80'. [ 57.555529][ T6133] ufs: Unknown parameter 'fTc' [ 57.569398][ T5823] wiimote 0005:057E:0330.0003: hidraw2: BLUETOOTH HID v0.00 Device [syz1] on syz0 [ 57.569737][ T5823] wiimote 0005:057E:0330.0003: New device registered [ 57.617179][ T5823] wiimote 0005:057E:0330.0003: detected device: Nintendo Wii Remote Plus (Gen 2) [ 57.632630][ T6134] wiimote 0005:057E:0330.0003: Device removed [ 57.641864][ T5823] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0330.0003/input/input6 [ 57.680093][ T5823] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0330.0003/input/input7 [ 57.692547][ T5823] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0330.0003/input/input5 [ 57.816060][ T6143] binder: 6142:6143 ioctl c0306201 0 returned -14 [ 57.841147][ T6143] syz.3.83 (6143): drop_caches: 2 [ 57.919264][ T6145] netlink: 40 bytes leftover after parsing attributes in process `syz.3.84'. [ 58.096883][ T67] Bluetooth: hci1: command 0x0401 tx timeout [ 58.120748][ T6169] MTD: Attempt to mount non-MTD device "/dev/nbd3" [ 58.186922][ T25] wiimote 0005:057E:0330.0002: detected device: Nintendo Wii Remote Plus (Gen 2) [ 58.187180][ T25] sysfs: cannot create duplicate filename '/class/power_supply/wiimote_battery_syz0' [ 58.187192][ T25] CPU: 2 UID: 0 PID: 25 Comm: kworker/2:0 Not tainted syzkaller #0 PREEMPT(full) [ 58.187205][ T25] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 58.187212][ T25] Workqueue: events wiimote_init_worker [ 58.187236][ T25] Call Trace: [ 58.187240][ T25] [ 58.187245][ T25] dump_stack_lvl+0x100/0x190 [ 58.187263][ T25] sysfs_warn_dup.cold+0x1c/0x28 [ 58.187280][ T25] sysfs_do_create_link_sd+0x113/0x140 [ 58.187301][ T25] sysfs_create_link+0x61/0xc0 [ 58.187317][ T25] device_add+0x675/0x1970 [ 58.187336][ T25] ? __pfx_device_add+0x10/0x10 [ 58.187372][ T25] ? lockdep_init_map_type+0x5c/0x250 [ 58.187386][ T25] ? __raw_spin_lock_init+0x3a/0x110 [ 58.187403][ T25] __power_supply_register.part.0+0x9b5/0x1390 [ 58.187420][ T25] ? __pfx___power_supply_register.part.0+0x10/0x10 [ 58.187435][ T25] ? __pfx_wiimod_battery_probe+0x10/0x10 [ 58.187450][ T25] ? kasprintf+0xc7/0x100 [ 58.187470][ T25] ? __pfx_kasprintf+0x10/0x10 [ 58.187492][ T25] ? trace_kmalloc+0xeb/0x110 [ 58.187513][ T25] ? __kasan_kmalloc+0xaa/0xb0 [ 58.187536][ T25] power_supply_register+0xce/0x110 [ 58.187556][ T25] wiimod_battery_probe+0x21e/0x370 [ 58.187573][ T25] ? __pfx_wiimod_battery_probe+0x10/0x10 [ 58.187585][ T25] ? input_ff_create+0x256/0x310 [ 58.187599][ T25] ? __pfx_wiimod_rumble_play+0x10/0x10 [ 58.187617][ T25] ? __pfx_wiimod_battery_probe+0x10/0x10 [ 58.187629][ T25] wiimote_init_worker+0xd55/0x2730 [ 58.187643][ T25] ? __pfx_wiimote_init_worker+0x10/0x10 [ 58.187653][ T25] ? lock_acquire+0x1d1/0x380 [ 58.187665][ T25] ? process_one_work+0xa2c/0x1b10 [ 58.187683][ T25] ? process_one_work+0x906/0x1b10 [ 58.187699][ T25] ? process_one_work+0x906/0x1b10 [ 58.187718][ T25] process_one_work+0xac7/0x1b10 [ 58.187740][ T25] ? __pfx_process_one_work+0x10/0x10 [ 58.187757][ T25] ? lock_acquire+0x1d1/0x380 [ 58.187773][ T25] ? __pfx_wiimote_init_worker+0x10/0x10 [ 58.187785][ T25] worker_thread+0x5ef/0xe50 [ 58.187800][ T25] ? kthread+0x13a/0x450 [ 58.187815][ T25] ? __pfx_worker_thread+0x10/0x10 [ 58.187824][ T25] kthread+0x373/0x450 [ 58.187838][ T25] ? __pfx_kthread+0x10/0x10 [ 58.187857][ T25] ret_from_fork+0x730/0xd60 [ 58.187870][ T25] ? __pfx_ret_from_fork+0x10/0x10 [ 58.187883][ T25] ? __switch_to+0x800/0x10f0 [ 58.187899][ T25] ? __pfx_kthread+0x10/0x10 [ 58.187914][ T25] ret_from_fork_asm+0x1a/0x30 [ 58.187933][ T25] [ 58.188353][ T25] wiimote 0005:057E:0330.0002: cannot register battery device [ 58.329874][ T6174] syz.1.94 (6174): drop_caches: 2 [ 58.364939][ T6176] MTD: Attempt to mount non-MTD device "/dev/nbd1" [ 60.297481][ T6188] ip_tables: iptables: counters copy to user failed while replacing table [ 60.298719][ T43] kauditd_printk_skb: 65 callbacks suppressed [ 60.298734][ T43] audit: type=1400 audit(1791250443.210:328): avc: denied { write } for pid=6187 comm="syz.3.96" name="nbd3" dev="devtmpfs" ino=691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 60.300981][ T43] audit: type=1400 audit(1791250443.210:329): avc: denied { create } for pid=6187 comm="syz.3.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 60.302772][ T43] audit: type=1400 audit(1791250443.210:330): avc: denied { ioctl } for pid=6187 comm="syz.3.96" path="socket:[10625]" dev="sockfs" ino=10625 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 60.303119][ T43] audit: type=1400 audit(1791250443.210:331): avc: denied { write } for pid=6187 comm="syz.3.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 60.961850][ T43] audit: type=1400 audit(1791250443.870:332): avc: denied { create } for pid=6198 comm="syz.1.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 60.963321][ T43] audit: type=1400 audit(1791250443.870:333): avc: denied { ioctl } for pid=6198 comm="syz.1.99" path="socket:[11715]" dev="sockfs" ino=11715 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 60.966209][ T43] audit: type=1400 audit(1791250443.870:334): avc: denied { read write } for pid=6198 comm="syz.1.99" name="uinput" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 60.966237][ T43] audit: type=1400 audit(1791250443.870:335): avc: denied { open } for pid=6198 comm="syz.1.99" path="/dev/uinput" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 60.973277][ T43] audit: type=1400 audit(1791250443.880:336): avc: denied { ioctl } for pid=6198 comm="syz.1.99" path="/dev/uinput" dev="devtmpfs" ino=941 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 60.973308][ T43] audit: type=1400 audit(1791250443.880:337): avc: denied { read } for pid=6198 comm="syz.1.99" name="usbmon0" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 60.976261][ T6199] input: syz0 as /devices/virtual/input/input9 [ 61.360429][ T6211] syz.3.103 (6211): drop_caches: 2 [ 61.818057][ T6227] netlink: 'syz.1.109': attribute type 4 has an invalid length. [ 61.918605][ T6231] MTD: Attempt to mount non-MTD device "/dev/nbd1" [ 62.399269][ T6234] syz.2.112 (6234): drop_caches: 2 [ 62.905327][ T6252] netlink: 200 bytes leftover after parsing attributes in process `syz.2.120'. [ 62.964247][ T25] wiimote 0005:057E:0330.0004: hidraw1: BLUETOOTH HID v0.00 Device [syz1] on syz0 [ 62.964736][ T25] wiimote 0005:057E:0330.0004: New device registered [ 62.966417][ T6253] wiimote 0005:057E:0330.0004: Device removed [ 63.009986][ T6254] fido_id[6254]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 63.762635][ T6271] jffs2: notice: (6271) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 63.983567][ T6280] netlink: 32 bytes leftover after parsing attributes in process `syz.3.128'. [ 64.016811][ T25] wiimote 0005:057E:0330.0004: detected device: Nintendo Wii Remote Plus (Gen 2) [ 64.039623][ T25] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0330.0004/input/input11 [ 64.051082][ T25] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0330.0004/input/input12 [ 64.057850][ T25] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0330.0004/input/input10 [ 64.258758][ T6285] mtrr: base(0x573be70b8fa6cd88000) is not aligned on a size(0xb1f7e145000) boundary [ 64.563150][ T6295] Bluetooth: hci0: unsupported parameter 255 [ 64.563165][ T6295] Bluetooth: hci0: unsupported parameter 255 [ 64.766017][ T6305] jffs2: notice: (6305) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 64.778143][ T6305] FAULT_INJECTION: forcing a failure. [ 64.778143][ T6305] name failslab, interval 1, probability 0, space 0, times 0 [ 64.778175][ T6305] CPU: 2 UID: 0 PID: 6305 Comm: syz.3.136 Not tainted syzkaller #0 PREEMPT(full) [ 64.778199][ T6305] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 64.778211][ T6305] Call Trace: [ 64.778218][ T6305] [ 64.778226][ T6305] dump_stack_lvl+0x100/0x190 [ 64.778258][ T6305] should_fail_ex.cold+0x5/0xa [ 64.778286][ T6305] should_failslab+0xc2/0x120 [ 64.778315][ T6305] kmem_cache_alloc_noprof+0x92/0x6a0 [ 64.778342][ T6305] ? jffs2_write_dnode+0x14f/0x9e0 [ 64.778370][ T6305] jffs2_write_dnode+0x14f/0x9e0 [ 64.778394][ T6305] ? xfd_validate_state+0x129/0x190 [ 64.778421][ T6305] ? __pfx_jffs2_write_dnode+0x10/0x10 [ 64.778443][ T6305] ? irq_fpu_usable+0x83/0xb0 [ 64.778474][ T6305] ? lockdep_hardirqs_on+0x7d/0x110 [ 64.778506][ T6305] ? kernel_fpu_end+0x5f/0x80 [ 64.778530][ T6305] ? __local_bh_enable_ip+0xa5/0x120 [ 64.778558][ T6305] jffs2_write_inode_range+0x85f/0xb80 [ 64.778588][ T6305] ? __pfx_jffs2_write_inode_range+0x10/0x10 [ 64.778610][ T6305] ? rcu_is_watching+0x13/0xc0 [ 64.778643][ T6305] ? from_kgid+0x8f/0xd0 [ 64.778673][ T6305] ? __pfx_from_kgid+0x10/0x10 [ 64.778703][ T6305] jffs2_write_end+0x72c/0xea0 [ 64.778739][ T6305] ? __pfx_jffs2_write_end+0x10/0x10 [ 64.778768][ T6305] ? inode_to_bdi+0x9e/0x160 [ 64.778791][ T6305] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 64.778818][ T6305] generic_perform_write+0x513/0xa40 [ 64.778854][ T6305] ? __pfx_generic_perform_write+0x10/0x10 [ 64.778882][ T6305] ? mnt_put_write_access_file+0x4e/0x100 [ 64.778911][ T6305] ? file_update_time_flags+0x38c/0x520 [ 64.778936][ T6305] __generic_file_write_iter+0x1f7/0x240 [ 64.778960][ T6305] generic_file_write_iter+0xe1/0x390 [ 64.778983][ T6305] vfs_write+0x6af/0x1050 [ 64.779007][ T6305] ? __pfx_generic_file_write_iter+0x10/0x10 [ 64.779030][ T6305] ? __pfx_vfs_write+0x10/0x10 [ 64.779050][ T6305] ? find_held_lock+0x2b/0x80 [ 64.779095][ T6305] ksys_write+0x12a/0x250 [ 64.779118][ T6305] ? __pfx_ksys_write+0x10/0x10 [ 64.779163][ T6305] do_syscall_64+0x123/0x790 [ 64.779188][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.779209][ T6305] RIP: 0033:0x7f80a059e199 [ 64.779226][ T6305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.779244][ T6305] RSP: 002b:00007f80a13a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 64.779264][ T6305] RAX: ffffffffffffffda RBX: 00007f80a0825fa0 RCX: 00007f80a059e199 [ 64.779277][ T6305] RDX: 0000000000000018 RSI: 00002000000005c0 RDI: 0000000000000003 [ 64.779289][ T6305] RBP: 00007f80a13a4090 R08: 0000000000000000 R09: 0000000000000000 [ 64.779301][ T6305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.779313][ T6305] R13: 00007f80a0826038 R14: 00007f80a0825fa0 R15: 00007ffc815641a8 [ 64.779340][ T6305] [ 64.806460][ T6308] netlink: 200 bytes leftover after parsing attributes in process `syz.0.137'. [ 64.837160][ T6310] jffs2: notice: (6310) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 64.860234][ T6312] FAULT_INJECTION: forcing a failure. [ 64.860234][ T6312] name failslab, interval 1, probability 0, space 0, times 0 [ 64.860255][ T6312] CPU: 2 UID: 0 PID: 6312 Comm: syz.0.137 Not tainted syzkaller #0 PREEMPT(full) [ 64.860278][ T6312] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 64.860286][ T6312] Call Trace: [ 64.860290][ T6312] [ 64.860296][ T6312] dump_stack_lvl+0x100/0x190 [ 64.860321][ T6312] should_fail_ex.cold+0x5/0xa [ 64.860338][ T6312] should_failslab+0xc2/0x120 [ 64.860356][ T6312] __kmalloc_node_noprof+0xff/0x880 [ 64.860370][ T6312] ? mark_held_locks+0x40/0x70 [ 64.860384][ T6312] ? __blk_mq_realloc_hw_ctxs+0x579/0x820 [ 64.860401][ T6312] __blk_mq_realloc_hw_ctxs+0x579/0x820 [ 64.860415][ T6312] ? lockdep_init_map_type+0x5c/0x250 [ 64.860431][ T6312] blk_mq_init_allocated_queue+0x308/0x1440 [ 64.860449][ T6312] ? blk_alloc_queue+0x627/0x790 [ 64.860462][ T6312] ? blk_alloc_queue+0x1a3/0x790 [ 64.860474][ T6312] ? alloc_pages_node_noprof+0x11d/0x200 [ 64.860488][ T6312] blk_mq_alloc_queue+0x1bd/0x290 [ 64.860504][ T6312] ? __pfx_blk_mq_alloc_queue+0x10/0x10 [ 64.860529][ T6312] ? blk_mq_alloc_tag_set+0xe2c/0x1330 [ 64.860551][ T6312] __blk_mq_alloc_disk+0x29/0x120 [ 64.860567][ T6312] loop_add+0x498/0xb60 [ 64.860580][ T6312] ? __pfx_loop_add+0x10/0x10 [ 64.860599][ T6312] ? __fget_files+0x34/0x3d0 [ 64.860617][ T6312] loop_control_ioctl+0xae/0x620 [ 64.860633][ T6312] ? __pfx_loop_control_ioctl+0x10/0x10 [ 64.860647][ T6312] ? selinux_file_ioctl+0x13b/0x290 [ 64.860660][ T6312] ? selinux_file_ioctl+0xb6/0x290 [ 64.860675][ T6312] ? __pfx_loop_control_ioctl+0x10/0x10 [ 64.860689][ T6312] __x64_sys_ioctl+0x18e/0x210 [ 64.860703][ T6312] do_syscall_64+0x123/0x790 [ 64.860717][ T6312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.860729][ T6312] RIP: 0033:0x7fdf3939e199 [ 64.860739][ T6312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.860750][ T6312] RSP: 002b:00007fdf3a27d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 64.860761][ T6312] RAX: ffffffffffffffda RBX: 00007fdf39626090 RCX: 00007fdf3939e199 [ 64.860768][ T6312] RDX: 00000000ffffffe4 RSI: 0000000000004c80 RDI: 0000000000000008 [ 64.860775][ T6312] RBP: 00007fdf394358e0 R08: 0000000000000000 R09: 0000000000000000 [ 64.860781][ T6312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 64.860788][ T6312] R13: 00007fdf39626128 R14: 00007fdf39626090 R15: 00007ffe48289488 [ 64.860801][ T6312] [ 64.912300][ T5746] wiimote 0005:057E:0330.0005: hidraw2: BLUETOOTH HID v0.00 Device [syz1] on syz0 [ 64.912822][ T5746] wiimote 0005:057E:0330.0005: New device registered [ 64.965791][ T5746] wiimote 0005:057E:0330.0005: detected device: Nintendo Wii Remote Plus (Gen 2) [ 64.966208][ T5746] sysfs: cannot create duplicate filename '/class/power_supply/wiimote_battery_syz0' [ 64.966225][ T5746] CPU: 2 UID: 0 PID: 5746 Comm: kworker/2:3 Not tainted syzkaller #0 PREEMPT(full) [ 64.966247][ T5746] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 64.966258][ T5746] Workqueue: events wiimote_init_worker [ 64.966278][ T5746] Call Trace: [ 64.966285][ T5746] [ 64.966292][ T5746] dump_stack_lvl+0x100/0x190 [ 64.966320][ T5746] sysfs_warn_dup.cold+0x1c/0x28 [ 64.966345][ T5746] sysfs_do_create_link_sd+0x113/0x140 [ 64.966374][ T5746] sysfs_create_link+0x61/0xc0 [ 64.966406][ T5746] device_add+0x675/0x1970 [ 64.966436][ T5746] ? __pfx_device_add+0x10/0x10 [ 64.966464][ T5746] ? lockdep_init_map_type+0x5c/0x250 [ 64.966488][ T5746] ? __raw_spin_lock_init+0x3a/0x110 [ 64.966516][ T5746] __power_supply_register.part.0+0x9b5/0x1390 [ 64.966544][ T5746] ? __pfx___power_supply_register.part.0+0x10/0x10 [ 64.966568][ T5746] ? __pfx_wiimod_battery_probe+0x10/0x10 [ 64.966587][ T5746] ? kasprintf+0xc7/0x100 [ 64.966610][ T5746] ? __pfx_kasprintf+0x10/0x10 [ 64.966634][ T5746] ? trace_kmalloc+0xeb/0x110 [ 64.966673][ T5746] ? __kasan_kmalloc+0xaa/0xb0 [ 64.966702][ T5746] power_supply_register+0xce/0x110 [ 64.966725][ T5746] wiimod_battery_probe+0x21e/0x370 [ 64.966746][ T5746] ? __pfx_wiimod_battery_probe+0x10/0x10 [ 64.966766][ T5746] ? input_ff_create+0x256/0x310 [ 64.966789][ T5746] ? __pfx_wiimod_rumble_play+0x10/0x10 [ 64.966821][ T5746] ? __pfx_wiimod_battery_probe+0x10/0x10 [ 64.966841][ T5746] wiimote_init_worker+0xd55/0x2730 [ 64.966866][ T5746] ? __pfx_wiimote_init_worker+0x10/0x10 [ 64.966883][ T5746] ? lock_acquire+0x1d1/0x380 [ 64.966901][ T5746] ? process_one_work+0xa2c/0x1b10 [ 64.966932][ T5746] ? process_one_work+0x906/0x1b10 [ 64.966958][ T5746] ? process_one_work+0x906/0x1b10 [ 64.966989][ T5746] process_one_work+0xac7/0x1b10 [ 64.967027][ T5746] ? __pfx_process_one_work+0x10/0x10 [ 64.967056][ T5746] ? lock_acquire+0x1d1/0x380 [ 64.967083][ T5746] ? __pfx_wiimote_init_worker+0x10/0x10 [ 64.967104][ T5746] worker_thread+0x5ef/0xe50 [ 64.967128][ T5746] ? __pfx_worker_thread+0x10/0x10 [ 64.967146][ T5746] ? kthread+0x13a/0x450 [ 64.967170][ T5746] ? __pfx_worker_thread+0x10/0x10 [ 64.967185][ T5746] kthread+0x373/0x450 [ 64.967209][ T5746] ? __pfx_kthread+0x10/0x10 [ 64.967236][ T5746] ret_from_fork+0x730/0xd60 [ 64.967258][ T5746] ? __pfx_ret_from_fork+0x10/0x10 [ 64.967280][ T5746] ? __switch_to+0x800/0x10f0 [ 64.967306][ T5746] ? __pfx_kthread+0x10/0x10 [ 64.967333][ T5746] ret_from_fork_asm+0x1a/0x30 [ 64.967366][ T5746] [ 64.973776][ T5746] wiimote 0005:057E:0330.0005: cannot register battery device [ 64.977681][ T6312] wiimote 0005:057E:0330.0005: Device removed [ 66.479981][ T6335] syz.3.146 (6335): drop_caches: 2 [ 66.529253][ T6337] FAULT_INJECTION: forcing a failure. [ 66.529253][ T6337] name failslab, interval 1, probability 0, space 0, times 0 [ 66.529286][ T6337] CPU: 3 UID: 0 PID: 6337 Comm: syz.3.147 Not tainted syzkaller #0 PREEMPT(full) [ 66.529309][ T6337] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 66.529321][ T6337] Call Trace: [ 66.529328][ T6337] [ 66.529336][ T6337] dump_stack_lvl+0x100/0x190 [ 66.529369][ T6337] should_fail_ex.cold+0x5/0xa [ 66.529403][ T6337] should_failslab+0xc2/0x120 [ 66.529431][ T6337] __kmalloc_flags_noprof+0x122/0x8e0 [ 66.529454][ T6337] ? __lock_acquire+0x5c0/0x1f40 [ 66.529479][ T6337] ? alloc_slab_obj_exts+0x6a/0x170 [ 66.529506][ T6337] alloc_slab_obj_exts+0x6a/0x170 [ 66.529529][ T6337] __memcg_slab_post_alloc_hook+0x3fc/0x10c0 [ 66.529558][ T6337] ? kasan_unpoison+0x27/0x60 [ 66.529585][ T6337] __kmalloc_noprof+0x653/0x840 [ 66.529609][ T6337] ? __register_sysctl_table+0xac/0x1650 [ 66.529666][ T6337] __register_sysctl_table+0xac/0x1650 [ 66.529690][ T6337] ? lock_acquire+0x1d1/0x380 [ 66.529716][ T6337] ? __pfx___register_sysctl_table+0x10/0x10 [ 66.529737][ T6337] ? is_module_address+0x5f/0xf0 [ 66.529764][ T6337] ? is_module_address+0x5f/0xf0 [ 66.529797][ T6337] register_net_sysctl_sz+0x325/0x420 [ 66.529824][ T6337] ? __asan_memcpy+0x3c/0x60 [ 66.529847][ T6337] __ip_vs_lblcr_init+0x150/0x330 [ 66.529873][ T6337] ? __pfx___ip_vs_lblcr_init+0x10/0x10 [ 66.529897][ T6337] ops_init+0x1e2/0x5f0 [ 66.529928][ T6337] setup_net+0x118/0x3a0 [ 66.529960][ T6337] ? __pfx_setup_net+0x10/0x10 [ 66.529998][ T6337] copy_net_ns+0x345/0x7a0 [ 66.530021][ T6337] create_new_namespaces+0x3ea/0xac0 [ 66.530053][ T6337] unshare_nsproxy_namespaces+0xf2/0x220 [ 66.530081][ T6337] ksys_unshare+0x4a2/0xa70 [ 66.530106][ T6337] ? __pfx_ksys_unshare+0x10/0x10 [ 66.530139][ T6337] __x64_sys_unshare+0x31/0x40 [ 66.530163][ T6337] do_syscall_64+0x123/0x790 [ 66.530189][ T6337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.530209][ T6337] RIP: 0033:0x7f80a059e199 [ 66.530225][ T6337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.530244][ T6337] RSP: 002b:00007f80a13a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 66.530264][ T6337] RAX: ffffffffffffffda RBX: 00007f80a0825fa0 RCX: 00007f80a059e199 [ 66.530276][ T6337] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 66.530287][ T6337] RBP: 00007f80a06358e0 R08: 0000000000000000 R09: 0000000000000000 [ 66.530299][ T6337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 66.530311][ T6337] R13: 00007f80a0826038 R14: 00007f80a0825fa0 R15: 00007ffc815641a8 [ 66.530338][ T6337] [ 67.592954][ T6349] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=770 sclass=netlink_route_socket pid=6349 comm=syz.3.150 [ 67.593205][ T6349] netlink: 8 bytes leftover after parsing attributes in process `syz.3.150'. [ 67.599048][ T6349] ip6erspan0: entered promiscuous mode [ 67.685116][ T6352] MTD: Attempt to mount non-MTD device "/dev/nbd3" [ 70.071796][ T6386] faux_driver vgem: [drm] Unknown color mode 8392693; guessing buffer size. [ 70.076531][ T43] kauditd_printk_skb: 25 callbacks suppressed [ 70.076543][ T43] audit: type=1400 audit(1791250452.980:363): avc: denied { name_bind } for pid=6385 comm="syz.3.164" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 70.108607][ T43] audit: type=1400 audit(1791250453.020:364): avc: denied { map } for pid=6385 comm="syz.3.164" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 70.176842][ T6389] netlink: 200 bytes leftover after parsing attributes in process `syz.3.165'. [ 70.231821][ T6390] FAULT_INJECTION: forcing a failure. [ 70.231821][ T6390] name failslab, interval 1, probability 0, space 0, times 0 [ 70.231851][ T6390] CPU: 0 UID: 0 PID: 6390 Comm: syz.3.165 Not tainted syzkaller #0 PREEMPT(full) [ 70.231873][ T6390] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 70.231884][ T6390] Call Trace: [ 70.231890][ T6390] [ 70.231898][ T6390] dump_stack_lvl+0x100/0x190 [ 70.231927][ T6390] should_fail_ex.cold+0x5/0xa [ 70.231952][ T6390] should_failslab+0xc2/0x120 [ 70.231976][ T6390] __kmalloc_node_noprof+0xff/0x880 [ 70.231999][ T6390] ? mark_held_locks+0x40/0x70 [ 70.232019][ T6390] ? __blk_mq_realloc_hw_ctxs+0x579/0x820 [ 70.232044][ T6390] __blk_mq_realloc_hw_ctxs+0x579/0x820 [ 70.232066][ T6390] ? lockdep_init_map_type+0x5c/0x250 [ 70.232090][ T6390] blk_mq_init_allocated_queue+0x308/0x1440 [ 70.232118][ T6390] ? blk_alloc_queue+0x627/0x790 [ 70.232138][ T6390] ? blk_alloc_queue+0x1a3/0x790 [ 70.232156][ T6390] ? alloc_pages_node_noprof+0x11d/0x200 [ 70.232178][ T6390] blk_mq_alloc_queue+0x1bd/0x290 [ 70.232203][ T6390] ? __pfx_blk_mq_alloc_queue+0x10/0x10 [ 70.232238][ T6390] ? blk_mq_alloc_tag_set+0xe2c/0x1330 [ 70.232268][ T6390] __blk_mq_alloc_disk+0x29/0x120 [ 70.232293][ T6390] loop_add+0x498/0xb60 [ 70.232313][ T6390] ? __pfx_loop_add+0x10/0x10 [ 70.232352][ T6390] ? __fget_files+0x34/0x3d0 [ 70.232382][ T6390] loop_control_ioctl+0xae/0x620 [ 70.232405][ T6390] ? __pfx_loop_control_ioctl+0x10/0x10 [ 70.232426][ T6390] ? selinux_file_ioctl+0x13b/0x290 [ 70.232449][ T6390] ? selinux_file_ioctl+0xb6/0x290 [ 70.232472][ T6390] ? __pfx_loop_control_ioctl+0x10/0x10 [ 70.232494][ T6390] __x64_sys_ioctl+0x18e/0x210 [ 70.232515][ T6390] do_syscall_64+0x123/0x790 [ 70.232557][ T6390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.232577][ T6390] RIP: 0033:0x7f80a059e199 [ 70.232592][ T6390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.232608][ T6390] RSP: 002b:00007f80a1383028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 70.232625][ T6390] RAX: ffffffffffffffda RBX: 00007f80a0826090 RCX: 00007f80a059e199 [ 70.232637][ T6390] RDX: 00000000ffffffe4 RSI: 0000000000004c80 RDI: 0000000000000008 [ 70.232648][ T6390] RBP: 00007f80a06358e0 R08: 0000000000000000 R09: 0000000000000000 [ 70.232659][ T6390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 70.232668][ T6390] R13: 00007f80a0826128 R14: 00007f80a0826090 R15: 00007ffc815641a8 [ 70.232691][ T6390] [ 70.292474][ T1479] wiimote 0005:057E:0330.0006: hidraw2: BLUETOOTH HID v0.00 Device [syz1] on syz0 [ 70.292745][ T1479] wiimote 0005:057E:0330.0006: New device registered [ 70.341151][ T1479] wiimote 0005:057E:0330.0006: detected device: Nintendo Wii Remote Plus (Gen 2) [ 70.364382][ T6390] wiimote 0005:057E:0330.0006: Device removed [ 70.375279][ T1479] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0330.0006/input/input15 [ 70.383121][ T1479] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0330.0006/input/input16 [ 70.391027][ T1479] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0330.0006/input/input14 [ 70.429770][ T6397] ================================================================== [ 70.429780][ T6397] BUG: KASAN: slab-use-after-free in dvb_device_open+0x33f/0x3b0 [ 70.429797][ T6397] Read of size 8 at addr ffff88802f1dca18 by task syz.2.167/6397 [ 70.429806][ T6397] [ 70.429813][ T6397] CPU: 2 UID: 0 PID: 6397 Comm: syz.2.167 Not tainted syzkaller #0 PREEMPT(full) [ 70.429826][ T6397] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 70.429833][ T6397] Call Trace: [ 70.429837][ T6397] [ 70.429842][ T6397] dump_stack_lvl+0x100/0x190 [ 70.429859][ T6397] print_report+0x13d/0x4b0 [ 70.429876][ T6397] ? __virt_addr_valid+0x239/0x430 [ 70.429889][ T6397] ? dvb_device_open+0x33f/0x3b0 [ 70.429900][ T6397] kasan_report+0xdf/0x1c0 [ 70.429916][ T6397] ? dvb_device_open+0x33f/0x3b0 [ 70.429927][ T6397] ? __pfx_dvb_device_open+0x10/0x10 [ 70.429938][ T6397] dvb_device_open+0x33f/0x3b0 [ 70.429949][ T6397] ? __pfx_dvb_device_open+0x10/0x10 [ 70.429960][ T6397] chrdev_open+0x234/0x6a0 [ 70.429975][ T6397] ? __pfx_chrdev_open+0x10/0x10 [ 70.429989][ T6397] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 70.430002][ T6397] do_dentry_open+0x6ab/0x14d0 [ 70.430014][ T6397] ? __pfx_chrdev_open+0x10/0x10 [ 70.430029][ T6397] vfs_open+0x82/0x3f0 [ 70.430044][ T6397] path_openat+0x19fa/0x2440 [ 70.430060][ T6397] ? __pfx_path_openat+0x10/0x10 [ 70.430076][ T6397] do_file_open+0x20e/0x430 [ 70.430091][ T6397] ? __pfx_do_file_open+0x10/0x10 [ 70.430109][ T6397] ? _raw_spin_unlock+0x28/0x50 [ 70.430125][ T6397] ? alloc_fd+0x471/0x7a0 [ 70.430141][ T6397] do_sys_openat2+0x10f/0x1e0 [ 70.430157][ T6397] ? __pfx_do_sys_openat2+0x10/0x10 [ 70.430172][ T6397] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 70.430189][ T6397] __x64_sys_openat+0x12d/0x210 [ 70.430205][ T6397] ? __pfx___x64_sys_openat+0x10/0x10 [ 70.430223][ T6397] do_syscall_64+0x123/0x790 [ 70.430236][ T6397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.430247][ T6397] RIP: 0033:0x7fe2fff5e9ce [ 70.430256][ T6397] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 70.430266][ T6397] RSP: 002b:00007fe300d86b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 70.430278][ T6397] RAX: ffffffffffffffda RBX: 00007fe300d876c0 RCX: 00007fe2fff5e9ce [ 70.430285][ T6397] RDX: 0000000000040002 RSI: 00007fe300d86c00 RDI: ffffffffffffff9c [ 70.430292][ T6397] RBP: 00007fe300d86c00 R08: 0000000000000000 R09: 0000000000000000 [ 70.430298][ T6397] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 70.430311][ T6397] R13: 00007fe300226128 R14: 00007fe300226090 R15: 00007ffcf6051638 [ 70.430321][ T6397] [ 70.430325][ T6397] [ 70.430328][ T6397] Allocated by task 1: [ 70.430333][ T6397] kasan_save_stack+0x30/0x50 [ 70.430347][ T6397] kasan_save_track+0x14/0x30 [ 70.430359][ T6397] __kasan_kmalloc+0xaa/0xb0 [ 70.430372][ T6397] __kmalloc_cache_noprof+0x2f8/0x6d0 [ 70.430382][ T6397] dvb_register_device+0x1d6/0x1e20 [ 70.430393][ T6397] dvb_register_frontend+0x552/0x820 [ 70.430404][ T6397] vidtv_bridge_probe+0x44b/0xa30 [ 70.430417][ T6397] platform_probe+0x106/0x1d0 [ 70.430429][ T6397] really_probe+0x241/0xa60 [ 70.430442][ T6397] __driver_probe_device+0x210/0x460 [ 70.430454][ T6397] driver_probe_device+0x4a/0x140 [ 70.430468][ T6397] __driver_attach+0x21f/0x5b0 [ 70.430481][ T6397] bus_for_each_dev+0x13e/0x1d0 [ 70.430491][ T6397] bus_add_driver+0x305/0x5b0 [ 70.430502][ T6397] driver_register+0x1e2/0x360 [ 70.430516][ T6397] vidtv_bridge_init+0x52/0x80 [ 70.430526][ T6397] do_one_initcall+0x11c/0x6f0 [ 70.430537][ T6397] kernel_init_freeable+0x6ea/0x7b0 [ 70.430549][ T6397] kernel_init+0x21/0x1e0 [ 70.430562][ T6397] ret_from_fork+0x730/0xd60 [ 70.430573][ T6397] ret_from_fork_asm+0x1a/0x30 [ 70.430584][ T6397] [ 70.430586][ T6397] Freed by task 6361: [ 70.430592][ T6397] kasan_save_stack+0x30/0x50 [ 70.430622][ T6397] kasan_save_track+0x14/0x30 [ 70.430636][ T6397] kasan_save_free_info+0x3b/0x70 [ 70.430646][ T6397] __kasan_slab_free+0x5f/0x80 [ 70.430660][ T6397] kfree+0x22b/0x6d0 [ 70.430669][ T6397] dvb_device_put.part.0+0x57/0x90 [ 70.430679][ T6397] dvb_device_open+0x2ba/0x3b0 [ 70.430690][ T6397] chrdev_open+0x234/0x6a0 [ 70.430704][ T6397] do_dentry_open+0x6ab/0x14d0 [ 70.430716][ T6397] vfs_open+0x82/0x3f0 [ 70.430731][ T6397] path_openat+0x19fa/0x2440 [ 70.430745][ T6397] do_file_open+0x20e/0x430 [ 70.430760][ T6397] do_sys_openat2+0x10f/0x1e0 [ 70.430775][ T6397] __x64_sys_openat+0x12d/0x210 [ 70.430790][ T6397] do_syscall_64+0x123/0x790 [ 70.430801][ T6397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.430811][ T6397] [ 70.430813][ T6397] The buggy address belongs to the object at ffff88802f1dca00 [ 70.430813][ T6397] which belongs to the cache kmalloc-256 of size 256 [ 70.430822][ T6397] The buggy address is located 24 bytes inside of [ 70.430822][ T6397] freed 256-byte region [ffff88802f1dca00, ffff88802f1dcb00) [ 70.430832][ T6397] [ 70.430834][ T6397] The buggy address belongs to the physical page: [ 70.430839][ T6397] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2f1dc [ 70.430849][ T6397] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 70.430857][ T6397] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 70.430867][ T6397] page_type: f5(slab) [ 70.430876][ T6397] raw: 00fff00000000040 ffff88801c042b40 dead000000000100 dead000000000122 [ 70.430885][ T6397] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 70.430895][ T6397] head: 00fff00000000040 ffff88801c042b40 dead000000000100 dead000000000122 [ 70.430904][ T6397] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 70.430913][ T6397] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 70.430922][ T6397] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 70.430928][ T6397] page dumped because: kasan: bad access detected [ 70.430933][ T6397] page_owner tracks the page as allocated [ 70.430936][ T6397] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 9114542327 [ 70.430954][ T6397] post_alloc_hook+0xfd/0x120 [ 70.430963][ T6397] get_page_from_freelist+0x110d/0x35d0 [ 70.430974][ T6397] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 70.430985][ T6397] new_slab+0xa9/0x6e0 [ 70.430994][ T6397] refill_objects+0xe3/0x410 [ 70.431003][ T6397] __pcs_replace_empty_main+0x35e/0x650 [ 70.431013][ T6397] __kmalloc_cache_noprof+0x4f4/0x6d0 [ 70.431023][ T6397] bus_add_driver+0x92/0x5b0 [ 70.431034][ T6397] driver_register+0x1e2/0x360 [ 70.431049][ T6397] usb_register_driver+0x21c/0x3e0 [ 70.431058][ T6397] do_one_initcall+0x11c/0x6f0 [ 70.431068][ T6397] kernel_init_freeable+0x6ea/0x7b0 [ 70.431080][ T6397] kernel_init+0x21/0x1e0 [ 70.431092][ T6397] ret_from_fork+0x730/0xd60 [ 70.431103][ T6397] ret_from_fork_asm+0x1a/0x30 [ 70.431113][ T6397] page_owner free stack trace missing [ 70.431116][ T6397] [ 70.431119][ T6397] Memory state around the buggy address: [ 70.431124][ T6397] ffff88802f1dc900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 70.431134][ T6397] ffff88802f1dc980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 70.431141][ T6397] >ffff88802f1dca00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 70.431146][ T6397] ^ [ 70.431152][ T6397] ffff88802f1dca80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 70.431159][ T6397] ffff88802f1dcb00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 70.431164][ T6397] ================================================================== [ 70.431223][ T6397] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 70.686632][ T6397] CPU: 2 UID: 0 PID: 6397 Comm: syz.2.167 Not tainted syzkaller #0 PREEMPT(full) [ 70.690526][ T6397] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 70.694616][ T6397] Call Trace: [ 70.695956][ T6397] [ 70.697100][ T6397] dump_stack_lvl+0x100/0x190 [ 70.699056][ T6397] vpanic+0x553/0x970 [ 70.700700][ T6397] ? __pfx_vpanic+0x10/0x10 [ 70.702565][ T6397] ? mark_held_locks+0x40/0x70 [ 70.704514][ T6397] ? dvb_device_open+0x33f/0x3b0 [ 70.706557][ T6397] panic+0xd1/0xe0 [ 70.708043][ T6397] ? __pfx_panic+0x10/0x10 [ 70.709419][ T6397] ? dvb_device_open+0x33f/0x3b0 [ 70.711316][ T6397] ? preempt_schedule_common+0x3c/0xb0 [ 70.713554][ T6397] check_panic_on_warn.cold+0x19/0x34 [ 70.715673][ T6397] end_report.part.0+0x3a/0x90 [ 70.717583][ T6397] kasan_report.cold+0xe/0x18 [ 70.719529][ T6397] ? dvb_device_open+0x33f/0x3b0 [ 70.721616][ T6397] ? __pfx_dvb_device_open+0x10/0x10 [ 70.723758][ T6397] dvb_device_open+0x33f/0x3b0 [ 70.725727][ T6397] ? __pfx_dvb_device_open+0x10/0x10 [ 70.727891][ T6397] chrdev_open+0x234/0x6a0 [ 70.729717][ T6397] ? __pfx_chrdev_open+0x10/0x10 [ 70.731659][ T6397] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 70.734117][ T6397] do_dentry_open+0x6ab/0x14d0 [ 70.735939][ T6397] ? __pfx_chrdev_open+0x10/0x10 [ 70.737499][ T6397] vfs_open+0x82/0x3f0 [ 70.739070][ T6397] path_openat+0x19fa/0x2440 [ 70.740952][ T6397] ? __pfx_path_openat+0x10/0x10 [ 70.742956][ T6397] do_file_open+0x20e/0x430 [ 70.744788][ T6397] ? __pfx_do_file_open+0x10/0x10 [ 70.746827][ T6397] ? _raw_spin_unlock+0x28/0x50 [ 70.748809][ T6397] ? alloc_fd+0x471/0x7a0 [ 70.750581][ T6397] do_sys_openat2+0x10f/0x1e0 [ 70.752517][ T6397] ? __pfx_do_sys_openat2+0x10/0x10 [ 70.754652][ T6397] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 70.757225][ T6397] __x64_sys_openat+0x12d/0x210 [ 70.759221][ T6397] ? __pfx___x64_sys_openat+0x10/0x10 [ 70.761001][ T6397] do_syscall_64+0x123/0x790 [ 70.762956][ T6397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.765318][ T6397] RIP: 0033:0x7fe2fff5e9ce [ 70.767127][ T6397] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 70.774726][ T6397] RSP: 002b:00007fe300d86b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 70.777797][ T6397] RAX: ffffffffffffffda RBX: 00007fe300d876c0 RCX: 00007fe2fff5e9ce [ 70.780154][ T6397] RDX: 0000000000040002 RSI: 00007fe300d86c00 RDI: ffffffffffffff9c [ 70.782830][ T6397] RBP: 00007fe300d86c00 R08: 0000000000000000 R09: 0000000000000000 [ 70.785711][ T6397] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 70.788901][ T6397] R13: 00007fe300226128 R14: 00007fe300226090 R15: 00007ffcf6051638 [ 70.792075][ T6397] [ 70.793999][ T6397] Kernel Offset: disabled [ 70.795703][ T6397] Rebooting in 86400 seconds.. VM DIAGNOSIS: 01:34:13 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000001 RBX=0000000000000000 RCX=0000000000000001 RDX=0000000000000001 RSI=0000000075139bc4 RDI=ffffffff8e36911a RBP=ffff888028212800 RSP=ffffc9000407fbe8 R8 =00000000000753b5 R9 =00000000000001db R10=0000000000000000 R11=0000000000000000 R12=0000000000000001 R13=0000000000000001 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8bd2ead0 RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055555f7fb500 ffffffff 00c00000 GS =0000 ffff8880d5b4e000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f1c074623ec CR3=000000003d456000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000005a635 RBX=ffff88801f69cb00 RCX=ffffffff8bd2e235 RDX=0000000000000001 RSI=ffffffff8e38f5e4 RDI=ffffffff8c623a80 RBP=ffffed1003ed3960 RSP=ffffc90000187e00 R8 =0000000000000001 R9 =ffffed100d4a67bd R10=ffff88806a533deb R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000030fc4 R15=dffffc0000000000 RIP=ffffffff8bd2c76f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5c4e000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055a9e8456e30 CR3=000000003ecbc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000037 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85b1c945 RDI=ffffffff9bc76fa0 RBP=ffffffff9bc76f60 RSP=ffffc9000409f0e8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000039333654 R12=0000000000000000 R13=0000000000000037 R14=0000000000000004 R15=ffffc9000409f400 RIP=ffffffff85b1c96f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fe300d876c0 ffffffff 00c00000 GS =0000 ffff8880d5d4e000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fe2fff877c0 CR3=000000003d456000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000004090001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f503555d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc589975b6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc589975b6 00007ffc589975bc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5034835ec3 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5034835f03 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5034836067 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5034835ef5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f50349f4600 00007f50349f45e0 00007f50349f45e8 00007f50349f4618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f50349f45f8 00007f50349f45c8 00007f50349f4600 00007f50349f45e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=8000000000000001 RBX=ffffea000115da00 RCX=ffffc900070a1000 RDX=ffffffffffffffff RSI=ffffffff826aeeba RDI=ffffea000115da08 RBP=ffffea000115da00 RSP=ffffc9000375f508 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffea000115da00 R13=0000000000000001 R14=ffffea000115da30 R15=000000000000c00b RIP=ffffffff820c47fc RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007fdf3a29e6c0 ffffffff 00c00000 GS =0000 ffff8880d5e4e000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f5035725ff8 CR3=0000000022685000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010001 Opmask01=0000000001000003 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcf6051b26 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcf6051b26 00007ffcf6051b2c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe300035ec3 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe300035f03 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe300036067 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe300035ef5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe3001f45f8 00007fe3001f45c8 00007fe3001f4600 00007fe3001f45e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000000b 0000000000000000 0000000000000000 00000000000003a0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000