last executing test programs: 2m35.641699418s ago: executing program 32 (id=660): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000060006000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5426c010880f4000080060005000180000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff240002001bc715ee4868b12a49f4df11bc05475489f6a27c4d6483ad2fa5e45903b0ce8514000400e76a686bac1414aa00000000000000008c00098028000080060001000a00000014000200ff020000000000000000000000000001050003000000000028000080060001000a000000140002000000000000000000000000000000000105000300030000001c000080060001000200da0008000200e000000105000300000000001c000080060001000200000008000200ac141400050003000000000074000080200004000a004e2200000000fc0000000000000000000000000000000400000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff080003000100000024000200cde20bc0d9b90ac13642d7b66459dd9db5e20b4b"], 0x1c8}}, 0x0) 1m2.610909962s ago: executing program 33 (id=1370): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1bf) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x202, 0x150) write(r0, &(0x7f0000000140), 0x0) syz_usb_connect$lan78xx(0x0, 0xfffffffffffffe0e, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x5b05b05b05b05b5, [{{0x9, 0x2, 0xffffffab}}]}}, 0x0) 50.901226836s ago: executing program 0 (id=1497): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./dev\x00', &(0x7f0000000480)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./mnt\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='./dev/sda1\x00', &(0x7f0000000540)='./mnt\x00', &(0x7f0000000580)='ext4\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./mnt\x00', 0x149000, 0x19a) ioctl$FITRIM(r0, 0x40e8662e, &(0x7f0000000640)={0x100000021e, 0x7fffffff, 0x3}) (fail_nth: 1) 50.809084818s ago: executing program 0 (id=1499): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001600)=ANY=[@ANYBLOB="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"], 0x1228}], 0x1}, 0x0) syz_emit_ethernet(0x14b, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x45}, 0x4c000) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) setns(0xc9, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x10f) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000540)={'syzkaller0\x00', 0x1}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) ioctl$EVIOCRMFF(r5, 0x40044581, &(0x7f0000000600)=0xfffffff7) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x23, 0x4, 0x7fffffffefff) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) write$tun(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="00000805000000ff"], 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="02002bbd7000fedbdf250400000008e535564500000008000600", @ANYRES32=0x0, @ANYBLOB="050038000100000005002f000000000005002f000100000008003200010100000500290001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) 50.68240164s ago: executing program 0 (id=1503): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x30, 0xffffffffffffffff, 0xfffff000) r0 = socket$nl_generic(0x10, 0x3, 0x10) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x8, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000280)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x0) bind$bt_hci(r1, &(0x7f0000000340)={0x1f, 0xffff, 0x2}, 0x6) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r5, 0x0, 0x3, &(0x7f00000000c0)=0xfffffffa, 0x4) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0x78) connect$inet(r5, &(0x7f0000000240)={0x2, 0x0, @multicast1}, 0x10) splice(r3, 0x0, r5, 0x0, 0x8000, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) request_key(&(0x7f0000000380)='asymmetric\x00', &(0x7f00000003c0)={'syz', 0x1, 0xc}, &(0x7f0000000400)='R\x10rust\xe3c*sgrVex:Di', 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) bind$inet(r6, &(0x7f0000000140)={0x2, 0x4e20, @local}, 0x10) listen(r6, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./cifs\x00', 0x1ff) mount(&(0x7f0000000200)=@md={'/dev/md', @num=0x0}, &(0x7f0000000100)='./cifs\x00', &(0x7f00000002c0)='cifs\x00', 0x2040014, &(0x7f0000000300)='vers=1.0,username=gues\xeb\xaf\f\xf1\xa4\xb4\x95\x8d\xd7wt,password=,port=2') read$FUSE(0xffffffffffffffff, &(0x7f0000004d80)={0x2020}, 0x2020) close_range(r0, 0xffffffffffffffff, 0x0) 50.149354508s ago: executing program 1 (id=1507): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000440), &(0x7f00000004c0)=0x0, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000580)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000600)=@new_dev={0x2, 0x4}}}, &(0x7f0000000640)=0x0) capset(&(0x7f0000000680)={0x20071026}, &(0x7f00000006c0)={0x3, 0x7, 0x8d6c, 0x0, 0x3, 0x4}) r7 = syz_open_dev$ublk_chdev(&(0x7f0000000700), r5, 0x2) syz_ublk_setup_queues(r7, r6, &(0x7f0000000740), &(0x7f00000007c0), 0x1, &(0x7f0000000a40)={0x2e, 0x0, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, 0x0}}, &(0x7f0000000ac0)) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000630173100000000095"], &(0x7f00000001c0)='GPL\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9a2}, 0x94) pwritev(r8, &(0x7f0000000400)=[{&(0x7f0000000000)="500f4e1c5a6294cecae054576066db0b9245bcd58940ddccf9621c85", 0x1c}, {&(0x7f0000000200)="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", 0xfa}, {&(0x7f0000000300)="831c8a7f8229ab8136838581afcc64a4638e4351684234fcc3fe77bdba84e2ccf93397c60ad0acee8d4e7866ecfc5f1fd4e3b584688a6f9bd458650fff57e328ff276e79bf3489ac5418cb5aee96109e6baaca684e05e8f8242630f7632b5660bf21ea26bd87ab16d6a474328cb14046351d2ed85e077e9d67217b7f1134a9ca6cf18ce72a14ac67892e311926d4e92f1d5e69edcec770ec698d9020f1b1665efc3f239ba202407985da9ff04f98d5899c17f0aab74786bd3b50b5829ceecfeeb30e6e68f7d8e4de84f7e95577a0197b0591ae3783f779689a5311db5e72ccb6047116565a9d9d53b13024e6e2465c", 0xef}], 0x3, 0x1, 0x1) 50.062856143s ago: executing program 34 (id=1506): openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt/kcore\x00', 0x0, 0x0) 50.020195115s ago: executing program 1 (id=1509): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000058c0), 0x8) 50.01981922s ago: executing program 1 (id=1510): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000058c0), 0x8) (fail_nth: 1) 49.971444463s ago: executing program 1 (id=1511): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') getdents64(r1, &(0x7f00000004c0)=""/44, 0x7a) getdents64(r1, 0x0, 0x0) dup(r0) openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x183) mount$9p_virtio(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', &(0x7f0000000a40), 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="56c78e3c733d76ac0393f26f2c6e6f657874667379616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000ac0)='./file0\x00') r3 = creat(&(0x7f0000000b00)='./file0\x00', 0x10) unlink(&(0x7f0000000b40)='./file0\x00') mmap$IORING_OFF_SQ_RING(0x0, 0x7, 0x4, 0x810, r3, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x38, 0x8, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4006}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x8c}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) mount$overlay(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file1\x00', 0x103841, 0x186) 49.781366068s ago: executing program 1 (id=1512): write$char_usb(0xffffffffffffffff, 0x0, 0x0) r0 = inotify_init() fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, r0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000001540)={0x8, 0x8, {0x0}, {}, 0x1, 0x4}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f00000015c0)={{0x3, 0xd6108743de6d60f9, 0x1, 0xcc, 'syz0\x00', 0x1}, 0x2, 0x40, 0x0, r1, 0x3, 0x1, 'syz0\x00', &(0x7f0000001580)=[',/\xfb\'&)\\*+\x00', '%\x00', '/dev/input/mouse#\x00'], 0x1e}) ioctl(r0, 0x8, &(0x7f0000001700)="1a9f701ed2eb82891bf26efdbc74904b11d2afaa4eba6046bf2b510d159f4976000b9eeb2fafed9b3c31f57f31533edc453d4ccbb198c7145996660c0ad2fff83455e7be36cb1dd1e42001bad2b709ab613292ac590045d42e1b6d357444ca315a8a1796dc286a20d03d0bfdf2077553804d60ced0e90ad838595fd01aae602d29b73b6e2888eadb4c019b61a60b6b86863c526ee2c6e80cc4dbe05eccc5b5b891c88e8d882eeea916d38f") 49.49101269s ago: executing program 1 (id=1515): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000900)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @private}, 0x599, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1}) 49.466896695s ago: executing program 35 (id=1515): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000900)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @private}, 0x599, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1}) 48.501504518s ago: executing program 0 (id=1519): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') getdents64(r1, &(0x7f00000004c0)=""/44, 0x7a) getdents64(r1, 0x0, 0x0) dup(r0) openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x183) mount$9p_virtio(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', &(0x7f0000000a40), 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="56c78e3c733d76ac0393f26f2c6e6f657874667379616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000ac0)='./file0\x00') r3 = creat(&(0x7f0000000b00)='./file0\x00', 0x10) unlink(&(0x7f0000000b40)='./file0\x00') mmap$IORING_OFF_SQ_RING(0x0, 0x7, 0x4, 0x810, r3, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mount$overlay(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file1\x00', 0x103841, 0x186) 48.360204381s ago: executing program 0 (id=1520): syz_clone(0x10000211, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x9b00, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./security\x00', &(0x7f0000000180)='securityfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./security/ima/policy\x00', 0x1, 0x0) close(0x3) ioctl$TIOCVHANGUP(r0, 0x5437, 0x200000000000000) ioctl$TCXONC(r0, 0x540a, 0x0) r1 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x123942, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000380)=0x7f, 0x4) listen(r3, 0x0) getsockopt$packet_int(r2, 0x107, 0x7, 0x0, &(0x7f0000000200)) ioctl$DM_DEV_CREATE(r1, 0xc138fd03, &(0x7f0000000240)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x21000, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}, @uuid={'CRP-syz', 0x0, '3\x00'}}}) ioctl$DM_DEV_WAIT(r1, 0xc138fd08, &(0x7f0000000580)={0x4, 0x0, 0x0, 0x280, 0x138, 0x0, 0x0, 0x400, 0x0, 0x0, @by_dev={r4}, "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"}) 47.989380433s ago: executing program 5 (id=1521): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001600)=ANY=[@ANYBLOB="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"], 0x1228}], 0x1}, 0x0) syz_emit_ethernet(0x14b, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x45}, 0x4c000) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) setns(0xc9, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x10f) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000540)={'syzkaller0\x00', 0x1}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) 47.891757428s ago: executing program 0 (id=1522): write$char_usb(0xffffffffffffffff, 0x0, 0x0) r0 = inotify_init() fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, r0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001440)={0xffffffffffffffff, 0x0, 0x0, 0xab, 0x0, &(0x7f0000001240)=""/171, 0x10001, 0x0, 0x7f, 0x82, &(0x7f0000001300)="843c95f01335e73d76daa66a4735bcae0ec0514dda6d7db0ffe938b04e9670725b1f8c487c4efdb6197e6b1f89c115f61a55a33f4368f8d1435abceab3126edf754b33740525b5fe8ac35948bbe08bd05a5f248a96882cd0b6f0928a923d59ce11b7b0edbe3f2b5ed547de951fe46402611e129b40ac190487f830a90e615f", &(0x7f0000001380)="ba16966138eca174fdd9de702231e2a6fd41bacdd171adeacae65d031046f4198fabebd3c254f8f350c7fb08258808fc6e692195782af5f4ec31592ac2d18926ef5de3362a45a93df15d2b42967ef90a68d660c805babcb9bc1d584335930a197033ceeb45a28a70338343a9be4ba68c299defea4b0e743972a2c57b7748e3424f70", 0x4, 0x0, 0x9}, 0x50) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000001540)={0x8, 0x8, {0x0}, {}, 0x1, 0x4}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f00000015c0)={{0x3, 0xd6108743de6d60f9, 0x1, 0xcc, 'syz0\x00', 0x1}, 0x2, 0x40, 0x0, r1, 0x3, 0x1, 'syz0\x00', &(0x7f0000001580)=[',/\xfb\'&)\\*+\x00', '%\x00', '/dev/input/mouse#\x00'], 0x1e}) ioctl(r0, 0x8, &(0x7f0000001700)="1a9f701ed2eb82891bf26efdbc74904b11d2afaa4eba6046bf2b510d159f4976000b9eeb2fafed9b3c31f57f31533edc453d4ccbb198c7145996660c0ad2fff83455e7be36cb1dd1e42001bad2b709ab613292ac590045d42e1b6d357444ca315a8a1796dc286a20d03d0bfdf2077553804d60ced0e90ad838595fd01aae602d29b73b6e2888eadb4c019b61a60b6b86863c526ee2c6e80cc4dbe05eccc5b5b891c88e8d882eeea916d38f") 47.842394631s ago: executing program 36 (id=1522): write$char_usb(0xffffffffffffffff, 0x0, 0x0) r0 = inotify_init() fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, r0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001440)={0xffffffffffffffff, 0x0, 0x0, 0xab, 0x0, &(0x7f0000001240)=""/171, 0x10001, 0x0, 0x7f, 0x82, &(0x7f0000001300)="843c95f01335e73d76daa66a4735bcae0ec0514dda6d7db0ffe938b04e9670725b1f8c487c4efdb6197e6b1f89c115f61a55a33f4368f8d1435abceab3126edf754b33740525b5fe8ac35948bbe08bd05a5f248a96882cd0b6f0928a923d59ce11b7b0edbe3f2b5ed547de951fe46402611e129b40ac190487f830a90e615f", &(0x7f0000001380)="ba16966138eca174fdd9de702231e2a6fd41bacdd171adeacae65d031046f4198fabebd3c254f8f350c7fb08258808fc6e692195782af5f4ec31592ac2d18926ef5de3362a45a93df15d2b42967ef90a68d660c805babcb9bc1d584335930a197033ceeb45a28a70338343a9be4ba68c299defea4b0e743972a2c57b7748e3424f70", 0x4, 0x0, 0x9}, 0x50) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000001540)={0x8, 0x8, {0x0}, {}, 0x1, 0x4}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f00000015c0)={{0x3, 0xd6108743de6d60f9, 0x1, 0xcc, 'syz0\x00', 0x1}, 0x2, 0x40, 0x0, r1, 0x3, 0x1, 'syz0\x00', &(0x7f0000001580)=[',/\xfb\'&)\\*+\x00', '%\x00', '/dev/input/mouse#\x00'], 0x1e}) ioctl(r0, 0x8, &(0x7f0000001700)="1a9f701ed2eb82891bf26efdbc74904b11d2afaa4eba6046bf2b510d159f4976000b9eeb2fafed9b3c31f57f31533edc453d4ccbb198c7145996660c0ad2fff83455e7be36cb1dd1e42001bad2b709ab613292ac590045d42e1b6d357444ca315a8a1796dc286a20d03d0bfdf2077553804d60ced0e90ad838595fd01aae602d29b73b6e2888eadb4c019b61a60b6b86863c526ee2c6e80cc4dbe05eccc5b5b891c88e8d882eeea916d38f") 47.771363875s ago: executing program 5 (id=1524): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x4}}}, 0x24}}, 0x800) 47.531850929s ago: executing program 5 (id=1525): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.events\x00', 0x275a, 0x0) syncfs(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="010027bd7000fedbdf251c000000040001809c9daf6cac19736c90547ee95e3bccb3f457be720a53e4a9ecf4ec1705413eb75876a3f759c86ab4d2fc3b46fcd65fc6961a5993a02d791a14389b3cbe16a1aa92fd0a620257054aa8879a4257c9f942c90b6a74aa00e8e238b5306c97d8642a0f75ad2414397277b0f253098b843b626c8114780dd89f99a5e3e1e6b63e5bf97b1a54"], 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x40006) 47.531677001s ago: executing program 5 (id=1526): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') getdents64(r1, &(0x7f00000004c0)=""/44, 0x7a) getdents64(r1, 0x0, 0x0) dup(r0) openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x183) mount$9p_virtio(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', &(0x7f0000000a40), 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="56c78e3c733d76ac0393f26f2c6e6f657874667379616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000ac0)='./file0\x00') r2 = creat(&(0x7f0000000b00)='./file0\x00', 0x10) unlink(&(0x7f0000000b40)='./file0\x00') mmap$IORING_OFF_SQ_RING(0x0, 0x7, 0x4, 0x810, r2, 0x0) mount$overlay(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file1\x00', 0x103841, 0x186) 47.351370005s ago: executing program 5 (id=1527): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000002080)=0x264, 0x23b) r2 = socket$inet_tcp(0x2, 0x1, 0x0) umount2(&(0x7f0000000380)='./file0\x00', 0xb) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000500)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x80, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) openat$comedi(0xffffffffffffff9c, &(0x7f0000000400)='/dev/comedi0\x00', 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000004c0)=r1, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x4c840) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=@newtfilter={0x48, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0x9}, {0x0, 0xfff3}, {0xe, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @mcast1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20041090}, 0x4000) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x1, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x6, 0x6b7, 0x80, 0x800, 0xffffffff, 0x91b1}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffff9}}, @TCA_NETEM_REORDER={0xc, 0x3, {0x7fffffff, 0xffff6698}}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000400}, 0x800) sendto$inet(r2, &(0x7f0000000900)="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", 0x1a1, 0x12, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0) 46.736791539s ago: executing program 5 (id=1528): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10) 46.669413291s ago: executing program 37 (id=1528): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10) 45.689351193s ago: executing program 7 (id=1516): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x4000054) 45.592005826s ago: executing program 7 (id=1531): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x100002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000036000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x1f, &(0x7f0000000040)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1120008c}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c000000210a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x40084}, 0x8000) close(0x3) (async) close(0x3) recvmsg(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff1}, 0x40000102) (async) recvmsg(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff1}, 0x40000102) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000001c0)={0x1, 0x0, [{0x7, 0xf, 0x1, 0x7575, 0x9}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 45.341874002s ago: executing program 7 (id=1532): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') getdents64(r1, &(0x7f00000004c0)=""/44, 0x7a) getdents64(r1, 0x0, 0x0) dup(r0) openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x183) mount$9p_virtio(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', &(0x7f0000000a40), 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="56c78e3c733d76ac0393f26f2c6e6f657874667379616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000ac0)='./file0\x00') creat(&(0x7f0000000b00)='./file0\x00', 0x10) unlink(&(0x7f0000000b40)='./file0\x00') mount$overlay(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file1\x00', 0x103841, 0x186) 45.220825818s ago: executing program 7 (id=1533): syz_open_dev$vim2m(0x0, 0x800, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000000000000000000000000010000000000"], 0x14}}, 0x0) mmap$binder(&(0x7f000000d000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000800)='./proc\x00', &(0x7f0000000840)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000640), 0x900, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000680)={0x0, 0x0, 0x54000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000006c0)=[@text16={0x10, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000700)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) write(r1, &(0x7f00000008c0)='270', 0x3) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000040)={0x5, 0x2}) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file2\x00', 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x4b8982, 0x1fb) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000004c0)=0x20) mount$overlay(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x0, &(0x7f0000000580)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000005c0)='./file0/file1\x00', 0x40, 0x83) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000140)={0x93, 0x200, 0x5, 0x3, 0xf34}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) 42.341861272s ago: executing program 7 (id=1557): r0 = landlock_create_ruleset(&(0x7f0000000140)={0x840, 0x3, 0x3}, 0x18, 0x0) syz_emit_ethernet(0x6a, &(0x7f00000001c0)={@broadcast, @random='\x00\x00B\f\x00', @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x30, 0x3a, 0x0, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "18b088", 0x0, 0x0, 0x0, @empty, @mcast2}}}}}}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x10802, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x1002}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SET(r5, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xcc, r6, 0x200, 0x70bd27, 0x6, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x2}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x8004}, 0x8000) ioctl$TUNSETSTEERINGEBPF(r4, 0x400454da, &(0x7f00000000c0)) r7 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000300)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x80, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x50, 0x2, [@TCA_BASIC_ACT={0x4c, 0x3, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x2}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}}]}, 0x80}}, 0x0) write$tun(r1, &(0x7f0000000500)=ANY=[], 0x9dd7) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000740)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000780)={0x0, 0x0, 0xdddd1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r10, 0xae80, 0x0) landlock_restrict_self(r0, 0xd) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x40) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) 42.319716371s ago: executing program 38 (id=1557): r0 = landlock_create_ruleset(&(0x7f0000000140)={0x840, 0x3, 0x3}, 0x18, 0x0) syz_emit_ethernet(0x6a, &(0x7f00000001c0)={@broadcast, @random='\x00\x00B\f\x00', @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x30, 0x3a, 0x0, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "18b088", 0x0, 0x0, 0x0, @empty, @mcast2}}}}}}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x10802, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x1002}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SET(r5, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xcc, r6, 0x200, 0x70bd27, 0x6, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x2}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x8004}, 0x8000) ioctl$TUNSETSTEERINGEBPF(r4, 0x400454da, &(0x7f00000000c0)) r7 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000300)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x80, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x50, 0x2, [@TCA_BASIC_ACT={0x4c, 0x3, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x2}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}}]}, 0x80}}, 0x0) write$tun(r1, &(0x7f0000000500)=ANY=[], 0x9dd7) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000740)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000780)={0x0, 0x0, 0xdddd1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r10, 0xae80, 0x0) landlock_restrict_self(r0, 0xd) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x40) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) 23.470335537s ago: executing program 9 (id=1669): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x1) setsockopt$inet6_buf(r1, 0x29, 0x2e, &(0x7f0000000080)="ce48e977a32bbc2e8c5f0ae03399b5349183fa6bccec437c757e9d557dbe167f80462c70e6fcbccc07b5e92337ac8ed818b369c93b2cd034a466ef7832d29d61d57f982ccbdb71f348e542499d17c74858e91e2ea5e3fbebc03a77c07ef2a7513ae294635a9f56dc5dd9aec8c9fb0c7d3a937b74a4ffc1ec696a4fabd3a1f645cdaeaa7d29c1854a40df7a2ce4d47b16168614", 0x93) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x258, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 23.416820186s ago: executing program 9 (id=1670): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$video(&(0x7f0000000540), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000640)={0xa, 0x100, 0x3, {0x8000, 0x6000, 0x180, 0x2}}) 23.406166613s ago: executing program 9 (id=1672): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff03000008000900010000000800"], 0x60}, 0x1, 0x0, 0x0, 0x20044054}, 0x4000054) 23.258460716s ago: executing program 9 (id=1676): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') getdents64(r1, &(0x7f00000004c0)=""/44, 0x7a) getdents64(r1, 0x0, 0x0) dup(r0) openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x183) mount$9p_virtio(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', &(0x7f0000000a40), 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="56c78e3c733d76ac0393f26f2c6e6f657874667379616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000ac0)='./file0\x00') mount$overlay(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file1\x00', 0x103841, 0x186) 23.170320186s ago: executing program 9 (id=1678): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000002c0)={0x3c, r1, 0x1, 0x70bd2d, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000440)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000004c0)={0x28, 0x4, r4, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x1004000}) ioctl$IOMMU_HWPT_ALLOC$TEST(r3, 0x3b89, &(0x7f0000000500)={0x28, 0x0, r5, r4, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000540)}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000580), 0x40002, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000005c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000600)={0x48, 0x2, r7, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r6, 0x3b89, &(0x7f0000000740)={0x28, 0x0, r8, r7, 0x0, 0x0, 0x0, 0x0, 0x0}) mknod$loop(&(0x7f0000000880)='./file0\x00', 0xfff, 0x1) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f00000008c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000900)='./file0\x00', &(0x7f0000000940), 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r10, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r10, &(0x7f0000000a00)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r10, &(0x7f0000002a40)={0x50, 0x0, r11, {0x7, 0x1f, 0x0, 0x10408, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r10, &(0x7f0000002ac0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f0000004ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004b80)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r10, &(0x7f0000004bc0)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb1000008747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb80035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22383e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e4c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, &(0x7f0000006bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006c80)={0x78, 0x0, 0x5af, {0xfeffffffffffffff, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x21, 0x7, 0x1, 0x8000, 0x0, r12, r13, 0x1000003, 0x7d1d}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r14 = openat(0xffffffffffffff9c, &(0x7f0000006d00)='./file0\x00', 0x80101, 0x0) write$FUSE_NOTIFY_RETRIEVE(r14, 0x0, 0x0) dup2(r14, r10) pwrite64(r10, &(0x7f0000006d40)='@', 0x1, 0x100001) writev(r10, &(0x7f0000006d80)=[{&(0x7f0000006dc0)='b', 0x1}], 0x1) ioctl$IOMMU_DESTROY$hwpt(r3, 0x3b80, &(0x7f0000000840)={0x8, r9}) r15 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r15, 0xae41, 0x0) 22.568501453s ago: executing program 9 (id=1681): r0 = syz_open_dev$vim2m(&(0x7f0000000880), 0x800, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/serio/devices/serio1/protocol\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='byd', 0x3) r2 = syz_open_dev$sndpcmp(&(0x7f0000000140), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r2, 0xc2604111, &(0x7f0000000180)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}], '\x00', 0xffffffff}) mmap(&(0x7f000000a000)=nil, 0x1000, 0x3, 0x11, r2, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r2, 0x4112, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000940)={0x2, @win={{0x6, 0x1, 0x1ff, 0x70}, 0x5, 0x4, 0x0, 0x2, 0x0, 0x1}}) 22.435506033s ago: executing program 39 (id=1681): r0 = syz_open_dev$vim2m(&(0x7f0000000880), 0x800, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/serio/devices/serio1/protocol\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='byd', 0x3) r2 = syz_open_dev$sndpcmp(&(0x7f0000000140), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r2, 0xc2604111, &(0x7f0000000180)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}], '\x00', 0xffffffff}) mmap(&(0x7f000000a000)=nil, 0x1000, 0x3, 0x11, r2, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r2, 0x4112, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000940)={0x2, @win={{0x6, 0x1, 0x1ff, 0x70}, 0x5, 0x4, 0x0, 0x2, 0x0, 0x1}}) 20.696694892s ago: executing program 8 (id=1698): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000300), 0x40002, 0x0) ioctl$DM_DEV_CREATE(r1, 0xc138fd03, &(0x7f0000000340)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x8800, 0x0, 0x0, {0x0, {'syz', 0x0, '3\x00'}}}) ioctl$DM_TABLE_LOAD(r1, 0xc138fd09, &(0x7f0000000700)={0x4, 0x0, 0x0, 0x1a8, 0x138, 0x1, 0x0, 0x1e00, 0x0, 0x0, @by_dev={r2}, [@multipath={0x0, 0x1000, 0x0, 0x70, 'multipath\x00', {'2 pg_init_delay_msecs 10', 0x20, '0'}}]}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000540)={0x4, 0x0, 0x0, 0x1b0, 0x138, 0x1, 0x0, 0x2a010, 0x0, 0x0, @by_dev={r2}, [@raid={0x0, 0x2000, 0x0, 0x78, 'raid\x00', {'raid0', 0x20, '1 8', 0x20, 0x2, [{0x20, @none, 0x20, @rnull={'/dev/syzrnull', 0x0}}, {0x20, @dev=@rnull={'/dev/syzrnull', 0x0}, 0x20, @ram={'/dev/ram', 0x1}}]}}]}) r3 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000080)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x1, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}}}) ioctl$DM_DEV_ARM_POLL(r3, 0xc138fd10, &(0x7f00000001c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x4011, 0x0, 0x0, @by_dev={r4}}) 20.511099175s ago: executing program 8 (id=1701): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x2, 0x0) mount(&(0x7f0000000100)=@filename='./dev/sda1\x00', &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000200)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f0000000240)='./mnt\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x88) getdents(r0, 0xfffffffffffffffd, 0x58) (fail_nth: 1) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000140)=[{{&(0x7f0000000180)={0xa, 0x4e20, 0x10000, @empty, 0x7fff}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=[@rthdrdstopts={{0x18, 0x29, 0x37, {0x62}}}, @rthdrdstopts={{0x18}}], 0x30}}], 0x1, 0x81) 20.381013004s ago: executing program 8 (id=1703): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000540)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x10, 0xc00) sendto$phonet(r3, &(0x7f0000000400)="1d4515ee123475e9d983428d8993f925d18ba4ae1f61576fd3663a2741bee2051645d1f1084fc17c8746524de2c194a372e304b7bd12f3bd1198357fd31fdae3aca746612e3f9632dc94bc5fbcb786a2f62dd996369e27e90d4c11ff036b825a1daf14dff907867acc544abc03de118c92aab52542a81ede29bb9febd1960dff3a339b1f53b807c4aa61d341b3179d674ef97c8be006103afb23534ac7fda58d3041dec9da685d0b2e656cee647949ca629772027dcaae154fe2d03e789cb289b3aeed160e1bbdc6b838104f98e1b218263e8761938a9c2489e909b6afb80e3ed64b41952c6d9ebc050d9d2f09a92479128db1de7f4cba1e", 0xf8, 0x44000041, &(0x7f0000000500)={0x23, 0x0, 0x7, 0x80}, 0x10) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000280)={r5, 0x81}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000300)={r5, 0x6e5}, &(0x7f0000000340)=0x8) setns(0xc9, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r6, 0x10e, 0x8, &(0x7f0000000040)=0x2, 0x4) recvmmsg(r6, &(0x7f00000027c0)=[{{&(0x7f0000000100)=@rc, 0x80, &(0x7f0000001600)=[{&(0x7f0000000180)=""/141, 0x8d}, {&(0x7f0000000240)=""/7, 0x7}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/42, 0x2a}], 0x4, &(0x7f0000001640)=""/2, 0x2}, 0x1}, {{&(0x7f0000001680)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001780)=[{&(0x7f0000001700)=""/95, 0x5f}], 0x1, &(0x7f00000017c0)=""/4096, 0x1000}, 0x1c7}], 0x2, 0x0, 0x0) 19.511201567s ago: executing program 8 (id=1705): syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x183) mount$9p_virtio(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', &(0x7f0000000a40), 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="56c78e3c733d76ac0393f26f2c6e6f657874667379616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000ac0)='./file0\x00') mount$overlay(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file1\x00', 0x103841, 0x186) 19.408348636s ago: executing program 8 (id=1706): socket$inet6_tcp(0xa, 0x1, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@ipv6_newrule={0x30, 0x20, 0x1, 0x70bd27, 0x0, {0xa, 0x0, 0x0, 0x40}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'bond_slave_0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000300)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x6, 0xfc, 0x0, 0x7}]}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x4}}}, 0x24}}, 0x800) r4 = socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xffff, 0xffff}, {0x6}}}, 0x24}}, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000440)={0xaa, 0x309}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000480)={{&(0x7f000050a000/0x13000)=nil, 0x13000}, 0x1}) readv(r5, &(0x7f00000004c0)=[{&(0x7f0000000500)=""/224, 0x20}], 0x1000000000000108) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x18) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="3800000020000100ecc2000000000000020020000000000100000000140003006c6f0000000000000000000000000000080002"], 0x38}, 0x1, 0x0, 0x0, 0x40000c5}, 0x8020) sendmmsg(0xffffffffffffffff, &(0x7f0000000740), 0x40000000000009f, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0xc09, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_USER_PORT_KEY={0x6, 0x19, 0x4}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x44}}, 0x0) 18.770459233s ago: executing program 8 (id=1713): syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x183) mount$9p_virtio(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', &(0x7f0000000a40), 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="56c78e3c733d76ac0393f26f2c6e6f657874667379616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000ac0)='./file0\x00') mount$overlay(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file1\x00', 0x103841, 0x186) 18.719602724s ago: executing program 40 (id=1713): syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x183) mount$9p_virtio(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', &(0x7f0000000a40), 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="56c78e3c733d76ac0393f26f2c6e6f657874667379616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000ac0)='./file0\x00') mount$overlay(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file1\x00', 0x103841, 0x186) 1.134712933s ago: executing program 3 (id=1934): sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000f40)={0x0}, 0x1, 0x0, 0x0, 0x810}, 0x24004040) 1.061370376s ago: executing program 3 (id=1926): pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f000000aa40)={&(0x7f000000aa80)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f000000ab40)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f000000ab80)=ANY=[@ANYBLOB="200086dd0203050009000a004000683739ed282811"], 0xfdef) close_range(r0, 0xffffffffffffffff, 0x0) 1.014089377s ago: executing program 2 (id=1927): r0 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000000140)=@ethtool_drvinfo={0x3, "547cc20bf4d53b623615886ade1d71c6407b6de18188a3237e6144aa9008289e", "ae52ff8f91e683f40004841619392e2dd27d4540fc2114d3cd8508b002a1e6cb", "c606030e74ab1f1a75a21e30a52df778d96709840b1883abee9e8e1341c39e58", "e4be105b828136149afed1627a8eaa04019a8e3f488a3b00", "f06dbc1a1f0237d6f73e31383343ad02de7b461d9e46c3408dd10726f8db0c4d", "9099e60e2558ff121ca1d4d1", 0x500, 0x1, 0x3, 0x1}}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x385000, 0x0) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000480)={0x0, 0x6, 0x18}, 0xc) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000700)=0x0, &(0x7f0000000740)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2c, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@call={0x85, 0x0, 0x0, 0x1c}, @generic={0xf3, 0x1, 0xa, 0x5}, @snprintf, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1626}}, @generic={0x1, 0xa, 0x9, 0xd, 0x495b}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x1}, @map_val={0x18, 0xa, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x9e}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000640)='GPL\x00', 0x6, 0x65, &(0x7f0000000680)=""/101, 0x41100, 0x5c, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000780)={0x0, 0xb, 0x9, 0x2}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000007c0)=[0xffffffffffffffff], &(0x7f0000000800)=[{0x0, 0x2, 0x4, 0x8}, {0x5, 0x1, 0x9, 0x1}], 0x10, 0x8}, 0x94) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008400000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000012}, 0x24040000) 962.411588ms ago: executing program 3 (id=1928): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f80)}, 0x1, 0x0, 0x0, 0x810}, 0x24004040) 959.414768ms ago: executing program 2 (id=1929): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0xa}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4) 956.328816ms ago: executing program 2 (id=1930): socket$inet6_tcp(0xa, 0x1, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@ipv6_newrule={0x30, 0x20, 0x1, 0x70bd27, 0x0, {0xa, 0x0, 0x0, 0x40}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'bond_slave_0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000300)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x6, 0xfc, 0x0, 0x7}]}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x4}}}, 0x24}}, 0x800) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xffff, 0xffff}, {0x6}}}, 0x24}}, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000440)={0xaa, 0x309}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000480)={{&(0x7f000050a000/0x13000)=nil, 0x13000}, 0x1}) readv(r5, &(0x7f00000004c0)=[{&(0x7f0000000500)=""/224, 0x20}], 0x1000000000000108) fsetxattr(r5, &(0x7f0000000600)=@random={'os2.', '\'\x00'}, &(0x7f0000000640)='\x00', 0x1, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x18) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="3800000020000100ecc2000000000000020020000000000100000000140003006c6f0000000000000000000000000000080002"], 0x38}, 0x1, 0x0, 0x0, 0x40000c5}, 0x8020) sendmmsg(0xffffffffffffffff, &(0x7f0000000740), 0x40000000000009f, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0xc09, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_USER_PORT_KEY={0x6, 0x19, 0x4}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x44}}, 0x0) 890.522443ms ago: executing program 3 (id=1931): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000080)={0x0, 0x8000001, 0x9019, 0x0, 0x74}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000280)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000300)=@new_dev={0x1, 0x4}}}, &(0x7f0000000340)=0x0) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000380)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r0, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x70, &(0x7f0000000400)={0x70, 0x1, {0x4, 0x9, 0xc, 0xc, 0x9, 0x8, 0x0, 0x0, 0x2000000000}, {}, {}, {0x0, 0xfffffffe}}}}) r7 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(r7, 0x10e, 0x5, &(0x7f0000000dc0)=0x2, 0x4) writev(r7, &(0x7f0000000e00)=[{&(0x7f0000000e40)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000940), 0xa2f01, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000980)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f00000009c0)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="0007888ebb1a2ece3858bbbbbbbbbbaaaaaaaaaa36080045190014006700000711908e2a46162f31d90b6a78ac1410"], 0x26) io_uring_enter(r1, 0x80001, 0x1, 0x3, 0x0, 0x0) r11 = syz_io_uring_complete(r2, r3) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r11, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)=ANY=[@ANYBLOB, @ANYRES16=r12, @ANYBLOB="01002cbd7000fcdbdf250100000000000000014100000018001700000002000000017564703a73797a3100000000"], 0x34}, 0x1, 0x0, 0x0, 0x48c1}, 0x40000) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000b80)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r15, {0x0, 0xfff1}, {0xffe0, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=@newtfilter={0x90, 0x2c, 0xf3f, 0x30bd29, 0x25dfd3f5, {0x0, 0x0, 0x0, r15, {0x1}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x60, 0x2, [@TCA_FLOWER_ACT={0x5c, 0x3, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x9}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x27a, 0x7fff, 0x6, 0x4, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20041890}, 0x0) sendmsg$nl_route(r13, 0x0, 0x11) r16 = syz_open_dev$ublk_chdev(&(0x7f0000000480), r5, 0x109003) syz_ublk_setup_queues(r16, r6, &(0x7f00000004c0)={0x0, 0x843f, 0x2000, 0x0, 0x2}, &(0x7f0000000540)=[{}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc}}], 0x1, &(0x7f00000007c0)={0x2e, 0x0, 0x0, r16, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, 0x0}}, 0x0) nanosleep(0x0, &(0x7f0000000840)) r17 = getpid() syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000880)=@ublk_start_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x0, 0x0, r17}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r2, r3) 751.906376ms ago: executing program 3 (id=1933): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6000000010000104a0518fd5000000", @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff0300000800090001000000080007000000000014003500626f6e6430"], 0x60}, 0x1, 0x0, 0x0, 0x20044054}, 0x4000054) 750.906162ms ago: executing program 3 (id=1935): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x30, 0xffffffffffffffff, 0xfffff000) r0 = socket$nl_generic(0x10, 0x3, 0x10) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x8, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000280)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x0) bind$bt_hci(r1, &(0x7f0000000340)={0x1f, 0xffff, 0x2}, 0x6) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r4, 0x0, 0x3, &(0x7f00000000c0)=0xfffffffa, 0x4) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[], 0x78) connect$inet(r4, &(0x7f0000000240)={0x2, 0x0, @multicast1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./cifs\x00', 0x1ff) mount(&(0x7f0000000200)=@md={'/dev/md', @num=0x0}, &(0x7f0000000100)='./cifs\x00', &(0x7f00000002c0)='cifs\x00', 0x2040014, &(0x7f0000000300)='vers=1.0,username=gues\xeb\xaf\f\xf1\xa4\xb4\x95\x8d\xd7wt,password=,port=2') read$FUSE(0xffffffffffffffff, &(0x7f0000004d80)={0x2020}, 0x2020) close_range(r0, 0xffffffffffffffff, 0x0) 745.638167ms ago: executing program 2 (id=1936): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000a00)={@local, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x828, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x1}}}}}}, 0x0) 669.687889ms ago: executing program 2 (id=1937): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b405a0ff000000006110b0000000000063514800000000009500090000000000827573595f16aaba19dee4850fad9dc34ae0ec78734eb5ff8c80d4457498c5a7b0c59abd315c61996d140187d64787b68c0a1b3e361a405ed57dc367c33abfd46e35"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) 669.445504ms ago: executing program 2 (id=1938): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000240)=[{0x6, 0xe2, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) connect$inet(r1, &(0x7f0000000300)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) ptrace(0x10, r0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f00000003c0)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$TCFLSH(r3, 0x400455c8, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000200)=0x3) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000000c0)=0xd) ioctl$TCFLSH(r3, 0x540b, 0x2) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000380)=0x8) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000100)=0x3) ioctl$TIOCCONS(r2, 0x541d) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/nfs/parameters/delay_retrans\x00', 0x301602, 0x40) write(r4, &(0x7f0000000140)="11b7060001007f354c080df2ae94fc2e9657", 0x12) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000180)=0x21) syz_open_dev$dri(&(0x7f0000000340), 0x1, 0x0) 578.207917ms ago: executing program 4 (id=1939): socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000000)=0x7, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x6, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="18020000000000200000000000000000850000009e000000c30000a00000000095"], &(0x7f0000000600)='GPL\x00', 0x5}, 0x94) 577.36725ms ago: executing program 4 (id=1940): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008400000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000012}, 0x24040000) 330.556908ms ago: executing program 6 (id=1945): socket$inet6_tcp(0xa, 0x1, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@ipv6_newrule={0x30, 0x20, 0x1, 0x70bd27, 0x0, {0xa, 0x0, 0x0, 0x40}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'bond_slave_0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000300)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x6, 0xfc, 0x0, 0x7}]}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x4}}}, 0x24}}, 0x800) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xffff, 0xffff}, {0x6}}}, 0x24}}, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000440)={0xaa, 0x309}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000480)={{&(0x7f000050a000/0x13000)=nil, 0x13000}, 0x1}) readv(r5, &(0x7f00000004c0)=[{&(0x7f0000000500)=""/224, 0x20}], 0x1000000000000108) fsetxattr(r5, &(0x7f0000000600)=@random={'os2.', '\'\x00'}, &(0x7f0000000640)='\x00', 0x1, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x18) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="3800000020000100ecc2000000000000020020000000000100000000140003006c6f0000000000000000000000000000080002"], 0x38}, 0x1, 0x0, 0x0, 0x40000c5}, 0x8020) sendmmsg(0xffffffffffffffff, &(0x7f0000000740), 0x40000000000009f, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0xc09, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_USER_PORT_KEY={0x6, 0x19, 0x4}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x44}}, 0x0) 330.027541ms ago: executing program 4 (id=1946): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000010, 0x0, 0x15f4}]}) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000006780)=0x79, 0x4) bind$inet(r0, &(0x7f00000067c0)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000006800)={0x0, &(0x7f0000006840)}, 0x10) sendmmsg$inet(r0, &(0x7f0000000940)=[{{&(0x7f00000068c0)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x24000084) sendmmsg$inet(r0, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000006980)=[{&(0x7f0000007540)="91f8a984851bdef38491bbc4173c3c6f357d028feff84ab17c417789f9fc9b8572c98172b7319130feaab9", 0x2b}], 0x1}}], 0x1, 0x2090) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000500)}, 0x20) writev(r4, &(0x7f0000006b80)=[{&(0x7f0000000080)="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", 0x45f}], 0x1) 227.067439ms ago: executing program 6 (id=1947): r0 = semget$private(0x0, 0x3, 0xa0) semctl$SEM_INFO(r0, 0x0, 0x13, &(0x7f0000000000)=""/161) semctl$IPC_RMID(r0, 0x0, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendto$inet6(r1, &(0x7f00000000c0)="f3128f1ca24a821d028dc03d4819828bdb98", 0x12, 0x8000, &(0x7f0000000100)={0xa, 0x4e21, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x200}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x88, 0x1, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_TABLE_USERDATA={0x54, 0x6, "cb0da6ad1c104cbfe0469cdcf57a71e77e2d67f2840fec887c5d5c5c215c58678eb920fd18aa4e2b879be13463bd4276f38d13927cd191b2d98446360bcfff5942170a04162cfd7ef9138f6c70f27de4"}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x40000}, 0x28002) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'gretap0\x00', &(0x7f0000000300)={'erspan0\x00', 0x0, 0x20, 0x7, 0x6, 0xb, {{0x37, 0x4, 0x0, 0x2, 0xdc, 0x66, 0x0, 0xc0, 0x4, 0x0, @rand_addr=0x64010101, @multicast1, {[@cipso={0x86, 0x58, 0x2, [{0x7, 0x4, "b6d1"}, {0x6, 0xf, "88f054d01f382d455c111e7471"}, {0x5, 0x7, "4816f53fc7"}, {0x2, 0xd, "ad2785f5a653888b343704"}, {0x7, 0x8, "720f878da62d"}, {0x6, 0x10, "6c083b567b74d636a95a2ef3fea1"}, {0x7, 0xa, "4f7260613a9541d1"}, {0x5, 0x9, "50f696a7ef3855"}]}, @timestamp_addr={0x44, 0x1c, 0xf, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x10}, {@rand_addr=0x9, 0x221}, {@multicast2, 0x6}]}, @timestamp={0x44, 0x18, 0xee, 0x0, 0xc, [0x9, 0x8, 0x800, 0x6, 0x1]}, @timestamp_addr={0x44, 0x34, 0xb4, 0x1, 0x5, [{@multicast1, 0xf512}, {@multicast2, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@rand_addr=0x64010101, 0x5}, {@empty, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x800}]}, @generic={0x82, 0x7, "9e918cf043"}]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000480)={&(0x7f0000000440)=@getchain={0x3c, 0x66, 0x10, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x5, 0x2}, {0x1, 0x5}, {0x4, 0xffff}}, [{0x8, 0xb, 0x9619}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0xdc6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40810) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) r4 = add_key(&(0x7f0000000600)='dns_resolver\x00', &(0x7f0000000640)={'syz', 0x0}, &(0x7f0000000680)="617a4d076110155f111f71ce91c4b6673b8c26affb2a366cf430664e2b2b2fb72a605c927c395205c14ada9ad30f9df1d6bf85fd55b4a1d5aa9fa893588577d03faedacdbe4cd83333beaf1f77c7bef7ac60e05053315dd75778bc747dfe9a86e69fb4d9f91905", 0x67, 0xfffffffffffffffc) r5 = request_key(&(0x7f0000000540)='blacklist\x00', &(0x7f0000000580)={'syz', 0x1}, &(0x7f00000005c0)='^)\'\x00', r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$NL80211_CMD_AUTHENTICATE(r6, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x7c, r7, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xa}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x49}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x103}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @random="0042d4dda07b"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="958286c9c068"}, @NL80211_ATTR_SSID={0xa, 0x34, @random="b1d379078c82"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x113}]]}, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x8010) request_key(&(0x7f0000000880)='dns_resolver\x00', &(0x7f00000008c0)={'syz', 0x1}, &(0x7f0000000900)='dns_resolver\x00', r5) r8 = syz_open_dev$dvb_demux(&(0x7f0000000940), 0x6, 0x100) ioctl$DVB_DEMUX_DMX_SET_FILTER(r8, 0x403c6f2b, &(0x7f0000000980)={0x6, {"9de4a4e77702e68c726b5c071869633a", "bb242dbf36c67aaf626a95695e4e5c40", "957f61935323cc3981e26fcbe64f1b56"}, 0x5, 0x2}) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r9, &(0x7f00000009c0)={0x2, 0x4e22, @loopback}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000a40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r6, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x80080000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x54, r7, 0x62a, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x2c6}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x4800) r11 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000b80)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(r11, 0x5396, &(0x7f0000000bc0)) r12 = openat(r11, &(0x7f0000000c00)='.\x00', 0x200040, 0xc) openat(r12, &(0x7f0000000c40)='./file0\x00', 0x200100, 0x40) open(&(0x7f0000000c80)='./file0\x00', 0x80000, 0x30) socket$inet_udp(0x2, 0x2, 0x0) read$FUSE(r11, &(0x7f0000000cc0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) capset(&(0x7f0000002d00)={0x19980330, r13}, &(0x7f0000002d40)={0x3b7a, 0x7, 0x4, 0x8, 0x3, 0x8}) 221.613805ms ago: executing program 4 (id=1948): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, 0x2, 0x2, 0x401, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0xfffffff5}, 0x0) 141.213184ms ago: executing program 4 (id=1949): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x900000000000000}, 0x0) 140.937386ms ago: executing program 6 (id=1950): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f80)}, 0x1, 0x0, 0x0, 0x810}, 0x24004040) 140.699568ms ago: executing program 4 (id=1951): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000100)=0xaba, 0x4) gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x2}, 0x50) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0), 0x8) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0a800, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000300)) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000140), 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0608250c"], 0x9) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) unshare(0x62020600) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000180)=[@in6={0xa, 0x4e21, 0x5, @private2, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e21, 0x1641, @private2, 0x8}}, 0x4fff, 0x9}, &(0x7f0000000280)=0x90) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x9, 0x3, 0x1e8, 0x0, 0xffffffff, 0xffffffff, 0xb8, 0xffffffff, 0xb8, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @loopback, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0xb8, 0x0, 'pptp\x00'}}}, {{@ip={@empty, @empty}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x248) 91.430336ms ago: executing program 6 (id=1952): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ipvlan1\x00'}) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000080)=""/205) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = getpgid(0xffffffffffffffff) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_NET_NS_PID={0x8, 0x13, r2}]}, 0x3c}}, 0x0) 91.323517ms ago: executing program 6 (id=1953): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6000000010000104a0518fd5000000", @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff0300000800090001000000080007000000000014003500626f6e6430"], 0x60}, 0x1, 0x0, 0x0, 0x20044054}, 0x4000054) 0s ago: executing program 6 (id=1954): r0 = socket$packet(0x11, 0x3, 0x300) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RCLUNK(r1, &(0x7f0000000200)={0x7, 0x79, 0x2}, 0x7) r2 = io_uring_setup(0x667, &(0x7f0000000240)={0x0, 0xa14a, 0x10, 0x2, 0x235}) r3 = socket(0x1e, 0x4, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440), r5) sendmsg$TIPC_CMD_SET_LINK_TOL(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010025bd7000fedbdf25010000000000000007410000004c0018"], 0x68}, 0x1, 0x0, 0x0, 0x4000084}, 0x4000000) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r4, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r6, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x25) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) sendmmsg(r3, &(0x7f0000000300), 0x4000000000000e4, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000040)="ffffffffffff0211223344550806000108000604000242054305123400000000ff4305029afe00000000", 0x2a, 0x24048010, &(0x7f0000000480)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @broadcast}, 0x14) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000009000128009000100766c616e00000000800002800c0002000e0000000a000000340004800c0001001790000002000000080001"], 0xb8}}, 0x2) sendmsg$AUDIT_TTY_SET(r8, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x18, 0x3f9, 0x4, 0x70bd2c, 0x25dfdbff, {}, ["", ""]}, 0x18}, 0x1, 0x0, 0x0, 0xc4090}, 0x804) 0s ago: executing program 6 (id=1955): mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000b40)='./sys\x00', &(0x7f0000000b80)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/pci/devices/0000:00:07.0/remove\x00', 0x1, 0x4) write(r0, &(0x7f0000000300)='1', 0x1) kernel console output (not intermixed with test programs): wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.757877][ T9438] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.757887][ T9438] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.764414][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.764437][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.764453][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.787100][ T5859] ch341-uart ttyUSB0: failed to read break control: -71 [ 253.787123][ T5859] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 253.795715][ T5859] usb 8-1: USB disconnect, device number 13 [ 253.797176][ T5859] ch341 8-1:0.0: device disconnected [ 253.973382][ T9434] Bluetooth: hci1: Frame reassembly failed (-84) [ 254.172579][ T67] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 254.175415][ T67] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 254.176573][ T67] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 254.177577][ T67] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 254.178536][ T67] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 254.494717][T11363] rxe_eth0 speed is unknown, defaulting to 1000 [ 254.619045][ T5144] Bluetooth: hci0: command tx timeout [ 255.030961][T11363] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.031043][T11363] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.031119][T11363] bridge_slave_0: entered allmulticast mode [ 255.031885][T11363] bridge_slave_0: entered promiscuous mode [ 255.035721][T11363] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.035791][T11363] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.036066][T11363] bridge_slave_1: entered allmulticast mode [ 255.036947][T11363] bridge_slave_1: entered promiscuous mode [ 255.060999][T11363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.062526][T11363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.084174][T11363] team0: Port device team_slave_0 added [ 255.085519][T11363] team0: Port device team_slave_1 added [ 255.107128][T11363] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.107134][T11363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 255.107146][T11363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.107959][T11363] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.107964][T11363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 255.107976][T11363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.151095][T11363] hsr_slave_0: entered promiscuous mode [ 255.151754][T11363] hsr_slave_1: entered promiscuous mode [ 255.152101][T11363] debugfs: 'hsr0' already exists in 'hsr' [ 255.152108][T11363] Cannot create hsr debugfs directory [ 255.255741][T11401] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1722'. [ 255.309222][T11401] bond0: (slave bond_slave_0): Releasing backup interface [ 255.538750][ T43] kauditd_printk_skb: 20 callbacks suppressed [ 255.538761][ T43] audit: type=1400 audit(1794253483.865:997): avc: denied { bind } for pid=11405 comm="syz.6.1723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 255.539343][ T43] audit: type=1400 audit(1794253483.865:998): avc: denied { name_bind } for pid=11405 comm="syz.6.1723" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 255.539366][ T43] audit: type=1400 audit(1794253483.875:999): avc: denied { node_bind } for pid=11405 comm="syz.6.1723" saddr=172.20.20.170 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 255.567884][T11408] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1724'. [ 255.612407][ T43] audit: type=1400 audit(1794253483.945:1000): avc: denied { append } for pid=11409 comm="syz.6.1725" name="uprobe_events" dev="tracefs" ino=2084 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 255.670784][ T1447] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.670811][ T1447] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.979075][ T5144] Bluetooth: hci1: command 0x1003 tx timeout [ 255.980462][ T5789] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 256.148180][T11363] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 256.153095][T11363] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 256.153742][T11363] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 256.163592][T11363] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 256.163956][T11363] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 256.175800][T11363] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 256.178464][T11363] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 256.185670][T11363] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 256.207893][T11433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1734'. [ 256.207904][T11433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1734'. [ 256.218578][T11439] FAULT_INJECTION: forcing a failure. [ 256.218578][T11439] name failslab, interval 1, probability 5, space 0, times 40 [ 256.218597][T11439] CPU: 1 UID: 0 PID: 11439 Comm: syz.3.1735 Tainted: G L syzkaller #0 PREEMPT(full) [ 256.218612][T11439] Tainted: [L]=SOFTLOCKUP [ 256.218616][T11439] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 256.218622][T11439] Call Trace: [ 256.218626][T11439] [ 256.218632][T11439] dump_stack_lvl+0x100/0x190 [ 256.218654][T11439] should_fail_ex.cold+0x5/0xa [ 256.218709][T11439] should_failslab+0xc2/0x120 [ 256.218728][T11439] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 256.218757][T11439] ? __d_alloc+0x34/0xad0 [ 256.218785][T11439] __d_alloc+0x34/0xad0 [ 256.218812][T11439] d_alloc_pseudo+0x1c/0xc0 [ 256.218828][T11439] alloc_file_pseudo+0x118/0x290 [ 256.218846][T11439] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 256.218881][T11439] __shmem_file_setup+0x205/0x460 [ 256.218929][T11439] ? __pfx___shmem_file_setup+0x10/0x10 [ 256.218947][T11439] ? big_key_preparse+0x2b7/0x5a0 [ 256.218973][T11439] big_key_preparse+0x34e/0x5a0 [ 256.218988][T11439] ? __pfx_big_key_preparse+0x10/0x10 [ 256.219000][T11439] ? security_key_permission+0x7b/0x230 [ 256.219019][T11439] ? key_task_permission+0x2c7/0x3c0 [ 256.219035][T11439] ? __pfx_big_key_preparse+0x10/0x10 [ 256.219049][T11439] key_update+0x20c/0x5a0 [ 256.219061][T11439] ? __pfx_key_update+0x10/0x10 [ 256.219072][T11439] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 256.219098][T11439] keyctl_update_key+0x8f/0x160 [ 256.219113][T11439] __do_sys_keyctl+0x302/0x5a0 [ 256.219130][T11439] do_syscall_64+0x123/0x7b0 [ 256.219146][T11439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.219158][T11439] RIP: 0033:0x7fbe12d9fb19 [ 256.219168][T11439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.219179][T11439] RSP: 002b:00007fbe13bf6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 256.219191][T11439] RAX: ffffffffffffffda RBX: 00007fbe13025fa0 RCX: 00007fbe12d9fb19 [ 256.219198][T11439] RDX: 0000200000000200 RSI: 00000000079c6598 RDI: 0000000000000002 [ 256.219205][T11439] RBP: 00007fbe12e37b70 R08: 0000000000000000 R09: 0000000000000000 [ 256.219211][T11439] R10: 0000000000001000 R11: 0000000000000246 R12: 0000000000000000 [ 256.219218][T11439] R13: 00007fbe13026038 R14: 00007fbe13025fa0 R15: 00007ffef8017928 [ 256.219233][T11439] [ 256.220018][ T5789] Bluetooth: hci3: command tx timeout [ 256.257162][T11363] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.265155][T11363] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.268362][ T9439] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.268410][ T9439] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.276794][ T9430] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.276835][ T9430] bridge0: port 2(bridge_slave_1) entered forwarding state qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 256.398532][ T43] audit: type=1400 audit(1794253484.725:1001): avc: denied { write } for pid=11452 comm="syz.3.1739" name="/" dev="9p" ino=74711107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 256.415361][T11458] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.417918][ T43] audit: type=1400 audit(1794253484.745:1002): avc: denied { append } for pid=11452 comm="syz.3.1739" path="/44/file0/blkio.throttle.io_service_bytes" dev="9p" ino=74711443 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 256.546229][T11458] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1740'. [ 256.546465][T11458] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1740'. [ 256.570262][ T43] audit: type=1400 audit(1794253484.905:1003): avc: denied { write } for pid=11452 comm="syz.3.1739" name="file0" dev="9p" ino=74711439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 256.580718][T11464] 9pnet_virtio: no channels available for device syz [ 256.637504][T11363] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 256.698979][ T5144] Bluetooth: hci0: command tx timeout [ 256.746973][T11475] netlink: 'syz.6.1741': attribute type 29 has an invalid length. [ 256.746984][T11475] netlink: 'syz.6.1741': attribute type 3 has an invalid length. [ 256.746990][T11475] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1741'. [ 256.837650][T11481] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1741'. [ 256.857525][T11363] veth0_vlan: entered promiscuous mode [ 256.865059][T11363] veth1_vlan: entered promiscuous mode [ 256.887548][T11363] veth0_macvtap: entered promiscuous mode [ 256.891285][T11363] veth1_macvtap: entered promiscuous mode [ 256.904067][T11363] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.906106][T11363] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.929196][ T5856] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.929233][ T5856] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.929261][ T5856] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.929288][ T5856] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.941003][T11483] tipc: Started in network mode [ 256.941015][T11483] tipc: Node identity 1000001, cluster identity 4711 [ 256.941022][T11483] tipc: Node number set to 16777217 [ 256.948789][T11483] tipc: New replicast peer: 127.0.0.1 [ 256.953999][T11483] tipc: Enabled bearer , priority 10 [ 257.015371][T11484] netlink: 'syz.3.1742': attribute type 10 has an invalid length. [ 257.038835][T11484] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 257.042225][T11484] team0: Port device netdevsim1 added [ 257.046050][T11483] netlink: 'syz.3.1742': attribute type 10 has an invalid length. [ 257.048972][ T9439] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.048982][ T9439] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.097289][ T9439] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.097297][ T9439] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.116809][T11486] fuse: Unknown parameter 'Égd' [ 257.279235][ T10] net_ratelimit: 472 callbacks suppressed [ 257.667499][T11515] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1749'. [ 257.679042][ T5774] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 257.839035][ T5774] usb 8-1: Using ep0 maxpacket: 8 [ 257.840054][ T5774] usb 8-1: New USB device found: idVendor=0225, idProduct=0000, bcdDevice=0.00 [ 257.841592][ T5774] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 257.841612][ T5774] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 257.841660][ T5774] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 257.841682][ T5774] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 257.841721][ T5774] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.848083][ T5774] hub 8-1:1.0: bad descriptor, ignoring hub [ 257.848101][ T5774] hub 8-1:1.0: probe with driver hub failed with error -5 [ 257.848552][ T5774] cdc_wdm 8-1:1.0: skipping garbage [ 257.848564][ T5774] cdc_wdm 8-1:1.0: skipping garbage [ 257.857438][ T5774] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 257.857453][ T5774] cdc_wdm 8-1:1.0: Unknown control protocol [ 258.097901][T11520] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 258.103932][T11520] bond1 (unregistering): Released all slaves [ 258.158795][ T43] audit: type=1400 audit(1794253486.485:1004): avc: denied { read write } for pid=11510 comm="syz.3.1748" name="cdc-wdm0" dev="devtmpfs" ino=3268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 258.159173][ T43] audit: type=1400 audit(1794253486.495:1005): avc: denied { open } for pid=11510 comm="syz.3.1748" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 258.308977][ T5144] Bluetooth: hci3: command tx timeout [ 258.400558][ T5774] usb 8-1: USB disconnect, device number 14 [ 258.469098][ T5789] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 258.534738][T11526] rxe_eth0 speed is unknown, defaulting to 1000 [ 258.547291][T11532] FAULT_INJECTION: forcing a failure. [ 258.547291][T11532] name failslab, interval 1, probability 5, space 0, times 37 [ 258.547310][T11532] CPU: 3 UID: 0 PID: 11532 Comm: syz.6.1755 Tainted: G L syzkaller #0 PREEMPT(full) [ 258.547325][T11532] Tainted: [L]=SOFTLOCKUP [ 258.547329][T11532] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 258.547335][T11532] Call Trace: [ 258.547343][T11532] [ 258.547349][T11532] dump_stack_lvl+0x100/0x190 [ 258.547379][T11532] should_fail_ex.cold+0x5/0xa [ 258.547396][T11532] should_failslab+0xc2/0x120 [ 258.547424][T11532] __kmalloc_noprof+0xfc/0x840 [ 258.547451][T11532] ? __pfx_dynamic_dname+0x10/0x10 [ 258.547470][T11532] ? tomoyo_encode2+0xfb/0x3c0 [ 258.547512][T11532] tomoyo_encode2+0xfb/0x3c0 [ 258.547526][T11532] tomoyo_encode+0x29/0x50 [ 258.547544][T11532] tomoyo_realpath_from_path+0x18c/0x690 [ 258.547559][T11532] tomoyo_path_number_perm+0x23c/0x580 [ 258.547575][T11532] ? tomoyo_path_number_perm+0x22e/0x580 [ 258.547592][T11532] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 258.547614][T11532] ? __lock_acquire+0x5c0/0x1f40 [ 258.547642][T11532] ? __fget_files+0x34/0x3d0 [ 258.547656][T11532] ? find_held_lock+0x2b/0x80 [ 258.547668][T11532] ? hook_file_ioctl_common+0x140/0x440 [ 258.547685][T11532] ? __fget_files+0x21f/0x3d0 [ 258.547701][T11532] security_file_ioctl+0xd3/0x230 [ 258.547725][T11532] __x64_sys_ioctl+0xb7/0x210 [ 258.547738][T11532] do_syscall_64+0x123/0x7b0 [ 258.547757][T11532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.547768][T11532] RIP: 0033:0x7f39bb79fb19 [ 258.547777][T11532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.547787][T11532] RSP: 002b:00007f39bc6d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 258.547804][T11532] RAX: ffffffffffffffda RBX: 00007f39bba25fa0 RCX: 00007f39bb79fb19 [ 258.547811][T11532] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 258.547817][T11532] RBP: 00007f39bc6d0090 R08: 0000000000000000 R09: 0000000000000000 [ 258.547823][T11532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.547830][T11532] R13: 00007f39bba26038 R14: 00007f39bba25fa0 R15: 00007ffe1dd4ed28 [ 258.547852][T11532] [ 258.547862][T11532] ERROR: Out of memory at tomoyo_realpath_from_path. [ 258.607103][T11536] ieee802154 phy0 wpan0: encryption failed: -22 [ 258.716207][T11540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1754'. [ 258.792069][ T5144] Bluetooth: hci0: command tx timeout [ 258.886879][T11552] bond3: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 258.888286][T11552] bond3 (unregistering): Released all slaves [ 259.044839][T11559] netlink: 'syz.6.1763': attribute type 8 has an invalid length. [ 259.053948][ T43] audit: type=1400 audit(1794253487.385:1006): avc: denied { setattr } for pid=11557 comm="syz.6.1763" name="/" dev="configfs" ino=2154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 259.107687][T11558] kvm_do_msr_access: 2437 callbacks suppressed [ 259.286022][T11566] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 259.286049][T11566] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 259.286087][T11566] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 259.377324][ T9430] smbdirect: ib_dev[syz2] removed [ 259.566635][T11577] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 259.568224][T11577] bond1 (unregistering): Released all slaves [ 259.613444][T11580] netlink: 'syz.6.1772': attribute type 5 has an invalid length. [ 259.683122][T11583] nvme_fabrics: unknown parameter or missing value 't' in ctrl creation request [ 259.683546][T11583] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 259.684706][T11583] cramfs: block size(16384) > page size(4096) not supported by filesystem [ 259.687305][T11583] cramfs: wrong magic [ 259.689029][T11586] nvme_fabrics: unknown parameter or missing value 't' in ctrl creation request [ 259.690555][T11585] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 259.690674][T11585] cramfs: block size(16384) > page size(4096) not supported by filesystem [ 259.690779][T11585] cramfs: wrong magic [ 259.734541][T11588] dummy0: entered allmulticast mode [ 259.752982][T11588] netdevsim netdevsim7 eth6: entered allmulticast mode [ 259.753623][T11588] netdevsim netdevsim7 eth7: entered allmulticast mode [ 259.754171][T11588] netdevsim netdevsim7 eth8: entered allmulticast mode [ 259.754824][T11588] netdevsim netdevsim7 eth9: entered allmulticast mode [ 259.755379][T11588] netdevsim netdevsim9 eth2: entered allmulticast mode [ 259.755917][T11588] netdevsim netdevsim9 eth3: entered allmulticast mode [ 259.756496][T11588] netdevsim netdevsim9 eth4: entered allmulticast mode [ 259.757043][T11588] netdevsim netdevsim9 eth5: entered allmulticast mode [ 259.762568][T11590] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 260.134966][T11590] syz.6.1774 (11590): drop_caches: 2 [ 260.212042][T11612] bond3: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 260.214204][T11612] bond3 (unregistering): Released all slaves [ 260.263395][T11610] FAULT_INJECTION: forcing a failure. [ 260.263395][T11610] name failslab, interval 1, probability 5, space 0, times 35 [ 260.263414][T11610] CPU: 1 UID: 0 PID: 11610 Comm: syz.2.1780 Tainted: G L syzkaller #0 PREEMPT(full) [ 260.263429][T11610] Tainted: [L]=SOFTLOCKUP [ 260.263432][T11610] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 260.263440][T11610] Call Trace: [ 260.263448][T11610] [ 260.263453][T11610] dump_stack_lvl+0x100/0x190 [ 260.263476][T11610] should_fail_ex.cold+0x5/0xa [ 260.263498][T11610] should_failslab+0xc2/0x120 [ 260.263537][T11610] kmem_cache_alloc_noprof+0x92/0x6a0 [ 260.263576][T11610] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 260.263641][T11610] ? acpi_ut_create_update_state+0x72/0x130 [ 260.263668][T11610] acpi_ut_create_update_state+0x72/0x130 [ 260.263690][T11610] acpi_ut_create_update_state_and_push+0x2f/0x70 [ 260.263711][T11610] acpi_ut_update_object_reference+0x32f/0x800 [ 260.263739][T11610] ? __pfx_acpi_ut_update_object_reference+0x10/0x10 [ 260.263756][T11610] ? __pfx_acpi_ut_trace+0x10/0x10 [ 260.263769][T11610] ? __pfx_acpi_ut_trace+0x10/0x10 [ 260.263783][T11610] ? acpi_ut_status_exit+0x111/0x1c0 [ 260.263800][T11610] acpi_ut_add_reference+0x80/0x170 [ 260.263816][T11610] acpi_ex_resolve_node_to_value+0x7e1/0x9a0 [ 260.263847][T11610] ? __pfx_acpi_ex_resolve_node_to_value+0x10/0x10 [ 260.263866][T11610] ? acpi_ds_create_operand+0x267/0xc20 [ 260.263886][T11610] acpi_ex_resolve_to_value+0x3da/0xcd0 [ 260.263903][T11610] ? __pfx_acpi_ex_resolve_to_value+0x10/0x10 [ 260.263919][T11610] ? __pfx_acpi_ns_lookup+0x10/0x10 [ 260.263942][T11610] ? __asan_memset+0x23/0x50 [ 260.263968][T11610] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 260.263994][T11610] acpi_ds_evaluate_name_path+0x30d/0x4a0 [ 260.264017][T11610] ? __pfx_acpi_ds_evaluate_name_path+0x10/0x10 [ 260.264043][T11610] ? acpi_ps_get_next_namepath+0x1f6/0xa10 [ 260.264063][T11610] ? acpi_ut_trace_ptr+0x1d1/0x2a0 [ 260.264092][T11610] acpi_ds_exec_end_op+0xb78/0x1e60 [ 260.264119][T11610] ? __pfx_acpi_ds_exec_end_op+0x10/0x10 [ 260.264142][T11610] acpi_ps_parse_loop+0x5e1/0x26e0 [ 260.264169][T11610] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 260.264188][T11610] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 260.264205][T11610] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 260.264220][T11610] ? acpi_ut_create_thread_state+0x6d/0x170 [ 260.264239][T11610] acpi_ps_parse_aml+0x81e/0x1120 [ 260.264256][T11610] acpi_ps_execute_method+0x5c4/0xe90 [ 260.264275][T11610] acpi_ns_evaluate+0x640/0x1670 [ 260.264295][T11610] acpi_ut_evaluate_object+0xf7/0x610 [ 260.264332][T11610] acpi_rs_get_prt_method_data+0xa0/0x150 [ 260.264350][T11610] ? __pfx_acpi_rs_get_prt_method_data+0x10/0x10 [ 260.264366][T11610] ? acpi_ut_status_exit+0x111/0x1c0 [ 260.264384][T11610] ? acpi_rs_validate_parameters+0x104/0x210 [ 260.264395][T11610] acpi_get_irq_routing_table+0xb8/0x140 [ 260.264406][T11610] ? __pfx_acpi_get_irq_routing_table+0x10/0x10 [ 260.264418][T11610] ? irqentry_exit+0x202/0xab0 [ 260.264433][T11610] ? lockdep_hardirqs_on+0x7d/0x110 [ 260.264445][T11610] acpi_pci_irq_find_prt_entry+0x178/0xdd0 [ 260.264468][T11610] ? __pfx_acpi_pci_irq_find_prt_entry+0x10/0x10 [ 260.264509][T11610] acpi_pci_irq_lookup+0x8e/0x6b0 [ 260.264527][T11610] ? __pfx_acpi_pci_irq_lookup+0x10/0x10 [ 260.264547][T11610] acpi_pci_irq_disable+0x1a8/0x360 [ 260.264558][T11610] ? __pfx_acpi_pci_irq_disable+0x10/0x10 [ 260.264568][T11610] pcibios_disable_device+0x89/0xb0 [ 260.264581][T11610] do_pci_disable_device+0x9f/0x100 [ 260.264604][T11610] ? __pfx_do_pci_disable_device+0x10/0x10 [ 260.264621][T11610] ? pci_release_region.part.0+0x15b/0x2e0 [ 260.264635][T11610] pci_disable_device+0x130/0x270 [ 260.264651][T11610] virtio_pci_remove+0xcf/0x110 [ 260.264675][T11610] pci_device_remove+0xb2/0x1d0 [ 260.264695][T11610] ? __pfx_pci_device_remove+0x10/0x10 [ 260.264709][T11610] device_remove+0xcb/0x180 [ 260.264745][T11610] device_release_driver_internal+0x441/0x610 [ 260.264763][T11610] pci_stop_bus_device+0x120/0x160 [ 260.264779][T11610] pci_stop_and_remove_bus_device+0x58/0xa0 [ 260.264795][T11610] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 260.264811][T11610] remove_store+0x123/0x140 [ 260.264824][T11610] ? __pfx_remove_store+0x10/0x10 [ 260.264835][T11610] ? find_held_lock+0x2b/0x80 [ 260.264854][T11610] ? sysfs_file_kobj+0xe4/0x290 [ 260.264899][T11610] ? sysfs_file_kobj+0xe4/0x290 [ 260.264914][T11610] ? __pfx_remove_store+0x10/0x10 [ 260.264924][T11610] dev_attr_store+0x58/0x80 [ 260.264939][T11610] ? __pfx_dev_attr_store+0x10/0x10 [ 260.264953][T11610] sysfs_kf_write+0xf2/0x150 [ 260.264969][T11610] kernfs_fop_write_iter+0x3e0/0x5f0 [ 260.264981][T11610] ? __pfx_sysfs_kf_write+0x10/0x10 [ 260.265000][T11610] vfs_write+0x6af/0x1040 [ 260.265018][T11610] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 260.265032][T11610] ? __pfx_vfs_write+0x10/0x10 [ 260.265042][T11610] ? find_held_lock+0x2b/0x80 [ 260.265064][T11610] ksys_write+0x12a/0x250 [ 260.265075][T11610] ? __pfx_ksys_write+0x10/0x10 [ 260.265091][T11610] do_syscall_64+0x123/0x7b0 [ 260.265105][T11610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.265117][T11610] RIP: 0033:0x7fbe8479fb19 [ 260.265127][T11610] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.265137][T11610] RSP: 002b:00007fbe85596028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 260.265160][T11610] RAX: ffffffffffffffda RBX: 00007fbe84a25fa0 RCX: 00007fbe8479fb19 [ 260.265170][T11610] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000007 [ 260.265180][T11610] RBP: 00007fbe84837b70 R08: 0000000000000000 R09: 0000000000000000 [ 260.265191][T11610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 260.265203][T11610] R13: 00007fbe84a26038 R14: 00007fbe84a25fa0 R15: 00007ffe12808408 [ 260.265228][T11610] [ 260.265293][T11610] ACPI Error: AE_NO_MEMORY, Could not update object reference count (20260408/utdelete-651) [ 260.357227][T11622] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.469020][ T5144] Bluetooth: hci3: command tx timeout [ 260.801814][T11631] FAULT_INJECTION: forcing a failure. [ 260.801814][T11631] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 260.801839][T11631] CPU: 3 UID: 0 PID: 11631 Comm: syz.3.1785 Tainted: G L syzkaller #0 PREEMPT(full) [ 260.801863][T11631] Tainted: [L]=SOFTLOCKUP [ 260.801870][T11631] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 260.801880][T11631] Call Trace: [ 260.801886][T11631] [ 260.801900][T11631] dump_stack_lvl+0x100/0x190 [ 260.801931][T11631] should_fail_ex.cold+0x5/0xa [ 260.801959][T11631] strncpy_from_user+0x3b/0x2d0 [ 260.802031][T11631] do_getname+0x78/0x390 [ 260.802070][T11631] do_sys_openat2+0xc3/0x1d0 [ 260.802095][T11631] ? __pfx_do_sys_openat2+0x10/0x10 [ 260.802119][T11631] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 260.802141][T11631] ? __fget_files+0x21f/0x3d0 [ 260.802184][T11631] __x64_sys_openat+0x12d/0x210 [ 260.802209][T11631] ? __pfx___x64_sys_openat+0x10/0x10 [ 260.802232][T11631] ? ksys_write+0x1ac/0x250 [ 260.802257][T11631] do_syscall_64+0x123/0x7b0 [ 260.802280][T11631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.802298][T11631] RIP: 0033:0x7fbe12d6034e [ 260.802314][T11631] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 260.802330][T11631] RSP: 002b:00007fbe13bf5f18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 260.802347][T11631] RAX: ffffffffffffffda RBX: 00007fbe13bf66c0 RCX: 00007fbe12d6034e [ 260.802359][T11631] RDX: 0000000000000000 RSI: 00007fbe12e3729e RDI: ffffffffffffff9c [ 260.802369][T11631] RBP: 00007fbe13bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 260.802379][T11631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.802389][T11631] R13: 00007fbe13026038 R14: 00007fbe13025fa0 R15: 00007ffef8017928 [ 260.802432][T11631] [ 260.827183][ T43] kauditd_printk_skb: 9 callbacks suppressed [ 260.827196][ T43] audit: type=1400 audit(1794253489.155:1016): avc: denied { setattr } for pid=11627 comm="syz.4.1784" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 260.830240][T11629] fuseblk: Bad value for 'rootmode' [ 260.895091][T11640] sock: sock_timestamping_bind_phc: sock not bind to device [ 260.926579][T11649] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.930875][T11644] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 260.935618][T11650] __nla_validate_parse: 5 callbacks suppressed [ 260.935686][T11650] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1793'. [ 260.936737][T11644] bond1 (unregistering): Released all slaves [ 260.967269][T11650] bond0: (slave bond_slave_0): Releasing backup interface [ 261.065743][T11660] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 261.073941][T11660] FAULT_INJECTION: forcing a failure. [ 261.073941][T11660] name failslab, interval 1, probability 5, space 0, times 34 [ 261.073969][T11660] CPU: 3 UID: 0 PID: 11660 Comm: syz.2.1797 Tainted: G L syzkaller #0 PREEMPT(full) [ 261.073992][T11660] Tainted: [L]=SOFTLOCKUP [ 261.073999][T11660] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 261.074010][T11660] Call Trace: [ 261.074017][T11660] [ 261.074024][T11660] dump_stack_lvl+0x100/0x190 [ 261.074056][T11660] should_fail_ex.cold+0x5/0xa [ 261.074083][T11660] should_failslab+0xc2/0x120 [ 261.074104][T11660] kmem_cache_alloc_noprof+0x92/0x6a0 [ 261.074135][T11660] ? security_file_alloc+0x34/0x2c0 [ 261.074175][T11660] security_file_alloc+0x34/0x2c0 [ 261.074196][T11660] init_file+0x95/0x480 [ 261.074219][T11660] alloc_empty_file+0x79/0x1c0 [ 261.074242][T11660] alloc_file_pseudo+0x17e/0x290 [ 261.074266][T11660] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 261.074292][T11660] ? alloc_fd+0x471/0x7a0 [ 261.074318][T11660] sock_alloc_file+0x50/0x210 [ 261.074359][T11660] __sys_socket+0x1c0/0x260 [ 261.074378][T11660] ? __pfx___sys_socket+0x10/0x10 [ 261.074408][T11660] __x64_sys_socket+0x72/0xb0 [ 261.074426][T11660] ? lockdep_hardirqs_on+0x7d/0x110 [ 261.074449][T11660] do_syscall_64+0x123/0x7b0 [ 261.074473][T11660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.074490][T11660] RIP: 0033:0x7fbe8479fb19 [ 261.074507][T11660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.074524][T11660] RSP: 002b:00007fbe85596028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 261.074544][T11660] RAX: ffffffffffffffda RBX: 00007fbe84a25fa0 RCX: 00007fbe8479fb19 [ 261.074557][T11660] RDX: 0000000000000100 RSI: 0000000000000001 RDI: 0000000000000002 [ 261.074570][T11660] RBP: 00007fbe84837b70 R08: 0000000000000000 R09: 0000000000000000 [ 261.074580][T11660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 261.074592][T11660] R13: 00007fbe84a26038 R14: 00007fbe84a25fa0 R15: 00007ffe12808408 [ 261.074614][T11660] [ 261.135676][ T5859] hid_parser_main: 22 callbacks suppressed [ 261.135686][ T5859] hid-generic 0005:04F3:05DF.0003: unknown main item tag 0x0 [ 261.135700][ T5859] hid-generic 0005:04F3:05DF.0003: unknown main item tag 0x0 [ 261.135755][ T5859] hid-generic 0005:04F3:05DF.0003: unknown main item tag 0x0 [ 261.135768][ T5859] hid-generic 0005:04F3:05DF.0003: unknown main item tag 0x0 [ 261.135780][ T5859] hid-generic 0005:04F3:05DF.0003: unknown main item tag 0x0 [ 261.135791][ T5859] hid-generic 0005:04F3:05DF.0003: unknown main item tag 0x0 [ 261.135803][ T5859] hid-generic 0005:04F3:05DF.0003: unknown main item tag 0x0 [ 261.135814][ T5859] hid-generic 0005:04F3:05DF.0003: unknown main item tag 0x0 [ 261.135826][ T5859] hid-generic 0005:04F3:05DF.0003: unknown main item tag 0x0 [ 261.135837][ T5859] hid-generic 0005:04F3:05DF.0003: unknown main item tag 0x0 [ 261.171617][ T5859] hid-generic 0005:04F3:05DF.0003: hidraw1: BLUETOOTH HID v0.05 Device [syz0] on aa:aa:aa:aa:aa:aa [ 261.201724][ T43] audit: type=1400 audit(1794253489.535:1017): avc: denied { mounton } for pid=11668 comm="syz.3.1800" path="/62/sys/devices/system/machinecheck/machinecheck0/bank1" dev="sysfs" ino=57203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=file permissive=1 [ 261.202245][T11672] overlayfs: missing 'lowerdir' [ 261.205941][ C0] unchecked MSR access error: WRMSR to 0x404 (tried to write 0x0000000000000003) at rIP: 0xffffffff81b4ca2a (__mcheck_cpu_init_prepare_banks+0x18a/0x380) [ 261.205982][ C0] Call Trace: [ 261.205989][ C0] [ 261.205998][ C0] ? __pfx___mcheck_cpu_init_prepare_banks+0x10/0x10 [ 261.206024][ C0] ? sched_clock_cpu+0x6c/0x570 [ 261.206063][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 261.206087][ C0] ? __pfx_mce_cpu_restart+0x10/0x10 [ 261.206110][ C0] mce_cpu_restart+0xd5/0x1f0 [ 261.206135][ C0] __flush_smp_call_function_queue+0x289/0x8c0 [ 261.206168][ C0] __sysvec_call_function+0x81/0x420 [ 261.206188][ C0] sysvec_call_function+0x9e/0xc0 [ 261.206207][ C0] [ 261.206214][ C0] [ 261.206222][ C0] asm_sysvec_call_function+0x1a/0x20 [ 261.206241][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x0/0x20 [ 261.206277][ C0] Code: 0c 24 89 f2 89 fe bf 05 00 00 00 e9 0a fe ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 0c 24 48 89 f2 48 89 fe bf 07 00 00 00 e9 d8 fd [ 261.206299][ C0] RSP: 0018:ffffc90005df7498 EFLAGS: 00000246 [ 261.206315][ C0] RAX: 1ffff1100544b51c RBX: 0000000000000000 RCX: ffffffff8269f4f6 [ 261.206325][ C0] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 261.206336][ C0] RBP: 1ffff92000bbee94 R08: 0000000000000001 R09: fffff52000bbee98 [ 261.206347][ C0] R10: ffffc90005df74c7 R11: 0000000000000001 R12: ffff88802a25a8c0 [ 261.206358][ C0] R13: dffffc0000000000 R14: ffff888027e995b0 R15: ffffea00014f2ec0 [ 261.206377][ C0] ? userfaultfd_wp+0x76/0xf0 [ 261.206402][ C0] userfaultfd_wp+0xa4/0xf0 [ 261.206420][ C0] ? __pfx_userfaultfd_wp+0x10/0x10 [ 261.206444][ C0] copy_page_range+0x1b45/0x5a00 [ 261.206491][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 261.206509][ C0] ? mas_wr_store_entry+0xa4/0x1d50 [ 261.206540][ C0] ? lock_acquire+0x1d1/0x380 [ 261.206563][ C0] ? dup_mmap+0xb09/0x2180 [ 261.206585][ C0] ? find_held_lock+0x2b/0x80 [ 261.206600][ C0] ? dup_mmap+0xc65/0x2180 [ 261.206617][ C0] ? dup_mmap+0xc65/0x2180 [ 261.206631][ C0] ? down_write+0x141/0x1f0 [ 261.206677][ C0] ? up_write+0x2dc/0x5b0 [ 261.206696][ C0] dup_mmap+0x1515/0x2180 [ 261.206718][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 261.206735][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 261.206756][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 261.206778][ C0] ? do_raw_spin_lock+0x128/0x260 [ 261.206803][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 261.206821][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 261.206841][ C0] ? __percpu_counter_init_many+0x2c1/0x3b0 [ 261.206870][ C0] ? mm_init+0xc17/0xeb0 [ 261.206892][ C0] copy_process+0x7c5c/0x88e0 [ 261.206927][ C0] ? __pfx_copy_process+0x10/0x10 [ 261.206952][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 261.206969][ C0] ? __pfx_pgd_none+0x10/0x10 [ 261.206993][ C0] kernel_clone+0x176/0x9d0 [ 261.207016][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 261.207042][ C0] ? __might_fault+0xc5/0x140 [ 261.207063][ C0] ? find_held_lock+0x2b/0x80 [ 261.207080][ C0] ? __might_fault+0xc5/0x140 [ 261.207099][ C0] __do_sys_clone+0xd9/0x120 [ 261.207122][ C0] ? __pfx___do_sys_clone+0x10/0x10 [ 261.207162][ C0] do_syscall_64+0x123/0x7b0 [ 261.207186][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.207202][ C0] RIP: 0033:0x7fbe847c8592 [ 261.207217][ C0] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 261.207233][ C0] RSP: 002b:00007ffe12808620 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 261.207248][ C0] RAX: ffffffffffffffda RBX: 00007ffe12808620 RCX: 00007fbe847c8592 [ 261.207259][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 261.207271][ C0] RBP: 00007ffe128087ac R08: 0000000000000000 R09: 0000000000000001 [ 261.207281][ C0] R10: 000055556fc3b7d0 R11: 0000000000000246 R12: 0000000000000001 [ 261.207296][ C0] R13: 00000000000927c0 R14: 000000000003fbc5 R15: 00007ffe12808800 [ 261.207320][ C0] [ 261.218014][T11674] FAULT_INJECTION: forcing a failure. [ 261.218014][T11674] name failslab, interval 1, probability 5, space 0, times 33 [ 261.218041][T11674] CPU: 3 UID: 0 PID: 11674 Comm: syz.2.1801 Tainted: G L syzkaller #0 PREEMPT(full) [ 261.218064][T11674] Tainted: [L]=SOFTLOCKUP [ 261.218070][T11674] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 261.218081][T11674] Call Trace: [ 261.218086][T11674] [ 261.218094][T11674] dump_stack_lvl+0x100/0x190 [ 261.218126][T11674] should_fail_ex.cold+0x5/0xa [ 261.218152][T11674] should_failslab+0xc2/0x120 [ 261.218172][T11674] __kmalloc_noprof+0xfc/0x840 [ 261.218198][T11674] ? tomoyo_encode2+0xfb/0x3c0 [ 261.218241][T11674] tomoyo_encode2+0xfb/0x3c0 [ 261.218263][T11674] tomoyo_encode+0x29/0x50 [ 261.218279][T11674] tomoyo_realpath_from_path+0x18c/0x690 [ 261.218303][T11674] tomoyo_path_number_perm+0x23c/0x580 [ 261.218327][T11674] ? tomoyo_path_number_perm+0x22e/0x580 [ 261.218353][T11674] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 261.218387][T11674] ? __lock_acquire+0x5c0/0x1f40 [ 261.218441][T11674] ? __fget_files+0x34/0x3d0 [ 261.218464][T11674] ? find_held_lock+0x2b/0x80 [ 261.218481][T11674] ? hook_file_ioctl_common+0x140/0x440 [ 261.218508][T11674] ? __fget_files+0x21f/0x3d0 [ 261.218533][T11674] security_file_ioctl+0xd3/0x230 [ 261.218560][T11674] __x64_sys_ioctl+0xb7/0x210 [ 261.218581][T11674] do_syscall_64+0x123/0x7b0 [ 261.218604][T11674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.218621][T11674] RIP: 0033:0x7fbe8479fb19 [ 261.218661][T11674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.218679][T11674] RSP: 002b:00007fbe85596028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 261.218695][T11674] RAX: ffffffffffffffda RBX: 00007fbe84a25fa0 RCX: 00007fbe8479fb19 [ 261.218707][T11674] RDX: 0000000000000000 RSI: 00000000c0207506 RDI: 0000000000000003 [ 261.218717][T11674] RBP: 00007fbe85596090 R08: 0000000000000000 R09: 0000000000000000 [ 261.218728][T11674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.218738][T11674] R13: 00007fbe84a26038 R14: 00007fbe84a25fa0 R15: 00007ffe12808408 [ 261.218762][T11674] [ 261.218809][T11674] ERROR: Out of memory at tomoyo_realpath_from_path. [ 261.330017][T11684] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 261.333170][T11684] bond1 (unregistering): Released all slaves [ 261.471309][T11688] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1807'. [ 261.471775][T11689] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1807'. [ 261.471797][T11689] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1807'. [ 261.539062][ T5825] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.539106][ T5825] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.539136][ T5825] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.539167][ T5825] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.738177][T11695] FAULT_INJECTION: forcing a failure. [ 261.738177][T11695] name failslab, interval 1, probability 5, space 0, times 32 [ 261.738200][T11695] CPU: 2 UID: 0 PID: 11695 Comm: syz.6.1810 Tainted: G L syzkaller #0 PREEMPT(full) [ 261.738223][T11695] Tainted: [L]=SOFTLOCKUP [ 261.738240][T11695] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 261.738251][T11695] Call Trace: [ 261.738257][T11695] [ 261.738266][T11695] dump_stack_lvl+0x100/0x190 [ 261.738298][T11695] should_fail_ex.cold+0x5/0xa [ 261.738325][T11695] should_failslab+0xc2/0x120 [ 261.738345][T11695] __kmalloc_noprof+0xfc/0x840 [ 261.738371][T11695] ? __pfx_dynamic_dname+0x10/0x10 [ 261.738392][T11695] ? tomoyo_encode2+0xfb/0x3c0 [ 261.738418][T11695] tomoyo_encode2+0xfb/0x3c0 [ 261.738440][T11695] tomoyo_encode+0x29/0x50 [ 261.738459][T11695] tomoyo_realpath_from_path+0x18c/0x690 [ 261.738487][T11695] tomoyo_path_number_perm+0x23c/0x580 [ 261.738512][T11695] ? tomoyo_path_number_perm+0x22e/0x580 [ 261.738539][T11695] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 261.738574][T11695] ? __lock_acquire+0x5c0/0x1f40 [ 261.738610][T11695] ? __fget_files+0x34/0x3d0 [ 261.738659][T11695] ? find_held_lock+0x2b/0x80 [ 261.738680][T11695] ? hook_file_ioctl_common+0x140/0x440 [ 261.738709][T11695] ? __fget_files+0x21f/0x3d0 [ 261.738736][T11695] security_file_ioctl+0xd3/0x230 [ 261.738767][T11695] __x64_sys_ioctl+0xb7/0x210 [ 261.738789][T11695] do_syscall_64+0x123/0x7b0 [ 261.738816][T11695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.738836][T11695] RIP: 0033:0x7f39bb79fb19 [ 261.738854][T11695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.738886][T11695] RSP: 002b:00007f39bc6d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 261.738905][T11695] RAX: ffffffffffffffda RBX: 00007f39bba25fa0 RCX: 00007f39bb79fb19 [ 261.738918][T11695] RDX: 00002000000001c0 RSI: 00000000400448c8 RDI: 0000000000000005 [ 261.738930][T11695] RBP: 00007f39bc6d0090 R08: 0000000000000000 R09: 0000000000000000 [ 261.738941][T11695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.738953][T11695] R13: 00007f39bba26038 R14: 00007f39bba25fa0 R15: 00007ffe1dd4ed28 [ 261.738979][T11695] [ 261.739461][T11695] ERROR: Out of memory at tomoyo_realpath_from_path. [ 261.809079][ T857] usb 7-1: new high-speed USB device number 105 using dummy_hcd [ 261.837072][ T43] audit: type=1326 audit(1794253490.165:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11696 comm="syz.6.1811" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f39bb79fb19 code=0x0 [ 261.849070][ T11] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 261.881127][T11706] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1815'. [ 261.959012][ T857] usb 7-1: Using ep0 maxpacket: 32 [ 261.962079][ T857] usb 7-1: unable to get BOS descriptor or descriptor too short [ 261.962128][ T857] usb 7-1: New USB device found: idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 261.966051][ T857] usb 7-1: string descriptor 0 read error: -22 [ 261.966163][ T857] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.982303][ T857] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 261.982347][ T857] dw2102: su3000_power_ctrl: 1, initialized 0 [ 261.982362][ T857] dvb-usb: bulk message failed: -22 (2/0) [ 261.988154][ T857] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 261.988852][ T857] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 261.989039][ T857] usb 7-1: media controller created [ 261.989053][ T857] dvb-usb: bulk message failed: -22 (6/0) [ 261.989061][ T857] dw2102: i2c transfer failed. [ 261.989076][ T857] dvb-usb: bulk message failed: -22 (6/0) [ 261.989083][ T857] dw2102: i2c transfer failed. [ 261.989089][ T857] dvb-usb: bulk message failed: -22 (6/0) [ 261.989096][ T857] dw2102: i2c transfer failed. [ 261.989102][ T857] dvb-usb: bulk message failed: -22 (6/0) [ 261.989111][ T857] dw2102: i2c transfer failed. [ 261.989121][ T857] dvb-usb: bulk message failed: -22 (6/0) [ 261.989131][ T857] dw2102: i2c transfer failed. [ 261.989140][ T857] dvb-usb: bulk message failed: -22 (6/0) [ 261.989151][ T857] dw2102: i2c transfer failed. [ 261.989158][ T857] dvb-usb: MAC address: 02:02:02:02:02:02 [ 262.008931][ T11] usb 8-1: Using ep0 maxpacket: 32 [ 262.010723][ T857] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 262.011617][ T11] usb 8-1: unable to get BOS descriptor or descriptor too short [ 262.011639][ T11] usb 8-1: New USB device found: idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 262.018325][ T11] usb 8-1: string descriptor 0 read error: -22 [ 262.018397][ T11] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.034126][ T11] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 262.034154][ T11] dw2102: su3000_power_ctrl: 1, initialized 0 [ 262.034167][ T11] dvb-usb: bulk message failed: -22 (2/0) [ 262.044605][ T9418] Bluetooth: hci1: Frame reassembly failed (-84) [ 262.047705][ T857] dvb-usb: bulk message failed: -22 (3/0) [ 262.047718][ T857] dw2102: command 0x0e transfer failed. [ 262.047725][ T857] dvb-usb: bulk message failed: -22 (3/0) [ 262.047737][ T857] dw2102: command 0x0e transfer failed. [ 262.048776][ T11] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 262.051062][ T11] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 262.051114][ T11] usb 8-1: media controller created [ 262.051133][ T11] dvb-usb: bulk message failed: -22 (6/0) [ 262.051145][ T11] dw2102: i2c transfer failed. [ 262.051156][ T11] dvb-usb: bulk message failed: -22 (6/0) [ 262.051166][ T11] dw2102: i2c transfer failed. [ 262.051176][ T11] dvb-usb: bulk message failed: -22 (6/0) [ 262.051186][ T11] dw2102: i2c transfer failed. [ 262.051196][ T11] dvb-usb: bulk message failed: -22 (6/0) [ 262.051205][ T11] dw2102: i2c transfer failed. [ 262.051215][ T11] dvb-usb: bulk message failed: -22 (6/0) [ 262.051225][ T11] dw2102: i2c transfer failed. [ 262.051235][ T11] dvb-usb: bulk message failed: -22 (6/0) [ 262.051245][ T11] dw2102: i2c transfer failed. [ 262.051252][ T11] dvb-usb: MAC address: 02:02:02:02:02:02 [ 262.084993][ T11] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 262.112074][ T11] dvb-usb: bulk message failed: -22 (3/0) [ 262.112089][ T11] dw2102: command 0x0e transfer failed. [ 262.112095][ T11] dvb-usb: bulk message failed: -22 (3/0) [ 262.112106][ T11] dw2102: command 0x0e transfer failed. [ 262.260119][ T43] audit: type=1400 audit(1794253490.595:1019): avc: denied { write } for pid=11712 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 262.298966][ C0] net_ratelimit: 504 callbacks suppressed [ 262.313987][ T43] audit: type=1400 audit(1794253490.645:1020): avc: denied { write } for pid=11715 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 262.358992][ T857] dvb-usb: bulk message failed: -22 (3/0) [ 262.359014][ T857] dw2102: command 0x0e transfer failed. [ 262.359021][ T857] dvb-usb: bulk message failed: -22 (3/0) [ 262.359031][ T857] dw2102: command 0x0e transfer failed. [ 262.359038][ T857] dvb-usb: bulk message failed: -22 (1/0) [ 262.359050][ T857] dw2102: command 0x51 transfer failed. [ 262.361887][T11691] dvb-usb: bulk message failed: -22 (4/0) [ 262.361905][T11691] dw2102: i2c transfer failed. [ 262.364827][T11693] dvb-usb: bulk message failed: -22 (4/0) [ 262.366124][T11693] dw2102: i2c transfer failed. [ 262.395085][ T857] DVB: Unable to find symbol ds3000_attach() [ 262.395090][ T857] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 262.414896][ T43] audit: type=1400 audit(1794253490.745:1021): avc: denied { write } for pid=11719 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 262.419024][ T11] dvb-usb: bulk message failed: -22 (3/0) [ 262.419041][ T11] dw2102: command 0x0e transfer failed. [ 262.419048][ T11] dvb-usb: bulk message failed: -22 (3/0) [ 262.419059][ T11] dw2102: command 0x0e transfer failed. [ 262.419065][ T11] dvb-usb: bulk message failed: -22 (1/0) [ 262.419074][ T11] dw2102: command 0x51 transfer failed. [ 262.437210][ T11] DVB: Unable to find symbol ds3000_attach() [ 262.437215][ T11] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 262.449326][ T857] rc_core: IR keymap rc-su3000 not found [ 262.449342][ T857] Registered IR keymap rc-empty [ 262.450553][ T857] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0 [ 262.452334][ T857] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0/input38 [ 262.455194][ T857] dvb-usb: schedule remote query interval to 150 msecs. [ 262.455209][ T857] dw2102: su3000_power_ctrl: 0, initialized 1 [ 262.455222][ T857] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 262.460206][ T43] audit: type=1400 audit(1794253490.795:1022): avc: denied { write } for pid=11725 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 262.463262][ T857] usb 7-1: USB disconnect, device number 105 [ 262.489882][ T11] rc_core: IR keymap rc-su3000 not found [ 262.489893][ T11] Registered IR keymap rc-empty [ 262.508624][ T11] rc rc1: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc1 [ 262.511314][ T11] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc1/input39 [ 262.543268][ T43] audit: type=1400 audit(1794253490.875:1023): avc: denied { write } for pid=11728 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 262.546417][ T11] dvb-usb: schedule remote query interval to 150 msecs. [ 262.546425][ T11] dw2102: su3000_power_ctrl: 0, initialized 1 [ 262.546431][ T11] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 262.547362][ T11] usb 8-1: USB disconnect, device number 15 [ 262.597072][ T43] audit: type=1400 audit(1794253490.925:1024): avc: denied { write } for pid=11731 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 262.631760][ T857] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 262.644255][ T11] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 262.994358][T11743] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1821'. [ 263.196099][ T5789] Bluetooth: hci0: unexpected cc 0x042d length: 41 > 7 [ 263.219259][ T43] audit: type=1400 audit(1794253491.555:1025): avc: denied { getopt } for pid=11748 comm="syz.2.1822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 263.219586][T11749] debugfs: Invalid uid '0x00000000ffffffff' [ 263.219740][T11749] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1822'. [ 263.506792][T11756] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1825'. [ 263.556145][T11760] FAULT_INJECTION: forcing a failure. [ 263.556145][T11760] name failslab, interval 1, probability 5, space 0, times 30 [ 263.556175][T11760] CPU: 0 UID: 0 PID: 11760 Comm: syz.6.1827 Tainted: G L syzkaller #0 PREEMPT(full) [ 263.556201][T11760] Tainted: [L]=SOFTLOCKUP [ 263.556208][T11760] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 263.556219][T11760] Call Trace: [ 263.556226][T11760] [ 263.556235][T11760] dump_stack_lvl+0x100/0x190 [ 263.556278][T11760] should_fail_ex.cold+0x5/0xa [ 263.556312][T11760] should_failslab+0xc2/0x120 [ 263.556337][T11760] __kvmalloc_node_noprof+0x113/0x9b0 [ 263.556360][T11760] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 263.556388][T11760] ? ip_vs_rht_alloc+0x142/0x710 [ 263.556440][T11760] ip_vs_rht_alloc+0x142/0x710 [ 263.556473][T11760] ? ip_vs_add_service+0x1659/0x2240 [ 263.556502][T11760] ip_vs_svc_table_alloc.isra.0+0x2d/0xd0 [ 263.556524][T11760] ip_vs_add_service+0x166e/0x2240 [ 263.556554][T11760] ? __ip_vs_service_find+0x4d0/0x9c0 [ 263.556578][T11760] ? find_held_lock+0x2b/0x80 [ 263.556600][T11760] ? do_ip_vs_set_ctl+0x7e4/0xc90 [ 263.556629][T11760] ? do_ip_vs_set_ctl+0xb86/0xc90 [ 263.556653][T11760] do_ip_vs_set_ctl+0xb86/0xc90 [ 263.556682][T11760] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 263.556707][T11760] ? rcu_is_watching+0x13/0xc0 [ 263.556735][T11760] ? find_held_lock+0x2b/0x80 [ 263.556755][T11760] ? nf_sockopt_find.isra.0+0x222/0x290 [ 263.556801][T11760] ? nf_sockopt_find.isra.0+0x222/0x290 [ 263.556845][T11760] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 263.556886][T11760] ? nf_setsockopt+0x8d/0xf0 [ 263.556912][T11760] nf_setsockopt+0x8d/0xf0 [ 263.556944][T11760] ip_setsockopt+0xcb/0xf0 [ 263.556973][T11760] tcp_setsockopt+0xa7/0x100 [ 263.557001][T11760] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 263.557031][T11760] do_sock_setsockopt+0xf3/0x1d0 [ 263.557061][T11760] __sys_setsockopt+0x195/0x220 [ 263.557090][T11760] __x64_sys_setsockopt+0xbd/0x160 [ 263.557111][T11760] ? do_syscall_64+0xae/0x7b0 [ 263.557133][T11760] ? lockdep_hardirqs_on+0x7d/0x110 [ 263.557155][T11760] do_syscall_64+0x123/0x7b0 [ 263.557180][T11760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.557200][T11760] RIP: 0033:0x7f39bb79fb19 [ 263.557218][T11760] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.557234][T11760] RSP: 002b:00007f39bc6d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 263.557263][T11760] RAX: ffffffffffffffda RBX: 00007f39bba25fa0 RCX: 00007f39bb79fb19 [ 263.557279][T11760] RDX: 0000000000000482 RSI: 0000000000000000 RDI: 0000000000000003 [ 263.557292][T11760] RBP: 00007f39bb837b70 R08: 000000000000002c R09: 0000000000000000 [ 263.557306][T11760] R10: 00002000000006c0 R11: 0000000000000246 R12: 0000000000000000 [ 263.557320][T11760] R13: 00007f39bba26038 R14: 00007f39bba25fa0 R15: 00007ffe1dd4ed28 [ 263.557347][T11760] [ 263.858334][T11771] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 263.898048][T11766] rxe_eth0 speed is unknown, defaulting to 1000 [ 263.970219][T11777] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1833'. [ 263.970242][T11777] nbd: couldn't find a device at index 23552 [ 264.066385][T11783] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1835'. [ 264.069070][ T5144] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 264.101366][T11785] FAULT_INJECTION: forcing a failure. [ 264.101366][T11785] name failslab, interval 1, probability 5, space 0, times 29 [ 264.101384][T11785] CPU: 1 UID: 0 PID: 11785 Comm: syz.3.1836 Tainted: G L syzkaller #0 PREEMPT(full) [ 264.101399][T11785] Tainted: [L]=SOFTLOCKUP [ 264.101403][T11785] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 264.101412][T11785] Call Trace: [ 264.101416][T11785] [ 264.101421][T11785] dump_stack_lvl+0x100/0x190 [ 264.101442][T11785] should_fail_ex.cold+0x5/0xa [ 264.101459][T11785] should_failslab+0xc2/0x120 [ 264.101473][T11785] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 264.101490][T11785] ? __alloc_skb+0x5b7/0x710 [ 264.101504][T11785] ? __alloc_skb+0x140/0x710 [ 264.101518][T11785] __alloc_skb+0x140/0x710 [ 264.101529][T11785] ? __alloc_skb+0x5b7/0x710 [ 264.101541][T11785] ? __pfx___alloc_skb+0x10/0x10 [ 264.101557][T11785] netlink_alloc_large_skb+0x69/0x150 [ 264.101589][T11785] netlink_sendmsg+0x755/0x10c0 [ 264.101606][T11785] ? __pfx_netlink_sendmsg+0x10/0x10 [ 264.101623][T11785] ? selinux_socket_sendmsg+0x198/0x2f0 [ 264.101642][T11785] ? ____sys_sendmsg+0xa99/0xc30 [ 264.101658][T11785] ____sys_sendmsg+0xa99/0xc30 [ 264.101672][T11785] ? __pfx_netlink_sendmsg+0x10/0x10 [ 264.101688][T11785] ? __pfx_____sys_sendmsg+0x10/0x10 [ 264.101707][T11785] ? lock_acquire+0x1d1/0x380 [ 264.101721][T11785] ? get_pid_task+0x2a/0x250 [ 264.101734][T11785] ___sys_sendmsg+0x190/0x1e0 [ 264.101751][T11785] ? __pfx____sys_sendmsg+0x10/0x10 [ 264.101767][T11785] ? get_pid_task+0x106/0x250 [ 264.101782][T11785] ? find_held_lock+0x2b/0x80 [ 264.101806][T11785] __sys_sendmsg+0x160/0x210 [ 264.101820][T11785] ? __pfx___sys_sendmsg+0x10/0x10 [ 264.101840][T11785] do_syscall_64+0x123/0x7b0 [ 264.101856][T11785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.101868][T11785] RIP: 0033:0x7fbe12d9fb19 [ 264.101877][T11785] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 264.101888][T11785] RSP: 002b:00007fbe13bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 264.101899][T11785] RAX: ffffffffffffffda RBX: 00007fbe13025fa0 RCX: 00007fbe12d9fb19 [ 264.101906][T11785] RDX: 0000000000000004 RSI: 0000200000000140 RDI: 0000000000000004 [ 264.101913][T11785] RBP: 00007fbe13bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 264.101919][T11785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.101925][T11785] R13: 00007fbe13026038 R14: 00007fbe13025fa0 R15: 00007ffef8017928 [ 264.101939][T11785] [ 264.150885][T11787] FAULT_INJECTION: forcing a failure. [ 264.150885][T11787] name failslab, interval 1, probability 5, space 0, times 28 [ 264.150907][T11787] CPU: 0 UID: 0 PID: 11787 Comm: syz.4.1837 Tainted: G L syzkaller #0 PREEMPT(full) [ 264.150923][T11787] Tainted: [L]=SOFTLOCKUP [ 264.150927][T11787] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 264.150934][T11787] Call Trace: [ 264.150938][T11787] [ 264.150943][T11787] dump_stack_lvl+0x100/0x190 [ 264.150967][T11787] should_fail_ex.cold+0x5/0xa [ 264.150985][T11787] should_failslab+0xc2/0x120 [ 264.150999][T11787] __kmalloc_noprof+0xfc/0x840 [ 264.151018][T11787] ? tomoyo_encode2+0xfb/0x3c0 [ 264.151034][T11787] tomoyo_encode2+0xfb/0x3c0 [ 264.151048][T11787] tomoyo_encode+0x29/0x50 [ 264.151059][T11787] tomoyo_realpath_from_path+0x18c/0x690 [ 264.151075][T11787] tomoyo_path_number_perm+0x23c/0x580 [ 264.151092][T11787] ? tomoyo_path_number_perm+0x22e/0x580 [ 264.151109][T11787] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 264.151131][T11787] ? __lock_acquire+0x5c0/0x1f40 [ 264.151155][T11787] ? __fget_files+0x34/0x3d0 [ 264.151169][T11787] ? find_held_lock+0x2b/0x80 [ 264.151181][T11787] ? hook_file_ioctl_common+0x140/0x440 [ 264.151201][T11787] ? __fget_files+0x21f/0x3d0 [ 264.151218][T11787] security_file_ioctl+0xd3/0x230 [ 264.151237][T11787] __x64_sys_ioctl+0xb7/0x210 [ 264.151251][T11787] do_syscall_64+0x123/0x7b0 [ 264.151266][T11787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.151277][T11787] RIP: 0033:0x7f6f6779fb19 [ 264.151287][T11787] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 264.151297][T11787] RSP: 002b:00007f6f68603028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 264.151308][T11787] RAX: ffffffffffffffda RBX: 00007f6f67a25fa0 RCX: 00007f6f6779fb19 [ 264.151315][T11787] RDX: 0000000000000000 RSI: 0000000080845663 RDI: 0000000000000003 [ 264.151321][T11787] RBP: 00007f6f68603090 R08: 0000000000000000 R09: 0000000000000000 [ 264.151327][T11787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.151333][T11787] R13: 00007f6f67a26038 R14: 00007f6f67a25fa0 R15: 00007ffecc500f18 [ 264.151348][T11787] [ 264.151359][T11787] ERROR: Out of memory at tomoyo_realpath_from_path. [ 264.312230][T11807] netlink: 'syz.3.1844': attribute type 3 has an invalid length. [ 264.471131][T11820] FAULT_INJECTION: forcing a failure. [ 264.471131][T11820] name failslab, interval 1, probability 5, space 0, times 27 [ 264.471152][T11820] CPU: 2 UID: 0 PID: 11820 Comm: syz.3.1849 Tainted: G L syzkaller #0 PREEMPT(full) [ 264.471167][T11820] Tainted: [L]=SOFTLOCKUP [ 264.471171][T11820] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 264.471177][T11820] Call Trace: [ 264.471181][T11820] [ 264.471187][T11820] dump_stack_lvl+0x100/0x190 [ 264.471210][T11820] should_fail_ex.cold+0x5/0xa [ 264.471227][T11820] should_failslab+0xc2/0x120 [ 264.471240][T11820] __kmalloc_noprof+0xfc/0x840 [ 264.471257][T11820] ? tomoyo_encode2+0xfb/0x3c0 [ 264.471272][T11820] tomoyo_encode2+0xfb/0x3c0 [ 264.471285][T11820] tomoyo_encode+0x29/0x50 [ 264.471296][T11820] tomoyo_realpath_from_path+0x18c/0x690 [ 264.471311][T11820] tomoyo_path_number_perm+0x23c/0x580 [ 264.471327][T11820] ? tomoyo_path_number_perm+0x22e/0x580 [ 264.471344][T11820] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 264.471367][T11820] ? __lock_acquire+0x5c0/0x1f40 [ 264.471389][T11820] ? __fget_files+0x34/0x3d0 [ 264.471403][T11820] ? find_held_lock+0x2b/0x80 [ 264.471414][T11820] ? hook_file_ioctl_common+0x140/0x440 [ 264.471431][T11820] ? __fget_files+0x21f/0x3d0 [ 264.471447][T11820] security_file_ioctl+0xd3/0x230 [ 264.471464][T11820] __x64_sys_ioctl+0xb7/0x210 [ 264.471476][T11820] do_syscall_64+0x123/0x7b0 [ 264.471491][T11820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.471502][T11820] RIP: 0033:0x7fbe12d9fb19 [ 264.471512][T11820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 264.471522][T11820] RSP: 002b:00007fbe13bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 264.471533][T11820] RAX: ffffffffffffffda RBX: 00007fbe13025fa0 RCX: 00007fbe12d9fb19 [ 264.471539][T11820] RDX: 00002000000007c0 RSI: 00000000c0386105 RDI: 0000000000000003 [ 264.471546][T11820] RBP: 00007fbe13bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 264.471552][T11820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.471558][T11820] R13: 00007fbe13026038 R14: 00007fbe13025fa0 R15: 00007ffef8017928 [ 264.471572][T11820] [ 264.471581][T11820] ERROR: Out of memory at tomoyo_realpath_from_path. [ 264.630864][T11832] device-mapper: raid: Choosing default region size of 4MiB [ 264.631375][T11832] device-mapper: raid: Device 0 specified for rebuild; clearing superblock [ 264.631388][T11832] device-mapper: raid: Superblocks created for new raid set [ 264.704030][T11832] md/raid:mdX: not clean -- starting background reconstruction [ 264.704733][T11832] md/raid:mdX: device ram7 operational as raid disk 1 [ 264.719478][T11832] md/raid:mdX: device size is smaller than one chunk [ 264.852484][T11843] FAULT_INJECTION: forcing a failure. [ 264.852484][T11843] name failslab, interval 1, probability 5, space 0, times 26 [ 264.852513][T11843] CPU: 0 UID: 0 PID: 11843 Comm: syz.2.1855 Tainted: G L syzkaller #0 PREEMPT(full) [ 264.852535][T11843] Tainted: [L]=SOFTLOCKUP [ 264.852540][T11843] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 264.852550][T11843] Call Trace: [ 264.852556][T11843] [ 264.852563][T11843] dump_stack_lvl+0x100/0x190 [ 264.852593][T11843] should_fail_ex.cold+0x5/0xa [ 264.852618][T11843] should_failslab+0xc2/0x120 [ 264.852638][T11843] __kmalloc_noprof+0xfc/0x840 [ 264.852662][T11843] ? tomoyo_encode2+0xfb/0x3c0 [ 264.852683][T11843] tomoyo_encode2+0xfb/0x3c0 [ 264.852704][T11843] tomoyo_encode+0x29/0x50 [ 264.852719][T11843] tomoyo_realpath_from_path+0x18c/0x690 [ 264.852743][T11843] tomoyo_path_number_perm+0x23c/0x580 [ 264.852765][T11843] ? tomoyo_path_number_perm+0x22e/0x580 [ 264.852789][T11843] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 264.852821][T11843] ? __lock_acquire+0x5c0/0x1f40 [ 264.852855][T11843] ? __fget_files+0x34/0x3d0 [ 264.852875][T11843] ? find_held_lock+0x2b/0x80 [ 264.852891][T11843] ? hook_file_ioctl_common+0x140/0x440 [ 264.852917][T11843] ? __fget_files+0x21f/0x3d0 [ 264.852940][T11843] security_file_ioctl+0xd3/0x230 [ 264.852965][T11843] __x64_sys_ioctl+0xb7/0x210 [ 264.852985][T11843] do_syscall_64+0x123/0x7b0 [ 264.853007][T11843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.853024][T11843] RIP: 0033:0x7fbe8479fb19 [ 264.853038][T11843] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 264.853053][T11843] RSP: 002b:00007fbe85596028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 264.853070][T11843] RAX: ffffffffffffffda RBX: 00007fbe84a25fa0 RCX: 00007fbe8479fb19 [ 264.853081][T11843] RDX: 0000200000000000 RSI: 00000000c138fd09 RDI: 0000000000000003 [ 264.853091][T11843] RBP: 00007fbe85596090 R08: 0000000000000000 R09: 0000000000000000 [ 264.853100][T11843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.853110][T11843] R13: 00007fbe84a26038 R14: 00007fbe84a25fa0 R15: 00007ffe12808408 [ 264.853133][T11843] [ 264.853148][T11843] ERROR: Out of memory at tomoyo_realpath_from_path. [ 264.853576][T11843] device-mapper: raid: Choosing default region size of 4MiB [ 264.853958][T11843] device-mapper: raid: Device 0 specified for rebuild; clearing superblock [ 264.853968][T11843] device-mapper: raid: Superblocks created for new raid set [ 264.873930][T11832] md/raid:mdX: failed to run raid set. [ 264.873939][T11832] md: pers->run() failed ... [ 264.874734][T11832] device-mapper: table: 248:11: raid: Failed to run raid array (-EINVAL) [ 264.874752][T11832] device-mapper: ioctl: error adding target to table [ 264.906818][T11843] md/raid:mdX: not clean -- starting background reconstruction [ 264.907063][T11843] md/raid:mdX: device ram5 operational as raid disk 1 [ 264.928579][T11843] md/raid:mdX: device size is smaller than one chunk [ 264.978555][T11850] fuse: Unknown parameter 'root' [ 265.120628][T11843] md/raid:mdX: failed to run raid set. [ 265.120636][T11843] md: pers->run() failed ... [ 265.121317][T11843] device-mapper: table: 248:12: raid: Failed to run raid array (-EINVAL) [ 265.121336][T11843] device-mapper: ioctl: error adding target to table [ 265.295954][T11873] fuse: Unknown parameter '@än‚€¬cû' [ 265.892823][T11887] FAULT_INJECTION: forcing a failure. [ 265.892823][T11887] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 265.892854][T11887] CPU: 1 UID: 0 PID: 11887 Comm: syz.3.1862 Tainted: G L syzkaller #0 PREEMPT(full) [ 265.892878][T11887] Tainted: [L]=SOFTLOCKUP [ 265.892884][T11887] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 265.892894][T11887] Call Trace: [ 265.892900][T11887] [ 265.892907][T11887] dump_stack_lvl+0x100/0x190 [ 265.892940][T11887] should_fail_ex.cold+0x5/0xa [ 265.892968][T11887] _copy_from_user+0x2e/0xd0 [ 265.893013][T11887] memdup_user_nul+0x6c/0x120 [ 265.893046][T11887] nvmf_dev_write+0x6d/0xb60 [ 265.893081][T11887] ? rw_verify_area+0xce/0x6d0 [ 265.893112][T11887] vfs_write+0x2aa/0x1040 [ 265.893130][T11887] ? __pfx_nvmf_dev_write+0x10/0x10 [ 265.893143][T11887] ? lock_acquire+0x1d1/0x380 [ 265.893164][T11887] ? __fget_files+0x34/0x3d0 [ 265.893186][T11887] ? __pfx_vfs_write+0x10/0x10 [ 265.893203][T11887] ? find_held_lock+0x2b/0x80 [ 265.893219][T11887] ? __fget_files+0x215/0x3d0 [ 265.893238][T11887] ? __fget_files+0x215/0x3d0 [ 265.893264][T11887] ? __fget_files+0x21f/0x3d0 [ 265.893310][T11887] ksys_write+0x12a/0x250 [ 265.893336][T11887] ? __pfx_ksys_write+0x10/0x10 [ 265.893362][T11887] do_syscall_64+0x123/0x7b0 [ 265.893388][T11887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.893407][T11887] RIP: 0033:0x7fbe12d9fb19 [ 265.893423][T11887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 265.893439][T11887] RSP: 002b:00007fbe13bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 265.893459][T11887] RAX: ffffffffffffffda RBX: 00007fbe13025fa0 RCX: 00007fbe12d9fb19 [ 265.893471][T11887] RDX: 0000000000000070 RSI: 0000200000000180 RDI: 0000000000000003 [ 265.893482][T11887] RBP: 00007fbe13bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 265.893492][T11887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.893504][T11887] R13: 00007fbe13026038 R14: 00007fbe13025fa0 R15: 00007ffef8017928 [ 265.893530][T11887] [ 266.047531][T11896] FAULT_INJECTION: forcing a failure. [ 266.047531][T11896] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 266.047561][T11896] CPU: 1 UID: 0 PID: 11896 Comm: syz.2.1866 Tainted: G L syzkaller #0 PREEMPT(full) [ 266.047585][T11896] Tainted: [L]=SOFTLOCKUP [ 266.047591][T11896] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 266.047602][T11896] Call Trace: [ 266.047608][T11896] [ 266.047616][T11896] dump_stack_lvl+0x100/0x190 [ 266.047650][T11896] should_fail_ex.cold+0x5/0xa [ 266.047675][T11896] should_fail_alloc_page+0xeb/0x140 [ 266.047697][T11896] prepare_alloc_pages+0x1f0/0x5b0 [ 266.047719][T11896] ? process_measurement+0x1f4/0x2360 [ 266.047741][T11896] __alloc_frozen_pages_noprof+0x1ae/0x31e0 [ 266.047767][T11896] ? __lock_acquire+0x5c0/0x1f40 [ 266.047796][T11896] ? __lock_acquire+0x5c0/0x1f40 [ 266.047819][T11896] ? lock_acquire+0x1d1/0x380 [ 266.047841][T11896] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 266.047870][T11896] ? lock_acquire+0x1d1/0x380 [ 266.047891][T11896] ? is_bpf_text_address+0x25/0x1a0 [ 266.047934][T11896] ? find_held_lock+0x2b/0x80 [ 266.047950][T11896] ? is_bpf_text_address+0x8a/0x1a0 [ 266.047969][T11896] ? is_bpf_text_address+0x8a/0x1a0 [ 266.047988][T11896] ? bpf_ksym_find+0x128/0x1c0 [ 266.048009][T11896] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 266.048034][T11896] ? fast_dput+0x494/0x6f0 [ 266.048050][T11896] ? __kernel_text_address+0xd/0x30 [ 266.048069][T11896] ? unwind_get_return_address+0x59/0xa0 [ 266.048087][T11896] ? arch_stack_walk+0xa6/0xf0 [ 266.048113][T11896] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 266.048143][T11896] ? policy_nodemask+0xed/0x5e0 [ 266.048175][T11896] alloc_pages_mpol+0x201/0x560 [ 266.048199][T11896] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 266.048222][T11896] ? _kstrtoull+0x144/0x200 [ 266.048249][T11896] ? __pfx__kstrtoull+0x10/0x10 [ 266.048278][T11896] folio_alloc_mpol_noprof+0x36/0x260 [ 266.048305][T11896] vma_alloc_folio_noprof+0xed/0x1d0 [ 266.048327][T11896] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 266.048360][T11896] do_anonymous_page+0xac9/0x2050 [ 266.048386][T11896] ? get_pid_task+0x2a/0x250 [ 266.048408][T11896] ? __pfx_do_anonymous_page+0x10/0x10 [ 266.048428][T11896] ? rcu_read_unlock+0x2d/0xb0 [ 266.048448][T11896] ? rcu_read_unlock+0x2d/0xb0 [ 266.048475][T11896] __handle_mm_fault+0x1eeb/0x2f40 [ 266.048501][T11896] ? lock_vma_under_rcu+0x11d/0x590 [ 266.048521][T11896] ? __pfx___handle_mm_fault+0x10/0x10 [ 266.048547][T11896] ? lock_vma_under_rcu+0x17c/0x590 [ 266.048582][T11896] handle_mm_fault+0x363/0xa30 [ 266.048609][T11896] do_user_addr_fault+0x59c/0x12f0 [ 266.048644][T11896] exc_page_fault+0x6f/0xd0 [ 266.048667][T11896] asm_exc_page_fault+0x26/0x30 [ 266.048681][T11896] RIP: 0033:0x7fbe84666ec6 [ 266.048694][T11896] Code: fc ff ff 90 41 57 31 c0 41 56 49 89 fe 48 8d 3d ba 17 1d 00 41 55 49 89 d5 41 54 49 89 f4 48 89 d6 55 53 48 81 ec 88 20 00 00 <48> 89 0c 24 4c 89 44 24 08 e8 cc c7 fe ff 4d 85 ed 0f 84 2b 0a 00 [ 266.048710][T11896] RSP: 002b:00007fbe85593f60 EFLAGS: 00010206 [ 266.048724][T11896] RAX: 0000000000000000 RBX: 00007fbe84a25fa0 RCX: 0000000000000000 [ 266.048734][T11896] RDX: 00002000000001c0 RSI: 00002000000001c0 RDI: 00007fbe8483866a [ 266.048744][T11896] RBP: 00007fbe85596090 R08: 00007fbe84653a30 R09: 0000000000000000 [ 266.048753][T11896] R10: 0000000000000000 R11: 00002000000001c0 R12: fffffffffffffe0e [ 266.048762][T11896] R13: 00002000000001c0 R14: 0000000000000000 R15: 00007ffe12808408 [ 266.048786][T11896] [ 266.054257][T11896] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 266.057929][T11898] __nla_validate_parse: 3 callbacks suppressed [ 266.057938][T11898] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1867'. [ 266.059204][T11898] netlink: 'syz.4.1867': attribute type 4 has an invalid length. [ 266.060538][T11898] FAULT_INJECTION: forcing a failure. [ 266.060538][T11898] name failslab, interval 1, probability 5, space 0, times 25 [ 266.060555][T11898] CPU: 2 UID: 0 PID: 11898 Comm: syz.4.1867 Tainted: G L syzkaller #0 PREEMPT(full) [ 266.060570][T11898] Tainted: [L]=SOFTLOCKUP [ 266.060574][T11898] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 266.060580][T11898] Call Trace: [ 266.060584][T11898] [ 266.060589][T11898] dump_stack_lvl+0x100/0x190 [ 266.060610][T11898] should_fail_ex.cold+0x5/0xa [ 266.060628][T11898] should_failslab+0xc2/0x120 [ 266.060642][T11898] __kmalloc_cache_node_noprof+0x94/0x710 [ 266.060656][T11898] ? rcu_is_watching+0x13/0xc0 [ 266.060669][T11898] ? __get_vm_area_node+0x124/0x350 [ 266.060683][T11898] __get_vm_area_node+0x124/0x350 [ 266.060695][T11898] __vmalloc_node_range_noprof+0x2ad/0x1440 [ 266.060708][T11898] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 266.060721][T11898] ? rcu_is_watching+0x13/0xc0 [ 266.060734][T11898] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 266.060749][T11898] ? lockdep_hardirqs_on+0x7d/0x110 [ 266.060764][T11898] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 266.060779][T11898] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 266.060792][T11898] ? __lock_acquire+0x5c0/0x1f40 [ 266.060806][T11898] ? look_up_lock_class+0x55/0x120 [ 266.060819][T11898] ? register_lock_class+0x3f/0x7b0 [ 266.060835][T11898] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 266.060847][T11898] __vmalloc_node_noprof+0xad/0xf0 [ 266.060858][T11898] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 266.060872][T11898] __vmalloc_noprof+0xa3/0x120 [ 266.060903][T11898] ? __pfx___vmalloc_noprof+0x10/0x10 [ 266.060924][T11898] bpf_prog_alloc_no_stats+0x59/0x690 [ 266.060940][T11898] bpf_prog_alloc+0x3b/0x200 [ 266.060954][T11898] __get_filter+0x112/0x2c0 [ 266.060973][T11898] sk_attach_filter+0x1c/0x150 [ 266.060985][T11898] sk_setsockopt+0x3bb9/0x5fc0 [ 266.061003][T11898] ? __pfx_sk_setsockopt+0x10/0x10 [ 266.061017][T11898] ? futex_wait+0x11e/0x370 [ 266.061035][T11898] ? sock_has_perm+0x254/0x320 [ 266.061051][T11898] ? __pfx_sock_has_perm+0x10/0x10 [ 266.061066][T11898] ? selinux_netlbl_socket_setsockopt+0x134/0x470 [ 266.061078][T11898] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 266.061093][T11898] unix_setsockopt+0xf9/0x340 [ 266.061124][T11898] ? __pfx_unix_setsockopt+0x10/0x10 [ 266.061141][T11898] ? selinux_socket_setsockopt+0x6a/0x80 [ 266.061155][T11898] ? __pfx_unix_setsockopt+0x10/0x10 [ 266.061173][T11898] do_sock_setsockopt+0xf3/0x1d0 [ 266.061191][T11898] __sys_setsockopt+0x195/0x220 [ 266.061207][T11898] __x64_sys_setsockopt+0xbd/0x160 [ 266.061220][T11898] ? do_syscall_64+0xae/0x7b0 [ 266.061233][T11898] ? lockdep_hardirqs_on+0x7d/0x110 [ 266.061245][T11898] do_syscall_64+0x123/0x7b0 [ 266.061258][T11898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.061270][T11898] RIP: 0033:0x7f6f6779fb19 [ 266.061279][T11898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 266.061289][T11898] RSP: 002b:00007f6f68603028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 266.061306][T11898] RAX: ffffffffffffffda RBX: 00007f6f67a25fa0 RCX: 00007f6f6779fb19 [ 266.061313][T11898] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000009 [ 266.061320][T11898] RBP: 00007f6f67837b70 R08: 0000000000000010 R09: 0000000000000000 [ 266.061327][T11898] R10: 00002000000005c0 R11: 0000000000000246 R12: 0000000000000000 [ 266.061333][T11898] R13: 00007f6f67a26038 R14: 00007f6f67a25fa0 R15: 00007ffecc500f18 [ 266.061348][T11898] [ 266.062514][T11898] syz.4.1867: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 266.062591][T11898] CPU: 2 UID: 0 PID: 11898 Comm: syz.4.1867 Tainted: G L syzkaller #0 PREEMPT(full) [ 266.062640][T11898] Tainted: [L]=SOFTLOCKUP [ 266.062647][T11898] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 266.062656][T11898] Call Trace: [ 266.062662][T11898] [ 266.062669][T11898] dump_stack_lvl+0x100/0x190 [ 266.062701][T11898] warn_alloc.cold+0x9e/0xb2 [ 266.062721][T11898] ? __pfx_warn_alloc+0x10/0x10 [ 266.062746][T11898] ? __kasan_kmalloc+0x8a/0xb0 [ 266.062779][T11898] ? __get_vm_area_node+0x22b/0x350 [ 266.062805][T11898] __vmalloc_node_range_noprof+0xdc6/0x1440 [ 266.062829][T11898] ? rcu_is_watching+0x13/0xc0 [ 266.062850][T11898] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 266.062879][T11898] ? lockdep_hardirqs_on+0x7d/0x110 [ 266.062904][T11898] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 266.062934][T11898] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 266.062957][T11898] ? __lock_acquire+0x5c0/0x1f40 [ 266.062983][T11898] ? look_up_lock_class+0x55/0x120 [ 266.063006][T11898] ? register_lock_class+0x3f/0x7b0 [ 266.063035][T11898] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 266.063056][T11898] __vmalloc_node_noprof+0xad/0xf0 [ 266.063077][T11898] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 266.063103][T11898] __vmalloc_noprof+0xa3/0x120 [ 266.063125][T11898] ? __pfx___vmalloc_noprof+0x10/0x10 [ 266.063155][T11898] bpf_prog_alloc_no_stats+0x59/0x690 [ 266.063181][T11898] bpf_prog_alloc+0x3b/0x200 [ 266.063205][T11898] __get_filter+0x112/0x2c0 [ 266.063234][T11898] sk_attach_filter+0x1c/0x150 [ 266.063254][T11898] sk_setsockopt+0x3bb9/0x5fc0 [ 266.063285][T11898] ? __pfx_sk_setsockopt+0x10/0x10 [ 266.063321][T11898] ? futex_wait+0x11e/0x370 [ 266.063351][T11898] ? sock_has_perm+0x254/0x320 [ 266.063378][T11898] ? __pfx_sock_has_perm+0x10/0x10 [ 266.063406][T11898] ? selinux_netlbl_socket_setsockopt+0x134/0x470 [ 266.063428][T11898] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 266.063455][T11898] unix_setsockopt+0xf9/0x340 [ 266.063486][T11898] ? __pfx_unix_setsockopt+0x10/0x10 [ 266.063515][T11898] ? selinux_socket_setsockopt+0x6a/0x80 [ 266.063556][T11898] ? __pfx_unix_setsockopt+0x10/0x10 [ 266.063589][T11898] do_sock_setsockopt+0xf3/0x1d0 [ 266.063622][T11898] __sys_setsockopt+0x195/0x220 [ 266.063651][T11898] __x64_sys_setsockopt+0xbd/0x160 [ 266.063672][T11898] ? do_syscall_64+0xae/0x7b0 [ 266.063693][T11898] ? lockdep_hardirqs_on+0x7d/0x110 [ 266.063715][T11898] do_syscall_64+0x123/0x7b0 [ 266.063740][T11898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.063759][T11898] RIP: 0033:0x7f6f6779fb19 [ 266.063773][T11898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 266.063791][T11898] RSP: 002b:00007f6f68603028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 266.063809][T11898] RAX: ffffffffffffffda RBX: 00007f6f67a25fa0 RCX: 00007f6f6779fb19 [ 266.063822][T11898] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000009 [ 266.063834][T11898] RBP: 00007f6f67837b70 R08: 0000000000000010 R09: 0000000000000000 [ 266.063846][T11898] R10: 00002000000005c0 R11: 0000000000000246 R12: 0000000000000000 [ 266.063858][T11898] R13: 00007f6f67a26038 R14: 00007f6f67a25fa0 R15: 00007ffecc500f18 [ 266.063885][T11898] [ 266.063939][T11898] Mem-Info: [ 266.063949][T11898] active_anon:9195 inactive_anon:2 isolated_anon:0 [ 266.063949][T11898] active_file:1098 inactive_file:65391 isolated_file:0 [ 266.063949][T11898] unevictable:1000 dirty:498 writeback:0 [ 266.063949][T11898] slab_reclaimable:9548 slab_unreclaimable:87875 [ 266.063949][T11898] mapped:25272 shmem:1564 pagetables:3794 [ 266.063949][T11898] sec_pagetables:303 bounce:0 [ 266.063949][T11898] kernel_misc_reclaimable:0 [ 266.063949][T11898] free:375565 free_pcp:19068 free_cma:0 [ 266.063994][T11898] Node 0 active_anon:36400kB inactive_anon:8kB active_file:4392kB inactive_file:257356kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:80608kB dirty:1992kB writeback:0kB shmem:4252kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:18368kB pagetables:5684kB sec_pagetables:1200kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 266.064039][T11898] Node 1 active_anon:380kB inactive_anon:0kB active_file:0kB inactive_file:4208kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:20480kB dirty:0kB writeback:0kB shmem:2004kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:352kB pagetables:9492kB sec_pagetables:12kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 266.064084][T11898] Node 0 DMA free:12048kB boost:0kB min:356kB low:444kB high:532kB reserved_highatomic:0kB free_highatomic:0kB active_anon:116kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:196kB local_pcp:0kB free_cma:0kB [ 266.064133][T11898] lowmem_reserve[]: 0 1201 1201 1201 1201 [ 266.064164][T11898] Node 0 DMA32 free:61992kB boost:0kB min:28708kB low:35884kB high:43060kB reserved_highatomic:0kB free_highatomic:0kB active_anon:36284kB inactive_anon:8kB active_file:4392kB inactive_file:257348kB unevictable:2000kB writepending:1992kB zspages:0kB present:2080628kB managed:1230580kB mlocked:0kB bounce:0kB free_pcp:42348kB local_pcp:7896kB free_cma:0kB [ 266.064214][T11898] lowmem_reserve[]: 0 0 0 0 0 [ 266.064243][T11898] Node 1 Normal free:1428220kB boost:0kB min:38512kB low:48140kB high:57768kB reserved_highatomic:0kB free_highatomic:0kB active_anon:380kB inactive_anon:0kB active_file:0kB inactive_file:4208kB unevictable:2000kB writepending:0kB zspages:0kB present:1966080kB managed:1650808kB mlocked:0kB bounce:0kB free_pcp:33728kB local_pcp:11728kB free_cma:0kB [ 266.064300][T11898] lowmem_reserve[]: 0 0 0 0 0 [ 266.064331][T11898] Node 0 DMA: 44*4kB (UM) 58*8kB (UM) 61*16kB (UM) 30*32kB (U) 22*64kB (UM) 15*128kB (UM) 8*256kB (UM) 2*512kB (M) 3*1024kB (UM) 0*2048kB 0*4096kB = 12048kB [ 266.064491][T11898] Node 0 DMA32: 874*4kB (UM) 204*8kB (UM) 150*16kB (UME) 121*32kB (UME) 130*64kB (UME) 78*128kB (UME) 34*256kB (UME) 16*512kB (UM) 5*1024kB (M) 3*2048kB (UM) 1*4096kB (U) = 61960kB [ 266.064627][T11898] Node 1 Normal: 254*4kB (UM) 227*8kB (UME) 165*16kB (UME) 237*32kB (UM) 288*64kB (UME) 292*128kB (UME) 250*256kB (UME) 240*512kB (UME) 185*1024kB (UM) 16*2048kB (UME) 232*4096kB (UM) = 1428224kB [ 266.064727][T11898] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 266.064736][T11898] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 266.064744][T11898] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 266.064751][T11898] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 266.064759][T11898] 68049 total pagecache pages [ 266.064763][T11898] 0 pages in swap cache [ 266.064766][T11898] Free swap = 124996kB [ 266.064770][T11898] Total swap = 124996kB [ 266.064774][T11898] 1015675 pages RAM [ 266.064777][T11898] 0 pages HighMem/MovableOnly [ 266.064781][T11898] 291488 pages reserved [ 266.064784][T11898] 0 pages cma reserved [ 266.300943][ T5859] usb 9-1: new high-speed USB device number 66 using dummy_hcd [ 266.309138][ T8769] usb 7-1: new high-speed USB device number 106 using dummy_hcd [ 266.469487][ T5859] usb 9-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00 [ 266.469517][ T5859] usb 9-1: too many configurations: 181, using maximum allowed: 8 [ 266.470849][ T5859] usb 9-1: config index 0 descriptor too short (asked for 9, got 0) [ 266.470866][ T5859] usb 9-1: can't read configurations, error -22 [ 266.493221][ T8769] usb 7-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00 [ 266.493251][ T8769] usb 7-1: too many configurations: 181, using maximum allowed: 8 [ 266.501419][ T8769] usb 7-1: config index 0 descriptor too short (asked for 9, got 0) [ 266.501442][ T8769] usb 7-1: can't read configurations, error -22 [ 266.599083][ T5859] usb 9-1: new high-speed USB device number 67 using dummy_hcd [ 266.638979][ T8769] usb 7-1: new high-speed USB device number 107 using dummy_hcd [ 266.749497][ T5859] usb 9-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00 [ 266.749521][ T5859] usb 9-1: too many configurations: 181, using maximum allowed: 8 [ 266.751008][ T5859] usb 9-1: config index 0 descriptor too short (asked for 9, got 0) [ 266.751026][ T5859] usb 9-1: can't read configurations, error -22 [ 266.751293][ T5859] usb usb9-port1: attempt power cycle [ 266.799472][ T8769] usb 7-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00 [ 266.799493][ T8769] usb 7-1: too many configurations: 181, using maximum allowed: 8 [ 266.800737][ T8769] usb 7-1: config index 0 descriptor too short (asked for 9, got 0) [ 266.800753][ T8769] usb 7-1: can't read configurations, error -22 [ 266.801039][ T8769] usb usb7-port1: attempt power cycle [ 266.875567][T11905] FAULT_INJECTION: forcing a failure. [ 266.875567][T11905] name failslab, interval 1, probability 5, space 0, times 24 [ 266.875635][T11905] CPU: 3 UID: 0 PID: 11905 Comm: syz.6.1870 Tainted: G L syzkaller #0 PREEMPT(full) [ 266.875658][T11905] Tainted: [L]=SOFTLOCKUP [ 266.875664][T11905] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 266.875674][T11905] Call Trace: [ 266.875679][T11905] [ 266.875684][T11905] dump_stack_lvl+0x100/0x190 [ 266.875715][T11905] should_fail_ex.cold+0x5/0xa [ 266.875742][T11905] should_failslab+0xc2/0x120 [ 266.875762][T11905] kmem_cache_alloc_noprof+0x92/0x6a0 [ 266.875788][T11905] ? mas_preallocate+0xc22/0xee0 [ 266.875812][T11905] mas_preallocate+0xc22/0xee0 [ 266.875837][T11905] ? __pfx_mas_preallocate+0x10/0x10 [ 266.875868][T11905] ? anon_vma_name+0x5a/0x250 [ 266.875889][T11905] __split_vma+0x447/0xce0 [ 266.875912][T11905] ? __pfx___split_vma+0x10/0x10 [ 266.875947][T11905] vms_gather_munmap_vmas+0x1d2/0x1720 [ 266.875976][T11905] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 266.875994][T11905] ? mtree_range_walk+0x72b/0xb70 [ 266.876023][T11905] ? mas_walk+0x260/0x310 [ 266.876047][T11905] __mmap_region+0x4d4/0x3910 [ 266.876076][T11905] ? tomoyo_check_open_permission+0x1a2/0x3c0 [ 266.876100][T11905] ? __pfx___mmap_region+0x10/0x10 [ 266.876122][T11905] ? look_up_lock_class+0x55/0x120 [ 266.876142][T11905] ? register_lock_class+0x3f/0x7b0 [ 266.876166][T11905] ? find_held_lock+0x2b/0x80 [ 266.876183][T11905] ? ima_match_policy+0x8be/0x23f0 [ 266.876206][T11905] ? ima_match_policy+0x8be/0x23f0 [ 266.876243][T11905] ? process_measurement+0x156d/0x2360 [ 266.876272][T11905] ? down_write+0x141/0x1f0 [ 266.876291][T11905] ? up_write+0x2dc/0x5b0 [ 266.876308][T11905] ? process_measurement+0x1f4/0x2360 [ 266.876331][T11905] ? __lock_acquire+0x5c0/0x1f40 [ 266.876360][T11905] ? __lock_acquire+0x5c0/0x1f40 [ 266.876419][T11905] mmap_region+0x5a8/0x6d0 [ 266.876445][T11905] ? __pfx_mmap_region+0x10/0x10 [ 266.876470][T11905] ? memfd_check_seals_mmap+0x24b/0x310 [ 266.876489][T11905] ? __pfx_memfd_check_seals_mmap+0x10/0x10 [ 266.876510][T11905] ? selinux_mmap_addr+0x2b/0x100 [ 266.876528][T11905] ? bpf_lsm_mmap_addr+0x9/0x30 [ 266.876578][T11905] ? security_mmap_addr+0x71/0x1e0 [ 266.876591][T11905] ? __get_unmapped_area+0x255/0x3e0 [ 266.876611][T11905] do_mmap+0x12c7/0x1c30 [ 266.876633][T11905] ? lock_acquire+0x1d1/0x380 [ 266.876655][T11905] ? __pfx_do_mmap+0x10/0x10 [ 266.876670][T11905] ? __pfx___might_resched+0x10/0x10 [ 266.876689][T11905] ? bpf_lsm_current_getlsmprop_subj+0x9/0x10 [ 266.876706][T11905] ? security_current_getlsmprop_subj+0x6e/0x130 [ 266.876734][T11905] ? __pfx_down_write_killable+0x10/0x10 [ 266.876753][T11905] ? find_held_lock+0x2b/0x80 [ 266.876771][T11905] vm_mmap_pgoff+0x283/0x490 [ 266.876796][T11905] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 266.876816][T11905] ? __fget_files+0x215/0x3d0 [ 266.876842][T11905] ? __fget_files+0x21f/0x3d0 [ 266.876863][T11905] ksys_mmap_pgoff+0x3cb/0x610 [ 266.876889][T11905] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 266.876912][T11905] ? fput+0x7c/0x100 [ 266.876934][T11905] ? ksys_write+0x1ac/0x250 [ 266.876950][T11905] ? __pfx_ksys_write+0x10/0x10 [ 266.876965][T11905] __x64_sys_mmap+0x125/0x190 [ 266.876990][T11905] do_syscall_64+0x123/0x7b0 [ 266.877012][T11905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.877029][T11905] RIP: 0033:0x7f39bb79fb19 [ 266.877043][T11905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 266.877058][T11905] RSP: 002b:00007f39bc6d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 266.877071][T11905] RAX: ffffffffffffffda RBX: 00007f39bba25fa0 RCX: 00007f39bb79fb19 [ 266.877082][T11905] RDX: 0000000000000002 RSI: 0000000000011000 RDI: 0000200000fef000 [ 266.877093][T11905] RBP: 00007f39bc6d0090 R08: 0000000000000003 R09: 0000000040b83000 [ 266.877103][T11905] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 266.877113][T11905] R13: 00007f39bba26038 R14: 00007f39bba25fa0 R15: 00007ffe1dd4ed28 [ 266.877137][T11905] [ 266.951938][T11915] FAULT_INJECTION: forcing a failure. [ 266.951938][T11915] name failslab, interval 1, probability 5, space 0, times 23 [ 266.951964][T11915] CPU: 2 UID: 0 PID: 11915 Comm: syz.6.1874 Tainted: G L syzkaller #0 PREEMPT(full) [ 266.951985][T11915] Tainted: [L]=SOFTLOCKUP [ 266.951993][T11915] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 266.952003][T11915] Call Trace: [ 266.952011][T11915] [ 266.952018][T11915] dump_stack_lvl+0x100/0x190 [ 266.952049][T11915] should_fail_ex.cold+0x5/0xa [ 266.952067][T11915] should_failslab+0xc2/0x120 [ 266.952080][T11915] __kmalloc_noprof+0xfc/0x840 [ 266.952097][T11915] ? tomoyo_encode2+0xfb/0x3c0 [ 266.952112][T11915] tomoyo_encode2+0xfb/0x3c0 [ 266.952125][T11915] tomoyo_encode+0x29/0x50 [ 266.952136][T11915] tomoyo_realpath_from_path+0x18c/0x690 [ 266.952151][T11915] tomoyo_path_number_perm+0x23c/0x580 [ 266.952167][T11915] ? tomoyo_path_number_perm+0x22e/0x580 [ 266.952184][T11915] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 266.952206][T11915] ? __lock_acquire+0x5c0/0x1f40 [ 266.952228][T11915] ? __fget_files+0x34/0x3d0 [ 266.952242][T11915] ? find_held_lock+0x2b/0x80 [ 266.952253][T11915] ? hook_file_ioctl_common+0x140/0x440 [ 266.952269][T11915] ? __fget_files+0x21f/0x3d0 [ 266.952291][T11915] security_file_ioctl+0xd3/0x230 [ 266.952308][T11915] __x64_sys_ioctl+0xb7/0x210 [ 266.952320][T11915] do_syscall_64+0x123/0x7b0 [ 266.952335][T11915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.952346][T11915] RIP: 0033:0x7f39bb79fb19 [ 266.952356][T11915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 266.952367][T11915] RSP: 002b:00007f39bc6d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 266.952377][T11915] RAX: ffffffffffffffda RBX: 00007f39bba25fa0 RCX: 00007f39bb79fb19 [ 266.952384][T11915] RDX: 0000200000000a40 RSI: 00000000c02c564a RDI: 0000000000000003 [ 266.952391][T11915] RBP: 00007f39bc6d0090 R08: 0000000000000000 R09: 0000000000000000 [ 266.952397][T11915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.952403][T11915] R13: 00007f39bba26038 R14: 00007f39bba25fa0 R15: 00007ffe1dd4ed28 [ 266.952418][T11915] [ 266.952428][T11915] ERROR: Out of memory at tomoyo_realpath_from_path. [ 267.025081][ T43] kauditd_printk_skb: 10 callbacks suppressed [ 267.025094][ T43] audit: type=1326 audit(1794253495.355:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11916 comm="syz.3.1875" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbe12d9fb19 code=0x0 [ 267.047881][ T43] audit: type=1400 audit(1794253495.375:1037): avc: denied { create } for pid=11923 comm="syz.6.1878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 267.048350][ T43] audit: type=1400 audit(1794253495.375:1038): avc: denied { setopt } for pid=11923 comm="syz.6.1878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 267.088994][ T5859] usb 9-1: new high-speed USB device number 68 using dummy_hcd [ 267.108402][T11925] device-mapper: table: 248:13: integrity: Device lookup failed (-ENOENT) [ 267.108424][T11925] device-mapper: ioctl: error adding target to table [ 267.109975][ T5859] usb 9-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00 [ 267.109996][ T5859] usb 9-1: too many configurations: 181, using maximum allowed: 8 [ 267.113845][ T5859] usb 9-1: config index 0 descriptor too short (asked for 9, got 0) [ 267.113862][ T5859] usb 9-1: can't read configurations, error -22 [ 267.139025][ T8769] usb 7-1: new high-speed USB device number 108 using dummy_hcd [ 267.160249][ T8769] usb 7-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00 [ 267.160280][ T8769] usb 7-1: too many configurations: 181, using maximum allowed: 8 [ 267.161525][ T8769] usb 7-1: config index 0 descriptor too short (asked for 9, got 0) [ 267.161542][ T8769] usb 7-1: can't read configurations, error -22 [ 267.189347][ C0] tipc: RX(1000001): key[1] is activated [ 267.239203][ T5859] usb 9-1: new high-speed USB device number 69 using dummy_hcd [ 267.263880][ T5859] usb 9-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00 [ 267.263915][ T5859] usb 9-1: too many configurations: 181, using maximum allowed: 8 [ 267.265264][ T5859] usb 9-1: config index 0 descriptor too short (asked for 9, got 0) [ 267.265293][ T5859] usb 9-1: can't read configurations, error -22 [ 267.265599][ T5859] usb usb9-port1: unable to enumerate USB device [ 267.309074][ T8769] usb 7-1: new high-speed USB device number 109 using dummy_hcd [ 267.315194][T11936] FAULT_INJECTION: forcing a failure. [ 267.315194][T11936] name failslab, interval 1, probability 5, space 0, times 22 [ 267.315221][T11936] CPU: 3 UID: 0 PID: 11936 Comm: syz.6.1881 Tainted: G L syzkaller #0 PREEMPT(full) [ 267.315249][T11936] Tainted: [L]=SOFTLOCKUP [ 267.315255][T11936] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 267.315265][T11936] Call Trace: [ 267.315271][T11936] [ 267.315278][T11936] dump_stack_lvl+0x100/0x190 [ 267.315310][T11936] should_fail_ex.cold+0x5/0xa [ 267.315334][T11936] should_failslab+0xc2/0x120 [ 267.315354][T11936] kmem_cache_alloc_noprof+0x92/0x6a0 [ 267.315379][T11936] ? do_getname+0x35/0x390 [ 267.315407][T11936] do_getname+0x35/0x390 [ 267.315432][T11936] user_path_at+0x26/0x60 [ 267.315451][T11936] bpf_uprobe_multi_link_attach+0x54d/0x1550 [ 267.315476][T11936] ? find_held_lock+0x2b/0x80 [ 267.315500][T11936] ? __pfx_bpf_uprobe_multi_link_attach+0x10/0x10 [ 267.315558][T11936] ? __fget_files+0x21f/0x3d0 [ 267.315583][T11936] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 267.315613][T11936] __sys_bpf+0x448e/0x4b60 [ 267.315661][T11936] ? __pfx___sys_bpf+0x10/0x10 [ 267.315678][T11936] ? find_held_lock+0x2b/0x80 [ 267.315696][T11936] ? get_pid_task+0xfc/0x250 [ 267.315711][T11936] ? get_pid_task+0xfc/0x250 [ 267.315735][T11936] ? find_held_lock+0x2b/0x80 [ 267.315756][T11936] ? rcu_read_lock_any_held+0x6a/0x90 [ 267.315775][T11936] ? find_held_lock+0x2b/0x80 [ 267.315791][T11936] ? ksys_write+0x190/0x250 [ 267.315808][T11936] ? ksys_write+0x190/0x250 [ 267.315824][T11936] ? lock_acquire+0x1d1/0x380 [ 267.315861][T11936] ? fput+0x7c/0x100 [ 267.315882][T11936] ? ksys_write+0x1ac/0x250 [ 267.315901][T11936] ? __x64_sys_bpf+0xce/0x140 [ 267.315915][T11936] __x64_sys_bpf+0xce/0x140 [ 267.315932][T11936] ? do_syscall_64+0xae/0x7b0 [ 267.315952][T11936] do_syscall_64+0x123/0x7b0 [ 267.315973][T11936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.315990][T11936] RIP: 0033:0x7f39bb79fb19 [ 267.316005][T11936] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 267.316021][T11936] RSP: 002b:00007f39bc6d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 267.316040][T11936] RAX: ffffffffffffffda RBX: 00007f39bba25fa0 RCX: 00007f39bb79fb19 [ 267.316051][T11936] RDX: 0000000000000040 RSI: 00002000000005c0 RDI: 000000000000001c [ 267.316062][T11936] RBP: 00007f39bc6d0090 R08: 0000000000000000 R09: 0000000000000000 [ 267.316073][T11936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.316083][T11936] R13: 00007f39bba26038 R14: 00007f39bba25fa0 R15: 00007ffe1dd4ed28 [ 267.316108][T11936] [ 267.332640][ T8769] usb 7-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00 [ 267.332670][ T8769] usb 7-1: too many configurations: 181, using maximum allowed: 8 [ 267.334345][ T8769] usb 7-1: config index 0 descriptor too short (asked for 9, got 0) [ 267.334370][ T8769] usb 7-1: can't read configurations, error -22 [ 267.334922][ T8769] usb usb7-port1: unable to enumerate USB device [ 267.420010][ C0] net_ratelimit: 930 callbacks suppressed [ 267.675535][T11942] FAULT_INJECTION: forcing a failure. [ 267.675535][T11942] name failslab, interval 1, probability 5, space 0, times 21 [ 267.675570][T11942] CPU: 0 UID: 0 PID: 11942 Comm: syz.6.1884 Tainted: G L syzkaller #0 PREEMPT(full) [ 267.675595][T11942] Tainted: [L]=SOFTLOCKUP [ 267.675602][T11942] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 267.675613][T11942] Call Trace: [ 267.675620][T11942] [ 267.675628][T11942] dump_stack_lvl+0x100/0x190 [ 267.675661][T11942] should_fail_ex.cold+0x5/0xa [ 267.675690][T11942] should_failslab+0xc2/0x120 [ 267.675712][T11942] __kvmalloc_node_noprof+0x113/0x9b0 [ 267.675734][T11942] ? io_rsrc_data_alloc+0x2c/0xa0 [ 267.675761][T11942] io_rsrc_data_alloc+0x2c/0xa0 [ 267.675784][T11942] io_register_clone_buffers.cold+0x29/0x1041 [ 267.675805][T11942] ? trace_contention_end+0x126/0x160 [ 267.675834][T11942] ? __mutex_lock+0x267/0x1c10 [ 267.675857][T11942] ? __do_sys_io_uring_register+0x147/0x1ce0 [ 267.675897][T11942] ? __pfx_io_register_clone_buffers+0x10/0x10 [ 267.675955][T11942] __do_sys_io_uring_register+0x3ca/0x1ce0 [ 267.675986][T11942] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 267.676009][T11942] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 267.676036][T11942] ? __fget_files+0x21f/0x3d0 [ 267.676065][T11942] ? fput+0x7c/0x100 [ 267.676090][T11942] ? ksys_write+0x1ac/0x250 [ 267.676109][T11942] ? __pfx_ksys_write+0x10/0x10 [ 267.676136][T11942] do_syscall_64+0x123/0x7b0 [ 267.676168][T11942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.676187][T11942] RIP: 0033:0x7f39bb79fb19 [ 267.676203][T11942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 267.676221][T11942] RSP: 002b:00007f39bc6d0028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 267.676240][T11942] RAX: ffffffffffffffda RBX: 00007f39bba25fa0 RCX: 00007f39bb79fb19 [ 267.676252][T11942] RDX: 0000200000001ec0 RSI: 000000000000001e RDI: 0000000000000004 [ 267.676264][T11942] RBP: 00007f39bc6d0090 R08: 0000000000000000 R09: 0000000000000000 [ 267.676276][T11942] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 267.676287][T11942] R13: 00007f39bba26038 R14: 00007f39bba25fa0 R15: 00007ffe1dd4ed28 [ 267.676314][T11942] [ 267.711664][ T43] audit: type=1400 audit(1794253496.045:1039): avc: denied { mounton } for pid=11943 comm="syz.6.1885" path="/107/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 267.812743][T11946] FAULT_INJECTION: forcing a failure. [ 267.812743][T11946] name failslab, interval 1, probability 5, space 0, times 20 [ 267.812769][T11946] CPU: 3 UID: 0 PID: 11946 Comm: syz.6.1886 Tainted: G L syzkaller #0 PREEMPT(full) [ 267.812803][T11946] Tainted: [L]=SOFTLOCKUP [ 267.812810][T11946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 267.812822][T11946] Call Trace: [ 267.812829][T11946] [ 267.812838][T11946] dump_stack_lvl+0x100/0x190 [ 267.812875][T11946] should_fail_ex.cold+0x5/0xa [ 267.812906][T11946] should_failslab+0xc2/0x120 [ 267.812930][T11946] __kmalloc_noprof+0xfc/0x840 [ 267.812959][T11946] ? __pfx_dynamic_dname+0x10/0x10 [ 267.812981][T11946] ? tomoyo_encode2+0xfb/0x3c0 [ 267.813008][T11946] tomoyo_encode2+0xfb/0x3c0 [ 267.813033][T11946] tomoyo_encode+0x29/0x50 [ 267.813053][T11946] tomoyo_realpath_from_path+0x18c/0x690 [ 267.813081][T11946] tomoyo_path_number_perm+0x23c/0x580 [ 267.813109][T11946] ? tomoyo_path_number_perm+0x22e/0x580 [ 267.813140][T11946] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 267.813180][T11946] ? __lock_acquire+0x5c0/0x1f40 [ 267.813221][T11946] ? __fget_files+0x34/0x3d0 [ 267.813246][T11946] ? find_held_lock+0x2b/0x80 [ 267.813266][T11946] ? hook_file_ioctl_common+0x140/0x440 [ 267.813295][T11946] ? __fget_files+0x21f/0x3d0 [ 267.813324][T11946] security_file_ioctl+0xd3/0x230 [ 267.813355][T11946] __x64_sys_ioctl+0xb7/0x210 [ 267.813379][T11946] do_syscall_64+0x123/0x7b0 [ 267.813405][T11946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.813425][T11946] RIP: 0033:0x7f39bb79fb19 [ 267.813442][T11946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 267.813459][T11946] RSP: 002b:00007f39bc6d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 267.813479][T11946] RAX: ffffffffffffffda RBX: 00007f39bba25fa0 RCX: 00007f39bb79fb19 [ 267.813491][T11946] RDX: 00002000000026c0 RSI: 000000004400ae8f RDI: 0000000000000005 [ 267.813503][T11946] RBP: 00007f39bc6d0090 R08: 0000000000000000 R09: 0000000000000000 [ 267.813515][T11946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.813527][T11946] R13: 00007f39bba26038 R14: 00007f39bba25fa0 R15: 00007ffe1dd4ed28 [ 267.813555][T11946] [ 267.813573][T11946] ERROR: Out of memory at tomoyo_realpath_from_path. [ 267.813644][T11946] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3765145859 (60242333744 ns) > initial count (29576955120 ns). Using initial count to start timer. [ 267.888752][T11951] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1887'. [ 267.919355][ T43] audit: type=1400 audit(1794253496.255:1040): avc: denied { append } for pid=11953 comm="syz.6.1888" name="frontend0" dev="devtmpfs" ino=948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 267.961090][T11956] FAULT_INJECTION: forcing a failure. [ 267.961090][T11956] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 267.961107][T11956] CPU: 0 UID: 0 PID: 11956 Comm: syz.3.1889 Tainted: G L syzkaller #0 PREEMPT(full) [ 267.961122][T11956] Tainted: [L]=SOFTLOCKUP [ 267.961126][T11956] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 267.961132][T11956] Call Trace: [ 267.961136][T11956] [ 267.961141][T11956] dump_stack_lvl+0x100/0x190 [ 267.961163][T11956] should_fail_ex.cold+0x5/0xa [ 267.961180][T11956] _copy_from_user+0x2e/0xd0 [ 267.961196][T11956] move_addr_to_kernel+0x65/0x170 [ 267.961214][T11956] copy_msghdr_from_user+0x3f0/0x4c0 [ 267.961231][T11956] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 267.961251][T11956] ? lock_acquire+0x1d1/0x380 [ 267.961266][T11956] ? get_pid_task+0x2a/0x250 [ 267.961286][T11956] ___sys_sendmsg+0x106/0x1e0 [ 267.961304][T11956] ? __pfx____sys_sendmsg+0x10/0x10 [ 267.961320][T11956] ? get_pid_task+0x106/0x250 [ 267.961351][T11956] ? find_held_lock+0x2b/0x80 [ 267.961374][T11956] __sys_sendmsg+0x160/0x210 [ 267.961389][T11956] ? __pfx___sys_sendmsg+0x10/0x10 [ 267.961410][T11956] do_syscall_64+0x123/0x7b0 [ 267.961425][T11956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.961437][T11956] RIP: 0033:0x7fbe12d9fb19 [ 267.961446][T11956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 267.961457][T11956] RSP: 002b:00007fbe13bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 267.961468][T11956] RAX: ffffffffffffffda RBX: 00007fbe13025fa0 RCX: 00007fbe12d9fb19 [ 267.961475][T11956] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000004 [ 267.961482][T11956] RBP: 00007fbe13bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 267.961488][T11956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.961495][T11956] R13: 00007fbe13026038 R14: 00007fbe13025fa0 R15: 00007ffef8017928 [ 267.961509][T11956] [ 267.990678][ T43] audit: type=1400 audit(1794253496.325:1041): avc: denied { read write } for pid=11953 comm="syz.6.1888" name="file0" dev="fuse" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 267.991071][ T43] audit: type=1400 audit(1794253496.325:1042): avc: denied { open } for pid=11953 comm="syz.6.1888" path="/109/file0/file0" dev="fuse" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 268.196378][ T43] audit: type=1400 audit(1794253496.525:1043): avc: denied { append } for pid=11964 comm="syz.3.1891" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 268.217142][T11965] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3765145859 (60242333744 ns) > initial count (29576955120 ns). Using initial count to start timer. [ 268.320327][T11967] FAULT_INJECTION: forcing a failure. [ 268.320327][T11967] name failslab, interval 1, probability 5, space 0, times 19 [ 268.320355][T11967] CPU: 2 UID: 0 PID: 11967 Comm: syz.3.1892 Tainted: G L syzkaller #0 PREEMPT(full) [ 268.320382][T11967] Tainted: [L]=SOFTLOCKUP [ 268.320389][T11967] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 268.320404][T11967] Call Trace: [ 268.320411][T11967] [ 268.320419][T11967] dump_stack_lvl+0x100/0x190 [ 268.320459][T11967] should_fail_ex.cold+0x5/0xa [ 268.320491][T11967] should_failslab+0xc2/0x120 [ 268.320519][T11967] __kmalloc_noprof+0xfc/0x840 [ 268.320550][T11967] ? rcu_is_watching+0x13/0xc0 [ 268.320573][T11967] ? tomoyo_encode2+0xfb/0x3c0 [ 268.320602][T11967] tomoyo_encode2+0xfb/0x3c0 [ 268.320629][T11967] tomoyo_encode+0x29/0x50 [ 268.320650][T11967] tomoyo_realpath_from_path+0x18c/0x690 [ 268.320680][T11967] tomoyo_check_open_permission+0x2af/0x3c0 [ 268.320715][T11967] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 268.320757][T11967] ? hook_file_open+0x245/0x8e0 [ 268.320808][T11967] tomoyo_file_open+0x6b/0x90 [ 268.320836][T11967] security_file_open+0xb5/0x1e0 [ 268.320869][T11967] do_dentry_open+0x552/0x1470 [ 268.320902][T11967] vfs_open_consume+0xcc/0x460 [ 268.320935][T11967] path_openat+0x1547/0x23f0 [ 268.320967][T11967] ? __pfx_path_openat+0x10/0x10 [ 268.321001][T11967] do_file_open+0x20e/0x430 [ 268.321030][T11967] ? __pfx_do_file_open+0x10/0x10 [ 268.321076][T11967] ? _raw_spin_unlock+0x28/0x50 [ 268.321098][T11967] ? alloc_fd+0x471/0x7a0 [ 268.321133][T11967] do_sys_openat2+0x163/0x1d0 [ 268.321161][T11967] ? __pfx_do_sys_openat2+0x10/0x10 [ 268.321191][T11967] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 268.321226][T11967] __x64_sys_openat+0x12d/0x210 [ 268.321257][T11967] ? __pfx___x64_sys_openat+0x10/0x10 [ 268.321285][T11967] ? ksys_write+0x1ac/0x250 [ 268.321313][T11967] do_syscall_64+0x123/0x7b0 [ 268.321340][T11967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.321362][T11967] RIP: 0033:0x7fbe12d9fb19 [ 268.321398][T11967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 268.321420][T11967] RSP: 002b:00007fbe13bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 268.321442][T11967] RAX: ffffffffffffffda RBX: 00007fbe13025fa0 RCX: 00007fbe12d9fb19 [ 268.321457][T11967] RDX: 0000000000000002 RSI: 00002000000046c0 RDI: ffffffffffffff9c [ 268.321469][T11967] RBP: 00007fbe12e37b70 R08: 0000000000000000 R09: 0000000000000000 [ 268.321482][T11967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 268.321494][T11967] R13: 00007fbe13026038 R14: 00007fbe13025fa0 R15: 00007ffef8017928 [ 268.321524][T11967] [ 268.321579][T11967] ERROR: Out of memory at tomoyo_realpath_from_path. [ 268.495616][T11969] rxe_eth0 speed is unknown, defaulting to 1000 [ 268.545035][ T43] audit: type=1400 audit(1794253496.875:1044): avc: denied { ioctl } for pid=11971 comm="syz.6.1894" path="socket:[41267]" dev="sockfs" ino=41267 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 268.602340][T11975] FAULT_INJECTION: forcing a failure. [ 268.602340][T11975] name failslab, interval 1, probability 5, space 0, times 18 [ 268.602358][T11975] CPU: 0 UID: 0 PID: 11975 Comm: syz.6.1895 Tainted: G L syzkaller #0 PREEMPT(full) [ 268.602374][T11975] Tainted: [L]=SOFTLOCKUP [ 268.602378][T11975] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 268.602385][T11975] Call Trace: [ 268.602390][T11975] [ 268.602395][T11975] dump_stack_lvl+0x100/0x190 [ 268.602416][T11975] should_fail_ex.cold+0x5/0xa [ 268.602434][T11975] ? __pfx_lowpan_enable_set+0x10/0x10 [ 268.602461][T11975] ? __pfx_lowpan_enable_get+0x10/0x10 [ 268.602478][T11975] should_failslab+0xc2/0x120 [ 268.602491][T11975] ? __pfx_lowpan_enable_set+0x10/0x10 [ 268.602502][T11975] __kmalloc_cache_noprof+0x91/0x6d0 [ 268.602519][T11975] ? simple_attr_open+0x57/0x1c0 [ 268.602535][T11975] ? __pfx_lowpan_enable_set+0x10/0x10 [ 268.602545][T11975] ? __pfx_lowpan_enable_get+0x10/0x10 [ 268.602560][T11975] simple_attr_open+0x57/0x1c0 [ 268.602574][T11975] ? __pfx_lowpan_enable_fops_open+0x10/0x10 [ 268.602594][T11975] open_proxy_open+0x220/0x330 [ 268.602686][T11975] do_dentry_open+0x674/0x1470 [ 268.602709][T11975] ? __pfx_open_proxy_open+0x10/0x10 [ 268.602731][T11975] vfs_open_consume+0xcc/0x460 [ 268.602748][T11975] path_openat+0x1547/0x23f0 [ 268.602764][T11975] ? __pfx_path_openat+0x10/0x10 [ 268.602782][T11975] do_file_open+0x20e/0x430 [ 268.602796][T11975] ? __pfx_do_file_open+0x10/0x10 [ 268.602819][T11975] ? _raw_spin_unlock+0x28/0x50 [ 268.602830][T11975] ? alloc_fd+0x471/0x7a0 [ 268.602847][T11975] do_sys_openat2+0x163/0x1d0 [ 268.602862][T11975] ? __pfx_do_sys_openat2+0x10/0x10 [ 268.602877][T11975] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 268.602909][T11975] __x64_sys_openat+0x12d/0x210 [ 268.602925][T11975] ? __pfx___x64_sys_openat+0x10/0x10 [ 268.602946][T11975] do_syscall_64+0x123/0x7b0 [ 268.602960][T11975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.602972][T11975] RIP: 0033:0x7f39bb79fb19 [ 268.602982][T11975] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 268.602993][T11975] RSP: 002b:00007f39bc6d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 268.603004][T11975] RAX: ffffffffffffffda RBX: 00007f39bba25fa0 RCX: 00007f39bb79fb19 [ 268.603011][T11975] RDX: 0000000000000002 RSI: 00002000000046c0 RDI: ffffffffffffff9c [ 268.603017][T11975] RBP: 00007f39bb837b70 R08: 0000000000000000 R09: 0000000000000000 [ 268.603024][T11975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 268.603031][T11975] R13: 00007f39bba26038 R14: 00007f39bba25fa0 R15: 00007ffe1dd4ed28 [ 268.603053][T11975] [ 268.745464][T11980] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1897'. [ 268.994971][T11989] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3765145859 (60242333744 ns) > initial count (29576955120 ns). Using initial count to start timer. [ 269.093579][T11991] FAULT_INJECTION: forcing a failure. [ 269.093579][T11991] name failslab, interval 1, probability 5, space 0, times 17 [ 269.093599][T11991] CPU: 3 UID: 0 PID: 11991 Comm: syz.2.1900 Tainted: G L syzkaller #0 PREEMPT(full) [ 269.093613][T11991] Tainted: [L]=SOFTLOCKUP [ 269.093617][T11991] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 269.093624][T11991] Call Trace: [ 269.093628][T11991] [ 269.093632][T11991] dump_stack_lvl+0x100/0x190 [ 269.093654][T11991] should_fail_ex.cold+0x5/0xa [ 269.093671][T11991] should_failslab+0xc2/0x120 [ 269.093685][T11991] __kmalloc_noprof+0xfc/0x840 [ 269.093702][T11991] ? tomoyo_encode2+0xfb/0x3c0 [ 269.093717][T11991] tomoyo_encode2+0xfb/0x3c0 [ 269.093730][T11991] tomoyo_encode+0x29/0x50 [ 269.093741][T11991] tomoyo_realpath_from_path+0x18c/0x690 [ 269.093756][T11991] tomoyo_path_number_perm+0x23c/0x580 [ 269.093771][T11991] ? tomoyo_path_number_perm+0x22e/0x580 [ 269.093788][T11991] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 269.093809][T11991] ? __lock_acquire+0x5c0/0x1f40 [ 269.093831][T11991] ? __fget_files+0x34/0x3d0 [ 269.093844][T11991] ? find_held_lock+0x2b/0x80 [ 269.093856][T11991] ? hook_file_ioctl_common+0x140/0x440 [ 269.093872][T11991] ? __fget_files+0x21f/0x3d0 [ 269.093888][T11991] security_file_ioctl+0xd3/0x230 [ 269.093905][T11991] __x64_sys_ioctl+0xb7/0x210 [ 269.093917][T11991] do_syscall_64+0x123/0x7b0 [ 269.093932][T11991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.093943][T11991] RIP: 0033:0x7fbe8479fb19 [ 269.093953][T11991] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.093963][T11991] RSP: 002b:00007fbe85596028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 269.093974][T11991] RAX: ffffffffffffffda RBX: 00007fbe84a25fa0 RCX: 00007fbe8479fb19 [ 269.093981][T11991] RDX: 00002000000004c0 RSI: 00000000c138fd09 RDI: 0000000000000003 [ 269.093988][T11991] RBP: 00007fbe85596090 R08: 0000000000000000 R09: 0000000000000000 [ 269.093994][T11991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.094000][T11991] R13: 00007fbe84a26038 R14: 00007fbe84a25fa0 R15: 00007ffe12808408 [ 269.094014][T11991] [ 269.094024][T11991] ERROR: Out of memory at tomoyo_realpath_from_path. [ 269.094051][T11991] device-mapper: table: 248:14: too large device [ 269.094056][T11991] device-mapper: ioctl: error adding target to table [ 269.100086][ T5144] Bluetooth: hci4: unexpected cc 0x1407 length: 11 > 9 [ 269.178364][T11996] FAULT_INJECTION: forcing a failure. [ 269.178364][T11996] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 269.178380][T11996] CPU: 3 UID: 0 PID: 11996 Comm: syz.2.1902 Tainted: G L syzkaller #0 PREEMPT(full) [ 269.178394][T11996] Tainted: [L]=SOFTLOCKUP [ 269.178399][T11996] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 269.178405][T11996] Call Trace: [ 269.178409][T11996] [ 269.178414][T11996] dump_stack_lvl+0x100/0x190 [ 269.178435][T11996] should_fail_ex.cold+0x5/0xa [ 269.178452][T11996] _copy_to_iter+0x5a4/0x1750 [ 269.178467][T11996] ? __pfx___skb_try_recv_datagram+0x10/0x10 [ 269.178481][T11996] ? __pfx__copy_to_iter+0x10/0x10 [ 269.178493][T11996] ? find_held_lock+0x2b/0x80 [ 269.178508][T11996] ? __skb_recv_datagram+0x1b2/0x220 [ 269.178522][T11996] simple_copy_to_iter+0x46/0x90 [ 269.178533][T11996] __skb_datagram_iter+0x129/0x8f0 [ 269.178543][T11996] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 269.178556][T11996] ? skb_recv_datagram+0x88/0xc0 [ 269.178568][T11996] skb_copy_datagram_iter+0xa1/0x250 [ 269.178581][T11996] netlink_recvmsg+0x2b5/0xb60 [ 269.178624][T11996] ? __pfx_netlink_recvmsg+0x10/0x10 [ 269.178661][T11996] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 269.178682][T11996] ? __pfx_netlink_recvmsg+0x10/0x10 [ 269.178703][T11996] sock_recvmsg+0x1d5/0x220 [ 269.178728][T11996] ____sys_recvmsg+0x21e/0x6a0 [ 269.178760][T11996] ? __pfx_____sys_recvmsg+0x10/0x10 [ 269.178796][T11996] ? __lock_acquire+0x5c0/0x1f40 [ 269.178826][T11996] ___sys_recvmsg+0x16a/0x1a0 [ 269.178854][T11996] ? __pfx____sys_recvmsg+0x10/0x10 [ 269.178899][T11996] ? lock_acquire+0x1d1/0x380 [ 269.178943][T11996] __x64_sys_recvmsg+0x19a/0x260 [ 269.178967][T11996] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 269.179001][T11996] do_syscall_64+0x123/0x7b0 [ 269.179026][T11996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.179043][T11996] RIP: 0033:0x7fbe8479fb19 [ 269.179057][T11996] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.179072][T11996] RSP: 002b:00007fbe85596028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 269.179087][T11996] RAX: ffffffffffffffda RBX: 00007fbe84a25fa0 RCX: 00007fbe8479fb19 [ 269.179099][T11996] RDX: 0000000000010000 RSI: 00002000000019c0 RDI: 0000000000000003 [ 269.179109][T11996] RBP: 00007fbe85596090 R08: 0000000000000000 R09: 0000000000000000 [ 269.179120][T11996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.179130][T11996] R13: 00007fbe84a26038 R14: 00007fbe84a25fa0 R15: 00007ffe12808408 [ 269.179155][T11996] [ 269.375155][T12008] FAULT_INJECTION: forcing a failure. [ 269.375155][T12008] name failslab, interval 1, probability 5, space 0, times 16 [ 269.375170][T12008] CPU: 2 UID: 0 PID: 12008 Comm: syz.2.1907 Tainted: G L syzkaller #0 PREEMPT(full) [ 269.375184][T12008] Tainted: [L]=SOFTLOCKUP [ 269.375188][T12008] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 269.375195][T12008] Call Trace: [ 269.375199][T12008] [ 269.375204][T12008] dump_stack_lvl+0x100/0x190 [ 269.375226][T12008] should_fail_ex.cold+0x5/0xa [ 269.375243][T12008] should_failslab+0xc2/0x120 [ 269.375256][T12008] __kmalloc_noprof+0xfc/0x840 [ 269.375272][T12008] ? rcu_is_watching+0x13/0xc0 [ 269.375284][T12008] ? tomoyo_realpath_from_path+0xb6/0x690 [ 269.375300][T12008] tomoyo_realpath_from_path+0xb6/0x690 [ 269.375315][T12008] tomoyo_path_number_perm+0x23c/0x580 [ 269.375330][T12008] ? tomoyo_path_number_perm+0x22e/0x580 [ 269.375347][T12008] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 269.375368][T12008] ? __lock_acquire+0x5c0/0x1f40 [ 269.375389][T12008] ? __fget_files+0x34/0x3d0 [ 269.375403][T12008] ? find_held_lock+0x2b/0x80 [ 269.375415][T12008] ? hook_file_ioctl_common+0x140/0x440 [ 269.375431][T12008] ? __fget_files+0x21f/0x3d0 [ 269.375446][T12008] security_file_ioctl+0xd3/0x230 [ 269.375464][T12008] __x64_sys_ioctl+0xb7/0x210 [ 269.375476][T12008] do_syscall_64+0x123/0x7b0 [ 269.375491][T12008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.375502][T12008] RIP: 0033:0x7fbe8479fb19 [ 269.375512][T12008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.375522][T12008] RSP: 002b:00007fbe85596028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 269.375533][T12008] RAX: ffffffffffffffda RBX: 00007fbe84a25fa0 RCX: 00007fbe8479fb19 [ 269.375540][T12008] RDX: 0000200000000840 RSI: 00000000c06864a2 RDI: 0000000000000004 [ 269.375546][T12008] RBP: 00007fbe85596090 R08: 0000000000000000 R09: 0000000000000000 [ 269.375553][T12008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.375559][T12008] R13: 00007fbe84a26038 R14: 00007fbe84a25fa0 R15: 00007ffe12808408 [ 269.375573][T12008] [ 269.375578][T12008] ERROR: Out of memory at tomoyo_realpath_from_path. [ 269.469703][ T5859] usb 9-1: new high-speed USB device number 70 using dummy_hcd [ 269.506360][ T9446] Bluetooth: hci1: Frame reassembly failed (-84) [ 269.619055][ T5859] usb 9-1: Using ep0 maxpacket: 8 [ 269.620581][ T5859] usb 9-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 269.621475][ T5859] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 269.621525][ T5859] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 269.621541][ T5859] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 269.621558][ T5859] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 269.621575][ T5859] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 269.621616][ T5859] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.862450][ T5859] usb 9-1: usb_control_msg returned -32 [ 269.862485][ T5859] usbtmc 9-1:16.0: can't read capabilities [ 269.880729][T12024] Invalid source name [ 269.880739][T12024] UBIFS error (pid: 12024): cannot open "./file0", error -22 [ 269.888482][ T9420] IPVS: starting estimator thread 0... [ 269.969746][T12030] IPVS: using max 26 ests per chain, 62400 per kthread [ 270.003795][ T43] audit: type=1400 audit(1794253498.335:1045): avc: denied { bind } for pid=12035 comm="syz.3.1917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 270.023716][T12036] tmpfs: Invalid uid '0x00000000ffffffff' [ 270.024002][T12036] overlay: Unknown parameter '/' [ 270.163777][T12046] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1920'. [ 270.945580][T12057] rxe_eth0 speed is unknown, defaulting to 1000 [ 271.248827][T12069] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1924'. [ 271.316075][T12071] support for the xor transformation has been removed. [ 271.580499][ T5789] Bluetooth: hci1: command 0x1003 tx timeout [ 271.581066][ T5144] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 271.705465][T12075] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3765145859 (60242333744 ns) > initial count (29576955120 ns). Using initial count to start timer. [ 271.837507][T12086] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1930'. [ 271.862252][T12086] bond0: (slave bond_slave_0): Releasing backup interface [ 272.005153][T12092] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1933'. [ 272.140095][T12053] usbtmc 9-1:16.0: usb_control_msg returned -71 [ 272.140361][ T5774] usb 9-1: USB disconnect, device number 70 [ 272.206047][ T9434] Bluetooth: hci5: Frame reassembly failed (-84) [ 272.206082][ T9434] Bluetooth: hci5: Frame reassembly failed (-84) [ 272.206111][ T9434] Bluetooth: hci5: Frame reassembly failed (-84) [ 272.267093][T12113] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1942'. [ 272.267114][T12113] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1942'. [ 272.272741][T12113] geneve2: entered promiscuous mode [ 272.272749][T12113] geneve2: entered allmulticast mode [ 272.381991][T12117] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1944'. [ 272.460782][T12119] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1945'. [ 272.619015][ C0] net_ratelimit: 544 callbacks suppressed [ 272.709370][T12140] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1953'. [ 272.745755][T12143] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1954'. [ 272.745774][T12143] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1954'. [ 272.765296][T12136] rxe_eth0 speed is unknown, defaulting to 1000 [ 272.847385][ T43] kauditd_printk_skb: 3 callbacks suppressed [ 272.847395][ T43] audit: type=1400 audit(1794253501.175:1049): avc: denied { write } for pid=12146 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 272.910200][ T43] audit: type=1400 audit(1794253501.245:1050): avc: denied { write } for pid=12150 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 273.065210][ T43] audit: type=1400 audit(1794253501.395:1051): avc: denied { write } for pid=12152 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 273.112762][ T43] audit: type=1400 audit(1794253501.445:1052): avc: denied { write } for pid=12156 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 273.128566][T12145] ================================================================== [ 273.128574][T12145] BUG: KASAN: slab-use-after-free in acpi_ns_get_att ** replaying previous printk message ** [ 273.128574][T12145] BUG: KASAN: slab-use-after-free in acpi_ns_get_attached_object+0x148/0x1b0 [ 273.128592][T12145] Read of size 1 at addr ffff888024859d70 by task syz.6.1955/12145 [ 273.128601][T12145] [ 273.128624][T12145] CPU: 1 UID: 0 PID: 12145 Comm: syz.6.1955 Tainted: G L syzkaller #0 PREEMPT(full) [ 273.128641][T12145] Tainted: [L]=SOFTLOCKUP [ 273.128645][T12145] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 273.128652][T12145] Call Trace: [ 273.128656][T12145] [ 273.128661][T12145] dump_stack_lvl+0x100/0x190 [ 273.128680][T12145] print_report+0x13d/0x4b0 [ 273.128697][T12145] ? __virt_addr_valid+0x239/0x430 [ 273.128711][T12145] ? acpi_ns_get_attached_object+0x148/0x1b0 [ 273.128721][T12145] kasan_report+0xdf/0x1c0 [ 273.128734][T12145] ? acpi_ns_get_attached_object+0x148/0x1b0 [ 273.128750][T12145] acpi_ns_get_attached_object+0x148/0x1b0 [ 273.128761][T12145] acpi_ex_resolve_node_to_value+0xb7/0x9a0 [ 273.128778][T12145] ? acpi_ut_trace_ptr+0x1d2/0x2a0 [ 273.128793][T12145] ? __pfx_acpi_ex_resolve_node_to_value+0x10/0x10 [ 273.128811][T12145] ? acpi_ds_create_operand+0x267/0xc20 [ 273.128825][T12145] acpi_ex_resolve_to_value+0x3da/0xcd0 [ 273.128835][T12145] ? __pfx_acpi_ex_resolve_to_value+0x10/0x10 [ 273.128845][T12145] ? __pfx_acpi_ns_lookup+0x10/0x10 [ 273.128859][T12145] ? __asan_memset+0x23/0x50 [ 273.128880][T12145] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 273.128902][T12145] acpi_ds_evaluate_name_path+0x30d/0x4a0 [ 273.128926][T12145] ? __pfx_acpi_ds_evaluate_name_path+0x10/0x10 [ 273.128947][T12145] ? acpi_ps_get_next_namepath+0x1f6/0xa10 [ 273.128967][T12145] ? acpi_ut_trace_ptr+0x1d1/0x2a0 [ 273.128992][T12145] acpi_ds_exec_end_op+0xb78/0x1e60 [ 273.129012][T12145] ? __pfx_acpi_ds_exec_end_op+0x10/0x10 [ 273.129025][T12145] acpi_ps_parse_loop+0x5e1/0x26e0 [ 273.129040][T12145] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 273.129053][T12145] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 273.129069][T12145] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 273.129084][T12145] ? acpi_ut_create_thread_state+0x6d/0x170 [ 273.129100][T12145] acpi_ps_parse_aml+0x81e/0x1120 [ 273.129115][T12145] acpi_ps_execute_method+0x5c4/0xe90 [ 273.129131][T12145] acpi_ns_evaluate+0x640/0x1670 [ 273.129148][T12145] acpi_ut_evaluate_object+0xf7/0x610 [ 273.129165][T12145] acpi_rs_get_prt_method_data+0xa0/0x150 [ 273.129181][T12145] ? __pfx_acpi_rs_get_prt_method_data+0x10/0x10 [ 273.129198][T12145] ? acpi_ut_status_exit+0x111/0x1c0 [ 273.129212][T12145] ? acpi_rs_validate_parameters+0x104/0x210 [ 273.129223][T12145] acpi_get_irq_routing_table+0xb8/0x140 [ 273.129233][T12145] ? __pfx_acpi_get_irq_routing_table+0x10/0x10 [ 273.129246][T12145] ? do_raw_spin_lock+0x128/0x260 [ 273.129257][T12145] acpi_pci_irq_find_prt_entry+0x178/0xdd0 [ 273.129275][T12145] ? do_raw_spin_lock+0x128/0x260 [ 273.129285][T12145] ? __pfx_acpi_pci_irq_find_prt_entry+0x10/0x10 [ 273.129303][T12145] ? mark_held_locks+0x40/0x70 [ 273.129317][T12145] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 273.129330][T12145] acpi_pci_irq_lookup+0x8e/0x6b0 [ 273.129346][T12145] ? __pfx_acpi_pci_irq_lookup+0x10/0x10 [ 273.129364][T12145] acpi_pci_irq_disable+0x1a8/0x360 [ 273.129374][T12145] ? __pfx_acpi_pci_irq_disable+0x10/0x10 [ 273.129384][T12145] pcibios_disable_device+0x89/0xb0 [ 273.129395][T12145] do_pci_disable_device+0x9f/0x100 [ 273.129411][T12145] ? __pfx_do_pci_disable_device+0x10/0x10 [ 273.129427][T12145] ? put_device+0x24/0x30 [ 273.129438][T12145] pci_disable_device+0x130/0x270 [ 273.129453][T12145] e1000_remove+0x304/0x3e0 [ 273.129486][T12145] pci_device_remove+0xb2/0x1d0 [ 273.129499][T12145] ? __pfx_pci_device_remove+0x10/0x10 [ 273.129513][T12145] device_remove+0xcb/0x180 [ 273.129525][T12145] device_release_driver_internal+0x441/0x610 [ 273.129540][T12145] pci_stop_bus_device+0x120/0x160 [ 273.129556][T12145] pci_stop_and_remove_bus_device+0x58/0xa0 [ 273.129571][T12145] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 273.129587][T12145] remove_store+0x123/0x140 [ 273.129597][T12145] ? __pfx_remove_store+0x10/0x10 [ 273.129607][T12145] ? find_held_lock+0x2b/0x80 [ 273.129618][T12145] ? sysfs_file_kobj+0xe4/0x290 [ 273.129633][T12145] ? sysfs_file_kobj+0xe4/0x290 [ 273.129647][T12145] ? __pfx_remove_store+0x10/0x10 [ 273.129656][T12145] dev_attr_store+0x58/0x80 [ 273.129671][T12145] ? __pfx_dev_attr_store+0x10/0x10 [ 273.129685][T12145] sysfs_kf_write+0xf2/0x150 [ 273.129699][T12145] kernfs_fop_write_iter+0x3e0/0x5f0 [ 273.129711][T12145] ? __pfx_sysfs_kf_write+0x10/0x10 [ 273.129725][T12145] vfs_write+0x6af/0x1040 [ 273.129737][T12145] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 273.129754][T12145] ? __pfx_vfs_write+0x10/0x10 [ 273.129764][T12145] ? find_held_lock+0x2b/0x80 [ 273.129779][T12145] ksys_write+0x12a/0x250 [ 273.129789][T12145] ? __pfx_ksys_write+0x10/0x10 [ 273.129801][T12145] do_syscall_64+0x123/0x7b0 [ 273.129814][T12145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.129826][T12145] RIP: 0033:0x7f39bb79fb19 [ 273.129835][T12145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.129847][T12145] RSP: 002b:00007f39bc6d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 273.129862][T12145] RAX: ffffffffffffffda RBX: 00007f39bba25fa0 RCX: 00007f39bb79fb19 [ 273.129869][T12145] RDX: 0000000000000001 RSI: 0000200000000300 RDI: 0000000000000003 [ 273.129875][T12145] RBP: 00007f39bb837b70 R08: 0000000000000000 R09: 0000000000000000 [ 273.129882][T12145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 273.129891][T12145] R13: 00007f39bba26038 R14: 00007f39bba25fa0 R15: 00007ffe1dd4ed28 [ 273.129901][T12145] [ 273.129908][T12145] [ 273.129911][T12145] Allocated by task 1: [ 273.129916][T12145] kasan_save_stack+0x30/0x50 [ 273.129929][T12145] kasan_save_track+0x14/0x30 [ 273.129939][T12145] __kasan_slab_alloc+0x89/0x90 [ 273.129951][T12145] kmem_cache_alloc_noprof+0x269/0x6a0 [ 273.129969][T12145] acpi_ut_allocate_object_desc_dbg+0x86/0x240 [ 273.129980][T12145] acpi_ut_create_internal_object_dbg+0x51/0x260 [ 273.129991][T12145] acpi_ds_build_internal_object+0x173/0x790 [ 273.130003][T12145] acpi_ds_create_node+0xe3/0x280 [ 273.130013][T12145] acpi_ds_exec_end_op+0x10cf/0x1e60 [ 273.130024][T12145] acpi_ps_parse_loop+0x5e1/0x26e0 [ 273.130036][T12145] acpi_ps_parse_aml+0x81e/0x1120 [ 273.130049][T12145] acpi_ps_execute_table+0x393/0x500 [ 273.130063][T12145] acpi_ns_execute_table+0x596/0x970 [ 273.130072][T12145] acpi_ns_parse_table+0xcb/0x160 [ 273.130080][T12145] acpi_ns_load_table+0xc9/0x490 [ 273.130095][T12145] acpi_tb_load_namespace+0x2b0/0x8f0 [ 273.130106][T12145] acpi_load_tables+0x89/0x160 [ 273.130142][T12145] acpi_init+0x146/0x840 [ 273.130152][T12145] do_one_initcall+0x11c/0x6f0 [ 273.130163][T12145] kernel_init_freeable+0x6ea/0x7b0 [ 273.130177][T12145] kernel_init+0x21/0x1e0 [ 273.130190][T12145] ret_from_fork+0x730/0xd60 [ 273.130203][T12145] ret_from_fork_asm+0x1a/0x30 [ 273.130214][T12145] [ 273.130216][T12145] Freed by task 11610: [ 273.130221][T12145] kasan_save_stack+0x30/0x50 [ 273.130231][T12145] kasan_save_track+0x14/0x30 [ 273.130241][T12145] kasan_save_free_info+0x3b/0x70 [ 273.130255][T12145] __kasan_slab_free+0x5f/0x80 [ 273.130265][T12145] kmem_cache_free+0x127/0x6c0 [ 273.130278][T12145] acpi_os_release_object+0x1c/0x30 [ 273.130292][T12145] acpi_ut_delete_object_desc+0xea/0x130 [ 273.130303][T12145] acpi_ut_update_ref_count.part.0+0x510/0x2250 [ 273.130318][T12145] acpi_ut_update_object_reference+0x5f9/0x800 [ 273.130333][T12145] acpi_ut_remove_reference+0x192/0x1d0 [ 273.130347][T12145] acpi_rs_get_prt_method_data+0xcd/0x150 [ 273.130362][T12145] acpi_get_irq_routing_table+0xb8/0x140 [ 273.130371][T12145] acpi_pci_irq_find_prt_entry+0x178/0xdd0 [ 273.130387][T12145] acpi_pci_irq_lookup+0x8e/0x6b0 [ 273.130401][T12145] acpi_pci_irq_disable+0x1a8/0x360 [ 273.130410][T12145] pcibios_disable_device+0x89/0xb0 [ 273.130420][T12145] do_pci_disable_device+0x9f/0x100 [ 273.130433][T12145] pci_disable_device+0x130/0x270 [ 273.130446][T12145] virtio_pci_remove+0xcf/0x110 [ 273.130461][T12145] pci_device_remove+0xb2/0x1d0 [ 273.130473][T12145] device_remove+0xcb/0x180 [ 273.130483][T12145] device_release_driver_internal+0x441/0x610 [ 273.130496][T12145] pci_stop_bus_device+0x120/0x160 [ 273.130509][T12145] pci_stop_and_remove_bus_device+0x58/0xa0 [ 273.130523][T12145] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 273.130538][T12145] remove_store+0x123/0x140 [ 273.130546][T12145] dev_attr_store+0x58/0x80 [ 273.130559][T12145] sysfs_kf_write+0xf2/0x150 [ 273.130571][T12145] kernfs_fop_write_iter+0x3e0/0x5f0 [ 273.130604][T12145] vfs_write+0x6af/0x1040 [ 273.130613][T12145] ksys_write+0x12a/0x250 [ 273.130623][T12145] do_syscall_64+0x123/0x7b0 [ 273.130633][T12145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.130643][T12145] [ 273.130645][T12145] The buggy address belongs to the object at ffff888024859d68 [ 273.130645][T12145] which belongs to the cache Acpi-Operand of size 72 [ 273.130654][T12145] The buggy address is located 8 bytes inside of [ 273.130654][T12145] freed 72-byte region [ffff888024859d68, ffff888024859db0) [ 273.130663][T12145] [ 273.130666][T12145] The buggy address belongs to the physical page: [ 273.130670][T12145] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888024859e38 pfn:0x24859 [ 273.130681][T12145] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff) [ 273.130690][T12145] page_type: f5(slab) [ 273.130700][T12145] raw: 00fff00000000200 ffff88801d44da40 ffffea0000921b90 ffffea0000920690 [ 273.130709][T12145] raw: ffff888024859e38 0000000200270013 00000000f5000000 0000000000000000 [ 273.130715][T12145] page dumped because: kasan: bad access detected [ 273.130720][T12145] page_owner tracks the page as allocated [ 273.130724][T12145] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 2861996285 [ 273.130743][T12145] post_alloc_hook+0xfd/0x120 [ 273.130756][T12145] get_page_from_freelist+0x112f/0x3640 [ 273.130770][T12145] __alloc_frozen_pages_noprof+0x2ad/0x31e0 [ 273.130784][T12145] new_slab+0xb1/0x6d0 [ 273.130796][T12145] refill_objects+0xe3/0x410 [ 273.130809][T12145] __pcs_replace_empty_main+0x35e/0x650 [ 273.130822][T12145] kmem_cache_alloc_noprof+0x4bf/0x6a0 [ 273.130837][T12145] acpi_ut_allocate_object_desc_dbg+0x86/0x240 [ 273.130848][T12145] acpi_ut_create_internal_object_dbg+0x51/0x260 [ 273.130860][T12145] acpi_ds_build_internal_object+0x173/0x790 [ 273.130871][T12145] acpi_ds_build_internal_package_obj+0x481/0xe60 [ 273.130883][T12145] acpi_ds_eval_data_object_operands+0x2fd/0x640 [ 273.130895][T12145] acpi_ds_exec_end_op+0xe41/0x1e60 [ 273.130906][T12145] acpi_ps_parse_loop+0x5e1/0x26e0 [ 273.130918][T12145] acpi_ps_parse_aml+0x81e/0x1120 [ 273.130930][T12145] acpi_ps_execute_table+0x393/0x500 [ 273.130944][T12145] page_owner free stack trace missing [ 273.130947][T12145] [ 273.130950][T12145] Memory state around the buggy address: [ 273.130954][T12145] ffff888024859c00: fb fb fc fc fc fc 00 00 00 00 00 00 00 00 00 fc [ 273.130961][T12145] ffff888024859c80: fc fc fc fa fb fb fb fb fb fb fb fb fc fc fc fc [ 273.130968][T12145] >ffff888024859d00: fa fb fb fb fb fb fb fb fb fc fc fc fc fa fb fb [ 273.130973][T12145] ^ [ 273.130979][T12145] ffff888024859d80: fb fb fb fb fb fb fc fc fc fc fa fb fb fb fb fb [ 273.130986][T12145] ffff888024859e00: fb fb fb fc fc fc fc fa fb fb fb fb fb fb fb fb [ 273.130991][T12145] ================================================================== [ 273.136963][T12145] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 273.569672][T12145] CPU: 1 UID: 0 PID: 12145 Comm: syz.6.1955 Tainted: G L syzkaller #0 PREEMPT(full) [ 273.574127][T12145] Tainted: [L]=SOFTLOCKUP [ 273.575948][T12145] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 273.580128][T12145] Call Trace: [ 273.581564][T12145] [ 273.582857][T12145] dump_stack_lvl+0x100/0x190 [ 273.584357][T12145] vpanic+0x2dc/0x6f8 [ 273.585970][T12145] panic+0xd1/0xe0 [ 273.587575][T12145] ? __pfx_panic+0x10/0x10 [ 273.589473][T12145] ? acpi_ns_get_attached_object+0x148/0x1b0 [ 273.592023][T12145] ? preempt_schedule+0x57/0xd0 [ 273.594045][T12145] check_panic_on_warn.cold+0x19/0x34 [ 273.596199][T12145] end_report.part.0+0x3a/0x90 [ 273.598188][T12145] kasan_report.cold+0xe/0x18 [ 273.600202][T12145] ? acpi_ns_get_attached_object+0x148/0x1b0 [ 273.602728][T12145] acpi_ns_get_attached_object+0x148/0x1b0 [ 273.605155][T12145] acpi_ex_resolve_node_to_value+0xb7/0x9a0 [ 273.607624][T12145] ? acpi_ut_trace_ptr+0x1d2/0x2a0 [ 273.609787][T12145] ? __pfx_acpi_ex_resolve_node_to_value+0x10/0x10 [ 273.612546][T12145] ? acpi_ds_create_operand+0x267/0xc20 [ 273.614902][T12145] acpi_ex_resolve_to_value+0x3da/0xcd0 [ 273.616849][T12145] ? __pfx_acpi_ex_resolve_to_value+0x10/0x10 [ 273.618755][T12145] ? __pfx_acpi_ns_lookup+0x10/0x10 [ 273.620439][T12145] ? __asan_memset+0x23/0x50 [ 273.621902][T12145] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 273.623971][T12145] acpi_ds_evaluate_name_path+0x30d/0x4a0 [ 273.626356][T12145] ? __pfx_acpi_ds_evaluate_name_path+0x10/0x10 [ 273.628984][T12145] ? acpi_ps_get_next_namepath+0x1f6/0xa10 [ 273.631399][T12145] ? acpi_ut_trace_ptr+0x1d1/0x2a0 [ 273.633546][T12145] acpi_ds_exec_end_op+0xb78/0x1e60 [ 273.635754][T12145] ? __pfx_acpi_ds_exec_end_op+0x10/0x10 [ 273.638091][T12145] acpi_ps_parse_loop+0x5e1/0x26e0 [ 273.640273][T12145] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 273.642598][T12145] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 273.644956][T12145] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 273.647480][T12145] ? acpi_ut_create_thread_state+0x6d/0x170 [ 273.649984][T12145] acpi_ps_parse_aml+0x81e/0x1120 [ 273.651650][T12145] acpi_ps_execute_method+0x5c4/0xe90 [ 273.653336][T12145] acpi_ns_evaluate+0x640/0x1670 [ 273.654904][T12145] acpi_ut_evaluate_object+0xf7/0x610 [ 273.656588][T12145] acpi_rs_get_prt_method_data+0xa0/0x150 [ 273.658382][T12145] ? __pfx_acpi_rs_get_prt_method_data+0x10/0x10 [ 273.660551][T12145] ? acpi_ut_status_exit+0x111/0x1c0 [ 273.662258][T12145] ? acpi_rs_validate_parameters+0x104/0x210 [ 273.664147][T12145] acpi_get_irq_routing_table+0xb8/0x140 [ 273.665903][T12145] ? __pfx_acpi_get_irq_routing_table+0x10/0x10 [ 273.667858][T12145] ? do_raw_spin_lock+0x128/0x260 [ 273.669490][T12145] acpi_pci_irq_find_prt_entry+0x178/0xdd0 [ 273.671336][T12145] ? do_raw_spin_lock+0x128/0x260 [ 273.672922][T12145] ? __pfx_acpi_pci_irq_find_prt_entry+0x10/0x10 [ 273.674908][T12145] ? mark_held_locks+0x40/0x70 [ 273.676757][T12145] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 273.679218][T12145] acpi_pci_irq_lookup+0x8e/0x6b0 [ 273.681366][T12145] ? __pfx_acpi_pci_irq_lookup+0x10/0x10 [ 273.683753][T12145] acpi_pci_irq_disable+0x1a8/0x360 [ 273.685941][T12145] ? __pfx_acpi_pci_irq_disable+0x10/0x10 [ 273.688316][T12145] pcibios_disable_device+0x89/0xb0 [ 273.690378][T12145] do_pci_disable_device+0x9f/0x100 [ 273.692522][T12145] ? __pfx_do_pci_disable_device+0x10/0x10 [ 273.694983][T12145] ? put_device+0x24/0x30 [ 273.696807][T12145] pci_disable_device+0x130/0x270 [ 273.698948][T12145] e1000_remove+0x304/0x3e0 [ 273.700894][T12145] pci_device_remove+0xb2/0x1d0 [ 273.702978][T12145] ? __pfx_pci_device_remove+0x10/0x10 [ 273.705286][T12145] device_remove+0xcb/0x180 [ 273.707246][T12145] device_release_driver_internal+0x441/0x610 [ 273.709667][T12145] pci_stop_bus_device+0x120/0x160 [ 273.711324][T12145] pci_stop_and_remove_bus_device+0x58/0xa0 [ 273.713603][T12145] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 273.716345][T12145] remove_store+0x123/0x140 [ 273.718289][T12145] ? __pfx_remove_store+0x10/0x10 [ 273.720419][T12145] ? find_held_lock+0x2b/0x80 [ 273.722442][T12145] ? sysfs_file_kobj+0xe4/0x290 [ 273.724424][T12145] ? sysfs_file_kobj+0xe4/0x290 [ 273.726434][T12145] ? __pfx_remove_store+0x10/0x10 [ 273.728567][T12145] dev_attr_store+0x58/0x80 [ 273.730495][T12145] ? __pfx_dev_attr_store+0x10/0x10 [ 273.732675][T12145] sysfs_kf_write+0xf2/0x150 [ 273.734633][T12145] kernfs_fop_write_iter+0x3e0/0x5f0 [ 273.736845][T12145] ? __pfx_sysfs_kf_write+0x10/0x10 [ 273.739023][T12145] vfs_write+0x6af/0x1040 [ 273.740931][T12145] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 273.743439][T12145] ? __pfx_vfs_write+0x10/0x10 [ 273.745452][T12145] ? find_held_lock+0x2b/0x80 [ 273.746974][T12145] ksys_write+0x12a/0x250 [ 273.748351][T12145] ? __pfx_ksys_write+0x10/0x10 [ 273.749953][T12145] do_syscall_64+0x123/0x7b0 [ 273.751819][T12145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.754307][T12145] RIP: 0033:0x7f39bb79fb19 [ 273.756227][T12145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.764159][T12145] RSP: 002b:00007f39bc6d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 273.767624][T12145] RAX: ffffffffffffffda RBX: 00007f39bba25fa0 RCX: 00007f39bb79fb19 [ 273.770947][T12145] RDX: 0000000000000001 RSI: 0000200000000300 RDI: 0000000000000003 [ 273.774208][T12145] RBP: 00007f39bb837b70 R08: 0000000000000000 R09: 0000000000000000 [ 273.777515][T12145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 273.781075][T12145] R13: 00007f39bba26038 R14: 00007f39bba25fa0 R15: 00007ffe1dd4ed28 [ 273.783806][T12145] [ 273.785431][T12145] Kernel Offset: disabled [ 273.786820][T12145] Rebooting in 86400 seconds.. VM DIAGNOSIS: 19:45:01 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000001 RBX=0000000000000001 RCX=0000000000000001 RDX=ffff88801e758000 RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc900007cfda8 RSP=ffffc900007cf950 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000003 R11=53414b203a475542 R12=ffffffff90e09260 R13=ffffc900007cfda8 R14=0000000000000000 R15=ffffc900007cfdb4 RIP=ffffffff820e7b10 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d4471000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f5598438286 CR3=000000003f936000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c4c0c004 Opmask01=0000000000000000 Opmask02=0000000011000303 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000069622f ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000002a2e 2573257325003a25 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffff0f0e0d ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055e0276b0ce8 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 353d646970006e69 622f7273752f3a6e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 00007f559833342d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055e0276a2520 000055e0276a2520 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055e0276ad4d0 000055e0276a02c0 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055e02700662d 000055e0276b0ce8 000055e0276b0d08 665f65676e006d72 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055e02700662d 000055e0276b0ce8 000055e0276b0d08 665f65676e006d72 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055cf08004902 000055cf08440cc7 000055cf08440d08 495f4a484100425d ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055e0276ad0b8 0000000000000000 000000000000000f 000055e02700873d ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055e0276a7918 0000000000000000 000000000000000f 0000000000875d81 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000074 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85c367d5 RDI=ffffffff9cf57000 RBP=ffffffff9cf56fc0 RSP=ffffc900065b6a40 R8 =000000000000001f R9 =0000000000000000 R10=0000000000000003 R11=203a4e415341205b R12=0000000000000000 R13=0000000000000074 R14=0000000000000007 R15=ffffc900065b6d58 RIP=ffffffff85c367ff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f39bc6d06c0 ffffffff 00c00000 GS =0000 ffff8880d4571000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055e0276a0300 CR3=000000005f41e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000005000001 Opmask01=0000000000000001 Opmask02=0000000000040000 Opmask03=0000000000000000 Opmask04=00000000ffffefff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdf84450cb 00007ffdf84450cb ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdf84455d0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdf84455d0 0000003000000018 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65746e6f63007325 203a726f72726520 64656e7275746572 2072657672657300 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 40514b4a46005600 051f574a57574005 41404b5750514057 0557405357405600 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 736e5f6970636120 3f20205d35343132 31545b5d34333738 32312e3337322020 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 313d657669737369 6d72657020726964 3d7373616c637420 745f7366706d743a ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 725f7463656a626f 3a755f6d65747379 733d747865746e6f 637420745f637063 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 68643a725f6d6574 7379733a755f6d65 747379733d747865 746e6f6373203835 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 38313d6f6e692022 7366706d74223d76 6564202265746174 732d6b6f6f68223d ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 38313d6f6e692022 7366706d74223d76 6564202265746174 732d6b6f6f68223d ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000002c558d RBX=ffff888020ab2580 RCX=ffffffff8bef7375 RDX=0000000000000001 RSI=ffffffff8e629a5f RDI=ffffffff8c835a80 RBP=ffffed10041564b0 RSP=ffffc90000197e00 R8 =0000000000000001 R9 =ffffed100d446825 R10=ffff88806a23412b R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000032fc4 R15=dffffc0000000000 RIP=ffffffff8bef580f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d4671000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000564f33320da8 CR3=00000000399e3000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffecc501406 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffecc501406 00007ffecc50140c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6f678381ad ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6f678381e7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6f6783834b ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6f678381d9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000001 RBX=ffff8880390a6280 RCX=ffffffff8be80553 RDX=0000000000000001 RSI=0000000000000004 RDI=ffffffff9d12cbe0 RBP=0000000000000001 RSP=ffffc90006607650 R8 =0000000000000001 R9 =fffffbfff3a2597c R10=0000000000000003 R11=0000000000000001 R12=ffff888038debd80 R13=000000000000000a R14=0000000000000001 R15=0000000000000000 RIP=ffffffff8be8055a RFL=00000207 [-----PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d4771000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f205dba3440 CR3=00000000374d9000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 766c6f7365726269 6c2f343662696c2f ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000c10 000000000000d3f0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffffffffffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001da0 0000000000033260 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000