last executing test programs: 34.970023695s ago: executing program 0 (id=161): bpf$TOKEN_CREATE(0x24, &(0x7f0000000240), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x3, 0x3ffdcf, 0xaf0, 0x0, 0xffffffffffffffff, 0x7fffffff}, 0x50) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@host}) ioctl$OCFS2_IOC_UNRESVSP(r1, 0x40305829, &(0x7f0000000040)={0x1, 0x0, 0x400, 0x6, 0x4}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x14, 0x16, 0x1, 0x0, 0x0, {0xa, 0x0, 0x6e80}}, 0x14}, 0x1, 0x0, 0x0, 0x44014}, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@host}, 0x1}) 34.968282058s ago: executing program 0 (id=163): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0xe22}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f00000001c0)=0x9, 0x4) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000200)=0xffff, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0xe22}, 0x1c) syz_emit_ethernet(0xd2, &(0x7f0000000280)=ANY=[@ANYBLOB="0180c200000e2059249b379086dd60108114009c110000000000000000000000000000000000ff02000000000000000000000000000140000e22009c90"], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt(r5, 0x1, 0x3, 0x0, &(0x7f0000000340)) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r4, @ANYRES8], 0x44}}, 0x2000800) open$dir(&(0x7f0000000300)='./file0\x00', 0x101040, 0x119) open(&(0x7f00000000c0)='./file0\x00', 0x9c41, 0x0) 34.859748448s ago: executing program 0 (id=165): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000400)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f00000004c0)=0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000500)={r3, @in6={{0x2, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x4}}, 0x8000, 0x6}, &(0x7f00000005c0)=0x90) r4 = syz_open_dev$usbfs(&(0x7f0000000ac0), 0xffffffffffffffff, 0x1781) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000200)=@urb_type_iso={0x0, {0x1, 0x1}, 0x4, 0xa0, &(0x7f0000000280)="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", 0x16e, 0x9, 0x8, 0x1, 0x8c, 0xf, &(0x7f0000000140)="be8778ef48c3ee468b1f417360d4378aeb00315d4158971643e33868ad598e660381fd3adfb74eafcee62ca56c0bffbdc03b5e79641133618f3e7dec2d56d56671afadf37c0bfa6434be9eda18b0d02099fbc0c3386ee31a6cdbce57ba20716f0e6325b82b5dd33a727de244cbfac91be4035d810cf80f4ab7e13bfdbf74cc5a4a", [{0x7, 0x3, 0x2}]}) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) shutdown(r1, 0x0) (async) close(0x3) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000080)=0x10) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000400)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f00000004c0)=0x84) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000500)={r3, @in6={{0x2, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x4}}, 0x8000, 0x6}, &(0x7f00000005c0)=0x90) (async) syz_open_dev$usbfs(&(0x7f0000000ac0), 0xffffffffffffffff, 0x1781) (async) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000200)=@urb_type_iso={0x0, {0x1, 0x1}, 0x4, 0xa0, &(0x7f0000000280)="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", 0x16e, 0x9, 0x8, 0x1, 0x8c, 0xf, &(0x7f0000000140)="be8778ef48c3ee468b1f417360d4378aeb00315d4158971643e33868ad598e660381fd3adfb74eafcee62ca56c0bffbdc03b5e79641133618f3e7dec2d56d56671afadf37c0bfa6434be9eda18b0d02099fbc0c3386ee31a6cdbce57ba20716f0e6325b82b5dd33a727de244cbfac91be4035d810cf80f4ab7e13bfdbf74cc5a4a", [{0x7, 0x3, 0x2}]}) (async) 34.846768629s ago: executing program 0 (id=166): r0 = socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x101091, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000004c0)=@nfc_llcp, 0x80, &(0x7f0000000680)=[{&(0x7f0000000540)=""/255, 0xff}, {&(0x7f0000000640)=""/34, 0x22}], 0x2}, 0x2020) mount$bind(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x185093, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x404, &(0x7f0000000440)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}}, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xf) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="b9990300000f320fc79c36a58df6dc0f2200c4c155e9d026f2ab0f005c9b000f01c5670f01c266baf80cb8b6fed48aef66bafc0cec0f0b", 0x37}], 0x1, 0x20, &(0x7f00000000c0), 0x0) socket$netlink(0x10, 0x3, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000004c0)=@nfc_llcp, 0x80, &(0x7f0000000680)=[{&(0x7f0000000540)=""/255, 0xff}, {&(0x7f0000000640)=""/34, 0x22}], 0x2}, 0x2020) (async) mount$bind(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async) mount$bind(0x0, &(0x7f00000002c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x185093, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) (async) mount$fuse(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x404, &(0x7f0000000440)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}}, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xf) (async) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="b9990300000f320fc79c36a58df6dc0f2200c4c155e9d026f2ab0f005c9b000f01c5670f01c266baf80cb8b6fed48aef66bafc0cec0f0b", 0x37}], 0x1, 0x20, &(0x7f00000000c0), 0x0) (async) 33.949559499s ago: executing program 0 (id=172): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="bfa200000000000007020000fcffffff620200000000000018110000", @ANYRES32=r1, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf610000f30000000701000004000000850000005d000000bf610000000000000701000004000000850000005d000000b70000000000000095"], &(0x7f0000000540)='GPL\x00', 0x7, 0x0, 0x0, 0x2a079ff5b90a2b9f, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 33.539267021s ago: executing program 0 (id=179): r0 = syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x0) syz_usb_disconnect(r0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) 33.475377476s ago: executing program 32 (id=179): r0 = syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x0) syz_usb_disconnect(r0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) 13.27749961s ago: executing program 4 (id=420): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/reserved_size', 0x101002, 0x2a) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x4, &(0x7f0000000180)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xc}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000280)) (async) ioctl$PPPIOCGFLAGS1(r1, 0x8004745a, &(0x7f00000002c0)) (async) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f0000000080)={0x2, 0x0, [0x7fe0, 0x74a4, 0xffff, 0x8c, 0x5, 0x9, 0xa, 0xf83]}) r2 = syz_open_dev$radio(&(0x7f0000000040), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000200)={0x9a0000, 0x48, 0x0, r0, 0x0, 0x0}) (async) fsync(r0) sendfile(r0, r0, 0x0, 0x40000000401) 13.109555861s ago: executing program 4 (id=425): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) close(r0) syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) ioctl$KVM_CREATE_VM(r0, 0x40045506, 0x23) (fail_nth: 1) 11.930987672s ago: executing program 4 (id=433): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = fsopen(&(0x7f00000001c0)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000200)='rootcontext', &(0x7f0000000280)='E\xe1\x85\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x4c881, &(0x7f0000000040)={0xa, 0x4e24, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x25}}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@setlink={0x28, 0x13, 0xbaa23f3d13f2d1f5, 0x0, 0x800000, {0x0, 0x0, 0x0, r5, 0x16968, 0x10000}, [@IFLA_MTU={0x8, 0x4, 0x7f}]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x40) sendmmsg$inet6(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x84) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x820) 11.849853343s ago: executing program 4 (id=435): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0xa0) (async) unshare(0x22020600) mount$bind(&(0x7f0000000340)='.\x00', &(0x7f0000000380)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) chroot(&(0x7f00000003c0)='./file0/../file0\x00') (async) mount$bind(&(0x7f0000000b00)='.\x00', &(0x7f0000000b40)='./file0\x00', 0x0, 0xd5848, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x6, 0xa, 0x20}, {0x8, 0x11, 0x100000002, 0x0, 0xfff, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x4040}, 0x8020) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x4, 0x0, 0x0, {{@in6=@private2, @in, 0x0, 0x0, 0x0, 0x4, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) pivot_root(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='./file0/../file0\x00') (async) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) 11.849691673s ago: executing program 4 (id=436): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x8, 0x8, 0x100, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000026c0)={0xffffffffffffffff, 0x0, 0x6, 0x0, &(0x7f0000002740)='\x00\x00\x00\x00\x00\x00', 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f00000001c0)={&(0x7f0000002780)={0x2, 0x4c20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000027c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x3c}}}}], 0x20}, 0xe900) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002800)={0xc, 0xe, &(0x7f00000028c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003500)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003540)={r1, 0x18000000000002a0, 0x36, 0xfffffeb2, &(0x7f00000035c0)="b9ff03076804268cb89e14f086dd47e0ffff2000002800000000ac141416e000000129a130112b92121f9ae0dd972fa104edcce40d8d", 0x0, 0x2800, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) write$cgroup_subtree(r0, &(0x7f0000003600)=ANY=[], 0xfe33) 11.509361743s ago: executing program 4 (id=440): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="ff8e111191c273bbb23654f2873eee25c48674eb11926de30e14c7bcdc125633c218edacae60", @ANYRES16=r1, @ANYBLOB="010027bd7000fbdbdf25010000000b0001004e45545f444d000008000200030000000800070000000000080004000300000008000800e0000001"], 0x40}, 0x1, 0x0, 0x0, 0x40000c0}, 0x4) 11.475495485s ago: executing program 33 (id=440): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="ff8e111191c273bbb23654f2873eee25c48674eb11926de30e14c7bcdc125633c218edacae60", @ANYRES16=r1, @ANYBLOB="010027bd7000fbdbdf25010000000b0001004e45545f444d000008000200030000000800070000000000080004000300000008000800e0000001"], 0x40}, 0x1, 0x0, 0x0, 0x40000c0}, 0x4) 5.159011441s ago: executing program 3 (id=525): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) (async) ioctl$FITHAW(r0, 0xc0045878) writev(r0, &(0x7f0000002500)=[{&(0x7f0000002080)="b5fd87ab71b18bff5b07bc2b30c5e7177904b9613cf3ccd82261a9aa54dc0fc1dc25ecbfe115c1cf269054f34f0e492e922c6e99ea28e3c184ca195d03de10628f650815f9d31d6b0f8eb1089fcb579675a96fa665b3020f39d8c146ef7758d7e121262effaa3934230e368069d4daea425c49a911e50089e3eaad0977fd592de5d60521fb82725a23271cea63b2fc739d92c08920ae62a12439416790e9e0026f7919ef8bf3260efdd8a0b054b1dcc7a00ee139bb73bd2c11fb8da3f9e58ffc7ac4", 0xc2}, {&(0x7f0000002180)="b136c15a24c7c0a21e87dadb093d7bd64a83d6fd8c797e1a0409ef2152fbebecc15f4b739759cd88317f38c51cbd8d4c6214be0adb4be5c86fa4bc74271d4878ab6680a460f5d2d2e5dc3a3cdf86f618e897f33ee373ee4af9bf9ebe9cecc3be19ebc2806fcea6c092f0fee9d36d07dd5d2808e6dd134f3d29fca4805cc42ff6b0f42a017072b1e92f7aeacdb5c582d688fca47e8629c590a9237897fa0249150897701a7f0f5e9d5f4e65e793b994316089984861c07f4347895aae412388c2eb76789b9a7c56076f0f02ea7573f57541f2b26416c5407238b9d1d486638f1900e70065ece537c7689f0b16dab977fc0aaa", 0xf2}, {&(0x7f0000002280)="45ee2b7415b97f924163106ad686fd458f5ef61448e93b8089850b987654cdcc2c26acfb4355dba6a2b94aec19ecc8a3f9e0f22a2953ea7d20cc848251f694d395499f37c50e5d2b94b41923c00d9866f294a4a6821dce77262674b08794ed", 0x5f}, {&(0x7f0000002300)}, {&(0x7f0000002340)="ce63c9b1698ef853182824cf12e6b451be9922e14400be8093f6fc3764e924751c9e9bb28eb3375c75ea01e634ed4f1c251ae652e38814a5712841f617cc7bf130e855603633618758ac3ab1598a77c19c7c505b3e3de2e0b9d2c329643bac212a8ad4529aaaf22fb0299d540f8e8c761b871dda0db1a5adfa42b5f77f3418d29f67f38b6cc992ad0140151f650bc9ce2f7a442dc8421c0f21d92732", 0x9c}, {&(0x7f0000002400)="3f812d3d09b822353fcd5919e0aec2065e5815c93b534911f3b971aa4e075c4f", 0x20}, {&(0x7f0000002440)="41a285077ef29a7ce9b78fd9a96ee0e89c2fc267ad8e3e260a0b89c9d32c98cd046dacbfaa904ece3484e9fb7bff661c3f644f27d750d209250aeb7934a3fde1915018d7aa72e2b8b5685f9c00e377d7a04487b411cf50a5a2a3ea17efa37210950dcd065f09f42b50cac096685c3b385c29fff0c8f5675135e6aea3920c914c372ecb8eef9549d11e13c9fca8b52e0f6e4b781fca54c63b2029fc534a1580386914195829a56029a169eaf62caa0bfdf8db2ff7d2fb168d3ced92388a31f6", 0xbf}], 0x7) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000002580)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) fchmodat(r1, &(0x7f00000025c0)='./file0\x00', 0x1) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000002600)={0x3b, 0x2, 0x1, 0x2, 0x0, [@remote]}, 0x18) (async) ioctl$CEC_ADAP_S_PHYS_ADDR(r1, 0x40026102, &(0x7f0000002640)=0x7a6a) (async, rerun: 64) r2 = socket$rxrpc(0x21, 0x2, 0xa) (rerun: 64) ioctl$INCFS_IOC_PERMIT_FILL(r2, 0x40046721, &(0x7f0000002680)={r0}) (async) ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, &(0x7f00000026c0)) (async) ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000002700)) (async) r3 = syz_socket_connect_nvme_tcp() ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r3, 0x40086e81, &(0x7f0000002740)=0x1) ioctl$AUTOFS_IOC_CATATONIC(r3, 0x9362, 0x0) (async) ioctl$SNDCTL_SEQ_PANIC(r1, 0x5111) mkdirat(r1, &(0x7f0000002780)='./file0\x00', 0x20) ioctl$CDROMREADMODE1(r1, 0x530d, &(0x7f00000027c0)={0xe, 0x8c, 0x2, 0x6, 0x3, 0x3}) (async, rerun: 32) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003280), r1) (rerun: 32) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000003400)={&(0x7f0000003240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000033c0)={&(0x7f00000032c0)={0xf0, r4, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x20}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1f}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x13}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1000000}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x2}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x5}, @chandef_params, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x24f}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x15}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x74}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7fd}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x12c}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xf23}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15f4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x3}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4000080}, 0x20004000) (async) fcntl$setflags(r3, 0x2, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) (async, rerun: 64) mkdir(&(0x7f0000003440)='./file0\x00', 0x2) (async, rerun: 64) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01864c1, &(0x7f0000003480)={0x0, 0x0, 0xffffffffffffffff}) copy_file_range(r3, 0x0, r5, &(0x7f00000034c0)=0xea1f, 0xd8, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r5, 0xc0046686, &(0x7f0000003500)={0x1, 0x54, "5539f6fb09a71976bbf39c40d53579c19c7738d72e06dcd6a1fd84b53d844c2ea720136f4818e2752dc813cabc5be9d7b827a3230a8a42e2084aa643370ccb8095a9869118f834250e4cb514d2292ceb88dde488"}) ioctl$DRM_IOCTL_PANTHOR_GROUP_CREATE(r1, 0xc0386447, &(0x7f00000035c0)={{0x8, 0x7, &(0x7f0000003580)=[{0xb0, 0x0, 0xfffffffc}, {0xc, 0x0, 0x9}, {0x4, 0x0, 0x4c0}, {0x40, 0x0, 0x4}, {0x9, 0x0, 0x18c}, {0x1, 0x0, 0x6}, {0x40, 0x0, 0x200000}]}, 0x7, 0x8f, 0x7, 0x1, 0x0, 0x5, 0x8d4b, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_PANTHOR_GROUP_GET_STATE(r3, 0xc010644a, &(0x7f0000003600)={r6}) (async, rerun: 64) r7 = accept4(r3, &(0x7f0000003640)=@ethernet={0x0, @local}, &(0x7f00000036c0)=0x80, 0x80000) (rerun: 64) ioctl$XFS_IOC_FSGETXATTRA(r7, 0x801c582d, &(0x7f0000003700)) 5.049639883s ago: executing program 3 (id=526): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x14d802, 0x0) r1 = dup(r0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000100)={r0, &(0x7f0000000000)='/dev/nullb0\x00', 0x400000, &(0x7f0000000040)={@align, {0x1, 0x7, 0x1, 0xc9}}, 0x5, &(0x7f0000000080), &(0x7f00000000c0)=0x200}) ioctl$FS_IOC_SETFLAGS(r2, 0x40081271, &(0x7f00000003c0)=0x800000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x28011, r1, 0x2cb25000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 4.052907273s ago: executing program 1 (id=535): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000700)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002dbd7000fcdbdf253900000008000300", @ANYRES32=0x0, @ANYBLOB="28005a8024000280050001000b00000015000200040c3910574c00356e0a01334d522c3b030000735300"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4004) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000600), 0x102, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000640)=0x3) write$FUSE_DIRENT(r1, &(0x7f0000000680)=ANY=[], 0x128) read(r1, &(0x7f00000006c0)=""/21, 0x15) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000028c0), r0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x404}, 0xe) listen(r3, 0xfff) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000040)={'syz0\x00', {0x9, 0xb, 0x6, 0x100}, 0x3c, [0x8000, 0x6, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x56, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x8, 0x7, 0x81, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x8000004, 0x7, 0x3, 0x8, 0x80004c74, 0x80000000, 0x0, 0x3, 0x40000e, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x9, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10080007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x80007, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x9, 0x4, 0x4, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x2, 0xff, 0x6, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x1, 0x9, 0x7fff, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0xe304, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x6, 0x1000a, 0x4, 0x5, 0xfffffffe, 0x103, 0x4, 0x9, 0x8, 0x2, 0xffffffff, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x10006, 0x5, 0xffffffff, 0x86, 0x3, 0x303c, 0x3e7, 0x4, 0x5, 0x2, 0x9, 0x3, 0x2, 0x2, 0x6d02, 0x6, 0x38, 0x800003, 0x1fd, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x3, 0x2, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120001, 0x3, 0x2006, 0x80a2eb, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1fd, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x0, 0x2, 0x5, 0x1, 0x0, 0x14c, 0x60a7, 0x6, 0x96, 0xfffffffb, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x8, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x2, 0x5, 0x5, 0x5, 0x4, 0x30b1d68f, 0xa1f, 0xcb, 0xba, 0x1, 0x6c1b, 0x0, 0x1, 0x5, 0xb1e, 0xd7, 0x200, 0xe, 0xa77e]}, 0x45c) ppoll(&(0x7f00000004c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000002ef16e8832d46e622cbe6f384e32", @ANYRES16=r2, @ANYBLOB="bbdf26bd7000fedbdf251f000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000700)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002dbd7000fcdbdf253900000008000300", @ANYRES32=0x0, @ANYBLOB="28005a8024000280050001000b00000015000200040c3910574c00356e0a01334d522c3b030000735300"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4004) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000600), 0x102, 0x0) (async) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000640)=0x3) (async) write$FUSE_DIRENT(r1, &(0x7f0000000680)=ANY=[], 0x128) (async) read(r1, &(0x7f00000006c0)=""/21, 0x15) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f00000028c0), r0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x404}, 0xe) (async) listen(r3, 0xfff) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000040)={'syz0\x00', {0x9, 0xb, 0x6, 0x100}, 0x3c, [0x8000, 0x6, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x56, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x8, 0x7, 0x81, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x8000004, 0x7, 0x3, 0x8, 0x80004c74, 0x80000000, 0x0, 0x3, 0x40000e, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x9, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10080007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x80007, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x9, 0x4, 0x4, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x2, 0xff, 0x6, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x1, 0x9, 0x7fff, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0xe304, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x6, 0x1000a, 0x4, 0x5, 0xfffffffe, 0x103, 0x4, 0x9, 0x8, 0x2, 0xffffffff, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x10006, 0x5, 0xffffffff, 0x86, 0x3, 0x303c, 0x3e7, 0x4, 0x5, 0x2, 0x9, 0x3, 0x2, 0x2, 0x6d02, 0x6, 0x38, 0x800003, 0x1fd, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x3, 0x2, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120001, 0x3, 0x2006, 0x80a2eb, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1fd, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x0, 0x2, 0x5, 0x1, 0x0, 0x14c, 0x60a7, 0x6, 0x96, 0xfffffffb, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x8, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x2, 0x5, 0x5, 0x5, 0x4, 0x30b1d68f, 0xa1f, 0xcb, 0xba, 0x1, 0x6c1b, 0x0, 0x1, 0x5, 0xb1e, 0xd7, 0x200, 0xe, 0xa77e]}, 0x45c) (async) ppoll(&(0x7f00000004c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000002ef16e8832d46e622cbe6f384e32", @ANYRES16=r2, @ANYBLOB="bbdf26bd7000fedbdf251f000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) (async) 4.052365904s ago: executing program 3 (id=537): r0 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000000c0)) (async) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000100)=0x1) (async) symlinkat(&(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') r1 = syz_io_uring_setup(0x24, &(0x7f0000000240)={0x0, 0x0, 0x800, 0x0, 0xfffffffe}, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0, 0x118) syz_io_uring_submit(r2, r3, r4, &(0x7f00000003c0)=@IORING_OP_READV_FIXED={0x3c, 0x2, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) (async) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) (async) setns(0xc9, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0, 0x0) (async) r6 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) (async, rerun: 32) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async, rerun: 32) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="48310600003f000008000a00", @ANYRES32, @ANYBLOB="1c0012800e00014069703665727370616e"], 0x44}, 0x1, 0x0, 0x0, 0x20004081}, 0x40000) 3.958595731s ago: executing program 1 (id=539): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='n\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fddbdf250700000008000300", @ANYRES32=r3, @ANYBLOB="0c0099000300000028000000140004006e6963766630000000000000000000000a00e80008021100000000000800050006000000"], 0x50}, 0x1, 0x0, 0x0, 0x48004}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ef) socket$unix(0x1, 0x2, 0x0) sendmsg$sock(r2, &(0x7f0000000480)={&(0x7f00000002c0)=@ethernet={0x306, @link_local}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000340)="495b19942399083ed187902998d702bd38bd7c801b3d0a038075ead33ed5241678e685d9a011ee93def87302c89c50c2aab7e2ec6a89a5cbc8ddae3169e87cc2372f046b1f9a1e55521d070ffb408e9eb917a0460e59f0f6e9a515865f0b996ce8654f23d456e66820503d5b4f91bf924fb762b780b47d9792188f0d75df43d2b36a6830490ac3dfc8245f9259af6e71143bbe9bd79b064ddacb79844ea4ef988e6ae634a83b769dbe54b204cd6c7edb214e055ba70f68618ddb57358141d30b5022f1c95d34555fe184c25dc0543e49212938c12f7e45cec89d9d3a518fde1d816eccbb", 0xe4}], 0x1}, 0x0) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/net/bond0/bonding/arp_validate\x00', 0x1, 0x0) 3.879929569s ago: executing program 5 (id=540): r0 = io_uring_setup(0x36b, &(0x7f0000000500)={0x0, 0x3b58, 0x800, 0x1, 0x26d}) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000000580)={0x27, 0x1, 0x0, 0x0, &(0x7f00000005c0)}, 0x20) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1c0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@upperdir={'upperdir', 0x3d, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@redirect_dir_off}]}) chdir(&(0x7f0000000140)='./bus\x00') bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)=@o_path={&(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x4018, r1}, 0x18) r2 = open(&(0x7f00000000c0)='./file1\x00', 0x105f00, 0x393) renameat2(r2, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', r2, &(0x7f00000002c0)='./file0\x00', 0x2) 3.879453232s ago: executing program 1 (id=541): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001a000100000000000000000081000000000000000000000008000f00fe"], 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x1, 0x20, 0x7, 0x6, {{0x24, 0x4, 0x1, 0xf, 0x90, 0x65, 0x0, 0xf6, 0x2f, 0x0, @multicast2, @multicast2, {[@timestamp_prespec={0x44, 0x4c, 0x6e, 0x3, 0x1, [{@local}, {@rand_addr=0x64010102, 0x3}, {@empty, 0x5}, {@private=0xa010100, 0x2}, {@local, 0x2}, {@local, 0x5}, {@local, 0xff}, {@remote, 0x8}, {@broadcast, 0x8}]}, @rr={0x7, 0x7, 0x1b, [@loopback]}, @ssrr={0x89, 0x7, 0x7f, [@multicast1]}, @generic={0x44, 0x8, "752fd9592480"}, @end, @lsrr={0x83, 0x17, 0xc6, [@remote, @broadcast, @rand_addr=0x64010100, @local, @rand_addr=0x64010100]}]}}}}}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@mpls_delroute={0x2c, 0x19, 0x2, 0x70bd2c, 0x25dfdbff, {0x1c, 0x20, 0x10, 0xb4, 0xfd, 0x0, 0xff, 0x7, 0x800}, [@RTA_DST={0x8, 0x1, {0x7fff}}, @RTA_OIF={0x8, 0x4, r2}]}, 0x2c}}, 0x0) 3.878098569s ago: executing program 1 (id=543): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x1c3902, 0x0) sendfile(r4, r4, 0x0, 0x20000005) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0xa4242, 0x0) mount$9p_rdma(&(0x7f0000000280), &(0x7f00000002c0)='.\x00', &(0x7f0000000300), 0x1008840, 0x0) sendfile(r5, r4, 0x0, 0x1002000ff) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@getchain={0x24, 0x66, 0x903, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xc, 0x7}, {0x2, 0xfff1}, {0xfff2, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) close(r6) connect$bt_rfcomm(r1, &(0x7f0000000340)={0x1f, @any, 0xb}, 0xa) syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) ioctl$KVM_CREATE_VM(r6, 0x40045506, 0x23) 3.877737342s ago: executing program 5 (id=544): r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x38) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f0000000040), &(0x7f0000000080)=0x8) write$binfmt_script(r1, &(0x7f0000000500)={'#! ', './file0'}, 0xb) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd87}, &(0x7f0000000240)=0x40) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)="f2", 0x1}], 0x1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) close_range(r0, r1, 0x0) socket(0x10, 0x2, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x38) (async) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f0000000040), &(0x7f0000000080)=0x8) (async) write$binfmt_script(r1, &(0x7f0000000500)={'#! ', './file0'}, 0xb) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd87}, &(0x7f0000000240)=0x40) (async) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)="f2", 0x1}], 0x1) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) (async) close_range(r0, r1, 0x0) (async) 3.875403911s ago: executing program 2 (id=545): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = syz_open_dev$video(&(0x7f0000001640), 0x4, 0x2) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000002800)={0x2, 0x1, 0x1}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x5001}) (async) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000080)=0xc) (async, rerun: 32) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 32) setns(0xc9, 0x0) (async, rerun: 32) r4 = socket$rds(0x15, 0x5, 0x0) (rerun: 32) bind$rds(r4, &(0x7f0000000600)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r4, &(0x7f0000000640)={&(0x7f0000000680)={0x2, 0x4e21, @private=0xa010103}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x4, 0x400}, {&(0x7f0000001680)=""/4096, 0x1000}, &(0x7f0000002680)=[{&(0x7f00000026c0)=""/22, 0x16}], 0x1, 0x61, 0x5}}], 0x48}, 0x0) (async) bind$bt_hci(r3, &(0x7f0000000580)={0x1f, 0xffff, 0x3}, 0x6) (async, rerun: 32) write(r3, &(0x7f00000005c0)="0b000000010001", 0x7) (rerun: 32) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'syzkaller1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x2}, 0x40, r6}) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', 0x41}) r7 = syz_open_dev$sndpcmc(&(0x7f0000000240), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r7, 0xc2604111, &(0x7f0000000280)={0x0, [[0x14, 0xffffffff, 0xffffffff, 0x3, 0xf1, 0xfffffffc, 0xffffffff, 0xffffffff], [0xffffffff, 0x5, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0x2, 0xffffffff, 0x1, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x2, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x1b, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf423e, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) (async) ioctl$SNDRV_PCM_IOCTL_PREPARE(r7, 0x4140, 0x0) (async, rerun: 64) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r7, 0x40184152, &(0x7f0000000500)={0x0, &(0x7f0000000540)=[&(0x7f0000000580)], 0x40}) (async, rerun: 64) sendto$inet_nvme_pdu(0xffffffffffffffff, &(0x7f0000000180)=@data_h2c_no_hdigest={{0x6, 0x2, 0x18, 0x18, 0xff}, 0xc, 0x7, 0x4, 0x4, "d5d54f8e"}, 0x80, 0x0, 0x0, 0x0) (async) write$tun(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="0105300007002800060000006000000000308440fe800000000000000000300000000001fe800000000000000000000000000002"], 0x64) (async) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000002840)=0x1) (async) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 3.788934129s ago: executing program 5 (id=546): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001180)={{0x1}, &(0x7f0000001100), &(0x7f0000001140)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001180)={{0x1, 0xffffffffffffffff}, &(0x7f0000001100), &(0x7f0000001140)}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000011c0)={&(0x7f0000000000)="b2c81dfe4a55bd9dec714e056379dc07efdfb7b27845439c40c6f308398a4fee8466aa843809308b8610253c627e", &(0x7f0000000040)=""/4096, &(0x7f0000001040)="6746cf8504aaf812d763711e0147e522c340ad283b86bf15c231470de9f31c78a42bde18fdc7743bca7e294135deaee84e4a3fa26f364c3288cfbb314d18282b534a2fd06203dd2d861b7b12f03e88c9ccc8d11f6ef755095f2cc4a4", &(0x7f00000010c0)="efb831573c9e4cc1de4730388a4b70e6b0b385eeb883d66f2934f88b69f9757ef379e7235ecbc8e790e11d9bc13dbcd1c20e22fc1afc88ce24cbf29b0b", 0x4, r0, 0x4}, 0x38) socket$igmp(0x2, 0x3, 0x2) (async) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001280)={'ip6_vti0\x00', &(0x7f0000001200)={'syztnl1\x00', 0x0, 0x4, 0x3, 0x60, 0x6, 0x7c, @local, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x8000, 0x6, 0x4}}) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000012c0)={0x0, 0x8, 0x6, 0x4, @vifc_lcl_ifindex=r2, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x2c, r4, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xa9ec}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xbb7}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004845}, 0x4000007) (async) sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x2c, r4, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xa9ec}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xbb7}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004845}, 0x4000007) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001800)={0x18, 0x1a, &(0x7f0000001480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7}, {}, {}, [@map_idx_val={0x18, 0xa, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x6}, @generic={0x4, 0x4, 0x5, 0x9, 0x2}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xa}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001580)='GPL\x00', 0x7, 0x8e, &(0x7f00000015c0)=""/142, 0x40f00, 0x1, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001680)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000016c0)={0x2, 0x9, 0x80, 0x8}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000001700)=[r0, r0, r0, r0], &(0x7f0000001740)=[{0x2, 0x1, 0xc, 0x1}, {0x2, 0x3, 0xa, 0x1}, {0x2, 0x1, 0x6, 0x7}, {0x4, 0x3, 0xe}, {0x5, 0x4, 0x5, 0x7}, {0x4, 0x2, 0xc, 0x1}, {0x1, 0x5, 0x7, 0xb}, {0x0, 0x1, 0x6, 0x6}, {0x4, 0x3, 0x10, 0xa}, {0x1, 0x1, 0x3, 0x4}], 0x10, 0x1}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001900)={{r0}, &(0x7f0000001440), &(0x7f00000018c0)=r5}, 0x20) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x40, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xf}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x40) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001a40), 0x40, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ac0), r3) sendmsg$TIPC_NL_LINK_GET(r6, &(0x7f0000001cc0)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001c80)={&(0x7f0000001b00)={0x170, r7, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdce}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc53}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xa}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x545a}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x52d}]}, @TIPC_NLA_SOCK={0x90, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2d0}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x23da}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x40}, 0x814) r8 = accept$packet(r6, &(0x7f0000001d00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001d40)=0x14) getsockname$packet(r8, &(0x7f0000001d80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001dc0)=0x14) r10 = accept(r3, &(0x7f0000001e00)=@caif=@rfm, &(0x7f0000001e80)=0x80) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r10, 0x89f3, &(0x7f0000001f00)={'syztnl1\x00', &(0x7f0000001ec0)={'sit0\x00', r2, 0x8020, 0x7800, 0x2, 0x10001, {{0x6, 0x4, 0x1, 0x2, 0x18, 0x64, 0x0, 0x80, 0x29, 0x0, @local, @rand_addr=0x64010102, {[@noop]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r10, 0x89f3, &(0x7f0000001f00)={'syztnl1\x00', &(0x7f0000001ec0)={'sit0\x00', r2, 0x8020, 0x7800, 0x2, 0x10001, {{0x6, 0x4, 0x1, 0x2, 0x18, 0x64, 0x0, 0x80, 0x29, 0x0, @local, @rand_addr=0x64010102, {[@noop]}}}}}) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000001f80), r3) (async) r13 = syz_genetlink_get_family_id$tipc(&(0x7f0000001f80), r3) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r12, &(0x7f0000002040)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)={0x1c, r13, 0x300, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40801}, 0x40) r14 = syz_genetlink_get_family_id$devlink(&(0x7f00000020c0), r6) sendmsg$DEVLINK_CMD_PORT_SPLIT(r3, &(0x7f00000021c0)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002180)={&(0x7f0000002100)={0x44, r14, 0x302, 0x70bd29, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x7}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4044000}, 0x2000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002400)={0x6, 0x10, &(0x7f0000002200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x56bd, 0x0, 0x0, 0x0, 0xfffffff8}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002280)='GPL\x00', 0x80000000, 0x0, &(0x7f00000022c0), 0x40f00, 0x0, '\x00', r11, 0x25, r6, 0x8, &(0x7f0000002300)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000002340)={0x4, 0x9, 0x6, 0x6}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f0000002380)=[{0x0, 0x2, 0x4, 0xb}, {0x0, 0x5, 0x7, 0x9}, {0x1, 0x1, 0xd, 0x9}, {0x3, 0x2, 0x10, 0x4}, {0x0, 0x1, 0x2, 0xb}, {0x1, 0x2, 0x6, 0x4}, {0x2, 0x3, 0xb, 0xb}], 0x10, 0x3}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002400)={0x6, 0x10, &(0x7f0000002200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x56bd, 0x0, 0x0, 0x0, 0xfffffff8}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002280)='GPL\x00', 0x80000000, 0x0, &(0x7f00000022c0), 0x40f00, 0x0, '\x00', r11, 0x25, r6, 0x8, &(0x7f0000002300)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000002340)={0x4, 0x9, 0x6, 0x6}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f0000002380)=[{0x0, 0x2, 0x4, 0xb}, {0x0, 0x5, 0x7, 0x9}, {0x1, 0x1, 0xd, 0x9}, {0x3, 0x2, 0x10, 0x4}, {0x0, 0x1, 0x2, 0xb}, {0x1, 0x2, 0x6, 0x4}, {0x2, 0x3, 0xb, 0xb}], 0x10, 0x3}, 0x94) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002500), r12) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000002540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MAC_ACL(r10, &(0x7f00000026c0)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002680)={&(0x7f0000002580)={0xe8, r15, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r16}, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}]}]}, 0xe8}}, 0x8000) (async) sendmsg$NL80211_CMD_SET_MAC_ACL(r10, &(0x7f00000026c0)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002680)={&(0x7f0000002580)={0xe8, r15, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r16}, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}]}]}, 0xe8}}, 0x8000) openat$random(0xffffffffffffff9c, &(0x7f0000002700), 0x2800, 0x0) (async) openat$random(0xffffffffffffff9c, &(0x7f0000002700), 0x2800, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002740)={r6, r9, 0x25, 0x7, @void}, 0x10) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002740)={r6, r9, 0x25, 0x7, @void}, 0x10) 3.729064079s ago: executing program 5 (id=547): mkdirat(0xffffffffffffff9c, 0x0, 0x0) timer_create(0x0, &(0x7f0000000480)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f00000004c0)) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='maps\x00') r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000300), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x2000) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000000)={0x0, 0xfe3, 0x80, 0x2, 0x303}, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000200)) epoll_create1(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x5, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="85000000ae00000066000000000000002f000000000000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x4, 0x99, &(0x7f00000003c0)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x23) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r3) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x4a, &(0x7f00000005c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@flushpolicy={0x10, 0x1d, 0x1, 0x70bd2c, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x20000800}, 0x4040490) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) 3.558401506s ago: executing program 2 (id=548): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000080)=@sg0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000140)='vxfs\x00', 0x148010, 0x0) (async) mount(&(0x7f0000000080)=@sg0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000140)='vxfs\x00', 0x148010, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) (async) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/crypto/af_alg_restrict\x00', 0x1, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/crypto/af_alg_restrict\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='0\n', 0x2) close(r2) file_getattr(r2, &(0x7f0000000040)='./proc/sys/crypto/af_alg_restrict/file0\x00', &(0x7f0000000180), 0x18, 0x1000) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000380)="000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f", 0x20) accept4$alg(r3, 0x0, 0x0, 0x0) (async) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000500)='\x00'/144, 0x90}], 0x1, &(0x7f0000000600)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) read$alg(r4, &(0x7f0000000700)=""/144, 0x90) (async) read$alg(r4, &(0x7f0000000700)=""/144, 0x90) 3.459692629s ago: executing program 2 (id=549): r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x894a, &(0x7f0000000040)={'ip6_vti0\x00', 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}}, 0x1c}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000100)='270', 0x3) timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f00000001c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000200)={0x0, 0x0, 0xfd8b, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000240)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x200000005c832, 0xffffffffffffffff, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2) 3.188210279s ago: executing program 2 (id=550): r0 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x19, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, 0x0, 0x0}, 0x2a8) r1 = gettid() timer_create(0x7, &(0x7f0000000100)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000140)=0x0) timer_settime(r2, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r3 = syz_open_dev$sg(&(0x7f00000001c0), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000200)={0x53, 0xfffffffffffffffb, 0x6, 0x4, @scatter={0xf7, 0x0, 0x0}, &(0x7f0000000280)="a109a81b133d", 0x0, 0x0, 0x10012, 0x0, 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20040, 0x74) openat(r7, &(0x7f00000000c0)='./file0\x00', 0x101000, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="c3eb9d6f", @ANYRES16=r5, @ANYBLOB="050826bd7000fcdbdf250900000008000300", @ANYRES32=r8, @ANYBLOB="0a0006000802110000010000"], 0x28}, 0x1, 0x0, 0x0, 0x48011}, 0x40) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) 2.56940595s ago: executing program 2 (id=551): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc\x00', 0x1a8) mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) write(r0, &(0x7f0000000280)='7', 0x1) shmget$private(0x0, 0xc000, 0x800, &(0x7f000013c000/0xc000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) pwrite64(r1, &(0x7f0000000000)="ff", 0x58200, 0xfb0a00) 1.697893457s ago: executing program 2 (id=552): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000cfe000/0x1000)=nil, &(0x7f0000bfe000/0x400000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000004c0)={0xffffffffffffffff}) sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x14, 0x0, 0x4, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000011}, 0x44000010) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x14, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg0\x00', 0x7c2}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000240)={'bond0\x00'}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'bond0\x00'}) sendmsg$nl_xfrm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@expire={0x1290, 0x18, 0x400, 0x70bd28, 0x25dfdbfc, {{{@in6=@mcast1, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x5, 0x4e24, 0x3, 0xa, 0xc0, 0x20, 0x2, 0x0, 0xee01}, {@in6=@local, 0x4d2, 0xcc}, @in=@empty, {0x34f, 0x3, 0x63, 0x100000000101, 0x0, 0x1ff, 0x4, 0x7}, {0x4, 0x3, 0x1, 0x6}, {0x9, 0x5, 0xbda5}, 0x70bd2b, 0x3502, 0xa, 0x4, 0x0, 0x2a}, 0xff}, [@algo_auth={0x1048, 0x1, {{'sha1-avx2\x00'}, 0x8000, "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"}}, @policy_type={0xa, 0x10, {0x1}}, @tmpl={0x144, 0x5, [{{@in=@local, 0x4d6, 0x2b}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x3505, 0x5, 0x2, 0x5, 0x4, 0x4, 0x7}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d5, 0x6c}, 0x2, @in6=@mcast2, 0x3500, 0x2, 0x6, 0x1, 0x8, 0x6, 0x77}, {{@in=@rand_addr=0x64010102, 0x4d6, 0x32}, 0x2, @in=@multicast1, 0x3507, 0x0, 0x3, 0x1, 0x2, 0x2, 0x10001}, {{@in=@empty, 0x4d2, 0x2b}, 0x2, @in6=@empty, 0x0, 0x4, 0x1, 0xe, 0x1, 0xfffffffb, 0xa4}, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4d6, 0x33}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x26}, 0x3502, 0x5, 0x1, 0x8, 0x8, 0x505, 0x3}]}]}, 0x1290}, 0x1, 0x0, 0x0, 0x8040880}, 0x2014) r4 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x14ce, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) io_uring_enter(r4, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000cfe000/0x1000)=nil, &(0x7f0000bfe000/0x400000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) socket$kcm(0x29, 0x5, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000004c0)) (async) sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x14, 0x0, 0x4, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000011}, 0x44000010) (async) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x14, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x10) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000240)={'bond0\x00'}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) (async) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'bond0\x00'}) (async) sendmsg$nl_xfrm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@expire={0x1290, 0x18, 0x400, 0x70bd28, 0x25dfdbfc, {{{@in6=@mcast1, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x5, 0x4e24, 0x3, 0xa, 0xc0, 0x20, 0x2, 0x0, 0xee01}, {@in6=@local, 0x4d2, 0xcc}, @in=@empty, {0x34f, 0x3, 0x63, 0x100000000101, 0x0, 0x1ff, 0x4, 0x7}, {0x4, 0x3, 0x1, 0x6}, {0x9, 0x5, 0xbda5}, 0x70bd2b, 0x3502, 0xa, 0x4, 0x0, 0x2a}, 0xff}, [@algo_auth={0x1048, 0x1, {{'sha1-avx2\x00'}, 0x8000, "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"}}, @policy_type={0xa, 0x10, {0x1}}, @tmpl={0x144, 0x5, [{{@in=@local, 0x4d6, 0x2b}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x3505, 0x5, 0x2, 0x5, 0x4, 0x4, 0x7}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d5, 0x6c}, 0x2, @in6=@mcast2, 0x3500, 0x2, 0x6, 0x1, 0x8, 0x6, 0x77}, {{@in=@rand_addr=0x64010102, 0x4d6, 0x32}, 0x2, @in=@multicast1, 0x3507, 0x0, 0x3, 0x1, 0x2, 0x2, 0x10001}, {{@in=@empty, 0x4d2, 0x2b}, 0x2, @in6=@empty, 0x0, 0x4, 0x1, 0xe, 0x1, 0xfffffffb, 0xa4}, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4d6, 0x33}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x26}, 0x3502, 0x5, 0x1, 0x8, 0x8, 0x505, 0x3}]}]}, 0x1290}, 0x1, 0x0, 0x0, 0x8040880}, 0x2014) (async) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x14ce, 0x1f480, 0x2, 0x325}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async) io_uring_enter(r4, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) (async) 949.132102ms ago: executing program 3 (id=553): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007013000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b704000000000000850000003300000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r1, 0x8100, 0xe, 0x0, &(0x7f00000005c0)="c8e8a1aee95e10e19e00399da26f", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 876.222813ms ago: executing program 3 (id=554): r0 = socket$packet(0x11, 0x3, 0x300) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000000100000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100b4030000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) r7 = syz_kvm_add_vcpu$x86(r3, &(0x7f00000003c0)={0x0, &(0x7f0000000400)=[@cpuid={0x64, 0x18, {0xfffffffc, 0x8000}}], 0x18}) ioctl$KVM_RUN(r7, 0xae80, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x81, 0x400, 0xba, 0x8, 0x0, 0x0, 0x32fb}, 0xffffff5c) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007000000", @ANYRES32=r10, @ANYBLOB="200001"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r13) sendmsg$NL80211_CMD_GET_WIPHY(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x30, r14, 0x200, 0x1, 0xbffffffd, {{}, {@val={0x8, 0x1, 0x56}, @val={0x8, 0x3, r12}, @val={0xc, 0x99, {0xffffffff, 0x6e}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x40804}, 0x4040084) ioctl$sock_inet_SIOCGIFDSTADDR(r8, 0x8917, &(0x7f0000000080)={'ip6_vti0\x00'}) r15 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x9b00, 0x0) ioctl$TIOCSETD(r15, 0x5423, &(0x7f0000000280)=0x11) ioctl$TIOCVHANGUP(r15, 0x5437, 0x200000000000000) 728.751698ms ago: executing program 1 (id=555): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x6000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80102, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = eventfd2(0xe5c, 0x80000) r5 = eventfd2(0x42000006, 0x801) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000140)={r5, 0x7, 0x2, r4}) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000180)={r4, 0x7, 0x2, r4}) ioctl$NBD_DISCONNECT(r1, 0xab08) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0x7ff, 0x2, 0xffffff7f, 0xc317, 0x5, "030000000000000044f721c4ffd74e7fcb0b0e", 0x5, 0xdb7}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xff) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xa1) 516.466332ms ago: executing program 3 (id=556): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060"], 0xfdef) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x6484c2, 0x0) close(r1) r2 = syz_open_dev$evdev(&(0x7f0000000280), 0x740, 0x2000) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040e05004b20"], 0x28) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f00000004c0)={0x2, 0x23, &(0x7f0000000440)="0544c4d921150cfe8ff650fe8e572c0b5771784121e76f8acdbe6ee3e2571420251e3c"}) socket$nl_generic(0x10, 0x3, 0x10) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='\x00', 0x89901) mount_setattr(r3, &(0x7f00000002c0)='./file0\x00', 0x8000, &(0x7f00000000c0)={0xb, 0x0, 0xc0000, {r3}}, 0x20) quotactl_fd$Q_QUOTAON(r3, 0xffffffff80000200, 0x0, 0x0) ioctl$KDGKBMODE(r3, 0x4b44, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000240)="800000800000210ee7decd7a0003", 0xe, 0x4008041, &(0x7f00000001c0)={0x11, 0x1c, r5, 0x1, 0x10, 0x6, @remote}, 0x14) 516.096345ms ago: executing program 1 (id=557): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40042, 0x1) socket(0xa, 0x3, 0x87) (async) r1 = socket(0xa, 0x3, 0x87) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x14d802, 0x0) dup(r2) (async) r3 = dup(r2) ioctl$FS_IOC_SETFLAGS(r3, 0x40081271, &(0x7f0000000080)=0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x28011, r3, 0x2cb25000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000000), 0x0) close(r4) (async) close(r4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_tracing={0x1a, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2bcbf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x800000, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0xcc0000}}]}}) (async) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x800000, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0xcc0000}}]}}) 439.358792ms ago: executing program 5 (id=558): socket$inet_tcp(0x2, 0x1, 0x0) open$dir(&(0x7f00000001c0)='./file0\x00', 0x20000, 0x9c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002580), 0x20940, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000025c0)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_SETUP={0x14, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5}]}]}, 0x28}}, 0x8090) (async, rerun: 32) r5 = syz_open_dev$sg(&(0x7f0000002600), 0x0, 0x2842) (rerun: 32) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000002640)=ANY=[]) (async, rerun: 64) setns(0xc9, 0x0) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f00000027c0)='sysfs\x00', 0x800800, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/devices/system/machinecheck/machinecheck0/check_interval\x00', 0x2, 0x0) write(r6, &(0x7f0000000400)='5', 0x1) (async) ftruncate(0xffffffffffffffff, 0xc17a) (async) r7 = socket(0x8, 0x2, 0x0) (async, rerun: 32) r8 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file2\x00', 0x1c9442, 0x19c) (rerun: 32) close_range(r8, r8, 0x0) (async, rerun: 64) io_setup(0x20fe, &(0x7f0000002640)=0x0) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000002800)='./proc\x00', 0x1ff) (async, rerun: 32) mount(0x0, &(0x7f0000002840)='./proc\x00', &(0x7f0000002880)='proc\x00', 0x0, 0x0) (async, rerun: 32) openat(0xffffffffffffff9c, &(0x7f00000028c0)='./proc/sys/net/ipv6/conf/syz_tun/disable_ipv6\x00', 0x1, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r10, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000002980)={0x18, 0x3b, 0x1, 0x0, 0x25dfdbff, "", [@typed={0x8, 0x7c, 0x0, 0x0, @u32=0x3}]}, 0x18}], 0x1}, 0x801) (async) io_submit(r9, 0x1, &(0x7f00000029c0)=[&(0x7f0000002a00)={0x0, 0x0, 0x0, 0x1, 0x0, r8, 0x0, 0x0, 0x600}]) connect(r7, &(0x7f0000000280)=@ieee802154={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x80) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/keycreate\x00') 0s ago: executing program 5 (id=559): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="bfa200000000000007020000fcffffff620200000000000018110000", @ANYRES32=r1, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf610000003f00000701000004000000850000005d000000bf610000000000000701000004000000850000005d000000b70000000000000095"], &(0x7f0000000540)='GPL\x00', 0x7, 0x0, 0x0, 0x2a079ff5b90a2b9f, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): ing dummy_hcd [ 66.346489][ T9] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 66.348776][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.348790][ T9] usb 7-1: Product: syz [ 66.348797][ T9] usb 7-1: Manufacturer: syz [ 66.348844][ T9] usb 7-1: SerialNumber: syz [ 66.564602][ T9] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 66.564629][ T9] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 66.564639][ T9] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 66.568563][ T9] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 66.573463][ T9] usb 7-1: USB disconnect, device number 8 [ 66.606900][ T6676] raw_sendmsg: syz.1.168 forgot to set AF_INET. Fix it! [ 66.631166][ T6681] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 66.693337][ T6681] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 66.744924][ T6681] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 66.843862][ T6687] ftl_cs: FTL header not found. [ 66.871230][ T6687] block2mtd: mtd2: [/dev/zram0] erase_size = 0KiB [65] [ 67.089371][ T6701] netlink: 'syz.2.173': attribute type 1 has an invalid length. [ 67.103672][ T6701] 8021q: adding VLAN 0 to HW filter on device bond1 [ 67.109310][ T6701] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6701 comm=syz.2.173 [ 67.115333][ T6701] bond1: (slave geneve2): making interface the new active one [ 67.116793][ T6701] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 67.122813][ T6701] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6701 comm=syz.2.173 [ 67.126235][ T6707] netlink: 'syz.2.173': attribute type 1 has an invalid length. [ 67.154823][ T42] kauditd_printk_skb: 46 callbacks suppressed [ 67.154847][ T42] audit: type=1400 audit(1792331086.253:490): avc: denied { write } for pid=6711 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.210428][ T6719] syzkaller0: entered promiscuous mode [ 67.210443][ T6719] syzkaller0: entered allmulticast mode [ 67.328386][ T42] audit: type=1400 audit(1792331086.433:491): avc: denied { create } for pid=6722 comm="syz.3.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 67.330620][ T42] audit: type=1400 audit(1792331086.433:492): avc: denied { ioctl } for pid=6722 comm="syz.3.177" path="socket:[13865]" dev="sockfs" ino=13865 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 67.331892][ T42] audit: type=1400 audit(1792331086.433:493): avc: denied { sqpoll } for pid=6722 comm="syz.3.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 67.380219][ T42] audit: type=1400 audit(1792331086.483:494): avc: denied { map } for pid=6725 comm="syz.3.178" path="socket:[13880]" dev="sockfs" ino=13880 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 67.380349][ T42] audit: type=1400 audit(1792331086.483:495): avc: denied { read } for pid=6725 comm="syz.3.178" path="socket:[13880]" dev="sockfs" ino=13880 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 67.482396][ T42] audit: type=1400 audit(1792331086.583:496): avc: denied { execute } for pid=6730 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 67.484115][ T42] audit: type=1400 audit(1792331086.583:497): avc: denied { execute_no_trans } for pid=6730 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 67.568432][ T67] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.570677][ T67] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.571136][ T67] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.571761][ T67] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.572107][ T67] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.576380][ T5090] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.588650][ T5090] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.591520][ T5090] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.596513][ T5090] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.596752][ T5090] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.608015][ T6737] FAULT_INJECTION: forcing a failure. [ 67.608015][ T6737] name failslab, interval 1, probability 0, space 0, times 0 [ 67.608034][ T6737] CPU: 2 UID: 0 PID: 6737 Comm: syz.1.182 Not tainted syzkaller #0 PREEMPT(full) [ 67.608047][ T6737] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 67.608063][ T6737] Call Trace: [ 67.608067][ T6737] [ 67.608072][ T6737] dump_stack_lvl+0x100/0x190 [ 67.608111][ T6737] should_fail_ex.cold+0x5/0xa [ 67.608129][ T6737] should_failslab+0xc2/0x120 [ 67.608163][ T6737] kmem_cache_alloc_noprof+0x92/0x6a0 [ 67.608179][ T6737] ? dup_fd+0x4d/0xd10 [ 67.608199][ T6737] dup_fd+0x4d/0xd10 [ 67.608215][ T6737] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 67.608259][ T6737] __x64_sys_close_range+0x405/0x5d0 [ 67.608278][ T6737] ? __pfx___x64_sys_close_range+0x10/0x10 [ 67.608302][ T6737] do_syscall_64+0x123/0x790 [ 67.608320][ T6737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.608333][ T6737] RIP: 0033:0x7f0c71d9e559 [ 67.608343][ T6737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.608354][ T6737] RSP: 002b:00007f0c6ffd5028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 67.608376][ T6737] RAX: ffffffffffffffda RBX: 00007f0c72026090 RCX: 00007f0c71d9e559 [ 67.608384][ T6737] RDX: 0000000000000002 RSI: ffffffffffffffff RDI: ffffffffffffffff [ 67.608391][ T6737] RBP: 00007f0c71e35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 67.608398][ T6737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 67.608405][ T6737] R13: 00007f0c72026128 R14: 00007f0c72026090 R15: 00007ffccc5b85b8 [ 67.608421][ T6737] [ 67.767454][ T6309] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 67.795284][ T6735] rxe_eth0 speed is unknown, defaulting to 1000 [ 67.916273][ T42] audit: type=1400 audit(1792331087.023:498): avc: denied { bind } for pid=6746 comm="syz.2.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 67.928584][ T6309] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 67.933743][ T6309] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.933757][ T6309] usb 8-1: Product: syz [ 67.933764][ T6309] usb 8-1: Manufacturer: syz [ 67.933771][ T6309] usb 8-1: SerialNumber: syz [ 68.046419][ T6735] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.046491][ T6735] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.046554][ T6735] bridge_slave_0: entered allmulticast mode [ 68.047430][ T6735] bridge_slave_0: entered promiscuous mode [ 68.048961][ T6735] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.049033][ T6735] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.049268][ T6735] bridge_slave_1: entered allmulticast mode [ 68.050111][ T6735] bridge_slave_1: entered promiscuous mode [ 68.064387][ T6735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.065836][ T6735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.080867][ T6735] team0: Port device team_slave_0 added [ 68.082401][ T6735] team0: Port device team_slave_1 added [ 68.093631][ T6735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.093640][ T6735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.093652][ T6735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.094600][ T6735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.094608][ T6735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.094620][ T6735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.114532][ T6735] hsr_slave_0: entered promiscuous mode [ 68.115022][ T6735] hsr_slave_1: entered promiscuous mode [ 68.115311][ T6735] debugfs: 'hsr0' already exists in 'hsr' [ 68.115323][ T6735] Cannot create hsr debugfs directory [ 68.148298][ T6309] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 68.148325][ T6309] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 68.148334][ T6309] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 68.161358][ T6309] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71 [ 68.172168][ T6309] usb 8-1: USB disconnect, device number 6 [ 68.231827][ T6735] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 68.234225][ T6735] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 68.234881][ T6735] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 68.237609][ T6735] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 68.238334][ T6735] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 68.249049][ T6735] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 68.249882][ T6735] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 68.255590][ T6735] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 68.273366][ T6735] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.273415][ T6735] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.273519][ T6735] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.273564][ T6735] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.285050][ T42] audit: type=1400 audit(1792331087.383:499): avc: denied { mounton } for pid=6764 comm="syz.2.187" path="/syzcgroup/cpu/syz2/cgroup.procs" dev="cgroup" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 68.322229][ T6735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.330109][ T1178] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.330540][ T1178] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.335870][ T6735] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.340322][ T6775] overlayfs: invalid origin (0000) [ 68.348975][ T1178] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.349021][ T1178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.352206][ T1178] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.352249][ T1178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.445563][ T6786] syzkaller0: entered promiscuous mode [ 68.445578][ T6786] syzkaller0: entered allmulticast mode [ 68.467446][ T6783] ip_tables: iptables: counters copy to user failed while replacing table [ 68.492728][ T6790] ip_tables: iptables: counters copy to user failed while replacing table [ 68.597744][ T6735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.663298][ T6805] syzkaller0: entered promiscuous mode [ 68.663311][ T6805] syzkaller0: entered allmulticast mode [ 68.763507][ T6735] veth0_vlan: entered promiscuous mode [ 68.774636][ T6735] veth1_vlan: entered promiscuous mode [ 68.781671][ T6811] ip6erspan0: entered allmulticast mode [ 68.804777][ T6735] veth0_macvtap: entered promiscuous mode [ 68.811296][ T6735] veth1_macvtap: entered promiscuous mode [ 68.827043][ T6735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.840025][ T6735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.886135][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.886161][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.886178][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.886194][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.920577][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.920591][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.940800][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.940819][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.984217][ T6824] FAULT_INJECTION: forcing a failure. [ 68.984217][ T6824] name failslab, interval 1, probability 0, space 0, times 0 [ 68.984237][ T6824] CPU: 3 UID: 0 PID: 6824 Comm: syz.4.180 Not tainted syzkaller #0 PREEMPT(full) [ 68.984250][ T6824] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 68.984257][ T6824] Call Trace: [ 68.984261][ T6824] [ 68.984266][ T6824] dump_stack_lvl+0x100/0x190 [ 68.984286][ T6824] should_fail_ex.cold+0x5/0xa [ 68.984303][ T6824] should_failslab+0xc2/0x120 [ 68.984324][ T6824] __kmalloc_noprof+0xfc/0x840 [ 68.984338][ T6824] ? rcu_is_watching+0x13/0xc0 [ 68.984355][ T6824] ? tomoyo_realpath_from_path+0xb6/0x690 [ 68.984372][ T6824] tomoyo_realpath_from_path+0xb6/0x690 [ 68.984388][ T6824] tomoyo_path_number_perm+0x23c/0x580 [ 68.984403][ T6824] ? tomoyo_path_number_perm+0x22e/0x580 [ 68.984420][ T6824] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 68.984436][ T6824] ? __pfx_futex_wait+0x10/0x10 [ 68.984470][ T6824] ? __lock_acquire+0x5c0/0x1f40 [ 68.984494][ T6824] ? __fget_files+0x34/0x3d0 [ 68.984511][ T6824] ? find_held_lock+0x2b/0x80 [ 68.984528][ T6824] ? hook_file_ioctl_common+0x140/0x440 [ 68.984545][ T6824] ? __fget_files+0x21f/0x3d0 [ 68.984564][ T6824] security_file_ioctl+0xd3/0x230 [ 68.984583][ T6824] __x64_sys_ioctl+0xb7/0x210 [ 68.984599][ T6824] do_syscall_64+0x123/0x790 [ 68.984618][ T6824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.984630][ T6824] RIP: 0033:0x7f091999e559 [ 68.984640][ T6824] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.984651][ T6824] RSP: 002b:00007f091a91f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 68.984663][ T6824] RAX: ffffffffffffffda RBX: 00007f0919c25fa0 RCX: 00007f091999e559 [ 68.984670][ T6824] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000005 [ 68.984677][ T6824] RBP: 00007f0919a35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 68.984684][ T6824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 68.984691][ T6824] R13: 00007f0919c26038 R14: 00007f0919c25fa0 R15: 00007fffd5493778 [ 68.984707][ T6824] [ 68.984779][ T6824] ERROR: Out of memory at tomoyo_realpath_from_path. [ 69.073972][ T6835] Bluetooth: hci4: Frame reassembly failed (-84) [ 69.167398][ T5734] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 69.326066][ T5734] usb 8-1: Using ep0 maxpacket: 16 [ 69.326537][ T5734] usb 8-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 69.327506][ T5734] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 69.327520][ T5734] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 69.327532][ T5734] usb 8-1: config 0 interface 0 has no altsetting 0 [ 69.329351][ T5734] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.329368][ T5734] usb 8-1: Product: syz [ 69.329375][ T5734] usb 8-1: Manufacturer: syz [ 69.329382][ T5734] usb 8-1: SerialNumber: syz [ 69.330829][ T5734] usb 8-1: config 0 descriptor?? [ 69.396077][ T6309] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 69.538913][ T5734] input: syz syz as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input7 [ 69.567728][ T6309] usb 6-1: Using ep0 maxpacket: 8 [ 69.568177][ T6309] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 69.569899][ T6309] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 69.569921][ T6309] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.581864][ T6309] usb 6-1: config 0 descriptor?? [ 69.741988][ T34] usb 8-1: USB disconnect, device number 7 [ 69.791807][ T6309] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 70.057497][ T6841] netlink: 112 bytes leftover after parsing attributes in process `syz.1.204'. [ 70.125698][ T34] usb 6-1: USB disconnect, device number 8 [ 70.712013][ T6873] openvswitch: netlink: IP tunnel dst address not specified [ 70.744931][ T6876] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 70.802558][ T6876] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 70.854679][ T6876] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 71.073059][ T6884] netlink: 168 bytes leftover after parsing attributes in process `syz.1.215'. [ 71.096093][ T5090] Bluetooth: hci4: command 0x1003 tx timeout [ 71.097216][ T67] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 71.152775][ T6889] jffs2: notice: (6889) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 71.264826][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.264866][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.267507][ T1349] cfg80211: failed to load regulatory.db [ 71.354734][ T6904] loop5: detected capacity change from 0 to 4095 [ 71.363329][ T5740] Buffer I/O error on dev loop5, logical block 511, async page read [ 71.368952][ T6908] netlink: 'syz.2.222': attribute type 10 has an invalid length. [ 71.372508][ T6908] macvlan1: entered promiscuous mode [ 71.372521][ T6908] macvlan1: entered allmulticast mode [ 71.380520][ T6908] veth1_vlan: entered allmulticast mode [ 71.383937][ T6908] bond0: (slave macvlan1): Enslaving as an active interface with an up link [ 71.384057][ T6904] nvme_fabrics: missing parameter 'transport=%s' [ 71.384064][ T6904] nvme_fabrics: missing parameter 'nqn=%s' [ 71.417888][ T6904] Buffer I/O error on dev loop5, logical block 511, async page read [ 71.468943][ T6918] FAULT_INJECTION: forcing a failure. [ 71.468943][ T6918] name failslab, interval 1, probability 0, space 0, times 0 [ 71.468966][ T6918] CPU: 0 UID: 0 PID: 6918 Comm: syz.1.226 Not tainted syzkaller #0 PREEMPT(full) [ 71.468981][ T6918] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 71.468988][ T6918] Call Trace: [ 71.468993][ T6918] [ 71.468998][ T6918] dump_stack_lvl+0x100/0x190 [ 71.469020][ T6918] should_fail_ex.cold+0x5/0xa [ 71.469037][ T6918] should_failslab+0xc2/0x120 [ 71.469057][ T6918] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 71.469072][ T6918] ? start_dirop+0x79/0xb0 [ 71.469088][ T6918] ? alloc_inode+0x68/0x250 [ 71.469102][ T6918] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 71.469117][ T6918] alloc_inode+0x68/0x250 [ 71.469130][ T6918] new_inode+0x22/0x1c0 [ 71.469144][ T6918] __debugfs_create_file+0xfb/0x500 [ 71.469160][ T6918] debugfs_create_file_full+0x41/0x60 [ 71.469192][ T6918] kvm_dev_ioctl+0x1797/0x1b50 [ 71.469211][ T6918] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 71.469228][ T6918] ? selinux_file_ioctl+0x13b/0x290 [ 71.469245][ T6918] ? selinux_file_ioctl+0xb6/0x290 [ 71.469263][ T6918] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 71.469278][ T6918] __x64_sys_ioctl+0x18e/0x210 [ 71.469295][ T6918] do_syscall_64+0x123/0x790 [ 71.469313][ T6918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.469325][ T6918] RIP: 0033:0x7f0c71d9e559 [ 71.469335][ T6918] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.469347][ T6918] RSP: 002b:00007f0c6fff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 71.469359][ T6918] RAX: ffffffffffffffda RBX: 00007f0c72025fa0 RCX: 00007f0c71d9e559 [ 71.469366][ T6918] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000005 [ 71.469372][ T6918] RBP: 00007f0c71e35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 71.469379][ T6918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 71.469386][ T6918] R13: 00007f0c72026038 R14: 00007f0c72025fa0 R15: 00007ffccc5b85b8 [ 71.469401][ T6918] [ 71.470291][ T6918] debugfs: out of free dentries, can not create file 'pf_spurious' [ 71.483203][ T6921] sch_tbf: burst 65537 is lower than device lo mtu (65550) ! [ 71.515091][ T6918] netlink: 16 bytes leftover after parsing attributes in process `syz.1.226'. [ 71.619583][ T6932] netlink: 5228 bytes leftover after parsing attributes in process `syz.3.230'. [ 71.625411][ T6932] fscrypt (sda1, inode 1262): Can't use IV_INO_LBLK_32 policy with contents mode other than AES-256-XTS [ 71.656136][ T67] Bluetooth: hci0: command tx timeout [ 71.754575][ T6936] FAULT_INJECTION: forcing a failure. [ 71.754575][ T6936] name failslab, interval 1, probability 0, space 0, times 0 [ 71.754598][ T6936] CPU: 2 UID: 0 PID: 6936 Comm: syz.2.231 Not tainted syzkaller #0 PREEMPT(full) [ 71.754611][ T6936] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 71.754627][ T6936] Call Trace: [ 71.754632][ T6936] [ 71.754637][ T6936] dump_stack_lvl+0x100/0x190 [ 71.754666][ T6936] should_fail_ex.cold+0x5/0xa [ 71.754683][ T6936] should_failslab+0xc2/0x120 [ 71.754704][ T6936] kmem_cache_alloc_noprof+0x92/0x6a0 [ 71.754720][ T6936] ? __pfx_map_id_range_down+0x10/0x10 [ 71.754733][ T6936] ? rcu_is_watching+0x13/0xc0 [ 71.754750][ T6936] ? security_inode_alloc+0x3b/0x2c0 [ 71.754769][ T6936] security_inode_alloc+0x3b/0x2c0 [ 71.754785][ T6936] inode_init_always_gfp+0xc6f/0xfb0 [ 71.754804][ T6936] alloc_inode+0x8e/0x250 [ 71.754818][ T6936] sock_alloc+0x44/0x280 [ 71.754846][ T6936] ? security_socket_create+0x7f/0x250 [ 71.754863][ T6936] sock_create_lite+0x82/0x120 [ 71.754878][ T6936] sctp_getsockopt_peeloff_common.constprop.0+0x1bd/0x640 [ 71.754945][ T6936] ? __pfx_sctp_getsockopt_peeloff_common.constprop.0+0x10/0x10 [ 71.754965][ T6936] sctp_getsockopt+0x2fb2/0x7160 [ 71.754980][ T6936] ? avc_has_perm_noaudit+0x56/0x470 [ 71.754994][ T6936] ? find_held_lock+0x2b/0x80 [ 71.755012][ T6936] ? avc_has_perm_noaudit+0x11e/0x470 [ 71.755025][ T6936] ? avc_has_perm_noaudit+0x11e/0x470 [ 71.755040][ T6936] ? __pfx_sctp_getsockopt+0x10/0x10 [ 71.755060][ T6936] ? __pfx_avc_has_perm+0x10/0x10 [ 71.755076][ T6936] ? lock_acquire+0x1d1/0x380 [ 71.755088][ T6936] ? __might_fault+0xc5/0x140 [ 71.755101][ T6936] ? find_held_lock+0x2b/0x80 [ 71.755116][ T6936] ? __might_fault+0xc5/0x140 [ 71.755127][ T6936] ? __might_fault+0xc5/0x140 [ 71.755143][ T6936] ? _copy_from_user+0x59/0xd0 [ 71.755160][ T6936] ? copy_from_sockptr_offset.constprop.0+0xe2/0x150 [ 71.755175][ T6936] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 71.755193][ T6936] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 71.755208][ T6936] do_sock_getsockopt+0x50a/0x6e0 [ 71.755225][ T6936] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 71.755242][ T6936] ? __fget_files+0x34/0x3d0 [ 71.755259][ T6936] ? find_held_lock+0x2b/0x80 [ 71.755279][ T6936] ? __fget_files+0x21f/0x3d0 [ 71.755298][ T6936] __sys_getsockopt+0x148/0x260 [ 71.755333][ T6936] ? __x64_sys_getsockopt+0xbd/0x160 [ 71.755347][ T6936] __x64_sys_getsockopt+0xbd/0x160 [ 71.755358][ T6936] ? do_syscall_64+0xae/0x790 [ 71.755379][ T6936] ? lockdep_hardirqs_on+0x7d/0x110 [ 71.755396][ T6936] do_syscall_64+0x123/0x790 [ 71.755415][ T6936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.755427][ T6936] RIP: 0033:0x7ff60699e559 [ 71.755437][ T6936] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.755453][ T6936] RSP: 002b:00007ff607805028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 71.755471][ T6936] RAX: ffffffffffffffda RBX: 00007ff606c25fa0 RCX: 00007ff60699e559 [ 71.755480][ T6936] RDX: 000000000000007a RSI: 0000000000000084 RDI: 0000000000000004 [ 71.755487][ T6936] RBP: 00007ff606a35ab8 R08: 0000200000000340 R09: 0000000000000000 [ 71.755495][ T6936] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000000 [ 71.755502][ T6936] R13: 00007ff606c26038 R14: 00007ff606c25fa0 R15: 00007ffc1fbe9738 [ 71.755518][ T6936] [ 71.816257][ T1349] af_packet: tpacket_rcv: packet too big, clamped from 110 to 4294967286. macoff=82 [ 71.836211][ T6946] netlink: 48 bytes leftover after parsing attributes in process `syz.2.234'. [ 71.933297][ T6952] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 71.933324][ T6952] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 71.933630][ T6952] vhci_hcd vhci_hcd.0: Device attached [ 71.937970][ T6953] vhci_hcd: connection closed [ 71.938147][ T13] vhci_hcd vhci_hcd.2: stop threads [ 71.938161][ T13] vhci_hcd vhci_hcd.2: release socket [ 71.938171][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 72.350426][ T6918] ceph: No mds server is up or the cluster is laggy [ 72.415553][ T42] kauditd_printk_skb: 39 callbacks suppressed [ 72.415586][ T42] audit: type=1400 audit(1792331092.516:539): avc: denied { ioctl } for pid=6955 comm="syz.1.237" path="socket:[16789]" dev="sockfs" ino=16789 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 72.481141][ T6962] xt_hashlimit: overflow, rate too high: 1 [ 72.481620][ T6962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.239'. [ 72.505335][ T6962] bond2: (slave bond_slave_0): Device is not our slave [ 72.505358][ T6962] bond2: option active_slave: invalid value (bond_slave_0) [ 72.509397][ T6962] bond2 (unregistering): Released all slaves [ 72.533816][ T42] audit: type=1400 audit(1792331092.636:540): avc: denied { write } for pid=6958 comm="syz.1.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 72.534396][ T6960] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 72.534506][ T6960] block device autoloading is deprecated and will be removed. [ 72.692336][ T42] audit: type=1400 audit(1792331092.796:541): avc: denied { ioctl } for pid=6973 comm="syz.2.244" path="socket:[14855]" dev="sockfs" ino=14855 ioctlcmd=0x9371 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 72.742233][ T6984] Bluetooth: MGMT ver 1.23 [ 72.754504][ T42] audit: type=1400 audit(1792331092.856:542): avc: denied { bind } for pid=6971 comm="syz.1.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 72.757539][ T42] audit: type=1400 audit(1792331092.866:543): avc: denied { read } for pid=6980 comm="syz.2.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 72.866594][ T6997] trusted_key: encrypted_key: insufficient parameters specified [ 72.967920][ T42] audit: type=1400 audit(1792331093.076:544): avc: denied { create } for pid=7003 comm="syz.2.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 72.968732][ T42] audit: type=1400 audit(1792331093.076:545): avc: denied { bind } for pid=7003 comm="syz.2.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 72.969039][ T42] audit: type=1400 audit(1792331093.076:546): avc: denied { listen } for pid=7003 comm="syz.2.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 73.002629][ T42] audit: type=1400 audit(1792331093.106:547): avc: denied { create } for pid=7007 comm="syz.2.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 73.048794][ T42] audit: type=1400 audit(1792331093.146:548): avc: denied { setopt } for pid=7012 comm="syz.2.251" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 73.147517][ T7022] random: crng reseeded on system resumption [ 73.497709][ T7036] svc: failed to register nfsdv3 RPC service (errno 111). [ 73.499166][ T7036] svc: failed to register nfsaclv3 RPC service (errno 111). [ 73.503935][ T7036] svc: failed to register nfsdv3 RPC service (errno 111). [ 73.504474][ T7036] svc: failed to register nfsaclv3 RPC service (errno 111). [ 73.607974][ T67] Bluetooth: hci0: unexpected cc 0x042f length: 9 > 7 [ 73.909315][ T7051] FAULT_INJECTION: forcing a failure. [ 73.909315][ T7051] name failslab, interval 1, probability 0, space 0, times 0 [ 73.909338][ T7051] CPU: 3 UID: 0 PID: 7051 Comm: syz.3.261 Not tainted syzkaller #0 PREEMPT(full) [ 73.909352][ T7051] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 73.909359][ T7051] Call Trace: [ 73.909363][ T7051] [ 73.909368][ T7051] dump_stack_lvl+0x100/0x190 [ 73.909405][ T7051] should_fail_ex.cold+0x5/0xa [ 73.909422][ T7051] should_failslab+0xc2/0x120 [ 73.909440][ T7051] __kmalloc_cache_node_noprof+0x94/0x720 [ 73.909456][ T7051] ? __lock_acquire+0x5c0/0x1f40 [ 73.909470][ T7051] ? __get_vm_area_node+0x124/0x350 [ 73.909489][ T7051] __get_vm_area_node+0x124/0x350 [ 73.909507][ T7051] __vmalloc_node_range_noprof+0x268/0x1420 [ 73.909525][ T7051] ? bpf_prog_calc_tag+0x65/0x380 [ 73.909543][ T7051] ? rcu_is_watching+0x13/0xc0 [ 73.909562][ T7051] ? bpf_prog_calc_tag+0x65/0x380 [ 73.909577][ T7051] ? __css_rstat_updated+0x1ce/0x590 [ 73.909594][ T7051] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 73.909614][ T7051] ? lock_acquire+0x1d1/0x380 [ 73.909648][ T7051] ? bpf_prog_calc_tag+0x65/0x380 [ 73.909664][ T7051] __vmalloc_node_noprof+0xad/0xf0 [ 73.909682][ T7051] ? bpf_prog_calc_tag+0x65/0x380 [ 73.909700][ T7051] __vmalloc_noprof+0xa3/0x120 [ 73.909718][ T7051] ? __pfx___vmalloc_noprof+0x10/0x10 [ 73.909735][ T7051] ? lockdep_init_map_type+0x5c/0x250 [ 73.909752][ T7051] ? lockdep_init_map_type+0x5c/0x250 [ 73.909767][ T7051] ? mutex_init_lockdep+0xf1/0x120 [ 73.909784][ T7051] bpf_prog_calc_tag+0x65/0x380 [ 73.909800][ T7051] ? bpf_prog_alloc_no_stats+0x4f4/0x690 [ 73.909817][ T7051] bpf_jit_subprogs+0x11b1/0x4790 [ 73.909839][ T7051] bpf_fixup_call_args+0x476/0x8c0 [ 73.909853][ T7051] bpf_check+0x43d8/0xac70 [ 73.909882][ T7051] ? __pfx_bpf_check+0x10/0x10 [ 73.909898][ T7051] ? lock_acquire+0x1d1/0x380 [ 73.909911][ T7051] ? find_held_lock+0x2b/0x80 [ 73.909928][ T7051] ? bpf_prog_load+0x1a27/0x2ab0 [ 73.909946][ T7051] ? __asan_memset+0x23/0x50 [ 73.909963][ T7051] ? bpf_prog_load+0x1ae1/0x2ab0 [ 73.909978][ T7051] bpf_prog_load+0x1ae1/0x2ab0 [ 73.909998][ T7051] ? __pfx_bpf_prog_load+0x10/0x10 [ 73.910032][ T7051] __sys_bpf+0x1f46/0x4a30 [ 73.910050][ T7051] ? __pfx___sys_bpf+0x10/0x10 [ 73.910061][ T7051] ? find_held_lock+0x2b/0x80 [ 73.910077][ T7051] ? futex_wake+0x4ea/0x5e0 [ 73.910101][ T7051] ? rcu_read_lock_any_held+0x6a/0x90 [ 73.910113][ T7051] ? find_held_lock+0x2b/0x80 [ 73.910130][ T7051] ? ksys_write+0x190/0x250 [ 73.910144][ T7051] ? ksys_write+0x190/0x250 [ 73.910168][ T7051] ? __x64_sys_futex+0x34f/0x4d0 [ 73.910185][ T7051] ? __x64_sys_futex+0x358/0x4d0 [ 73.910202][ T7051] ? fput+0x7c/0x100 [ 73.910217][ T7051] ? __pfx___x64_sys_futex+0x10/0x10 [ 73.910233][ T7051] ? ksys_write+0x1ac/0x250 [ 73.910249][ T7051] ? __x64_sys_bpf+0xce/0x140 [ 73.910284][ T7051] __x64_sys_bpf+0xce/0x140 [ 73.910300][ T7051] ? do_syscall_64+0xae/0x790 [ 73.910339][ T7051] do_syscall_64+0x123/0x790 [ 73.910359][ T7051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.910372][ T7051] RIP: 0033:0x7f03b4b9e559 [ 73.910383][ T7051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.910394][ T7051] RSP: 002b:00007f03b5a5c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 73.910406][ T7051] RAX: ffffffffffffffda RBX: 00007f03b4e25fa0 RCX: 00007f03b4b9e559 [ 73.910413][ T7051] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 73.910420][ T7051] RBP: 00007f03b4c35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 73.910427][ T7051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.910434][ T7051] R13: 00007f03b4e26038 R14: 00007f03b4e25fa0 R15: 00007ffe9bb6d5b8 [ 73.910449][ T7051] [ 73.910643][ T7051] syz.3.261: vmalloc error: size 24, align 0x1, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 73.910726][ T7051] CPU: 3 UID: 0 PID: 7051 Comm: syz.3.261 Not tainted syzkaller #0 PREEMPT(full) [ 73.910740][ T7051] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 73.910748][ T7051] Call Trace: [ 73.910752][ T7051] [ 73.910756][ T7051] dump_stack_lvl+0x100/0x190 [ 73.910776][ T7051] warn_alloc.cold+0x9e/0xb2 [ 73.910789][ T7051] ? __pfx_warn_alloc+0x10/0x10 [ 73.910802][ T7051] ? __kasan_kmalloc+0x8a/0xb0 [ 73.910820][ T7051] ? __lock_acquire+0x5c0/0x1f40 [ 73.910838][ T7051] ? __get_vm_area_node+0x22b/0x350 [ 73.910858][ T7051] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 73.910877][ T7051] ? rcu_is_watching+0x13/0xc0 [ 73.910896][ T7051] ? bpf_prog_calc_tag+0x65/0x380 [ 73.910911][ T7051] ? __css_rstat_updated+0x1ce/0x590 [ 73.910928][ T7051] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 73.910947][ T7051] ? lock_acquire+0x1d1/0x380 [ 73.910962][ T7051] ? bpf_prog_calc_tag+0x65/0x380 [ 73.910977][ T7051] __vmalloc_node_noprof+0xad/0xf0 [ 73.910993][ T7051] ? bpf_prog_calc_tag+0x65/0x380 [ 73.911018][ T7051] __vmalloc_noprof+0xa3/0x120 [ 73.911037][ T7051] ? __pfx___vmalloc_noprof+0x10/0x10 [ 73.911054][ T7051] ? lockdep_init_map_type+0x5c/0x250 [ 73.911069][ T7051] ? lockdep_init_map_type+0x5c/0x250 [ 73.911085][ T7051] ? mutex_init_lockdep+0xf1/0x120 [ 73.911101][ T7051] bpf_prog_calc_tag+0x65/0x380 [ 73.911118][ T7051] ? bpf_prog_alloc_no_stats+0x4f4/0x690 [ 73.911136][ T7051] bpf_jit_subprogs+0x11b1/0x4790 [ 73.911159][ T7051] bpf_fixup_call_args+0x476/0x8c0 [ 73.911172][ T7051] bpf_check+0x43d8/0xac70 [ 73.911201][ T7051] ? __pfx_bpf_check+0x10/0x10 [ 73.911217][ T7051] ? lock_acquire+0x1d1/0x380 [ 73.911231][ T7051] ? find_held_lock+0x2b/0x80 [ 73.911247][ T7051] ? bpf_prog_load+0x1a27/0x2ab0 [ 73.911266][ T7051] ? __asan_memset+0x23/0x50 [ 73.911281][ T7051] ? bpf_prog_load+0x1ae1/0x2ab0 [ 73.911297][ T7051] bpf_prog_load+0x1ae1/0x2ab0 [ 73.911317][ T7051] ? __pfx_bpf_prog_load+0x10/0x10 [ 73.911346][ T7051] __sys_bpf+0x1f46/0x4a30 [ 73.911362][ T7051] ? __pfx___sys_bpf+0x10/0x10 [ 73.911373][ T7051] ? find_held_lock+0x2b/0x80 [ 73.911389][ T7051] ? futex_wake+0x4ea/0x5e0 [ 73.911411][ T7051] ? rcu_read_lock_any_held+0x6a/0x90 [ 73.911422][ T7051] ? find_held_lock+0x2b/0x80 [ 73.911438][ T7051] ? ksys_write+0x190/0x250 [ 73.911451][ T7051] ? ksys_write+0x190/0x250 [ 73.911473][ T7051] ? __x64_sys_futex+0x34f/0x4d0 [ 73.911489][ T7051] ? __x64_sys_futex+0x358/0x4d0 [ 73.911506][ T7051] ? fput+0x7c/0x100 [ 73.911522][ T7051] ? __pfx___x64_sys_futex+0x10/0x10 [ 73.911537][ T7051] ? ksys_write+0x1ac/0x250 [ 73.911569][ T7051] ? __x64_sys_bpf+0xce/0x140 [ 73.911585][ T7051] __x64_sys_bpf+0xce/0x140 [ 73.911599][ T7051] ? do_syscall_64+0xae/0x790 [ 73.911618][ T7051] do_syscall_64+0x123/0x790 [ 73.911636][ T7051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.911649][ T7051] RIP: 0033:0x7f03b4b9e559 [ 73.911658][ T7051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.911669][ T7051] RSP: 002b:00007f03b5a5c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 73.911680][ T7051] RAX: ffffffffffffffda RBX: 00007f03b4e25fa0 RCX: 00007f03b4b9e559 [ 73.911687][ T7051] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 73.911694][ T7051] RBP: 00007f03b4c35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 73.911700][ T7051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.911707][ T7051] R13: 00007f03b4e26038 R14: 00007f03b4e25fa0 R15: 00007ffe9bb6d5b8 [ 73.911722][ T7051] [ 73.911791][ T7051] Mem-Info: [ 73.911798][ T7051] active_anon:7720 inactive_anon:1566 isolated_anon:0 [ 73.911798][ T7051] active_file:2600 inactive_file:26692 isolated_file:0 [ 73.911798][ T7051] unevictable:1018 dirty:575 writeback:0 [ 73.911798][ T7051] slab_reclaimable:12289 slab_unreclaimable:71404 [ 73.911798][ T7051] mapped:25301 shmem:1561 pagetables:1291 [ 73.911798][ T7051] sec_pagetables:299 bounce:0 [ 73.911798][ T7051] kernel_misc_reclaimable:0 [ 73.911798][ T7051] free:444688 free_pcp:12701 free_cma:0 [ 73.911827][ T7051] Node 0 active_anon:30880kB inactive_anon:6264kB active_file:10360kB inactive_file:106564kB unevictable:2072kB isolated(anon):0kB isolated(file):0kB mapped:101164kB dirty:2292kB writeback:0kB shmem:4244kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14456kB pagetables:4944kB sec_pagetables:1196kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 73.911858][ T7051] Node 1 active_anon:0kB inactive_anon:0kB active_file:40kB inactive_file:204kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:40kB dirty:8kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:220kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 73.911886][ T7051] Node 0 DMA free:15360kB boost:0kB min:344kB low:428kB high:512kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 73.911918][ T7051] lowmem_reserve[]: 0 1204 1204 1204 1204 [ 73.911938][ T7051] Node 0 DMA32 free:125068kB boost:0kB min:27108kB low:33884kB high:40660kB reserved_highatomic:0kB free_highatomic:0kB active_anon:30880kB inactive_anon:6264kB active_file:10360kB inactive_file:106564kB unevictable:2072kB writepending:2292kB zspages:92kB present:2080628kB managed:1233664kB mlocked:0kB bounce:0kB free_pcp:41804kB local_pcp:16608kB free_cma:0kB [ 73.911970][ T7051] lowmem_reserve[]: 0 0 0 0 0 [ 73.911988][ T7051] Node 1 Normal free:1638324kB boost:0kB min:40124kB low:50152kB high:60180kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:40kB inactive_file:204kB unevictable:2000kB writepending:8kB zspages:0kB present:2097152kB managed:1781880kB mlocked:0kB bounce:0kB free_pcp:9000kB local_pcp:4304kB free_cma:0kB [ 73.912024][ T7051] lowmem_reserve[]: 0 0 0 0 0 [ 73.912042][ T7051] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (UM) = 15360kB [ 73.912108][ T7051] Node 0 DMA32: 1493*4kB (UME) 1077*8kB (UM) 475*16kB (UM) 232*32kB (UME) 103*64kB (UME) 74*128kB (UM) 46*256kB (UME) 30*512kB (UM) 29*1024kB (M) 7*2048kB (ME) 2*4096kB (U) = 125036kB [ 73.912199][ T7051] Node 1 Normal: 3*4kB (UM) 3*8kB (UM) 9*16kB (UM) 8*32kB (UM) 2*64kB (M) 1*128kB (M) 1*256kB (M) 2*512kB (M) 0*1024kB 3*2048kB (UM) 398*4096kB (M) = 1638324kB [ 73.912330][ T7051] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 73.912340][ T7051] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 73.912349][ T7051] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 73.912358][ T7051] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 73.912367][ T7051] 30868 total pagecache pages [ 73.912371][ T7051] 11 pages in swap cache [ 73.912375][ T7051] Free swap = 124928kB [ 73.912380][ T7051] Total swap = 124996kB [ 73.912384][ T7051] 1048443 pages RAM [ 73.912388][ T7051] 0 pages HighMem/MovableOnly [ 73.912392][ T7051] 290717 pages reserved [ 73.912396][ T7051] 0 pages cma reserved [ 73.931699][ T7051] netlink: 68 bytes leftover after parsing attributes in process `syz.3.261'. [ 73.932884][ T7051] SELinux: Context system_u:object_r:modules_object_t:s0 is not valid (left unmapped). [ 74.007973][ C3] vcan0: j1939_tp_rxtimer: 0xffff8880249db800: rx timeout, send abort [ 74.009481][ C3] vcan0: j1939_xtp_rx_abort_one: 0xffff8880249db800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 74.045137][ T7055] No source specified [ 74.167034][ T7061] netlink: 84 bytes leftover after parsing attributes in process `syz.1.264'. [ 74.310169][ T62] Bluetooth: hci4: Frame reassembly failed (-84) [ 74.324219][ T7072] netlink: 8 bytes leftover after parsing attributes in process `syz.3.269'. [ 74.331260][ T7065] /dev/sr0: Can't open blockdev [ 74.373262][ T7075] iommufd_mock iommufd_mock0: Adding to iommu group 2 [ 74.437468][ T7066] /dev/sr0: Can't open blockdev [ 74.822910][ T34] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 74.854240][ T7090] /dev/sr0: Can't open blockdev [ 74.985913][ T5785] nvme nvme0: rdma_resolve_route failed (-110). [ 74.991651][ T7095] nvme nvme0: rdma connection establishment failed (-19) [ 75.013742][ T7097] netlink: 24 bytes leftover after parsing attributes in process `syz.1.275'. [ 75.056894][ T7100] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 75.088091][ T34] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 75.392662][ T7109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.392862][ T7109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.570198][ T7091] ceph: No mds server is up or the cluster is laggy [ 75.657131][ T1349] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 75.658597][ T5090] Bluetooth: hci0: command tx timeout [ 75.782971][ T7131] ieee802154 phy0 wpan0: encryption failed: -126 [ 75.816784][ T1349] usb 6-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00 [ 75.818458][ T1349] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 75.818483][ T1349] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.936455][ T1349] rtsx_usb 6-1:1.0: probe with driver rtsx_usb failed with error -22 [ 76.377698][ T67] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 76.736029][ T1349] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 76.886724][ T1349] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 76.889427][ T1349] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.889446][ T1349] usb 9-1: Product: syz [ 76.889457][ T1349] usb 9-1: Manufacturer: syz [ 76.889469][ T1349] usb 9-1: SerialNumber: syz [ 76.963606][ T7177] ovs-dp0: entered promiscuous mode [ 77.035763][ T7179] loop5: detected capacity change from 0 to 7 [ 77.040971][ T7179] loop5: p3 p4 < > [ 77.040993][ T7179] loop5: partition table partially beyond EOD, truncated [ 77.097596][ T1349] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 77.097639][ T1349] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 77.097655][ T1349] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 77.103849][ T1349] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -71 [ 77.117969][ T1349] usb 9-1: USB disconnect, device number 2 [ 77.462319][ T7193] Cannot find add_set index 0 as target [ 77.671954][ T7204] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 77.738982][ T7209] netlink: Conntrack attr has 8 unknown bytes [ 77.739007][ T7209] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 77.843465][ T5090] Bluetooth: hci0: unexpected cc 0x204b length: 34 > 3 [ 77.844335][ T7212] syzkaller0: entered promiscuous mode [ 77.844351][ T7212] syzkaller0: entered allmulticast mode [ 77.851430][ T42] kauditd_printk_skb: 78 callbacks suppressed [ 77.851444][ T42] audit: type=1400 audit(1792331097.956:627): avc: denied { write } for pid=7211 comm="syz.4.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 78.063671][ T5837] usb 6-1: USB disconnect, device number 9 [ 78.159602][ T42] audit: type=1400 audit(1792331098.266:628): avc: granted { setsecparam } for pid=7213 comm="syz.1.298" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 78.234090][ T42] audit: type=1400 audit(1792331098.336:629): avc: denied { nlmsg_read } for pid=7216 comm="syz.3.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 78.289194][ T7222] ovs-dp0: entered promiscuous mode [ 78.342822][ T42] audit: type=1400 audit(1792331098.446:630): avc: denied { shutdown } for pid=7229 comm="syz.3.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 78.343139][ T42] audit: type=1400 audit(1792331098.446:631): avc: denied { getopt } for pid=7229 comm="syz.3.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 78.344302][ T42] audit: type=1400 audit(1792331098.446:632): avc: denied { connect } for pid=7229 comm="syz.3.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 78.346997][ T42] audit: type=1400 audit(1792331098.456:633): avc: denied { bind } for pid=7229 comm="syz.3.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 78.443973][ T7234] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 78.446953][ T7234] overlayfs: conflicting lowerdir path [ 78.505234][ T7238] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 78.551378][ T34] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 78.551397][ T34] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 78.556772][ T7238] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 78.557582][ T238] wlan1: authenticated [ 78.576606][ T1349] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 78.577422][ T238] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 78.611239][ T7239] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 78.613364][ T7238] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 78.617663][ T7238] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 78.686131][ T6055] wlan1: associate with 08:02:11:00:00:00 (try 2/3) [ 78.736494][ T1349] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 78.738804][ T1349] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.738816][ T1349] usb 6-1: Product: syz [ 78.738824][ T1349] usb 6-1: Manufacturer: syz [ 78.738831][ T1349] usb 6-1: SerialNumber: syz [ 78.806154][ T238] wlan1: associate with 08:02:11:00:00:00 (try 3/3) [ 78.916142][ T6055] wlan1: association with 08:02:11:00:00:00 timed out [ 78.944617][ T1349] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 78.944644][ T1349] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 78.944655][ T1349] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 78.953134][ T1349] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 78.961620][ T1349] usb 6-1: USB disconnect, device number 10 [ 78.991152][ T42] audit: type=1400 audit(1792331099.096:634): avc: denied { read } for pid=5444 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 79.077787][ T42] audit: type=1400 audit(1792331099.186:635): avc: denied { write } for pid=7244 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.118456][ T42] audit: type=1400 audit(1792331099.226:636): avc: denied { write } for pid=7247 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.191383][ T7241] program syz.2.308 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 79.191419][ T7241] ata1.00: invalid service action 31 [ 79.341060][ T7268] ip6t_frag: unknown flags 6 [ 79.435239][ T7275] FAULT_INJECTION: forcing a failure. [ 79.435239][ T7275] name failslab, interval 1, probability 0, space 0, times 0 [ 79.435272][ T7275] CPU: 3 UID: 0 PID: 7275 Comm: syz.3.315 Not tainted syzkaller #0 PREEMPT(full) [ 79.435292][ T7275] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 79.435304][ T7275] Call Trace: [ 79.435311][ T7275] [ 79.435318][ T7275] dump_stack_lvl+0x100/0x190 [ 79.435373][ T7275] should_fail_ex.cold+0x5/0xa [ 79.435401][ T7275] should_failslab+0xc2/0x120 [ 79.435430][ T7275] kmem_cache_alloc_noprof+0x92/0x6a0 [ 79.435456][ T7275] ? __kernfs_new_node+0xd2/0xa10 [ 79.435482][ T7275] __kernfs_new_node+0xd2/0xa10 [ 79.435506][ T7275] ? __pfx___kernfs_new_node+0x10/0x10 [ 79.435531][ T7275] ? lock_acquire+0x1d1/0x380 [ 79.435551][ T7275] ? kernfs_root+0x23/0x2a0 [ 79.435572][ T7275] ? find_held_lock+0x2b/0x80 [ 79.435599][ T7275] ? kernfs_root+0xee/0x2a0 [ 79.435616][ T7275] ? kernfs_root+0xee/0x2a0 [ 79.435641][ T7275] kernfs_new_node+0x117/0x150 [ 79.435669][ T7275] __kernfs_create_file+0x53/0x350 [ 79.435699][ T7275] sysfs_add_file_mode_ns+0x207/0x3c0 [ 79.435749][ T7275] internal_create_group+0x593/0xfb0 [ 79.435776][ T7275] ? __pfx_internal_create_group+0x10/0x10 [ 79.435801][ T7275] ? kernfs_create_link+0x1bd/0x240 [ 79.435831][ T7275] internal_create_groups+0x9d/0x150 [ 79.435851][ T7275] device_add+0x7c8/0x1970 [ 79.435885][ T7275] ? __pfx_device_add+0x10/0x10 [ 79.435907][ T7275] ? lockdep_init_map_type+0x5c/0x250 [ 79.435930][ T7275] ? __init_waitqueue_head+0xca/0x150 [ 79.435966][ T7275] netdev_register_kobject+0x1df/0x410 [ 79.436008][ T7275] register_netdevice+0x15b6/0x25a0 [ 79.436047][ T7275] ? __pfx_register_netdevice+0x10/0x10 [ 79.436070][ T7275] ? dst_cache_init+0x266/0x350 [ 79.436094][ T7275] geneve_newlink+0x9a2/0x1250 [ 79.436136][ T7275] ? trace_kmalloc+0x40/0x110 [ 79.436166][ T7275] ? __pfx_geneve_newlink+0x10/0x10 [ 79.436209][ T7275] ? rtnl_create_link+0xa4b/0xf80 [ 79.436233][ T7275] ? __pfx_geneve_newlink+0x10/0x10 [ 79.436261][ T7275] rtnl_newlink+0x1697/0x2620 [ 79.436294][ T7275] ? __pfx_rtnl_newlink+0x10/0x10 [ 79.436313][ T7275] ? avc_has_perm_noaudit+0x56/0x470 [ 79.436336][ T7275] ? find_held_lock+0x2b/0x80 [ 79.436363][ T7275] ? avc_has_perm_noaudit+0x11e/0x470 [ 79.436383][ T7275] ? avc_has_perm_noaudit+0x11e/0x470 [ 79.436431][ T7275] ? lock_acquire+0x1d1/0x380 [ 79.436452][ T7275] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 79.436473][ T7275] ? find_held_lock+0x2b/0x80 [ 79.436500][ T7275] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 79.436523][ T7275] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 79.436546][ T7275] ? __pfx_rtnl_newlink+0x10/0x10 [ 79.436568][ T7275] rtnetlink_rcv_msg+0x95e/0xe90 [ 79.436592][ T7275] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 79.436622][ T7275] ? ref_tracker_free+0x37e/0x6c0 [ 79.436646][ T7275] netlink_rcv_skb+0x159/0x420 [ 79.436674][ T7275] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 79.436698][ T7275] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 79.436726][ T7275] ? netlink_deliver_tap+0x1ae/0xcc0 [ 79.436760][ T7275] netlink_unicast+0x65f/0x950 [ 79.436782][ T7275] ? __pfx_netlink_unicast+0x10/0x10 [ 79.436808][ T7275] netlink_sendmsg+0x8b0/0xda0 [ 79.436831][ T7275] ? __pfx_netlink_sendmsg+0x10/0x10 [ 79.436853][ T7275] ? selinux_socket_sendmsg+0x198/0x2f0 [ 79.436884][ T7275] ____sys_sendmsg+0xa4d/0xbe0 [ 79.436907][ T7275] ? __pfx_netlink_sendmsg+0x10/0x10 [ 79.436928][ T7275] ? __pfx_____sys_sendmsg+0x10/0x10 [ 79.436970][ T7275] ___sys_sendmsg+0x190/0x1e0 [ 79.436998][ T7275] ? __pfx____sys_sendmsg+0x10/0x10 [ 79.437024][ T7275] ? futex_wait+0x11e/0x370 [ 79.437056][ T7275] ? find_held_lock+0x2b/0x80 [ 79.437100][ T7275] __sys_sendmsg+0x160/0x210 [ 79.437121][ T7275] ? __pfx___sys_sendmsg+0x10/0x10 [ 79.437153][ T7275] do_syscall_64+0x123/0x790 [ 79.437207][ T7275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.437227][ T7275] RIP: 0033:0x7f03b4b9e559 [ 79.437243][ T7275] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.437262][ T7275] RSP: 002b:00007f03b5a5c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 79.437291][ T7275] RAX: ffffffffffffffda RBX: 00007f03b4e25fa0 RCX: 00007f03b4b9e559 [ 79.437302][ T7275] RDX: 0000000004000854 RSI: 00002000000006c0 RDI: 0000000000000008 [ 79.437314][ T7275] RBP: 00007f03b4c35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 79.437326][ T7275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.437337][ T7275] R13: 00007f03b4e26038 R14: 00007f03b4e25fa0 R15: 00007ffe9bb6d5b8 [ 79.437364][ T7275] [ 79.625310][ T7293] netlink: 8 bytes leftover after parsing attributes in process `syz.3.318'. [ 79.625323][ T7293] netlink: 12 bytes leftover after parsing attributes in process `syz.3.318'. [ 79.625338][ T7293] netlink: 'syz.3.318': attribute type 19 has an invalid length. [ 79.646038][ T13] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 79.646073][ T13] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 79.646099][ T13] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 79.646117][ T13] netdevsim netdevsim3 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 79.669386][ T7297] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 79.989830][ T7314] tmpfs: Invalid gid '0x00000000ffffffff' [ 80.031146][ T7316] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 80.039361][ T5602] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 80.114923][ T7322] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 80.206700][ T5602] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 80.210782][ T5602] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.210804][ T5602] usb 7-1: Product: syz [ 80.210816][ T5602] usb 7-1: Manufacturer: syz [ 80.210827][ T5602] usb 7-1: SerialNumber: syz [ 80.353403][ T7339] rxe_eth0 speed is unknown, defaulting to 1000 [ 80.396986][ T7341] qnx6: Unable to read first mmi superblock [ 80.401683][ T7343] netlink: 12 bytes leftover after parsing attributes in process `syz.1.337'. [ 80.433632][ T5602] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 80.433677][ T5602] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 80.433695][ T5602] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 80.437136][ T5602] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 80.450078][ T7345] netlink: 'syz.1.338': attribute type 4 has an invalid length. [ 80.450399][ T5602] usb 7-1: USB disconnect, device number 9 [ 80.544874][ T7355] kernel read not supported for file /file1 (pid: 7355 comm: syz.4.341) [ 80.575091][ T7357] warning: `syz.4.343' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 80.575518][ T7357] netlink: 'syz.4.343': attribute type 2 has an invalid length. [ 80.575801][ T7357] netlink: 14 bytes leftover after parsing attributes in process `syz.4.343'. [ 80.604902][ T7350] kAFS: unable to lookup cell '.' [ 80.628568][ T7361] netlink: 14 bytes leftover after parsing attributes in process `syz.4.343'. qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 80.729233][ T7376] syz_tun: tun_net_xmit 54 [ 80.759651][ T7380] netlink: 'syz.1.349': attribute type 1 has an invalid length. [ 80.759665][ T7380] netlink: 228 bytes leftover after parsing attributes in process `syz.1.349'. [ 80.815756][ T7384] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 80.890714][ T7392] netlink: 12 bytes leftover after parsing attributes in process `syz.4.353'. [ 80.908118][ T7403] netlink: 12 bytes leftover after parsing attributes in process `syz.4.353'. [ 81.078598][ T24] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 81.278817][ T7433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.360'. [ 81.278841][ T7433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.360'. [ 81.898292][ T5090] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 81.898356][ T5090] Bluetooth: hci0: Injecting HCI hardware error event [ 81.899978][ T67] Bluetooth: hci0: hardware error 0x00 [ 82.016077][ T5602] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 82.176595][ T5602] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 82.179504][ T5602] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.179518][ T5602] usb 8-1: Product: syz [ 82.179525][ T5602] usb 8-1: Manufacturer: syz [ 82.179533][ T5602] usb 8-1: SerialNumber: syz [ 82.226116][ T24] usb 6-1: device descriptor read/64, error -71 [ 82.384411][ T5602] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 82.384439][ T5602] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 82.384449][ T5602] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 82.385347][ T5602] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71 [ 82.391483][ T5602] usb 8-1: USB disconnect, device number 8 [ 82.466113][ T24] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 82.596039][ T24] usb 6-1: device descriptor read/64, error -71 [ 82.708726][ T24] usb usb6-port1: attempt power cycle [ 83.046041][ T24] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 83.066983][ T24] usb 6-1: device descriptor read/8, error -71 [ 83.215588][ T42] kauditd_printk_skb: 35 callbacks suppressed [ 83.215602][ T42] audit: type=1400 audit(1792331103.316:672): avc: denied { cmd } for pid=7463 comm="syz.4.368" path="/dev/ublk-control" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 83.306111][ T24] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 83.325789][ T7469] FAULT_INJECTION: forcing a failure. [ 83.325789][ T7469] name failslab, interval 1, probability 0, space 0, times 0 [ 83.325811][ T7469] CPU: 2 UID: 0 PID: 7469 Comm: syz.4.370 Not tainted syzkaller #0 PREEMPT(full) [ 83.325825][ T7469] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 83.325832][ T7469] Call Trace: [ 83.325836][ T7469] [ 83.325841][ T7469] dump_stack_lvl+0x100/0x190 [ 83.325863][ T7469] should_fail_ex.cold+0x5/0xa [ 83.325882][ T7469] should_failslab+0xc2/0x120 [ 83.325900][ T7469] __kmalloc_noprof+0xfc/0x840 [ 83.325938][ T7469] ? __reuseport_alloc+0x1d/0x90 [ 83.325957][ T7469] __reuseport_alloc+0x1d/0x90 [ 83.325970][ T7469] reuseport_alloc+0x1ed/0x420 [ 83.325986][ T7469] udp_lib_get_port+0xbd5/0x1b50 [ 83.326017][ T7469] ? __pfx_udp_lib_get_port+0x10/0x10 [ 83.326031][ T7469] ? do_raw_spin_lock+0x128/0x260 [ 83.326052][ T7469] ? __local_bh_enable_ip+0xa5/0x120 [ 83.326069][ T7469] inet_autobind+0xba/0x1a0 [ 83.326086][ T7469] inet_send_prepare+0x244/0x470 [ 83.326105][ T7469] inet_sendmsg+0x43/0x140 [ 83.326121][ T7469] sock_write_iter+0x4ea/0x5b0 [ 83.326136][ T7469] ? __pfx_inet_sendmsg+0x10/0x10 [ 83.326153][ T7469] ? __pfx_sock_write_iter+0x10/0x10 [ 83.326171][ T7469] ? bpf_lsm_file_permission+0x9/0x10 [ 83.326188][ T7469] ? security_file_permission+0x76/0x210 [ 83.326207][ T7469] ? rw_verify_area+0xce/0x6d0 [ 83.326251][ T7469] vfs_write+0x6af/0x1050 [ 83.326267][ T7469] ? __pfx_sock_write_iter+0x10/0x10 [ 83.326284][ T7469] ? __pfx_vfs_write+0x10/0x10 [ 83.326298][ T7469] ? find_held_lock+0x2b/0x80 [ 83.326325][ T7469] ksys_write+0x1f8/0x250 [ 83.326341][ T7469] ? __pfx_ksys_write+0x10/0x10 [ 83.326360][ T7469] do_syscall_64+0x123/0x790 [ 83.326378][ T7469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.326390][ T7469] RIP: 0033:0x7f091999e559 [ 83.326400][ T7469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.326411][ T7469] RSP: 002b:00007f091a8fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 83.326423][ T7469] RAX: ffffffffffffffda RBX: 00007f0919c26090 RCX: 00007f091999e559 [ 83.326431][ T7469] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 83.326437][ T7469] RBP: 00007f0919a35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 83.326443][ T7469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.326450][ T7469] R13: 00007f0919c26128 R14: 00007f0919c26090 R15: 00007fffd5493778 [ 83.326466][ T7469] [ 83.327593][ T24] usb 6-1: device descriptor read/8, error -71 [ 83.436282][ T24] usb usb6-port1: unable to enumerate USB device [ 83.460317][ T42] audit: type=1400 audit(1792331103.566:673): avc: denied { ioctl } for pid=7475 comm="syz.3.372" path="socket:[21995]" dev="sockfs" ino=21995 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 83.620620][ T42] audit: type=1400 audit(1792331103.726:674): avc: denied { bind } for pid=7478 comm="syz.3.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 83.651511][ T42] audit: type=1400 audit(1792331103.756:675): avc: denied { write } for pid=7488 comm="syz.3.374" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 83.664830][ T42] audit: type=1400 audit(1792331103.766:676): avc: denied { read } for pid=7488 comm="syz.3.374" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 83.664860][ T42] audit: type=1400 audit(1792331103.766:677): avc: denied { open } for pid=7488 comm="syz.3.374" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 83.688382][ T7491] /dev/nullb0: Can't open blockdev [ 83.725687][ T7493] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 83.778309][ T7493] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 83.831931][ T7494] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 83.833202][ T7493] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 83.834942][ T7493] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 83.978634][ T67] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 84.327357][ T1164] IPVS: starting estimator thread 0... [ 84.328307][ T42] audit: type=1400 audit(1792331104.436:678): avc: denied { getopt } for pid=7502 comm="syz.4.379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 84.416049][ T7505] IPVS: using max 43 ests per chain, 103200 per kthread [ 84.438065][ T7504] /dev/sr0: Can't open blockdev [ 84.474578][ T7511] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 84.479133][ T1178] Bluetooth: hci4: Frame reassembly failed (-84) [ 84.755469][ T7519] netlink: 'syz.1.383': attribute type 11 has an invalid length. [ 84.842378][ T42] audit: type=1400 audit(1792331104.946:679): avc: denied { connect } for pid=7525 comm="syz.1.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 84.848806][ T42] audit: type=1400 audit(1792331104.956:680): avc: denied { ioctl } for pid=7525 comm="syz.1.385" path="socket:[22099]" dev="sockfs" ino=22099 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 84.911086][ T7532] __nla_validate_parse: 1 callbacks suppressed [ 84.911099][ T7532] netlink: 16 bytes leftover after parsing attributes in process `syz.3.387'. [ 84.913069][ T7532] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 84.913095][ T7532] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 84.937131][ T7534] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 84.988868][ T7534] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.041916][ T7535] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.043641][ T7534] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.045725][ T7534] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.449776][ T7542] syzkaller0: entered promiscuous mode [ 85.449790][ T7542] syzkaller0: entered allmulticast mode [ 85.591661][ T7548] ip_tables: iptables: counters copy to user failed while replacing table [ 85.591931][ T7548] ip_tables: iptables: counters copy to user failed while replacing table [ 85.592181][ T7548] ip_tables: iptables: counters copy to user failed while replacing table [ 85.592454][ T7548] ip_tables: iptables: counters copy to user failed while replacing table [ 85.592702][ T7548] ip_tables: iptables: counters copy to user failed while replacing table [ 85.592942][ T7548] ip_tables: iptables: counters copy to user failed while replacing table [ 85.593185][ T7548] ip_tables: iptables: counters copy to user failed while replacing table [ 85.593538][ T7548] ip_tables: iptables: counters copy to user failed while replacing table [ 85.593802][ T7548] ip_tables: iptables: counters copy to user failed while replacing table [ 85.628185][ T7551] Illegal XDP return value 3914483237 on prog (id 30) dev syz_tun, expect packet loss! [ 85.628663][ T7551] netlink: 8 bytes leftover after parsing attributes in process `syz.3.391'. [ 85.628718][ T7551] netlink: 4 bytes leftover after parsing attributes in process `syz.3.391'. [ 85.628986][ T7551] netlink: 4 bytes leftover after parsing attributes in process `syz.3.391'. [ 85.631468][ T7551] netlink: 4 bytes leftover after parsing attributes in process `syz.3.391'. [ 85.631676][ T7551] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2573 sclass=netlink_route_socket pid=7551 comm=syz.3.391 [ 85.690728][ T42] audit: type=1400 audit(1792331105.796:681): avc: denied { bind } for pid=7558 comm="syz.1.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 85.690990][ T7560] RDS: rds_bind could not find a transport for ::ffff:172.20.20.10, load rds_tcp or rds_rdma? [ 85.693429][ T7560] RDS: rds_bind could not find a transport for ::ffff:172.20.20.10, load rds_tcp or rds_rdma? [ 85.964473][ T7586] fuse: Unknown parameter ' ª2M‡ÜÀ' [ 86.542345][ T5090] Bluetooth: hci4: command 0x1003 tx timeout [ 86.542443][ T67] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 86.602959][ T7592] netlink: 4 bytes leftover after parsing attributes in process `syz.4.403'. [ 86.609764][ T7592] netlink: 4 bytes leftover after parsing attributes in process `syz.4.403'. [ 86.636522][ T13] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.636553][ T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.636571][ T13] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.636588][ T13] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.888037][ T7615] bridge_slave_0: left allmulticast mode [ 86.888062][ T7615] bridge_slave_0: left promiscuous mode [ 86.888213][ T7615] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.894585][ T7615] bridge_slave_1: left allmulticast mode [ 86.894608][ T7615] bridge_slave_1: left promiscuous mode [ 86.894785][ T7615] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.925172][ T7615] bond0: (slave bond_slave_0): Releasing backup interface [ 86.949053][ T7615] bond0: (slave bond_slave_1): Releasing backup interface [ 86.966353][ T7615] team0: Port device team_slave_0 removed [ 86.978519][ T7615] team0: Port device team_slave_1 removed [ 86.978905][ T7615] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.978916][ T7615] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.984588][ T7617] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1539 sclass=netlink_route_socket pid=7617 comm=syz.1.412 [ 86.994256][ T7615] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.994270][ T7615] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.019108][ T7617] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 87.087725][ T7619] xt_hashlimit: size too large, truncated to 1048576 [ 87.222802][ T7621] all: renamed from bridge_slave_0 (while UP) [ 87.415233][ T7633] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 87.714136][ T7631] cgroup: fork rejected by pids controller in /syz1 [ 87.849440][ T7687] jffs2: notice: (7687) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 87.932226][ T7702] FAULT_INJECTION: forcing a failure. [ 87.932226][ T7702] name failslab, interval 1, probability 0, space 0, times 0 [ 87.932247][ T7702] CPU: 2 UID: 0 PID: 7702 Comm: syz.3.427 Not tainted syzkaller #0 PREEMPT(full) [ 87.932260][ T7702] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 87.932267][ T7702] Call Trace: [ 87.932271][ T7702] [ 87.932276][ T7702] dump_stack_lvl+0x100/0x190 [ 87.932295][ T7702] should_fail_ex.cold+0x5/0xa [ 87.932311][ T7702] should_failslab+0xc2/0x120 [ 87.932328][ T7702] kmem_cache_alloc_noprof+0x92/0x6a0 [ 87.932342][ T7702] ? net_alloc_generic+0x1e/0x70 [ 87.932356][ T7702] ? copy_net_ns+0xe8/0x7a0 [ 87.932371][ T7702] copy_net_ns+0xe8/0x7a0 [ 87.932383][ T7702] ? copy_cgroup_ns+0x71/0x970 [ 87.932400][ T7702] create_new_namespaces+0x3ea/0xac0 [ 87.932422][ T7702] unshare_nsproxy_namespaces+0xf2/0x220 [ 87.932437][ T7702] ksys_unshare+0x4a2/0xb30 [ 87.932451][ T7702] ? __pfx_ksys_unshare+0x10/0x10 [ 87.932470][ T7702] __x64_sys_unshare+0x31/0x40 [ 87.932484][ T7702] do_syscall_64+0x123/0x790 [ 87.932502][ T7702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.932513][ T7702] RIP: 0033:0x7f03b4b9e559 [ 87.932522][ T7702] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.932533][ T7702] RSP: 002b:00007f03b5a3b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 87.932544][ T7702] RAX: ffffffffffffffda RBX: 00007f03b4e26090 RCX: 00007f03b4b9e559 [ 87.932551][ T7702] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 87.932557][ T7702] RBP: 00007f03b4c35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 87.932564][ T7702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.932570][ T7702] R13: 00007f03b4e26128 R14: 00007f03b4e26090 R15: 00007ffe9bb6d5b8 [ 87.932585][ T7702] [ 87.942596][ T7704] tipc: Started in network mode [ 87.942607][ T7704] tipc: Node identity 1001001, cluster identity 4711 [ 87.942614][ T7704] tipc: Node number set to 16781313 [ 87.942932][ T7704] netlink: 12 bytes leftover after parsing attributes in process `syz.3.427'. [ 88.022837][ T7711] netlink: 'syz.1.428': attribute type 2 has an invalid length. [ 88.096039][ T6161] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 88.106118][ T34] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 88.276556][ T6161] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 88.279384][ T6161] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.279398][ T6161] usb 9-1: Product: syz [ 88.279405][ T6161] usb 9-1: Manufacturer: syz [ 88.279412][ T6161] usb 9-1: SerialNumber: syz [ 88.288628][ T34] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 88.291061][ T34] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.291074][ T34] usb 7-1: Product: syz [ 88.291081][ T34] usb 7-1: Manufacturer: syz [ 88.291088][ T34] usb 7-1: SerialNumber: syz [ 88.482953][ T7694] FAULT_INJECTION: forcing a failure. [ 88.482953][ T7694] name failslab, interval 1, probability 0, space 0, times 0 [ 88.482974][ T7694] CPU: 3 UID: 0 PID: 7694 Comm: syz.4.425 Not tainted syzkaller #0 PREEMPT(full) [ 88.482987][ T7694] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 88.482993][ T7694] Call Trace: [ 88.483009][ T7694] [ 88.483016][ T7694] dump_stack_lvl+0x100/0x190 [ 88.483038][ T7694] should_fail_ex.cold+0x5/0xa [ 88.483054][ T7694] should_failslab+0xc2/0x120 [ 88.483071][ T7694] __kmalloc_noprof+0xfc/0x840 [ 88.483085][ T7694] ? rcu_is_watching+0x13/0xc0 [ 88.483101][ T7694] ? tomoyo_realpath_from_path+0xb6/0x690 [ 88.483115][ T7694] tomoyo_realpath_from_path+0xb6/0x690 [ 88.483130][ T7694] tomoyo_path_number_perm+0x23c/0x580 [ 88.483144][ T7694] ? tomoyo_path_number_perm+0x22e/0x580 [ 88.483162][ T7694] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 88.483183][ T7694] ? __lock_acquire+0x5c0/0x1f40 [ 88.483203][ T7694] ? __fget_files+0x34/0x3d0 [ 88.483219][ T7694] ? find_held_lock+0x2b/0x80 [ 88.483235][ T7694] ? hook_file_ioctl_common+0x140/0x440 [ 88.483252][ T7694] ? __fget_files+0x21f/0x3d0 [ 88.483270][ T7694] security_file_ioctl+0xd3/0x230 [ 88.483288][ T7694] __x64_sys_ioctl+0xb7/0x210 [ 88.483303][ T7694] do_syscall_64+0x123/0x790 [ 88.483321][ T7694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.483333][ T7694] RIP: 0033:0x7f091999e559 [ 88.483342][ T7694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.483353][ T7694] RSP: 002b:00007f091a91f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 88.483364][ T7694] RAX: ffffffffffffffda RBX: 00007f0919c25fa0 RCX: 00007f091999e559 [ 88.483371][ T7694] RDX: 0000000000000023 RSI: 0000000040045506 RDI: 0000000000000003 [ 88.483377][ T7694] RBP: 00007f091a91f090 R08: 0000000000000000 R09: 0000000000000000 [ 88.483384][ T7694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.483390][ T7694] R13: 00007f0919c26038 R14: 00007f0919c25fa0 R15: 00007fffd5493778 [ 88.483406][ T7694] [ 88.483446][ T7694] ERROR: Out of memory at tomoyo_realpath_from_path. [ 88.484292][ T6161] net_ratelimit: 11 callbacks suppressed [ 88.484304][ T6161] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 88.484327][ T6161] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 88.484337][ T6161] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 88.485150][ T6161] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -71 [ 88.489530][ T6161] usb 9-1: USB disconnect, device number 3 [ 88.501396][ T34] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 88.501423][ T34] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 88.501433][ T34] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 88.503672][ T34] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 88.509020][ T34] usb 7-1: USB disconnect, device number 10 [ 88.883923][ T7718] overlay: Unknown parameter './file0/file2' [ 88.884753][ T7717] xt_hashlimit: size too large, truncated to 1048576 [ 88.899977][ T7721] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 88.952669][ T7721] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 88.968651][ T7726] loop5: detected capacity change from 0 to 7 [ 88.974813][ T7726] Dev loop5: unable to read RDB block 7 [ 88.974831][ T7726] loop5: AHDI p1 p3 p4 [ 88.974842][ T7726] loop5: partition table partially beyond EOD, truncated [ 88.974952][ T7726] loop5: p1 size 100663296 extends beyond EOD, truncated [ 88.976241][ T7726] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 89.005853][ T7724] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 89.010798][ T7721] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 89.014024][ T7721] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 89.018867][ T7728] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 89.040945][ T7726] Dev loop5: unable to read RDB block 7 [ 89.040972][ T7726] loop5: AHDI p1 p3 p4 [ 89.040988][ T7726] loop5: partition table partially beyond EOD, truncated [ 89.041153][ T7726] loop5: p1 size 100663296 extends beyond EOD, truncated [ 89.044543][ T7726] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 89.084916][ T5740] udevd[5740]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 89.093115][ T5924] udevd[5924]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 89.115104][ T5924] udevd[5924]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 89.115694][ T5740] udevd[5740]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 89.169731][ T7738] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 89.169747][ T7738] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 89.169797][ T7738] vhci_hcd vhci_hcd.0: Device attached [ 89.175658][ T7739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.175868][ T7739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.178322][ T7742] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 89.178552][ T13] vhci_hcd vhci_hcd.3: stop threads [ 89.178562][ T13] vhci_hcd vhci_hcd.3: release socket [ 89.178573][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 89.178652][ T7741] syzkaller0: entered promiscuous mode [ 89.178663][ T7741] syzkaller0: entered allmulticast mode [ 89.241882][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 89.241920][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.311973][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 89.312006][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.369377][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 89.369409][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.427498][ T2628] usb 8-1: new low-speed USB device number 9 using dummy_hcd [ 89.433232][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 89.433253][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.513159][ T42] kauditd_printk_skb: 18 callbacks suppressed [ 89.513172][ T42] audit: type=1400 audit(1792331109.616:700): avc: denied { read } for pid=5444 comm="dhcpcd" name="n39" dev="tmpfs" ino=2744 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 89.513317][ T42] audit: type=1400 audit(1792331109.616:701): avc: denied { open } for pid=5444 comm="dhcpcd" path="/run/udev/data/n39" dev="tmpfs" ino=2744 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 89.513434][ T42] audit: type=1400 audit(1792331109.616:702): avc: denied { getattr } for pid=5444 comm="dhcpcd" path="/run/udev/data/n39" dev="tmpfs" ino=2744 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 89.564820][ T5090] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.570403][ T5090] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.578376][ T5090] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.578887][ T5090] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.580170][ T5090] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.598679][ T2628] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 89.599186][ T2628] usb 8-1: config 0 has no interfaces? [ 89.599207][ T2628] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.602688][ T2628] usb 8-1: config 0 descriptor?? [ 89.649195][ T13] bridge_slave_1: left allmulticast mode [ 89.649234][ T13] bridge_slave_1: left promiscuous mode [ 89.650973][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.665360][ T13] bridge_slave_0: left allmulticast mode [ 89.665375][ T13] bridge_slave_0: left promiscuous mode [ 89.665495][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.698088][ T42] audit: type=1400 audit(1792331109.806:703): avc: denied { write } for pid=7751 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.698310][ T42] audit: type=1400 audit(1792331109.806:704): avc: denied { create } for pid=7751 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 89.698763][ T42] audit: type=1400 audit(1792331109.806:705): avc: denied { write } for pid=7751 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=2757 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 89.699141][ T42] audit: type=1400 audit(1792331109.806:706): avc: denied { append } for pid=7751 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=2757 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 89.778612][ T42] audit: type=1400 audit(1792331109.886:707): avc: denied { create } for pid=7760 comm="syz.2.445" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 89.780574][ T42] audit: type=1400 audit(1792331109.886:708): avc: denied { write } for pid=7758 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.780600][ T42] audit: type=1400 audit(1792331109.886:709): avc: denied { unlink } for pid=7758 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=2757 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 89.812691][ T6309] usb 8-1: USB disconnect, device number 9 [ 89.873345][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.877804][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.886590][ T13] bond0 (unregistering): Released all slaves [ 89.891595][ T5444] 8021q: adding VLAN 0 to HW filter on device eth1 [ 89.945421][ T7771] netlink: 12 bytes leftover after parsing attributes in process `syz.2.448'. [ 89.973687][ T7771] input: syz0 as /devices/virtual/input/input8 [ 90.046082][ T6161] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 90.135222][ T7780] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.172340][ T7746] rxe_eth0 speed is unknown, defaulting to 1000 [ 90.181854][ T5444] 8021q: adding VLAN 0 to HW filter on device eth2 [ 90.190327][ T7780] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.217037][ T6161] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 90.220146][ T6161] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.220162][ T6161] usb 6-1: Product: syz [ 90.220170][ T6161] usb 6-1: Manufacturer: syz [ 90.220178][ T6161] usb 6-1: SerialNumber: syz [ 90.242114][ T7783] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.243108][ T7780] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.244904][ T7780] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.378986][ T5444] 8021q: adding VLAN 0 to HW filter on device eth3 [ 90.426297][ T7764] FAULT_INJECTION: forcing a failure. [ 90.426297][ T7764] name failslab, interval 1, probability 0, space 0, times 0 [ 90.426317][ T7764] CPU: 2 UID: 0 PID: 7764 Comm: syz.1.446 Not tainted syzkaller #0 PREEMPT(full) [ 90.426329][ T7764] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 90.426336][ T7764] Call Trace: [ 90.426340][ T7764] [ 90.426344][ T7764] dump_stack_lvl+0x100/0x190 [ 90.426365][ T7764] should_fail_ex.cold+0x5/0xa [ 90.426394][ T7764] should_failslab+0xc2/0x120 [ 90.426412][ T7764] __kmalloc_noprof+0xfc/0x840 [ 90.426427][ T7764] ? tomoyo_encode2+0xfb/0x3c0 [ 90.426447][ T7764] tomoyo_encode2+0xfb/0x3c0 [ 90.426466][ T7764] tomoyo_encode+0x29/0x50 [ 90.426483][ T7764] tomoyo_realpath_from_path+0x18c/0x690 [ 90.426497][ T7764] tomoyo_path_number_perm+0x23c/0x580 [ 90.426511][ T7764] ? tomoyo_path_number_perm+0x22e/0x580 [ 90.426528][ T7764] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 90.426549][ T7764] ? __lock_acquire+0x5c0/0x1f40 [ 90.426569][ T7764] ? __fget_files+0x34/0x3d0 [ 90.426585][ T7764] ? find_held_lock+0x2b/0x80 [ 90.426605][ T7764] ? hook_file_ioctl_common+0x140/0x440 [ 90.426625][ T7764] ? __fget_files+0x21f/0x3d0 [ 90.426644][ T7764] security_file_ioctl+0xd3/0x230 [ 90.426661][ T7764] __x64_sys_ioctl+0xb7/0x210 [ 90.426676][ T7764] do_syscall_64+0x123/0x790 [ 90.426694][ T7764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.426705][ T7764] RIP: 0033:0x7f0c71d9e559 [ 90.426715][ T7764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.426725][ T7764] RSP: 002b:00007f0c6fff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 90.426737][ T7764] RAX: ffffffffffffffda RBX: 00007f0c72025fa0 RCX: 00007f0c71d9e559 [ 90.426744][ T7764] RDX: 0000000000000023 RSI: 0000000040045506 RDI: 0000000000000003 [ 90.426751][ T7764] RBP: 00007f0c6fff6090 R08: 0000000000000000 R09: 0000000000000000 [ 90.426757][ T7764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.426768][ T7764] R13: 00007f0c72026038 R14: 00007f0c72025fa0 R15: 00007ffccc5b85b8 [ 90.426784][ T7764] [ 90.426831][ T7764] ERROR: Out of memory at tomoyo_realpath_from_path. [ 90.428655][ T6161] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 90.428681][ T6161] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 90.428693][ T6161] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 90.430852][ T6161] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 90.442218][ T6161] usb 6-1: USB disconnect, device number 15 [ 90.454379][ T13] hsr_slave_0: left promiscuous mode [ 90.454902][ T13] hsr_slave_1: left promiscuous mode [ 90.455296][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.455314][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.456195][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.456206][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.461944][ T13] veth1_macvtap: left promiscuous mode [ 90.461974][ T13] veth0_macvtap: left promiscuous mode [ 90.462021][ T13] veth1_vlan: left promiscuous mode [ 90.462062][ T13] veth0_vlan: left promiscuous mode [ 90.617493][ T13] team0 (unregistering): Port device team_slave_1 removed [ 90.632886][ T13] team0 (unregistering): Port device team_slave_0 removed [ 90.725050][ T7798] syzkaller0: entered promiscuous mode [ 90.725067][ T7798] syzkaller0: entered allmulticast mode [ 90.824791][ T7811] Console: switching to colour dummy device 80x25 [ 90.929518][ T5444] 8021q: adding VLAN 0 to HW filter on device eth4 [ 90.946576][ T7746] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.946650][ T7746] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.946711][ T7746] bridge_slave_0: entered allmulticast mode [ 90.947455][ T7746] bridge_slave_0: entered promiscuous mode [ 90.957780][ T7746] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.957851][ T7746] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.957911][ T7746] bridge_slave_1: entered allmulticast mode [ 90.958757][ T7746] bridge_slave_1: entered promiscuous mode [ 90.987234][ T7746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.988730][ T7746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.012069][ T7746] team0: Port device team_slave_0 added [ 91.014952][ T7746] team0: Port device team_slave_1 added [ 91.032314][ T13] IPVS: stop unused estimator thread 0... [ 91.057084][ T7746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.057110][ T7746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.057124][ T7746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.057913][ T7746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.057921][ T7746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.057933][ T7746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.121993][ T7746] hsr_slave_0: entered promiscuous mode [ 91.125283][ T7746] hsr_slave_1: entered promiscuous mode [ 91.128046][ T7746] debugfs: 'hsr0' already exists in 'hsr' [ 91.128059][ T7746] Cannot create hsr debugfs directory [ 91.293577][ T7746] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 91.296089][ T7746] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.299706][ T7746] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 91.303499][ T7746] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.303941][ T7746] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 91.311903][ T7746] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.312422][ T7746] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 91.324986][ T7746] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.341599][ T7841] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 91.345054][ T7845] netlink: 80 bytes leftover after parsing attributes in process `syz.1.461'. [ 91.387150][ T7746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.394920][ T7746] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.394964][ T7841] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 91.405988][ T7443] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.406090][ T7443] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.410905][ T7443] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.410982][ T7443] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.420266][ T7854] binder: BINDER_SET_CONTEXT_MGR already set [ 91.420275][ T7854] binder: 7850:7854 ioctl 4018620d 200000000140 returned -16 [ 91.450435][ T7841] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 91.451445][ T7841] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 91.453005][ T7841] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 91.616013][ T6161] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 91.635786][ T7746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.656064][ T5090] Bluetooth: hci0: command tx timeout [ 91.755871][ T7746] veth0_vlan: entered promiscuous mode [ 91.762258][ T7746] veth1_vlan: entered promiscuous mode [ 91.768771][ T6161] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 91.771040][ T6161] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.771053][ T6161] usb 6-1: Product: syz [ 91.771061][ T6161] usb 6-1: Manufacturer: syz [ 91.771069][ T6161] usb 6-1: SerialNumber: syz [ 91.775043][ T7746] veth0_macvtap: entered promiscuous mode [ 91.778522][ T7746] veth1_macvtap: entered promiscuous mode [ 91.784972][ T7746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.788679][ T7746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.816274][ T5785] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.816597][ T5785] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.816907][ T5785] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.819666][ T5785] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.859837][ T238] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.859852][ T238] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.884294][ T1178] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.884306][ T1178] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.942080][ T7875] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 91.994611][ T7879] netlink: 'syz.2.464': attribute type 1 has an invalid length. [ 91.995456][ T7853] FAULT_INJECTION: forcing a failure. [ 91.995456][ T7853] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 91.995519][ T7853] CPU: 2 UID: 0 PID: 7853 Comm: syz.1.463 Not tainted syzkaller #0 PREEMPT(full) [ 91.995533][ T7853] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 91.995540][ T7853] Call Trace: [ 91.995544][ T7853] [ 91.995548][ T7853] dump_stack_lvl+0x100/0x190 [ 91.995570][ T7853] should_fail_ex.cold+0x5/0xa [ 91.995586][ T7853] _copy_to_user+0x32/0xd0 [ 91.995604][ T7853] simple_read_from_buffer+0xcb/0x170 [ 91.995622][ T7853] proc_fail_nth_read+0x1af/0x230 [ 91.995652][ T7853] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 91.995670][ T7853] ? rw_verify_area+0xce/0x6d0 [ 91.995685][ T7853] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 91.995705][ T7853] vfs_read+0x1e4/0xb40 [ 91.995719][ T7853] ? lock_acquire+0x1d1/0x380 [ 91.995732][ T7853] ? __fget_files+0x34/0x3d0 [ 91.995748][ T7853] ? __pfx_vfs_read+0x10/0x10 [ 91.995760][ T7853] ? find_held_lock+0x2b/0x80 [ 91.995777][ T7853] ? __fget_files+0x215/0x3d0 [ 91.995795][ T7853] ? __fget_files+0x21f/0x3d0 [ 91.995815][ T7853] ksys_read+0x12a/0x250 [ 91.995828][ T7853] ? __pfx_ksys_read+0x10/0x10 [ 91.995846][ T7853] do_syscall_64+0x123/0x790 [ 91.995864][ T7853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.995876][ T7853] RIP: 0033:0x7f0c71d5ed8e [ 91.995885][ T7853] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 91.995896][ T7853] RSP: 002b:00007f0c6fff5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 91.995907][ T7853] RAX: ffffffffffffffda RBX: 00007f0c6fff66c0 RCX: 00007f0c71d5ed8e [ 91.995914][ T7853] RDX: 000000000000000f RSI: 00007f0c6fff60a0 RDI: 0000000000000004 [ 91.995926][ T7853] RBP: 00007f0c6fff6090 R08: 0000000000000000 R09: 0000000000000000 [ 91.995933][ T7853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.995939][ T7853] R13: 00007f0c72026038 R14: 00007f0c72025fa0 R15: 00007ffccc5b85b8 [ 91.995954][ T7853] [ 92.009088][ T6161] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 92.009117][ T6161] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 92.009129][ T6161] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 92.019399][ T6161] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 92.031394][ T7879] netlink: 28 bytes leftover after parsing attributes in process `syz.2.464'. [ 92.035345][ T7879] macvlan2: entered promiscuous mode [ 92.035356][ T7879] macvlan2: entered allmulticast mode [ 92.035764][ T7879] bond2: entered promiscuous mode [ 92.037048][ T6161] usb 6-1: USB disconnect, device number 16 [ 92.041134][ T7879] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 92.050828][ T7879] bond2: left promiscuous mode [ 92.086427][ T7891] netlink: 'syz.2.464': attribute type 1 has an invalid length. [ 92.087370][ T7888] netlink: 28 bytes leftover after parsing attributes in process `syz.2.464'. [ 92.090705][ T7888] macvlan2: entered promiscuous mode [ 92.090716][ T7888] macvlan2: entered allmulticast mode [ 92.090977][ T7888] bond2: entered promiscuous mode [ 92.091384][ T7888] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 92.098037][ T7888] bond2: left promiscuous mode [ 92.163105][ T5090] Bluetooth: hci0: unexpected cc 0x204b length: 34 > 3 [ 92.169213][ T7899] syzkaller0: entered promiscuous mode [ 92.169228][ T7899] syzkaller0: entered allmulticast mode [ 92.218624][ T7903] zonefs (loop1) ERROR: Not a zoned block device [ 92.306864][ T7909] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (9353363104 ns). Using initial count to start timer. [ 92.446080][ T5734] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 92.518236][ T34] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 92.596785][ T5734] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 92.600565][ T5734] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.600588][ T5734] usb 7-1: Product: syz [ 92.600600][ T5734] usb 7-1: Manufacturer: syz [ 92.600611][ T5734] usb 7-1: SerialNumber: syz [ 92.666659][ T34] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 92.669504][ T34] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.669525][ T34] usb 6-1: Product: syz [ 92.669538][ T34] usb 6-1: Manufacturer: syz [ 92.669552][ T34] usb 6-1: SerialNumber: syz [ 92.812460][ T5734] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 92.812489][ T5734] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 92.812500][ T5734] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 92.814965][ T5734] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 92.823716][ T5734] usb 7-1: USB disconnect, device number 11 [ 92.837201][ T107] Bluetooth: hci4: Frame reassembly failed (-84) [ 92.839941][ T1164] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 92.876112][ T7911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.876524][ T7911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.361288][ T7925] netlink: 12 bytes leftover after parsing attributes in process `syz.3.478'. [ 93.361302][ T7925] netlink: 4 bytes leftover after parsing attributes in process `syz.3.478'. [ 93.505046][ T7930] mmap: syz.3.480 (7930) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 93.555619][ T7936] syzkaller0: entered promiscuous mode [ 93.555633][ T7936] syzkaller0: entered allmulticast mode [ 93.568694][ T7938] xt_hashlimit: size too large, truncated to 1048576 [ 93.766556][ T7947] tmpfs: Unknown parameter 'sr_blocks' [ 94.012046][ T7958] netlink: 'syz.3.489': attribute type 42 has an invalid length. [ 94.244972][ T7968] netlink: 8 bytes leftover after parsing attributes in process `syz.3.494'. [ 94.245032][ T7968] netlink: 24 bytes leftover after parsing attributes in process `syz.3.494'. [ 94.290513][ T7981] netlink: 8 bytes leftover after parsing attributes in process `syz.3.497'. [ 94.290529][ T7981] netlink: 8 bytes leftover after parsing attributes in process `syz.3.497'. [ 94.867205][ T67] Bluetooth: hci4: command 0x1003 tx timeout [ 94.867939][ T5090] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 94.989392][ T5090] Bluetooth: hci0: unexpected cc 0x204b length: 34 > 3 [ 94.990154][ T7995] syzkaller0: entered promiscuous mode [ 94.990197][ T7995] syzkaller0: entered allmulticast mode [ 95.216569][ T34] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 95.216604][ T34] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 95.217690][ T42] kauditd_printk_skb: 58 callbacks suppressed [ 95.217700][ T42] audit: type=1400 audit(1792331115.326:768): avc: denied { create } for pid=8000 comm="syz.3.505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 95.217792][ T34] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 95.217817][ T34] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 95.218483][ T34] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 95.222011][ T34] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 95.255756][ T34] usb 6-1: USB disconnect, device number 17 [ 95.309760][ T8009] smc: net device lo applied user defined pnetid SYZ2 [ 95.309998][ T8009] smc: net device lo erased user defined pnetid SYZ2 [ 95.410102][ T8016] netlink: Failed to add helper -22 [ 95.410132][ T8016] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 95.509636][ T8031] netlink: 20 bytes leftover after parsing attributes in process `syz.1.515'. [ 95.511205][ T8035] SELinux: syz.3.516 (8035) wrote to user. This is no longer supported. [ 95.539676][ T8037] netlink: 16 bytes leftover after parsing attributes in process `syz.3.517'. [ 95.551740][ T8037] netlink: 16 bytes leftover after parsing attributes in process `syz.3.517'. [ 95.651016][ T8042] faux_driver vgem: [drm] Unknown color mode 6; guessing buffer size. [ 95.653233][ T42] audit: type=1400 audit(1792331115.756:769): avc: denied { connect } for pid=8041 comm="syz.3.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 95.685022][ T42] audit: type=1400 audit(1792331115.786:770): avc: denied { execute } for pid=8045 comm="syz.3.520" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=24666 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 95.801980][ T42] audit: type=1400 audit(1792331115.906:771): avc: denied { ioctl } for pid=8057 comm="syz.3.525" path="socket:[24029]" dev="sockfs" ino=24029 ioctlcmd=0x6721 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 95.897913][ T8064] random: crng reseeded on system resumption [ 95.906678][ T5602] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 95.957874][ T8068] ip_tables: iptables: counters copy to user failed while replacing table [ 95.981504][ T8072] netlink: 48 bytes leftover after parsing attributes in process `syz.2.530'. [ 96.019790][ T42] audit: type=1400 audit(1792331116.126:772): avc: denied { setopt } for pid=8078 comm="syz.2.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 96.023049][ T42] audit: type=1400 audit(1792331116.126:773): avc: denied { read } for pid=8078 comm="syz.2.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 96.074514][ T42] audit: type=1400 audit(1792331116.176:774): avc: denied { write } for pid=8078 comm="syz.2.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 96.217199][ T5090] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 96.217250][ T5090] Bluetooth: hci0: Injecting HCI hardware error event [ 96.218695][ T5090] Bluetooth: hci0: hardware error 0x00 [ 96.925323][ T42] audit: type=1400 audit(1792331117.026:775): avc: denied { read } for pid=8084 comm="syz.2.536" name="loop-control" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 96.925354][ T42] audit: type=1400 audit(1792331117.026:776): avc: denied { open } for pid=8084 comm="syz.2.536" path="/dev/loop-control" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 96.925491][ T8088] FAULT_INJECTION: forcing a failure. [ 96.925491][ T8088] name failslab, interval 1, probability 0, space 0, times 0 [ 96.925508][ T8088] CPU: 0 UID: 0 PID: 8088 Comm: syz.2.536 Tainted: G L syzkaller #0 PREEMPT(full) [ 96.925524][ T8088] Tainted: [L]=SOFTLOCKUP [ 96.925528][ T8088] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.925535][ T8088] Call Trace: [ 96.925539][ T8088] [ 96.925543][ T8088] dump_stack_lvl+0x100/0x190 [ 96.925581][ T8088] should_fail_ex.cold+0x5/0xa [ 96.925598][ T8088] should_failslab+0xc2/0x120 [ 96.925615][ T8088] kmem_cache_alloc_noprof+0x92/0x6a0 [ 96.925629][ T8088] ? __pfx_map_id_range_down+0x10/0x10 [ 96.925642][ T8088] ? rcu_is_watching+0x13/0xc0 [ 96.925658][ T8088] ? security_inode_alloc+0x3b/0x2c0 [ 96.925677][ T8088] security_inode_alloc+0x3b/0x2c0 [ 96.925693][ T8088] inode_init_always_gfp+0xc6f/0xfb0 [ 96.925713][ T8088] alloc_inode+0x8e/0x250 [ 96.925726][ T8088] sock_alloc+0x44/0x280 [ 96.925746][ T8088] ? security_socket_create+0x7f/0x250 [ 96.925761][ T8088] __sock_create+0xc2/0x860 [ 96.925778][ T8088] __sys_socket+0x14d/0x260 [ 96.925796][ T8088] ? __pfx___sys_socket+0x10/0x10 [ 96.925815][ T8088] __x64_sys_socket+0x72/0xb0 [ 96.925830][ T8088] ? lockdep_hardirqs_on+0x7d/0x110 [ 96.925864][ T8088] do_syscall_64+0x123/0x790 [ 96.925882][ T8088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.925894][ T8088] RIP: 0033:0x7ff60699e559 [ 96.925904][ T8088] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.925915][ T8088] RSP: 002b:00007ff6077e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 96.925945][ T8088] RAX: ffffffffffffffda RBX: 00007ff606c26090 RCX: 00007ff60699e559 [ 96.925952][ T8088] RDX: 0000000000000014 RSI: 0000000000000003 RDI: 0000000000000010 [ 96.925959][ T8088] RBP: 00007ff606a35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 96.925965][ T8088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.925971][ T8088] R13: 00007ff606c26128 R14: 00007ff606c26090 R15: 00007ffc1fbe9738 [ 96.925987][ T8088] [ 96.963069][ T8086] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 96.971537][ T42] audit: type=1400 audit(1792331117.076:777): avc: denied { ioctl } for pid=8084 comm="syz.2.536" path="/dev/loop-control" dev="devtmpfs" ino=655 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 97.020408][ T8088] socket: no more sockets [ 97.048406][ T8113] overlayfs: missing 'workdir' [ 97.103253][ T8121] rdma_op ffff888057f75238 conn xmit_rdma 0000000000000000 [ 97.131875][ T8128] 9pnet_virtio: no channels available for device 127.0.0.1 [ 97.176864][ T6309] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 97.204596][ T8141] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 97.346350][ T6309] usb 8-1: Using ep0 maxpacket: 32 [ 97.347035][ T6309] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 97.350956][ T6309] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 97.350976][ T6309] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 97.350993][ T6309] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 97.351027][ T6309] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 97.351044][ T6309] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 97.351063][ T6309] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 97.351094][ T6309] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.354724][ T6309] usb 8-1: config 0 descriptor?? [ 97.437947][ T1349] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 97.526356][ T8146] xt_hashlimit: size too large, truncated to 1048576 [ 97.557936][ T6309] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 97.559157][ T8094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.537'. [ 97.574315][ T8094] ip6erspan0: entered promiscuous mode [ 97.616844][ T1349] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 97.619321][ T1349] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.619337][ T1349] usb 6-1: Product: syz [ 97.619345][ T1349] usb 6-1: Manufacturer: syz [ 97.619353][ T1349] usb 6-1: SerialNumber: syz [ 98.297502][ T5090] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 98.618726][ T8156] FAULT_INJECTION: forcing a failure. [ 98.618726][ T8156] name failslab, interval 1, probability 0, space 0, times 0 [ 98.618750][ T8156] CPU: 0 UID: 0 PID: 8156 Comm: syz.2.551 Tainted: G L syzkaller #0 PREEMPT(full) [ 98.618765][ T8156] Tainted: [L]=SOFTLOCKUP [ 98.618770][ T8156] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 98.618777][ T8156] Call Trace: [ 98.618781][ T8156] [ 98.618786][ T8156] dump_stack_lvl+0x100/0x190 [ 98.618812][ T8156] should_fail_ex.cold+0x5/0xa [ 98.618841][ T8156] should_failslab+0xc2/0x120 [ 98.618861][ T8156] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 98.618878][ T8156] ? hugetlbfs_alloc_inode+0x8c/0x1d0 [ 98.618898][ T8156] hugetlbfs_alloc_inode+0x8c/0x1d0 [ 98.618914][ T8156] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 98.618930][ T8156] alloc_inode+0x68/0x250 [ 98.618944][ T8156] new_inode+0x22/0x1c0 [ 98.618959][ T8156] hugetlbfs_get_inode+0x39a/0x700 [ 98.618974][ T8156] ? security_capable+0x80/0x260 [ 98.618991][ T8156] hugetlb_file_setup+0x3cc/0x5b0 [ 98.619010][ T8156] newseg+0xaf0/0xed0 [ 98.619030][ T8156] ? __pfx_newseg+0x10/0x10 [ 98.619047][ T8156] ? down_write+0x146/0x1f0 [ 98.619059][ T8156] ? ksys_write+0x190/0x250 [ 98.619075][ T8156] ipcget+0xee/0xf50 [ 98.619086][ T8156] ? __pfx_do_futex+0x10/0x10 [ 98.619105][ T8156] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 98.619123][ T8156] ? __pfx_ipcget+0x10/0x10 [ 98.619134][ T8156] ? __x64_sys_futex+0x34f/0x4d0 [ 98.619149][ T8156] ? __x64_sys_futex+0x358/0x4d0 [ 98.619168][ T8156] __x64_sys_shmget+0x13b/0x1b0 [ 98.619179][ T8156] ? __pfx___x64_sys_shmget+0x10/0x10 [ 98.619194][ T8156] do_syscall_64+0x123/0x790 [ 98.619212][ T8156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.619224][ T8156] RIP: 0033:0x7ff60699e559 [ 98.619234][ T8156] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.619245][ T8156] RSP: 002b:00007ff607805028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 98.619257][ T8156] RAX: ffffffffffffffda RBX: 00007ff606c25fa0 RCX: 00007ff60699e559 [ 98.619264][ T8156] RDX: 0000000000000800 RSI: 000000000000c000 RDI: 0000000000000000 [ 98.619271][ T8156] RBP: 00007ff606a35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 98.619278][ T8156] R10: 000020000013c000 R11: 0000000000000246 R12: 0000000000000000 [ 98.619284][ T8156] R13: 00007ff606c26038 R14: 00007ff606c25fa0 R15: 00007ffc1fbe9738 [ 98.619299][ T8156] [ 99.961286][ T5602] usb 8-1: USB disconnect, device number 10 [ 99.970359][ T5602] usblp0: removed [ 100.093172][ T1349] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 100.093201][ T1349] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 100.093214][ T1349] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 100.100259][ T1349] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 100.104467][ T1349] usb 6-1: USB disconnect, device number 18 [ 100.154040][ T8162] can0: slcan on ttyS3. [ 100.228650][ T8162] can0 (unregistered): slcan off ttyS3. [ 100.266852][ T8171] block nbd1: NBD_DISCONNECT [ 100.456096][ T8176] syzkaller0: entered promiscuous mode [ 100.456112][ T8176] syzkaller0: entered allmulticast mode [ 100.551125][ T42] kauditd_printk_skb: 5 callbacks suppressed [ 100.551138][ T42] audit: type=1400 audit(1792331120.656:783): avc: denied { write } for pid=8177 comm="syz.5.558" name="sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 100.576078][ T8178] program syz.5.558 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.576837][ T8178] program syz.5.558 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.576933][ T8178] program syz.5.558 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.577029][ T8178] program syz.5.558 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.579464][ T8178] program syz.5.558 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.581652][ T8178] program syz.5.558 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.581773][ T8178] program syz.5.558 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.582069][ T8178] program syz.5.558 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.582205][ T8178] program syz.5.558 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.583575][ T8178] program syz.5.558 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.586705][ T8178] program syz.5.558 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.586840][ T8178] program syz.5.558 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.586950][ T8178] program syz.5.558 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.587067][ T8178] program syz.5.558 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.589162][ T8178] program syz.5.558 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.589292][ T8178] program syz.5.558 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.589390][ T8178] program syz.5.558 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.589506][ T8178] program syz.5.558 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.590371][ T8178] program syz.5.558 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.590477][ T8178] program syz.5.558 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.590574][ T8178] program syz.5.558 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.590689][ T8178] program syz.5.558 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.593123][ T8178] program syz.5.558 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.593253][ T8178] program syz.5.558 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.593380][ T8178] program syz.5.558 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.593487][ T8178] program syz.5.558 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.593591][ T8178] program syz.5.558 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.593707][ T8178] program syz.5.558 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.593835][ T8178] program syz.5.558 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.593943][ T8178] program syz.5.558 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.594037][ T8178] program syz.5.558 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.594130][ T8178] program syz.5.558 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.596592][ T8178] program syz.5.558 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.596744][ T8178] program syz.5.558 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.596862][ T8178] program syz.5.558 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.596985][ T8178] program syz.5.558 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.597092][ T8178] program syz.5.558 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.597206][ T8178] program syz.5.558 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.597301][ T8178] program syz.5.558 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.598059][ T8178] program syz.5.558 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.598187][ T8178] program syz.5.558 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.598766][ T8178] program syz.5.558 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.598897][ T8178] program syz.5.558 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.598993][ T8178] program syz.5.558 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.599172][ T8178] program syz.5.558 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.599270][ T8178] program syz.5.558 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.599381][ T8178] program syz.5.558 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.599473][ T8178] program syz.5.558 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.599562][ T8178] program syz.5.558 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.599652][ T8178] program syz.5.558 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.599795][ T8178] program syz.5.558 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.599900][ T8178] program syz.5.558 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.599992][ T8178] program syz.5.558 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.600084][ T8178] program syz.5.558 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.600195][ T8178] program syz.5.558 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.600289][ T8178] program syz.5.558 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.600379][ T8178] program syz.5.558 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.600467][ T8178] program syz.5.558 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.600580][ T8178] program syz.5.558 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.600674][ T8178] program syz.5.558 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.600766][ T8178] program syz.5.558 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.600859][ T8178] program syz.5.558 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.600974][ T8178] program syz.5.558 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.601065][ T8178] program syz.5.558 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.601154][ T8178] program syz.5.558 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.643790][ T5142] udevd[5142]: could not touch /run/udev/queue: No such file or directory [ 100.680592][ T42] audit: type=1400 audit(1792331120.786:784): avc: denied { read } for pid=5739 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 100.685341][ T42] audit: type=1400 audit(1792331120.786:785): avc: denied { open } for pid=5739 comm="syz-executor" path="/125/mnt/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 100.685372][ T42] audit: type=1804 audit(1792331120.786:786): pid=5739 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/125/mnt/swap-file" dev="sda1" ino=2025 res=1 errno=0 [ 100.685392][ T42] audit: type=1400 audit(1792331120.786:787): avc: denied { setattr } for pid=5739 comm="syz-executor" path="/125/mnt/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 100.997864][ T8175] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888037c12000 pfn:0x37c12 [ 100.997894][ T8175] memcg:ffff88802df7bd00 [ 100.997900][ T8175] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 100.997921][ T8175] raw: 00fff00000000001 0000000000000000 dead000000000122 0000000000000000 [ 100.997947][ T8175] raw: ffff888037c12000 0000000000000000 00000001ffffffff ffff88802df7bd00 [ 100.997956][ T8175] page dumped because: VM_BUG_ON_FOLIO(folio_order(folio) < mapping_min_folio_order(mapping)) [ 100.997967][ T8175] page_owner tracks the page as allocated [ 100.997973][ T8175] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c00(GFP_NOIO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 8175, tgid 8173 (syz.1.557), ts 100997838053 [ 100.998005][ T8175] post_alloc_hook+0xfd/0x120 [ 100.998025][ T8175] get_page_from_freelist+0x110d/0x35d0 [ 100.998044][ T8175] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 100.998062][ T8175] alloc_pages_mpol+0x201/0x550 [ 100.998087][ T8175] folio_alloc_noprof+0x22/0x250 [ 100.998102][ T8175] filemap_alloc_folio_noprof.part.0+0x3db/0x440 [ 100.998121][ T8175] filemap_alloc_folio_noprof+0x5e/0x80 [ 100.998158][ T8175] page_cache_ra_order+0x539/0xed0 [ 100.998179][ T8175] filemap_fault+0x1943/0x3130 [ 100.998194][ T8175] __do_fault+0x10b/0x440 [ 100.998211][ T8175] do_fault+0xb3f/0x1830 [ 100.998234][ T8175] __handle_mm_fault+0x150b/0x2f60 [ 100.998249][ T8175] handle_mm_fault+0x363/0xa20 [ 100.998262][ T8175] __get_user_pages+0x8ae/0x2c30 [ 100.998281][ T8175] populate_vma_page_range+0x267/0x3f0 [ 100.998303][ T8175] __mm_populate+0x107/0x3a0 [ 100.998323][ T8175] page last free pid 5739 tgid 5739 ts 100975338655 stack trace: [ 100.998334][ T8175] __free_frozen_pages+0x79f/0x10f0 [ 100.998350][ T8175] qlist_free_all+0x47/0xf0 [ 100.998370][ T8175] kasan_quarantine_reduce+0x1a0/0x1f0 [ 100.998391][ T8175] __kasan_slab_alloc+0x69/0x90 [ 100.998414][ T8175] kmem_cache_alloc_noprof+0x269/0x6a0 [ 100.998434][ T8175] jbd2__journal_start+0x194/0x6b0 [ 100.998456][ T8175] __ext4_journal_start_sb+0x314/0x610 [ 100.998474][ T8175] ext4_fileattr_set+0x7b1/0x17e0 [ 100.998493][ T8175] vfs_fileattr_set+0x783/0xd70 [ 100.998515][ T8175] ioctl_setflags+0x1af/0x1e0 [ 100.998528][ T8175] do_vfs_ioctl+0x705/0x13e0 [ 100.998545][ T8175] __x64_sys_ioctl+0x114/0x210 [ 100.998562][ T8175] do_syscall_64+0x123/0x790 [ 100.998583][ T8175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.998731][ T8175] ------------[ cut here ]------------ [ 100.998738][ T8175] kernel BUG at mm/filemap.c:858! [ 100.998756][ T8175] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 101.056388][ T8173] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x60 pfn:0x47a81 [ 101.056411][ T8173] memcg:ffff88802df7bd00 [ 101.056418][ T8173] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 101.056439][ T8173] raw: 00fff00000000001 0000000000000000 dead000000000122 0000000000000000 [ 101.056455][ T8173] raw: 0000000000000060 0000000000000000 00000001ffffffff ffff88802df7bd00 [ 101.056464][ T8173] page dumped because: VM_BUG_ON_FOLIO(folio_order(folio) < mapping_min_folio_order(mapping)) [ 101.056474][ T8173] page_owner tracks the page as allocated [ 101.056479][ T8173] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c00(GFP_NOIO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 8173, tgid 8173 (syz.1.557), ts 101056370810 [ 101.056500][ T8173] post_alloc_hook+0xfd/0x120 [ 101.056520][ T8173] get_page_from_freelist+0x110d/0x35d0 [ 101.056536][ T8173] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 101.056554][ T8173] alloc_pages_mpol+0x201/0x550 [ 101.056573][ T8173] folio_alloc_noprof+0x22/0x250 [ 101.056586][ T8173] filemap_alloc_folio_noprof.part.0+0x3db/0x440 [ 101.056606][ T8173] filemap_alloc_folio_noprof+0x5e/0x80 [ 101.056623][ T8173] page_cache_ra_order+0x539/0xed0 [ 101.056645][ T8173] filemap_fault+0x1943/0x3130 [ 101.056657][ T8173] __do_fault+0x10b/0x440 [ 101.056671][ T8173] do_fault+0x585/0x1830 [ 101.056690][ T8173] __handle_mm_fault+0x150b/0x2f60 [ 101.056704][ T8173] handle_mm_fault+0x363/0xa20 [ 101.056717][ T8173] do_user_addr_fault+0x59c/0x12f0 [ 101.056737][ T8173] exc_page_fault+0x6f/0xd0 [ 101.056753][ T8173] asm_exc_page_fault+0x26/0x30 [ 101.056767][ T8173] page last free pid 7746 tgid 7746 ts 101010208289 stack trace: [ 101.056778][ T8173] free_pages_prepare+0x586/0xe00 [ 101.056800][ T8173] __free_contig_range_common+0x14f/0x250 [ 101.056815][ T8173] free_pages_bulk+0x12a/0x200 [ 101.056831][ T8173] vm_area_free_pages+0xb2/0x2a0 [ 101.056849][ T8173] vfree+0xf7/0x6d0 [ 101.056868][ T8173] do_ip6t_get_ctl+0xa0b/0xc30 [ 101.056897][ T8173] nf_getsockopt+0x7c/0xe0 [ 101.056915][ T8173] ipv6_getsockopt+0x207/0x2a0 [ 101.056940][ T8173] tcp_getsockopt+0xa1/0x110 [ 101.056955][ T8173] do_sock_getsockopt+0x50a/0x6e0 [ 101.056969][ T8173] __sys_getsockopt+0x148/0x260 [ 101.056983][ T8173] __x64_sys_getsockopt+0xbd/0x160 [ 101.056997][ T8173] do_syscall_64+0x123/0x790 [ 101.057019][ T8173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.057151][ T8173] ------------[ cut here ]------------ [ 101.057158][ T8173] kernel BUG at mm/filemap.c:858! [ 101.150545][ T8175] CPU: 2 UID: 0 PID: 8175 Comm: syz.1.557 Tainted: G L syzkaller #0 PREEMPT(full) [ 101.153792][ T8175] Tainted: [L]=SOFTLOCKUP [ 101.155099][ T8175] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 101.158057][ T8175] RIP: 0010:__filemap_add_folio+0x1054/0x1330 [ 101.159939][ T8175] Code: 61 be ff 48 c7 c6 40 e6 fe 8b 4c 89 ef e8 94 fc 12 00 90 0f 0b e8 bc 61 be ff 48 c7 c6 a0 e6 fe 8b 4c 89 ef e8 7d fc 12 00 90 <0f> 0b e8 a5 61 be ff 48 c7 c6 20 e7 fe 8b 4c 89 ef e8 66 fc 12 00 [ 101.165658][ T8175] RSP: 0018:ffffc90003387398 EFLAGS: 00010293 [ 101.167445][ T8175] RAX: 0000000000000000 RBX: 0000000000112c00 RCX: 0000000000000000 [ 101.169739][ T8175] RDX: ffff88802c040000 RSI: ffffffff8260f2c8 RDI: ffff88802c0404c4 [ 101.172131][ T8175] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 101.174581][ T8175] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000002 [ 101.177163][ T8175] R13: ffffea0000df0480 R14: 000000000002cb24 R15: 0000000000000000 [ 101.179620][ T8175] FS: 00007f0c6ffd56c0(0000) GS:ffff8880d4b46000(0000) knlGS:0000000000000000 [ 101.182332][ T8175] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 101.184365][ T8175] CR2: 00007f16c83ebc40 CR3: 00000000156bd000 CR4: 0000000000352ef0 [ 101.186850][ T8175] Call Trace: [ 101.187879][ T8175] [ 101.188808][ T8175] ? lock_acquire+0x1d1/0x380 [ 101.190254][ T8175] ? __pfx___filemap_add_folio+0x10/0x10 [ 101.191975][ T8175] filemap_add_folio+0x1d3/0x640 [ 101.193500][ T8175] ? __pfx_filemap_add_folio+0x10/0x10 [ 101.195139][ T8175] ? __pfx___css_rstat_updated+0x10/0x10 [ 101.196816][ T8175] page_cache_ra_order+0x602/0xed0 [ 101.198421][ T8175] filemap_fault+0x1943/0x3130 [ 101.199859][ T8175] ? __pfx_filemap_fault+0x10/0x10 [ 101.201417][ T8175] ? __mod_memcg_lruvec_state+0x18c/0x5b0 [ 101.203173][ T8175] ? find_held_lock+0x2b/0x80 [ 101.204637][ T8175] ? __pfx_filemap_map_pages+0x10/0x10 [ 101.206312][ T8175] __do_fault+0x10b/0x440 [ 101.207652][ T8175] do_fault+0xb3f/0x1830 [ 101.208945][ T8175] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 101.210809][ T8175] ? __pfx_do_fault+0x10/0x10 [ 101.212216][ T8175] ? pgd_none+0x9f/0xe0 [ 101.213502][ T8175] ? __pfx_pgd_none+0x10/0x10 [ 101.214964][ T8175] ? find_held_lock+0x2b/0x80 [ 101.216410][ T8175] __handle_mm_fault+0x150b/0x2f60 [ 101.218003][ T8175] ? __pfx___handle_mm_fault+0x10/0x10 [ 101.219674][ T8175] ? __pfx_mt_find+0x10/0x10 [ 101.221096][ T8175] handle_mm_fault+0x363/0xa20 [ 101.222609][ T8175] __get_user_pages+0x8ae/0x2c30 [ 101.224132][ T8175] ? __pfx_mt_find+0x10/0x10 [ 101.225531][ T8175] ? __pfx___get_user_pages+0x10/0x10 [ 101.227177][ T8175] populate_vma_page_range+0x267/0x3f0 [ 101.228912][ T8175] ? __pfx_populate_vma_page_range+0x10/0x10 [ 101.230735][ T8175] ? __pfx_find_vma_intersection+0x10/0x10 [ 101.232563][ T8175] __mm_populate+0x107/0x3a0 [ 101.234001][ T8175] ? __pfx___mm_populate+0x10/0x10 [ 101.235588][ T8175] ? up_write+0x2dc/0x5b0 [ 101.236913][ T8175] vm_mmap_pgoff+0x441/0x470 [ 101.238344][ T8175] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 101.239966][ T8175] ? __fget_files+0x215/0x3d0 [ 101.241475][ T8175] ? __fget_files+0x21f/0x3d0 [ 101.242987][ T8175] ksys_mmap_pgoff+0x3cb/0x610 [ 101.244497][ T8175] ? __x64_sys_futex+0x358/0x4d0 [ 101.246058][ T8175] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 101.247659][ T8175] ? xfd_validate_state+0x129/0x190 [ 101.249267][ T8175] __x64_sys_mmap+0x125/0x190 [ 101.250750][ T8175] do_syscall_64+0x123/0x790 [ 101.252143][ T8175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.253974][ T8175] RIP: 0033:0x7f0c71d9e559 [ 101.255330][ T8175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.261050][ T8175] RSP: 002b:00007f0c6ffd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 101.263498][ T8175] RAX: ffffffffffffffda RBX: 00007f0c72026090 RCX: 00007f0c71d9e559 [ 101.265871][ T8175] RDX: 0000000000000007 RSI: 0000000000b36000 RDI: 0000200000000000 [ 101.268221][ T8175] RBP: 00007f0c71e35ab8 R08: 0000000000000008 R09: 000000002cb25000 [ 101.270667][ T8175] R10: 0000000000028011 R11: 0000000000000246 R12: 0000000000000000 [ 101.273024][ T8175] R13: 00007f0c72026128 R14: 00007f0c72026090 R15: 00007ffccc5b85b8 [ 101.275390][ T8175] [ 101.276356][ T8175] Modules linked in: [ 101.277642][ T8173] Oops: invalid opcode: 0000 [#2] SMP KASAN NOPTI [ 101.278367][ T8175] ---[ end trace 0000000000000000 ]--- [ 101.281526][ T8173] CPU: 3 UID: 0 PID: 8173 Comm: syz.1.557 Tainted: G D L syzkaller #0 PREEMPT(full) [ 101.284814][ T8173] Tainted: [D]=DIE, [L]=SOFTLOCKUP [ 101.286550][ T8173] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 101.290229][ T8173] RIP: 0010:__filemap_add_folio+0x1054/0x1330 [ 101.292494][ T8173] Code: 61 be ff 48 c7 c6 40 e6 fe 8b 4c 89 ef e8 94 fc 12 00 90 0f 0b e8 bc 61 be ff 48 c7 c6 a0 e6 fe 8b 4c 89 ef e8 7d fc 12 00 90 <0f> 0b e8 a5 61 be ff 48 c7 c6 20 e7 fe 8b 4c 89 ef e8 66 fc 12 00 [ 101.299546][ T8173] RSP: 0018:ffffc900039b77d0 EFLAGS: 00010293 [ 101.301809][ T8173] RAX: 0000000000000000 RBX: 0000000000112c00 RCX: 0000000000000000 [ 101.304578][ T8173] RDX: ffff88802d0a0000 RSI: ffffffff8260f2c8 RDI: ffff88802d0a04c4 [ 101.307054][ T8173] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 101.309447][ T8173] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000002 [ 101.311871][ T8173] R13: ffffea00011ea040 R14: 000000000002cb24 R15: 0000000000000000 [ 101.314722][ T8173] FS: 0000555560728500(0000) GS:ffff8880d4c46000(0000) knlGS:0000000000000000 [ 101.317635][ T8173] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 101.319822][ T8173] CR2: 00007f16c85f1158 CR3: 00000000156bd000 CR4: 0000000000352ef0 [ 101.322488][ T8173] Call Trace: [ 101.323588][ T8173] [ 101.324521][ T8173] ? memcg1_check_events+0x59/0x590 [ 101.326335][ T8173] ? __pfx___filemap_add_folio+0x10/0x10 [ 101.328399][ T8173] filemap_add_folio+0x1d3/0x640 [ 101.330231][ T8173] ? __pfx_filemap_add_folio+0x10/0x10 [ 101.332215][ T8173] ? __pfx___css_rstat_updated+0x10/0x10 [ 101.334090][ T8173] page_cache_ra_order+0x602/0xed0 [ 101.335903][ T8173] filemap_fault+0x1943/0x3130 [ 101.337935][ T8173] ? __pfx_filemap_fault+0x10/0x10 [ 101.339570][ T8173] __do_fault+0x10b/0x440 [ 101.341161][ T8173] do_fault+0x585/0x1830 [ 101.342757][ T8173] ? __pfx_filemap_map_pages+0x10/0x10 [ 101.344566][ T8173] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 101.346881][ T8173] ? __pfx_do_fault+0x10/0x10 [ 101.348618][ T8173] ? pgd_none+0x9f/0xe0 [ 101.350083][ T8173] ? __pfx_pgd_none+0x10/0x10 [ 101.351768][ T8173] ? lock_acquire+0x1d1/0x380 [ 101.353542][ T8173] __handle_mm_fault+0x150b/0x2f60 [ 101.355444][ T8173] ? lock_vma_under_rcu+0x11d/0x590 [ 101.357394][ T8173] ? __pfx___handle_mm_fault+0x10/0x10 [ 101.359416][ T8173] ? lock_vma_under_rcu+0x17c/0x590 [ 101.361352][ T8173] handle_mm_fault+0x363/0xa20 [ 101.362998][ T8173] do_user_addr_fault+0x59c/0x12f0 [ 101.364847][ T8173] exc_page_fault+0x6f/0xd0 [ 101.366423][ T8173] asm_exc_page_fault+0x26/0x30 [ 101.368200][ T8173] RIP: 0033:0x7f0c71c67b02 [ 101.369835][ T8173] Code: 30 48 8b 14 24 48 85 d2 74 17 8b 44 24 10 0f c8 89 c0 48 89 44 24 10 48 83 fa 01 0f 85 aa 02 00 00 48 8b 44 24 18 8b 74 24 10 <89> 30 e9 1e fe ff ff 48 8b 44 24 18 8b 10 48 8b 04 24 48 85 c0 0f [ 101.376678][ T8173] RSP: 002b:00007ffccc5b86e0 EFLAGS: 00010246 [ 101.378759][ T8173] RAX: 0000200000000000 RBX: 0000000000000004 RCX: 0000000000000000 [ 101.381199][ T8173] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 00005555607283d8 [ 101.383717][ T8173] RBP: 00007ffccc5b8800 R08: 0000000000000000 R09: 0000000000000000 [ 101.386179][ T8173] R10: 0000000000000000 R11: 0000000000000000 R12: 00007ffccc5b8840 [ 101.389004][ T8173] R13: 00007f0c7202618c R14: 00000000000187e4 R15: 00007ffccc5b8820 [ 101.391666][ T8173] [ 101.392987][ T8173] Modules linked in: [ 101.395186][ T8173] ---[ end trace 0000000000000000 ]--- Oct 18 13:45:21 syzkaller kern.alert kernel: [ 100.997967][ T8175] page_owner tracks the page as allocated Oct 18 13:45:21 syzkaller kern.alert kernel: [ 100.997973][ T8175] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c00(GFP_NOIO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 8175, tgid 8173 (syz.1.557), ts 100997838053 Oct 18 13:45:21 syzkaller kern.alert kernel: [ 100.998323][ T8175] page last free pid 5739 tgid 5739 ts 100975338655 stack trace: Oct 18 13:45:21 syzkaller kern.alert kernel: [ 101.056474][ T8173] page_owner tracks the page as allocated Oct 18 13:45:21 syzkaller kern.alert kernel: [ 101.056479][ T8173] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c00(GFP_NOIO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 8173, tgid 8173 (syz.1.557), ts 101056370810 Oct 18 13:45:21 syzkaller kern.alert kernel: [ 101.056767][ T8173] page last free pid 7746 tgid 7746 ts 101010208289 stack trace: [ 101.437638][ T8175] RIP: 0010:__filemap_add_folio+0x1054/0x1330 [ 101.437666][ T8175] Code: 61 be ff 48 c7 c6 40 e6 fe 8b 4c 89 ef e8 94 fc 12 00 90 0f 0b e8 bc 61 be ff 48 c7 c6 a0 e6 fe 8b 4c 89 ef e8 7d fc 12 00 90 <0f> 0b e8 a5 61 be ff 48 c7 c6 20 e7 fe 8b 4c 89 ef e8 66 fc 12 00 [ 101.437677][ T8175] RSP: 0018:ffffc90003387398 EFLAGS: 00010293 [ 101.437686][ T8175] RAX: 0000000000000000 RBX: 0000000000112c00 RCX: 0000000000000000 [ 101.437693][ T8175] RDX: ffff88802c040000 RSI: ffffffff8260f2c8 RDI: ffff88802c0404c4 [ 101.437700][ T8175] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 101.437706][ T8175] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000002 [ 101.437712][ T8175] R13: ffffea0000df0480 R14: 000000000002cb24 R15: 0000000000000000 [ 101.437719][ T8175] FS: 00007f0c6ffd56c0(0000) GS:ffff8880d4b46000(0000) knlGS:0000000000000000 [ 101.437746][ T8175] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 101.437755][ T8175] CR2: 00007f2b0d91eaa8 CR3: 00000000156bd000 CR4: 0000000000352ef0 [ 101.437763][ T8175] Kernel panic - not syncing: Fatal exception [ 101.471714][ T8175] Kernel Offset: disabled [ 101.473021][ T8175] Rebooting in 86400 seconds.. VM DIAGNOSIS: 13:45:20 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000093 RCX=ffffffff84ea5fca RDX=0000000000000000 RSI=0000000000000000 RDI=ffff888026cc2580 RBP=dffffc0000000000 RSP=ffffc9000173fa50 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=ffffc9000173fb80 R13=ffff8880247f2630 R14=0000000000000093 R15=0000000000000000 RIP=ffffffff820c50a0 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055556022f500 ffffffff 00c00000 GS =0000 ffff8880d4946000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b31023ffc CR3=000000002c5d0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000020081 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc1fbe78c0 0000003000000018 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 31534e7433612e72 656c6c616b7a7973 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc1fbe9c26 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc1fbe9c26 00007ffc1fbe9c2c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff606a360e2 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff606a3611c ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff606a36280 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff606a3610e ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 2074657365720064 656c696166202973 2528746174736c00 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 0551405640570041 40494c4443050c56 000d514451564900 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 646e756f46206950 2079727265627073 61522e6f6964732d 353534333463616d ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000006 RCX=0000000000000001 RDX=ffff88801fef2580 RSI=ffffffff81b6de9e RDI=ffff88801fef2580 RBP=0000000000000001 RSP=ffffc90000177df8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000006 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200002efc4 R15=0000000000000000 RIP=ffffffff81b6de9f RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d4a46000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c39ad8e CR3=000000000fb96000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010001 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffccc5b8aa6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffccc5b8aa6 00007ffccc5b8aac ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0c71e360e2 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0c71e3611c ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0c71e36280 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0c71e3610e ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0c71ff65f8 00007f0c71ff65c8 00007f0c71ff6600 00007f0c71ff65e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 00000000000000a0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85b2d015 RDI=ffffffff9cc7e6a0 RBP=ffffffff9cc7e660 RSP=ffffc90003386bb8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=6572203a65676170 R12=0000000000000000 R13=0000000000000020 R14=0000000000000002 R15=ffffc90003386ed0 RIP=ffffffff85b2d03f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f0c6ffd56c0 ffffffff 00c00000 GS =0000 ffff8880d4b46000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f16c83ebc40 CR3=00000000156bd000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000003 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7379735f65676173 752e746363617570 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe9bb6daa6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe9bb6daa6 00007ffe9bb6daac ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f03b4c360e2 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f03b4c3611c ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f03b4c36280 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f03b4c3610e ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000170 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000170 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000003 RCX=0000000000000001 RDX=ffff88802d0a0000 RSI=ffffffff81b9204c RDI=ffff88802d0a0000 RBP=ffffffff959090e4 RSP=ffffc900039b74e8 R8 =0000000000000000 R9 =0000000000000003 R10=0000000000000003 R11=0000000000000000 R12=0000000000000003 R13=0000000000000003 R14=ffff88806a53cf00 R15=0000000000000004 RIP=ffffffff81b9204d RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555560728500 ffffffff 00c00000 GS =0000 ffff8880d4c46000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f16c85f1158 CR3=00000000156bd000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555923538d0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd3435f6e80 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd3435f6e80 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055559234ead8 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fffffffffff90801 800300676e697279 656b01ffffffffff ffffffef0800033c ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 01800400040a0056 0002000188034401 8080808082000186 037a797301ffffff ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00080007000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0011b0030fffffff ffffff0411a00300 0800119803000800 1190030008001188 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0300080011d80300 080011d0030fffff ffffffff0411c003 00080011b8030008 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0102a81000108004 0a1000060102e000 080012a003000800 1298030008001290 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 030fffffffffffff 041280030fffffff ffffff0411f00300 080011e803000800 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 11e00300080011d8 0300080011d0030f ffffffffffff0411 c00300080011b803 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00080011b0030fff ffffffffff0411a0 0300080011980300 0800119003000800 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000