last executing test programs: 1.83275904s ago: executing program 3 (id=3133): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c"], 0x3c}, 0x1, 0x0, 0x0, 0x24008810}, 0x8010) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) 1.754237628s ago: executing program 3 (id=3134): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x178) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800040, 0x0) chdir(&(0x7f0000000240)='./file0\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) mount$nfs4(&(0x7f0000000000)='&\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000140), 0x1800008, &(0x7f0000000340)={[{'#! '}, {'jffs2\x00'}, {'memory.events.local\x00'}, {'#! '}, {'^:{'}, {'#! '}], [{@uid_eq={'uid', 0x3d, r1}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}]}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x1f) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1a7) write(r0, &(0x7f0000000080)="4afb", 0x2) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000280)='\x00', &(0x7f0000000400)='./file0\x00', 0xffffffffffffffff) 1.718222557s ago: executing program 3 (id=3136): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000100)="0600000003000100", 0x8) 1.616417371s ago: executing program 3 (id=3138): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x183) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000080)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) lseek(r1, 0x5, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x30) sendfile(r3, r2, 0x0, 0x3) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r2, r0}, 0xc) set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000000, 0xe0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x36}}, 0x6}, 0x1c) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x207, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) r5 = fcntl$dupfd(r4, 0x0, r4) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[], 0x4a}, 0x1, 0x0, 0x0, 0x40000}, 0x1) sendmsg$inet6(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000180)="b1", 0x1}], 0x1}, 0x4000) setsockopt$inet6_tcp_int(r5, 0x6, 0xc, &(0x7f0000000140)=0x2, 0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000200), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r6, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) 1.591562745s ago: executing program 3 (id=3140): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x2, 0x3, 0x4}, 0x30, 0x0) landlock_restrict_self(r1, 0x12) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(r0, &(0x7f0000000400)=[{&(0x7f0000000300)="807efaa0498933df4b28869b891345f0c9bd6505cf7b052797361992955317b38cb689384974e000216774622dc68d00e0163d5df634d9a0979a9f9b1c3d8ad5725bd02293a69d81441ddfaceb91148f84", 0x51}], 0x1, 0x8, 0x20000006) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) connect$unix(r4, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x14) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40800) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a3100000000080005400000000073797a310000000008000a40fffffffc0800034000000106140000001100010000000000000000000100000a"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="1400000010000100003cbefeee9702000000000000000500000a480000000c0a010100000000000000090000369d6b1e8431770a00000000000073797a31000000000900010073807a31000000001c000380180000800c00018006000100000000000800034000000001140000000a000000000000000000000000000000a5495b5a1a09b882063eb3cc71c68e5fec1f702e7a0e69c2f17e8d063dd56f6624bf7792a55eb3ffdb31826e8a6bebf769e08af9f999533bc56b5cbb45a5cd6e4c69b7ca5e8a6b0c9abf3b7f70c9bd23aba3ecf6c141e008726c1e3c13282258eccf0944bb2962434bb05c340caa44357afb81607279c74956a7e9d45b41a17071f889c332798b7473d9f4b898d7f5d4835f4bf5d98745fd6b97d87fabd1db6c1ce799ab29431ad66ff8c236f5d96843037698059554633d83a64887ccd5ff2a5c0e3ed6b0eeb4c4f58afdee67f097a077733c712cb0e060ed704f93ddc96ba399af83223747a916ab6d9cdb45b9ae67cce021"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x80000001, 0x5, 0x8, 0x1, 0xb, 0x6, 0xc0f}, 0x1c) sendmmsg$unix(r3, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000240)='\x00', 0x1}], 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYBLOB="9eeadf38b5"], 0x18, 0x8008805}}], 0x1, 0x20040804) accept4$unix(r3, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x52, 0x6, 0x40, '\x00', 0x10000}) 1.435576145s ago: executing program 1 (id=3145): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1303}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @rand_addr=0x64010101}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x40}]}}}]}, 0x40}}, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x50) r2 = syz_io_uring_complete(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x15, 0x1, 0x9, 0x7, 0x40044, r1, 0xf0f, '\x00', 0x0, r2, 0x3, 0x0, 0x1}, 0x50) 1.128935847s ago: executing program 1 (id=3150): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) memfd_create(&(0x7f0000000440)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR\xab\xddt\x96s8\xf4\x1c\bi\xe4^\xd5\xfd+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\x8c\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x9a\xc7sn\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b^\xb9\x00\x00\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc5\x1d\xe7jDf\x87@\x8fg\x15RJw\x82\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4kej\f\x8f\x9b\\\x16\xb3)\xf2\x97;\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\x01\x01\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7g\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05}0\xba\xa9\x13\xc4\xd3\xa9\xb6~\x12\xcf.9\xc0\x1e\xbe\x1a:H\xads\x98\xc1m{1YM{d\xec\xff\xff\x8f\xe7j\x9c\xf9+\xc30\x13}\x9e\xff\x8d\xca\xc8)\xc9h(a\xf33\xe8\x90\x03#\xcb\xfb\x14\xe9\x06\xaaQ\x80\xdax=\xf5t-\x88\x9f\xf7\xeavp\aj\xb3\xba\xf4tP>\xf6o\xf2\xb4\xfb\xa9\xe2\x8d\xdf\t\xe9\xcb\xc2wz\x96\xf3)M\xbf\xa8\xba>\xbf\xfe\x16U,Q\x0e\xef\x81\xd55V\n\x8f\xff\xe8d\xc7w;\x92\x19\v\xc0$u\a\xfa\xa7`\xc1@:W<\x96` \xb9\xa1}\x18\xdf\xfbmY\xd2\xb7p<]\\\xec\x84BC\xde\xf3\xf8\x84\xf3f\x99[\xcbD\x93\xbcFo\xd0\xd7\x86\xf7\x98\x95i7\xef\xbe\xf7]z\x17\xd5\xa2\x17\xb5\xa9\x8enU\x0f\b\xa43\x0f\xd1\xfdb\x1eu\xc4\xe9K\xd6\xdf=\xbbL\x8e\xa4o~_\xd7u\xe7+\x86\xf0\x97\xcd\xaa\xbc\x82\xa5\xe3\xe9\x064]5\xa5@\x1bq\xb9\xee\x81.\x1c*I@\xcf\x8b\xa5\xb5\x97|\x8e=\xdc\x18n\x0fA5\x02\xb9\xf4\xb6\xe27_y\xceU\xb0MDS\xf05\a\xdd\x88lP\x0f\xedG\xff\b\xb4@F#T\x81\x11\xb0a\xfcVkr\xd1\x1b\x1b\a\xe5%/\xc1\xca[\x82\x01[\x11\xc0\xc4\xd7+\xe6<\xcbk\x97\xd1^\xe6\xd3\xbc?H\x03\xb0\xd1\x0f\x13', 0x4) userfaultfd(0x80001) socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x2d, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)={0x1}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x1, 0x400, 0x0, 0x0, 0xfc, 0x0, 0xc, 0x0, 0x0, 0x1, 0x4}, {0x8, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x9, 0x0, 0x0, 0x2}, {0xeda7, 0x4, 0x5, 0x10, 0x0, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x9020}], 0x4}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x2004cb, 0x3, 0x100000000000000, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2ab, 0x2000000000003ff, 0x2, 0xfffffffffffffffd], 0x0, 0x200306}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 951.258539ms ago: executing program 1 (id=3151): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)={0x24, 0x0, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_NAT_SRC={0x10, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, @CTA_NAT_PROTO={0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x8844}, 0x24000098) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a50000000060a010400000000000000000a0004050900010073797a31000000002400048020000180080001006c6f6700140002800600014000020000080003400000000809000200"], 0x78}, 0x1, 0x0, 0x0, 0x8894}, 0x24000000) 899.735243ms ago: executing program 1 (id=3152): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="040e04011a0c00"], 0x7) 898.05418ms ago: executing program 1 (id=3153): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) sendmmsg$inet(r0, &(0x7f000000a980)=[{{&(0x7f0000000140)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000009632079f53708824ffd6580e001c9400f801c8"], 0x18}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000400)="b2a62833d61bde0dc35399336dd91a4649e54af4150ed5ee151aefc90603cc33e33a142ba76493a2922e1cc84d77e4499002123e8d7ffecadf7b5c93214ba91a1560ca24598af4ec5d43eaaf794b07582b1b78c2fdc90c75eb0dbc8bfc69f96089a2fbc0f86d0762bfb65375e3977fe39fa6ea43cf8edcd6ed740a4ce1f2ce7657146314991c8afb85cbaad9d94d5c6d024b54ec03baa27ea19b7495a7e30e684eef81b726e32f23b30daf27af9f98ba", 0xb0}, {&(0x7f0000002880)="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", 0x141}], 0x2}}], 0x2, 0x44008004) write$binfmt_misc(r0, &(0x7f0000000300), 0xfdef) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_usbip_server_init(0x5) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000680)=@newqdisc={0x38, 0x24, 0xd0f, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r5, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x54}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="26430f01f80f3235000400004f440f20c0350800000066640f01b80b00000036646665f36526f20f22a5436801c566ba4000edc4a39979250b00000008b9800000c00f3235010000000f30f245ab48b800000000000000800f23c00f21f83500000b000f23f8c481e57dcd", 0x6b}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket(0x10, 0x1, 0x0) write(r7, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x4400, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x1, 0xffff000}, 0x28) r9 = socket(0x15, 0x5, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x4000000000002fe, 0x61, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000006c0)=ANY=[@ANYRES64=r9], 0x20) ppoll(&(0x7f0000000540)=[{}], 0x5b, 0x0, 0x0, 0x0) connect$netlink(r8, &(0x7f0000000080)=@unspec, 0xc) 645.359623ms ago: executing program 2 (id=3154): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="00b298", 0x3}], 0x1, 0x0, 0x0, 0x3f}, 0x4) 598.149366ms ago: executing program 2 (id=3155): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00/\x00\t\x00\''], 0x24}}, 0x0) 596.352729ms ago: executing program 2 (id=3156): r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000b00)={0xffffffffffffffff}) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000cc0)={0x14, 0x0, 0x4, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000011}, 0x44000010) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000004380)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004340)={&(0x7f0000001040)={0x32fc, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x10bc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_MASK={0x40, 0x5, "7bb28f6c2c157119fbcf2591e0d9d0c47a60e01b15d348f757d92a40fdfc4cf4d12ab199a66490797bdf3f1bbe6522f7eb03793eb5001b2ac226ad08"}, @ETHTOOL_A_BITSET_BITS={0x74, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '0000:00:10.0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xbe}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan0\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'secondname\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x1a, 0x2, 'trusted.overlay.nlink\x00'}]}]}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x100c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x94, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x8e, 0x5, "6caa47a767925db7931e2ae183a0cf848acfabab8d876ba5a586878c7404002d6da32d32b80cec79536dd7d2063fabe471c1aa229e3dfeb2ab36fe4a6e91747246b2ca525adeadbbdf6d8b2d09f8e429cace7d4360db8594564ae17abb7f976819195729aafd63e230c1ffd1dd941f1626839ecde393833682ebd9a9e024ca57e477703fc96db36cdc17"}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x10ec, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_MASK={0x15, 0x5, "4c9d96dfc2e9d955e02d794b5992795084"}, @ETHTOOL_A_BITSET_MASK={0xb5, 0x5, "2d3569dfbadea163fd351c9d4c63d06855a40a1d177346da05f9af8c241e356f35284f72b8b6d12ae7a7523c5cf85c1bb412c40f3dae241fca7ce823937fec792ed081c0e185628c2797aee40ff1dd058c4dfc76803bf8f857108bb78bf7f017131f915304b7f9155cac654c911037bd880ae12091786328b49f47a860bdedaa4ad1bebd190922a595677ca0a4324e360f48dcfba40310fbbef7fea3a8e1c80c936a7b4ebc6e25e6906eab5f6fe13d60b2"}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}]}]}, 0x32fc}, 0x1, 0x0, 0x0, 0x1}, 0x10) 569.886017ms ago: executing program 2 (id=3158): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000000a000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000480)="0fc347e50fd9f70f0ff50c67670f79d8f30f09ba4000b09bee660f38803466b82d0000000f23d80f21f86635800000600f23f866b9520800000f3266b98d03000066b80500000066ba000000000f30", 0x4f}], 0x1, 0x61, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 442.648202ms ago: executing program 0 (id=3161): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(0x0, 0x7) 381.167881ms ago: executing program 3 (id=3162): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = gettid() timer_create(0xb, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x22581) ioctl$CEC_RECEIVE(r2, 0xc0386106, &(0x7f0000000000)={0x200000000000004, 0xe, 0x80005, 0xfffffffe, 0x8, 0x16, "260000000000000754439400", 0xc, 0x0, 0x5, 0x5, 0x0, 0x0, 0x1d}) r3 = dup(r0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000100)=""/62, &(0x7f0000000140)=0x3e) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000c85000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00008b7000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000a98000/0x1000)=nil, &(0x7f000074b000/0x3000)=nil, &(0x7f0000080000/0x4000)=nil, &(0x7f0000574000/0x1000)=nil, &(0x7f0000e83000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000a7e000/0x4000)=nil, 0x0}, 0x68) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r3, 0x40106410, &(0x7f00000001c0)={0x3, &(0x7f0000000180)="f7b71a"}) io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0xbda2, 0x1c080, 0x1, 0x88}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r3, 0x5000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) syz_emit_ethernet(0x3b3, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x37d, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000050000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "f5000000000000000000000200000000000000000000000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) mount(0x0, &(0x7f0000000440)='./tracefs\x00', &(0x7f0000000480)='tracefs\x00', 0x0, 0x0) write$binfmt_aout(r3, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 380.881569ms ago: executing program 0 (id=3163): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000780)=@filter={'filter\x00', 0x4, 0x4, 0x13d8, 0xffffffff, 0x1218, 0x1218, 0x1218, 0xfeffffff, 0xffffffff, 0x1308, 0x1308, 0x1308, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x1100, 0x1128, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x1, './cgroup.cpu/syz0\x00', 0x1fc, {0x8}}}, @common=@eui64={{0x28}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@empty, 'pim6reg0\x00', {0xf18}}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00', [0xff, 0x0, 0xffffffff], [0x0, 0x0, 0xff000000, 0xff], 'team0\x00', '\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, 'veth1_to_bond\x00', {0xffffffffffff3ebb}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x145b) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)={0x40, r5, 0x1, 0x1070bd0c, 0x8, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r7 = socket(0x10, 0x803, 0x0) r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x20002, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r8, 0xc0046d00, &(0x7f0000000180)=0x7) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) keyctl$update(0x2, 0x0, 0x0, 0x0) getsockname$packet(r7, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="5400000010001ffffdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000804003002c0012800b00010067726574617000001c00028008000700e000000108000100", @ANYRES32=r9, @ANYBLOB="050008000300000008000a00", @ANYRES32=r9], 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x804) socket(0x3, 0xa, 0xd48e) 380.809809ms ago: executing program 2 (id=3164): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000002f00090027bd7000fbdb"], 0x24}}, 0x0) 354.568896ms ago: executing program 2 (id=3165): socket$kcm(0x10, 0xc, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001800050000000000000000002d00000000000001010100000500010008000000080004"], 0x2c}}, 0x0) 241.739567ms ago: executing program 0 (id=3166): r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000b00)={0xffffffffffffffff}) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000cc0)={0x14, 0x0, 0x4, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000011}, 0x44000010) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, 0x0, 0x10) 225.988135ms ago: executing program 1 (id=3167): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="58000000020603000000000000000000070000000c00078008000640000000000500010006000000050205000200000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c697000bfa73a33a1a54080cb7c9719db0f2a7fc83f239177cf92f3567f8d452e9ffbf21423ebd46d7f909a10169cc64a4dcbe1d42f9d2cec2f5fb9535265df0b0180ca7cdd5e34226662b32798fccc23f474843effd6631a4abd7d2437cf4285371b01a1"], 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004090) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x0, 0x0, 0x38, 0x0, "56dbc1e8417fffc3afdcf40c8e13f3151851d4ac3870c5651ff29b7c46af34ae1f337223b9404b26f5de4e01d16c172a5291fff83e4d5a0f58905486fe5e3a89d3a901cddf60835a498bf31954b4f7e2"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000480)={@in6={{0xa, 0xfffc, 0x0, @remote}}, 0x0, 0x0, 0x9, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000c80)={"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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r6 = dup(r5) ioctl$FS_IOC_SETFLAGS(r6, 0x40081271, &(0x7f0000000040)=0x4000) ioctl$HIDIOCAPPLICATION(r6, 0x4802, 0x5) socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x28011, r6, 0x2cb25000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x900, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0xfffffffffffffffb) r8 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r8, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e23, 0x39, @local, 0xf66e}}, 0x24) sendmsg$inet(r8, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) recvfrom$rxrpc(r8, 0x0, 0x0, 0xe8ce25b3ffff0000, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) 223.508237ms ago: executing program 0 (id=3168): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r0, r2, &(0x7f0000016000/0x18000)=nil, 0x0, 0x0, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 68.294493ms ago: executing program 0 (id=3169): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000040a010800000000000000000a0000070900010073"], 0x3c}, 0x1, 0x0, 0x0, 0x4000014}, 0x4000020) sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_DELOBJ={0x28, 0x14, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x18, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x7c, 0x14, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x58, 0x14, 0xa, 0xe01, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x15c}, 0x1, 0x0, 0x0, 0x4048080}, 0x8010) 0s ago: executing program 0 (id=3170): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) memfd_create(&(0x7f0000000440)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR\xab\xddt\x96s8\xf4\x1c\bi\xe4^\xd5\xfd+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\x8c\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x9a\xc7sn\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b^\xb9\x00\x00\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc5\x1d\xe7jDf\x87@\x8fg\x15RJw\x82\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4kej\f\x8f\x9b\\\x16\xb3)\xf2\x97;\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\x01\x01\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7g\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05}0\xba\xa9\x13\xc4\xd3\xa9\xb6~\x12\xcf.9\xc0\x1e\xbe\x1a:H\xads\x98\xc1m{1YM{d\xec\xff\xff\x8f\xe7j\x9c\xf9+\xc30\x13}\x9e\xff\x8d\xca\xc8)\xc9h(a\xf33\xe8\x90\x03#\xcb\xfb\x14\xe9\x06\xaaQ\x80\xdax=\xf5t-\x88\x9f\xf7\xeavp\aj\xb3\xba\xf4tP>\xf6o\xf2\xb4\xfb\xa9\xe2\x8d\xdf\t\xe9\xcb\xc2wz\x96\xf3)M\xbf\xa8\xba>\xbf\xfe\x16U,Q\x0e\xef\x81\xd55V\n\x8f\xff\xe8d\xc7w;\x92\x19\v\xc0$u\a\xfa\xa7`\xc1@:W<\x96` \xb9\xa1}\x18\xdf\xfbmY\xd2\xb7p<]\\\xec\x84BC\xde\xf3\xf8\x84\xf3f\x99[\xcbD\x93\xbcFo\xd0\xd7\x86\xf7\x98\x95i7\xef\xbe\xf7]z\x17\xd5\xa2\x17\xb5\xa9\x8enU\x0f\b\xa43\x0f\xd1\xfdb\x1eu\xc4\xe9K\xd6\xdf=\xbbL\x8e\xa4o~_\xd7u\xe7+\x86\xf0\x97\xcd\xaa\xbc\x82\xa5\xe3\xe9\x064]5\xa5@\x1bq\xb9\xee\x81.\x1c*I@\xcf\x8b\xa5\xb5\x97|\x8e=\xdc\x18n\x0fA5\x02\xb9\xf4\xb6\xe27_y\xceU\xb0MDS\xf05\a\xdd\x88lP\x0f\xedG\xff\b\xb4@F#T\x81\x11\xb0a\xfcVkr\xd1\x1b\x1b\a\xe5%/\xc1\xca[\x82\x01[\x11\xc0\xc4\xd7+\xe6<\xcbk\x97\xd1^\xe6\xd3\xbc?H\x03\xb0\xd1\x0f\x13', 0x4) userfaultfd(0x80001) socket$inet_tcp(0x2, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)={0x1}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x1, 0x400, 0x0, 0x0, 0xfc, 0x0, 0xc, 0x0, 0x0, 0x1, 0x4}, {0x8, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x9, 0x0, 0x0, 0x2}, {0xeda7, 0x4, 0x5, 0x10, 0x0, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x9020}], 0x4}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x2004cb, 0x3, 0x100000000000000, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2ab, 0x2000000000003ff, 0x2, 0xfffffffffffffffd], 0x0, 0x200306}) ioctl$KVM_RUN(r4, 0xae80, 0x0) kernel console output (not intermixed with test programs): ][T13268] ? __pfx_reg_reload_regdb+0x10/0x10 [ 415.507191][T13268] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 415.507216][T13268] ? nl80211_pre_doit+0x19a/0xae0 [ 415.507243][T13268] genl_family_rcv_msg_doit+0x214/0x300 [ 415.507270][T13268] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 415.507301][T13268] ? bpf_lsm_capable+0x9/0x10 [ 415.507327][T13268] ? security_capable+0x80/0x260 [ 415.507360][T13268] genl_rcv_msg+0x560/0x800 [ 415.507386][T13268] ? __pfx_genl_rcv_msg+0x10/0x10 [ 415.507408][T13268] ? __lock_acquire+0x5c0/0x1f40 [ 415.507426][T13268] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 415.507450][T13268] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 415.507468][T13268] ? __pfx_nl80211_post_doit+0x10/0x10 [ 415.507507][T13268] netlink_rcv_skb+0x159/0x420 [ 415.507529][T13268] ? __pfx_genl_rcv_msg+0x10/0x10 [ 415.507554][T13268] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 415.507588][T13268] ? netlink_deliver_tap+0x1ae/0xcc0 [ 415.507616][T13268] genl_rcv+0x28/0x40 [ 415.507639][T13268] netlink_unicast+0x585/0x850 [ 415.507668][T13268] ? __pfx_netlink_unicast+0x10/0x10 [ 415.507693][T13268] ? __pfx_sock_has_perm+0x10/0x10 [ 415.507735][T13268] netlink_sendmsg+0x8b0/0xda0 [ 415.507765][T13268] ? __pfx_netlink_sendmsg+0x10/0x10 [ 415.507793][T13268] ? selinux_socket_sendmsg+0x198/0x2f0 [ 415.507822][T13268] ____sys_sendmsg+0xa4d/0xbe0 [ 415.507852][T13268] ? __pfx_netlink_sendmsg+0x10/0x10 [ 415.507880][T13268] ? __pfx_____sys_sendmsg+0x10/0x10 [ 415.507920][T13268] ? lock_acquire+0x1d1/0x380 [ 415.507943][T13268] ? get_pid_task+0x2a/0x250 [ 415.507976][T13268] ___sys_sendmsg+0x190/0x1e0 [ 415.508012][T13268] ? __pfx____sys_sendmsg+0x10/0x10 [ 415.508046][T13268] ? get_pid_task+0x106/0x250 [ 415.508089][T13268] ? find_held_lock+0x2b/0x80 [ 415.508142][T13268] __sys_sendmsg+0x160/0x210 [ 415.508170][T13268] ? __pfx___sys_sendmsg+0x10/0x10 [ 415.508217][T13268] do_syscall_64+0x123/0x790 [ 415.508251][T13268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.508276][T13268] RIP: 0033:0x7f593679e159 [ 415.508295][T13268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 415.508317][T13268] RSP: 002b:00007f59376f4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 415.508341][T13268] RAX: ffffffffffffffda RBX: 00007f5936a25fa0 RCX: 00007f593679e159 [ 415.508356][T13268] RDX: 0000000004000054 RSI: 0000200000000480 RDI: 0000000000000003 [ 415.508371][T13268] RBP: 00007f59376f4090 R08: 0000000000000000 R09: 0000000000000000 [ 415.508385][T13268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 415.508399][T13268] R13: 00007f5936a26038 R14: 00007f5936a25fa0 R15: 00007fff8e2d0918 [ 415.508432][T13268] [ 415.508499][T13268] faux_driver regulatory: _request_firmware_prepare: kmalloc(struct firmware) failed [ 415.652182][ T43] audit: type=1400 audit(1789385385.451:683): avc: denied { write } for pid=13269 comm="syz.1.2753" name="/" dev="9p" ino=74470903 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 415.652735][ T43] audit: type=1400 audit(1789385385.451:684): avc: denied { add_name } for pid=13269 comm="syz.1.2753" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 415.654616][ T43] audit: type=1400 audit(1789385385.451:685): avc: denied { create } for pid=13269 comm="syz.1.2753" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 415.656201][ T43] audit: type=1400 audit(1789385385.451:686): avc: denied { associate } for pid=13269 comm="syz.1.2753" name="bus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 415.796522][ T43] audit: type=1400 audit(1789385385.571:687): avc: denied { read open } for pid=13269 comm="syz.1.2753" path="/63/file0/bus" dev="9p" ino=74470937 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 415.810376][ T43] audit: type=1400 audit(1789385385.589:688): avc: denied { write } for pid=13269 comm="syz.1.2753" name="/" dev="9p" ino=74470903 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 415.813535][ T43] audit: type=1400 audit(1789385385.589:689): avc: denied { create } for pid=13269 comm="syz.1.2753" name="mnt" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 415.846520][T13274] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2754'. [ 416.496162][T13277] FAULT_INJECTION: forcing a failure. [ 416.496162][T13277] name failslab, interval 1, probability 0, space 0, times 0 [ 416.496190][T13277] CPU: 2 UID: 0 PID: 13277 Comm: syz.3.2756 Not tainted syzkaller #0 PREEMPT(full) [ 416.496207][T13277] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 416.496217][T13277] Call Trace: [ 416.496222][T13277] [ 416.496229][T13277] dump_stack_lvl+0x100/0x190 [ 416.496257][T13277] should_fail_ex.cold+0x5/0xa [ 416.496281][T13277] should_failslab+0xc2/0x120 [ 416.496304][T13277] kmem_cache_alloc_noprof+0x92/0x6a0 [ 416.496323][T13277] ? __pfx_map_id_range_down+0x10/0x10 [ 416.496342][T13277] ? security_inode_alloc+0x3b/0x2c0 [ 416.496363][T13277] security_inode_alloc+0x3b/0x2c0 [ 416.496381][T13277] inode_init_always_gfp+0xc6f/0xfb0 [ 416.496407][T13277] alloc_inode+0x8e/0x250 [ 416.496422][T13277] new_inode+0x22/0x1c0 [ 416.496438][T13277] shmem_get_inode+0x1e3/0xf70 [ 416.496459][T13277] ? __pfx_shmem_get_inode+0x10/0x10 [ 416.496483][T13277] __shmem_file_setup+0x382/0x460 [ 416.496502][T13277] ? __pfx___shmem_file_setup+0x10/0x10 [ 416.496526][T13277] newseg+0x3c0/0xed0 [ 416.496547][T13277] ? __pfx_newseg+0x10/0x10 [ 416.496563][T13277] ? down_write+0x146/0x1f0 [ 416.496587][T13277] ? ksys_write+0x190/0x250 [ 416.496606][T13277] ipcget+0xee/0xf50 [ 416.496625][T13277] ? __pfx_do_futex+0x10/0x10 [ 416.496649][T13277] ? __pfx_ipcget+0x10/0x10 [ 416.496667][T13277] ? __x64_sys_futex+0x34f/0x4d0 [ 416.496685][T13277] ? __x64_sys_futex+0x358/0x4d0 [ 416.496709][T13277] __x64_sys_shmget+0x13b/0x1b0 [ 416.496727][T13277] ? __pfx___x64_sys_shmget+0x10/0x10 [ 416.496751][T13277] do_syscall_64+0x123/0x790 [ 416.496773][T13277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.512739][T13277] RIP: 0033:0x7f593679e159 [ 416.512758][T13277] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 416.512796][T13277] RSP: 002b:00007f59376f4028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 416.512819][T13277] RAX: ffffffffffffffda RBX: 00007f5936a25fa0 RCX: 00007f593679e159 [ 416.512831][T13277] RDX: 0000000000000200 RSI: 0000000000004000 RDI: 0000000000000000 [ 416.512842][T13277] RBP: 00007f593683503b R08: 0000000000000000 R09: 0000000000000000 [ 416.512852][T13277] R10: 0000200000ff9000 R11: 0000000000000246 R12: 0000000000000000 [ 416.512862][T13277] R13: 00007f5936a26038 R14: 00007f5936a25fa0 R15: 00007fff8e2d0918 [ 416.512887][T13277] [ 416.532228][T13277] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2756'. [ 416.723609][ T5760] Bluetooth: hci0: command 0x0c1a tx timeout [ 417.094853][T13294] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2760'. [ 417.125313][T13290] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 417.255794][T13298] overlayfs: overlapping lowerdir path [ 417.300977][T13298] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 417.301006][T13298] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 417.301017][T13298] overlayfs: missing 'lowerdir' [ 417.453000][T13304] netlink: 'syz.3.2768': attribute type 1 has an invalid length. [ 417.519643][T13304] 8021q: adding VLAN 0 to HW filter on device bond1 [ 417.599256][T13304] bond1: entered promiscuous mode [ 417.599281][T13304] bond1: entered allmulticast mode [ 417.606931][T13304] macvlan2: entered promiscuous mode [ 417.606953][T13304] macvlan2: entered allmulticast mode [ 417.608007][T13304] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 417.698967][T13314] FAULT_INJECTION: forcing a failure. [ 417.698967][T13314] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 417.698999][T13314] CPU: 3 UID: 0 PID: 13314 Comm: syz.0.2770 Not tainted syzkaller #0 PREEMPT(full) [ 417.699020][T13314] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 417.699032][T13314] Call Trace: [ 417.699041][T13314] [ 417.699048][T13314] dump_stack_lvl+0x100/0x190 [ 417.699078][T13314] should_fail_ex.cold+0x5/0xa [ 417.699099][T13314] _copy_from_iter+0x1f4/0x1690 [ 417.699118][T13314] ? __asan_memset+0x23/0x50 [ 417.699134][T13314] ? __pfx__copy_from_iter+0x10/0x10 [ 417.699149][T13314] ? __pfx___alloc_skb+0x10/0x10 [ 417.699173][T13314] netlink_sendmsg+0x808/0xda0 [ 417.699194][T13314] ? __pfx_netlink_sendmsg+0x10/0x10 [ 417.699212][T13314] ? selinux_socket_sendmsg+0x198/0x2f0 [ 417.699231][T13314] ____sys_sendmsg+0xa4d/0xbe0 [ 417.699252][T13314] ? __pfx_netlink_sendmsg+0x10/0x10 [ 417.699270][T13314] ? __pfx_____sys_sendmsg+0x10/0x10 [ 417.699293][T13314] ? _kstrtoull+0x144/0x200 [ 417.699312][T13314] ? __pfx__kstrtoull+0x10/0x10 [ 417.699343][T13314] ___sys_sendmsg+0x190/0x1e0 [ 417.699366][T13314] ? __pfx____sys_sendmsg+0x10/0x10 [ 417.699397][T13314] ? __fget_files+0x34/0x3d0 [ 417.699429][T13314] __sys_sendmmsg+0x20c/0x440 [ 417.699448][T13314] ? __pfx___sys_sendmmsg+0x10/0x10 [ 417.699465][T13314] ? ksys_write+0x190/0x250 [ 417.699494][T13314] ? fput+0x7c/0x100 [ 417.699512][T13314] ? ksys_write+0x1ac/0x250 [ 417.699526][T13314] ? __pfx_ksys_write+0x10/0x10 [ 417.699545][T13314] __x64_sys_sendmmsg+0x9c/0x100 [ 417.699562][T13314] ? lockdep_hardirqs_on+0x7d/0x110 [ 417.699582][T13314] do_syscall_64+0x123/0x790 [ 417.699604][T13314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.699620][T13314] RIP: 0033:0x7f72b779e159 [ 417.699636][T13314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 417.699652][T13314] RSP: 002b:00007f72b860c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 417.699673][T13314] RAX: ffffffffffffffda RBX: 00007f72b7a25fa0 RCX: 00007f72b779e159 [ 417.699687][T13314] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 417.699697][T13314] RBP: 00007f72b860c090 R08: 0000000000000000 R09: 0000000000000000 [ 417.699707][T13314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 417.699717][T13314] R13: 00007f72b7a26038 R14: 00007f72b7a25fa0 R15: 00007ffdfc2523a8 [ 417.699742][T13314] [ 418.034001][ T43] audit: type=1400 audit(1789385387.648:690): avc: denied { setopt } for pid=13319 comm="syz.2.2772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 418.063139][ T43] audit: type=1400 audit(1789385387.675:691): avc: denied { write } for pid=13319 comm="syz.2.2772" name="functions" dev="configfs" ino=11353 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 418.065771][ T43] audit: type=1400 audit(1789385387.675:692): avc: denied { write } for pid=13319 comm="syz.2.2772" name="functions" dev="configfs" ino=11353 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 418.334769][T13330] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2774'. [ 418.411514][T13333] FAULT_INJECTION: forcing a failure. [ 418.411514][T13333] name failslab, interval 1, probability 0, space 0, times 0 [ 418.411548][T13333] CPU: 3 UID: 0 PID: 13333 Comm: syz.3.2777 Not tainted syzkaller #0 PREEMPT(full) [ 418.411573][T13333] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 418.411586][T13333] Call Trace: [ 418.411594][T13333] [ 418.411604][T13333] dump_stack_lvl+0x100/0x190 [ 418.411642][T13333] should_fail_ex.cold+0x5/0xa [ 418.411670][T13333] should_failslab+0xc2/0x120 [ 418.411695][T13333] __kmalloc_cache_noprof+0x91/0x6d0 [ 418.411725][T13333] ? shrinker_alloc+0xf5/0xc90 [ 418.411758][T13333] shrinker_alloc+0xf5/0xc90 [ 418.411789][T13333] ? mark_held_locks+0x40/0x70 [ 418.411822][T13333] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 418.411850][T13333] ? rcu_is_watching+0x13/0xc0 [ 418.411880][T13333] ? __pfx_shrinker_alloc+0x10/0x10 [ 418.411914][T13333] ? lockdep_init_map_type+0x5c/0x250 [ 418.411935][T13333] ? lockdep_init_map_type+0x5c/0x250 [ 418.411953][T13333] ? __raw_spin_lock_init+0x3a/0x110 [ 418.411975][T13333] ? __init_rwsem+0x10e/0x180 [ 418.412001][T13333] sget_fc+0x979/0x1f20 [ 418.412025][T13333] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 418.412048][T13333] ? __pfx_set_anon_super_fc+0x10/0x10 [ 418.412076][T13333] ? __pfx_sget_fc+0x10/0x10 [ 418.412098][T13333] ? rcu_is_watching+0x13/0xc0 [ 418.412123][T13333] ? cap_capable+0x107/0x430 [ 418.412155][T13333] ? __pfx_shmem_fill_super+0x10/0x10 [ 418.412177][T13333] get_tree_nodev+0x28/0x190 [ 418.412199][T13333] vfs_get_tree+0x92/0x320 [ 418.412228][T13333] path_mount+0x7d0/0x24c0 [ 418.412258][T13333] ? __pfx_path_mount+0x10/0x10 [ 418.412282][T13333] ? lockdep_hardirqs_on+0x7d/0x110 [ 418.412309][T13333] ? putname+0xb1/0x110 [ 418.412332][T13333] ? kmem_cache_free+0x127/0x6c0 [ 418.412368][T13333] ? __x64_sys_mount+0x293/0x310 [ 418.412392][T13333] __x64_sys_mount+0x293/0x310 [ 418.412418][T13333] ? __pfx___x64_sys_mount+0x10/0x10 [ 418.412451][T13333] do_syscall_64+0x123/0x790 [ 418.412476][T13333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.412494][T13333] RIP: 0033:0x7f593679e159 [ 418.412509][T13333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 418.412528][T13333] RSP: 002b:00007f59376f4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 418.412549][T13333] RAX: ffffffffffffffda RBX: 00007f5936a25fa0 RCX: 00007f593679e159 [ 418.412562][T13333] RDX: 00002000000001c0 RSI: 0000200000000040 RDI: 0000000000000000 [ 418.412573][T13333] RBP: 00007f593683503b R08: 0000200000000200 R09: 0000000000000000 [ 418.412586][T13333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 418.412596][T13333] R13: 00007f5936a26038 R14: 00007f5936a25fa0 R15: 00007fff8e2d0918 [ 418.412621][T13333] [ 418.627557][T13339] FAULT_INJECTION: forcing a failure. [ 418.627557][T13339] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 418.627647][T13339] CPU: 3 UID: 0 PID: 13339 Comm: syz.2.2781 Not tainted syzkaller #0 PREEMPT(full) [ 418.627668][T13339] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 418.627680][T13339] Call Trace: [ 418.627687][T13339] [ 418.627694][T13339] dump_stack_lvl+0x100/0x190 [ 418.627725][T13339] should_fail_ex.cold+0x5/0xa [ 418.627751][T13339] _copy_to_user+0x32/0xd0 [ 418.627773][T13339] simple_read_from_buffer+0xcb/0x170 [ 418.627798][T13339] proc_fail_nth_read+0x1af/0x230 [ 418.627821][T13339] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 418.627844][T13339] ? rw_verify_area+0xce/0x6d0 [ 418.627877][T13339] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 418.627897][T13339] vfs_read+0x1e4/0xb40 [ 418.627913][T13339] ? lock_acquire+0x1d1/0x380 [ 418.627931][T13339] ? __fget_files+0x34/0x3d0 [ 418.627951][T13339] ? __pfx_vfs_read+0x10/0x10 [ 418.627966][T13339] ? find_held_lock+0x2b/0x80 [ 418.627994][T13339] ? __fget_files+0x215/0x3d0 [ 418.628018][T13339] ? __fget_files+0x21f/0x3d0 [ 418.628045][T13339] ksys_read+0x12a/0x250 [ 418.628062][T13339] ? __pfx_ksys_read+0x10/0x10 [ 418.628085][T13339] do_syscall_64+0x123/0x790 [ 418.628110][T13339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.628127][T13339] RIP: 0033:0x7f7b1df5e98e [ 418.628142][T13339] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 418.628157][T13339] RSP: 002b:00007f7b1ee84fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 418.628174][T13339] RAX: ffffffffffffffda RBX: 00007f7b1ee856c0 RCX: 00007f7b1df5e98e [ 418.628186][T13339] RDX: 000000000000000f RSI: 00007f7b1ee850a0 RDI: 0000000000000004 [ 418.628197][T13339] RBP: 00007f7b1ee85090 R08: 0000000000000000 R09: 0000000000000000 [ 418.628207][T13339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.628217][T13339] R13: 00007f7b1e226038 R14: 00007f7b1e225fa0 R15: 00007ffe66c0c868 [ 418.628241][T13339] [ 418.988434][ T5760] Bluetooth: hci0: command 0x0c1a tx timeout [ 419.274260][T13364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2786'. [ 419.324682][T13366] binder_alloc: binder_alloc_mmap_handler: 13358 200000ffd000-200001000000 already mapped failed -16 [ 419.327078][T13366] binder_alloc: binder_alloc_mmap_handler: 13358 200000ffd000-200001000000 already mapped failed -16 [ 419.327251][T13366] binder_alloc: binder_alloc_mmap_handler: 13358 200000ffd000-200001000000 already mapped failed -16 [ 419.327401][T13366] binder_alloc: binder_alloc_mmap_handler: 13358 200000ffd000-200001000000 already mapped failed -16 [ 419.327549][T13366] binder_alloc: binder_alloc_mmap_handler: 13358 200000ffd000-200001000000 already mapped failed -16 [ 419.327678][T13366] binder_alloc: binder_alloc_mmap_handler: 13358 200000ffd000-200001000000 already mapped failed -16 [ 419.327812][T13366] binder_alloc: binder_alloc_mmap_handler: 13358 200000ffd000-200001000000 already mapped failed -16 [ 419.327941][T13366] binder_alloc: binder_alloc_mmap_handler: 13358 200000ffd000-200001000000 already mapped failed -16 [ 419.387200][T13366] binder_alloc: binder_alloc_mmap_handler: 13358 200000ffd000-200001000000 already mapped failed -16 [ 419.387356][T13366] binder_alloc: binder_alloc_mmap_handler: 13358 200000ffd000-200001000000 already mapped failed -16 [ 419.388758][T13359] binder_alloc: 13358: binder_alloc_buf, no vma [ 419.470515][T13359] overlay: ./file0 is not a directory [ 419.661466][T13371] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2787'. [ 419.891037][T13345] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 419.891218][T13345] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 419.893806][T13345] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 419.893983][T13345] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 420.269052][T13381] FAULT_INJECTION: forcing a failure. [ 420.269052][T13381] name failslab, interval 1, probability 0, space 0, times 0 [ 420.269088][T13381] CPU: 3 UID: 0 PID: 13381 Comm: syz.0.2792 Not tainted syzkaller #0 PREEMPT(full) [ 420.269112][T13381] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 420.269124][T13381] Call Trace: [ 420.269132][T13381] [ 420.269140][T13381] dump_stack_lvl+0x100/0x190 [ 420.269176][T13381] should_fail_ex.cold+0x5/0xa [ 420.269206][T13381] should_failslab+0xc2/0x120 [ 420.269233][T13381] __kmalloc_cache_noprof+0x91/0x6d0 [ 420.269265][T13381] ? nfnetlink_rcv_batch+0x780/0x2880 [ 420.269302][T13381] nfnetlink_rcv_batch+0x780/0x2880 [ 420.269345][T13381] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 420.269380][T13381] ? lock_acquire+0x1d1/0x380 [ 420.269403][T13381] ? avc_has_perm_noaudit+0x56/0x3b0 [ 420.269443][T13381] ? avc_has_perm_noaudit+0x145/0x3b0 [ 420.269500][T13381] ? __nla_parse+0x40/0x60 [ 420.269537][T13381] nfnetlink_rcv+0x3bd/0x440 [ 420.269566][T13381] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 420.269603][T13381] netlink_unicast+0x585/0x850 [ 420.269631][T13381] ? __pfx_netlink_unicast+0x10/0x10 [ 420.269659][T13381] netlink_sendmsg+0x8b0/0xda0 [ 420.269686][T13381] ? __pfx_netlink_sendmsg+0x10/0x10 [ 420.269711][T13381] ? selinux_socket_sendmsg+0x198/0x2f0 [ 420.269739][T13381] ____sys_sendmsg+0xa4d/0xbe0 [ 420.269788][T13381] ? __pfx_netlink_sendmsg+0x10/0x10 [ 420.269814][T13381] ? __pfx_____sys_sendmsg+0x10/0x10 [ 420.269851][T13381] ? lock_acquire+0x1d1/0x380 [ 420.269873][T13381] ? get_pid_task+0x2a/0x250 [ 420.269907][T13381] ___sys_sendmsg+0x190/0x1e0 [ 420.269940][T13381] ? __pfx____sys_sendmsg+0x10/0x10 [ 420.269982][T13381] ? get_pid_task+0x106/0x250 [ 420.270021][T13381] ? find_held_lock+0x2b/0x80 [ 420.270068][T13381] __sys_sendmsg+0x160/0x210 [ 420.270095][T13381] ? __pfx___sys_sendmsg+0x10/0x10 [ 420.270137][T13381] do_syscall_64+0x123/0x790 [ 420.270170][T13381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.270194][T13381] RIP: 0033:0x7f72b779e159 [ 420.270214][T13381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 420.270235][T13381] RSP: 002b:00007f72b860c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 420.270258][T13381] RAX: ffffffffffffffda RBX: 00007f72b7a25fa0 RCX: 00007f72b779e159 [ 420.270272][T13381] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000003 [ 420.270286][T13381] RBP: 00007f72b860c090 R08: 0000000000000000 R09: 0000000000000000 [ 420.270299][T13381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.270312][T13381] R13: 00007f72b7a26038 R14: 00007f72b7a25fa0 R15: 00007ffdfc2523a8 [ 420.270343][T13381] [ 420.464129][T13387] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 420.523523][T13390] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2796'. [ 420.587781][T13390] hsr_slave_0: left promiscuous mode [ 420.606279][T13390] hsr_slave_1: left promiscuous mode [ 420.975154][T13382] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2793'. [ 421.175876][ T5760] Bluetooth: hci4: command 0x0c1a tx timeout [ 421.328540][ T43] kauditd_printk_skb: 13 callbacks suppressed [ 421.328561][ T43] audit: type=1400 audit(1789385390.675:706): avc: denied { write } for pid=13404 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 421.360883][T13411] Bluetooth: MGMT ver 1.23 [ 421.362298][T13411] xt_hashlimit: size too large, truncated to 1048576 [ 421.362315][T13411] xt_hashlimit: max too large, truncated to 1048576 [ 421.362327][T13411] xt_hashlimit: Unknown mode mask 52C95688, kernel too old? [ 421.549064][ T43] audit: type=1400 audit(1789385390.888:707): avc: denied { write } for pid=13413 comm="rm" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 421.841516][T13421] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 421.841876][ T43] audit: type=1400 audit(1789385391.146:708): avc: denied { write } for pid=13415 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 421.841923][ T43] audit: type=1400 audit(1789385391.165:709): avc: denied { read } for pid=13420 comm="syz.0.2801" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 421.946432][T13417] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 422.045459][ T43] audit: type=1400 audit(1789385391.322:710): avc: denied { write } for pid=13425 comm="rm" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 422.081358][T13417] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 422.081549][T13417] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 422.081672][T13417] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 422.081795][T13417] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 422.140327][T13433] netlink: 'syz.3.2803': attribute type 1 has an invalid length. [ 422.174722][ T43] audit: type=1400 audit(1789385391.469:711): avc: denied { append } for pid=13429 comm="syz.1.2802" name="dvr0" dev="devtmpfs" ino=950 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 422.179520][T13433] 8021q: adding VLAN 0 to HW filter on device bond2 [ 422.218287][T13433] bond2: entered promiscuous mode [ 422.218312][T13433] bond2: entered allmulticast mode [ 422.228183][T13433] macvlan2: entered promiscuous mode [ 422.228205][T13433] macvlan2: entered allmulticast mode [ 422.230900][T13433] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 422.245820][T13430] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 422.665557][T13440] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2806'. [ 422.665962][T13440] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 422.691994][T13440] netlink: 'syz.3.2806': attribute type 1 has an invalid length. [ 422.692040][T13440] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 422.807583][ T43] audit: type=1400 audit(1789385392.051:712): avc: denied { read } for pid=13441 comm="syz.1.2807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 422.818390][T13440] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888108819140 pfn:0x108818 [ 422.818422][T13440] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 422.818438][T13440] memcg:ffff88810881fe81 [ 422.818446][T13440] flags: 0x57ff00000000240(workingset|head|node=1|zone=2|lastcpupid=0x7ff) [ 422.818466][T13440] page_type: f5(slab) [ 422.818483][T13440] raw: 057ff00000000240 ffff88801cb9c8c0 ffffea0004248010 ffffea0004221210 [ 422.818500][T13440] raw: ffff888108819140 0000000200160000 00000000f5000000 ffff88810881fe81 [ 422.818516][T13440] head: 057ff00000000240 ffff88801cb9c8c0 ffffea0004248010 ffffea0004221210 [ 422.818532][T13440] head: ffff888108819140 0000000200160000 00000000f5000000 ffff88810881fe81 [ 422.818549][T13440] head: 057ff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 422.818565][T13440] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 422.818576][T13440] page dumped because: unmovable page [ 422.818585][T13440] page_owner tracks the page as allocated [ 422.818591][T13440] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5758, tgid 5758 (syz-executor), ts 318767273511 [ 422.818625][T13440] post_alloc_hook+0xfd/0x120 [ 422.818658][T13440] get_page_from_freelist+0x110d/0x35d0 [ 422.818684][T13440] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 422.818711][T13440] new_slab+0xa9/0x6e0 [ 422.818736][T13440] refill_objects+0xe3/0x410 [ 422.818761][T13440] __pcs_replace_empty_main+0x35e/0x650 [ 422.818785][T13440] kmem_cache_alloc_lru_noprof+0x4c0/0x6a0 [ 422.818804][T13440] sock_alloc_inode+0x26/0x2c0 [ 422.818827][T13440] alloc_inode+0x68/0x250 [ 422.818843][T13440] sock_alloc+0x44/0x280 [ 422.818864][T13440] __sock_create+0xc2/0x860 [ 422.818887][T13440] __sys_socket+0x14d/0x260 [ 422.818902][T13440] __x64_sys_socket+0x72/0xb0 [ 422.818918][T13440] do_syscall_64+0x123/0x790 [ 422.818954][T13440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.818974][T13440] page last free pid 11030 tgid 11029 ts 311730830600 stack trace: [ 422.818988][T13440] __free_pages_ok+0x73b/0x1050 [ 422.819010][T13440] hash_ip4_destroy+0x1dd/0x300 [ 422.819034][T13440] ip_set_create+0xc65/0x1510 [ 422.819059][T13440] nfnetlink_rcv_msg+0x9d5/0x11e0 [ 422.820638][T13440] netlink_rcv_skb+0x159/0x420 [ 422.820668][T13440] nfnetlink_rcv+0x1b3/0x440 [ 422.820688][T13440] netlink_unicast+0x585/0x850 [ 422.820704][T13440] netlink_sendmsg+0x8b0/0xda0 [ 422.820719][T13440] ____sys_sendmsg+0xa4d/0xbe0 [ 422.820741][T13440] ___sys_sendmsg+0x190/0x1e0 [ 422.820795][T13440] __sys_sendmsg+0x160/0x210 [ 422.820812][T13440] do_syscall_64+0x123/0x790 [ 422.820832][T13440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.969476][T13445] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2808'. [ 423.107559][T13445] bond1: entered promiscuous mode [ 423.163188][T13445] 8021q: adding VLAN 0 to HW filter on device bond1 [ 423.208706][T13451] bond1: (slave ipip0): refused to change device type [ 423.239958][T13453] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 423.239981][T13453] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 423.255542][T13453] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 423.255561][T13453] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 423.666191][ T43] audit: type=1400 audit(1789385392.826:713): avc: denied { map } for pid=13458 comm="syz.0.2811" path="socket:[41040]" dev="sockfs" ino=41040 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 423.666235][ T43] audit: type=1400 audit(1789385392.826:714): avc: denied { read write } for pid=13458 comm="syz.0.2811" path="socket:[41040]" dev="sockfs" ino=41040 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 423.803180][ T43] audit: type=1400 audit(1789385392.955:715): avc: denied { write } for pid=13460 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 423.887333][T13462] bridge1: entered allmulticast mode [ 424.226949][T12093] cxacru 8-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 424.279842][ T5763] Bluetooth: hci2: command 0x0c1a tx timeout [ 424.312512][ T5763] Bluetooth: hci0: command 0x0c1a tx timeout [ 424.312551][ T5763] Bluetooth: hci3: command 0x0c1a tx timeout [ 424.312576][ T5763] Bluetooth: hci4: command 0x0c1a tx timeout [ 441.570403][T13478] input: syz1 as /devices/virtual/input/input5 [ 441.576569][T13482] jffs2: notice: (13482) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 441.591916][ T43] kauditd_printk_skb: 3 callbacks suppressed [ 441.591933][ T43] audit: type=1400 audit(1789385409.387:719): avc: denied { read } for pid=5131 comm="acpid" name="event4" dev="devtmpfs" ino=2952 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 441.591973][ T43] audit: type=1400 audit(1789385409.396:720): avc: denied { open } for pid=5131 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2952 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 441.592009][ T43] audit: type=1400 audit(1789385409.396:721): avc: denied { ioctl } for pid=5131 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2952 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 441.593431][T13483] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 441.593762][ T43] audit: type=1400 audit(1789385409.396:722): avc: denied { search } for pid=13481 comm="syz.2.2815" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 441.593841][ T43] audit: type=1400 audit(1789385409.396:723): avc: denied { search } for pid=13481 comm="syz.2.2815" name="events" dev="tracefs" ino=1533 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 441.593984][ T43] audit: type=1400 audit(1789385409.396:724): avc: denied { search } for pid=13481 comm="syz.2.2815" name="kvm" dev="tracefs" ino=40783 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 441.598403][ T43] audit: type=1400 audit(1789385409.396:725): avc: denied { write } for pid=13480 comm="syz.3.2816" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 441.598599][ T43] audit: type=1400 audit(1789385409.396:726): avc: denied { add_name } for pid=13480 comm="syz.3.2816" name="memory.events.local" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 441.666315][ T43] audit: type=1400 audit(1789385409.460:727): avc: denied { setattr } for pid=13476 comm="syz.1.2814" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 441.666366][ T43] audit: type=1400 audit(1789385409.460:728): avc: denied { read append open } for pid=13480 comm="syz.3.2816" path="/41/file0/memory.events.local" dev="jffs2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 441.881314][T13497] FAULT_INJECTION: forcing a failure. [ 441.881314][T13497] name failslab, interval 1, probability 0, space 0, times 0 [ 441.881334][T13497] CPU: 0 UID: 0 PID: 13497 Comm: syz.3.2821 Not tainted syzkaller #0 PREEMPT(full) [ 441.881352][T13497] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 441.881360][T13497] Call Trace: [ 441.881364][T13497] [ 441.881369][T13497] dump_stack_lvl+0x100/0x190 [ 441.881389][T13497] should_fail_ex.cold+0x5/0xa [ 441.881406][T13497] should_failslab+0xc2/0x120 [ 441.881421][T13497] __kmalloc_cache_noprof+0x91/0x6d0 [ 441.881440][T13497] ? alloc_fs_context+0x57/0xf40 [ 441.881460][T13497] alloc_fs_context+0x57/0xf40 [ 441.881479][T13497] mq_init_ns+0x16e/0x820 [ 441.881491][T13497] copy_ipcs+0x3dd/0x7e0 [ 441.881502][T13497] create_new_namespaces+0x20a/0xac0 [ 441.881516][T13497] ? security_capable+0x80/0x260 [ 441.881535][T13497] unshare_nsproxy_namespaces+0xf2/0x220 [ 441.881549][T13497] ksys_unshare+0x4a2/0xa70 [ 441.881563][T13497] ? __pfx_ksys_unshare+0x10/0x10 [ 441.881576][T13497] ? ksys_write+0x1ac/0x250 [ 441.881592][T13497] __x64_sys_unshare+0x31/0x40 [ 441.881606][T13497] do_syscall_64+0x123/0x790 [ 441.881630][T13497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.881647][T13497] RIP: 0033:0x7f593679e159 [ 441.881664][T13497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 441.881681][T13497] RSP: 002b:00007f59376f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 441.881702][T13497] RAX: ffffffffffffffda RBX: 00007f5936a25fa0 RCX: 00007f593679e159 [ 441.881716][T13497] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008040600 [ 441.881726][T13497] RBP: 00007f59376f4090 R08: 0000000000000000 R09: 0000000000000000 [ 441.881736][T13497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 441.881761][T13497] R13: 00007f5936a26038 R14: 00007f5936a25fa0 R15: 00007fff8e2d0918 [ 441.881785][T13497] [ 441.889585][T13488] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2817'. [ 442.030084][T13488] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2817'. [ 442.097648][T13488] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2817'. [ 442.263773][ T5763] Bluetooth: hci2: unexpected event for opcode 0x0c3a [ 442.318299][T13532] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2834'. [ 442.359518][T10068] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 442.422481][T13539] device-mapper: ioctl: Unable to change name on mapped device to one that already exists: j [ 442.521728][T10068] usb 5-1: device descriptor read/64, error -71 [ 442.732876][T13562] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2847'. [ 442.782109][ T5895] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 442.804223][T10068] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 442.842891][T13564] fuse: Bad value for 'rootmode' [ 442.946691][ T5895] usb 7-1: unable to get BOS descriptor or descriptor too short [ 442.947183][ T5895] usb 7-1: not running at top speed; connect to a high speed hub [ 442.947214][ T5895] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 442.948155][ T5895] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 442.948176][ T5895] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 442.948193][ T5895] usb 7-1: config 14 has no interface number 0 [ 442.948213][ T5895] usb 7-1: config 14 has no interface number 1 [ 442.948260][ T5895] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 442.948282][ T5895] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 442.948304][ T5895] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 442.948326][ T5895] usb 7-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 442.948348][ T5895] usb 7-1: config 14 interface 57 has no altsetting 0 [ 442.948363][ T5895] usb 7-1: config 14 interface 228 has no altsetting 0 [ 442.950285][ T5895] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.950304][ T5895] usb 7-1: Product: syz [ 442.950317][ T5895] usb 7-1: Manufacturer: syz [ 442.950331][ T5895] usb 7-1: SerialNumber: syz [ 442.952942][T13574] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2852'. [ 442.953427][T13574] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 442.955212][T13574] netlink: 'syz.3.2852': attribute type 1 has an invalid length. [ 442.955253][T13574] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 442.966864][T10068] usb 5-1: device descriptor read/64, error -71 [ 442.977295][T13574] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888108819140 pfn:0x108818 [ 442.977319][T13574] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 442.977336][T13574] memcg:ffff88810881fe81 [ 442.977343][T13574] flags: 0x57ff00000000240(workingset|head|node=1|zone=2|lastcpupid=0x7ff) [ 442.977363][T13574] page_type: f5(slab) [ 442.977379][T13574] raw: 057ff00000000240 ffff88801cb9c8c0 ffffea0004248010 ffffea0004221210 [ 442.977398][T13574] raw: ffff888108819140 0000000200160000 00000000f5000000 ffff88810881fe81 [ 442.977415][T13574] head: 057ff00000000240 ffff88801cb9c8c0 ffffea0004248010 ffffea0004221210 [ 442.977433][T13574] head: ffff888108819140 0000000200160000 00000000f5000000 ffff88810881fe81 [ 442.977448][T13574] head: 057ff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 442.977465][T13574] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 442.977474][T13574] page dumped because: unmovable page [ 442.977481][T13574] page_owner tracks the page as allocated [ 442.977490][T13574] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5758, tgid 5758 (syz-executor), ts 318767273511 [ 442.977517][T13574] post_alloc_hook+0xfd/0x120 [ 442.977564][T13574] get_page_from_freelist+0x110d/0x35d0 [ 442.977593][T13574] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 442.977621][T13574] new_slab+0xa9/0x6e0 [ 442.977648][T13574] refill_objects+0xe3/0x410 [ 442.977671][T13574] __pcs_replace_empty_main+0x35e/0x650 [ 442.977745][T13574] kmem_cache_alloc_lru_noprof+0x4c0/0x6a0 [ 442.977767][T13574] sock_alloc_inode+0x26/0x2c0 [ 442.977797][T13574] alloc_inode+0x68/0x250 [ 442.977815][T13574] sock_alloc+0x44/0x280 [ 442.977835][T13574] __sock_create+0xc2/0x860 [ 442.977859][T13574] __sys_socket+0x14d/0x260 [ 442.977875][T13574] __x64_sys_socket+0x72/0xb0 [ 442.977889][T13574] do_syscall_64+0x123/0x790 [ 442.977918][T13574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.977937][T13574] page last free pid 11030 tgid 11029 ts 311730830600 stack trace: [ 442.977951][T13574] __free_pages_ok+0x73b/0x1050 [ 442.977973][T13574] hash_ip4_destroy+0x1dd/0x300 [ 442.977994][T13574] ip_set_create+0xc65/0x1510 [ 442.978020][T13574] nfnetlink_rcv_msg+0x9d5/0x11e0 [ 442.978045][T13574] netlink_rcv_skb+0x159/0x420 [ 442.978064][T13574] nfnetlink_rcv+0x1b3/0x440 [ 442.978084][T13574] netlink_unicast+0x585/0x850 [ 442.978102][T13574] netlink_sendmsg+0x8b0/0xda0 [ 442.978118][T13574] ____sys_sendmsg+0xa4d/0xbe0 [ 442.978143][T13574] ___sys_sendmsg+0x190/0x1e0 [ 442.978167][T13574] __sys_sendmsg+0x160/0x210 [ 442.978184][T13574] do_syscall_64+0x123/0x790 [ 442.978207][T13574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.046875][T13576] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13576 comm=syz.3.2853 [ 443.047235][T13576] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13576 comm=syz.3.2853 [ 443.047425][T13576] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13576 comm=syz.3.2853 [ 443.047775][T13576] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13576 comm=syz.3.2853 [ 443.047956][T13576] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13576 comm=syz.3.2853 [ 443.048278][T13576] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13576 comm=syz.3.2853 [ 443.048473][T13576] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13576 comm=syz.3.2853 [ 443.048794][T13576] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13576 comm=syz.3.2853 [ 443.049189][T13576] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13576 comm=syz.3.2853 [ 443.049833][T13576] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13576 comm=syz.3.2853 [ 443.095974][T10068] usb usb5-port1: attempt power cycle [ 443.128203][T13578] loop6: detected capacity change from 0 to 2640 [ 443.133204][T13578] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2854'. [ 443.141035][T13511] Buffer I/O error on dev loop6, logical block 0, async page read [ 443.141417][T13511] Buffer I/O error on dev loop6, logical block 0, async page read [ 443.141749][T13511] Buffer I/O error on dev loop6, logical block 0, async page read [ 443.142080][T13511] Buffer I/O error on dev loop6, logical block 0, async page read [ 443.144377][T13511] Buffer I/O error on dev loop6, logical block 0, async page read [ 443.399202][ T5895] legousbtower 7-1:14.57: interrupt endpoints not found [ 443.464597][T10068] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 443.486435][T10068] usb 5-1: device descriptor read/8, error -71 [ 443.518333][T10072] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 443.681618][T10072] usb 6-1: Using ep0 maxpacket: 8 [ 443.682196][T10072] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 443.683295][T10072] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 443.683324][T10072] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 443.683355][T10072] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 443.683378][T10072] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 443.683403][T10072] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 443.683425][T10072] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 443.683446][T10072] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 443.683469][T10072] usb 6-1: config 168 interface 0 has no altsetting 0 [ 443.685436][T10072] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 443.685465][T10072] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 443.685499][T10072] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 443.685521][T10072] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 443.685542][T10072] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 443.685562][T10072] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 443.685585][T10072] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 443.685611][T10072] usb 6-1: config 168 interface 0 has no altsetting 0 [ 443.687166][T10072] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 443.687202][T10072] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 443.687230][T10072] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 443.687252][T10072] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 443.687273][T10072] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 443.687295][T10072] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 443.687318][T10072] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 443.687340][T10072] usb 6-1: config 168 interface 0 has no altsetting 0 [ 443.690780][T10072] usb 6-1: string descriptor 0 read error: -22 [ 443.690838][T10072] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.727026][T10072] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 443.756798][T10068] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 443.779180][T10068] usb 5-1: device descriptor read/8, error -71 [ 443.833659][ T5895] legousbtower 7-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 443.835642][ T5895] legousbtower 7-1:14.228: LEGO USB Tower #-159 now attached to major 180 minor 1 [ 443.901258][T10068] usb usb5-port1: unable to enumerate USB device [ 443.920162][T13580] ieee802154 phy0 wpan0: encryption failed: -22 [ 443.920976][ T9] usb 6-1: USB disconnect, device number 23 [ 444.095484][T13584] netlink: 'syz.3.2857': attribute type 1 has an invalid length. [ 444.108316][T13584] 8021q: adding VLAN 0 to HW filter on device bond3 [ 444.113285][T13584] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2857'. [ 444.119430][T13584] bond3: entered promiscuous mode [ 444.119455][T13584] bond3: entered allmulticast mode [ 444.124830][T13584] macvlan2: entered promiscuous mode [ 444.124844][T13584] macvlan2: entered allmulticast mode [ 444.125768][T13584] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 444.408026][T13598] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2861'. [ 444.408445][T13598] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 444.409877][T13598] netlink: 'syz.3.2861': attribute type 1 has an invalid length. [ 444.409921][T13598] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 444.450099][ T5763] Bluetooth: hci0: command 0x0c1a tx timeout [ 444.453740][ T5760] Bluetooth: hci0: Opcode 0x0c3a failed: -110 [ 444.554307][ T5760] Bluetooth: hci3: unexpected event for opcode 0x0c3a [ 444.761610][T13616] 8021q: adding VLAN 0 to HW filter on device bond4 [ 444.766002][T13616] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2867'. [ 444.794385][T13619] FAULT_INJECTION: forcing a failure. [ 444.794385][T13619] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 444.794408][T13619] CPU: 2 UID: 0 PID: 13619 Comm: syz.3.2868 Not tainted syzkaller #0 PREEMPT(full) [ 444.794421][T13619] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 444.794428][T13619] Call Trace: [ 444.794439][T13619] [ 444.794444][T13619] dump_stack_lvl+0x100/0x190 [ 444.794472][T13619] should_fail_ex.cold+0x5/0xa [ 444.794489][T13619] ? prepare_alloc_pages+0x16d/0x5b0 [ 444.794508][T13619] should_fail_alloc_page+0xeb/0x140 [ 444.794524][T13619] prepare_alloc_pages+0x1f0/0x5b0 [ 444.794541][T13619] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 444.794559][T13619] ? __pfx_get_page_from_freelist+0x10/0x10 [ 444.794578][T13619] ? prepare_alloc_pages+0x1f0/0x5b0 [ 444.794593][T13619] ? is_bpf_text_address+0x94/0x1a0 [ 444.794611][T13619] ? rcu_is_watching+0x13/0xc0 [ 444.794627][T13619] ? __alloc_frozen_pages_noprof+0x56b/0x3300 [ 444.794646][T13619] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 444.794667][T13619] ? stack_trace_save+0x8e/0xc0 [ 444.794678][T13619] ? __pfx_stack_trace_save+0x10/0x10 [ 444.794689][T13619] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 444.794707][T13619] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 444.794724][T13619] ? is_bpf_text_address+0x94/0x1a0 [ 444.794741][T13619] ? kasan_save_track+0x14/0x30 [ 444.794753][T13619] ? __kasan_slab_alloc+0x89/0x90 [ 444.794766][T13619] ? kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 444.794777][T13619] ? alloc_vmap_area+0x1814/0x2bb0 [ 444.794790][T13619] ? __get_vm_area_node+0x1ed/0x350 [ 444.794802][T13619] ? __vmalloc_node_range_noprof+0x268/0x1420 [ 444.794816][T13619] ? __vmalloc_node_noprof+0xad/0xf0 [ 444.794829][T13619] ? copy_process+0x803/0x8370 [ 444.794842][T13619] ? kernel_clone+0x176/0x9d0 [ 444.794854][T13619] ? __do_sys_clone+0xd9/0x120 [ 444.794865][T13619] ? do_syscall_64+0x123/0x790 [ 444.794883][T13619] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.794900][T13619] alloc_pages_bulk_noprof+0x5e1/0x13c0 [ 444.794914][T13619] ? policy_nodemask+0xed/0x4f0 [ 444.794930][T13619] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 444.794949][T13619] __kasan_populate_vmalloc+0xf0/0x210 [ 444.794966][T13619] alloc_vmap_area+0x95d/0x2bb0 [ 444.794983][T13619] ? kasan_save_track+0x14/0x30 [ 444.794997][T13619] ? __kasan_kmalloc+0xaa/0xb0 [ 444.795010][T13619] ? __pfx_alloc_vmap_area+0x10/0x10 [ 444.795023][T13619] ? __get_vm_area_node+0x124/0x350 [ 444.795039][T13619] __get_vm_area_node+0x1ed/0x350 [ 444.795055][T13619] __vmalloc_node_range_noprof+0x268/0x1420 [ 444.795070][T13619] ? kernel_clone+0x176/0x9d0 [ 444.795082][T13619] ? lock_acquire+0x1d1/0x380 [ 444.795093][T13619] ? rcu_lock_acquire.constprop.0+0x7/0x30 [ 444.795105][T13619] ? find_held_lock+0x2b/0x80 [ 444.795121][T13619] ? rcu_read_unlock+0x17/0x60 [ 444.795139][T13619] ? kernel_clone+0x176/0x9d0 [ 444.795154][T13619] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 444.795170][T13619] ? rcu_is_watching+0x13/0xc0 [ 444.795190][T13619] ? trace_kmem_cache_alloc+0xdd/0x100 [ 444.795206][T13619] ? kernel_clone+0x176/0x9d0 [ 444.795220][T13619] __vmalloc_node_noprof+0xad/0xf0 [ 444.795236][T13619] ? kernel_clone+0x176/0x9d0 [ 444.795251][T13619] copy_process+0x803/0x8370 [ 444.795267][T13619] ? __pfx___futex_wait+0x10/0x10 [ 444.795278][T13619] ? __pfx_try_to_wake_up+0x10/0x10 [ 444.795292][T13619] ? futex_hash+0x311/0x400 [ 444.795311][T13619] ? __pfx_copy_process+0x10/0x10 [ 444.795325][T13619] ? futex_wake+0x4ea/0x5e0 [ 444.795347][T13619] kernel_clone+0x176/0x9d0 [ 444.795360][T13619] ? __pfx_kernel_clone+0x10/0x10 [ 444.795380][T13619] __do_sys_clone+0xd9/0x120 [ 444.795392][T13619] ? __pfx___do_sys_clone+0x10/0x10 [ 444.795415][T13619] do_syscall_64+0x123/0x790 [ 444.795431][T13619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.795443][T13619] RIP: 0033:0x7f593679e159 [ 444.795454][T13619] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 444.795464][T13619] RSP: 002b:00007f59376f3fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 444.795480][T13619] RAX: ffffffffffffffda RBX: 00007f5936a25fa0 RCX: 00007f593679e159 [ 444.795488][T13619] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 444.795494][T13619] RBP: 00007f593683503b R08: 0000000000000000 R09: 0000000000000000 [ 444.795501][T13619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 444.795508][T13619] R13: 00007f5936a26038 R14: 00007f5936a25fa0 R15: 00007fff8e2d0918 [ 444.795523][T13619] [ 444.795561][T13619] syz.3.2868: vmalloc error: size 32768, align 0x8000, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 444.795599][T13619] CPU: 2 UID: 0 PID: 13619 Comm: syz.3.2868 Not tainted syzkaller #0 PREEMPT(full) [ 444.795612][T13619] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 444.795619][T13619] Call Trace: [ 444.795624][T13619] [ 444.795628][T13619] dump_stack_lvl+0x100/0x190 [ 444.795647][T13619] warn_alloc.cold+0x9e/0xb2 [ 444.795660][T13619] ? __pfx_warn_alloc+0x10/0x10 [ 444.795677][T13619] ? lockdep_hardirqs_on+0x7d/0x110 [ 444.795693][T13619] ? __get_vm_area_node+0x2f0/0x350 [ 444.795710][T13619] ? __get_vm_area_node+0x22b/0x350 [ 444.795728][T13619] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 444.795743][T13619] ? lock_acquire+0x1d1/0x380 [ 444.795754][T13619] ? rcu_lock_acquire.constprop.0+0x7/0x30 [ 444.795765][T13619] ? find_held_lock+0x2b/0x80 [ 444.795780][T13619] ? rcu_read_unlock+0x17/0x60 [ 444.795798][T13619] ? kernel_clone+0x176/0x9d0 [ 444.795813][T13619] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 444.795829][T13619] ? rcu_is_watching+0x13/0xc0 [ 444.795844][T13619] ? trace_kmem_cache_alloc+0xdd/0x100 [ 444.795860][T13619] ? kernel_clone+0x176/0x9d0 [ 444.795871][T13619] __vmalloc_node_noprof+0xad/0xf0 [ 444.795886][T13619] ? kernel_clone+0x176/0x9d0 [ 444.795900][T13619] copy_process+0x803/0x8370 [ 444.795913][T13619] ? __pfx___futex_wait+0x10/0x10 [ 444.795923][T13619] ? __pfx_try_to_wake_up+0x10/0x10 [ 444.795935][T13619] ? futex_hash+0x311/0x400 [ 444.795953][T13619] ? __pfx_copy_process+0x10/0x10 [ 444.795965][T13619] ? futex_wake+0x4ea/0x5e0 [ 444.795987][T13619] kernel_clone+0x176/0x9d0 [ 444.796001][T13619] ? __pfx_kernel_clone+0x10/0x10 [ 444.796020][T13619] __do_sys_clone+0xd9/0x120 [ 444.796033][T13619] ? __pfx___do_sys_clone+0x10/0x10 [ 444.796056][T13619] do_syscall_64+0x123/0x790 [ 444.796072][T13619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.796083][T13619] RIP: 0033:0x7f593679e159 [ 444.796092][T13619] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 444.796102][T13619] RSP: 002b:00007f59376f3fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 444.796112][T13619] RAX: ffffffffffffffda RBX: 00007f5936a25fa0 RCX: 00007f593679e159 [ 444.796119][T13619] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 444.796126][T13619] RBP: 00007f593683503b R08: 0000000000000000 R09: 0000000000000000 [ 444.796132][T13619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 444.796139][T13619] R13: 00007f5936a26038 R14: 00007f5936a25fa0 R15: 00007fff8e2d0918 [ 444.796153][T13619] [ 444.796158][T13619] Mem-Info: [ 444.796164][T13619] active_anon:8671 inactive_anon:0 isolated_anon:0 [ 444.796164][T13619] active_file:667 inactive_file:49221 isolated_file:0 [ 444.796164][T13619] unevictable:1000 dirty:320 writeback:0 [ 444.796164][T13619] slab_reclaimable:8712 slab_unreclaimable:76951 [ 444.796164][T13619] mapped:25896 shmem:1562 pagetables:1259 [ 444.796164][T13619] sec_pagetables:303 bounce:0 [ 444.796164][T13619] kernel_misc_reclaimable:0 [ 444.796164][T13619] free:460834 free_pcp:8064 free_cma:0 [ 444.796196][T13619] Node 0 active_anon:34676kB inactive_anon:0kB active_file:2668kB inactive_file:196640kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:103584kB dirty:1280kB writeback:0kB shmem:4240kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13752kB pagetables:4860kB sec_pagetables:1212kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 444.796229][T13619] Node 1 active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:244kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2008kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:128kB pagetables:176kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 444.796301][T13619] Node 0 DMA free:15076kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:136kB local_pcp:24kB free_cma:0kB [ 444.796333][T13619] lowmem_reserve[]: 0 1223 1223 1223 1223 [ 444.796354][T13619] Node 0 DMA32 free:178096kB boost:0kB min:27356kB low:34192kB high:41028kB reserved_highatomic:0kB free_highatomic:0kB active_anon:34676kB inactive_anon:0kB active_file:2668kB inactive_file:196640kB unevictable:2000kB writepending:1280kB zspages:0kB present:2080628kB managed:1253288kB mlocked:0kB bounce:0kB free_pcp:32120kB local_pcp:9240kB free_cma:0kB [ 444.796389][T13619] lowmem_reserve[]: 0 0 0 0 0 [ 444.796410][T13619] Node 1 Normal free:1650164kB boost:0kB min:39880kB low:49848kB high:59816kB reserved_highatomic:0kB free_highatomic:0kB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:244kB unevictable:2000kB writepending:0kB zspages:0kB present:2097152kB managed:1781880kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 444.796443][T13619] lowmem_reserve[]: 0 0 0 0 0 [ 444.796462][T13619] Node 0 DMA: 13*4kB (UM) 10*8kB (UM) 8*16kB (UM) 7*32kB (UM) 4*64kB (UM) 4*128kB (UM) 2*256kB (UM) 0*512kB 1*1024kB (M) 0*2048kB 3*4096kB (UE) = 15076kB [ 444.799490][T13619] Node 0 DMA32: 3150*4kB (UME) 1815*8kB (UME) 572*16kB (UME) 489*32kB (UME) 156*64kB (UME) 119*128kB (UME) 34*256kB (ME) 38*512kB (UM) 23*1024kB (UM) 12*2048kB (UM) 6*4096kB (M) = 178000kB [ 444.799585][T13619] Node 1 Normal: 177*4kB (UME) 116*8kB (UME) 97*16kB (UME) 104*32kB (UME) 62*64kB (UME) 36*128kB (UME) 15*256kB (UME) 16*512kB (UME) 9*1024kB (ME) 6*2048kB (ME) 391*4096kB (M) = 1650164kB [ 444.799674][T13619] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 444.799682][T13619] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 444.799691][T13619] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 444.799699][T13619] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 444.799707][T13619] 51446 total pagecache pages [ 444.799712][T13619] 0 pages in swap cache [ 444.799715][T13619] Free swap = 124996kB [ 444.799719][T13619] Total swap = 124996kB [ 444.799724][T13619] 1048443 pages RAM [ 444.799727][T13619] 0 pages HighMem/MovableOnly [ 444.799731][T13619] 285811 pages reserved [ 444.799773][T13619] 0 pages cma reserved [ 445.020525][T13629] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 445.022614][T13629] netlink: 'syz.3.2870': attribute type 1 has an invalid length. [ 445.022657][T13629] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 445.266481][T13630] CIFS: VFS: UNC: path must begin with // or \\ [ 445.266493][T13630] Malformed UNC in devname [ 445.266493][T13630] [ 445.266540][T13630] CIFS: VFS: Malformed UNC in devname [ 445.398377][T13638] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 445.487514][T13643] 8021q: adding VLAN 0 to HW filter on device bond1 [ 445.779453][T10068] usb 7-1: USB disconnect, device number 19 [ 445.806414][T10068] legousbtower 7-1:14.228: LEGO USB Tower #-159 now disconnected [ 446.053810][ T5760] Bluetooth: hci4: unexpected event for opcode 0x0c3a [ 446.363972][T13680] kAFS: unparsable volume name [ 446.423972][T13682] 8021q: adding VLAN 0 to HW filter on device bond2 [ 446.425662][T13685] netlink: 'syz.1.2886': attribute type 1 has an invalid length. [ 446.451841][T13685] 8021q: adding VLAN 0 to HW filter on device bond1 [ 446.460881][T13685] bond1: entered promiscuous mode [ 446.460908][T13685] bond1: entered allmulticast mode [ 446.479398][T13685] macvlan2: entered promiscuous mode [ 446.479420][T13685] macvlan2: entered allmulticast mode [ 446.480569][T13685] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 446.634005][T13693] Set syz1 is full, maxelem 6117 reached [ 446.685647][T13701] dns_resolver: Unsupported content type (234) [ 446.763594][T13703] zram0: detected capacity change from 0 to 8 [ 446.856021][T13709] 8021q: adding VLAN 0 to HW filter on device bond3 [ 446.883524][T13714] netlink: 'syz.0.2898': attribute type 1 has an invalid length. [ 446.908866][T13714] 8021q: adding VLAN 0 to HW filter on device bond4 [ 446.917187][T13714] bond4: entered promiscuous mode [ 446.917204][T13714] bond4: entered allmulticast mode [ 446.921651][T13714] macvlan2: entered promiscuous mode [ 446.921664][T13714] macvlan2: entered allmulticast mode [ 446.922197][T13714] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 446.965996][T13719] netlink: 'syz.3.2899': attribute type 23 has an invalid length. [ 447.064378][ T43] kauditd_printk_skb: 17 callbacks suppressed [ 447.064393][ T43] audit: type=1400 audit(1789385414.445:746): avc: denied { write } for pid=13721 comm="syz.0.2900" name="/" dev="9p" ino=74470903 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 447.070332][ T43] audit: type=1400 audit(1789385414.445:747): avc: denied { write } for pid=13721 comm="syz.0.2900" name="bus" dev="9p" ino=74470937 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 447.078116][ T43] audit: type=1804 audit(1789385414.454:748): pid=13722 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.2900" name="/newroot/145/file0/bus" dev="9p" ino=74470937 res=1 errno=0 [ 447.106697][ T43] audit: type=1400 audit(1789385414.491:749): avc: denied { write } for pid=13721 comm="syz.0.2900" name="/" dev="9p" ino=74470903 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 447.113899][ T43] audit: type=1400 audit(1789385414.491:750): avc: denied { append } for pid=13721 comm="syz.0.2900" path="/145/file0/cpuset.memory_pressure" dev="9p" ino=74470947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 447.116245][ T43] audit: type=1400 audit(1789385414.501:751): avc: denied { map } for pid=13721 comm="syz.0.2900" path="/145/file0/cpuset.memory_pressure" dev="9p" ino=74470947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 447.221272][T13729] FAULT_INJECTION: forcing a failure. [ 447.221272][T13729] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 447.221301][T13729] CPU: 0 UID: 0 PID: 13729 Comm: syz.2.2904 Not tainted syzkaller #0 PREEMPT(full) [ 447.221320][T13729] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 447.221331][T13729] Call Trace: [ 447.221338][T13729] [ 447.221345][T13729] dump_stack_lvl+0x100/0x190 [ 447.221374][T13729] should_fail_ex.cold+0x5/0xa [ 447.221399][T13729] _copy_from_user+0x2e/0xd0 [ 447.221418][T13729] ctl_ioctl+0xf3/0xcc0 [ 447.221454][T13729] ? __pfx_ctl_ioctl+0x10/0x10 [ 447.221502][T13729] ? selinux_file_ioctl+0x13b/0x290 [ 447.221521][T13729] ? selinux_file_ioctl+0xb6/0x290 [ 447.221541][T13729] dm_ctl_ioctl+0x22/0x30 [ 447.221564][T13729] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 447.221588][T13729] __x64_sys_ioctl+0x18e/0x210 [ 447.221608][T13729] do_syscall_64+0x123/0x790 [ 447.221634][T13729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.221652][T13729] RIP: 0033:0x7f7b1df9e159 [ 447.221667][T13729] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 447.221683][T13729] RSP: 002b:00007f7b1ee85028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 447.221700][T13729] RAX: ffffffffffffffda RBX: 00007f7b1e225fa0 RCX: 00007f7b1df9e159 [ 447.221717][T13729] RDX: 0000200000000000 RSI: 00000000c138fd05 RDI: 0000000000000003 [ 447.221727][T13729] RBP: 00007f7b1ee85090 R08: 0000000000000000 R09: 0000000000000000 [ 447.221738][T13729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 447.221748][T13729] R13: 00007f7b1e226038 R14: 00007f7b1e225fa0 R15: 00007ffe66c0c868 [ 447.221772][T13729] [ 447.418902][T13737] netlink: 'syz.0.2903': attribute type 1 has an invalid length. [ 447.453370][T13737] 8021q: adding VLAN 0 to HW filter on device bond5 [ 447.486863][T13737] 8021q: adding VLAN 0 to HW filter on device bond5 [ 447.487024][T13737] bond5: (slave gre1): The slave device specified does not support setting the MAC address [ 447.487452][T13737] bond5: (slave gre1): Error -95 calling set_mac_address [ 447.533569][T13741] gretap1: entered promiscuous mode [ 447.536971][T13741] bond5: (slave gretap1): making interface the new active one [ 447.541586][T13741] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 447.677026][T13747] netlink: 'syz.2.2909': attribute type 13 has an invalid length. [ 447.774860][ T43] audit: type=1400 audit(1789385415.101:752): avc: denied { write } for pid=13752 comm="syz.0.2911" name="/" dev="9p" ino=74470903 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 447.784252][ T43] audit: type=1804 audit(1789385415.110:753): pid=13754 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.2911" name="/newroot/148/file0/bus" dev="9p" ino=74470937 res=1 errno=0 [ 447.791384][ T43] audit: type=1400 audit(1789385415.119:754): avc: denied { write } for pid=13752 comm="syz.0.2911" name="/" dev="9p" ino=74470903 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 447.839720][ T43] audit: type=1400 audit(1789385415.156:755): avc: denied { ioctl } for pid=13755 comm="syz.2.2913" path="socket:[43439]" dev="sockfs" ino=43439 ioctlcmd=0x89e8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 447.988571][T13760] tmpfs: Bad value for 'mpol' [ 448.168261][T13766] device-mapper: ioctl: Unable to change name on mapped device to one that already exists: j [ 448.263918][T13770] Set syz1 is full, maxelem 6117 reached [ 448.510934][T13788] __nla_validate_parse: 6 callbacks suppressed [ 448.510949][T13788] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2926'. [ 448.822132][T13796] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2928'. [ 448.940816][T13811] netlink: 'syz.0.2934': attribute type 23 has an invalid length. [ 449.160932][T13826] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2941'. [ 449.161678][T13826] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 449.173438][T13826] netlink: 'syz.0.2941': attribute type 1 has an invalid length. [ 449.173467][T13826] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 449.173481][T13826] IPv6: NLM_F_CREATE should be set when creating new route [ 449.173492][T13826] IPv6: NLM_F_CREATE should be set when creating new route [ 449.290235][T13835] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 449.314156][ T9] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 449.413511][T13842] FAULT_INJECTION: forcing a failure. [ 449.413511][T13842] name failslab, interval 1, probability 0, space 0, times 0 [ 449.413543][T13842] CPU: 3 UID: 0 PID: 13842 Comm: syz.3.2947 Not tainted syzkaller #0 PREEMPT(full) [ 449.413567][T13842] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 449.413580][T13842] Call Trace: [ 449.413594][T13842] [ 449.413603][T13842] dump_stack_lvl+0x100/0x190 [ 449.413648][T13842] should_fail_ex.cold+0x5/0xa [ 449.413677][T13842] should_failslab+0xc2/0x120 [ 449.413708][T13842] kmem_cache_alloc_noprof+0x92/0x6a0 [ 449.413730][T13842] ? __kernfs_new_node+0xd2/0xa10 [ 449.413764][T13842] __kernfs_new_node+0xd2/0xa10 [ 449.413797][T13842] ? __pfx___kernfs_new_node+0x10/0x10 [ 449.413829][T13842] ? lock_acquire+0x1d1/0x380 [ 449.413850][T13842] ? kernfs_root+0x23/0x2a0 [ 449.413876][T13842] ? find_held_lock+0x2b/0x80 [ 449.413902][T13842] ? kernfs_root+0xee/0x2a0 [ 449.413926][T13842] ? kernfs_root+0xee/0x2a0 [ 449.413956][T13842] kernfs_new_node+0x117/0x150 [ 449.413990][T13842] kernfs_create_link+0xcc/0x240 [ 449.414014][T13842] sysfs_do_create_link_sd+0x90/0x140 [ 449.414042][T13842] sysfs_create_link+0x61/0xc0 [ 449.414068][T13842] driver_sysfs_add+0x112/0x2d0 [ 449.414092][T13842] really_probe+0x146/0xa60 [ 449.414117][T13842] __driver_probe_device+0x210/0x460 [ 449.414139][T13842] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 449.414173][T13842] driver_probe_device+0x4a/0x140 [ 449.414197][T13842] __driver_attach+0x21f/0x5b0 [ 449.414220][T13842] ? __pfx___driver_attach+0x10/0x10 [ 449.414242][T13842] bus_for_each_dev+0x13e/0x1d0 [ 449.414279][T13842] ? __pfx_bus_for_each_dev+0x10/0x10 [ 449.414306][T13842] ? bus_add_driver+0x2b5/0x5b0 [ 449.414335][T13842] bus_add_driver+0x305/0x5b0 [ 449.414358][T13842] driver_register+0x1e2/0x360 [ 449.414381][T13842] ? rcu_is_watching+0x13/0xc0 [ 449.414426][T13842] usb_gadget_register_driver_owner+0x132/0x210 [ 449.414459][T13842] raw_ioctl+0x1a85/0x2b80 [ 449.414486][T13842] ? __pfx_raw_ioctl+0x10/0x10 [ 449.414504][T13842] ? selinux_file_ioctl+0x13b/0x290 [ 449.414528][T13842] ? selinux_file_ioctl+0xb6/0x290 [ 449.414551][T13842] ? __pfx_raw_ioctl+0x10/0x10 [ 449.414570][T13842] __x64_sys_ioctl+0x18e/0x210 [ 449.414593][T13842] do_syscall_64+0x123/0x790 [ 449.414622][T13842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.414643][T13842] RIP: 0033:0x7f593679ddeb [ 449.414660][T13842] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 449.414678][T13842] RSP: 002b:00007f59376f1f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 449.414702][T13842] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f593679ddeb [ 449.414715][T13842] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 449.414727][T13842] RBP: 00007f59376f2fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 449.414739][T13842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 449.414751][T13842] R13: 0000200000000000 R14: 0000000000000000 R15: 0000000000000000 [ 449.414777][T13842] [ 449.414864][T13842] raw-gadget.1 gadget.3: really_probe: driver_sysfs_add failed [ 449.417010][T13842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.417404][T13842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.477082][ T9] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 449.478077][ T9] usb 6-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 449.478101][ T9] usb 6-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 449.478121][ T9] usb 6-1: config 1 interface 0 has no altsetting 0 [ 449.484099][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.484119][ T9] usb 6-1: Product: syz [ 449.484131][ T9] usb 6-1: Manufacturer: syz [ 449.484142][ T9] usb 6-1: SerialNumber: syz [ 449.492382][T13820] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 449.492486][T13820] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 449.521307][T13844] netlink: 'syz.0.2948': attribute type 3 has an invalid length. [ 449.791775][ T9] rtl8150 6-1:1.0: couldn't reset the device [ 449.792025][ T9] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 449.798485][ T9] usb 6-1: USB disconnect, device number 24 [ 450.000154][T13868] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2957'. [ 450.188852][T13876] netlink: 'syz.2.2960': attribute type 1 has an invalid length. [ 450.219201][T13876] 8021q: adding VLAN 0 to HW filter on device bond3 [ 450.223333][T13876] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2960'. [ 450.230717][T13876] bond3: entered promiscuous mode [ 450.230741][T13876] bond3: entered allmulticast mode [ 450.241701][T13876] macvlan2: entered promiscuous mode [ 450.241721][T13876] macvlan2: entered allmulticast mode [ 450.242716][T13876] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 450.275983][T13879] FAULT_INJECTION: forcing a failure. [ 450.275983][T13879] name failslab, interval 1, probability 0, space 0, times 0 [ 450.276013][T13879] CPU: 2 UID: 0 PID: 13879 Comm: syz.3.2961 Not tainted syzkaller #0 PREEMPT(full) [ 450.276034][T13879] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 450.276045][T13879] Call Trace: [ 450.276052][T13879] [ 450.276060][T13879] dump_stack_lvl+0x100/0x190 [ 450.276103][T13879] should_fail_ex.cold+0x5/0xa [ 450.276130][T13879] should_failslab+0xc2/0x120 [ 450.276159][T13879] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 450.276180][T13879] ? sock_alloc_inode+0x26/0x2c0 [ 450.276211][T13879] ? __pfx_sock_alloc_inode+0x10/0x10 [ 450.276236][T13879] sock_alloc_inode+0x26/0x2c0 [ 450.276259][T13879] ? __pfx_sock_alloc_inode+0x10/0x10 [ 450.276282][T13879] alloc_inode+0x68/0x250 [ 450.276301][T13879] sock_alloc+0x44/0x280 [ 450.276325][T13879] do_accept+0xf9/0x530 [ 450.276343][T13879] ? do_raw_spin_lock+0x128/0x260 [ 450.276367][T13879] ? __pfx_do_accept+0x10/0x10 [ 450.276401][T13879] __sys_accept4+0x108/0x200 [ 450.276421][T13879] ? __pfx___sys_accept4+0x10/0x10 [ 450.276440][T13879] ? __pfx_ksys_write+0x10/0x10 [ 450.276464][T13879] __x64_sys_accept4+0x96/0x100 [ 450.276483][T13879] ? lockdep_hardirqs_on+0x7d/0x110 [ 450.276513][T13879] do_syscall_64+0x123/0x790 [ 450.276540][T13879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.276559][T13879] RIP: 0033:0x7f593679e159 [ 450.276576][T13879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 450.276593][T13879] RSP: 002b:00007f59376f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 450.276612][T13879] RAX: ffffffffffffffda RBX: 00007f5936a25fa0 RCX: 00007f593679e159 [ 450.276650][T13879] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 450.276662][T13879] RBP: 00007f59376f4090 R08: 0000000000000000 R09: 0000000000000000 [ 450.276674][T13879] R10: 0000000000080000 R11: 0000000000000246 R12: 0000000000000001 [ 450.276685][T13879] R13: 00007f5936a26038 R14: 00007f5936a25fa0 R15: 00007fff8e2d0918 [ 450.276711][T13879] [ 450.424463][T13895] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2966'. [ 450.468876][T13902] netlink: 'syz.2.2969': attribute type 1 has an invalid length. [ 450.528309][T13903] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2968'. [ 450.603383][T11891] netdevsim netdevsim14 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.603418][T11891] netdevsim netdevsim14 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.622823][T13919] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2973'. [ 450.622843][T13919] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2973'. [ 450.623500][T13922] trusted_key: encrypted_key: hex blob is missing [ 450.645050][T13924] netlink: 'syz.0.2974': attribute type 1 has an invalid length. [ 450.667007][T13924] 8021q: adding VLAN 0 to HW filter on device bond6 [ 450.670241][T13924] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2974'. [ 450.675093][T13924] bond6: entered promiscuous mode [ 450.675109][T13924] bond6: entered allmulticast mode [ 450.683082][T13927] jffs2: notice: (13927) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 450.683402][T13924] macvlan2: entered promiscuous mode [ 450.683417][T13924] macvlan2: entered allmulticast mode [ 450.684452][T13924] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 450.811420][T13932] FAULT_INJECTION: forcing a failure. [ 450.811420][T13932] name failslab, interval 1, probability 0, space 0, times 0 [ 450.811451][T13932] CPU: 0 UID: 0 PID: 13932 Comm: syz.0.2976 Not tainted syzkaller #0 PREEMPT(full) [ 450.811475][T13932] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 450.811488][T13932] Call Trace: [ 450.811496][T13932] [ 450.811504][T13932] dump_stack_lvl+0x100/0x190 [ 450.811542][T13932] should_fail_ex.cold+0x5/0xa [ 450.811570][T13932] should_failslab+0xc2/0x120 [ 450.811594][T13932] __kmalloc_cache_noprof+0x91/0x6d0 [ 450.811618][T13932] ? __kasan_kmalloc+0xaa/0xb0 [ 450.811640][T13932] ? shmem_init_fs_context+0x49/0x2f0 [ 450.811667][T13932] shmem_init_fs_context+0x49/0x2f0 [ 450.811691][T13932] alloc_fs_context+0x60c/0xf40 [ 450.811721][T13932] path_mount+0xdbd/0x24c0 [ 450.811750][T13932] ? __pfx_path_mount+0x10/0x10 [ 450.811775][T13932] ? lockdep_hardirqs_on+0x7d/0x110 [ 450.811802][T13932] ? putname+0xb1/0x110 [ 450.811821][T13932] ? kmem_cache_free+0x127/0x6c0 [ 450.811855][T13932] ? __x64_sys_mount+0x293/0x310 [ 450.811881][T13932] __x64_sys_mount+0x293/0x310 [ 450.811911][T13932] ? __pfx___x64_sys_mount+0x10/0x10 [ 450.811944][T13932] do_syscall_64+0x123/0x790 [ 450.811972][T13932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.811990][T13932] RIP: 0033:0x7f72b779e159 [ 450.812007][T13932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 450.812023][T13932] RSP: 002b:00007f72b860c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 450.812044][T13932] RAX: ffffffffffffffda RBX: 00007f72b7a25fa0 RCX: 00007f72b779e159 [ 450.812056][T13932] RDX: 00002000000001c0 RSI: 0000200000000040 RDI: 0000000000000000 [ 450.812069][T13932] RBP: 00007f72b783503b R08: 0000200000000200 R09: 0000000000000000 [ 450.812079][T13932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 450.812090][T13932] R13: 00007f72b7a26038 R14: 00007f72b7a25fa0 R15: 00007ffdfc2523a8 [ 450.812115][T13932] [ 450.870615][T13933] nvme_fabrics: unknown parameter or missing value 'Jū' in ctrl creation request [ 451.285369][T13945] SELinux: policydb magic number 0x4 does not match expected magic number 0xf97cff8c [ 451.289229][T13945] SELinux: failed to load policy [ 451.513796][T10068] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 451.531141][T13953] jffs2: notice: (13953) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 451.609144][T13955] nvme_fabrics: unknown parameter or missing value 'Jū' in ctrl creation request [ 451.687258][T10068] usb 5-1: Using ep0 maxpacket: 16 [ 451.688461][T10068] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 451.689380][T10068] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 451.689397][T10068] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 451.689408][T10068] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 451.689428][T10068] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.694220][T10068] usb 5-1: config 0 descriptor?? [ 451.824887][T13961] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=242888304 (15544851456 ns) > initial count (9774208704 ns). Using initial count to start timer. [ 452.149344][T10068] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:045E:07DA.0002/input/input7 [ 452.179888][T10068] microsoft 0003:045E:07DA.0002: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 452.286562][T13979] jffs2: notice: (13979) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 452.357738][T13985] nvme_fabrics: unknown parameter or missing value 'Jū' in ctrl creation request [ 452.504533][ T43] kauditd_printk_skb: 17 callbacks suppressed [ 452.504547][ T43] audit: type=1400 audit(1789385419.467:773): avc: denied { write } for pid=13989 comm="syz.1.2998" name="/" dev="9p" ino=74470903 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 452.506853][ T43] audit: type=1804 audit(1789385419.467:774): pid=13990 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.1.2998" name="/newroot/125/file0/bus" dev="9p" ino=74470937 res=1 errno=0 [ 452.766329][T14016] xt_hashlimit: size too large, truncated to 1048576 [ 452.766342][T14016] xt_hashlimit: max too large, truncated to 1048576 [ 452.766349][T14016] xt_hashlimit: Unknown mode mask 52C95688, kernel too old? [ 452.807996][ T43] audit: type=1400 audit(1789385419.744:775): avc: denied { write } for pid=14017 comm="syz.3.3009" name="/" dev="9p" ino=74470903 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 452.809409][ T43] audit: type=1804 audit(1789385419.744:776): pid=14018 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.3.3009" name="/newroot/94/file0/bus" dev="9p" ino=74470937 res=1 errno=0 [ 452.836014][T14022] FAULT_INJECTION: forcing a failure. [ 452.836014][T14022] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 452.836043][T14022] CPU: 2 UID: 0 PID: 14022 Comm: syz.1.3011 Not tainted syzkaller #0 PREEMPT(full) [ 452.836064][T14022] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 452.836075][T14022] Call Trace: [ 452.836081][T14022] [ 452.836088][T14022] dump_stack_lvl+0x100/0x190 [ 452.836119][T14022] should_fail_ex.cold+0x5/0xa [ 452.836144][T14022] _copy_to_user+0x32/0xd0 [ 452.836166][T14022] ctl_ioctl+0x17b/0xcc0 [ 452.836195][T14022] ? __pfx_ctl_ioctl+0x10/0x10 [ 452.836244][T14022] ? selinux_file_ioctl+0x13b/0x290 [ 452.836264][T14022] ? selinux_file_ioctl+0xb6/0x290 [ 452.836286][T14022] dm_ctl_ioctl+0x22/0x30 [ 452.836310][T14022] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 452.836334][T14022] __x64_sys_ioctl+0x18e/0x210 [ 452.836355][T14022] do_syscall_64+0x123/0x790 [ 452.836382][T14022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.836400][T14022] RIP: 0033:0x7f96a159e159 [ 452.836415][T14022] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 452.836433][T14022] RSP: 002b:00007f96a245a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 452.836450][T14022] RAX: ffffffffffffffda RBX: 00007f96a1825fa0 RCX: 00007f96a159e159 [ 452.836463][T14022] RDX: 0000200000000000 RSI: 00000000c138fd05 RDI: 0000000000000003 [ 452.836478][T14022] RBP: 00007f96a245a090 R08: 0000000000000000 R09: 0000000000000000 [ 452.836519][T14022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 452.836545][T14022] R13: 00007f96a1826038 R14: 00007f96a1825fa0 R15: 00007ffee3a2a6f8 [ 452.836568][T14022] [ 452.893582][T14026] openvswitch: netlink: Flow key attr not present in new flow. [ 452.938622][T14030] jffs2: notice: (14030) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 452.943160][ T43] audit: type=1400 audit(1789385419.864:777): avc: denied { write } for pid=14029 comm="syz.2.3016" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 453.119170][ T43] audit: type=1400 audit(1789385420.039:778): avc: denied { write } for pid=14048 comm="syz.1.3022" name="/" dev="9p" ino=74470903 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 453.122904][ T43] audit: type=1804 audit(1789385420.039:779): pid=14049 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.1.3022" name="/newroot/133/file0/bus" dev="9p" ino=74470937 res=1 errno=0 [ 453.294971][T14060] jffs2: notice: (14060) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 453.299213][ T43] audit: type=1400 audit(1789385420.196:780): avc: denied { write } for pid=14059 comm="syz.1.3027" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 453.507463][ T5895] usb 5-1: reset high-speed USB device number 13 using dummy_hcd [ 453.562462][ T43] audit: type=1400 audit(1789385420.445:781): avc: denied { write } for pid=14071 comm="syz.3.3032" name="/" dev="9p" ino=74470903 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 453.564525][ T43] audit: type=1804 audit(1789385420.445:782): pid=14072 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.3.3032" name="/newroot/101/file0/bus" dev="9p" ino=74470937 res=1 errno=0 [ 453.632147][T14076] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 453.645972][T14076] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888108819140 pfn:0x108818 [ 453.646000][T14076] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 453.646015][T14076] memcg:ffff88810881fe81 [ 453.646022][T14076] flags: 0x57ff00000000240(workingset|head|node=1|zone=2|lastcpupid=0x7ff) [ 453.646042][T14076] page_type: f5(slab) [ 453.646058][T14076] raw: 057ff00000000240 ffff88801cb9c8c0 ffffea0004248010 ffffea0004221210 [ 453.646076][T14076] raw: ffff888108819140 0000000200160000 00000000f5000000 ffff88810881fe81 [ 453.647046][T14076] head: 057ff00000000240 ffff88801cb9c8c0 ffffea0004248010 ffffea0004221210 [ 453.647068][T14076] head: ffff888108819140 0000000200160000 00000000f5000000 ffff88810881fe81 [ 453.647087][T14076] head: 057ff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 453.647105][T14076] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 453.647117][T14076] page dumped because: unmovable page [ 453.647127][T14076] page_owner tracks the page as allocated [ 453.647133][T14076] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5758, tgid 5758 (syz-executor), ts 318767273511 [ 453.648281][T14076] post_alloc_hook+0xfd/0x120 [ 453.648315][T14076] get_page_from_freelist+0x110d/0x35d0 [ 453.648344][T14076] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 453.648374][T14076] new_slab+0xa9/0x6e0 [ 453.648400][T14076] refill_objects+0xe3/0x410 [ 453.648428][T14076] __pcs_replace_empty_main+0x35e/0x650 [ 453.648455][T14076] kmem_cache_alloc_lru_noprof+0x4c0/0x6a0 [ 453.648475][T14076] sock_alloc_inode+0x26/0x2c0 [ 453.648500][T14076] alloc_inode+0x68/0x250 [ 453.648517][T14076] sock_alloc+0x44/0x280 [ 453.648538][T14076] __sock_create+0xc2/0x860 [ 453.648564][T14076] __sys_socket+0x14d/0x260 [ 453.648579][T14076] __x64_sys_socket+0x72/0xb0 [ 453.648595][T14076] do_syscall_64+0x123/0x790 [ 453.648650][T14076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.648674][T14076] page last free pid 11030 tgid 11029 ts 311730830600 stack trace: [ 453.648689][T14076] __free_pages_ok+0x73b/0x1050 [ 453.648712][T14076] hash_ip4_destroy+0x1dd/0x300 [ 453.648734][T14076] ip_set_create+0xc65/0x1510 [ 453.648761][T14076] nfnetlink_rcv_msg+0x9d5/0x11e0 [ 453.648786][T14076] netlink_rcv_skb+0x159/0x420 [ 453.648805][T14076] nfnetlink_rcv+0x1b3/0x440 [ 453.648827][T14076] netlink_unicast+0x585/0x850 [ 453.648845][T14076] netlink_sendmsg+0x8b0/0xda0 [ 453.648864][T14076] ____sys_sendmsg+0xa4d/0xbe0 [ 453.648890][T14076] ___sys_sendmsg+0x190/0x1e0 [ 453.648916][T14076] __sys_sendmsg+0x160/0x210 [ 453.648937][T14076] do_syscall_64+0x123/0x790 [ 453.648959][T14076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.764830][T14082] FAULT_INJECTION: forcing a failure. [ 453.764830][T14082] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 453.764863][T14082] CPU: 0 UID: 0 PID: 14082 Comm: syz.3.3034 Not tainted syzkaller #0 PREEMPT(full) [ 453.764886][T14082] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 453.764898][T14082] Call Trace: [ 453.764905][T14082] [ 453.764914][T14082] dump_stack_lvl+0x100/0x190 [ 453.764950][T14082] should_fail_ex.cold+0x5/0xa [ 453.764976][T14082] ? prepare_alloc_pages+0x16d/0x5b0 [ 453.765005][T14082] should_fail_alloc_page+0xeb/0x140 [ 453.765033][T14082] prepare_alloc_pages+0x1f0/0x5b0 [ 453.765063][T14082] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 453.765099][T14082] ? rcu_is_watching+0x13/0xc0 [ 453.765127][T14082] ? trace_hrtimer_start+0x77/0x220 [ 453.765154][T14082] ? hrtimer_start_range_ns_common+0x778/0x16f0 [ 453.765210][T14082] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 453.765248][T14082] ? rcu_is_watching+0x13/0xc0 [ 453.765276][T14082] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 453.765303][T14082] ? lockdep_hardirqs_on+0x7d/0x110 [ 453.765331][T14082] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 453.765357][T14082] ? rcu_is_watching+0x13/0xc0 [ 453.765383][T14082] ? trace_sched_exit_tp+0x120/0x160 [ 453.765421][T14082] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 453.765447][T14082] ? policy_nodemask+0xed/0x4f0 [ 453.765477][T14082] alloc_pages_mpol+0x201/0x550 [ 453.765504][T14082] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 453.765528][T14082] ? preempt_schedule_thunk+0x16/0x40 [ 453.765560][T14082] ? preempt_schedule_common+0x3c/0xb0 [ 453.765590][T14082] folio_alloc_mpol_noprof+0x36/0x260 [ 453.765622][T14082] vma_alloc_folio_noprof+0xed/0x1d0 [ 453.765661][T14082] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 453.765693][T14082] ? __pfx_try_to_wake_up+0x10/0x10 [ 453.765717][T14082] ? futex_hash+0x311/0x400 [ 453.765748][T14082] do_anonymous_page+0xac9/0x2050 [ 453.765786][T14082] ? __pfx_do_anonymous_page+0x10/0x10 [ 453.765816][T14082] ? rcu_read_unlock+0x2d/0xb0 [ 453.765844][T14082] ? rcu_read_unlock+0x2d/0xb0 [ 453.765873][T14082] ? __pte_offset_map+0x179/0x310 [ 453.765899][T14082] __handle_mm_fault+0x1ff3/0x2f60 [ 453.765931][T14082] ? lock_vma_under_rcu+0x11d/0x590 [ 453.765959][T14082] ? __pfx___handle_mm_fault+0x10/0x10 [ 453.765992][T14082] ? lock_vma_under_rcu+0x17c/0x590 [ 453.766034][T14082] handle_mm_fault+0x363/0xa20 [ 453.766067][T14082] do_user_addr_fault+0x59c/0x12f0 [ 453.766100][T14082] exc_page_fault+0x6f/0xd0 [ 453.766127][T14082] asm_exc_page_fault+0x26/0x30 [ 453.766146][T14082] RIP: 0033:0x7f59366659e6 [ 453.766164][T14082] Code: fc ff ff 90 41 57 31 c0 41 56 49 89 fe 48 8d 3d 28 01 1d 00 41 55 49 89 d5 41 54 49 89 f4 48 89 d6 55 53 48 81 ec 88 20 00 00 <48> 89 0c 24 4c 89 44 24 08 e8 cc ca fe ff 4d 85 ed 0f 84 2b 0a 00 [ 453.766184][T14082] RSP: 002b:00007f59376f1f60 EFLAGS: 00010206 [ 453.766203][T14082] RAX: 0000000000000000 RBX: 00007f5936a25fa0 RCX: 0000000000000000 [ 453.766216][T14082] RDX: 0000200000000000 RSI: 0000200000000000 RDI: 00007f5936835af8 [ 453.766231][T14082] RBP: 00007f593683503b R08: 00007f5936652850 R09: 0000000000000000 [ 453.766244][T14082] R10: 0000000000000000 R11: 0000200000000000 R12: 0000000000000039 [ 453.766257][T14082] R13: 0000200000000000 R14: 0000000000000000 R15: 00007fff8e2d0918 [ 453.766284][T14082] [ 453.771595][T14082] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 453.820455][T14087] jffs2: notice: (14087) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 453.958267][T14101] 8021q: adding VLAN 0 to HW filter on device bond2 [ 454.015277][T14104] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888108819140 pfn:0x108818 [ 454.015347][T14104] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 454.015362][T14104] memcg:ffff88810881fe81 [ 454.015369][T14104] flags: 0x57ff00000000240(workingset|head|node=1|zone=2|lastcpupid=0x7ff) [ 454.015387][T14104] page_type: f5(slab) [ 454.015403][T14104] raw: 057ff00000000240 ffff88801cb9c8c0 ffffea0004248010 ffffea0004221210 [ 454.015421][T14104] raw: ffff888108819140 0000000200160000 00000000f5000000 ffff88810881fe81 [ 454.015437][T14104] head: 057ff00000000240 ffff88801cb9c8c0 ffffea0004248010 ffffea0004221210 [ 454.015453][T14104] head: ffff888108819140 0000000200160000 00000000f5000000 ffff88810881fe81 [ 454.022600][T14104] head: 057ff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 454.022625][T14104] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 454.022637][T14104] page dumped because: unmovable page [ 454.022647][T14104] page_owner tracks the page as allocated [ 454.022718][T14104] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5758, tgid 5758 (syz-executor), ts 318767273511 [ 454.022757][T14104] post_alloc_hook+0xfd/0x120 [ 454.022787][T14104] get_page_from_freelist+0x110d/0x35d0 [ 454.022808][T14104] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 454.022833][T14104] new_slab+0xa9/0x6e0 [ 454.022921][T14104] refill_objects+0xe3/0x410 [ 454.022953][T14104] __pcs_replace_empty_main+0x35e/0x650 [ 454.022980][T14104] kmem_cache_alloc_lru_noprof+0x4c0/0x6a0 [ 454.022998][T14104] sock_alloc_inode+0x26/0x2c0 [ 454.023019][T14104] alloc_inode+0x68/0x250 [ 454.023033][T14104] sock_alloc+0x44/0x280 [ 454.023117][T14104] __sock_create+0xc2/0x860 [ 454.023145][T14104] __sys_socket+0x14d/0x260 [ 454.023164][T14104] __x64_sys_socket+0x72/0xb0 [ 454.023181][T14104] do_syscall_64+0x123/0x790 [ 454.023208][T14104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.023228][T14104] page last free pid 11030 tgid 11029 ts 311730830600 stack trace: [ 454.023307][T14104] __free_pages_ok+0x73b/0x1050 [ 454.023339][T14104] hash_ip4_destroy+0x1dd/0x300 [ 454.023367][T14104] ip_set_create+0xc65/0x1510 [ 454.023396][T14104] nfnetlink_rcv_msg+0x9d5/0x11e0 [ 454.023419][T14104] netlink_rcv_skb+0x159/0x420 [ 454.023502][T14104] nfnetlink_rcv+0x1b3/0x440 [ 454.023527][T14104] netlink_unicast+0x585/0x850 [ 454.023547][T14104] netlink_sendmsg+0x8b0/0xda0 [ 454.023568][T14104] ____sys_sendmsg+0xa4d/0xbe0 [ 454.023591][T14104] ___sys_sendmsg+0x190/0x1e0 [ 454.023618][T14104] __sys_sendmsg+0x160/0x210 [ 454.027846][ T5646] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 454.028026][T14104] do_syscall_64+0x123/0x790 [ 454.028059][T14104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.167259][ T5646] usb 8-1: device descriptor read/64, error -71 [ 454.196497][T14115] sock: sock_set_timeout: `syz.2.3048' (pid 14115) tries to set negative timeout [ 454.307231][T14129] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888108819140 pfn:0x108818 [ 454.307252][T14129] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 454.307260][T14129] memcg:ffff88810881fe81 [ 454.307266][T14129] flags: 0x57ff00000000240(workingset|head|node=1|zone=2|lastcpupid=0x7ff) [ 454.307276][T14129] page_type: f5(slab) [ 454.307286][T14129] raw: 057ff00000000240 ffff88801cb9c8c0 ffffea0004248010 ffffea0004221210 [ 454.307296][T14129] raw: ffff888108819140 0000000200160000 00000000f5000000 ffff88810881fe81 [ 454.307306][T14129] head: 057ff00000000240 ffff88801cb9c8c0 ffffea0004248010 ffffea0004221210 [ 454.307318][T14129] head: ffff888108819140 0000000200160000 00000000f5000000 ffff88810881fe81 [ 454.307329][T14129] head: 057ff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 454.307339][T14129] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 454.307347][T14129] page dumped because: unmovable page [ 454.307352][T14129] page_owner tracks the page as allocated [ 454.307357][T14129] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5758, tgid 5758 (syz-executor), ts 318767273511 [ 454.307376][T14129] post_alloc_hook+0xfd/0x120 [ 454.307395][T14129] get_page_from_freelist+0x110d/0x35d0 [ 454.307412][T14129] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 454.307429][T14129] new_slab+0xa9/0x6e0 [ 454.307445][T14129] refill_objects+0xe3/0x410 [ 454.307461][T14129] __pcs_replace_empty_main+0x35e/0x650 [ 454.307477][T14129] kmem_cache_alloc_lru_noprof+0x4c0/0x6a0 [ 454.307490][T14129] sock_alloc_inode+0x26/0x2c0 [ 454.307505][T14129] alloc_inode+0x68/0x250 [ 454.307515][T14129] sock_alloc+0x44/0x280 [ 454.307528][T14129] __sock_create+0xc2/0x860 [ 454.307543][T14129] __sys_socket+0x14d/0x260 [ 454.307552][T14129] __x64_sys_socket+0x72/0xb0 [ 454.307561][T14129] do_syscall_64+0x123/0x790 [ 454.307575][T14129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.307586][T14129] page last free pid 11030 tgid 11029 ts 311730830600 stack trace: [ 454.307594][T14129] __free_pages_ok+0x73b/0x1050 [ 454.307608][T14129] hash_ip4_destroy+0x1dd/0x300 [ 454.307622][T14129] ip_set_create+0xc65/0x1510 [ 454.307637][T14129] nfnetlink_rcv_msg+0x9d5/0x11e0 [ 454.307660][T14129] netlink_rcv_skb+0x159/0x420 [ 454.307673][T14129] nfnetlink_rcv+0x1b3/0x440 [ 454.307688][T14129] netlink_unicast+0x585/0x850 [ 454.307700][T14129] netlink_sendmsg+0x8b0/0xda0 [ 454.307712][T14129] ____sys_sendmsg+0xa4d/0xbe0 [ 454.307727][T14129] ___sys_sendmsg+0x190/0x1e0 [ 454.307743][T14129] __sys_sendmsg+0x160/0x210 [ 454.307757][T14129] do_syscall_64+0x123/0x790 [ 454.307771][T14129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.481601][ T5646] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 454.552141][T14145] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 454.607842][T14150] netlink: 'syz.1.3061': attribute type 1 has an invalid length. [ 454.629002][T14150] 8021q: adding VLAN 0 to HW filter on device bond3 [ 454.633869][ T5646] usb 8-1: device descriptor read/64, error -71 [ 454.656624][T14150] bond3: (slave geneve2): making interface the new active one [ 454.658022][T14150] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 454.700198][T14157] FAULT_INJECTION: forcing a failure. [ 454.700198][T14157] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 454.700228][T14157] CPU: 2 UID: 0 PID: 14157 Comm: syz.2.3064 Not tainted syzkaller #0 PREEMPT(full) [ 454.700248][T14157] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 454.700259][T14157] Call Trace: [ 454.700265][T14157] [ 454.700273][T14157] dump_stack_lvl+0x100/0x190 [ 454.700304][T14157] should_fail_ex.cold+0x5/0xa [ 454.700330][T14157] _copy_from_user+0x2e/0xd0 [ 454.700350][T14157] copy_msghdr_from_user+0x9f/0x4c0 [ 454.700380][T14157] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 454.700413][T14157] ? __lock_acquire+0x5c0/0x1f40 [ 454.700438][T14157] ___sys_recvmsg+0xdd/0x1a0 [ 454.700466][T14157] ? __pfx____sys_recvmsg+0x10/0x10 [ 454.700494][T14157] ? lock_acquire+0x1d1/0x380 [ 454.700532][T14157] __x64_sys_recvmsg+0x19a/0x260 [ 454.700557][T14157] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 454.700593][T14157] do_syscall_64+0x123/0x790 [ 454.700648][T14157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.700667][T14157] RIP: 0033:0x7f7b1df9e159 [ 454.700682][T14157] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 454.700698][T14157] RSP: 002b:00007f7b1ee85028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 454.700716][T14157] RAX: ffffffffffffffda RBX: 00007f7b1e225fa0 RCX: 00007f7b1df9e159 [ 454.700729][T14157] RDX: 0000000000012042 RSI: 00002000000015c0 RDI: 0000000000000003 [ 454.700740][T14157] RBP: 00007f7b1ee85090 R08: 0000000000000000 R09: 0000000000000000 [ 454.700757][T14157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 454.700768][T14157] R13: 00007f7b1e226038 R14: 00007f7b1e225fa0 R15: 00007ffe66c0c868 [ 454.700794][T14157] [ 454.765024][ T5646] usb usb8-port1: attempt power cycle [ 454.922635][T14171] key id 000004d2 not found [ 454.978791][T14176] block2mtd: device name too long [ 454.991672][T14173] __nla_validate_parse: 3 callbacks suppressed [ 454.991688][T14173] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3071'. [ 455.153117][ T5646] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 455.153595][T14200] block2mtd: device name too long [ 455.175990][ T5646] usb 8-1: device descriptor read/8, error -71 [ 455.228343][ T5894] usb 5-1: USB disconnect, device number 13 [ 455.270337][T14211] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3082'. [ 455.431070][T14224] block2mtd: device name too long [ 455.434770][ T5646] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 455.444351][T14221] 8021q: adding VLAN 0 to HW filter on device bond7 [ 455.456160][T14221] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3089'. [ 455.459407][ T5646] usb 8-1: device descriptor read/8, error -71 [ 455.575850][ T5646] usb usb8-port1: unable to enumerate USB device [ 455.672368][T14235] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3094'. [ 455.788490][T14247] block2mtd: device name too long [ 455.839712][T14254] jffs2: notice: (14254) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 455.850606][T14249] 8021q: adding VLAN 0 to HW filter on device bond4 [ 455.853268][T14249] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3100'. [ 455.902517][T14258] syzkaller1: entered promiscuous mode [ 455.902537][T14258] syzkaller1: entered allmulticast mode [ 455.916109][T14261] nvme_fabrics: unknown parameter or missing value 'Jū' in ctrl creation request [ 455.970936][T14265] random: crng reseeded on system resumption [ 456.010506][T14268] netlink: 'syz.2.3106': attribute type 16 has an invalid length. [ 456.010520][T14268] netlink: 'syz.2.3106': attribute type 17 has an invalid length. [ 456.018396][T14268] tipc: Resetting bearer [ 456.039057][T14268] bond2: left promiscuous mode [ 456.039081][T14268] bond2: left allmulticast mode [ 456.040913][T14268] 8021q: adding VLAN 0 to HW filter on device bond2 [ 456.048732][T14268] bridge1: left allmulticast mode [ 456.049592][T14268] bond3: left promiscuous mode [ 456.049606][T14268] bond3: left allmulticast mode [ 456.049834][T14268] 8021q: adding VLAN 0 to HW filter on device bond3 [ 456.127705][T14272] FAULT_INJECTION: forcing a failure. [ 456.127705][T14272] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 456.127736][T14272] CPU: 0 UID: 0 PID: 14272 Comm: syz.0.3107 Not tainted syzkaller #0 PREEMPT(full) [ 456.127756][T14272] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 456.127767][T14272] Call Trace: [ 456.127774][T14272] [ 456.127781][T14272] dump_stack_lvl+0x100/0x190 [ 456.127812][T14272] should_fail_ex.cold+0x5/0xa [ 456.127834][T14272] ? prepare_alloc_pages+0x16d/0x5b0 [ 456.127857][T14272] should_fail_alloc_page+0xeb/0x140 [ 456.127880][T14272] prepare_alloc_pages+0x1f0/0x5b0 [ 456.127906][T14272] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 456.127962][T14272] ? lock_acquire+0x1d1/0x380 [ 456.127979][T14272] ? is_bpf_text_address+0x25/0x1a0 [ 456.128004][T14272] ? find_held_lock+0x2b/0x80 [ 456.128028][T14272] ? is_bpf_text_address+0x8a/0x1a0 [ 456.128050][T14272] ? is_bpf_text_address+0x8a/0x1a0 [ 456.128073][T14272] ? bpf_ksym_find+0x128/0x1c0 [ 456.128097][T14272] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 456.128126][T14272] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 456.128153][T14272] ? is_bpf_text_address+0x94/0x1a0 [ 456.128184][T14272] ? __kernel_text_address+0xd/0x30 [ 456.128209][T14272] ? unwind_get_return_address+0x59/0xa0 [ 456.128234][T14272] ? arch_stack_walk+0xa6/0xf0 [ 456.128267][T14272] ? __pfx_stack_trace_save+0x10/0x10 [ 456.128286][T14272] ? stack_depot_save_flags+0x27/0x9f0 [ 456.128311][T14272] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 456.128332][T14272] ? policy_nodemask+0xed/0x4f0 [ 456.128358][T14272] alloc_pages_mpol+0x201/0x550 [ 456.128383][T14272] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 456.128413][T14272] alloc_pages_noprof+0x1a/0x160 [ 456.128437][T14272] get_free_pages_noprof+0x10/0xb0 [ 456.128457][T14272] __kasan_populate_vmalloc+0xa0/0x210 [ 456.128482][T14272] alloc_vmap_area+0x95d/0x2bb0 [ 456.128510][T14272] ? kasan_save_track+0x14/0x30 [ 456.128530][T14272] ? __kasan_kmalloc+0xaa/0xb0 [ 456.128548][T14272] ? __pfx_alloc_vmap_area+0x10/0x10 [ 456.128569][T14272] ? __get_vm_area_node+0x124/0x350 [ 456.128614][T14272] __get_vm_area_node+0x1ed/0x350 [ 456.128643][T14272] __vmalloc_node_range_noprof+0x268/0x1420 [ 456.128667][T14272] ? bpf_check+0x17fb/0xa980 [ 456.128695][T14272] ? bpf_check+0x17fb/0xa980 [ 456.128722][T14272] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 456.128751][T14272] ? avc_has_perm_noaudit+0x145/0x3b0 [ 456.128778][T14272] ? bpf_check+0x17fb/0xa980 [ 456.128800][T14272] __vmalloc_node_noprof+0xad/0xf0 [ 456.128820][T14272] ? bpf_check+0x17fb/0xa980 [ 456.128845][T14272] __vmalloc_noprof+0xa3/0x120 [ 456.128868][T14272] ? __pfx___vmalloc_noprof+0x10/0x10 [ 456.128895][T14272] ? bpf_lsm_bpf_prog_load+0x9/0x10 [ 456.128918][T14272] ? security_bpf_prog_load+0x10f/0x2f0 [ 456.128935][T14272] ? bpf_vlog_init+0x118/0x150 [ 456.128961][T14272] bpf_check+0x17fb/0xa980 [ 456.128984][T14272] ? __css_rstat_updated+0x1ce/0x590 [ 456.129005][T14272] ? __lock_acquire+0x5c0/0x1f40 [ 456.129025][T14272] ? __pfx___css_rstat_updated+0x10/0x10 [ 456.129051][T14272] ? __lock_acquire+0x5c0/0x1f40 [ 456.129077][T14272] ? __pfx_bpf_check+0x10/0x10 [ 456.129100][T14272] ? lock_acquire+0x1d1/0x380 [ 456.129118][T14272] ? bpf_prog_load+0x1a09/0x2a80 [ 456.129140][T14272] ? find_held_lock+0x2b/0x80 [ 456.129161][T14272] ? bpf_prog_load+0x1a09/0x2a80 [ 456.129194][T14272] ? __asan_memset+0x23/0x50 [ 456.129216][T14272] ? bpf_prog_load+0x1ac3/0x2a80 [ 456.129239][T14272] bpf_prog_load+0x1ac3/0x2a80 [ 456.129265][T14272] ? __pfx_bpf_prog_load+0x10/0x10 [ 456.129309][T14272] __sys_bpf+0x1f46/0x4a30 [ 456.129333][T14272] ? __pfx___sys_bpf+0x10/0x10 [ 456.129350][T14272] ? find_held_lock+0x2b/0x80 [ 456.129372][T14272] ? get_pid_task+0xfc/0x250 [ 456.129393][T14272] ? get_pid_task+0xfc/0x250 [ 456.129424][T14272] ? find_held_lock+0x2b/0x80 [ 456.129453][T14272] ? rcu_read_lock_any_held+0x6a/0x90 [ 456.129477][T14272] ? find_held_lock+0x2b/0x80 [ 456.129499][T14272] ? ksys_write+0x190/0x250 [ 456.129517][T14272] ? ksys_write+0x190/0x250 [ 456.129535][T14272] ? lock_acquire+0x1d1/0x380 [ 456.129569][T14272] ? fput+0x7c/0x100 [ 456.129590][T14272] ? ksys_write+0x1ac/0x250 [ 456.129608][T14272] ? __x64_sys_bpf+0xce/0x140 [ 456.129625][T14272] __x64_sys_bpf+0xce/0x140 [ 456.129644][T14272] ? do_syscall_64+0xae/0x790 [ 456.129670][T14272] do_syscall_64+0x123/0x790 [ 456.129695][T14272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.129711][T14272] RIP: 0033:0x7f72b779e159 [ 456.129726][T14272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 456.129743][T14272] RSP: 002b:00007f72b860c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 456.129762][T14272] RAX: ffffffffffffffda RBX: 00007f72b7a25fa0 RCX: 00007f72b779e159 [ 456.129774][T14272] RDX: 0000000000000094 RSI: 0000200000000840 RDI: 0000000000000005 [ 456.129785][T14272] RBP: 00007f72b860c090 R08: 0000000000000000 R09: 0000000000000000 [ 456.129796][T14272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 456.129807][T14272] R13: 00007f72b7a26038 R14: 00007f72b7a25fa0 R15: 00007ffdfc2523a8 [ 456.129829][T14272] [ 456.137793][T14272] syz.0.3107: vmalloc error: size 2040, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 456.137855][T14272] CPU: 0 UID: 0 PID: 14272 Comm: syz.0.3107 Not tainted syzkaller #0 PREEMPT(full) [ 456.137874][T14272] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 456.137884][T14272] Call Trace: [ 456.137890][T14272] [ 456.137898][T14272] dump_stack_lvl+0x100/0x190 [ 456.137928][T14272] warn_alloc.cold+0x9e/0xb2 [ 456.137950][T14272] ? __pfx_warn_alloc+0x10/0x10 [ 456.137974][T14272] ? lockdep_hardirqs_on+0x7d/0x110 [ 456.138000][T14272] ? __get_vm_area_node+0x2f0/0x350 [ 456.138027][T14272] ? __get_vm_area_node+0x22b/0x350 [ 456.138054][T14272] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 456.138084][T14272] ? bpf_check+0x17fb/0xa980 [ 456.138111][T14272] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 456.138139][T14272] ? avc_has_perm_noaudit+0x145/0x3b0 [ 456.138166][T14272] ? bpf_check+0x17fb/0xa980 [ 456.138194][T14272] __vmalloc_node_noprof+0xad/0xf0 [ 456.138215][T14272] ? bpf_check+0x17fb/0xa980 [ 456.138240][T14272] __vmalloc_noprof+0xa3/0x120 [ 456.138262][T14272] ? __pfx___vmalloc_noprof+0x10/0x10 [ 456.138289][T14272] ? bpf_lsm_bpf_prog_load+0x9/0x10 [ 456.138313][T14272] ? security_bpf_prog_load+0x10f/0x2f0 [ 456.138331][T14272] ? bpf_vlog_init+0x118/0x150 [ 456.138357][T14272] bpf_check+0x17fb/0xa980 [ 456.138379][T14272] ? __css_rstat_updated+0x1ce/0x590 [ 456.138401][T14272] ? __lock_acquire+0x5c0/0x1f40 [ 456.138420][T14272] ? __pfx___css_rstat_updated+0x10/0x10 [ 456.138446][T14272] ? __lock_acquire+0x5c0/0x1f40 [ 456.138472][T14272] ? __pfx_bpf_check+0x10/0x10 [ 456.138512][T14272] ? lock_acquire+0x1d1/0x380 [ 456.138531][T14272] ? bpf_prog_load+0x1a09/0x2a80 [ 456.138553][T14272] ? find_held_lock+0x2b/0x80 [ 456.138577][T14272] ? bpf_prog_load+0x1a09/0x2a80 [ 456.138603][T14272] ? __asan_memset+0x23/0x50 [ 456.138626][T14272] ? bpf_prog_load+0x1ac3/0x2a80 [ 456.138648][T14272] bpf_prog_load+0x1ac3/0x2a80 [ 456.138673][T14272] ? __pfx_bpf_prog_load+0x10/0x10 [ 456.138716][T14272] __sys_bpf+0x1f46/0x4a30 [ 456.138740][T14272] ? __pfx___sys_bpf+0x10/0x10 [ 456.138758][T14272] ? find_held_lock+0x2b/0x80 [ 456.138780][T14272] ? get_pid_task+0xfc/0x250 [ 456.138802][T14272] ? get_pid_task+0xfc/0x250 [ 456.138833][T14272] ? find_held_lock+0x2b/0x80 [ 456.138862][T14272] ? rcu_read_lock_any_held+0x6a/0x90 [ 456.138887][T14272] ? find_held_lock+0x2b/0x80 [ 456.138908][T14272] ? ksys_write+0x190/0x250 [ 456.138926][T14272] ? ksys_write+0x190/0x250 [ 456.138943][T14272] ? lock_acquire+0x1d1/0x380 [ 456.138978][T14272] ? fput+0x7c/0x100 [ 456.139000][T14272] ? ksys_write+0x1ac/0x250 [ 456.139019][T14272] ? __x64_sys_bpf+0xce/0x140 [ 456.139035][T14272] __x64_sys_bpf+0xce/0x140 [ 456.139054][T14272] ? do_syscall_64+0xae/0x790 [ 456.139079][T14272] do_syscall_64+0x123/0x790 [ 456.139105][T14272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.139122][T14272] RIP: 0033:0x7f72b779e159 [ 456.139138][T14272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 456.139155][T14272] RSP: 002b:00007f72b860c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 456.139178][T14272] RAX: ffffffffffffffda RBX: 00007f72b7a25fa0 RCX: 00007f72b779e159 [ 456.139191][T14272] RDX: 0000000000000094 RSI: 0000200000000840 RDI: 0000000000000005 [ 456.139202][T14272] RBP: 00007f72b860c090 R08: 0000000000000000 R09: 0000000000000000 [ 456.139213][T14272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 456.139223][T14272] R13: 00007f72b7a26038 R14: 00007f72b7a25fa0 R15: 00007ffdfc2523a8 [ 456.139244][T14272] [ 456.139777][T14272] Mem-Info: [ 456.139787][T14272] active_anon:9066 inactive_anon:0 isolated_anon:0 [ 456.139787][T14272] active_file:667 inactive_file:49690 isolated_file:0 [ 456.139787][T14272] unevictable:1000 dirty:178 writeback:0 [ 456.139787][T14272] slab_reclaimable:8869 slab_unreclaimable:72255 [ 456.139787][T14272] mapped:26000 shmem:1561 pagetables:1255 [ 456.139787][T14272] sec_pagetables:304 bounce:0 [ 456.139787][T14272] kernel_misc_reclaimable:0 [ 456.139787][T14272] free:461958 free_pcp:9562 free_cma:0 [ 456.139827][T14272] Node 0 active_anon:36256kB inactive_anon:0kB active_file:2668kB inactive_file:198516kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:104000kB dirty:712kB writeback:0kB shmem:4236kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14200kB pagetables:4844kB sec_pagetables:1216kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 456.139872][T14272] Node 1 active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:244kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2008kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:128kB pagetables:176kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 456.139916][T14272] Node 0 DMA free:15076kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:136kB local_pcp:112kB free_cma:0kB [ 456.139962][T14272] lowmem_reserve[]: 0 1223 1223 1223 1223 [ 456.139994][T14272] Node 0 DMA32 free:178504kB boost:0kB min:27356kB low:34192kB high:41028kB reserved_highatomic:0kB free_highatomic:0kB active_anon:36256kB inactive_anon:0kB active_file:2668kB inactive_file:198516kB unevictable:2000kB writepending:712kB zspages:0kB present:2080628kB managed:1253288kB mlocked:0kB bounce:0kB free_pcp:38112kB local_pcp:10216kB free_cma:0kB [ 456.140041][T14272] lowmem_reserve[]: 0 0 0 0 0 [ 456.140069][T14272] Node 1 Normal free:1654252kB boost:0kB min:39880kB low:49848kB high:59816kB reserved_highatomic:0kB free_highatomic:0kB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:244kB unevictable:2000kB writepending:0kB zspages:0kB present:2097152kB managed:1781880kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 456.140161][T14272] lowmem_reserve[]: 0 0 0 0 0 [ 456.140197][T14272] Node 0 DMA: 13*4kB (UM) 10*8kB (UM) 8*16kB (UM) 7*32kB (UM) 4*64kB [ 456.140981][T14274] block2mtd: device name too long [ 456.141421][T14272] (UM) 4*128kB (UM) 2*256kB (UM) 0*512kB 1*1024kB (M) 0*2048kB 3*4096kB (UE) = 15076kB [ 456.141490][T14272] Node 0 DMA32: 1462*4kB (ME) 1106*8kB (UME) 532*16kB (UME) 375*32kB (UME) 115*64kB (UME) 119*128kB (ME) 27*256kB (ME) 38*512kB (UM) 22*1024kB (M) 15*2048kB (UM) 10*4096kB (UM) = 178376kB [ 456.141625][T14272] Node 1 Normal: 175*4kB (UME) 116*8kB (UME) 97*16kB (UME) 104*32kB (UME) 62*64kB (UME) 36*128kB (UME) 15*256kB (UME) 16*512kB (UME) 9*1024kB (ME) 8*2048kB (UME) 391*4096kB (M) = 1654252kB [ 456.142122][T14272] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 456.142137][T14272] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 456.142150][T14272] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 456.142163][T14272] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 456.142182][T14272] 51914 total pagecache pages [ 456.142188][T14272] 0 pages in swap cache [ 456.142195][T14272] Free swap = 124996kB [ 456.142201][T14272] Total swap = 124996kB [ 456.142208][T14272] 1048443 pages RAM [ 456.142213][T14272] 0 pages HighMem/MovableOnly [ 456.142218][T14272] 285811 pages reserved [ 456.142224][T14272] 0 pages cma reserved [ 456.224587][T14281] FAULT_INJECTION: forcing a failure. [ 456.224587][T14281] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 456.224634][T14281] CPU: 2 UID: 0 PID: 14281 Comm: syz.1.3112 Not tainted syzkaller #0 PREEMPT(full) [ 456.224653][T14281] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 456.224663][T14281] Call Trace: [ 456.224668][T14281] [ 456.224674][T14281] dump_stack_lvl+0x100/0x190 [ 456.224702][T14281] should_fail_ex.cold+0x5/0xa [ 456.224724][T14281] _copy_to_user+0x32/0xd0 [ 456.224738][T14281] do_sock_getsockopt+0x631/0x6e0 [ 456.224757][T14281] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 456.224776][T14281] ? __fget_files+0x34/0x3d0 [ 456.224791][T14281] ? find_held_lock+0x2b/0x80 [ 456.224810][T14281] ? __fget_files+0x21f/0x3d0 [ 456.224827][T14281] __sys_getsockopt+0x148/0x260 [ 456.224844][T14281] ? __x64_sys_getsockopt+0xbd/0x160 [ 456.224857][T14281] __x64_sys_getsockopt+0xbd/0x160 [ 456.224870][T14281] ? do_syscall_64+0xae/0x790 [ 456.224885][T14281] ? lockdep_hardirqs_on+0x7d/0x110 [ 456.224899][T14281] do_syscall_64+0x123/0x790 [ 456.224915][T14281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.224927][T14281] RIP: 0033:0x7f96a159e159 [ 456.224937][T14281] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 456.224949][T14281] RSP: 002b:00007f96a245a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 456.224960][T14281] RAX: ffffffffffffffda RBX: 00007f96a1825fa0 RCX: 00007f96a159e159 [ 456.224968][T14281] RDX: 0000000000000006 RSI: 0000000000000065 RDI: 0000000000000003 [ 456.224975][T14281] RBP: 00007f96a245a090 R08: 0000200000000b80 R09: 0000000000000000 [ 456.224981][T14281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 456.224987][T14281] R13: 00007f96a1826038 R14: 00007f96a1825fa0 R15: 00007ffee3a2a6f8 [ 456.225001][T14281] [ 456.293503][T14279] 8021q: adding VLAN 0 to HW filter on device bond8 [ 456.297374][T14279] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3111'. [ 456.351984][T14288] jffs2: notice: (14288) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 456.416977][T14290] nvme_fabrics: unknown parameter or missing value 'Jū' in ctrl creation request [ 456.667389][T14295] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3116'. [ 456.685747][T14295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3116'. [ 456.749762][T14302] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=242888304 (15544851456 ns) > initial count (9774208704 ns). Using initial count to start timer. [ 457.046381][T14310] 8021q: adding VLAN 0 to HW filter on device bond5 [ 457.046785][T14313] jffs2: notice: (14313) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 457.119028][T14317] nvme_fabrics: unknown parameter or missing value 'Jū' in ctrl creation request [ 457.155326][ C0] sr 2:0:0:0: [sr0] tag#26 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 457.155385][ C0] sr 2:0:0:0: [sr0] tag#26 CDB: Pre-fetch(16) 90 e1 4a 71 42 fe 3e 5d f7 c1 74 fb [ 457.177814][T14316] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3125'. [ 457.704708][T14337] 8021q: adding VLAN 0 to HW filter on device bond5 [ 457.738947][T14340] jffs2: notice: (14340) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 457.745715][T14340] nvme_fabrics: unknown parameter or missing value 'Jū' in ctrl creation request [ 457.788215][T14345] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3135'. [ 457.979319][ T43] kauditd_printk_skb: 18 callbacks suppressed [ 457.979333][ T43] audit: type=1400 audit(1789385424.516:801): avc: denied { write } for pid=14355 comm="syz.1.3141" name="/" dev="9p" ino=74470903 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 457.980205][T14358] 8021q: adding VLAN 0 to HW filter on device bond9 [ 457.997072][ T43] audit: type=1804 audit(1789385424.535:802): pid=14356 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.1.3141" name="/newroot/186/file0/bus" dev="9p" ino=74470937 res=1 errno=0 [ 458.009331][T14362] 9pnet_virtio: no channels available for device syz [ 458.014212][T14362] selinux_netlink_send: 2680 callbacks suppressed [ 458.014223][T14362] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=33552 sclass=netlink_route_socket pid=14362 comm=syz.0.3143 [ 458.361295][T14383] kvm: pic: non byte read [ 458.362321][T14383] kvm: pic: level sensitive irq not supported [ 458.362654][T14383] kvm: pic: non byte read [ 458.363670][T14383] kvm: pic: level sensitive irq not supported [ 458.365897][T14383] kvm: pic: non byte read [ 458.366772][T14383] kvm: pic: level sensitive irq not supported [ 458.367023][T14383] kvm: pic: non byte read [ 458.612684][T14392] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 458.612716][T14392] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 458.612820][T14392] vhci_hcd vhci_hcd.0: Device attached [ 458.618615][T14393] vhci_hcd: connection closed [ 458.620424][T11891] vhci_hcd vhci_hcd.1: stop threads [ 458.620439][T11891] vhci_hcd vhci_hcd.1: release socket [ 458.620450][T11891] vhci_hcd vhci_hcd.1: disconnect device [ 458.846666][T14396] ieee802154 phy0 wpan0: encryption failed: -22 [ 459.113515][T14414] netlink: 'syz.0.3163': attribute type 1 has an invalid length. [ 459.126993][T14414] 8021q: adding VLAN 0 to HW filter on device bond10 [ 459.154389][T14414] bond10: (slave gretap2): making interface the new active one [ 459.156029][T14414] bond10: (slave gretap2): Enslaving as an active interface with an up link [ 459.537290][T14412] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88802e932640 pfn:0x3d1aa [ 459.537317][T14412] memcg:ffff8880284c4700 [ 459.537327][T14412] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 459.537355][T14412] raw: 00fff00000000001 0000000000000000 dead000000000122 0000000000000000 [ 459.537373][T14412] raw: ffff88802e932640 0000000000000000 00000001ffffffff ffff8880284c4700 [ 459.537385][T14412] page dumped because: VM_BUG_ON_FOLIO(folio_order(folio) < mapping_min_folio_order(mapping)) [ 459.537397][T14412] page_owner tracks the page as allocated [ 459.537404][T14412] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 14412, tgid 14411 (syz.3.3162), ts 459537260051 [ 459.537433][T14412] post_alloc_hook+0xfd/0x120 [ 459.537483][T14412] get_page_from_freelist+0x110d/0x35d0 [ 459.537513][T14412] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 459.537544][T14412] alloc_pages_mpol+0x201/0x550 [ 459.537568][T14412] folio_alloc_noprof+0x22/0x250 [ 459.537594][T14412] filemap_alloc_folio_noprof.part.0+0x3db/0x440 [ 459.537613][T14412] filemap_alloc_folio_noprof+0x5e/0x80 [ 459.537632][T14412] page_cache_ra_order+0x539/0xed0 [ 459.537652][T14412] filemap_fault+0x1943/0x3130 [ 459.537675][T14412] __do_fault+0x10b/0x440 [ 459.537693][T14412] do_fault+0xb3f/0x1830 [ 459.537713][T14412] __handle_mm_fault+0x150b/0x2f60 [ 459.537739][T14412] handle_mm_fault+0x363/0xa20 [ 459.537764][T14412] do_user_addr_fault+0x745/0x12f0 [ 459.537786][T14412] exc_page_fault+0x6f/0xd0 [ 459.537815][T14412] asm_exc_page_fault+0x26/0x30 [ 459.537834][T14412] page last free pid 11451 tgid 11451 ts 459498592801 stack trace: [ 459.537848][T14412] __free_frozen_pages+0x79f/0x10f0 [ 459.537873][T14412] rcu_core+0x5f0/0x1260 [ 459.537894][T14412] handle_softirqs+0x1e6/0x9d0 [ 459.537914][T14412] do_softirq+0xaf/0xf0 [ 459.537931][T14412] __local_bh_enable_ip+0xff/0x120 [ 459.537949][T14412] fpu_clone+0x11d/0x7a0 [ 459.538038][T14412] copy_thread+0x4ae/0xbe0 [ 459.538060][T14412] copy_process+0x4cf7/0x8370 [ 459.538082][T14412] kernel_clone+0x176/0x9d0 [ 459.538103][T14412] __do_sys_clone+0xd9/0x120 [ 459.538124][T14412] do_syscall_64+0x123/0x790 [ 459.538150][T14412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.538317][T14412] ------------[ cut here ]------------ [ 459.538325][T14412] kernel BUG at mm/filemap.c:858! [ 459.538346][T14412] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 459.562173][T14433] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888050449000 pfn:0x50449 [ 459.562192][T14433] memcg:ffff88803d0e9780 [ 459.562197][T14433] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 459.562212][T14433] raw: 00fff00000000001 0000000000000000 dead000000000122 0000000000000000 [ 459.562223][T14433] raw: ffff888050449000 0000000000000000 00000001ffffffff ffff88803d0e9780 [ 459.562229][T14433] page dumped because: VM_BUG_ON_FOLIO(folio_order(folio) < mapping_min_folio_order(mapping)) [ 459.562237][T14433] page_owner tracks the page as allocated [ 459.562241][T14433] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 14433, tgid 14425 (syz.1.3167), ts 459562139043 [ 459.562260][T14433] post_alloc_hook+0xfd/0x120 [ 459.562289][T14433] get_page_from_freelist+0x110d/0x35d0 [ 459.562306][T14433] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 459.562323][T14433] alloc_pages_mpol+0x201/0x550 [ 459.562337][T14433] folio_alloc_noprof+0x22/0x250 [ 459.562353][T14433] filemap_alloc_folio_noprof.part.0+0x3db/0x440 [ 459.562370][T14433] filemap_alloc_folio_noprof+0x5e/0x80 [ 459.562384][T14433] page_cache_ra_order+0x539/0xed0 [ 459.562401][T14433] filemap_fault+0x1943/0x3130 [ 459.562456][T14433] __do_fault+0x10b/0x440 [ 459.562475][T14433] do_fault+0xb3f/0x1830 [ 459.562493][T14433] __handle_mm_fault+0x150b/0x2f60 [ 459.562507][T14433] handle_mm_fault+0x363/0xa20 [ 459.562520][T14433] __get_user_pages+0x8ae/0x2c30 [ 459.562531][T14433] populate_vma_page_range+0x267/0x3f0 [ 459.562543][T14433] __mm_populate+0x107/0x3a0 [ 459.562555][T14433] page last free pid 5730 tgid 5730 ts 459488356580 stack trace: [ 459.562563][T14433] __free_frozen_pages+0x79f/0x10f0 [ 459.562576][T14433] qlist_free_all+0x47/0xf0 [ 459.562586][T14433] kasan_quarantine_reduce+0x1a0/0x1f0 [ 459.562597][T14433] __kasan_slab_alloc+0x69/0x90 [ 459.562608][T14433] kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 459.562619][T14433] __alloc_skb+0x140/0x710 [ 459.562635][T14433] tcp_stream_alloc_skb+0x34/0x660 [ 459.562652][T14433] tcp_sendmsg_locked+0x13b7/0x4420 [ 459.562661][T14433] tcp_sendmsg+0x2e/0x50 [ 459.562677][T14433] inet_sendmsg+0xb9/0x140 [ 459.562693][T14433] sock_write_iter+0x4ea/0x5b0 [ 459.562714][T14433] vfs_write+0x6af/0x1050 [ 459.562728][T14433] ksys_write+0x1f8/0x250 [ 459.562743][T14433] do_syscall_64+0x123/0x790 [ 459.562773][T14433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.562890][T14433] ------------[ cut here ]------------ [ 459.562895][T14433] kernel BUG at mm/filemap.c:858! [ 459.681454][T14425] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xf pfn:0x53704 [ 459.681477][T14425] memcg:ffff88803d0e9780 [ 459.681485][T14425] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 459.681508][T14425] raw: 00fff00000000001 0000000000000000 dead000000000122 0000000000000000 [ 459.681524][T14425] raw: 000000000000000f 0000000000000000 00000001ffffffff ffff88803d0e9780 [ 459.681534][T14425] page dumped because: VM_BUG_ON_FOLIO(folio_order(folio) < mapping_min_folio_order(mapping)) [ 459.681544][T14425] page_owner tracks the page as allocated [ 459.681550][T14425] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 14425, tgid 14425 (syz.1.3167), ts 459681431968 [ 459.681577][T14425] post_alloc_hook+0xfd/0x120 [ 459.681604][T14425] get_page_from_freelist+0x110d/0x35d0 [ 459.681628][T14425] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 459.681654][T14425] alloc_pages_mpol+0x201/0x550 [ 459.681675][T14425] folio_alloc_noprof+0x22/0x250 [ 459.681699][T14425] filemap_alloc_folio_noprof.part.0+0x3db/0x440 [ 459.681717][T14425] filemap_alloc_folio_noprof+0x5e/0x80 [ 459.681733][T14425] page_cache_ra_order+0x539/0xed0 [ 459.681796][T14425] filemap_fault+0x1943/0x3130 [ 459.681819][T14425] __do_fault+0x10b/0x440 [ 459.681834][T14425] do_fault+0x585/0x1830 [ 459.681851][T14425] __handle_mm_fault+0x150b/0x2f60 [ 459.681871][T14425] handle_mm_fault+0x363/0xa20 [ 459.681892][T14425] do_user_addr_fault+0x59c/0x12f0 [ 459.681911][T14425] exc_page_fault+0x6f/0xd0 [ 459.681931][T14425] asm_exc_page_fault+0x26/0x30 [ 459.681947][T14425] page last free pid 14437 tgid 14437 ts 459569601948 stack trace: [ 459.681960][T14425] __free_frozen_pages+0x79f/0x10f0 [ 459.681982][T14425] kvm_destroy_vcpus+0x2a6/0x3c0 [ 459.682003][T14425] kvm_arch_destroy_vm+0xc7/0x230 [ 459.682024][T14425] kvm_put_kvm+0x556/0xc10 [ 459.682039][T14425] kvm_vm_release+0x3c/0x50 [ 459.682053][T14425] __fput+0x3ff/0xb50 [ 459.682066][T14425] task_work_run+0x150/0x240 [ 459.682082][T14425] exit_to_user_mode_loop+0x1d8/0x700 [ 459.682095][T14425] do_syscall_64+0x661/0x790 [ 459.682108][T14425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.682196][T14425] ------------[ cut here ]------------ [ 459.682201][T14425] kernel BUG at mm/filemap.c:858! [ 459.776520][T14412] CPU: 3 UID: 0 PID: 14412 Comm: syz.3.3162 Not tainted syzkaller #0 PREEMPT(full) [ 459.779424][T14412] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 459.782558][T14412] RIP: 0010:__filemap_add_folio+0x108b/0x1370 [ 459.784480][T14412] Code: 5a bf ff 48 c7 c6 00 d3 fe 8b 4c 89 ef e8 3d fc 12 00 90 0f 0b e8 a5 5a bf ff 48 c7 c6 60 d3 fe 8b 4c 89 ef e8 26 fc 12 00 90 <0f> 0b e8 8e 5a bf ff 48 c7 c6 e0 d3 fe 8b 4c 89 ef e8 0f fc 12 00 [ 459.790453][T14412] RSP: 0018:ffffc9000c4a73a0 EFLAGS: 00010283 [ 459.792387][T14412] RAX: 000000000002906d RBX: 0000000000000000 RCX: ffffc90006fdc000 [ 459.794856][T14412] RDX: 0000000000080000 RSI: ffffffff825fbf28 RDI: ffff88802d1baa44 [ 459.797332][T14412] RBP: 0000000000112cc0 R08: 0000000000000001 R09: 0000000000000000 [ 459.799781][T14412] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000002 [ 459.802242][T14412] R13: ffffea0000f46a80 R14: 0000000000000000 R15: 1ffff92001894ea0 [ 459.804730][T14412] FS: 00007f59376f46c0(0000) GS:ffff8880d5e59000(0000) knlGS:0000000000000000 [ 459.807351][T14412] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 459.809383][T14412] CR2: 0000200000000000 CR3: 000000002ba0a000 CR4: 0000000000352ef0 [ 459.811877][T14412] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 459.814383][T14412] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 459.816857][T14412] Call Trace: [ 459.817930][T14412] [ 459.818864][T14412] ? lock_acquire+0x1d1/0x380 [ 459.820320][T14412] ? __pfx___filemap_add_folio+0x10/0x10 [ 459.822078][T14412] filemap_add_folio+0x1d8/0x6a0 [ 459.823666][T14412] ? __pfx_filemap_add_folio+0x10/0x10 [ 459.825395][T14412] ? __pfx___css_rstat_updated+0x10/0x10 [ 459.827153][T14412] page_cache_ra_order+0x602/0xed0 [ 459.828778][T14412] filemap_fault+0x1943/0x3130 [ 459.830295][T14412] ? __pfx_filemap_fault+0x10/0x10 [ 459.831903][T14412] ? find_held_lock+0x2b/0x80 [ 459.833392][T14412] ? __pfx_filemap_map_pages+0x10/0x10 [ 459.835066][T14412] __do_fault+0x10b/0x440 [ 459.836564][T14412] do_fault+0xb3f/0x1830 [ 459.837887][T14412] ? __pfx_do_fault+0x10/0x10 [ 459.839439][T14412] ? rcu_read_unlock+0x2d/0xb0 [ 459.840921][T14412] ? rcu_read_unlock+0x2d/0xb0 [ 459.842423][T14412] ? __pte_offset_map+0x179/0x310 [ 459.843973][T14412] __handle_mm_fault+0x150b/0x2f60 [ 459.845641][T14412] ? __pfx___handle_mm_fault+0x10/0x10 [ 459.847343][T14412] ? __pfx_mt_find+0x10/0x10 [ 459.848883][T14412] ? find_vma+0xbf/0x140 [ 459.850196][T14412] ? __pfx_find_vma+0x10/0x10 [ 459.851604][T14412] handle_mm_fault+0x363/0xa20 [ 459.853111][T14412] do_user_addr_fault+0x745/0x12f0 [ 459.855037][T14412] exc_page_fault+0x6f/0xd0 [ 459.856646][T14412] asm_exc_page_fault+0x26/0x30 [ 459.858097][T14412] RIP: 0010:_copy_from_user+0x93/0xd0 [ 459.860000][T14412] Code: 7b e1 fc 89 ee 4c 89 ef 48 b8 00 f0 ff ff ff 7f 00 00 48 39 c3 48 0f 47 d8 e8 19 c3 54 fd 0f 01 cb 4c 89 ef 48 89 de 48 89 e9 a4 0f 1f 00 49 89 cc 48 89 cb 0f 01 ca 31 ff 48 89 ce e8 a5 75 [ 459.866411][T14412] RSP: 0018:ffffc9000c4a7bc0 EFLAGS: 00050246 [ 459.868348][T14412] RAX: 0000000000000001 RBX: 0000200000000000 RCX: 0000000000000038 [ 459.870822][T14412] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffc9000c4a7cc0 [ 459.873323][T14412] RBP: 0000000000000038 R08: 0000000000000001 R09: fffff52001894f9e [ 459.875800][T14412] R10: ffffc9000c4a7cf7 R11: 0000000000000000 R12: 0000000000000000 [ 459.878748][T14412] R13: ffffc9000c4a7cc0 R14: 0000000000000001 R15: 00000000c0386106 [ 459.881879][T14412] cec_ioctl+0x282/0x2990 [ 459.883613][T14412] ? __pfx_cec_ioctl+0x10/0x10 [ 459.885537][T14412] ? tomoyo_path_number_perm+0x188/0x580 [ 459.887742][T14412] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 459.890053][T14412] ? do_vfs_ioctl+0x226/0x13e0 [ 459.891875][T14412] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 459.893762][T14412] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 459.896100][T14412] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 459.898377][T14412] ? __fget_files+0x34/0x3d0 [ 459.899853][T14412] ? selinux_file_ioctl+0x13b/0x290 [ 459.901487][T14412] ? selinux_file_ioctl+0xb6/0x290 [ 459.903111][T14412] ? __pfx_cec_ioctl+0x10/0x10 [ 459.904682][T14412] __x64_sys_ioctl+0x18e/0x210 [ 459.906201][T14412] do_syscall_64+0x123/0x790 [ 459.907880][T14412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.910222][T14412] RIP: 0033:0x7f593679e159 [ 459.911999][T14412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 459.918302][T14412] RSP: 002b:00007f59376f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 459.920963][T14412] RAX: ffffffffffffffda RBX: 00007f5936a25fa0 RCX: 00007f593679e159 [ 459.923707][T14412] RDX: 0000200000000000 RSI: 00000000c0386106 RDI: 0000000000000004 [ 459.926450][T14412] RBP: 00007f593683503b R08: 0000000000000000 R09: 0000000000000000 [ 459.929083][T14412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 459.932071][T14412] R13: 00007f5936a26038 R14: 00007f5936a25fa0 R15: 00007fff8e2d0918 [ 459.934723][T14412] [ 459.935671][T14412] Modules linked in: [ 459.936869][T14425] Oops: invalid opcode: 0000 [#2] SMP KASAN NOPTI [ 459.937298][T14412] ---[ end trace 0000000000000000 ]--- [ 459.941703][T14425] CPU: 0 UID: 0 PID: 14425 Comm: syz.1.3167 Tainted: G D syzkaller #0 PREEMPT(full) ** replaying previous printk message ** [ 459.945906][T14412] RIP: 0010:__filemap_add_folio+0x108b/0x1370 [ 459.945930][T14412] Code: 5a bf ff 48 c7 c6 00 d3 fe 8b 4c 89 ef e8 3d fc 12 00 90 0f 0b e8 a5 5a bf ff 48 c7 c6 60 d3 fe 8b 4c 89 ef e8 26 fc 12 00 90 <0f> 0b e8 8e 5a bf ff 48 c7 c6 e0 d3 fe 8b 4c 89 ef e8 0f fc 12 00 [ 459.945942][T14412] RSP: 0018:ffffc9000c4a73a0 EFLAGS: 00010283 [ 459.945952][T14412] RAX: 000000000002906d RBX: 0000000000000000 RCX: ffffc90006fdc000 [ 459.945960][T14412] RDX: 0000000000080000 RSI: ffffffff825fbf28 RDI: ffff88802d1baa44 [ 459.945967][T14412] RBP: 0000000000112cc0 R08: 0000000000000001 R09: 0000000000000000 [ 459.945974][T14412] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000002 [ 459.945980][T14412] R13: ffffea0000f46a80 R14: 0000000000000000 R15: 1ffff92001894ea0 [ 459.945988][T14412] FS: 00007f59376f46c0(0000) GS:ffff8880d5e59000(0000) knlGS:0000000000000000 [ 459.946011][T14412] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 459.946021][T14412] CR2: 0000200000000000 CR3: 000000002ba0a000 CR4: 0000000000352ef0 [ 459.946028][T14412] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 459.946035][T14412] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 459.946044][T14412] Kernel panic - not syncing: Fatal exception [ 459.983593][T14412] Kernel Offset: disabled [ 459.984994][T14412] Rebooting in 86400 seconds.. VM DIAGNOSIS: 11:30:48 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff81ff861e RDX=0000000000000000 RSI=0000000000000000 RDI=ffff888057222580 RBP=ffffc9000c5a7c68 RSP=ffffc9000c5a7b58 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffffc9000c5a7be0 R13=0000000000000003 R14=fffff520018b4f7d R15=0000000000000001 RIP=ffffffff820c15f7 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 000055558e402500 ffffffff 00c00000 GS =0000 ffff8880d5b59000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b3061cff8 CR3=000000002783a000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000002 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f593755d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff8e2d0e06 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff8e2d0e06 00007fff8e2d0e0c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f593683561e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f593683565e ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f59368357c2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5936835650 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f59369f2600 00007f59369f25e0 00007f59369f25e8 00007f59369f2618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f59369f25f8 00007f59369f25c8 00007f59369f2600 00007f59369f25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8c4013e296b18821 5404bf2d63fa1790 12618f32123a6105 9bd7573ac3aa5383 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 9b776d78c72c0567 698cd30a4e92c922 cb95d9a2de5541a5 6a1a8700886d672c ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bcaafdc5fdb5beb3 6aea8af9f16932f0 fb2ae6888280c442 26abc6f98b3debe1 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 e26a9f1c6183f09e cf2876aa5d06181d eb261e2b3ed3a960 b3538a8a863e545f ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000006 RCX=0000000000000001 RDX=ffff88801f69cb00 RSI=ffffffff81b6be9e RDI=ffff88801f69cb00 RBP=0000000000000001 RSP=ffffc90000187df8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000006 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000030fc4 R15=0000000000000000 RIP=ffffffff81b6be9f RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5c59000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000110c2d8ef7 CR3=000000000eb96000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000feffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000001000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 030204000ccc0312 04000cc80307ffe6 04000cc403000400 0cc00307fffe0400 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 e8030404000ce403 2804000ce0030065 6b616301ffffffff fffffffff5080cd0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0d80031004000cfc 031004000cf80320 8208000cf0030e04 000cec031004000c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0002e00300100002 d00300100002c003 02100002b0030188 1000100303fe0800 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000104c0a6a29010 0002800401000006 080606016c9c0208 0002e00300100002 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d00300100002c003 02100002b0030188 1000100303fe0800 0d80031004000cfc ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 031004000cf80320 8208000cf0030e04 000cec031004000c e8030404000ce403 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2804000ce0030065 6b616301ffffffff fffffffff5080cd0 030204000ccc0312 ZMM25=0bfa6b450bfa6b45 0bfa6b450bfa6b45 0bfa6b450bfa6b45 0bfa6b450bfa6b45 0bfa6b450bfa6b45 0bfa6b450bfa6b45 0bfa6b450bfa6b45 0bfa6b450bfa6b45 ZMM26=bd56ce46bd56ce46 bd56ce46bd56ce46 bd56ce46bd56ce46 bd56ce46bd56ce46 bd56ce46bd56ce46 bd56ce46bd56ce46 bd56ce46bd56ce46 bd56ce46bd56ce46 ZMM27=115302b8115302b8 115302b8115302b8 115302b8115302b8 115302b8115302b8 115302b8115302b8 115302b8115302b8 115302b8115302b8 115302b8115302b8 ZMM28=000001a00000019f 0000019e0000019d 0000019c0000019b 0000019a00000199 0000019800000197 0000019600000195 0000019400000193 0000019200000191 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=af0a0000af0a0000 af0a0000af0a0000 af0a0000af0a0000 af0a0000af0a0000 af0a0000af0a0000 af0a0000af0a0000 af0a0000af0a0000 af0a0000af0a0000 info registers vcpu 2 CPU#2 RAX=000000000001c923 RBX=0000000000000003 RCX=ffffc90026d98000 RDX=0000000000080000 RSI=ffffffff81b9004c RDI=ffff888035554b00 RBP=ffffffff948f60e4 RSP=ffffc9000c6770a8 R8 =0000000000000000 R9 =0000000000000003 R10=0000000000000003 R11=0000000000000000 R12=0000000000000003 R13=0000000000000003 R14=ffff88806a63cf00 R15=0000000000000004 RIP=ffffffff81b9004d RFL=00000083 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f96a24176c0 ffffffff 00c00000 GS =0000 ffff8880d5d59000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000000300 CR3=00000000409f8000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000002 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffee3a2abe6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffee3a2abe6 00007ffee3a2abec ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f96a163561e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f96a163565e ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f96a16357c2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f96a1635650 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f96a17f25f8 00007f96a17f25c8 00007f96a17f2600 00007f96a17f25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2af495beabc5e893 b1604e7607658773 73bc67337eedbf9a 302ead616a47c274 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000e0 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00001d36f77282ba df98905cd24dc7df ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2af495beabc5e893 b1604e7607658773 73bc67337eedbf9a 302ead616a47c274 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000078 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85b0cfd5 RDI=ffffffff9bc6bca0 RBP=ffffffff9bc6bc60 RSP=ffffc9000c4a6bc8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=6572203a65676170 R12=0000000000000000 R13=0000000000000078 R14=0000000000000003 R15=ffffc9000c4a6ee0 RIP=ffffffff85b0cfff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f59376f46c0 ffffffff 00c00000 GS =0000 ffff8880d5e59000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000000000 CR3=000000002ba0a000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000002 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c61636f6c2e7374 6e6576652e79726f ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffee3a2abe6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffee3a2abe6 00007ffee3a2abec ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f96a163561e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f96a163565e ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f96a16357c2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f96a1635650 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000