last executing test programs: 47.964148518s ago: executing program 2 (id=136): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r1, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r1, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x715}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) 47.872277015s ago: executing program 2 (id=140): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x44, &(0x7f0000000000)={0x0, 0x0}, 0x10) r1 = syz_clone(0x88600, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000002180)='net/xfrm_stat\x00') read$FUSE(r3, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_OPEN(r3, &(0x7f0000000040)={0x20, 0xfffffffffffffff5, r4, {0x0, 0x11}}, 0x20) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000840)=0x473e, 0x4) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r7, &(0x7f0000000040), 0x0, 0x4000800) recvmmsg(r6, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}, 0x75}, {{0x0, 0x0, 0x0}, 0x7ff}], 0x2, 0x2100, 0x0) syz_open_procfs$namespace(r5, 0x0) syz_clone3(&(0x7f0000000380)={0x22340200, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[r1], 0x1, {r2}}, 0x58) openat$nullb(0xffffffffffffff9c, &(0x7f00000020c0), 0x400080, 0x0) 47.683094668s ago: executing program 2 (id=143): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0xe0, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_FRAME={0xb0, 0x33, @data_frame={@msdu=@type10={{}, {}, @from_mac, @device_b, @broadcast}, @a_msdu=[{@broadcast, @broadcast, 0x1f, "25624efd3f07bd7bd3cb46417d4c1b23c24bdbcce3ac779124d05b60aa77c0"}, {@device_a, @broadcast, 0x34, "ba50d9b03c85f177adf659b4e8506cc147f71d5e6f8cf67023061b5b478b2a9ccf901876b78017a0ab4ed1be2f570734ea59cc2d"}, {@device_a, @broadcast}, {@device_b, @broadcast, 0x2, "a2f4"}]}}]}, 0xe0}}, 0x0) 47.613188401s ago: executing program 2 (id=144): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c", 0x5, 0x840, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f00000000c0)=0x40) fcntl$lock(r0, 0x6, &(0x7f00000003c0)={0x2, 0x0, 0xb, 0x8}) syz_clone(0x0, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x309c000000000) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x100) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) 47.434003751s ago: executing program 2 (id=145): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xc00, &(0x7f0000000200)={&(0x7f00000006c0)={0x98, r1, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x61, 0xe, {{{}, {}, @device_a, @device_a, @from_mac}, 0x8, @default, 0x1, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @val={0x4, 0x6, {0x7, 0x8, 0x1, 0xfef}}, @void, @val={0x5, 0x3, {0x7, 0xc7, 0x6}}, @void, @void, @void, @val={0x2d, 0x1a, {0x2ff, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @void}}], @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x98}}, 0x20000014) 46.782445955s ago: executing program 2 (id=149): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) (fail_nth: 4) 46.655460768s ago: executing program 32 (id=149): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) (fail_nth: 4) 45.374038304s ago: executing program 3 (id=164): setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x14, @loopback}], 0x1c) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x880000, 0x20, 0x1000000, 0x4, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x800, 0x0, 0x146, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x8c, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb4ac, 0x20, 0x8, 0x9d7c}}], 0x1, &(0x7f0000000180)={0x2e, 0x68, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r4, '\x00', {0x2, 0x5, 0x0, 0x0}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r8 = socket(0x10, 0x3, 0x0) recvmmsg(r8, &(0x7f0000004640)=[{{0x0, 0x0, 0x0}, 0xf}], 0x1, 0x2000, 0x0) syz_clone(0x22023500, 0x0, 0xff4e, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x4}, 0x8) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="9f", 0x34000, 0x44004, &(0x7f0000000040)={0xa, 0x4e24, 0x7, @loopback, 0xc5f}, 0x1c) 43.980527299s ago: executing program 3 (id=173): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16], 0x14) 43.913081104s ago: executing program 3 (id=174): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800040000000000000b00000008000300", @ANYBLOB="0a00060008021100000100003000508011000100"], 0x58}}, 0x0) 43.493260564s ago: executing program 3 (id=175): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c", 0x5, 0x840, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f00000000c0)=0x40) fcntl$lock(r0, 0x6, &(0x7f00000003c0)={0x2, 0x0, 0xb, 0x8}) syz_clone(0x0, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x309c000000000) socket$nl_xfrm(0x10, 0x3, 0x6) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) 43.335375339s ago: executing program 3 (id=176): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00000000183e00001400350065727370616e3000000000000000000008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x70}, 0x0) 43.213847664s ago: executing program 0 (id=177): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r1, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x715}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) 42.983215107s ago: executing program 0 (id=178): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x200000, 0x0) close(r1) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x6}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, &(0x7f00000005c0)="bad386dd", 0x5dc, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) 42.783076927s ago: executing program 3 (id=179): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff5656d, 0x70bd29, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0x1, 0xb}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x8, 0x8, 0xfbee}, 0x3929c00, 0x0, 0x5, 0x5, 0xe, 0x4, 0xd, 0x18, 0x5, 0x4, {0x6, 0xc, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x44890) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f00000001c0), 0x39) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 42.627593983s ago: executing program 33 (id=179): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff5656d, 0x70bd29, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0x1, 0xb}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x8, 0x8, 0xfbee}, 0x3929c00, 0x0, 0x5, 0x5, 0xe, 0x4, 0xd, 0x18, 0x5, 0x4, {0x6, 0xc, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x44890) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f00000001c0), 0x39) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 42.583411675s ago: executing program 0 (id=181): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x9}}, 0x14}, 0x1, 0x6000000000000000}, 0x4004804) 42.532476873s ago: executing program 0 (id=183): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c", 0x5, 0x840, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f00000000c0)=0x40) fcntl$lock(r0, 0x6, &(0x7f00000003c0)={0x2, 0x0, 0xb, 0x8}) syz_clone(0x0, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x309c000000000) socket$nl_xfrm(0x10, 0x3, 0x6) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) 42.346616434s ago: executing program 0 (id=185): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r0, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x715}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) 41.619900389s ago: executing program 0 (id=186): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)={0x98, r1, 0x5, 0x70bd26, 0xc000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x61, 0xe, {{{}, {}, @device_a, @device_a, @from_mac}, 0x8, @default, 0x1, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @val={0x4, 0x6, {0x7, 0x8, 0x1, 0xfef}}, @void, @val={0x5, 0x3, {0x7, 0xc7, 0x6}}, @void, @void, @void, @val={0x2d, 0x1a, {0x2ff, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @void}}], @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x98}}, 0x20000014) 41.484897768s ago: executing program 34 (id=186): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)={0x98, r1, 0x5, 0x70bd26, 0xc000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x61, 0xe, {{{}, {}, @device_a, @device_a, @from_mac}, 0x8, @default, 0x1, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @val={0x4, 0x6, {0x7, 0x8, 0x1, 0xfef}}, @void, @val={0x5, 0x3, {0x7, 0xc7, 0x6}}, @void, @void, @void, @val={0x2d, 0x1a, {0x2ff, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @void}}], @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x98}}, 0x20000014) 17.414899815s ago: executing program 6 (id=632): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x200000, 0x0) close(r1) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, &(0x7f00000005c0)="bad386dd", 0x5dc, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) 17.233493979s ago: executing program 6 (id=638): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8971, &(0x7f0000000180)={'dummy0\x00', @ifru_flags=0x1000}) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f00000003c0), &(0x7f0000000040)=0x30) 17.143583325s ago: executing program 6 (id=640): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800040000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="0a00060008021100000100003000508011000100"], 0x58}}, 0x0) (fail_nth: 7) 16.932080946s ago: executing program 6 (id=645): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x181403, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(0xffffffffffffffff, 0x4048ae9b, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) unshare(0x6a040000) syz_usb_disconnect(0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, &(0x7f0000000080)={'security\x00', 0x0, [0x7, 0x9, 0x9, 0x7f, 0x8]}, &(0x7f0000000100)=0x54) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_ADDR(r6, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000700)={0x94, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400c600"/20, @ANYRES32=r4, @ANYRES16=r0], 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x0) r7 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r7, 0x6a, 0x5, 0x0, &(0x7f0000000040)) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0xa, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r10], 0x54}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r12, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x4e20, @rand_addr=0x64010100}}) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800040000000000000b00000008000300", @ANYRES32=r11, @ANYBLOB="0a00060008021100000100003000508011000100"], 0x58}}, 0x0) 15.891888526s ago: executing program 6 (id=671): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000007c0)='./file1\x00') r0 = open(&(0x7f00000002c0)='.\x00', 0x80000, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') mount(&(0x7f0000000180)=@sr0, &(0x7f00000003c0)='./file1\x00', &(0x7f0000000740)='autofs\x00', 0x80002, &(0x7f0000000780)='[\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000001540)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}], 0x1, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000240)={r2, 0xa}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, 0x0}, 0x94) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_GET_XSAVE2(r5, 0x9000aecf, &(0x7f0000001000/0x2000)=nil) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = getpid() syz_pidfd_open(r7, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={0x204, 0x41, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x1e8, 0x1, 0x0, 0x1, [@nested={0x1dc, 0x14b, 0x0, 0x1, [@typed={0x8, 0x74, 0x0, 0x0, @pid=r7}, @nested={0x1cd, 0xd4, 0x0, 0x1, [@generic="fe08df4a2a3992907eeb0a66bafa6e33d35c3b2305b9ac21817a6f8dbf0c4c9c4eae41e38d7d54f6704deb106d1f7cc6475daea63dd0cf1c5a7f0855344b255cff2fd9850c61a1b78abd0ff3a8258dc08c9fb8f695e72a22611200dffe0116f2f306c71e1baa1cb39f4d3b11e53a21c2122d1b53fa7542e7508663f03387cabfb025d509661768b920678557165b13af04661e383c4332dd18f45f84fd4e9f3d2681a56d56741600b55dabc3fffda26a305e0ba59a6039cb6b81f7e3bbc25ad6d9123a5442232af9f5ae481bbdae", @nested={0x4, 0x6b}, @generic="044e53187aa7fb3c052df6f4a2002c177256b20d4b04364c5ca1c7191a5732cb5fbd4fe6abfc0765327c993b9473d0d0a6dd0e2952a950ed9a46f65e5edb463e8b4dd993af54089e197eb8fd7e03f1fb307f541d9d6fa3df24a000acc670c3aa617ac305a9a579a74e0652cf5b9a0e1ff101f6909bf3c167417ff7aab816a5f941250ef06bde45643c8045061682ab74ba1d85beec6f373d045dc2153c95c8ff816f8c81bd93c88ae876f1856a431435bdd1a9cde03900be74b21419743a6a6028c6cb782252dc08493afad94e3d7929a518e8c68b050fd3bd07e012c85671d74d3f8bcaf78ff9f0d2397643e2492e159e19fb6e281086"]}]}, @typed={0x8, 0xe4, 0x0, 0x0, @str='syz\x00'}]}, @nested={0x4, 0x2}]}, 0x204}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x59147b8dff6cbe02}, 0x4040850) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 15.453666819s ago: executing program 6 (id=682): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) 3.823397756s ago: executing program 4 (id=822): r0 = syz_open_dev$loop(&(0x7f0000000280), 0x80010a, 0x1cb600) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x68800, 0x8e) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0xffffffff, {0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x13, 0x14, "faf98317e5a1149989fc8dbe43ea6acc9663a2503dc3bd3fe37d58328bbad0099cebf225f5d69098c8b534464c512bdd8a0f1901000100", "32d8cc263d9e234b02000000000000004a6783cdd3dfe7800b2d7b6aa54cc5001fcaed1e831fa79a000000020000000000000400", "6704dae4901802c4dae4162e43ac61b7ad3300", [0x7, 0x6]}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r3, 0x8008976) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$netlink(r4, &(0x7f0000006ac0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)={0x10, 0x1b, 0x20, 0x70bd2b, 0x25dfdbfe}, 0x10}], 0x1, &(0x7f00000069c0)=[@cred={{0x1c}}], 0x20}, 0x20008014) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r3, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x715}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) 3.762995013s ago: executing program 4 (id=824): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000500)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs, &(0x7f0000000180)=0x6e) accept$unix(r1, &(0x7f00000001c0), &(0x7f0000000240)=0x6e) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800040000000000000b00000008000300", @ANYRES32=r3, @ANYBLOB="0a00060008021100000100003000508011000100"], 0x58}}, 0x0) 3.671590405s ago: executing program 1 (id=825): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14) write$nci(r0, 0x0, 0x14) 3.600266339s ago: executing program 4 (id=834): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x8, 0x0, 0x100000001, 0x0, 0x0, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x0, 0xffffffffffffffff}, 0xfffffffe}}, 0xb8}}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x2000, 0x0, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x1000, 0x1000, 0xa, 0x20, 0x0, 0x87}, {0x0, 0x0, 0x2, 0xffffffff7ffffffc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x8000000000000001, 0x0, 0x200000000000000, 0x4}}}, 0xb8}}, 0x2c000010) (fail_nth: 2) 662.760494ms ago: executing program 5 (id=827): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000e80)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800040000000000000b01000008000300", @ANYRES32=r2, @ANYBLOB="28005080140001004abee33957edf8aaae14574df400000005000200070000000800030006ac0f"], 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 660.598372ms ago: executing program 4 (id=836): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x8, 0x0, 0x100000001, 0x0, 0x0, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x0, 0xffffffffffffffff}, 0xfffffffe}}, 0xb8}}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x2000, 0x0, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x1000, 0x1000, 0xa, 0x20, 0x0, 0x87}, {0x0, 0x0, 0x2, 0xffffffff7ffffffc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x8000000000000001, 0x0, 0x200000000000000, 0x4}}}, 0xb8}}, 0x2c000010) (fail_nth: 3) 656.94452ms ago: executing program 1 (id=828): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000040)={0x9}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='clear_refs\x00') r3 = syz_open_dev$sg(&(0x7f0000001600), 0xb, 0x40042) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5387, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text16={0x10, 0x0}], 0x1, 0x5c, 0x0, 0x0) pipe2(&(0x7f0000000100), 0x880) ioctl$KVM_RUN(r2, 0xae80, 0x0) 599.572766ms ago: executing program 4 (id=829): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r1, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r1, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x715}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) (fail_nth: 20) 559.293776ms ago: executing program 5 (id=830): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x8, 0x0, 0x100000001, 0x0, 0x0, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x0, 0xffffffffffffffff}, 0xfffffffe}}, 0xb8}}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r2, r2, 0x2f}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r2, 0x2f, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x1, 0x0, 0x0, 0x0, &(0x7f0000003680)}, 0x40) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x2000, 0x0, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x1000, 0x1000, 0xa, 0x20, 0x0, 0x87}, {0x0, 0x0, 0x2, 0xffffffff7ffffffc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x8000000000000001, 0x0, 0x200000000000000, 0x4}}}, 0xb8}}, 0x2c000010) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000140001000000000004000000e00000020000000000000000000000000000000000000000000000000000000000000000100000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x987a3a9f32358a4c) 488.192022ms ago: executing program 4 (id=831): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001600)=ANY=[@ANYBLOB="1f00000000000000000000000010"], 0x50) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3021, 0xb, 0x28011, r0, 0x1000) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x80002, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1000002, 0x8c012, r1, 0x343e2000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r3) syz_usb_connect(0x6, 0x24, &(0x7f0000000200)=ANY=[], 0x0) ioctl$EVIOCRMFF(r3, 0x550c, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000600)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010025bd7000ffdbdf2567000000080001004200000008000300", @ANYRES32=r6, @ANYBLOB="0808f3aa57ded4299e00c300358f10000000"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x10) 487.952286ms ago: executing program 5 (id=832): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107bf132c7e0bb9"], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)=ANY=[@ANYBLOB="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"/276], 0x11c}], 0x1, 0x0, 0x0, 0x40004}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107bf132c7e0bb9"], 0x1b0) (async) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x0) (async) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)=ANY=[@ANYBLOB="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"/276], 0x11c}], 0x1, 0x0, 0x0, 0x40004}, 0x0) (async) 459.482235ms ago: executing program 35 (id=682): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) 413.672086ms ago: executing program 1 (id=835): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000100)={@my=0x0}) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000001580), 0x138a09f12d120b2d, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000200)=0x12) ioctl$SNDCTL_DSP_GETOSPACE(r3, 0x8010500c, &(0x7f0000000280)) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r2, 0x7a5, &(0x7f00000000c0)={{}, 0x1, 0x0, 0x4d}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="310330bd7000fbdbdf250b00000008000300", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x4008010}, 0xc0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x3, 0x1, 0xdddd0000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x3, 0x0, 0x10000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 413.17161ms ago: executing program 5 (id=837): r0 = socket(0x2d, 0x2, 0x0) bind$xdp(r0, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0x3e}, 0x10) r1 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x31, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f05e, 0x1ff, '\x00', @ptr=0x1}}) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x4, 0xfd, 0x0, @vifc_lcl_addr=@empty, @empty}, 0x10) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/reserved_size', 0x8002, 0xac) sendfile(r3, r3, 0x0, 0x68) socket(0x28, 0x800, 0x2) 270.924946ms ago: executing program 5 (id=838): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000007c0)={0x14, 0x26, 0x1, 0x70bd29, 0x25dfdbfb, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0xc040) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, 0x3, 0x6, 0x105, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x20000844) 270.764254ms ago: executing program 5 (id=839): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14) write$nci(r0, 0x0, 0x14) 186.247553ms ago: executing program 1 (id=840): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r1, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r1, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x715}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x700000000000000, 0x6040000}) 131.707694ms ago: executing program 1 (id=841): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) readv(r3, &(0x7f0000000b80)=[{&(0x7f00000002c0)=""/223, 0xdf}], 0x1) write(r5, &(0x7f0000000280)="86", 0x1) splice(r5, &(0x7f0000000040), r4, 0x0, 0x6, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x34, 0x41, 0x1, 0x80000, 0x4, {0x1}, [@nested={0x4, 0xcb}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x5}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) ftruncate(r1, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r1, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x715}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) 0s ago: executing program 1 (id=842): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800040000000100000b00000008000300", @ANYRES32=r2, @ANYBLOB="0a00060008021100000100003000508011000100"], 0x58}}, 0x0) kernel console output (not intermixed with test programs): ace with an up link [ 80.987740][ T6588] team0: Port device team_slave_0 added [ 80.991496][ T6588] team0: Port device team_slave_1 added [ 81.012108][ T6588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.015363][ T6588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.025858][ T6588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.037417][ T6588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.042789][ T6588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.051185][ T6588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.101876][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.148289][ T6588] hsr_slave_0: entered promiscuous mode [ 81.151468][ T6588] hsr_slave_1: entered promiscuous mode [ 81.154670][ T6588] debugfs: 'hsr0' already exists in 'hsr' [ 81.156541][ T6588] Cannot create hsr debugfs directory [ 81.195290][ T6657] FAULT_INJECTION: forcing a failure. [ 81.195290][ T6657] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 81.200026][ T6657] CPU: 0 UID: 0 PID: 6657 Comm: syz.1.200 Not tainted syzkaller #0 PREEMPT(full) [ 81.200054][ T6657] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 81.200064][ T6657] Call Trace: [ 81.200071][ T6657] [ 81.200079][ T6657] dump_stack_lvl+0x100/0x190 [ 81.200109][ T6657] should_fail_ex.cold+0x5/0xa [ 81.200133][ T6657] _copy_to_user+0x32/0xd0 [ 81.200156][ T6657] simple_read_from_buffer+0xcb/0x170 [ 81.200226][ T6657] proc_fail_nth_read+0x1af/0x230 [ 81.200252][ T6657] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 81.200276][ T6657] ? rw_verify_area+0xce/0x6d0 [ 81.200297][ T6657] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 81.200355][ T6657] vfs_read+0x1e4/0xb40 [ 81.200382][ T6657] ? __pfx_vfs_read+0x10/0x10 [ 81.200404][ T6657] ? __fget_files+0x215/0x3d0 [ 81.200436][ T6657] ? __fget_files+0x21f/0x3d0 [ 81.200469][ T6657] ksys_read+0x12a/0x250 [ 81.200491][ T6657] ? __pfx_ksys_read+0x10/0x10 [ 81.200513][ T6657] ? v4l2_ioctl+0x1c5/0x250 [ 81.200567][ T6657] do_syscall_64+0x115/0x870 [ 81.200592][ T6657] ? clear_bhb_loop+0x40/0x90 [ 81.200614][ T6657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.200632][ T6657] RIP: 0033:0x7fd96d75e68e [ 81.200649][ T6657] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 81.200665][ T6657] RSP: 002b:00007fd96e6ddfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 81.200684][ T6657] RAX: ffffffffffffffda RBX: 00007fd96e6de6c0 RCX: 00007fd96d75e68e [ 81.200695][ T6657] RDX: 000000000000000f RSI: 00007fd96e6de0a0 RDI: 0000000000000004 [ 81.200705][ T6657] RBP: 00007fd96e6de090 R08: 0000000000000000 R09: 0000000000000000 [ 81.200715][ T6657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.200725][ T6657] R13: 00007fd96da26038 R14: 00007fd96da25fa0 R15: 00007ffc408f5dc8 [ 81.200749][ T6657] [ 81.314622][ T6660] openvswitch: netlink: Actions may not be safe on all matching packets [ 81.316532][ T6539] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.320204][ T6660] netlink: 28 bytes leftover after parsing attributes in process `syz.1.201'. [ 81.356208][ T6660] 9p: Bad value for 'dfltgid' [ 81.358483][ T6660] 9p: Bad value for 'dfltgid' [ 81.443100][ T5742] Bluetooth: hci0: command tx timeout [ 81.460687][ T6539] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.492683][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.495073][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.507031][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.510392][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.530125][ T12] bridge_slave_1: left allmulticast mode [ 81.534008][ T12] bridge_slave_1: left promiscuous mode [ 81.537152][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.544399][ T12] bridge_slave_0: left allmulticast mode [ 81.546845][ T12] bridge_slave_0: left promiscuous mode [ 81.549431][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.677577][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 81.684132][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 81.691952][ T12] bond0 (unregistering): Released all slaves [ 81.704462][ T6666] netlink: 48 bytes leftover after parsing attributes in process `syz.1.202'. [ 81.794375][ T6588] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 81.811656][ T6588] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.831625][ T6588] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 81.840513][ T6588] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.844173][ T5742] Bluetooth: hci3: command tx timeout [ 81.856206][ T6588] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 81.897353][ T6588] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.902979][ T6588] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 81.917204][ T6588] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.114019][ T6588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.131895][ T6588] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.171244][ T5443] 8021q: adding VLAN 0 to HW filter on device eth10 [ 82.176708][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.179026][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.189718][ T12] hsr_slave_0: left promiscuous mode [ 82.195729][ T12] hsr_slave_1: left promiscuous mode [ 82.198580][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.201464][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.206219][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.209296][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.219157][ T12] veth1_macvtap: left promiscuous mode [ 82.221686][ T12] veth0_macvtap: left promiscuous mode [ 82.224775][ T12] veth1_vlan: left promiscuous mode [ 82.227169][ T12] veth0_vlan: left promiscuous mode [ 82.483965][ T12] team0 (unregistering): Port device team_slave_1 removed [ 82.492223][ T12] team0 (unregistering): Port device team_slave_0 removed [ 82.523692][ T6703] netlink: 'syz.1.207': attribute type 1 has an invalid length. [ 82.576161][ T6704] netlink: 56 bytes leftover after parsing attributes in process `syz.1.207'. [ 82.596240][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.599192][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.619105][ T6539] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.645559][ T6588] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 82.651206][ T6588] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.778007][ T6716] netlink: 48 bytes leftover after parsing attributes in process `syz.4.210'. [ 82.804333][ T5742] Bluetooth: hci1: command tx timeout [ 82.846957][ T6724] tmpfs: Unknown parameter 'dont_hash' [ 82.882949][ T5742] Bluetooth: hci2: command tx timeout [ 82.958140][ T6733] syzkaller0: entered promiscuous mode [ 82.960770][ T6733] syzkaller0: entered allmulticast mode [ 82.992149][ T5443] 8021q: adding VLAN 0 to HW filter on device eth11 [ 83.055494][ T6539] veth0_vlan: entered promiscuous mode [ 83.079317][ T6539] veth1_vlan: entered promiscuous mode [ 83.127196][ T42] kauditd_printk_skb: 27 callbacks suppressed [ 83.127208][ T42] audit: type=1400 audit(1783386480.992:362): avc: denied { write } for pid=6744 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.157162][ T6539] veth0_macvtap: entered promiscuous mode [ 83.192970][ T6539] veth1_macvtap: entered promiscuous mode [ 83.225087][ T42] audit: type=1400 audit(1783386481.092:363): avc: denied { write } for pid=6749 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.227151][ T6588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.235701][ T6754] program syz.4.216 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 83.253209][ T6539] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.270349][ T6539] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.278145][ T5443] 8021q: adding VLAN 0 to HW filter on device eth12 [ 83.297442][ T5794] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.300602][ T5794] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.310916][ T5794] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.318794][ T42] audit: type=1400 audit(1783386481.182:364): avc: denied { accept } for pid=6753 comm="syz.4.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 83.319223][ T5794] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.332605][ T6761] netlink: 666 bytes leftover after parsing attributes in process `syz.1.217'. [ 83.358457][ T6761] tipc: Enabling of bearer rejected, media not registered [ 83.370893][ T42] audit: type=1400 audit(1783386481.232:365): avc: denied { ioctl } for pid=6753 comm="syz.4.216" path="/12/file0/file1" dev="9p" ino=72374897 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 83.390487][ T6759] netlink: 24 bytes leftover after parsing attributes in process `syz.4.216'. [ 83.435020][ T42] audit: type=1400 audit(1783386481.292:366): avc: denied { getopt } for pid=6760 comm="syz.1.217" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 83.460258][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.473027][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.484001][ T6759] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 83.502024][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.508412][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.509225][ T42] audit: type=1400 audit(1783386481.372:367): avc: denied { write } for pid=6766 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.579438][ T6588] veth0_vlan: entered promiscuous mode [ 83.607111][ T6588] veth1_vlan: entered promiscuous mode [ 83.625814][ T42] audit: type=1400 audit(1783386481.492:368): avc: denied { write } for pid=6773 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.641786][ T6588] veth0_macvtap: entered promiscuous mode [ 83.650002][ T6588] veth1_macvtap: entered promiscuous mode [ 83.665009][ T6588] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.676589][ T6588] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.683864][ T5443] 8021q: adding VLAN 0 to HW filter on device eth13 [ 83.700007][ T5814] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.704206][ T5814] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.712419][ T5814] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.719383][ T5814] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.805036][ T1254] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.808205][ T1254] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.825493][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.828340][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.922428][ T5742] Bluetooth: hci3: command tx timeout [ 83.970356][ T6790] netlink: 'syz.6.220': attribute type 20 has an invalid length. [ 84.175040][ T42] audit: type=1400 audit(1783386482.042:369): avc: denied { getopt } for pid=6796 comm="syz.6.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 84.186831][ T42] audit: type=1400 audit(1783386482.042:370): avc: denied { setopt } for pid=6796 comm="syz.6.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 84.195173][ T42] audit: type=1400 audit(1783386482.042:371): avc: denied { connect } for pid=6796 comm="syz.6.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 84.318858][ T6801] syzkaller0: entered promiscuous mode [ 84.321441][ T6801] syzkaller0: entered allmulticast mode [ 84.860368][ T6815] __nla_validate_parse: 2 callbacks suppressed [ 84.860388][ T6815] netlink: 24 bytes leftover after parsing attributes in process `syz.4.228'. [ 84.882531][ T5742] Bluetooth: hci1: command tx timeout [ 84.941357][ T6817] netlink: 48 bytes leftover after parsing attributes in process `syz.4.229'. [ 85.086874][ T6828] syzkaller0: entered promiscuous mode [ 85.089347][ T6828] syzkaller0: entered allmulticast mode [ 85.411682][ T6852] syzkaller0: entered promiscuous mode [ 85.415181][ T6852] syzkaller0: entered allmulticast mode [ 85.490209][ T6860] syzkaller0: entered promiscuous mode [ 85.495160][ T6860] syzkaller0: entered allmulticast mode [ 85.561478][ T6865] mmap: syz.5.247 (6865) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 85.676386][ T6875] netlink: 20 bytes leftover after parsing attributes in process `syz.4.251'. [ 85.831779][ T6888] syzkaller0: entered promiscuous mode [ 85.834325][ T6888] syzkaller0: entered allmulticast mode [ 85.992787][ T6899] netlink: 'syz.5.258': attribute type 29 has an invalid length. [ 86.002639][ T5742] Bluetooth: hci3: command tx timeout [ 86.020050][ T6898] syzkaller0: entered promiscuous mode [ 86.024567][ T6898] syzkaller0: entered allmulticast mode [ 86.183921][ T6913] netlink: 16 bytes leftover after parsing attributes in process `syz.1.263'. [ 86.614852][ T6932] syzkaller0: entered promiscuous mode [ 86.617107][ T6932] syzkaller0: entered allmulticast mode [ 86.686161][ T6934] syzkaller0: entered promiscuous mode [ 86.694186][ T6934] syzkaller0: entered allmulticast mode [ 86.714568][ T6936] tmpfs: Bad value for 'nr_blocks' [ 86.927725][ T6946] netlink: 8 bytes leftover after parsing attributes in process `syz.6.274'. [ 86.962344][ T5742] Bluetooth: hci1: command tx timeout [ 87.064203][ T6962] netlink: 104 bytes leftover after parsing attributes in process `syz.6.279'. [ 87.141081][ T6966] syzkaller0: entered promiscuous mode [ 87.143688][ T6966] syzkaller0: entered allmulticast mode [ 87.182710][ T6969] tmpfs: Bad value for 'nr_blocks' [ 87.313996][ T6975] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58254 sclass=netlink_route_socket pid=6975 comm=syz.6.285 [ 87.352136][ T6981] binder: 6980:6981 unknown command 0 [ 87.355464][ T6981] binder: 6980:6981 ioctl c0306201 2000000004c0 returned -22 [ 87.371520][ T24] cfg80211: failed to load regulatory.db [ 87.451091][ T6986] netlink: 48 bytes leftover after parsing attributes in process `syz.5.288'. [ 87.893116][ T56] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 87.994513][ T7013] syzkaller0: entered promiscuous mode [ 87.996379][ T7013] syzkaller0: entered allmulticast mode [ 88.061091][ T56] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 88.064876][ T56] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.070300][ T56] usb 9-1: Product: syz [ 88.072310][ T56] usb 9-1: Manufacturer: syz [ 88.074173][ T56] usb 9-1: SerialNumber: syz [ 88.082377][ T5742] Bluetooth: hci3: command tx timeout [ 88.199899][ T42] kauditd_printk_skb: 50 callbacks suppressed [ 88.199922][ T42] audit: type=1400 audit(1783386486.056:421): avc: denied { write } for pid=7021 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.255577][ T7028] IPv6: NLM_F_CREATE should be specified when creating new route [ 88.269908][ T7027] openvswitch: netlink: IP tunnel dst address not specified [ 88.277121][ T7024] syzkaller0: entered promiscuous mode [ 88.278843][ T7024] syzkaller0: entered allmulticast mode [ 88.363925][ T42] audit: type=1400 audit(1783386486.226:422): avc: denied { getopt } for pid=7032 comm="syz.5.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 88.396184][ T7037] syzkaller0: entered promiscuous mode [ 88.398590][ T7037] syzkaller0: entered allmulticast mode [ 88.433468][ T42] audit: type=1400 audit(1783386486.296:423): avc: denied { mount } for pid=7032 comm="syz.5.304" name="/" dev="autofs" ino=16119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 88.446648][ T42] audit: type=1400 audit(1783386486.296:424): avc: denied { read } for pid=7032 comm="syz.5.304" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 88.456774][ T7039] ntfs3(sr0): Primary boot signature is not NTFS. [ 88.461693][ T7039] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 88.472003][ T42] audit: type=1400 audit(1783386486.326:425): avc: denied { ioctl } for pid=7032 comm="syz.5.304" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 88.487203][ T42] audit: type=1400 audit(1783386486.336:426): avc: denied { read } for pid=7032 comm="syz.5.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 88.520246][ T42] audit: type=1400 audit(1783386486.376:427): avc: denied { unmount } for pid=6539 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 88.587588][ T7049] netlink: 84 bytes leftover after parsing attributes in process `syz.1.309'. [ 88.592790][ T7049] nbd: must specify at least one socket [ 88.605365][ T42] audit: type=1400 audit(1783386486.466:428): avc: denied { mounton } for pid=7044 comm="syz.6.307" path="/19/file0" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=fifo_file permissive=1 [ 88.615869][ T7045] loop0: Can't mount, would change RO state [ 88.653924][ T7052] netlink: 84 bytes leftover after parsing attributes in process `syz.1.309'. [ 88.659491][ T7052] nbd: must specify at least one socket [ 88.694571][ T56] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 88.699365][ T6995] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 88.700551][ T56] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 88.716187][ T42] audit: type=1400 audit(1783386486.576:429): avc: denied { ioctl } for pid=7055 comm="syz.5.310" path="socket:[17868]" dev="sockfs" ino=17868 ioctlcmd=0x9432 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 88.725903][ T56] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 88.734788][ T56] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 88.742167][ T56] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 88.754886][ T56] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -71 [ 88.774068][ T56] usb 9-1: USB disconnect, device number 2 [ 88.791142][ T42] audit: type=1400 audit(1783386486.646:430): avc: denied { write } for pid=7057 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.896526][ T7069] syzkaller0: entered promiscuous mode [ 88.899054][ T7069] syzkaller0: entered allmulticast mode [ 88.905556][ T7071] syzkaller0: entered promiscuous mode [ 88.908480][ T7071] syzkaller0: entered allmulticast mode [ 89.057613][ T7076] netlink: 68 bytes leftover after parsing attributes in process `syz.1.316'. [ 89.429611][ T7113] syzkaller0: entered promiscuous mode [ 89.433281][ T7113] syzkaller0: entered allmulticast mode [ 89.438883][ T7114] syzkaller0: entered promiscuous mode [ 89.447089][ T7114] syzkaller0: entered allmulticast mode [ 89.492548][ T7122] fuse: Unknown parameter 'gr' [ 89.545209][ T7122] atomic_op ffff888022d7a998 conn xmit_atomic 0000000000000000 [ 89.737558][ T7150] syzkaller0: entered promiscuous mode [ 89.744286][ T7150] syzkaller0: entered allmulticast mode [ 89.767882][ T7137] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.775773][ T7137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.056393][ T7164] __nla_validate_parse: 3 callbacks suppressed [ 90.056411][ T7164] netlink: 68 bytes leftover after parsing attributes in process `syz.5.339'. [ 90.077705][ T7166] syzkaller0: entered promiscuous mode [ 90.081078][ T7166] syzkaller0: entered allmulticast mode [ 90.126518][ T7168] bridge_slave_0: left allmulticast mode [ 90.129112][ T7168] bridge_slave_0: left promiscuous mode [ 90.134579][ T7168] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.146837][ T7168] bridge_slave_1: left allmulticast mode [ 90.149536][ T7168] bridge_slave_1: left promiscuous mode [ 90.152119][ T7168] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.165711][ T7168] bond0: (slave bond_slave_0): Releasing backup interface [ 90.175981][ T7168] bond0: (slave bond_slave_1): Releasing backup interface [ 90.187202][ T7168] team0: Port device team_slave_0 removed [ 90.198533][ T7168] team0: Port device team_slave_1 removed [ 90.201048][ T7168] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.204153][ T7168] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.208516][ T7168] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 90.209498][ T7174] overlayfs: missing 'workdir' [ 90.227925][ T7171] macvlan0: entered promiscuous mode [ 90.237771][ T7174] overlayfs: missing 'workdir' [ 90.244056][ T7168] team0: Port device xfrm0 added [ 90.248260][ T7168] tipc: Started in network mode [ 90.251202][ T7168] tipc: Node identity a21110a17bbe, cluster identity 4711 [ 90.260034][ T7168] tipc: Enabled bearer , priority 0 [ 90.305270][ T7179] syzkaller0: entered promiscuous mode [ 90.307708][ T7179] syzkaller0: entered allmulticast mode [ 90.343177][ T7182] syzkaller0: entered promiscuous mode [ 90.350828][ T7182] syzkaller0: entered allmulticast mode [ 90.412500][ T5821] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 90.651452][ T7200] netlink: 36 bytes leftover after parsing attributes in process `syz.4.348'. [ 90.654118][ T5821] usb 10-1: Using ep0 maxpacket: 8 [ 90.660564][ T7200] netlink: 24 bytes leftover after parsing attributes in process `syz.4.348'. [ 90.664854][ T5821] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 90.670870][ T5821] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 90.678096][ T5821] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 90.681720][ T5821] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 90.686478][ T5821] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 90.691545][ T5821] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.721020][ T7200] bond1: entered promiscuous mode [ 90.726509][ T7200] netlink: 28 bytes leftover after parsing attributes in process `syz.4.348'. [ 90.743409][ T7205] syzkaller0: entered promiscuous mode [ 90.745850][ T7205] syzkaller0: entered allmulticast mode [ 90.820834][ T7202] overlay: Unknown parameter 'volatile:/' [ 90.909716][ T5821] usb 10-1: GET_CAPABILITIES returned 0 [ 90.911635][ T5821] usbtmc 10-1:16.0: can't read capabilities [ 90.948337][ T7216] syzkaller0: entered promiscuous mode [ 90.950242][ T7216] syzkaller0: entered allmulticast mode [ 90.973722][ T7218] netlink: 12 bytes leftover after parsing attributes in process `syz.6.356'. [ 91.005335][ T7214] Invalid ELF header len 18 [ 91.136727][ T5821] usb 10-1: USB disconnect, device number 2 [ 91.211889][ T7231] syzkaller0: entered promiscuous mode [ 91.220476][ T7231] syzkaller0: entered allmulticast mode [ 91.254651][ T5888] tipc: Node number set to 3652128929 [ 91.578202][ T7262] kvm: pic: level sensitive irq not supported [ 91.747216][ T7278] syzkaller0: entered promiscuous mode [ 91.752518][ T7278] syzkaller0: entered allmulticast mode [ 91.862891][ T7285] netlink: 132 bytes leftover after parsing attributes in process `syz.5.375'. [ 91.882317][ T7287] FAULT_INJECTION: forcing a failure. [ 91.882317][ T7287] name failslab, interval 1, probability 0, space 0, times 1 [ 91.887877][ T7287] CPU: 3 UID: 0 PID: 7287 Comm: syz.4.378 Not tainted syzkaller #0 PREEMPT(full) [ 91.887894][ T7287] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 91.887901][ T7287] Call Trace: [ 91.887907][ T7287] [ 91.887912][ T7287] dump_stack_lvl+0x100/0x190 [ 91.887934][ T7287] should_fail_ex.cold+0x5/0xa [ 91.887949][ T7287] should_failslab+0xc2/0x120 [ 91.887964][ T7287] kmem_cache_alloc_noprof+0x91/0x6a0 [ 91.887976][ T7287] ? ieee80211_build_hdr+0x1b4c/0x2df0 [ 91.888035][ T7287] ? __ieee80211_subif_start_xmit+0x7d5/0x13a0 [ 91.888046][ T7287] ? ieee80211_tx_control_port+0x633/0xe40 [ 91.888058][ T7287] ? radix_tree_node_alloc.constprop.0+0x66/0x340 [ 91.888080][ T7287] radix_tree_node_alloc.constprop.0+0x66/0x340 [ 91.888097][ T7287] idr_get_free+0x52e/0xa00 [ 91.888118][ T7287] idr_alloc_u32+0x1ac/0x320 [ 91.888136][ T7287] ? __pfx_idr_alloc_u32+0x10/0x10 [ 91.888153][ T7287] ? rcu_is_watching+0x12/0xc0 [ 91.888205][ T7287] idr_alloc+0xc0/0x130 [ 91.888224][ T7287] ? __pfx_idr_alloc+0x10/0x10 [ 91.888240][ T7287] ? _raw_spin_lock_irqsave+0x52/0x60 [ 91.888258][ T7287] ieee80211_store_ack_skb+0x9e/0x1d0 [ 91.888275][ T7287] ieee80211_build_hdr+0x1b4c/0x2df0 [ 91.888297][ T7287] ? __pfx_ieee80211_build_hdr+0x10/0x10 [ 91.888314][ T7287] ? psi_cgroup_restart+0x3a8/0x700 [ 91.888334][ T7287] ? ieee80211_downgrade_queue+0x2b4/0x460 [ 91.888354][ T7287] __ieee80211_subif_start_xmit+0x7d5/0x13a0 [ 91.888369][ T7287] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 91.888381][ T7287] ? find_held_lock+0x2b/0x80 [ 91.888397][ T7287] ? ieee80211_tx_control_port+0x7f6/0xe40 [ 91.888411][ T7287] ieee80211_tx_control_port+0x633/0xe40 [ 91.888425][ T7287] ? __pfx_ieee80211_tx_control_port+0x10/0x10 [ 91.888442][ T7287] nl80211_tx_control_port+0x560/0xa70 [ 91.888462][ T7287] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 91.888481][ T7287] ? nl80211_pre_doit+0x19a/0xae0 [ 91.888500][ T7287] genl_family_rcv_msg_doit+0x214/0x300 [ 91.888524][ T7287] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 91.888545][ T7287] ? bpf_lsm_capable+0x9/0x10 [ 91.888556][ T7287] ? security_capable+0x80/0x260 [ 91.888571][ T7287] ? ns_capable+0xd2/0xf0 [ 91.888586][ T7287] genl_rcv_msg+0x560/0x800 [ 91.888605][ T7287] ? __pfx_genl_rcv_msg+0x10/0x10 [ 91.888622][ T7287] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 91.888637][ T7287] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 91.888652][ T7287] ? __pfx_nl80211_post_doit+0x10/0x10 [ 91.888674][ T7287] netlink_rcv_skb+0x159/0x420 [ 91.888689][ T7287] ? __pfx_genl_rcv_msg+0x10/0x10 [ 91.888707][ T7287] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 91.888728][ T7287] ? netlink_deliver_tap+0x1ae/0xcc0 [ 91.888744][ T7287] genl_rcv+0x28/0x40 [ 91.888759][ T7287] netlink_unicast+0x585/0x850 [ 91.888776][ T7287] ? __pfx_netlink_unicast+0x10/0x10 [ 91.888796][ T7287] netlink_sendmsg+0x8b0/0xda0 [ 91.888814][ T7287] ? __pfx_netlink_sendmsg+0x10/0x10 [ 91.888828][ T7287] ? __might_fault+0x20/0x140 [ 91.888851][ T7287] ____sys_sendmsg+0xa4d/0xbe0 [ 91.888865][ T7287] ? __pfx_netlink_sendmsg+0x10/0x10 [ 91.888881][ T7287] ? __pfx_____sys_sendmsg+0x10/0x10 [ 91.888901][ T7287] ___sys_sendmsg+0x190/0x1e0 [ 91.888919][ T7287] ? __pfx____sys_sendmsg+0x10/0x10 [ 91.888932][ T7287] ? __lock_acquire+0x49f/0x1a40 [ 91.888944][ T7287] ? get_pid_task+0x106/0x250 [ 91.888977][ T7287] __sys_sendmsg+0x160/0x210 [ 91.888988][ T7287] ? __pfx___sys_sendmsg+0x10/0x10 [ 91.889006][ T7287] do_syscall_64+0x115/0x870 [ 91.889043][ T7287] ? clear_bhb_loop+0x40/0x90 [ 91.889057][ T7287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.889068][ T7287] RIP: 0033:0x7f18f939de59 [ 91.889081][ T7287] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.889092][ T7287] RSP: 002b:00007f18fa21f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 91.889105][ T7287] RAX: ffffffffffffffda RBX: 00007f18f9625fa0 RCX: 00007f18f939de59 [ 91.889112][ T7287] RDX: 0000000000000000 RSI: 0000200000003700 RDI: 0000000000000003 [ 91.889118][ T7287] RBP: 00007f18fa21f090 R08: 0000000000000000 R09: 0000000000000000 [ 91.889125][ T7287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 91.889135][ T7287] R13: 00007f18f9626038 R14: 00007f18f9625fa0 R15: 00007ffea3fbaa28 [ 91.889149][ T7287] [ 92.126893][ T7296] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 92.135001][ T7296] batman_adv: batadv0: Adding interface: gretap1 [ 92.137630][ T7296] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.149167][ T7296] batman_adv: batadv0: Interface activated: gretap1 [ 92.245521][ T7300] SELinux: invalid class [ 92.254243][ T7300] SELinux: failed to load policy [ 92.257974][ T7300] netlink: 'syz.4.380': attribute type 1 has an invalid length. [ 92.259654][ T7304] syzkaller0: entered promiscuous mode [ 92.264954][ T7304] syzkaller0: entered allmulticast mode [ 92.302679][ T7300] 8021q: adding VLAN 0 to HW filter on device bond2 [ 92.309313][ T7300] netlink: 44 bytes leftover after parsing attributes in process `syz.4.380'. [ 92.379083][ T7313] netlink: 60 bytes leftover after parsing attributes in process `syz.4.387'. [ 92.549189][ T7328] program syz.5.392 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 92.559801][ T7328] binder_alloc: 7326: binder_alloc_buf size -944 failed, no address space [ 92.568717][ T7328] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 92.578580][ T7329] netlink: 48 bytes leftover after parsing attributes in process `syz.4.391'. [ 92.647079][ T7336] syzkaller0: entered promiscuous mode [ 92.649101][ T7336] syzkaller0: entered allmulticast mode [ 92.695037][ T7340] syzkaller0: entered promiscuous mode [ 92.697556][ T7340] syzkaller0: entered allmulticast mode [ 92.942293][ T5888] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 93.071148][ T7364] IPv6: NLM_F_CREATE should be specified when creating new route [ 93.074372][ T7364] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 93.077278][ T7364] IPv6: NLM_F_CREATE should be set when creating new route [ 93.104108][ T5888] usb 11-1: Using ep0 maxpacket: 8 [ 93.115412][ T5888] usb 11-1: config index 0 descriptor too short (expected 5924, got 36) [ 93.126334][ T5888] usb 11-1: config 250 has an invalid interface number: 228 but max is -1 [ 93.133037][ T5888] usb 11-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 93.136711][ T5888] usb 11-1: config 250 has no interface number 0 [ 93.141727][ T5888] usb 11-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 93.154232][ T5888] usb 11-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 93.160969][ T5888] usb 11-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 93.165632][ T5888] usb 11-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 93.170142][ T5888] usb 11-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 93.177579][ T5888] usb 11-1: config 250 interface 228 has no altsetting 0 [ 93.184628][ T7372] tmpfs: Bad value for 'mpol' [ 93.187453][ T5888] usb 11-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 93.191248][ T5888] usb 11-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 93.195973][ T5888] usb 11-1: Product: syz [ 93.199122][ T5888] usb 11-1: SerialNumber: syz [ 93.219358][ T5888] hub 11-1:250.228: bad descriptor, ignoring hub [ 93.222415][ T5888] hub 11-1:250.228: probe with driver hub failed with error -5 [ 93.245512][ T42] kauditd_printk_skb: 40 callbacks suppressed [ 93.245533][ T42] audit: type=1400 audit(1783386491.106:471): avc: denied { write } for pid=7374 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.291480][ T42] audit: type=1400 audit(1783386491.146:472): avc: denied { write } for pid=7379 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.350418][ T42] audit: type=1400 audit(1783386491.206:473): avc: denied { allowed } for pid=7384 comm="syz.5.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 93.406024][ T42] audit: type=1400 audit(1783386491.266:474): avc: denied { listen } for pid=7387 comm="syz.4.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 93.423707][ T42] audit: type=1400 audit(1783386491.286:475): avc: denied { accept } for pid=7387 comm="syz.4.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 93.427998][ T5888] usblp 11-1:250.228: usblp0: USB Bidirectional printer dev 2 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 93.479397][ T7396] netlink: 36 bytes leftover after parsing attributes in process `syz.4.412'. [ 93.517796][ T7398] IPv6: NLM_F_CREATE should be specified when creating new route [ 93.521102][ T7398] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 93.523746][ T7398] IPv6: NLM_F_CREATE should be set when creating new route [ 93.625411][ T42] audit: type=1400 audit(1783386491.486:476): avc: denied { read write } for pid=7341 comm="syz.6.398" name="lp0" dev="devtmpfs" ino=2851 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 93.636357][ T42] audit: type=1400 audit(1783386491.486:477): avc: denied { open } for pid=7341 comm="syz.6.398" path="/dev/usb/lp0" dev="devtmpfs" ino=2851 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 93.750241][ T5888] usb 11-1: USB disconnect, device number 2 [ 93.760845][ T5888] usblp0: removed [ 93.886998][ T7420] syzkaller0: entered promiscuous mode [ 93.889503][ T7420] syzkaller0: entered allmulticast mode [ 93.916520][ T7422] program syz.6.425 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 93.926211][ T7422] binder_alloc: 7421: binder_alloc_buf size -944 failed, no address space [ 93.931010][ T7422] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 94.030435][ T42] audit: type=1400 audit(1783386491.886:478): avc: denied { create } for pid=7425 comm="syz.6.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 94.034383][ T7429] xt_NFQUEUE: number of total queues is 0 [ 94.119320][ T42] audit: type=1400 audit(1783386491.976:479): avc: denied { nlmsg_read } for pid=7439 comm="syz.6.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 94.274570][ T5888] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 94.312424][ T42] audit: type=1400 audit(1783386492.166:480): avc: denied { write } for pid=7449 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.427365][ T5888] usb 6-1: device descriptor read/64, error -71 [ 94.519026][ T7455] block nbd6: shutting down sockets [ 94.545269][ T7476] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 94.672330][ T5888] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 94.817026][ T5888] usb 6-1: device descriptor read/64, error -71 [ 94.938540][ T5888] usb usb6-port1: attempt power cycle [ 95.292570][ T5888] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 95.313369][ T5888] usb 6-1: device descriptor read/8, error -71 [ 95.552770][ T5888] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 95.573313][ T5888] usb 6-1: device descriptor read/8, error -71 [ 95.673456][ T7527] netlink: 'syz.5.452': attribute type 1 has an invalid length. [ 95.695360][ T5888] usb usb6-port1: unable to enumerate USB device [ 95.763220][ T7532] syzkaller0: entered promiscuous mode [ 95.767448][ T7532] syzkaller0: entered allmulticast mode [ 95.836060][ T7534] __nla_validate_parse: 8 callbacks suppressed [ 95.836076][ T7534] netlink: 48 bytes leftover after parsing attributes in process `syz.5.455'. [ 95.883351][ T7537] netlink: 'syz.6.456': attribute type 1 has an invalid length. [ 95.910706][ T7537] 8021q: adding VLAN 0 to HW filter on device bond1 [ 95.917318][ T7537] netlink: 4 bytes leftover after parsing attributes in process `syz.6.456'. [ 95.933091][ T7537] bond1: (slave erspan1): making interface the new active one [ 95.938158][ T7537] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 96.111031][ T7555] IPv6: NLM_F_CREATE should be specified when creating new route [ 96.113985][ T7555] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 96.117663][ T7555] IPv6: NLM_F_CREATE should be set when creating new route [ 96.123415][ T7555] FAULT_INJECTION: forcing a failure. [ 96.123415][ T7555] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.128547][ T7555] CPU: 0 UID: 0 PID: 7555 Comm: syz.6.463 Not tainted syzkaller #0 PREEMPT(full) [ 96.128572][ T7555] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.128582][ T7555] Call Trace: [ 96.128589][ T7555] [ 96.128596][ T7555] dump_stack_lvl+0x100/0x190 [ 96.128799][ T7555] should_fail_ex.cold+0x5/0xa [ 96.128848][ T7555] _copy_from_iter+0x1f4/0x1690 [ 96.128899][ T7555] ? trace_kmem_cache_alloc+0xdd/0x100 [ 96.128943][ T7555] ? __kasan_slab_alloc+0x89/0x90 [ 96.128987][ T7555] ? __pfx__copy_from_iter+0x10/0x10 [ 96.129007][ T7555] ? __kvmalloc_node_noprof+0x616/0x970 [ 96.129026][ T7555] ? __asan_memset+0x23/0x50 [ 96.129052][ T7555] ? __build_skb_around+0x278/0x390 [ 96.129126][ T7555] ? is_vmalloc_addr+0x86/0xa0 [ 96.129155][ T7555] netlink_sendmsg+0x808/0xda0 [ 96.129189][ T7555] ? __pfx_netlink_sendmsg+0x10/0x10 [ 96.129223][ T7555] sock_write_iter+0x53a/0x5b0 [ 96.129247][ T7555] ? __pfx_netlink_sendmsg+0x10/0x10 [ 96.129271][ T7555] ? __pfx_sock_write_iter+0x10/0x10 [ 96.129300][ T7555] ? bpf_lsm_file_permission+0x9/0x10 [ 96.129326][ T7555] ? security_file_permission+0x76/0x210 [ 96.129384][ T7555] ? rw_verify_area+0xce/0x6d0 [ 96.129415][ T7555] vfs_write+0x6ac/0x1050 [ 96.129442][ T7555] ? __pfx_sock_write_iter+0x10/0x10 [ 96.129467][ T7555] ? __pfx_vfs_write+0x10/0x10 [ 96.129489][ T7555] ? find_held_lock+0x2b/0x80 [ 96.129551][ T7555] ksys_write+0x1f8/0x250 [ 96.129572][ T7555] ? __pfx_ksys_write+0x10/0x10 [ 96.129598][ T7555] do_syscall_64+0x115/0x870 [ 96.129676][ T7555] ? clear_bhb_loop+0x40/0x90 [ 96.129701][ T7555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.129716][ T7555] RIP: 0033:0x7f667299de59 [ 96.129730][ T7555] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.129744][ T7555] RSP: 002b:00007f66737f3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 96.129760][ T7555] RAX: ffffffffffffffda RBX: 00007f6672c25fa0 RCX: 00007f667299de59 [ 96.129770][ T7555] RDX: 0000000000033fe0 RSI: 0000200000000000 RDI: 0000000000000003 [ 96.129778][ T7555] RBP: 00007f66737f3090 R08: 0000000000000000 R09: 0000000000000000 [ 96.129793][ T7555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.129801][ T7555] R13: 00007f6672c26038 R14: 00007f6672c25fa0 R15: 00007fff8e862918 [ 96.129821][ T7555] [ 96.293999][ T7561] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 96.298116][ T7561] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 96.461662][ T7574] overlayfs: conflicting options: userxattr,redirect_dir=on [ 96.468404][ T7557] kvm: vcpu 0: requested 1536 ns lapic timer period limited to 200000 ns [ 96.532448][ T7574] comedi comedi3: comedi_config --init_data is deprecated [ 96.600633][ T7579] syzkaller0: entered promiscuous mode [ 96.602957][ T7579] syzkaller0: entered allmulticast mode [ 96.866142][ T7590] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 96.870528][ T7590] FAULT_INJECTION: forcing a failure. [ 96.870528][ T7590] name failslab, interval 1, probability 0, space 0, times 0 [ 96.876589][ T7590] CPU: 2 UID: 0 PID: 7590 Comm: syz.5.474 Not tainted syzkaller #0 PREEMPT(full) [ 96.876618][ T7590] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.876627][ T7590] Call Trace: [ 96.876634][ T7590] [ 96.876642][ T7590] dump_stack_lvl+0x100/0x190 [ 96.876909][ T7590] should_fail_ex.cold+0x5/0xa [ 96.876996][ T7590] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 96.877078][ T7590] should_failslab+0xc2/0x120 [ 96.877151][ T7590] kmem_cache_alloc_noprof+0x91/0x6a0 [ 96.877198][ T7590] ? skb_clone+0x190/0x400 [ 96.877274][ T7590] skb_clone+0x190/0x400 [ 96.877291][ T7590] netlink_deliver_tap+0xaed/0xcc0 [ 96.877316][ T7590] netlink_unicast+0x62b/0x850 [ 96.877365][ T7590] ? __pfx_netlink_unicast+0x10/0x10 [ 96.877386][ T7590] ? __build_skb_around+0x278/0x390 [ 96.877416][ T7590] netlink_sendmsg+0x8b0/0xda0 [ 96.877443][ T7590] ? __pfx_netlink_sendmsg+0x10/0x10 [ 96.877471][ T7590] sock_write_iter+0x53a/0x5b0 [ 96.877492][ T7590] ? __pfx_netlink_sendmsg+0x10/0x10 [ 96.877514][ T7590] ? __pfx_sock_write_iter+0x10/0x10 [ 96.877541][ T7590] ? bpf_lsm_file_permission+0x9/0x10 [ 96.877592][ T7590] ? security_file_permission+0x76/0x210 [ 96.877702][ T7590] ? rw_verify_area+0xce/0x6d0 [ 96.877756][ T7590] vfs_write+0x6ac/0x1050 [ 96.877779][ T7590] ? __pfx_sock_write_iter+0x10/0x10 [ 96.877802][ T7590] ? __pfx_vfs_write+0x10/0x10 [ 96.877820][ T7590] ? find_held_lock+0x2b/0x80 [ 96.877903][ T7590] ksys_write+0x1f8/0x250 [ 96.877926][ T7590] ? __pfx_ksys_write+0x10/0x10 [ 96.877956][ T7590] do_syscall_64+0x115/0x870 [ 96.878045][ T7590] ? clear_bhb_loop+0x40/0x90 [ 96.878065][ T7590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.878081][ T7590] RIP: 0033:0x7f885d59de59 [ 96.878096][ T7590] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.878118][ T7590] RSP: 002b:00007f885e508028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 96.878136][ T7590] RAX: ffffffffffffffda RBX: 00007f885d825fa0 RCX: 00007f885d59de59 [ 96.878147][ T7590] RDX: 0000000000033fe0 RSI: 0000200000000000 RDI: 0000000000000003 [ 96.878155][ T7590] RBP: 00007f885e508090 R08: 0000000000000000 R09: 0000000000000000 [ 96.878165][ T7590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.878176][ T7590] R13: 00007f885d826038 R14: 00007f885d825fa0 R15: 00007ffec7e82578 [ 96.878200][ T7590] [ 96.878353][ T7590] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.123310][ T7596] netlink: 104 bytes leftover after parsing attributes in process `syz.1.476'. [ 97.225444][ T7600] loop2: detected capacity change from 0 to 7 [ 97.242558][ T7600] Dev loop2: unable to read RDB block 7 [ 97.245401][ T7600] loop2: AHDI p1 p2 p3 [ 97.247441][ T7600] loop2: partition table partially beyond EOD, truncated [ 97.254754][ T7600] loop2: p1 start 1601398130 is beyond EOD, truncated [ 97.262308][ T7600] loop2: p2 start 1702059890 is beyond EOD, truncated [ 97.309808][ T5888] libceph: connect (1)[c::]:6789 error -101 [ 97.314205][ T5888] libceph: mon0 (1)[c::]:6789 connect error [ 97.321885][ T5888] libceph: connect (1)[c::]:6789 error -101 [ 97.325850][ T5888] libceph: mon0 (1)[c::]:6789 connect error [ 97.471385][ T7615] Bluetooth: MGMT ver 1.23 [ 97.558002][ T7625] netlink: 104 bytes leftover after parsing attributes in process `syz.5.488'. [ 97.570635][ T7628] netlink: 28 bytes leftover after parsing attributes in process `syz.4.490'. [ 97.585545][ T5888] libceph: connect (1)[c::]:6789 error -101 [ 97.591465][ T5888] libceph: mon0 (1)[c::]:6789 connect error [ 97.593894][ T7629] syzkaller0: entered promiscuous mode [ 97.593909][ T7629] syzkaller0: entered allmulticast mode [ 97.747539][ T7639] process 'syz.6.495' launched './file1' with NULL argv: empty string added [ 97.833431][ T7650] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.837809][ T7650] FAULT_INJECTION: forcing a failure. [ 97.837809][ T7650] name failslab, interval 1, probability 0, space 0, times 0 [ 97.844603][ T7650] CPU: 2 UID: 0 PID: 7650 Comm: syz.6.500 Not tainted syzkaller #0 PREEMPT(full) [ 97.844627][ T7650] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 97.844636][ T7650] Call Trace: [ 97.844642][ T7650] [ 97.844649][ T7650] dump_stack_lvl+0x100/0x190 [ 97.844675][ T7650] should_fail_ex.cold+0x5/0xa [ 97.844733][ T7650] should_failslab+0xc2/0x120 [ 97.844754][ T7650] __kmalloc_cache_noprof+0x91/0x6c0 [ 97.844781][ T7650] ? ip6_route_multipath_add+0xa5b/0x1ba0 [ 97.844833][ T7650] ip6_route_multipath_add+0xa5b/0x1ba0 [ 97.844860][ T7650] ? __pfx_ip6_route_multipath_add+0x10/0x10 [ 97.844902][ T7650] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 97.844929][ T7650] ? inet6_rtm_newroute+0xf5/0x160 [ 97.844945][ T7650] inet6_rtm_newroute+0xf5/0x160 [ 97.844964][ T7650] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 97.844995][ T7650] ? find_held_lock+0x2b/0x80 [ 97.845019][ T7650] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 97.845036][ T7650] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 97.845055][ T7650] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 97.845076][ T7650] rtnetlink_rcv_msg+0x95e/0xe90 [ 97.845097][ T7650] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 97.845122][ T7650] ? ref_tracker_free+0x37e/0x6c0 [ 97.845148][ T7650] netlink_rcv_skb+0x159/0x420 [ 97.845174][ T7650] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 97.845194][ T7650] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 97.845228][ T7650] ? netlink_deliver_tap+0x1ae/0xcc0 [ 97.845255][ T7650] netlink_unicast+0x585/0x850 [ 97.845282][ T7650] ? __pfx_netlink_unicast+0x10/0x10 [ 97.845305][ T7650] ? __build_skb_around+0x278/0x390 [ 97.845336][ T7650] netlink_sendmsg+0x8b0/0xda0 [ 97.845364][ T7650] ? __pfx_netlink_sendmsg+0x10/0x10 [ 97.845397][ T7650] sock_write_iter+0x53a/0x5b0 [ 97.845419][ T7650] ? __pfx_netlink_sendmsg+0x10/0x10 [ 97.845443][ T7650] ? __pfx_sock_write_iter+0x10/0x10 [ 97.845471][ T7650] ? bpf_lsm_file_permission+0x9/0x10 [ 97.845496][ T7650] ? security_file_permission+0x76/0x210 [ 97.845522][ T7650] ? rw_verify_area+0xce/0x6d0 [ 97.845548][ T7650] vfs_write+0x6ac/0x1050 [ 97.845572][ T7650] ? __pfx_sock_write_iter+0x10/0x10 [ 97.845596][ T7650] ? __pfx_vfs_write+0x10/0x10 [ 97.845646][ T7650] ? find_held_lock+0x2b/0x80 [ 97.845687][ T7650] ksys_write+0x1f8/0x250 [ 97.845712][ T7650] ? __pfx_ksys_write+0x10/0x10 [ 97.845744][ T7650] do_syscall_64+0x115/0x870 [ 97.845769][ T7650] ? clear_bhb_loop+0x40/0x90 [ 97.845792][ T7650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.845811][ T7650] RIP: 0033:0x7f667299de59 [ 97.845828][ T7650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.845845][ T7650] RSP: 002b:00007f66737f3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 97.845864][ T7650] RAX: ffffffffffffffda RBX: 00007f6672c25fa0 RCX: 00007f667299de59 [ 97.845876][ T7650] RDX: 0000000000033fe0 RSI: 0000200000000000 RDI: 0000000000000003 [ 97.845893][ T7650] RBP: 00007f66737f3090 R08: 0000000000000000 R09: 0000000000000000 [ 97.845904][ T7650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.845914][ T7650] R13: 00007f6672c26038 R14: 00007f6672c25fa0 R15: 00007fff8e862918 [ 97.845941][ T7650] [ 97.849420][ T7652] netlink: 104 bytes leftover after parsing attributes in process `syz.5.499'. [ 97.907325][ T7654] netlink: 'syz.4.501': attribute type 44 has an invalid length. [ 98.053202][ T7663] syzkaller0: entered promiscuous mode [ 98.055413][ T7663] syzkaller0: entered allmulticast mode [ 98.092112][ T7667] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 98.097900][ T7666] syzkaller0: entered promiscuous mode [ 98.100125][ T7666] syzkaller0: entered allmulticast mode [ 98.104348][ T5888] libceph: connect (1)[c::]:6789 error -101 [ 98.106894][ T5888] libceph: mon0 (1)[c::]:6789 connect error [ 98.216330][ T7676] 9p: Could not find request transport: v [ 98.295391][ T7685] IPv6: NLM_F_CREATE should be specified when creating new route [ 98.299050][ T7685] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 98.302295][ T7685] IPv6: NLM_F_CREATE should be set when creating new route [ 98.309736][ T7685] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 98.398310][ T7692] syzkaller0: entered promiscuous mode [ 98.400306][ T7692] syzkaller0: entered allmulticast mode [ 98.500976][ T7698] syzkaller0: entered promiscuous mode [ 98.502047][ T7600] ceph: No mds server is up or the cluster is laggy [ 98.503336][ T7698] syzkaller0: entered allmulticast mode [ 98.536695][ T42] kauditd_printk_skb: 28 callbacks suppressed [ 98.536714][ T42] audit: type=1400 audit(1783386496.396:509): avc: denied { connect } for pid=7701 comm="syz.4.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 98.538369][ T7702] capability: warning: `syz.4.522' uses 32-bit capabilities (legacy support in use) [ 98.544197][ T7700] bridge1: entered promiscuous mode [ 98.552953][ T7702] syz.4.522 uses obsolete (PF_INET,SOCK_PACKET) [ 98.553718][ T7700] bridge1: entered allmulticast mode [ 98.563520][ T42] audit: type=1400 audit(1783386496.406:510): avc: denied { setopt } for pid=7701 comm="syz.4.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 98.584465][ T42] audit: type=1400 audit(1783386496.426:511): avc: denied { write } for pid=7701 comm="syz.4.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 98.599258][ T42] audit: type=1400 audit(1783386496.426:512): avc: denied { read } for pid=7701 comm="syz.4.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 98.762056][ T42] audit: type=1400 audit(1783386496.616:513): avc: denied { map } for pid=7714 comm="syz.6.527" path="socket:[21871]" dev="sockfs" ino=21871 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 98.794303][ T7715] binder: 7714:7715 ioctl c0306201 2000000004c0 returned -14 [ 98.798978][ T7715] binder: 7714:7715 ioctl c0306201 2000000001c0 returned -14 [ 98.853410][ T42] audit: type=1400 audit(1783386496.706:514): avc: denied { map_read map_write } for pid=7719 comm="syz.5.528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 98.928197][ T7725] Bluetooth: MGMT ver 1.23 [ 99.007036][ T42] audit: type=1400 audit(1783386496.866:515): avc: denied { ioctl } for pid=7726 comm="syz.5.531" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 99.020131][ T42] audit: type=1400 audit(1783386496.866:516): avc: denied { append } for pid=7726 comm="syz.5.531" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 99.113992][ T42] audit: type=1400 audit(1783386496.976:517): avc: denied { wake_alarm } for pid=7732 comm="syz.5.534" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 99.417059][ T7755] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 99.420426][ T7755] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 99.423604][ T7755] FAULT_INJECTION: forcing a failure. [ 99.423604][ T7755] name failslab, interval 1, probability 0, space 0, times 0 [ 99.427856][ T7755] CPU: 3 UID: 0 PID: 7755 Comm: syz.1.542 Not tainted syzkaller #0 PREEMPT(full) [ 99.427871][ T7755] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 99.427879][ T7755] Call Trace: [ 99.427884][ T7755] [ 99.427889][ T7755] dump_stack_lvl+0x100/0x190 [ 99.427910][ T7755] should_fail_ex.cold+0x5/0xa [ 99.427924][ T7755] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 99.427941][ T7755] should_failslab+0xc2/0x120 [ 99.427956][ T7755] kmem_cache_alloc_noprof+0x91/0x6a0 [ 99.427969][ T7755] ? skb_clone+0x190/0x400 [ 99.427984][ T7755] skb_clone+0x190/0x400 [ 99.427994][ T7755] netlink_deliver_tap+0xaed/0xcc0 [ 99.428013][ T7755] netlink_unicast+0x6a5/0x850 [ 99.428030][ T7755] ? __pfx_netlink_unicast+0x10/0x10 [ 99.428069][ T7755] netlink_ack+0x655/0xb80 [ 99.428090][ T7755] netlink_rcv_skb+0x333/0x420 [ 99.428105][ T7755] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 99.428119][ T7755] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 99.428140][ T7755] ? netlink_deliver_tap+0x1ae/0xcc0 [ 99.428157][ T7755] netlink_unicast+0x585/0x850 [ 99.428174][ T7755] ? __pfx_netlink_unicast+0x10/0x10 [ 99.428188][ T7755] ? __build_skb_around+0x278/0x390 [ 99.428208][ T7755] netlink_sendmsg+0x8b0/0xda0 [ 99.428225][ T7755] ? __pfx_netlink_sendmsg+0x10/0x10 [ 99.428245][ T7755] sock_write_iter+0x53a/0x5b0 [ 99.428259][ T7755] ? __pfx_netlink_sendmsg+0x10/0x10 [ 99.428274][ T7755] ? __pfx_sock_write_iter+0x10/0x10 [ 99.428290][ T7755] ? bpf_lsm_file_permission+0x9/0x10 [ 99.428307][ T7755] ? security_file_permission+0x76/0x210 [ 99.428324][ T7755] ? rw_verify_area+0xce/0x6d0 [ 99.428340][ T7755] vfs_write+0x6ac/0x1050 [ 99.428356][ T7755] ? __pfx_sock_write_iter+0x10/0x10 [ 99.428371][ T7755] ? __pfx_vfs_write+0x10/0x10 [ 99.428385][ T7755] ? find_held_lock+0x2b/0x80 [ 99.428419][ T7755] ksys_write+0x1f8/0x250 [ 99.428434][ T7755] ? __pfx_ksys_write+0x10/0x10 [ 99.428454][ T7755] do_syscall_64+0x115/0x870 [ 99.428470][ T7755] ? clear_bhb_loop+0x40/0x90 [ 99.428485][ T7755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.428497][ T7755] RIP: 0033:0x7fd96d79de59 [ 99.428508][ T7755] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.428519][ T7755] RSP: 002b:00007fd96e6de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 99.428531][ T7755] RAX: ffffffffffffffda RBX: 00007fd96da25fa0 RCX: 00007fd96d79de59 [ 99.428538][ T7755] RDX: 0000000000033fe0 RSI: 0000200000000000 RDI: 0000000000000003 [ 99.428544][ T7755] RBP: 00007fd96e6de090 R08: 0000000000000000 R09: 0000000000000000 [ 99.428551][ T7755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.428557][ T7755] R13: 00007fd96da26038 R14: 00007fd96da25fa0 R15: 00007ffc408f5dc8 [ 99.428571][ T7755] [ 99.477238][ T7759] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 99.652975][ T7773] netlink: 28 bytes leftover after parsing attributes in process `syz.1.548'. [ 99.675937][ T7775] netlink: 104 bytes leftover after parsing attributes in process `syz.5.549'. [ 99.708261][ T7778] openvswitch: netlink: IP tunnel dst address not specified [ 99.715889][ T7778] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 99.725179][ T7778] openvswitch: netlink: IP tunnel dst address not specified [ 99.728673][ T7778] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 99.733482][ T7778] openvswitch: netlink: IP tunnel dst address not specified [ 99.736746][ T7778] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 99.739851][ T7778] openvswitch: netlink: IP tunnel dst address not specified [ 99.742844][ T7778] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 99.747096][ T7778] openvswitch: netlink: IP tunnel dst address not specified [ 99.770477][ T7785] netlink: 4 bytes leftover after parsing attributes in process `syz.1.553'. [ 99.826876][ T42] audit: type=1400 audit(1783386497.686:518): avc: denied { map } for pid=7784 comm="syz.1.553" path="/dev/usbmon0" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 99.875901][ T7785] bond1: Invalid ad_actor_system MAC address. [ 99.877998][ T7785] bond1: option ad_actor_system: invalid value (27571) [ 99.896452][ T7785] bond1 (unregistering): Released all slaves [ 99.926442][ T7783] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 99.938382][ T7783] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7783 comm=syz.6.551 [ 99.945214][ T7783] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 100.098803][ T7820] netlink: 104 bytes leftover after parsing attributes in process `syz.1.561'. [ 100.337078][ T7838] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 100.340938][ T7838] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 100.520695][ T7857] FAULT_INJECTION: forcing a failure. [ 100.520695][ T7857] name failslab, interval 1, probability 0, space 0, times 0 [ 100.528545][ T7857] CPU: 3 UID: 0 PID: 7857 Comm: syz.6.577 Not tainted syzkaller #0 PREEMPT(full) [ 100.528565][ T7857] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.528573][ T7857] Call Trace: [ 100.528579][ T7857] [ 100.528585][ T7857] dump_stack_lvl+0x100/0x190 [ 100.528655][ T7857] should_fail_ex.cold+0x5/0xa [ 100.528694][ T7857] should_failslab+0xc2/0x120 [ 100.528735][ T7857] __kmalloc_noprof+0xfc/0x820 [ 100.528791][ T7857] ? rcu_is_watching+0x12/0xc0 [ 100.528833][ T7857] ? tomoyo_realpath_from_path+0xb6/0x690 [ 100.528881][ T7857] tomoyo_realpath_from_path+0xb6/0x690 [ 100.528928][ T7857] tomoyo_path_number_perm+0x23c/0x580 [ 100.528941][ T7857] ? tomoyo_path_number_perm+0x22e/0x580 [ 100.528956][ T7857] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 100.528983][ T7857] ? find_held_lock+0x2b/0x80 [ 100.529021][ T7857] ? __fget_files+0x215/0x3d0 [ 100.529059][ T7857] ? hook_file_ioctl_common+0x140/0x440 [ 100.529077][ T7857] ? __fget_files+0x215/0x3d0 [ 100.529096][ T7857] ? __fget_files+0x21f/0x3d0 [ 100.529115][ T7857] security_file_ioctl+0xd3/0x230 [ 100.529154][ T7857] __x64_sys_ioctl+0xb7/0x210 [ 100.529170][ T7857] do_syscall_64+0x115/0x870 [ 100.529193][ T7857] ? clear_bhb_loop+0x40/0x90 [ 100.529208][ T7857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.529220][ T7857] RIP: 0033:0x7f667299de59 [ 100.529230][ T7857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.529242][ T7857] RSP: 002b:00007f66737f3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 100.529255][ T7857] RAX: ffffffffffffffda RBX: 00007f6672c25fa0 RCX: 00007f667299de59 [ 100.529262][ T7857] RDX: 0000200000000080 RSI: 00000000c028aa03 RDI: 0000000000000003 [ 100.529270][ T7857] RBP: 00007f66737f3090 R08: 0000000000000000 R09: 0000000000000000 [ 100.529277][ T7857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.529284][ T7857] R13: 00007f6672c26038 R14: 00007f6672c25fa0 R15: 00007fff8e862918 [ 100.529299][ T7857] [ 100.529328][ T7857] ERROR: Out of memory at tomoyo_realpath_from_path. [ 100.676568][ T7873] FAULT_INJECTION: forcing a failure. [ 100.676568][ T7873] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 100.686294][ T7873] CPU: 0 UID: 0 PID: 7873 Comm: syz.6.581 Not tainted syzkaller #0 PREEMPT(full) [ 100.686318][ T7873] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.686325][ T7873] Call Trace: [ 100.686329][ T7873] [ 100.686334][ T7873] dump_stack_lvl+0x100/0x190 [ 100.686353][ T7873] should_fail_ex.cold+0x5/0xa [ 100.686368][ T7873] _copy_from_user+0x2e/0xd0 [ 100.686414][ T7873] copy_msghdr_from_user+0x9f/0x4c0 [ 100.686431][ T7873] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 100.686452][ T7873] ___sys_sendmsg+0x106/0x1e0 [ 100.686467][ T7873] ? __pfx____sys_sendmsg+0x10/0x10 [ 100.686481][ T7873] ? __lock_acquire+0x49f/0x1a40 [ 100.686496][ T7873] ? get_pid_task+0x106/0x250 [ 100.686547][ T7873] __sys_sendmsg+0x160/0x210 [ 100.686558][ T7873] ? __pfx___sys_sendmsg+0x10/0x10 [ 100.686576][ T7873] do_syscall_64+0x115/0x870 [ 100.686592][ T7873] ? clear_bhb_loop+0x40/0x90 [ 100.686606][ T7873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.686617][ T7873] RIP: 0033:0x7f667299de59 [ 100.686628][ T7873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.686639][ T7873] RSP: 002b:00007f66737f3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 100.686651][ T7873] RAX: ffffffffffffffda RBX: 00007f6672c25fa0 RCX: 00007f667299de59 [ 100.686658][ T7873] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 100.686665][ T7873] RBP: 00007f66737f3090 R08: 0000000000000000 R09: 0000000000000000 [ 100.686671][ T7873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.686678][ T7873] R13: 00007f6672c26038 R14: 00007f6672c25fa0 R15: 00007fff8e862918 [ 100.686692][ T7873] [ 101.064826][ T7898] __nla_validate_parse: 4 callbacks suppressed [ 101.064840][ T7898] netlink: 24 bytes leftover after parsing attributes in process `syz.1.592'. [ 101.122108][ T7905] FAULT_INJECTION: forcing a failure. [ 101.122108][ T7905] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 101.127939][ T7905] CPU: 0 UID: 0 PID: 7905 Comm: syz.5.594 Not tainted syzkaller #0 PREEMPT(full) [ 101.127959][ T7905] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 101.127967][ T7905] Call Trace: [ 101.127972][ T7905] [ 101.127977][ T7905] dump_stack_lvl+0x100/0x190 [ 101.127999][ T7905] should_fail_ex.cold+0x5/0xa [ 101.128017][ T7905] _copy_from_user+0x2e/0xd0 [ 101.128075][ T7905] copy_msghdr_from_user+0x9f/0x4c0 [ 101.128100][ T7905] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 101.128125][ T7905] ___sys_sendmsg+0x106/0x1e0 [ 101.128143][ T7905] ? __pfx____sys_sendmsg+0x10/0x10 [ 101.128161][ T7905] ? __lock_acquire+0x49f/0x1a40 [ 101.128189][ T7905] ? get_pid_task+0x106/0x250 [ 101.128243][ T7905] __sys_sendmsg+0x160/0x210 [ 101.128261][ T7905] ? __pfx___sys_sendmsg+0x10/0x10 [ 101.128294][ T7905] do_syscall_64+0x115/0x870 [ 101.128319][ T7905] ? clear_bhb_loop+0x40/0x90 [ 101.128335][ T7905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.128349][ T7905] RIP: 0033:0x7f885d59de59 [ 101.128361][ T7905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.128374][ T7905] RSP: 002b:00007f885e508028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 101.128389][ T7905] RAX: ffffffffffffffda RBX: 00007f885d825fa0 RCX: 00007f885d59de59 [ 101.128397][ T7905] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 101.128405][ T7905] RBP: 00007f885e508090 R08: 0000000000000000 R09: 0000000000000000 [ 101.128412][ T7905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.128419][ T7905] R13: 00007f885d826038 R14: 00007f885d825fa0 R15: 00007ffec7e82578 [ 101.128436][ T7905] [ 101.254661][ T7911] netlink: 24 bytes leftover after parsing attributes in process `syz.5.595'. [ 101.664623][ T7925] befs: (loop5): No write support. Marking filesystem read-only [ 101.672675][ T7925] befs: (loop5): unable to read superblock [ 101.898558][ T7931] FAULT_INJECTION: forcing a failure. [ 101.898558][ T7931] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 101.904534][ T7931] CPU: 0 UID: 0 PID: 7931 Comm: syz.5.601 Not tainted syzkaller #0 PREEMPT(full) [ 101.904560][ T7931] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 101.904571][ T7931] Call Trace: [ 101.904578][ T7931] [ 101.904585][ T7931] dump_stack_lvl+0x100/0x190 [ 101.904615][ T7931] should_fail_ex.cold+0x5/0xa [ 101.904639][ T7931] _copy_from_user+0x2e/0xd0 [ 101.904662][ T7931] userfaultfd_ioctl+0x2b2c/0x5990 [ 101.904712][ T7931] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 101.904768][ T7931] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 101.904793][ T7931] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 101.904825][ T7931] ? __fget_files+0x215/0x3d0 [ 101.904851][ T7931] ? hook_file_ioctl_common+0x140/0x440 [ 101.904887][ T7931] ? selinux_file_ioctl+0x13b/0x290 [ 101.904912][ T7931] ? selinux_file_ioctl+0xb6/0x290 [ 101.904935][ T7931] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 101.904962][ T7931] ? __x64_sys_ioctl+0x18e/0x210 [ 101.904984][ T7931] __x64_sys_ioctl+0x18e/0x210 [ 101.905009][ T7931] do_syscall_64+0x115/0x870 [ 101.905035][ T7931] ? clear_bhb_loop+0x40/0x90 [ 101.905056][ T7931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.905075][ T7931] RIP: 0033:0x7f885d59de59 [ 101.905091][ T7931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.905108][ T7931] RSP: 002b:00007f885e508028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 101.905127][ T7931] RAX: ffffffffffffffda RBX: 00007f885d825fa0 RCX: 00007f885d59de59 [ 101.905138][ T7931] RDX: 0000200000000080 RSI: 00000000c028aa03 RDI: 0000000000000003 [ 101.905148][ T7931] RBP: 00007f885e508090 R08: 0000000000000000 R09: 0000000000000000 [ 101.905159][ T7931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.905169][ T7931] R13: 00007f885d826038 R14: 00007f885d825fa0 R15: 00007ffec7e82578 [ 101.905199][ T7931] [ 102.035291][ T7933] syzkaller0: entered promiscuous mode [ 102.037223][ T7933] syzkaller0: entered allmulticast mode [ 102.118620][ T7939] dlm: no locking on control device [ 102.179894][ T7942] netlink: 104 bytes leftover after parsing attributes in process `syz.5.605'. [ 102.680750][ T7960] netlink: 24 bytes leftover after parsing attributes in process `syz.5.611'. [ 102.734056][ T7962] syzkaller0: entered promiscuous mode [ 102.736593][ T7962] syzkaller0: entered allmulticast mode [ 102.888447][ T7969] syzkaller0: entered promiscuous mode [ 102.890952][ T7969] syzkaller0: entered allmulticast mode [ 102.934452][ T7971] syzkaller0: entered promiscuous mode [ 102.936648][ T7971] syzkaller0: entered allmulticast mode [ 103.092910][ T7982] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 103.097746][ T7982] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 103.198447][ T7991] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 103.210302][ T7996] syzkaller0: entered promiscuous mode [ 103.212159][ T7996] syzkaller0: entered allmulticast mode [ 103.355569][ T8000] netlink: 'syz.5.626': attribute type 61 has an invalid length. [ 103.391767][ T8004] FAULT_INJECTION: forcing a failure. [ 103.391767][ T8004] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.397295][ T8004] CPU: 1 UID: 0 PID: 8004 Comm: syz.5.629 Not tainted syzkaller #0 PREEMPT(full) [ 103.397323][ T8004] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.397335][ T8004] Call Trace: [ 103.397343][ T8004] [ 103.397351][ T8004] dump_stack_lvl+0x100/0x190 [ 103.397383][ T8004] should_fail_ex.cold+0x5/0xa [ 103.397409][ T8004] _copy_from_user+0x2e/0xd0 [ 103.397435][ T8004] kstrtouint_from_user+0xd6/0x1d0 [ 103.397464][ T8004] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 103.397491][ T8004] ? __lock_acquire+0x49f/0x1a40 [ 103.397525][ T8004] proc_fail_nth_write+0x83/0x220 [ 103.397623][ T8004] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 103.397657][ T8004] vfs_write+0x2aa/0x1050 [ 103.397687][ T8004] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 103.397716][ T8004] ? __pfx_vfs_write+0x10/0x10 [ 103.397741][ T8004] ? __fget_files+0x215/0x3d0 [ 103.397777][ T8004] ? __fget_files+0x21f/0x3d0 [ 103.397815][ T8004] ksys_write+0x12a/0x250 [ 103.397841][ T8004] ? __pfx_ksys_write+0x10/0x10 [ 103.397876][ T8004] do_syscall_64+0x115/0x870 [ 103.397903][ T8004] ? clear_bhb_loop+0x40/0x90 [ 103.397928][ T8004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.397948][ T8004] RIP: 0033:0x7f885d55e68e [ 103.397965][ T8004] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 103.397984][ T8004] RSP: 002b:00007f885e507fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 103.398004][ T8004] RAX: ffffffffffffffda RBX: 00007f885e5086c0 RCX: 00007f885d55e68e [ 103.398017][ T8004] RDX: 0000000000000001 RSI: 00007f885e5080a0 RDI: 0000000000000004 [ 103.398028][ T8004] RBP: 00007f885e508090 R08: 0000000000000000 R09: 0000000000000000 [ 103.398040][ T8004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.398051][ T8004] R13: 00007f885d826038 R14: 00007f885d825fa0 R15: 00007ffec7e82578 [ 103.398079][ T8004] [ 103.485933][ T8007] syz_tun: entered allmulticast mode [ 103.486372][ T8009] FAULT_INJECTION: forcing a failure. [ 103.486372][ T8009] name failslab, interval 1, probability 0, space 0, times 0 [ 103.497313][ T8009] CPU: 3 UID: 0 PID: 8009 Comm: syz.6.631 Not tainted syzkaller #0 PREEMPT(full) [ 103.497344][ T8009] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.497356][ T8009] Call Trace: [ 103.497365][ T8009] [ 103.497373][ T8009] dump_stack_lvl+0x100/0x190 [ 103.497405][ T8009] should_fail_ex.cold+0x5/0xa [ 103.497433][ T8009] should_failslab+0xc2/0x120 [ 103.497457][ T8009] __kmalloc_noprof+0xfc/0x820 [ 103.497482][ T8009] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 103.497522][ T8009] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 103.497561][ T8009] genl_family_rcv_msg_doit+0xc7/0x300 [ 103.497594][ T8009] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 103.497654][ T8009] ? bpf_lsm_capable+0x9/0x10 [ 103.497731][ T8009] ? security_capable+0x80/0x260 [ 103.497759][ T8009] ? ns_capable+0xd2/0xf0 [ 103.497814][ T8009] genl_rcv_msg+0x560/0x800 [ 103.497850][ T8009] ? __pfx_genl_rcv_msg+0x10/0x10 [ 103.497882][ T8009] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 103.497956][ T8009] ? __pfx_nl80211_new_key+0x10/0x10 [ 103.497976][ T8009] ? __pfx_nl80211_post_doit+0x10/0x10 [ 103.498017][ T8009] netlink_rcv_skb+0x159/0x420 [ 103.498045][ T8009] ? __pfx_genl_rcv_msg+0x10/0x10 [ 103.498080][ T8009] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 103.498122][ T8009] ? netlink_deliver_tap+0x1ae/0xcc0 [ 103.498155][ T8009] genl_rcv+0x28/0x40 [ 103.498190][ T8009] netlink_unicast+0x585/0x850 [ 103.498225][ T8009] ? __pfx_netlink_unicast+0x10/0x10 [ 103.498264][ T8009] netlink_sendmsg+0x8b0/0xda0 [ 103.498301][ T8009] ? __pfx_netlink_sendmsg+0x10/0x10 [ 103.498331][ T8009] ? __might_fault+0x20/0x140 [ 103.498411][ T8009] ____sys_sendmsg+0xa4d/0xbe0 [ 103.498440][ T8009] ? __pfx_netlink_sendmsg+0x10/0x10 [ 103.498475][ T8009] ? __pfx_____sys_sendmsg+0x10/0x10 [ 103.498519][ T8009] ___sys_sendmsg+0x190/0x1e0 [ 103.498553][ T8009] ? __pfx____sys_sendmsg+0x10/0x10 [ 103.498581][ T8009] ? __lock_acquire+0x49f/0x1a40 [ 103.498610][ T8009] ? get_pid_task+0x106/0x250 [ 103.498681][ T8009] __sys_sendmsg+0x160/0x210 [ 103.498707][ T8009] ? __pfx___sys_sendmsg+0x10/0x10 [ 103.498748][ T8009] do_syscall_64+0x115/0x870 [ 103.498780][ T8009] ? clear_bhb_loop+0x40/0x90 [ 103.498813][ T8009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.498838][ T8009] RIP: 0033:0x7f667299de59 [ 103.498859][ T8009] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.498882][ T8009] RSP: 002b:00007f66737f3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 103.498908][ T8009] RAX: ffffffffffffffda RBX: 00007f6672c25fa0 RCX: 00007f667299de59 [ 103.498925][ T8009] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 103.498938][ T8009] RBP: 00007f66737f3090 R08: 0000000000000000 R09: 0000000000000000 [ 103.498951][ T8009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.498963][ T8009] R13: 00007f6672c26038 R14: 00007f6672c25fa0 R15: 00007fff8e862918 [ 103.498996][ T8009] [ 103.629497][ T8014] syzkaller0: entered promiscuous mode [ 103.631786][ T8014] syzkaller0: entered allmulticast mode [ 103.765016][ T8020] netlink: 24 bytes leftover after parsing attributes in process `syz.4.634'. [ 103.817183][ T8026] tmpfs: Bad value for 'huge' [ 103.872407][ T42] kauditd_printk_skb: 17 callbacks suppressed [ 103.872426][ T42] audit: type=1400 audit(1783386501.726:536): avc: denied { getopt } for pid=8027 comm="syz.6.638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 103.945398][ T42] audit: type=1400 audit(1783386501.806:537): avc: denied { read } for pid=8031 comm="syz.1.639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 103.960935][ T8034] netlink: 24 bytes leftover after parsing attributes in process `syz.6.640'. [ 103.966379][ T8034] FAULT_INJECTION: forcing a failure. [ 103.966379][ T8034] name failslab, interval 1, probability 0, space 0, times 0 [ 103.990719][ T8034] CPU: 3 UID: 0 PID: 8034 Comm: syz.6.640 Not tainted syzkaller #0 PREEMPT(full) [ 103.990747][ T8034] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.990759][ T8034] Call Trace: [ 103.990766][ T8034] [ 103.990773][ T8034] dump_stack_lvl+0x100/0x190 [ 103.990806][ T8034] should_fail_ex.cold+0x5/0xa [ 103.990830][ T8034] should_failslab+0xc2/0x120 [ 103.990871][ T8034] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 103.990895][ T8034] ? __alloc_skb+0x140/0x710 [ 103.990928][ T8034] __alloc_skb+0x140/0x710 [ 103.990954][ T8034] ? __alloc_skb+0x5b7/0x710 [ 103.990979][ T8034] ? __pfx___alloc_skb+0x10/0x10 [ 103.991005][ T8034] ? genl_rcv_msg+0x4be/0x800 [ 103.991039][ T8034] netlink_ack+0x117/0xb80 [ 103.991072][ T8034] netlink_rcv_skb+0x333/0x420 [ 103.991097][ T8034] ? __pfx_genl_rcv_msg+0x10/0x10 [ 103.991125][ T8034] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 103.991160][ T8034] ? netlink_deliver_tap+0x1ae/0xcc0 [ 103.991188][ T8034] genl_rcv+0x28/0x40 [ 103.991212][ T8034] netlink_unicast+0x585/0x850 [ 103.991240][ T8034] ? __pfx_netlink_unicast+0x10/0x10 [ 103.991272][ T8034] netlink_sendmsg+0x8b0/0xda0 [ 103.991301][ T8034] ? __pfx_netlink_sendmsg+0x10/0x10 [ 103.991329][ T8034] ? __might_fault+0x20/0x140 [ 103.991365][ T8034] ____sys_sendmsg+0xa4d/0xbe0 [ 103.991385][ T8034] ? __pfx_netlink_sendmsg+0x10/0x10 [ 103.991410][ T8034] ? __pfx_____sys_sendmsg+0x10/0x10 [ 103.991445][ T8034] ___sys_sendmsg+0x190/0x1e0 [ 103.991472][ T8034] ? __pfx____sys_sendmsg+0x10/0x10 [ 103.991493][ T8034] ? __lock_acquire+0x49f/0x1a40 [ 103.991517][ T8034] ? get_pid_task+0x106/0x250 [ 103.991572][ T8034] __sys_sendmsg+0x160/0x210 [ 103.991590][ T8034] ? __pfx___sys_sendmsg+0x10/0x10 [ 103.991622][ T8034] do_syscall_64+0x115/0x870 [ 103.991647][ T8034] ? clear_bhb_loop+0x40/0x90 [ 103.991669][ T8034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.991687][ T8034] RIP: 0033:0x7f667299de59 [ 103.991703][ T8034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.991719][ T8034] RSP: 002b:00007f66737f3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 103.991738][ T8034] RAX: ffffffffffffffda RBX: 00007f6672c25fa0 RCX: 00007f667299de59 [ 103.991749][ T8034] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 103.991759][ T8034] RBP: 00007f66737f3090 R08: 0000000000000000 R09: 0000000000000000 [ 103.991770][ T8034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.991781][ T8034] R13: 00007f6672c26038 R14: 00007f6672c25fa0 R15: 00007fff8e862918 [ 103.991804][ T8034] [ 104.123046][ T8044] FAULT_INJECTION: forcing a failure. [ 104.123046][ T8044] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.129712][ T8044] CPU: 3 UID: 0 PID: 8044 Comm: syz.5.644 Not tainted syzkaller #0 PREEMPT(full) [ 104.129734][ T8044] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 104.129743][ T8044] Call Trace: [ 104.129749][ T8044] [ 104.129756][ T8044] dump_stack_lvl+0x100/0x190 [ 104.129779][ T8044] should_fail_ex.cold+0x5/0xa [ 104.129794][ T8044] ? __mem_cgroup_charge+0xb3/0x1c0 [ 104.129816][ T8044] _copy_from_user+0x2e/0xd0 [ 104.129833][ T8044] __mfill_atomic_pte+0x53f/0xb50 [ 104.129854][ T8044] ? _raw_spin_unlock+0x28/0x50 [ 104.129872][ T8044] ? __pfx___mfill_atomic_pte+0x10/0x10 [ 104.129889][ T8044] ? __pfx___pte_alloc+0x10/0x10 [ 104.129905][ T8044] ? mm_alloc_pmd+0x2c2/0x470 [ 104.129926][ T8044] mfill_atomic_copy+0x72c/0x16c0 [ 104.129952][ T8044] ? __pfx_mfill_atomic_copy+0x10/0x10 [ 104.129971][ T8044] ? find_held_lock+0x2b/0x80 [ 104.130000][ T8044] userfaultfd_ioctl+0x2dee/0x5990 [ 104.130028][ T8044] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 104.130046][ T8044] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 104.130070][ T8044] ? __fget_files+0x215/0x3d0 [ 104.130092][ T8044] ? hook_file_ioctl_common+0x140/0x440 [ 104.130119][ T8044] ? selinux_file_ioctl+0x13b/0x290 [ 104.130138][ T8044] ? selinux_file_ioctl+0xb6/0x290 [ 104.130155][ T8044] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 104.130176][ T8044] ? __x64_sys_ioctl+0x18e/0x210 [ 104.130192][ T8044] __x64_sys_ioctl+0x18e/0x210 [ 104.130212][ T8044] do_syscall_64+0x115/0x870 [ 104.130231][ T8044] ? clear_bhb_loop+0x40/0x90 [ 104.130247][ T8044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.130261][ T8044] RIP: 0033:0x7f885d59de59 [ 104.130274][ T8044] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.130287][ T8044] RSP: 002b:00007f885e508028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 104.130301][ T8044] RAX: ffffffffffffffda RBX: 00007f885d825fa0 RCX: 00007f885d59de59 [ 104.130309][ T8044] RDX: 0000200000000080 RSI: 00000000c028aa03 RDI: 0000000000000003 [ 104.130318][ T8044] RBP: 00007f885e508090 R08: 0000000000000000 R09: 0000000000000000 [ 104.130325][ T8044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.130333][ T8044] R13: 00007f885d826038 R14: 00007f885d825fa0 R15: 00007ffec7e82578 [ 104.130350][ T8044] [ 104.158609][ T8040] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.318933][ T8057] netlink: 24 bytes leftover after parsing attributes in process `syz.4.647'. [ 104.381322][ T8061] overlayfs: workdir and upperdir must be separate subtrees [ 104.387685][ T42] audit: type=1400 audit(1783386502.246:538): avc: denied { read } for pid=8056 comm="syz.5.648" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 104.388158][ T8058] Error: Device magic number does not match. [ 104.414818][ T42] audit: type=1400 audit(1783386502.276:539): avc: denied { read write } for pid=8060 comm="syz.4.649" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 104.430305][ T42] audit: type=1400 audit(1783386502.276:540): avc: denied { open } for pid=8060 comm="syz.4.649" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 104.431135][ T8046] netlink: 'syz.6.645': attribute type 1 has an invalid length. [ 104.441716][ T42] audit: type=1400 audit(1783386502.306:541): avc: denied { unmount } for pid=6539 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 104.485237][ T8052] netlink: 28 bytes leftover after parsing attributes in process `syz.6.645'. [ 104.512261][ T8046] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.528003][ T8064] netlink: 'syz.1.650': attribute type 1 has an invalid length. [ 104.537703][ T42] audit: type=1400 audit(1783386502.396:542): avc: denied { getopt } for pid=8045 comm="syz.6.645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 104.608384][ T8081] net_ratelimit: 49 callbacks suppressed [ 104.608396][ T8081] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 104.688897][ T8087] netlink: 24 bytes leftover after parsing attributes in process `syz.1.656'. [ 104.693139][ T8087] FAULT_INJECTION: forcing a failure. [ 104.693139][ T8087] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.700984][ T8087] CPU: 1 UID: 0 PID: 8087 Comm: syz.1.656 Not tainted syzkaller #0 PREEMPT(full) [ 104.701010][ T8087] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 104.701021][ T8087] Call Trace: [ 104.701028][ T8087] [ 104.701036][ T8087] dump_stack_lvl+0x100/0x190 [ 104.701108][ T8087] should_fail_ex.cold+0x5/0xa [ 104.701130][ T8087] _copy_to_user+0x32/0xd0 [ 104.701153][ T8087] simple_read_from_buffer+0xcb/0x170 [ 104.701214][ T8087] proc_fail_nth_read+0x1af/0x230 [ 104.701239][ T8087] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 104.701264][ T8087] ? rw_verify_area+0xce/0x6d0 [ 104.701285][ T8087] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 104.701308][ T8087] vfs_read+0x1e4/0xb40 [ 104.701335][ T8087] ? __pfx_vfs_read+0x10/0x10 [ 104.701358][ T8087] ? __fget_files+0x215/0x3d0 [ 104.701390][ T8087] ? __fget_files+0x21f/0x3d0 [ 104.701425][ T8087] ksys_read+0x12a/0x250 [ 104.701453][ T8087] ? __pfx_ksys_read+0x10/0x10 [ 104.701491][ T8087] do_syscall_64+0x115/0x870 [ 104.701521][ T8087] ? clear_bhb_loop+0x40/0x90 [ 104.701543][ T8087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.701562][ T8087] RIP: 0033:0x7fd96d75e68e [ 104.701583][ T8087] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 104.701605][ T8087] RSP: 002b:00007fd96e6ddfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 104.701625][ T8087] RAX: ffffffffffffffda RBX: 00007fd96e6de6c0 RCX: 00007fd96d75e68e [ 104.701639][ T8087] RDX: 000000000000000f RSI: 00007fd96e6de0a0 RDI: 0000000000000004 [ 104.701651][ T8087] RBP: 00007fd96e6de090 R08: 0000000000000000 R09: 0000000000000000 [ 104.701662][ T8087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.701673][ T8087] R13: 00007fd96da26038 R14: 00007fd96da25fa0 R15: 00007ffc408f5dc8 [ 104.701700][ T8087] [ 104.844281][ T8094] netlink: 24 bytes leftover after parsing attributes in process `syz.5.659'. [ 104.967760][ T8100] xt_bpf: check failed: parse error [ 104.971214][ T42] audit: type=1400 audit(1783386502.826:543): avc: denied { append } for pid=8099 comm="syz.5.662" name="pmem0" dev="devtmpfs" ino=711 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 104.991478][ T8100] xt_policy: neither incoming nor outgoing policy selected [ 105.008489][ T8102] syzkaller0: entered promiscuous mode [ 105.010893][ T8102] syzkaller0: entered allmulticast mode [ 105.044322][ T8104] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=8104 comm=syz.5.664 [ 105.229838][ T42] audit: type=1400 audit(1783386503.086:544): avc: denied { mounton } for pid=8120 comm="syz.6.671" path="/116/file1/file0" dev="autofs" ino=20312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 105.279771][ T8125] FAULT_INJECTION: forcing a failure. [ 105.279771][ T8125] name failslab, interval 1, probability 0, space 0, times 0 [ 105.287913][ T8125] CPU: 1 UID: 0 PID: 8125 Comm: syz.5.673 Not tainted syzkaller #0 PREEMPT(full) [ 105.287933][ T8125] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 105.287940][ T8125] Call Trace: [ 105.287944][ T8125] [ 105.287949][ T8125] dump_stack_lvl+0x100/0x190 [ 105.288006][ T8125] should_fail_ex.cold+0x5/0xa [ 105.288027][ T8125] should_failslab+0xc2/0x120 [ 105.288042][ T8125] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 105.288054][ T8125] ? __alloc_skb+0x5b7/0x710 [ 105.288071][ T8125] ? __alloc_skb+0x140/0x710 [ 105.288090][ T8125] __alloc_skb+0x140/0x710 [ 105.288105][ T8125] ? __alloc_skb+0x5b7/0x710 [ 105.288122][ T8125] ? __pfx___alloc_skb+0x10/0x10 [ 105.288142][ T8125] netlink_alloc_large_skb+0x69/0x150 [ 105.288160][ T8125] netlink_sendmsg+0x680/0xda0 [ 105.288177][ T8125] ? __pfx_netlink_sendmsg+0x10/0x10 [ 105.288191][ T8125] ? __might_fault+0x20/0x140 [ 105.288219][ T8125] ____sys_sendmsg+0xa4d/0xbe0 [ 105.288233][ T8125] ? __pfx_netlink_sendmsg+0x10/0x10 [ 105.288249][ T8125] ? __pfx_____sys_sendmsg+0x10/0x10 [ 105.288269][ T8125] ___sys_sendmsg+0x190/0x1e0 [ 105.288285][ T8125] ? __pfx____sys_sendmsg+0x10/0x10 [ 105.288299][ T8125] ? __lock_acquire+0x49f/0x1a40 [ 105.288312][ T8125] ? get_pid_task+0x106/0x250 [ 105.288345][ T8125] __sys_sendmsg+0x160/0x210 [ 105.288356][ T8125] ? __pfx___sys_sendmsg+0x10/0x10 [ 105.288374][ T8125] do_syscall_64+0x115/0x870 [ 105.288390][ T8125] ? clear_bhb_loop+0x40/0x90 [ 105.288405][ T8125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.288416][ T8125] RIP: 0033:0x7f885d59de59 [ 105.288427][ T8125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.288438][ T8125] RSP: 002b:00007f885e508028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 105.288450][ T8125] RAX: ffffffffffffffda RBX: 00007f885d825fa0 RCX: 00007f885d59de59 [ 105.288457][ T8125] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 105.288464][ T8125] RBP: 00007f885e508090 R08: 0000000000000000 R09: 0000000000000000 [ 105.288470][ T8125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.288477][ T8125] R13: 00007f885d826038 R14: 00007f885d825fa0 R15: 00007ffec7e82578 [ 105.288491][ T8125] [ 105.289374][ T5794] bond0 (unregistering): Released all slaves [ 105.401634][ T8121] openvswitch: netlink: Key type 331 is out of range max 32 [ 105.490021][ T42] audit: type=1400 audit(1783386503.346:545): avc: denied { create } for pid=8135 comm="syz.4.677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 105.569379][ T8146] tmpfs: Unknown parameter 'n' [ 105.808092][ T8161] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 105.833273][ T8163] syzkaller0: entered promiscuous mode [ 105.836221][ T8163] syzkaller0: entered allmulticast mode [ 106.050103][ T8174] netlink: 'syz.4.691': attribute type 8 has an invalid length. [ 106.240695][ T8183] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 106.247138][ T8183] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 106.252920][ T8183] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 106.256245][ T8183] UDF-fs: Scanning with blocksize 512 failed [ 106.260107][ T8183] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 106.265247][ T8183] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 106.269460][ T8183] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 106.272500][ T8183] UDF-fs: Scanning with blocksize 1024 failed [ 106.275434][ T8183] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 106.279807][ T8183] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 106.284316][ T8183] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 106.287113][ T8183] UDF-fs: Scanning with blocksize 2048 failed [ 106.291184][ T8183] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 106.296160][ T8183] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 106.299784][ T8183] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 106.309460][ T8183] UDF-fs: Scanning with blocksize 4096 failed [ 106.312462][ T8183] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 106.323870][ T8183] netlink: 'syz.4.694': attribute type 6 has an invalid length. [ 106.518193][ T8194] syzkaller0: entered promiscuous mode [ 106.520382][ T8194] syzkaller0: entered allmulticast mode [ 106.642805][ T5836] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 106.792316][ T5836] usb 10-1: Using ep0 maxpacket: 16 [ 106.804385][ T5836] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 106.811252][ T5836] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 106.816306][ T5836] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.822717][ T5836] usb 10-1: Product: syz [ 106.825421][ T5836] usb 10-1: Manufacturer: syz [ 106.827828][ T5836] usb 10-1: SerialNumber: syz [ 106.834220][ T5836] usb 10-1: config 0 descriptor?? [ 106.842464][ T5836] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 106.846939][ T5836] em28xx 10-1:0.0: DVB interface 0 found: bulk [ 107.005611][ T8199] syzkaller0: entered promiscuous mode [ 107.008415][ T8199] syzkaller0: entered allmulticast mode [ 107.120392][ T5888] IPVS: starting estimator thread 0... [ 107.212484][ T8211] IPVS: using max 30 ests per chain, 72000 per kthread [ 107.423181][ T8225] __nla_validate_parse: 4 callbacks suppressed [ 107.423194][ T8225] netlink: 24 bytes leftover after parsing attributes in process `syz.4.707'. [ 107.449434][ T8223] macsec1: entered promiscuous mode [ 107.451187][ T8223] macsec1: entered allmulticast mode [ 107.459386][ T8228] netlink: 104 bytes leftover after parsing attributes in process `syz.4.708'. [ 107.460584][ T5836] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 107.592827][ T8242] syzkaller0: entered promiscuous mode [ 107.594907][ T8242] syzkaller0: entered allmulticast mode [ 107.641164][ T8244] netlink: 24 bytes leftover after parsing attributes in process `syz.1.713'. [ 107.698815][ T8246] netlink: 12 bytes leftover after parsing attributes in process `syz.1.714'. [ 107.756597][ T8251] netlink: 4 bytes leftover after parsing attributes in process `syz.1.716'. [ 107.763012][ T8250] netlink: 4 bytes leftover after parsing attributes in process `syz.1.716'. [ 107.794436][ T8253] tmpfs: Unknown parameter 'nr_blo' [ 107.890928][ T5836] em28xx 10-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 107.895097][ T5836] em28xx 10-1:0.0: board has no eeprom [ 107.977543][ T8257] netlink: 104 bytes leftover after parsing attributes in process `syz.1.719'. [ 108.158494][ T8267] syzkaller0: entered promiscuous mode [ 108.160339][ T8267] syzkaller0: entered allmulticast mode [ 108.192543][ T5836] em28xx 10-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 108.202297][ T5836] em28xx 10-1:0.0: dvb set to bulk mode. [ 108.206569][ T1355] em28xx 10-1:0.0: Binding DVB extension [ 108.250913][ T8271] netlink: 8 bytes leftover after parsing attributes in process `syz.4.725'. [ 108.262774][ T8271] netlink: 20 bytes leftover after parsing attributes in process `syz.4.725'. [ 108.279028][ T5794] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.279054][ T8271] netlink: 8 bytes leftover after parsing attributes in process `syz.4.725'. [ 108.282792][ T5794] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.290054][ T5794] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.295762][ T5794] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.317838][ T8275] FAULT_INJECTION: forcing a failure. [ 108.317838][ T8275] name failslab, interval 1, probability 0, space 0, times 0 [ 108.322357][ T8275] CPU: 2 UID: 0 PID: 8275 Comm: syz.1.727 Not tainted syzkaller #0 PREEMPT(full) [ 108.322374][ T8275] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 108.322382][ T8275] Call Trace: [ 108.322386][ T8275] [ 108.322392][ T8275] dump_stack_lvl+0x100/0x190 [ 108.322412][ T8275] should_fail_ex.cold+0x5/0xa [ 108.322428][ T8275] should_failslab+0xc2/0x120 [ 108.322443][ T8275] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 108.322471][ T8275] ? __alloc_skb+0x140/0x710 [ 108.322491][ T8275] __alloc_skb+0x140/0x710 [ 108.322507][ T8275] ? __alloc_skb+0x5b7/0x710 [ 108.322523][ T8275] ? __pfx___alloc_skb+0x10/0x10 [ 108.322544][ T8275] netlink_ack+0x117/0xb80 [ 108.322560][ T8275] ? trace_contention_end+0x126/0x160 [ 108.322578][ T8275] netlink_rcv_skb+0x333/0x420 [ 108.322593][ T8275] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 108.322610][ T8275] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 108.322639][ T8275] xfrm_netlink_rcv+0x71/0x90 [ 108.322653][ T8275] netlink_unicast+0x585/0x850 [ 108.322670][ T8275] ? __pfx_netlink_unicast+0x10/0x10 [ 108.322689][ T8275] netlink_sendmsg+0x8b0/0xda0 [ 108.322706][ T8275] ? __pfx_netlink_sendmsg+0x10/0x10 [ 108.322721][ T8275] ? __might_fault+0x20/0x140 [ 108.322744][ T8275] ____sys_sendmsg+0xa4d/0xbe0 [ 108.322758][ T8275] ? __pfx_netlink_sendmsg+0x10/0x10 [ 108.322774][ T8275] ? __pfx_____sys_sendmsg+0x10/0x10 [ 108.322794][ T8275] ___sys_sendmsg+0x190/0x1e0 [ 108.322810][ T8275] ? __pfx____sys_sendmsg+0x10/0x10 [ 108.322823][ T8275] ? __lock_acquire+0x49f/0x1a40 [ 108.322836][ T8275] ? get_pid_task+0x106/0x250 [ 108.322868][ T8275] __sys_sendmsg+0x160/0x210 [ 108.322880][ T8275] ? __pfx___sys_sendmsg+0x10/0x10 [ 108.322898][ T8275] do_syscall_64+0x115/0x870 [ 108.322914][ T8275] ? clear_bhb_loop+0x40/0x90 [ 108.322928][ T8275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.322939][ T8275] RIP: 0033:0x7fd96d79de59 [ 108.322951][ T8275] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.322962][ T8275] RSP: 002b:00007fd96e6de028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 108.322973][ T8275] RAX: ffffffffffffffda RBX: 00007fd96da25fa0 RCX: 00007fd96d79de59 [ 108.322980][ T8275] RDX: 987a3a9f32358a4c RSI: 00002000000002c0 RDI: 0000000000000003 [ 108.322986][ T8275] RBP: 00007fd96e6de090 R08: 0000000000000000 R09: 0000000000000000 [ 108.322993][ T8275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.322999][ T8275] R13: 00007fd96da26038 R14: 00007fd96da25fa0 R15: 00007ffc408f5dc8 [ 108.323013][ T8275] [ 108.454896][ T8280] SELinux: Context system_u:obj is not valid (left unmapped). [ 108.485544][ C0] Illegal XDP return value 16128 on prog (id 45) dev veth0_to_bond, expect packet loss! [ 108.882448][ T8308] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 108.890002][ T8308] block device autoloading is deprecated and will be removed. [ 108.894306][ T8307] md: md2 stopped. [ 108.898121][ T42] kauditd_printk_skb: 27 callbacks suppressed [ 108.898139][ T42] audit: type=1400 audit(1783386506.756:573): avc: denied { ioctl } for pid=8306 comm="syz.4.735" path="/150/file0/file0" dev="fuse" ino=64 ioctlcmd=0x932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 109.202325][ T5828] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 109.352287][ T5828] usb 9-1: Using ep0 maxpacket: 8 [ 109.355675][ T5828] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 109.358462][ T5828] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 109.361456][ T5828] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 109.364702][ T5828] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 109.368061][ T5828] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 109.372606][ T5828] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 109.375494][ T5828] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.415105][ T8312] fuse: Unknown parameter '‹' [ 109.527601][ T1355] em28xx 10-1:0.0: Registering input extension [ 109.528056][ T8188] em28xx 10-1:0.0: reading from i2c device at 0xa failed (error=-5) [ 109.541009][ T5888] usb 10-1: USB disconnect, device number 3 [ 109.552357][ T5888] em28xx 10-1:0.0: Disconnecting em28xx [ 109.554502][ T5888] em28xx 10-1:0.0: Closing input extension [ 109.585148][ T5828] usb 9-1: usb_control_msg returned -32 [ 109.587067][ T5828] usbtmc 9-1:16.0: can't read capabilities [ 109.623769][ T5888] em28xx 10-1:0.0: Freeing device [ 109.788060][ T8310] overlayfs: unescaped trailing colons in lowerdir mount option. [ 109.793812][ T42] audit: type=1400 audit(1783386507.656:574): avc: denied { setopt } for pid=8309 comm="syz.4.736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 109.801323][ T42] audit: type=1400 audit(1783386507.656:575): avc: denied { create } for pid=8309 comm="syz.4.736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 109.807390][ T42] audit: type=1400 audit(1783386507.656:576): avc: denied { connect } for pid=8309 comm="syz.4.736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 109.816094][ T6710] usb 9-1: USB disconnect, device number 3 [ 110.088068][ T8325] syzkaller0: entered promiscuous mode [ 110.090019][ T8325] syzkaller0: entered allmulticast mode [ 110.224268][ T8327] tmpfs: Bad value for 'nr_blocks' [ 110.393663][ T8329] syzkaller0: entered promiscuous mode [ 110.400114][ T8329] syzkaller0: entered allmulticast mode [ 110.649581][ T8348] tmpfs: Bad value for 'nr_blocks' [ 110.846832][ T8352] syzkaller0: entered promiscuous mode [ 110.849370][ T8352] syzkaller0: entered allmulticast mode [ 110.879864][ T8354] syzkaller0: entered promiscuous mode [ 110.881795][ T8354] syzkaller0: entered allmulticast mode [ 110.894860][ T8354] FAULT_INJECTION: forcing a failure. [ 110.894860][ T8354] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 110.899410][ T8354] CPU: 1 UID: 0 PID: 8354 Comm: syz.5.754 Not tainted syzkaller #0 PREEMPT(full) [ 110.899437][ T8354] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 110.899448][ T8354] Call Trace: [ 110.899457][ T8354] [ 110.899466][ T8354] dump_stack_lvl+0x100/0x190 [ 110.899496][ T8354] should_fail_ex.cold+0x5/0xa [ 110.899518][ T8354] _copy_from_user+0x2e/0xd0 [ 110.899541][ T8354] move_addr_to_kernel+0x65/0x170 [ 110.899567][ T8354] __sys_sendto+0x1b8/0x4e0 [ 110.899593][ T8354] ? __pfx___sys_sendto+0x10/0x10 [ 110.899622][ T8354] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 110.899658][ T8354] ? ksys_write+0x1ac/0x250 [ 110.899684][ T8354] ? __pfx_ksys_write+0x10/0x10 [ 110.899709][ T8354] __x64_sys_sendto+0xe0/0x1c0 [ 110.899732][ T8354] ? do_syscall_64+0x90/0x870 [ 110.899752][ T8354] ? lockdep_hardirqs_on+0x78/0x100 [ 110.899773][ T8354] do_syscall_64+0x115/0x870 [ 110.899794][ T8354] ? clear_bhb_loop+0x40/0x90 [ 110.899813][ T8354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.899830][ T8354] RIP: 0033:0x7f885d59de59 [ 110.899845][ T8354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.899860][ T8354] RSP: 002b:00007f885e508028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 110.899877][ T8354] RAX: ffffffffffffffda RBX: 00007f885d825fa0 RCX: 00007f885d59de59 [ 110.899918][ T8354] RDX: 0000000000000012 RSI: 00002000000005c0 RDI: 0000000000000006 [ 110.899928][ T8354] RBP: 00007f885e508090 R08: 0000200000000080 R09: 0000000000000014 [ 110.899938][ T8354] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000001 [ 110.899947][ T8354] R13: 00007f885d826038 R14: 00007f885d825fa0 R15: 00007ffec7e82578 [ 110.899968][ T8354] [ 111.083474][ T8360] syzkaller0: entered promiscuous mode [ 111.085408][ T8360] syzkaller0: entered allmulticast mode [ 111.120449][ T8362] syzkaller0: entered promiscuous mode [ 111.123361][ T8362] syzkaller0: entered allmulticast mode [ 111.256778][ T8381] syzkaller0: entered promiscuous mode [ 111.259517][ T8381] syzkaller0: entered allmulticast mode [ 111.360813][ T8387] FAULT_INJECTION: forcing a failure. [ 111.360813][ T8387] name failslab, interval 1, probability 0, space 0, times 0 [ 111.367590][ T8387] CPU: 2 UID: 0 PID: 8387 Comm: syz.5.764 Not tainted syzkaller #0 PREEMPT(full) [ 111.367606][ T8387] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 111.367614][ T8387] Call Trace: [ 111.367617][ T8387] [ 111.367623][ T8387] dump_stack_lvl+0x100/0x190 [ 111.367642][ T8387] should_fail_ex.cold+0x5/0xa [ 111.367655][ T8387] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 111.367702][ T8387] should_failslab+0xc2/0x120 [ 111.367716][ T8387] kmem_cache_alloc_noprof+0x91/0x6a0 [ 111.367728][ T8387] ? skb_clone+0x190/0x400 [ 111.367741][ T8387] skb_clone+0x190/0x400 [ 111.367752][ T8387] netlink_deliver_tap+0xaed/0xcc0 [ 111.367770][ T8387] netlink_unicast+0x6a5/0x850 [ 111.367787][ T8387] ? __pfx_netlink_unicast+0x10/0x10 [ 111.367807][ T8387] netlink_ack+0x655/0xb80 [ 111.367826][ T8387] netlink_rcv_skb+0x333/0x420 [ 111.367841][ T8387] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 111.367857][ T8387] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 111.367915][ T8387] xfrm_netlink_rcv+0x71/0x90 [ 111.367937][ T8387] netlink_unicast+0x585/0x850 [ 111.367958][ T8387] ? __pfx_netlink_unicast+0x10/0x10 [ 111.367977][ T8387] netlink_sendmsg+0x8b0/0xda0 [ 111.367995][ T8387] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.368009][ T8387] ? __might_fault+0x20/0x140 [ 111.368034][ T8387] ____sys_sendmsg+0xa4d/0xbe0 [ 111.368047][ T8387] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.368063][ T8387] ? __pfx_____sys_sendmsg+0x10/0x10 [ 111.368084][ T8387] ___sys_sendmsg+0x190/0x1e0 [ 111.368099][ T8387] ? __pfx____sys_sendmsg+0x10/0x10 [ 111.368113][ T8387] ? __lock_acquire+0x49f/0x1a40 [ 111.368126][ T8387] ? get_pid_task+0x106/0x250 [ 111.368159][ T8387] __sys_sendmsg+0x160/0x210 [ 111.368174][ T8387] ? __pfx___sys_sendmsg+0x10/0x10 [ 111.368202][ T8387] do_syscall_64+0x115/0x870 [ 111.368224][ T8387] ? clear_bhb_loop+0x40/0x90 [ 111.368244][ T8387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.368260][ T8387] RIP: 0033:0x7f885d59de59 [ 111.368275][ T8387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.368290][ T8387] RSP: 002b:00007f885e508028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 111.368303][ T8387] RAX: ffffffffffffffda RBX: 00007f885d825fa0 RCX: 00007f885d59de59 [ 111.368311][ T8387] RDX: 987a3a9f32358a4c RSI: 00002000000002c0 RDI: 0000000000000003 [ 111.368317][ T8387] RBP: 00007f885e508090 R08: 0000000000000000 R09: 0000000000000000 [ 111.368324][ T8387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.368330][ T8387] R13: 00007f885d826038 R14: 00007f885d825fa0 R15: 00007ffec7e82578 [ 111.368345][ T8387] [ 111.579358][ T42] audit: type=1400 audit(1783386509.436:577): avc: denied { create } for pid=8396 comm="syz.4.769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 111.594976][ T42] audit: type=1400 audit(1783386509.446:578): avc: denied { getopt } for pid=8396 comm="syz.4.769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 111.644715][ T8400] evm: overlay not supported [ 111.652346][ T42] audit: type=1400 audit(1783386509.506:579): avc: denied { remount } for pid=8399 comm="syz.1.770" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 111.749737][ T42] audit: type=1400 audit(1783386509.606:580): avc: denied { create } for pid=8407 comm="syz.1.773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 111.751549][ T8406] syzkaller0: entered promiscuous mode [ 111.758655][ T8406] syzkaller0: entered allmulticast mode [ 111.808168][ T8411] FAULT_INJECTION: forcing a failure. [ 111.808168][ T8411] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 111.813572][ T8411] CPU: 0 UID: 0 PID: 8411 Comm: syz.1.774 Not tainted syzkaller #0 PREEMPT(full) [ 111.813592][ T8411] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 111.813600][ T8411] Call Trace: [ 111.813605][ T8411] [ 111.813610][ T8411] dump_stack_lvl+0x100/0x190 [ 111.813631][ T8411] should_fail_ex.cold+0x5/0xa [ 111.813648][ T8411] _copy_to_user+0x32/0xd0 [ 111.813663][ T8411] simple_read_from_buffer+0xcb/0x170 [ 111.813685][ T8411] proc_fail_nth_read+0x1af/0x230 [ 111.813702][ T8411] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 111.813720][ T8411] ? rw_verify_area+0xce/0x6d0 [ 111.813735][ T8411] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 111.813751][ T8411] vfs_read+0x1e4/0xb40 [ 111.813770][ T8411] ? __pfx_vfs_read+0x10/0x10 [ 111.813786][ T8411] ? __fget_files+0x215/0x3d0 [ 111.813808][ T8411] ? __fget_files+0x21f/0x3d0 [ 111.813831][ T8411] ksys_read+0x12a/0x250 [ 111.813847][ T8411] ? __pfx_ksys_read+0x10/0x10 [ 111.813869][ T8411] do_syscall_64+0x115/0x870 [ 111.813887][ T8411] ? clear_bhb_loop+0x40/0x90 [ 111.813902][ T8411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.813915][ T8411] RIP: 0033:0x7fd96d75e68e [ 111.813926][ T8411] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 111.813938][ T8411] RSP: 002b:00007fd96e6ddfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 111.813950][ T8411] RAX: ffffffffffffffda RBX: 00007fd96e6de6c0 RCX: 00007fd96d75e68e [ 111.813958][ T8411] RDX: 000000000000000f RSI: 00007fd96e6de0a0 RDI: 0000000000000004 [ 111.813965][ T8411] RBP: 00007fd96e6de090 R08: 0000000000000000 R09: 0000000000000000 [ 111.813972][ T8411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 111.813979][ T8411] R13: 00007fd96da26038 R14: 00007fd96da25fa0 R15: 00007ffc408f5dc8 [ 111.813995][ T8411] [ 111.909031][ T8415] syzkaller0: entered promiscuous mode [ 111.911440][ T8415] syzkaller0: entered allmulticast mode [ 112.371340][ T42] audit: type=1400 audit(1783386510.226:581): avc: denied { ioctl } for pid=8424 comm="syz.1.778" path="socket:[26219]" dev="sockfs" ino=26219 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 112.709202][ T8429] syzkaller0: entered promiscuous mode [ 112.711579][ T8429] syzkaller0: entered allmulticast mode [ 112.829809][ T42] audit: type=1400 audit(1783386510.686:582): avc: denied { read } for pid=8430 comm="syz.4.780" name="event1" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 112.952363][ T8442] tmpfs: Bad value for 'nr_blocks' [ 112.984870][ T8454] syzkaller0: entered promiscuous mode [ 112.986775][ T8454] syzkaller0: entered allmulticast mode [ 113.145670][ T8465] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 113.206772][ T8467] syzkaller0: entered promiscuous mode [ 113.209761][ T8467] syzkaller0: entered allmulticast mode [ 113.362851][ T8478] __nla_validate_parse: 11 callbacks suppressed [ 113.362877][ T8478] netlink: 48 bytes leftover after parsing attributes in process `syz.4.790'. [ 113.449689][ T8487] netlink: 12 bytes leftover after parsing attributes in process `syz.4.792'. [ 113.460637][ T8490] syzkaller0: entered promiscuous mode [ 113.463759][ T8487] netlink: 104 bytes leftover after parsing attributes in process `syz.4.792'. [ 113.465109][ T8490] syzkaller0: entered allmulticast mode [ 113.710928][ T8499] syzkaller0: entered promiscuous mode [ 113.714042][ T8499] syzkaller0: entered allmulticast mode [ 113.729061][ T8503] netlink: 'syz.4.798': attribute type 1 has an invalid length. [ 113.730222][ T8504] netlink: 'syz.4.798': attribute type 1 has an invalid length. [ 113.732827][ T8503] netlink: 16 bytes leftover after parsing attributes in process `syz.4.798'. [ 113.733192][ T8502] netlink: 12 bytes leftover after parsing attributes in process `syz.1.799'. [ 113.742393][ T8504] netlink: 16 bytes leftover after parsing attributes in process `syz.4.798'. [ 113.772617][ T8503] netlink: 16 bytes leftover after parsing attributes in process `syz.4.798'. [ 113.815170][ T8508] netlink: 48 bytes leftover after parsing attributes in process `syz.1.800'. [ 113.887336][ T8513] syzkaller0: entered promiscuous mode [ 113.891758][ T8513] syzkaller0: entered allmulticast mode [ 113.901056][ T8520] netlink: 20 bytes leftover after parsing attributes in process `syz.4.805'. [ 113.919104][ T42] kauditd_printk_skb: 3 callbacks suppressed [ 113.919118][ T42] audit: type=1400 audit(1783386511.776:586): avc: denied { setopt } for pid=8519 comm="syz.4.805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 113.919651][ T8520] netlink: 56 bytes leftover after parsing attributes in process `syz.4.805'. [ 113.937490][ T8520] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 114.304898][ T8532] syzkaller0: entered promiscuous mode [ 114.306899][ T8532] syzkaller0: entered allmulticast mode [ 114.323583][ T8532] FAULT_INJECTION: forcing a failure. [ 114.323583][ T8532] name failslab, interval 1, probability 0, space 0, times 0 [ 114.329282][ T8532] CPU: 1 UID: 0 PID: 8532 Comm: syz.5.809 Not tainted syzkaller #0 PREEMPT(full) [ 114.329312][ T8532] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 114.329326][ T8532] Call Trace: [ 114.329335][ T8532] [ 114.329343][ T8532] dump_stack_lvl+0x100/0x190 [ 114.329428][ T8532] should_fail_ex.cold+0x5/0xa [ 114.329477][ T8532] should_failslab+0xc2/0x120 [ 114.329521][ T8532] kmem_cache_alloc_noprof+0x91/0x6a0 [ 114.329561][ T8532] ? lock_acquire+0x1b9/0x370 [ 114.329603][ T8532] ? skb_clone+0x190/0x400 [ 114.329648][ T8532] skb_clone+0x190/0x400 [ 114.329666][ T8532] dev_queue_xmit_nit+0x255/0xa60 [ 114.329692][ T8532] dev_hard_start_xmit+0x2f5/0x760 [ 114.329716][ T8532] ? validate_xmit_skb_list+0xe7/0x130 [ 114.329740][ T8532] sch_direct_xmit+0x1b2/0xc70 [ 114.329764][ T8532] ? __pfx_sch_direct_xmit+0x10/0x10 [ 114.329782][ T8532] ? get_slot_next+0x3a0/0x420 [ 114.329803][ T8532] ? mark_held_locks+0x40/0x70 [ 114.329821][ T8532] ? ktime_get+0x22c/0x320 [ 114.329864][ T8532] ? lockdep_hardirqs_on+0x78/0x100 [ 114.329891][ T8532] __qdisc_run+0x52d/0x1b20 [ 114.329918][ T8532] __dev_queue_xmit+0x30e2/0x4940 [ 114.329944][ T8532] ? __might_fault+0xc5/0x140 [ 114.329997][ T8532] ? __pfx___dev_queue_xmit+0x10/0x10 [ 114.330022][ T8532] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 114.330065][ T8532] ? __vlan_get_protocol_offset+0x256/0x350 [ 114.330096][ T8532] ? __pfx___vlan_get_protocol_offset+0x10/0x10 [ 114.330129][ T8532] ? packet_parse_headers+0x205/0x800 [ 114.330153][ T8532] ? __pfx_packet_parse_headers+0x10/0x10 [ 114.330180][ T8532] packet_xmit+0x243/0x310 [ 114.330206][ T8532] packet_sendmsg+0x319a/0x5100 [ 114.330244][ T8532] ? sock_has_perm+0x25a/0x2f0 [ 114.330296][ T8532] ? __pfx_sock_has_perm+0x10/0x10 [ 114.330317][ T8532] ? __pfx_packet_sendmsg+0x10/0x10 [ 114.330356][ T8532] __sys_sendto+0x48b/0x4e0 [ 114.330379][ T8532] ? __pfx_packet_sendmsg+0x10/0x10 [ 114.330404][ T8532] ? __pfx___sys_sendto+0x10/0x10 [ 114.330434][ T8532] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 114.330473][ T8532] ? ksys_write+0x1ac/0x250 [ 114.330519][ T8532] ? __pfx_ksys_write+0x10/0x10 [ 114.330545][ T8532] __x64_sys_sendto+0xe0/0x1c0 [ 114.330568][ T8532] ? do_syscall_64+0x90/0x870 [ 114.330591][ T8532] ? lockdep_hardirqs_on+0x78/0x100 [ 114.330612][ T8532] do_syscall_64+0x115/0x870 [ 114.330635][ T8532] ? clear_bhb_loop+0x40/0x90 [ 114.330655][ T8532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.330672][ T8532] RIP: 0033:0x7f885d59de59 [ 114.330689][ T8532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.330704][ T8532] RSP: 002b:00007f885e508028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 114.330722][ T8532] RAX: ffffffffffffffda RBX: 00007f885d825fa0 RCX: 00007f885d59de59 [ 114.330734][ T8532] RDX: 0000000000000012 RSI: 00002000000005c0 RDI: 0000000000000006 [ 114.330743][ T8532] RBP: 00007f885e508090 R08: 0000200000000080 R09: 0000000000000014 [ 114.330754][ T8532] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000001 [ 114.330764][ T8532] R13: 00007f885d826038 R14: 00007f885d825fa0 R15: 00007ffec7e82578 [ 114.330787][ T8532] [ 114.569822][ T8534] xt_ipcomp: unknown flags 1D [ 115.491001][ T8539] syzkaller0: entered promiscuous mode [ 115.496072][ T8539] syzkaller0: entered allmulticast mode [ 115.607788][ T8541] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 116.866576][ T8515] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 116.963795][ T8550] FAULT_INJECTION: forcing a failure. [ 116.963795][ T8550] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 116.969543][ T8550] CPU: 2 UID: 0 PID: 8550 Comm: syz.1.816 Not tainted syzkaller #0 PREEMPT(full) [ 116.969570][ T8550] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 116.969581][ T8550] Call Trace: [ 116.969588][ T8550] [ 116.969595][ T8550] dump_stack_lvl+0x100/0x190 [ 116.969625][ T8550] should_fail_ex.cold+0x5/0xa [ 116.969649][ T8550] _copy_from_user+0x2e/0xd0 [ 116.969706][ T8550] __mfill_atomic_pte+0x7eb/0xb50 [ 116.969737][ T8550] ? __pfx___mfill_atomic_pte+0x10/0x10 [ 116.969763][ T8550] ? mm_alloc_pmd+0x2c2/0x470 [ 116.969790][ T8550] mfill_atomic_copy+0x72c/0x16c0 [ 116.969824][ T8550] ? __pfx_mfill_atomic_copy+0x10/0x10 [ 116.969850][ T8550] ? find_held_lock+0x2b/0x80 [ 116.969916][ T8550] userfaultfd_ioctl+0x2dee/0x5990 [ 116.969954][ T8550] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 116.969980][ T8550] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 116.970013][ T8550] ? __fget_files+0x215/0x3d0 [ 116.970039][ T8550] ? hook_file_ioctl_common+0x140/0x440 [ 116.970075][ T8550] ? selinux_file_ioctl+0x13b/0x290 [ 116.970099][ T8550] ? selinux_file_ioctl+0xb6/0x290 [ 116.970120][ T8550] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 116.970143][ T8550] ? __x64_sys_ioctl+0x18e/0x210 [ 116.970166][ T8550] __x64_sys_ioctl+0x18e/0x210 [ 116.970188][ T8550] do_syscall_64+0x115/0x870 [ 116.970210][ T8550] ? clear_bhb_loop+0x40/0x90 [ 116.970231][ T8550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.970250][ T8550] RIP: 0033:0x7fd96d79de59 [ 116.970300][ T8550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.970316][ T8550] RSP: 002b:00007fd96e6de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 116.970333][ T8550] RAX: ffffffffffffffda RBX: 00007fd96da25fa0 RCX: 00007fd96d79de59 [ 116.970344][ T8550] RDX: 0000200000000080 RSI: 00000000c028aa03 RDI: 0000000000000003 [ 116.970356][ T8550] RBP: 00007fd96e6de090 R08: 0000000000000000 R09: 0000000000000000 [ 116.970366][ T8550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 116.970375][ T8550] R13: 00007fd96da26038 R14: 00007fd96da25fa0 R15: 00007ffc408f5dc8 [ 116.970399][ T8550] [ 116.970482][ T42] audit: type=1400 audit(1783386514.826:587): avc: denied { setopt } for pid=8544 comm="syz.5.815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 117.185844][ T8559] syzkaller0: entered promiscuous mode [ 117.190535][ T8559] syzkaller0: entered allmulticast mode [ 117.195558][ T42] audit: type=1400 audit(1783386515.056:588): avc: denied { watch watch_reads } for pid=8560 comm="syz.5.820" path="/dev/pts/0" dev="devpts" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_devpts_t tclass=chr_file permissive=1 [ 117.279925][ T8565] Invalid logical block size (-1) [ 117.404180][ T8571] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 117.521292][ T8581] FAULT_INJECTION: forcing a failure. [ 117.521292][ T8581] name failslab, interval 1, probability 0, space 0, times 0 [ 117.528264][ T8581] CPU: 0 UID: 0 PID: 8581 Comm: syz.4.834 Not tainted syzkaller #0 PREEMPT(full) [ 117.528282][ T8581] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 117.528290][ T8581] Call Trace: [ 117.528294][ T8581] [ 117.528300][ T8581] dump_stack_lvl+0x100/0x190 [ 117.528321][ T8581] should_fail_ex.cold+0x5/0xa [ 117.528336][ T8581] should_failslab+0xc2/0x120 [ 117.528350][ T8581] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 117.528362][ T8581] ? __alloc_skb+0x5b7/0x710 [ 117.528379][ T8581] ? __alloc_skb+0x140/0x710 [ 117.528398][ T8581] __alloc_skb+0x140/0x710 [ 117.528416][ T8581] ? __alloc_skb+0x5b7/0x710 [ 117.528432][ T8581] ? __pfx___alloc_skb+0x10/0x10 [ 117.528495][ T8581] netlink_alloc_large_skb+0x69/0x150 [ 117.528514][ T8581] netlink_sendmsg+0x680/0xda0 [ 117.528532][ T8581] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.528546][ T8581] ? __might_fault+0x20/0x140 [ 117.528569][ T8581] ____sys_sendmsg+0xa4d/0xbe0 [ 117.528582][ T8581] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.528598][ T8581] ? __pfx_____sys_sendmsg+0x10/0x10 [ 117.528618][ T8581] ___sys_sendmsg+0x190/0x1e0 [ 117.528634][ T8581] ? __pfx____sys_sendmsg+0x10/0x10 [ 117.528666][ T8581] ? __lock_acquire+0x49f/0x1a40 [ 117.528680][ T8581] ? get_pid_task+0x106/0x250 [ 117.528734][ T8581] __sys_sendmsg+0x160/0x210 [ 117.528745][ T8581] ? __pfx___sys_sendmsg+0x10/0x10 [ 117.528763][ T8581] do_syscall_64+0x115/0x870 [ 117.528779][ T8581] ? clear_bhb_loop+0x40/0x90 [ 117.528793][ T8581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.528805][ T8581] RIP: 0033:0x7f18f939de59 [ 117.528817][ T8581] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.528828][ T8581] RSP: 002b:00007f18fa21f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 117.528840][ T8581] RAX: ffffffffffffffda RBX: 00007f18f9625fa0 RCX: 00007f18f939de59 [ 117.528847][ T8581] RDX: 000000002c000010 RSI: 0000200000000180 RDI: 0000000000000004 [ 117.528854][ T8581] RBP: 00007f18fa21f090 R08: 0000000000000000 R09: 0000000000000000 [ 117.528860][ T8581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.528867][ T8581] R13: 00007f18f9626038 R14: 00007f18f9625fa0 R15: 00007ffea3fbaa28 [ 117.528881][ T8581] [ 120.411584][ T8573] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 120.571808][ T8593] __nla_validate_parse: 3 callbacks suppressed [ 120.571860][ T8593] netlink: 104 bytes leftover after parsing attributes in process `syz.5.830'. [ 120.608096][ T42] audit: type=1400 audit(1783386518.466:589): avc: denied { map } for pid=8594 comm="syz.4.831" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 120.634053][ T8597] netlink: 'syz.5.832': attribute type 2 has an invalid length. [ 120.639302][ T8597] netlink: 252 bytes leftover after parsing attributes in process `syz.5.832'. [ 120.652963][ T8598] netlink: 'syz.5.832': attribute type 2 has an invalid length. [ 120.656624][ T8598] netlink: 252 bytes leftover after parsing attributes in process `syz.5.832'. [ 120.729332][ T42] audit: type=1400 audit(1783386518.586:590): avc: denied { bind } for pid=8603 comm="syz.5.837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 120.750497][ T8604] pimreg: entered allmulticast mode [ 120.782082][ T5748] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 120.791656][ T5748] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 120.797137][ T5748] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 120.804099][ T5748] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 120.809529][ T5748] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 121.033709][ T8623] openvswitch: netlink: IPv4 tunnel dst address is zero [ 121.131242][ T5852] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.223905][ T5852] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.301051][ T5852] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.397327][ T5852] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.459295][ T8606] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.462684][ T8606] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.465865][ T8606] bridge_slave_0: entered allmulticast mode [ 121.471437][ T8606] bridge_slave_0: entered promiscuous mode [ 121.478290][ T8606] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.481828][ T8606] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.485362][ T8606] bridge_slave_1: entered allmulticast mode [ 121.489353][ T8606] bridge_slave_1: entered promiscuous mode [ 121.517051][ T8606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.521894][ T8606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.611764][ T8606] team0: Port device team_slave_0 added [ 121.617017][ T8606] team0: Port device team_slave_1 added [ 121.654416][ T8606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.658596][ T8606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.671607][ T8606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.677132][ T8606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.680061][ T8606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.689635][ T8606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.738670][ T8606] hsr_slave_0: entered promiscuous mode [ 121.742675][ T8606] hsr_slave_1: entered promiscuous mode [ 121.746376][ T8606] debugfs: 'hsr0' already exists in 'hsr' [ 121.748967][ T8606] Cannot create hsr debugfs directory [ 121.850217][ T5852] team0: Port device xfrm0 removed [ 121.905059][ T5852] bond1 (unregistering): (slave erspan1): Releasing active interface [ 121.950706][ T5852] bond0 (unregistering): Released all slaves [ 121.960032][ T5852] bond1 (unregistering): Released all slaves [ 121.997438][ T8460] tipc: Resetting bearer [ 122.074845][ T5852] tipc: Disabling bearer [ 122.078631][ T5852] tipc: Left network mode [ 122.283790][ T5852] ------------[ cut here ]------------ [ 122.286404][ T5852] Have pending ack frames! [ 122.288525][ T5852] WARNING: net/mac80211/main.c:1749 at ieee80211_free_ack_frame+0x14/0x30, CPU#2: kworker/u32:4/5852 [ 122.293224][ T5852] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 122.295311][ T5852] CPU: 2 UID: 0 PID: 5852 Comm: kworker/u32:4 Not tainted syzkaller #0 PREEMPT(full) [ 122.299565][ T5852] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 122.304631][ T5852] Workqueue: netns cleanup_net [ 122.306673][ T5852] RIP: 0010:ieee80211_free_ack_frame+0x14/0x30 [ 122.312103][ T5852] Code: ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 53 48 89 f3 e8 c3 17 e6 f6 48 8d 3d fc bc 0f 06 <67> 48 0f b9 3a ba 02 00 00 00 48 89 de 31 ff e8 c8 b4 61 fe 31 c0 [ 122.320148][ T5852] RSP: 0018:ffffc90003b4f860 EFLAGS: 00010293 [ 122.323244][ T5852] RAX: 0000000000000000 RBX: ffff88803dd72000 RCX: ffffffff8bae6933 [ 122.326953][ T5852] RDX: ffff88802f352540 RSI: ffffffff8b23b87d RDI: ffffffff91337580 [ 122.330288][ T5852] RBP: ffff888056806c30 R08: 0000000000000007 R09: 000000007fffffff [ 122.333938][ T5852] R10: 0000000000000001 R11: 000000000000758b R12: dffffc0000000000 [ 122.337110][ T5852] R13: ffffffff8b23b870 R14: 0000000080000000 R15: 0000000000000000 [ 122.341101][ T5852] FS: 0000000000000000(0000) GS:ffff8880d5fec000(0000) knlGS:0000000000000000 [ 122.345536][ T5852] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 122.348319][ T5852] CR2: 000055b302a9f7f0 CR3: 000000000e992000 CR4: 0000000000352ef0 [ 122.351625][ T5852] Call Trace: [ 122.353222][ T5852] [ 122.354687][ T5852] idr_for_each+0x143/0x270 [ 122.357694][ T5852] ? __pfx_idr_for_each+0x10/0x10 [ 122.361147][ T5852] ? kfree+0x22b/0x6c0 [ 122.363342][ T5852] ? kfree+0x22b/0x6c0 [ 122.365106][ T5852] ieee80211_free_hw+0x59/0x1d0 [ 122.367152][ T5852] hwsim_exit_net+0x8df/0x14f0 [ 122.369443][ T5852] ? __pfx_hwsim_exit_net+0x10/0x10 [ 122.371641][ T5852] ? ip_vs_sync_net_cleanup+0x84/0x90 [ 122.374139][ T5852] ? __ip_vs_dev_cleanup_batch+0x21e/0x2a0 [ 122.376664][ T5852] ? __pfx_hwsim_exit_net+0x10/0x10 [ 122.377692][ T8611] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 122.378822][ T5852] ops_undo_list+0x2ee/0xab0 [ 122.385550][ T5852] ? __pfx_ops_undo_list+0x10/0x10 [ 122.388808][ T5852] ? cleanup_net+0x332/0x920 [ 122.391202][ T5852] ? idr_destroy+0x62/0x2e0 [ 122.393246][ T5852] cleanup_net+0x499/0x920 [ 122.395160][ T5852] ? __pfx_cleanup_net+0x10/0x10 [ 122.397321][ T5852] ? rcu_is_watching+0x12/0xc0 [ 122.399351][ T5852] process_one_work+0xa23/0x1940 [ 122.401606][ T5852] ? __pfx_process_one_work+0x10/0x10 [ 122.404519][ T5852] ? __pfx_cleanup_net+0x10/0x10 [ 122.407154][ T5852] worker_thread+0x5ef/0xe50 [ 122.409423][ T5852] ? __pfx_worker_thread+0x10/0x10 [ 122.411581][ T5852] ? kthread+0x13a/0x450 [ 122.413527][ T5852] ? __pfx_worker_thread+0x10/0x10 [ 122.415807][ T5852] kthread+0x370/0x450 [ 122.417633][ T5852] ? __pfx_kthread+0x10/0x10 [ 122.419584][ T5852] ret_from_fork+0x72b/0xd50 [ 122.421598][ T5852] ? __pfx_ret_from_fork+0x10/0x10 [ 122.424374][ T5852] ? __switch_to+0x800/0x10f0 [ 122.427651][ T5852] ? __pfx_kthread+0x10/0x10 [ 122.430587][ T5852] ret_from_fork_asm+0x1a/0x30 [ 122.433255][ T5852] [ 122.434615][ T5852] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 122.437628][ T5852] CPU: 2 UID: 0 PID: 5852 Comm: kworker/u32:4 Not tainted syzkaller #0 PREEMPT(full) [ 122.441639][ T5852] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 122.445992][ T5852] Workqueue: netns cleanup_net [ 122.448158][ T5852] Call Trace: [ 122.449653][ T5852] [ 122.450960][ T5852] dump_stack_lvl+0x100/0x190 [ 122.453066][ T5852] vpanic+0x552/0x970 [ 122.455103][ T5852] ? __pfx_vpanic+0x10/0x10 [ 122.457425][ T5852] panic+0xd1/0xe0 [ 122.459195][ T5852] ? __pfx_panic+0x10/0x10 [ 122.461251][ T5852] ? check_panic_on_warn+0x1f/0x90 [ 122.463608][ T5852] check_panic_on_warn.cold+0x19/0x34 [ 122.465630][ T5852] ? ieee80211_free_ack_frame+0x14/0x30 [ 122.468037][ T5852] __warn.cold+0x191/0x318 [ 122.470030][ T5852] __report_bug+0x30f/0x440 [ 122.472276][ T5852] ? ieee80211_free_ack_frame+0x14/0x30 [ 122.475000][ T5852] ? __pfx___report_bug+0x10/0x10 [ 122.477351][ T5852] ? ieee80211_free_ack_frame+0xd/0x30 [ 122.479705][ T5852] ? idr_for_each+0x113/0x270 [ 122.481840][ T5852] ? report_bug_entry+0x9d/0x290 [ 122.484120][ T5852] report_bug_entry+0xe1/0x290 [ 122.486086][ T5852] ? ieee80211_free_ack_frame+0x14/0x30 [ 122.488049][ T5852] handle_bug+0x1cd/0x2a0 [ 122.490225][ T5852] exc_invalid_op+0x17/0x50 [ 122.492722][ T5852] asm_exc_invalid_op+0x1a/0x20 [ 122.495391][ T5852] RIP: 0010:ieee80211_free_ack_frame+0x14/0x30 [ 122.498072][ T5852] Code: ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 53 48 89 f3 e8 c3 17 e6 f6 48 8d 3d fc bc 0f 06 <67> 48 0f b9 3a ba 02 00 00 00 48 89 de 31 ff e8 c8 b4 61 fe 31 c0 [ 122.506366][ T5852] RSP: 0018:ffffc90003b4f860 EFLAGS: 00010293 [ 122.508981][ T5852] RAX: 0000000000000000 RBX: ffff88803dd72000 RCX: ffffffff8bae6933 [ 122.512413][ T5852] RDX: ffff88802f352540 RSI: ffffffff8b23b87d RDI: ffffffff91337580 [ 122.515157][ T5852] RBP: ffff888056806c30 R08: 0000000000000007 R09: 000000007fffffff [ 122.518595][ T5852] R10: 0000000000000001 R11: 000000000000758b R12: dffffc0000000000 [ 122.521883][ T5852] R13: ffffffff8b23b870 R14: 0000000080000000 R15: 0000000000000000 [ 122.525180][ T5852] ? __pfx_ieee80211_free_ack_frame+0x10/0x10 [ 122.527844][ T5852] ? idr_for_each+0x113/0x270 [ 122.530066][ T5852] ? ieee80211_free_ack_frame+0xd/0x30 [ 122.532552][ T5852] idr_for_each+0x143/0x270 [ 122.535221][ T5852] ? __pfx_idr_for_each+0x10/0x10 [ 122.538141][ T5852] ? kfree+0x22b/0x6c0 [ 122.539874][ T5852] ? kfree+0x22b/0x6c0 [ 122.541548][ T5852] ieee80211_free_hw+0x59/0x1d0 [ 122.543504][ T5852] hwsim_exit_net+0x8df/0x14f0 [ 122.545425][ T5852] ? __pfx_hwsim_exit_net+0x10/0x10 [ 122.547579][ T5852] ? ip_vs_sync_net_cleanup+0x84/0x90 [ 122.549905][ T5852] ? __ip_vs_dev_cleanup_batch+0x21e/0x2a0 [ 122.552731][ T5852] ? __pfx_hwsim_exit_net+0x10/0x10 [ 122.555388][ T5852] ops_undo_list+0x2ee/0xab0 [ 122.557389][ T5852] ? __pfx_ops_undo_list+0x10/0x10 [ 122.559356][ T5852] ? cleanup_net+0x332/0x920 [ 122.561077][ T5852] ? idr_destroy+0x62/0x2e0 [ 122.562882][ T5852] cleanup_net+0x499/0x920 [ 122.564797][ T5852] ? __pfx_cleanup_net+0x10/0x10 [ 122.566614][ T5852] ? rcu_is_watching+0x12/0xc0 [ 122.568770][ T5852] process_one_work+0xa23/0x1940 [ 122.570794][ T5852] ? __pfx_process_one_work+0x10/0x10 [ 122.573036][ T5852] ? __pfx_cleanup_net+0x10/0x10 [ 122.574795][ T5852] worker_thread+0x5ef/0xe50 [ 122.576528][ T5852] ? __pfx_worker_thread+0x10/0x10 [ 122.578258][ T5852] ? kthread+0x13a/0x450 [ 122.579887][ T5852] ? __pfx_worker_thread+0x10/0x10 [ 122.581979][ T5852] kthread+0x370/0x450 [ 122.583338][ T5852] ? __pfx_kthread+0x10/0x10 [ 122.585280][ T5852] ret_from_fork+0x72b/0xd50 [ 122.587206][ T5852] ? __pfx_ret_from_fork+0x10/0x10 [ 122.589020][ T5852] ? __switch_to+0x800/0x10f0 [ 122.590810][ T5852] ? __pfx_kthread+0x10/0x10 [ 122.592715][ T5852] ret_from_fork_asm+0x1a/0x30 [ 122.595286][ T5852] [ 122.597492][ T5852] Kernel Offset: disabled [ 122.599239][ T5852] Rebooting in 86400 seconds..