last executing test programs: 1.453585108s ago: executing program 0 (id=38): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xc1, &(0x7f0000000400)={@link_local, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x8b, 0x11, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[], {0x0, 0xe22, 0x8b, 0x0, @gue={{0x1, 0x1, 0x3, 0x0, 0x0, @void}, "2216ad1c911e7b1e0d1ee8d18e819f1738a57403049652ef5615233b1fc230aaeaca279492fdcc06606cb9d934062cbd67a50ec2bf9449ef0ad0a4bf5902db14b2f3f96c16f8229ac534bf2a1b395253b36e75d670eae3874a46674c59588ac46f2cd901af1312a5603486567d06f951c2c748687fa760810ad047533fa1fd"}}}}}}}, 0x0) 1.256976279s ago: executing program 0 (id=39): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", ' \x00'}, 0x28) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000240)="6e37cf", 0x3}], 0x1}, 0x0) recvfrom$inet6(r0, &(0x7f0000000100)=""/19, 0x1ff4, 0x40, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000005e40)=':', 0x1) 1.012225453s ago: executing program 0 (id=41): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000800)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x2c, r2, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x40) 640.230204ms ago: executing program 1 (id=43): mkdir(0x0, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x2, 0x5, 0x400, 0xb7, 0x2080001, r2}) syz_emit_ethernet(0x82, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) 639.920924ms ago: executing program 0 (id=44): r0 = msgget$private(0x0, 0x40) msgctl$MSG_INFO(r0, 0xc, &(0x7f0000000000)=""/131) msgctl$MSG_STAT(r0, 0xb, &(0x7f00000000c0)=""/242) msgrcv(r0, &(0x7f00000001c0)={0x0, ""/206}, 0xd6, 0x0, 0x0) msgctl$IPC_INFO(r0, 0x3, &(0x7f00000002c0)=""/71) r1 = msgget(0x1, 0x40) msgctl$MSG_STAT(r1, 0xb, &(0x7f0000000340)=""/85) msgctl$MSG_STAT(r0, 0xb, 0x0) msgsnd(r1, &(0x7f0000000400)={0x3, "176a66e52b2103468cd71673cb98bab07b075ea2f87159ad351ca7f68042fb425cb07b986b4630ad"}, 0x30, 0x800) geteuid() read$FUSE(0xffffffffffffffff, &(0x7f0000000600)={0x2020}, 0x2020) msgctl$IPC_SET(r1, 0x1, 0x0) msgsnd(r1, &(0x7f00000026c0)={0x3, "77d6eb0f74ab85795b61b7600de3d51c8bbd4e610a2557a7aeef047240c90944b6548e97ad2bb7478973d705c5600e807b0ed0603a712e78725d"}, 0x42, 0x800) msgctl$MSG_STAT_ANY(r1, 0xd, 0x0) msgctl$IPC_RMID(r1, 0x0) 572.992888ms ago: executing program 1 (id=45): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfef2) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x9, &(0x7f0000000100)=0x1297, 0x4) 513.367461ms ago: executing program 1 (id=46): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", ' \x00'}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) recvfrom$inet6(r0, &(0x7f0000000100)=""/19, 0x1ff4, 0x40, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000005e40)=':', 0x1) 513.133941ms ago: executing program 1 (id=47): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000280)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000004e40)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r0, 0x3ba0, &(0x7f0000004ec0)={0x48, 0xb, r2, 0x0, r3}) 433.451596ms ago: executing program 1 (id=48): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd26, 0x1000000, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) 12.46838ms ago: executing program 0 (id=49): r0 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x38) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendmmsg$inet(r1, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}], 0x1, 0x240080e4) close_range(r0, 0xffffffffffffffff, 0x0) 12.1336ms ago: executing program 1 (id=50): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x2, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb38bee2d010203010902"], 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) 0s ago: executing program 0 (id=51): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = syz_io_uring_setup(0x1714, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r1, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x22}}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000340)={0x8, {"eb9d8988e81b395b45bd0cba3a8483077474dd3dd0c47bc253e5f8e8b4292aac2796001366e4c71f9f35008b53e42578e610c78571ad7fd714bbf1d6fd513c82063c7b62f80247dae47c5c719fcb141465938af815fb5f2695978afaf02bc89e649ba154d25cd9128fa00c4655085aaa52d42552f2b09df1d9bb0e372396aa8bcb1358797975d0f0609075102a2744764709002ff83c2341d3365f98a022a3adb2984c475f59af4129dbfd9a93d73ebd4e3cb4f1e4ab97495820ac3a2091f1a472e09074da690ef8a1271c19fa97898e3be7b5000d91bbc78a0e2415b557a6ac425159469271188e5adbb631ee32f1c01b8aab308dad8548079f00eb770e058ec6480cb78a47d832ff6f7d23348118d2a8a317c1d0cb05299e4541dd566ca584cbe7508ab24fa6fdd1e5fd301a57f7b01f55543d5289911b1040011acfa9247e9f2b08635fc066b8725bc114c59fdbdd3a35903b19613e3f29ce4457a59c64567f1fea4a17185e7edde0ccc64cf9d0086ef292c318c8a56b28406cdcfd091245a8e0fa721e11aa064b642d9afbcf3dd23c79c466e634e84e0ccf866e8bcc03a6e6ac823fe6056a7aa6aa8622969e263eff3fb74ea46e0bd6a1ce08244e39f59df03e6cdd7fdc2811c4c1719099a56f1c5e07ab0e7d6a07192dcc0d03f6bcbc2323f4606b52950e3ebf54b379a97bb4c0c27db1e0824068a353aa025258f16eec23148997eb0f14ade49c1216cfd2ce324f289ddcf0ff8247984c4567692e9b64c2fbbc1272a3e532122e65f97cec13564ece0b7029c2c34ca9c7a9557d487336d849513afaaaa6c1a0388e72dba891750cebb09747cdadd4228b66ce5972f9c67bc4bd795753bc83fd36897edb29a4d9ca5c5cbb0e92dab163d6c980ef76a5f79f6f05f9a7e0e745a129cbbfc12281f9566f656b1f9de9bec23d3a2bec3852430fb7dcbc692e0fcccb69402639a0e1693a70a5983a462b001131a4774e5e3d8bd9a19389ab7e819a77ae145d2ca8e4477215905e8e1dce02ccd3f8942744313a30b68025844e5a68a9a2dd382a3a32042c232459a776d6e1741eec549b4d2867580fc511393281917f5145952997aebd29d8056d4282586ccd91d633a7c1764012e09d7746fef7246eb56640fef2bdd74b78fbcaa32e6b6f4136431a51229956a8a8149de241511e2760f997886e098fc1847adee880f3ae61a1240581e13758be18a33bde20ffad43a0ae9a4f7144a16993858e445c7c5bc83e13dfeb81ae6fc11be70e0ab490ab976106e3d8e627c44df3ac588239fbf885a2439b69e5a121245fd3c42c86555b198452ffcac7168d789ff3f61da76d389b0fc1e6c39df6608824babcb098c509e0def7f1701e67ab7d6c64ab5150eaaadbe38a11673fee8d286d88ae6f39241966fa6df46464166db4f41d67596d9d67382f1069042ee118b0af630a5e12f07d8cfa4183f2c28b27a6105d69804508235f877693cf1f359ffb95b585496b941c2e3f2170d916ded547beee1ae24e1724f17cb85cfcba15e1cbabe44e60b16c2ac4f4afed9506e25bd35a8897de4ae4a4c929b25289f75b2da34a1b65edfc2dd74b74b8f3d74f1387805cf5933a616798fa890718c9ebd6079c26a5f732298f8e8a2e378fccffd7fc3ecc8b10d1cd013a7340b7842c4b1dff0e9f2ea70329fb9c3013151f43fa5bad0dd5f61a92da5a78e68052ab72c38d915136184a49da2a6b6e248e9d106777c1bde4dfc94f8a4a29dfa95fe7681516061a83650c8b39968bd3a7a34b34e93844fc8ed8a84b59f7e657a025592db7a7252491b18695693a68d178564909e5971b8956479e518a1202af31718fe22f4e65c93a9a08e802e07fd274e5a23cb466a7b48cf344a2176d61ef27d348b40a510e8cc8e372693cb6c1c7cfb4e3972fbe4204f0048bc53793e049b0484b3bbe6d3b6a986bc2c95fdb63f60ebfdbea38b48405a8b85ee84568fb6921a75fb54e9026671ed43b923286d64d60c9060a86c2217f98f049259d99d0c5ce4889b165557fa4536a6d5222eb289a6dd83ff235dbde83897d1627f6d85c3e551997007b5219c5b010d53b92879e19951ba21db665f724d7c45da7c635f3a982047a1ebed638dca4f3e97ee036e18ae68d37cd8fda64fac7dce84587311b2e17420c31d50a5da4d052052ea1b4116aa9a0ef20434420c51887cf2d03a1d578925f19e700451f404413f7371693f2e0a622e1ae49daccd12de5ec59d2acbb635d854ce22a418f143c3a637dc731d45c5d1c38adcb770602a92f3de006a4eef1d838b91178476ff168fa639eb5b420da8a343a0ec6e6144cc802eb08d1833beb6ca18ffa1fd7b019bb2d02c97d62963a8a9180769323d8e45639b68aaa56775306bdc6c020678ecd64e751fb92c85dc474bbde8f94c029d92dea48b837c7b5524dc061374e637e299fef6b1355ce23d0f649f0e61402d375bb444a37a22a812821ade48df3be021ecacff6873654bf21e111d079f5bb140568b5c4b77f1aaa22416ab983eb8fe903286fdf114024622f443686078c8318329aebe5df891a9a91bd5512b3aed59557de62d1a9586e10fa07306f815fc10204200d6282813f729c3f8e8af7c450f55037397125ef5e806306a9ba351a6f3e1dede486bc75ae897581b649ef55f19c97b330c5a61a6f76674722429ea894d1c638074cedb0b863514c19166a5c2baf4ee6d1eaeee85155afd10fdd4361c78b3c0d00d01a37df52be0ed3458bc7a1afa0c8c9a2f3406b1e4607e955f57f626c7ed2efac888e72110e0dc0f79cfdd02bc245f0b3a7939bbdc31229ab99ecd36927e1fdd7b17b5037457856fe3f773b6af24af6d67cbd7978e2f127b86b50153e9b0f13f4942006198d6a6ac335cf7560676fd607e6a3a7b518fa815def5eca1372813f97d6ea9d62b848db37015aa648c8426f26776728332fad5f72c919a6f96d1c3b0a97df4c1892ff814e2e57979da7f7098c42b963ca5929765b1ad2284abd2c1f7ef9570b8c97a513da8f4078130e70f31327708619331571d78d3475b6b41e835dc948f0e809c6610942e4c7d515d9303e6281a3980a742dc85f4528fddc34d22bbd9aa4b4b2351df10884f1dbc877717d984b0b3bafda47801103cda459d006a9a9982f5cf67fc0face3def54d579358e623dae4d9b4248cebd82111cf4c431f8852bcf862a65a124ca709cec2454e4c65514128bc2d6f8cc92624f20c02b008081d334cc7fa0b8e8d9d3dfe2a283600e875c7ecb8e4949f958f6f84f8e52b78e3eae58fa02d85bb8ac52ddf3b262ec52eca50d6d590139c24c042e1c040d8da6c9a2e95055dc91ed65881bc4c43c13c240eb9f6ef9a4cffb44e96c9c055cbbc10b5d63850bc3e2fa46aabb2c732c0c31bf1dba3ad1ce2b1b671259aaaef955d39c420b18d78828248563cacd9417ef2cb63859ebef3936e26803e7ccf5233cb3c0a2f440d898ff258cb03a783415a6f81b1b1a07bb5cef530c78c30ec9adfd2df246d581bc662336d5029f65588995adc3190e97a418c15fa3620eb68cdcc6233f1aa0009ab558b22ae9316003c6af1fe0d7807e583943e48692fcd9fa2525fefe3467d099951c83943312f0e889cef4c1ecf17ad469f5ad683b405eb59230e89df96e8dd94e41e5f62822ba957e065f22d96b1c0c2b83f5a57fbb04d5af399ece3ddd52e5afff783a876e2066fbe30963421acb427c95fd3e7bc6b7d3d731a7e347052cd9636805cab94ad40bdb63a264b3127c7f8d21d25810bd2eadb2c3e31b5c807283ad062d750e5b21ec1e20cc3ac5753ac536faf23e2b5c37e9d021870b0350ecea7187643a00a08ec3ffaf7e6c236c4d694ff41af7b5fbf8a554949f5026a8b2adcf377f94848cd17fbcc0249e796008962d3db16b4bb85483dbe75ef5b301175e052203436b38248fbd1a28a5e2b3ab75c77eb8f853e60e95d5f16cb9858b33b3752b4c69776ec4506ba2bd490a6f17aae1152d8762d86cc0ef32788cf149e8fa9464c3ea588f15d8eb2092254c470acf221cfe680845167fc6778b8af1609681ae4f4e65426ce059b9768eb2e0c89f29de7b91db89a72e4c677c65dd980f9a6bfa656ed01d5e683a33e6b80462139476225cc0fcc309d926c36aa250bdad1454db46cd2536046f909a05b08829cad973bc705231a32a5f2e7ac5e96e2315cb175724607a5af02073fc936272aa724990ba6dcc4ea79da6eb7ec0bbdbd0a878114c493bc4b3e26e24b18553bd0a617981d8ea9e91ed2e3bcbd48f5d67aa913790bf52c31435184d6c73079e964e9ef05194e88b072b372d48cb70dbca99238c4474ed0b6932cc1b233bce0c87d48d478fa3c937c42c8637714e9995041f8b2b7dce17eb2f26c730f5559cf5919b88ee00bbf40726f90e1cf29e0f5fadc64de1bf28d447e8996948dc2fe658620b6fb8cfc592d5e0621b66057eb774c31ab16235456210c5ee7990b71b5b3d51cf13e30361a8cdaa107b13fa6a1c84b172efece3b70753e81e7e9e572d228c7bbcdaba40d8d0eb4de13bda1fca38d3ed667bb0897335aadaa0c3905a1283292c89ef5747ad5462db4011c3f8a4a476aa78d74badf8bf3785997ba9824e21256eed4c2805331fa24c81e28f21e895a0b03e7de52787065faded0f1b59eba1c922dce5576e8ab190ef716c021d8dfa13a1e73b8962d9f9238ba8b9fa2cf84addfe37e78cdb398ee4c0642a716fb8db1e332f873a16c6225ebc51fe05f33273380e64272159bb808336e87b4b0cddb492a992b2e7f423bf37725e1d9dda0dc6b4426172c2a93ee1cc9acea7fe1ece9ba0ddee3e232efb11fc4d4e266cd2a83c017e32315c434b73e9729d5a3a7fe993e72f9bb70d78672493263a2653fe1bfd42d1f97cbf0fffb6705b2e35fe65ceb9ad7ddc525b689027352db9c194939559ebb3b505a58e0404103482ce10f7d67761c13b235b52ad1b25803aa94cf7df5ca8d8bd0d4e6d0ab8bcfb8f72a26cecf071e31c02a1034c0144d850f1732926981dca7a18f0a197da3703d74d3e951ed510ed38a8fcae93eb2bebdf92e0feb0f06dbe1331cb43cfa548ca294ea479ecb325aea7aff8d924745298a3d34f23f40b992995a908130165b44beb8cc9da8390dae2a09cb7e1ac7e95b84f35e7be147b4be04883047cdcaec662aa8b66694ae8914e65edb63696494bff66eacb3aecdb23746a36cec7f832d628d38698ba6b3d4020095eae2a5b36a21039ce50901cdf2582b88ab8c86c6f4a8c345618f10d7aab081edb3ce8e4479e0ac476112d4b261cb8ed952221fb660898491fc7134b091c0565173bebf014caffae12852b5314c930d41e27bcfa7bc536fc4da3b714630e1ac7aaf006755da1da792dcad08f796c2ebdd6427ad3374e25132a103d62f98584462aa164d742b4d7c668a85119480199dd90f0a903f6c76cfca28b84a2279ae6965fdec403072be146d2d1f39b122113fbcfb52cf8c7c1d47a32f437b895bcd7a67ad08f196112a15b07e5b57b4db2b7c7f70a42923d6d0625515375b9281d331bd1e5dd75ff3a6e1ca5b75eb328e6c935f2c8f0c57b0aaf2ad85983160b0e53fca44d95e956ef2726d97acb2da34ca4482bb86aabde6d8b8b85da2e44ae89b8359f7edb88a3e2a9aad23125b8c2bd0c7be0847ac9b1e16db2c395e0c9eb040af710c31d32f7b356bfb6f1704f4d884f37c15b865eda87685ae8926fbf3a4465e7e2968ee18ea1ff5d4f4cbfb55634089687b9f0bce5b9cf10779299893cf64980193fd3a1096507e7a8be", 0x1000}}, 0x1006) io_uring_enter(r2, 0x27e2, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): [ 42.227200][ T31] audit: type=1400 audit(42.170:58): avc: denied { read write } for pid=3091 comm="sftp-server" name="null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.229751][ T31] audit: type=1400 audit(42.170:59): avc: denied { open } for pid=3091 comm="sftp-server" path="/dev/null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 Warning: Permanently added '[localhost]:51310' (ED25519) to the list of known hosts. [ 53.079724][ T31] audit: type=1400 audit(53.010:60): avc: denied { name_bind } for pid=3094 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 54.661756][ T31] audit: type=1400 audit(54.600:61): avc: denied { execute } for pid=3095 comm="sh" name="syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 54.699265][ T31] audit: type=1400 audit(54.620:62): avc: denied { execute_no_trans } for pid=3095 comm="sh" path="/syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 56.904346][ T31] audit: type=1400 audit(56.840:63): avc: denied { mounton } for pid=3095 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=806 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 56.907789][ T31] audit: type=1400 audit(56.850:64): avc: denied { mount } for pid=3095 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 56.919105][ T3095] cgroup: Unknown subsys name 'net' [ 56.924064][ T31] audit: type=1400 audit(56.860:65): avc: denied { unmount } for pid=3095 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 57.059169][ T3095] cgroup: Unknown subsys name 'cpuset' [ 57.063022][ T3095] cgroup: Unknown subsys name 'hugetlb' [ 57.064079][ T3095] cgroup: Unknown subsys name 'rlimit' [ 57.281731][ T31] audit: type=1400 audit(57.220:66): avc: denied { setattr } for pid=3095 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 57.286739][ T31] audit: type=1400 audit(57.220:67): avc: denied { mounton } for pid=3095 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 57.292119][ T31] audit: type=1400 audit(57.230:68): avc: denied { mount } for pid=3095 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 57.448025][ T3097] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 57.452880][ T31] audit: type=1400 audit(57.390:69): avc: denied { relabelto } for pid=3097 comm="mkswap" name="swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 62.546539][ T3095] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 63.666938][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 63.667449][ T31] audit: type=1400 audit(63.600:73): avc: denied { execmem } for pid=3098 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 63.710820][ T31] audit: type=1400 audit(63.650:74): avc: denied { read } for pid=3100 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 63.712795][ T31] audit: type=1400 audit(63.650:75): avc: denied { open } for pid=3100 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 63.720779][ T31] audit: type=1400 audit(63.660:76): avc: denied { mounton } for pid=3100 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 63.734514][ T31] audit: type=1400 audit(63.670:77): avc: denied { module_request } for pid=3100 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 63.779694][ T31] audit: type=1400 audit(63.720:78): avc: denied { sys_module } for pid=3101 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 64.374906][ T31] audit: type=1400 audit(64.310:79): avc: denied { ioctl } for pid=3101 comm="syz-executor" path="/dev/net/tun" dev="devtmpfs" ino=675 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 65.388498][ T3101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.392331][ T3101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.453467][ T3100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.459230][ T3100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.993239][ T3100] hsr_slave_0: entered promiscuous mode [ 65.999196][ T3100] hsr_slave_1: entered promiscuous mode [ 66.062615][ T3101] hsr_slave_0: entered promiscuous mode [ 66.063956][ T3101] hsr_slave_1: entered promiscuous mode [ 66.065487][ T3101] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.068218][ T3101] Cannot create hsr debugfs directory [ 66.428875][ T31] audit: type=1400 audit(66.370:80): avc: denied { create } for pid=3101 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.431459][ T31] audit: type=1400 audit(66.370:81): avc: denied { write } for pid=3101 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.434742][ T31] audit: type=1400 audit(66.370:82): avc: denied { read } for pid=3101 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.442338][ T3101] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 66.456692][ T3101] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 66.473368][ T3101] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 66.491720][ T3101] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 66.549223][ T3100] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.555628][ T3100] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.564488][ T3100] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.575218][ T3100] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.164964][ T3101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.184175][ T3100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.609239][ T3100] veth0_vlan: entered promiscuous mode [ 68.623505][ T3100] veth1_vlan: entered promiscuous mode [ 68.658282][ T3100] veth0_macvtap: entered promiscuous mode [ 68.664480][ T3100] veth1_macvtap: entered promiscuous mode [ 68.701599][ T3100] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.702291][ T3100] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.702411][ T3100] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.702484][ T3100] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.800139][ T31] audit: type=1400 audit(68.740:83): avc: denied { mount } for pid=3100 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 68.808739][ T31] audit: type=1400 audit(68.740:84): avc: denied { mounton } for pid=3100 comm="syz-executor" path="/syzkaller.si04XS/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 68.808980][ T31] audit: type=1400 audit(68.750:85): avc: denied { mount } for pid=3100 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 68.819141][ T31] audit: type=1400 audit(68.760:86): avc: denied { mounton } for pid=3100 comm="syz-executor" path="/syzkaller.si04XS/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 68.822038][ T31] audit: type=1400 audit(68.760:87): avc: denied { mounton } for pid=3100 comm="syz-executor" path="/syzkaller.si04XS/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=2380 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 68.833067][ T31] audit: type=1400 audit(68.770:88): avc: denied { unmount } for pid=3100 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 68.847024][ T31] audit: type=1400 audit(68.780:89): avc: denied { mounton } for pid=3100 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=763 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 68.847416][ T31] audit: type=1400 audit(68.780:90): avc: denied { mount } for pid=3100 comm="syz-executor" name="/" dev="gadgetfs" ino=2381 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 68.847513][ T31] audit: type=1400 audit(68.780:91): avc: denied { mount } for pid=3100 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 68.847600][ T31] audit: type=1400 audit(68.780:92): avc: denied { mounton } for pid=3100 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 68.890531][ T3100] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 69.024713][ T3101] veth0_vlan: entered promiscuous mode [ 69.043082][ T3101] veth1_vlan: entered promiscuous mode [ 69.074588][ T3101] veth0_macvtap: entered promiscuous mode [ 69.081378][ T3101] veth1_macvtap: entered promiscuous mode [ 69.114140][ T3101] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.115357][ T3101] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.115988][ T3101] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.117012][ T3101] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.804092][ T3801] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3801 comm=syz.0.6 [ 74.052095][ T31] kauditd_printk_skb: 23 callbacks suppressed [ 74.053797][ T31] audit: type=1400 audit(73.990:116): avc: denied { ioctl } for pid=3833 comm="syz.1.19" path="socket:[1870]" dev="sockfs" ino=1870 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 74.058421][ T31] audit: type=1400 audit(73.990:117): avc: denied { write } for pid=3833 comm="syz.1.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 74.141073][ T31] audit: type=1400 audit(74.080:118): avc: denied { perfmon } for pid=3835 comm="syz.1.20" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 74.149537][ T31] audit: type=1400 audit(74.080:119): avc: denied { prog_load } for pid=3835 comm="syz.1.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 74.149942][ T31] audit: type=1400 audit(74.090:120): avc: denied { bpf } for pid=3835 comm="syz.1.20" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 74.170554][ T31] audit: type=1400 audit(74.110:121): avc: denied { prog_run } for pid=3835 comm="syz.1.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 74.222728][ T31] audit: type=1326 audit(74.160:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3837 comm="syz.1.21" exe="/syz-executor" sig=31 arch=40000028 syscall=240 compat=0 ip=0x131f30 code=0x0 [ 76.416464][ T31] audit: type=1400 audit(76.350:123): avc: denied { create } for pid=3841 comm="syz.0.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 76.442896][ T31] audit: type=1400 audit(76.380:124): avc: denied { setopt } for pid=3841 comm="syz.0.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 77.249421][ T2887] hid-generic 0001:0000:000F.0001: unknown main item tag 0x0 [ 77.250975][ T2887] hid-generic 0001:0000:000F.0001: unknown main item tag 0x0 [ 77.251327][ T2887] hid-generic 0001:0000:000F.0001: unknown main item tag 0x0 [ 77.251623][ T2887] hid-generic 0001:0000:000F.0001: unknown main item tag 0x0 [ 77.251909][ T2887] hid-generic 0001:0000:000F.0001: unknown main item tag 0x0 [ 77.252186][ T2887] hid-generic 0001:0000:000F.0001: unknown main item tag 0x0 [ 77.252500][ T2887] hid-generic 0001:0000:000F.0001: unknown main item tag 0x0 [ 77.252796][ T2887] hid-generic 0001:0000:000F.0001: unknown main item tag 0x0 [ 77.253073][ T2887] hid-generic 0001:0000:000F.0001: unknown main item tag 0x0 [ 77.253348][ T2887] hid-generic 0001:0000:000F.0001: unknown main item tag 0x0 [ 77.253629][ T2887] hid-generic 0001:0000:000F.0001: unknown main item tag 0x0 [ 77.253905][ T2887] hid-generic 0001:0000:000F.0001: unknown main item tag 0x0 [ 77.254180][ T2887] hid-generic 0001:0000:000F.0001: unknown main item tag 0x0 [ 77.254459][ T2887] hid-generic 0001:0000:000F.0001: unknown main item tag 0x0 [ 77.254748][ T2887] hid-generic 0001:0000:000F.0001: unknown main item tag 0x0 [ 77.255030][ T2887] hid-generic 0001:0000:000F.0001: unknown main item tag 0x0 [ 77.255309][ T2887] hid-generic 0001:0000:000F.0001: unknown main item tag 0x0 [ 77.255593][ T2887] hid-generic 0001:0000:000F.0001: unknown main item tag 0x0 [ 77.255871][ T2887] hid-generic 0001:0000:000F.0001: unknown main item tag 0x0 [ 77.261340][ T2887] hid-generic 0001:0000:000F.0001: unknown main item tag 0x0 [ 77.261726][ T2887] hid-generic 0001:0000:000F.0001: unknown main item tag 0x0 [ 77.262044][ T2887] hid-generic 0001:0000:000F.0001: unknown main item tag 0x0 [ 77.262173][ T2887] hid-generic 0001:0000:000F.0001: unknown main item tag 0x0 [ 77.262291][ T2887] hid-generic 0001:0000:000F.0001: unknown main item tag 0x0 [ 77.262407][ T2887] hid-generic 0001:0000:000F.0001: unknown main item tag 0x0 [ 77.262521][ T2887] hid-generic 0001:0000:000F.0001: unknown main item tag 0x0 [ 77.262640][ T2887] hid-generic 0001:0000:000F.0001: unknown main item tag 0x0 [ 77.262754][ T2887] hid-generic 0001:0000:000F.0001: unknown main item tag 0x0 [ 77.262866][ T2887] hid-generic 0001:0000:000F.0001: unknown main item tag 0x0 [ 77.262976][ T2887] hid-generic 0001:0000:000F.0001: unknown main item tag 0x0 [ 77.263091][ T2887] hid-generic 0001:0000:000F.0001: unknown main item tag 0x0 [ 77.263221][ T2887] hid-generic 0001:0000:000F.0001: unknown main item tag 0x0 [ 77.277832][ T2887] hid-generic 0001:0000:000F.0001: hidraw0: HID vffffff.ff Device [syz0] on syz0 [ 77.384638][ T3842] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 77.416578][ T31] audit: type=1400 audit(77.350:125): avc: denied { bind } for pid=3841 comm="syz.0.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 77.568544][ T23] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 77.750660][ T23] usb 2-1: config 0 has no interfaces? [ 77.767247][ T23] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 77.769027][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.867186][ T23] usb 2-1: config 0 descriptor?? [ 79.467655][ T31] audit: type=1400 audit(79.410:126): avc: denied { name_bind } for pid=3867 comm="syz.1.28" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 79.665983][ T3839] usb 2-1: USB disconnect, device number 2 [ 79.718528][ T31] audit: type=1400 audit(79.660:127): avc: denied { create } for pid=3870 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 79.722229][ T31] audit: type=1400 audit(79.660:128): avc: denied { bind } for pid=3870 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 79.725218][ T31] audit: type=1400 audit(79.660:129): avc: denied { name_bind } for pid=3870 comm="syz.1.30" src=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 79.727455][ T31] audit: type=1400 audit(79.670:130): avc: denied { node_bind } for pid=3870 comm="syz.1.30" src=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 79.856865][ T31] audit: type=1400 audit(79.790:131): avc: denied { create } for pid=3882 comm="syz.1.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 79.861000][ T31] audit: type=1400 audit(79.800:132): avc: denied { read } for pid=3882 comm="syz.1.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 80.392899][ T3886] netlink: 272 bytes leftover after parsing attributes in process `syz.1.32'. [ 80.396805][ T31] audit: type=1400 audit(80.330:133): avc: denied { write } for pid=3882 comm="syz.1.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 80.416332][ T31] audit: type=1400 audit(80.330:134): avc: denied { nlmsg_read } for pid=3882 comm="syz.1.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 80.624746][ T31] audit: type=1400 audit(80.560:135): avc: denied { create } for pid=3889 comm="syz.0.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 80.626815][ T3888] syzkaller0: entered promiscuous mode [ 80.627389][ T3888] syzkaller0: entered allmulticast mode [ 80.633564][ T3888] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 83.017827][ T3939] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.073374][ T3939] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.142841][ T3939] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.194591][ T3939] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.273549][ T3939] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.291947][ T3939] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.309250][ T3939] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.327004][ T3939] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.468278][ T3962] 8<--- cut here --- [ 83.468941][ T3962] Unable to handle kernel NULL pointer dereference at virtual address 0000000e when read [ 83.469747][ T3962] [0000000e] *pgd=855f9003, *pmd=df57c003 [ 83.471637][ T3962] Internal error: Oops: 205 [#1] SMP ARM [ 83.472059][ T3962] Modules linked in: [ 83.473045][ T3962] CPU: 1 UID: 0 PID: 3962 Comm: syz.0.51 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 83.473437][ T3962] Hardware name: ARM-Versatile Express [ 83.473719][ T3962] PC is at io_buffer_select+0x50/0x18c [ 83.474263][ T3962] LR is at xa_load+0x68/0xa4 [ 83.474450][ T3962] pc : [<80889a10>] lr : [<81a4be54>] psr: 20000013 [ 83.474638][ T3962] sp : dfb8de18 ip : dfb8ddd8 fp : dfb8de34 [ 83.474846][ T3962] r10: 85006500 r9 : 00000000 r8 : 80000001 [ 83.475043][ T3962] r7 : dfb8de50 r6 : 00000000 r5 : 849c6900 r4 : 855fe000 [ 83.475299][ T3962] r3 : 00000001 r2 : 00000000 r1 : 855335c0 r0 : 00000000 [ 83.475654][ T3962] Flags: nzCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment none [ 83.475898][ T3962] Control: 30c5387d Table: 855ccf40 DAC: 00000000 [ 83.476262][ T3962] Register r0 information: NULL pointer [ 83.476702][ T3962] Register r1 information: slab kmalloc-64 start 855335c0 pointer offset 0 size 64 [ 83.477440][ T3962] Register r2 information: NULL pointer [ 83.477629][ T3962] Register r3 information: non-paged memory [ 83.477862][ T3962] Register r4 information: slab io_kiocb start 855fe000 pointer offset 0 size 192 [ 83.478220][ T3962] Register r5 information: slab kmalloc-2k start 849c6800 pointer offset 256 size 2048 [ 83.478607][ T3962] Register r6 information: NULL pointer [ 83.478815][ T3962] Register r7 information: 2-page vmalloc region starting at 0xdfb8c000 allocated at kernel_clone+0xac/0x3e4 [ 83.479269][ T3962] Register r8 information: non-slab/vmalloc memory [ 83.479539][ T3962] Register r9 information: NULL pointer [ 83.479728][ T3962] Register r10 information: slab sock_inode_cache start 85006500 pointer offset 0 size 576 [ 83.480127][ T3962] Register r11 information: 2-page vmalloc region starting at 0xdfb8c000 allocated at kernel_clone+0xac/0x3e4 [ 83.480491][ T3962] Register r12 information: 2-page vmalloc region starting at 0xdfb8c000 allocated at kernel_clone+0xac/0x3e4 [ 83.481030][ T3962] Process syz.0.51 (pid: 3962, stack limit = 0xdfb8c000) [ 83.481462][ T3962] Stack: (0xdfb8de18 to 0xdfb8e000) [ 83.481715][ T3962] de00: 855fe000 8555c500 [ 83.481976][ T3962] de20: 00000000 00000040 dfb8de84 dfb8de38 80892d3c 808899cc 8057abbc 8030cb0c [ 83.482237][ T3962] de40: 855fe000 00000001 015fe000 00000000 00000000 ff34fc24 80886a40 855fe000 [ 83.482487][ T3962] de60: 81cf0bd4 00000000 80000001 81cf0b5c 0000000a 833ac800 dfb8debc dfb8de88 [ 83.482727][ T3962] de80: 80886df4 80892b18 00000000 00000022 00000000 849c6800 855fe06c 855fe000 [ 83.483053][ T3962] dea0: 85780000 00000000 00000000 833ac800 dfb8df14 dfb8dec0 808877a8 80886b7c [ 83.483323][ T3962] dec0: 8088e164 81a4bdf8 00000000 00000000 00000001 00000001 81cf0b5c 00000001 [ 83.483747][ T3962] dee0: 849c6800 ff34fc24 8477c180 00000000 849c6800 000027e2 8477c180 00000000 [ 83.484154][ T3962] df00: 833ac800 00000000 dfb8dfa4 dfb8df18 80888250 808875a8 ecac8b10 849c6840 [ 83.484557][ T3962] df20: 00000000 00000000 81a4fbd0 81a4faa0 dfb8df54 dfb8df40 8026b438 8029ce1c [ 83.484859][ T3962] df40: dfb8dfb0 40000000 dfb8df84 dfb8df58 802229dc 8026b3f4 00000000 8281d05c [ 83.485143][ T3962] df60: dfb8dfb0 0014c490 ecac8b10 80222930 00000000 ff34fc24 dfb8dfac 00000000 [ 83.485410][ T3962] df80: 00000000 002e630c 000001aa 8020029c 833ac800 000001aa 00000000 dfb8dfa8 [ 83.485663][ T3962] dfa0: 80200060 80888124 00000000 00000000 00000006 000027e2 00000000 00000000 [ 83.485894][ T3962] dfc0: 00000000 00000000 002e630c 000001aa 002d0000 00000000 00006364 76b3c0bc [ 83.486269][ T3962] dfe0: 76b3bec0 76b3beb0 0001939c 00131f30 60000010 00000006 00000000 00000000 [ 83.486760][ T3962] Call trace: [ 83.487028][ T3962] [<808899c0>] (io_buffer_select) from [<80892d3c>] (io_recvmsg+0x230/0x420) [ 83.487510][ T3962] r7:00000040 r6:00000000 r5:8555c500 r4:855fe000 [ 83.487842][ T3962] [<80892b0c>] (io_recvmsg) from [<80886df4>] (io_issue_sqe+0x284/0x658) [ 83.488112][ T3962] r10:833ac800 r9:0000000a r8:81cf0b5c r7:80000001 r6:00000000 r5:81cf0bd4 [ 83.488448][ T3962] r4:855fe000 [ 83.488561][ T3962] [<80886b70>] (io_issue_sqe) from [<808877a8>] (io_submit_sqes+0x20c/0x938) [ 83.488860][ T3962] r10:833ac800 r9:00000000 r8:00000000 r7:85780000 r6:855fe000 r5:855fe06c [ 83.489104][ T3962] r4:849c6800 [ 83.489216][ T3962] [<8088759c>] (io_submit_sqes) from [<80888250>] (sys_io_uring_enter+0x138/0x780) [ 83.489574][ T3962] r10:00000000 r9:833ac800 r8:00000000 r7:8477c180 r6:000027e2 r5:849c6800 [ 83.489829][ T3962] r4:00000000 [ 83.489967][ T3962] [<80888118>] (sys_io_uring_enter) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 83.490251][ T3962] Exception stack(0xdfb8dfa8 to 0xdfb8dff0) [ 83.490454][ T3962] dfa0: 00000000 00000000 00000006 000027e2 00000000 00000000 [ 83.490768][ T3962] dfc0: 00000000 00000000 002e630c 000001aa 002d0000 00000000 00006364 76b3c0bc [ 83.491037][ T3962] dfe0: 76b3bec0 76b3beb0 0001939c 00131f30 [ 83.491215][ T3962] r10:000001aa r9:833ac800 r8:8020029c r7:000001aa r6:002e630c r5:00000000 [ 83.491454][ T3962] r4:00000000 [ 83.491726][ T3962] Code: e3130001 0a00002f e5910000 e1d120be (e1d030be) [ 83.492705][ T3962] ---[ end trace 0000000000000000 ]--- [ 83.493637][ T3962] Kernel panic - not syncing: Fatal exception [ 83.495787][ T3962] Rebooting in 86400 seconds.. VM DIAGNOSIS: 04:43:16 Registers: info registers vcpu 0 CPU#0 R00=829bc740 R01=00000024 R02=ffffffff R03=81a50408 R04=82ab52c0 R05=532f7e00 R06=00003ec2 R07=00000013 R08=84990c1c R09=84990848 R10=00000000 R11=df971c6c R12=df971c70 R13=df971c60 R14=812cbfb4 R15=81a50418 PSR=60010013 -ZC- A S svc32 s00=74726f70 s01=38303620 d00=3830362074726f70 s02=65707974 s03=66203220 d01=6620322065707974 s04=3d747865 s05=746f6f72 d02=746f6f723d747865 s06=7379733a s07=5f6d6461 d03=5f6d64617379733a s08=79733a72 s09=6d646173 d04=6d64617379733a72 s10=7420745f s11=73616c63 d05=73616c637420745f s12=656e3d73 s13=6e696c74 d06=6e696c74656e3d73 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=00000000 R01=82249388 R02=00000000 R03=00000080 R04=00000000 R05=82257c34 R06=829f2867 R07=82a71188 R08=00000002 R09=00000f7a R10=00000000 R11=dfb8dbe4 R12=00000018 R13=dfb8dbc0 R14=0054504d R15=802a4080 PSR=60000193 -ZC- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000