last executing test programs: 1.260397561s ago: executing program 0 (id=202): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000001140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000014c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x60000, {0x0, 0x0, 0x0, r3, 0x15809}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001c00070c2ebd7000fedbdf250a000000", @ANYRES32=r3, @ANYBLOB="40002f32140001"], 0x30}}, 0x20024090) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r5 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) r6 = socket$kcm(0x2, 0xa, 0x2) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000a3ea38ca9a8aad4d7d082d11718060d20010000304090000008f8bb65b477fb76c96a4df40254b6aff3e9772500ff894", @ANYRES32=0x0, @ANYBLOB="00000000420000001800128008000100677470000c00028008000200", @ANYRES32=r8, @ANYBLOB], 0x38}, 0x1, 0xba01}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r9 = shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000ffd000/0x1000)=nil) shmctl$SHM_STAT(r9, 0xd, &(0x7f0000000340)=""/187) write$tun(r4, &(0x7f0000000800)=ANY=[@ANYBLOB="16a2a85969e6ffffffffffff88a8000081000002"], 0x1a) 1.12078651s ago: executing program 0 (id=205): socket(0x400000000010, 0x3, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r0, &(0x7f0000000180)='r:s/p ./file0:0', 0xf) ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, &(0x7f00000002c0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', 0x0}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r2, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x5}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="13", 0x1}], 0x1}, 0x48043) r4 = dup(r2) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000340)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0x8, 0x2, 0x4, 0x48, 0xfd}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x5, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f00000003c0)={0xffffffffffffffff}, 0x800) splice(r5, 0x0, r2, 0x0, 0xffff, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffdf, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff3, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) 1.070020438s ago: executing program 0 (id=208): bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x2) syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x1, 0x5, 0x1c, 0x67, 0x3, 0x0, 0x2, 0x0, @private=0xa010102, @rand_addr=0x64010100}, {0x11, 0x91, 0x0, @empty}}}}}, 0x0) 1.001028154s ago: executing program 0 (id=210): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x24, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20040808) 999.954957ms ago: executing program 0 (id=211): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000001e0001002dbd7000fcdbdf25ac141422000000000000000000000000006604d40a000000ac1414bb000000000000000000000000090000000535000008000c000800000078f8a5e43dceb06a7e5cdc1359fdf002e08ad9ad4198b36a4b74cb2b1ae9b1953b027451eb658e2ba20f8c9256d25018b1a1eb2fb68857576a0979e2474c7fbf505807b1bbbc4290c737538cc1e3a1685cef03c475fde2b71c15cbf2c6315b272083f469d77a9fa1ad0f1bf20e12cdbe3f"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x24000000) r1 = syz_open_dev$radio(&(0x7f0000000140), 0x0, 0x2) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f0000000280)={0xac, "61356aa3fac3d42fd8910ecae92f841af635d33db0356cd9f347d557214b7d88", 0x1, 0x20, 0x2, 0x2, 0x4, 0x3, 0x3, 0x284e2922}) r2 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r2, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e23, 0x39, @empty, 0xf66e}}, 0x24) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) recvfrom$rxrpc(r2, 0x0, 0x0, 0xe8ce25b3ffff0000, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) 371.344452ms ago: executing program 1 (id=221): r0 = socket$kcm(0x10, 0x5, 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f03214e000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) 371.095759ms ago: executing program 3 (id=222): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000005c0)={[0x4000000000000008, 0x6, 0x48, 0x4000000000000e52, 0x800000000001, 0x5479, 0x1041, 0x200200000006, 0x0, 0x100000001, 0xfffffffffffffffe, 0x100000000, 0x200000000000001, 0x40000000008, 0x8000000000085, 0x80000000], 0x2ffc, 0x557c1}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) r3 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'bond0\x00', &(0x7f00000002c0)=@ethtool_eeprom={0xb, 0x4d, 0xd832}}) (async) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r5, &(0x7f0000000140)='md0\n', 0x4) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r6, &(0x7f00000001c0)='raid1\n', 0x6) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r7, &(0x7f0000000240)='2', 0x1) (async) r8 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r8, &(0x7f00000002c0)='1:0\n', 0x4) (async) write(0xffffffffffffffff, 0x0, 0x0) (async) r9 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1, 0x0) write(r9, &(0x7f00000003c0)="0089229f0926153989ac5e70722a2c871fd1d34adcc79246b340670e", 0x1c) (async) write(0xffffffffffffffff, &(0x7f0000000440)='1', 0x1) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x800) (async) openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/block/md0/md/dev-ram0/state\x00', 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000080)) 371.014296ms ago: executing program 1 (id=223): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c"], 0xa4}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000013000100000001000000000007000000", @ANYRES32=r2], 0x34}}, 0x0) 291.216348ms ago: executing program 1 (id=224): bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000240)="0193d983c1bebd6fd774c225f14d311849143bbffe299bd758d571ece2084fc19f512c856b82bb0066944f90c19e8c6b42ca9fc125519d", 0x0, 0x2}, 0x20) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900320003003000000060ce902d9f0c2f0081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) 290.865535ms ago: executing program 2 (id=225): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xb4, 0x30, 0xffff, 0x0, 0x0, {}, [{0xa0, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x2}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0xb4}}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = dup(r1) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000100)={{{@in=@multicast1, @in=@remote}}, {{@in=@multicast1}, 0x0, @in6}}, &(0x7f0000000200)=0xe8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000ffff25bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0b00010062726964676500000c000280050016000100d73c2385ce412b512e0000"], 0x3c}, 0x1, 0x0, 0x0, 0x24004844}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000001800dd8d000000008000000002001000fe0400010000002008001e0002000000bace1b4a993806f6b5e70c09d0dc6f3340ab2b068d2cdeb13c0728b5fd7591dff66fcff79be4c3ed817e127b9cd2e8edaa2fb07931dab00557d229bab5f84660fd84e012531bb52b75c6f9c81db1df705c5810bde094441ee38335cb51d146b6d8bb6fbe5b3fa2efacd479be4ce78860b51e3da11b786e6328d372c14b6f4d132b88df2e44cf9d8a0b1cd196d74cb86ce3009fdc3bf882450dccf979837b1ac1aadf7657e4a9599b740f8b369e58dd8afb38b286978b83"], 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000001c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000300), 0x3, r8}) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f0000000580)={0x600, 0x1, &(0x7f0000000180)=[r8], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r10, r9, r10], &(0x7f00000003c0), 0x0, 0x2}) r11 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r11, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r11, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r11, 0xc02064b6, &(0x7f0000000280)={r7, r8, 0x0, 0x0, 0x0, 0xffffffffffffff3c, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r11, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0], &(0x7f0000000300), 0x1, r12}) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) pipe(&(0x7f0000000080)) 221.007856ms ago: executing program 3 (id=226): socket$kcm(0x10, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) prctl$PR_MCE_KILL(0x43, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20008045, &(0x7f00000000c0)={0xa, 0x2, 0x401, @empty}, 0x1c) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x2, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000808, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback, 0xdbb}, 0x1c) r2 = socket$packet(0x11, 0x2, 0x300) bind$packet(r2, &(0x7f0000000000)={0x11, 0x10, 0x0, 0x1, 0x10, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x14) r3 = syz_io_uring_setup(0xf03, &(0x7f0000000280)={0x0, 0x79fa, 0x40000, 0x0, 0x111}, &(0x7f0000000140)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000540)=@IORING_OP_URING_CMD=@generic_cmd_sqes={0x2e, 0x5, 0x0, 0x0, {0x1}, {0x4010, 0x5}, 0x0, 0x0, 0x0, {0x2, 0x0, 0x1, 0x8671}}) io_uring_enter(r3, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 218.959903ms ago: executing program 1 (id=227): syz_emit_ethernet(0x7e, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x48, 0x11, 0x0, @remote, @local, {[], {0x4620, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "88c73b21f267636d01dbe5712c1c941e1cdafbbb43f09c28", "e13808ca72381f41e5fff9620915b6f78670dfaf9a2038083179cf6b7931c9b4"}}}}}}}, 0x0) 218.8126ms ago: executing program 3 (id=228): socket(0x848000000015, 0x805, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x64, 0x2, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3e8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x5c, 0x9, 0x6, 0x3, 0xf5, 0x0, {0x2}, [@IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x5064}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 218.248238ms ago: executing program 1 (id=229): socket(0x400000000010, 0x3, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r0, &(0x7f0000000180)='r:s/p ./file0:0', 0xf) ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, &(0x7f00000002c0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', 0x0}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r2, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x5}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="13", 0x1}], 0x1}, 0x48043) r4 = dup(r2) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000340)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0x8, 0x2, 0x4, 0x48, 0xfd}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x5, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0xffff, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffdf, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff3, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) 217.181232ms ago: executing program 2 (id=230): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r1, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0xf0ffff, 0x0, 0x20000015}, 0x44000) 130.629417ms ago: executing program 2 (id=231): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtclass={0x40, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x7, 0x1}, {0x0, 0x1}}, [@tclass_kind_options=@c_qfq={{0x8}, {0xc, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0x20001}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x71}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_emit_ethernet(0x32, &(0x7f00000007c0)={@random="e90c610faca2", @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0xfffe, 0x27, 0x0, @gue={{0x2, 0x0, 0x2, 0x1}}}}}}}, 0x0) 130.222504ms ago: executing program 1 (id=232): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x84, 0x2c, 0xd2f, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x40, 0x8, 0x7}}]}, {0xfffffffffffffc20}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$unix(0x1, 0x5, 0x0) timerfd_gettime(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e, 0xffffffff}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200d1eb14120600002fb96dbcf706e10500400086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 130.071101ms ago: executing program 3 (id=233): syz_kvm_add_vcpu$x86(0x0, &(0x7f00000001c0)={0x0, &(0x7f0000000500)=[@out_dx={0x6a, 0x28, {0xa20f}}], 0x28}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x15) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f00000000c0)={0xffffffff, 0x29000}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000580)={0x1, 0x0, [{0x0, 0x7fffffff, 0x1, 0xffff, 0x2, 0x400, 0x80000001}]}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0xfffffffffffffffc, 0xfff, 0x3fffc, 0x180, 0x2, 0x0, 0xf5, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x8, 0x0, 0x45, 0x2, 0x400], 0x200000, 0x1c6017}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 129.60685ms ago: executing program 2 (id=234): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x5}, 0x50) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x9) ioctl$XFS_IOC_OPEN_BY_HANDLE(r0, 0xc038586b, &(0x7f0000000180)={r1, &(0x7f0000000080)='!@\x00', 0x181002, &(0x7f00000000c0)={@_ha_fsid={[0x200, 0x10]}, {0x0, 0x2, 0x9, 0xf59}}, 0x507, &(0x7f0000000100), &(0x7f0000000140)=0xffffffff}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x15, 0x400, 0x6, 0x7, 0x5, 0x1, 0x1c, '\x00', r2, 0xffffffffffffffff, 0x2, 0x4, 0x4}, 0x50) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r3, &(0x7f0000000640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000600)={&(0x7f0000000300)={0x2fc, 0x13, 0x1, 0x70bd26, 0x25dfdbfb, {0x1f, 0x9, 0x1, 0xcc, {0x4e22, 0x4e23, [0x10001, 0x3, 0x7fffffff, 0x8000], [0x2, 0x52831437, 0x5, 0x80], r2, [0xdb, 0x7]}, 0xfff, 0xd88}, [@INET_DIAG_REQ_BYTECODE={0x3f, 0x1, "f2cc466af722e1e0b06c3cdad14995b15e350c2e4b11b61ee9e4f089e51370baaed1d039b9da43145ca965157356e727998d44138866f3ac22e87b"}, @INET_DIAG_REQ_BYTECODE={0x3d, 0x1, "b583b8137cf5880a0d4385953954240b65345f92a62c9708e0b5d096b227f10dd3bae130cd8eeaa9f616902f527a386226d20d7b188897aa68"}, @INET_DIAG_REQ_BYTECODE={0xe5, 0x1, "bf4064bb70a933a639b7e012f0e1e59f6f48e6ed37c66d043cb5cd750f3fce2863508e9bd1a3c08fb213f249eac2e2de8f123cca01aec518cedc1d77c13bafd9c133cc0a1746b321b7a4dac97adbde1cc2cf47a90ce3fcbc38fe6787eb80359f87f4464bf9270500c09eee275e5b40ef85d9db119b19444eaf78d0253aa6df04f183d65af4a86d116ecd56f99fcb4058769cc2b1ff5a3ee58ba16298946eaf15babeadbbc21d78a2eda3bea15cce0a90757781d08b29020075490d0e14f53c447c48d014052f24f98bbf44e9308ccd4bfd1588ac75a1eab4d8389ba20d09aefd00"}, @INET_DIAG_REQ_BYTECODE={0x7b, 0x1, "f0da8248d51677a56aa94f06cfc2d9ca3d8162b652ee3a0ad751402d9f4789dad4dd576fe04a9ff02b92923d86750fed87e29189e505ca1c598ae467a2965a3a877a6d0f42f80cefd7bac5db046e568fa12ed7495264af62acdfdb5c4a701875c1dd38282e4fc5e320e6b35364ec1e76e093c965e0b4b3"}, @INET_DIAG_REQ_BYTECODE={0xca, 0x1, "4d7d705c541af50503337a90ec5f970c03019d64d2399f6731f55a5c2ff09fa89e36d38ec348a4e78b09a3dc458dc95b66afe0501054d6432702ca80d8c7fb93ba52d7b7e3410a6e87c58a0f05452d9b12d898964c4a3fa35c91ef33564d8248f82a66d48902626a17003abd2de73cf208b8ad0853572f272df4c8bf17437f80cf56819b2114136ceba3bb0c330c38047a662f61d5ca0b2de98731543c7a88c0a906ed26e7e6772aa9d561a4659554b5053a36fcbd59aeac24dada29e1164b50036b97f79526"}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x4}, 0x801) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000880)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000840)={&(0x7f00000006c0)={0x180, 0x13, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0x37, 0x8, "56c19a53e5c1a9e94a8cbb82ad11218f0544d25cdde07bfb69afc4904f77c483892a13d4e96e6cbaa056644ea26be0bf65233b"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_USERDATA={0x5d, 0x8, "8d5020700876b60e10b54bc9f6eebc6412034c9127c317d858343b729dff9c81750d325f1d623d79164c59279c10f7052b400442309b75ca1cd5a950cff36d4c3f5cdaf47eda0d3c0d3d83ada8da9bb975cbe0c7fb22f2091d"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0x8a, 0x8, "2a34c1bb0143de38f226d83e69c3c0f2ed1f6f3030c82428cd57ef327727f30bc0b4ccc5af05541d9a8aa74cb14469e59c3ac29b4f9755b3aeb63804ff512f613dcd8d77994152ccdc503a359ed1e4d3faa7a6412059e020ddf3deca294b80a5c742fc1a2164871134a916a3bc8069c03e66bf26c116e7398dbfb4c5cab72bb9cb252cda930e"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x180}, 0x1, 0x0, 0x0, 0x24000000}, 0x8000) r5 = accept4$x25(r4, &(0x7f00000008c0), &(0x7f0000000900)=0x12, 0x0) r6 = dup(r5) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, &(0x7f00000009c0)={'gre0\x00', &(0x7f0000000940)={'tunl0\x00', r2, 0x40, 0x80, 0x9, 0x1f73, {{0x14, 0x4, 0x2, 0x3, 0x50, 0x66, 0x0, 0xff, 0x4, 0x0, @private=0xa010100, @loopback, {[@timestamp_prespec={0x44, 0x3c, 0x3f, 0x3, 0x2, [{@multicast2, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x10000}, {@loopback, 0xfe65}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@local}, {@multicast2, 0x18a9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}]}]}}}}}) bind$packet(r6, &(0x7f0000000a00)={0x11, 0x1c, r7, 0x1, 0xa, 0x6, @remote}, 0x14) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(r8, &(0x7f0000000b00)={&(0x7f0000000a40), 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000840) ioctl$SNDRV_PCM_IOCTL_DROP(r6, 0x4143, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x64, &(0x7f0000000b40)=0x101, 0x4) ioctl$TUNSETVNETLE(r6, 0x400454dc, &(0x7f0000000b80)=0x1) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r6, 0x89f4, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000bc0)={@dev={0xac, 0x14, 0x14, 0xa}, 0x1, 0x0, 0x80, 0x0, [{@private}, {@broadcast}, {@local}, {@private}, {}, {@dev}, {@loopback}, {@private}]}}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d00), r8) sendmsg$NL80211_CMD_DEL_INTERFACE(r8, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r9, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40000c1) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000e00), 0x2, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r10, &(0x7f0000002580)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002540)={&(0x7f0000000e80)={0x1688, r9, 0x10, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x2f}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CSA_IES={0x1668, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0xa, 0xba, [0x3, 0x9, 0x93e7]}, @beacon_params=[@NL80211_ATTR_IE={0xf, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x3}, @peer_mgmt={0x75, 0x6, {0x1, 0x3, @void, @val=0x30, @void}}]}, @NL80211_ATTR_IE_PROBE_RESP={0xe1, 0x7f, [@gcr_ga={0xbd, 0x6}, @random_vendor={0xdd, 0xb7, "54cc30c30a62e90a8aae28ad1a059a0677aa2cf4c98db8687b29c52cb32772e1b49ad8800b929c0384a758554bb15f670949444c1f1bfba2a6675b697580fa9f37208932e3f8d75379be237fb2c36d26c7dc0e04bc9928b0460e489a927ddd8a2f366333deb55e6149b9bc6471893762f2a858e06f11d3538d6b35ea456631080d42e9d1fb9d2934b29f3cc5bebd7b64f041c3b9ac0a82b5d4ef706fe8d75c958b276155170866ba6d587cafe44feab3c71bcb5a1d3e5e"}, @ht={0x2d, 0x1a, {0x8000, 0x3, 0x0, 0x0, {0x80000001, 0xa, 0x0, 0x3fe}, 0x1, 0x52, 0x3}}]}, @NL80211_ATTR_FTM_RESPONDER={0x60, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x5a, 0x3, "2e55a84b61be2890e56ddc4a9b4a8a31a9233f033c76f32ee113e7ed2676e7adbe7aadd8c0c13f50a2dbba5adb9cd078f9c11aabad404947abd7117690558199c5a6c587be0845fcbec29b9efdd710027d279f7c433d"}]}, @NL80211_ATTR_FTM_RESPONDER={0x10fc, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x1004, 0x3, "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"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x8f, 0x2, "4f5c8eb01c97fa5c78aa5850b9ff450551182f210024c9396325e8f6adaaef76bd10896e369bc12d200e38312a86421a916d0fbba34d55d92987b8713cc492a6ed8b693ef7284b10acd69334bb4738a57441cf94a4c02554ec964faf95b4359acd18466409ab3d693a40bf7b1b87f720e60399c494bc11adb80ca0b1a1b768102025a7d2e94c1c3db86217"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x5e, 0x3, "c209cc3d9587424c9404a153eae08ce07ff4528f9500cac14070193f5c355ad16432ad9a8c1e3a9d4c0f5b10b6473042a2a63cfce984a026c07558a771feb4a97c1c333592e79327b09f8d18f69e82059eb21f14ee716a68176a"}]}], @NL80211_ATTR_CSA_C_OFF_PRESP={0x8, 0xbb, [0x1000, 0x7]}, @beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0xa3, 0x80, [@ssid={0x0, 0x6, @random="4fea36f7dc88"}, @mesh_id={0x72, 0x6}, @random={0x7, 0x56, "43e7de373361028509299fc314e07b72ac5f57ead42995e3b726815e627896c57847f3646e2c4bd70ce6d85e33e3f9d9748b6cf714ff0575b611716cc804e8d6fd748dd8d2fad6cc16157802e93cf43fffe7bf2e8fc2"}, @random_vendor={0xdd, 0x18, "50e94cfd56d734312c019c9e4afab983480304426b2eef2d"}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x4, 0x1, @device_a, 0x7, 0x5, 0x5}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x6, 0xb}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x48, 0x7f, [@erp={0x2a, 0x1}, @prep={0x83, 0x1f, {{}, 0x81, 0xc, @device_b, 0x4000, @void, 0x9, 0x128, @device_a, 0x248}}, @mic={0x8c, 0x18, {0x244, "38bb70230b62", @long="8d5dce0f7aae62c186e82a7fde15cd82"}}, @chsw_timing={0x68, 0x4, {0x0, 0x3}}]}, @NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@peer_mgmt={0x75, 0x6, {0x1, 0x3, @void, @val=0x2d, @void}}, @fast_bss_trans={0x37, 0xba, {0x5, 0x6, "da27ed6bbc4a784f82645c9426d3a96c", "4126b673d2dd241306ed1639423b4d62dd35ac92afa44cd2e8898c8411176d0b", "b76f1c2d0b59b65cd19edc2dc9239f2bf2a41d95da2ead74a62fc22be685f639", [{0x4, 0x5, "5d096dc4fa"}, {0x4, 0x9, "6e9ce251258d81a824"}, {0x3, 0x7, "6e8a0d2a143db7"}, {0x4, 0xa, "58601549f84fe2b910fd"}, {0x2, 0x1d, "4456c1c54e67ef44ed125610311c567510d3176ee97785b73416fcd24c"}, {0x3, 0x20, "d20cecb31d4367221f6076306447b214a7b415a2f59a50dbf382a8a1c10d4543"}]}}, @mic={0x8c, 0x10, {0x624, "55ec25970ad5", @short="11ba27a657a6cf40"}}, @mesh_id={0x72, 0x6}, @rann={0x7e, 0x15, {{0x0, 0x2}, 0x9c, 0x8, @device_a, 0x7, 0x7f, 0x5}}]}, @NL80211_ATTR_IE_PROBE_RESP={0xf4, 0x7f, [@peer_mgmt={0x75, 0x4, {0x1, 0x812a, @void, @void, @void}}, @random={0x1, 0xc8, "0a90401fe16f34ab01e3f98312233598416e3457bdc71d94ea5df02df2899345b36c64158a8e77c4731783528e1d466fae5cc59970784370175db81ea1bc8d7c0ad05d571695084c3ed56a1865f9663203271af68523b35fcc2eced38f22c0faafff8580f274f9a2db8e4f2614a1b71875503da68c465ebca88a7d5017cbae2452407c7a0b97023582e440a2847eae6a9f611617776a209938e6063014626aa3931e8a9b8af2719839c587770801d0a8f6bf20e96df8c88e7172546062c8c9daa289ddc69ee60d32"}, @peer_mgmt={0x75, 0x18, {0x0, 0x0, @val=0x400, @val=0x10, @val="c793ed1be2be898bdb05c69b7a389cdf"}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x81, 0xb, 0x9}}]}, @NL80211_ATTR_BEACON_TAIL={0x9c, 0xf, [@tim={0x5, 0x96, {0xb, 0xed, 0x7, "0982dd96d6662d3df9e827a2fb82537b763bc1aa4b52c965b996374da50d94b689abc3be5267abb7450487d9c0eed1350fbc53276ebe52e2e2f7d824cf11683af3c8a476bcd77674a0c6fa6011dbf4011bd1cf38555b5ac6bcb1a7912fcc47b5b5928ece670204c5a5937265145a95972e39f16738be67da9b7b031d7920216f2a5cf1d9b1d293d80b9df19a248deeafd65b8e"}}]}], @beacon_params=[@NL80211_ATTR_BEACON_TAIL={0x80, 0xf, [@link_id={0x65, 0x12, {@from_mac=@device_b, @device_b}}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @challenge={0x10, 0x1, 0xf0}, @ht={0x2d, 0x1a, {0x6ac9f41f9f86ba11, 0x0, 0x0, 0x0, {0xec, 0x8, 0x0, 0x388, 0x0, 0x1, 0x0, 0x3}, 0x0, 0x100e, 0x7}}, @rann={0x7e, 0x15, {{0x0, 0x72}, 0x2, 0x0, @device_a, 0xa91, 0xf23, 0x9}}, @preq={0x82, 0x25, {{0x0, 0x1}, 0x63, 0x5, 0x8, @broadcast, 0x7, @void, 0x2, 0xb9b, 0x1, [{{}, @device_b, 0x6}]}}, @ssid={0x0, 0x6, @default_ap_ssid}]}], @NL80211_ATTR_CSA_C_OFF_BEACON={0x6, 0xba, [0x6f73]}]}]}, 0x1688}, 0x1, 0x0, 0x0, 0x80}, 0x40188c4) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000025c0)=0x8, 0x4) r11 = syz_open_dev$usbfs(&(0x7f0000002600), 0x101, 0x404002) ioctl$USBDEVFS_SETINTERFACE(r11, 0x80085504, &(0x7f0000002640)={0x4787, 0x10}) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f0000002740)={&(0x7f0000002680)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002700)={&(0x7f00000026c0)={0x18, 0x1401, 0x100, 0x70bd2a, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x8000) splice(r5, &(0x7f0000002780)=0x5, r4, &(0x7f00000027c0)=0x10000, 0x8, 0x2) bpf$OBJ_GET_PROG(0x7, &(0x7f0000002840)=@generic={&(0x7f0000002800)='./file0\x00'}, 0x18) 71.290503ms ago: executing program 0 (id=235): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x6, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000080)="b9020100c00f32b8e9ae00000f23c80f21f8350c0090000f23f83ef30f2c774966baf80cb823fae484ef66bafc0cb003ee66baf80cb8e6a8a888ef66bafc0c66ed64f40f20c035000000400f22c02e0fe3120f017bc1f9", 0x57}], 0x1, 0x18, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000080)=0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xfee00000) 70.877308ms ago: executing program 2 (id=236): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x88201) r3 = syz_open_dev$usbmon(&(0x7f0000000180), 0x7, 0x2000) r4 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$MON_IOCQ_URB_LEN(r3, 0x9201) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000028c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r5, 0x1, 0x2f, &(0x7f0000002a40)=0xd3a0, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./debug\x00', 0x1ff) r6 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$GIO_UNIMAP(r6, 0x4b66, &(0x7f0000000300)={0x4, &(0x7f00000002c0)=[{}, {}, {}, {}]}) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/ubifs/chk_lprops\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000000), 0x12) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="00004d990479f04bc4417d45720000bb2a5df1e2e71996f1506975e02fbe4b9f5cac2f236996e8af9adb2cb276a86b40a319522a041f2f55d240365533f40453d6ea7cb7aa9ee340acf7872c872e0cf5abb2c833690b62e1681340df1851243efe4bf80024f3e5", @ANYRES16=r8, @ANYBLOB="01002bbd7000ffdbdf250b00000008000300", @ANYRES32=r9, @ANYBLOB="180050801100010067e76021ba9359cc91607a0a8a000000"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x44054) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20010000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r8, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x4}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1c}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r10}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008040}, 0x84) 989.977µs ago: executing program 2 (id=237): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="24000000ffffff000008000004050003002f0000287226e04935dfacff00000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x1840}, 0x408c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000580)={r4, 0xffffffffffffffff, 0x33, 0x0, @val=@uprobe_multi={&(0x7f0000000300)='./file0\x00', &(0x7f0000000380)=[0x7], 0x0, 0x7, 0x1}}, 0x40) mount(&(0x7f0000000040), &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/fs/orangefs/op_timeout_secs\x00', 0x1, 0x0) write(r5, &(0x7f0000000140)='0\x00', 0x1) close(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff) mount$pvfs2(&(0x7f00000001c0), &(0x7f0000000200)='./mnt\x00', &(0x7f0000000240), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x400, 0x20000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x10}, {0x0, 0xa}, {0x1, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x101}, @TCA_CAKE_WASH={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r6, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @empty, @empty}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x20008844) 558.544µs ago: executing program 3 (id=238): syz_emit_ethernet(0x7e, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x48, 0x11, 0x0, @remote, @local, {[], {0x4620, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "88c73b21f267636d01dbe5712c1c941e1cdafbbb43f09c28", "e13808ca72381f41e5fff9620915b6f78670dfaf9a2038083179cf6b7931c9b4"}}}}}}}, 0x0) 0s ago: executing program 3 (id=239): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xb4, 0x30, 0xffff, 0x0, 0x0, {}, [{0xa0, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x2}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0xb4}}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = dup(r1) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000100)={{{@in=@multicast1, @in=@remote}}, {{@in=@multicast1}, 0x0, @in6}}, &(0x7f0000000200)=0xe8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000ffff25bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0b00010062726964676500000c000280050016000100d73c2385ce412b512e0000"], 0x3c}, 0x1, 0x0, 0x0, 0x24004844}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000001800dd8d000000008000000002001000fe0400010000002008001e0002000000bace1b4a993806f6b5e70c09d0dc6f3340ab2b068d2cdeb13c0728b5fd7591dff66fcff79be4c3ed817e127b9cd2e8edaa2fb07931dab00557d229bab5f84660fd84e012531bb52b75c6f9c81db1df705c5810bde094441ee38335cb51d146b6d8bb6fbe5b3fa2efacd479be4ce78860b51e3da11b786e6328d372c14b6f4d132b88df2e44cf9d8a0b1cd196d74cb86ce3009fdc3bf882450dccf979837b1ac1aadf7657e4a9599b740f8b369e58dd8afb38b286978b83"], 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000001c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000300), 0x3, r8}) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f0000000580)={0x600, 0x1, &(0x7f0000000180)=[r8], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r10, r9, r10], &(0x7f00000003c0), 0x0, 0x2}) r11 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r11, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r11, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r11, 0xc02064b6, &(0x7f0000000280)={r7, r8, 0x0, 0x0, 0x0, 0xffffffffffffff3c, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r11, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0], &(0x7f0000000300), 0x1, r12}) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) pipe(&(0x7f0000000080)) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:51977' (ED25519) to the list of known hosts. [ 42.073269][ T43] kauditd_printk_skb: 20 callbacks suppressed [ 42.073283][ T43] audit: type=1400 audit(1791205984.463:141): avc: denied { mounton } for pid=5719 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 42.074493][ T43] audit: type=1400 audit(1791205984.463:142): avc: denied { mount } for pid=5719 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.076350][ T5719] cgroup: Unknown subsys name 'net' [ 42.079117][ T43] audit: type=1400 audit(1791205984.473:143): avc: denied { unmount } for pid=5719 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.199496][ T5719] cgroup: Unknown subsys name 'cpuset' [ 42.205196][ T5719] cgroup: Unknown subsys name 'rlimit' [ 42.383158][ T43] audit: type=1400 audit(1791205984.773:144): avc: denied { setattr } for pid=5719 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.385923][ T43] audit: type=1400 audit(1791205984.773:145): avc: denied { create } for pid=5719 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.385967][ T43] audit: type=1400 audit(1791205984.773:146): avc: denied { write } for pid=5719 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.386001][ T43] audit: type=1400 audit(1791205984.773:147): avc: denied { read } for pid=5719 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.397985][ T43] audit: type=1400 audit(1791205984.793:148): avc: denied { mounton } for pid=5719 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 42.398468][ T43] audit: type=1400 audit(1791205984.793:149): avc: denied { mount } for pid=5719 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 42.425156][ T43] audit: type=1400 audit(1791205984.813:150): avc: denied { read } for pid=5442 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 42.465226][ T5724] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 43.467849][ T5719] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 47.360025][ T43] kauditd_printk_skb: 7 callbacks suppressed [ 47.360043][ T43] audit: type=1400 audit(1791205989.753:158): avc: denied { execmem } for pid=5726 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 47.647201][ T43] audit: type=1400 audit(1791205990.033:159): avc: denied { create } for pid=5730 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.647255][ T43] audit: type=1400 audit(1791205990.033:160): avc: denied { read write } for pid=5731 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.647293][ T43] audit: type=1400 audit(1791205990.033:161): avc: denied { read write } for pid=5730 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.647333][ T43] audit: type=1400 audit(1791205990.033:162): avc: denied { open } for pid=5731 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.661001][ T43] audit: type=1400 audit(1791205990.053:163): avc: denied { ioctl } for pid=5731 comm="syz-executor" path="socket:[6786]" dev="sockfs" ino=6786 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.699379][ T5743] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 47.700555][ T5743] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 47.701683][ T5746] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 47.703171][ T5744] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 47.707753][ T5744] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 47.708010][ T5743] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 47.709439][ T5744] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 47.709526][ T5744] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 47.709649][ T5746] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 47.710540][ T5746] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 47.711040][ T5743] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 47.711928][ T5748] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 47.711980][ T5744] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 47.714023][ T5744] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 47.715457][ T5748] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 47.715699][ T5746] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 47.716437][ T5746] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 47.716554][ T5748] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 47.720887][ T43] audit: type=1400 audit(1791205990.113:164): avc: denied { read } for pid=5730 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.722454][ T43] audit: type=1400 audit(1791205990.113:165): avc: denied { open } for pid=5730 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.723232][ T66] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 47.723446][ T43] audit: type=1400 audit(1791205990.113:166): avc: denied { mounton } for pid=5730 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 47.728964][ T43] audit: type=1400 audit(1791205990.123:167): avc: denied { module_request } for pid=5730 comm="syz-executor" kmod="netdev-nr3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 47.752048][ T5740] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 48.395093][ T5731] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.395180][ T5731] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.395509][ T5731] bridge_slave_0: entered allmulticast mode [ 48.397745][ T5731] bridge_slave_0: entered promiscuous mode [ 48.421800][ T5731] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.421924][ T5731] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.422203][ T5731] bridge_slave_1: entered allmulticast mode [ 48.424371][ T5731] bridge_slave_1: entered promiscuous mode [ 48.476111][ T5731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.509585][ T5731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.604948][ T5731] team0: Port device team_slave_0 added [ 48.648933][ T5731] team0: Port device team_slave_1 added [ 48.649197][ T5730] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.649330][ T5730] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.649434][ T5730] bridge_slave_0: entered allmulticast mode [ 48.650850][ T5730] bridge_slave_0: entered promiscuous mode [ 48.675009][ T5737] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.675083][ T5737] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.676397][ T5737] bridge_slave_0: entered allmulticast mode [ 48.677736][ T5737] bridge_slave_0: entered promiscuous mode [ 48.690632][ T5730] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.690711][ T5730] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.690807][ T5730] bridge_slave_1: entered allmulticast mode [ 48.692166][ T5730] bridge_slave_1: entered promiscuous mode [ 48.708213][ T5737] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.708458][ T5737] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.708562][ T5737] bridge_slave_1: entered allmulticast mode [ 48.710142][ T5737] bridge_slave_1: entered promiscuous mode [ 48.724170][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.724185][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.724208][ T5731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.770843][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.770860][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.770879][ T5731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.779033][ T5730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.780170][ T5737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.800967][ T5737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.803020][ T5730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.812943][ T5732] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.812986][ T5732] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.813060][ T5732] bridge_slave_0: entered allmulticast mode [ 48.813822][ T5732] bridge_slave_0: entered promiscuous mode [ 48.847770][ T5730] team0: Port device team_slave_0 added [ 48.859206][ T5732] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.859284][ T5732] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.859361][ T5732] bridge_slave_1: entered allmulticast mode [ 48.860343][ T5732] bridge_slave_1: entered promiscuous mode [ 48.863809][ T5737] team0: Port device team_slave_0 added [ 48.876622][ T5730] team0: Port device team_slave_1 added [ 48.896462][ T5737] team0: Port device team_slave_1 added [ 48.903885][ T5731] hsr_slave_0: entered promiscuous mode [ 48.904835][ T5731] hsr_slave_1: entered promiscuous mode [ 48.917783][ T5732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.945670][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.945687][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.945709][ T5737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.947252][ T5732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.947932][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.947944][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.947965][ T5737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.955371][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.955380][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.955393][ T5730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.981557][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.981567][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.981580][ T5730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.032258][ T5732] team0: Port device team_slave_0 added [ 49.043840][ T5737] hsr_slave_0: entered promiscuous mode [ 49.044596][ T5737] hsr_slave_1: entered promiscuous mode [ 49.046479][ T5737] debugfs: 'hsr0' already exists in 'hsr' [ 49.046562][ T5737] Cannot create hsr debugfs directory [ 49.048745][ T5732] team0: Port device team_slave_1 added [ 49.117613][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.117628][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.117647][ T5732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.124053][ T5730] hsr_slave_0: entered promiscuous mode [ 49.124855][ T5730] hsr_slave_1: entered promiscuous mode [ 49.125386][ T5730] debugfs: 'hsr0' already exists in 'hsr' [ 49.125403][ T5730] Cannot create hsr debugfs directory [ 49.125846][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.125855][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.125868][ T5732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.294578][ T5732] hsr_slave_0: entered promiscuous mode [ 49.295001][ T5732] hsr_slave_1: entered promiscuous mode [ 49.295293][ T5732] debugfs: 'hsr0' already exists in 'hsr' [ 49.295304][ T5732] Cannot create hsr debugfs directory [ 49.420392][ T5731] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 49.426232][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.431669][ T5731] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.435380][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.445393][ T5731] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 49.449071][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.463496][ T5731] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 49.468412][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.548949][ T5737] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 49.552258][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.553153][ T5737] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 49.557979][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.559363][ T5737] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 49.562682][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.565336][ T5737] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 49.569088][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.636287][ T5730] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 49.639561][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.646347][ T5730] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.649923][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.650632][ T5730] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 49.656168][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.657681][ T5730] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.662263][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.740217][ T5732] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.743461][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.749763][ T5732] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.754983][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.755661][ T5732] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.761509][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.768665][ T5740] Bluetooth: hci2: command tx timeout [ 49.768883][ T5090] Bluetooth: hci0: command tx timeout [ 49.769148][ T5740] Bluetooth: hci1: command tx timeout [ 49.769250][ T5740] Bluetooth: hci3: command tx timeout [ 49.772054][ T5732] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.774472][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.806625][ T5731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.827932][ T5737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.837502][ T5731] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.853421][ T5737] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.862512][ T226] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.862634][ T226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.881734][ T226] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.881820][ T226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.884348][ T226] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.884673][ T226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.902851][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.902900][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.927538][ T5730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.973141][ T5730] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.987211][ T226] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.987300][ T226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.993465][ T5732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.011336][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.011408][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.032805][ T5732] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.048735][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.048803][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.062808][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.062852][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.215358][ T5731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.256649][ T5731] veth0_vlan: entered promiscuous mode [ 50.278884][ T5731] veth1_vlan: entered promiscuous mode [ 50.303679][ T5731] veth0_macvtap: entered promiscuous mode [ 50.308620][ T5731] veth1_macvtap: entered promiscuous mode [ 50.319930][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.321759][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.361136][ T5737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.377738][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.377978][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.377998][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.378015][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.413363][ T5730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.433933][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.433946][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.454100][ T5732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.473711][ T5737] veth0_vlan: entered promiscuous mode [ 50.483801][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.483817][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.488715][ T5737] veth1_vlan: entered promiscuous mode [ 50.498709][ T5730] veth0_vlan: entered promiscuous mode [ 50.510714][ T5730] veth1_vlan: entered promiscuous mode [ 50.544549][ T5732] veth0_vlan: entered promiscuous mode [ 50.545896][ T5731] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 50.557750][ T5737] veth0_macvtap: entered promiscuous mode [ 50.560931][ T5732] veth1_vlan: entered promiscuous mode [ 50.563677][ T5730] veth0_macvtap: entered promiscuous mode [ 50.569591][ T5737] veth1_macvtap: entered promiscuous mode [ 50.570481][ T5730] veth1_macvtap: entered promiscuous mode [ 50.587979][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.597987][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.599818][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.609242][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.624585][ T5732] veth0_macvtap: entered promiscuous mode [ 50.633261][ T5732] veth1_macvtap: entered promiscuous mode [ 50.647209][ T5832] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.647608][ T5832] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.647987][ T5832] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.648374][ T5832] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.648441][ T5832] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.648683][ T5832] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.648868][ T5832] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.649160][ T5832] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.668216][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.683859][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.699283][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.699296][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.738479][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.738496][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.745879][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.745898][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.781702][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.781719][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.806201][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.806215][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.809957][ T5811] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.810284][ T5811] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.810546][ T5811] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.811047][ T5811] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.836688][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.836707][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.948610][ T5886] FAULT_INJECTION: forcing a failure. [ 50.948610][ T5886] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 50.948631][ T5886] CPU: 0 UID: 0 PID: 5886 Comm: syz.1.5 Not tainted syzkaller #0 PREEMPT(full) [ 50.948644][ T5886] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 50.948651][ T5886] Call Trace: [ 50.948656][ T5886] [ 50.948660][ T5886] dump_stack_lvl+0x100/0x190 [ 50.948680][ T5886] should_fail_ex.cold+0x5/0xa [ 50.948713][ T5886] ? prepare_alloc_pages+0x16d/0x5b0 [ 50.948733][ T5886] should_fail_alloc_page+0xeb/0x140 [ 50.948750][ T5886] prepare_alloc_pages+0x1f0/0x5b0 [ 50.948765][ T5886] ? is_bpf_text_address+0x94/0x1a0 [ 50.948786][ T5886] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 50.948800][ T5886] ? do_raw_spin_lock+0x128/0x260 [ 50.948817][ T5886] ? find_held_lock+0x2b/0x80 [ 50.948833][ T5886] ? stack_depot_save_flags+0x49a/0x9f0 [ 50.948851][ T5886] ? rcu_is_watching+0x13/0xc0 [ 50.948867][ T5886] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 50.948878][ T5886] ? lockdep_hardirqs_on+0x7d/0x110 [ 50.948890][ T5886] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 50.948901][ T5886] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 50.948916][ T5886] ? kasan_save_stack+0x3f/0x50 [ 50.948930][ T5886] ? kasan_save_stack+0x30/0x50 [ 50.948948][ T5886] ? kasan_save_track+0x14/0x30 [ 50.948960][ T5886] ? __kasan_slab_alloc+0x89/0x90 [ 50.948974][ T5886] ? kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 50.948988][ T5886] ? alloc_vmap_area+0x1814/0x2bb0 [ 50.949001][ T5886] ? __get_vm_area_node+0x1ed/0x350 [ 50.949015][ T5886] ? get_vm_area_caller+0x71/0xa0 [ 50.949029][ T5886] ? vmap+0x132/0x2e0 [ 50.949042][ T5886] ? io_create_region+0x5ae/0xdc0 [ 50.949052][ T5886] ? io_uring_setup.cold+0x10f9/0x1cde [ 50.949063][ T5886] ? __x64_sys_io_uring_setup+0xc2/0x170 [ 50.949078][ T5886] ? do_syscall_64+0x123/0x790 [ 50.949089][ T5886] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.949107][ T5886] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 50.949121][ T5886] ? policy_nodemask+0xed/0x4f0 [ 50.949139][ T5886] alloc_pages_mpol+0x201/0x550 [ 50.949156][ T5886] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 50.949176][ T5886] alloc_pages_noprof+0x1a/0x160 [ 50.949187][ T5886] get_free_pages_noprof+0x10/0xb0 [ 50.949201][ T5886] __kasan_populate_vmalloc+0xa0/0x210 [ 50.949217][ T5886] alloc_vmap_area+0x95d/0x2bb0 [ 50.949235][ T5886] ? kasan_save_track+0x14/0x30 [ 50.949249][ T5886] ? __kasan_kmalloc+0xaa/0xb0 [ 50.949262][ T5886] ? __pfx_alloc_vmap_area+0x10/0x10 [ 50.949277][ T5886] ? __get_vm_area_node+0x124/0x350 [ 50.949293][ T5886] __get_vm_area_node+0x1ed/0x350 [ 50.949309][ T5886] ? io_create_region+0x5ae/0xdc0 [ 50.949320][ T5886] get_vm_area_caller+0x71/0xa0 [ 50.949334][ T5886] ? io_create_region+0x5ae/0xdc0 [ 50.949345][ T5886] vmap+0x132/0x2e0 [ 50.949359][ T5886] ? __pfx_vmap+0x10/0x10 [ 50.949373][ T5886] ? io_check_coalesce_buffer+0x655/0x8a0 [ 50.949387][ T5886] io_create_region+0x5ae/0xdc0 [ 50.949400][ T5886] ? __pfx_io_create_region+0x10/0x10 [ 50.949410][ T5886] ? rcu_is_watching+0x13/0xc0 [ 50.949425][ T5886] ? cap_capable+0x107/0x430 [ 50.949438][ T5886] ? bpf_lsm_capable+0x9/0x10 [ 50.949449][ T5886] ? security_capable+0x80/0x260 [ 50.949462][ T5886] io_uring_setup.cold+0x10f9/0x1cde [ 50.949474][ T5886] ? __pfx_slow_avc_audit+0x10/0x10 [ 50.949492][ T5886] ? __pfx_io_uring_setup+0x10/0x10 [ 50.949506][ T5886] ? find_held_lock+0x2b/0x80 [ 50.949531][ T5886] ? xfd_validate_state+0x129/0x190 [ 50.949547][ T5886] __x64_sys_io_uring_setup+0xc2/0x170 [ 50.949563][ T5886] do_syscall_64+0x123/0x790 [ 50.949576][ T5886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.949587][ T5886] RIP: 0033:0x7f6ead99e199 [ 50.949597][ T5886] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.949607][ T5886] RSP: 002b:00007f6eae8cf028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 50.949619][ T5886] RAX: ffffffffffffffda RBX: 00007f6eadc25fa0 RCX: 00007f6ead99e199 [ 50.949626][ T5886] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000899 [ 50.949632][ T5886] RBP: 00007f6eada350b8 R08: 0000000000000000 R09: 0000000000000000 [ 50.949639][ T5886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 50.949645][ T5886] R13: 00007f6eadc26038 R14: 00007f6eadc25fa0 R15: 00007fff9d6de218 [ 50.949659][ T5886] [ 50.957116][ T5891] evm: overlay not supported [ 51.024417][ T5900] team0: No ports can be present during mode change [ 51.034659][ T5898] Set syz1 is full, maxelem 2076 reached [ 51.144777][ T5909] IPVS: set_ctl: invalid protocol: 94 172.30.0.1:20000 [ 51.179531][ T5907] loop3: detected capacity change from 0 to 7 [ 51.183060][ T5907] Dev loop3: unable to read RDB block 7 [ 51.183080][ T5907] loop3: unable to read partition table [ 51.183164][ T5907] loop3: partition table beyond EOD, truncated [ 51.183179][ T5907] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 51.320022][ T5921] netlink: 'syz.3.13': attribute type 1 has an invalid length. [ 51.389912][ T5923] tipc: Started in network mode [ 51.389928][ T5923] tipc: Node identity 3ac60fde81f1, cluster identity 4711 [ 51.390033][ T5923] tipc: Enabled bearer , priority 0 [ 51.390647][ T5923] syzkaller0: entered promiscuous mode [ 51.390661][ T5923] syzkaller0: entered allmulticast mode [ 51.394483][ T5923] tipc: Resetting bearer [ 51.411227][ T5923] tipc: Resetting bearer [ 51.415977][ T5923] tipc: Disabling bearer [ 51.456325][ T5931] FAULT_INJECTION: forcing a failure. [ 51.456325][ T5931] name failslab, interval 1, probability 0, space 0, times 1 [ 51.456345][ T5931] CPU: 2 UID: 0 PID: 5931 Comm: syz.0.18 Not tainted syzkaller #0 PREEMPT(full) [ 51.456357][ T5931] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.456364][ T5931] Call Trace: [ 51.456368][ T5931] [ 51.456372][ T5931] dump_stack_lvl+0x100/0x190 [ 51.456392][ T5931] should_fail_ex.cold+0x5/0xa [ 51.456408][ T5931] should_failslab+0xc2/0x120 [ 51.456424][ T5931] __kmalloc_cache_noprof+0x91/0x6d0 [ 51.456436][ T5931] ? netlbl_mgmt_add_common+0x53/0x1890 [ 51.456451][ T5931] netlbl_mgmt_add_common+0x53/0x1890 [ 51.456467][ T5931] netlbl_mgmt_adddef+0x212/0x370 [ 51.456479][ T5931] ? __pfx_netlbl_mgmt_adddef+0x10/0x10 [ 51.456511][ T5931] genl_family_rcv_msg_doit+0x214/0x300 [ 51.456532][ T5931] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 51.456554][ T5931] ? bpf_lsm_capable+0x9/0x10 [ 51.456564][ T5931] ? security_capable+0x80/0x260 [ 51.456579][ T5931] genl_rcv_msg+0x560/0x800 [ 51.456597][ T5931] ? __pfx_genl_rcv_msg+0x10/0x10 [ 51.456613][ T5931] ? __lock_acquire+0x5c0/0x1f40 [ 51.456625][ T5931] ? __pfx_netlbl_mgmt_adddef+0x10/0x10 [ 51.456639][ T5931] ? __lock_acquire+0x5c0/0x1f40 [ 51.456654][ T5931] netlink_rcv_skb+0x159/0x420 [ 51.456668][ T5931] ? __pfx_genl_rcv_msg+0x10/0x10 [ 51.456685][ T5931] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 51.456706][ T5931] ? netlink_deliver_tap+0x1ae/0xcc0 [ 51.456722][ T5931] genl_rcv+0x28/0x40 [ 51.456736][ T5931] netlink_unicast+0x585/0x850 [ 51.456753][ T5931] ? __pfx_netlink_unicast+0x10/0x10 [ 51.456767][ T5931] ? __pfx_sock_has_perm+0x10/0x10 [ 51.456782][ T5931] netlink_sendmsg+0x8b0/0xda0 [ 51.456799][ T5931] ? __pfx_netlink_sendmsg+0x10/0x10 [ 51.456815][ T5931] ? selinux_socket_sendmsg+0x198/0x2f0 [ 51.456831][ T5931] ____sys_sendmsg+0xa4d/0xbe0 [ 51.456843][ T5931] ? __pfx_netlink_sendmsg+0x10/0x10 [ 51.456858][ T5931] ? __pfx_____sys_sendmsg+0x10/0x10 [ 51.456873][ T5931] ? lock_acquire+0x1d1/0x380 [ 51.456885][ T5931] ? get_pid_task+0x2a/0x250 [ 51.456902][ T5931] ___sys_sendmsg+0x190/0x1e0 [ 51.456915][ T5931] ? __pfx____sys_sendmsg+0x10/0x10 [ 51.456928][ T5931] ? get_pid_task+0x106/0x250 [ 51.456948][ T5931] ? find_held_lock+0x2b/0x80 [ 51.456973][ T5931] __sys_sendmsg+0x160/0x210 [ 51.456989][ T5931] ? __pfx___sys_sendmsg+0x10/0x10 [ 51.457012][ T5931] do_syscall_64+0x123/0x790 [ 51.457030][ T5931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.457042][ T5931] RIP: 0033:0x7fd3c1d9e199 [ 51.457051][ T5931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.457061][ T5931] RSP: 002b:00007fd3c2bca028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 51.457072][ T5931] RAX: ffffffffffffffda RBX: 00007fd3c2025fa0 RCX: 00007fd3c1d9e199 [ 51.457079][ T5931] RDX: 0000000020000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 51.457086][ T5931] RBP: 00007fd3c2bca090 R08: 0000000000000000 R09: 0000000000000000 [ 51.457092][ T5931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.457098][ T5931] R13: 00007fd3c2026038 R14: 00007fd3c2025fa0 R15: 00007fff013379a8 [ 51.457113][ T5931] [ 51.567459][ T5933] ima: policy update completed [ 51.579125][ T5933] faux_driver vgem: [drm] Unknown color mode 265; guessing buffer size. [ 51.847508][ T66] Bluetooth: hci0: command tx timeout [ 51.847541][ T66] Bluetooth: hci3: command tx timeout [ 51.847561][ T66] Bluetooth: hci1: command tx timeout [ 51.847579][ T66] Bluetooth: hci2: command tx timeout [ 52.442572][ T5936] IPVS: set_ctl: invalid protocol: 94 172.30.0.2:20000 [ 52.453031][ T43] kauditd_printk_skb: 76 callbacks suppressed [ 52.453049][ T43] audit: type=1400 audit(1791205994.843:244): avc: denied { create } for pid=5937 comm="syz.0.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 52.456750][ T43] audit: type=1400 audit(1791205994.843:245): avc: denied { bind } for pid=5937 comm="syz.0.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 52.458060][ T43] audit: type=1400 audit(1791205994.853:246): avc: denied { setopt } for pid=5937 comm="syz.0.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 52.458789][ T43] audit: type=1400 audit(1791205994.853:247): avc: denied { accept } for pid=5937 comm="syz.0.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 52.460305][ T43] audit: type=1400 audit(1791205994.853:248): avc: denied { write } for pid=5937 comm="syz.0.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 52.495315][ T43] audit: type=1400 audit(1791205994.893:249): avc: denied { create } for pid=5939 comm="syz.1.20" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 52.623061][ T43] audit: type=1400 audit(1791205995.013:250): avc: denied { write } for pid=5946 comm="syz.0.22" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 52.792066][ T43] audit: type=1400 audit(1791205995.183:251): avc: denied { append } for pid=5958 comm="syz.3.33" name="dlm_plock" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 52.796145][ T43] audit: type=1400 audit(1791205995.183:252): avc: denied { write } for pid=5958 comm="syz.3.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 52.892860][ T5964] netlink: 'syz.1.24': attribute type 1 has an invalid length. [ 52.988384][ T43] audit: type=1400 audit(1791205995.383:253): avc: denied { map } for pid=5965 comm="syz.1.25" path="socket:[9089]" dev="sockfs" ino=9089 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 52.989496][ T5967] Zero length message leads to an empty skb [ 53.392971][ T5971] ip_tables: iptables: counters copy to user failed while replacing table [ 53.930729][ T5090] Bluetooth: hci2: command tx timeout [ 53.930768][ T5090] Bluetooth: hci1: command tx timeout [ 53.930780][ T5090] Bluetooth: hci3: command tx timeout [ 53.930792][ T5090] Bluetooth: hci0: command tx timeout [ 53.955302][ T5984] input: syz1 as /devices/virtual/input/input5 [ 54.010723][ T5986] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 54.011414][ T5986] CIFS: Attempting to mount //127.0.0.1/test [ 54.012840][ T5986] CIFS: VFS: Error connecting to socket. Aborting operation. [ 54.012877][ T5986] CIFS: VFS: cifs_mount failed w/return code = -111 [ 54.052442][ T5988] netlink: 4 bytes leftover after parsing attributes in process `syz.2.36'. [ 54.401276][ T6001] syz.2.40 uses obsolete (PF_INET,SOCK_PACKET) [ 54.401713][ T6001] syzkaller1: entered promiscuous mode [ 54.401723][ T6001] syzkaller1: entered allmulticast mode [ 54.496219][ T6003] netlink: 20 bytes leftover after parsing attributes in process `syz.3.41'. [ 54.563089][ T6009] netlink: 8 bytes leftover after parsing attributes in process `syz.2.43'. [ 54.647450][ T852] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 54.776864][ T852] usb 6-1: device descriptor read/64, error -71 [ 55.026852][ T852] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 55.064278][ T6033] tipc: Started in network mode [ 55.064291][ T6033] tipc: Node identity 7, cluster identity 4369 [ 55.064298][ T6033] tipc: Node number set to 7 [ 55.157216][ T852] usb 6-1: device descriptor read/64, error -71 [ 55.242011][ T6039] netlink: 4 bytes leftover after parsing attributes in process `syz.2.52'. [ 55.264047][ T6039] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 55.268147][ T852] usb usb6-port1: attempt power cycle [ 55.328490][ T62] cfg80211: failed to load regulatory.db [ 55.513296][ T6048] netlink: 28 bytes leftover after parsing attributes in process `syz.2.55'. [ 55.627008][ T852] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 55.648302][ T852] usb 6-1: device descriptor read/8, error -71 [ 55.656189][ T6051] syzkaller1: entered promiscuous mode [ 55.656209][ T6051] syzkaller1: entered allmulticast mode [ 55.887073][ T852] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 55.906186][ T6066] netlink: 8 bytes leftover after parsing attributes in process `syz.2.63'. [ 55.907715][ T852] usb 6-1: device descriptor read/8, error -71 [ 56.008982][ T66] Bluetooth: hci0: command tx timeout [ 56.009010][ T66] Bluetooth: hci3: command tx timeout [ 56.009028][ T66] Bluetooth: hci1: command tx timeout [ 56.009045][ T66] Bluetooth: hci2: command tx timeout [ 56.017151][ T852] usb usb6-port1: unable to enumerate USB device [ 56.021320][ T6073] netlink: 28 bytes leftover after parsing attributes in process `syz.0.65'. [ 56.125285][ T6078] netlink: 'syz.0.67': attribute type 4 has an invalid length. [ 56.125382][ T6078] FAULT_INJECTION: forcing a failure. [ 56.125382][ T6078] name failslab, interval 1, probability 0, space 0, times 0 [ 56.125412][ T6078] CPU: 3 UID: 0 PID: 6078 Comm: syz.0.67 Not tainted syzkaller #0 PREEMPT(full) [ 56.125433][ T6078] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 56.125445][ T6078] Call Trace: [ 56.125451][ T6078] [ 56.125461][ T6078] dump_stack_lvl+0x100/0x190 [ 56.125508][ T6078] should_fail_ex.cold+0x5/0xa [ 56.125536][ T6078] should_failslab+0xc2/0x120 [ 56.125570][ T6078] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 56.125595][ T6078] ? __alloc_skb+0x140/0x710 [ 56.125634][ T6078] __alloc_skb+0x140/0x710 [ 56.125657][ T6078] ? __alloc_skb+0x5b7/0x710 [ 56.125682][ T6078] ? __pfx___alloc_skb+0x10/0x10 [ 56.125708][ T6078] ? if_nlmsg_size+0x4b/0xdc0 [ 56.125742][ T6078] rtmsg_ifinfo_build_skb+0x81/0x260 [ 56.125785][ T6078] rtnetlink_event+0x137/0x1f0 [ 56.125809][ T6078] notifier_call_chain+0x99/0x3f0 [ 56.125842][ T6078] call_netdevice_notifiers_info+0xbe/0x110 [ 56.125866][ T6078] netif_set_mtu_ext+0x48b/0x7b0 [ 56.125894][ T6078] ? __pfx_netif_set_mtu_ext+0x10/0x10 [ 56.125927][ T6078] ? tick_nohz_tick_stopped+0x6c/0xa0 [ 56.125973][ T6078] do_setlink.isra.0+0x7f9/0x3e60 [ 56.126008][ T6078] ? __lock_acquire+0x5c0/0x1f40 [ 56.126030][ T6078] ? __pfx_do_setlink.isra.0+0x10/0x10 [ 56.126062][ T6078] ? __lock_acquire+0x5c0/0x1f40 [ 56.126088][ T6078] ? lock_acquire+0x1d1/0x380 [ 56.126110][ T6078] ? avc_has_perm_noaudit+0x56/0x470 [ 56.126144][ T6078] ? lock_acquire+0x1d1/0x380 [ 56.126166][ T6078] ? rtnl_setlink+0x4dd/0xac0 [ 56.126198][ T6078] ? rcu_is_watching+0x13/0xc0 [ 56.126226][ T6078] ? trace_contention_end+0x126/0x160 [ 56.126251][ T6078] ? __mutex_lock+0x26c/0x1bd0 [ 56.126279][ T6078] ? rtnl_setlink+0x4dd/0xac0 [ 56.126312][ T6078] ? __pfx___mutex_lock+0x10/0x10 [ 56.126353][ T6078] ? rcu_is_watching+0x13/0xc0 [ 56.126380][ T6078] ? cap_capable+0x107/0x430 [ 56.126415][ T6078] ? netlink_ns_capable+0xfa/0x130 [ 56.126444][ T6078] rtnl_setlink+0x5fd/0xac0 [ 56.126477][ T6078] ? __pfx_rtnl_setlink+0x10/0x10 [ 56.126505][ T6078] ? __kasan_slab_free+0x5f/0x80 [ 56.126532][ T6078] ? __dev_queue_xmit+0x1c25/0x4a40 [ 56.126554][ T6078] ? netlink_deliver_tap+0xa4d/0xcc0 [ 56.126575][ T6078] ? netlink_unicast+0x62b/0x850 [ 56.126599][ T6078] ? netlink_sendmsg+0x8b0/0xda0 [ 56.126623][ T6078] ? sock_write_iter+0x53a/0x5b0 [ 56.126686][ T6078] ? __lock_acquire+0x5c0/0x1f40 [ 56.126719][ T6078] ? lock_acquire+0x1d1/0x380 [ 56.126741][ T6078] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 56.126759][ T6078] ? find_held_lock+0x2b/0x80 [ 56.126787][ T6078] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 56.126805][ T6078] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 56.126825][ T6078] ? __pfx_rtnl_setlink+0x10/0x10 [ 56.126854][ T6078] rtnetlink_rcv_msg+0x95e/0xe90 [ 56.126875][ T6078] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 56.126901][ T6078] ? ref_tracker_free+0x37e/0x6c0 [ 56.126933][ T6078] netlink_rcv_skb+0x159/0x420 [ 56.126959][ T6078] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 56.126979][ T6078] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 56.127013][ T6078] ? netlink_deliver_tap+0x1ae/0xcc0 [ 56.127045][ T6078] netlink_unicast+0x585/0x850 [ 56.127074][ T6078] ? __pfx_netlink_unicast+0x10/0x10 [ 56.127108][ T6078] netlink_sendmsg+0x8b0/0xda0 [ 56.127138][ T6078] ? __pfx_netlink_sendmsg+0x10/0x10 [ 56.127166][ T6078] ? selinux_socket_sendmsg+0x198/0x2f0 [ 56.127195][ T6078] sock_write_iter+0x53a/0x5b0 [ 56.127215][ T6078] ? __pfx_netlink_sendmsg+0x10/0x10 [ 56.127240][ T6078] ? __pfx_sock_write_iter+0x10/0x10 [ 56.127270][ T6078] ? __pfx___file_has_perm+0x10/0x10 [ 56.127296][ T6078] ? __lock_acquire+0x5c0/0x1f40 [ 56.127323][ T6078] do_iter_readv_writev+0x6f7/0x930 [ 56.127346][ T6078] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 56.127366][ T6078] ? selinux_file_permission+0x8f/0x6d0 [ 56.127400][ T6078] ? bpf_lsm_file_permission+0x9/0x10 [ 56.127425][ T6078] ? security_file_permission+0x76/0x210 [ 56.127453][ T6078] ? rw_verify_area+0xce/0x6d0 [ 56.127474][ T6078] vfs_writev+0x360/0xdd0 [ 56.127497][ T6078] ? __lock_acquire+0x5c0/0x1f40 [ 56.127523][ T6078] ? __pfx_vfs_writev+0x10/0x10 [ 56.127549][ T6078] ? lock_acquire+0x1d1/0x380 [ 56.127570][ T6078] ? __fget_files+0x34/0x3d0 [ 56.127606][ T6078] ? __fget_files+0x21f/0x3d0 [ 56.127638][ T6078] ? do_writev+0x28a/0x340 [ 56.127657][ T6078] do_writev+0x28a/0x340 [ 56.127678][ T6078] ? __pfx_do_writev+0x10/0x10 [ 56.127707][ T6078] do_syscall_64+0x123/0x790 [ 56.127731][ T6078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.127752][ T6078] RIP: 0033:0x7fd3c1d9e199 [ 56.127768][ T6078] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.127786][ T6078] RSP: 002b:00007fd3c2bca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 56.127808][ T6078] RAX: ffffffffffffffda RBX: 00007fd3c2025fa0 RCX: 00007fd3c1d9e199 [ 56.127819][ T6078] RDX: 0000000000000001 RSI: 00002000000003c0 RDI: 0000000000000007 [ 56.127832][ T6078] RBP: 00007fd3c2bca090 R08: 0000000000000000 R09: 0000000000000000 [ 56.127843][ T6078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.127855][ T6078] R13: 00007fd3c2026038 R14: 00007fd3c2025fa0 R15: 00007fff013379a8 [ 56.127881][ T6078] [ 57.346983][ T1629] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 57.441351][ T6122] netlink: 28 bytes leftover after parsing attributes in process `syz.3.86'. [ 57.498274][ T1629] usb 7-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 57.500686][ T1629] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 57.500727][ T1629] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 57.502650][ T1629] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.502671][ T1629] usb 7-1: Product: syz [ 57.502685][ T1629] usb 7-1: Manufacturer: syz [ 57.502700][ T1629] usb 7-1: SerialNumber: syz [ 57.520631][ T1629] ums-sddr09 7-1:1.0: USB Mass Storage device detected [ 57.528672][ T1629] ums-sddr09 7-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 57.528672][ T1629] Please send a copy of this message to and [ 57.600678][ T43] kauditd_printk_skb: 50 callbacks suppressed [ 57.600699][ T43] audit: type=1400 audit(1791205999.993:304): avc: denied { mount } for pid=6134 comm="syz.1.91" name="/" dev="hugetlbfs" ino=10804 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 57.606689][ T43] audit: type=1400 audit(1791205999.993:305): avc: denied { mounton } for pid=6134 comm="syz.1.91" path="/mnt" dev="hugetlbfs" ino=10805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 57.617178][ T6135] eCryptfs: maximum fs stacking depth exceeded [ 57.633794][ T6135] Reading sb failed; rc = [-22] [ 57.653517][ T6137] FAULT_INJECTION: forcing a failure. [ 57.653517][ T6137] name failslab, interval 1, probability 0, space 0, times 0 [ 57.653549][ T6137] CPU: 2 UID: 0 PID: 6137 Comm: syz.3.90 Not tainted syzkaller #0 PREEMPT(full) [ 57.653571][ T6137] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.653583][ T6137] Call Trace: [ 57.653591][ T6137] [ 57.653599][ T6137] dump_stack_lvl+0x100/0x190 [ 57.653632][ T6137] should_fail_ex.cold+0x5/0xa [ 57.653660][ T6137] should_failslab+0xc2/0x120 [ 57.653690][ T6137] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 57.653715][ T6137] ? __kasan_kmalloc+0xaa/0xb0 [ 57.653740][ T6137] ? __request_module+0x2d5/0x6a0 [ 57.653770][ T6137] kstrdup+0x51/0xe0 [ 57.653793][ T6137] __request_module+0x2d5/0x6a0 [ 57.653820][ T6137] ? __pfx___request_module+0x10/0x10 [ 57.653845][ T6137] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 57.653879][ T6137] ? rcu_is_watching+0x13/0xc0 [ 57.653907][ T6137] ? cap_capable+0x107/0x430 [ 57.653936][ T6137] dev_load+0x204/0x240 [ 57.653968][ T6137] dev_ioctl+0x6f8/0x10e0 [ 57.653998][ T6137] sock_ioctl+0x494/0x6b0 [ 57.654022][ T6137] ? __pfx_sock_ioctl+0x10/0x10 [ 57.654051][ T6137] ? selinux_file_ioctl+0x13b/0x290 [ 57.654075][ T6137] ? selinux_file_ioctl+0xb6/0x290 [ 57.654101][ T6137] ? __pfx_sock_ioctl+0x10/0x10 [ 57.654125][ T6137] __x64_sys_ioctl+0x18e/0x210 [ 57.654150][ T6137] do_syscall_64+0x123/0x790 [ 57.654176][ T6137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.654196][ T6137] RIP: 0033:0x7f1602d9e199 [ 57.654213][ T6137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.654230][ T6137] RSP: 002b:00007f1603ccf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 57.654251][ T6137] RAX: ffffffffffffffda RBX: 00007f1603026090 RCX: 00007f1602d9e199 [ 57.654264][ T6137] RDX: 0000200000000880 RSI: 00000000000089f2 RDI: 0000000000000003 [ 57.654276][ T6137] RBP: 00007f1603ccf090 R08: 0000000000000000 R09: 0000000000000000 [ 57.654288][ T6137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.654299][ T6137] R13: 00007f1603026128 R14: 00007f1603026090 R15: 00007ffdd008eeb8 [ 57.654345][ T6137] [ 57.754438][ T43] audit: type=1400 audit(1791206000.143:306): avc: denied { read write } for pid=6144 comm="syz.1.94" name="nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 57.754808][ T43] audit: type=1400 audit(1791206000.143:307): avc: denied { open } for pid=6144 comm="syz.1.94" path="/dev/nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 57.755408][ T43] audit: type=1400 audit(1791206000.143:308): avc: denied { map } for pid=6144 comm="syz.1.94" path="/dev/nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 57.755578][ T43] audit: type=1400 audit(1791206000.143:309): avc: denied { execute } for pid=6144 comm="syz.1.94" path="/dev/nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 57.762311][ T43] audit: type=1400 audit(1791206000.153:310): avc: denied { map_read map_write } for pid=6144 comm="syz.1.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 57.820991][ T43] audit: type=1400 audit(1791206000.213:311): avc: denied { watch } for pid=6144 comm="syz.1.94" path="/14" dev="tmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 57.821047][ T43] audit: type=1400 audit(1791206000.213:312): avc: denied { watch_sb watch_reads } for pid=6144 comm="syz.1.94" path="/14" dev="tmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 57.824871][ T43] audit: type=1400 audit(1791206000.213:313): avc: denied { read write } for pid=6144 comm="syz.1.94" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 57.826317][ T852] kernel read not supported for file /newroot/14 (pid: 852 comm: kworker/3:2) [ 57.999645][ T6152] netlink: 28 bytes leftover after parsing attributes in process `syz.3.97'. [ 58.272828][ T6163] kAFS: unparsable volume name [ 58.367112][ T6169] netlink: 16 bytes leftover after parsing attributes in process `syz.3.104'. [ 58.367547][ T6169] Bluetooth: MGMT ver 1.23 [ 58.376287][ T6169] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -13 [ 58.376324][ T6169] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -13 [ 58.377804][ T6169] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 58.381695][ T6171] syzkaller0: entered promiscuous mode [ 58.381706][ T6171] syzkaller0: entered allmulticast mode [ 58.385757][ T6171] tipc: Started in network mode [ 58.385771][ T6171] tipc: Node identity 4635de361b36, cluster identity 4711 [ 58.385888][ T6171] tipc: Enabled bearer , priority 0 [ 58.389955][ T6171] tipc: Resetting bearer [ 58.452533][ T6172] tipc: Resetting bearer [ 58.460773][ T6172] tipc: Disabling bearer [ 58.714479][ T6182] capability: warning: `syz.1.107' uses 32-bit capabilities (legacy support in use) [ 58.716139][ T6182] program syz.1.107 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 58.787428][ T6185] fuse: Bad value for 'fd' [ 59.243918][ T6195] nvme_fabrics: testsubsysb@(y c*=é4c})jiQ`ǮT5e3WvՀSH/{dUo' c. |S01jt njۉv[Al mvBnUBsѫ2hPaJ|2KhH@|q@M3)/(/I`uWz= needs to be < 223 bytes [ 59.400244][ T6203] __nla_validate_parse: 2 callbacks suppressed [ 59.400263][ T6203] netlink: 16 bytes leftover after parsing attributes in process `syz.3.112'. [ 59.483768][ T6207] netlink: 12 bytes leftover after parsing attributes in process `syz.3.114'. [ 59.483792][ T6207] block nbd0: Unsupported socket: should be TCP or UNIX. [ 59.486506][ T6207] FAULT_INJECTION: forcing a failure. [ 59.486506][ T6207] name failslab, interval 1, probability 0, space 0, times 0 [ 59.486533][ T6207] CPU: 0 UID: 0 PID: 6207 Comm: syz.3.114 Not tainted syzkaller #0 PREEMPT(full) [ 59.486552][ T6207] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 59.486564][ T6207] Call Trace: [ 59.486571][ T6207] [ 59.486578][ T6207] dump_stack_lvl+0x100/0x190 [ 59.486609][ T6207] should_fail_ex.cold+0x5/0xa [ 59.486634][ T6207] should_failslab+0xc2/0x120 [ 59.486659][ T6207] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 59.486682][ T6207] ? __alloc_skb+0x140/0x710 [ 59.486710][ T6207] __alloc_skb+0x140/0x710 [ 59.486733][ T6207] ? __alloc_skb+0x5b7/0x710 [ 59.486756][ T6207] ? __pfx___alloc_skb+0x10/0x10 [ 59.486796][ T6207] ? genl_rcv_msg+0x4be/0x800 [ 59.486832][ T6207] netlink_ack+0x117/0xb80 [ 59.486857][ T6207] ? __lock_acquire+0x5c0/0x1f40 [ 59.486884][ T6207] netlink_rcv_skb+0x333/0x420 [ 59.486907][ T6207] ? __pfx_genl_rcv_msg+0x10/0x10 [ 59.486936][ T6207] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 59.486977][ T6207] ? netlink_deliver_tap+0x1ae/0xcc0 [ 59.487006][ T6207] genl_rcv+0x28/0x40 [ 59.487029][ T6207] netlink_unicast+0x585/0x850 [ 59.487059][ T6207] ? __pfx_netlink_unicast+0x10/0x10 [ 59.487083][ T6207] ? __pfx_sock_has_perm+0x10/0x10 [ 59.487110][ T6207] netlink_sendmsg+0x8b0/0xda0 [ 59.487138][ T6207] ? __pfx_netlink_sendmsg+0x10/0x10 [ 59.487166][ T6207] ? selinux_socket_sendmsg+0x198/0x2f0 [ 59.487193][ T6207] ____sys_sendmsg+0xa4d/0xbe0 [ 59.487211][ T6207] ? __pfx_netlink_sendmsg+0x10/0x10 [ 59.487238][ T6207] ? __pfx_____sys_sendmsg+0x10/0x10 [ 59.487264][ T6207] ? lock_acquire+0x1d1/0x380 [ 59.487285][ T6207] ? get_pid_task+0x2a/0x250 [ 59.487313][ T6207] ___sys_sendmsg+0x190/0x1e0 [ 59.487336][ T6207] ? __pfx____sys_sendmsg+0x10/0x10 [ 59.487356][ T6207] ? get_pid_task+0x106/0x250 [ 59.487390][ T6207] ? find_held_lock+0x2b/0x80 [ 59.487433][ T6207] __sys_sendmsg+0x160/0x210 [ 59.487459][ T6207] ? __pfx___sys_sendmsg+0x10/0x10 [ 59.487499][ T6207] do_syscall_64+0x123/0x790 [ 59.487522][ T6207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.487541][ T6207] RIP: 0033:0x7f1602d9e199 [ 59.487556][ T6207] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.487573][ T6207] RSP: 002b:00007f1603cf0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 59.487592][ T6207] RAX: ffffffffffffffda RBX: 00007f1603025fa0 RCX: 00007f1602d9e199 [ 59.487603][ T6207] RDX: 0000000000004000 RSI: 00002000000027c0 RDI: 0000000000000004 [ 59.487614][ T6207] RBP: 00007f1603cf0090 R08: 0000000000000000 R09: 0000000000000000 [ 59.487625][ T6207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.487635][ T6207] R13: 00007f1603026038 R14: 00007f1603025fa0 R15: 00007ffdd008eeb8 [ 59.487660][ T6207] [ 59.651025][ T6215] FAULT_INJECTION: forcing a failure. [ 59.651025][ T6215] name failslab, interval 1, probability 0, space 0, times 0 [ 59.651055][ T6215] CPU: 3 UID: 0 PID: 6215 Comm: syz.1.118 Not tainted syzkaller #0 PREEMPT(full) [ 59.651076][ T6215] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 59.651087][ T6215] Call Trace: [ 59.651093][ T6215] [ 59.651101][ T6215] dump_stack_lvl+0x100/0x190 [ 59.651133][ T6215] should_fail_ex.cold+0x5/0xa [ 59.651159][ T6215] should_failslab+0xc2/0x120 [ 59.651185][ T6215] __kmalloc_cache_noprof+0x91/0x6d0 [ 59.651205][ T6215] ? bpf_prog_alloc_no_stats+0x161/0x690 [ 59.651236][ T6215] bpf_prog_alloc_no_stats+0x161/0x690 [ 59.651265][ T6215] bpf_prog_alloc+0x3b/0x200 [ 59.651287][ T6215] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 59.651312][ T6215] bpf_prog_load+0x49e/0x2a70 [ 59.651345][ T6215] ? __pfx_bpf_prog_load+0x10/0x10 [ 59.651392][ T6215] __sys_bpf+0x1f46/0x4a30 [ 59.651419][ T6215] ? __pfx___sys_bpf+0x10/0x10 [ 59.651439][ T6215] ? find_held_lock+0x2b/0x80 [ 59.651465][ T6215] ? get_pid_task+0xfc/0x250 [ 59.651496][ T6215] ? get_pid_task+0xfc/0x250 [ 59.651528][ T6215] ? find_held_lock+0x2b/0x80 [ 59.651561][ T6215] ? rcu_read_lock_any_held+0x6a/0x90 [ 59.651589][ T6215] ? find_held_lock+0x2b/0x80 [ 59.651615][ T6215] ? ksys_write+0x190/0x250 [ 59.651635][ T6215] ? ksys_write+0x190/0x250 [ 59.651656][ T6215] ? lock_acquire+0x1d1/0x380 [ 59.651694][ T6215] ? fput+0x7c/0x100 [ 59.651720][ T6215] ? ksys_write+0x1ac/0x250 [ 59.651744][ T6215] ? __x64_sys_bpf+0xce/0x140 [ 59.651763][ T6215] __x64_sys_bpf+0xce/0x140 [ 59.651784][ T6215] ? do_syscall_64+0xae/0x790 [ 59.651806][ T6215] do_syscall_64+0x123/0x790 [ 59.651828][ T6215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.651847][ T6215] RIP: 0033:0x7f6ead99e199 [ 59.651863][ T6215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.651879][ T6215] RSP: 002b:00007f6eae8cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 59.651903][ T6215] RAX: ffffffffffffffda RBX: 00007f6eadc25fa0 RCX: 00007f6ead99e199 [ 59.651915][ T6215] RDX: 0000000000000080 RSI: 0000200000000300 RDI: 0000000000000005 [ 59.651926][ T6215] RBP: 00007f6eae8cf090 R08: 0000000000000000 R09: 0000000000000000 [ 59.651937][ T6215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.651948][ T6215] R13: 00007f6eadc26038 R14: 00007f6eadc25fa0 R15: 00007fff9d6de218 [ 59.651974][ T6215] [ 59.680938][ T6217] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 59.680954][ T6217] IPv6: NLM_F_CREATE should be set when creating new route [ 59.681872][ T6217] ======================================================= [ 59.681872][ T6217] WARNING: The mand mount option has been deprecated and [ 59.681872][ T6217] and is ignored by this kernel. Remove the mand [ 59.681872][ T6217] option from the mount to silence this warning. [ 59.681872][ T6217] ======================================================= [ 59.694806][ T6219] netlink: 'syz.1.120': attribute type 1 has an invalid length. [ 59.735207][ T6221] netlink: 8 bytes leftover after parsing attributes in process `syz.3.121'. [ 59.926685][ T852] usb 7-1: USB disconnect, device number 2 [ 59.943364][ T6236] FAULT_INJECTION: forcing a failure. [ 59.943364][ T6236] name failslab, interval 1, probability 0, space 0, times 0 [ 59.943385][ T6236] CPU: 0 UID: 0 PID: 6236 Comm: syz.1.128 Not tainted syzkaller #0 PREEMPT(full) [ 59.943397][ T6236] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 59.943403][ T6236] Call Trace: [ 59.943407][ T6236] [ 59.943414][ T6236] dump_stack_lvl+0x100/0x190 [ 59.943434][ T6236] should_fail_ex.cold+0x5/0xa [ 59.943451][ T6236] should_failslab+0xc2/0x120 [ 59.943467][ T6236] __kmalloc_cache_noprof+0x91/0x6d0 [ 59.943479][ T6236] ? mall_change+0x262/0x1030 [ 59.943495][ T6236] mall_change+0x262/0x1030 [ 59.943510][ T6236] ? __pfx_mall_change+0x10/0x10 [ 59.943529][ T6236] ? __pfx_mall_change+0x10/0x10 [ 59.943541][ T6236] tc_new_tfilter+0x9e2/0x24e0 [ 59.943562][ T6236] ? avc_has_perm_noaudit+0x11e/0x470 [ 59.943582][ T6236] ? __pfx_tc_new_tfilter+0x10/0x10 [ 59.943600][ T6236] ? __lock_acquire+0x5c0/0x1f40 [ 59.943619][ T6236] ? lock_acquire+0x1d1/0x380 [ 59.943631][ T6236] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 59.943642][ T6236] ? find_held_lock+0x2b/0x80 [ 59.943658][ T6236] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 59.943669][ T6236] ? __pfx_tc_new_tfilter+0x10/0x10 [ 59.943684][ T6236] rtnetlink_rcv_msg+0x95e/0xe90 [ 59.943695][ T6236] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 59.943709][ T6236] ? ref_tracker_free+0x37e/0x6c0 [ 59.943728][ T6236] netlink_rcv_skb+0x159/0x420 [ 59.943743][ T6236] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 59.943754][ T6236] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 59.943774][ T6236] ? netlink_deliver_tap+0x1ae/0xcc0 [ 59.943797][ T6236] netlink_unicast+0x585/0x850 [ 59.943822][ T6236] ? __pfx_netlink_unicast+0x10/0x10 [ 59.943846][ T6236] ? __pfx_sock_has_perm+0x10/0x10 [ 59.943873][ T6236] netlink_sendmsg+0x8b0/0xda0 [ 59.943894][ T6236] ? __pfx_netlink_sendmsg+0x10/0x10 [ 59.943914][ T6236] ? selinux_socket_sendmsg+0x198/0x2f0 [ 59.943930][ T6236] ____sys_sendmsg+0xa4d/0xbe0 [ 59.943941][ T6236] ? __pfx_netlink_sendmsg+0x10/0x10 [ 59.943956][ T6236] ? __pfx_____sys_sendmsg+0x10/0x10 [ 59.943971][ T6236] ? lock_acquire+0x1d1/0x380 [ 59.943983][ T6236] ? get_pid_task+0x2a/0x250 [ 59.943999][ T6236] ___sys_sendmsg+0x190/0x1e0 [ 59.944013][ T6236] ? __pfx____sys_sendmsg+0x10/0x10 [ 59.944040][ T6236] ? get_pid_task+0x106/0x250 [ 59.944061][ T6236] ? find_held_lock+0x2b/0x80 [ 59.944086][ T6236] __sys_sendmsg+0x160/0x210 [ 59.944102][ T6236] ? __pfx___sys_sendmsg+0x10/0x10 [ 59.944130][ T6236] do_syscall_64+0x123/0x790 [ 59.944144][ T6236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.944157][ T6236] RIP: 0033:0x7f6ead99e199 [ 59.944166][ T6236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.944177][ T6236] RSP: 002b:00007f6eae8cf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 59.944188][ T6236] RAX: ffffffffffffffda RBX: 00007f6eadc25fa0 RCX: 00007f6ead99e199 [ 59.944195][ T6236] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004 [ 59.944202][ T6236] RBP: 00007f6eae8cf090 R08: 0000000000000000 R09: 0000000000000000 [ 59.944209][ T6236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.944215][ T6236] R13: 00007f6eadc26038 R14: 00007f6eadc25fa0 R15: 00007fff9d6de218 [ 59.944229][ T6236] [ 59.959002][ T6238] SELinux: ebitmap: start bit 0 comes after start bit 0 [ 59.959119][ T6238] SELinux: failed to load policy [ 60.071236][ T6245] FAULT_INJECTION: forcing a failure. [ 60.071236][ T6245] name failslab, interval 1, probability 0, space 0, times 0 [ 60.071267][ T6245] CPU: 2 UID: 0 PID: 6245 Comm: syz.1.130 Not tainted syzkaller #0 PREEMPT(full) [ 60.071289][ T6245] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 60.071300][ T6245] Call Trace: [ 60.071306][ T6245] [ 60.071314][ T6245] dump_stack_lvl+0x100/0x190 [ 60.071349][ T6245] should_fail_ex.cold+0x5/0xa [ 60.071378][ T6245] should_failslab+0xc2/0x120 [ 60.071406][ T6245] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 60.071431][ T6245] ? sidtab_sid2str_get+0x84/0x670 [ 60.071460][ T6245] ? sidtab_sid2str_get+0x17a/0x670 [ 60.071493][ T6245] kmemdup_noprof+0x29/0x60 [ 60.071515][ T6245] sidtab_sid2str_get+0x17a/0x670 [ 60.071546][ T6245] security_sid_to_context_core+0x373/0x700 [ 60.071577][ T6245] avc_audit_post_callback+0x109/0x910 [ 60.071611][ T6245] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 60.071639][ T6245] ? skb_put+0x138/0x180 [ 60.071660][ T6245] ? audit_log_n_string+0x2a3/0x5a0 [ 60.071690][ T6245] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 60.071719][ T6245] common_lsm_audit+0x23f/0x2b0 [ 60.071747][ T6245] ? __pfx_common_lsm_audit+0x10/0x10 [ 60.071774][ T6245] ? lockdep_hardirqs_on+0x7d/0x110 [ 60.071796][ T6245] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 60.071819][ T6245] slow_avc_audit+0x186/0x210 [ 60.071850][ T6245] ? __pfx_slow_avc_audit+0x10/0x10 [ 60.071883][ T6245] ? avc_denied+0x14a/0x190 [ 60.071915][ T6245] ? avc_has_perm_noaudit+0x3a2/0x470 [ 60.071950][ T6245] avc_has_perm+0x1a6/0x1e0 [ 60.071972][ T6245] ? __pfx_avc_has_perm+0x10/0x10 [ 60.072026][ T6245] ? is_bpf_text_address+0x94/0x1a0 [ 60.072053][ T6245] ? kernel_text_address+0x8d/0x100 [ 60.072093][ T6245] sock_has_perm+0x253/0x2f0 [ 60.072116][ T6245] ? __pfx_sock_has_perm+0x10/0x10 [ 60.072156][ T6245] selinux_socket_sendmsg+0x8f/0x2f0 [ 60.072183][ T6245] security_socket_sendmsg+0xfb/0x230 [ 60.072207][ T6245] ____sys_sendmsg+0x89e/0xbe0 [ 60.072232][ T6245] ? __pfx_____sys_sendmsg+0x10/0x10 [ 60.072260][ T6245] ? lock_acquire+0x1d1/0x380 [ 60.072283][ T6245] ? get_pid_task+0x2a/0x250 [ 60.072312][ T6245] ___sys_sendmsg+0x190/0x1e0 [ 60.072336][ T6245] ? __pfx____sys_sendmsg+0x10/0x10 [ 60.072359][ T6245] ? get_pid_task+0x106/0x250 [ 60.072397][ T6245] ? find_held_lock+0x2b/0x80 [ 60.072446][ T6245] __sys_sendmsg+0x160/0x210 [ 60.072475][ T6245] ? __pfx___sys_sendmsg+0x10/0x10 [ 60.072519][ T6245] do_syscall_64+0x123/0x790 [ 60.072544][ T6245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.072564][ T6245] RIP: 0033:0x7f6ead99e199 [ 60.072581][ T6245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.072598][ T6245] RSP: 002b:00007f6eae8cf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 60.072618][ T6245] RAX: ffffffffffffffda RBX: 00007f6eadc25fa0 RCX: 00007f6ead99e199 [ 60.072631][ T6245] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000003 [ 60.072643][ T6245] RBP: 00007f6eae8cf090 R08: 0000000000000000 R09: 0000000000000000 [ 60.072654][ T6245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.072665][ T6245] R13: 00007f6eadc26038 R14: 00007f6eadc25fa0 R15: 00007fff9d6de218 [ 60.072694][ T6245] [ 60.086972][ T5090] Bluetooth: hci3: command tx timeout [ 60.191556][ T6251] netlink: 32 bytes leftover after parsing attributes in process `syz.0.132'. [ 60.211881][ T6253] netlink: 28 bytes leftover after parsing attributes in process `syz.1.133'. [ 60.268272][ T6257] ip_tables: iptables: counters copy to user failed while replacing table [ 60.271691][ T5090] Bluetooth: hci2: ACL packet for unknown connection handle 2249 [ 60.521381][ T6262] netlink: 'syz.2.137': attribute type 2 has an invalid length. [ 60.521403][ T6262] netlink: 64 bytes leftover after parsing attributes in process `syz.2.137'. [ 60.689154][ T6277] FAULT_INJECTION: forcing a failure. [ 60.689154][ T6277] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 60.689174][ T6277] CPU: 3 UID: 0 PID: 6277 Comm: syz.3.143 Not tainted syzkaller #0 PREEMPT(full) [ 60.689186][ T6277] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 60.689193][ T6277] Call Trace: [ 60.689197][ T6277] [ 60.689201][ T6277] dump_stack_lvl+0x100/0x190 [ 60.689220][ T6277] should_fail_ex.cold+0x5/0xa [ 60.689236][ T6277] _copy_from_iter+0x1f4/0x1690 [ 60.689252][ T6277] ? __asan_memset+0x23/0x50 [ 60.689265][ T6277] ? __pfx__copy_from_iter+0x10/0x10 [ 60.689278][ T6277] ? __pfx___alloc_skb+0x10/0x10 [ 60.689298][ T6277] netlink_sendmsg+0x808/0xda0 [ 60.689316][ T6277] ? __pfx_netlink_sendmsg+0x10/0x10 [ 60.689332][ T6277] ? selinux_socket_sendmsg+0x198/0x2f0 [ 60.689348][ T6277] ____sys_sendmsg+0xa4d/0xbe0 [ 60.689358][ T6277] ? __pfx_netlink_sendmsg+0x10/0x10 [ 60.689379][ T6277] ? __pfx_____sys_sendmsg+0x10/0x10 [ 60.689394][ T6277] ? lock_acquire+0x1d1/0x380 [ 60.689406][ T6277] ? get_pid_task+0x2a/0x250 [ 60.689422][ T6277] ___sys_sendmsg+0x190/0x1e0 [ 60.689435][ T6277] ? __pfx____sys_sendmsg+0x10/0x10 [ 60.689447][ T6277] ? get_pid_task+0x106/0x250 [ 60.689467][ T6277] ? find_held_lock+0x2b/0x80 [ 60.689491][ T6277] __sys_sendmsg+0x160/0x210 [ 60.689507][ T6277] ? __pfx___sys_sendmsg+0x10/0x10 [ 60.689529][ T6277] do_syscall_64+0x123/0x790 [ 60.689543][ T6277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.689555][ T6277] RIP: 0033:0x7f1602d9e199 [ 60.689564][ T6277] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.689575][ T6277] RSP: 002b:00007f1603cf0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 60.689586][ T6277] RAX: ffffffffffffffda RBX: 00007f1603025fa0 RCX: 00007f1602d9e199 [ 60.689592][ T6277] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 60.689599][ T6277] RBP: 00007f1603cf0090 R08: 0000000000000000 R09: 0000000000000000 [ 60.689605][ T6277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.689611][ T6277] R13: 00007f1603026038 R14: 00007f1603025fa0 R15: 00007ffdd008eeb8 [ 60.689625][ T6277] [ 60.713291][ T6279] netlink: 28 bytes leftover after parsing attributes in process `syz.3.144'. [ 60.778679][ T6283] FAULT_INJECTION: forcing a failure. [ 60.778679][ T6283] name failslab, interval 1, probability 0, space 0, times 0 [ 60.778699][ T6283] CPU: 2 UID: 0 PID: 6283 Comm: syz.3.146 Not tainted syzkaller #0 PREEMPT(full) [ 60.778711][ T6283] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 60.778718][ T6283] Call Trace: [ 60.778722][ T6283] [ 60.778726][ T6283] dump_stack_lvl+0x100/0x190 [ 60.778746][ T6283] should_fail_ex.cold+0x5/0xa [ 60.778762][ T6283] should_failslab+0xc2/0x120 [ 60.778778][ T6283] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 60.778792][ T6283] ? __alloc_skb+0x140/0x710 [ 60.778810][ T6283] __alloc_skb+0x140/0x710 [ 60.778824][ T6283] ? __alloc_skb+0x5b7/0x710 [ 60.778838][ T6283] ? __pfx___alloc_skb+0x10/0x10 [ 60.778853][ T6283] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 60.778864][ T6283] ? lockdep_hardirqs_on+0x7d/0x110 [ 60.778879][ T6283] nl802154_send_scan_msg+0x99/0x600 [ 60.778896][ T6283] ? __pfx_nl802154_send_scan_msg+0x10/0x10 [ 60.778914][ T6283] ? mark_held_locks+0x40/0x70 [ 60.778927][ T6283] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 60.778940][ T6283] nl802154_scan_started+0x31/0x60 [ 60.778956][ T6283] mac802154_trigger_scan_locked+0x29c/0x510 [ 60.778975][ T6283] nl802154_trigger_scan+0x59f/0xbb0 [ 60.778992][ T6283] genl_family_rcv_msg_doit+0x214/0x300 [ 60.779011][ T6283] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 60.779033][ T6283] ? bpf_lsm_capable+0x9/0x10 [ 60.779043][ T6283] ? security_capable+0x80/0x260 [ 60.779062][ T6283] genl_rcv_msg+0x560/0x800 [ 60.779089][ T6283] ? __pfx_genl_rcv_msg+0x10/0x10 [ 60.779113][ T6283] ? __lock_acquire+0x5c0/0x1f40 [ 60.779130][ T6283] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 60.779172][ T6283] ? __pfx_nl802154_trigger_scan+0x10/0x10 [ 60.779195][ T6283] ? __pfx_nl802154_post_doit+0x10/0x10 [ 60.779220][ T6283] ? __lock_acquire+0x5c0/0x1f40 [ 60.779235][ T6283] netlink_rcv_skb+0x159/0x420 [ 60.779250][ T6283] ? __pfx_genl_rcv_msg+0x10/0x10 [ 60.779267][ T6283] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 60.779287][ T6283] ? netlink_deliver_tap+0x1ae/0xcc0 [ 60.779303][ T6283] genl_rcv+0x28/0x40 [ 60.779317][ T6283] netlink_unicast+0x585/0x850 [ 60.779334][ T6283] ? __pfx_netlink_unicast+0x10/0x10 [ 60.779349][ T6283] ? __pfx_sock_has_perm+0x10/0x10 [ 60.779364][ T6283] netlink_sendmsg+0x8b0/0xda0 [ 60.779381][ T6283] ? __pfx_netlink_sendmsg+0x10/0x10 [ 60.779397][ T6283] ? selinux_socket_sendmsg+0x198/0x2f0 [ 60.779413][ T6283] ____sys_sendmsg+0xa4d/0xbe0 [ 60.779423][ T6283] ? __pfx_netlink_sendmsg+0x10/0x10 [ 60.779439][ T6283] ? __pfx_____sys_sendmsg+0x10/0x10 [ 60.779454][ T6283] ? lock_acquire+0x1d1/0x380 [ 60.779466][ T6283] ? get_pid_task+0x2a/0x250 [ 60.779488][ T6283] ___sys_sendmsg+0x190/0x1e0 [ 60.779501][ T6283] ? __pfx____sys_sendmsg+0x10/0x10 [ 60.779513][ T6283] ? get_pid_task+0x106/0x250 [ 60.779534][ T6283] ? find_held_lock+0x2b/0x80 [ 60.779568][ T6283] __sys_sendmsg+0x160/0x210 [ 60.779584][ T6283] ? __pfx___sys_sendmsg+0x10/0x10 [ 60.779608][ T6283] do_syscall_64+0x123/0x790 [ 60.779622][ T6283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.779633][ T6283] RIP: 0033:0x7f1602d9e199 [ 60.779643][ T6283] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.779653][ T6283] RSP: 002b:00007f1603cf0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 60.779664][ T6283] RAX: ffffffffffffffda RBX: 00007f1603025fa0 RCX: 00007f1602d9e199 [ 60.779671][ T6283] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000004 [ 60.779678][ T6283] RBP: 00007f1603cf0090 R08: 0000000000000000 R09: 0000000000000000 [ 60.779684][ T6283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.779690][ T6283] R13: 00007f1603026038 R14: 00007f1603025fa0 R15: 00007ffdd008eeb8 [ 60.779705][ T6283] [ 60.823053][ T6281] orangefs: client-core tried to read wrong size [ 60.830741][ T6281] netlink: 40 bytes leftover after parsing attributes in process `syz.2.145'. [ 60.831360][ T6288] Failure starting scanning (-16) [ 60.873233][ T6290] netlink: 'syz.3.149': attribute type 16 has an invalid length. [ 60.873253][ T6290] netlink: 'syz.3.149': attribute type 17 has an invalid length. [ 61.100393][ T6306] netlink: 28 bytes leftover after parsing attributes in process `syz.2.154'. [ 61.230978][ T6320] netlink: 4 bytes leftover after parsing attributes in process `syz.3.160'. [ 61.334679][ T6324] FAULT_INJECTION: forcing a failure. [ 61.334679][ T6324] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 61.334710][ T6324] CPU: 1 UID: 0 PID: 6324 Comm: syz.3.161 Not tainted syzkaller #0 PREEMPT(full) [ 61.334731][ T6324] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 61.334743][ T6324] Call Trace: [ 61.334749][ T6324] [ 61.334757][ T6324] dump_stack_lvl+0x100/0x190 [ 61.334789][ T6324] should_fail_ex.cold+0x5/0xa [ 61.334816][ T6324] _copy_from_user+0x2e/0xd0 [ 61.334841][ T6324] copy_msghdr_from_user+0x9f/0x4c0 [ 61.334863][ T6324] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 61.334890][ T6324] ? lock_acquire+0x1d1/0x380 [ 61.334908][ T6324] ? get_pid_task+0x2a/0x250 [ 61.334945][ T6324] ___sys_sendmsg+0x106/0x1e0 [ 61.334966][ T6324] ? __pfx____sys_sendmsg+0x10/0x10 [ 61.334985][ T6324] ? get_pid_task+0x106/0x250 [ 61.335018][ T6324] ? find_held_lock+0x2b/0x80 [ 61.335061][ T6324] __sys_sendmsg+0x160/0x210 [ 61.335088][ T6324] ? __pfx___sys_sendmsg+0x10/0x10 [ 61.335127][ T6324] do_syscall_64+0x123/0x790 [ 61.335150][ T6324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.335169][ T6324] RIP: 0033:0x7f1602d9e199 [ 61.335184][ T6324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.335201][ T6324] RSP: 002b:00007f1603cf0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 61.335219][ T6324] RAX: ffffffffffffffda RBX: 00007f1603025fa0 RCX: 00007f1602d9e199 [ 61.335230][ T6324] RDX: 0000000024000840 RSI: 0000200000009b40 RDI: 0000000000000003 [ 61.335241][ T6324] RBP: 00007f1603cf0090 R08: 0000000000000000 R09: 0000000000000000 [ 61.335252][ T6324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.335263][ T6324] R13: 00007f1603026038 R14: 00007f1603025fa0 R15: 00007ffdd008eeb8 [ 61.335287][ T6324] [ 61.794224][ T6348] Failure starting scanning (-16) [ 62.072512][ T6355] netlink: 'syz.2.171': attribute type 7 has an invalid length. [ 62.072525][ T6355] netlink: 'syz.2.171': attribute type 8 has an invalid length. [ 62.072593][ T6355] FAULT_INJECTION: forcing a failure. [ 62.072593][ T6355] name failslab, interval 1, probability 0, space 0, times 0 [ 62.072608][ T6355] CPU: 1 UID: 0 PID: 6355 Comm: syz.2.171 Not tainted syzkaller #0 PREEMPT(full) [ 62.072620][ T6355] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 62.072627][ T6355] Call Trace: [ 62.072631][ T6355] [ 62.072635][ T6355] dump_stack_lvl+0x100/0x190 [ 62.072655][ T6355] should_fail_ex.cold+0x5/0xa [ 62.072670][ T6355] should_failslab+0xc2/0x120 [ 62.072686][ T6355] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 62.072701][ T6355] ? __d_alloc+0x35/0xa50 [ 62.072720][ T6355] __d_alloc+0x35/0xa50 [ 62.072738][ T6355] d_alloc+0x4a/0x1e0 [ 62.072755][ T6355] lookup_one_qstr_excl+0x171/0x250 [ 62.072767][ T6355] start_dirop+0x59/0xb0 [ 62.072782][ T6355] simple_start_creating+0xf9/0x110 [ 62.072798][ T6355] ? __pfx_simple_start_creating+0x10/0x10 [ 62.072813][ T6355] ? mntput+0x70/0xa0 [ 62.072827][ T6355] ? simple_pin_fs+0xa3/0x190 [ 62.072847][ T6355] debugfs_start_creating.part.0+0x7b/0x150 [ 62.072860][ T6355] __debugfs_create_file+0xa9/0x500 [ 62.072873][ T6355] debugfs_create_file_full+0x41/0x60 [ 62.072887][ T6355] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 62.072904][ T6355] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 62.072933][ T6355] ? lockdep_init_map_type+0x5c/0x250 [ 62.072948][ T6355] ? __pfx_hsr_dev_setup+0x10/0x10 [ 62.072964][ T6355] alloc_netdev_mqs+0x314/0x15c0 [ 62.072984][ T6355] rtnl_create_link+0xc13/0xf80 [ 62.073003][ T6355] rtnl_newlink+0x15bc/0x2620 [ 62.073024][ T6355] ? __pfx_rtnl_newlink+0x10/0x10 [ 62.073040][ T6355] ? avc_has_perm_noaudit+0x56/0x470 [ 62.073058][ T6355] ? find_held_lock+0x2b/0x80 [ 62.073074][ T6355] ? avc_has_perm_noaudit+0x11e/0x470 [ 62.073090][ T6355] ? avc_has_perm_noaudit+0x11e/0x470 [ 62.073120][ T6355] ? lock_acquire+0x1d1/0x380 [ 62.073132][ T6355] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 62.073142][ T6355] ? find_held_lock+0x2b/0x80 [ 62.073158][ T6355] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 62.073167][ T6355] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 62.073178][ T6355] ? __pfx_rtnl_newlink+0x10/0x10 [ 62.073195][ T6355] rtnetlink_rcv_msg+0x95e/0xe90 [ 62.073206][ T6355] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 62.073220][ T6355] ? ref_tracker_free+0x37e/0x6c0 [ 62.073238][ T6355] netlink_rcv_skb+0x159/0x420 [ 62.073253][ T6355] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 62.073264][ T6355] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 62.073284][ T6355] ? netlink_deliver_tap+0x1ae/0xcc0 [ 62.073301][ T6355] netlink_unicast+0x585/0x850 [ 62.073317][ T6355] ? __pfx_netlink_unicast+0x10/0x10 [ 62.073338][ T6355] netlink_sendmsg+0x8b0/0xda0 [ 62.073355][ T6355] ? __pfx_netlink_sendmsg+0x10/0x10 [ 62.073371][ T6355] ? selinux_socket_sendmsg+0x198/0x2f0 [ 62.073386][ T6355] ____sys_sendmsg+0xa4d/0xbe0 [ 62.073398][ T6355] ? __pfx_netlink_sendmsg+0x10/0x10 [ 62.073413][ T6355] ? __pfx_____sys_sendmsg+0x10/0x10 [ 62.073428][ T6355] ? lock_acquire+0x1d1/0x380 [ 62.073440][ T6355] ? get_pid_task+0x2a/0x250 [ 62.073457][ T6355] ___sys_sendmsg+0x190/0x1e0 [ 62.073470][ T6355] ? __pfx____sys_sendmsg+0x10/0x10 [ 62.073482][ T6355] ? get_pid_task+0x106/0x250 [ 62.073502][ T6355] ? find_held_lock+0x2b/0x80 [ 62.073527][ T6355] __sys_sendmsg+0x160/0x210 [ 62.073543][ T6355] ? __pfx___sys_sendmsg+0x10/0x10 [ 62.073566][ T6355] do_syscall_64+0x123/0x790 [ 62.073579][ T6355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.073591][ T6355] RIP: 0033:0x7fd1ec59e199 [ 62.073605][ T6355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.073621][ T6355] RSP: 002b:00007fd1ed380028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 62.073632][ T6355] RAX: ffffffffffffffda RBX: 00007fd1ec825fa0 RCX: 00007fd1ec59e199 [ 62.073639][ T6355] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 62.073646][ T6355] RBP: 00007fd1ed380090 R08: 0000000000000000 R09: 0000000000000000 [ 62.073652][ T6355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.073658][ T6355] R13: 00007fd1ec826038 R14: 00007fd1ec825fa0 R15: 00007ffc5bb01a08 [ 62.073672][ T6355] [ 62.186831][ T6318] comedi comedi1: reset error (fatal) [ 62.305092][ T5742] nintendo 0005:057E:2017.0002: hidraw1: BLUETOOTH HID v80.00 Gamepad [syz0] on syz0 [ 62.344800][ T5742] nintendo 0005:057E:2017.0002: controller MAC = 00:11:22:33:44:55 [ 62.395579][ T5742] nintendo 0005:057E:2017.0002: assigned player 1 led pattern [ 62.679467][ T43] kauditd_printk_skb: 73 callbacks suppressed [ 62.679479][ T43] audit: type=1400 audit(1791206005.073:387): avc: denied { mounton } for pid=6385 comm="syz.0.181" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 62.682150][ T6386] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 62.682253][ T6386] qnx6: wrong signature (magic) in superblock #1. [ 62.682258][ T6386] qnx6: unable to read the first superblock [ 62.682871][ T6387] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 62.682952][ T6387] qnx6: wrong signature (magic) in superblock #1. [ 62.682957][ T6387] qnx6: unable to read the first superblock [ 62.683677][ T43] audit: type=1400 audit(1791206005.073:388): avc: denied { mounton } for pid=6385 comm="syz.0.181" path="/27/proc" dev="tmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 62.684387][ T43] audit: type=1400 audit(1791206005.073:389): avc: denied { mounton } for pid=6385 comm="syz.0.181" path="/27/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 62.754791][ T6393] warning: `syz.2.184' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 62.795994][ T43] audit: type=1400 audit(1791206005.183:390): avc: denied { bind } for pid=6398 comm="syz.0.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 62.801532][ T43] audit: type=1400 audit(1791206005.193:391): avc: denied { create } for pid=6398 comm="syz.0.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 62.803099][ T6399] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 62.803114][ T6399] audit: out of memory in audit_log_start [ 62.804198][ T43] audit: type=1400 audit(1791206005.193:392): avc: denied { ioctl } for pid=6398 comm="syz.0.186" path="socket:[12670]" dev="sockfs" ino=12670 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 62.810773][ T6399] xt_policy: output policy not valid in PREROUTING and INPUT [ 62.928073][ T5742] nintendo 0005:057E:2017.0002: Failed to set players LEDs, skipping registration; ret=-110 [ 62.951930][ T5742] input: syz0 as /devices/virtual/misc/uhid/0005:057E:2017.0002/input/input6 [ 63.020920][ T6411] syzkaller0: entered promiscuous mode [ 63.020939][ T6411] syzkaller0: entered allmulticast mode [ 63.149257][ T43] audit: type=1400 audit(1791206005.543:393): avc: denied { mount } for pid=6417 comm="syz.3.195" name="/" dev="ramfs" ino=13520 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 63.149308][ T43] audit: type=1400 audit(1791206005.543:394): avc: denied { prog_load } for pid=6415 comm="syz.2.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 63.151178][ T66] Bluetooth: hci3: unexpected event for opcode 0x080f [ 63.244506][ T6430] netlink: 'syz.1.198': attribute type 2 has an invalid length. [ 63.262323][ T6429] 0: reclassify loop, rule prio 0, protocol 800 [ 63.610529][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 63.620886][ T6462] syzkaller0: entered promiscuous mode [ 63.620906][ T6462] syzkaller0: entered allmulticast mode [ 63.672759][ T6468] 0: reclassify loop, rule prio 0, protocol 800 [ 63.736637][ T66] Bluetooth: hci1: Malformed LE Event: 0x0d [ 63.801729][ T6480] tipc: Enabled bearer , priority 0 [ 63.802045][ T6480] syzkaller0: entered promiscuous mode [ 63.802056][ T6480] syzkaller0: entered allmulticast mode [ 63.804386][ T6480] tipc: Resetting bearer [ 63.823173][ T6480] tipc: Disabling bearer [ 64.044959][ T6487] FAULT_INJECTION: forcing a failure. [ 64.044959][ T6487] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 64.044987][ T6487] CPU: 1 UID: 0 PID: 6487 Comm: syz.1.217 Not tainted syzkaller #0 PREEMPT(full) [ 64.045005][ T6487] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 64.045012][ T6487] Call Trace: [ 64.045016][ T6487] [ 64.045020][ T6487] dump_stack_lvl+0x100/0x190 [ 64.045051][ T6487] should_fail_ex.cold+0x5/0xa [ 64.045067][ T6487] _copy_to_user+0x32/0xd0 [ 64.045086][ T6487] simple_read_from_buffer+0xcb/0x170 [ 64.045102][ T6487] proc_fail_nth_read+0x1af/0x230 [ 64.045119][ T6487] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 64.045135][ T6487] ? rw_verify_area+0xce/0x6d0 [ 64.045146][ T6487] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 64.045160][ T6487] vfs_read+0x1e4/0xb40 [ 64.045173][ T6487] ? lock_acquire+0x1d1/0x380 [ 64.045185][ T6487] ? __fget_files+0x34/0x3d0 [ 64.045200][ T6487] ? __pfx_vfs_read+0x10/0x10 [ 64.045211][ T6487] ? find_held_lock+0x2b/0x80 [ 64.045227][ T6487] ? __fget_files+0x215/0x3d0 [ 64.045244][ T6487] ? __fget_files+0x21f/0x3d0 [ 64.045262][ T6487] ksys_read+0x12a/0x250 [ 64.045275][ T6487] ? __pfx_ksys_read+0x10/0x10 [ 64.045291][ T6487] do_syscall_64+0x123/0x790 [ 64.045308][ T6487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.045319][ T6487] RIP: 0033:0x7f6ead95e9ce [ 64.045329][ T6487] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 64.045339][ T6487] RSP: 002b:00007f6eae8cefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 64.045350][ T6487] RAX: ffffffffffffffda RBX: 00007f6eae8cf6c0 RCX: 00007f6ead95e9ce [ 64.045357][ T6487] RDX: 000000000000000f RSI: 00007f6eae8cf0a0 RDI: 0000000000000004 [ 64.045367][ T6487] RBP: 00007f6eae8cf090 R08: 0000000000000000 R09: 0000000000000000 [ 64.045374][ T6487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.045380][ T6487] R13: 00007f6eadc26038 R14: 00007f6eadc25fa0 R15: 00007fff9d6de218 [ 64.045394][ T6487] [ 64.315655][ T6507] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.318563][ T6501] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 64.536045][ T6527] __nla_validate_parse: 7 callbacks suppressed [ 64.536064][ T6527] netlink: 28 bytes leftover after parsing attributes in process `syz.1.232'. [ 64.536078][ T6527] netlink: 28 bytes leftover after parsing attributes in process `syz.1.232'. [ 64.550553][ T6527] syzkaller0: entered promiscuous mode [ 64.550572][ T6527] syzkaller0: entered allmulticast mode [ 64.666871][ T6537] service_operation: orangefs_mount -- wait timed out; aborting attempt. [ 64.666893][ T6537] orangefs_mount: mount request failed with -110 [ 64.667444][ T6537] netlink: 8 bytes leftover after parsing attributes in process `syz.2.237'. [ ** replaying previous printk message ** [ 64.667455][ T6537] netlink: 4 bytes leftover after parsing attributes in process `syz.2.237'. [ 64.667469][ T6537] netlink: 'syz.2.237': attribute type 7 has an invalid length. [ 64.667476][ T6537] netlink: 'syz.2.237': attribute type 13 has an invalid length. [ 64.674045][ T6542] netlink: 28 bytes leftover after parsing attributes in process `syz.3.239'. [ 64.681835][ T38] ================================================================== [ 64.681847][ T38] BUG: KASAN: slab-use-after-free in drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0 [ 64.681880][ T38] Read of size 1 at addr ffff88802d947c09 by task kworker/u33:1/38 [ 64.681893][ T38] [ 64.681899][ T38] CPU: 2 UID: 0 PID: 38 Comm: kworker/u33:1 Not tainted syzkaller #0 PREEMPT(full) [ 64.681911][ T38] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 64.681919][ T38] Workqueue: events_unbound commit_work [ 64.681936][ T38] Call Trace: [ 64.681940][ T38] [ 64.681947][ T38] dump_stack_lvl+0x100/0x190 [ 64.681972][ T38] print_report+0x13d/0x4b0 [ 64.681996][ T38] ? __virt_addr_valid+0x239/0x430 [ 64.682014][ T38] ? drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0 [ 64.682038][ T38] kasan_report+0xdf/0x1c0 [ 64.682061][ T38] ? drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0 [ 64.682087][ T38] drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0 [ 64.682112][ T38] ? preempt_schedule_common+0x3c/0xb0 [ 64.682130][ T38] ? preempt_schedule_thunk+0x16/0x40 [ 64.682151][ T38] ? __pfx_drm_atomic_helper_wait_for_vblanks.part.0+0x10/0x10 [ 64.682176][ T38] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 64.682193][ T38] ? drm_atomic_helper_commit_hw_done+0x36d/0x490 [ 64.682221][ T38] drm_atomic_helper_commit_tail+0xff/0x130 [ 64.682240][ T38] commit_tail+0x338/0x430 [ 64.682263][ T38] process_one_work+0xac7/0x1b10 [ 64.682319][ T38] ? __pfx_process_one_work+0x10/0x10 [ 64.682342][ T38] ? lock_acquire+0x1d1/0x380 [ 64.682356][ T38] ? __pfx_commit_work+0x10/0x10 [ 64.682374][ T38] worker_thread+0x5ef/0xe50 [ 64.682393][ T38] ? kthread+0x13a/0x450 [ 64.682415][ T38] ? __pfx_worker_thread+0x10/0x10 [ 64.682428][ T38] kthread+0x373/0x450 [ 64.682450][ T38] ? __pfx_kthread+0x10/0x10 [ 64.682473][ T38] ret_from_fork+0x730/0xd60 [ 64.682491][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 64.682527][ T38] ? __switch_to+0x800/0x10f0 [ 64.682550][ T38] ? __pfx_kthread+0x10/0x10 [ 64.682573][ T38] ret_from_fork_asm+0x1a/0x30 [ 64.682595][ T38] [ 64.682601][ T38] [ 64.682605][ T38] Allocated by task 6542: [ 64.682612][ T38] kasan_save_stack+0x30/0x50 [ 64.682646][ T38] kasan_save_track+0x14/0x30 [ 64.682664][ T38] __kasan_kmalloc+0xaa/0xb0 [ 64.682682][ T38] __kmalloc_cache_noprof+0x2f8/0x6d0 [ 64.682696][ T38] drm_atomic_helper_crtc_duplicate_state+0x72/0xd0 [ 64.682713][ T38] drm_atomic_get_crtc_state+0x1de/0x690 [ 64.682728][ T38] drm_atomic_set_property+0x165/0x3f90 [ 64.682747][ T38] drm_mode_atomic_ioctl+0x6ed/0x2940 [ 64.682769][ T38] drm_ioctl_kernel+0x1f3/0x3e0 [ 64.682790][ T38] drm_ioctl+0x5e6/0xc60 [ 64.682810][ T38] __x64_sys_ioctl+0x18e/0x210 [ 64.682822][ T38] do_syscall_64+0x123/0x790 [ 64.682832][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.682844][ T38] [ 64.682846][ T38] Freed by task 10: [ 64.682851][ T38] kasan_save_stack+0x30/0x50 [ 64.682865][ T38] kasan_save_track+0x14/0x30 [ 64.682883][ T38] kasan_save_free_info+0x3b/0x70 [ 64.682897][ T38] __kasan_slab_free+0x5f/0x80 [ 64.682916][ T38] kfree+0x22b/0x6d0 [ 64.682928][ T38] drm_atomic_commit_default_clear+0x465/0x10c0 [ 64.682944][ T38] __drm_atomic_commit_free+0x185/0x2f0 [ 64.682958][ T38] drm_atomic_helper_dirtyfb+0x578/0x790 [ 64.682976][ T38] drm_fbdev_shmem_helper_fb_dirty+0x1cc/0x350 [ 64.682993][ T38] drm_fb_helper_damage_work+0x4c8/0xab0 [ 64.683017][ T38] process_one_work+0xac7/0x1b10 [ 64.683039][ T38] worker_thread+0x5ef/0xe50 [ 64.683051][ T38] kthread+0x373/0x450 [ 64.683071][ T38] ret_from_fork+0x730/0xd60 [ 64.683086][ T38] ret_from_fork_asm+0x1a/0x30 [ 64.683101][ T38] [ 64.683104][ T38] The buggy address belongs to the object at ffff88802d947c00 [ 64.683104][ T38] which belongs to the cache kmalloc-512 of size 512 [ 64.683116][ T38] The buggy address is located 9 bytes inside of [ 64.683116][ T38] freed 512-byte region [ffff88802d947c00, ffff88802d947e00) [ 64.683129][ T38] [ 64.683131][ T38] The buggy address belongs to the physical page: [ 64.683136][ T38] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2d944 [ 64.683147][ T38] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 64.683159][ T38] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 64.683174][ T38] page_type: f5(slab) [ 64.683188][ T38] raw: 00fff00000000040 ffff88801c042c80 dead000000000100 dead000000000122 [ 64.683202][ T38] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 64.683217][ T38] head: 00fff00000000040 ffff88801c042c80 dead000000000100 dead000000000122 [ 64.683226][ T38] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 64.683234][ T38] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 64.683245][ T38] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 64.683254][ T38] page dumped because: kasan: bad access detected [ 64.683261][ T38] page_owner tracks the page as allocated [ 64.683266][ T38] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 8683472283 [ 64.683291][ T38] post_alloc_hook+0xfd/0x120 [ 64.683305][ T38] get_page_from_freelist+0x110d/0x35d0 [ 64.683318][ T38] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 64.683329][ T38] new_slab+0xa9/0x6e0 [ 64.683342][ T38] refill_objects+0xe3/0x410 [ 64.683352][ T38] __pcs_replace_empty_main+0x35e/0x650 [ 64.683361][ T38] __kmalloc_cache_noprof+0x4f4/0x6d0 [ 64.683370][ T38] device_add+0xd3f/0x1970 [ 64.683385][ T38] usb_hub_create_port_device+0x3c6/0xe60 [ 64.683411][ T38] hub_probe.cold+0x2974/0x2ed9 [ 64.683433][ T38] usb_probe_interface+0x386/0x9b0 [ 64.683449][ T38] really_probe+0x241/0xa60 [ 64.683467][ T38] __driver_probe_device+0x210/0x460 [ 64.683486][ T38] driver_probe_device+0x4a/0x140 [ 64.683506][ T38] __device_attach_driver+0x1df/0x320 [ 64.683526][ T38] bus_for_each_drv+0x159/0x1e0 [ 64.683540][ T38] page_owner free stack trace missing [ 64.683545][ T38] [ 64.683549][ T38] Memory state around the buggy address: [ 64.683556][ T38] ffff88802d947b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 64.683567][ T38] ffff88802d947b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 64.683577][ T38] >ffff88802d947c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 64.683585][ T38] ^ [ 64.683592][ T38] ffff88802d947c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 64.683602][ T38] ffff88802d947d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 64.683610][ T38] ================================================================== [ 64.685475][ T38] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 64.927554][ T38] CPU: 2 UID: 0 PID: 38 Comm: kworker/u33:1 Not tainted syzkaller #0 PREEMPT(full) [ 64.930903][ T38] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 64.934279][ T38] Workqueue: events_unbound commit_work [ 64.936085][ T38] Call Trace: [ 64.937257][ T38] [ 64.938281][ T38] dump_stack_lvl+0x100/0x190 [ 64.940052][ T38] vpanic+0x553/0x970 [ 64.941399][ T38] ? __pfx_vpanic+0x10/0x10 [ 64.942913][ T38] ? mark_held_locks+0x40/0x70 [ 64.944504][ T38] ? drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0 [ 64.946859][ T38] panic+0xd1/0xe0 [ 64.948096][ T38] ? __pfx_panic+0x10/0x10 [ 64.949580][ T38] ? drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0 [ 64.952125][ T38] ? preempt_schedule_common+0x3c/0xb0 [ 64.954395][ T38] check_panic_on_warn.cold+0x19/0x34 [ 64.956639][ T38] end_report.part.0+0x3a/0x90 [ 64.958688][ T38] kasan_report.cold+0xe/0x18 [ 64.960671][ T38] ? drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0 [ 64.963639][ T38] drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0 [ 64.966606][ T38] ? preempt_schedule_common+0x3c/0xb0 [ 64.968849][ T38] ? preempt_schedule_thunk+0x16/0x40 [ 64.971098][ T38] ? __pfx_drm_atomic_helper_wait_for_vblanks.part.0+0x10/0x10 [ 64.974027][ T38] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 64.975923][ T38] ? drm_atomic_helper_commit_hw_done+0x36d/0x490 [ 64.978330][ T38] drm_atomic_helper_commit_tail+0xff/0x130 [ 64.980750][ T38] commit_tail+0x338/0x430 [ 64.982537][ T38] process_one_work+0xac7/0x1b10 [ 64.984521][ T38] ? __pfx_process_one_work+0x10/0x10 [ 64.986595][ T38] ? lock_acquire+0x1d1/0x380 [ 64.988377][ T38] ? __pfx_commit_work+0x10/0x10 [ 64.990314][ T38] worker_thread+0x5ef/0xe50 [ 64.992006][ T38] ? kthread+0x13a/0x450 [ 64.993682][ T38] ? __pfx_worker_thread+0x10/0x10 [ 64.995707][ T38] kthread+0x373/0x450 [ 64.997264][ T38] ? __pfx_kthread+0x10/0x10 [ 64.999026][ T38] ret_from_fork+0x730/0xd60 [ 65.000944][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 65.002941][ T38] ? __switch_to+0x800/0x10f0 [ 65.004784][ T38] ? __pfx_kthread+0x10/0x10 [ 65.006527][ T38] ret_from_fork_asm+0x1a/0x30 [ 65.008284][ T38] [ 65.010123][ T38] Kernel Offset: disabled [ 65.011758][ T38] Rebooting in 86400 seconds.. VM DIAGNOSIS: 13:13:27 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000001 RCX=0000000000000000 RDX=ffff8880253acb00 RSI=ffffffff81ff839e RDI=ffff8880253acb00 RBP=ffff88806a543cc0 RSP=ffffc900032178a0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffed1004a75c13 R13=0000000000000003 R14=ffffed100d4a8799 R15=0000000000000001 RIP=ffffffff81ff83a0 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5b4e000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f6eadc27dac CR3=000000004ed43000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 337a79732f74656e 2f70756f7267637a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdd008f3a6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdd008f3a6 00007ffdd008f3ac ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1602e3569b ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1602e356db ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1602e3583f ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1602e356cd ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000070 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000070 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=fffffbfff1d8f2c8 RBX=fffffbfff1d8f2c9 RCX=ffffffff81c85ede RDX=fffffbfff1d8f2c9 RSI=0000000000000004 RDI=ffffffff8ec79640 RBP=fffffbfff1d8f2c8 RSP=ffffc90000137928 R8 =0000000000000000 R9 =fffffbfff1d8f2c8 R10=ffffffff8ec79643 R11=3a6b6e696c74656e R12=ffffffff8fbd9320 R13=ffffc90000137da8 R14=0000000000000000 R15=ffffc90000137db4 RIP=ffffffff827fbfed RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5c4e000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c296620 CR3=0000000035a1d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000001 Opmask01=0000000000000001 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=00000000fff3ffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffde1db8f3b 00007ffde1db8f3b ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffde1db9440 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffde1db9440 0000003000000018 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3420303120343220 6334206238206334 2038302034322034 3420623820633400 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3420303120343220 6334206232206334 2032302034322034 3420623220633400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 746120676e697372 6170207265746661 207265766f746665 6c20736574796220 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3830206365203338 2038342030302030 3020303020303020 3038206631206630 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2030302030302030 3020303020303020 3438206631206630 206532203636203e ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 33633c2035302066 3020383020343220 6335203938206334 2030312034322063 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3420623820633420 3830203432203434 2062382063342061 6320393820643420 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 393878303d646d63 6c74636f69203037 3632313d6f6e6920 2273666b636f7322 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=dffffc0000000000 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff85b1c8c0 RDI=ffffffff9bc76fa0 RBP=ffffffff9bc76f60 RSP=ffffc90000727288 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3230383838666666 R12=0000000000000000 R13=1ffff920000e4e5b R14=0000000000000018 R15=0000000000000000 RIP=ffffffff85b1c8e7 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5d4e000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000003d107000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000008000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000ffffc000 Opmask01=00000000ffffdfbf Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdd008f3a6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdd008f3a6 00007ffdd008f3ac ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1602e3569b ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1602e356db ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1602e3583f ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1602e356cd ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000031647261632f 6972642f7665642f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000012475142400c 4a51470c5546470c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1602ff35f8 00007f1602ff35c8 00007f1602ff3600 00007f1602ff35e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000070 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000002 RCX=0000000000000001 RDX=ffff88802b0c2580 RSI=ffffffff81ff839e RDI=ffff88802b0c2580 RBP=ffff88806a643cc0 RSP=ffffc90007e5f550 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffffed1005618763 R13=0000000000000003 R14=ffffed100d4c8799 R15=0000000000000001 RIP=ffffffff81ff83a0 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5e4e000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000000058 CR3=000000000eb96000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010001 Opmask01=00000000ffffdfbf Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdd008f3a6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdd008f3a6 00007ffdd008f3ac ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1602e3569b ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1602e356db ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1602e3583f ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1602e356cd ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1602ff35f8 00007f1602ff35c8 00007f1602ff3600 00007f1602ff35e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000070 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000