last executing test programs: 6.020297067s ago: executing program 3 (id=310): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000740)={&(0x7f0000000780)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000840)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000000000710010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) 6.020071182s ago: executing program 3 (id=312): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newsa={0x15c, 0x10, 0x1, 0x0, 0x25dfdbff, {{@in=@multicast1, @in=@dev={0xac, 0x14, 0x14, 0x14}, 0x0, 0x3}, {@in=@broadcast, 0x0, 0x32}, @in6=@local, {0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x80ffffff}, {0xe, 0x4000000, 0x1}, 0x70bd27, 0x0, 0xa, 0x5}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @sa_dir={0x5, 0x21, 0x1}]}, 0x15c}}, 0x0) 5.968620198s ago: executing program 3 (id=314): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000010a00), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000010a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000010fc0)={'wlan0\x00', 0x0}) fsopen(&(0x7f00000000c0)='nfs\x00', 0x0) (async) r3 = fsopen(&(0x7f00000000c0)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000100)='source\x00', &(0x7f0000000140)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000180)='addr\x00', &(0x7f00000001c0)='127.0.0.1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000300)='3', 0x4e) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000011080)={0x0, 0x0, &(0x7f00000110c0)={&(0x7f0000000000)={0xb4, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "8cc62e2b37d73bc9f3bc0f74ba52f8f920b2e6d650a1ca06"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "97553a32fd61f222ee4b70444b084ce4c6ddbc9361fe0cad"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "01643379e01fd576497e3fa0e45c10f5a1ffdfe1be14a43d"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "dd2fdf28e3a29703ffb3e4ead439b5309a5eedcbb7ef90b4"}]]}, 0xb4}}, 0x0) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000011080)={0x0, 0x0, &(0x7f00000110c0)={&(0x7f0000000000)={0xb4, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "8cc62e2b37d73bc9f3bc0f74ba52f8f920b2e6d650a1ca06"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "97553a32fd61f222ee4b70444b084ce4c6ddbc9361fe0cad"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "01643379e01fd576497e3fa0e45c10f5a1ffdfe1be14a43d"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "dd2fdf28e3a29703ffb3e4ead439b5309a5eedcbb7ef90b4"}]]}, 0xb4}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000011140)={0x0, 0x0, &(0x7f0000011180)={&(0x7f0000011540)={0x90, r1, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x51, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @val={0x5, 0x3, {0x7, 0xc1, 0x7f}}, @void, @void, @void, @val={0x2d, 0x1a, {0x1, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x90}}, 0x20000014) 5.968087781s ago: executing program 3 (id=317): syz_emit_ethernet(0xae, &(0x7f0000001ac0)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010120", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000400260004000000"}, {0x1, 0x1, "fe906d17efe3"}]}}}}}}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0xc3072, 0xffffffffffffffff, 0x200000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = dup(r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e23, 0xdb, @empty}}, 0xffb, 0x203, 0xffff18b6, 0x6, 0x330, 0x80000001, 0xdb}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000400)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x6, 0x6}, 0x90) sendmsg$inet6(r1, &(0x7f00000004c0)={&(0x7f0000000500)={0xa, 0x4e24, 0x8004, @ipv4={'\x00', '\xff\xff', @loopback}, 0x6}, 0x47, &(0x7f00000005c0)=[{&(0x7f0000000640)="f0", 0x1}], 0x1}, 0x40054) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000680)={0x0, @in={{0x2, 0x4e24, @loopback}}, 0xabb8, 0x67, 0xa4f, 0x0, 0x28, 0xffffff85, 0xa9}, 0x9c) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000980)={r1, 0x20, &(0x7f0000000940)={&(0x7f0000000740)=""/201, 0xc9, 0x0, &(0x7f0000000840)=""/241, 0xf1}}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000540)='./nfsd\x00', &(0x7f0000000580)='nfsd\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/export_features\x00', 0x0, 0x1) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f00000009c0)={0x0, 0x1000, "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"}, &(0x7f0000001a00)=0x1008) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000001b80)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000001bc0)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000001c00)=0x1, 0x8af6a083558a9093) setsockopt$sock_int(r4, 0x1, 0x2a, &(0x7f0000001c40)=0x6, 0x4) sendmmsg$inet6(r4, &(0x7f0000001c80)=[{{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000001d00)="f1a40c60c60fd7", 0x7}], 0x1, &(0x7f0000001d40)=ANY=[], 0x208}}], 0x1, 0x1c0) recvfrom(r4, 0x0, 0x0, 0x40010042, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000001a40)={r3, 0xfff}, &(0x7f0000001a80)=0x8) setns(0xc9, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'gretap0\x00', 0x0, 0x700, 0x20, 0x80000000, 0xf982, {{0x9, 0x4, 0x0, 0x26, 0x24, 0x66, 0x0, 0x0, 0x2f, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x88, 0x7, "124b711070"}, @lsrr={0x83, 0x7, 0x7a, [@dev={0xac, 0x14, 0x14, 0x3a}]}, @end]}}}}}) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@gettfilter={0x2c, 0x2e, 0x400, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xfff3, 0x6}, {0xffe0, 0x2}, {0xc, 0xfff3}}, [{0x8, 0xb, 0xb58}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20004051) r7 = socket(0x2a, 0x2, 0x9) connect(r7, &(0x7f00000000c0)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000180)='k', 0x1}], 0x1) read$hiddev(r2, &(0x7f0000000600)=""/54, 0x36) getsockopt$inet_sctp_SCTP_ASCONF_SUPPORTED(r1, 0x84, 0x80, &(0x7f0000001d40)={r5, 0xfffff001}, &(0x7f0000001d80)=0x8) 5.907015059s ago: executing program 3 (id=320): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) syz_open_procfs(0x0, &(0x7f00000002c0)='fd\x00') mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='./dev/sda1\x00', &(0x7f0000000180)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f0000000200)='./mnt\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x18d042, 0x15) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000380)=@nat={'nat\x00', 0x1b, 0x5, 0x5c8, 0x4f8, 0x240, 0xffffffff, 0x378, 0x378, 0x4f8, 0x4f8, 0xffffffff, 0x4f8, 0x4f8, 0x5, &(0x7f0000000300), {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffff00, 0xffffffff, 0xff], [0xffffffff, 0x0, 0x0, 0xff000000], 'batadv0\x00', 'veth1_to_team\x00', {}, {}, 0x73, 0x2, 0x6, 0x10}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x12, @ipv4=@rand_addr=0x64010100, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @gre_key=0xe13, @icmp_id=0x66}}}, {{@ipv6={@mcast1, @remote, [0x0, 0xff000000, 0xff000000, 0xffffffff], [0xff, 0x0, 0xffffffff, 0xf9f1d9042c60d061], 'veth0_to_team\x00', 'veth1_to_hsr\x00', {}, {}, 0x3c, 0xf, 0x4, 0x1}, 0x0, 0x108, 0x150, 0x0, {}, [@common=@frag={{0x30}, {[0x6, 0x8], 0xfffffff8, 0x29, 0x1}}, @common=@ah={{0x30}, {[0x4d5, 0x4d6], 0x7, 0x63}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x4, @ipv4=@loopback, @ipv6=@empty, @icmp_id=0x68, @port=0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x5, 0x0, [0x0, 0xfff, 0x0, 0x5, 0x8000, 0xf2, 0x800, 0xfffd, 0x0, 0x4, 0x4, 0x9, 0xfe00, 0x10, 0x2, 0x60], 0xd}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x5, @ipv4=@rand_addr=0x64010100, @ipv4=@dev={0xac, 0x14, 0x14, 0x25}, @icmp_id=0x66, @icmp_id=0x66}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @dev={0xfe, 0x80, '\x00', 0x3e}, [0xffffff00, 0xff, 0x101], [0x0, 0xff, 0xff000000, 0xffffff00], 'vlan0\x00', 'vcan0\x00', {0xff}, {}, 0x2f, 0x0, 0x3, 0x8}, 0x0, 0x138, 0x180, 0x0, {}, [@common=@srh1={{0x90}, {0x1, 0x5, 0x48, 0x3, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}, @empty, @private0, [0xffffff00, 0xffffff00, 0xffffff], [0xffffff00, 0xff, 0xff, 0xffffffff], [0xff000000, 0x0, 0xff], 0x4, 0x10e1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private=0xa010101, @ipv6=@remote, @port=0x4e24, @icmp_id=0x68}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x628) pwrite64(r0, &(0x7f0000000280)="ff", 0x1, 0xd0) mmap$IORING_OFF_SQ_RING(0x0, 0x6, 0x0, 0x2010, r0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x77, 0x101301) r3 = openat(r0, &(0x7f00000009c0)='./dev\x00', 0x10d002, 0x40) r4 = syz_clone(0x0, 0x0, 0x21, 0x0, 0x0, 0x0) syz_open_procfs(r4, &(0x7f0000000a80)='stat\x00') timer_create(0x3, &(0x7f0000000ac0)={0x0, 0x1d, 0x4, @tid=r4}, &(0x7f0000000b00)) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000a40)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000a00), 0x111, 0xa}}, 0x20) ioctl$USBDEVFS_CONNECTINFO(r2, 0x80045520, 0x0) 5.840148883s ago: executing program 3 (id=323): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001580)={'wlan0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0xf6) mount(0x0, &(0x7f0000000040)='./sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sec/tomoyo/query\x00', 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000300)={0x2, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff}, {0x7, 0x0, 0x1, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}) r6 = syz_io_uring_setup(0x1d6f, &(0x7f0000000100)={0x0, 0x3fffffc, 0x0, 0x2, 0x40055}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) io_uring_enter(r6, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001700)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 4.063144475s ago: executing program 0 (id=374): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) dup3(r2, r0, 0x80000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000680)={'bond_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x80) 3.978389479s ago: executing program 0 (id=375): r0 = socket$kcm(0xa, 0x2, 0x0) socket(0x2, 0x80805, 0x0) sendmsg$sock(r0, &(0x7f0000000480)={&(0x7f00000004c0)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000540)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x100000000000000) 3.975674269s ago: executing program 0 (id=377): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) syz_usb_connect_ath9k(0x3, 0x87, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async, rerun: 32) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.swap.events\x00', 0x275a, 0x0) (rerun: 32) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000340)=r2, 0x4) (async) sendmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)='g', 0x1}], 0x1, 0x0, 0x0, 0x40}, 0x40000) (async) recvmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x40) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) (async, rerun: 32) clock_gettime(0x3, 0x0) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) (async) write(0xffffffffffffffff, &(0x7f0000000200)='1', 0x1) (async, rerun: 32) close(0xffffffffffffffff) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) (async) r3 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4}) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0) (async) close(0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f0000000880)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, r4, {0xe16}}, './config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00'}) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000a80)={"e35b50e9ff52c23c51af0eefd23f2f5a", r5, 0x0, {0x6, 0xedf}, {0x4, 0xe}, 0x9, [0x0, 0x7f, 0x0, 0x8000, 0x280000000, 0x9, 0xd3, 0x2, 0x9, 0x2, 0x3, 0xf680, 0x3, 0x7fff, 0x10000, 0x3b1]}) read(0xffffffffffffffff, &(0x7f00000009c0), 0x100) 1.429748996s ago: executing program 2 (id=427): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000000)=0xc, 0x6, 0x2) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@gettfilter={0x44, 0x2e, 0x10, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x6}, {0xfff2, 0xfff1}, {0x9, 0x3}}, [{0x8, 0xb, 0x4}, {0x0, 0xb, 0xffffffff}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x10001}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x2, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0xa, 0x4, 0x3c00000, 0xfffff800}}]}, {0x4, 0x3f}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="a00000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000300c0002800500010000000000440002802c00018014000300fe8000000000000000000000000000aa14000400000000000000000000000000000000000c000280050001000000000006000340000000000800074000000000040006"], 0xa0}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c0002800500010000000000080007400000040018000680140004"], 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.26626593s ago: executing program 2 (id=429): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000180)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000001c0)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000200)=0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = dup2(r0, r0) read$FUSE(r1, &(0x7f0000000900)={0x2020}, 0x2020) 1.209583588s ago: executing program 2 (id=430): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001800050000000000000000002d"], 0x2c}}, 0x0) sendmmsg(r0, &(0x7f00000000c0), 0x4000000000001f2, 0xfc) add_key(&(0x7f0000000140)='asymmetric\x00', 0x0, &(0x7f0000000280)="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", 0x559, 0xfffffffffffffffd) 1.209450456s ago: executing program 2 (id=431): setns(0xc9, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000e40)={0xa, 0x4e23, 0x0, @empty, 0x4}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000e80), 0x8) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000200)={0x3}, 0x4) sendto$inet6(r1, &(0x7f0000000ec0)='X', 0x34000, 0x0, &(0x7f0000000f00)={0xa, 0x4e23, 0xb00, @loopback}, 0x1c) 1.129188901s ago: executing program 2 (id=432): r0 = syz_open_dev$admmidi(&(0x7f0000000080), 0x20, 0x0) add_key(&(0x7f0000001480)='asymmetric\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r1 = socket$pptp(0x18, 0x1, 0x2) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00000014c0), 0x4) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000001540)={0x0, 0x10}}, 0x0) close(0x4) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f00000015c0)={0x0, 0x80}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$pptp(r1, &(0x7f0000001600)={0x18, 0x2, {0xfefe, @empty}}, 0x1e) connect$pptp(r1, &(0x7f0000001640)={0x18, 0x2, {0xfff8, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1e) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001680), 0xc0001, 0x0) writev(r3, &(0x7f0000001700)=[{&(0x7f0000001740)="69ad52", 0x3}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000001000)='net/ip6_mr_vif\x00') pread64(r4, &(0x7f0000001880)=""/102399, 0x18fff, 0xb5) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000ac0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000b00), 0x0, 0x10, &(0x7f0000000b40), 0xfffffffffffffffe}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r5, 0x702, 0x64, 0x0, &(0x7f0000000c00)="e460334470b8d480eb00c152082e", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./dev\x00', 0x1bf) mount(0x0, &(0x7f0000001240)='./dev\x00', &(0x7f0000001280)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000012c0)='./mnt\x00', 0x24) mount(&(0x7f0000001300)=@filename='./dev/sda1\x00', &(0x7f0000001340)='./mnt\x00', &(0x7f0000001380)='ext4\x00', 0x8410, 0x0) open$dir(&(0x7f00000013c0)='./mnt\x00', 0x0, 0x2) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000000)={@id={0x2, 0x0, @b}, 0x21, 0x0, '\x00', @c}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_INTERFACE(r6, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="0500000000000000000008000300ffc357865100318e61eff6d2907b9866f2c7f29e9dabea0a6ed4b33dba0f963ee37a90070ecdd0671d149b4013758449000000fe4373b38305e7becb9514b223f8efd47811542bda38ff44312393cb2b9577b7d5c1403bb47fdf9016c7", @ANYRES32, @ANYBLOB="3e5b3b8ab3829592390de3debab7c1326be3119913d68f776a090deb362b8e3f88e1263a1ba2731dbc5879dd18f1b1bce5aff92d228f17b6f74dbd12e4fc91575525c6fca5e96e2b5d0800000097d41a379da8d1d21e86ca450f87a45b84822e1a897b822a8f600f44cfeaec8c638b9886a6a756ba5ae04f30c11176de07ca6403cdca831db82acf01f91a699bc72ab76cf3ca26f54d0de18207fc453e410e89a88f2590f320e5a55e8473e9b790cafc403413b235c7b35b82e7448f3196e5"], 0x1c}}, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000140)=""/9, 0x9}, {&(0x7f0000001040)=""/44, 0x2c}], 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r4) 1.128913161s ago: executing program 2 (id=433): mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./sys\x00', 0x1ff) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x32b, @tick=0x180, 0xff}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xb, 0xff}}, './file0\x00'}) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_disconnect(r4) syz_usb_connect$printer(0x1, 0x2d, &(0x7f0000000280)={{0x12, 0x1, 0x110, 0x7, 0x1, 0x2, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x5, 0x70, 0x6, "", [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x9, 0x8, 0x9}}}}}]}}]}}, 0x0) connect$pppl2tp(r2, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000140)) ioctl$DVB_DEMUX_DMX_QBUF(r1, 0xc0186f3f, &(0x7f00000000c0)={0x6, 0x401, 0x80d7, 0x20000000, 0x10, 0x2}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x8, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"], &(0x7f0000002a80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000002c0)={@fallback=r7, r7, 0x2f, 0x0, 0x0, @void, @value=r7}, 0x20) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000002b00), 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000002b40)={0x2, 0x8, &(0x7f0000002c00)=ANY=[@ANYRESOCT], &(0x7f0000003dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000003e00)={@fallback=r9, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)=ANY=[@ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="2f0000001000000004000000", @ANYRES32=r10, @ANYBLOB="69bf68a23c6088360c3940e886e852b5fe7a89b7b6a5c46e6d7746e35dae59ff0e68234b3c47a9f25757c40f5562cd7ba256d801da4083964543a8303ae0707ba96f4639dcd4e0da7adaf0fdc2bc5f91e64289b76ceb7c6d0000", @ANYRES64=r11], 0x20) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000003ec0)={0x8ed, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000003e80)={@ifindex, r6, 0x21, 0x38, 0x0, @void, @void, @void, @value=r12, r11}, 0x20) write$UHID_INPUT(r6, &(0x7f00000006c0)={0x9, {"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", 0x1000}}, 0x1006) getresuid(&(0x7f0000001740), &(0x7f0000001780)=0x0, &(0x7f00000017c0)) lstat(&(0x7f0000001800)='./sys/kernel/reboot/hw_protection\x00', &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r6, &(0x7f0000001700)='./sys/kernel/reboot/hw_protection\x00', r13, r14, 0x100) mount(0x0, &(0x7f00000005c0)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/kernel/reboot/hw_protection\x00', 0x2, 0x0) close(r3) 889.756781ms ago: executing program 0 (id=434): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="3000000002030101000000000000000f02000000080001000100000209000200000000fa01"], 0x30}}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 889.277706ms ago: executing program 0 (id=435): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000300)={'filter\x00', 0x7, 0x4, 0x3c8, 0x2e0, 0x110, 0x110, 0x2e0, 0x2e0, 0x2e0, 0x4, &(0x7f0000000040), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private=0xa010102, @private=0xa010102, 0x4, 0xffffffff}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x6, 0x3}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) (async) ioctl(r0, 0x4038aa79, &(0x7f0000000000)="c25255fc9b5df20000000000000000000900000000cc35a98c5aa5766dcc8f20f71dc55756c1ad65a798f1719250c640deb8e40f") prctl$PR_MCE_KILL(0x35, 0x1, 0x2) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0xb, 0xffffffffffffffff}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) (async) lstat(&(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000a40)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@rand_addr=0x64010100, 0x4e21, 0x0, 0x4e21, 0x10, 0xa, 0xa0, 0x80, 0x5e, r4, r5}, {0x44c9, 0xffff, 0x8, 0x60e, 0x9, 0x100000001, 0x8}, {0x8, 0x948, 0x0, 0x657}, 0x8, 0x0, 0x1, 0x0, 0x1, 0x3}, {{@in=@rand_addr=0x64010100, 0x4d6, 0x6c}, 0xa, @in6=@local, 0x3506, 0x4, 0x3, 0x1, 0xe, 0x4}}, 0xe8) ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f00000000c0)=0x5}) (async) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x2e, 0xdc46c6e096fa5c5f, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffff01, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000140)=@any_dev={0x4, 0x306, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x3}}}, &(0x7f0000000740)) (async) r8 = syz_ublk_add_dev(r3, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x2e, 0x32, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4fe, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000780)=@any_dev={0x2, 0x231, 0x0, 0x0, 0x1000, 0x8e, 0x0, 0x0, 0x186}}}, &(0x7f0000000840)) ioctl$UBLK_U_CMD_SET_PARAMS(r7, 0xc0207508, &(0x7f0000000900)={r8, 0xffff, 0x70, &(0x7f0000000880)={0x70, 0x0, {0x2, 0xc, 0x9, 0x0, 0x8, 0x4, 0xffff, 0x3, 0x8000}, {0x3, 0x7f, 0x3, 0x9, 0x5}, {0x400, 0x2, 0x7, 0x4}, {0x5, 0x5, 0x9}}}) (async) close_range(r6, 0xffffffffffffffff, 0x200000000000000) 740.180465ms ago: executing program 0 (id=436): lsetxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)=@ng={0x4, 0x16, "7f68b027b1a575"}, 0x9, 0x1) (async, rerun: 32) mount(&(0x7f00000000c0)=@sr0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='efivarfs\x00', 0x8, &(0x7f0000000180)='security.evm\x00') (async, rerun: 32) syz_create_resource$futex(&(0x7f00000001c0)=0x2) (async, rerun: 32) syz_create_resource$futex(&(0x7f0000000200)=0x2) (async, rerun: 32) r0 = socket$kcm(0x29, 0x4, 0x0) recvmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000240)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/203, 0xcb}, {&(0x7f00000003c0)=""/19, 0x13}, {&(0x7f0000000400)=""/77, 0x4d}, {&(0x7f0000000480)=""/235, 0xeb}, {&(0x7f0000000580)=""/101, 0x65}], 0x5, &(0x7f0000000680)=""/249, 0xf9}, 0x1) r1 = syz_io_uring_complete(0x0, 0x0) write$cgroup_subtree(r1, &(0x7f00000007c0)={[{0x2b, 'pids'}, {0x2d, 'memory'}, {0x2d, 'perf_event'}, {0x5935822be340cbb1, 'freezer'}, {0x2b, 'net'}, {0x2b, 'perf_event'}, {0x2d, 'net_cls'}, {0x2d, 'cpuacct'}, {0x2d, 'rdma'}]}, 0x4c) r2 = open(&(0x7f0000000840)='./file0\x00', 0x604000, 0x24) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000880)={{0x1, 0x1, 0x18, r0, {0xc0b}}, './file0\x00'}) write$cgroup_subtree(r3, &(0x7f00000008c0)={[{0x0, 'cpuset'}, {0x2d, 'pids'}, {0x2d, 'cpu'}, {0x2d, 'cpuacct'}, {0x2d, 'hugetlb'}, {0x2b, 'pids'}]}, 0x2b) (async) fstat(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETQUOTA(0xffffffff80000702, &(0x7f0000000900)=@filename='./file0\x00', r4, &(0x7f00000009c0)) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000a40)={{0x2, 0x4e20, @local}, {0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}}, 0x20, {0x2, 0x4e20, @private=0xa010101}, 'netpci0\x00'}) (async, rerun: 64) syz_ublk_setup_io_uring(0x3e58, &(0x7f0000000ac0)={0x0, 0x2958, 0x200, 0x2, 0x27d, 0x0, r3}, &(0x7f0000000b40)=0x0, &(0x7f0000000b80)=0x0, &(0x7f0000000bc0)) (async, rerun: 64) syz_io_uring_setup(0x1f2f, &(0x7f0000000c00)={0x0, 0x1515, 0x80, 0x3, 0x6f, 0x0, r2}, &(0x7f0000000c80)=0x0, &(0x7f0000000cc0)=0x0, &(0x7f0000000d00)) r9 = mmap$IORING_OFF_SQES(0x0, 0x391f, 0x200000b, 0x30, r2, 0x10000000) (async) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit$UBLK(r5, r8, r9, &(0x7f0000000d80)=@ublk_get_queue_affinity_sqe={0x2e, 0x41, 0x0, r3, 0x80207501, 0x0, 0x0, 0x0, 0x0, 0x3f37, 0x0, r10, '\x00', {0x0, 0xffff, 0x8, &(0x7f0000000d40), 0x2}}) syz_io_uring_submit$UBLK(r7, r6, r9, &(0x7f0000000e40)=@ublk_get_features_sqe={0x2e, 0x6, 0x0, r1, 0x80207513, 0x0, 0x0, 0x0, 0x1, 0xbd, 0x0, 0x0, '\x00', {r11, 0xffff, 0x8, &(0x7f0000000e00)}}) (async) r13 = socket$inet(0x2, 0x1, 0x8) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r13, 0x4058587a, &(0x7f0000001040)={{r13, &(0x7f0000000ec0)='cpu', 0x48000, &(0x7f0000000f00)={@align=0x4, {0x2, 0x3ff, 0x40, 0x8}}, 0x2f, &(0x7f0000000f40)={@_ha_fsid}, &(0x7f0000000f80)=0x81}, {[0x5, 0xffffffab, 0x1, 0x5]}, 0x2, 0x71, &(0x7f0000000fc0)=""/113}) recvmsg$can_bcm(r14, &(0x7f0000001340)={&(0x7f00000010c0)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000001240)=[{&(0x7f0000001140)=""/253, 0xfd}], 0x1, &(0x7f0000001280)=""/149, 0x95}, 0x3) ioctl$BLKBSZSET(r2, 0x40081271, &(0x7f0000001380)=0xb76b) (async, rerun: 32) mount(&(0x7f00000013c0)=@sg0, &(0x7f0000001400)='./file0\x00', &(0x7f0000001440)='reiserfs\x00', 0xc40008, &(0x7f0000001480)='netpci0\x00') (rerun: 32) mmap$IORING_OFF_SQ_RING(0x0, 0x1, 0x6, 0x810, r1, 0x0) (async) clock_gettime(0x0, &(0x7f0000001500)={0x0, 0x0}) ppoll(&(0x7f00000014c0)=[{r12, 0x240}], 0x1, &(0x7f0000001540)={r15, r16+60000000}, &(0x7f0000001580)={[0x7f]}, 0x8) (async) r17 = syz_io_uring_setup(0x1abc, &(0x7f00000015c0)={0x0, 0x116b, 0x1, 0x2, 0xe9}, &(0x7f0000001640), &(0x7f0000001680), &(0x7f00000016c0)) io_uring_register$IORING_REGISTER_BUFFERS2(r17, 0xf, &(0x7f0000001800)={0x1, 0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/112, 0x70}], &(0x7f00000017c0)=[0x0, 0x0, 0x400, 0x8001, 0x8000]}, 0x20) 279.997447ms ago: executing program 1 (id=442): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x22601, 0x0) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000040), 0x208401, 0x0) ioctl$SYNC_IOC_FILE_INFO(r1, 0xc0383e04, &(0x7f00000004c0)={""/32, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}]}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0xfffffffc, "94c47900001023660f0000000000005800000000000400", 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/net/bridge0/bridge/multicast_snooping\x00', 0x1, 0x0) r4 = accept4$inet(r1, &(0x7f0000000200)={0x2, 0x0, @remote}, &(0x7f0000000500)=0x10, 0x800) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=0xc) setsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f00000005c0)={{{@in6=@empty, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e23, 0xde7c, 0x4e20, 0xc, 0x2, 0x80, 0xa0, 0x29, 0x0, r5}, {0xb074, 0x3, 0x7, 0x6, 0x397, 0x1, 0x7, 0x9}, {0x7, 0x6, 0x79c, 0x9}, 0x3, 0x0, 0x0, 0x0, 0x2, 0x23171d93f48ff4ac}, {{@in6=@local, 0x4d6, 0x6c}, 0x2, @in=@multicast1, 0x3500, 0x4, 0x1, 0xcf, 0x6, 0x0, 0x3ff}}, 0xe8) write(r3, &(0x7f00000001c0)='1', 0x1) ppoll(&(0x7f00000000c0)=[{r2, 0x201}], 0x1, 0x0, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x22601, 0x0) (async) openat$nmem0(0xffffffffffffff9c, &(0x7f0000000040), 0x208401, 0x0) (async) ioctl$SYNC_IOC_FILE_INFO(r1, 0xc0383e04, &(0x7f00000004c0)={""/32, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}]}) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0xfffffffc, "94c47900001023660f0000000000005800000000000400"}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/net/bridge0/bridge/multicast_snooping\x00', 0x1, 0x0) (async) accept4$inet(r1, &(0x7f0000000200)={0x2, 0x0, @remote}, &(0x7f0000000500)=0x10, 0x800) (async) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000580)=0xc) (async) setsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f00000005c0)={{{@in6=@empty, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e23, 0xde7c, 0x4e20, 0xc, 0x2, 0x80, 0xa0, 0x29, 0x0, r5}, {0xb074, 0x3, 0x7, 0x6, 0x397, 0x1, 0x7, 0x9}, {0x7, 0x6, 0x79c, 0x9}, 0x3, 0x0, 0x0, 0x0, 0x2, 0x23171d93f48ff4ac}, {{@in6=@local, 0x4d6, 0x6c}, 0x2, @in=@multicast1, 0x3500, 0x4, 0x1, 0xcf, 0x6, 0x0, 0x3ff}}, 0xe8) (async) write(r3, &(0x7f00000001c0)='1', 0x1) (async) ppoll(&(0x7f00000000c0)=[{r2, 0x201}], 0x1, 0x0, 0x0, 0x0) (async) 279.835014ms ago: executing program 1 (id=443): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000012c0)={'syzkaller1\x00', @link_local}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000a00)="6a3f9ab8d42d2ffd", 0x8}], 0x1}, 0x4000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtfilter={0x90, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300, 0xa}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x8000, 0x3}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x90}}, 0x0) write$tun(r0, &(0x7f00000009c0)=ANY=[@ANYBLOB="001c86dd07001000000040003f0060ec97000fc83c00fe8000000000000000000000000000aaff0200000000"], 0xffe) 139.909032ms ago: executing program 1 (id=444): bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x2}, 0x8) r0 = socket$inet_tcp(0x2, 0x1, 0x0) clock_settime(0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000000c0)={0x2, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="021800001400000000000000000000000500059b7b45e25236a11a0bbca50000000000f822870b00000000fe8000000000000000000000000000aa00000000000000000800120000000000300000000000c5595e2edf42009f9f7eaa8577369a0000000000000000000002000002000000000000000000000000fc010000000000000000000000000000050006006c0000000a0000000000000000"], 0xa0}}, 0x0) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x4e21, @loopback}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = memfd_create(0x0, 0x0) sendfile(r2, r2, 0x0, 0x7fa) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x880cc2, 0x20) r4 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setxattr$incfs_id(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), &(0x7f00000004c0)={'0000000000000000000000000000000', 0x30}, 0x20, 0x0) sendto$inet(r0, &(0x7f0000000140)="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", 0x19d, 0x12, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) recvfrom$inet(r0, &(0x7f0000000300), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) r5 = openat(r3, 0x0, 0x3af8c4, 0x4c) write(r5, &(0x7f0000000340), 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x80, &(0x7f0000000d40)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000dc0)=[@in6={0xa, 0x4e23, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}}], 0x1c) 59.410017ms ago: executing program 1 (id=445): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000f00000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 318.143µs ago: executing program 1 (id=446): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$phonet(0x23, 0x2, 0x1) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="340100001000010000c3ff000000000000000000", @ANYRES32=r1, @ANYBLOB="000000000000000014011a80400002803c000180080021000000000008001800000000000800030000000000080009000000000008000c0000000000080012000000000008001f00000000006c000a80140007"], 0x134}}, 0x0) 0s ago: executing program 1 (id=447): r0 = socket(0x10, 0x80000, 0x10003) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000001980)={0xa, 0x3ffe, 0x1, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x3f}, 0x1c) (async, rerun: 32) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000019c0)=@gcm_128={{0x304}, "33e275106ce797ba", "afc000", "1f991d9c", "d570f648c0ec6f65"}, 0x28) (async, rerun: 32) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000001a00)={0x0, 0x87cb, 0x80, 0x1, 0x26e}, &(0x7f0000001a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7c25, 0x200, 0x1, 0x5e}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x94fa, 0x2000, 0x3, 0x119}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe282, 0x8, 0x1, 0x280}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ea1, 0x4, 0x3, 0xf3}}], 0x4, &(0x7f0000002d00)={0x2e, 0x11, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x9}, 0x0, 0x0, '\x00', {0x2, 0x284, 0x0, &(0x7f0000001d00)=@buf_4k="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"}}, &(0x7f0000002d80)) r3 = syz_io_uring_setup(0x7ff, &(0x7f0000000000)={0x0, 0x690e, 0x4000, 0x1, 0xcf, 0x0, r2}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000001180)) (async) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) r5 = dup(r4) socket$can_bcm(0x1d, 0x2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) (async) ioctl$XFS_IOC_FSGEOMETRY_V1(r5, 0x80705864, &(0x7f0000001440)) (async) r6 = syz_io_uring_setup(0x7408, &(0x7f00000011c0)={0x0, 0x2346, 0x10000, 0x0, 0x4e}, &(0x7f0000001240)=0x0, &(0x7f0000001280)=0x0, &(0x7f00000012c0)=0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x5, 0x2) (async, rerun: 64) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) (async, rerun: 64) syz_io_uring_submit(r7, r8, r9, &(0x7f0000001300)=@IORING_OP_RECV_ZC={0x3a, 0x1, 0x4, r0, 0x0, 0x0, 0x3, 0x0, 0x1, {0x0, 0x0, 0x9}}) (async) io_uring_enter(r6, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) (async, rerun: 64) write$UHID_INPUT(r5, &(0x7f0000000140)={0x9b, {"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", 0xfffffffffffffebd}}, 0x1006) (rerun: 64) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x80000000000002, &(0x7f0000001380)=0x79, 0x4) getsockopt$sock_buf(r10, 0x1, 0x37, &(0x7f00000013c0)=""/122, &(0x7f00000014c0)=0x7a) bind$inet(r10, &(0x7f0000001500)={0x2, 0x4e23, @multicast1}, 0x10) (async, rerun: 32) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000001540)={0x1, &(0x7f0000001580)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) (async, rerun: 32) sendmmsg$inet(r10, &(0x7f00000015c0)=[{{&(0x7f0000001600)={0x2, 0x4e23, @empty}, 0x10, 0x0, 0x0, &(0x7f0000002dc0)=ANY=[@ANYBLOB="10000000000000000000000007080000f67558f6f353f690fcce4effed500f43dfc64f76020bfac73669a0c75de880224ef385ddfe2f46eaf6dc32521921f379"], 0x10}}], 0x1, 0x24000084) setsockopt$inet_tcp_TCP_CONGESTION(r10, 0x6, 0xd, &(0x7f0000001680)='vegas', 0x5) (async) setsockopt$sock_int(r10, 0x1, 0x8, &(0x7f00000016c0)=0xdf8, 0x4) writev(r10, &(0x7f0000001700)=[{&(0x7f0000001740)="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", 0x222}], 0x1) (async) write(r0, &(0x7f0000000100)="240000001a005f0214f9f407000904001f00000000000005000000000800040001000000", 0x24) kernel console output (not intermixed with test programs): iled to add rxe_eth0 [ 37.984841][ T5784] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 37.989862][ T5773] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 38.066655][ T5781] infiniband rxe0: set active [ 38.066669][ T5781] infiniband rxe0: added rxe_eth0 [ 38.072576][ T9] rxe_eth0 speed is unknown, defaulting to 1000 [ 38.077338][ T5781] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 38.077360][ T5781] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 38.077382][ T5781] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 38.100635][ T5781] RDS/IB: rxe0: added [ 38.100748][ T5781] smc: adding ib device rxe0 with port count 1 [ 38.100783][ T5781] smc: ib device rxe0 port 1 has no pnetid [ 38.114151][ T50] rxe_eth0 speed is unknown, defaulting to 1000 [ 38.129337][ T5781] rxe_eth0 speed is unknown, defaulting to 1000 [ 38.176444][ T50] rxe_eth0 speed is unknown, defaulting to 1000 [ 38.177287][ T854] rxe_eth0 speed is unknown, defaulting to 1000 [ 38.212614][ T5781] rxe_eth0 speed is unknown, defaulting to 1000 [ 38.298314][ T5781] rxe_eth0 speed is unknown, defaulting to 1000 [ 38.300983][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.301028][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.301183][ T5773] bridge_slave_0: entered allmulticast mode [ 38.302789][ T5773] bridge_slave_0: entered promiscuous mode [ 38.342859][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.342904][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.343059][ T5773] bridge_slave_1: entered allmulticast mode [ 38.343843][ T5773] bridge_slave_1: entered promiscuous mode [ 38.377462][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.377506][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.377655][ T5784] bridge_slave_0: entered allmulticast mode [ 38.378556][ T5784] bridge_slave_0: entered promiscuous mode [ 38.392452][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.392517][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.392665][ T5784] bridge_slave_1: entered allmulticast mode [ 38.393373][ T5784] bridge_slave_1: entered promiscuous mode [ 38.401952][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.403999][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.415597][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.415718][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.415818][ T5772] bridge_slave_0: entered allmulticast mode [ 38.417060][ T5772] bridge_slave_0: entered promiscuous mode [ 38.433059][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.438512][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.438642][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.438740][ T5772] bridge_slave_1: entered allmulticast mode [ 38.440215][ T5772] bridge_slave_1: entered promiscuous mode [ 38.444077][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.456570][ T5773] team0: Port device team_slave_0 added [ 38.479553][ T5773] team0: Port device team_slave_1 added [ 38.488670][ T5784] team0: Port device team_slave_0 added [ 38.490165][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.490261][ T5781] rxe_eth0 speed is unknown, defaulting to 1000 [ 38.491909][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.511176][ T5784] team0: Port device team_slave_1 added [ 38.517444][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.517454][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.517468][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.525802][ T5772] team0: Port device team_slave_0 added [ 38.532624][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.532634][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.532648][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.533913][ T5772] team0: Port device team_slave_1 added [ 38.542166][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.542175][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.542189][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.543199][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.543207][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.543221][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.559664][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.559675][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.559689][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.568267][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.568278][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.568292][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.595473][ T5784] hsr_slave_0: entered promiscuous mode [ 38.596031][ T5784] hsr_slave_1: entered promiscuous mode [ 38.603253][ T5773] hsr_slave_0: entered promiscuous mode [ 38.604233][ T5773] hsr_slave_1: entered promiscuous mode [ 38.604533][ T5773] debugfs: 'hsr0' already exists in 'hsr' [ 38.604543][ T5773] Cannot create hsr debugfs directory [ 38.682719][ T5772] hsr_slave_0: entered promiscuous mode [ 38.683148][ T5772] hsr_slave_1: entered promiscuous mode [ 38.683473][ T5772] debugfs: 'hsr0' already exists in 'hsr' [ 38.683483][ T5772] Cannot create hsr debugfs directory [ 38.884594][ T5784] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.887830][ T5784] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.893386][ T5784] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.897431][ T5784] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.901778][ T5784] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.905462][ T5784] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.928276][ T5784] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.930451][ T5784] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.938368][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.938426][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.938492][ T5781] bridge_slave_0: entered allmulticast mode [ 38.939209][ T5781] bridge_slave_0: entered promiscuous mode [ 38.951733][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.951776][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.951834][ T5781] bridge_slave_1: entered allmulticast mode [ 38.952511][ T5781] bridge_slave_1: entered promiscuous mode [ 38.971527][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.972900][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.981234][ T5773] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.983211][ T5773] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.992053][ T5773] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.994240][ T5773] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.994894][ T5773] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.997507][ T5773] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.998636][ T5781] team0: Port device team_slave_0 added [ 39.000150][ T5781] team0: Port device team_slave_1 added [ 39.005710][ T5773] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 39.008864][ T5773] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.024949][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.025010][ T5784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.025223][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.025267][ T5784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.031360][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.031369][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.031383][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.038211][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.038220][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.038234][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.056217][ T5772] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 39.061166][ T5772] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.062072][ T5772] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 39.070095][ T5772] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.080478][ T5772] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 39.084893][ T5772] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.085793][ T5772] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.090370][ T5772] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.104301][ T5781] hsr_slave_0: entered promiscuous mode [ 39.104797][ T5781] hsr_slave_1: entered promiscuous mode [ 39.105109][ T5781] debugfs: 'hsr0' already exists in 'hsr' [ 39.105118][ T5781] Cannot create hsr debugfs directory [ 39.106468][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.106512][ T5773] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.106700][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.106746][ T5773] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.175464][ T1172] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.176066][ T1172] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.176677][ T1172] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.176936][ T1172] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.220799][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.273078][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.277792][ T181] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.277865][ T181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.291103][ T181] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.291148][ T181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.292436][ T5781] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 39.295588][ T5781] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.296125][ T5781] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 39.300329][ T5781] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.305903][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.307723][ T5781] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 39.310830][ T5781] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.317042][ T5781] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 39.320548][ T5781] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.342760][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.362644][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.369382][ T181] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.369468][ T181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.380967][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.381032][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.394974][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.400753][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.400843][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.429199][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.429275][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.529263][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.542226][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.556540][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.556615][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.562045][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.562118][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.726580][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.764594][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.769575][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.778918][ T5784] veth0_vlan: entered promiscuous mode [ 39.787729][ T5784] veth1_vlan: entered promiscuous mode [ 39.814470][ T5783] Bluetooth: hci2: command tx timeout [ 39.814493][ T5774] Bluetooth: hci0: command tx timeout [ 39.814521][ T67] Bluetooth: hci1: command tx timeout [ 39.821900][ T5773] veth0_vlan: entered promiscuous mode [ 39.823673][ T5783] Bluetooth: hci3: command tx timeout [ 39.833205][ T5773] veth1_vlan: entered promiscuous mode [ 39.836790][ T5784] veth0_macvtap: entered promiscuous mode [ 39.841262][ T5784] veth1_macvtap: entered promiscuous mode [ 39.843198][ T5772] veth0_vlan: entered promiscuous mode [ 39.851115][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.864011][ T5772] veth1_vlan: entered promiscuous mode [ 39.866474][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.875013][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.878276][ T5773] veth0_macvtap: entered promiscuous mode [ 39.886749][ T5773] veth1_macvtap: entered promiscuous mode [ 39.895339][ T5781] veth0_vlan: entered promiscuous mode [ 39.911646][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.911864][ T5772] veth0_macvtap: entered promiscuous mode [ 39.913448][ T5781] veth1_vlan: entered promiscuous mode [ 39.921468][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.921648][ T5772] veth1_macvtap: entered promiscuous mode [ 39.944679][ T5824] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.945192][ T5824] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.945678][ T5824] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.962722][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.977379][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.977393][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.978213][ T5781] veth0_macvtap: entered promiscuous mode [ 39.982027][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.982187][ T5781] veth1_macvtap: entered promiscuous mode [ 39.985321][ T5824] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.985402][ T5824] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.985479][ T5824] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.985633][ T5824] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.985699][ T5824] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.006053][ T1172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.006072][ T1172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.013490][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.025577][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.030115][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.030128][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.065284][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.066222][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.066233][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.099939][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.099952][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.128970][ T5784] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 40.131217][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.131228][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.145309][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.145335][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.145353][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.145370][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.145388][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.145406][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.145423][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.147484][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.147494][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.161592][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.161604][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.236534][ T5946] netlink: 'syz.1.2': attribute type 7 has an invalid length. [ 40.248231][ T5946] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(9) [ 40.302784][ T5950] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5'. [ 40.302874][ T5950] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5'. [ 40.302958][ T5950] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5'. [ 40.303027][ T5950] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5'. [ 40.303101][ T5950] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5'. [ 40.303170][ T5950] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5'. [ 40.303241][ T5950] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5'. [ 40.303310][ T5950] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5'. [ 40.303379][ T5950] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5'. [ 40.303450][ T5950] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5'. [ 40.307738][ T5950] Zero length message leads to an empty skb [ 40.336081][ T5959] ip_tables: iptables: counters copy to user failed while replacing table [ 40.413704][ T5975] CIFS: VFS: UNC: path must begin with // or \\ [ 40.413715][ T5975] Malformed UNC in devname [ 40.413715][ T5975] [ 40.413748][ T5975] CIFS: VFS: Malformed UNC in devname [ 40.437969][ T5977] netlink: 'syz.0.15': attribute type 7 has an invalid length. [ 40.445305][ T5977] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(9) [ 40.634968][ T5899] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 40.689077][ T6003] netlink: 'syz.0.24': attribute type 1 has an invalid length. [ 40.750805][ T6009] loop0: detected capacity change from 0 to 4096 [ 40.763883][ T5899] usb 7-1: device descriptor read/64, error -71 [ 40.797598][ T6011] FAULT_INJECTION: forcing a failure. [ 40.797598][ T6011] name failslab, interval 1, probability 0, space 0, times 1 [ 40.797624][ T6011] CPU: 2 UID: 0 PID: 6011 Comm: syz.1.34 Not tainted syzkaller #0 PREEMPT(full) [ 40.797644][ T6011] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 40.797666][ T6011] Call Trace: [ 40.797672][ T6011] [ 40.797680][ T6011] dump_stack_lvl+0x100/0x190 [ 40.797713][ T6011] should_fail_ex.cold+0x5/0xa [ 40.797741][ T6011] should_failslab+0xc2/0x120 [ 40.797762][ T6011] kmem_cache_alloc_noprof+0x92/0x6a0 [ 40.797789][ T6011] ? netlink_deliver_tap+0x103/0xb50 [ 40.797835][ T6011] ? skb_clone+0x187/0x3f0 [ 40.797859][ T6011] skb_clone+0x187/0x3f0 [ 40.797880][ T6011] netlink_deliver_tap+0x82f/0xb50 [ 40.797905][ T6011] netlink_unicast+0x708/0x950 [ 40.797930][ T6011] ? __pfx_netlink_unicast+0x10/0x10 [ 40.797959][ T6011] netlink_sendmsg+0x9ac/0x10c0 [ 40.797984][ T6011] ? __pfx_netlink_sendmsg+0x10/0x10 [ 40.798015][ T6011] ? selinux_socket_sendmsg+0x198/0x2f0 [ 40.798045][ T6011] ? ____sys_sendmsg+0xa99/0xc30 [ 40.798068][ T6011] ____sys_sendmsg+0xa99/0xc30 [ 40.798090][ T6011] ? __pfx_netlink_sendmsg+0x10/0x10 [ 40.798114][ T6011] ? __pfx_____sys_sendmsg+0x10/0x10 [ 40.798158][ T6011] ? lock_acquire+0x1d1/0x380 [ 40.798183][ T6011] ? get_pid_task+0x2a/0x250 [ 40.798203][ T6011] ___sys_sendmsg+0x190/0x1e0 [ 40.798229][ T6011] ? __pfx____sys_sendmsg+0x10/0x10 [ 40.798254][ T6011] ? get_pid_task+0x106/0x250 [ 40.798280][ T6011] ? find_held_lock+0x2b/0x80 [ 40.798315][ T6011] __sys_sendmsg+0x160/0x210 [ 40.798335][ T6011] ? __pfx___sys_sendmsg+0x10/0x10 [ 40.798369][ T6011] do_syscall_64+0x123/0x790 [ 40.798405][ T6011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.798423][ T6011] RIP: 0033:0x7f296b59fb19 [ 40.798437][ T6011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.798453][ T6011] RSP: 002b:00007f296c534028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 40.798471][ T6011] RAX: ffffffffffffffda RBX: 00007f296b825fa0 RCX: 00007f296b59fb19 [ 40.798481][ T6011] RDX: 0000000000008840 RSI: 0000200000000280 RDI: 0000000000000003 [ 40.798492][ T6011] RBP: 00007f296c534090 R08: 0000000000000000 R09: 0000000000000000 [ 40.798497][ T6009] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 40.798503][ T6011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 40.798512][ T6011] R13: 00007f296b826038 R14: 00007f296b825fa0 R15: 00007ffd3011e598 [ 40.798537][ T6011] [ 40.798900][ T6009] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 40.798911][ T6009] ldm_validate_privheads(): Cannot find PRIVHEAD 2. [ 40.798944][ T6009] loop0: [ 40.973040][ T6015] capability: warning: `syz.0.36' uses deprecated v2 capabilities in a way that may be insecure [ 40.979305][ T6017] netlink: 'syz.3.27': attribute type 7 has an invalid length. [ 40.989089][ T6017] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(9) [ 41.013910][ T5899] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 41.031558][ T6022] usb usb9: usbfs: process 6022 (syz.0.36) did not claim interface 0 before use [ 41.032597][ T6022] device-mapper: ioctl: name not supplied when creating device [ 41.140807][ T6034] vlan0: entered promiscuous mode [ 41.147627][ T6034] team0: Port device vlan0 added [ 41.153707][ T5899] usb 7-1: device descriptor read/64, error -71 [ 41.208325][ T6041] cifs: Unknown parameter 'u' [ 41.266248][ T5899] usb usb7-port1: attempt power cycle [ 41.551730][ T6048] netlink: 'syz.3.44': attribute type 5 has an invalid length. [ 41.614176][ T5899] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 41.635056][ T5899] usb 7-1: device descriptor read/8, error -71 [ 41.814935][ T24] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 41.856279][ T6056] FAULT_INJECTION: forcing a failure. [ 41.856279][ T6056] name failslab, interval 1, probability 0, space 0, times 0 [ 41.856307][ T6056] CPU: 0 UID: 0 PID: 6056 Comm: syz.0.46 Not tainted syzkaller #0 PREEMPT(full) [ 41.856327][ T6056] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 41.856339][ T6056] Call Trace: [ 41.856345][ T6056] [ 41.856353][ T6056] dump_stack_lvl+0x100/0x190 [ 41.856389][ T6056] should_fail_ex.cold+0x5/0xa [ 41.856419][ T6056] should_failslab+0xc2/0x120 [ 41.856440][ T6056] __kmalloc_cache_noprof+0x91/0x6d0 [ 41.856465][ T6056] ? bpf_lsm_capable+0x9/0x10 [ 41.856484][ T6056] ? bpf_diag_init+0x96/0x160 [ 41.856517][ T6056] bpf_diag_init+0x96/0x160 [ 41.856545][ T6056] bpf_check+0xda4/0xa0f0 [ 41.856594][ T6056] ? __pfx_bpf_check+0x10/0x10 [ 41.856640][ T6056] ? lock_acquire+0x1d1/0x380 [ 41.856666][ T6056] ? bpf_prog_load+0x1af0/0x2b20 [ 41.856694][ T6056] ? find_held_lock+0x2b/0x80 [ 41.856713][ T6056] ? bpf_prog_load+0x1af0/0x2b20 [ 41.856745][ T6056] ? __asan_memset+0x23/0x50 [ 41.856776][ T6056] ? bpf_prog_load+0x1baf/0x2b20 [ 41.856804][ T6056] bpf_prog_load+0x1baf/0x2b20 [ 41.856839][ T6056] ? avc_has_perm_noaudit+0x11e/0x470 [ 41.856869][ T6056] ? __pfx_bpf_prog_load+0x10/0x10 [ 41.856919][ T6056] __sys_bpf+0x146f/0x4b60 [ 41.856944][ T6056] ? __pfx___sys_bpf+0x10/0x10 [ 41.856962][ T6056] ? find_held_lock+0x2b/0x80 [ 41.856982][ T6056] ? get_pid_task+0xfc/0x250 [ 41.857000][ T6056] ? get_pid_task+0xfc/0x250 [ 41.857027][ T6056] ? find_held_lock+0x2b/0x80 [ 41.857053][ T6056] ? rcu_read_lock_any_held+0x6a/0x90 [ 41.857075][ T6056] ? find_held_lock+0x2b/0x80 [ 41.857094][ T6056] ? ksys_write+0x190/0x250 [ 41.857112][ T6056] ? ksys_write+0x190/0x250 [ 41.857129][ T6056] ? lock_acquire+0x1d1/0x380 [ 41.857171][ T6056] ? fput+0x7c/0x100 [ 41.857194][ T6056] ? ksys_write+0x1ac/0x250 [ 41.857214][ T6056] ? __x64_sys_bpf+0xce/0x140 [ 41.857231][ T6056] __x64_sys_bpf+0xce/0x140 [ 41.857250][ T6056] ? do_syscall_64+0xae/0x790 [ 41.857271][ T6056] do_syscall_64+0x123/0x790 [ 41.857292][ T6056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.857312][ T6056] RIP: 0033:0x7f76b3b9fb19 [ 41.857327][ T6056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 41.857345][ T6056] RSP: 002b:00007f76b4b00028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 41.857364][ T6056] RAX: ffffffffffffffda RBX: 00007f76b3e25fa0 RCX: 00007f76b3b9fb19 [ 41.857377][ T6056] RDX: 0000000000000094 RSI: 0000200000002c40 RDI: 0000000000000005 [ 41.857389][ T6056] RBP: 00007f76b4b00090 R08: 0000000000000000 R09: 0000000000000000 [ 41.857400][ T6056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 41.857412][ T6056] R13: 00007f76b3e26038 R14: 00007f76b3e25fa0 R15: 00007ffc25c06ea8 [ 41.857438][ T6056] [ 41.883633][ T5899] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 41.893780][ T5783] Bluetooth: hci3: command tx timeout [ 41.893834][ T5783] Bluetooth: hci0: command tx timeout [ 41.903885][ T67] Bluetooth: hci1: command tx timeout [ 41.905393][ T5899] usb 7-1: device descriptor read/8, error -71 [ 41.945670][ T6060] syzkaller0: entered promiscuous mode [ 41.945683][ T6060] syzkaller0: entered allmulticast mode [ 41.963681][ T24] usb 8-1: Using ep0 maxpacket: 32 [ 41.964133][ T24] usb 8-1: New USB device found: idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 41.965538][ T24] usb 8-1: config 0 has an invalid interface number: 119 but max is 0 [ 41.965552][ T24] usb 8-1: config 0 has no interface number 0 [ 41.965571][ T24] usb 8-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 41.965582][ T24] usb 8-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 41.965594][ T24] usb 8-1: config 0 interface 119 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 41.965609][ T24] usb 8-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 41.965622][ T24] usb 8-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 41.967315][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.967340][ T24] usb 8-1: Product: syz [ 41.967353][ T24] usb 8-1: Manufacturer: syz [ 41.967367][ T24] usb 8-1: SerialNumber: syz [ 41.970129][ T24] usb 8-1: config 0 descriptor?? [ 41.973187][ T6050] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 41.982623][ T24] input: bcm5974 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.119/input/input6 [ 42.013785][ T5899] usb usb7-port1: unable to enumerate USB device [ 42.179050][ T24] usb 8-1: USB disconnect, device number 2 [ 42.748794][ T6072] syzkaller0: entered promiscuous mode [ 42.748808][ T6072] syzkaller0: entered allmulticast mode [ 42.751579][ T6072] tc mirred: Loop (syzkaller0:egress --> syzkaller0:egress) [ 42.996346][ T6074] netlink: 'syz.1.54': attribute type 1 has an invalid length. [ 43.002589][ T6074] vlan2: entered allmulticast mode [ 43.002605][ T6074] virt_wifi0: entered allmulticast mode [ 43.051929][ T6078] FAULT_INJECTION: forcing a failure. [ 43.051929][ T6078] name failslab, interval 1, probability 0, space 0, times 0 [ 43.051952][ T6078] CPU: 2 UID: 0 PID: 6078 Comm: syz.0.56 Not tainted syzkaller #0 PREEMPT(full) [ 43.051966][ T6078] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 43.051974][ T6078] Call Trace: [ 43.051978][ T6078] [ 43.051983][ T6078] dump_stack_lvl+0x100/0x190 [ 43.052009][ T6078] should_fail_ex.cold+0x5/0xa [ 43.052028][ T6078] should_failslab+0xc2/0x120 [ 43.052043][ T6078] __kvmalloc_node_noprof+0x113/0x9b0 [ 43.052063][ T6078] ? __pfx___mutex_lock+0x10/0x10 [ 43.052076][ T6078] ? lockdep_hardirqs_on+0x7d/0x110 [ 43.052088][ T6078] ? nf_hook_entries_grow+0x255/0x870 [ 43.052107][ T6078] nf_hook_entries_grow+0x255/0x870 [ 43.052123][ T6078] ? __pfx___call_rcu_common.constprop.0+0x10/0x10 [ 43.052150][ T6078] __nf_register_net_hook+0x116/0x850 [ 43.052168][ T6078] nf_register_net_hook+0xdb/0x170 [ 43.052184][ T6078] nf_register_net_hooks+0x5d/0xd0 [ 43.052200][ T6078] nf_ct_netns_do_get+0x387/0x610 [ 43.052218][ T6078] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 43.052234][ T6078] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 43.052253][ T6078] ? rcu_is_watching+0x13/0xc0 [ 43.052270][ T6078] nf_ct_netns_get+0x3d/0x160 [ 43.052285][ T6078] connmark_tg_check+0x60/0xd0 [ 43.052300][ T6078] ? __pfx_connmark_tg_check+0x10/0x10 [ 43.052315][ T6078] xt_check_target+0x117/0x1c0 [ 43.052328][ T6078] find_check_entry.isra.0+0x79c/0x990 [ 43.052346][ T6078] ? __pfx_find_check_entry.isra.0+0x10/0x10 [ 43.052365][ T6078] ? kasan_quarantine_put+0x104/0x240 [ 43.052409][ T6078] ? translate_table+0xaf2/0x1630 [ 43.052423][ T6078] ? kfree+0x22b/0x6d0 [ 43.052438][ T6078] ? xt_check_table_hooks+0x206/0x330 [ 43.052465][ T6078] translate_table+0xbcd/0x1630 [ 43.052486][ T6078] ? __pfx_translate_table+0x10/0x10 [ 43.052506][ T6078] do_ipt_set_ctl+0x689/0xcf0 [ 43.052521][ T6078] ? nf_sockopt_find.isra.0+0x222/0x290 [ 43.052539][ T6078] ? nf_sockopt_find.isra.0+0x222/0x290 [ 43.052560][ T6078] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 43.052574][ T6078] ? __mutex_unlock_slowpath+0x35d/0x930 [ 43.052587][ T6078] ? sockopt_release_sock+0x5c/0x70 [ 43.052602][ T6078] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 43.052621][ T6078] ? nf_sockopt_find.isra.0+0x222/0x290 [ 43.052640][ T6078] nf_setsockopt+0x8d/0xf0 [ 43.052658][ T6078] ip_setsockopt+0xcb/0xf0 [ 43.052675][ T6078] udp_setsockopt+0x64/0xb0 [ 43.052686][ T6078] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 43.052704][ T6078] do_sock_setsockopt+0xf3/0x1d0 [ 43.052722][ T6078] __sys_setsockopt+0x195/0x220 [ 43.052738][ T6078] __x64_sys_setsockopt+0xbd/0x160 [ 43.052750][ T6078] ? do_syscall_64+0xae/0x790 [ 43.052761][ T6078] ? lockdep_hardirqs_on+0x7d/0x110 [ 43.052773][ T6078] do_syscall_64+0x123/0x790 [ 43.052786][ T6078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.052799][ T6078] RIP: 0033:0x7f76b3b9fb19 [ 43.052810][ T6078] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.052821][ T6078] RSP: 002b:00007f76b4b00028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 43.052833][ T6078] RAX: ffffffffffffffda RBX: 00007f76b3e25fa0 RCX: 00007f76b3b9fb19 [ 43.052840][ T6078] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000004 [ 43.052847][ T6078] RBP: 00007f76b3c37af8 R08: 0000000000000230 R09: 0000000000000000 [ 43.052854][ T6078] R10: 0000200000000480 R11: 0000000000000246 R12: 0000000000000000 [ 43.052861][ T6078] R13: 00007f76b3e26038 R14: 00007f76b3e25fa0 R15: 00007ffc25c06ea8 [ 43.052876][ T6078] [ 43.053099][ T6078] cannot load conntrack support for proto=2 [ 43.092662][ T6080] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 43.100424][ T42] kauditd_printk_skb: 107 callbacks suppressed [ 43.100436][ T42] audit: type=1400 audit(1793638853.254:271): avc: denied { create } for pid=6079 comm="syz.0.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 43.101136][ T42] audit: type=1400 audit(1793638853.254:272): avc: denied { read } for pid=6079 comm="syz.0.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 43.101892][ T42] audit: type=1400 audit(1793638853.254:273): avc: denied { read } for pid=6079 comm="syz.0.57" name="fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 43.102229][ T42] audit: type=1400 audit(1793638853.254:274): avc: denied { open } for pid=6079 comm="syz.0.57" path="/dev/fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 43.102664][ T42] audit: type=1400 audit(1793638853.254:275): avc: denied { ioctl } for pid=6079 comm="syz.0.57" path="/dev/fb0" dev="devtmpfs" ino=638 ioctlcmd=0x4600 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 43.104089][ T6080] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 43.160634][ T6086] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 43.207785][ T42] audit: type=1400 audit(1793638853.364:276): avc: denied { write } for pid=6083 comm="syz.1.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 43.279689][ T6095] netlink: 'syz.1.63': attribute type 1 has an invalid length. [ 43.407625][ T42] audit: type=1400 audit(1793638853.564:277): avc: denied { bind } for pid=6100 comm="syz.2.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 43.407955][ T42] audit: type=1400 audit(1793638853.564:278): avc: denied { write } for pid=6100 comm="syz.2.66" path="socket:[11289]" dev="sockfs" ino=11289 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 43.408057][ T6101] Bluetooth: MGMT ver 1.23 [ 43.422357][ T42] audit: type=1400 audit(1793638853.574:279): avc: denied { setopt } for pid=6102 comm="syz.1.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 43.427629][ T6104] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_team, syncid = 4, id = 0 [ 43.427873][ T6103] IPVS: stopping backup sync thread 6104 ... [ 43.460440][ T42] audit: type=1400 audit(1793638853.614:280): avc: denied { read write } for pid=6109 comm="syz.2.69" name="nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 43.654228][ T5783] Bluetooth: hci2: command tx timeout [ 43.831919][ T6149] FAULT_INJECTION: forcing a failure. [ 43.831919][ T6149] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 43.831939][ T6149] CPU: 1 UID: 0 PID: 6149 Comm: syz.3.81 Not tainted syzkaller #0 PREEMPT(full) [ 43.831953][ T6149] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 43.831960][ T6149] Call Trace: [ 43.831964][ T6149] [ 43.831969][ T6149] dump_stack_lvl+0x100/0x190 [ 43.831991][ T6149] should_fail_ex.cold+0x5/0xa [ 43.832009][ T6149] _copy_to_user+0x32/0xd0 [ 43.832025][ T6149] simple_read_from_buffer+0xcb/0x170 [ 43.832041][ T6149] proc_fail_nth_read+0x1af/0x230 [ 43.832072][ T6149] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 43.832090][ T6149] ? rw_verify_area+0xce/0x6d0 [ 43.832106][ T6149] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 43.832121][ T6149] vfs_read+0x1e4/0xb40 [ 43.832132][ T6149] ? lock_acquire+0x1d1/0x380 [ 43.832148][ T6149] ? __fget_files+0x34/0x3d0 [ 43.832161][ T6149] ? __pfx_vfs_read+0x10/0x10 [ 43.832171][ T6149] ? find_held_lock+0x2b/0x80 [ 43.832183][ T6149] ? __fget_files+0x215/0x3d0 [ 43.832199][ T6149] ? __fget_files+0x21f/0x3d0 [ 43.832216][ T6149] ksys_read+0x12a/0x250 [ 43.832226][ T6149] ? __pfx_ksys_read+0x10/0x10 [ 43.832236][ T6149] ? v4l2_ioctl+0x1c5/0x250 [ 43.832255][ T6149] do_syscall_64+0x123/0x790 [ 43.832269][ T6149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.832281][ T6149] RIP: 0033:0x7f510e56034e [ 43.832290][ T6149] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 43.832301][ T6149] RSP: 002b:00007f510f493fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 43.832312][ T6149] RAX: ffffffffffffffda RBX: 00007f510f4946c0 RCX: 00007f510e56034e [ 43.832319][ T6149] RDX: 000000000000000f RSI: 00007f510f4940a0 RDI: 0000000000000004 [ 43.832326][ T6149] RBP: 00007f510f494090 R08: 0000000000000000 R09: 0000000000000000 [ 43.832332][ T6149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.832339][ T6149] R13: 00007f510e826038 R14: 00007f510e825fa0 R15: 00007fff80c45428 [ 43.832354][ T6149] [ 43.973859][ T5774] Bluetooth: hci3: command tx timeout [ 43.974903][ T5783] Bluetooth: hci0: command tx timeout [ 43.984022][ T5783] Bluetooth: hci1: command tx timeout [ 44.295389][ T5567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 44.309149][ T6167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 44.309475][ T6167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 44.309723][ T6167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 44.310185][ T6167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 44.310334][ T6167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 44.320664][ T6167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 44.320783][ T6167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 44.672830][ T6179] syzkaller0: entered promiscuous mode [ 44.672844][ T6179] syzkaller0: entered allmulticast mode [ 44.812050][ T6190] xt_CT: You must specify a L4 protocol and not use inversions on it [ 44.822283][ T6192] syz.3.95 uses obsolete (PF_INET,SOCK_PACKET) [ 44.826476][ T6193] netlink: 'syz.1.96': attribute type 10 has an invalid length. [ 44.893166][ T6197] syz.2.98: attempt to access beyond end of device [ 44.893166][ T6197] ram4: rw=2048, sector=8191, nr_sectors = 8 limit=8192 [ 44.904090][ T6197] device-mapper: table: 248:0: integrity: Error reading superblock (-EIO) [ 44.904113][ T6197] device-mapper: ioctl: error adding target to table [ 45.025139][ T6217] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=257 sclass=netlink_route_socket pid=6217 comm=syz.1.105 [ 45.047665][ T6220] program syz.2.103 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 45.100661][ T6225] warning: `syz.1.108' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 45.188695][ T6231] syzkaller0: entered promiscuous mode [ 45.188714][ T6231] syzkaller0: entered allmulticast mode [ 45.249474][ T6233] bridge_slave_0: left allmulticast mode [ 45.249491][ T6233] bridge_slave_0: left promiscuous mode [ 45.249599][ T6233] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.253890][ T6233] bridge_slave_1: left allmulticast mode [ 45.253975][ T6233] bridge_slave_1: left promiscuous mode [ 45.254071][ T6233] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.265808][ T6233] bond0: (slave bond_slave_0): Releasing backup interface [ 45.279568][ T6233] bond0: (slave bond_slave_1): Releasing backup interface [ 45.286354][ T6233] team0: Port device team_slave_0 removed [ 45.291445][ T6233] team0: Port device team_slave_1 removed [ 45.291825][ T6233] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.291836][ T6233] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.293433][ T6233] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.293444][ T6233] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.310563][ T6234] vlan0: entered promiscuous mode [ 45.316243][ T6234] team0: Port device vlan0 added [ 45.321724][ T6233] tipc: Started in network mode [ 45.321740][ T6233] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 45.322051][ T6233] tipc: Enabled bearer , priority 0 [ 45.388736][ T6242] __nla_validate_parse: 31 callbacks suppressed [ 45.388750][ T6242] netlink: 56 bytes leftover after parsing attributes in process `syz.1.116'. [ 45.415177][ T67] Bluetooth: hci0: Opcode 0x0c13 failed: -110 [ 45.542834][ T6259] netlink: 28 bytes leftover after parsing attributes in process `syz.0.121'. [ 45.560369][ T6261] syzkaller0: entered promiscuous mode [ 45.560383][ T6261] syzkaller0: entered allmulticast mode [ 45.591809][ T6263] netlink: 64 bytes leftover after parsing attributes in process `syz.0.123'. [ 45.621571][ T6265] syzkaller0: entered promiscuous mode [ 45.621585][ T6265] syzkaller0: entered allmulticast mode [ 45.650200][ T6267] net_ratelimit: 7 callbacks suppressed [ 45.650212][ T6267] ip_tables: iptables: counters copy to user failed while replacing table [ 45.734335][ T67] Bluetooth: hci2: command tx timeout [ 45.836304][ T6213] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 45.909323][ T6297] jffs2: notice: (6297) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 45.945360][ T6301] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 46.054226][ T67] Bluetooth: hci3: command tx timeout [ 46.054249][ T67] Bluetooth: hci0: command 0x0419 tx timeout [ 46.154871][ T5863] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 46.295023][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 46.304338][ T5863] usb 7-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00 [ 46.305486][ T5863] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 46.305518][ T5863] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 46.305532][ T5863] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 46.305552][ T5863] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.348548][ T6305] netlink: 32 bytes leftover after parsing attributes in process `syz.0.137'. [ 46.348564][ T6305] netlink: 40 bytes leftover after parsing attributes in process `syz.0.137'. [ 46.397161][ T6309] FAULT_INJECTION: forcing a failure. [ 46.397161][ T6309] name failslab, interval 1, probability 0, space 0, times 0 [ 46.397180][ T6309] CPU: 1 UID: 0 PID: 6309 Comm: syz.0.139 Not tainted syzkaller #0 PREEMPT(full) [ 46.397193][ T6309] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 46.397200][ T6309] Call Trace: [ 46.397204][ T6309] [ 46.397208][ T6309] dump_stack_lvl+0x100/0x190 [ 46.397231][ T6309] should_fail_ex.cold+0x5/0xa [ 46.397249][ T6309] should_failslab+0xc2/0x120 [ 46.397262][ T6309] __kmalloc_cache_node_noprof+0x94/0x710 [ 46.397282][ T6309] ? __get_vm_area_node+0x124/0x350 [ 46.397295][ T6309] __get_vm_area_node+0x124/0x350 [ 46.397306][ T6309] ? bpf_prog_load+0x1baf/0x2b20 [ 46.397325][ T6309] __vmalloc_node_range_noprof+0x2ad/0x1440 [ 46.397338][ T6309] ? bpf_check+0x1c2b/0xa0f0 [ 46.397359][ T6309] ? bpf_check+0x1c2b/0xa0f0 [ 46.397380][ T6309] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 46.397395][ T6309] ? avc_has_perm_noaudit+0x145/0x470 [ 46.397410][ T6309] ? bpf_check+0x1c2b/0xa0f0 [ 46.397427][ T6309] __vmalloc_node_noprof+0xad/0xf0 [ 46.397439][ T6309] ? bpf_check+0x1c2b/0xa0f0 [ 46.397457][ T6309] __vmalloc_noprof+0xa3/0x120 [ 46.397469][ T6309] ? __pfx___vmalloc_noprof+0x10/0x10 [ 46.397483][ T6309] ? bpf_lsm_bpf_prog_load+0x9/0x10 [ 46.397494][ T6309] ? security_bpf_prog_load+0x10f/0x2f0 [ 46.397511][ T6309] ? bpf_vlog_init+0x118/0x150 [ 46.397523][ T6309] bpf_check+0x1c2b/0xa0f0 [ 46.397551][ T6309] ? __pfx_bpf_check+0x10/0x10 [ 46.397587][ T6309] ? lock_acquire+0x1d1/0x380 [ 46.397602][ T6309] ? bpf_prog_load+0x1af0/0x2b20 [ 46.397619][ T6309] ? find_held_lock+0x2b/0x80 [ 46.397632][ T6309] ? bpf_prog_load+0x1af0/0x2b20 [ 46.397651][ T6309] ? __asan_memset+0x23/0x50 [ 46.397669][ T6309] ? bpf_prog_load+0x1baf/0x2b20 [ 46.397686][ T6309] bpf_prog_load+0x1baf/0x2b20 [ 46.397702][ T6309] ? avc_has_perm_noaudit+0x11e/0x470 [ 46.397719][ T6309] ? __pfx_bpf_prog_load+0x10/0x10 [ 46.397748][ T6309] __sys_bpf+0x146f/0x4b60 [ 46.397762][ T6309] ? __pfx___sys_bpf+0x10/0x10 [ 46.397790][ T6309] ? find_held_lock+0x2b/0x80 [ 46.397804][ T6309] ? get_pid_task+0xfc/0x250 [ 46.397814][ T6309] ? get_pid_task+0xfc/0x250 [ 46.397829][ T6309] ? find_held_lock+0x2b/0x80 [ 46.397844][ T6309] ? rcu_read_lock_any_held+0x6a/0x90 [ 46.397857][ T6309] ? find_held_lock+0x2b/0x80 [ 46.397869][ T6309] ? ksys_write+0x190/0x250 [ 46.397879][ T6309] ? ksys_write+0x190/0x250 [ 46.397889][ T6309] ? lock_acquire+0x1d1/0x380 [ 46.397914][ T6309] ? fput+0x7c/0x100 [ 46.397928][ T6309] ? ksys_write+0x1ac/0x250 [ 46.397940][ T6309] ? __x64_sys_bpf+0xce/0x140 [ 46.397950][ T6309] __x64_sys_bpf+0xce/0x140 [ 46.397961][ T6309] ? do_syscall_64+0xae/0x790 [ 46.397977][ T6309] do_syscall_64+0x123/0x790 [ 46.397990][ T6309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.398002][ T6309] RIP: 0033:0x7f76b3b9fb19 [ 46.398011][ T6309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 46.398022][ T6309] RSP: 002b:00007f76b4b00028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 46.398034][ T6309] RAX: ffffffffffffffda RBX: 00007f76b3e25fa0 RCX: 00007f76b3b9fb19 [ 46.398041][ T6309] RDX: 0000000000000094 RSI: 0000200000000500 RDI: 0000000000000005 [ 46.398047][ T6309] RBP: 00007f76b4b00090 R08: 0000000000000000 R09: 0000000000000000 [ 46.398054][ T6309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 46.398061][ T6309] R13: 00007f76b3e26038 R14: 00007f76b3e25fa0 R15: 00007ffc25c06ea8 [ 46.398075][ T6309] [ 46.398533][ T6309] syz.0.139: vmalloc error: size 200, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 46.398571][ T6309] CPU: 1 UID: 0 PID: 6309 Comm: syz.0.139 Not tainted syzkaller #0 PREEMPT(full) [ 46.398584][ T6309] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 46.398590][ T6309] Call Trace: [ 46.398594][ T6309] [ 46.398598][ T6309] dump_stack_lvl+0x100/0x190 [ 46.398617][ T6309] warn_alloc.cold+0x9e/0xb2 [ 46.398630][ T6309] ? __pfx_warn_alloc+0x10/0x10 [ 46.398645][ T6309] ? __kasan_kmalloc+0x8a/0xb0 [ 46.398660][ T6309] ? __get_vm_area_node+0x22b/0x350 [ 46.398674][ T6309] __vmalloc_node_range_noprof+0xdc6/0x1440 [ 46.398707][ T6309] ? bpf_check+0x1c2b/0xa0f0 [ 46.398730][ T6309] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 46.398745][ T6309] ? avc_has_perm_noaudit+0x145/0x470 [ 46.398759][ T6309] ? bpf_check+0x1c2b/0xa0f0 [ 46.398776][ T6309] __vmalloc_node_noprof+0xad/0xf0 [ 46.398788][ T6309] ? bpf_check+0x1c2b/0xa0f0 [ 46.398806][ T6309] __vmalloc_noprof+0xa3/0x120 [ 46.398818][ T6309] ? __pfx___vmalloc_noprof+0x10/0x10 [ 46.398832][ T6309] ? bpf_lsm_bpf_prog_load+0x9/0x10 [ 46.398842][ T6309] ? security_bpf_prog_load+0x10f/0x2f0 [ 46.398859][ T6309] ? bpf_vlog_init+0x118/0x150 [ 46.398872][ T6309] bpf_check+0x1c2b/0xa0f0 [ 46.398899][ T6309] ? __pfx_bpf_check+0x10/0x10 [ 46.398917][ T6309] ? lock_acquire+0x1d1/0x380 [ 46.398932][ T6309] ? bpf_prog_load+0x1af0/0x2b20 [ 46.398949][ T6309] ? find_held_lock+0x2b/0x80 [ 46.398961][ T6309] ? bpf_prog_load+0x1af0/0x2b20 [ 46.398984][ T6309] ? __asan_memset+0x23/0x50 [ 46.399003][ T6309] ? bpf_prog_load+0x1baf/0x2b20 [ 46.399020][ T6309] bpf_prog_load+0x1baf/0x2b20 [ 46.399049][ T6309] ? avc_has_perm_noaudit+0x11e/0x470 [ 46.399066][ T6309] ? __pfx_bpf_prog_load+0x10/0x10 [ 46.399095][ T6309] __sys_bpf+0x146f/0x4b60 [ 46.399108][ T6309] ? __pfx___sys_bpf+0x10/0x10 [ 46.399118][ T6309] ? find_held_lock+0x2b/0x80 [ 46.399130][ T6309] ? get_pid_task+0xfc/0x250 [ 46.399140][ T6309] ? get_pid_task+0xfc/0x250 [ 46.399154][ T6309] ? find_held_lock+0x2b/0x80 [ 46.399169][ T6309] ? rcu_read_lock_any_held+0x6a/0x90 [ 46.399193][ T6309] ? find_held_lock+0x2b/0x80 [ 46.399207][ T6309] ? ksys_write+0x190/0x250 [ 46.399217][ T6309] ? ksys_write+0x190/0x250 [ 46.399227][ T6309] ? lock_acquire+0x1d1/0x380 [ 46.399252][ T6309] ? fput+0x7c/0x100 [ 46.399265][ T6309] ? ksys_write+0x1ac/0x250 [ 46.399277][ T6309] ? __x64_sys_bpf+0xce/0x140 [ 46.399287][ T6309] __x64_sys_bpf+0xce/0x140 [ 46.399298][ T6309] ? do_syscall_64+0xae/0x790 [ 46.399310][ T6309] do_syscall_64+0x123/0x790 [ 46.399322][ T6309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.399333][ T6309] RIP: 0033:0x7f76b3b9fb19 [ 46.399342][ T6309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 46.399353][ T6309] RSP: 002b:00007f76b4b00028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 46.399363][ T6309] RAX: ffffffffffffffda RBX: 00007f76b3e25fa0 RCX: 00007f76b3b9fb19 [ 46.399370][ T6309] RDX: 0000000000000094 RSI: 0000200000000500 RDI: 0000000000000005 [ 46.399377][ T6309] RBP: 00007f76b4b00090 R08: 0000000000000000 R09: 0000000000000000 [ 46.399383][ T6309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 46.399390][ T6309] R13: 00007f76b3e26038 R14: 00007f76b3e25fa0 R15: 00007ffc25c06ea8 [ 46.399404][ T6309] [ 46.399494][ T6309] Mem-Info: [ 46.399501][ T6309] active_anon:7894 inactive_anon:0 isolated_anon:0 [ 46.399501][ T6309] active_file:0 inactive_file:56118 isolated_file:0 [ 46.399501][ T6309] unevictable:1000 dirty:1969 writeback:0 [ 46.399501][ T6309] slab_reclaimable:12254 slab_unreclaimable:68694 [ 46.399501][ T6309] mapped:24945 shmem:1557 pagetables:1164 [ 46.399501][ T6309] sec_pagetables:298 bounce:0 [ 46.399501][ T6309] kernel_misc_reclaimable:0 [ 46.399501][ T6309] free:447490 free_pcp:21122 free_cma:0 [ 46.399529][ T6309] Node 0 active_anon:31576kB inactive_anon:0kB active_file:0kB inactive_file:224276kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:99780kB dirty:7876kB writeback:0kB shmem:4228kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13280kB pagetables:4444kB sec_pagetables:1192kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 46.399559][ T6309] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:212kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 46.399587][ T6309] Node 0 DMA free:15360kB boost:0kB min:344kB low:428kB high:512kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 46.399618][ T6309] lowmem_reserve[]: 0 1201 1201 1201 1201 [ 46.399638][ T6309] Node 0 DMA32 free:131940kB boost:0kB min:27068kB low:33832kB high:40596kB reserved_highatomic:0kB free_highatomic:0kB active_anon:31576kB inactive_anon:0kB active_file:0kB inactive_file:224276kB unevictable:2000kB writepending:7876kB zspages:0kB present:2080628kB managed:1230740kB mlocked:0kB bounce:0kB free_pcp:81528kB local_pcp:19272kB free_cma:0kB [ 46.399673][ T6309] lowmem_reserve[]: 0 0 0 0 0 [ 46.399699][ T6309] Node 1 Normal free:1642660kB boost:0kB min:40168kB low:50208kB high:60248kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:2000kB writepending:0kB zspages:0kB present:2097152kB managed:1781880kB mlocked:0kB bounce:0kB free_pcp:2960kB local_pcp:224kB free_cma:0kB [ 46.399743][ T6309] lowmem_reserve[]: 0 0 0 0 0 [ 46.399761][ T6309] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 46.399824][ T6309] Node 0 DMA32: 33*4kB (M) 88*8kB (UME) 46*16kB (UME) 16*32kB (UME) 12*64kB (M) 6*128kB (UME) 5*256kB (M) 8*512kB (UME) 4*1024kB (ME) 4*2048kB (UM) 27*4096kB (M) = 131876kB [ 46.399909][ T6309] Node 1 Normal: 1*4kB (U) 4*8kB (UM) 5*16kB (UM) 6*32kB (UM) 4*64kB (UM) 5*128kB (UM) 0*256kB 4*512kB (UM) 1*1024kB (U) 2*2048kB (UM) 399*4096kB (M) = 1642676kB [ 46.399995][ T6309] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 46.400005][ T6309] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 46.400013][ T6309] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 46.400022][ T6309] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 46.400030][ T6309] 57671 total pagecache pages [ 46.400034][ T6309] 0 pages in swap cache [ 46.400038][ T6309] Free swap = 124996kB [ 46.400042][ T6309] Total swap = 124996kB [ 46.400046][ T6309] 1048443 pages RAM [ 46.400050][ T6309] 0 pages HighMem/MovableOnly [ 46.400053][ T6309] 291448 pages reserved [ 46.400057][ T6309] 0 pages cma reserved [ 46.605709][ T854] tipc: Node number set to 11578026 [ 46.723527][ T5863] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 46.723541][ T5863] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 46.733010][ T5863] cxacru 7-1:1.0: probe with driver cxacru failed with error -71 [ 46.740254][ T5863] usb 7-1: USB disconnect, device number 6 [ 46.784509][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 46.789733][ T6335] rxe_eth0 speed is unknown, defaulting to 1000 [ 46.938386][ T6359] smbdirect: ib_dev[rxe0] renamed to [syz1] [ 47.117669][ T6376] FAULT_INJECTION: forcing a failure. [ 47.117669][ T6376] name failslab, interval 1, probability 0, space 0, times 0 [ 47.117690][ T6376] CPU: 0 UID: 0 PID: 6376 Comm: syz.1.158 Not tainted syzkaller #0 PREEMPT(full) [ 47.117703][ T6376] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 47.117711][ T6376] Call Trace: [ 47.117715][ T6376] [ 47.117719][ T6376] dump_stack_lvl+0x100/0x190 [ 47.117742][ T6376] should_fail_ex.cold+0x5/0xa [ 47.117760][ T6376] should_failslab+0xc2/0x120 [ 47.117811][ T6376] __kvmalloc_node_noprof+0x113/0x9b0 [ 47.117831][ T6376] ? snd_pcm_oss_change_params_locked+0x2280/0x39f0 [ 47.117844][ T6376] ? snd_pcm_oss_change_params_locked+0x22d6/0x39f0 [ 47.117855][ T6376] ? snd_pcm_oss_change_params_locked+0x230e/0x39f0 [ 47.117870][ T6376] snd_pcm_oss_change_params_locked+0x230e/0x39f0 [ 47.117888][ T6376] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 47.117900][ T6376] ? __pfx___mutex_lock+0x10/0x10 [ 47.117923][ T6376] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 47.117938][ T6376] snd_pcm_oss_get_active_substream+0x175/0x1d0 [ 47.117953][ T6376] snd_pcm_oss_ioctl+0x25aa/0x3790 [ 47.117967][ T6376] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 47.117982][ T6376] ? selinux_file_ioctl+0x1e0/0x290 [ 47.118000][ T6376] ? selinux_file_ioctl+0x1e7/0x290 [ 47.118018][ T6376] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 47.118031][ T6376] __x64_sys_ioctl+0x18e/0x210 [ 47.118051][ T6376] do_syscall_64+0x123/0x790 [ 47.118064][ T6376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.118076][ T6376] RIP: 0033:0x7f296b59fb19 [ 47.118086][ T6376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.118096][ T6376] RSP: 002b:00007f296c534028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 47.118108][ T6376] RAX: ffffffffffffffda RBX: 00007f296b825fa0 RCX: 00007f296b59fb19 [ 47.118116][ T6376] RDX: 0000200000000040 RSI: 00000000c0045005 RDI: 0000000000000003 [ 47.118122][ T6376] RBP: 00007f296c534090 R08: 0000000000000000 R09: 0000000000000000 [ 47.118129][ T6376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 47.118135][ T6376] R13: 00007f296b826038 R14: 00007f296b825fa0 R15: 00007ffd3011e598 [ 47.118150][ T6376] [ 47.208167][ T6382] FAULT_INJECTION: forcing a failure. [ 47.208167][ T6382] name failslab, interval 1, probability 0, space 0, times 0 [ 47.208188][ T6382] CPU: 2 UID: 60928 PID: 6382 Comm: syz.3.161 Not tainted syzkaller #0 PREEMPT(full) [ 47.208201][ T6382] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 47.208208][ T6382] Call Trace: [ 47.208212][ T6382] [ 47.208217][ T6382] dump_stack_lvl+0x100/0x190 [ 47.208240][ T6382] should_fail_ex.cold+0x5/0xa [ 47.208259][ T6382] should_failslab+0xc2/0x120 [ 47.208273][ T6382] kmem_cache_alloc_noprof+0x92/0x6a0 [ 47.208290][ T6382] ? __pfx_map_id_range_down+0x10/0x10 [ 47.208309][ T6382] ? security_inode_alloc+0x3b/0x2c0 [ 47.208329][ T6382] security_inode_alloc+0x3b/0x2c0 [ 47.208345][ T6382] inode_init_always_gfp+0xc75/0xfb0 [ 47.208361][ T6382] ? __pfx_ovl_inode_test+0x10/0x10 [ 47.208399][ T6382] ? __pfx_ovl_inode_set+0x10/0x10 [ 47.208412][ T6382] alloc_inode+0x8e/0x250 [ 47.208430][ T6382] iget5_locked+0x5f/0xa0 [ 47.208441][ T6382] ovl_get_inode+0xf5d/0x1a20 [ 47.208460][ T6382] ? __pfx_ovl_get_inode+0x10/0x10 [ 47.208475][ T6382] ? ovl_stack_cpy+0x78/0xb0 [ 47.208491][ T6382] ? do_raw_spin_unlock+0x145/0x1e0 [ 47.208504][ T6382] ? _raw_spin_unlock+0x28/0x50 [ 47.208523][ T6382] ovl_lookup_layers+0x8c2/0x2aa0 [ 47.208545][ T6382] ? __pfx_ovl_lookup_layers+0x10/0x10 [ 47.208566][ T6382] ? __d_alloc_parallel+0x46d/0x15e0 [ 47.208578][ T6382] ? __d_alloc_parallel+0x46d/0x15e0 [ 47.208591][ T6382] ovl_lookup+0x4a8/0x6b0 [ 47.208605][ T6382] ? __d_alloc_parallel+0x9d4/0x15e0 [ 47.208618][ T6382] ? __pfx_ovl_lookup+0x10/0x10 [ 47.208636][ T6382] ? __pfx___d_alloc_parallel+0x10/0x10 [ 47.208647][ T6382] ? __d_lookup+0x25c/0x4a0 [ 47.208661][ T6382] ? __d_lookup+0x266/0x4a0 [ 47.208680][ T6382] ? __pfx_ovl_lookup+0x10/0x10 [ 47.208704][ T6382] lookup_open+0xb29/0x19e0 [ 47.208728][ T6382] ? __d_lookup+0x180/0x4a0 [ 47.208744][ T6382] path_openat+0xe75/0x23f0 [ 47.208760][ T6382] ? __pfx_path_openat+0x10/0x10 [ 47.208780][ T6382] do_file_open+0x20e/0x430 [ 47.208803][ T6382] ? __pfx_do_file_open+0x10/0x10 [ 47.208831][ T6382] ? _raw_spin_unlock+0x28/0x50 [ 47.208847][ T6382] ? alloc_fd+0x471/0x7a0 [ 47.208865][ T6382] do_sys_openat2+0x163/0x1d0 [ 47.208884][ T6382] ? __pfx_do_sys_openat2+0x10/0x10 [ 47.208907][ T6382] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 47.208927][ T6382] ? __fget_files+0x21f/0x3d0 [ 47.208947][ T6382] __x64_sys_openat+0x12d/0x210 [ 47.208963][ T6382] ? __pfx___x64_sys_openat+0x10/0x10 [ 47.208978][ T6382] ? ksys_write+0x1ac/0x250 [ 47.209001][ T6382] do_syscall_64+0x123/0x790 [ 47.209021][ T6382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.209039][ T6382] RIP: 0033:0x7f510e59fb19 [ 47.209053][ T6382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.209071][ T6382] RSP: 002b:00007f510f494028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 47.209091][ T6382] RAX: ffffffffffffffda RBX: 00007f510e825fa0 RCX: 00007f510e59fb19 [ 47.209104][ T6382] RDX: 0000000000000000 RSI: 0000200000003fc0 RDI: 0000000000000003 [ 47.209115][ T6382] RBP: 00007f510f494090 R08: 0000000000000000 R09: 0000000000000000 [ 47.209126][ T6382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 47.209136][ T6382] R13: 00007f510e826038 R14: 00007f510e825fa0 R15: 00007fff80c45428 [ 47.209161][ T6382] [ 47.209267][ T6382] overlayfs: failed to get inode (-12) [ 47.282989][ T6390] netlink: 24 bytes leftover after parsing attributes in process `syz.2.165'. [ 47.336478][ T5568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 47.395128][ T6402] device-mapper: table: 248:1: ram1 too small for target: start=0, len=8272, dev_size=8192 [ 47.395146][ T6402] device-mapper: core: Cannot calculate initial queue limits [ 47.395151][ T6402] device-mapper: ioctl: unable to set up device queue for new table. [ 47.461761][ T6423] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 47.461941][ T6423] CIFS: Attempting to mount //127.0.0.1/test [ 47.468116][ T6423] CIFS: VFS: Error connecting to socket. Aborting operation. [ 47.468165][ T6423] CIFS: VFS: cifs_mount failed w/return code = -111 [ 47.516899][ T6431] FAULT_INJECTION: forcing a failure. [ 47.516899][ T6431] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 47.516919][ T6431] CPU: 3 UID: 0 PID: 6431 Comm: syz.1.178 Not tainted syzkaller #0 PREEMPT(full) [ 47.516933][ T6431] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 47.516940][ T6431] Call Trace: [ 47.516944][ T6431] [ 47.516948][ T6431] dump_stack_lvl+0x100/0x190 [ 47.516979][ T6431] should_fail_ex.cold+0x5/0xa [ 47.516998][ T6431] should_fail_alloc_page+0xeb/0x140 [ 47.517012][ T6431] prepare_alloc_pages+0x1f0/0x5b0 [ 47.517024][ T6431] ? is_bpf_text_address+0x94/0x1a0 [ 47.517041][ T6431] __alloc_frozen_pages_noprof+0x1b1/0x3280 [ 47.517057][ T6431] ? arch_stack_walk+0xa6/0xf0 [ 47.517080][ T6431] ? stack_trace_save+0x8e/0xc0 [ 47.517096][ T6431] ? __pfx_stack_trace_save+0x10/0x10 [ 47.517112][ T6431] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 47.517131][ T6431] ? kasan_save_stack+0x3f/0x50 [ 47.517141][ T6431] ? kasan_save_stack+0x30/0x50 [ 47.517151][ T6431] ? kasan_save_track+0x14/0x30 [ 47.517161][ T6431] ? __kasan_slab_alloc+0x89/0x90 [ 47.517171][ T6431] ? kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 47.517189][ T6431] ? alloc_vmap_area+0x643/0x2bc0 [ 47.517205][ T6431] ? __get_vm_area_node+0x1ed/0x350 [ 47.517214][ T6431] ? __vmalloc_node_range_noprof+0x2ad/0x1440 [ 47.517226][ T6431] ? __vmalloc_node_noprof+0xad/0xf0 [ 47.517237][ T6431] ? __vmalloc_noprof+0xa3/0x120 [ 47.517247][ T6431] ? bpf_check+0x1c2b/0xa0f0 [ 47.517264][ T6431] ? bpf_prog_load+0x1baf/0x2b20 [ 47.517281][ T6431] ? __sys_bpf+0x146f/0x4b60 [ 47.517290][ T6431] ? __x64_sys_bpf+0xce/0x140 [ 47.517300][ T6431] ? do_syscall_64+0x123/0x790 [ 47.517311][ T6431] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.517329][ T6431] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 47.517350][ T6431] ? policy_nodemask+0xed/0x5e0 [ 47.517365][ T6431] alloc_pages_mpol+0x201/0x560 [ 47.517379][ T6431] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 47.517396][ T6431] alloc_pages_noprof+0x1a/0x160 [ 47.517412][ T6431] get_free_pages_noprof+0x10/0xb0 [ 47.517429][ T6431] __kasan_populate_vmalloc+0xa0/0x210 [ 47.517451][ T6431] alloc_vmap_area+0x963/0x2bc0 [ 47.517473][ T6431] ? kasan_save_track+0x14/0x30 [ 47.517483][ T6431] ? __kasan_kmalloc+0xaa/0xb0 [ 47.517493][ T6431] ? __pfx_alloc_vmap_area+0x10/0x10 [ 47.517512][ T6431] ? __get_vm_area_node+0x124/0x350 [ 47.517524][ T6431] __get_vm_area_node+0x1ed/0x350 [ 47.517537][ T6431] __vmalloc_node_range_noprof+0x2ad/0x1440 [ 47.517550][ T6431] ? bpf_check+0x1c2b/0xa0f0 [ 47.517572][ T6431] ? bpf_check+0x1c2b/0xa0f0 [ 47.517592][ T6431] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 47.517608][ T6431] ? avc_has_perm_noaudit+0x145/0x470 [ 47.517623][ T6431] ? bpf_check+0x1c2b/0xa0f0 [ 47.517640][ T6431] __vmalloc_node_noprof+0xad/0xf0 [ 47.517651][ T6431] ? bpf_check+0x1c2b/0xa0f0 [ 47.517670][ T6431] __vmalloc_noprof+0xa3/0x120 [ 47.517682][ T6431] ? __pfx___vmalloc_noprof+0x10/0x10 [ 47.517696][ T6431] ? bpf_lsm_bpf_prog_load+0x9/0x10 [ 47.517707][ T6431] ? security_bpf_prog_load+0x10f/0x2f0 [ 47.517724][ T6431] ? bpf_vlog_init+0x118/0x150 [ 47.517737][ T6431] bpf_check+0x1c2b/0xa0f0 [ 47.517765][ T6431] ? __pfx_bpf_check+0x10/0x10 [ 47.517819][ T6431] ? lock_acquire+0x1d1/0x380 [ 47.517838][ T6431] ? bpf_prog_load+0x1af0/0x2b20 [ 47.517855][ T6431] ? find_held_lock+0x2b/0x80 [ 47.517867][ T6431] ? bpf_prog_load+0x1af0/0x2b20 [ 47.517886][ T6431] ? __asan_memset+0x23/0x50 [ 47.517905][ T6431] ? bpf_prog_load+0x1baf/0x2b20 [ 47.517922][ T6431] bpf_prog_load+0x1baf/0x2b20 [ 47.517938][ T6431] ? avc_has_perm_noaudit+0x11e/0x470 [ 47.517955][ T6431] ? __pfx_bpf_prog_load+0x10/0x10 [ 47.517989][ T6431] __sys_bpf+0x146f/0x4b60 [ 47.518002][ T6431] ? __pfx___sys_bpf+0x10/0x10 [ 47.518012][ T6431] ? find_held_lock+0x2b/0x80 [ 47.518024][ T6431] ? get_pid_task+0xfc/0x250 [ 47.518034][ T6431] ? get_pid_task+0xfc/0x250 [ 47.518049][ T6431] ? find_held_lock+0x2b/0x80 [ 47.518064][ T6431] ? rcu_read_lock_any_held+0x6a/0x90 [ 47.518077][ T6431] ? find_held_lock+0x2b/0x80 [ 47.518089][ T6431] ? ksys_write+0x190/0x250 [ 47.518099][ T6431] ? ksys_write+0x190/0x250 [ 47.518109][ T6431] ? lock_acquire+0x1d1/0x380 [ 47.518135][ T6431] ? fput+0x7c/0x100 [ 47.518148][ T6431] ? ksys_write+0x1ac/0x250 [ 47.518160][ T6431] ? __x64_sys_bpf+0xce/0x140 [ 47.518170][ T6431] __x64_sys_bpf+0xce/0x140 [ 47.518181][ T6431] ? do_syscall_64+0xae/0x790 [ 47.518193][ T6431] do_syscall_64+0x123/0x790 [ 47.518205][ T6431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.518217][ T6431] RIP: 0033:0x7f296b59fb19 [ 47.518227][ T6431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.518237][ T6431] RSP: 002b:00007f296c534028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 47.518249][ T6431] RAX: ffffffffffffffda RBX: 00007f296b825fa0 RCX: 00007f296b59fb19 [ 47.518256][ T6431] RDX: 0000000000000094 RSI: 0000200000000500 RDI: 0000000000000005 [ 47.518262][ T6431] RBP: 00007f296c534090 R08: 0000000000000000 R09: 0000000000000000 [ 47.518269][ T6431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 47.518275][ T6431] R13: 00007f296b826038 R14: 00007f296b825fa0 R15: 00007ffd3011e598 [ 47.518290][ T6431] [ 47.530769][ T6434] netlink: 144 bytes leftover after parsing attributes in process `syz.2.179'. [ 47.564366][ T6439] netlink: 'syz.3.182': attribute type 4 has an invalid length. [ 47.859116][ T6456] netlink: 8 bytes leftover after parsing attributes in process `syz.3.190'. [ 47.859148][ T6456] openvswitch: netlink: Missing key (keys=40, expected=80) [ 47.881228][ T6458] xt_l2tp: invalid flags combination: 8 [ 47.884329][ T6458] FAULT_INJECTION: forcing a failure. [ 47.884329][ T6458] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 47.884347][ T6458] CPU: 1 UID: 0 PID: 6458 Comm: syz.2.191 Not tainted syzkaller #0 PREEMPT(full) [ 47.884361][ T6458] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 47.884368][ T6458] Call Trace: [ 47.884372][ T6458] [ 47.884377][ T6458] dump_stack_lvl+0x100/0x190 [ 47.884401][ T6458] should_fail_ex.cold+0x5/0xa [ 47.884420][ T6458] should_fail_alloc_page+0xeb/0x140 [ 47.884435][ T6458] prepare_alloc_pages+0x1f0/0x5b0 [ 47.884454][ T6458] ? kernel_text_address+0x8d/0x100 [ 47.884471][ T6458] __alloc_frozen_pages_noprof+0x1b1/0x3280 [ 47.884495][ T6458] ? stack_trace_save+0x8e/0xc0 [ 47.884512][ T6458] ? __pfx_stack_trace_save+0x10/0x10 [ 47.884528][ T6458] ? is_bpf_text_address+0x25/0x1a0 [ 47.884545][ T6458] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 47.884562][ T6458] ? is_bpf_text_address+0x8a/0x1a0 [ 47.884580][ T6458] ? kasan_save_stack+0x3f/0x50 [ 47.884591][ T6458] ? kasan_save_stack+0x30/0x50 [ 47.884601][ T6458] ? kasan_save_track+0x14/0x30 [ 47.884612][ T6458] ? __kasan_slab_alloc+0x89/0x90 [ 47.884624][ T6458] ? kmem_cache_alloc_noprof+0x269/0x6a0 [ 47.884641][ T6458] ? __pmd_alloc+0xbf/0x950 [ 47.884659][ T6458] ? copy_page_range+0x3f3f/0x5a50 [ 47.884670][ T6458] ? dup_mmap+0x1230/0x23e0 [ 47.884680][ T6458] ? copy_process+0x7a5e/0x8510 [ 47.884693][ T6458] ? kernel_clone+0x176/0x9d0 [ 47.884707][ T6458] ? __do_sys_clone+0xd9/0x120 [ 47.884720][ T6458] ? do_syscall_64+0x123/0x790 [ 47.884731][ T6458] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.884751][ T6458] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 47.884772][ T6458] ? policy_nodemask+0xed/0x5e0 [ 47.884788][ T6458] alloc_pages_mpol+0x201/0x560 [ 47.884802][ T6458] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 47.884820][ T6458] alloc_pages_noprof+0x1a/0x160 [ 47.884836][ T6458] pte_alloc_one+0x1c/0x3d0 [ 47.884850][ T6458] __pte_alloc+0x6d/0x3e0 [ 47.884866][ T6458] ? __pfx___pte_alloc+0x10/0x10 [ 47.884882][ T6458] ? _raw_spin_unlock+0x28/0x50 [ 47.884899][ T6458] ? __pmd_alloc+0x3fb/0x950 [ 47.884919][ T6458] copy_page_range+0x3d07/0x5a50 [ 47.884934][ T6458] ? kasan_save_stack+0x3f/0x50 [ 47.884959][ T6458] ? __pfx_copy_page_range+0x10/0x10 [ 47.884971][ T6458] ? mas_wr_store_entry+0xa4/0x1d50 [ 47.884991][ T6458] ? lock_acquire+0x1d1/0x380 [ 47.885008][ T6458] ? dup_mmap+0xd0a/0x23e0 [ 47.885021][ T6458] ? find_held_lock+0x2b/0x80 [ 47.885033][ T6458] ? dup_mmap+0xe66/0x23e0 [ 47.885043][ T6458] ? dup_mmap+0xe66/0x23e0 [ 47.885054][ T6458] ? down_write+0x141/0x1f0 [ 47.885068][ T6458] ? up_write+0x2dc/0x5b0 [ 47.885088][ T6458] dup_mmap+0x1230/0x23e0 [ 47.885105][ T6458] ? __pfx_dup_mmap+0x10/0x10 [ 47.885114][ T6458] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 47.885132][ T6458] ? lockdep_hardirqs_on+0x7d/0x110 [ 47.885144][ T6458] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 47.885165][ T6458] ? __lock_acquire+0x5c0/0x1f40 [ 47.885187][ T6458] ? lock_acquire+0x1d1/0x380 [ 47.885203][ T6458] ? copy_process+0x7a53/0x8510 [ 47.885223][ T6458] copy_process+0x7a5e/0x8510 [ 47.885246][ T6458] ? __pfx_copy_process+0x10/0x10 [ 47.885260][ T6458] ? futex_wake+0x4ea/0x5e0 [ 47.885283][ T6458] kernel_clone+0x176/0x9d0 [ 47.885298][ T6458] ? __pfx_kernel_clone+0x10/0x10 [ 47.885316][ T6458] ? ksys_write+0x190/0x250 [ 47.885331][ T6458] __do_sys_clone+0xd9/0x120 [ 47.885346][ T6458] ? __pfx___do_sys_clone+0x10/0x10 [ 47.885360][ T6458] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 47.885385][ T6458] do_syscall_64+0x123/0x790 [ 47.885398][ T6458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.885410][ T6458] RIP: 0033:0x7f122039fb19 [ 47.885420][ T6458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.885432][ T6458] RSP: 002b:00007f12211b6fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 47.885448][ T6458] RAX: ffffffffffffffda RBX: 00007f1220625fa0 RCX: 00007f122039fb19 [ 47.885550][ T6458] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 47.885558][ T6458] RBP: 00007f1220437af8 R08: 0000000000000000 R09: 0000000000000000 [ 47.885565][ T6458] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 47.885572][ T6458] R13: 00007f1220626038 R14: 00007f1220625fa0 R15: 00007fff0194d008 [ 47.885588][ T6458] [ 47.885798][ T6460] netlink: 8 bytes leftover after parsing attributes in process `syz.3.192'. [ 47.886706][ T6460] Spectre V2 : WARNING: Unprivileged eBPF is enabled with eIBRS on, data leaks possible via Spectre v2 BHB attacks! [ 47.950226][ T6464] netlink: 76 bytes leftover after parsing attributes in process `syz.3.194'. [ 47.979817][ T6466] jffs2: notice: (6466) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 48.080667][ T6478] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 48.080683][ T6478] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 48.081594][ T6478] vhci_hcd vhci_hcd.0: Device attached [ 48.096504][ T6479] vhci_hcd: connection closed [ 48.099446][ T12] vhci_hcd vhci_hcd.3: stop threads [ 48.099751][ T12] vhci_hcd vhci_hcd.3: release socket [ 48.099769][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 48.133640][ T67] Bluetooth: hci0: command 0x0419 tx timeout [ 48.153912][ T6489] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 48.154133][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 48.161568][ T42] kauditd_printk_skb: 104 callbacks suppressed [ 48.161579][ T42] audit: type=1326 audit(1793638858.314:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6487 comm="syz.0.201" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f76b3b9fb19 code=0x0 [ 48.376500][ T42] audit: type=1400 audit(1793638858.534:385): avc: denied { create } for pid=6505 comm="syz.0.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 48.378413][ T42] audit: type=1400 audit(1793638858.534:386): avc: denied { bind } for pid=6505 comm="syz.0.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 48.378901][ T42] audit: type=1400 audit(1793638858.534:387): avc: denied { setopt } for pid=6505 comm="syz.0.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 48.379319][ T42] audit: type=1400 audit(1793638858.534:388): avc: denied { accept } for pid=6505 comm="syz.0.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 48.380015][ T42] audit: type=1400 audit(1793638858.534:389): avc: denied { write } for pid=6505 comm="syz.0.207" path="socket:[12485]" dev="sockfs" ino=12485 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 48.380334][ T42] audit: type=1400 audit(1793638858.534:390): avc: denied { read } for pid=6505 comm="syz.0.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 48.389900][ T5568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 48.434422][ T42] audit: type=1400 audit(1793638858.594:391): avc: denied { remount } for pid=6510 comm="syz.0.210" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 48.456994][ T10] cfg80211: failed to load regulatory.db [ 48.458735][ T42] audit: type=1400 audit(1793638858.614:392): avc: denied { node_bind } for pid=6514 comm="syz.2.211" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 48.459409][ T6515] ip_tables: iptables: counters copy to user failed while replacing table [ 48.529901][ T42] audit: type=1400 audit(1793638858.684:393): avc: denied { create } for pid=6530 comm="syz.1.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 48.535216][ T6533] FAULT_INJECTION: forcing a failure. [ 48.535216][ T6533] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 48.535233][ T6533] CPU: 3 UID: 0 PID: 6533 Comm: syz.0.215 Not tainted syzkaller #0 PREEMPT(full) [ 48.535246][ T6533] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 48.535254][ T6533] Call Trace: [ 48.535258][ T6533] [ 48.535262][ T6533] dump_stack_lvl+0x100/0x190 [ 48.535285][ T6533] should_fail_ex.cold+0x5/0xa [ 48.535304][ T6533] _copy_to_user+0x32/0xd0 [ 48.535339][ T6533] simple_read_from_buffer+0xcb/0x170 [ 48.535357][ T6533] proc_fail_nth_read+0x1af/0x230 [ 48.535373][ T6533] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 48.535394][ T6533] ? rw_verify_area+0xce/0x6d0 [ 48.535411][ T6533] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 48.535426][ T6533] vfs_read+0x1e4/0xb40 [ 48.535437][ T6533] ? lock_acquire+0x1d1/0x380 [ 48.535453][ T6533] ? __fget_files+0x34/0x3d0 [ 48.535466][ T6533] ? __pfx_vfs_read+0x10/0x10 [ 48.535476][ T6533] ? find_held_lock+0x2b/0x80 [ 48.535488][ T6533] ? __fget_files+0x215/0x3d0 [ 48.535504][ T6533] ? __fget_files+0x21f/0x3d0 [ 48.535521][ T6533] ksys_read+0x12a/0x250 [ 48.535532][ T6533] ? __pfx_ksys_read+0x10/0x10 [ 48.535546][ T6533] do_syscall_64+0x123/0x790 [ 48.535560][ T6533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.535572][ T6533] RIP: 0033:0x7f76b3b6034e [ 48.535582][ T6533] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 48.535593][ T6533] RSP: 002b:00007f76b4afffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 48.535605][ T6533] RAX: ffffffffffffffda RBX: 00007f76b4b006c0 RCX: 00007f76b3b6034e [ 48.535612][ T6533] RDX: 000000000000000f RSI: 00007f76b4b000a0 RDI: 0000000000000004 [ 48.535618][ T6533] RBP: 00007f76b4b00090 R08: 0000000000000000 R09: 0000000000000000 [ 48.535625][ T6533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 48.535631][ T6533] R13: 00007f76b3e26038 R14: 00007f76b3e25fa0 R15: 00007ffc25c06ea8 [ 48.535646][ T6533] [ 48.540983][ T6531] ip6gretap0: entered promiscuous mode [ 48.699332][ T6555] ptrace attach of "/syz-executor exec"[5781] was attempted by ""[6555] [ 48.723231][ T6559] netlink: 'syz.3.226': attribute type 1 has an invalid length. [ 48.737617][ T6559] 8021q: adding VLAN 0 to HW filter on device bond1 [ 48.750245][ T6559] 8021q: adding VLAN 0 to HW filter on device bond1 [ 48.750420][ T6559] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 48.750850][ T6559] bond1: (slave gre1): Error -95 calling set_mac_address [ 48.788726][ T6564] overlayfs: missing 'lowerdir' [ 48.922200][ T6582] netlink: 'syz.0.236': attribute type 4 has an invalid length. [ 48.923225][ T6582] fuse: Unknown parameter 'roo0000000000100000' [ 48.971061][ T6586] vlan0: entered promiscuous mode [ 48.975241][ T6586] team0: Port device vlan0 added [ 49.051469][ T10] rxe_eth0 speed is unknown, defaulting to 1000 [ 49.107530][ T6597] tun0: tun_chr_ioctl cmd 1074025675 [ 49.107546][ T6597] tun0: persist disabled [ 49.163627][ T5568] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 49.203359][ T6605] FAULT_INJECTION: forcing a failure. [ 49.203359][ T6605] name failslab, interval 1, probability 0, space 0, times 0 [ 49.203379][ T6605] CPU: 0 UID: 0 PID: 6605 Comm: syz.2.244 Not tainted syzkaller #0 PREEMPT(full) [ 49.203393][ T6605] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 49.203399][ T6605] Call Trace: [ 49.203404][ T6605] [ 49.203408][ T6605] dump_stack_lvl+0x100/0x190 [ 49.203431][ T6605] should_fail_ex.cold+0x5/0xa [ 49.203449][ T6605] should_failslab+0xc2/0x120 [ 49.203462][ T6605] __kmalloc_noprof+0xfc/0x840 [ 49.203479][ T6605] ? kasan_save_track+0x14/0x30 [ 49.203490][ T6605] ? lsm_blob_alloc+0x68/0x90 [ 49.203506][ T6605] lsm_blob_alloc+0x68/0x90 [ 49.203518][ T6605] security_bpf_prog_load+0x5b/0x2f0 [ 49.203537][ T6605] bpf_check+0x1b0a/0xa0f0 [ 49.203585][ T6605] ? __pfx_bpf_check+0x10/0x10 [ 49.203602][ T6605] ? lock_acquire+0x1d1/0x380 [ 49.203618][ T6605] ? bpf_prog_load+0x1af0/0x2b20 [ 49.203636][ T6605] ? find_held_lock+0x2b/0x80 [ 49.203648][ T6605] ? bpf_prog_load+0x1af0/0x2b20 [ 49.203667][ T6605] ? __asan_memset+0x23/0x50 [ 49.203685][ T6605] ? bpf_prog_load+0x1baf/0x2b20 [ 49.203702][ T6605] bpf_prog_load+0x1baf/0x2b20 [ 49.203718][ T6605] ? avc_has_perm_noaudit+0x11e/0x470 [ 49.203735][ T6605] ? __pfx_bpf_prog_load+0x10/0x10 [ 49.203765][ T6605] __sys_bpf+0x146f/0x4b60 [ 49.203778][ T6605] ? __pfx___sys_bpf+0x10/0x10 [ 49.203788][ T6605] ? find_held_lock+0x2b/0x80 [ 49.203800][ T6605] ? get_pid_task+0xfc/0x250 [ 49.203810][ T6605] ? get_pid_task+0xfc/0x250 [ 49.203825][ T6605] ? find_held_lock+0x2b/0x80 [ 49.203840][ T6605] ? rcu_read_lock_any_held+0x6a/0x90 [ 49.203854][ T6605] ? find_held_lock+0x2b/0x80 [ 49.203865][ T6605] ? ksys_write+0x190/0x250 [ 49.203876][ T6605] ? ksys_write+0x190/0x250 [ 49.203886][ T6605] ? lock_acquire+0x1d1/0x380 [ 49.203917][ T6605] ? fput+0x7c/0x100 [ 49.203931][ T6605] ? ksys_write+0x1ac/0x250 [ 49.203943][ T6605] ? __x64_sys_bpf+0xce/0x140 [ 49.203953][ T6605] __x64_sys_bpf+0xce/0x140 [ 49.203964][ T6605] ? do_syscall_64+0xae/0x790 [ 49.203976][ T6605] do_syscall_64+0x123/0x790 [ 49.203989][ T6605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.204001][ T6605] RIP: 0033:0x7f122039fb19 [ 49.204010][ T6605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.204021][ T6605] RSP: 002b:00007f12211b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 49.204033][ T6605] RAX: ffffffffffffffda RBX: 00007f1220625fa0 RCX: 00007f122039fb19 [ 49.204040][ T6605] RDX: 0000000000000094 RSI: 0000200000002c40 RDI: 0000000000000005 [ 49.204046][ T6605] RBP: 00007f12211b7090 R08: 0000000000000000 R09: 0000000000000000 [ 49.204053][ T6605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 49.204060][ T6605] R13: 00007f1220626038 R14: 00007f1220625fa0 R15: 00007fff0194d008 [ 49.204074][ T6605] [ 49.334574][ T5568] usb 5-1: New USB device found: idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 49.335685][ T5568] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 49.335712][ T5568] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 49.335743][ T5568] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.343836][ T6582] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 49.352699][ T5568] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 49.398742][ T6607] mmap: syz.2.245 (6607) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 49.414128][ T6607] capability: warning: `syz.2.245' uses 32-bit capabilities (legacy support in use) [ 49.414662][ T6607] overlayfs: missing 'lowerdir' [ 49.467253][ T6612] CIFS: Attempting to mount //127.0.0.1/share [ 49.605486][ T24] usb 5-1: USB disconnect, device number 2 [ 49.644478][ T6624] Cannot find map_set index 135 as target [ 49.648557][ T6624] FAULT_INJECTION: forcing a failure. [ 49.648557][ T6624] name failslab, interval 1, probability 0, space 0, times 0 [ 49.648575][ T6624] CPU: 1 UID: 0 PID: 6624 Comm: syz.2.251 Not tainted syzkaller #0 PREEMPT(full) [ 49.648589][ T6624] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 49.648596][ T6624] Call Trace: [ 49.648601][ T6624] [ 49.648606][ T6624] dump_stack_lvl+0x100/0x190 [ 49.648630][ T6624] should_fail_ex.cold+0x5/0xa [ 49.648649][ T6624] should_failslab+0xc2/0x120 [ 49.648662][ T6624] __kmalloc_cache_noprof+0x91/0x6d0 [ 49.648679][ T6624] ? tipc_group_create+0xbc/0x660 [ 49.648694][ T6624] tipc_group_create+0xbc/0x660 [ 49.648708][ T6624] tipc_setsockopt+0x611/0xe30 [ 49.648728][ T6624] ? __pfx_tipc_setsockopt+0x10/0x10 [ 49.648746][ T6624] ? __fget_files+0x215/0x3d0 [ 49.648762][ T6624] ? selinux_socket_setsockopt+0x6a/0x80 [ 49.648782][ T6624] ? __pfx_tipc_setsockopt+0x10/0x10 [ 49.648798][ T6624] do_sock_setsockopt+0xf3/0x1d0 [ 49.648816][ T6624] __sys_setsockopt+0x195/0x220 [ 49.648832][ T6624] __x64_sys_setsockopt+0xbd/0x160 [ 49.648844][ T6624] ? do_syscall_64+0xae/0x790 [ 49.648856][ T6624] ? lockdep_hardirqs_on+0x7d/0x110 [ 49.648868][ T6624] do_syscall_64+0x123/0x790 [ 49.648882][ T6624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.648894][ T6624] RIP: 0033:0x7f122039fb19 [ 49.648904][ T6624] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.648914][ T6624] RSP: 002b:00007f12211b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 49.648926][ T6624] RAX: ffffffffffffffda RBX: 00007f1220625fa0 RCX: 00007f122039fb19 [ 49.648934][ T6624] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000007 [ 49.648941][ T6624] RBP: 00007f1220437af8 R08: 0000000000000010 R09: 0000000000000000 [ 49.648948][ T6624] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000000 [ 49.648955][ T6624] R13: 00007f1220626038 R14: 00007f1220625fa0 R15: 00007fff0194d008 [ 49.648970][ T6624] [ 49.659903][ T6624] Bluetooth: hci4: Frame reassembly failed (-84) [ 49.662392][ T1172] Bluetooth: hci4: Frame reassembly failed (-90) [ 49.817322][ T6634] FAULT_INJECTION: forcing a failure. [ 49.817322][ T6634] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 49.817340][ T6634] CPU: 1 UID: 0 PID: 6634 Comm: syz.3.255 Not tainted syzkaller #0 PREEMPT(full) [ 49.817355][ T6634] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 49.817368][ T6634] Call Trace: [ 49.817372][ T6634] [ 49.817377][ T6634] dump_stack_lvl+0x100/0x190 [ 49.817402][ T6634] should_fail_ex.cold+0x5/0xa [ 49.817421][ T6634] should_fail_alloc_page+0xeb/0x140 [ 49.817436][ T6634] prepare_alloc_pages+0x1f0/0x5b0 [ 49.817453][ T6634] __alloc_frozen_pages_noprof+0x1b1/0x3280 [ 49.817471][ T6634] ? __pfx_get_page_from_freelist+0x10/0x10 [ 49.817488][ T6634] ? rcu_is_watching+0x13/0xc0 [ 49.817501][ T6634] ? trace_mm_page_alloc+0x164/0x1c0 [ 49.817513][ T6634] ? __alloc_frozen_pages_noprof+0x306/0x3280 [ 49.817532][ T6634] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 49.817552][ T6634] ? stack_trace_save+0x8e/0xc0 [ 49.817567][ T6634] ? __pfx_stack_trace_save+0x10/0x10 [ 49.817584][ T6634] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 49.817604][ T6634] ? __kasan_slab_alloc+0x89/0x90 [ 49.817615][ T6634] ? kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 49.817632][ T6634] ? alloc_vmap_area+0x643/0x2bc0 [ 49.817649][ T6634] ? __get_vm_area_node+0x1ed/0x350 [ 49.817659][ T6634] ? __vmalloc_node_range_noprof+0x2ad/0x1440 [ 49.817671][ T6634] ? __vmalloc_node_noprof+0xad/0xf0 [ 49.817682][ T6634] ? xt_counters_alloc+0x4c/0x70 [ 49.817700][ T6634] ? __do_replace+0x97/0x980 [ 49.817712][ T6634] ? do_ipt_set_ctl+0xa53/0xcf0 [ 49.817725][ T6634] ? nf_setsockopt+0x8d/0xf0 [ 49.817741][ T6634] ? ip_setsockopt+0xcb/0xf0 [ 49.817753][ T6634] ? udp_setsockopt+0x64/0xb0 [ 49.817792][ T6634] ? do_sock_setsockopt+0xf3/0x1d0 [ 49.817821][ T6634] ? __sys_setsockopt+0x195/0x220 [ 49.817837][ T6634] alloc_pages_bulk_noprof+0x5f0/0x1480 [ 49.817859][ T6634] ? policy_nodemask+0xed/0x5e0 [ 49.817874][ T6634] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 49.817900][ T6634] __kasan_populate_vmalloc+0xf0/0x210 [ 49.817922][ T6634] alloc_vmap_area+0x963/0x2bc0 [ 49.817946][ T6634] ? kasan_save_track+0x14/0x30 [ 49.817957][ T6634] ? __kasan_kmalloc+0xaa/0xb0 [ 49.817968][ T6634] ? __pfx_alloc_vmap_area+0x10/0x10 [ 49.817987][ T6634] ? __get_vm_area_node+0x124/0x350 [ 49.818000][ T6634] __get_vm_area_node+0x1ed/0x350 [ 49.818014][ T6634] __vmalloc_node_range_noprof+0x2ad/0x1440 [ 49.818027][ T6634] ? xt_counters_alloc+0x4c/0x70 [ 49.818046][ T6634] ? find_check_entry.isra.0+0x51c/0x990 [ 49.818062][ T6634] ? xt_counters_alloc+0x4c/0x70 [ 49.818084][ T6634] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 49.818102][ T6634] ? xt_counters_alloc+0x4c/0x70 [ 49.818120][ T6634] __vmalloc_node_noprof+0xad/0xf0 [ 49.818132][ T6634] ? xt_counters_alloc+0x4c/0x70 [ 49.818151][ T6634] xt_counters_alloc+0x4c/0x70 [ 49.818169][ T6634] __do_replace+0x97/0x980 [ 49.818186][ T6634] ? __pfx___do_replace+0x10/0x10 [ 49.818204][ T6634] do_ipt_set_ctl+0xa53/0xcf0 [ 49.818218][ T6634] ? nf_sockopt_find.isra.0+0x222/0x290 [ 49.818234][ T6634] ? nf_sockopt_find.isra.0+0x222/0x290 [ 49.818252][ T6634] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 49.818266][ T6634] ? __mutex_unlock_slowpath+0x35d/0x930 [ 49.818280][ T6634] ? sockopt_release_sock+0x5c/0x70 [ 49.818294][ T6634] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 49.818312][ T6634] ? nf_sockopt_find.isra.0+0x222/0x290 [ 49.818331][ T6634] nf_setsockopt+0x8d/0xf0 [ 49.818348][ T6634] ip_setsockopt+0xcb/0xf0 [ 49.818370][ T6634] udp_setsockopt+0x64/0xb0 [ 49.818381][ T6634] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 49.818399][ T6634] do_sock_setsockopt+0xf3/0x1d0 [ 49.818416][ T6634] __sys_setsockopt+0x195/0x220 [ 49.818433][ T6634] __x64_sys_setsockopt+0xbd/0x160 [ 49.818446][ T6634] ? do_syscall_64+0xae/0x790 [ 49.818458][ T6634] ? lockdep_hardirqs_on+0x7d/0x110 [ 49.818470][ T6634] do_syscall_64+0x123/0x790 [ 49.818483][ T6634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.818495][ T6634] RIP: 0033:0x7f510e59fb19 [ 49.818506][ T6634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.818517][ T6634] RSP: 002b:00007f510f494028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 49.818529][ T6634] RAX: ffffffffffffffda RBX: 00007f510e825fa0 RCX: 00007f510e59fb19 [ 49.818537][ T6634] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000004 [ 49.818544][ T6634] RBP: 00007f510e637af8 R08: 0000000000000230 R09: 0000000000000000 [ 49.818551][ T6634] R10: 0000200000000480 R11: 0000000000000246 R12: 0000000000000000 [ 49.818558][ T6634] R13: 00007f510e826038 R14: 00007f510e825fa0 R15: 00007fff80c45428 [ 49.818574][ T6634] [ 50.184419][ T6655] netlink: 'syz.0.262': attribute type 1 has an invalid length. [ 50.196070][ T6655] 8021q: adding VLAN 0 to HW filter on device bond1 [ 50.204473][ T6655] bond1: (slave ip6erspan0): making interface the new active one [ 50.205264][ T6655] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 50.213998][ T5783] Bluetooth: hci0: command 0x0419 tx timeout [ 50.258189][ T6664] netlink: 'syz.0.266': attribute type 12 has an invalid length. [ 50.272561][ T6664] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=6664 comm=syz.0.266 [ 50.299677][ T6612] CIFS: VFS: Error connecting to socket. Aborting operation. [ 50.299704][ T6612] CIFS: VFS: cifs_mount failed w/return code = -4 [ 50.398919][ T6683] __nla_validate_parse: 10 callbacks suppressed [ 50.398932][ T6683] netlink: 136 bytes leftover after parsing attributes in process `syz.0.272'. [ 50.448364][ T6689] syzkaller0: entered promiscuous mode [ 50.448424][ T6689] syzkaller0: entered allmulticast mode [ 50.505634][ T6692] netlink: 24 bytes leftover after parsing attributes in process `syz.0.275'. [ 50.587295][ T6698] netlink: 92 bytes leftover after parsing attributes in process `syz.1.278'. [ 50.679761][ T6710] netlink: 'syz.1.281': attribute type 63 has an invalid length. [ 50.679776][ T6710] netlink: 5 bytes leftover after parsing attributes in process `syz.1.281'. [ 50.695200][ T6721] net_ratelimit: 469 callbacks suppressed [ 50.695211][ T6721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 50.695511][ T6721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 50.696077][ T6721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 50.696339][ T6721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 50.696480][ T6721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 50.701367][ T6721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 50.701486][ T6721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 50.702780][ T6721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 50.702851][ T6721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 50.702911][ T6721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 51.013839][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 51.164096][ T10] usb 6-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 51.165000][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 51.165025][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.168354][ T10] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 51.168471][ T10] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 81 [ 51.168502][ T10] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 1 [ 51.170456][ T10] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84 [ 51.170498][ T10] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 51.172731][ T10] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 51.174829][ T10] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88 [ 51.174869][ T10] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 51.175580][ T10] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 51.371457][ T6729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.372335][ T6729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.379196][ T6729] team0: No ports can be present during mode change [ 51.481098][ T5863] usb 6-1: USB disconnect, device number 2 [ 51.486039][ T5863] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 51.488248][ T5863] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 51.488528][ T5863] keyspan 6-1:1.0: device disconnected [ 51.512000][ T6735] syzkaller0: entered promiscuous mode [ 51.512015][ T6735] syzkaller0: entered allmulticast mode [ 51.677411][ T6746] netlink: 8 bytes leftover after parsing attributes in process `syz.3.294'. [ 51.688247][ T6748] netlink: 8 bytes leftover after parsing attributes in process `syz.0.295'. [ 51.743764][ T5774] Bluetooth: hci4: command 0x1003 tx timeout [ 51.745076][ T67] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 51.781020][ T6760] netlink: 200 bytes leftover after parsing attributes in process `syz.0.299'. [ 51.832694][ T6767] netlink: 'syz.0.301': attribute type 10 has an invalid length. [ 51.863951][ T6772] FAULT_INJECTION: forcing a failure. [ 51.863951][ T6772] name failslab, interval 1, probability 0, space 0, times 0 [ 51.863972][ T6772] CPU: 0 UID: 0 PID: 6772 Comm: syz.2.304 Not tainted syzkaller #0 PREEMPT(full) [ 51.863986][ T6772] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.863993][ T6772] Call Trace: [ 51.863997][ T6772] [ 51.864002][ T6772] dump_stack_lvl+0x100/0x190 [ 51.864026][ T6772] should_fail_ex.cold+0x5/0xa [ 51.864045][ T6772] should_failslab+0xc2/0x120 [ 51.864059][ T6772] __kmalloc_cache_noprof+0x91/0x6d0 [ 51.864076][ T6772] ? bpf_int_jit_compile+0x14b9/0x1a40 [ 51.864098][ T6772] bpf_int_jit_compile+0x14b9/0x1a40 [ 51.864120][ T6772] ? __pfx_bpf_int_jit_compile+0x10/0x10 [ 51.864143][ T6772] ? bpf_prog_has_arena_insns+0x39a/0x430 [ 51.864162][ T6772] __bpf_prog_select_runtime+0x8d1/0xbf0 [ 51.864180][ T6772] ? __asan_memcpy+0x3c/0x60 [ 51.864199][ T6772] bpf_prepare_filter+0xd32/0x11e0 [ 51.864220][ T6772] ? __pfx_bpf_prepare_filter+0x10/0x10 [ 51.864238][ T6772] ? __asan_memcpy+0x3c/0x60 [ 51.864255][ T6772] ? kmemdup_noprof+0x49/0x60 [ 51.864270][ T6772] __get_filter+0x1ff/0x2c0 [ 51.864287][ T6772] sk_attach_filter+0x1c/0x150 [ 51.864305][ T6772] sk_setsockopt+0x3bb9/0x5fc0 [ 51.864323][ T6772] ? __pfx_sk_setsockopt+0x10/0x10 [ 51.864339][ T6772] ? selinux_netlbl_socket_setsockopt+0x134/0x470 [ 51.864360][ T6772] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 51.864384][ T6772] ? find_held_lock+0x2b/0x80 [ 51.864399][ T6772] ? selinux_socket_setsockopt+0x6a/0x80 [ 51.864421][ T6772] do_sock_setsockopt+0x193/0x1d0 [ 51.864438][ T6772] __sys_setsockopt+0x195/0x220 [ 51.864453][ T6772] __x64_sys_setsockopt+0xbd/0x160 [ 51.864465][ T6772] ? do_syscall_64+0xae/0x790 [ 51.864477][ T6772] ? lockdep_hardirqs_on+0x7d/0x110 [ 51.864489][ T6772] do_syscall_64+0x123/0x790 [ 51.864502][ T6772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.864514][ T6772] RIP: 0033:0x7f122039fb19 [ 51.864524][ T6772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.864536][ T6772] RSP: 002b:00007f12211b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 51.864548][ T6772] RAX: ffffffffffffffda RBX: 00007f1220625fa0 RCX: 00007f122039fb19 [ 51.864556][ T6772] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000004 [ 51.864563][ T6772] RBP: 00007f1220437af8 R08: 0000000000000010 R09: 0000000000000000 [ 51.864570][ T6772] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000000 [ 51.864577][ T6772] R13: 00007f1220626038 R14: 00007f1220625fa0 R15: 00007fff0194d008 [ 51.864592][ T6772] [ 51.908990][ T6775] ACPI: Can not change Invalid GPE/Fixed Event status [ 52.065122][ T6798] FAULT_INJECTION: forcing a failure. [ 52.065122][ T6798] name failslab, interval 1, probability 0, space 0, times 0 [ 52.065143][ T6798] CPU: 3 UID: 0 PID: 6798 Comm: syz.3.314 Not tainted syzkaller #0 PREEMPT(full) [ 52.065157][ T6798] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.065164][ T6798] Call Trace: [ 52.065168][ T6798] [ 52.065172][ T6798] dump_stack_lvl+0x100/0x190 [ 52.065195][ T6798] should_fail_ex.cold+0x5/0xa [ 52.065214][ T6798] should_failslab+0xc2/0x120 [ 52.065227][ T6798] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 52.065247][ T6798] ? nfs_get_tree+0x76c/0x1440 [ 52.065265][ T6798] kmemdup_nul+0x49/0xd0 [ 52.065285][ T6798] nfs_get_tree+0x76c/0x1440 [ 52.065303][ T6798] vfs_get_tree+0x92/0x320 [ 52.065319][ T6798] vfs_cmd_create+0xd7/0x2a0 [ 52.065332][ T6798] __do_sys_fsconfig+0x55a/0xcb0 [ 52.065344][ T6798] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 52.065363][ T6798] do_syscall_64+0x123/0x790 [ 52.065377][ T6798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.065389][ T6798] RIP: 0033:0x7f510e59fb19 [ 52.065399][ T6798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.065410][ T6798] RSP: 002b:00007f510f494028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 52.065422][ T6798] RAX: ffffffffffffffda RBX: 00007f510e825fa0 RCX: 00007f510e59fb19 [ 52.065430][ T6798] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 52.065436][ T6798] RBP: 00007f510e637af8 R08: 0000000000000000 R09: 0000000000000000 [ 52.065443][ T6798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 52.065450][ T6798] R13: 00007f510e826038 R14: 00007f510e825fa0 R15: 00007fff80c45428 [ 52.065465][ T6798] [ 52.078479][ T6781] netlink: 'syz.2.308': attribute type 11 has an invalid length. [ 52.111359][ T6807] netlink: 8 bytes leftover after parsing attributes in process `syz.0.318'. [ 52.148917][ T6809] x_tables: duplicate underflow at hook 1 [ 52.154167][ T6811] netlink: 84 bytes leftover after parsing attributes in process `syz.1.319'. [ 52.154183][ T6811] netlink: 84 bytes leftover after parsing attributes in process `syz.1.319'. [ 52.155704][ T6813] FAULT_INJECTION: forcing a failure. [ 52.155704][ T6813] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 52.155726][ T6813] CPU: 0 UID: 0 PID: 6813 Comm: syz.0.321 Not tainted syzkaller #0 PREEMPT(full) [ 52.155739][ T6813] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.155746][ T6813] Call Trace: [ 52.155750][ T6813] [ 52.155755][ T6813] dump_stack_lvl+0x100/0x190 [ 52.155777][ T6813] should_fail_ex.cold+0x5/0xa [ 52.155796][ T6813] _copy_from_user+0x2e/0xd0 [ 52.155817][ T6813] kstrtouint_from_user+0xd6/0x1d0 [ 52.155842][ T6813] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 52.155882][ T6813] ? lock_acquire+0x1d1/0x380 [ 52.155907][ T6813] proc_fail_nth_write+0x83/0x220 [ 52.155924][ T6813] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 52.155944][ T6813] vfs_write+0x2aa/0x1050 [ 52.155955][ T6813] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 52.155970][ T6813] ? lock_acquire+0x1d1/0x380 [ 52.155986][ T6813] ? __fget_files+0x34/0x3d0 [ 52.156000][ T6813] ? __pfx_vfs_write+0x10/0x10 [ 52.156010][ T6813] ? find_held_lock+0x2b/0x80 [ 52.156022][ T6813] ? __fget_files+0x215/0x3d0 [ 52.156039][ T6813] ? __fget_files+0x21f/0x3d0 [ 52.156057][ T6813] ksys_write+0x12a/0x250 [ 52.156067][ T6813] ? __pfx_ksys_write+0x10/0x10 [ 52.156077][ T6813] ? v4l2_ioctl+0x1c5/0x250 [ 52.156097][ T6813] do_syscall_64+0x123/0x790 [ 52.156111][ T6813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.156123][ T6813] RIP: 0033:0x7f76b3b6034e [ 52.156132][ T6813] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 52.156144][ T6813] RSP: 002b:00007f76b4afffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 52.156155][ T6813] RAX: ffffffffffffffda RBX: 00007f76b4b006c0 RCX: 00007f76b3b6034e [ 52.156163][ T6813] RDX: 0000000000000001 RSI: 00007f76b4b000a0 RDI: 0000000000000004 [ 52.156169][ T6813] RBP: 00007f76b4b00090 R08: 0000000000000000 R09: 0000000000000000 [ 52.156176][ T6813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.156183][ T6813] R13: 00007f76b3e26038 R14: 00007f76b3e25fa0 R15: 00007ffc25c06ea8 [ 52.156198][ T6813] [ 52.211658][ T6816] syzkaller0: entered promiscuous mode [ 52.211674][ T6816] syzkaller0: entered allmulticast mode [ 52.229641][ T6818] input: syz0 as /devices/virtual/input/input10 [ 52.293676][ T5783] Bluetooth: hci0: Opcode 0x0c13 failed: -110 [ 52.293708][ T67] Bluetooth: hci0: command 0x0419 tx timeout [ 52.505354][ T6845] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 52.556348][ T6845] kAFS: unable to lookup cell 'syz0' [ 52.901361][ T5187] udevd[5187]: could not touch /run/udev/queue: No such file or directory [ 53.336640][ T42] kauditd_printk_skb: 58 callbacks suppressed [ 53.336653][ T42] audit: type=1400 audit(1793638863.494:452): avc: denied { egress } for pid=33 comm="ksoftirqd/3" saddr=fe80::1c daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 53.336677][ T42] audit: type=1400 audit(1793638863.494:453): avc: denied { sendto } for pid=33 comm="ksoftirqd/3" saddr=fe80::1c daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 53.376113][ T6868] netlink: 'syz.2.339': attribute type 10 has an invalid length. [ 53.379852][ T42] audit: type=1400 audit(1793638863.534:454): avc: denied { write } for pid=6869 comm="syz.1.340" name="fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 53.398044][ T6868] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 53.399288][ T6868] team0: Port device netdevsim1 added [ 53.400823][ T6868] netlink: 'syz.2.339': attribute type 10 has an invalid length. [ 53.401816][ T42] audit: type=1400 audit(1793638863.554:455): avc: denied { read write } for pid=6871 comm="syz.0.341" name="uhid" dev="devtmpfs" ino=1303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 53.402423][ T42] audit: type=1400 audit(1793638863.554:456): avc: denied { open } for pid=6871 comm="syz.0.341" path="/dev/uhid" dev="devtmpfs" ino=1303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 53.415288][ T6868] team0: Port device netdevsim1 removed [ 53.428461][ T854] logitech-hidpp-device 0003:046D:C082.0002: item fetching failed at offset 0/2 [ 53.428807][ T854] logitech-hidpp-device 0003:046D:C082.0002: hidpp_probe:parse failed [ 53.428841][ T854] logitech-hidpp-device 0003:046D:C082.0002: probe with driver logitech-hidpp-device failed with error -22 [ 53.504249][ T6881] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 53.559069][ T42] audit: type=1800 audit(1793638863.714:457): pid=6889 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.344" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=-22 [ 53.571069][ T42] audit: type=1400 audit(1793638863.724:458): avc: denied { create } for pid=6890 comm="syz.2.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 53.573112][ T42] audit: type=1400 audit(1793638863.724:459): avc: denied { write } for pid=6890 comm="syz.2.349" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 53.612873][ T6893] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5908 sclass=netlink_route_socket pid=6893 comm=syz.2.352 [ 53.648149][ T42] audit: type=1400 audit(1793638863.804:460): avc: denied { create } for pid=6902 comm="syz.2.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 53.650956][ T42] audit: type=1400 audit(1793638863.804:461): avc: denied { write } for pid=6902 comm="syz.2.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 53.768734][ T6916] syzkaller0: entered promiscuous mode [ 53.768751][ T6916] syzkaller0: entered allmulticast mode [ 53.947918][ T6934] netlink: 'syz.1.370': attribute type 4 has an invalid length. [ 53.995379][ T6942] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=6942 comm=syz.0.374 [ 54.116529][ T6957] FAULT_INJECTION: forcing a failure. [ 54.116529][ T6957] name failslab, interval 1, probability 0, space 0, times 0 [ 54.116563][ T6957] CPU: 0 UID: 60928 PID: 6957 Comm: syz.2.378 Not tainted syzkaller #0 PREEMPT(full) [ 54.116578][ T6957] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 54.116591][ T6957] Call Trace: [ 54.116604][ T6957] [ 54.116608][ T6957] dump_stack_lvl+0x100/0x190 [ 54.116638][ T6957] should_fail_ex.cold+0x5/0xa [ 54.116661][ T6957] should_failslab+0xc2/0x120 [ 54.116682][ T6957] __kmalloc_noprof+0xfc/0x840 [ 54.116705][ T6957] ? tomoyo_encode2+0xfb/0x3c0 [ 54.116725][ T6957] tomoyo_encode2+0xfb/0x3c0 [ 54.116738][ T6957] tomoyo_encode+0x29/0x50 [ 54.116749][ T6957] tomoyo_realpath_from_path+0x18c/0x690 [ 54.116763][ T6957] tomoyo_check_open_permission+0x2af/0x3c0 [ 54.116782][ T6957] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 54.116803][ T6957] ? hook_file_open+0x245/0x8e0 [ 54.116817][ T6957] ? avc_has_perm_noaudit+0x11e/0x470 [ 54.116844][ T6957] ? security_inode_permission+0xc4/0x280 [ 54.116864][ T6957] ? __pfx_selinux_inode_permission+0x10/0x10 [ 54.116884][ T6957] tomoyo_file_open+0x6b/0x90 [ 54.116899][ T6957] security_file_open+0xb5/0x1e0 [ 54.116910][ T6957] do_dentry_open+0x552/0x1470 [ 54.116932][ T6957] vfs_open_consume+0xcc/0x460 [ 54.116954][ T6957] path_openat+0x1547/0x23f0 [ 54.116971][ T6957] ? __pfx_path_openat+0x10/0x10 [ 54.116989][ T6957] do_file_open+0x20e/0x430 [ 54.117004][ T6957] ? __pfx_do_file_open+0x10/0x10 [ 54.117028][ T6957] ? _raw_spin_unlock+0x28/0x50 [ 54.117054][ T6957] ? alloc_fd+0x471/0x7a0 [ 54.117078][ T6957] do_sys_openat2+0x163/0x1d0 [ 54.117093][ T6957] ? __pfx_do_sys_openat2+0x10/0x10 [ 54.117109][ T6957] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 54.117122][ T6957] ? __fget_files+0x21f/0x3d0 [ 54.117138][ T6957] __x64_sys_openat+0x12d/0x210 [ 54.117154][ T6957] ? __pfx___x64_sys_openat+0x10/0x10 [ 54.117169][ T6957] ? ksys_write+0x1ac/0x250 [ 54.117185][ T6957] do_syscall_64+0x123/0x790 [ 54.117198][ T6957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.117210][ T6957] RIP: 0033:0x7f122039fb19 [ 54.117220][ T6957] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.117231][ T6957] RSP: 002b:00007f12211b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 54.117243][ T6957] RAX: ffffffffffffffda RBX: 00007f1220625fa0 RCX: 00007f122039fb19 [ 54.117251][ T6957] RDX: 0000000000000000 RSI: 0000200000003fc0 RDI: 0000000000000003 [ 54.117257][ T6957] RBP: 00007f12211b7090 R08: 0000000000000000 R09: 0000000000000000 [ 54.117264][ T6957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 54.117271][ T6957] R13: 00007f1220626038 R14: 00007f1220625fa0 R15: 00007fff0194d008 [ 54.117286][ T6957] [ 54.117296][ T6957] ERROR: Out of memory at tomoyo_realpath_from_path. [ 54.173084][ T6961] batman_adv: batadv0: Adding interface: syzkaller0 [ 54.173096][ T6961] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.173113][ T6961] batman_adv: batadv0: Interface activated: syzkaller0 [ 54.180563][ T6960] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 54.188807][ T6960] batman_adv: batadv0: Removing interface: syzkaller0 [ 54.288530][ T6967] fuse: Unknown parameter 'f�' [ 54.289913][ T6969] netlink: 'syz.2.383': attribute type 4 has an invalid length. [ 54.364455][ T854] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 54.425947][ T6983] netlink: 'syz.2.388': attribute type 5 has an invalid length. [ 54.453812][ T10] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 54.453835][ T10] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 54.453861][ T67] Bluetooth: hci0: command 0x0419 tx timeout [ 54.482252][ T6987] CIFS: Attempting to mount //127.0.0.1/test [ 54.482850][ T6987] CIFS: VFS: Error connecting to socket. Aborting operation. [ 54.482872][ T6987] CIFS: VFS: cifs_mount failed w/return code = -111 [ 54.515723][ T854] usb 5-1: New USB device found: idVendor=0cf3, idProduct=9271, bcdDevice=1.08 [ 54.518769][ T854] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.518790][ T854] usb 5-1: Product: syz [ 54.518803][ T854] usb 5-1: Manufacturer: syz [ 54.518816][ T854] usb 5-1: SerialNumber: syz [ 54.545200][ T5876] usb 5-1: Direct firmware load for ath9k_htc/htc_9271-1.4.0.fw failed with error -2 [ 54.550087][ T5876] usb 5-1: Falling back to sysfs fallback for: ath9k_htc/htc_9271-1.4.0.fw [ 54.586975][ T6996] syz.2.393 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 54.671476][ T7000] netlink: 'syz.2.395': attribute type 4 has an invalid length. [ 54.992768][ T7008] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=7008 comm=syz.2.399 [ 55.032040][ T7010] netlink: 'syz.2.400': attribute type 4 has an invalid length. [ 55.108908][ T7014] device-mapper: table: 248:2: ram5 too small for target: start=0, len=8272, dev_size=8192 [ 55.108927][ T7014] device-mapper: core: Cannot calculate initial queue limits [ 55.108932][ T7014] device-mapper: ioctl: unable to set up device queue for new table. [ 55.331236][ T7029] syzkaller0: entered promiscuous mode [ 55.331250][ T7029] syzkaller0: entered allmulticast mode [ 55.610408][ T7039] __nla_validate_parse: 7 callbacks suppressed [ 55.610421][ T7039] netlink: 200 bytes leftover after parsing attributes in process `syz.2.412'. [ 55.620892][ T7039] device-mapper: table: 248:0: integrity: Invalid argument count (-EINVAL) [ 55.620907][ T7039] device-mapper: ioctl: error adding target to table [ 55.779051][ T7052] FAULT_INJECTION: forcing a failure. [ 55.779051][ T7052] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 55.779072][ T7052] CPU: 2 UID: 0 PID: 7052 Comm: syz.2.416 Not tainted syzkaller #0 PREEMPT(full) [ 55.779086][ T7052] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 55.779093][ T7052] Call Trace: [ 55.779097][ T7052] [ 55.779102][ T7052] dump_stack_lvl+0x100/0x190 [ 55.779126][ T7052] should_fail_ex.cold+0x5/0xa [ 55.779165][ T7052] should_fail_alloc_page+0xeb/0x140 [ 55.779180][ T7052] prepare_alloc_pages+0x1f0/0x5b0 [ 55.779193][ T7052] ? is_bpf_text_address+0x94/0x1a0 [ 55.779221][ T7052] __alloc_frozen_pages_noprof+0x1b1/0x3280 [ 55.779238][ T7052] ? arch_stack_walk+0xa6/0xf0 [ 55.779261][ T7052] ? stack_trace_save+0x8e/0xc0 [ 55.779285][ T7052] ? __pfx_stack_trace_save+0x10/0x10 [ 55.779301][ T7052] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 55.779325][ T7052] ? kasan_save_stack+0x3f/0x50 [ 55.779335][ T7052] ? kasan_save_stack+0x30/0x50 [ 55.779345][ T7052] ? kasan_save_track+0x14/0x30 [ 55.779355][ T7052] ? __kasan_slab_alloc+0x89/0x90 [ 55.779366][ T7052] ? kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 55.779384][ T7052] ? alloc_vmap_area+0x643/0x2bc0 [ 55.779401][ T7052] ? __get_vm_area_node+0x1ed/0x350 [ 55.779410][ T7052] ? __vmalloc_node_range_noprof+0x2ad/0x1440 [ 55.779422][ T7052] ? __vmalloc_node_noprof+0xad/0xf0 [ 55.779433][ T7052] ? __vmalloc_noprof+0xa3/0x120 [ 55.779444][ T7052] ? bpf_check+0x1c2b/0xa0f0 [ 55.779461][ T7052] ? bpf_prog_load+0x1baf/0x2b20 [ 55.779478][ T7052] ? __sys_bpf+0x146f/0x4b60 [ 55.779487][ T7052] ? __x64_sys_bpf+0xce/0x140 [ 55.779497][ T7052] ? do_syscall_64+0x123/0x790 [ 55.779508][ T7052] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.779526][ T7052] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 55.779555][ T7052] ? policy_nodemask+0xed/0x5e0 [ 55.779570][ T7052] alloc_pages_mpol+0x201/0x560 [ 55.779584][ T7052] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 55.779601][ T7052] alloc_pages_noprof+0x1a/0x160 [ 55.779617][ T7052] get_free_pages_noprof+0x10/0xb0 [ 55.779635][ T7052] __kasan_populate_vmalloc+0xa0/0x210 [ 55.779656][ T7052] alloc_vmap_area+0x963/0x2bc0 [ 55.779678][ T7052] ? kasan_save_track+0x14/0x30 [ 55.779689][ T7052] ? __kasan_kmalloc+0xaa/0xb0 [ 55.779699][ T7052] ? __pfx_alloc_vmap_area+0x10/0x10 [ 55.779725][ T7052] ? __get_vm_area_node+0x124/0x350 [ 55.779738][ T7052] __get_vm_area_node+0x1ed/0x350 [ 55.779751][ T7052] __vmalloc_node_range_noprof+0x2ad/0x1440 [ 55.779764][ T7052] ? bpf_check+0x1c2b/0xa0f0 [ 55.779786][ T7052] ? bpf_check+0x1c2b/0xa0f0 [ 55.779807][ T7052] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 55.779822][ T7052] ? avc_has_perm_noaudit+0x145/0x470 [ 55.779837][ T7052] ? bpf_check+0x1c2b/0xa0f0 [ 55.779854][ T7052] __vmalloc_node_noprof+0xad/0xf0 [ 55.779866][ T7052] ? bpf_check+0x1c2b/0xa0f0 [ 55.779885][ T7052] __vmalloc_noprof+0xa3/0x120 [ 55.779897][ T7052] ? __pfx___vmalloc_noprof+0x10/0x10 [ 55.779911][ T7052] ? bpf_lsm_bpf_prog_load+0x9/0x10 [ 55.779929][ T7052] ? security_bpf_prog_load+0x10f/0x2f0 [ 55.779948][ T7052] bpf_check+0x1c2b/0xa0f0 [ 55.779977][ T7052] ? __pfx_bpf_check+0x10/0x10 [ 55.779994][ T7052] ? lock_acquire+0x1d1/0x380 [ 55.780018][ T7052] ? bpf_prog_load+0x1af0/0x2b20 [ 55.780035][ T7052] ? find_held_lock+0x2b/0x80 [ 55.780047][ T7052] ? bpf_prog_load+0x1af0/0x2b20 [ 55.780066][ T7052] ? __asan_memset+0x23/0x50 [ 55.780085][ T7052] ? bpf_prog_load+0x1baf/0x2b20 [ 55.780102][ T7052] bpf_prog_load+0x1baf/0x2b20 [ 55.780118][ T7052] ? avc_has_perm_noaudit+0x11e/0x470 [ 55.780135][ T7052] ? __pfx_bpf_prog_load+0x10/0x10 [ 55.780164][ T7052] __sys_bpf+0x146f/0x4b60 [ 55.780178][ T7052] ? __pfx___sys_bpf+0x10/0x10 [ 55.780188][ T7052] ? find_held_lock+0x2b/0x80 [ 55.780200][ T7052] ? get_pid_task+0xfc/0x250 [ 55.780217][ T7052] ? get_pid_task+0xfc/0x250 [ 55.780232][ T7052] ? find_held_lock+0x2b/0x80 [ 55.780247][ T7052] ? rcu_read_lock_any_held+0x6a/0x90 [ 55.780267][ T7052] ? find_held_lock+0x2b/0x80 [ 55.780279][ T7052] ? ksys_write+0x190/0x250 [ 55.780290][ T7052] ? ksys_write+0x190/0x250 [ 55.780300][ T7052] ? lock_acquire+0x1d1/0x380 [ 55.780328][ T7052] ? fput+0x7c/0x100 [ 55.780342][ T7052] ? ksys_write+0x1ac/0x250 [ 55.780355][ T7052] ? __x64_sys_bpf+0xce/0x140 [ 55.780365][ T7052] __x64_sys_bpf+0xce/0x140 [ 55.780376][ T7052] ? do_syscall_64+0xae/0x790 [ 55.780387][ T7052] do_syscall_64+0x123/0x790 [ 55.780400][ T7052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.780412][ T7052] RIP: 0033:0x7f122039fb19 [ 55.780422][ T7052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.780433][ T7052] RSP: 002b:00007f12211b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 55.780444][ T7052] RAX: ffffffffffffffda RBX: 00007f1220625fa0 RCX: 00007f122039fb19 [ 55.780452][ T7052] RDX: 0000000000000094 RSI: 0000200000002c40 RDI: 0000000000000005 [ 55.780459][ T7052] RBP: 00007f12211b7090 R08: 0000000000000000 R09: 0000000000000000 [ 55.780465][ T7052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 55.780472][ T7052] R13: 00007f1220626038 R14: 00007f1220625fa0 R15: 00007fff0194d008 [ 55.780487][ T7052] [ 55.816841][ T7056] netlink: 'syz.2.418': attribute type 4 has an invalid length. [ 55.897396][ T7064] netlink: 'syz.2.418': attribute type 17 has an invalid length. [ 55.914145][ T7064] tipc: Started in network mode [ 55.914157][ T7064] tipc: Node identity 4, cluster identity 4711 [ 55.914164][ T7064] tipc: Node number set to 4 [ 56.262698][ T7072] netlink: 'syz.1.423': attribute type 1 has an invalid length. [ 56.279828][ T7072] 8021q: adding VLAN 0 to HW filter on device bond1 [ 56.288778][ T7072] bond1: (slave ip6erspan0): making interface the new active one [ 56.289684][ T7072] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 56.328442][ T7075] vlan0: left promiscuous mode [ 56.533718][ T10] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 56.533753][ T10] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 56.533853][ T67] Bluetooth: hci1: command 0x0c1a tx timeout [ 56.706133][ T5568] net_ratelimit: 61 callbacks suppressed [ 56.706147][ T5568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 56.739643][ T7091] CIFS: Attempting to mount //127.0.0.1/share [ 56.739969][ T7091] CIFS: VFS: Error connecting to socket. Aborting operation. [ 56.739994][ T7091] CIFS: VFS: cifs_mount failed w/return code = -101 [ 56.808743][ T7097] netlink: 16 bytes leftover after parsing attributes in process `syz.2.430'. [ 56.864165][ T854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 56.903784][ T7101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.432'. [ 57.097445][ T7045] usb 5-1: USB disconnect, device number 3 [ 57.125032][ T7105] netlink: 8 bytes leftover after parsing attributes in process `syz.0.434'. [ 57.125630][ T7105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 57.183715][ T854] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 57.334161][ T854] usb 7-1: New USB device found: idVendor=0cf3, idProduct=9271, bcdDevice=1.08 [ 57.336463][ T854] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.336478][ T854] usb 7-1: Product: syz [ 57.336485][ T854] usb 7-1: Manufacturer: syz [ 57.336493][ T854] usb 7-1: SerialNumber: syz [ 57.624074][ T7120] FAULT_INJECTION: forcing a failure. [ 57.624074][ T7120] name failslab, interval 1, probability 0, space 0, times 0 [ 57.624104][ T7120] CPU: 0 UID: 0 PID: 7120 Comm: syz.1.438 Not tainted syzkaller #0 PREEMPT(full) [ 57.624125][ T7120] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.624136][ T7120] Call Trace: [ 57.624143][ T7120] [ 57.624151][ T7120] dump_stack_lvl+0x100/0x190 [ 57.624186][ T7120] should_fail_ex.cold+0x5/0xa [ 57.624216][ T7120] should_failslab+0xc2/0x120 [ 57.624237][ T7120] __kvmalloc_node_noprof+0x113/0x9b0 [ 57.624266][ T7120] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 57.624291][ T7120] ? bpf_int_jit_compile+0x8cf/0x1a40 [ 57.624322][ T7120] bpf_int_jit_compile+0x8cf/0x1a40 [ 57.624357][ T7120] ? __pfx_bpf_int_jit_compile+0x10/0x10 [ 57.624392][ T7120] ? bpf_prog_has_arena_insns+0x39a/0x430 [ 57.624421][ T7120] __bpf_prog_select_runtime+0x8d1/0xbf0 [ 57.624449][ T7120] ? __asan_memcpy+0x3c/0x60 [ 57.624477][ T7120] bpf_prepare_filter+0xd32/0x11e0 [ 57.624527][ T7120] ? __pfx_bpf_prepare_filter+0x10/0x10 [ 57.624555][ T7120] ? __asan_memcpy+0x3c/0x60 [ 57.624582][ T7120] ? kmemdup_noprof+0x49/0x60 [ 57.624619][ T7120] __get_filter+0x1ff/0x2c0 [ 57.624646][ T7120] sk_attach_filter+0x1c/0x150 [ 57.624675][ T7120] sk_setsockopt+0x3bb9/0x5fc0 [ 57.624713][ T7120] ? __pfx_sk_setsockopt+0x10/0x10 [ 57.624737][ T7120] ? selinux_netlbl_socket_setsockopt+0x134/0x470 [ 57.624769][ T7120] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 57.624805][ T7120] ? find_held_lock+0x2b/0x80 [ 57.624830][ T7120] ? selinux_socket_setsockopt+0x6a/0x80 [ 57.624863][ T7120] do_sock_setsockopt+0x193/0x1d0 [ 57.624897][ T7120] __sys_setsockopt+0x195/0x220 [ 57.624924][ T7120] __x64_sys_setsockopt+0xbd/0x160 [ 57.624943][ T7120] ? do_syscall_64+0xae/0x790 [ 57.624963][ T7120] ? lockdep_hardirqs_on+0x7d/0x110 [ 57.624982][ T7120] do_syscall_64+0x123/0x790 [ 57.625004][ T7120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.625022][ T7120] RIP: 0033:0x7f296b59fb19 [ 57.625038][ T7120] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.625056][ T7120] RSP: 002b:00007f296c534028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 57.625077][ T7120] RAX: ffffffffffffffda RBX: 00007f296b825fa0 RCX: 00007f296b59fb19 [ 57.625090][ T7120] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000004 [ 57.625100][ T7120] RBP: 00007f296b637af8 R08: 0000000000000010 R09: 0000000000000000 [ 57.625112][ T7120] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000000 [ 57.625124][ T7120] R13: 00007f296b826038 R14: 00007f296b825fa0 R15: 00007ffd3011e598 [ 57.625151][ T7120] [ 57.734011][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 57.948641][ T7138] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 57.948725][ T7138] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 57.960608][ T7138] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 57.997970][ T7142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.445'. [ 58.020734][ T7144] netlink: 84 bytes leftover after parsing attributes in process `syz.1.446'. [ 58.020753][ T7144] netlink: 84 bytes leftover after parsing attributes in process `syz.1.446'. [ 58.053966][ T854] ================================================================== [ 58.053989][ T854] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x19fb/0x1d60 [ 58.054040][ T854] Write of size 8 at addr ffffc90004f60c00 by task kworker/2:2/854 [ 58.054056][ T854] [ 58.054067][ T854] CPU: 2 UID: 0 PID: 854 Comm: kworker/2:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 58.054093][ T854] Tainted: [L]=SOFTLOCKUP [ 58.054118][ T854] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 58.054139][ T854] Workqueue: events_power_efficient fb_flashcursor [ 58.054160][ T854] Call Trace: [ 58.054167][ T854] [ 58.054175][ T854] dump_stack_lvl+0x100/0x190 [ 58.054207][ T854] print_report+0x13d/0x4b0 [ 58.054251][ T854] ? _raw_spin_lock_irqsave+0x52/0x60 [ 58.054282][ T854] ? sys_imageblit+0x19fb/0x1d60 [ 58.054307][ T854] kasan_report+0xdf/0x1c0 [ 58.054329][ T854] ? sys_imageblit+0x19fb/0x1d60 [ 58.054364][ T854] sys_imageblit+0x19fb/0x1d60 [ 58.054395][ T854] ? __pfx_sys_imageblit+0x10/0x10 [ 58.054427][ T854] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 58.054470][ T854] soft_cursor+0x524/0xa10 [ 58.054498][ T854] bit_cursor+0xcf1/0x14d0 [ 58.054524][ T854] ? __pfx_bit_cursor+0x10/0x10 [ 58.054550][ T854] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 58.054582][ T854] ? get_color+0x1da/0x450 [ 58.054601][ T854] ? __pfx_bit_cursor+0x10/0x10 [ 58.054623][ T854] fb_flashcursor+0x338/0x430 [ 58.054643][ T854] process_one_work+0xac7/0x1b10 [ 58.054670][ T854] ? __pfx_process_one_work+0x10/0x10 [ 58.054693][ T854] ? lock_acquire+0x1d1/0x380 [ 58.054722][ T854] ? __pfx_fb_flashcursor+0x10/0x10 [ 58.054742][ T854] worker_thread+0x5ef/0xe50 [ 58.054766][ T854] ? __pfx_worker_thread+0x10/0x10 [ 58.054788][ T854] ? kthread+0x13a/0x450 [ 58.054806][ T854] ? __pfx_worker_thread+0x10/0x10 [ 58.054827][ T854] kthread+0x373/0x450 [ 58.054844][ T854] ? __pfx_kthread+0x10/0x10 [ 58.054864][ T854] ret_from_fork+0x730/0xd60 [ 58.054889][ T854] ? __pfx_ret_from_fork+0x10/0x10 [ 58.054914][ T854] ? __switch_to+0x800/0x10e0 [ 58.054932][ T854] ? __pfx_kthread+0x10/0x10 [ 58.054952][ T854] ret_from_fork_asm+0x1a/0x30 [ 58.054980][ T854] [ 58.054987][ T854] [ 58.054991][ T854] The buggy address belongs to a 8-page vmalloc region starting at 0xffffc90004f58000 allocated at kernel_clone+0x176/0x9d0 [ 58.055029][ T854] Memory state around the buggy address: [ 58.055039][ T854] ffffc90004f60b00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 58.055052][ T854] ffffc90004f60b80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 58.055065][ T854] >ffffc90004f60c00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 58.055075][ T854] ^ [ 58.055084][ T854] ffffc90004f60c80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 58.055097][ T854] ffffc90004f60d00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 58.055107][ T854] ================================================================== [ 58.057035][ T854] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 58.168754][ T854] CPU: 2 UID: 0 PID: 854 Comm: kworker/2:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 58.173130][ T854] Tainted: [L]=SOFTLOCKUP [ 58.174962][ T854] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 58.179151][ T854] Workqueue: events_power_efficient fb_flashcursor [ 58.181905][ T854] Call Trace: [ 58.183326][ T854] [ 58.184504][ T854] dump_stack_lvl+0x100/0x190 [ 58.185994][ T854] vpanic+0x2dc/0x6f8 [ 58.187253][ T854] panic+0xd1/0xe0 [ 58.188456][ T854] ? __pfx_panic+0x10/0x10 [ 58.189869][ T854] ? sys_imageblit+0x19fb/0x1d60 [ 58.191537][ T854] ? preempt_schedule+0x57/0xd0 [ 58.193213][ T854] check_panic_on_warn.cold+0x19/0x34 [ 58.194924][ T854] end_report.part.0+0x3a/0x90 [ 58.196425][ T854] kasan_report.cold+0xe/0x18 [ 58.197915][ T854] ? sys_imageblit+0x19fb/0x1d60 [ 58.199582][ T854] sys_imageblit+0x19fb/0x1d60 [ 58.201094][ T854] ? __pfx_sys_imageblit+0x10/0x10 [ 58.202764][ T854] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 58.204668][ T854] soft_cursor+0x524/0xa10 [ 58.206073][ T854] bit_cursor+0xcf1/0x14d0 [ 58.207479][ T854] ? __pfx_bit_cursor+0x10/0x10 [ 58.209016][ T854] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 58.210868][ T854] ? get_color+0x1da/0x450 [ 58.212468][ T854] ? __pfx_bit_cursor+0x10/0x10 [ 58.214501][ T854] fb_flashcursor+0x338/0x430 [ 58.216438][ T854] process_one_work+0xac7/0x1b10 [ 58.218436][ T854] ? __pfx_process_one_work+0x10/0x10 [ 58.220099][ T854] ? lock_acquire+0x1d1/0x380 [ 58.221779][ T854] ? __pfx_fb_flashcursor+0x10/0x10 [ 58.223858][ T854] worker_thread+0x5ef/0xe50 [ 58.225325][ T854] ? __pfx_worker_thread+0x10/0x10 [ 58.226928][ T854] ? kthread+0x13a/0x450 [ 58.228431][ T854] ? __pfx_worker_thread+0x10/0x10 [ 58.230036][ T854] kthread+0x373/0x450 [ 58.231359][ T854] ? __pfx_kthread+0x10/0x10 [ 58.232799][ T854] ret_from_fork+0x730/0xd60 [ 58.234298][ T854] ? __pfx_ret_from_fork+0x10/0x10 [ 58.235892][ T854] ? __switch_to+0x800/0x10e0 [ 58.237375][ T854] ? __pfx_kthread+0x10/0x10 [ 58.239021][ T854] ret_from_fork_asm+0x1a/0x30 [ 58.240979][ T854] [ 58.242922][ T854] Kernel Offset: disabled [ 58.244754][ T854] Rebooting in 86400 seconds.. VM DIAGNOSIS: 17:01:08 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000002 RCX=0000000000000000 RDX=ffff88802746cb00 RSI=ffffffff820169de RDI=0000000000000005 RBP=ffff88806a242380 RSP=ffffc900032df8a0 R8 =0000000000000000 R9 =0000000000000001 R10=0000000000000001 R11=0000000000000000 R12=ffffed1004e8dc13 R13=0000000000000003 R14=ffffed100d448471 R15=0000000000000001 RIP=ffffffff820169e0 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d447d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f296c4b0d58 CR3=000000004bb5d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73746e6576652e70 6177732e79726f6d ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc25c07396 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc25c07396 00007ffc25c0739c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f76b3c38135 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f76b3c3816f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f76b3c382d3 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f76b3c38161 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000003 RBX=0000000000000001 RCX=ffffffff931fe1a0 RDX=0000000000000000 RSI=0000000000000001 RDI=ffffffff931fe1a2 RBP=ffffc90003cef9b0 RSP=ffffc90003cef8f8 R8 =0000000000000001 R9 =0000000000000007 R10=0000000000000200 R11=0000000000019c76 R12=ffffc90003cef9b8 R13=ffffc90003cef968 R14=ffffc90003cefef8 R15=ffffc90003cef99c RIP=ffffffff81bb4ee7 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00005555752d7500 ffffffff 00c00000 GS =0000 ffff8880d457d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000110c4921f8 CR3=0000000052e38000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000020081 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff80c435b0 0000003000000018 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 312e35382e302e6f 732e6d617062696c ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff80c45916 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff80c45916 00007fff80c4591c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f510e638135 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f510e63816f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f510e6382d3 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f510e638161 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 2074657365720064 656c696166202973 2528746174736c00 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 0551405640570041 40494c4443050c56 000d514451564900 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 646e756f46206950 2079727265627073 61522e6f6964732d 353534333463616d ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 00000000000000a0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000072 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85c23bf5 RDI=ffffffff9cf4b080 RBP=ffffffff9cf4b040 RSP=ffffc900048ff098 R8 =000000000000001f R9 =0000000000000000 R10=0000000000000003 R11=3030396366666666 R12=0000000000000000 R13=0000000000000072 R14=000000000000000b R15=ffffc900048ff3b0 RIP=ffffffff85c23c1f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d467d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f296c4afff8 CR3=0000000036df4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcd22bfae80 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcd22bfae80 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555a880648 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 66920303fc020066 9003020488006688 0301fffc04840066 8403140400668003 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00080007000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0018000800000000 002100088001003c 80020040801a0114 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100100012800401 000000080606016d e600080012e00300 100012d003001000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 12c00302100012b0 0304e81000139003 070014800a006c00 000000001f000800 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000012000800 000000000c000800 0000000009000800 0000000003000800 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000018000800 0000000021000880 01003c8002004080 1a01140000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0804880037880302 b8c6048400378403 1404003780031010 0035800402800800 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=dffffc0000000000 RBX=0000000000000000 RCX=0000000000000000 RDX=0000000000000000 RSI=0000000000000590 RDI=ffffffff8c2219a0 RBP=0000000000000000 RSP=ffffc900041ef9f0 R8 =0000000000000000 R9 =0000000000000000 R10=ffff888029e50007 R11=0000000000000000 R12=ffffffff8c2219a0 R13=0000000000000590 R14=0000000000210008 R15=ffff888038ee5b80 RIP=ffffffff81d8acf4 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f296c4b06c0 ffffffff 00c00000 GS =0000 ffff8880d477d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f296c533ff8 CR3=00000000564f0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd3011ea86 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd3011ea86 00007ffd3011ea8c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f296b638135 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f296b63816f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f296b6382d3 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f296b638161 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f296b7fa5f8 00007f296b7fa5c8 00007f296b7fa600 00007f296b7fa5e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000