last executing test programs: 4.100655704s ago: executing program 1 (id=515): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) (async) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x28000}, [@IFLA_PORT_SELF={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}}, 0x0) sendmmsg$alg(r1, &(0x7f00000063c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000c40)="97b5ee06edbce480b6bdc020061952fd", 0x10}], 0x1, &(0x7f00000003c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x14}], 0x1, 0x800) recvmsg$can_raw(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000080)=""/30, 0x1e}], 0x1}, 0x10081) (async) recvmsg$can_raw(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000080)=""/30, 0x1e}], 0x1}, 0x10081) 4.029542135s ago: executing program 1 (id=517): set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) r0 = io_uring_setup(0x76a7, &(0x7f0000000000)={0x0, 0x284c, 0x4, 0x3, 0x2aa}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x4000010, r0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 4.027916196s ago: executing program 1 (id=520): r0 = socket(0x27, 0xa, 0xfffffffd) setsockopt$inet_int(r0, 0x0, 0xa, &(0x7f00000000c0)=0x1002, 0x68) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000bc0)=@ethtool_perm_addr={0x20, 0x10, "f87eb99b81ab90adf61e87b2fa219156"}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000100)="0f201e450f01cf0f229d6636f2460f07430f01d166b8df008ec0f26d66b89a008ed066b857000f00d0470f797904", 0x2e}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendto$inet(r0, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x12160) 3.847132915s ago: executing program 1 (id=524): madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xc) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x1, 0x12c, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0xdd, 0x6e, 0xd4, 0x20, 0x403, 0xd015, 0xe762, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x11a, 0x1, 0x3, 0x3, 0x80, 0x0, [{{0x9, 0x4, 0x8c, 0x6, 0x3, 0xaf, 0xa0, 0x2d, 0x2, [@uac_as={[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x0, 0x82f7, 0x8, "3454caecb76e767f"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x5, 0xffff, 0x5, "2fb5ba64f65798"}, @as_header={0x7, 0x24, 0x1, 0x6, 0x6, 0x4}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x68, 0x4, 0x5, 0x2, "bc7bd944"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x4, 0x3, 0xa, 0x1, "a7", "812b"}]}], [{{0x9, 0x5, 0xc, 0x10, 0x8, 0x1, 0x3, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x9}]}}, {{0x9, 0x5, 0x9, 0x4, 0x8, 0xff, 0x9, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x4}]}}, {{0x9, 0x5, 0xb, 0x2, 0x8, 0x0, 0x3, 0xff, [@generic={0x57, 0x5, "f2482235be39da7db132d2f3fb77fd8c6fc388592ccfb9df581cd29b9e6451ad6264d45735e7b067029db9a7367cf6ca254ca7c1d00610d01e734fc8445ebc585ac953051eb8810e56c18bff9829e94d4f18d97ec5"}, @generic={0x42, 0xa, "9c25414d2f1fe7b8af79f5fc43f3f60a57e0dbdb78a1ed0a11a7899334cf8abd4102a6d60cd1151e7c042a4d86648c7f5fb0f5967beef059049cdd1fcac5d333"}]}}]}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0x6, 0x2e, 0x0, 0x20, 0x2}, 0x3b, &(0x7f0000000180)={0x5, 0xf, 0x3b, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x16, 0x7, 0x1}, @ssp_cap={0x24, 0x10, 0xa, 0x1f, 0x6, 0x0, 0xf000, 0x8, [0xffff, 0xff0000, 0xff00, 0xc00f, 0x3f00, 0xff0000]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0x0, 0x2, 0xfff7, 0x9}]}, 0x7, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x1447}}, {0x83, &(0x7f0000000200)=@string={0x83, 0x3, "251aa4d7bb6df6fdbf6eb9a86b8d7ec18e9c683e8ee642df66c4492d19b1a5d31adbf112df72f554b09dbaef65eb749b9aa2053cf0d410789bdfd31f37adb523f76630089f7ba043ccc28de19477430fe49c5ff719df69ecbaa4b30d8462452cb2b4d934070c32bb8fa7ea6edcccc3aec17415a93b1ab42df0010e2a1492fa900a"}}, {0x7c, &(0x7f00000002c0)=@string={0x7c, 0x3, "be0a16176a0f429b678d1a14ccf370ec6ecfe593f168e3509e69d9ac117c335681a2c3af6cb990b3c5dd7dbd2088dfb16f8d8d306c1b5460c0fd790895006ed142424d939d6c863f3da0f4e86b2a4370fb02c39938a5cf6847f60360b7e134a08618db0fec9e9d3a8c9b129b7fc0f4878104cb400b13f204a7cd"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x480a}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x69, &(0x7f00000003c0)=@string={0x69, 0x3, "35ebc34b0a353b5c7bc61372bf929d7a0fabbeff1ae6da094f119846f22f6b98c3db1d13500abaf0d6de071f85d22c4a13970180e3ca1bd07bbbaf98d89bbf349fefc33d6e065e85cf6863ed658d628ce8c7ac7d7e6ce84c6a994a8873529f304f91f8ffcddf66"}}, {0x6e, &(0x7f0000000440)=@string={0x6e, 0x3, "7dfa501029bdd6a8d2336829335f2cb3ebe447e0f56295320c05809a1aefaedfb64a909ace60fad034c3a5fac38b54cb037f5b64762ed44fb70aa556d67adec74a632cebffa0e289f62ea2f7e5627aff9805eccdf138e48870be4d0ee132b93595b838d3042b3bb007c6c25c"}}]}) 3.379825716s ago: executing program 0 (id=532): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x28) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='./file0\x00') 3.37944324s ago: executing program 0 (id=534): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="040e04031a0c91e3245483aca48e1f2bc6800b412011fece7dd92fe38e8d84a9d79cbb133d7b57526d5ea08b4fb3ba0852cbdebc10f582b145de06f1a9e7d9fa5d508f3859f3a9373cbfe1a414e9ff1bf5ca86e87901879ebeb6ac43e971d060bf369710c151ebb3a27538a2c5c441f7adfe0bf112d772e9fb7ae7bd82a1447d0c5d97118b23ad07777d6cfd6db92ce171af995cbc6a266b94196b438747cd14bc3936759ff70b288fd72568732934689bc848c6ef1ba8914f2e25161dcfa9aca92a6110bf98b5ed8e76dfc70a9442fc2235df69bee3dec7b98a1c59a9fc38a5be77b69d5b9865ed5d3e664705d2264fb31878215bd54e7699"], 0x7) open_tree(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r4}, 0x10) r5 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) 3.260447463s ago: executing program 0 (id=536): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, '\x00', 0x12}, 0x2}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x90}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x401, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0x48}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_COST={0x8, 0x3, 0x4f}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24044040}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x401, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0x48}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_COST={0x8, 0x3, 0x4f}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24044040}, 0x0) 3.190267107s ago: executing program 0 (id=537): setreuid(0xee01, 0xee01) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f00000001c0)={r1, r1, 0x4, 0x100010001, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000200)={&(0x7f00000004c0)=[r1], 0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f00000000c0)={r1, r1, 0x0, 0x6}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYRESHEX], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}, 0x10}, 0x94) 3.189282798s ago: executing program 0 (id=539): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xb}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000380)={'tunl0\x00', 0x0, 0x7800, 0x0, 0x9, 0x5, {{0x44, 0x4, 0x2, 0x4, 0x110, 0x65, 0x0, 0x24, 0x29, 0x0, @loopback, @loopback, {[@noop, @lsrr={0x83, 0xf, 0x80, [@loopback, @dev={0xac, 0x14, 0x14, 0x10}, @local]}, @end, @timestamp={0x44, 0x28, 0x9, 0x0, 0x8, [0xe, 0xffffff8c, 0x2, 0x0, 0x3ff, 0x5, 0x7, 0x9, 0xf97]}, @ssrr={0x89, 0x17, 0xa4, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @private=0xa010100]}, @timestamp_prespec={0x44, 0x54, 0xa6, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x9, 0x0}, 0x68a}, {@broadcast, 0x6}, {@local, 0x9}, {@loopback, 0x4}, {@local, 0x1}, {@empty, 0x5}, {@private=0xa0100fe, 0x3}, {@local, 0x7}, {@broadcast, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp_prespec={0x44, 0x14, 0xb, 0x3, 0xd, [{@multicast1, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xa}]}, @timestamp_addr={0x44, 0x44, 0xd2, 0x1, 0xf, [{@loopback, 0x101}, {@remote, 0x8}, {@local, 0x7}, {@rand_addr=0x64010102, 0x4}, {@multicast1, 0x7}, {@multicast1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@dev={0xac, 0x14, 0x14, 0x80}, 0x40}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000004c0)={'ip6gre0\x00', r3, 0x29, 0x4, 0x7, 0xfa6, 0x0, @mcast1, @dev={0xfe, 0x80, '\x00', 0x34}, 0x40, 0x10, 0x7, 0x5}}) syz_clone(0xa61a2100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x24, 0x1, 0x0, 0x0, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0xc8}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x10, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mount$fuseblk(&(0x7f0000002440), &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x200c40e, &(0x7f00000000c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x1000}}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xd0, &(0x7f0000000000)=0x46, 0x4) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000080)={0x8}) fstat(r7, &(0x7f0000000300)) bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r6, &(0x7f0000000000), 0xd) r8 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x2200) ioctl$EVIOCGNAME(r8, 0x80404506, &(0x7f0000000140)=""/132) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r9 = syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) ioctl$PAGEMAP_SCAN(r9, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f000007c000/0x4000)=nil, &(0x7f0000839000/0x1000)=nil, 0x0, 0x0, 0x0, 0x9, 0x40, 0x0, 0x51, 0xa}) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='b:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 2.269291812s ago: executing program 0 (id=550): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) io_setup(0x2, &(0x7f0000000200)=0x0) r2 = eventfd2(0x0, 0x0) io_submit(r1, 0x1, &(0x7f00000006c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) io_getevents(r1, 0x2, 0x2, &(0x7f0000001340)=[{}, {}], 0x0) (async) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1354c2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1832b, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000140)="ad76b6c5", 0x4) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmmsg$alg(r8, &(0x7f0000004c00)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="a9861869a75f66ef7d128ae4230965648a021cdf93508c9706dc1e4d9e1d4c436faf1d2786", 0x25}, {&(0x7f0000000040)="eeb9ff4efd6ce05a6ccd7c", 0xfe85}, {&(0x7f00000001c0)="7a33e678762b32820b", 0x9}], 0x3, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x0, 0x117, 0x4, 0x9}, @iv={0x0, 0x117, 0x2, 0x0, "f0f60d0c8902cf02f6b345465a9f37b8b08a34e37624210d147505c64ef863f3e92bdce7c78a97d195340fc205cb4d52df937b35fc82582e5336d068b9a373697c4f24a8e4efa23f6a88875820a3a9e9119b89cddd18e0b8cf0728795a25524638976252bbfb956836c3426d96dba29885768fd964a8f46163b5157e1ba472de8f5c632bcab5165f3803b9b8d522f43b15267997bac0fd56c1da3e7240d9d8a134f61bd3c128ed73c73042cc4cd86fda92"}, @iv={0x0, 0x117, 0x2, 0x0, "4120670317223487130737cff4ca48e94911518a0a09220df4ffb94454290c0c1bd03a7bbaaa5e00f366488ae89f6a649e50ddf3c31a5d60392aba468d99f37c1810dd578a6b99b8dd7f925c5dddcfa62f6d"}], 0x18, 0x4012}], 0x1, 0x0) (async) recvmmsg$unix(r8, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000034c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x20, 0x0) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, 0x0, 0x0) mount$binderfs(0x0, &(0x7f0000000700)='./binderfs\x00', 0x0, 0x20, &(0x7f0000000780)=ANY=[@ANYBLOB='stats=global']) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4d, 0x0, 0x0) (async) r9 = socket$inet6(0xa, 0x2, 0x0) mkdir(&(0x7f0000000b80)='./file0\x00', 0xd6) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r10, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r10, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r10, &(0x7f0000000080)={0x18, 0x0, r11, {0x7}}, 0x18) (async) lstat(&(0x7f0000005200)='./file0\x00', &(0x7f0000005240)) (async) sendto$inet6(r9, 0x0, 0x0, 0x2409c8c1, 0x0, 0x0) 1.415955673s ago: executing program 3 (id=568): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000140)=0x81) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000002380)={0x48, 0x0, &(0x7f0000001300)=[@register_looper, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000001380)='r'}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0xd90, 0x0, 0x2}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)) r4 = socket(0x10, 0x3, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) r6 = accept$alg(r5, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000080)="ad060000", 0x4) sendmsg$alg(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000004d80)="54df3effeacd519db54c179f139a9b1166dddd98191bd111a457bb7432e15e35d65179ab6aba01e726f63fba6ab74b8707d9bf89203051eeb73542f97b38e84b", 0x40}], 0x1, 0x0, 0x0, 0x80}, 0x0) recvmmsg(r6, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000200)=""/58, 0x3a}, {&(0x7f0000000e00)=""/4096, 0x1000}], 0x2}, 0x53}], 0x1, 0x2021, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000200)=[@register_looper], 0x0, 0x0, 0x0}) 791.217412ms ago: executing program 1 (id=576): socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair(0x18, 0x0, 0x7f, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$inet6_int(r0, 0x29, 0xcb, 0x0, &(0x7f0000000000)=0xfffffffffffffcdb) 659.553571ms ago: executing program 1 (id=578): getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000004c0)=0x0, &(0x7f0000000500)=0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000540)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x55, '\x00', r0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_migrate_pages_start\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_auto}]}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file1'}, 0x3a}], [], 0x2f}) syz_fuse_handle_req(r4, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0xffffffffffffffff, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x0, {0x40, 0x3, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x120, 0x6000, 0x0, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r4, &(0x7f0000000440)={0x50, 0x0, r5, {0x7, 0x29, 0x0, 0x14c0748, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r6 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x1) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r6, 0x3b65, 0x1) ioctl$TIOCGPTPEER(r6, 0x80480911, 0x8) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x6}, @hci_rp_read_def_link_policy={{0x6}, {0xfe, 0x1}}}}, 0x9) rt_sigsuspend(0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r7, 0x400452c8, &(0x7f0000000100)) ioctl$SIOCX25SDTEFACILITIES(r6, 0x89eb, &(0x7f0000000540)={0xc40e, 0x79, 0x1, 0x3, 0x3, 0x1b, 0x28, "4fe8850cf117449b2874c6a4be19d84397472422", "c24ffca1cd7afaf71d099f5d3db055d10bee0e7c"}) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c9, &(0x7f0000000100)) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, &(0x7f0000000340)={&(0x7f00006cc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/195, 0xc3, 0x1, &(0x7f0000000280)=""/173, 0xad}, &(0x7f00000003c0)=0x40) 499.531361ms ago: executing program 2 (id=581): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'nicvf0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x80489439, &(0x7f0000000140)) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (rerun: 64) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000002ac0)={'ip_vti0\x00', &(0x7f0000002a40)={'gretap0\x00', 0x0, 0x700, 0x7800, 0x0, 0xfffff7c3, {{0x5, 0x4, 0x0, 0x33, 0x14, 0x64, 0x0, 0x80, 0x4, 0x0, @broadcast, @multicast2}}}}) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {}, {0xa}}, [@filter_kind_options=@f_u32={{0x1e}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0xffcb}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 439.53202ms ago: executing program 3 (id=582): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000040)={@loopback}, &(0x7f0000000080)=0x14) (async) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000040)={@loopback}, &(0x7f0000000080)=0x14) chdir(&(0x7f00000000c0)='./file0\x00') openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000100), 0x2, 0x0) (async) r2 = openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000100), 0x2, 0x0) writev(r2, &(0x7f0000000140), 0x0) write$binfmt_misc(r1, &(0x7f0000000180)="047f1e526832f85b4c6169efd2cba4d07075d35ef6e452c762d886bf909f67be840811faa6a49be127706dd157383256b20962e4083977e036102c6686d4a4e0c1c2a10bb6650af759156dcec07b82f37322d2926f1fb63d4a7b9542dc", 0x5d) syz_emit_ethernet(0xdc, &(0x7f0000000200)={@multicast, @random="97230a9c4756", @void, {@generic={0x4, "57c290d406f5deb87eeeee02b2d47de71adec64dc24f6061b2829cb880b51275e65319e6562fc2127caa4f8143f109e57bedb1101a9537da11867fd7e769ffdb4967593d4c91c3251056ad31329d8a03861f743039c7f861f56093f7e7d6ebcdc547bef28d4aa5caa85ce00b9bfa5bb95c1b1af96f3d6c0866f79a716ba333a064782cf6643370dfa1919eb46055d26092faaadb13769ed088065c9c765bf7199180fe19c6e6d3018e1edd5595205f1f5159a1ce8e1b1b26fe28f4f7eee8aef4062f4241d66763f4b089825bb86c"}}}, &(0x7f0000000300)={0x1, 0x2, [0x1ad, 0x212, 0x502, 0x50b]}) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000400)={@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(camellia)\x00'}, {&(0x7f0000000340)=""/103, 0x67}, &(0x7f00000003c0), 0x28}, 0xa0) sendfile(r2, r0, &(0x7f00000004c0)=0x80, 0x5) mkdirat(r0, &(0x7f0000000500)='./file0\x00', 0x140) (async) mkdirat(r0, &(0x7f0000000500)='./file0\x00', 0x140) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x200100c4}, 0x810) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x70, r4, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7, 0x1c}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x200090c0}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r6, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x64, 0x5, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}]}, 0x64}}, 0x41) read$alg(r1, &(0x7f0000000940)=""/10, 0xa) (async) read$alg(r1, &(0x7f0000000940)=""/10, 0xa) ioctl$I2C_TENBIT(r0, 0x704, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000980)={0x0, 0x9, 0x2, [0x9, 0x800]}, &(0x7f00000009c0)=0xc) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000a00)={r7, @in={{0x2, 0x4e23, @private=0xa010100}}}, 0x84) (async) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000a00)={r7, @in={{0x2, 0x4e23, @private=0xa010100}}}, 0x84) close_range(r3, r1, 0x2) sendmsg$NL80211_CMD_AUTHENTICATE(r3, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b00)={0xa4, r4, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xd1, 0x72}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="c8934f5785ab"}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3da}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0xa4}, 0x1, 0x0, 0x0, 0x2004c011}, 0x4800) (async) sendmsg$NL80211_CMD_AUTHENTICATE(r3, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b00)={0xa4, r4, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xd1, 0x72}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="c8934f5785ab"}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3da}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0xa4}, 0x1, 0x0, 0x0, 0x2004c011}, 0x4800) mount$overlay(0x0, &(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80), 0x4000, &(0x7f0000000cc0)={[{@metacopy_on}, {@nfs_export_on}], [{@obj_user={'obj_user', 0x3d, 'syz0\x00'}}, {@smackfshat={'smackfshat', 0x3d, 'net_prio.ifpriomap\x00'}}, {@obj_type={'obj_type', 0x3d, '-]'}}, {@dont_hash}]}) (async) mount$overlay(0x0, &(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80), 0x4000, &(0x7f0000000cc0)={[{@metacopy_on}, {@nfs_export_on}], [{@obj_user={'obj_user', 0x3d, 'syz0\x00'}}, {@smackfshat={'smackfshat', 0x3d, 'net_prio.ifpriomap\x00'}}, {@obj_type={'obj_type', 0x3d, '-]'}}, {@dont_hash}]}) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000d80), r1) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000e80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x68, r8, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DST={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_DST={0x14, 0x1, @private2}]}, 0x68}, 0x1, 0x0, 0x0, 0xc0a3}, 0x4040005) getpeername$packet(0xffffffffffffffff, &(0x7f0000000f00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000f40)=0x14) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000001100)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x40640080}, 0xc, &(0x7f00000010c0)={&(0x7f0000000f80)={0x11c, 0x12, 0x0, 0x70bd28, 0x25dfdbfe, {0x15, 0xf, 0x5e, 0xfc, {0x4e24, 0x4e20, [0x8933, 0x516, 0x6, 0xab5a0adf], [0x79, 0x5, 0x1, 0x8], r9, [0x1800, 0x10]}, 0xb70, 0x6}, [@INET_DIAG_REQ_BYTECODE={0x69, 0x1, "d0a6f9703346633dc10225414eddd281573dfbd59cda430fc641efe92b435865c25109e8428319e8a58834c056277aeda7d0f0eaa7a9e631c74ae335f3e973bbe57e10dc96752b66005fed12c976fddd98120588b30e689ec532b9e43de9136e11dd54d286"}, @INET_DIAG_REQ_BYTECODE={0x64, 0x1, "a6dd16d614f3f302e076f32d362e2a3d797b95203a75c3de02f713dc5a7e9b9d90254384945855eeeee76fc5dd0587520b9787ceaec9651a6f49a3954f8c4f687d8ede7ecf0623a0120e9170ca5c3c0d865a1e6050f043ad0d5beb840a385ad7"}]}, 0x11c}, 0x1, 0x0, 0x0, 0x801}, 0x20000084) (async) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000001100)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x40640080}, 0xc, &(0x7f00000010c0)={&(0x7f0000000f80)={0x11c, 0x12, 0x0, 0x70bd28, 0x25dfdbfe, {0x15, 0xf, 0x5e, 0xfc, {0x4e24, 0x4e20, [0x8933, 0x516, 0x6, 0xab5a0adf], [0x79, 0x5, 0x1, 0x8], r9, [0x1800, 0x10]}, 0xb70, 0x6}, [@INET_DIAG_REQ_BYTECODE={0x69, 0x1, "d0a6f9703346633dc10225414eddd281573dfbd59cda430fc641efe92b435865c25109e8428319e8a58834c056277aeda7d0f0eaa7a9e631c74ae335f3e973bbe57e10dc96752b66005fed12c976fddd98120588b30e689ec532b9e43de9136e11dd54d286"}, @INET_DIAG_REQ_BYTECODE={0x64, 0x1, "a6dd16d614f3f302e076f32d362e2a3d797b95203a75c3de02f713dc5a7e9b9d90254384945855eeeee76fc5dd0587520b9787ceaec9651a6f49a3954f8c4f687d8ede7ecf0623a0120e9170ca5c3c0d865a1e6050f043ad0d5beb840a385ad7"}]}, 0x11c}, 0x1, 0x0, 0x0, 0x801}, 0x20000084) r10 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000001140), 0x54040, 0x0) tee(r10, r2, 0x10001, 0x1) 432.460247ms ago: executing program 2 (id=583): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000380)=ANY=[@ANYBLOB="2b6e2615475ceb3b4f50ec00000021df25fc02000000000000000000000000000101004e2400004e210000020020733b00000000a058525900000000815f20f4a87f048a7a604eaa0641857c9136d4b367c738004dcd1a95608a97b139b782a99d06197c46c17af32b6adf983edd9da88c16d932361beb69e05575de9e668765567dd968c95c1d9a0d990faf23712c2133f69d2fbd6da75781bd79615c42bd5424c4d3206c032151f1282d2650416071056da7ec5981e7530f88b62f85eff6d92e9df4f9ec0c91a684a15ea2b579", @ANYRES64=r0, @ANYRES32=0x0, @ANYBLOB="bb6b6e00020000009c00110000000000000000000000000000000000e000000100000000000000000000000020010000000000000000000000000001ff0200000000000000000000000000012b020000000000000200080000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000ffff7f0000010000000000000000000000000000000133010000ff34000002000a00"], 0xec}, 0x1, 0x0, 0x0, 0x8c000}, 0x20008010) mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000200)='ntfs3\x00', 0x221000d, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x9, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b0903, 0x2b, '\x00', @value=0x6}}) ioctl$FS_IOC_GETFSLABEL(r2, 0x800452d3, &(0x7f0000000100)) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x61b0, 0x1, {0x0}, 0xea}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000080)=0x2) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x200000000000017b, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r5, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_AUXV(0x23, 0xc, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)=@newtaction={0x68, 0x30, 0xb, 0x70bd26, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x400, 0x3, 0x8, 0x1}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x9}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x68}}, 0x40000) 431.912458ms ago: executing program 3 (id=584): r0 = shmget$private(0x0, 0x1000, 0x54000002, &(0x7f0000ffd000/0x1000)=nil) (async) setreuid(0xee00, 0xee01) shmctl$SHM_UNLOCK(r0, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_emit_vhci(&(0x7f00000017c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x1, 0x413}}}, 0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x18) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) (async) r4 = memfd_secret(0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r5, r4, 0x2e, 0x4608, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000540)={r6, r5, 0x4, r5}, 0x10) (async) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newnexthop={0x1c, 0x68, 0x1, 0x3, 0x80000000, {}, [@NHA_GROUP={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x400d0) (async) clock_getres(0xeaffffff, 0x0) (async) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r9 = dup3(r8, r7, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) mq_timedsend(r9, &(0x7f0000000200)="0aae5f51be9de9081fdc454fc548e3ac10fc3804507723ca1e3988fbd1249c091c573fdf36addd9d6f78dde4893a223eb9ca6d33671003f067899a1a427624eaf5436f0d7ec73f1dc755b7e334489c361a474fe4100b38373d2f5224aaa9e3b0b7c38ac5692c7c299aa30a21a5e37e1236c959f8fcebb841aa970f800814bbda4cb7a33478036f08c8397a5540b163042aec1d7ddb4c0af31a841d42018c0d0b3c4f6d9028efb520328c", 0xaa, 0x3, &(0x7f0000000080)={0x0, 0x3938700}) (async) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}]}, 0x58}}, 0x4004020) (async) dup3(r7, r8, 0x0) 359.852883ms ago: executing program 3 (id=585): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="340000001400190126bd7000f5dbdf250a0819ff", @ANYRES32=r2, @ANYBLOB="14000100000000000000150000000009002108800800860300080000"], 0x34}, 0x1, 0x0, 0x0, 0x4c051}, 0x8004) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (rerun: 32) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xc, 0xfff2}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) (async) ioctl$sock_rose_SIOCDELRT(r4, 0x890c, &(0x7f0000000080)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8, @null, @bpq0, 0x3, [@null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null]}) r6 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000005c0)={r7, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) (async) connect$l2tp6(r7, &(0x7f0000000040)={0xa, 0x0, 0x401, @loopback, 0x4, 0x2}, 0x20) r8 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x88000) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000001280)={r6, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e914daaca7bd64c6a4b4e00d9683dda1af1ea80000000000000000000000deff0000000000000000000000000000000800", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x800]}}) 357.889551ms ago: executing program 2 (id=586): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000791200000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0xfffffffd, @mcast1, 0x37}}, {{0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x8}}}, 0x108) (async) r1 = socket(0xa, 0x801, 0x0) getsockopt(r1, 0x29, 0x4b, 0x0, &(0x7f0000001ffc)) 357.020104ms ago: executing program 2 (id=587): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) close(0x3) connect$netrom(0xffffffffffffffff, &(0x7f00000000c0)={{0x3, @null, 0x4}, [@bcast, @bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x323, @empty, 0xab}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) (async) close(0x3) (async) connect$netrom(0xffffffffffffffff, &(0x7f00000000c0)={{0x3, @null, 0x4}, [@bcast, @bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x323, @empty, 0xab}, 0x1c) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 288.338591ms ago: executing program 2 (id=588): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006040), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000400)=ANY=[@ANYBLOB="85fcdad17b575cf50d8d048070532e9901405b5cc0cbe7e0bbbd42ff08d0bf044cdeead006f714fa0d4c0c439c473dd5cedc879fb3ffffffff79b4f78c48aa6c00"/74, @ANYRES16=r2, @ANYBLOB="11002bbd7000fddbdf250700000008000300", @ANYRES32=r3, @ANYBLOB="0c009900fbfffffffcffffff140004006d6163736563300000000000000000001400040070696d726567000000000000000000000a0018000303030303030000"], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x10) r4 = open(&(0x7f00009e1000)='./file1\x00', 0x8160, 0x0) fcntl$setlease(r4, 0x400, 0x0) setxattr$system_posix_acl(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r7, 0x11b, 0x1, &(0x7f00000000c0), &(0x7f0000000140)=0x7d) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$inet6(0xa, 0x2, 0x8) bind$inet6(r9, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) socket(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r10, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r15, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r13, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x78, r13, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0x3b, 0xac, "f6068b547c3ea96333bba77de2c6ab081fb056019f18a1505d0ba0d136f930abee1a97d281cc4767d68a061fe485cf5975fa8280d1ef2c"}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x10, 0xbd, [0x7, 0x9, 0x2, 0x1, 0x8333, 0x101]}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x2f1}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x78}, 0x1, 0x0, 0x0, 0x4040801}, 0x1) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="020029bd7000fcdbdf250b00000008000300", @ANYRES32=r11, @ANYBLOB="0c009900e90000003900000008003700020000000800090005ac0f000a000600ff08000000ff00000500080005000000040021002c005080080007000000000009000100d4ad639cf8000000040006000500020005000000040006000000bf00f3abd313f3b50ea0ac6d"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000001) 287.95474ms ago: executing program 3 (id=589): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe) connect$vsock_stream(r2, &(0x7f0000000640), 0x10) shutdown(r2, 0x1) r3 = dup(r2) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$FUSE_BMAP(r4, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x30}, [@ldst={0x3, 0x3, 0x3, 0xa, 0x0, 0xff00}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000480)=[@textreal={0x8, &(0x7f00000001c0)="baf80c66b82c7a3e8666efbafc0c66ed64660f38177dc40f080f01c50f01d10f2040f20f21ac66f30f0966b9760a00000f320f01c3", 0x35}], 0x1, 0x4a, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 150.736723ms ago: executing program 2 (id=590): r0 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, r0, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000000, 0x20000000, 0x4, 0x6, 0x4, {0x0, 0x10001, 0x0, 0xd, 0x0, 0x100, 0x10000, 0x2, 0x0, 0x0, 0xfffffffc, r3, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000004300)={0x50, 0x0, r2, {0x7, 0x26, 0xa, 0xfffffffff323ce48, 0x0, 0xfffc, 0xc, 0x2, 0x0, 0x0, 0x1, 0xff}}, 0x50) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) syz_fuse_handle_req(r1, &(0x7f0000008400)="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", 0x2000, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0xa0, 0x0, 0x2, {{0x4000001, 0x1000000000000, 0x100000005, 0xc70c, 0xfff, 0x6c, {0x1, 0x100000000, 0x4, 0xffff, 0xfffffffffffffffd, 0x1, 0x200, 0x7, 0x0, 0x8000, 0x2, 0xee00, r4, 0x8ab, 0x80000001}}, {0x0, 0x9}}}, 0x0, 0x0}) r5 = syz_open_dev$vim2m(&(0x7f0000000040), 0x88a, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f00000001c0)={0x19, 0x1, 0x0, "14a5593b595ccb9e289f1548f12ec9745f90084a013424cf6dc99d2466980300", 0x38414761}) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r7 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x800) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x1}) r8 = socket$isdn_base(0x22, 0x3, 0x0) ioctl(r8, 0x8b32, &(0x7f0000000040)) readv(r6, &(0x7f0000000840)=[{&(0x7f0000000100)=""/16, 0x10}, {&(0x7f0000000200)=""/117, 0x75}, {&(0x7f0000000140)}, {&(0x7f0000000280)=""/88, 0x58}, {&(0x7f0000000ec0)=""/4096, 0x1000}, {&(0x7f0000000440)=""/132, 0x84}, {&(0x7f00000006c0)=""/212, 0xd4}], 0x7) mkdir(&(0x7f0000000040)='./file0\x00', 0x2c) ioctl$CEC_TRANSMIT(r7, 0xc0386105, &(0x7f0000000000)={0x4, 0x7, 0x2, 0x0, 0x2, 0x4, '\x00', 0x7, 0x3, 0xf, 0x5, 0xdb, 0x8, 0x7}) lseek(r6, 0xffffffff, 0x4) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x20010, 0xffffffffffffffff, 0x570dc000) 0s ago: executing program 3 (id=591): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80600, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_EXIT_PERIODIC_INQ={{0x4}, 0x40}}}, 0x7) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0, 0xfffffffffffffe98}], 0x1, 0x42, &(0x7f0000000140), 0x1) setuid(0xee00) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@dellink={0x40, 0x10, 0xc03, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2020}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x8}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000020}, 0x0) setrlimit(0xd, &(0x7f0000000040)={0x435, 0x200000000006}) kernel console output (not intermixed with test programs): [ 38.135843][ T40] audit: type=1400 audit(1752732160.125:61): avc: denied { siginh } for pid=5853 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:43991' (ED25519) to the list of known hosts. [ 39.109378][ T40] audit: type=1400 audit(1752732161.115:62): avc: denied { name_bind } for pid=5860 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 39.127760][ T40] audit: type=1400 audit(1752732161.135:63): avc: denied { write } for pid=5861 comm="sh" path="pipe:[5724]" dev="pipefs" ino=5724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 39.139493][ T40] audit: type=1400 audit(1752732161.145:64): avc: denied { execute } for pid=5861 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 39.146779][ T40] audit: type=1400 audit(1752732161.145:65): avc: denied { execute_no_trans } for pid=5861 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 41.131416][ T40] audit: type=1400 audit(1752732163.135:66): avc: denied { mounton } for pid=5861 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 41.134015][ T5861] cgroup: Unknown subsys name 'net' [ 41.285420][ T5861] cgroup: Unknown subsys name 'cpuset' [ 41.289788][ T5861] cgroup: Unknown subsys name 'rlimit' [ 41.505378][ T5897] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 42.206916][ T5861] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 45.308655][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 45.308666][ T40] audit: type=1400 audit(1752732167.315:80): avc: denied { execmem } for pid=5938 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 45.490356][ T40] audit: type=1400 audit(1752732167.495:81): avc: denied { create } for pid=5943 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.496653][ T40] audit: type=1400 audit(1752732167.495:82): avc: denied { read write } for pid=5943 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.503936][ T40] audit: type=1400 audit(1752732167.495:83): avc: denied { open } for pid=5943 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.511128][ T40] audit: type=1400 audit(1752732167.505:84): avc: denied { ioctl } for pid=5943 comm="syz-executor" path="socket:[1798]" dev="sockfs" ino=1798 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.532144][ T5950] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 45.534781][ T5950] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 45.537773][ T5950] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 45.540289][ T5950] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 45.542898][ T5950] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 45.545269][ T5950] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 45.546523][ T5954] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 45.547772][ T5950] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 45.550762][ T5959] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 45.552746][ T5950] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 45.557185][ T5950] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 45.557850][ T5959] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 45.559794][ T5950] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 45.561696][ T5959] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 45.562271][ T5960] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 45.564201][ T5950] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 45.570962][ T5950] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 45.571934][ T5310] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 45.573301][ T40] audit: type=1400 audit(1752732167.575:85): avc: denied { read } for pid=5943 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.581258][ T5961] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 45.581862][ T40] audit: type=1400 audit(1752732167.575:86): avc: denied { open } for pid=5943 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.582751][ T5950] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 45.593278][ T40] audit: type=1400 audit(1752732167.585:87): avc: denied { mounton } for pid=5943 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 45.742615][ T40] audit: type=1400 audit(1752732167.745:88): avc: denied { module_request } for pid=5955 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 45.776592][ T5955] chnl_net:caif_netlink_parms(): no params data found [ 45.835989][ T5943] chnl_net:caif_netlink_parms(): no params data found [ 45.912074][ T5955] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.914791][ T5955] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.917141][ T5955] bridge_slave_0: entered allmulticast mode [ 45.919755][ T5955] bridge_slave_0: entered promiscuous mode [ 45.945545][ T5946] chnl_net:caif_netlink_parms(): no params data found [ 45.964495][ T5955] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.966720][ T5955] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.968957][ T5955] bridge_slave_1: entered allmulticast mode [ 45.971559][ T5955] bridge_slave_1: entered promiscuous mode [ 46.071571][ T5944] chnl_net:caif_netlink_parms(): no params data found [ 46.077475][ T5955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.084564][ T5955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.087519][ T5943] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.089781][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.092061][ T5943] bridge_slave_0: entered allmulticast mode [ 46.096598][ T5943] bridge_slave_0: entered promiscuous mode [ 46.102511][ T5943] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.106166][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.108537][ T5943] bridge_slave_1: entered allmulticast mode [ 46.111686][ T5943] bridge_slave_1: entered promiscuous mode [ 46.191570][ T5946] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.194424][ T5946] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.196766][ T5946] bridge_slave_0: entered allmulticast mode [ 46.199503][ T5946] bridge_slave_0: entered promiscuous mode [ 46.204850][ T5955] team0: Port device team_slave_0 added [ 46.210015][ T5955] team0: Port device team_slave_1 added [ 46.245775][ T5943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.248787][ T5946] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.250982][ T5946] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.253521][ T5946] bridge_slave_1: entered allmulticast mode [ 46.257117][ T5946] bridge_slave_1: entered promiscuous mode [ 46.309892][ T5943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.326565][ T5955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.328783][ T5955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.336771][ T5955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.371139][ T5946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.376251][ T5946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.379337][ T5955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.381495][ T5955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.389664][ T5955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.407863][ T5943] team0: Port device team_slave_0 added [ 46.452433][ T5943] team0: Port device team_slave_1 added [ 46.467679][ T5944] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.469985][ T5944] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.472247][ T5944] bridge_slave_0: entered allmulticast mode [ 46.474988][ T5944] bridge_slave_0: entered promiscuous mode [ 46.479250][ T5946] team0: Port device team_slave_0 added [ 46.507545][ T5944] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.510681][ T5944] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.515308][ T5944] bridge_slave_1: entered allmulticast mode [ 46.518549][ T5944] bridge_slave_1: entered promiscuous mode [ 46.534860][ T5946] team0: Port device team_slave_1 added [ 46.550121][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.553303][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.564055][ T5943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.622967][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.625913][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.636168][ T5943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.640878][ T5944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.669675][ T5955] hsr_slave_0: entered promiscuous mode [ 46.671970][ T5955] hsr_slave_1: entered promiscuous mode [ 46.678830][ T5944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.683379][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.686293][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.697484][ T5946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.703656][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.706549][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.718791][ T5946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.775033][ T5944] team0: Port device team_slave_0 added [ 46.780975][ T5944] team0: Port device team_slave_1 added [ 46.895060][ T5943] hsr_slave_0: entered promiscuous mode [ 46.898178][ T5943] hsr_slave_1: entered promiscuous mode [ 46.901098][ T5943] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.905061][ T5943] Cannot create hsr debugfs directory [ 46.941931][ T5946] hsr_slave_0: entered promiscuous mode [ 46.944891][ T5946] hsr_slave_1: entered promiscuous mode [ 46.946946][ T5946] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.949771][ T5946] Cannot create hsr debugfs directory [ 46.958620][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.961561][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.971880][ T5944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.017414][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.019602][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.027559][ T5944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.191675][ T5944] hsr_slave_0: entered promiscuous mode [ 47.194001][ T5944] hsr_slave_1: entered promiscuous mode [ 47.196145][ T5944] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.198508][ T5944] Cannot create hsr debugfs directory [ 47.308087][ T5955] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.316815][ T5955] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.322077][ T5955] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.360286][ T5955] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.400383][ T5946] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.408843][ T5946] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.416704][ T5946] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.423099][ T5946] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.470095][ T5943] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.476457][ T5943] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.483294][ T5943] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.490803][ T5943] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.557695][ T5944] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.562468][ T5944] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.568976][ T5944] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.573353][ T5944] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.621429][ T5955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.633297][ T5948] Bluetooth: hci2: command tx timeout [ 47.633345][ T63] Bluetooth: hci1: command tx timeout [ 47.635249][ T5948] Bluetooth: hci3: command tx timeout [ 47.637304][ T5950] Bluetooth: hci0: command tx timeout [ 47.652374][ T5946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.666487][ T5955] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.686708][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.689081][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.694060][ T5946] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.704859][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.707106][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.716190][ T5943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.725425][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.727691][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.736462][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.738704][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.749148][ T5943] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.767489][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.770492][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.781903][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.784329][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.808104][ T5944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.849112][ T5944] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.858350][ T1235] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.860621][ T1235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.870313][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.872247][ T40] audit: type=1400 audit(1752732169.875:89): avc: denied { sys_module } for pid=5955 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 47.872577][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.971388][ T5946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.993849][ T5955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.000750][ T5943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.003218][ T5946] veth0_vlan: entered promiscuous mode [ 48.014089][ T5946] veth1_vlan: entered promiscuous mode [ 48.037765][ T5944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.054315][ T5955] veth0_vlan: entered promiscuous mode [ 48.069842][ T5955] veth1_vlan: entered promiscuous mode [ 48.073530][ T5946] veth0_macvtap: entered promiscuous mode [ 48.077405][ T5943] veth0_vlan: entered promiscuous mode [ 48.087348][ T5946] veth1_macvtap: entered promiscuous mode [ 48.097377][ T5943] veth1_vlan: entered promiscuous mode [ 48.108346][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.114587][ T5944] veth0_vlan: entered promiscuous mode [ 48.120667][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.131435][ T5946] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.135726][ T5946] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.139343][ T5946] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.143637][ T5946] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.153652][ T5944] veth1_vlan: entered promiscuous mode [ 48.159727][ T5955] veth0_macvtap: entered promiscuous mode [ 48.173115][ T5943] veth0_macvtap: entered promiscuous mode [ 48.176956][ T5955] veth1_macvtap: entered promiscuous mode [ 48.198159][ T5943] veth1_macvtap: entered promiscuous mode [ 48.201946][ T5944] veth0_macvtap: entered promiscuous mode [ 48.217597][ T5955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.222307][ T5955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.224965][ T5944] veth1_macvtap: entered promiscuous mode [ 48.238317][ T5955] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.241015][ T5955] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.244220][ T5955] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.246901][ T5955] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.254628][ T1235] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.254790][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.257124][ T1235] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.261356][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.270336][ T5943] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.274260][ T5943] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.276990][ T5943] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.279680][ T5943] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.296418][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.304420][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.306862][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.313916][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.325272][ T5944] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.327974][ T5944] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.330662][ T5944] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.333564][ T5944] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.347802][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.353084][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.359659][ T5946] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 48.383036][ T1171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.385480][ T1171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.395938][ T1235] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.398381][ T1235] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.414897][ T6035] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4'. [ 48.419509][ T6035] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=6035 comm=syz.3.4 [ 48.423269][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.426588][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.432155][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.435478][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.479073][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.486280][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.825338][ T6084] syz.0.15 uses obsolete (PF_INET,SOCK_PACKET) [ 48.896013][ T6091] netlink: 28 bytes leftover after parsing attributes in process `syz.1.18'. [ 48.930365][ T6093] trusted_key: syz.1.19 sent an empty control message without MSG_MORE. [ 49.031917][ T6095] tmpfs: Bad value for 'mpol' [ 49.035438][ T6101] erspan0: entered promiscuous mode [ 49.046788][ T6095] No source specified [ 49.049088][ T6101] netlink: 'syz.0.29': attribute type 32 has an invalid length. [ 49.052443][ T6101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.29'. [ 49.057678][ T6101] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 49.103495][ T6106] netlink: 16 bytes leftover after parsing attributes in process `syz.0.23'. [ 49.108366][ T6106] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=6106 comm=syz.0.23 [ 49.171579][ T6108] netlink: 'syz.3.24': attribute type 21 has an invalid length. [ 49.201113][ T6120] netlink: 28 bytes leftover after parsing attributes in process `syz.3.27'. [ 49.207696][ T6122] ip6t_srh: unknown srh invflags 7D00 [ 49.308910][ T6137] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 49.317013][ T6137] CIFS mount error: No usable UNC path provided in device string! [ 49.317013][ T6137] [ 49.320229][ T6137] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 49.325153][ T6137] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 49.334361][ T6137] netlink: 4 bytes leftover after parsing attributes in process `syz.1.35'. [ 49.472418][ T6152] netlink: 28 bytes leftover after parsing attributes in process `syz.0.40'. [ 49.480679][ T6150] netlink: 'syz.1.39': attribute type 10 has an invalid length. [ 49.496688][ T6150] team0: Device ipvlan1 failed to register rx_handler [ 49.620935][ T6156] tmpfs: Bad value for 'mpol' [ 49.659796][ T6163] netlink: 28 bytes leftover after parsing attributes in process `syz.0.45'. [ 49.693654][ T6030] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 49.711199][ T6166] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 49.723251][ T5948] Bluetooth: hci0: command tx timeout [ 49.725108][ T5948] Bluetooth: hci2: command tx timeout [ 49.726913][ T63] Bluetooth: hci1: command tx timeout [ 49.774587][ T6175] netlink: 28 bytes leftover after parsing attributes in process `syz.0.49'. [ 49.846725][ T6189] FAULT_INJECTION: forcing a failure. [ 49.846725][ T6189] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 49.850834][ T6189] CPU: 3 UID: 0 PID: 6189 Comm: syz.0.53 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 49.850849][ T6189] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 49.850856][ T6189] Call Trace: [ 49.850859][ T6189] [ 49.850864][ T6189] dump_stack_lvl+0x16c/0x1f0 [ 49.850883][ T6189] should_fail_ex+0x512/0x640 [ 49.850900][ T6189] _copy_from_user+0x2e/0xd0 [ 49.850916][ T6189] copy_msghdr_from_user+0x98/0x160 [ 49.850932][ T6189] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 49.850953][ T6189] ___sys_sendmsg+0xfe/0x1d0 [ 49.850986][ T6189] ? __pfx____sys_sendmsg+0x10/0x10 [ 49.851000][ T6189] ? __lock_acquire+0x622/0x1c90 [ 49.851026][ T6189] __sys_sendmsg+0x16d/0x220 [ 49.851041][ T6189] ? __pfx___sys_sendmsg+0x10/0x10 [ 49.851064][ T6189] do_syscall_64+0xcd/0x4c0 [ 49.851080][ T6189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.851092][ T6189] RIP: 0033:0x7f59c4d8e929 [ 49.851100][ T6189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.851110][ T6189] RSP: 002b:00007f59c5c2d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 49.851120][ T6189] RAX: ffffffffffffffda RBX: 00007f59c4fb5fa0 RCX: 00007f59c4d8e929 [ 49.851127][ T6189] RDX: 0000000000040000 RSI: 0000200000000180 RDI: 0000000000000003 [ 49.851133][ T6189] RBP: 00007f59c5c2d090 R08: 0000000000000000 R09: 0000000000000000 [ 49.851139][ T6189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.851145][ T6189] R13: 0000000000000000 R14: 00007f59c4fb5fa0 R15: 00007ffe9f555428 [ 49.851158][ T6189] [ 49.855463][ T6030] usb 7-1: config 0 has an invalid interface number: 120 but max is 0 [ 49.882335][ T6186] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 49.884870][ T6030] usb 7-1: config 0 has no interface number 0 [ 49.885259][ T6186] [U] J"—e:ÀÆ" [ 49.886665][ T6030] usb 7-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 49.920108][ T6030] usb 7-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 52, changing to 9 [ 49.923840][ T6030] usb 7-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid maxpacket 8241, setting to 1024 [ 49.927261][ T6030] usb 7-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 49.930034][ T6030] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.936516][ T6030] usb 7-1: config 0 descriptor?? [ 49.945289][ T6030] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.120/input/input6 [ 49.961886][ T6196] kvm: kvm [6195]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x10090600020000 [ 50.000465][ T6192] Zero length message leads to an empty skb [ 50.007704][ T6203] program syz.1.57 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 50.045920][ T6210] Bluetooth: MGMT ver 1.23 [ 50.177834][ T6222] netlink: 28 bytes leftover after parsing attributes in process `syz.3.61'. [ 50.212987][ T6228] FAULT_INJECTION: forcing a failure. [ 50.212987][ T6228] name failslab, interval 1, probability 0, space 0, times 1 [ 50.216963][ T6228] CPU: 0 UID: 0 PID: 6228 Comm: syz.1.63 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 50.216978][ T6228] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 50.216984][ T6228] Call Trace: [ 50.216988][ T6228] [ 50.217004][ T6228] dump_stack_lvl+0x16c/0x1f0 [ 50.217024][ T6228] should_fail_ex+0x512/0x640 [ 50.217039][ T6228] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 50.217055][ T6228] should_failslab+0xc2/0x120 [ 50.217072][ T6228] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 50.217086][ T6228] ? __alloc_skb+0x2b2/0x380 [ 50.217114][ T6228] __alloc_skb+0x2b2/0x380 [ 50.217129][ T6228] ? __pfx___alloc_skb+0x10/0x10 [ 50.217144][ T6228] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 50.217165][ T6228] netlink_alloc_large_skb+0x69/0x130 [ 50.217177][ T6228] netlink_sendmsg+0x6a1/0xdd0 [ 50.217189][ T6228] ? __pfx_netlink_sendmsg+0x10/0x10 [ 50.217205][ T6228] ____sys_sendmsg+0xa98/0xc70 [ 50.217216][ T6228] ? copy_msghdr_from_user+0x10a/0x160 [ 50.217231][ T6228] ? __pfx_____sys_sendmsg+0x10/0x10 [ 50.217252][ T6228] ___sys_sendmsg+0x134/0x1d0 [ 50.217270][ T6228] ? __pfx____sys_sendmsg+0x10/0x10 [ 50.217288][ T6228] ? __lock_acquire+0x622/0x1c90 [ 50.217328][ T6228] __sys_sendmsg+0x16d/0x220 [ 50.217346][ T6228] ? __pfx___sys_sendmsg+0x10/0x10 [ 50.217370][ T6228] do_syscall_64+0xcd/0x4c0 [ 50.217387][ T6228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.217398][ T6228] RIP: 0033:0x7fbee538e929 [ 50.217407][ T6228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.217417][ T6228] RSP: 002b:00007fbee31f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 50.217427][ T6228] RAX: ffffffffffffffda RBX: 00007fbee55b5fa0 RCX: 00007fbee538e929 [ 50.217434][ T6228] RDX: 0000000000040000 RSI: 0000200000000180 RDI: 0000000000000003 [ 50.217440][ T6228] RBP: 00007fbee31f6090 R08: 0000000000000000 R09: 0000000000000000 [ 50.217446][ T6228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.217452][ T6228] R13: 0000000000000000 R14: 00007fbee55b5fa0 R15: 00007ffe4a2f0588 [ 50.217465][ T6228] [ 50.325429][ T40] kauditd_printk_skb: 132 callbacks suppressed [ 50.325444][ T40] audit: type=1400 audit(1752732172.335:222): avc: denied { sqpoll } for pid=6234 comm="syz.1.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 50.365707][ T40] audit: type=1400 audit(1752732172.375:223): avc: denied { read } for pid=6245 comm="syz.3.67" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 50.374252][ T40] audit: type=1400 audit(1752732172.375:224): avc: denied { open } for pid=6245 comm="syz.3.67" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 50.375929][ T5956] usb 7-1: USB disconnect, device number 2 [ 50.429373][ T6253] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 50.442533][ T40] audit: type=1400 audit(1752732172.445:225): avc: denied { ioctl } for pid=6252 comm="syz.3.69" path="socket:[10975]" dev="sockfs" ino=10975 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 50.475878][ T6253] bond0: (slave bond_slave_1): Releasing backup interface [ 50.531219][ T40] audit: type=1400 audit(1752732172.535:226): avc: denied { create } for pid=6259 comm="syz.2.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 50.537142][ T40] audit: type=1400 audit(1752732172.535:227): avc: denied { ioctl } for pid=6259 comm="syz.2.71" path="socket:[7653]" dev="sockfs" ino=7653 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 50.632467][ T40] audit: type=1400 audit(1752732172.635:228): avc: denied { ioctl } for pid=6275 comm="syz.1.76" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=10986 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 50.661175][ T40] audit: type=1400 audit(1752732172.665:229): avc: denied { create } for pid=6279 comm="syz.1.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 50.667876][ T40] audit: type=1400 audit(1752732172.665:230): avc: denied { ioctl } for pid=6279 comm="syz.1.78" path="socket:[9901]" dev="sockfs" ino=9901 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 50.713386][ T40] audit: type=1400 audit(1752732172.725:231): avc: denied { bind } for pid=6279 comm="syz.1.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 50.859906][ T6300] netfs: Couldn't get user pages (rc=-14) [ 50.872335][ T6304] openvswitch: netlink: IP tunnel dst address not specified [ 50.912528][ T6306] tipc: Started in network mode [ 50.914428][ T6306] tipc: Node identity ac1414aa, cluster identity 4711 [ 50.917971][ T6306] tipc: Enabled bearer , priority 10 [ 50.924305][ T6306] tipc: Enabled bearer , priority 0 [ 50.969276][ T6313] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 50.978878][ T6313] can0: slcan on ptm0. [ 50.994059][ T6316] FAULT_INJECTION: forcing a failure. [ 50.994059][ T6316] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 50.998070][ T6316] CPU: 0 UID: 0 PID: 6316 Comm: syz.0.86 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 50.998085][ T6316] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 50.998091][ T6316] Call Trace: [ 50.998095][ T6316] [ 50.998100][ T6316] dump_stack_lvl+0x16c/0x1f0 [ 50.998118][ T6316] should_fail_ex+0x512/0x640 [ 50.998136][ T6316] _copy_from_iter+0x29f/0x16f0 [ 50.998153][ T6316] ? __alloc_skb+0x200/0x380 [ 50.998172][ T6316] ? __pfx__copy_from_iter+0x10/0x10 [ 50.998189][ T6316] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 50.998211][ T6316] netlink_sendmsg+0x829/0xdd0 [ 50.998224][ T6316] ? __pfx_netlink_sendmsg+0x10/0x10 [ 50.998239][ T6316] ____sys_sendmsg+0xa98/0xc70 [ 50.998250][ T6316] ? copy_msghdr_from_user+0x10a/0x160 [ 50.998265][ T6316] ? __pfx_____sys_sendmsg+0x10/0x10 [ 50.998281][ T6316] ___sys_sendmsg+0x134/0x1d0 [ 50.998297][ T6316] ? __pfx____sys_sendmsg+0x10/0x10 [ 50.998310][ T6316] ? __lock_acquire+0x622/0x1c90 [ 50.998336][ T6316] __sys_sendmsg+0x16d/0x220 [ 50.998351][ T6316] ? __pfx___sys_sendmsg+0x10/0x10 [ 50.998374][ T6316] do_syscall_64+0xcd/0x4c0 [ 50.998390][ T6316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.998414][ T6316] RIP: 0033:0x7f59c4d8e929 [ 50.998423][ T6316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.998433][ T6316] RSP: 002b:00007f59c5c2d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 50.998444][ T6316] RAX: ffffffffffffffda RBX: 00007f59c4fb5fa0 RCX: 00007f59c4d8e929 [ 50.998450][ T6316] RDX: 0000000000040000 RSI: 0000200000000180 RDI: 0000000000000003 [ 50.998457][ T6316] RBP: 00007f59c5c2d090 R08: 0000000000000000 R09: 0000000000000000 [ 50.998462][ T6316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.998468][ T6316] R13: 0000000000000000 R14: 00007f59c4fb5fa0 R15: 00007ffe9f555428 [ 50.998481][ T6316] [ 51.093887][ T6312] can0 (unregistered): slcan off ptm0. [ 51.172852][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 51.196700][ T6333] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 51.253552][ T6341] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 51.317560][ T6344] batman_adv: batadv0: Adding interface: dummy0 [ 51.319560][ T6344] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.328039][ T6344] batman_adv: batadv0: Interface activated: dummy0 [ 51.338214][ T6344] batadv0: mtu less than device minimum [ 51.340542][ T6344] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 51.344339][ T6344] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 51.348209][ T6344] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 51.351891][ T6344] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 51.355635][ T6344] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 51.359313][ T6344] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 51.363498][ T6344] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 51.392702][ T61] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 51.400176][ T6346] 9pnet_fd: p9_fd_create_unix (6346): problem connecting socket: éq‰Y’3aK: -91 [ 51.451410][ T6357] FAULT_INJECTION: forcing a failure. [ 51.451410][ T6357] name failslab, interval 1, probability 0, space 0, times 0 [ 51.455883][ T6357] CPU: 3 UID: 0 PID: 6357 Comm: syz.0.102 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 51.455897][ T6357] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 51.455904][ T6357] Call Trace: [ 51.455908][ T6357] [ 51.455912][ T6357] dump_stack_lvl+0x16c/0x1f0 [ 51.455932][ T6357] should_fail_ex+0x512/0x640 [ 51.455949][ T6357] should_failslab+0xc2/0x120 [ 51.455967][ T6357] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 51.455982][ T6357] ? skb_clone+0x190/0x3f0 [ 51.456000][ T6357] skb_clone+0x190/0x3f0 [ 51.456015][ T6357] netlink_deliver_tap+0xabd/0xd30 [ 51.456036][ T6357] netlink_unicast+0x62f/0x850 [ 51.456048][ T6357] ? __pfx_netlink_unicast+0x10/0x10 [ 51.456062][ T6357] netlink_sendmsg+0x8d1/0xdd0 [ 51.456075][ T6357] ? __pfx_netlink_sendmsg+0x10/0x10 [ 51.456091][ T6357] ____sys_sendmsg+0xa98/0xc70 [ 51.456102][ T6357] ? copy_msghdr_from_user+0x10a/0x160 [ 51.456117][ T6357] ? __pfx_____sys_sendmsg+0x10/0x10 [ 51.456134][ T6357] ___sys_sendmsg+0x134/0x1d0 [ 51.456149][ T6357] ? __pfx____sys_sendmsg+0x10/0x10 [ 51.456163][ T6357] ? __lock_acquire+0x622/0x1c90 [ 51.456195][ T6357] __sys_sendmsg+0x16d/0x220 [ 51.456210][ T6357] ? __pfx___sys_sendmsg+0x10/0x10 [ 51.456234][ T6357] do_syscall_64+0xcd/0x4c0 [ 51.456251][ T6357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.456262][ T6357] RIP: 0033:0x7f59c4d8e929 [ 51.456272][ T6357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.456282][ T6357] RSP: 002b:00007f59c5c2d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 51.456292][ T6357] RAX: ffffffffffffffda RBX: 00007f59c4fb5fa0 RCX: 00007f59c4d8e929 [ 51.456299][ T6357] RDX: 0000000000040000 RSI: 0000200000000180 RDI: 0000000000000003 [ 51.456305][ T6357] RBP: 00007f59c5c2d090 R08: 0000000000000000 R09: 0000000000000000 [ 51.456311][ T6357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.456317][ T6357] R13: 0000000000000000 R14: 00007f59c4fb5fa0 R15: 00007ffe9f555428 [ 51.456330][ T6357] [ 51.538779][ T6359] No control pipe specified [ 51.557201][ T6361] 9pnet_fd: p9_fd_create_unix (6361): problem connecting socket: éq‰Y’3aK: -91 [ 51.593585][ T6363] batman_adv: batadv0: Interface deactivated: dummy0 [ 51.596155][ T6363] batman_adv: batadv0: Removing interface: dummy0 [ 51.600885][ T6363] bridge_slave_0: left allmulticast mode [ 51.605333][ T6363] bridge_slave_0: left promiscuous mode [ 51.607605][ T6363] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.617411][ T6363] bridge_slave_1: left allmulticast mode [ 51.619785][ T6363] bridge_slave_1: left promiscuous mode [ 51.622239][ T6363] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.625982][ T61] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 51.628970][ T61] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.631538][ T61] usb 6-1: Product: syz [ 51.633830][ T61] usb 6-1: Manufacturer: syz [ 51.635855][ T61] usb 6-1: SerialNumber: syz [ 51.637629][ T6363] bond0: (slave bond_slave_0): Releasing backup interface [ 51.640865][ T61] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 51.664861][ T6363] bond0: (slave bond_slave_1): Releasing backup interface [ 51.667437][ T34] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 51.686165][ T6363] team0: Port device team_slave_0 removed [ 51.692129][ T6363] team0: Port device team_slave_1 removed [ 51.694385][ T6363] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.696701][ T6363] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 51.699731][ T6363] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.702104][ T6363] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 51.729170][ T12] tipc: Resetting bearer [ 51.743470][ T6371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.749420][ T6371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.792822][ T5961] Bluetooth: hci2: command tx timeout [ 51.793558][ T5950] Bluetooth: hci1: command tx timeout [ 51.795246][ T63] Bluetooth: hci0: command tx timeout [ 51.903385][ T6367] usb 6-1: USB disconnect, device number 2 [ 51.982758][ T6033] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 52.003666][ T5956] tipc: Node number set to 2886997162 [ 52.033506][ T6374] geneve2: entered promiscuous mode [ 52.035213][ T6374] geneve2: entered allmulticast mode [ 52.092911][ T6375] netlink: 'syz.3.108': attribute type 1 has an invalid length. [ 52.145510][ T6033] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 52.148523][ T6033] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.151227][ T6033] usb 7-1: Product: syz [ 52.152552][ T6033] usb 7-1: Manufacturer: syz [ 52.154147][ T6033] usb 7-1: SerialNumber: syz [ 52.161483][ T6033] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 52.179619][ T6031] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 52.284694][ T6378] netlink: 'syz.3.109': attribute type 10 has an invalid length. [ 52.386413][ T5994] usb 7-1: USB disconnect, device number 3 [ 52.448640][ T6387] FAULT_INJECTION: forcing a failure. [ 52.448640][ T6387] name failslab, interval 1, probability 0, space 0, times 0 [ 52.453277][ T6387] CPU: 2 UID: 0 PID: 6387 Comm: syz.1.113 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 52.453293][ T6387] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 52.453299][ T6387] Call Trace: [ 52.453303][ T6387] [ 52.453307][ T6387] dump_stack_lvl+0x16c/0x1f0 [ 52.453326][ T6387] should_fail_ex+0x512/0x640 [ 52.453341][ T6387] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 52.453357][ T6387] should_failslab+0xc2/0x120 [ 52.453374][ T6387] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 52.453388][ T6387] ? __alloc_skb+0x2b2/0x380 [ 52.453405][ T6387] __alloc_skb+0x2b2/0x380 [ 52.453418][ T6387] ? __pfx___alloc_skb+0x10/0x10 [ 52.453437][ T6387] netlink_ack+0x15d/0xb80 [ 52.453447][ T6387] ? avc_has_perm_noaudit+0x149/0x3b0 [ 52.453462][ T6387] netlink_rcv_skb+0x332/0x420 [ 52.453472][ T6387] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 52.453486][ T6387] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 52.453503][ T6387] ? ns_capable+0xd7/0x110 [ 52.453517][ T6387] nfnetlink_rcv+0x1b3/0x430 [ 52.453529][ T6387] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 52.453541][ T6387] ? netlink_deliver_tap+0x1ae/0xd30 [ 52.453560][ T6387] netlink_unicast+0x58d/0x850 [ 52.453573][ T6387] ? __pfx_netlink_unicast+0x10/0x10 [ 52.453586][ T6387] netlink_sendmsg+0x8d1/0xdd0 [ 52.453599][ T6387] ? __pfx_netlink_sendmsg+0x10/0x10 [ 52.453614][ T6387] ____sys_sendmsg+0xa98/0xc70 [ 52.453625][ T6387] ? copy_msghdr_from_user+0x10a/0x160 [ 52.453640][ T6387] ? __pfx_____sys_sendmsg+0x10/0x10 [ 52.453656][ T6387] ___sys_sendmsg+0x134/0x1d0 [ 52.453671][ T6387] ? __pfx____sys_sendmsg+0x10/0x10 [ 52.453685][ T6387] ? __lock_acquire+0x622/0x1c90 [ 52.453711][ T6387] __sys_sendmsg+0x16d/0x220 [ 52.453725][ T6387] ? __pfx___sys_sendmsg+0x10/0x10 [ 52.453748][ T6387] do_syscall_64+0xcd/0x4c0 [ 52.453765][ T6387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.453776][ T6387] RIP: 0033:0x7fbee538e929 [ 52.453785][ T6387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.453795][ T6387] RSP: 002b:00007fbee31f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 52.453805][ T6387] RAX: ffffffffffffffda RBX: 00007fbee55b5fa0 RCX: 00007fbee538e929 [ 52.453812][ T6387] RDX: 0000000000040000 RSI: 0000200000000180 RDI: 0000000000000003 [ 52.453818][ T6387] RBP: 00007fbee31f6090 R08: 0000000000000000 R09: 0000000000000000 [ 52.453824][ T6387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.453830][ T6387] R13: 0000000000000000 R14: 00007fbee55b5fa0 R15: 00007ffe4a2f0588 [ 52.453843][ T6387] [ 52.613997][ T6406] netlink: 'syz.3.118': attribute type 2 has an invalid length. [ 52.617568][ T6406] netlink: 'syz.3.118': attribute type 1 has an invalid length. [ 52.753021][ T34] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 52.755901][ T34] ath9k_htc: Failed to initialize the device [ 52.758529][ T6367] usb 6-1: ath9k_htc: USB layer deinitialized [ 52.815436][ T6416] Bluetooth: MGMT ver 1.23 [ 52.817892][ T6416] batman_adv: batadv0: Adding interface: dummy0 [ 52.819843][ T6416] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.827857][ T6416] batman_adv: batadv0: Interface activated: dummy0 [ 52.913468][ T63] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 52.916842][ T63] Bluetooth: hci3: Injecting HCI hardware error event [ 53.090931][ T6441] binder: BINDER_SET_CONTEXT_MGR already set [ 53.094913][ T6441] binder: 6439:6441 ioctl 4018620d 200000000040 returned -16 [ 53.192499][ T6454] FAULT_INJECTION: forcing a failure. [ 53.192499][ T6454] name failslab, interval 1, probability 0, space 0, times 0 [ 53.208579][ T6454] CPU: 3 UID: 0 PID: 6454 Comm: syz.2.135 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 53.208596][ T6454] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 53.208602][ T6454] Call Trace: [ 53.208606][ T6454] [ 53.208610][ T6454] dump_stack_lvl+0x16c/0x1f0 [ 53.208630][ T6454] should_fail_ex+0x512/0x640 [ 53.208647][ T6454] should_failslab+0xc2/0x120 [ 53.208665][ T6454] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 53.208680][ T6454] ? skb_clone+0x190/0x3f0 [ 53.208698][ T6454] skb_clone+0x190/0x3f0 [ 53.208714][ T6454] netlink_deliver_tap+0xabd/0xd30 [ 53.208734][ T6454] netlink_unicast+0x702/0x850 [ 53.208747][ T6454] ? __pfx_netlink_unicast+0x10/0x10 [ 53.208761][ T6454] netlink_ack+0x696/0xb80 [ 53.208775][ T6454] netlink_rcv_skb+0x332/0x420 [ 53.208785][ T6454] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 53.208800][ T6454] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 53.208816][ T6454] ? ns_capable+0xd7/0x110 [ 53.208831][ T6454] nfnetlink_rcv+0x1b3/0x430 [ 53.208843][ T6454] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 53.208855][ T6454] ? netlink_deliver_tap+0x1ae/0xd30 [ 53.208875][ T6454] netlink_unicast+0x58d/0x850 [ 53.208887][ T6454] ? __pfx_netlink_unicast+0x10/0x10 [ 53.208902][ T6454] netlink_sendmsg+0x8d1/0xdd0 [ 53.208914][ T6454] ? __pfx_netlink_sendmsg+0x10/0x10 [ 53.208930][ T6454] ____sys_sendmsg+0xa98/0xc70 [ 53.208941][ T6454] ? copy_msghdr_from_user+0x10a/0x160 [ 53.208956][ T6454] ? __pfx_____sys_sendmsg+0x10/0x10 [ 53.208973][ T6454] ___sys_sendmsg+0x134/0x1d0 [ 53.208988][ T6454] ? __pfx____sys_sendmsg+0x10/0x10 [ 53.209002][ T6454] ? __lock_acquire+0x622/0x1c90 [ 53.209029][ T6454] __sys_sendmsg+0x16d/0x220 [ 53.209044][ T6454] ? __pfx___sys_sendmsg+0x10/0x10 [ 53.209068][ T6454] do_syscall_64+0xcd/0x4c0 [ 53.209085][ T6454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.209096][ T6454] RIP: 0033:0x7f546b18e929 [ 53.209105][ T6454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.209115][ T6454] RSP: 002b:00007f546bf41038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 53.209125][ T6454] RAX: ffffffffffffffda RBX: 00007f546b3b5fa0 RCX: 00007f546b18e929 [ 53.209132][ T6454] RDX: 0000000000040000 RSI: 0000200000000180 RDI: 0000000000000003 [ 53.209138][ T6454] RBP: 00007f546bf41090 R08: 0000000000000000 R09: 0000000000000000 [ 53.209144][ T6454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.209150][ T6454] R13: 0000000000000000 R14: 00007f546b3b5fa0 R15: 00007ffcf32e14a8 [ 53.209163][ T6454] [ 53.233431][ T6031] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 53.300374][ T6031] ath9k_htc: Failed to initialize the device [ 53.306046][ T5994] usb 7-1: ath9k_htc: USB layer deinitialized [ 53.345749][ T6457] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6457 comm=syz.0.137 [ 53.381075][ T6468] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 53.553077][ T6488] binder: 6482:6488 ioctl c0306201 200000000640 returned -22 [ 53.608921][ T6491] netlink: 'syz.2.147': attribute type 4 has an invalid length. [ 53.619712][ T6491] netlink: 'syz.2.147': attribute type 4 has an invalid length. [ 53.655397][ T6494] FAULT_INJECTION: forcing a failure. [ 53.655397][ T6494] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 53.660360][ T6494] CPU: 1 UID: 0 PID: 6494 Comm: syz.1.148 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 53.660376][ T6494] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 53.660383][ T6494] Call Trace: [ 53.660387][ T6494] [ 53.660391][ T6494] dump_stack_lvl+0x16c/0x1f0 [ 53.660410][ T6494] should_fail_ex+0x512/0x640 [ 53.660428][ T6494] _copy_to_user+0x32/0xd0 [ 53.660444][ T6494] simple_read_from_buffer+0xcb/0x170 [ 53.660460][ T6494] proc_fail_nth_read+0x197/0x270 [ 53.660475][ T6494] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 53.660489][ T6494] ? rw_verify_area+0xcf/0x680 [ 53.660502][ T6494] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 53.660515][ T6494] vfs_read+0x1e1/0xc60 [ 53.660531][ T6494] ? __pfx___mutex_lock+0x10/0x10 [ 53.660547][ T6494] ? __pfx_vfs_read+0x10/0x10 [ 53.660564][ T6494] ? __fget_files+0x20e/0x3c0 [ 53.660583][ T6494] ksys_read+0x12a/0x250 [ 53.660596][ T6494] ? __pfx_ksys_read+0x10/0x10 [ 53.660614][ T6494] do_syscall_64+0xcd/0x4c0 [ 53.660631][ T6494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.660642][ T6494] RIP: 0033:0x7fbee538d33c [ 53.660651][ T6494] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 53.660662][ T6494] RSP: 002b:00007fbee31f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 53.660672][ T6494] RAX: ffffffffffffffda RBX: 00007fbee55b5fa0 RCX: 00007fbee538d33c [ 53.660679][ T6494] RDX: 000000000000000f RSI: 00007fbee31f60a0 RDI: 0000000000000004 [ 53.660685][ T6494] RBP: 00007fbee31f6090 R08: 0000000000000000 R09: 0000000000000000 [ 53.660691][ T6494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.660697][ T6494] R13: 0000000000000000 R14: 00007fbee55b5fa0 R15: 00007ffe4a2f0588 [ 53.660710][ T6494] [ 53.725950][ C1] vkms_vblank_simulate: vblank timer overrun [ 53.740660][ T6496] Bluetooth: hci4: Frame reassembly failed (-84) [ 53.745005][ T1235] Bluetooth: hci4: Frame reassembly failed (-84) [ 53.806133][ T6498] __nla_validate_parse: 17 callbacks suppressed [ 53.806149][ T6498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.150'. [ 53.812319][ T6498] netlink: 4 bytes leftover after parsing attributes in process `syz.1.150'. [ 53.817956][ T6498] netlink: 'syz.1.150': attribute type 13 has an invalid length. [ 53.873735][ T5950] Bluetooth: hci0: command tx timeout [ 53.873749][ T5961] Bluetooth: hci2: command tx timeout [ 53.883051][ T5961] Bluetooth: hci1: command tx timeout [ 54.273299][ T6513] netlink: 28 bytes leftover after parsing attributes in process `syz.0.155'. [ 54.351740][ T6515] syzkaller0: entered allmulticast mode [ 54.354122][ T6515] netlink: 4 bytes leftover after parsing attributes in process `syz.1.156'. [ 54.368910][ T6520] syzkaller0: left allmulticast mode [ 54.466535][ T6522] infiniband syz1: set active [ 54.469283][ T6522] infiniband syz1: added syz_tun [ 54.501001][ T6522] RDS/IB: syz1: added [ 54.502565][ T6522] smc: adding ib device syz1 with port count 1 [ 54.504907][ T6522] smc: ib device syz1 port 1 has pnetid SYZ0 (user defined) [ 54.553579][ T6527] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.556736][ T6527] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.566904][ T6527] batman_adv: batadv0: Interface deactivated: dummy0 [ 54.603398][ T6527] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.609308][ T6527] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.647281][ T6527] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.650113][ T6527] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.652956][ T6527] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.655686][ T6527] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.694217][ T5956] syz1: Port: 1 Link DOWN [ 55.296207][ T6553] netlink: 28 bytes leftover after parsing attributes in process `syz.1.165'. [ 55.361558][ T6560] binder: 6559:6560 ioctl c0306201 200000000080 returned -22 [ 55.514975][ T6576] netlink: 464 bytes leftover after parsing attributes in process `syz.1.171'. [ 55.519385][ T40] kauditd_printk_skb: 87 callbacks suppressed [ 55.519395][ T40] audit: type=1400 audit(1752732177.525:319): avc: denied { ioctl } for pid=6575 comm="syz.1.171" path="socket:[11501]" dev="sockfs" ino=11501 ioctlcmd=0x6628 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 55.535615][ T6578] netlink: 28 bytes leftover after parsing attributes in process `syz.0.172'. [ 55.543377][ T40] audit: type=1400 audit(1752732177.555:320): avc: denied { append } for pid=6579 comm="syz.1.173" name="comedi3" dev="devtmpfs" ino=1305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 55.565546][ T6580] netlink: 4 bytes leftover after parsing attributes in process `syz.1.173'. [ 55.608631][ T6585] netlink: 4 bytes leftover after parsing attributes in process `syz.1.176'. [ 55.611809][ T6585] netlink: 32 bytes leftover after parsing attributes in process `syz.1.176'. [ 55.613935][ T6587] capability: warning: `syz.0.175' uses 32-bit capabilities (legacy support in use) [ 55.616497][ T6585] netlink: 'syz.1.176': attribute type 15 has an invalid length. [ 55.708201][ T40] audit: type=1400 audit(1752732177.715:321): avc: denied { unlink } for pid=6592 comm="syz.0.177" name="#1" dev="tmpfs" ino=291 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 55.715128][ T40] audit: type=1400 audit(1752732177.715:322): avc: denied { mount } for pid=6592 comm="syz.0.177" name="/" dev="overlay" ino=286 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 55.744406][ T40] audit: type=1400 audit(1752732177.745:323): avc: denied { append } for pid=6596 comm="syz.0.179" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 55.751406][ T40] audit: type=1400 audit(1752732177.755:324): avc: denied { write } for pid=6600 comm="syz.1.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 55.757626][ T40] audit: type=1400 audit(1752732177.755:325): avc: denied { bind } for pid=6600 comm="syz.1.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 55.765083][ T40] audit: type=1400 audit(1752732177.765:326): avc: denied { getopt } for pid=6600 comm="syz.1.178" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 55.792789][ T63] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 55.794840][ T5961] Bluetooth: hci4: command 0x1003 tx timeout [ 55.818125][ T40] audit: type=1400 audit(1752732177.825:327): avc: denied { setopt } for pid=6603 comm="syz.0.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 55.855866][ T40] audit: type=1400 audit(1752732177.865:328): avc: denied { write } for pid=6611 comm="syz.0.183" path="socket:[14346]" dev="sockfs" ino=14346 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 55.973792][ T6620] tmpfs: Invalid uid '0x00000000ffffffff' [ 55.988157][ T6620] tmpfs: Bad value for 'nr_inodes' [ 56.086156][ T6624] binder: 6623:6624 ioctl c0306201 200000000040 returned -14 [ 56.103532][ T6624] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 56.190990][ T6648] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 56.205694][ T6648] netlink: 'syz.1.193': attribute type 10 has an invalid length. [ 56.211631][ T6648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.216667][ T6648] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 56.220643][ T6648] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.223221][ T6648] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.225888][ T6648] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.229035][ T6648] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.237423][ T6648] bond0: (slave batadv0): Releasing backup interface [ 56.443580][ T6656] FAULT_INJECTION: forcing a failure. [ 56.443580][ T6656] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 56.447603][ T6656] CPU: 1 UID: 0 PID: 6656 Comm: syz.1.195 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 56.447618][ T6656] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 56.447624][ T6656] Call Trace: [ 56.447628][ T6656] [ 56.447632][ T6656] dump_stack_lvl+0x16c/0x1f0 [ 56.447652][ T6656] should_fail_ex+0x512/0x640 [ 56.447668][ T6656] _copy_from_iter+0x29f/0x16f0 [ 56.447686][ T6656] ? __alloc_skb+0x200/0x380 [ 56.447701][ T6656] ? __pfx__copy_from_iter+0x10/0x10 [ 56.447717][ T6656] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 56.447739][ T6656] netlink_sendmsg+0x829/0xdd0 [ 56.447752][ T6656] ? __pfx_netlink_sendmsg+0x10/0x10 [ 56.447767][ T6656] ____sys_sendmsg+0xa98/0xc70 [ 56.447778][ T6656] ? copy_msghdr_from_user+0x10a/0x160 [ 56.447792][ T6656] ? __pfx_____sys_sendmsg+0x10/0x10 [ 56.447809][ T6656] ___sys_sendmsg+0x134/0x1d0 [ 56.447824][ T6656] ? __pfx____sys_sendmsg+0x10/0x10 [ 56.447838][ T6656] ? __lock_acquire+0x622/0x1c90 [ 56.447864][ T6656] __sys_sendmsg+0x16d/0x220 [ 56.447878][ T6656] ? __pfx___sys_sendmsg+0x10/0x10 [ 56.447901][ T6656] do_syscall_64+0xcd/0x4c0 [ 56.447918][ T6656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.447929][ T6656] RIP: 0033:0x7fbee538e929 [ 56.447938][ T6656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.447948][ T6656] RSP: 002b:00007fbee31f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 56.447967][ T6656] RAX: ffffffffffffffda RBX: 00007fbee55b5fa0 RCX: 00007fbee538e929 [ 56.447973][ T6656] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 56.447979][ T6656] RBP: 00007fbee31f6090 R08: 0000000000000000 R09: 0000000000000000 [ 56.447985][ T6656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.447991][ T6656] R13: 0000000000000000 R14: 00007fbee55b5fa0 R15: 00007ffe4a2f0588 [ 56.448004][ T6656] [ 56.594047][ T6665] netlink: 'syz.1.199': attribute type 18 has an invalid length. [ 56.628905][ T6669] input: syz0 as /devices/virtual/input/input7 [ 56.670254][ T6671] net_ratelimit: 33 callbacks suppressed [ 56.670263][ T6671] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 56.859751][ T6679] FAULT_INJECTION: forcing a failure. [ 56.859751][ T6679] name failslab, interval 1, probability 0, space 0, times 0 [ 56.867228][ T6679] CPU: 2 UID: 0 PID: 6679 Comm: syz.3.204 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 56.867253][ T6679] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 56.867262][ T6679] Call Trace: [ 56.867267][ T6679] [ 56.867274][ T6679] dump_stack_lvl+0x16c/0x1f0 [ 56.867299][ T6679] should_fail_ex+0x512/0x640 [ 56.867323][ T6679] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 56.867349][ T6679] should_failslab+0xc2/0x120 [ 56.867389][ T6679] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 56.867413][ T6679] ? __alloc_skb+0x2b2/0x380 [ 56.867439][ T6679] __alloc_skb+0x2b2/0x380 [ 56.867458][ T6679] ? __pfx___alloc_skb+0x10/0x10 [ 56.867479][ T6679] ? __pfx_tc_ctl_chain+0x10/0x10 [ 56.867506][ T6679] netlink_ack+0x15d/0xb80 [ 56.867524][ T6679] ? __lock_acquire+0x622/0x1c90 [ 56.867547][ T6679] netlink_rcv_skb+0x332/0x420 [ 56.867561][ T6679] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 56.867585][ T6679] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 56.867608][ T6679] ? netlink_deliver_tap+0x1ae/0xd30 [ 56.867635][ T6679] ? is_vmalloc_addr+0x86/0xa0 [ 56.867662][ T6679] netlink_unicast+0x58d/0x850 [ 56.867684][ T6679] ? __pfx_netlink_unicast+0x10/0x10 [ 56.867708][ T6679] netlink_sendmsg+0x8d1/0xdd0 [ 56.867730][ T6679] ? __pfx_netlink_sendmsg+0x10/0x10 [ 56.867757][ T6679] ____sys_sendmsg+0xa98/0xc70 [ 56.867773][ T6679] ? copy_msghdr_from_user+0x10a/0x160 [ 56.867797][ T6679] ? __pfx_____sys_sendmsg+0x10/0x10 [ 56.867827][ T6679] ___sys_sendmsg+0x134/0x1d0 [ 56.867853][ T6679] ? __pfx____sys_sendmsg+0x10/0x10 [ 56.867874][ T6679] ? __lock_acquire+0x622/0x1c90 [ 56.867917][ T6679] __sys_sendmsg+0x16d/0x220 [ 56.867941][ T6679] ? __pfx___sys_sendmsg+0x10/0x10 [ 56.867991][ T6679] do_syscall_64+0xcd/0x4c0 [ 56.868017][ T6679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.868033][ T6679] RIP: 0033:0x7f9f2958e929 [ 56.868049][ T6679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.868065][ T6679] RSP: 002b:00007f9f2a43e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 56.868082][ T6679] RAX: ffffffffffffffda RBX: 00007f9f297b5fa0 RCX: 00007f9f2958e929 [ 56.868100][ T6679] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 56.868109][ T6679] RBP: 00007f9f2a43e090 R08: 0000000000000000 R09: 0000000000000000 [ 56.868119][ T6679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.868129][ T6679] R13: 0000000000000000 R14: 00007f9f297b5fa0 R15: 00007ffdf3afe4a8 [ 56.868152][ T6679] [ 56.953714][ C2] vkms_vblank_simulate: vblank timer overrun [ 71.076374][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.078437][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.008004][ T40] kauditd_printk_skb: 23 callbacks suppressed [ 72.008015][ T40] audit: type=1400 audit(1752732194.015:352): avc: denied { nlmsg_read } for pid=6722 comm="syz.3.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 72.008265][ T6726] fuse: Unknown parameter 'rno' [ 72.022570][ T40] audit: type=1400 audit(1752732194.025:353): avc: denied { ioctl } for pid=6723 comm="syz.0.214" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0x9411 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 72.039485][ T40] audit: type=1400 audit(1752732194.025:354): avc: denied { ioctl } for pid=6723 comm="syz.0.214" path="socket:[13612]" dev="sockfs" ino=13612 ioctlcmd=0x943e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 72.088347][ T6741] netlink: 'syz.0.220': attribute type 32 has an invalid length. [ 72.091091][ T6741] __nla_validate_parse: 8 callbacks suppressed [ 72.091124][ T6741] netlink: 8 bytes leftover after parsing attributes in process `syz.0.220'. [ 72.097400][ T6741] (unnamed net_device) (uninitialized): option coupled_control: invalid value (6) [ 72.126657][ T40] audit: type=1400 audit(1752732194.135:355): avc: denied { call } for pid=6742 comm="syz.0.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 72.127096][ T6744] netlink: 28 bytes leftover after parsing attributes in process `syz.0.222'. [ 72.147180][ T40] audit: type=1400 audit(1752732194.155:356): avc: denied { ioctl } for pid=6738 comm="syz.2.218" path="/dev/input/mice" dev="devtmpfs" ino=939 ioctlcmd=0x4805 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 72.147911][ T6739] x_tables: duplicate underflow at hook 1 [ 72.166665][ T6749] 9pnet_fd: Insufficient options for proto=fd [ 72.174198][ T6749] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 72.176377][ T6749] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 72.178844][ T40] audit: type=1400 audit(1752732194.185:357): avc: denied { read } for pid=6750 comm="syz.0.224" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 72.183410][ T6749] vhci_hcd vhci_hcd.0: Device attached [ 72.186479][ T40] audit: type=1400 audit(1752732194.185:358): avc: denied { open } for pid=6750 comm="syz.0.224" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 72.192314][ T6752] vhci_hcd: cannot find a urb of seqnum 4294967226 max seqnum 0 [ 72.198116][ T40] audit: type=1400 audit(1752732194.185:359): avc: denied { ioctl } for pid=6750 comm="syz.0.224" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x9378 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 72.207581][ T97] vhci_hcd: stop threads [ 72.209494][ T97] vhci_hcd: release socket [ 72.211293][ T97] vhci_hcd: disconnect device [ 72.250082][ T6761] netlink: 356 bytes leftover after parsing attributes in process `syz.1.228'. [ 72.252393][ T6759] netlink: 8 bytes leftover after parsing attributes in process `syz.0.227'. [ 72.337926][ T40] audit: type=1400 audit(1752732194.345:360): avc: denied { watch } for pid=6768 comm="syz.1.230" path="/81" dev="tmpfs" ino=430 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 72.383495][ T6778] netlink: 28 bytes leftover after parsing attributes in process `syz.1.233'. [ 72.408161][ T6776] kernel profiling enabled (shift: 63) [ 72.410015][ T6776] profiling shift: 63 too large [ 72.508655][ T40] audit: type=1400 audit(1752732194.515:361): avc: denied { ioctl } for pid=6795 comm="syz.1.238" path="/dev/ndctl0" dev="devtmpfs" ino=109 ioctlcmd=0x640a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 72.526648][ T6798] netlink: 4 bytes leftover after parsing attributes in process `syz.0.239'. [ 72.608531][ T6807] netlink: 28 bytes leftover after parsing attributes in process `syz.0.243'. [ 72.820492][ T6821] netlink: 20 bytes leftover after parsing attributes in process `syz.3.247'. [ 73.139140][ T6842] NILFS (nbd2): device size too small [ 73.191911][ T6847] netlink: 4 bytes leftover after parsing attributes in process `syz.2.255'. [ 73.210026][ T6847] netlink: 148 bytes leftover after parsing attributes in process `syz.2.255'. [ 73.750452][ T6864] cgroup: Need name or subsystem set [ 73.799274][ T6868] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 73.804124][ T6869] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 74.042922][ T838] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 74.204043][ T838] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 74.210351][ T838] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 74.213419][ T838] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 74.215947][ T838] usb 5-1: SerialNumber: syz [ 74.399843][ T6878] loop6: detected capacity change from 0 to 2560 [ 74.404059][ T6878] Buffer I/O error on dev loop6, logical block 0, async page read [ 74.407561][ T6878] Buffer I/O error on dev loop6, logical block 0, async page read [ 74.410975][ T6878] Buffer I/O error on dev loop6, logical block 0, async page read [ 74.414599][ T6878] Buffer I/O error on dev loop6, logical block 0, async page read [ 74.418039][ T6878] Buffer I/O error on dev loop6, logical block 0, async page read [ 74.421457][ T6878] Buffer I/O error on dev loop6, logical block 0, async page read [ 74.424967][ T6878] Buffer I/O error on dev loop6, logical block 0, async page read [ 74.428053][ T838] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 74.428379][ T6878] Buffer I/O error on dev loop6, logical block 0, async page read [ 74.434353][ T6878] ldm_validate_partition_table(): Disk read failed. [ 74.437370][ T6878] Buffer I/O error on dev loop6, logical block 0, async page read [ 74.438158][ T838] usb 5-1: USB disconnect, device number 2 [ 74.441746][ T6878] Buffer I/O error on dev loop6, logical block 0, async page read [ 74.446379][ T6878] Dev loop6: unable to read RDB block 0 [ 74.450118][ T6878] loop6: unable to read partition table [ 74.452387][ T6878] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜®ÞÉn m) failed (rc=-5) [ 74.525439][ T6863] overlayfs: statfs failed on './file0' [ 75.266161][ T6924] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 75.321276][ T6928] netlink: 'syz.3.279': attribute type 1 has an invalid length. [ 75.327002][ T6928] netlink: 'syz.3.279': attribute type 2 has an invalid length. [ 75.499489][ T6932] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 75.878663][ T6998] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 76.022018][ T7036] sch_tbf: peakrate 2147483647 is lower than or equals to rate 2831599472947593698 ! [ 76.047825][ T7031] bond2: entered allmulticast mode [ 76.318084][ T7073] xt_hashlimit: size too large, truncated to 1048576 [ 76.324664][ T7073] syz.3.312: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 76.331156][ T7073] CPU: 3 UID: 0 PID: 7073 Comm: syz.3.312 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 76.331172][ T7073] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 76.331179][ T7073] Call Trace: [ 76.331183][ T7073] [ 76.331187][ T7073] dump_stack_lvl+0x16c/0x1f0 [ 76.331222][ T7073] warn_alloc+0x248/0x3a0 [ 76.331238][ T7073] ? __pfx_warn_alloc+0x10/0x10 [ 76.331262][ T7073] ? hashlimit_mt_check_common+0x8bb/0x1460 [ 76.331276][ T7073] ? __vmalloc_node_noprof+0xad/0xf0 [ 76.331290][ T7073] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 76.331307][ T7073] ? hashlimit_mt_check_common+0x8bb/0x1460 [ 76.331321][ T7073] ? rcu_is_watching+0x12/0xc0 [ 76.331338][ T7073] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 76.331351][ T7073] ? __alloc_pages_noprof+0xb/0x1b0 [ 76.331365][ T7073] ? ___kmalloc_large_node+0x84/0x1e0 [ 76.331379][ T7073] __kvmalloc_node_noprof+0x30a/0x620 [ 76.331393][ T7073] ? hashlimit_mt_check_common+0x8bb/0x1460 [ 76.331406][ T7073] ? net_generic+0xea/0x2a0 [ 76.331417][ T7073] ? hashlimit_mt_check_common+0x8bb/0x1460 [ 76.331433][ T7073] ? hashlimit_mt_check_common+0x8bb/0x1460 [ 76.331446][ T7073] hashlimit_mt_check_common+0x8bb/0x1460 [ 76.331463][ T7073] hashlimit_mt_check+0x71/0x90 [ 76.331475][ T7073] ? __pfx_hashlimit_mt_check+0x10/0x10 [ 76.331487][ T7073] xt_check_match+0x283/0xa50 [ 76.331500][ T7073] ? mem_cgroup_css_alloc+0x1d12/0x1e80 [ 76.331515][ T7073] ? __pfx_xt_check_match+0x10/0x10 [ 76.331529][ T7073] ? xt_find_target+0x1f2/0x290 [ 76.331541][ T7073] ? xt_find_match+0x1f6/0x290 [ 76.331556][ T7073] find_check_entry.constprop.0+0x34e/0xa20 [ 76.331573][ T7073] ? __pfx_find_check_entry.constprop.0+0x10/0x10 [ 76.331590][ T7073] ? kasan_quarantine_put+0x10a/0x240 [ 76.331604][ T7073] ? lockdep_hardirqs_on+0x7c/0x110 [ 76.331621][ T7073] ? kfree+0x2b4/0x4d0 [ 76.331632][ T7073] ? translate_table+0xc0e/0x17b0 [ 76.331646][ T7073] translate_table+0xd0b/0x17b0 [ 76.331663][ T7073] ? __pfx_translate_table+0x10/0x10 [ 76.331675][ T7073] ? xt_alloc_table_info+0x3e/0xa0 [ 76.331690][ T7073] do_ip6t_set_ctl+0x570/0xb00 [ 76.331702][ T7073] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 76.331716][ T7073] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 76.331730][ T7073] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 76.331753][ T7073] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 76.331766][ T7073] nf_setsockopt+0x8d/0xf0 [ 76.331778][ T7073] ipv6_setsockopt+0x135/0x170 [ 76.331791][ T7073] rawv6_setsockopt+0xc2/0x510 [ 76.331808][ T7073] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 76.331826][ T7073] ? selinux_socket_setsockopt+0x6a/0x80 [ 76.331845][ T7073] ? sock_common_setsockopt+0x2e/0xf0 [ 76.331863][ T7073] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 76.331880][ T7073] do_sock_setsockopt+0x224/0x470 [ 76.331897][ T7073] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 76.331922][ T7073] __sys_setsockopt+0x1a0/0x230 [ 76.331939][ T7073] __x64_sys_setsockopt+0xbd/0x160 [ 76.331952][ T7073] ? do_syscall_64+0x91/0x4c0 [ 76.331967][ T7073] ? lockdep_hardirqs_on+0x7c/0x110 [ 76.331981][ T7073] do_syscall_64+0xcd/0x4c0 [ 76.331997][ T7073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.332009][ T7073] RIP: 0033:0x7f9f2958e929 [ 76.332018][ T7073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.332028][ T7073] RSP: 002b:00007f9f2a41d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 76.332038][ T7073] RAX: ffffffffffffffda RBX: 00007f9f297b6080 RCX: 00007f9f2958e929 [ 76.332044][ T7073] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000004 [ 76.332050][ T7073] RBP: 00007f9f29610ca1 R08: 0000000000000588 R09: 0000000000000000 [ 76.332056][ T7073] R10: 00002000000014c0 R11: 0000000000000246 R12: 0000000000000000 [ 76.332062][ T7073] R13: 0000000000000000 R14: 00007f9f297b6080 R15: 00007ffdf3afe4a8 [ 76.332075][ T7073] [ 76.332079][ T7073] Mem-Info: [ 76.345706][ T7065] netlink: 'syz.1.310': attribute type 11 has an invalid length. [ 76.347133][ T7073] active_anon:7553 inactive_anon:0 isolated_anon:0 [ 76.347133][ T7073] active_file:12926 inactive_file:40598 isolated_file:0 [ 76.347133][ T7073] unevictable:1768 dirty:39 writeback:0 [ 76.347133][ T7073] slab_reclaimable:11563 slab_unreclaimable:73824 [ 76.347133][ T7073] mapped:24562 shmem:2395 pagetables:1157 [ 76.347133][ T7073] sec_pagetables:312 bounce:0 [ 76.347133][ T7073] kernel_misc_reclaimable:0 [ 76.347133][ T7073] free:444595 free_pcp:23620 free_cma:0 [ 76.348745][ T7065] netlink: 'syz.1.310': attribute type 10 has an invalid length. [ 76.350372][ T7073] Node 0 active_anon:30212kB inactive_anon:0kB active_file:51388kB inactive_file:162192kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:98020kB dirty:128kB writeback:0kB shmem:6044kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12592kB pagetables:4420kB sec_pagetables:1248kB all_unreclaimable? no Balloon:0kB [ 76.489667][ T7073] Node 1 active_anon:0kB inactive_anon:0kB active_file:316kB inactive_file:200kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:228kB dirty:28kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:112kB pagetables:208kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 76.503058][ T7073] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 76.523283][ T7073] lowmem_reserve[]: 0 1234 1234 1234 1234 [ 76.525796][ T7073] Node 0 DMA32 free:153520kB boost:0kB min:27516kB low:34392kB high:41268kB reserved_highatomic:0KB free_highatomic:0KB active_anon:30228kB inactive_anon:0kB active_file:51388kB inactive_file:162208kB unevictable:3536kB writepending:128kB present:2080628kB managed:1264184kB mlocked:0kB bounce:0kB free_pcp:79828kB local_pcp:33756kB free_cma:0kB [ 76.539072][ T7073] lowmem_reserve[]: 0 0 0 0 0 [ 76.541088][ T7073] Node 1 Normal free:1607188kB boost:0kB min:39720kB low:49648kB high:59576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:316kB inactive_file:200kB unevictable:3536kB writepending:4kB present:2097152kB managed:1781956kB mlocked:0kB bounce:0kB free_pcp:18976kB local_pcp:6816kB free_cma:0kB [ 76.541136][ T7079] SELinux: policydb version 263802630 does not match my version range 15-34 [ 76.553508][ T6367] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 76.553691][ T7073] lowmem_reserve[]: 0 0 0 0 0 [ 76.558261][ T7079] SELinux: failed to load policy [ 76.560465][ T7073] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 76.568891][ T7073] Node 0 DMA32: 536*4kB (UME) 266*8kB (UME) 91*16kB (UME) 326*32kB (UME) 239*64kB (UME) 26*128kB (UME) 25*256kB (UME) 11*512kB (ME) 13*1024kB (UME) 4*2048kB (ME) 21*4096kB (M) = 154336kB [ 76.575002][ T7073] Node 1 Normal: 7*4kB (UE) 21*8kB (UME) 29*16kB (UME) 22*32kB (UME) 27*64kB (UME) 8*128kB (UME) 4*256kB (U) 7*512kB (UME) 1*1024kB (U) 2*2048kB (UM) 389*4096kB (M) = 1607188kB [ 76.580983][ T7073] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 76.584023][ T7073] Node 0 hugepages_total=8 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 76.587070][ T7073] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 76.590212][ T7073] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 76.593297][ T7073] 55918 total pagecache pages [ 76.594886][ T7073] 0 pages in swap cache [ 76.596176][ T7073] Free swap = 124996kB [ 76.597582][ T7073] Total swap = 124996kB [ 76.598958][ T7073] 1048443 pages RAM [ 76.600187][ T7073] 0 pages HighMem/MovableOnly [ 76.601673][ T7073] 283068 pages reserved [ 76.603054][ T7073] 0 pages cma reserved [ 76.655356][ T7085] overlayfs: failed to resolve './file3': -2 [ 76.702860][ T6367] usb 7-1: Using ep0 maxpacket: 32 [ 76.706963][ T6367] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 76.712378][ T6367] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 76.716520][ T6367] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 76.719510][ T6367] usb 7-1: Product: syz [ 76.720916][ T6367] usb 7-1: Manufacturer: syz [ 76.722388][ T6367] usb 7-1: SerialNumber: syz [ 76.725438][ T6367] usb 7-1: config 0 descriptor?? [ 76.728115][ T7055] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 76.829507][ T7093] bridge_slave_1: left allmulticast mode [ 76.831283][ T7093] bridge_slave_1: left promiscuous mode [ 76.833523][ T7093] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.837957][ T7093] bridge_slave_0: left allmulticast mode [ 76.839745][ T7093] bridge_slave_0: left promiscuous mode [ 76.841485][ T7093] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.985954][ T6367] usb 7-1: USB disconnect, device number 4 [ 77.636140][ T7103] __nla_validate_parse: 10 callbacks suppressed [ 77.636150][ T7103] netlink: 48 bytes leftover after parsing attributes in process `syz.1.322'. [ 77.708432][ T7105] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 78.165924][ T40] kauditd_printk_skb: 44 callbacks suppressed [ 78.165934][ T40] audit: type=1326 audit(1752732200.175:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7110 comm="syz.0.324" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59c4d8e929 code=0x0 [ 78.229157][ T7114] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=7114 comm=syz.1.325 [ 78.271232][ T7122] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 78.274062][ T7122] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 78.278855][ T7122] vhci_hcd vhci_hcd.0: Device attached [ 78.281932][ T7125] vhci_hcd: unknown pdu 2 [ 78.285351][ T1171] vhci_hcd: stop threads [ 78.287102][ T1171] vhci_hcd: release socket [ 78.287846][ T40] audit: type=1400 audit(1752732200.295:407): avc: denied { mount } for pid=7121 comm="syz.3.328" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 78.288523][ T1171] vhci_hcd: disconnect device [ 78.302118][ T40] audit: type=1400 audit(1752732200.305:408): avc: denied { bind } for pid=7127 comm="syz.1.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 78.302522][ T7128] xt_hashlimit: size too large, truncated to 1048576 [ 78.360006][ T40] audit: type=1400 audit(1752732200.365:409): avc: denied { name_bind } for pid=7127 comm="syz.1.329" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 78.375006][ T40] audit: type=1400 audit(1752732200.385:410): avc: denied { ioctl } for pid=7127 comm="syz.1.329" path="socket:[14063]" dev="sockfs" ino=14063 ioctlcmd=0x8943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 78.415104][ T7132] netlink: 16 bytes leftover after parsing attributes in process `syz.1.330'. [ 78.469705][ T7134] FAULT_INJECTION: forcing a failure. [ 78.469705][ T7134] name failslab, interval 1, probability 0, space 0, times 0 [ 78.475078][ T7134] CPU: 1 UID: 0 PID: 7134 Comm: syz.1.331 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 78.475101][ T7134] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 78.475112][ T7134] Call Trace: [ 78.475118][ T7134] [ 78.475126][ T7134] dump_stack_lvl+0x16c/0x1f0 [ 78.475154][ T7134] should_fail_ex+0x512/0x640 [ 78.475177][ T7134] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 78.475204][ T7134] should_failslab+0xc2/0x120 [ 78.475229][ T7134] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 78.475251][ T7134] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 78.475273][ T7134] ? __alloc_skb+0x2b2/0x380 [ 78.475299][ T7134] __alloc_skb+0x2b2/0x380 [ 78.475320][ T7134] ? __pfx___alloc_skb+0x10/0x10 [ 78.475342][ T7134] ? kthread_queue_work+0xa8/0x170 [ 78.475370][ T7134] ? find_held_lock+0x2b/0x80 [ 78.475391][ T7134] ? find_held_lock+0x2b/0x80 [ 78.475415][ T7134] nfc_genl_device_removed+0x7e/0x300 [ 78.475436][ T7134] ? __pfx_nfc_genl_device_removed+0x10/0x10 [ 78.475456][ T7134] ? destroy_workqueue+0x7cd/0xaa0 [ 78.475486][ T7134] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 78.475505][ T7134] nfc_unregister_device+0x2a/0x330 [ 78.475531][ T7134] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 78.475549][ T7134] virtual_ncidev_close+0x4b/0xa0 [ 78.475566][ T7134] __fput+0x3ff/0xb70 [ 78.475588][ T7134] fput_close_sync+0x118/0x260 [ 78.475606][ T7134] ? __pfx_fput_close_sync+0x10/0x10 [ 78.475622][ T7134] ? dnotify_flush+0x79/0x4c0 [ 78.475655][ T7134] __x64_sys_close+0x8b/0x120 [ 78.475673][ T7134] do_syscall_64+0xcd/0x4c0 [ 78.475698][ T7134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.475716][ T7134] RIP: 0033:0x7fbee538e929 [ 78.475730][ T7134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.475745][ T7134] RSP: 002b:00007fbee31f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 78.475762][ T7134] RAX: ffffffffffffffda RBX: 00007fbee55b5fa0 RCX: 00007fbee538e929 [ 78.475773][ T7134] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 78.475782][ T7134] RBP: 00007fbee31f6090 R08: 0000000000000000 R09: 0000000000000000 [ 78.475792][ T7134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.475801][ T7134] R13: 0000000000000000 R14: 00007fbee55b5fa0 R15: 00007ffe4a2f0588 [ 78.475824][ T7134] [ 78.685317][ T7147] cgroup: Unknown subsys name 'obj_type' [ 78.778994][ T7155] sctp: [Deprecated]: syz.1.337 (pid 7155) Use of int in maxseg socket option. [ 78.778994][ T7155] Use struct sctp_assoc_value instead [ 78.810162][ T7157] syz.2.338: attempt to access beyond end of device [ 78.810162][ T7157] loop2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 78.815059][ T7157] isofs_fill_super: bread failed, dev=loop2, iso_blknum=16, block=32 [ 78.867787][ T40] audit: type=1400 audit(1752732200.875:411): avc: denied { write } for pid=7169 comm="syz.2.341" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 78.895467][ T40] audit: type=1400 audit(1752732200.905:412): avc: denied { map } for pid=7169 comm="syz.2.341" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 78.967313][ T7172] dlm: plock device version mismatch: kernel (1.2.0), user (4207687471.1574799195.3139252685) [ 78.981620][ T7183] tmpfs: Bad value for 'mpol' [ 79.015750][ T7185] netlink: 12 bytes leftover after parsing attributes in process `syz.1.346'. [ 79.030336][ T7188] netlink: 4 bytes leftover after parsing attributes in process `syz.2.347'. [ 79.045293][ T7190] ======================================================= [ 79.045293][ T7190] WARNING: The mand mount option has been deprecated and [ 79.045293][ T7190] and is ignored by this kernel. Remove the mand [ 79.045293][ T7190] option from the mount to silence this warning. [ 79.045293][ T7190] ======================================================= [ 79.045314][ T40] audit: type=1400 audit(1752732201.055:413): avc: denied { remount } for pid=7189 comm="syz.1.348" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 79.057802][ T7190] hugetlbfs: Unknown parameter '€' [ 79.074995][ T7178] kvm: pic: non byte write [ 79.077596][ T7178] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 79.137194][ T40] audit: type=1400 audit(1752732201.145:414): avc: denied { ioctl } for pid=7194 comm="syz.2.350" path="socket:[14280]" dev="sockfs" ino=14280 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 79.151600][ T40] audit: type=1400 audit(1752732201.155:415): avc: denied { read } for pid=7194 comm="syz.2.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 79.390504][ T7219] overlayfs: conflicting options: userxattr,redirect_dir=on [ 79.422730][ T838] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 79.584538][ T838] usb 6-1: config index 0 descriptor too short (expected 1307, got 27) [ 79.587457][ T838] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 79.590028][ T838] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 79.592889][ T838] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 79.596668][ T838] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 79.600470][ T838] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 39, setting to 8 [ 79.604617][ T838] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 79.611647][ T838] usb 6-1: string descriptor 0 read error: -22 [ 79.613953][ T838] usb 6-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 79.616846][ T838] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.621352][ T838] usb 6-1: config 0 descriptor?? [ 79.624444][ T7203] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 79.627785][ T838] hub 6-1:0.0: bad descriptor, ignoring hub [ 79.629709][ T838] hub 6-1:0.0: probe with driver hub failed with error -5 [ 79.634515][ T838] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input8 [ 79.880093][ T7225] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 79.959426][ T7203] kvm: MONITOR instruction emulated as NOP! [ 80.099386][ T6367] usb 6-1: USB disconnect, device number 3 [ 80.206974][ T7238] netlink: 'syz.2.364': attribute type 10 has an invalid length. [ 80.273593][ T63] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 80.275891][ T63] Bluetooth: hci0: command 0x0c1a tx timeout [ 80.463256][ T63] Bluetooth: hci2: Malformed Event: 0x02 [ 80.624313][ T7272] netlink: 'syz.3.373': attribute type 6 has an invalid length. [ 80.628588][ T7273] netlink: 'syz.3.373': attribute type 6 has an invalid length. [ 80.699987][ T7273] netlink: 9 bytes leftover after parsing attributes in process `syz.3.373'. [ 80.700007][ T7274] netlink: 9 bytes leftover after parsing attributes in process `syz.3.373'. [ 80.700020][ T7278] FAULT_INJECTION: forcing a failure. [ 80.700020][ T7278] name failslab, interval 1, probability 0, space 0, times 0 [ 80.700049][ T7278] CPU: 1 UID: 0 PID: 7278 Comm: syz.1.375 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 80.700072][ T7278] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 80.700083][ T7278] Call Trace: [ 80.700088][ T7278] [ 80.700095][ T7278] dump_stack_lvl+0x16c/0x1f0 [ 80.700149][ T7278] should_fail_ex+0x512/0x640 [ 80.700179][ T7278] ? fs_reclaim_acquire+0xae/0x150 [ 80.700200][ T7278] ? kobject_get_path+0xd2/0x2a0 [ 80.700223][ T7278] should_failslab+0xc2/0x120 [ 80.700248][ T7278] __kmalloc_noprof+0xd2/0x510 [ 80.700276][ T7278] kobject_get_path+0xd2/0x2a0 [ 80.700305][ T7278] kobject_uevent_env+0x289/0x1870 [ 80.700324][ T7278] ? __pfx_dev_uevent_name+0x10/0x10 [ 80.700350][ T7278] ? bus_to_subsys+0x131/0x160 [ 80.700372][ T7278] device_del+0x623/0x9f0 [ 80.700398][ T7278] ? __pfx_device_del+0x10/0x10 [ 80.700428][ T7278] rfkill_unregister+0xde/0x2c0 [ 80.700450][ T7278] nfc_unregister_device+0x94/0x330 [ 80.700478][ T7278] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 80.700498][ T7278] virtual_ncidev_close+0x4b/0xa0 [ 80.700516][ T7278] __fput+0x3ff/0xb70 [ 80.700538][ T7278] fput_close_sync+0x118/0x260 [ 80.700557][ T7278] ? __pfx_fput_close_sync+0x10/0x10 [ 80.700574][ T7278] ? dnotify_flush+0x79/0x4c0 [ 80.700606][ T7278] __x64_sys_close+0x8b/0x120 [ 80.700625][ T7278] do_syscall_64+0xcd/0x4c0 [ 80.700652][ T7278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.700670][ T7278] RIP: 0033:0x7fbee538e929 [ 80.700685][ T7278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.700700][ T7278] RSP: 002b:00007fbee31f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 80.700717][ T7278] RAX: ffffffffffffffda RBX: 00007fbee55b5fa0 RCX: 00007fbee538e929 [ 80.700727][ T7278] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 80.700738][ T7278] RBP: 00007fbee31f6090 R08: 0000000000000000 R09: 0000000000000000 [ 80.700747][ T7278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.700758][ T7278] R13: 0000000000000000 R14: 00007fbee55b5fa0 R15: 00007ffe4a2f0588 [ 80.700781][ T7278] [ 80.796324][ T7273] gretap0: entered promiscuous mode [ 80.861568][ T7295] tmpfs: Bad value for 'mpol' [ 80.900665][ T7298] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7298 comm=syz.3.380 [ 80.978379][ T7306] afs: Unknown parameter 'dyMã#Ækúlocal' [ 81.177255][ T7319] netlink: 24 bytes leftover after parsing attributes in process `syz.2.383'. [ 81.180926][ T7319] netlink: 264 bytes leftover after parsing attributes in process `syz.2.383'. [ 81.184474][ T7319] netlink: 56 bytes leftover after parsing attributes in process `syz.2.383'. [ 81.187558][ T7320] netlink: 24 bytes leftover after parsing attributes in process `syz.2.383'. [ 81.251099][ T7328] input: syz0 as /devices/virtual/input/input9 [ 81.322945][ T60] cfg80211: failed to load regulatory.db [ 81.420577][ T7354] netlink: 'syz.2.391': attribute type 12 has an invalid length. [ 81.422898][ T7353] netlink: 'syz.2.391': attribute type 12 has an invalid length. [ 81.544501][ T7367] ipt_REJECT: ECHOREPLY no longer supported. [ 81.548797][ T7367] syz.2.394: attempt to access beyond end of device [ 81.548797][ T7367] nbd2: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 81.553258][ T7367] EXT4-fs (nbd2): unable to read superblock [ 81.796038][ T7391] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 81.800931][ T7391] SELinux: security_context_str_to_sid (ramfs) failed with errno=-22 [ 81.808955][ T7400] netlink: 'syz.1.401': attribute type 1 has an invalid length. [ 81.929393][ T7405] xt_cluster: node mask cannot exceed total number of nodes [ 81.935675][ T7405] XFS (nbd2): no-recovery mounts must be read-only. [ 82.099647][ T7431] netlink: 'syz.2.412': attribute type 21 has an invalid length. [ 82.102406][ T7431] netlink: 'syz.2.412': attribute type 6 has an invalid length. [ 82.310307][ T7454] Mount JFS Failure: -22 [ 82.321151][ T7451] nfs4: Unknown parameter ']!']{' [ 82.370910][ T7457] /dev/sg0: Can't lookup blockdev [ 82.872517][ T7493] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 82.938037][ T7506] __nla_validate_parse: 13 callbacks suppressed [ 82.938049][ T7506] netlink: 12 bytes leftover after parsing attributes in process `syz.0.440'. [ 82.966890][ T7511] Failed to get privilege flags for destination (handle=0x2:0x4) [ 83.012026][ T7515] syzkaller0: entered promiscuous mode [ 83.013966][ T7515] syzkaller0: entered allmulticast mode [ 83.017980][ T7515] netlink: 12 bytes leftover after parsing attributes in process `syz.1.443'. [ 83.020787][ T7515] netlink: 48 bytes leftover after parsing attributes in process `syz.1.443'. [ 83.026553][ T7515] syz.1.443: attempt to access beyond end of device [ 83.026553][ T7515] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 83.030542][ T7515] efs: cannot read volume header [ 83.035177][ T7515] Driver unsupported XDP return value 0 on prog (id 117) dev N/A, expect packet loss! [ 83.056325][ T7518] netlink: 28 bytes leftover after parsing attributes in process `syz.2.444'. [ 83.078787][ T7521] sp0: Synchronizing with TNC [ 83.294246][ T7540] netlink: 144 bytes leftover after parsing attributes in process `syz.1.452'. [ 83.309340][ T7542] process 'syz.1.452' launched '/dev/fd/12' with NULL argv: empty string added [ 83.313736][ T40] kauditd_printk_skb: 21 callbacks suppressed [ 83.313745][ T40] audit: type=1400 audit(1752732205.325:437): avc: denied { execute_no_trans } for pid=7539 comm="syz.1.452" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=2051 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 83.475051][ T29] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 83.622987][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 83.627124][ T29] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.631778][ T29] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.636601][ T29] usb 5-1: config 0 interface 0 has no altsetting 0 [ 83.639380][ T29] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 83.643330][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.648988][ T29] usb 5-1: config 0 descriptor?? [ 83.658961][ T7557] netlink: 68 bytes leftover after parsing attributes in process `syz.1.456'. [ 83.700932][ T7562] netlink: 'syz.1.457': attribute type 10 has an invalid length. [ 83.797135][ T7569] FAULT_INJECTION: forcing a failure. [ 83.797135][ T7569] name failslab, interval 1, probability 0, space 0, times 0 [ 83.804866][ T7569] CPU: 2 UID: 0 PID: 7569 Comm: syz.1.460 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 83.804882][ T7569] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 83.804889][ T7569] Call Trace: [ 83.804893][ T7569] [ 83.804897][ T7569] dump_stack_lvl+0x16c/0x1f0 [ 83.804932][ T7569] should_fail_ex+0x512/0x640 [ 83.804951][ T7569] ? fs_reclaim_acquire+0xae/0x150 [ 83.804964][ T7569] should_failslab+0xc2/0x120 [ 83.804981][ T7569] __kmalloc_cache_noprof+0x6a/0x3e0 [ 83.804994][ T7569] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 83.805009][ T7569] ? kobject_uevent_env+0x265/0x1870 [ 83.805023][ T7569] kobject_uevent_env+0x265/0x1870 [ 83.805034][ T7569] ? __pfx_dev_uevent_name+0x10/0x10 [ 83.805050][ T7569] ? bus_to_subsys+0x131/0x160 [ 83.805063][ T7569] device_del+0x623/0x9f0 [ 83.805079][ T7569] ? __pfx_device_del+0x10/0x10 [ 83.805094][ T7569] ? put_device+0x1f/0x30 [ 83.805104][ T7569] ? nfc_llcp_local_put.part.0+0x80/0xd0 [ 83.805123][ T7569] nfc_unregister_device+0x1b1/0x330 [ 83.805140][ T7569] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 83.805152][ T7569] virtual_ncidev_close+0x4b/0xa0 [ 83.805170][ T7569] __fput+0x3ff/0xb70 [ 83.805183][ T7569] fput_close_sync+0x118/0x260 [ 83.805195][ T7569] ? __pfx_fput_close_sync+0x10/0x10 [ 83.805205][ T7569] ? dnotify_flush+0x79/0x4c0 [ 83.805225][ T7569] __x64_sys_close+0x8b/0x120 [ 83.805237][ T7569] do_syscall_64+0xcd/0x4c0 [ 83.805254][ T7569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.805265][ T7569] RIP: 0033:0x7fbee538e929 [ 83.805274][ T7569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.805285][ T7569] RSP: 002b:00007fbee31f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 83.805295][ T7569] RAX: ffffffffffffffda RBX: 00007fbee55b5fa0 RCX: 00007fbee538e929 [ 83.805302][ T7569] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 83.805308][ T7569] RBP: 00007fbee31f6090 R08: 0000000000000000 R09: 0000000000000000 [ 83.805315][ T7569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.805321][ T7569] R13: 0000000000000000 R14: 00007fbee55b5fa0 R15: 00007ffe4a2f0588 [ 83.805334][ T7569] [ 83.868382][ T29] usbhid 5-1:0.0: can't add hid device: -71 [ 83.888167][ T29] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 83.896797][ T29] usb 5-1: USB disconnect, device number 3 [ 83.907771][ T6367] IPVS: starting estimator thread 0... [ 83.956314][ T7581] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 83.956314][ T7581] The task syz.1.461 (7581) triggered the difference, watch for misbehavior. [ 83.992938][ T7579] IPVS: using max 43 ests per chain, 103200 per kthread [ 84.064241][ T7599] netlink: 28 bytes leftover after parsing attributes in process `syz.3.465'. [ 84.332775][ T838] usb 7-1: new low-speed USB device number 5 using dummy_hcd [ 84.484673][ T838] usb 7-1: config index 0 descriptor too short (expected 1307, got 27) [ 84.488048][ T838] usb 7-1: config 0 has an invalid interface number: 0 but max is -1 [ 84.491379][ T838] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 84.494973][ T838] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 84.499211][ T838] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 84.503604][ T838] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 39, setting to 8 [ 84.507822][ T838] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 84.516813][ T838] usb 7-1: string descriptor 0 read error: -22 [ 84.519501][ T838] usb 7-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 84.523298][ T838] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.529188][ T838] usb 7-1: config 0 descriptor?? [ 84.531926][ T7602] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 84.536126][ T838] hub 7-1:0.0: bad descriptor, ignoring hub [ 84.538619][ T838] hub 7-1:0.0: probe with driver hub failed with error -5 [ 84.544261][ T838] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input10 [ 84.798390][ T838] usb 7-1: USB disconnect, device number 5 [ 84.918442][ T63] Bluetooth: hci2: command 0x0401 tx timeout [ 84.985399][ T7612] overlay: Bad value for 'redirect_dir' [ 85.005128][ T7622] netlink: 'syz.3.472': attribute type 12 has an invalid length. [ 85.007754][ T7622] netlink: 120 bytes leftover after parsing attributes in process `syz.3.472'. [ 85.012960][ T6031] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 85.045538][ T7624] netlink: 28 bytes leftover after parsing attributes in process `syz.3.473'. [ 85.109180][ T40] audit: type=1400 audit(1752732207.115:438): avc: denied { connect } for pid=7627 comm="syz.0.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 85.111939][ T7628] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 85.182775][ T6031] usb 6-1: Using ep0 maxpacket: 8 [ 85.186041][ T6031] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 85.189551][ T6031] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 85.191934][ T40] audit: type=1400 audit(1752732207.195:439): avc: denied { mount } for pid=7635 comm="syz.0.477" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 85.193267][ T6031] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.201138][ T7636] overlay: ./file0 is not a directory [ 85.209999][ T6031] usb 6-1: config 0 descriptor?? [ 85.244416][ T7638] netlink: 8 bytes leftover after parsing attributes in process `syz.0.478'. [ 85.345543][ T7643] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 85.349531][ T7642] overlayfs: unescaped trailing colons in lowerdir mount option. [ 85.417455][ T6031] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 85.673219][ T7648] tmpfs: Unknown parameter 'usrquotaq.io_merged_recursive' [ 85.678859][ T7648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.681663][ T7648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.129243][ T40] audit: type=1400 audit(1752732208.135:440): avc: denied { module_request } for pid=7666 comm="syz.3.487" kmod="netdev-wpan0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 86.275781][ T7676] tmpfs: Unknown parameter 'mq' [ 86.331258][ T40] audit: type=1400 audit(1752732208.335:441): avc: denied { mount } for pid=7675 comm="syz.2.490" name="/" dev="pstore" ino=1426 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 86.349868][ T40] audit: type=1400 audit(1752732208.355:442): avc: denied { unmount } for pid=5955 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 86.377612][ T40] audit: type=1400 audit(1752732208.385:443): avc: denied { create } for pid=7682 comm="syz.0.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 86.384410][ T40] audit: type=1400 audit(1752732208.385:444): avc: denied { watch } for pid=7683 comm="syz.2.493" path="/101" dev="tmpfs" ino=544 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 86.391471][ T40] audit: type=1400 audit(1752732208.385:445): avc: denied { watch_sb watch_reads } for pid=7683 comm="syz.2.493" path="/101" dev="tmpfs" ino=544 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 86.494775][ T7699] binder: 7689:7699 ioctl 8138ae83 7f5468ff4aa0 returned -22 [ 86.498107][ T7699] binder: 7689:7699 ioctl 8138ae83 7f5468ff4aa0 returned -22 [ 86.562360][ T7709] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7709 comm=syz.3.499 [ 86.602440][ T40] audit: type=1400 audit(1752732208.605:446): avc: denied { setattr } for pid=7712 comm="syz.3.500" name="tty3" dev="devtmpfs" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 86.748703][ T7719] usb usb1: usbfs: process 7719 (syz.3.503) did not claim interface 0 before use [ 87.786902][ T6367] usb 6-1: USB disconnect, device number 4 [ 87.815900][ T7743] capability: warning: `syz.1.507' uses deprecated v2 capabilities in a way that may be insecure [ 87.881806][ T7750] netlink: 'syz.2.509': attribute type 58 has an invalid length. [ 87.979565][ T7761] overlayfs: failed to resolve './file1': -2 [ 88.037015][ T7766] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 88.049426][ T7773] netlink: 'syz.2.516': attribute type 1 has an invalid length. [ 88.121821][ T7791] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 88.124420][ T7791] IPv6: NLM_F_CREATE should be set when creating new route [ 88.319567][ T7807] netlink: 'syz.0.525': attribute type 1 has an invalid length. [ 88.341426][ T7807] bond2: entered promiscuous mode [ 88.344167][ T7807] bond2: entered allmulticast mode [ 88.354556][ T7807] geneve2: entered allmulticast mode [ 88.358245][ T7807] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.362072][ T7807] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.365275][ T7807] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.368054][ T7807] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.373776][ T7807] bond2: (slave geneve2): making interface the new active one [ 88.376778][ T7807] geneve2: entered promiscuous mode [ 88.379990][ T7807] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 88.384986][ T7807] __nla_validate_parse: 5 callbacks suppressed [ 88.384998][ T7807] netlink: 8 bytes leftover after parsing attributes in process `syz.0.525'. [ 88.393624][ T7807] bond2: left promiscuous mode [ 88.395635][ T7807] geneve2: left promiscuous mode [ 88.397788][ T7807] bond2: left allmulticast mode [ 88.400602][ T7807] 8021q: adding VLAN 0 to HW filter on device bond2 [ 88.438984][ T7821] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 88.450744][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 88.450753][ T40] audit: type=1400 audit(1752732210.455:450): avc: denied { create } for pid=7820 comm="syz.0.528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 88.458473][ T40] audit: type=1400 audit(1752732210.455:451): avc: denied { sys_admin } for pid=7820 comm="syz.0.528" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 88.502767][ T6031] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 88.545888][ T7823] netlink: 'syz.2.529': attribute type 15 has an invalid length. [ 88.548319][ T7823] netlink: 24 bytes leftover after parsing attributes in process `syz.2.529'. [ 88.652751][ T6031] usb 6-1: Invalid ep0 maxpacket: 32 [ 88.792867][ T6031] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 88.953429][ T6031] usb 6-1: Invalid ep0 maxpacket: 32 [ 88.955397][ T6031] usb usb6-port1: attempt power cycle [ 89.058511][ T5956] libceph: connect (1)[c::]:6789 error -101 [ 89.060730][ T5956] libceph: mon0 (1)[c::]:6789 connect error [ 89.108668][ T6376] libceph: connect (1)[b::]:6789 error -101 [ 89.111935][ T6376] libceph: mon0 (1)[b::]:6789 connect error [ 89.207583][ T40] audit: type=1400 audit(1752732211.215:452): avc: denied { accept } for pid=7870 comm="syz.2.543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 89.251329][ T40] audit: type=1400 audit(1752732211.255:453): avc: denied { kexec_image_load } for pid=7874 comm="syz.2.544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 89.303727][ T6031] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 89.323778][ T6031] usb 6-1: Invalid ep0 maxpacket: 32 [ 89.344727][ T5956] libceph: connect (1)[c::]:6789 error -101 [ 89.346708][ T5956] libceph: mon0 (1)[c::]:6789 connect error [ 89.363960][ T40] audit: type=1400 audit(1752732211.375:454): avc: denied { relabelfrom } for pid=7879 comm="syz.2.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 89.370024][ T40] audit: type=1400 audit(1752732211.375:455): avc: denied { relabelto } for pid=7879 comm="syz.2.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 89.373249][ T6376] libceph: connect (1)[b::]:6789 error -101 [ 89.392766][ T6376] libceph: mon0 (1)[b::]:6789 connect error [ 89.462744][ T6031] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 89.483117][ T6031] usb 6-1: Invalid ep0 maxpacket: 32 [ 89.484961][ T6031] usb usb6-port1: unable to enumerate USB device [ 89.618874][ T40] audit: type=1400 audit(1752732211.625:456): avc: denied { listen } for pid=7883 comm="syz.2.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 89.787138][ T7867] ceph: No mds server is up or the cluster is laggy [ 89.787308][ T7852] ceph: No mds server is up or the cluster is laggy [ 90.026333][ T7903] syzkaller1: entered promiscuous mode [ 90.028101][ T7903] syzkaller1: entered allmulticast mode [ 90.149184][ T7914] netlink: 52 bytes leftover after parsing attributes in process `syz.2.559'. [ 90.153903][ T7914] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=7914 comm=syz.2.559 [ 90.298596][ T7921] openvswitch: netlink: Flow key attr not present in new flow. [ 90.450041][ T7925] netlink: 272 bytes leftover after parsing attributes in process `syz.3.562'. [ 90.462693][ T40] audit: type=1400 audit(1752732212.465:457): avc: denied { read } for pid=7924 comm="syz.3.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 90.575023][ T7935] 9pnet_fd: Insufficient options for proto=fd [ 90.616594][ T7938] netlink: 'syz.3.566': attribute type 11 has an invalid length. [ 90.619372][ T7938] netlink: 132 bytes leftover after parsing attributes in process `syz.3.566'. [ 91.035243][ T40] audit: type=1400 audit(1752732213.045:458): avc: denied { setopt } for pid=7952 comm="syz.2.572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 91.528519][ T7979] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 91.535256][ T7979] overlayfs: overlapping lowerdir path [ 91.598864][ T40] audit: type=1400 audit(1752732213.605:459): avc: denied { read } for pid=7971 comm="syz.1.578" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 91.610517][ T7983] block device autoloading is deprecated and will be removed. [ 91.617899][ T63] Bluetooth: hci0: unexpected event for opcode 0x080e [ 91.702847][ T7994] ntfs3(sr0): Primary boot signature is not NTFS. [ 91.705446][ T7994] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 91.708999][ T63] Bluetooth: hci2: unexpected event for opcode 0x0413 [ 91.773013][ T8008] netlink: 'syz.2.587': attribute type 10 has an invalid length. [ 91.783310][ T8008] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 92.067829][ T8024] warning: `syz.2.590' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 92.108633][ T63] Bluetooth: hci2: unexpected event for opcode 0x0404 [ 92.193035][ T5948] Bluetooth: hci3: hardware error 0x00 [ 92.197113][ T9] ------------[ cut here ]------------ [ 92.199660][ T9] workqueue: cannot queue hci_conn_timeout on wq hci3 [ 92.202646][ T9] WARNING: CPU: 0 PID: 9 at kernel/workqueue.c:2257 __queue_work+0xc9c/0x10f0 [ 92.206327][ T9] Modules linked in: [ 92.208355][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 92.214643][ T9] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 92.219118][ T9] Workqueue: events l2cap_chan_timeout [ 92.221431][ T9] RIP: 0010:__queue_work+0xc9c/0x10f0 [ 92.223713][ T9] Code: 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 28 04 00 00 48 8b 75 18 4c 89 f2 48 c7 c7 c0 07 ac 8b e8 f5 16 f7 ff 90 <0f> 0b 90 90 e9 96 f7 ff ff e8 56 19 38 00 90 0f 0b 90 e9 1b f6 ff [ 92.231686][ T9] RSP: 0018:ffffc900000c7a48 EFLAGS: 00010082 [ 92.234233][ T9] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817af1a8 [ 92.237558][ T9] RDX: ffff88801ce9c880 RSI: ffffffff817af1b5 RDI: 0000000000000001 [ 92.240871][ T9] RBP: ffff888029920948 R08: 0000000000000001 R09: 0000000000000000 [ 92.244169][ T9] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 92.247457][ T9] R13: ffff88802bb93000 R14: ffff88802bb93178 R15: ffff888029920950 [ 92.250793][ T9] FS: 0000000000000000(0000) GS:ffff8880d6713000(0000) knlGS:0000000000000000 [ 92.254517][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 92.257312][ T9] CR2: 00007f546b1726e0 CR3: 0000000051330000 CR4: 0000000000352ef0 [ 92.260678][ T9] Call Trace: [ 92.262098][ T9] [ 92.263387][ T9] ? __cancel_work+0x2c8/0x370 [ 92.265448][ T9] ? clear_pending_if_disabled+0xa8/0x210 [ 92.267936][ T9] ? __pfx_clear_pending_if_disabled+0x10/0x10 [ 92.270437][ T9] __queue_delayed_work+0x35b/0x460 [ 92.272617][ T9] queue_delayed_work_on+0x1b5/0x200 [ 92.274835][ T9] l2cap_chan_del+0x5a0/0x8f0 [ 92.276838][ T9] l2cap_chan_close+0xfe/0xa30 [ 92.278872][ T9] ? __pfx_l2cap_chan_close+0x10/0x10 [ 92.281152][ T9] l2cap_chan_timeout+0x196/0x310 [ 92.283282][ T9] process_one_work+0x9cf/0x1b70 [ 92.285388][ T9] ? __pfx_process_one_work+0x10/0x10 [ 92.287691][ T9] ? assign_work+0x1a0/0x250 [ 92.289627][ T9] worker_thread+0x6c8/0xf10 [ 92.291606][ T9] ? __pfx_worker_thread+0x10/0x10 [ 92.293727][ T9] kthread+0x3c5/0x780 [ 92.295394][ T9] ? __pfx_kthread+0x10/0x10 [ 92.297312][ T9] ? rcu_is_watching+0x12/0xc0 [ 92.299278][ T9] ? __pfx_kthread+0x10/0x10 [ 92.301179][ T9] ret_from_fork+0x5d7/0x6f0 [ 92.303159][ T9] ? __pfx_kthread+0x10/0x10 [ 92.305091][ T9] ret_from_fork_asm+0x1a/0x30 [ 92.307103][ T9] [ 92.308440][ T9] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 92.311452][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 92.316114][ T9] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 92.320251][ T9] Workqueue: events l2cap_chan_timeout [ 92.322404][ T9] Call Trace: [ 92.323757][ T9] [ 92.324970][ T9] dump_stack_lvl+0x3d/0x1f0 [ 92.326756][ T9] panic+0x71c/0x800 [ 92.328314][ T9] ? __pfx_panic+0x10/0x10 [ 92.330080][ T9] ? show_trace_log_lvl+0x29b/0x3e0 [ 92.332190][ T9] ? check_panic_on_warn+0x1f/0xb0 [ 92.334214][ T9] ? __queue_work+0xc9c/0x10f0 [ 92.336173][ T9] check_panic_on_warn+0xab/0xb0 [ 92.338237][ T9] __warn+0xf6/0x3c0 [ 92.339868][ T9] ? __queue_work+0xc9c/0x10f0 [ 92.341871][ T9] report_bug+0x3c3/0x580 [ 92.343637][ T9] ? __queue_work+0xc9c/0x10f0 [ 92.345602][ T9] handle_bug+0x184/0x210 [ 92.347435][ T9] exc_invalid_op+0x17/0x50 [ 92.349303][ T9] asm_exc_invalid_op+0x1a/0x20 [ 92.351294][ T9] RIP: 0010:__queue_work+0xc9c/0x10f0 [ 92.353484][ T9] Code: 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 28 04 00 00 48 8b 75 18 4c 89 f2 48 c7 c7 c0 07 ac 8b e8 f5 16 f7 ff 90 <0f> 0b 90 90 e9 96 f7 ff ff e8 56 19 38 00 90 0f 0b 90 e9 1b f6 ff [ 92.361148][ T9] RSP: 0018:ffffc900000c7a48 EFLAGS: 00010082 [ 92.363706][ T9] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817af1a8 [ 92.366991][ T9] RDX: ffff88801ce9c880 RSI: ffffffff817af1b5 RDI: 0000000000000001 [ 92.370329][ T9] RBP: ffff888029920948 R08: 0000000000000001 R09: 0000000000000000 [ 92.373686][ T9] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 92.376989][ T9] R13: ffff88802bb93000 R14: ffff88802bb93178 R15: ffff888029920950 [ 92.380306][ T9] ? __warn_printk+0x198/0x350 [ 92.382297][ T9] ? __warn_printk+0x1a5/0x350 [ 92.384353][ T9] ? __queue_work+0xc9b/0x10f0 [ 92.386371][ T9] ? __cancel_work+0x2c8/0x370 [ 92.388398][ T9] ? clear_pending_if_disabled+0xa8/0x210 [ 92.390793][ T9] ? __pfx_clear_pending_if_disabled+0x10/0x10 [ 92.393392][ T9] __queue_delayed_work+0x35b/0x460 [ 92.395602][ T9] queue_delayed_work_on+0x1b5/0x200 [ 92.397818][ T9] l2cap_chan_del+0x5a0/0x8f0 [ 92.399880][ T9] l2cap_chan_close+0xfe/0xa30 [ 92.401919][ T9] ? __pfx_l2cap_chan_close+0x10/0x10 [ 92.404177][ T9] l2cap_chan_timeout+0x196/0x310 [ 92.406289][ T9] process_one_work+0x9cf/0x1b70 [ 92.408400][ T9] ? __pfx_process_one_work+0x10/0x10 [ 92.410616][ T9] ? assign_work+0x1a0/0x250 [ 92.412555][ T9] worker_thread+0x6c8/0xf10 [ 92.414528][ T9] ? __pfx_worker_thread+0x10/0x10 [ 92.416700][ T9] kthread+0x3c5/0x780 [ 92.418471][ T9] ? __pfx_kthread+0x10/0x10 [ 92.420405][ T9] ? rcu_is_watching+0x12/0xc0 [ 92.422272][ T9] ? __pfx_kthread+0x10/0x10 [ 92.424312][ T9] ret_from_fork+0x5d7/0x6f0 [ 92.426290][ T9] ? __pfx_kthread+0x10/0x10 [ 92.428373][ T9] ret_from_fork_asm+0x1a/0x30 [ 92.430511][ T9] [ 92.432619][ T9] Kernel Offset: disabled [ 92.434495][ T9] Rebooting in 86400 seconds.. VM DIAGNOSIS: 06:03:34 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff855bced5 RDI=ffffffff9b0c72a0 RBP=ffffffff9b0c7260 RSP=ffffc900000c7390 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=ffffffff9b0c7260 R15=ffffffff9b0c7520 RIP=ffffffff855bceff RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6713000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f546b1726e0 CR3=0000000051330000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000020081 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe9f5546c0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f59c4e11c7a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f59c4e11c87 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f59c4e11c81 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f59c4e11c95 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f59c4e11d1b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f59c4e11df9 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 2074657365720064 656c696166202973 2528746174736c00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 0551405640570041 40494c4443050c56 000d514451564900 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffff88802798fe80 RCX=ffffffff849a50cf RDX=ffff888024994880 RSI=ffffffff849a50dd RDI=0000000000000001 RBP=dffffc0000000000 RSP=ffffc90003cf7720 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=ffffc90003cf7818 R13=ffff88803391ba90 R14=0000000000000002 R15=0000000000000000 RIP=ffffffff81bbf2e6 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000555564b2d500 ffffffff 00c00000 GS =0000 ffff8880d6813000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000555555d65808 CR3=0000000051330000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000020081 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe9f5546c0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f59c4e11c7a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f59c4e11c87 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f59c4e11c81 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f59c4e11c95 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f59c4e11d1b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f59c4e11df9 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 2074657365720064 656c696166202973 2528746174736c00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 0551405640570041 40494c4443050c56 000d514451564900 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff88806a442060 RCX=ffffffff81afd49d RDX=ffff888025398000 RSI=ffffffff81afd479 RDI=0000000000000005 RBP=0000000000000001 RSP=ffffc90004057a70 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=dffffc0000000000 R13=0000000000000003 R14=ffffed100d48840d R15=ffff88806a63b580 RIP=ffffffff81afd47b RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] FS =0000 0000555555d65500 ffffffff 00c09300 DPL=0 DS [-WA] GS =0000 ffff8880d6913000 ffffffff 00c09300 DPL=0 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000005771d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000004090001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7c0eee0bd155b03d 5d9f091df7fa7acd ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbee5411c7a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbee5411c87 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbee5411c81 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbee5411c95 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbee5411d1b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbee5411df9 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbee5586488 00007fbee5586480 00007fbee5586478 00007fbee5586450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbee60ed100 00007fbee5586440 00007fbee5580004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbee5586498 00007fbee5586490 00007fbee5586488 00007fbee5586480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffff88806a73b500 RCX=ffffffff81afeb83 RDX=ffff88801deb4880 RSI=ffffffff81afeb5d RDI=0000000000000005 RBP=ffffc90000157d08 RSP=ffffc90000157bc0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=fffffbfff1cb9f9e R12=1ffff9200002af80 R13=0000000000000002 R14=0000000000000001 R15=ffffed100d4e76a1 RIP=ffffffff81afeb5f RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6a13000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f9f2a43df98 CR3=000000005108f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000100001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdf3afe830 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9f29611c7a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9f29611c87 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9f29611c81 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9f29611c95 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9f29611d1b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9f29611df9 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000