last executing test programs: 1m40.91227334s ago: executing program 1 (id=2439): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001000)=@raw={'raw\x00', 0x21, 0x3, 0x580, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x4b0, 0xffffffff, 0xffffffff, 0x4b0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private2, @private2, [], [], 'veth0\x00', 'syzkaller1\x00'}, 0x0, 0x220, 0x248, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'sit0\x00', {0x0, 0x9, 0x0, 0x0, 0x0, 0x8, 0x5}}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv0\x00', 'veth1_macvtap\x00'}, 0x0, 0x200, 0x268, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@loopback, [], @ipv4=@remote}, {@ipv6=@dev, [], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {@ipv4=@multicast2, [], @ipv6=@loopback}, {@ipv6=@rand_addr=' \x01\x00', [], @ipv4=@local}], 0x3}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x4, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, 0x0, 0x18}, 0x40000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f000014f000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x39, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r8, 0x4080aebf, &(0x7f0000005740)={{0x0, 0x0, 0x80, {0x0, 0x8081000}}, "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", "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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="65660fc736b9230200000f320fc5b0040000000f0f10970fe8fa640f01cfc4e21d4501c744240000000000c74424021c320000c744240600000000c4e17de69222ad2eec0e476e04b8200fae82ef66bafc0c66b8004066ef66b8296c", 0x5c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 1m40.631429967s ago: executing program 1 (id=2447): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/675], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xfffffe94, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x1, 0x2c903) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f00000000c0)) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)=@sha1={0x1, "4061f00ac821730b7c3c4258cf067dc1d02d2908"}, 0x15, 0x0) 1m40.096112266s ago: executing program 1 (id=2452): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x8202) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000040)) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0xd, 0x2) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r2, 0x29, 0x4e, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0xc, &(0x7f0000000040)=0x1, 0x4) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000000c0)={0xf0f026, 0x1}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1b) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000200)={0x165819300, 0x0, 0x0, 0x0, {0x2f}, 0x0, 0x0, 0x0, &(0x7f0000000100)}, 0x58) 1m40.090459179s ago: executing program 1 (id=2456): mkdir(&(0x7f0000000000)='./file1\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000100)='devpts\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f000058e000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x0, &(0x7f0000000080)=0x3, 0x0, 0x4) recvmsg$unix(r4, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2c100, 0x0) getsockname$packet(r6, &(0x7f0000000440), &(0x7f0000000480)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000040)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@delqdisc={0xb4, 0x25, 0x20, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff3, 0xe}, {0xd, 0xe}, {0xfff3, 0x5}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0xfd}, @TCA_CODEL_LIMIT={0x8, 0x2, 0xec}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0xf8}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6f47}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6719}, @qdisc_kind_options=@q_drr={0x8}, @TCA_STAB={0x38, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0xcb, 0xf, 0x9, 0x3, 0x4, 0x2, 0x9}}, {0x16, 0x2, [0x0, 0x1, 0xeff, 0x26fe, 0x9, 0x8000, 0xf322, 0x5, 0x6]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xc}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x10000}]}, 0xb4}}, 0x810) 1m39.350211335s ago: executing program 1 (id=2465): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x400040) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, &(0x7f0000000000)=0x7, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, 0x0, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r1, 0xc0105500, &(0x7f0000000000)=ANY=[@ANYBLOB="a1"]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000540)='afs_get_tree\x00', r0}, 0x10) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x0, &(0x7f0000000000)={[{@dyn}]}) (fail_nth: 5) 1m39.07401596s ago: executing program 1 (id=2467): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x1000, 0x0) (async) write$binfmt_misc(r2, &(0x7f00000000c0), 0xfdef) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x494, 0x30, 0x12f, 0x0, 0x0, {}, [{0x480, 0x1, [@m_police={0x47c, 0x1, 0x0, 0x0, {{0xb}, {0x450, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x100000000}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x494}}, 0x0) 1m39.044529276s ago: executing program 32 (id=2467): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x1000, 0x0) (async) write$binfmt_misc(r2, &(0x7f00000000c0), 0xfdef) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x494, 0x30, 0x12f, 0x0, 0x0, {}, [{0x480, 0x1, [@m_police={0x47c, 0x1, 0x0, 0x0, {{0xb}, {0x450, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x100000000}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x494}}, 0x0) 3.257837955s ago: executing program 3 (id=3642): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000180)="440f20c03505000000440f22c0f26df20f38f17a64b805000000b9e10d00000f01d9d8dd0f01728eb8010000000f01d94c0fc71d000000003ef245dbed410fc7f7", 0x41}], 0x1, 0x72, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0505405, &(0x7f00000000c0)={{0x0, 0x1, 0x5, 0x3, 0x8}, 0x4, 0x10000, 0xa553}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.966139422s ago: executing program 3 (id=3646): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r2, r1) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES64=r1], 0x58}, 0x1, 0x0, 0x0, 0x24010800}, 0x20000001) 2.878767308s ago: executing program 3 (id=3647): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xb) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x2001) (async) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f00000008c0)={0xff82, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x20, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000080)={0x48}) (async) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f000007c000/0x4000)=nil, &(0x7f0000839000/0x1000)=nil, 0x0, 0x0, 0x0, 0xc, 0x4b, 0x0, 0x0, 0x2e}) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x1}, {0xf, 0x6}}}, 0x5}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmsg$nl_netfilter(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0xffffff70}, 0x1, 0x0, 0x0, 0x200050c0}, 0x20000080) (async) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c01000010001307000004000000000000000000000000000000ffff00000000fe8000000000000000000000000000aa00ffffffffffffff8000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa0000000000000000000000000000000032000000fe8000000000000000000000000000aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a"], 0x13c}}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000001c0), 0xc7) 2.798970843s ago: executing program 3 (id=3650): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async) mount$9p_virtio(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x800028, 0x0) (async, rerun: 32) r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x5ae, 0x404000) (async, rerun: 32) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x80000000}}, './file0\x00'}) 2.798204248s ago: executing program 4 (id=3651): r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000180)="d3a24845fed3b644db111f6660fcd399052be391b829c18141634298ceeb56ee051e22d30dbb5f2c5ab2078c2c8cf5b9a0385ac162b836c7957ec2752acb894b12c965ca0e6ef3be0e26d7ce463ba7d45d493070046ee8bf617e890cd5321ff6387b3c061c485ebc22948c0292c94d7463b0a2daf8dd3e66c957e3aef3a4b95f4935d34e1bcbc49fc30eb919f98f0c8eeedbb598bc77f0ea766d13268eb19b0cfd6d9624efc20e49f72912e99e06f832a5d6a336636bcef1293071e0a88f8453", 0xc0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000540)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r2 = add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a49ec13499f8ff0100005d879711d98bb1655a486dfe5f14a7b0b015c1e6be0e7ecabfdfd1dec98db100", 0x4}, 0x48, r1) fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getgid() keyctl$chown(0x4, r0, r3, r4) r5 = add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, 0x0, 0x0, r2) r6 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000580)="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", 0x8a, r2) keyctl$dh_compute(0x17, &(0x7f0000000300)={r6, r6, r0}, &(0x7f0000001480)=""/83, 0x53, &(0x7f0000000400)={&(0x7f00000002c0)={'crc32c\x00'}}) keyctl$update(0x2, r6, &(0x7f00000004c0)="762aa8207b6f82969ac107fe35952dbc4a5e16d2f9f79c8910877e455b25b953a94fa3585961566d857afe445c9eb4c524b695eb79632e38c4f50fe34d67b753a489261a549db3bbc23a901939061078933e6cb7f17d5f1eb1219c3e74ec375c9c14df4c66262b8d0deecff9", 0x6c) r7 = add_key$user(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, &(0x7f00000007c0)="c86feb49ca7d4b71f91f24e802d53717312d04ebf866d350ac8fc49c9fde277d1705d2bd5e57f62d594e93429fb70cf68f7312dcde6ed5ebb64405d6d1eb9e263820a5b65f07d6153ca00434585615d45d3c2b1a5c79006418b8ee", 0x5b, r5) keyctl$dh_compute(0x17, &(0x7f0000000840)={r6, r7, r0}, &(0x7f0000000880)=""/27, 0x1b, &(0x7f0000000a00)={&(0x7f00000008c0)={'nhpoly1305\x00'}, &(0x7f0000000900)="f1775600bf3b559e67c615db65029d12ddc10cb67d749087eb19f4f185ca96ff3fa54a8c5b64a4e5f2a988bfb0d264a0dc6e98afcd578edcb9ae6c7e77694574dc623a7aa461b9242b7eb7bf0a030ef77e671b47bb9e01eb010591ca500ac0276e4bc42f653cd887a58b5f4473da9606394d6d8d76cb47207a43af0aa6afa98428ce60a72b07e2f47aa0fdd8dee922e49268608f140f155e5d834e6d55b4e20ec0a4eb79bf764df7c3aa8cf2e4796aabcf8b4e904d64b31c250c78a66eed1304e7266953f8fcb71e82cfb0bd49b04c83496d1302ad4b13bdd58129b279ae53d27839", 0xe2}) r8 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000240)="0ebad1dc60cefe8d792f4f5d509c9e6d608224953d44e5eff8", 0x19, r8) 2.699087899s ago: executing program 3 (id=3652): r0 = socket$netlink(0x10, 0x3, 0xf) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x14, 0x30, 0xffffffffffffffff}, 0x14}}, 0x0) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, r1, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x20, 0xa8, @random="4c37398894030fe656a23c9400d5bbd2747632419215b99529c60353"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x1200000000}]}, 0x48}, 0x1, 0x0, 0x0, 0x40080}, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 2.698320261s ago: executing program 4 (id=3653): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4c, &(0x7f0000001800), 0x4) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x40000) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) read(r6, &(0x7f0000000100)=""/25, 0x19) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r5) 2.673550577s ago: executing program 3 (id=3655): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000006000000000000", @ANYRESOCT, @ANYBLOB="8600"/17, @ANYRES32=0x0, @ANYRES32], 0x50) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4f2, 0x418, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4}}}}]}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) ioctl$LOOP_CONFIGURE(r0, 0x80081270, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ftruncate(0xffffffffffffffff, 0xffff) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) ioctl$UDMABUF_CREATE(r1, 0x40187542, 0x0) ioctl$UDMABUF_CREATE(r1, 0x40187542, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e041e0b20"], 0x7) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd63"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYRES16], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.388982014s ago: executing program 4 (id=3658): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000040)={0x2, 0x7f}, 0x2) r1 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x39, 0x0, 0x0, 0x62, 0x86cc4097e8288a3a, 0x0, 0x0, 0x0, 0x34, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64]}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000140)={0x2, 0xfa}, 0x2) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x1d) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r3, 0xb3) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r5, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'geneve1\x00', 0x0}) sendto$packet(r7, &(0x7f00000002c0)="1441c05465f0006fc8afa8e40800", 0xe, 0x4000000, &(0x7f00000000c0)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000540)={0x1278, 0x12, 0x8, 0x70bd27, 0x25dfdbfc, {0x27, 0x9, 0x5, 0x3, {0x4e20, 0x4e22, [0x167, 0xff80000, 0x8001, 0x40], [0x18, 0xd, 0xc6, 0x101], r8, [0x5, 0x6]}, 0x3d, 0x7}, [@INET_DIAG_REQ_BYTECODE={0x3b, 0x1, "c45b8e0505d1ca560d5b7c7909a24fade548d5b9b29a15b2ebe7807f7c9c180dc24ed50a4c2de8258e19efeb8d2e42310ca4067cb04103"}, @INET_DIAG_REQ_BYTECODE={0xa8, 0x1, "6b1e0db26d400340785c4b995333519e44d2b052d3f1b42cedc6332b341f6f08b78cc926e7e9edc3fc8a14d0432d8b8a456664b15f2161ccb7de1fcdbe723248a787fd279564c1a2e29366f707ff1f0557192421e49ff65e4d8bf505a564798111416dffd3cee3907be6802fc1519cf5d72b9e3b1e3c85e76dff8e6ba1e04b52d025f3f60694b0b3bff22116e0b4be69d79c46e08bc928441df3fcf9895fa0e30230b876"}, @INET_DIAG_REQ_BYTECODE={0x90, 0x1, "33277ae7ba671d603020505472fc6a0aed3ae53744467915da0c3658ffb395b132fcdc4401c6c3fb3419ff44f784067ad661eeae7fcc694ebbc5ab12f75cf7e5abe6ce81487b4c21941ac2a7624e3db7752639d9f426afdd609dcae2555ae25c2d03853be686b1203f09a264b37c2ce52e3d330d4bb20f761de08c149b0bdb038becc95736fc777019ed3ff8"}, @INET_DIAG_REQ_BYTECODE={0x75, 0x1, "9a54b2f18df5c637d855e2673bc6ece3e9fff8aea06d19c01816f5eca822b4cfc5ff965d06f5b4d4b0dd51fe1df5229ea16dab5ce5bdce756658e6ba130c33a26f392393d4ca33bcde1a0e3ffed30426685dea1bfe323ce445fe5f352585f10eba47d64640a15c48324647e49bac273694"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x39, 0x1, "b7c7117a3d43d2a0e9536e01d22bc3cdd1d04e2e7a6a2379dc3c0ab59b1bc0f1a42ce74050c344980497357564533df5eb702547f7"}]}, 0x1278}, 0x1, 0x0, 0x0, 0x4000800}, 0x4041) 2.192265629s ago: executing program 4 (id=3663): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) (async) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r1, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x2000c885) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="1307", 0x2}], 0x1}, 0x4051) (async) setsockopt$sock_attach_bpf(r2, 0x1, 0x10, &(0x7f0000001280), 0x4) (async) recvmsg(r2, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003a00)=""/4096, 0x1000}, 0x10000) (async) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='romfs\x00', 0x200000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000003c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="36003300d000000000dfffffffff0802110000005050505050500000150100000000000000005584d2f511d56c029a92908b231c387c00007dd922e1d58b65a83366866b589b5d68d4b3f37432e6a224a3d171ab421f2145c50a28f71bcec833e78e0cfb99dcbdfee2517037288c6294f6bd08bea90fadb4d08bc6e3ee128f5da9255e0cc094ad89eed38319298e0065df20999bdf30bd2cb6258d123964484dc605369cf41a68631e4e5854c187dadee6777ddfe5775b2c7c569284854c8e451b78087b4d480c96609b"], 0x54}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r4) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x2, [@const={0x0, 0x0, 0x0, 0x9, 0x3}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}]}}, 0x0, 0x66, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) (async) r9 = socket(0x200000000000011, 0x2, 0x0) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r9, &(0x7f0000000d00)={0x11, 0x1c, r11, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x68, r8, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x840}, 0x40050) (async) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c001000", @ANYRES16=r5, @ANYBLOB="080028bd7000fddbdf256900000008000300", @ANYRES32=r7, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x48014}, 0x2202c011) 2.1085553s ago: executing program 4 (id=3666): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0xe, 0x1b, 0x100, &(0x7f00000000c0)="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"}) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000005600010000000000000000000700c6c9", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) 778.264416ms ago: executing program 0 (id=3679): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, 0x0, &(0x7f0000000500)=""/64}, 0x20) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000540)={{{@in6=@private1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000440)=0xe8) getgroups(0x1, &(0x7f0000000280)=[0xee00]) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x80000, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',ignoreqv,loose,uname=overlay\x00,noextend,access=', @ANYRESDEC=r2, @ANYBLOB=',posixacl,version=9p2000.u,access=client,dfltgid=', @ANYRESHEX=r3, @ANYBLOB="2c7375626a5f747970653d5c2d28b92f2c2c66756e633d46494c455f434845434b2c6e6f6c617a7974696d652c6f626a5f726f6c653d7d3a282df03a2a2c61756469742c00da28070b1a17b996c0d194757acd26d2f49201efd9d8b8a4880eed72cada4cabaa469969a7efa1fd7e27b1d380307c431a4decbae5da17eafd8a37614eca0daab56d3584ea1c6a00ad3a8d88b7bad9bb4b216f0656a6414fd03a78f8b310aa793974bbfeeb91a5e13c98ac1d6506625ef60b0a3b5a888c"]) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') 664.636705ms ago: executing program 0 (id=3680): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x6, 0x2}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x18, r2, 0x200000}, 0x10) ppoll(&(0x7f0000000080)=[{r1, 0x2}], 0x1, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) lsm_list_modules(&(0x7f0000002600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000000)=0x7b, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000000c0), 0x12) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x89b1, &(0x7f00000000c0)={'vlan1\x00', @multicast}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0xa000, 0x1da) read$FUSE(r7, &(0x7f0000000080)={0x2020}, 0x2020) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$kcm(r7, &(0x7f0000002540)={&(0x7f00000020c0)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4, 0x2, 0x1, 0x4}}, 0x80, &(0x7f00000024c0)=[{&(0x7f0000002140)="08211599d48d1feef7e30badb94c279e3cb72de80b54880deff2c9f4fd5986435a1c50b23d06e738785023fa75263467d99bbdf1fd21f65ce37f1081bd6be9444473ef47dd4f9c2cc236d1fc180335386b68236f1669391e668e63ac19e8f18350b5ab38e158a6011510b1e314f1d9eda27aca901abd5015c82525190f23d3c48c24e4b8cbf764be75ff75f5447342002274539aab60ce6cf710b6cec4836a8142e150289880690c8b8be96786feb5d0700241d8481a362c750015", 0xbb}, {&(0x7f0000002200)="f965db6c9b744f736e79bf667d9eb6d65b5aba125bc3978fed1591c6c28f64c464a703ae7ad9b8961d58759c64932a779afb27577a8daa22112871bcbcc24c6c5240f7154cb5bea00c3a502a2d3dbf7d9d3cf4aea2ff330092cb5d96a5e6770c7092b55e982aa2eda8a1fa527882e13eddf7eb238afabd162d4cf934e4fc032f5fa5729ff081ac7b40bf8f10dc736120ecd6d283ca12c4234e", 0x99}, {&(0x7f00000022c0)="5c9426b7b81c5c9b62444f8f43507d29ff37237c01dbbf410cc8447c311c3c239cec6a1de7e2297f3438ba56c0f1170f7176cd6450004f14adaa", 0x3a}, {&(0x7f0000002300)="e27de5df5ed311c90fcab0d82c5e74e6b4a3bcf2f4651fde4a0d09d8a2095a2af52baffa27b082fe1c3ddc13cd6ebdbec201a5e531a152efa7c40a25336f0e72484816e0b9774037571d22698a5c92b623a1e1822789786299ed9198be1fc6442c02ed1c3e0ac4474e747e92ac7ee4eaa8", 0x71}, {&(0x7f0000002380)="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", 0xfe}, {&(0x7f0000002480)}], 0x6}, 0x4008400) r9 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x7, 0x0, 0x20000000, 0x9, 0x2, 0x0, 0x0, 0x3, 0x4}}) r10 = openat$cgroup_procs(r8, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f00000001c0), 0x12) close_range(r3, 0xffffffffffffffff, 0x0) 536.037266ms ago: executing program 0 (id=3683): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @private2}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfc8753e16b80e5c) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x544, '\x00', 0x0, r2, 0x2, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYRESHEX=r1], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000000306010108000000000000000100000005000100c7"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, 0x0, &(0x7f0000000a00)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x9, 0x400, 0x6, 0x40c0, 0xffffffffffffffff, 0xba, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2, 0x3, @void, @value, @void, @value}, 0x50) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x7, 0x80, 0x5, 0xf0d6, {{0x10, 0x4, 0x2, 0x6, 0x40, 0x67, 0x0, 0xf9, 0x2f, 0x0, @multicast1, @empty, {[@timestamp_addr={0x44, 0xc, 0xca, 0x1, 0x2, [{@dev={0xac, 0x14, 0x14, 0x3a}, 0x5e3}]}, @noop, @timestamp_prespec={0x44, 0x1c, 0xf2, 0x3, 0x0, [{@multicast2, 0x2}, {@empty, 0x80000001}, {@loopback, 0xdda0}]}]}}}}}) r7 = creat(&(0x7f0000000380)='./file0\x00', 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000003c0)={'erspan0\x00', &(0x7f00000004c0)={'syztnl0\x00', r6, 0x7, 0x8, 0x32d8, 0x3f, {{0xa, 0x4, 0x3, 0x9, 0x28, 0x64, 0x0, 0x77, 0x2f, 0x0, @loopback, @broadcast, {[@generic={0x44, 0x5, "c76747"}, @timestamp={0x44, 0xc, 0x18, 0x0, 0x8, [0x0, 0x4]}]}}}}}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0xfffffff9, '\x00', r6, r8, 0x1, 0x2, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r9 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r9, 0x0, 0x82, &(0x7f00000000c0)={'filter\x00', 0x0, 0x0, 0x0, [0xf1, 0xfffffffb, 0x7, 0xfee, 0x5, 0x3]}, &(0x7f0000000340)=0x78) 534.868521ms ago: executing program 2 (id=3684): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r1, 0x0, 0x1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCODING_SA={0x5, 0x6, 0x16}, @IFLA_MACSEC_INC_SCI={0x5, 0x9, 0x5}, @IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x10000}, @IFLA_MACSEC_ENCODING_SA={0x5, 0x6, 0xb2}, @IFLA_MACSEC_ICV_LEN={0x5}]}}}]}, 0x60}}, 0x0) add_key(&(0x7f0000000140)='rxrpc_s\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c00028005000100000000000800074000000000040006"], 0x98}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) pread64(r3, &(0x7f0000001240)=""/102400, 0x200000, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x34}}, 0x0) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x8) close(r6) read$FUSE(r6, &(0x7f000000c400)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r6, &(0x7f000000a3c0)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x78, 0x0, 0x0, {0x410000003, 0x10, 0x0, {0x0, 0x80002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8001, 0x0, r7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r6, &(0x7f0000006100)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0x400000042, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_setup(0x54, &(0x7f0000000400)={0x0, 0x9fb7, 0x800, 0x2, 0x20e, 0x0, r6}, &(0x7f0000000480), &(0x7f00000004c0)) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000580)={0x0, 0x8c1, 0x80, 0x20203843, 0x3, [0x2], [0x810003], [0x5, 0x0, 0xffffffff, 0x46], [0x0, 0x0, 0x0, 0xfffffffffffffffe]}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r8, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x1, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x814}, 0x4000) 339.362587ms ago: executing program 2 (id=3685): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="01000000060000000410000010"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r1}, 0x10) mbind(&(0x7f0000126000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x2) 338.463854ms ago: executing program 0 (id=3686): setfsuid(0xee00) setresuid(0xffffffffffffffff, 0x0, 0xffffffffffffffff) (async) setresuid(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setgroups(0x0, 0x0) r0 = fsopen(&(0x7f0000000100)='proc\x00', 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r1, 0x112, 0x13, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x487c0, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ppoll(&(0x7f0000000240)=[{r3, 0x400}, {r2, 0x4}], 0x2, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x17, 0x5, &(0x7f0000000200)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000500)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000000080)={r7, 0x3, r6, 0x120000}) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYRES16=r5], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) (async) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYRES16=r5], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) socket$kcm(0x2, 0x7, 0x106) fsmount(r0, 0x1, 0x0) (async) r8 = fsmount(r0, 0x1, 0x0) fchdir(r8) getgroups(0x1, &(0x7f0000000080)=[0xee00]) (async) getgroups(0x1, &(0x7f0000000080)=[0xee00]) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000004c0)={0x6, 0xff, 0xf}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000004c0)={0x6, 0xff, 0xf}) setregid(r9, r9) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) ioctl$NBD_SET_TIMEOUT(r8, 0xab09, 0x8) (async) ioctl$NBD_SET_TIMEOUT(r8, 0xab09, 0x8) socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48000000100001002abd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0221000008200200140003006e657464657673696d30000000000000f7ffffff100001800c00030005000000d12a0000"], 0x48}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r5}, &(0x7f0000000140), &(0x7f00000002c0)=r5}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r5}, &(0x7f0000000140), &(0x7f00000002c0)=r5}, 0x20) 338.115218ms ago: executing program 2 (id=3687): r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f00000000c0)={0x0, 0x5, 0x5, '\x00', &(0x7f00000001c0)=0x4}) mkdir(&(0x7f0000000400)='./file1\x00', 0x99) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="0205000310000000000000000000000002000900080000000a0000000000000005000600000000000a0000000000000000000000000000000000000000000001000000000000000002000100000040000000040c0000000005000500000000000a"], 0x80}, 0x1, 0x7}, 0x20000080) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x2c}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000001b40)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000001540), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_RESUME(r3, 0x4147, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1f, &(0x7f0000002340)=""/4096, &(0x7f0000000340)=0x1000) r4 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x8001) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r4, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) close(r4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) 217.822005ms ago: executing program 2 (id=3688): r0 = shmget$private(0x0, 0x2000, 0x100, &(0x7f0000ffd000/0x2000)=nil) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x114, 0x34, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0x14, 0x3, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0e05403, &(0x7f0000000800)={{0xffffffffffffffff, 0x2, 0xffffffff, 0x0, 0x405}, 0x0, 0x3, 'id1\x00', 'timer0\x00', 0x0, 0x6, 0xee3, 0x400, 0x77c1907c}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 109.326134ms ago: executing program 2 (id=3689): socket$inet(0x2, 0x2, 0x1) (async) r0 = socket$inet(0x2, 0x2, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5}) (async) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5}) r3 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r3}) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r5, 0x9}}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 108.788849ms ago: executing program 0 (id=3690): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000000)) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x8082) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r2 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f00000001c0)={0x60, 0x3, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x4, &(0x7f0000000140)=[{0x9, 0x2, 0x4}, {0xfffffffffffffff8, 0x1}, {0x8001, 0x0, 0x7}], 0x3, 0x4, 0x2, 0xf, 0x40, 0x26}) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x24280, 0x0) 4.254579ms ago: executing program 2 (id=3691): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x9, 0xfc, 0x2, '\x00', 0x8001}) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000000)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f00000000c0)={0x3, r4, 0xffffffff, 0xf, 0x0, 0x5, 0x1}) r5 = openat$userio(0xffffffffffffff9c, &(0x7f0000000100), 0x12002, 0x0) close_range(r5, r2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) 3.84176ms ago: executing program 0 (id=3692): r0 = syz_io_uring_setup(0x239, &(0x7f00000001c0)={0x0, 0x0, 0x11900}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x40, 0x12345, {0x0, r3}}) (async) io_uring_enter(r0, 0x6256, 0x0, 0x0, 0x0, 0x0) (async) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r4, 0x541c, &(0x7f0000000000)) (async, rerun: 32) close_range(r0, r0, 0x2) (async, rerun: 32) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') (async) mount$9p_virtio(&(0x7f0000000240), &(0x7f00000000c0)='./file1\x00', &(0x7f0000000140), 0x265d3d43c6197c97, &(0x7f0000000200)=ANY=[@ANYBLOB='tr\x00\x00\x00\x00anUme=-\x00\x00\x00\x00\x00\x00\x00']) (async) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x15, &(0x7f0000000100)={@mcast1}, 0x14) (async) read$FUSE(r5, &(0x7f0000000980)={0x2020}, 0x2020) 0s ago: executing program 4 (id=3693): socket$netlink(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x4b, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x4000, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {0x4000, 0x4}, {0x3, 0x0, 0x0, 0x100000}, {}, {}, {0x5}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x80}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r6, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r9], 0x54}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r12, @ANYBLOB="01"], 0x20}}, 0x0) r13 = socket(0x1, 0x803, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x50, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20, 0x20}}}}}}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r15 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r16, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r17 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r17, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x48, 0x2c, 0xd27, 0x30bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r16, {0xfff0, 0xe}, {}, {0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @mcast2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) 0s ago: executing program 0 (id=3694): r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x70, 0x0, 0x4, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000840}, 0x40081) (async) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) (async) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x7, 0x96, 0x10, 0x1}]}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) (async) setuid(0xee00) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) (async) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/resume_offset', 0x102, 0x0) sendfile(r3, r3, 0x0, 0x4) (async) fsetxattr$system_posix_acl(r2, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="020000000100030000000000040005000000000008000500", @ANYRES32=0x0, @ANYBLOB="1000020000f9619aae9edd158800ca2755e0fcd99f0000"], 0x2c, 0x1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) (async) ioctl$DRM_IOCTL_RES_CTX(r1, 0x7b9, 0x0) kernel console output (not intermixed with test programs): T16070] kmemdup_noprof+0x29/0x60 [ 258.875774][T16070] sidtab_sid2str_get+0x17a/0x680 [ 258.875791][T16070] sidtab_entry_to_string+0x33/0x110 [ 258.875807][T16070] security_sid_to_context_core+0x35c/0x640 [ 258.875846][T16070] avc_audit_post_callback+0x109/0x8f0 [ 258.875864][T16070] ? __pfx_audit_log_lsm_data+0x10/0x10 [ 258.875879][T16070] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 258.875895][T16070] ? skb_put+0x138/0x1b0 [ 258.875909][T16070] ? audit_log_n_string+0x253/0x540 [ 258.875924][T16070] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 258.875940][T16070] common_lsm_audit+0x24b/0x300 [ 258.875956][T16070] ? __pfx_common_lsm_audit+0x10/0x10 [ 258.875969][T16070] ? avc_denied+0x14a/0x190 [ 258.875989][T16070] slow_avc_audit+0x186/0x210 [ 258.876007][T16070] ? __pfx_slow_avc_audit+0x10/0x10 [ 258.876031][T16070] ? find_held_lock+0x2b/0x80 [ 258.876051][T16070] avc_has_perm+0x18b/0x1c0 [ 258.876062][T16070] ? __pfx_avc_has_perm+0x10/0x10 [ 258.876072][T16070] ? is_bpf_text_address+0x94/0x1a0 [ 258.876086][T16070] ? kernel_text_address+0x8d/0x100 [ 258.876101][T16070] sock_has_perm+0x252/0x2f0 [ 258.876114][T16070] ? __pfx_sock_has_perm+0x10/0x10 [ 258.876127][T16070] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 258.876147][T16070] ? __import_iovec+0x1dd/0x650 [ 258.876163][T16070] ? __might_fault+0xe3/0x190 [ 258.876176][T16070] ? __might_fault+0x13b/0x190 [ 258.876192][T16070] security_socket_sendmsg+0x9b/0x240 [ 258.876205][T16070] ____sys_sendmsg+0x865/0xc70 [ 258.876218][T16070] ? copy_msghdr_from_user+0x10a/0x160 [ 258.876233][T16070] ? __pfx_____sys_sendmsg+0x10/0x10 [ 258.876251][T16070] ___sys_sendmsg+0x134/0x1d0 [ 258.876268][T16070] ? __pfx____sys_sendmsg+0x10/0x10 [ 258.876284][T16070] ? __lock_acquire+0x622/0x1c90 [ 258.876318][T16070] __sys_sendmsg+0x16d/0x220 [ 258.876333][T16070] ? __pfx___sys_sendmsg+0x10/0x10 [ 258.876359][T16070] do_syscall_64+0xcd/0x4c0 [ 258.876376][T16070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.876387][T16070] RIP: 0033:0x7f7696f8e929 [ 258.876397][T16070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.876407][T16070] RSP: 002b:00007f7697d47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 258.876418][T16070] RAX: ffffffffffffffda RBX: 00007f76971b5fa0 RCX: 00007f7696f8e929 [ 258.876425][T16070] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 258.876431][T16070] RBP: 00007f7697d47090 R08: 0000000000000000 R09: 0000000000000000 [ 258.876438][T16070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.876444][T16070] R13: 0000000000000000 R14: 00007f76971b5fa0 R15: 00007ffcb62edc08 [ 258.876459][T16070] [ 258.908286][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804548fc00: rx timeout, send abort [ 259.053115][T16076] bridge0: port 3(batadv0) entered blocking state [ 259.055793][T16076] bridge0: port 3(batadv0) entered disabled state [ 259.057938][T16076] batadv0: entered allmulticast mode [ 259.060393][T16076] batadv0: entered promiscuous mode [ 259.062541][T16076] bridge0: port 3(batadv0) entered blocking state [ 259.066106][T16076] bridge0: port 3(batadv0) entered forwarding state [ 259.074882][T16076] batadv0: left allmulticast mode [ 259.076517][T16076] batadv0: left promiscuous mode [ 259.079033][T16076] bridge0: port 3(batadv0) entered disabled state [ 259.452420][T16081] FAULT_INJECTION: forcing a failure. [ 259.452420][T16081] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 259.457147][T16081] CPU: 1 UID: 0 PID: 16081 Comm: syz.0.3130 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 259.457163][T16081] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 259.457170][T16081] Call Trace: [ 259.457174][T16081] [ 259.457179][T16081] dump_stack_lvl+0x16c/0x1f0 [ 259.457200][T16081] should_fail_ex+0x512/0x640 [ 259.457218][T16081] should_fail_alloc_page+0xe7/0x130 [ 259.457236][T16081] prepare_alloc_pages+0x3c2/0x610 [ 259.457249][T16081] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 259.457266][T16081] ? rcu_is_watching+0x12/0xc0 [ 259.457280][T16081] ? trace_mm_page_alloc+0x11f/0x1a0 [ 259.457298][T16081] ? __alloc_frozen_pages_noprof+0x294/0x23f0 [ 259.457318][T16081] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 259.457334][T16081] ? is_bpf_text_address+0x8a/0x1a0 [ 259.457348][T16081] ? bpf_ksym_find+0x127/0x1c0 [ 259.457364][T16081] ? is_bpf_text_address+0x94/0x1a0 [ 259.457377][T16081] ? __kernel_text_address+0xd/0x40 [ 259.457389][T16081] ? unwind_get_return_address+0x59/0xa0 [ 259.457413][T16081] alloc_pages_bulk_noprof+0x71c/0x1410 [ 259.457427][T16081] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 259.457441][T16081] ? policy_nodemask+0xea/0x4e0 [ 259.457459][T16081] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 259.457474][T16081] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 259.457496][T16081] kasan_populate_vmalloc+0xf1/0x1f0 [ 259.457512][T16081] alloc_vmap_area+0x959/0x29c0 [ 259.457535][T16081] ? __pfx_alloc_vmap_area+0x10/0x10 [ 259.457556][T16081] __get_vm_area_node+0x1ca/0x330 [ 259.457570][T16081] __vmalloc_node_range_noprof+0x271/0x14b0 [ 259.457582][T16081] ? __vcalloc_noprof+0x4d/0x80 [ 259.457601][T16081] ? __vcalloc_noprof+0x4d/0x80 [ 259.457618][T16081] ? __pfx___might_resched+0x10/0x10 [ 259.457632][T16081] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 259.457644][T16081] ? rcu_is_watching+0x12/0xc0 [ 259.457657][T16081] ? trace_contention_end+0xdd/0x130 [ 259.457674][T16081] ? __mutex_lock+0x1ca/0xb90 [ 259.457693][T16081] ? __vcalloc_noprof+0x4d/0x80 [ 259.457707][T16081] __vmalloc_node_noprof+0xad/0xf0 [ 259.457718][T16081] ? __vcalloc_noprof+0x4d/0x80 [ 259.457734][T16081] __vcalloc_noprof+0x4d/0x80 [ 259.457749][T16081] kvm_arch_prepare_memory_region+0x35a/0x8d0 [ 259.457770][T16081] kvm_set_memslot+0x139/0x1380 [ 259.457786][T16081] ? kasan_save_track+0x14/0x30 [ 259.457801][T16081] kvm_set_memory_region+0xebc/0x1680 [ 259.457820][T16081] ? __pfx_kvm_set_memory_region+0x10/0x10 [ 259.457839][T16081] kvm_vm_ioctl+0x1482/0x3da0 [ 259.457861][T16081] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 259.457885][T16081] ? kasan_quarantine_put+0x10a/0x240 [ 259.457898][T16081] ? lockdep_hardirqs_on+0x7c/0x110 [ 259.457916][T16081] ? find_held_lock+0x2b/0x80 [ 259.457929][T16081] ? tomoyo_path_number_perm+0x295/0x580 [ 259.457945][T16081] ? tomoyo_path_number_perm+0x18d/0x580 [ 259.457960][T16081] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 259.457973][T16081] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 259.457986][T16081] ? do_vfs_ioctl+0x523/0x1a60 [ 259.457998][T16081] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 259.458020][T16081] ? hook_file_ioctl_common+0x145/0x410 [ 259.458042][T16081] ? selinux_file_ioctl+0x180/0x270 [ 259.458057][T16081] ? selinux_file_ioctl+0xb4/0x270 [ 259.458072][T16081] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 259.458089][T16081] __x64_sys_ioctl+0x18b/0x210 [ 259.458102][T16081] do_syscall_64+0xcd/0x4c0 [ 259.458120][T16081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.458131][T16081] RIP: 0033:0x7fa0a2f8e52b [ 259.458140][T16081] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 259.458151][T16081] RSP: 002b:00007fa0a3d78490 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 259.458161][T16081] RAX: ffffffffffffffda RBX: 00007fa0a3d78be0 RCX: 00007fa0a2f8e52b [ 259.458168][T16081] RDX: 00007fa0a3d78be0 RSI: 000000004020ae46 RDI: 0000000000000004 [ 259.458186][T16081] RBP: 0000000000000004 R08: 0000000000000001 R09: 0000000000000000 [ 259.458193][T16081] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000005 [ 259.458200][T16081] R13: 0000200000010000 R14: 000020000000b000 R15: 00000000fec00000 [ 259.458214][T16081] [ 259.498187][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804548fc00: abort rx timeout. Force session deactivation [ 259.802687][ T60] IPVS: starting estimator thread 0... [ 259.902703][T16087] IPVS: using max 45 ests per chain, 108000 per kthread [ 260.154216][T16106] loop6: detected capacity change from 0 to 524287999 [ 260.217409][T16113] FAULT_INJECTION: forcing a failure. [ 260.217409][T16113] name failslab, interval 1, probability 0, space 0, times 0 [ 260.221422][T16113] CPU: 2 UID: 0 PID: 16113 Comm: syz.3.3139 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 260.221437][T16113] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 260.221445][T16113] Call Trace: [ 260.221449][T16113] [ 260.221454][T16113] dump_stack_lvl+0x16c/0x1f0 [ 260.221474][T16113] should_fail_ex+0x512/0x640 [ 260.221488][T16113] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 260.221505][T16113] should_failslab+0xc2/0x120 [ 260.221521][T16113] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 260.221535][T16113] ? __alloc_skb+0x2b2/0x380 [ 260.221553][T16113] __alloc_skb+0x2b2/0x380 [ 260.221567][T16113] ? __pfx___alloc_skb+0x10/0x10 [ 260.221583][T16113] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 260.221598][T16113] netlink_alloc_large_skb+0x69/0x130 [ 260.221610][T16113] netlink_sendmsg+0x6a1/0xdd0 [ 260.221624][T16113] ? __pfx_netlink_sendmsg+0x10/0x10 [ 260.221640][T16113] ____sys_sendmsg+0xa95/0xc70 [ 260.221666][T16113] ? copy_msghdr_from_user+0x10a/0x160 [ 260.221682][T16113] ? __pfx_____sys_sendmsg+0x10/0x10 [ 260.221700][T16113] ___sys_sendmsg+0x134/0x1d0 [ 260.221717][T16113] ? __pfx____sys_sendmsg+0x10/0x10 [ 260.221731][T16113] ? __lock_acquire+0x622/0x1c90 [ 260.221765][T16113] __sys_sendmsg+0x16d/0x220 [ 260.221781][T16113] ? __pfx___sys_sendmsg+0x10/0x10 [ 260.221806][T16113] do_syscall_64+0xcd/0x4c0 [ 260.221823][T16113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.221835][T16113] RIP: 0033:0x7fa16fd8e929 [ 260.221844][T16113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.221854][T16113] RSP: 002b:00007fa170b6b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 260.221865][T16113] RAX: ffffffffffffffda RBX: 00007fa16ffb5fa0 RCX: 00007fa16fd8e929 [ 260.221871][T16113] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 260.221878][T16113] RBP: 00007fa170b6b090 R08: 0000000000000000 R09: 0000000000000000 [ 260.221884][T16113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.221890][T16113] R13: 0000000000000000 R14: 00007fa16ffb5fa0 R15: 00007fff065ff4a8 [ 260.221904][T16113] [ 260.368802][T16106] trusted_key: encrypted_key: insufficient parameters specified [ 260.488668][T16122] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3142'. [ 260.527364][T16124] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3143'. [ 260.573194][T16124] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16124 comm=syz.3.3143 [ 260.601020][T16130] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3145'. [ 260.601318][T16131] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3145'. [ 260.673783][T16131] geneve2: entered promiscuous mode [ 260.683062][T16133] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1390 sclass=netlink_tcpdiag_socket pid=16133 comm=syz.3.3143 [ 260.901862][T16148] binder: BINDER_SET_CONTEXT_MGR already set [ 260.912645][T16148] binder: 16146:16148 ioctl 4018620d 2000000000c0 returned -16 [ 260.932168][T16148] binder_alloc: binder_alloc_mmap_handler: 16146 200000ffc000-200001000000 already mapped failed -16 [ 260.942137][T16147] binder_alloc: 16146: binder_alloc_buf, no vma [ 261.058067][T16151] hugetlbfs: Unknown parameter 'nr_blocks' [ 261.100541][T16151] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=272 sclass=netlink_route_socket pid=16151 comm=syz.3.3150 [ 261.166692][T16163] hfsplus: unable to find HFS+ superblock [ 261.342255][T16176] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3157'. [ 261.369699][T16176] fuse: Unknown parameter '`œ(\’iÚÄ”ãà³"—' [ 261.460897][T16187] FAULT_INJECTION: forcing a failure. [ 261.460897][T16187] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 261.465773][T16187] CPU: 0 UID: 0 PID: 16187 Comm: syz.2.3161 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 261.465789][T16187] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 261.465797][T16187] Call Trace: [ 261.465801][T16187] [ 261.465805][T16187] dump_stack_lvl+0x16c/0x1f0 [ 261.465825][T16187] should_fail_ex+0x512/0x640 [ 261.465842][T16187] _copy_from_iter+0x29f/0x16f0 [ 261.465859][T16187] ? __alloc_skb+0x200/0x380 [ 261.465875][T16187] ? __pfx__copy_from_iter+0x10/0x10 [ 261.465891][T16187] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 261.465908][T16187] netlink_sendmsg+0x829/0xdd0 [ 261.465921][T16187] ? __pfx_netlink_sendmsg+0x10/0x10 [ 261.465938][T16187] ____sys_sendmsg+0xa95/0xc70 [ 261.465950][T16187] ? copy_msghdr_from_user+0x10a/0x160 [ 261.465965][T16187] ? __pfx_____sys_sendmsg+0x10/0x10 [ 261.465983][T16187] ___sys_sendmsg+0x134/0x1d0 [ 261.466005][T16187] ? __pfx____sys_sendmsg+0x10/0x10 [ 261.466020][T16187] ? __lock_acquire+0x622/0x1c90 [ 261.466053][T16187] __sys_sendmsg+0x16d/0x220 [ 261.466069][T16187] ? __pfx___sys_sendmsg+0x10/0x10 [ 261.466094][T16187] do_syscall_64+0xcd/0x4c0 [ 261.466111][T16187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.466122][T16187] RIP: 0033:0x7f926638e929 [ 261.466131][T16187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.466142][T16187] RSP: 002b:00007f9267209038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 261.466153][T16187] RAX: ffffffffffffffda RBX: 00007f92665b5fa0 RCX: 00007f926638e929 [ 261.466160][T16187] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 261.466166][T16187] RBP: 00007f9267209090 R08: 0000000000000000 R09: 0000000000000000 [ 261.466172][T16187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 261.466179][T16187] R13: 0000000000000000 R14: 00007f92665b5fa0 R15: 00007ffe8633e9d8 [ 261.466192][T16187] [ 261.812876][ T40] kauditd_printk_skb: 1681 callbacks suppressed [ 261.812888][ T40] audit: type=1400 audit(261.733:37153): avc: denied { write } for pid=16210 comm="syz.2.3168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 261.827017][ T40] audit: type=1400 audit(261.743:37155): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=39724 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 261.838092][ T40] audit: type=1400 audit(261.743:37154): avc: denied { read } for pid=16213 comm="syz.4.3169" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 261.846982][ T40] audit: type=1400 audit(261.743:37156): avc: denied { read open } for pid=16213 comm="syz.4.3169" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 261.857109][ T40] audit: type=1400 audit(261.743:37157): avc: denied { read } for pid=16213 comm="syz.4.3169" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 261.866458][ T40] audit: type=1400 audit(261.743:37158): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=127.0.0.1 src=39724 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 261.875191][ T40] audit: type=1400 audit(261.743:37159): avc: denied { read open } for pid=16213 comm="syz.4.3169" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 261.892393][ T40] audit: type=1400 audit(261.743:37160): avc: denied { recv } for pid=5923 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=39724 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 261.901396][ T40] audit: type=1400 audit(261.743:37161): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=49726 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 261.903280][T16218] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3167'. [ 261.910566][ T40] audit: type=1400 audit(261.753:37162): avc: denied { read } for pid=16208 comm="syz.0.3167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 262.187092][T16226] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 262.276803][T16229] FAULT_INJECTION: forcing a failure. [ 262.276803][T16229] name failslab, interval 1, probability 0, space 0, times 0 [ 262.281322][T16229] CPU: 0 UID: 0 PID: 16229 Comm: syz.4.3174 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 262.281338][T16229] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 262.281345][T16229] Call Trace: [ 262.281349][T16229] [ 262.281354][T16229] dump_stack_lvl+0x16c/0x1f0 [ 262.281374][T16229] should_fail_ex+0x512/0x640 [ 262.281392][T16229] should_failslab+0xc2/0x120 [ 262.281409][T16229] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 262.281424][T16229] ? skb_clone+0x190/0x3f0 [ 262.281442][T16229] skb_clone+0x190/0x3f0 [ 262.281459][T16229] netlink_deliver_tap+0xabd/0xd30 [ 262.281480][T16229] netlink_unicast+0x5df/0x7f0 [ 262.281493][T16229] ? __pfx_netlink_unicast+0x10/0x10 [ 262.281509][T16229] netlink_sendmsg+0x8d1/0xdd0 [ 262.281523][T16229] ? __pfx_netlink_sendmsg+0x10/0x10 [ 262.281540][T16229] ____sys_sendmsg+0xa95/0xc70 [ 262.281552][T16229] ? copy_msghdr_from_user+0x10a/0x160 [ 262.281568][T16229] ? __pfx_____sys_sendmsg+0x10/0x10 [ 262.281586][T16229] ___sys_sendmsg+0x134/0x1d0 [ 262.281603][T16229] ? __pfx____sys_sendmsg+0x10/0x10 [ 262.281617][T16229] ? __lock_acquire+0x622/0x1c90 [ 262.281652][T16229] __sys_sendmsg+0x16d/0x220 [ 262.281668][T16229] ? __pfx___sys_sendmsg+0x10/0x10 [ 262.281693][T16229] do_syscall_64+0xcd/0x4c0 [ 262.281711][T16229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.281723][T16229] RIP: 0033:0x7f7696f8e929 [ 262.281732][T16229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.281743][T16229] RSP: 002b:00007f7697d47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 262.281753][T16229] RAX: ffffffffffffffda RBX: 00007f76971b5fa0 RCX: 00007f7696f8e929 [ 262.281760][T16229] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 262.281767][T16229] RBP: 00007f7697d47090 R08: 0000000000000000 R09: 0000000000000000 [ 262.281773][T16229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 262.281779][T16229] R13: 0000000000000000 R14: 00007f76971b5fa0 R15: 00007ffcb62edc08 [ 262.281793][T16229] [ 263.000975][T16262] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3184'. [ 263.005130][T16262] netlink: 'syz.3.3184': attribute type 6 has an invalid length. [ 263.008444][T16262] netlink: 'syz.3.3184': attribute type 5 has an invalid length. [ 263.013272][T16262] netlink: 'syz.3.3184': attribute type 4 has an invalid length. [ 263.328399][T16286] IPv4: Oversized IP packet from 127.202.26.0 [ 263.425997][T16291] bad cache= option: none [ 263.425997][T16291] [ 263.428337][T16291] CIFS: VFS: bad cache= option: none [ 263.435662][T16291] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3194'. [ 263.438537][T16291] netlink: 'syz.3.3194': attribute type 7 has an invalid length. [ 263.440945][T16291] netlink: 'syz.3.3194': attribute type 8 has an invalid length. [ 263.454138][T16291] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3194'. [ 263.540488][T16298] bridge1: entered allmulticast mode [ 263.642472][T16302] syz.3.3196 (16302): /proc/16301/oom_adj is deprecated, please use /proc/16301/oom_score_adj instead. [ 263.664461][T16302] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 263.819705][T16311] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3199'. [ 263.819728][T16311] netlink: 'syz.3.3199': attribute type 30 has an invalid length. [ 263.819736][T16311] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3199'. [ 264.287209][T16322] netlink: 'syz.4.3202': attribute type 4 has an invalid length. [ 264.287224][T16322] netlink: 17 bytes leftover after parsing attributes in process `syz.4.3202'. [ 264.311576][T16324] FAULT_INJECTION: forcing a failure. [ 264.311576][T16324] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 264.311620][T16324] CPU: 2 UID: 0 PID: 16324 Comm: syz.3.3203 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 264.311634][T16324] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 264.311641][T16324] Call Trace: [ 264.311646][T16324] [ 264.311650][T16324] dump_stack_lvl+0x16c/0x1f0 [ 264.311684][T16324] should_fail_ex+0x512/0x640 [ 264.311706][T16324] _copy_from_user+0x2e/0xd0 [ 264.311722][T16324] cdrom_ioctl+0x29b9/0x3190 [ 264.311733][T16324] ? __pfx_cdrom_ioctl+0x10/0x10 [ 264.311744][T16324] ? rpm_resume+0x80c/0x1310 [ 264.311787][T16324] ? rcu_is_watching+0x12/0xc0 [ 264.311805][T16324] ? trace_rpm_return_int+0x196/0x220 [ 264.311819][T16324] ? rpm_resume+0x811/0x1310 [ 264.311837][T16324] ? __pfx_rpm_resume+0x10/0x10 [ 264.311850][T16324] ? do_raw_spin_lock+0x12c/0x2b0 [ 264.311863][T16324] ? find_held_lock+0x2b/0x80 [ 264.311878][T16324] ? lockdep_hardirqs_on+0x7c/0x110 [ 264.311894][T16324] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 264.311909][T16324] ? __pm_runtime_resume+0xc3/0x170 [ 264.311926][T16324] sr_block_ioctl+0x1b0/0x250 [ 264.311942][T16324] ? __pfx_sr_block_ioctl+0x10/0x10 [ 264.311961][T16324] blkdev_ioctl+0x277/0x6d0 [ 264.311974][T16324] ? __pfx_blkdev_ioctl+0x10/0x10 [ 264.311984][T16324] ? selinux_file_ioctl+0x180/0x270 [ 264.311998][T16324] ? selinux_file_ioctl+0xb4/0x270 [ 264.312014][T16324] ? __pfx_blkdev_ioctl+0x10/0x10 [ 264.312025][T16324] __x64_sys_ioctl+0x18b/0x210 [ 264.312040][T16324] do_syscall_64+0xcd/0x4c0 [ 264.312062][T16324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.312078][T16324] RIP: 0033:0x7fa16fd8e929 [ 264.312094][T16324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.312126][T16324] RSP: 002b:00007fa170b6b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 264.312145][T16324] RAX: ffffffffffffffda RBX: 00007fa16ffb5fa0 RCX: 00007fa16fd8e929 [ 264.312156][T16324] RDX: 0000200000000080 RSI: 0000000000005304 RDI: 0000000000000003 [ 264.312166][T16324] RBP: 00007fa170b6b090 R08: 0000000000000000 R09: 0000000000000000 [ 264.312178][T16324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.312190][T16324] R13: 0000000000000000 R14: 00007fa16ffb5fa0 R15: 00007fff065ff4a8 [ 264.312217][T16324] [ 264.477527][T16327] ptrace attach of "/syz-executor exec"[14341] was attempted by "/syz-executor exec"[16327] [ 264.619103][ T6637] Bluetooth: hci1: Frame reassembly failed (-84) [ 264.622094][ T6637] Bluetooth: hci1: Frame reassembly failed (-84) [ 264.627443][ T6656] Bluetooth: hci1: Frame reassembly failed (-84) [ 264.629549][ T6656] Bluetooth: hci1: Frame reassembly failed (-84) [ 264.631574][ T6656] Bluetooth: hci1: Frame reassembly failed (-84) [ 264.711693][T16342] IPVS: length: 184 != 24 [ 264.871164][T16349] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3211'. [ 264.899059][T16347] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3210'. [ 264.990254][T16352] FAULT_INJECTION: forcing a failure. [ 264.990254][T16352] name failslab, interval 1, probability 0, space 0, times 0 [ 264.994875][T16352] CPU: 2 UID: 0 PID: 16352 Comm: syz.4.3212 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 264.994891][T16352] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 264.994899][T16352] Call Trace: [ 264.994904][T16352] [ 264.994910][T16352] dump_stack_lvl+0x16c/0x1f0 [ 264.994937][T16352] should_fail_ex+0x512/0x640 [ 264.994957][T16352] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 264.994979][T16352] should_failslab+0xc2/0x120 [ 264.995005][T16352] __kmalloc_cache_noprof+0x6a/0x3e0 [ 264.995022][T16352] ? blk_mq_free_request+0x203/0x320 [ 264.995041][T16352] ? sr_read_tochdr.isra.0+0xa6/0x270 [ 264.995149][T16352] sr_read_tochdr.isra.0+0xa6/0x270 [ 264.995169][T16352] ? __pfx_sr_read_tochdr.isra.0+0x10/0x10 [ 264.995191][T16352] sr_audio_ioctl+0x10f/0x2f0 [ 264.995207][T16352] ? __pfx_sr_audio_ioctl+0x10/0x10 [ 264.995226][T16352] ? __pfx_scsi_test_unit_ready+0x10/0x10 [ 264.995245][T16352] ? do_raw_spin_lock+0x12c/0x2b0 [ 264.995261][T16352] cdrom_count_tracks+0x26f/0x7e0 [ 264.995279][T16352] ? __pfx_cdrom_count_tracks+0x10/0x10 [ 264.995294][T16352] ? __pfx_sr_drive_status+0x10/0x10 [ 264.995315][T16352] check_for_audio_disc+0x193/0x750 [ 264.995329][T16352] ? __might_fault+0x41/0x190 [ 264.995343][T16352] ? __pfx_check_for_audio_disc+0x10/0x10 [ 264.995364][T16352] cdrom_ioctl+0x29fa/0x3190 [ 264.995375][T16352] ? __pfx_cdrom_ioctl+0x10/0x10 [ 264.995385][T16352] ? rpm_resume+0x80c/0x1310 [ 264.995400][T16352] ? rcu_is_watching+0x12/0xc0 [ 264.995417][T16352] ? trace_rpm_return_int+0x196/0x220 [ 264.995431][T16352] ? rpm_resume+0x811/0x1310 [ 264.995449][T16352] ? __pfx_rpm_resume+0x10/0x10 [ 264.995463][T16352] ? do_raw_spin_lock+0x12c/0x2b0 [ 264.995474][T16352] ? find_held_lock+0x2b/0x80 [ 264.995490][T16352] ? lockdep_hardirqs_on+0x7c/0x110 [ 264.995506][T16352] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 264.995521][T16352] ? __pm_runtime_resume+0xc3/0x170 [ 264.995537][T16352] sr_block_ioctl+0x1b0/0x250 [ 264.995559][T16352] ? __pfx_sr_block_ioctl+0x10/0x10 [ 264.995582][T16352] blkdev_ioctl+0x277/0x6d0 [ 264.995598][T16352] ? __pfx_blkdev_ioctl+0x10/0x10 [ 264.995612][T16352] ? selinux_file_ioctl+0x180/0x270 [ 264.995633][T16352] ? selinux_file_ioctl+0xb4/0x270 [ 264.995659][T16352] ? __pfx_blkdev_ioctl+0x10/0x10 [ 264.995677][T16352] __x64_sys_ioctl+0x18b/0x210 [ 264.995697][T16352] do_syscall_64+0xcd/0x4c0 [ 264.995724][T16352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.995747][T16352] RIP: 0033:0x7f7696f8e929 [ 264.995795][T16352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.995812][T16352] RSP: 002b:00007f7697d47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 264.995831][T16352] RAX: ffffffffffffffda RBX: 00007f76971b5fa0 RCX: 00007f7696f8e929 [ 264.995841][T16352] RDX: 0000200000000080 RSI: 0000000000005304 RDI: 0000000000000003 [ 264.995851][T16352] RBP: 00007f7697d47090 R08: 0000000000000000 R09: 0000000000000000 [ 264.995858][T16352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.995864][T16352] R13: 0000000000000000 R14: 00007f76971b5fa0 R15: 00007ffcb62edc08 [ 264.995879][T16352] [ 265.481947][T16369] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 265.666420][T16379] FAULT_INJECTION: forcing a failure. [ 265.666420][T16379] name failslab, interval 1, probability 0, space 0, times 0 [ 265.670314][T16379] CPU: 2 UID: 0 PID: 16379 Comm: syz.0.3224 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 265.670329][T16379] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 265.670336][T16379] Call Trace: [ 265.670341][T16379] [ 265.670346][T16379] dump_stack_lvl+0x16c/0x1f0 [ 265.670365][T16379] should_fail_ex+0x512/0x640 [ 265.670380][T16379] ? fs_reclaim_acquire+0xae/0x150 [ 265.670393][T16379] ? bio_kmalloc+0x41/0x70 [ 265.670406][T16379] should_failslab+0xc2/0x120 [ 265.670422][T16379] __kmalloc_noprof+0xd2/0x510 [ 265.670436][T16379] ? __pfx___debug_object_init+0x10/0x10 [ 265.670450][T16379] bio_kmalloc+0x41/0x70 [ 265.670469][T16379] blk_rq_map_kern+0x387/0x6d0 [ 265.670490][T16379] scsi_execute_cmd+0xbd9/0xef0 [ 265.670516][T16379] ? cdrom_ioctl+0x29fa/0x3190 [ 265.670534][T16379] ? __pfx_scsi_execute_cmd+0x10/0x10 [ 265.670555][T16379] sr_do_ioctl+0x219/0x840 [ 265.670575][T16379] ? __pfx_sr_do_ioctl+0x10/0x10 [ 265.670597][T16379] sr_read_tochdr.isra.0+0xfc/0x270 [ 265.670613][T16379] ? __pfx_sr_read_tochdr.isra.0+0x10/0x10 [ 265.670635][T16379] sr_audio_ioctl+0x10f/0x2f0 [ 265.670651][T16379] ? __pfx_sr_audio_ioctl+0x10/0x10 [ 265.670668][T16379] ? __pfx_scsi_test_unit_ready+0x10/0x10 [ 265.670685][T16379] ? do_raw_spin_lock+0x12c/0x2b0 [ 265.670701][T16379] cdrom_count_tracks+0x26f/0x7e0 [ 265.670720][T16379] ? __pfx_cdrom_count_tracks+0x10/0x10 [ 265.670735][T16379] ? __pfx_sr_drive_status+0x10/0x10 [ 265.670755][T16379] check_for_audio_disc+0x193/0x750 [ 265.670770][T16379] ? __might_fault+0x41/0x190 [ 265.670784][T16379] ? __pfx_check_for_audio_disc+0x10/0x10 [ 265.670805][T16379] cdrom_ioctl+0x29fa/0x3190 [ 265.670815][T16379] ? __pfx_cdrom_ioctl+0x10/0x10 [ 265.670825][T16379] ? rpm_resume+0x80c/0x1310 [ 265.670840][T16379] ? rcu_is_watching+0x12/0xc0 [ 265.670854][T16379] ? trace_rpm_return_int+0x196/0x220 [ 265.670868][T16379] ? rpm_resume+0x811/0x1310 [ 265.670886][T16379] ? __pfx_rpm_resume+0x10/0x10 [ 265.670900][T16379] ? do_raw_spin_lock+0x12c/0x2b0 [ 265.670911][T16379] ? find_held_lock+0x2b/0x80 [ 265.670927][T16379] ? lockdep_hardirqs_on+0x7c/0x110 [ 265.670943][T16379] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 265.670958][T16379] ? __pm_runtime_resume+0xc3/0x170 [ 265.670975][T16379] sr_block_ioctl+0x1b0/0x250 [ 265.670992][T16379] ? __pfx_sr_block_ioctl+0x10/0x10 [ 265.671007][T16379] blkdev_ioctl+0x277/0x6d0 [ 265.671019][T16379] ? __pfx_blkdev_ioctl+0x10/0x10 [ 265.671029][T16379] ? selinux_file_ioctl+0x180/0x270 [ 265.671049][T16379] ? selinux_file_ioctl+0xb4/0x270 [ 265.671064][T16379] ? __pfx_blkdev_ioctl+0x10/0x10 [ 265.671076][T16379] __x64_sys_ioctl+0x18b/0x210 [ 265.671090][T16379] do_syscall_64+0xcd/0x4c0 [ 265.671109][T16379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.671121][T16379] RIP: 0033:0x7fa0a2f8e929 [ 265.671131][T16379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.671142][T16379] RSP: 002b:00007fa0a3d7a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 265.671152][T16379] RAX: ffffffffffffffda RBX: 00007fa0a31b5fa0 RCX: 00007fa0a2f8e929 [ 265.671159][T16379] RDX: 0000200000000080 RSI: 0000000000005304 RDI: 0000000000000003 [ 265.671166][T16379] RBP: 00007fa0a3d7a090 R08: 0000000000000000 R09: 0000000000000000 [ 265.671172][T16379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.671178][T16379] R13: 0000000000000000 R14: 00007fa0a31b5fa0 R15: 00007ffc87852568 [ 265.671192][T16379] [ 265.849943][T16384] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3225'. [ 266.163730][T16396] tmpfs: Bad value for 'mpol' [ 266.171677][T16397] libceph: resolve '4' (ret=-3): failed [ 266.279854][T16402] bridge_slave_0: left allmulticast mode [ 266.281668][T16402] bridge_slave_0: left promiscuous mode [ 266.292735][T16402] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.296983][T16402] bridge_slave_1: left allmulticast mode [ 266.298745][T16402] bridge_slave_1: left promiscuous mode [ 266.300637][T16402] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.334741][T16402] bond0: (slave bond_slave_0): Releasing backup interface [ 266.354138][T16402] bond0: (slave bond_slave_1): Releasing backup interface [ 266.363774][T16406] FAULT_INJECTION: forcing a failure. [ 266.363774][T16406] name failslab, interval 1, probability 0, space 0, times 0 [ 266.367622][T16406] CPU: 1 UID: 0 PID: 16406 Comm: syz.4.3233 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 266.367638][T16406] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 266.367646][T16406] Call Trace: [ 266.367650][T16406] [ 266.367654][T16406] dump_stack_lvl+0x16c/0x1f0 [ 266.367675][T16406] should_fail_ex+0x512/0x640 [ 266.367690][T16406] ? __kmalloc_node_noprof+0xc5/0x500 [ 266.367706][T16406] should_failslab+0xc2/0x120 [ 266.367722][T16406] __kmalloc_node_noprof+0xd8/0x500 [ 266.367737][T16406] ? __vmalloc_node_range_noprof+0x3e5/0x14b0 [ 266.367769][T16406] __vmalloc_node_range_noprof+0x3e5/0x14b0 [ 266.367786][T16406] ? __vcalloc_noprof+0x4d/0x80 [ 266.367803][T16406] ? __pfx___might_resched+0x10/0x10 [ 266.367818][T16406] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 266.367830][T16406] ? rcu_is_watching+0x12/0xc0 [ 266.367844][T16406] ? trace_contention_end+0xdd/0x130 [ 266.367862][T16406] ? __mutex_lock+0x1ca/0xb90 [ 266.367881][T16406] ? __vcalloc_noprof+0x4d/0x80 [ 266.367895][T16406] __vmalloc_node_noprof+0xad/0xf0 [ 266.367906][T16406] ? __vcalloc_noprof+0x4d/0x80 [ 266.367922][T16406] __vcalloc_noprof+0x4d/0x80 [ 266.367937][T16406] kvm_arch_prepare_memory_region+0x35a/0x8d0 [ 266.367959][T16406] kvm_set_memslot+0x139/0x1380 [ 266.367974][T16406] ? kasan_save_track+0x14/0x30 [ 266.367989][T16406] kvm_set_memory_region+0xebc/0x1680 [ 266.368009][T16406] ? __pfx_kvm_set_memory_region+0x10/0x10 [ 266.368027][T16406] kvm_vm_ioctl+0x1482/0x3da0 [ 266.368049][T16406] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 266.368074][T16406] ? kasan_quarantine_put+0x10a/0x240 [ 266.368087][T16406] ? lockdep_hardirqs_on+0x7c/0x110 [ 266.368104][T16406] ? find_held_lock+0x2b/0x80 [ 266.368117][T16406] ? tomoyo_path_number_perm+0x295/0x580 [ 266.368134][T16406] ? tomoyo_path_number_perm+0x18d/0x580 [ 266.368148][T16406] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 266.368161][T16406] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 266.368174][T16406] ? do_vfs_ioctl+0x523/0x1a60 [ 266.368187][T16406] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 266.368209][T16406] ? hook_file_ioctl_common+0x145/0x410 [ 266.368235][T16406] ? selinux_file_ioctl+0x180/0x270 [ 266.368250][T16406] ? selinux_file_ioctl+0xb4/0x270 [ 266.368265][T16406] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 266.368282][T16406] __x64_sys_ioctl+0x18b/0x210 [ 266.368295][T16406] do_syscall_64+0xcd/0x4c0 [ 266.368313][T16406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.368324][T16406] RIP: 0033:0x7f7696f8e52b [ 266.368334][T16406] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 266.368345][T16406] RSP: 002b:00007f7697d45490 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 266.368356][T16406] RAX: ffffffffffffffda RBX: 00007f7697d45be0 RCX: 00007f7696f8e52b [ 266.368363][T16406] RDX: 00007f7697d45be0 RSI: 000000004020ae46 RDI: 0000000000000004 [ 266.368370][T16406] RBP: 0000000000000004 R08: 0000000000000001 R09: 0000000000000000 [ 266.368376][T16406] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000005 [ 266.368383][T16406] R13: 0000200000010000 R14: 000020000000b000 R15: 00000000fec00000 [ 266.368397][T16406] [ 266.368402][T16406] warn_alloc: 3 callbacks suppressed [ 266.368408][T16406] syz.4.3233: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 266.482805][T16406] CPU: 1 UID: 0 PID: 16406 Comm: syz.4.3233 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 266.482822][T16406] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 266.482830][T16406] Call Trace: [ 266.482834][T16406] [ 266.482839][T16406] dump_stack_lvl+0x16c/0x1f0 [ 266.482859][T16406] warn_alloc+0x248/0x3a0 [ 266.482874][T16406] ? __pfx_warn_alloc+0x10/0x10 [ 266.482887][T16406] ? dump_stack_lvl+0x185/0x1f0 [ 266.482907][T16406] ? rcu_is_watching+0x12/0xc0 [ 266.482921][T16406] ? __kmalloc_node_noprof+0x23b/0x500 [ 266.482940][T16406] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 266.482957][T16406] ? __vcalloc_noprof+0x4d/0x80 [ 266.482975][T16406] ? __pfx___might_resched+0x10/0x10 [ 266.482990][T16406] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 266.483002][T16406] ? rcu_is_watching+0x12/0xc0 [ 266.483015][T16406] ? trace_contention_end+0xdd/0x130 [ 266.483033][T16406] ? __mutex_lock+0x1ca/0xb90 [ 266.483052][T16406] ? __vcalloc_noprof+0x4d/0x80 [ 266.483066][T16406] __vmalloc_node_noprof+0xad/0xf0 [ 266.483077][T16406] ? __vcalloc_noprof+0x4d/0x80 [ 266.483093][T16406] __vcalloc_noprof+0x4d/0x80 [ 266.483108][T16406] kvm_arch_prepare_memory_region+0x35a/0x8d0 [ 266.483130][T16406] kvm_set_memslot+0x139/0x1380 [ 266.483145][T16406] ? kasan_save_track+0x14/0x30 [ 266.483161][T16406] kvm_set_memory_region+0xebc/0x1680 [ 266.483180][T16406] ? __pfx_kvm_set_memory_region+0x10/0x10 [ 266.483199][T16406] kvm_vm_ioctl+0x1482/0x3da0 [ 266.483222][T16406] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 266.483252][T16406] ? kasan_quarantine_put+0x10a/0x240 [ 266.483266][T16406] ? lockdep_hardirqs_on+0x7c/0x110 [ 266.483283][T16406] ? find_held_lock+0x2b/0x80 [ 266.483298][T16406] ? tomoyo_path_number_perm+0x295/0x580 [ 266.483315][T16406] ? tomoyo_path_number_perm+0x18d/0x580 [ 266.483329][T16406] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 266.483342][T16406] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 266.483356][T16406] ? do_vfs_ioctl+0x523/0x1a60 [ 266.483369][T16406] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 266.483391][T16406] ? hook_file_ioctl_common+0x145/0x410 [ 266.483413][T16406] ? selinux_file_ioctl+0x180/0x270 [ 266.483428][T16406] ? selinux_file_ioctl+0xb4/0x270 [ 266.483443][T16406] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 266.483460][T16406] __x64_sys_ioctl+0x18b/0x210 [ 266.483473][T16406] do_syscall_64+0xcd/0x4c0 [ 266.483490][T16406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.483502][T16406] RIP: 0033:0x7f7696f8e52b [ 266.483511][T16406] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 266.483522][T16406] RSP: 002b:00007f7697d45490 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 266.483533][T16406] RAX: ffffffffffffffda RBX: 00007f7697d45be0 RCX: 00007f7696f8e52b [ 266.483540][T16406] RDX: 00007f7697d45be0 RSI: 000000004020ae46 RDI: 0000000000000004 [ 266.483547][T16406] RBP: 0000000000000004 R08: 0000000000000001 R09: 0000000000000000 [ 266.483553][T16406] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000005 [ 266.483559][T16406] R13: 0000200000010000 R14: 000020000000b000 R15: 00000000fec00000 [ 266.483573][T16406] [ 266.483577][T16406] Mem-Info: [ 266.486177][T16402] team0: Port device team_slave_0 removed [ 266.487314][T16406] active_anon:11107 inactive_anon:2893 isolated_anon:0 [ 266.487314][T16406] active_file:6310 inactive_file:13001 isolated_file:0 [ 266.487314][T16406] unevictable:1768 dirty:282 writeback:0 [ 266.487314][T16406] slab_reclaimable:7819 slab_unreclaimable:81138 [ 266.487314][T16406] mapped:23891 shmem:2415 pagetables:1322 [ 266.487314][T16406] sec_pagetables:324 bounce:0 [ 266.487314][T16406] kernel_misc_reclaimable:0 [ 266.487314][T16406] free:469594 free_pcp:15049 free_cma:0 [ 266.487345][T16406] Node 0 active_anon:44400kB inactive_anon:11572kB active_file:24184kB inactive_file:51696kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:94820kB dirty:1096kB writeback:0kB shmem:6124kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:14096kB pagetables:4892kB sec_pagetables:1292kB all_unreclaimable? yes Balloon:0kB [ 266.613584][T16406] Node 1 active_anon:28kB inactive_anon:0kB active_file:1056kB inactive_file:308kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:744kB dirty:32kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:112kB pagetables:396kB sec_pagetables:4kB all_unreclaimable? no Balloon:0kB [ 266.617599][T16402] team0: Port device team_slave_1 removed [ 266.624455][T16406] Node 0 DMA free:15156kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:180kB local_pcp:68kB free_cma:0kB [ 266.629190][T16402] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 266.638071][T16406] lowmem_reserve[]: 0 1235 1235 1235 1235 [ 266.638118][T16406] Node 0 [ 266.641896][T16402] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 266.643173][T16406] DMA32 free:261060kB boost:34816kB min:62332kB low:69208kB high:76084kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44496kB inactive_anon:11572kB active_file:24184kB inactive_file:51696kB unevictable:3536kB writepending:1192kB present:2080628kB managed:1264732kB mlocked:0kB bounce:0kB free_pcp:49904kB local_pcp:3148kB free_cma:0kB [ 266.659309][T16406] lowmem_reserve[]: 0 0 0 0 0 [ 266.660264][T16402] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 266.661362][T16406] Node 1 Normal free:1608708kB boost:0kB min:39720kB low:49648kB high:59576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28kB inactive_anon:0kB active_file:1056kB inactive_file:308kB unevictable:3536kB writepending:32kB present:2097152kB managed:1781948kB mlocked:0kB bounce:0kB free_pcp:9304kB local_pcp:0kB free_cma:0kB [ 266.669619][T16402] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 266.674451][T16406] lowmem_reserve[]: 0 0 0 0 0 [ 266.678537][T16406] Node 0 DMA: 11*4kB (UM) 11*8kB (UM) 9*16kB (UM) 7*32kB (U) 9*64kB (UM) 8*128kB (U) 9*256kB (UM) 9*512kB (UM) 6*1024kB (UM) 0*2048kB 0*4096kB = 15156kB [ 266.684941][T16406] Node 0 DMA32: 1517*4kB (UME) 620*8kB (UME) 441*16kB (UME) 219*32kB (UME) 197*64kB (UME) 167*128kB (UME) 143*256kB (UME) 81*512kB (UME) 83*1024kB (UM) 17*2048kB (UM) 1*4096kB (M) = 261060kB [ 266.685449][T16402] bond0: (slave netdevsim0): Releasing backup interface [ 266.691815][T16406] Node 1 [ 266.692740][ T5951] Bluetooth: hci1: command 0x1003 tx timeout [ 266.695625][ T5957] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 266.697446][T16406] Normal: 162*4kB (UME) 156*8kB (UME) 140*16kB (UME) 257*32kB (UME) 169*64kB (UME) 93*128kB (UME) 75*256kB (UME) 76*512kB (UME) 60*1024kB (UM) 18*2048kB (UM) 346*4096kB (UM) = 1608712kB [ 266.719942][T16406] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 266.724125][T16406] Node 0 hugepages_total=3 hugepages_free=0 hugepages_surp=1 hugepages_size=2048kB [ 266.735241][T16406] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 266.738756][T16406] Node 1 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 266.742036][ T6028] lo speed is unknown, defaulting to 1000 [ 266.742681][T16406] 21743 total pagecache pages [ 266.748012][T16406] 20 pages in swap cache [ 266.749365][T16406] Free swap = 121180kB [ 266.750677][T16406] Total swap = 124996kB [ 266.752003][T16406] 1048443 pages RAM [ 266.753999][T16406] 0 pages HighMem/MovableOnly [ 266.755517][T16406] 282933 pages reserved [ 266.756861][T16406] 0 pages cma reserved [ 266.766715][T16410] vlan0: entered promiscuous mode [ 266.788168][T16410] team0: Port device vlan0 added [ 266.834700][ T40] kauditd_printk_skb: 1549 callbacks suppressed [ 266.834718][ T40] audit: type=1400 audit(266.753:38712): avc: denied { read write } for pid=13606 comm="syz-executor" name="loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 266.848718][ T40] audit: type=1400 audit(266.753:38713): avc: denied { read write open } for pid=13606 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 266.867572][ T40] audit: type=1400 audit(266.753:38714): avc: denied { ioctl } for pid=13606 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 266.877469][ T40] audit: type=1400 audit(266.753:38715): avc: denied { mounton } for pid=16413 comm="syz.3.3236" path="/116/file0" dev="tmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 266.884337][ T40] audit: type=1400 audit(266.753:38716): avc: denied { mount } for pid=16413 comm="syz.3.3236" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 266.893572][ T40] audit: type=1400 audit(266.763:38717): avc: denied { prog_load } for pid=16413 comm="syz.3.3236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 266.899459][ T40] audit: type=1400 audit(266.763:38718): avc: denied { bpf } for pid=16413 comm="syz.3.3236" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 266.905727][ T40] audit: type=1400 audit(266.763:38719): avc: denied { perfmon } for pid=16413 comm="syz.3.3236" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 266.912390][ T40] audit: type=1400 audit(266.763:38720): avc: denied { perfmon } for pid=16413 comm="syz.3.3236" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 266.919764][ T40] audit: type=1400 audit(266.763:38721): avc: denied { perfmon } for pid=16413 comm="syz.3.3236" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 267.193569][T16426] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 267.196359][T16426] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 267.199175][T16426] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 267.201949][T16426] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 267.204959][T16426] geneve2: entered promiscuous mode [ 267.206595][T16426] geneve2: entered allmulticast mode [ 267.273734][T16428] fuse: Bad value for 'fd' [ 267.304962][T16431] netlink: 'syz.3.3243': attribute type 1 has an invalid length. [ 267.348156][T16431] bond2: entered promiscuous mode [ 267.353336][T16431] 8021q: adding VLAN 0 to HW filter on device bond2 [ 267.368452][T16434] 8021q: adding VLAN 0 to HW filter on device bond2 [ 267.370856][T16434] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 267.375858][T16434] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 267.380821][T16434] bond2: (slave ip6gre1): making interface the new active one [ 267.385364][T16434] ip6gre1: entered promiscuous mode [ 267.388295][T16434] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 267.398586][T16433] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3242'. [ 267.401564][T16433] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3242'. [ 267.962447][T16423] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 267.964685][T16423] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 267.969158][T16423] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 267.982211][T16423] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 267.995186][T16423] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 267.997652][T16423] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 268.002409][T16423] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 268.015976][T16423] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 268.021329][T16423] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 268.023715][T16423] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 268.029461][T16423] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 268.045259][T16423] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 268.047711][T16423] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 268.059346][T16423] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 269.012000][T16493] netlink: 'syz.0.3257': attribute type 1 has an invalid length. [ 269.031228][T16493] 8021q: adding VLAN 0 to HW filter on device bond4 [ 269.146190][T16497] bond4: (slave gretap2): making interface the new active one [ 269.152240][T16497] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 269.323684][ T5957] Bluetooth: hci2: command 0x0406 tx timeout [ 269.350359][T16514] FAULT_INJECTION: forcing a failure. [ 269.350359][T16514] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 269.354870][T16514] CPU: 2 UID: 0 PID: 16514 Comm: syz.2.3263 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 269.354885][T16514] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 269.354892][T16514] Call Trace: [ 269.354896][T16514] [ 269.354901][T16514] dump_stack_lvl+0x16c/0x1f0 [ 269.354920][T16514] should_fail_ex+0x512/0x640 [ 269.354938][T16514] _copy_to_user+0x32/0xd0 [ 269.354954][T16514] simple_read_from_buffer+0xcb/0x170 [ 269.354970][T16514] proc_fail_nth_read+0x197/0x270 [ 269.354984][T16514] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 269.354999][T16514] ? rw_verify_area+0xcf/0x680 [ 269.355010][T16514] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 269.355024][T16514] vfs_read+0x1e4/0xc60 [ 269.355039][T16514] ? __pfx___mutex_lock+0x10/0x10 [ 269.355056][T16514] ? __pfx_vfs_read+0x10/0x10 [ 269.355073][T16514] ? __fget_files+0x20e/0x3c0 [ 269.355092][T16514] ksys_read+0x12a/0x250 [ 269.355104][T16514] ? __pfx_ksys_read+0x10/0x10 [ 269.355118][T16514] ? fput+0x70/0xf0 [ 269.355137][T16514] do_syscall_64+0xcd/0x4c0 [ 269.355154][T16514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.355165][T16514] RIP: 0033:0x7f926638d33c [ 269.355174][T16514] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 269.355185][T16514] RSP: 002b:00007f9267209030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 269.355196][T16514] RAX: ffffffffffffffda RBX: 00007f92665b5fa0 RCX: 00007f926638d33c [ 269.355202][T16514] RDX: 000000000000000f RSI: 00007f92672090a0 RDI: 0000000000000004 [ 269.355209][T16514] RBP: 00007f9267209090 R08: 0000000000000000 R09: 0000000000000000 [ 269.355215][T16514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 269.355221][T16514] R13: 0000000000000000 R14: 00007f92665b5fa0 R15: 00007ffe8633e9d8 [ 269.355235][T16514] [ 269.449136][ T838] libceph: connect (1)[c::]:6789 error -101 [ 269.451039][ T838] libceph: mon0 (1)[c::]:6789 connect error [ 269.507350][T16529] netlink: 'syz.2.3267': attribute type 4 has an invalid length. [ 269.508687][ T838] libceph: connect (1)[c::]:6789 error -101 [ 269.511522][ T838] libceph: mon0 (1)[c::]:6789 connect error [ 269.620517][T16537] 9pnet: Could not find request transport: rd¹ð˜W‡ò*0x0000000000004e22 [ 269.715225][ T838] libceph: connect (1)[c::]:6789 error -101 [ 269.717270][ T838] libceph: mon0 (1)[c::]:6789 connect error [ 269.725635][T16553] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3275'. [ 269.772859][ T838] libceph: connect (1)[c::]:6789 error -101 [ 269.774835][ T838] libceph: mon0 (1)[c::]:6789 connect error [ 269.797051][T16557] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 269.802209][T16558] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3277'. [ 269.805287][T16558] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3277'. [ 269.816695][T16557] cramfs: wrong magic [ 269.831453][T16557] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3276'. [ 269.953223][T16568] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_macvtap, syncid = 4, id = 0 [ 270.015210][T16565] binder: Bad value for 'max' [ 270.041256][T16565] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3276'. [ 270.042685][ T5957] Bluetooth: hci3: command 0x0c1a tx timeout [ 270.044814][ T5951] Bluetooth: hci4: command 0x0c1a tx timeout [ 270.044832][ T63] Bluetooth: hci0: command 0x0c1a tx timeout [ 270.136937][T16575] netlink: 'syz.3.3282': attribute type 1 has an invalid length. [ 270.152748][T16575] 8021q: adding VLAN 0 to HW filter on device bond3 [ 270.173715][T16575] 8021q: adding VLAN 0 to HW filter on device bond3 [ 270.176739][T16575] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 270.181631][T16575] bond3: (slave vxcan1): Error -95 calling set_mac_address [ 270.195452][T16579] pim6reg1: entered promiscuous mode [ 270.197191][T16579] pim6reg1: entered allmulticast mode [ 270.229580][T16582] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3282'. [ 270.234828][ T838] libceph: connect (1)[c::]:6789 error -101 [ 270.236864][ T838] libceph: mon0 (1)[c::]:6789 connect error [ 270.244666][T16582] gretap1: entered promiscuous mode [ 270.246445][T16523] ceph: No mds server is up or the cluster is laggy [ 270.249275][T16582] bond3: (slave gretap1): making interface the new active one [ 270.249343][T16531] ceph: No mds server is up or the cluster is laggy [ 270.253713][T16582] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 270.873773][T16616] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3292'. [ 270.890480][T16608] team0: Port device vlan0 removed [ 271.077363][T16626] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 271.206228][T16635] ipvlan2: entered allmulticast mode [ 271.208034][T16635] macvlan0: entered allmulticast mode [ 271.209676][T16635] veth1_vlan: entered allmulticast mode [ 271.415060][ T5951] Bluetooth: hci2: command 0x0406 tx timeout [ 271.416280][T16648] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3306'. [ 271.420293][T16648] ip_vti0: Master is either lo or non-ether device [ 271.602664][T16659] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 271.605008][T16659] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 271.608153][T16659] vhci_hcd vhci_hcd.0: Device attached [ 271.616299][T16660] vhci_hcd: connection closed [ 271.616659][ T6655] vhci_hcd: stop threads [ 271.619489][ T6655] vhci_hcd: release socket [ 271.621050][ T6655] vhci_hcd: disconnect device [ 271.626428][T16657] program syz.0.3309 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 271.957871][ T40] kauditd_printk_skb: 1850 callbacks suppressed [ 271.957885][ T40] audit: type=1400 audit(271.873:40572): avc: denied { recv } for pid=5924 comm="syz-executor" saddr=127.0.0.1 src=39724 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 271.981220][ T40] audit: type=1400 audit(271.873:40573): avc: denied { recv } for pid=5923 comm="sshd-session" saddr=10.0.2.2 src=49726 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 271.992616][ T40] audit: type=1400 audit(271.873:40574): avc: denied { read write } for pid=13903 comm="syz-executor" name="loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 272.001736][ T40] audit: type=1400 audit(271.873:40575): avc: denied { read write open } for pid=13903 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 272.027524][ T40] audit: type=1400 audit(271.873:40576): avc: denied { ioctl } for pid=13903 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 272.040044][ T40] audit: type=1400 audit(271.913:40577): avc: denied { read write } for pid=14341 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 272.056612][ T40] audit: type=1400 audit(271.913:40578): avc: denied { read write open } for pid=14341 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 272.068683][ T40] audit: type=1400 audit(271.913:40579): avc: denied { ioctl } for pid=14341 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 272.080649][ T40] audit: type=1400 audit(271.933:40580): avc: denied { recv } for pid=33 comm="ksoftirqd/3" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=39724 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 272.092100][ T40] audit: type=1400 audit(271.933:40581): avc: denied { recv } for pid=33 comm="ksoftirqd/3" saddr=127.0.0.1 src=39724 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 272.103746][T16669] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 272.115214][T16669] CIFS: Unable to determine destination address [ 272.122957][ T5951] Bluetooth: hci4: command 0x0c1a tx timeout [ 272.123551][ T5957] Bluetooth: hci0: command 0x0c1a tx timeout [ 272.123583][ T63] Bluetooth: hci3: command 0x0c1a tx timeout [ 272.131426][T16669] IPv6: syztnl0: Disabled Multicast RS [ 272.390657][T16687] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 272.477137][T16697] mmap: syz.4.3320 (16697): VmData 37462016 exceed data ulimit 4. Update limits or use boot option ignore_rlimit_data. [ 272.794568][T16710] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=134 sclass=netlink_route_socket pid=16710 comm=syz.4.3324 [ 272.825014][T16718] SELinux: policydb version 0 does not match my version range 15-34 [ 272.827550][T16718] SELinux: failed to load policy [ 273.049778][T16730] batadv_slave_0: entered promiscuous mode [ 273.133415][T16722] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3328'. [ 273.133446][T16733] netlink: 'syz.3.3333': attribute type 1 has an invalid length. [ 273.136385][T16722] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.138779][T16733] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3333'. [ 273.203484][T16722] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.261871][ T6638] bond0: (slave bond_slave_0): interface is now down [ 273.262816][ T1350] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 273.266017][ T6638] bond0: (slave bond_slave_1): interface is now down [ 273.272261][ T6638] bond0: now running without any active interface! [ 273.284158][T16738] netlink: 'syz.0.3334': attribute type 10 has an invalid length. [ 273.287323][T16738] erspan0: entered promiscuous mode [ 273.294669][T16738] bond0: (slave erspan0): no link monitoring support [ 273.299940][T16738] bond0: (slave erspan0): Enslaving as an active interface with an up link [ 273.387829][T16744] netlink: 'syz.0.3336': attribute type 7 has an invalid length. [ 273.410022][T16741] misc userio: Invalid payload size [ 273.422775][ T1350] usb 7-1: Using ep0 maxpacket: 8 [ 273.433762][ T1350] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 273.436338][ T1350] usb 7-1: config 0 has no interface number 0 [ 273.438279][ T1350] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 273.442994][ T1350] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 273.446258][ T1350] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.453651][ T1350] usb 7-1: config 0 descriptor?? [ 273.464230][ T1350] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 273.484913][ T5957] Bluetooth: hci2: command 0x0406 tx timeout [ 273.495239][T16750] vxcan1: entered promiscuous mode [ 273.496900][T16750] vxcan1: entered allmulticast mode [ 273.584299][T16753] netlink: 'syz.4.3339': attribute type 13 has an invalid length. [ 273.686096][T16755] lo speed is unknown, defaulting to 1000 [ 273.775299][T16764] netlink: 'syz.2.3332': attribute type 7 has an invalid length. [ 273.893640][T16771] usb usb8: usbfs: process 16771 (syz.0.3344) did not claim interface 0 before use [ 273.896897][T16771] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 274.204134][ T5957] Bluetooth: hci3: command 0x0c1a tx timeout [ 274.204198][ T5951] Bluetooth: hci4: command 0x0c1a tx timeout [ 274.206199][ T5957] Bluetooth: hci0: command 0x0c1a tx timeout [ 274.690142][ T10] usb 7-1: USB disconnect, device number 31 [ 274.805512][T16828] netlink: 'syz.3.3359': attribute type 4 has an invalid length. [ 274.811866][T16828] netlink: 'syz.3.3359': attribute type 7 has an invalid length. [ 275.032010][T16840] __nla_validate_parse: 5 callbacks suppressed [ 275.032021][T16840] netlink: 187324 bytes leftover after parsing attributes in process `syz.4.3365'. [ 275.563944][ T5957] Bluetooth: hci2: command 0x0406 tx timeout [ 275.717878][T13825] udevd[13825]: setting mode of /dev/gsmtty49 to 020600 failed: No such file or directory [ 275.726636][T13825] udevd[13825]: setting owner of /dev/gsmtty49 to uid=0, gid=0 failed: No such file or directory [ 275.829163][T16880] ALSA: mixer_oss: invalid OSS volume '' [ 275.936684][T16885] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3378'. [ 275.942033][T16885] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3378'. [ 275.945551][T16885] netlink: 'syz.3.3378': attribute type 15 has an invalid length. [ 276.017944][T16889] netlink: 'syz.4.3379': attribute type 1 has an invalid length. [ 276.042399][T16892] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3380'. [ 276.254197][T16908] mkiss: ax0: crc mode is auto. [ 276.284108][ T5957] Bluetooth: hci0: command 0x0c1a tx timeout [ 276.333816][T16912] (syz.0.3386,16912,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 276.338272][T16912] (syz.0.3386,16912,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 276.393488][ T1350] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 276.540477][T16914] VFS: Lookup of 'file0' in fuse fuse would have caused loop [ 276.556793][T16921] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16921 comm=syz.2.3390 [ 276.575057][ T1350] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 276.577955][ T1350] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.584057][ T1350] usb 9-1: Product: syz [ 276.586468][ T1350] usb 9-1: Manufacturer: syz [ 276.590104][ T1350] usb 9-1: SerialNumber: syz [ 276.611348][ T1350] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 276.688955][ T838] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 276.897375][ T6028] usb 9-1: USB disconnect, device number 4 [ 276.962824][ T40] kauditd_printk_skb: 2022 callbacks suppressed [ 276.962835][ T40] audit: type=1400 audit(276.873:42604): avc: denied { read write open } for pid=16934 comm="syz.2.3394" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 276.975594][ T40] audit: type=1400 audit(276.883:42605): avc: denied { mounton } for pid=16934 comm="syz.2.3394" path="/197/file0" dev="tmpfs" ino=1092 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 276.992728][ T40] audit: type=1400 audit(276.893:42606): avc: denied { mount } for pid=16934 comm="syz.2.3394" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 277.002877][ T40] audit: type=1400 audit(276.893:42607): avc: denied { write } for pid=16934 comm="syz.2.3394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 277.009031][ T40] audit: type=1400 audit(276.903:42608): avc: denied { read write } for pid=14341 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 277.032990][ T40] audit: type=1400 audit(276.903:42609): avc: denied { read write open } for pid=14341 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 277.041747][ T5957] Bluetooth: hci3: unexpected event 0x35 length: 13 > 6 [ 277.049724][T16935] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.057067][ T40] audit: type=1400 audit(276.903:42610): avc: denied { ioctl } for pid=14341 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 277.065233][T16935] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 277.071058][ T40] audit: type=1400 audit(276.923:42611): avc: denied { recv } for pid=23 comm="ksoftirqd/2" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=39724 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 277.078977][ T40] audit: type=1400 audit(276.923:42612): avc: denied { recv } for pid=23 comm="ksoftirqd/2" saddr=127.0.0.1 src=39724 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 277.082719][ T6651] bond0: (slave erspan0): interface is now down [ 277.087742][ T40] audit: type=1400 audit(276.933:42613): avc: denied { recv } for pid=5923 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=39724 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 277.168022][T16935] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.171975][T16935] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 277.211003][T16944] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3397'. [ 277.235132][T16935] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.238411][T16935] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 277.310420][T16946] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 277.313274][T16946] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 277.315864][T16946] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 277.318443][T16946] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 277.321168][T16946] geneve2: entered promiscuous mode [ 277.322868][T16946] geneve2: entered allmulticast mode [ 277.333293][T16935] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.336439][T16935] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 277.438941][T16935] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 277.441746][T16935] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 277.452487][T16935] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 277.456378][T16935] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 277.464091][T16935] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 277.466562][T16935] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 277.474470][T16935] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 277.477006][T16935] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 277.673094][ T60] e1000 0000:00:06.0 eth0: Reset adapter [ 277.719073][T16962] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 277.722280][T16962] overlayfs: overlapping lowerdir path [ 277.732681][ T838] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 277.736293][ T838] ath9k_htc: Failed to initialize the device [ 277.738887][ T6028] usb 9-1: ath9k_htc: USB layer deinitialized [ 277.812660][ T60] e1000 0000:00:06.0 eth0: Reset adapter [ 279.002875][ T6657] bond0: (slave erspan0): interface is now down [ 279.004964][ T6657] bond0: now running without any active interface! [ 279.963940][ T6028] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 280.996293][T16988] netlink: 'syz.4.3409': attribute type 3 has an invalid length. [ 280.996724][T16989] input: syz0 as /devices/virtual/input/input32 [ 280.998814][T16988] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3409'. [ 281.006805][T16988] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3409'. [ 281.009743][T16988] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3409'. [ 281.269464][ T5957] Bluetooth: hci0: unexpected event for opcode 0x1804 [ 281.337584][T17006] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3415'. [ 281.420631][T17009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3416'. [ 281.536025][T17013] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 281.557170][T17015] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3419'. [ 281.560479][T17015] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3419'. [ 281.565427][T17015] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3419'. [ 281.572254][T17015] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3419'. [ 281.589016][T17015] netlink: 'syz.4.3419': attribute type 1 has an invalid length. [ 281.619127][T17017] tmpfs: Bad value for 'mpol' [ 281.659368][T17019] Invalid option length (282) for dns_resolver key [ 281.759269][T17023] devtmpfs: Cannot change global quota limit on remount [ 281.974581][ T40] kauditd_printk_skb: 462 callbacks suppressed [ 281.974592][ T40] audit: type=1400 audit(281.893:43076): avc: denied { recv } for pid=6655 comm="kworker/u32:32" saddr=10.0.2.2 src=49726 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 282.011447][ T40] audit: type=1400 audit(281.923:43077): avc: denied { read } for pid=17030 comm="syz.2.3425" name="uinput" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 282.018130][ T40] audit: type=1400 audit(281.923:43078): avc: denied { read open } for pid=17030 comm="syz.2.3425" path="/dev/uinput" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 282.020632][T17031] input: syz0 as /devices/virtual/input/input33 [ 282.027278][ T40] audit: type=1400 audit(281.933:43079): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=39724 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 282.035881][ T40] audit: type=1400 audit(281.933:43080): avc: denied { ioctl } for pid=17030 comm="syz.2.3425" path="/dev/uinput" dev="devtmpfs" ino=944 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 282.044045][ T40] audit: type=1400 audit(281.933:43081): avc: denied { ioctl } for pid=17030 comm="syz.2.3425" path="/dev/uinput" dev="devtmpfs" ino=944 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 282.053142][ T40] audit: type=1400 audit(281.933:43082): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=127.0.0.1 src=39724 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 282.060322][ T40] audit: type=1400 audit(281.933:43083): avc: denied { ioctl } for pid=17030 comm="syz.2.3425" path="/dev/uinput" dev="devtmpfs" ino=944 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 282.082759][ T40] audit: type=1400 audit(281.933:43084): avc: denied { recv } for pid=5923 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=39724 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 282.090529][ T40] audit: type=1400 audit(281.933:43085): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=49726 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 282.845423][T17058] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3437'. [ 284.123060][T17094] bond0: entered promiscuous mode [ 284.124808][T17094] bond_slave_0: entered promiscuous mode [ 284.126748][T17094] bond_slave_1: entered promiscuous mode [ 284.156468][T17094] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 284.229466][T17100] netlink: 'syz.3.3449': attribute type 1 has an invalid length. [ 284.521172][T17113] tipc: Started in network mode [ 284.528744][T17113] tipc: Node identity ac1414aa, cluster identity 4711 [ 284.537202][T17113] tipc: Enabled bearer , priority 10 [ 285.061629][T17146] serio: Serial port ptm0 [ 285.067110][T17148] ptrace attach of "/syz-executor exec"[17150] was attempted by "/syz-executor exec"[17148] [ 285.111309][T17152] lo speed is unknown, defaulting to 1000 [ 285.412643][ T10] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 285.583234][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.586626][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.590463][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 285.594558][ T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 285.597331][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.602755][ T10] usb 5-1: config 0 descriptor?? [ 285.652872][ T1335] tipc: Node number set to 2886997162 [ 286.035650][T17157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.038422][T17157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.075702][T17166] FAULT_INJECTION: forcing a failure. [ 286.075702][T17166] name failslab, interval 1, probability 0, space 0, times 0 [ 286.079633][T17166] CPU: 0 UID: 0 PID: 17166 Comm: syz.2.3470 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 286.079650][T17166] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 286.079657][T17166] Call Trace: [ 286.079661][T17166] [ 286.079666][T17166] dump_stack_lvl+0x16c/0x1f0 [ 286.079707][T17166] should_fail_ex+0x512/0x640 [ 286.079727][T17166] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 286.079742][T17166] should_failslab+0xc2/0x120 [ 286.079762][T17166] __kmalloc_cache_noprof+0x6a/0x3e0 [ 286.079775][T17166] ? kvm_set_memory_region+0xc75/0x1680 [ 286.079792][T17166] kvm_set_memory_region+0xc75/0x1680 [ 286.079812][T17166] ? __pfx_kvm_set_memory_region+0x10/0x10 [ 286.079830][T17166] kvm_vm_ioctl+0x1482/0x3da0 [ 286.079853][T17166] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 286.079877][T17166] ? kasan_quarantine_put+0x10a/0x240 [ 286.079890][T17166] ? lockdep_hardirqs_on+0x7c/0x110 [ 286.079908][T17166] ? find_held_lock+0x2b/0x80 [ 286.079922][T17166] ? tomoyo_path_number_perm+0x295/0x580 [ 286.079939][T17166] ? tomoyo_path_number_perm+0x18d/0x580 [ 286.079953][T17166] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 286.079966][T17166] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 286.079980][T17166] ? do_vfs_ioctl+0x523/0x1a60 [ 286.079992][T17166] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 286.080015][T17166] ? hook_file_ioctl_common+0x145/0x410 [ 286.080037][T17166] ? selinux_file_ioctl+0x180/0x270 [ 286.080051][T17166] ? selinux_file_ioctl+0xb4/0x270 [ 286.080067][T17166] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 286.080084][T17166] __x64_sys_ioctl+0x18b/0x210 [ 286.080097][T17166] do_syscall_64+0xcd/0x4c0 [ 286.080116][T17166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.080127][T17166] RIP: 0033:0x7f926638e52b [ 286.080136][T17166] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 286.080147][T17166] RSP: 002b:00007f9267207490 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 286.080159][T17166] RAX: ffffffffffffffda RBX: 00007f9267207be0 RCX: 00007f926638e52b [ 286.080165][T17166] RDX: 00007f9267207be0 RSI: 000000004020ae46 RDI: 0000000000000004 [ 286.080172][T17166] RBP: 0000000000000004 R08: 0000000000000001 R09: 0000000000000000 [ 286.080178][T17166] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000006 [ 286.080185][T17166] R13: 0000200000011000 R14: 000020000000b000 R15: 00000000fec00000 [ 286.080199][T17166] [ 286.158569][ T10] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 286.202147][ T10] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 286.382375][T17157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.390318][T17157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.474656][T17184] netlink: 'syz.3.3476': attribute type 1 has an invalid length. [ 286.486553][ T60] usb 5-1: USB disconnect, device number 22 [ 286.494417][T17183] __nla_validate_parse: 3 callbacks suppressed [ 286.498031][T17183] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3477'. [ 286.868796][T17210] vlan0: left promiscuous mode [ 286.923303][T17211] openvswitch: netlink: Geneve opt len 10 is not a multiple of 4. [ 286.986015][ T40] kauditd_printk_skb: 1404 callbacks suppressed [ 286.986026][ T40] audit: type=1400 audit(286.903:44490): avc: denied { recv } for pid=13903 comm="syz-executor" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=39724 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 286.999919][ T40] audit: type=1400 audit(286.903:44491): avc: denied { recv } for pid=13903 comm="syz-executor" saddr=127.0.0.1 src=39724 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 287.018246][ T40] audit: type=1400 audit(286.903:44492): avc: denied { recv } for pid=5923 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=39724 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 287.027066][ T40] audit: type=1400 audit(286.903:44493): avc: denied { recv } for pid=13825 comm="udevd" saddr=10.0.2.2 src=49726 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 287.036501][ T40] audit: type=1400 audit(286.903:44494): avc: denied { recv } for pid=13825 comm="udevd" saddr=10.0.2.2 src=49726 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 287.044133][ T40] audit: type=1400 audit(286.913:44495): avc: denied { recv } for pid=13825 comm="udevd" saddr=10.0.2.2 src=49726 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 287.052403][ T40] audit: type=1400 audit(286.913:44496): avc: denied { recv } for pid=5923 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=39724 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 287.058193][T17215] FAULT_INJECTION: forcing a failure. [ 287.058193][T17215] name failslab, interval 1, probability 0, space 0, times 0 [ 287.060090][ T40] audit: type=1400 audit(286.913:44497): avc: denied { recv } for pid=5923 comm="sshd-session" saddr=127.0.0.1 src=39724 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 287.066590][T17215] CPU: 0 UID: 0 PID: 17215 Comm: syz.2.3486 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 287.066606][T17215] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 287.066614][T17215] Call Trace: [ 287.066618][T17215] [ 287.066622][T17215] dump_stack_lvl+0x16c/0x1f0 [ 287.066642][T17215] should_fail_ex+0x512/0x640 [ 287.066657][T17215] ? __kmalloc_cache_node_noprof+0x5a/0x420 [ 287.066673][T17215] should_failslab+0xc2/0x120 [ 287.066690][T17215] __kmalloc_cache_node_noprof+0x6d/0x420 [ 287.066703][T17215] ? kernel_text_address+0x8d/0x100 [ 287.066715][T17215] ? __lock_acquire+0x622/0x1c90 [ 287.066730][T17215] ? __get_vm_area_node+0x101/0x330 [ 287.066745][T17215] ? unwind_get_return_address+0x59/0xa0 [ 287.066766][T17215] __get_vm_area_node+0x101/0x330 [ 287.066778][T17215] __vmalloc_node_range_noprof+0x271/0x14b0 [ 287.066791][T17215] ? __vcalloc_noprof+0x4d/0x80 [ 287.066807][T17215] ? __pfx_stack_trace_save+0x10/0x10 [ 287.066825][T17215] ? __vcalloc_noprof+0x4d/0x80 [ 287.066840][T17215] ? __pfx___mutex_trylock_common+0x10/0x10 [ 287.066859][T17215] ? __pfx___might_resched+0x10/0x10 [ 287.066872][T17215] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 287.066959][T17215] ? rcu_is_watching+0x12/0xc0 [ 287.066979][T17215] ? trace_contention_end+0xdd/0x130 [ 287.066996][T17215] ? __mutex_lock+0x1ca/0xb90 [ 287.067015][T17215] ? __vcalloc_noprof+0x4d/0x80 [ 287.067029][T17215] __vmalloc_node_noprof+0xad/0xf0 [ 287.067040][T17215] ? __vcalloc_noprof+0x4d/0x80 [ 287.067056][T17215] __vcalloc_noprof+0x4d/0x80 [ 287.067071][T17215] kvm_arch_prepare_memory_region+0x35a/0x8d0 [ 287.067092][T17215] kvm_set_memslot+0x139/0x1380 [ 287.067107][T17215] ? kasan_save_track+0x14/0x30 [ 287.067123][T17215] kvm_set_memory_region+0xebc/0x1680 [ 287.067142][T17215] ? __pfx_kvm_set_memory_region+0x10/0x10 [ 287.067161][T17215] kvm_vm_ioctl+0x1482/0x3da0 [ 287.067186][T17215] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 287.067212][T17215] ? kasan_quarantine_put+0x10a/0x240 [ 287.067228][T17215] ? lockdep_hardirqs_on+0x7c/0x110 [ 287.067245][T17215] ? find_held_lock+0x2b/0x80 [ 287.067258][T17215] ? tomoyo_path_number_perm+0x295/0x580 [ 287.067275][T17215] ? tomoyo_path_number_perm+0x18d/0x580 [ 287.067290][T17215] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 287.067303][T17215] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 287.067316][T17215] ? do_vfs_ioctl+0x523/0x1a60 [ 287.067329][T17215] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 287.067351][T17215] ? hook_file_ioctl_common+0x145/0x410 [ 287.067373][T17215] ? selinux_file_ioctl+0x180/0x270 [ 287.067387][T17215] ? selinux_file_ioctl+0xb4/0x270 [ 287.067403][T17215] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 287.067420][T17215] __x64_sys_ioctl+0x18b/0x210 [ 287.067433][T17215] do_syscall_64+0xcd/0x4c0 [ 287.067451][T17215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.067462][T17215] RIP: 0033:0x7f926638e52b [ 287.067472][T17215] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 287.067482][T17215] RSP: 002b:00007f9267207490 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 287.067493][T17215] RAX: ffffffffffffffda RBX: 00007f9267207be0 RCX: 00007f926638e52b [ 287.067500][T17215] RDX: 00007f9267207be0 RSI: 000000004020ae46 RDI: 0000000000000004 [ 287.067509][T17215] RBP: 0000000000000004 R08: 0000000000000001 R09: 0000000000000000 [ 287.067534][T17215] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000006 [ 287.067542][T17215] R13: 0000200000011000 R14: 000020000000b000 R15: 00000000fec00000 [ 287.067610][T17215] [ 287.067623][T17215] syz.2.3486: vmalloc error: size 4, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null) [ 287.071508][ T40] audit: type=1400 audit(286.913:44498): avc: denied { recv } for pid=5923 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=39724 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 287.085009][T17215] ,cpuset= [ 287.086074][ T40] audit: type=1400 audit(286.913:44499): avc: denied { recv } for pid=5923 comm="sshd-session" saddr=127.0.0.1 src=39724 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 287.087221][T17215] / [ 287.108893][T17222] ip6t_srh: unknown srh invflags 7863 [ 287.112747][T17215] ,mems_allowed=0-1 [ 287.205966][T17215] CPU: 1 UID: 0 PID: 17215 Comm: syz.2.3486 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 287.205982][T17215] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 287.205989][T17215] Call Trace: [ 287.205993][T17215] [ 287.205998][T17215] dump_stack_lvl+0x16c/0x1f0 [ 287.206018][T17215] warn_alloc+0x248/0x3a0 [ 287.206034][T17215] ? __pfx_warn_alloc+0x10/0x10 [ 287.206049][T17215] ? __kmalloc_cache_node_noprof+0x272/0x420 [ 287.206065][T17215] ? __kasan_kmalloc+0x8a/0xb0 [ 287.206079][T17215] ? __get_vm_area_node+0x208/0x330 [ 287.206093][T17215] __vmalloc_node_range_noprof+0xb2d/0x14b0 [ 287.206107][T17215] ? __pfx_stack_trace_save+0x10/0x10 [ 287.206125][T17215] ? __vcalloc_noprof+0x4d/0x80 [ 287.206141][T17215] ? __pfx___mutex_trylock_common+0x10/0x10 [ 287.206160][T17215] ? __pfx___might_resched+0x10/0x10 [ 287.206173][T17215] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 287.206185][T17215] ? rcu_is_watching+0x12/0xc0 [ 287.206199][T17215] ? trace_contention_end+0xdd/0x130 [ 287.206216][T17215] ? __mutex_lock+0x1ca/0xb90 [ 287.206235][T17215] ? __vcalloc_noprof+0x4d/0x80 [ 287.206249][T17215] __vmalloc_node_noprof+0xad/0xf0 [ 287.206260][T17215] ? __vcalloc_noprof+0x4d/0x80 [ 287.206276][T17215] __vcalloc_noprof+0x4d/0x80 [ 287.206291][T17215] kvm_arch_prepare_memory_region+0x35a/0x8d0 [ 287.206313][T17215] kvm_set_memslot+0x139/0x1380 [ 287.206328][T17215] ? kasan_save_track+0x14/0x30 [ 287.206343][T17215] kvm_set_memory_region+0xebc/0x1680 [ 287.206362][T17215] ? __pfx_kvm_set_memory_region+0x10/0x10 [ 287.206381][T17215] kvm_vm_ioctl+0x1482/0x3da0 [ 287.206403][T17215] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 287.206428][T17215] ? kasan_quarantine_put+0x10a/0x240 [ 287.206441][T17215] ? lockdep_hardirqs_on+0x7c/0x110 [ 287.206458][T17215] ? find_held_lock+0x2b/0x80 [ 287.206472][T17215] ? tomoyo_path_number_perm+0x295/0x580 [ 287.206489][T17215] ? tomoyo_path_number_perm+0x18d/0x580 [ 287.206503][T17215] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 287.206516][T17215] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 287.206529][T17215] ? do_vfs_ioctl+0x523/0x1a60 [ 287.206542][T17215] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 287.206564][T17215] ? hook_file_ioctl_common+0x145/0x410 [ 287.206586][T17215] ? selinux_file_ioctl+0x180/0x270 [ 287.206601][T17215] ? selinux_file_ioctl+0xb4/0x270 [ 287.206616][T17215] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 287.206633][T17215] __x64_sys_ioctl+0x18b/0x210 [ 287.206646][T17215] do_syscall_64+0xcd/0x4c0 [ 287.206664][T17215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.206675][T17215] RIP: 0033:0x7f926638e52b [ 287.206684][T17215] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 287.206695][T17215] RSP: 002b:00007f9267207490 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 287.206705][T17215] RAX: ffffffffffffffda RBX: 00007f9267207be0 RCX: 00007f926638e52b [ 287.206712][T17215] RDX: 00007f9267207be0 RSI: 000000004020ae46 RDI: 0000000000000004 [ 287.206719][T17215] RBP: 0000000000000004 R08: 0000000000000001 R09: 0000000000000000 [ 287.206725][T17215] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000006 [ 287.206731][T17215] R13: 0000200000011000 R14: 000020000000b000 R15: 00000000fec00000 [ 287.206745][T17215] [ 287.206749][T17215] Mem-Info: [ 287.289658][T17226] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 287.296064][T17215] active_anon:14310 inactive_anon:2893 isolated_anon:0 [ 287.296064][T17215] active_file:11093 inactive_file:13041 isolated_file:0 [ 287.296064][T17215] unevictable:1768 dirty:2939 writeback:0 [ 287.296064][T17215] slab_reclaimable:7849 slab_unreclaimable:81787 [ 287.296064][T17215] mapped:26872 shmem:2432 pagetables:1428 [ 287.296064][T17215] sec_pagetables:319 bounce:0 [ 287.296064][T17215] kernel_misc_reclaimable:0 [ 287.296064][T17215] free:456015 free_pcp:23253 free_cma:0 [ 287.298798][T17226] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 287.300713][T17215] Node 0 active_anon:57212kB inactive_anon:11572kB active_file:43344kB inactive_file:51820kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:106708kB dirty:11752kB writeback:0kB shmem:6192kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:14416kB pagetables:5316kB sec_pagetables:1272kB all_unreclaimable? yes Balloon:0kB [ 287.300745][T17215] Node 1 active_anon:28kB inactive_anon:0kB active_file:1028kB inactive_file:344kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:780kB dirty:4kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:112kB pagetables:396kB sec_pagetables:4kB all_unreclaimable? no Balloon:0kB [ 287.351777][T17215] Node 0 DMA free:15156kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:180kB local_pcp:104kB free_cma:0kB [ 287.361898][T17215] lowmem_reserve[]: 0 1235 1235 1235 1235 [ 287.363743][T17215] Node 0 DMA32 free:207736kB boost:49152kB min:76668kB low:83544kB high:90420kB reserved_highatomic:0KB free_highatomic:0KB active_anon:57212kB inactive_anon:11572kB active_file:43344kB inactive_file:51820kB unevictable:3536kB writepending:11752kB present:2080628kB managed:1264732kB mlocked:0kB bounce:0kB free_pcp:76008kB local_pcp:10604kB free_cma:0kB [ 287.373640][T17215] lowmem_reserve[]: 0 0 0 0 0 [ 287.375164][T17215] Node 1 Normal free:1601020kB boost:0kB min:39720kB low:49648kB high:59576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28kB inactive_anon:0kB active_file:1028kB inactive_file:344kB unevictable:3536kB writepending:4kB present:2097152kB managed:1781948kB mlocked:0kB bounce:0kB free_pcp:16976kB local_pcp:4252kB free_cma:0kB [ 287.384664][T17215] lowmem_reserve[]: 0 0 0 0 0 [ 287.386165][T17215] Node 0 DMA: 11*4kB (UM) 11*8kB (UM) 9*16kB (UM) 7*32kB (U) 9*64kB (UM) 8*128kB (U) 9*256kB (UM) 9*512kB (UM) 6*1024kB (UM) 0*2048kB 0*4096kB = 15156kB [ 287.390950][T17215] Node 0 DMA32: 824*4kB (UM) 322*8kB (UME) 491*16kB (UME) 284*32kB (UME) 257*64kB (UME) 95*128kB (UME) 108*256kB (UME) 57*512kB (UME) 77*1024kB (UM) 10*2048kB (UM) 0*4096kB = 207584kB [ 287.396640][T17215] Node 1 Normal: 114*4kB (UME) 141*8kB (UME) 125*16kB (UME) 248*32kB (UME) 166*64kB (UME) 89*128kB (UME) 75*256kB (UME) 74*512kB (UME) 59*1024kB (UM) 12*2048kB (UM) 348*4096kB (UM) = 1601024kB [ 287.402424][T17215] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 287.405436][T17215] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 287.408273][T17215] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 287.411816][T17215] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 287.414724][T17215] 26593 total pagecache pages [ 287.416203][T17215] 20 pages in swap cache [ 287.417537][T17215] Free swap = 121180kB [ 287.418840][T17215] Total swap = 124996kB [ 287.420151][T17215] 1048443 pages RAM [ 287.421606][T17215] 0 pages HighMem/MovableOnly [ 287.423399][T17215] 282933 pages reserved [ 287.424720][T17215] 0 pages cma reserved [ 287.949136][T17245] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3494'. [ 288.099399][T17254] xt_HMARK: spi-set and port-set can't be combined [ 288.109780][T17257] xt_HMARK: spi-set and port-set can't be combined [ 288.374786][T17264] qnx6: unable to set blocksize [ 288.429177][ T63] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 288.446472][T17273] netlink: 'syz.4.3504': attribute type 1 has an invalid length. [ 288.451222][T17273] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 288.453615][T17273] IPv6: NLM_F_CREATE should be set when creating new route [ 288.455110][T17271] fuse: Unknown parameter 'fl' [ 288.455945][T17273] IPv6: NLM_F_CREATE should be set when creating new route [ 288.467789][T17273] netlink: 'syz.4.3504': attribute type 1 has an invalid length. [ 288.470190][T17273] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 288.650066][T17279] netlink: 'syz.3.3506': attribute type 1 has an invalid length. [ 288.666266][T17279] 8021q: adding VLAN 0 to HW filter on device bond4 [ 288.752716][ T6008] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 288.936343][ T6008] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 288.943849][ T6008] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 288.951424][ T6008] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 288.951445][ T6008] usb 7-1: SerialNumber: syz [ 289.387647][T17276] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3505'. [ 289.392143][ T6008] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -71 [ 289.397583][ T6008] usb 7-1: USB disconnect, device number 32 [ 289.511611][T17296] xt_hashlimit: invalid rate [ 289.679046][T17311] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3513'. [ 289.831732][T17320] fuse: Unknown parameter 'subj_role' [ 290.081952][T17329] IPv6: sit1: Disabled Multicast RS [ 290.283427][ T63] Bluetooth: hci3: command 0x0c1a tx timeout [ 290.336158][T17337] netlink: 'syz.2.3524': attribute type 21 has an invalid length. [ 290.349456][T17337] SET target dimension over the limit! [ 290.424158][T17339] team0: Device gtp0 is of different type [ 290.641740][T17352] xt_socket: unknown flags 0xc [ 290.790530][T17363] netlink: 'syz.3.3534': attribute type 10 has an invalid length. [ 290.815540][T17363] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.820900][T17363] bond0: (slave team0): Enslaving as an active interface with an up link [ 290.940871][T17371] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 290.942977][T17371] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 290.949025][T17371] vhci_hcd vhci_hcd.0: Device attached [ 291.040249][T17375] vhci_hcd: connection closed [ 291.040773][ T6637] vhci_hcd: stop threads [ 291.046337][ T6637] vhci_hcd: release socket [ 291.048221][ T6637] vhci_hcd: disconnect device [ 291.107960][T17382] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=17382 comm=syz.0.3538 [ 291.254517][T17387] syz_tun: entered allmulticast mode [ 291.270350][T17387] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 291.273896][T17387] mroute: pending queue full, dropping entries [ 291.323828][T17394] FAULT_INJECTION: forcing a failure. [ 291.323828][T17394] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 291.327761][T17394] CPU: 0 UID: 0 PID: 17394 Comm: syz.3.3542 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 291.327777][T17394] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 291.327785][T17394] Call Trace: [ 291.327789][T17394] [ 291.327794][T17394] dump_stack_lvl+0x16c/0x1f0 [ 291.327814][T17394] should_fail_ex+0x512/0x640 [ 291.327832][T17394] should_fail_alloc_page+0xe7/0x130 [ 291.327849][T17394] prepare_alloc_pages+0x3c2/0x610 [ 291.327863][T17394] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 291.327880][T17394] ? rcu_is_watching+0x12/0xc0 [ 291.327897][T17394] ? trace_mm_page_alloc+0x11f/0x1a0 [ 291.327924][T17394] ? __alloc_frozen_pages_noprof+0x294/0x23f0 [ 291.327949][T17394] ? __pfx_stack_trace_save+0x10/0x10 [ 291.327974][T17394] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 291.328002][T17394] ? alloc_vmap_area+0x645/0x29c0 [ 291.328019][T17394] ? __vmalloc_node_range_noprof+0x271/0x14b0 [ 291.328030][T17394] ? __vcalloc_noprof+0x4d/0x80 [ 291.328044][T17394] ? kvm_arch_prepare_memory_region+0x35a/0x8d0 [ 291.328059][T17394] ? kvm_set_memslot+0x139/0x1380 [ 291.328072][T17394] ? kvm_set_memory_region+0xebc/0x1680 [ 291.328085][T17394] ? kvm_vm_ioctl+0x1482/0x3da0 [ 291.328100][T17394] ? __x64_sys_ioctl+0x18b/0x210 [ 291.328111][T17394] ? do_syscall_64+0xcd/0x4c0 [ 291.328132][T17394] alloc_pages_bulk_noprof+0x71c/0x1410 [ 291.328146][T17394] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 291.328160][T17394] ? policy_nodemask+0xea/0x4e0 [ 291.328177][T17394] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 291.328193][T17394] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 291.328215][T17394] kasan_populate_vmalloc+0xf1/0x1f0 [ 291.328231][T17394] alloc_vmap_area+0x959/0x29c0 [ 291.328254][T17394] ? __pfx_alloc_vmap_area+0x10/0x10 [ 291.328275][T17394] __get_vm_area_node+0x1ca/0x330 [ 291.328289][T17394] __vmalloc_node_range_noprof+0x271/0x14b0 [ 291.328301][T17394] ? __vcalloc_noprof+0x4d/0x80 [ 291.328320][T17394] ? __vcalloc_noprof+0x4d/0x80 [ 291.328337][T17394] ? __pfx___might_resched+0x10/0x10 [ 291.328351][T17394] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 291.328363][T17394] ? rcu_is_watching+0x12/0xc0 [ 291.328375][T17394] ? trace_contention_end+0xdd/0x130 [ 291.328393][T17394] ? __mutex_lock+0x1ca/0xb90 [ 291.328411][T17394] ? __vcalloc_noprof+0x4d/0x80 [ 291.328425][T17394] __vmalloc_node_noprof+0xad/0xf0 [ 291.328436][T17394] ? __vcalloc_noprof+0x4d/0x80 [ 291.328452][T17394] __vcalloc_noprof+0x4d/0x80 [ 291.328467][T17394] kvm_arch_prepare_memory_region+0x35a/0x8d0 [ 291.328488][T17394] kvm_set_memslot+0x139/0x1380 [ 291.328502][T17394] ? kasan_save_track+0x14/0x30 [ 291.328517][T17394] kvm_set_memory_region+0xebc/0x1680 [ 291.328536][T17394] ? __pfx_kvm_set_memory_region+0x10/0x10 [ 291.328555][T17394] kvm_vm_ioctl+0x1482/0x3da0 [ 291.328586][T17394] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 291.328627][T17394] ? kasan_quarantine_put+0x10a/0x240 [ 291.328649][T17394] ? lockdep_hardirqs_on+0x7c/0x110 [ 291.328671][T17394] ? find_held_lock+0x2b/0x80 [ 291.328685][T17394] ? tomoyo_path_number_perm+0x295/0x580 [ 291.328701][T17394] ? tomoyo_path_number_perm+0x18d/0x580 [ 291.328716][T17394] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 291.328733][T17394] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 291.328746][T17394] ? do_vfs_ioctl+0x523/0x1a60 [ 291.328757][T17394] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 291.328780][T17394] ? hook_file_ioctl_common+0x145/0x410 [ 291.328802][T17394] ? selinux_file_ioctl+0x180/0x270 [ 291.328816][T17394] ? selinux_file_ioctl+0xb4/0x270 [ 291.328832][T17394] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 291.328849][T17394] __x64_sys_ioctl+0x18b/0x210 [ 291.328862][T17394] do_syscall_64+0xcd/0x4c0 [ 291.328879][T17394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.328890][T17394] RIP: 0033:0x7fa16fd8e52b [ 291.328899][T17394] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 291.328910][T17394] RSP: 002b:00007fa170b69490 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 291.328921][T17394] RAX: ffffffffffffffda RBX: 00007fa170b69be0 RCX: 00007fa16fd8e52b [ 291.328928][T17394] RDX: 00007fa170b69be0 RSI: 000000004020ae46 RDI: 0000000000000004 [ 291.328934][T17394] RBP: 0000000000000004 R08: 0000000000000001 R09: 0000000000000000 [ 291.328941][T17394] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000006 [ 291.328947][T17394] R13: 0000200000011000 R14: 000020000000b000 R15: 00000000fec00000 [ 291.328962][T17394] [ 291.394012][T17390] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3541'. [ 291.549112][T17397] hsr0: entered promiscuous mode [ 291.552423][T17397] macsec1: entered allmulticast mode [ 291.555870][T17397] hsr0: entered allmulticast mode [ 291.557471][T17397] hsr_slave_0: entered allmulticast mode [ 291.559375][T17397] hsr_slave_1: entered allmulticast mode [ 291.706989][T17402] netlink: 14528 bytes leftover after parsing attributes in process `syz.2.3545'. [ 291.707208][T17405] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3547'. [ 291.734566][T17406] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3547'. [ 291.735435][T17407] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3543'. [ 291.736922][T17402] loop4: detected capacity change from 0 to 7 [ 291.743039][T17402] Dev loop4: unable to read RDB block 7 [ 291.744847][T17402] loop4: unable to read partition table [ 291.746696][T17402] loop4: partition table beyond EOD, truncated [ 291.749484][T17402] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 291.840424][T17411] xt_CHECKSUM: unsupported CHECKSUM operation f4 [ 291.992804][ T40] kauditd_printk_skb: 2164 callbacks suppressed [ 291.992815][ T40] audit: type=1400 audit(291.903:46664): avc: denied { recv } for pid=60 comm="kworker/1:1" saddr=10.0.2.2 src=49726 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 292.006228][ T40] audit: type=1400 audit(291.903:46665): avc: denied { recv } for pid=60 comm="kworker/1:1" saddr=10.0.2.2 src=49726 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 292.013716][ T40] audit: type=1400 audit(291.913:46666): avc: denied { recv } for pid=5923 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=39724 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 292.031573][ T40] audit: type=1400 audit(291.913:46667): avc: denied { recv } for pid=5923 comm="sshd-session" saddr=127.0.0.1 src=39724 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 292.039254][ T40] audit: type=1400 audit(291.923:46668): avc: denied { recv } for pid=5924 comm="syz-executor" saddr=127.0.0.1 src=39724 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 292.046845][ T40] audit: type=1400 audit(291.933:46669): avc: denied { read write } for pid=14096 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 292.054025][ T40] audit: type=1400 audit(291.933:46670): avc: denied { read write open } for pid=14096 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 292.062634][ T40] audit: type=1400 audit(291.933:46671): avc: denied { ioctl } for pid=14096 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 292.091557][ T40] audit: type=1400 audit(291.933:46672): avc: denied { recv } for pid=40 comm="kauditd" saddr=10.0.2.2 src=49726 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 292.113676][ T40] audit: type=1400 audit(291.953:46673): avc: denied { create } for pid=17429 comm="syz.3.3551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 292.304189][T17444] FAULT_INJECTION: forcing a failure. [ 292.304189][T17444] name failslab, interval 1, probability 0, space 0, times 0 [ 292.316710][T17444] CPU: 0 UID: 0 PID: 17444 Comm: syz.4.3555 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 292.316728][T17444] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 292.316735][T17444] Call Trace: [ 292.316739][T17444] [ 292.316744][T17444] dump_stack_lvl+0x16c/0x1f0 [ 292.316765][T17444] should_fail_ex+0x512/0x640 [ 292.316781][T17444] ? __kmalloc_node_noprof+0xc5/0x500 [ 292.316798][T17444] should_failslab+0xc2/0x120 [ 292.316814][T17444] __kmalloc_node_noprof+0xd8/0x500 [ 292.316829][T17444] ? __vmalloc_node_range_noprof+0x3e5/0x14b0 [ 292.316844][T17444] __vmalloc_node_range_noprof+0x3e5/0x14b0 [ 292.316861][T17444] ? __vcalloc_noprof+0x4d/0x80 [ 292.316879][T17444] ? __pfx___might_resched+0x10/0x10 [ 292.316894][T17444] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 292.316906][T17444] ? rcu_is_watching+0x12/0xc0 [ 292.316920][T17444] ? trace_contention_end+0xdd/0x130 [ 292.316938][T17444] ? __mutex_lock+0x1ca/0xb90 [ 292.316956][T17444] ? __vcalloc_noprof+0x4d/0x80 [ 292.316970][T17444] __vmalloc_node_noprof+0xad/0xf0 [ 292.316981][T17444] ? __vcalloc_noprof+0x4d/0x80 [ 292.317001][T17444] __vcalloc_noprof+0x4d/0x80 [ 292.317016][T17444] kvm_arch_prepare_memory_region+0x35a/0x8d0 [ 292.317038][T17444] kvm_set_memslot+0x139/0x1380 [ 292.317054][T17444] ? kasan_save_track+0x14/0x30 [ 292.317070][T17444] kvm_set_memory_region+0xebc/0x1680 [ 292.317089][T17444] ? __pfx_kvm_set_memory_region+0x10/0x10 [ 292.317108][T17444] kvm_vm_ioctl+0x1482/0x3da0 [ 292.317130][T17444] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 292.317155][T17444] ? kasan_quarantine_put+0x10a/0x240 [ 292.317168][T17444] ? lockdep_hardirqs_on+0x7c/0x110 [ 292.317185][T17444] ? find_held_lock+0x2b/0x80 [ 292.317198][T17444] ? tomoyo_path_number_perm+0x295/0x580 [ 292.317215][T17444] ? tomoyo_path_number_perm+0x18d/0x580 [ 292.317229][T17444] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 292.317242][T17444] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 292.317256][T17444] ? do_vfs_ioctl+0x523/0x1a60 [ 292.317269][T17444] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 292.317292][T17444] ? hook_file_ioctl_common+0x145/0x410 [ 292.317314][T17444] ? selinux_file_ioctl+0x180/0x270 [ 292.317329][T17444] ? selinux_file_ioctl+0xb4/0x270 [ 292.317344][T17444] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 292.317361][T17444] __x64_sys_ioctl+0x18b/0x210 [ 292.317375][T17444] do_syscall_64+0xcd/0x4c0 [ 292.317392][T17444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.317404][T17444] RIP: 0033:0x7f7696f8e52b [ 292.317413][T17444] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 292.317424][T17444] RSP: 002b:00007f7697d45490 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 292.317435][T17444] RAX: ffffffffffffffda RBX: 00007f7697d45be0 RCX: 00007f7696f8e52b [ 292.317442][T17444] RDX: 00007f7697d45be0 RSI: 000000004020ae46 RDI: 0000000000000004 [ 292.317449][T17444] RBP: 0000000000000004 R08: 0000000000000001 R09: 0000000000000000 [ 292.317455][T17444] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000006 [ 292.317461][T17444] R13: 0000200000011000 R14: 000020000000b000 R15: 00000000fec00000 [ 292.317475][T17444] [ 292.420095][T17446] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 292.422169][T17446] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 292.432137][T17446] vhci_hcd vhci_hcd.0: Device attached [ 292.453625][T17447] vhci_hcd: connection closed [ 292.453812][ T6657] vhci_hcd: stop threads [ 292.456864][ T6657] vhci_hcd: release socket [ 292.458736][ T6657] vhci_hcd: disconnect device [ 292.667003][T17455] program syz.4.3558 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 292.685829][T17455] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3558'. [ 293.093969][T17466] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 293.141811][T17466] x_tables: duplicate underflow at hook 3 [ 293.180284][T17468] tmpfs: Cannot change global quota limit on remount [ 293.414932][T17476] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3566'. [ 293.434433][T17476] netlink: 'syz.3.3566': attribute type 8 has an invalid length. [ 293.525832][T17477] Bluetooth: hci0: unsupported parameter 108 [ 293.528411][T17477] Bluetooth: hci0: unsupported parameter 108 [ 293.710198][T17486] overlay: Unknown parameter 'uid>00000000000000000000' [ 293.892938][ T24] usb 5-1: new low-speed USB device number 23 using dummy_hcd [ 294.069067][ T24] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 294.073134][ T24] usb 5-1: config 0 has no interface number 0 [ 294.075724][ T24] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 294.080070][ T24] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 294.086446][ T24] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 294.090245][ T24] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 294.099667][ T24] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 294.105664][ T24] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 294.111009][ T24] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 294.119287][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.127946][ T24] usb 5-1: config 0 descriptor?? [ 294.137681][T17495] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 294.153384][T17495] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 294.169593][ T24] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 294.325280][T17523] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3578'. [ 294.396634][T17495] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3571'. [ 294.410465][T17495] openvswitch: netlink: Flow actions attr not present in new flow. [ 294.433091][ T24] usb 5-1: USB disconnect, device number 23 [ 294.439801][ T24] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 294.518548][T17530] binder: BINDER_SET_CONTEXT_MGR already set [ 294.522948][T17530] binder: 17528:17530 ioctl 4018620d 2000000000c0 returned -16 [ 294.654850][T17537] syz.3.3581: attempt to access beyond end of device [ 294.654850][T17537] loop3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 294.659363][T17537] MINIX-fs: unable to read superblock [ 294.676086][T17537] netlink: 'syz.3.3581': attribute type 20 has an invalid length. [ 294.973955][T17553] 9pnet_fd: Insufficient options for proto=fd [ 295.106439][T17559] fuse: Bad value for 'fd' [ 295.127920][T17557] binder: 17555:17557 ioctl c0306201 200000000080 returned -14 [ 295.132035][T17557] binder: 17555:17557 ioctl c0306201 2000000003c0 returned -14 [ 295.138875][T17557] binder: 17555:17557 ioctl 40106614 200000000000 returned -22 [ 295.346536][T17572] syz.3.3593: attempt to access beyond end of device [ 295.346536][T17572] md0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 295.352755][T17573] syz.3.3593: attempt to access beyond end of device [ 295.352755][T17573] md0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 295.358928][ T5957] Bluetooth: hci3: unexpected event 0x35 length: 13 > 6 [ 295.406153][T17567] /dev/sr0: Can't open blockdev [ 295.714169][T17587] FAULT_INJECTION: forcing a failure. [ 295.714169][T17587] name failslab, interval 1, probability 0, space 0, times 0 [ 295.719055][T17587] CPU: 0 UID: 0 PID: 17587 Comm: syz.4.3600 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 295.719077][T17587] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 295.719088][T17587] Call Trace: [ 295.719095][T17587] [ 295.719102][T17587] dump_stack_lvl+0x16c/0x1f0 [ 295.719129][T17587] should_fail_ex+0x512/0x640 [ 295.719147][T17587] ? __kmalloc_node_noprof+0xc5/0x500 [ 295.719171][T17587] should_failslab+0xc2/0x120 [ 295.719195][T17587] __kmalloc_node_noprof+0xd8/0x500 [ 295.719214][T17587] ? __vmalloc_node_range_noprof+0x3e5/0x14b0 [ 295.719233][T17587] __vmalloc_node_range_noprof+0x3e5/0x14b0 [ 295.719259][T17587] ? __vcalloc_noprof+0x4d/0x80 [ 295.719285][T17587] ? __pfx___might_resched+0x10/0x10 [ 295.719306][T17587] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 295.719321][T17587] ? rcu_is_watching+0x12/0xc0 [ 295.719339][T17587] ? trace_contention_end+0xdd/0x130 [ 295.719364][T17587] ? __mutex_lock+0x1ca/0xb90 [ 295.719392][T17587] ? __vcalloc_noprof+0x4d/0x80 [ 295.719412][T17587] __vmalloc_node_noprof+0xad/0xf0 [ 295.719424][T17587] ? __vcalloc_noprof+0x4d/0x80 [ 295.719447][T17587] __vcalloc_noprof+0x4d/0x80 [ 295.719469][T17587] kvm_arch_prepare_memory_region+0x35a/0x8d0 [ 295.719521][T17587] kvm_set_memslot+0x139/0x1380 [ 295.719544][T17587] ? kasan_save_track+0x14/0x30 [ 295.719564][T17587] kvm_set_memory_region+0xebc/0x1680 [ 295.719593][T17587] ? __pfx_kvm_set_memory_region+0x10/0x10 [ 295.719621][T17587] kvm_vm_ioctl+0x1482/0x3da0 [ 295.719653][T17587] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 295.719687][T17587] ? kasan_quarantine_put+0x10a/0x240 [ 295.719706][T17587] ? lockdep_hardirqs_on+0x7c/0x110 [ 295.719732][T17587] ? find_held_lock+0x2b/0x80 [ 295.719751][T17587] ? tomoyo_path_number_perm+0x295/0x580 [ 295.719772][T17587] ? tomoyo_path_number_perm+0x18d/0x580 [ 295.719794][T17587] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 295.719813][T17587] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 295.719833][T17587] ? do_vfs_ioctl+0x523/0x1a60 [ 295.719850][T17587] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 295.719882][T17587] ? hook_file_ioctl_common+0x145/0x410 [ 295.719914][T17587] ? selinux_file_ioctl+0x180/0x270 [ 295.719940][T17587] ? selinux_file_ioctl+0xb4/0x270 [ 295.719958][T17587] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 295.719984][T17587] __x64_sys_ioctl+0x18b/0x210 [ 295.720003][T17587] do_syscall_64+0xcd/0x4c0 [ 295.720029][T17587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.720043][T17587] RIP: 0033:0x7f7696f8e52b [ 295.720055][T17587] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 295.720071][T17587] RSP: 002b:00007f7697d45490 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 295.720087][T17587] RAX: ffffffffffffffda RBX: 00007f7697d45be0 RCX: 00007f7696f8e52b [ 295.720098][T17587] RDX: 00007f7697d45be0 RSI: 000000004020ae46 RDI: 0000000000000004 [ 295.720108][T17587] RBP: 0000000000000004 R08: 0000000000000001 R09: 0000000000000000 [ 295.720117][T17587] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000006 [ 295.720127][T17587] R13: 0000200000011000 R14: 000020000000b000 R15: 00000000fec00000 [ 295.720145][T17587] [ 295.925219][T17596] 9pnet_virtio: no channels available for device syz [ 295.992380][T17595] dlm: no locking on control device [ 296.417321][T17610] dummy0: entered promiscuous mode [ 296.864579][T17623] xt_socket: unknown flags 0x50 [ 296.969654][T17628] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 296.974429][T17628] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 296.978906][T17628] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 297.006219][ T40] kauditd_printk_skb: 1587 callbacks suppressed [ 297.006231][ T40] audit: type=1400 audit(296.913:48261): avc: denied { recv } for pid=5923 comm="sshd-session" saddr=10.0.2.2 src=49726 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 297.015901][ T40] audit: type=1400 audit(296.923:48262): avc: denied { recv } for pid=5923 comm="sshd-session" saddr=10.0.2.2 src=49726 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 297.037267][ T40] audit: type=1400 audit(296.923:48263): avc: denied { recv } for pid=5923 comm="sshd-session" saddr=10.0.2.2 src=49726 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 297.058724][ T40] audit: type=1400 audit(296.923:48264): avc: denied { recv } for pid=5923 comm="sshd-session" saddr=10.0.2.2 src=49726 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 297.098615][T17637] audit: audit_backlog=65 > audit_backlog_limit=64 [ 297.099440][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 297.100793][T17637] audit: audit_lost=78 audit_rate_limit=0 audit_backlog_limit=64 [ 297.102807][ C1] audit: audit_lost=79 audit_rate_limit=0 audit_backlog_limit=64 [ 297.102818][ C1] audit: backlog limit exceeded [ 297.103818][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 297.118073][T17635] sch_tbf: burst 1885 is lower than device lo mtu (65550) ! [ 297.163747][T17639] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 297.166568][T17639] UDF-fs: Scanning with blocksize 2048 failed [ 297.172375][T17639] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 297.177766][T17639] UDF-fs: Scanning with blocksize 4096 failed [ 297.237609][T17645] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3619'. [ 297.243231][T17645] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3619'. [ 297.498034][T17655] syz.2.3623: attempt to access beyond end of device [ 297.498034][T17655] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 297.504176][T17655] FAT-fs (nbd2): unable to read boot sector [ 297.812383][T17659] overlay: Unknown parameter 'uid>00000000000000000000' [ 297.832887][T17629] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 297.835852][T17629] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 297.840366][T17629] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 297.882899][T17664] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 298.129400][T17678] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 298.146638][T17678] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 298.151394][T17678] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3628'. [ 298.277525][T17682] kvm: pic: non byte read [ 298.281331][T17682] kvm: pic: level sensitive irq not supported [ 298.281655][T17682] kvm: pic: non byte read [ 298.295942][T17682] kvm: pic: level sensitive irq not supported [ 298.296280][T17682] kvm: pic: non byte read [ 298.307120][T17682] kvm: pic: level sensitive irq not supported [ 298.307441][T17682] kvm: pic: non byte read [ 298.314113][T17682] kvm: pic: level sensitive irq not supported [ 298.314431][T17682] kvm: pic: non byte read [ 298.325206][T17682] kvm: pic: level sensitive irq not supported [ 298.325541][T17682] kvm: pic: non byte read [ 298.332033][T17682] kvm: pic: level sensitive irq not supported [ 298.332353][T17682] kvm: pic: non byte read [ 298.339687][T17682] kvm: pic: level sensitive irq not supported [ 298.340101][T17682] kvm: pic: non byte read [ 298.346048][T17682] kvm: pic: level sensitive irq not supported [ 298.346283][T17682] kvm: pic: non byte read [ 298.746295][T17715] kvm: emulating exchange as write [ 299.266296][T17750] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1280 sclass=netlink_route_socket pid=17750 comm=syz.2.3649 [ 299.745970][T17783] misc userio: The device must be registered before sending interrupts [ 299.762013][T17783] misc userio: The device must be registered before sending interrupts [ 299.773280][T17783] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3658'. [ 299.776066][T17783] netlink: 'syz.4.3658': attribute type 30 has an invalid length. [ 299.834896][T17788] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 299.838117][T17788] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 300.070647][T17801] batadv0: entered promiscuous mode [ 300.074247][T17801] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 300.077306][T17801] batadv0: left promiscuous mode [ 300.509750][T17805] 9pnet_fd: Insufficient options for proto=fd [ 300.624171][T17807] IPVS: persistence engine module ip_vs_pe_s not found [ 300.636688][T17807] netlink: 'syz.2.3669': attribute type 10 has an invalid length. [ 300.648000][T17807] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 301.035406][T17825] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 301.178811][T17828] openvswitch: netlink: Unknown key attributes 2 [ 301.264882][T17834] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3676'. [ 301.366112][T17838] netlink: 'syz.2.3678': attribute type 10 has an invalid length. [ 301.368573][T17838] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3678'. [ 301.374436][T17838] bridge0: port 1(dummy0) entered blocking state [ 301.376599][T17838] bridge0: port 1(dummy0) entered disabled state [ 301.378638][T17838] dummy0: entered allmulticast mode [ 301.561362][T17848] Failed to initialize the IGMP autojoin socket (err -2) [ 301.903697][T17861] netlink: 'syz.2.3688': attribute type 3 has an invalid length. [ 301.906113][T17861] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3688'. [ 302.012914][ T40] kauditd_printk_skb: 2057 callbacks suppressed [ 302.012925][ T40] audit: type=1400 audit(301.923:50313): avc: denied { ioctl } for pid=13606 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 302.022773][ T40] audit: type=1400 audit(301.923:50314): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=49726 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 302.029907][ T40] audit: type=1400 audit(301.923:50315): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=49726 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 302.029932][ T40] audit: type=1400 audit(301.923:50316): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=49726 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 302.029955][ T40] audit: type=1400 audit(301.933:50317): avc: denied { recv } for pid=5923 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=39724 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 302.042753][ T63] Bluetooth: hci1: command 0x1003 tx timeout [ 302.045904][ T5957] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 302.072746][ T40] audit: type=1400 audit(301.973:50318): avc: denied { recv } for pid=5924 comm="syz-executor" saddr=127.0.0.1 src=39724 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 302.080338][ T40] audit: type=1400 audit(301.983:50319): avc: denied { read write } for pid=14096 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 302.089772][ T40] audit: type=1400 audit(301.983:50320): avc: denied { read write open } for pid=14096 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 302.100021][ T40] audit: type=1400 audit(301.983:50321): avc: denied { recv } for pid=13825 comm="udevd" saddr=10.0.2.2 src=49726 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 302.115627][ T40] audit: type=1400 audit(301.993:50322): avc: denied { read write } for pid=13606 comm="syz-executor" name="loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 302.161645][T17874] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3691'. [ 302.197033][T17878] netlink: 'syz.4.3693': attribute type 1 has an invalid length. [ 302.226663][T17880] ================================================================== [ 302.229189][T17880] BUG: KASAN: slab-out-of-bounds in _raw_spin_lock+0x2e/0x40 [ 302.231491][T17880] Read of size 1 at addr ffff888026ed9ce0 by task syz.0.3694/17880 [ 302.235475][T17880] [ 302.236624][T17880] CPU: 1 UID: 0 PID: 17880 Comm: syz.0.3694 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 302.236643][T17880] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 302.236650][T17880] Call Trace: [ 302.236655][T17880] [ 302.236659][T17880] dump_stack_lvl+0x116/0x1f0 [ 302.236679][T17880] print_report+0xcd/0x680 [ 302.236694][T17880] ? __virt_addr_valid+0x81/0x610 [ 302.236707][T17880] ? __phys_addr+0xe8/0x180 [ 302.236719][T17880] ? _raw_spin_lock+0x2e/0x40 [ 302.236732][T17880] kasan_report+0xe0/0x110 [ 302.236747][T17880] ? _raw_spin_lock+0x2e/0x40 [ 302.236761][T17880] ? _raw_spin_lock+0x2e/0x40 [ 302.236773][T17880] __kasan_check_byte+0x36/0x50 [ 302.236788][T17880] lock_acquire+0xfc/0x350 [ 302.236804][T17880] ? __pfx___mutex_lock+0x10/0x10 [ 302.236822][T17880] _raw_spin_lock+0x2e/0x40 [ 302.236834][T17880] ? __futex_pivot_hash+0x1dd/0x540 [ 302.236848][T17880] __futex_pivot_hash+0x1dd/0x540 [ 302.236864][T17880] futex_hash_allocate+0xad1/0xf00 [ 302.236879][T17880] ? __pfx_futex_hash_allocate+0x10/0x10 [ 302.236894][T17880] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 302.236906][T17880] ? cap_task_prctl+0x2af/0xa80 [ 302.236926][T17880] ? static_key_count+0x5a/0x70 [ 302.236938][T17880] futex_hash_prctl+0x1f4/0x650 [ 302.236954][T17880] __do_sys_prctl+0x171f/0x24c0 [ 302.236966][T17880] ? __pfx___do_sys_prctl+0x10/0x10 [ 302.236979][T17880] do_syscall_64+0xcd/0x4c0 [ 302.236996][T17880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.237007][T17880] RIP: 0033:0x7fa0a2f8e929 [ 302.237015][T17880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.237026][T17880] RSP: 002b:00007fa0a3d7a038 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 302.237037][T17880] RAX: ffffffffffffffda RBX: 00007fa0a31b5fa0 RCX: 00007fa0a2f8e929 [ 302.237044][T17880] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000004e [ 302.237051][T17880] RBP: 00007fa0a3010b39 R08: 0000000000000000 R09: 0000000000000000 [ 302.237057][T17880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 302.237064][T17880] R13: 0000000000000000 R14: 00007fa0a31b5fa0 R15: 00007ffc87852568 [ 302.237074][T17880] [ 302.237078][T17880] [ 302.306611][T17880] Allocated by task 17881: [ 302.308013][T17880] kasan_save_stack+0x33/0x60 [ 302.309496][T17880] kasan_save_track+0x14/0x30 [ 302.310973][T17880] __kasan_kmalloc+0xaa/0xb0 [ 302.312431][T17880] __kvmalloc_node_noprof+0x27b/0x620 [ 302.314099][T17880] futex_hash_allocate+0x49d/0xf00 [ 302.315700][T17880] futex_hash_prctl+0x1f4/0x650 [ 302.317231][T17880] __do_sys_prctl+0x171f/0x24c0 [ 302.318747][T17880] do_syscall_64+0xcd/0x4c0 [ 302.320178][T17880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.322009][T17880] [ 302.322770][T17880] The buggy address belongs to the object at ffff888026ed9c80 [ 302.322770][T17880] which belongs to the cache kmalloc-cg-64 of size 64 [ 302.327050][T17880] The buggy address is located 32 bytes to the right of [ 302.327050][T17880] allocated 64-byte region [ffff888026ed9c80, ffff888026ed9cc0) [ 302.331443][T17880] [ 302.332233][T17880] The buggy address belongs to the physical page: [ 302.334215][T17880] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x26ed9 [ 302.336918][T17880] memcg:ffff88803b224401 [ 302.338246][T17880] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 302.340451][T17880] page_type: f5(slab) [ 302.341716][T17880] raw: 00fff00000000000 ffff88801b849a40 ffffea0000dd7440 dead000000000006 [ 302.344351][T17880] raw: 0000000000000000 0000000080200020 00000000f5000000 ffff88803b224401 [ 302.346975][T17880] page dumped because: kasan: bad access detected [ 302.348959][T17880] page_owner tracks the page as allocated [ 302.350722][T17880] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 7500, tgid 7499 (syz.3.440), ts 74961454027, free_ts 74803455758 [ 302.356452][T17880] post_alloc_hook+0x1c0/0x230 [ 302.357963][T17880] get_page_from_freelist+0x1321/0x3890 [ 302.359696][T17880] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 302.361532][T17880] alloc_pages_mpol+0x1fb/0x550 [ 302.363051][T17880] new_slab+0x23b/0x330 [ 302.364354][T17880] ___slab_alloc+0xd9c/0x1940 [ 302.365792][T17880] __slab_alloc.constprop.0+0x56/0xb0 [ 302.367461][T17880] __kmalloc_cache_noprof+0xfb/0x3e0 [ 302.369100][T17880] ovs_ct_limit_cmd_set+0x30a/0xa90 [ 302.370744][T17880] genl_family_rcv_msg_doit+0x206/0x2f0 [ 302.372470][T17880] genl_rcv_msg+0x55c/0x800 [ 302.373893][T17880] netlink_rcv_skb+0x155/0x420 [ 302.375381][T17880] genl_rcv+0x28/0x40 [ 302.376650][T17880] netlink_unicast+0x53d/0x7f0 [ 302.378142][T17880] netlink_sendmsg+0x8d1/0xdd0 [ 302.379641][T17880] ____sys_sendmsg+0xa95/0xc70 [ 302.381110][T17880] page last free pid 15 tgid 15 stack trace: [ 302.382953][T17880] __free_frozen_pages+0x7fe/0x1180 [ 302.384575][T17880] tlb_remove_table_rcu+0x116/0x1a0 [ 302.386190][T17880] rcu_core+0x79c/0x14e0 [ 302.387523][T17880] handle_softirqs+0x219/0x8e0 [ 302.389017][T17880] run_ksoftirqd+0x3a/0x60 [ 302.390418][T17880] smpboot_thread_fn+0x3f7/0xae0 [ 302.391973][T17880] kthread+0x3c5/0x780 [ 302.393244][T17880] ret_from_fork+0x5d4/0x6f0 [ 302.394687][T17880] ret_from_fork_asm+0x1a/0x30 [ 302.396181][T17880] [ 302.396938][T17880] Memory state around the buggy address: [ 302.398649][T17880] ffff888026ed9b80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 302.401064][T17880] ffff888026ed9c00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 302.403456][T17880] >ffff888026ed9c80: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 302.405848][T17880] ^ [ 302.408013][T17880] ffff888026ed9d00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 302.410391][T17880] ffff888026ed9d80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 302.412773][T17880] ================================================================== [ 302.415238][ C1] vkms_vblank_simulate: vblank timer overrun [ 302.417374][T17880] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 302.419561][T17880] CPU: 1 UID: 0 PID: 17880 Comm: syz.0.3694 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 302.423214][T17880] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 302.426500][T17880] Call Trace: [ 302.427566][T17880] [ 302.428503][T17880] dump_stack_lvl+0x3d/0x1f0 [ 302.429967][T17880] panic+0x71c/0x800 [ 302.431205][T17880] ? __pfx_panic+0x10/0x10 [ 302.432609][T17880] ? irqentry_exit+0x3b/0x90 [ 302.434059][T17880] ? lockdep_hardirqs_on+0x7c/0x110 [ 302.435689][T17880] ? _raw_spin_lock+0x2e/0x40 [ 302.437172][T17880] ? check_panic_on_warn+0x1f/0xb0 [ 302.438768][T17880] ? _raw_spin_lock+0x2e/0x40 [ 302.440249][T17880] check_panic_on_warn+0xab/0xb0 [ 302.441792][T17880] end_report+0x107/0x170 [ 302.443148][T17880] kasan_report+0xee/0x110 [ 302.444557][T17880] ? _raw_spin_lock+0x2e/0x40 [ 302.446030][T17880] ? _raw_spin_lock+0x2e/0x40 [ 302.447509][T17880] __kasan_check_byte+0x36/0x50 [ 302.449035][T17880] lock_acquire+0xfc/0x350 [ 302.450490][T17880] ? __pfx___mutex_lock+0x10/0x10 [ 302.452084][T17880] _raw_spin_lock+0x2e/0x40 [ 302.453511][T17880] ? __futex_pivot_hash+0x1dd/0x540 [ 302.455133][T17880] __futex_pivot_hash+0x1dd/0x540 [ 302.456731][T17880] futex_hash_allocate+0xad1/0xf00 [ 302.458326][T17880] ? __pfx_futex_hash_allocate+0x10/0x10 [ 302.460073][T17880] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 302.461911][T17880] ? cap_task_prctl+0x2af/0xa80 [ 302.463434][T17880] ? static_key_count+0x5a/0x70 [ 302.464952][T17880] futex_hash_prctl+0x1f4/0x650 [ 302.466473][T17880] __do_sys_prctl+0x171f/0x24c0 [ 302.467999][T17880] ? __pfx___do_sys_prctl+0x10/0x10 [ 302.469634][T17880] do_syscall_64+0xcd/0x4c0 [ 302.471068][T17880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.472911][T17880] RIP: 0033:0x7fa0a2f8e929 [ 302.474305][T17880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.480219][T17880] RSP: 002b:00007fa0a3d7a038 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 302.482778][T17880] RAX: ffffffffffffffda RBX: 00007fa0a31b5fa0 RCX: 00007fa0a2f8e929 [ 302.485216][T17880] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000004e [ 302.487667][T17880] RBP: 00007fa0a3010b39 R08: 0000000000000000 R09: 0000000000000000 [ 302.490117][T17880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 302.492559][T17880] R13: 0000000000000000 R14: 00007fa0a31b5fa0 R15: 00007ffc87852568 [ 302.494992][T17880] [ 302.496634][T17880] Kernel Offset: disabled [ 302.497988][T17880] Rebooting in 86400 seconds.. VM DIAGNOSIS: 19:36:19 Registers: info registers vcpu 0 CPU#0 RAX=000000000029ea95 RBX=0000000000000000 RCX=ffffffff8b7fdc99 RDX=0000000000000000 RSI=ffffffff8de193fc RDI=ffffffff8c157060 RBP=fffffbfff1c52ef0 RSP=ffffffff8e207e08 R8 =0000000000000001 R9 =ffffed100d486645 R10=ffff88806a43322b R11=0000000000000001 R12=0000000000000000 R13=ffffffff8e297780 R14=ffffffff90a80950 R15=0000000000000000 RIP=ffffffff8b7fc7ff RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6754000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fa0a3d59d58 CR3=000000005c3d2000 CR4=00352ef0 DR0=0000000000000040 DR1=0000000000000004 DR2=0000000000000003 DR3=00000000000010e3 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe8633ed60 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9266411b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9266411b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9266411b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9266411b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9266411bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9266411c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000000002e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855b62d5 RDI=ffffffff9b0883a0 RBP=ffffffff9b088360 RSP=ffffc9000c9d76a8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3230383838666666 R12=0000000000000000 R13=000000000000002e R14=ffffffff9b088360 R15=ffffffff855b6270 RIP=ffffffff855b62ff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fa0a3d7a6c0 ffffffff 00c00000 GS =0000 ffff8880d6854000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fa0a3d79f98 CR3=000000004f198000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000001000001 Opmask02=00000000e0000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa0a3011b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa0a3011b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa0a3011b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa0a3011b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa0a3011bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa0a3011c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa0a3184488 00007fa0a3184480 00007fa0a3184478 00007fa0a3184450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa0a3ced100 00007fa0a3184440 00007fa0a3184458 00007fa0a31844a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa0a3184498 00007fa0a3184490 00007fa0a3184488 00007fa0a3184480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000048 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000024085b RBX=0000000000000002 RCX=ffffffff8b7fdc99 RDX=0000000000000000 RSI=ffffffff8de193fc RDI=ffffffff8c157060 RBP=ffffed1003bd1910 RSP=ffffc90000187df8 R8 =0000000000000001 R9 =ffffed100d4c6645 R10=ffff88806a63322b R11=0000000000000001 R12=0000000000000002 R13=ffff88801de8c880 R14=ffffffff90a80950 R15=0000000000000000 RIP=ffffffff8b7fc7ff RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6954000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fa0a3d58f98 CR3=000000000b857000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcb62edf90 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7697011b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7697011b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7697011b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7697011b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7697011bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7697011c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000048 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000003 RBX=ffffffff9af30608 RCX=ffffffff8198c9d5 RDX=0000000000000000 RSI=0000000000000004 RDI=ffffffff9af30608 RBP=1ffff92000830f3b RSP=ffffc900041879d8 R8 =0000000000000000 R9 =fffffbfff35e60c1 R10=ffffffff9af3060b R11=0000000000000001 R12=dffffc0000000000 R13=ffffffff9af30608 R14=00000000000001d4 R15=0000000000000200 RIP=ffffffff8198c9ee RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555570c34500 ffffffff 00c00000 GS =0000 ffff8880d6a54000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000555570c4f5c8 CR3=000000005c3d2000 CR4=00352ef0 DR0=0000000000000040 DR1=0000000000000004 DR2=0000000000000003 DR3=00000000000010e3 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000020081 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe8633dc70 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9266411b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9266411b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9266411b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9266411b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9266411bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9266411c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 2074657365720064 656c696166202973 2528746174736c00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 0551405640570041 40494c4443050c56 000d514451564900 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000