last executing test programs: 9.1221655s ago: executing program 1 (id=945): socket$key(0xf, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000100)='ext4_lazy_itable_init\x00', r0, 0x0, 0x5}, 0x18) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001800), 0x4) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) recvmsg$unix(r2, 0x0, 0x0) prctl$PR_CAPBSET_DROP(0x1c, 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000800)=@mangle={'mangle\x00', 0x44, 0x6, 0x390, 0x158, 0x288, 0x158, 0x288, 0x1f0, 0x320, 0x320, 0x320, 0x320, 0x320, 0x6, 0x0, {[{{@ip={@remote, @multicast2, 0x0, 0x0, 'veth0_to_bridge\x00', 'ipvlan1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'pim6reg1\x00', 'macvtap0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev, @private, 0x0, 0x0, 'hsr0\x00', 'syzkaller1\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@local, @rand_addr, 0x0, 0x0, 'ip6erspan0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x38}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) sched_setscheduler(0x0, 0x1, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r3, 0x0, 0x0, 0x0, 0x0) unshare(0x8040080) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) statx(r4, 0x0, 0x4800, 0x4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) 8.628818458s ago: executing program 1 (id=946): socket$inet_sctp(0x2, 0x400000000001, 0x84) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) syz_open_dev$loop(0x0, 0x20364, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="64fcffff037e8e06030000000000000000000100002005000000000000000900020073797a32000000000900020073797a320000000005200100070000000900020073797a31000000000900020073799b6fe27b6ca9037e8b384a7a300300000032ba"], 0x54}}, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a0000000800000042000000ffffffff0000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32, @ANYBLOB], 0x50) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020}, 0xfd97) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x2800) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000200)) write$dsp(r5, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100004000009500000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000b473d80149ac4283220cea78846b58f0f37f29393af6244e65de3063fef87f98d5a775f91f566fefeaf13b46a776fcb535bf7d254bcb16f3ae55b7f93bc5274585f6f7a4ab57d11eb7e24a5284720d305f5d436a79ff6dd83d9e045801443bed0d0202f40c517369fad361c1e4fba40c4c54d891"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) syz_io_uring_setup(0x2ddd, &(0x7f0000000100)={0x0, 0x890, 0x400, 0x2, 0xb9}, &(0x7f0000000240), &(0x7f00000003c0)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040), &(0x7f0000000180)) 7.706943608s ago: executing program 2 (id=949): openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x10, &(0x7f0000000540)=ANY=[@ANYRES64, @ANYRESOCT=0x0, @ANYRESOCT, @ANYRES32], &(0x7f0000000000)='GPL\x00', 0x8, 0xae, &(0x7f0000000140)=""/174, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x5, 0x2}, 0x8, 0x10, &(0x7f00000000c0)={0x3, 0x6, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[0xffffffffffffffff], 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000022c0)=""/4096}, {&(0x7f0000000100)=""/60}, {&(0x7f0000000300)=""/120}, {&(0x7f00000003c0)}], 0x0, &(0x7f0000000480)=""/37}, 0xa7}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000940)=""/186}, {&(0x7f0000000a00)=""/106}, {&(0x7f0000000a80)=""/208}, {&(0x7f0000000e40)=""/115}, {&(0x7f0000000c00)=""/79}, {&(0x7f0000000c80)=""/113}, {&(0x7f0000000d00)=""/96}], 0x0, &(0x7f0000000d80)=""/176}, 0x4}], 0xe51b, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000180)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) close(r3) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 5.479378969s ago: executing program 1 (id=954): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, 0x0, 0x40000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xffffffffffffff32) getgroups(0x1, &(0x7f00000005c0)=[0xee00]) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000300)={{0x3, 0x0, 0x0, r5, r6, 0x60, 0x108}, 0xa, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x0, 0x4400}) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xfff6) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='tmpfs\x00', 0x241000, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r7, 0x40049366, &(0x7f0000000180)) syz_genetlink_get_family_id$netlbl_unlabel(0x0, r4) 5.439916633s ago: executing program 2 (id=955): r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001180)={0x1c, 0x2a, 0x9, 0x4, 0x0, {0x4, 0x0, 0x2c00}, [@typed={0x8, 0x17, 0x0, 0x0, @fd=r2}]}, 0x1c}, 0x1, 0x3000000}, 0x0) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x14, 0x1, 0x3, 0x101}, 0x14}}, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x4002, @loopback}, 0x1c) 4.518880417s ago: executing program 1 (id=961): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000440), &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r0, 0x0}) io_uring_enter(r1, 0x3f70, 0x0, 0x0, 0x0, 0x0) 4.469379732s ago: executing program 1 (id=962): socket$inet_sctp(0x2, 0x400000000001, 0x84) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) syz_open_dev$loop(0x0, 0x20364, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="64fcffff037e8e06030000000000000000000100002005000000000000000900020073797a32000000000900020073797a320000000005200100070000000900020073797a31000000000900020073799b6fe27b6ca9037e8b384a7a300300000032ba"], 0x54}}, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a0000000800000042000000ffffffff0000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32, @ANYBLOB], 0x50) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020}, 0xfd97) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x2800) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000200)) write$dsp(r5, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100004000009500000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000b473d80149ac4283220cea78846b58f0f37f29393af6244e65de3063fef87f98d5a775f91f566fefeaf13b46a776fcb535bf7d254bcb16f3ae55b7f93bc5274585f6f7a4ab57d11eb7e24a5284720d305f5d436a79ff6dd83d9e045801443bed0d0202f40c517369fad361c1e4fba40c4c54d891"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) syz_io_uring_setup(0x2ddd, &(0x7f0000000100)={0x0, 0x890, 0x400, 0x2, 0xb9}, &(0x7f0000000240), &(0x7f00000003c0)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040), &(0x7f0000000180)) 4.349280195s ago: executing program 0 (id=964): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffca1, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) keyctl$set_reqkey_keyring(0xe, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x3) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000000340)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0xe8}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r5 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_int(r5, 0x29, 0xb, 0x0, &(0x7f0000000040)) sendto$packet(r4, &(0x7f00000000c0), 0x0, 0xa0c4, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_io_uring_setup(0x2801, &(0x7f0000000380)={0x0, 0xc7f, 0x200, 0x1, 0x4a}, &(0x7f00000002c0)=0x0, &(0x7f0000000400)) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000006, 0xc87c6c69bc22827b, 0xffffffffffffffff, 0x10000000) clock_gettime(0x0, &(0x7f0000000440)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000004c0)=@IORING_OP_UNLINKAT={0x24, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x200, 0x0, {0x0, r8}}) r9 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='.\x02\x00', 0x200, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0, 0x0) renameat2(r9, &(0x7f0000000500)='./file0\x00', r10, &(0x7f0000000200)='.\x02\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='ubifs\x00', 0x1f, 0x0) 3.985956176s ago: executing program 0 (id=965): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x464040, 0x0) ioctl$CDROMMULTISESSION(r0, 0x2284, &(0x7f0000000640)={@lba=0x3}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0xa00, 0x0, 'queue1\x00'}) pipe2(&(0x7f0000000040), 0x0) add_key$keyring(0x0, &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = fsopen(&(0x7f0000000300)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x6, 0x0, 0x0, 0x0) symlinkat(&(0x7f0000000280)='./file0\x00', 0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00') renameat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x4) execveat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x2000000000000019, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0], &(0x7f0000000300)='syzkaller\x00', 0x8, 0xb1, &(0x7f0000000140)=""/177, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x5, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x34, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x9, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(r8, 0x40046109, &(0x7f0000000080)=0xf0) 3.429537728s ago: executing program 3 (id=966): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CDROMMULTISESSION(r0, 0x2284, &(0x7f0000000640)={@lba=0x3}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0xa00, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x7175, {}, {}, @raw32={[0x3]}}], 0xffc8) 3.429122073s ago: executing program 3 (id=967): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000029f7dfd9e54fe4621900000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x0) socket$kcm(0xa, 0x2, 0x3a) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x101) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x28) r2 = socket$inet_dccp(0x2, 0x6, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) accept4(r3, &(0x7f00000001c0)=@vsock={0x28, 0x0, 0x0, @my}, &(0x7f0000000040)=0x80, 0x800) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r4 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$inet6(r4, &(0x7f0000002780)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)}, {&(0x7f00000003c0)}, {&(0x7f0000000580)="88e2db7ee1d798d6159aa04fee9f29f57b94751d7e8900de72a09429aa4730f9b5de970d0d285b99e333b2208b34698f2ec55839337d1d3681344aa7407aacc43ba3d618e58dc3", 0x47}, {0x0}], 0x4}}, {{&(0x7f0000000a80)={0xa, 0x4e23, 0x1, @private2, 0xa}, 0x1c, &(0x7f0000000b00)=[{0x0}, {0x0}], 0x2, &(0x7f0000002100)=ANY=[@ANYBLOB="1800000000000000290000003700000030000000080000001400000000000000290001003ef1383d9ee4593f37000000"], 0x30}}, {{0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000002200)="45ab693a08a6492049ef1c5f24a5a43f906b01c274ddd5bc12d6f6ddf0cfc0", 0x1f}, {0x0}], 0x2}}], 0x3, 0x40000) 2.999237797s ago: executing program 0 (id=968): r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x335}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000600)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc04c5349, &(0x7f0000001380)={0x0, 0x0, 0x0, 'queue1\x00'}) tkill(r0, 0x7) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b03d25a806f8c6394f905", 0x11}], 0x1}, 0x0) r6 = dup(r5) writev(r6, &(0x7f0000000200)=[{&(0x7f0000000180)="d927752424c5d9775cfc2e554b809a15efe4ff3a733d56b0e8d1eeb57e9f5d1ed9b5961b344294f296ee6b9d415bbf8411340e459d779ab39f5a78a6da15b3224946f71534286668f0e53c6122e1786dc5e5bfad60ee281a5a6168d32afd582b9a905426793c97", 0x67}, {&(0x7f0000000280)="532f2483c0cb1762fb847d25c4b74b4f5d9d820e8cf362543e6430af32099a44faea7ba81cc7c188f84ffc6a05cb7772812ba81ef7f657ba486d6fb0c7fbd9eb20149568291b7b7d11fe104eaa2520fcf700649e05e7e128479d277cdc8b577cd555965adbd4d0343fbacd05ec122553ae6b3ad856b1d734ffabfdc02dfcec300f736c1f9f60013dea6a3849d44b57a12f46dc4b3006a27ed73cedcb4a21a578", 0xa0}, {&(0x7f0000000380)="cb88a062e97bcf281f9f171d19e54bc41c087773e02e66a9dff6134af64ab0ca8cfc0d6b7ca80175a21860a265fc6c9d265ab5a5dcc069c8630cd51561945cf1134798284dda03213cc4c863d1bd2be91de8bb6b2206c7446f93f7ee11035bb38533681a486ef0fa46ecc5ce1158b32ab40d4cad36fef9c6", 0x78}, {&(0x7f00000000c0)="f71fee98baf64a3f6d0d7bc125039386", 0x10}], 0x4) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000008000008010040"]) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/cgroups\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000004800)={0x2020}, 0x2020) lseek(r7, 0xfffffffffffffff5, 0x1) r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r8, 0xae04) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) preadv2(r2, &(0x7f0000000340)=[{&(0x7f0000000100)=""/65, 0x41}], 0x1, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x3, 0x2000000) sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r10, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) 2.583883511s ago: executing program 3 (id=969): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r1 = syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000480), &(0x7f0000000000)=0x0) r3 = syz_open_procfs(0x0, 0x0) fchdir(r3) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, 0x0) r5 = syz_open_procfs(0x0, 0x0) fstat(r5, &(0x7f0000000400)) syz_io_uring_setup(0xa94, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r6, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0x48e9, 0x0, 0x0, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = syz_open_dev$evdev(0x0, 0x0, 0x822b01) io_setup(0x3, &(0x7f0000000180)=0x0) io_submit(r9, 0x2, &(0x7f0000000440)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r8, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x10000}]) ioctl$EVIOCGRAB(r8, 0x40044590, &(0x7f0000000140)) write$char_usb(r8, &(0x7f0000000040)="e2", 0x2778) r10 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f0000000100)="440f20c0350f000000440f22c0b8010000004f0801aab8d9d920c0350f000000440f22c066ba4100b8002c20000000f30f012e430f001fb9bd0a00000f3226d2a4470f01c8", 0x45}], 0x1, 0x0, 0x0, 0x0) sigaltstack(&(0x7f0000000040)={&(0x7f0000000100)=""/4096, 0x80000000, 0x1000}, 0x0) sigaltstack(&(0x7f0000002100)={&(0x7f0000001100)=""/4096, 0x0, 0x1000}, &(0x7f0000002200)={0x0}) syz_kvm_setup_cpu$x86(r10, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f000000c50000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r12}, 0x18) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004000000410000000000000001000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000001000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0240000001"], 0x48) ioctl$KVM_RUN(r11, 0xae80, 0x0) 2.368561246s ago: executing program 2 (id=970): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000000)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000140)={0x0, 0x0}) r5 = syz_open_procfs(r4, &(0x7f0000000600)='fd/4\x00') fstat(r5, &(0x7f0000000400)) syz_io_uring_setup(0xa94, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r6, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r0, 0x48e9, 0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x2778) sigaltstack(&(0x7f0000000040)={&(0x7f0000000100)=""/4096, 0x80000000, 0x1000}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2.36814626s ago: executing program 3 (id=971): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, 0x0, 0x40000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xffffffffffffff32) getgroups(0x1, &(0x7f00000005c0)=[0xee00]) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000300)={{0x3, 0x0, 0x0, r5, r6, 0x60, 0x108}, 0xa, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x0, 0x4400}) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xfff6) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='tmpfs\x00', 0x241000, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r7, 0x40049366, &(0x7f0000000180)) syz_genetlink_get_family_id$netlbl_unlabel(0x0, r4) 2.30686339s ago: executing program 2 (id=972): socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000080)=@mgmt_frame=@action={{{}, {}, @device_a, @device_b}, @addba_req={0x3, 0x0, {0x0, {0x0, 0x0, 0xd}}}}, 0x21) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x561203) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) socketpair(0x29, 0x5, 0x9, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r0, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000740)={0x53, 0x0, 0x6, 0x0, @scatter={0xfdbc, 0x0, 0x0}, &(0x7f0000000000)="a1f8a81b133d", 0x0, 0x0, 0x10012, 0x0, 0x0}) lseek(r0, 0xbc, 0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000580)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, r5, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x3}, @NL802154_ATTR_CHANNEL={0x5}]}, 0x2c}}, 0x0) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}, 0x38) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, &(0x7f0000000100)={0x0, 0x6}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r7, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff0802110000"], 0x398}}, 0x0) 1.464292098s ago: executing program 3 (id=973): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f0000005380)="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", 0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f0000004300)={0x50, 0x0, r4, {0x7, 0x26, 0x0, 0x11100}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0xa0, 0x0, 0x0, {{0x6, 0x0, 0x0, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0xee01}}}}, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x189841, 0x0) dup3(r5, r3, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, 0x0, 0x40) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='wchan\x00') pread64(r6, &(0x7f0000000300)=""/246, 0xf6, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000001200)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f0000000000)={0x18, 0x0, {0x0, @multicast, 'bridge_slave_0\x00'}}, 0x1e) r9 = accept$alg(r7, 0x0, 0x0) write$binfmt_elf64(r9, &(0x7f0000000000)=ANY=[], 0x100000530) recvmmsg(r9, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000004b80)=[{&(0x7f0000003940)=""/9, 0x9}, {&(0x7f0000000980)=""/11, 0xb}], 0x2}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000001280)=""/4096, 0x1000}], 0x1}, 0x4}], 0x2, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x9, 0x1, 'MARK\x00'}, @NFTA_TARGET_INFO={0xc, 0x3, "02b51112d439c592"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) 1.37943425s ago: executing program 0 (id=974): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x10, &(0x7f0000000540)=ANY=[@ANYRES64, @ANYRESOCT=0x0, @ANYRESOCT, @ANYRES32], &(0x7f0000000000)='GPL\x00', 0x8, 0xae, &(0x7f0000000140)=""/174, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x5, 0x2}, 0x8, 0x10, &(0x7f00000000c0)={0x3, 0x6, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[0xffffffffffffffff], 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000022c0)=""/4096}, {&(0x7f0000000100)=""/60}, {&(0x7f0000000300)=""/120}, {&(0x7f00000003c0)}], 0x0, &(0x7f0000000480)=""/37}, 0xa7}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000940)=""/186}, {&(0x7f0000000a00)=""/106}, {&(0x7f0000000a80)=""/208}, {&(0x7f0000000e40)=""/115}, {&(0x7f0000000c00)=""/79}, {&(0x7f0000000c80)=""/113}, {&(0x7f0000000d00)=""/96}], 0x0, &(0x7f0000000d80)=""/176}, 0x4}], 0xe51b, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000180)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r6, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) close(r4) socket$inet6_tcp(0xa, 0x1, 0x0) 1.378213971s ago: executing program 1 (id=982): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, &(0x7f0000000040)) r2 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r3 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x0) read$midi(r3, &(0x7f00000003c0)=""/230, 0xe6) syz_usb_disconnect(r2) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000100)={0x50, 0x0, '\x00', {0x0, @reserved}}) 975.228081ms ago: executing program 2 (id=975): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) socket(0x10, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe050000000000000000000095000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ext4_ext_remove_space_done\x00'}, 0x10) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0) mount$9p_virtio(&(0x7f00000000c0), &(0x7f0000000480)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB]) chdir(&(0x7f0000000100)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$sysctl(r0, &(0x7f0000000140)='5\x00', 0x2) read$rfkill(r0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x8d93b9c2e2f12980, 0x7) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000000000)=0x9, 0x4) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000e86000)='\x00', 0x1) 529.235105ms ago: executing program 3 (id=976): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') sendfile(r2, r3, 0x0, 0xc1e8) shutdown(r1, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000140)={0x0, 0x1, 0x4}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002"], 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000000c00000002000000002000000000001304000080"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={'nicvf0\x00', 0x0}) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x15) bind$xdp(0xffffffffffffffff, &(0x7f0000000000)={0x2}, 0x10) ioctl$TCFLSH(r5, 0x404c4701, 0x20000000) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0x3) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000040)=0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x2000000000000021, 0x2, 0x10000000000002) socket$nl_netfilter(0x10, 0x3, 0xc) connect$rxrpc(r6, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x2, @local}}, 0x24) sendmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000300000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r6, &(0x7f0000001880)=[{{0x0, 0x2, 0x0}}], 0xf000, 0x10002, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0x1) 348.46419ms ago: executing program 0 (id=977): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) madvise(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, r4, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x24}, 0x1, 0x6000000}, 0x0) r5 = dup3(r2, r1, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000880)={@flat=@weak_handle={0x77682a85, 0x1, 0x3}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x1f}, @fda={0x66646185, 0x3, 0x1}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x1170, 0x1170, 0x1398, 0x0, 0x1170, 0x1398, 0x1398, 0x1398, 0x1398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'netpci0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) r7 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r7, 0xc0406441, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$CDROM_LAST_WRITTEN(r8, 0x5395, &(0x7f0000000240)) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) sendmsg$nl_route_sched(r9, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000900)=@gettaction={0x1a4, 0x32, 0x402, 0x70bd25, 0x25dfdbfc, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x5}, @action_gd=@TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x101}}]}, @action_gd=@TCA_ACT_TAB={0x6c, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3ff}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffb}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000001}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x5c, 0x1, [{0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x14, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x3ff}, @action_gd=@TCA_ACT_TAB={0x68, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5bca}}, {0x14, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x40004}, 0x8040) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) set_mempolicy(0x1, 0x0, 0x0) openat$cgroup_procs(r10, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) 99.376541ms ago: executing program 0 (id=978): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) socket(0x10, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe050000000000000000000095000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ext4_ext_remove_space_done\x00'}, 0x10) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0) mount$9p_virtio(&(0x7f00000000c0), &(0x7f0000000480)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB]) chdir(&(0x7f0000000100)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$sysctl(r0, &(0x7f0000000140)='5\x00', 0x2) read$rfkill(r0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x8d93b9c2e2f12980, 0x7) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000000000)=0x9, 0x4) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000e86000)='\x00', 0x1) 0s ago: executing program 2 (id=979): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x8600, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000300)) syz_open_dev$usbfs(&(0x7f0000000480), 0x800040000000076, 0x5cdc2005d679d34a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40106614, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_get$pid(0x3, 0x0) r3 = dup(0xffffffffffffffff) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1008000, &(0x7f0000000280)=ANY=[@ANYRESDEC=0x0, @ANYRES8=r0]) chdir(&(0x7f0000000240)='./file0/file0\x00') landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x10, 0x0) landlock_restrict_self(r3, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000380)=@urb_type_control={0x2, {}, 0x0, 0xa4, &(0x7f0000002b00)={0x5f}, 0x8, 0x0, 0x0, 0x0, 0x0, 0xc1a, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000500000000000000000000008500000041000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r4, 0x8b2c, &(0x7f0000000040)) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000340)={r5, 0x0, 0x0}, 0x10) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000100)='./bus/file0\x00', 0x0) kernel console output (not intermixed with test programs): 7ffc68602e68 [ 105.092378][ T6426] [ 105.494546][ T6440] netlink: 236 bytes leftover after parsing attributes in process `syz.0.284'. [ 105.650225][ T6445] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 105.655509][ T6445] syzkaller0: entered promiscuous mode [ 105.657039][ T6445] syzkaller0: entered allmulticast mode [ 105.763566][ T6448] xt_CT: You must specify a L4 protocol and not use inversions on it [ 106.075272][ T6455] FAULT_INJECTION: forcing a failure. [ 106.075272][ T6455] name failslab, interval 1, probability 0, space 0, times 0 [ 106.080929][ T6455] CPU: 2 UID: 0 PID: 6455 Comm: syz.3.288 Not tainted 6.12.0-rc4-syzkaller #0 [ 106.083266][ T6455] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 106.086067][ T6455] Call Trace: [ 106.086960][ T6455] [ 106.087749][ T6455] dump_stack_lvl+0x16c/0x1f0 [ 106.089001][ T6455] should_fail_ex+0x497/0x5b0 [ 106.090247][ T6455] ? fs_reclaim_acquire+0xae/0x150 [ 106.091595][ T6455] should_failslab+0xc2/0x120 [ 106.092837][ T6455] __kmalloc_cache_noprof+0x6b/0x300 [ 106.094246][ T6455] ? devpts_fill_super+0x179/0x9d0 [ 106.095591][ T6455] devpts_fill_super+0x179/0x9d0 [ 106.096894][ T6455] ? __pfx_set_anon_super+0x10/0x10 [ 106.098274][ T6455] ? __pfx_devpts_fill_super+0x10/0x10 [ 106.099704][ T6455] mount_nodev+0x65/0x120 [ 106.100852][ T6455] ? __pfx_devpts_mount+0x10/0x10 [ 106.102181][ T6455] legacy_get_tree+0x109/0x220 [ 106.103453][ T6455] vfs_get_tree+0x8f/0x380 [ 106.104760][ T6455] path_mount+0x14e6/0x1f20 [ 106.105980][ T6455] ? kmem_cache_free+0x152/0x4b0 [ 106.107291][ T6455] ? __pfx_path_mount+0x10/0x10 [ 106.108584][ T6455] ? putname+0x12e/0x170 [ 106.109717][ T6455] __x64_sys_mount+0x294/0x320 [ 106.110979][ T6455] ? __pfx___x64_sys_mount+0x10/0x10 [ 106.112378][ T6455] do_syscall_64+0xcd/0x250 [ 106.113598][ T6455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.115331][ T6455] RIP: 0033:0x7f63adf7dff9 [ 106.116494][ T6455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.121504][ T6455] RSP: 002b:00007f63aed38038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 106.123701][ T6455] RAX: ffffffffffffffda RBX: 00007f63ae135f80 RCX: 00007f63adf7dff9 [ 106.125759][ T6455] RDX: 0000000020000000 RSI: 0000000020000040 RDI: 0000000000000000 [ 106.127806][ T6455] RBP: 00007f63aed38090 R08: 0000000020000100 R09: 0000000000000000 [ 106.129861][ T6455] R10: 0000000000010010 R11: 0000000000000246 R12: 0000000000000002 [ 106.131908][ T6455] R13: 0000000000000000 R14: 00007f63ae135f80 R15: 00007ffe9bfbc908 [ 106.133981][ T6455] [ 106.517712][ T6475] FAULT_INJECTION: forcing a failure. [ 106.517712][ T6475] name failslab, interval 1, probability 0, space 0, times 0 [ 106.521226][ T6475] CPU: 2 UID: 0 PID: 6475 Comm: syz.1.294 Not tainted 6.12.0-rc4-syzkaller #0 [ 106.523519][ T6475] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 106.526292][ T6475] Call Trace: [ 106.527179][ T6475] [ 106.527997][ T6475] dump_stack_lvl+0x16c/0x1f0 [ 106.529253][ T6475] should_fail_ex+0x497/0x5b0 [ 106.530486][ T6475] ? fs_reclaim_acquire+0xae/0x150 [ 106.531827][ T6475] should_failslab+0xc2/0x120 [ 106.533133][ T6475] __kmalloc_node_noprof+0xd1/0x430 [ 106.534540][ T6475] ? security_capable+0x7e/0x260 [ 106.535867][ T6475] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 106.537306][ T6475] __kvmalloc_node_noprof+0xad/0x1a0 [ 106.538692][ T6475] bpf_check+0xba6/0xb430 [ 106.539835][ T6475] ? kasan_save_stack+0x42/0x60 [ 106.541118][ T6475] ? kasan_save_stack+0x33/0x60 [ 106.542410][ T6475] ? kasan_save_track+0x14/0x30 [ 106.543718][ T6475] ? __kasan_kmalloc+0xaa/0xb0 [ 106.545064][ T6475] ? selinux_bpf_prog_load+0x47/0x1c0 [ 106.546480][ T6475] ? security_bpf_prog_load+0x211/0x240 [ 106.547993][ T6475] ? bpf_prog_load+0xe81/0x2660 [ 106.549324][ T6475] ? __x64_sys_bpf+0x78/0xc0 [ 106.550575][ T6475] ? __pfx_bpf_check+0x10/0x10 [ 106.551842][ T6475] ? kasan_save_track+0x14/0x30 [ 106.553144][ T6475] ? __kasan_kmalloc+0xaa/0xb0 [ 106.554426][ T6475] ? selinux_bpf_prog_load+0x15f/0x1c0 [ 106.555855][ T6475] bpf_prog_load+0xedb/0x2660 [ 106.557101][ T6475] ? __pfx_bpf_prog_load+0x10/0x10 [ 106.558470][ T6475] ? avc_has_perm_noaudit+0x143/0x3a0 [ 106.559893][ T6475] ? selinux_bpf+0xde/0x130 [ 106.561101][ T6475] __sys_bpf+0x402b/0x49a0 [ 106.562294][ T6475] ? ksys_write+0x21e/0x260 [ 106.563529][ T6475] ? reacquire_held_locks+0x450/0x4c0 [ 106.565060][ T6475] ? __pfx___sys_bpf+0x10/0x10 [ 106.566324][ T6475] ? vfs_write+0x14d/0x1140 [ 106.567489][ T6475] ? __mutex_unlock_slowpath+0x164/0x650 [ 106.568905][ T6475] ? fput+0x30/0x390 [ 106.569909][ T6475] ? ksys_write+0x1ad/0x260 [ 106.571072][ T6475] ? __pfx_ksys_write+0x10/0x10 [ 106.572319][ T6475] __x64_sys_bpf+0x78/0xc0 [ 106.573503][ T6475] ? lockdep_hardirqs_on+0x7c/0x110 [ 106.574866][ T6475] do_syscall_64+0xcd/0x250 [ 106.576095][ T6475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.577614][ T6475] RIP: 0033:0x7ff07017dff9 [ 106.578749][ T6475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.583647][ T6475] RSP: 002b:00007ff070f64038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 106.585822][ T6475] RAX: ffffffffffffffda RBX: 00007ff070335f80 RCX: 00007ff07017dff9 [ 106.587877][ T6475] RDX: 0000000000000090 RSI: 0000000020000340 RDI: 0000000000000005 [ 106.589956][ T6475] RBP: 00007ff070f64090 R08: 0000000000000000 R09: 0000000000000000 [ 106.592037][ T6475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 106.594144][ T6475] R13: 0000000000000001 R14: 00007ff070335f80 R15: 00007fff9d19c1d8 [ 106.596243][ T6475] [ 106.637328][ T39] audit: type=1400 audit(1729549108.574:374): avc: denied { append } for pid=6478 comm="syz.1.296" name="dlm-control" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 106.641193][ T5357] Bluetooth: hci0: unexpected event for opcode 0x200d [ 106.651914][ T5357] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 106.900655][ T39] audit: type=1400 audit(1729549108.824:375): avc: denied { map } for pid=6487 comm="syz.3.298" path="/81/file0/blkio.bfq.io_serviced" dev="9p" ino=36449074 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 106.987337][ T6488] netfs: Couldn't get user pages (rc=-14) [ 107.341547][ T6498] xt_CT: You must specify a L4 protocol and not use inversions on it [ 107.868348][ T6515] FAULT_INJECTION: forcing a failure. [ 107.868348][ T6515] name failslab, interval 1, probability 0, space 0, times 0 [ 107.879387][ T6515] CPU: 3 UID: 0 PID: 6515 Comm: syz.1.305 Not tainted 6.12.0-rc4-syzkaller #0 [ 107.882133][ T6515] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 107.884946][ T6515] Call Trace: [ 107.885859][ T6515] [ 107.886678][ T6515] dump_stack_lvl+0x16c/0x1f0 [ 107.888341][ T6515] should_fail_ex+0x497/0x5b0 [ 107.890014][ T6515] ? __pfx___lock_acquire+0x10/0x10 [ 107.891893][ T6515] should_failslab+0xc2/0x120 [ 107.893621][ T6515] __kmalloc_cache_noprof+0x6b/0x300 [ 107.895483][ T6515] ? nsim_fib_event_nb+0x1b6/0xec0 [ 107.897351][ T6515] nsim_fib_event_nb+0x1b6/0xec0 [ 107.899103][ T6515] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 107.901092][ T6515] ? rcu_is_watching+0x12/0xc0 [ 107.902800][ T6515] notifier_call_chain+0xb9/0x410 [ 107.904699][ T6515] ? __pfx_nsim_fib_event_nb+0x10/0x10 [ 107.906157][ T6515] atomic_notifier_call_chain+0x71/0x1c0 [ 107.907642][ T6515] call_fib_notifiers+0x33/0x70 [ 107.908930][ T6515] fib_table_insert+0xf5d/0x1d70 [ 107.910438][ T6515] ? __pfx_fib_table_insert+0x10/0x10 [ 107.911870][ T6515] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 107.913445][ T6515] ? inet_rtm_newroute+0x11f/0x200 [ 107.914799][ T6515] inet_rtm_newroute+0x11f/0x200 [ 107.916112][ T6515] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 107.917570][ T6515] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 107.919010][ T6515] rtnetlink_rcv_msg+0x3c7/0xea0 [ 107.920326][ T6515] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 107.921775][ T6515] netlink_rcv_skb+0x16b/0x440 [ 107.923260][ T6515] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 107.924694][ T6515] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 107.926108][ T6515] ? netlink_deliver_tap+0x1ae/0xd90 [ 107.926783][ T39] audit: type=1400 audit(1729549109.854:376): avc: denied { name_connect } for pid=6516 comm="syz.0.306" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 107.927483][ T6515] netlink_unicast+0x53c/0x7f0 [ 107.934399][ T6515] ? __pfx_netlink_unicast+0x10/0x10 [ 107.935789][ T6515] netlink_sendmsg+0x8b8/0xd70 [ 107.937044][ T6515] ? __pfx_netlink_sendmsg+0x10/0x10 [ 107.938439][ T6515] __sys_sendto+0x479/0x4d0 [ 107.939637][ T6515] ? __pfx___sys_sendto+0x10/0x10 [ 107.940971][ T6515] ? ksys_write+0x1ad/0x260 [ 107.941488][ T39] audit: type=1400 audit(1729549109.864:377): avc: denied { accept } for pid=6516 comm="syz.0.306" lport=43202 faddr=::ffff:100.1.1.0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 107.942166][ T6515] ? __pfx_ksys_write+0x10/0x10 [ 107.948426][ T39] audit: type=1400 audit(1729549109.864:378): avc: denied { getopt } for pid=6516 comm="syz.0.306" lport=43202 faddr=::ffff:100.1.1.0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 107.949306][ T6515] __x64_sys_sendto+0xe0/0x1c0 [ 107.957709][ T6515] ? do_syscall_64+0x91/0x250 [ 107.958932][ T6515] ? lockdep_hardirqs_on+0x7c/0x110 [ 107.960255][ T6515] do_syscall_64+0xcd/0x250 [ 107.961477][ T6515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.962991][ T5403] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 107.963113][ T6515] RIP: 0033:0x7ff07017dff9 [ 107.966294][ T6515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.971312][ T6515] RSP: 002b:00007ff070f64038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 107.973538][ T6515] RAX: ffffffffffffffda RBX: 00007ff070335f80 RCX: 00007ff07017dff9 [ 107.975612][ T6515] RDX: 0000000000000078 RSI: 00000000200007c0 RDI: 0000000000000003 [ 107.977689][ T6515] RBP: 00007ff070f64090 R08: 0000000000000000 R09: 0000000000000000 [ 107.979765][ T6515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 107.981844][ T6515] R13: 0000000000000000 R14: 00007ff070335f80 R15: 00007fff9d19c1d8 [ 107.983917][ T6515] [ 108.013267][ T39] audit: type=1400 audit(1729549109.944:379): avc: denied { ioctl } for pid=6521 comm="syz.1.308" path="/dev/nullb0" dev="devtmpfs" ino=691 ioctlcmd=0x6405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 108.020343][ T39] audit: type=1400 audit(1729549109.944:380): avc: denied { setopt } for pid=6521 comm="syz.1.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 108.041529][ T39] audit: type=1400 audit(1729549109.964:381): avc: denied { mount } for pid=6524 comm="syz.3.309" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 108.048048][ T39] audit: type=1400 audit(1729549109.964:382): avc: denied { remount } for pid=6524 comm="syz.3.309" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 108.069341][ T39] audit: type=1400 audit(1729549109.994:383): avc: denied { setcurrent } for pid=6521 comm="syz.1.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 108.115628][ T5403] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.118313][ T5403] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 108.120598][ T5403] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 108.123036][ T5403] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.127031][ T5403] usb 7-1: config 0 descriptor?? [ 108.129741][ T5403] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 108.131651][ T5403] dvb-usb: bulk message failed: -22 (3/0) [ 108.136497][ T5403] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 108.139045][ T5403] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 108.141006][ T5403] usb 7-1: media controller created [ 108.143416][ T5403] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 108.149535][ T5403] dvb-usb: bulk message failed: -22 (6/0) [ 108.154059][ T5403] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 108.157654][ T5403] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb7/7-1/input/input9 [ 108.163027][ T5403] dvb-usb: schedule remote query interval to 150 msecs. [ 108.164818][ T5403] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 108.237919][ T6529] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 108.242727][ T6529] syzkaller0: entered promiscuous mode [ 108.244277][ T6529] syzkaller0: entered allmulticast mode [ 108.324809][ T5403] dvb-usb: bulk message failed: -22 (1/0) [ 108.326449][ T5403] dvb-usb: error while querying for an remote control event. [ 108.330306][ T6505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.336193][ T6505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.485747][ T5403] dvb-usb: bulk message failed: -22 (1/0) [ 108.487286][ T5403] dvb-usb: error while querying for an remote control event. [ 108.655774][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 108.657320][ T25] dvb-usb: error while querying for an remote control event. [ 108.814753][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 108.816794][ T25] dvb-usb: error while querying for an remote control event. [ 108.985539][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 108.991229][ T25] dvb-usb: error while querying for an remote control event. [ 109.155994][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 109.158097][ T25] dvb-usb: error while querying for an remote control event. [ 109.324931][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 109.329915][ T25] dvb-usb: error while querying for an remote control event. [ 109.502972][ T5403] dvb-usb: bulk message failed: -22 (1/0) [ 109.508664][ T5403] dvb-usb: error while querying for an remote control event. [ 109.673985][ T5403] dvb-usb: bulk message failed: -22 (1/0) [ 109.676065][ T5403] dvb-usb: error while querying for an remote control event. [ 109.835685][ T5403] dvb-usb: bulk message failed: -22 (1/0) [ 109.837253][ T5403] dvb-usb: error while querying for an remote control event. [ 109.840041][ T6548] Zero length message leads to an empty skb [ 109.985731][ T6552] netlink: 16126 bytes leftover after parsing attributes in process `syz.1.316'. [ 109.995729][ T6552] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.316'. [ 110.005857][ T5403] dvb-usb: bulk message failed: -22 (1/0) [ 110.007401][ T5403] dvb-usb: error while querying for an remote control event. [ 110.064853][ T6550] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 110.163833][ T5403] dvb-usb: bulk message failed: -22 (1/0) [ 110.165908][ T5403] dvb-usb: error while querying for an remote control event. [ 110.323940][ T5403] dvb-usb: bulk message failed: -22 (1/0) [ 110.325559][ T5403] dvb-usb: error while querying for an remote control event. [ 110.482971][ T5403] dvb-usb: bulk message failed: -22 (1/0) [ 110.484558][ T5403] dvb-usb: error while querying for an remote control event. [ 110.643495][ T5403] dvb-usb: bulk message failed: -22 (1/0) [ 110.645646][ T5403] dvb-usb: error while querying for an remote control event. [ 110.721923][ T983] usb 7-1: USB disconnect, device number 2 [ 110.726406][ T5357] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 110.728706][ T5357] Bluetooth: hci0: Injecting HCI hardware error event [ 110.731957][ T5357] Bluetooth: hci0: hardware error 0x00 [ 110.765253][ T983] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 110.948018][ T6564] xt_CT: You must specify a L4 protocol and not use inversions on it [ 111.142272][ T6571] lo speed is unknown, defaulting to 1000 [ 111.291338][ T6582] fuse: Bad value for 'fd' [ 111.379673][ T6587] tmpfs: Bad value for 'mpol' [ 112.168306][ T6614] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 112.255266][ T6614] syzkaller0: entered promiscuous mode [ 112.256718][ T6614] syzkaller0: entered allmulticast mode [ 112.419255][ T6619] xt_CT: You must specify a L4 protocol and not use inversions on it [ 112.798286][ T5357] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 114.221345][ T39] kauditd_printk_skb: 6 callbacks suppressed [ 114.221356][ T39] audit: type=1400 audit(1729549116.144:390): avc: denied { call } for pid=6651 comm="syz.3.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 114.225897][ T6652] binder: 6651:6652 ioctl c0189378 0 returned -22 [ 114.323322][ T39] audit: type=1400 audit(1729549116.254:391): avc: denied { create } for pid=6649 comm="syz.2.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 114.328314][ T39] audit: type=1400 audit(1729549116.254:392): avc: denied { setopt } for pid=6649 comm="syz.2.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 114.629323][ T6652] syz.3.345 (6652): drop_caches: 2 [ 114.713903][ T6664] netlink: 'syz.0.348': attribute type 4 has an invalid length. [ 114.894786][ T39] audit: type=1400 audit(1729549116.824:393): avc: denied { ioctl } for pid=6678 comm="syz.0.354" path="/dev/rtc0" dev="devtmpfs" ino=865 ioctlcmd=0x700c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 114.912661][ T6679] bond_slave_0: entered promiscuous mode [ 114.914515][ T6679] bond_slave_1: entered promiscuous mode [ 114.922590][ T6678] bond_slave_0: left promiscuous mode [ 114.924280][ T6678] bond_slave_1: left promiscuous mode [ 115.921230][ T39] audit: type=1400 audit(1729549117.844:394): avc: denied { search } for pid=5055 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 115.980932][ T6707] netlink: 12 bytes leftover after parsing attributes in process `syz.0.363'. [ 115.997048][ T6707] 8021q: adding VLAN 0 to HW filter on device bond2 [ 115.999974][ T6707] bond1: (slave bond2): Enslaving as an active interface with an up link [ 116.024374][ T39] audit: type=1400 audit(1729549117.954:395): avc: denied { ioctl } for pid=6710 comm="syz.0.364" path="socket:[15897]" dev="sockfs" ino=15897 ioctlcmd=0xf504 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 116.037441][ T39] audit: type=1400 audit(1729549117.964:396): avc: denied { write } for pid=6710 comm="syz.0.364" lport=17 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 116.765327][ T39] audit: type=1400 audit(1729549118.694:397): avc: denied { ioctl } for pid=6720 comm="syz.3.367" path="socket:[14631]" dev="sockfs" ino=14631 ioctlcmd=0xb100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 116.771662][ T39] audit: type=1400 audit(1729549118.694:398): avc: denied { getopt } for pid=6720 comm="syz.3.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 116.773018][ T6721] bond0: entered promiscuous mode [ 116.778078][ T6721] bond_slave_0: entered promiscuous mode [ 116.779668][ T6721] bond_slave_1: entered promiscuous mode [ 116.841432][ T6724] CIFS: VFS: Malformed UNC in devname [ 116.897642][ T39] audit: type=1400 audit(1729549118.824:399): avc: denied { shutdown } for pid=6723 comm="syz.3.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 117.164666][ T6737] netlink: 8 bytes leftover after parsing attributes in process `syz.3.373'. [ 117.918180][ T6754] sg_write: data in/out 655360/1 bytes for SCSI command 0xf2-- guessing data in; [ 117.918180][ T6754] program syz.2.378 not setting count and/or reply_len properly [ 120.439093][ T6802] xt_CT: You must specify a L4 protocol and not use inversions on it [ 120.525722][ T39] kauditd_printk_skb: 4 callbacks suppressed [ 120.525733][ T39] audit: type=1400 audit(1729549122.454:404): avc: denied { read write } for pid=6803 comm="syz.1.393" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 120.536194][ T39] audit: type=1400 audit(1729549122.454:405): avc: denied { open } for pid=6803 comm="syz.1.393" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 120.545132][ T39] audit: type=1400 audit(1729549122.474:406): avc: denied { ioctl } for pid=6803 comm="syz.1.393" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 120.571975][ T6806] FAULT_INJECTION: forcing a failure. [ 120.571975][ T6806] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 120.577112][ T6806] CPU: 3 UID: 0 PID: 6806 Comm: syz.1.394 Not tainted 6.12.0-rc4-syzkaller #0 [ 120.579446][ T6806] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 120.582382][ T6806] Call Trace: [ 120.583426][ T6806] [ 120.584340][ T6806] dump_stack_lvl+0x16c/0x1f0 [ 120.585619][ T6806] should_fail_ex+0x497/0x5b0 [ 120.587016][ T6806] _copy_from_user+0x30/0xf0 [ 120.588431][ T6806] copy_msghdr_from_user+0x99/0x160 [ 120.590183][ T6806] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 120.592134][ T6806] ? hlock_class+0x4e/0x130 [ 120.593353][ T6806] ? __lock_acquire+0x163e/0x3ce0 [ 120.594607][ T6806] ___sys_sendmsg+0xff/0x1e0 [ 120.595729][ T6806] ? __pfx____sys_sendmsg+0x10/0x10 [ 120.596995][ T6806] ? __pfx___lock_acquire+0x10/0x10 [ 120.598299][ T6806] ? __pfx___might_resched+0x10/0x10 [ 120.599619][ T6806] ? __might_fault+0xe3/0x190 [ 120.600807][ T6806] __sys_sendmmsg+0x1a1/0x450 [ 120.602052][ T6806] ? __pfx___sys_sendmmsg+0x10/0x10 [ 120.603412][ T6806] ? vfs_write+0x14d/0x1140 [ 120.604579][ T6806] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 120.606128][ T6806] ? fput+0x30/0x390 [ 120.607129][ T6806] ? ksys_write+0x1ad/0x260 [ 120.608326][ T6806] ? __pfx_ksys_write+0x10/0x10 [ 120.609631][ T6806] __x64_sys_sendmmsg+0x9c/0x100 [ 120.610938][ T6806] ? lockdep_hardirqs_on+0x7c/0x110 [ 120.612307][ T6806] do_syscall_64+0xcd/0x250 [ 120.613537][ T6806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.615097][ T6806] RIP: 0033:0x7ff07017dff9 [ 120.616270][ T6806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.621476][ T6806] RSP: 002b:00007ff070f64038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 120.624308][ T6806] RAX: ffffffffffffffda RBX: 00007ff070335f80 RCX: 00007ff07017dff9 [ 120.626358][ T6806] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000006 [ 120.628476][ T6806] RBP: 00007ff070f64090 R08: 0000000000000000 R09: 0000000000000000 [ 120.630507][ T6806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 120.632528][ T6806] R13: 0000000000000000 R14: 00007ff070335f80 R15: 00007fff9d19c1d8 [ 120.634515][ T6806] [ 121.705380][ T6828] netlink: 'syz.3.401': attribute type 1 has an invalid length. [ 121.718489][ T6828] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 121.723324][ T12] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 121.723343][ T6828] 8021q: adding VLAN 0 to HW filter on device bond1 [ 121.804873][ T6835] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 121.807343][ T6835] overlayfs: failed to set xattr on upper [ 121.809304][ T6835] overlayfs: ...falling back to redirect_dir=nofollow. [ 121.811650][ T6835] overlayfs: ...falling back to index=off. [ 121.813866][ T6835] overlayfs: ...falling back to uuid=null. [ 121.835464][ T12] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 122.107807][ T6844] vlan2: entered allmulticast mode [ 122.109644][ T6844] bond0: entered allmulticast mode [ 122.110999][ T6844] bond_slave_0: entered allmulticast mode [ 122.112462][ T6844] bond_slave_1: entered allmulticast mode [ 122.119257][ T6844] bond0: left allmulticast mode [ 122.120727][ T6844] bond_slave_0: left allmulticast mode [ 122.122151][ T6844] bond_slave_1: left allmulticast mode [ 122.649492][ T6849] xt_CT: You must specify a L4 protocol and not use inversions on it [ 122.779562][ T39] audit: type=1400 audit(1729549124.704:407): avc: denied { connect } for pid=6852 comm="syz.3.407" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 122.793152][ T39] audit: type=1400 audit(1729549124.724:408): avc: denied { read } for pid=6852 comm="syz.3.407" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 122.800344][ T39] audit: type=1400 audit(1729549124.724:409): avc: denied { open } for pid=6852 comm="syz.3.407" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 122.850653][ T6854] omfs: Invalid superblock (0) [ 123.612282][ T6853] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 123.615329][ T6853] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 123.626610][ T6853] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 123.632377][ T6853] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 123.637264][ T6853] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 123.640710][ T6853] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 123.643781][ T6853] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 123.645562][ T6853] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 123.647956][ T6853] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 123.650231][ T6853] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 123.652024][ T6853] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 123.656696][ T6853] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 123.688966][ T6860] input: syz0 as /devices/virtual/input/input10 [ 123.810882][ T6862] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.409'. [ 123.852387][ T39] audit: type=1400 audit(1729549125.774:410): avc: denied { read } for pid=6865 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.858325][ T39] audit: type=1400 audit(1729549125.774:411): avc: denied { open } for pid=6865 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.864641][ T39] audit: type=1400 audit(1729549125.774:412): avc: denied { getattr } for pid=6865 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.871377][ T39] audit: type=1400 audit(1729549125.784:413): avc: denied { write } for pid=6864 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1481 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 124.339765][ T6875] sctp: [Deprecated]: syz.2.412 (pid 6875) Use of int in max_burst socket option. [ 124.339765][ T6875] Use struct sctp_assoc_value instead [ 124.345088][ T6876] x_tables: duplicate underflow at hook 1 [ 124.962940][ T5357] Bluetooth: hci1: command 0x0c1a tx timeout [ 125.541463][ T6910] xt_CT: You must specify a L4 protocol and not use inversions on it [ 125.672939][ T5357] Bluetooth: hci4: command 0x0c1a tx timeout [ 125.673040][ T5348] Bluetooth: hci2: command 0x0c1a tx timeout [ 125.680444][ T5345] Bluetooth: hci3: command 0x0c1a tx timeout [ 125.877208][ T5345] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 125.884179][ T5345] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 126.265253][ T39] kauditd_printk_skb: 3 callbacks suppressed [ 126.265265][ T39] audit: type=1400 audit(1729549128.194:417): avc: denied { map } for pid=6929 comm="syz.1.427" path="socket:[16661]" dev="sockfs" ino=16661 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 126.271114][ T6930] overlay: ./bus is not a directory [ 126.273162][ T39] audit: type=1400 audit(1729549128.194:418): avc: denied { read } for pid=6929 comm="syz.1.427" path="socket:[16661]" dev="sockfs" ino=16661 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 126.324663][ T6932] FAULT_INJECTION: forcing a failure. [ 126.324663][ T6932] name failslab, interval 1, probability 0, space 0, times 0 [ 126.328859][ T6932] CPU: 0 UID: 0 PID: 6932 Comm: syz.0.426 Not tainted 6.12.0-rc4-syzkaller #0 [ 126.331592][ T6932] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 126.334581][ T6932] Call Trace: [ 126.335511][ T6932] [ 126.336334][ T6932] dump_stack_lvl+0x16c/0x1f0 [ 126.337666][ T6932] should_fail_ex+0x497/0x5b0 [ 126.339141][ T6932] ? fs_reclaim_acquire+0xae/0x150 [ 126.341051][ T6932] should_failslab+0xc2/0x120 [ 126.342811][ T6932] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 126.344807][ T6932] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 126.347085][ T6932] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 126.349137][ T6932] mmu_topup_memory_caches+0x22/0xd0 [ 126.350544][ T6932] kvm_mmu_load+0xda/0x20d0 [ 126.351752][ T6932] ? mark_held_locks+0x9f/0xe0 [ 126.353039][ T6932] ? kvm_apic_has_interrupt+0xb6/0x190 [ 126.354528][ T6932] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 126.356058][ T6932] ? kvm_guest_time_update+0x780/0xeb0 [ 126.357517][ T6932] ? kvm_deliver_exception_payload+0x47/0x200 [ 126.359232][ T6932] ? __pfx_kvm_mmu_load+0x10/0x10 [ 126.360595][ T6932] ? kvm_cpu_has_injectable_intr+0x9b/0x1a0 [ 126.362177][ T6932] ? kvm_check_and_inject_events+0x57f/0x12e0 [ 126.363797][ T6932] vcpu_run+0x337c/0x4f80 [ 126.364955][ T6932] ? __pfx_vmx_vcpu_load_vmcs+0x10/0x10 [ 126.366442][ T6932] ? __pfx_vcpu_run+0x10/0x10 [ 126.367706][ T6932] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 126.369287][ T6932] ? rcu_is_watching+0x12/0xc0 [ 126.370567][ T6932] ? trace_lock_acquire+0x14a/0x1d0 [ 126.372012][ T6932] ? __local_bh_enable_ip+0xa4/0x120 [ 126.373495][ T6932] ? kvm_arch_vcpu_ioctl_run+0x14d/0x1730 [ 126.375029][ T6932] ? kvm_arch_vcpu_ioctl_run+0x447/0x1730 [ 126.376554][ T6932] kvm_arch_vcpu_ioctl_run+0x447/0x1730 [ 126.378062][ T6932] kvm_vcpu_ioctl+0x6c7/0x1510 [ 126.379368][ T6932] ? do_vfs_ioctl+0x513/0x1990 [ 126.380666][ T6932] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 126.382104][ T6932] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 126.383828][ T6932] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 126.385645][ T6932] ? trace_lock_acquire+0x14a/0x1d0 [ 126.387074][ T6932] ? selinux_file_ioctl+0x180/0x270 [ 126.388740][ T6932] ? selinux_file_ioctl+0xb4/0x270 [ 126.390244][ T6932] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 126.391649][ T6932] __x64_sys_ioctl+0x18f/0x220 [ 126.392924][ T6932] do_syscall_64+0xcd/0x250 [ 126.394097][ T6932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.395639][ T6932] RIP: 0033:0x7fbf08d7dff9 [ 126.396770][ T6932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.401866][ T6932] RSP: 002b:00007fbf09b60038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 126.404098][ T6932] RAX: ffffffffffffffda RBX: 00007fbf08f35f80 RCX: 00007fbf08d7dff9 [ 126.406186][ T6932] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 126.408133][ T6932] RBP: 00007fbf09b60090 R08: 0000000000000000 R09: 0000000000000000 [ 126.410340][ T6932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 126.412433][ T6932] R13: 0000000000000000 R14: 00007fbf08f35f80 R15: 00007ffd5b272c28 [ 126.414563][ T6932] [ 127.032927][ T5345] Bluetooth: hci1: command 0x0c1a tx timeout [ 127.415210][ T39] audit: type=1400 audit(1729549129.344:419): avc: denied { read } for pid=6951 comm="syz.0.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 127.753086][ T5345] Bluetooth: hci3: command 0x0c1a tx timeout [ 127.753145][ T5348] Bluetooth: hci4: command 0x0c1a tx timeout [ 127.753175][ T5357] Bluetooth: hci2: command 0x0c1a tx timeout [ 128.220048][ T6956] xt_CT: You must specify a L4 protocol and not use inversions on it [ 129.114193][ T5348] Bluetooth: hci1: command 0x0c1a tx timeout [ 129.832980][ T5348] Bluetooth: hci3: command 0x0c1a tx timeout [ 129.842916][ T5348] Bluetooth: hci2: command 0x0c1a tx timeout [ 129.845908][ T5348] Bluetooth: hci4: command 0x0c1a tx timeout [ 130.275154][ T7000] xt_CT: You must specify a L4 protocol and not use inversions on it [ 131.148342][ T7010] netlink: 'syz.1.448': attribute type 11 has an invalid length. [ 131.160916][ T7010] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=7010 comm=syz.1.448 [ 131.296051][ T7012] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 131.303610][ T7012] syzkaller0: entered promiscuous mode [ 131.305614][ T7012] syzkaller0: entered allmulticast mode [ 132.380233][ T7017] FAULT_INJECTION: forcing a failure. [ 132.380233][ T7017] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 132.384093][ T7017] CPU: 1 UID: 0 PID: 7017 Comm: syz.1.451 Not tainted 6.12.0-rc4-syzkaller #0 [ 132.386579][ T7017] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 132.389416][ T7017] Call Trace: [ 132.390306][ T7017] [ 132.391094][ T7017] dump_stack_lvl+0x16c/0x1f0 [ 132.392404][ T7017] should_fail_ex+0x497/0x5b0 [ 132.394126][ T7017] _copy_to_user+0x30/0xc0 [ 132.395672][ T7017] simple_read_from_buffer+0xd0/0x160 [ 132.397451][ T7017] proc_fail_nth_read+0x198/0x270 [ 132.399203][ T7017] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 132.401144][ T7017] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 132.403001][ T7017] vfs_read+0x1ce/0xbd0 [ 132.404429][ T7017] ? __fget_files+0x23a/0x3f0 [ 132.406036][ T7017] ? fdget_pos+0x24c/0x360 [ 132.407546][ T7017] ? __pfx_lock_release+0x10/0x10 [ 132.409195][ T7017] ? trace_lock_acquire+0x14a/0x1d0 [ 132.411110][ T7017] ? __pfx_vfs_read+0x10/0x10 [ 132.412844][ T7017] ? __pfx___mutex_lock+0x10/0x10 [ 132.414603][ T7017] ? __fget_files+0x244/0x3f0 [ 132.416304][ T7017] ksys_read+0x12f/0x260 [ 132.417878][ T7017] ? __pfx_ksys_read+0x10/0x10 [ 132.419616][ T7017] do_syscall_64+0xcd/0x250 [ 132.421191][ T7017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.422720][ T7017] RIP: 0033:0x7ff07017ca3c [ 132.423860][ T7017] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 132.428764][ T7017] RSP: 002b:00007ff070f64030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 132.430865][ T7017] RAX: ffffffffffffffda RBX: 00007ff070335f80 RCX: 00007ff07017ca3c [ 132.432844][ T7017] RDX: 000000000000000f RSI: 00007ff070f640a0 RDI: 0000000000000004 [ 132.434858][ T7017] RBP: 00007ff070f64090 R08: 0000000000000000 R09: 0000000000000000 [ 132.436926][ T7017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 132.438999][ T7017] R13: 0000000000000000 R14: 00007ff070335f80 R15: 00007fff9d19c1d8 [ 132.441077][ T7017] [ 132.474872][ T1379] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.476546][ T1379] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.037932][ T39] audit: type=1400 audit(1729549134.964:420): avc: denied { append } for pid=7033 comm="syz.2.456" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 133.078314][ T7037] netlink: 'syz.3.455': attribute type 4 has an invalid length. [ 133.086140][ T5346] lo speed is unknown, defaulting to 1000 [ 133.596526][ T7044] xt_CT: You must specify a L4 protocol and not use inversions on it [ 134.311924][ T7054] syzkaller0: entered promiscuous mode [ 134.316244][ T7054] syzkaller0: entered allmulticast mode [ 135.826451][ T39] audit: type=1400 audit(1729549137.754:421): avc: denied { write } for pid=7075 comm="syz.2.467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 135.892475][ T39] audit: type=1400 audit(1729549137.814:422): avc: denied { connect } for pid=7075 comm="syz.2.467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 135.899596][ T39] audit: type=1400 audit(1729549137.824:423): avc: denied { append } for pid=7075 comm="syz.2.467" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 136.765697][ T39] audit: type=1400 audit(1729549138.694:424): avc: denied { create } for pid=7084 comm="syz.0.469" name="cgroup.events" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 136.832748][ T39] audit: type=1400 audit(1729549138.754:425): avc: denied { write } for pid=7091 comm="syz.2.471" name="igmp" dev="proc" ino=4026533794 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 136.858763][ T5345] Bluetooth: hci4: unexpected event for opcode 0x0405 [ 137.582274][ T7103] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 137.586589][ T7103] syzkaller0: entered promiscuous mode [ 137.588041][ T7103] syzkaller0: entered allmulticast mode [ 138.429448][ T39] audit: type=1400 audit(1729549140.354:426): avc: denied { block_suspend } for pid=7118 comm="syz.0.478" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 138.801486][ T7133] xt_CT: You must specify a L4 protocol and not use inversions on it [ 138.942544][ T39] audit: type=1400 audit(1729549140.864:427): avc: denied { validate_trans } for pid=7131 comm="syz.0.482" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 139.152410][ T39] audit: type=1400 audit(1729549141.074:428): avc: denied { open } for pid=7139 comm="syz.2.484" path="/dev/ptyq8" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 139.160891][ T39] audit: type=1400 audit(1729549141.084:429): avc: denied { ioctl } for pid=7139 comm="syz.2.484" path="/dev/ptyq8" dev="devtmpfs" ino=135 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 139.236058][ T39] audit: type=1400 audit(1729549141.164:430): avc: denied { create } for pid=7137 comm="syz.1.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 139.242601][ T39] audit: type=1400 audit(1729549141.164:431): avc: denied { ioctl } for pid=7137 comm="syz.1.483" path="socket:[17869]" dev="sockfs" ino=17869 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 139.511861][ T7162] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 139.516642][ T7162] syzkaller0: entered promiscuous mode [ 139.518113][ T7162] syzkaller0: entered allmulticast mode [ 140.805647][ T7184] netlink: 'syz.0.497': attribute type 11 has an invalid length. [ 140.850593][ T7186] 9pnet_fd: Insufficient options for proto=fd [ 140.884115][ T5345] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 140.886472][ T5345] Bluetooth: hci4: Injecting HCI hardware error event [ 140.889162][ T5345] Bluetooth: hci4: hardware error 0x00 [ 141.437456][ T39] audit: type=1400 audit(1729549143.364:432): avc: denied { ioctl } for pid=7200 comm="syz.2.504" path="socket:[16893]" dev="sockfs" ino=16893 ioctlcmd=0x9409 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 141.445503][ T39] audit: type=1400 audit(1729549143.364:433): avc: denied { execute } for pid=7200 comm="syz.2.504" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=16894 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 141.460241][ T39] audit: type=1400 audit(1729549143.384:434): avc: denied { setattr } for pid=7197 comm="syz.3.503" name="tun" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 141.466837][ T39] audit: type=1400 audit(1729549143.394:435): avc: denied { setattr } for pid=7197 comm="syz.3.503" name="ptyqb" dev="devtmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 142.317136][ T7213] FAULT_INJECTION: forcing a failure. [ 142.317136][ T7213] name failslab, interval 1, probability 0, space 0, times 0 [ 142.320543][ T7213] CPU: 2 UID: 0 PID: 7213 Comm: syz.1.508 Not tainted 6.12.0-rc4-syzkaller #0 [ 142.322863][ T7213] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 142.325828][ T7213] Call Trace: [ 142.326634][ T7213] [ 142.327421][ T7213] dump_stack_lvl+0x16c/0x1f0 [ 142.328708][ T7213] should_fail_ex+0x497/0x5b0 [ 142.329980][ T7213] ? fs_reclaim_acquire+0xae/0x150 [ 142.331330][ T7213] should_failslab+0xc2/0x120 [ 142.332634][ T7213] kmem_cache_alloc_node_noprof+0x71/0x310 [ 142.334180][ T7213] ? alloc_vmap_area+0x636/0x2a70 [ 142.335512][ T7213] alloc_vmap_area+0x636/0x2a70 [ 142.336806][ T7213] ? __pfx_alloc_vmap_area+0x10/0x10 [ 142.338258][ T7213] __get_vm_area_node+0x17e/0x2d0 [ 142.339735][ T7213] __vmalloc_node_range_noprof+0x26a/0x15a0 [ 142.341301][ T7213] ? bpf_prog_calc_tag+0x108/0x720 [ 142.342648][ T7213] ? arch_stack_walk+0xa7/0x100 [ 142.343935][ T7213] ? bpf_prog_calc_tag+0x108/0x720 [ 142.345265][ T7213] ? __pfx_stack_trace_save+0x10/0x10 [ 142.346699][ T7213] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 142.348359][ T7213] ? kasan_save_stack+0x42/0x60 [ 142.349672][ T7213] ? kasan_save_stack+0x33/0x60 [ 142.350963][ T7213] ? kasan_save_track+0x14/0x30 [ 142.352316][ T7213] ? bpf_prog_calc_tag+0x108/0x720 [ 142.353712][ T7213] vmalloc_noprof+0x6b/0x90 [ 142.354915][ T7213] ? bpf_prog_calc_tag+0x108/0x720 [ 142.356270][ T7213] bpf_prog_calc_tag+0x108/0x720 [ 142.357598][ T7213] ? __pfx_bpf_prog_calc_tag+0x10/0x10 [ 142.359055][ T7213] ? __pfx_add_subprog+0x10/0x10 [ 142.360402][ T7213] ? add_subprog_and_kfunc+0x5e5/0x1b90 [ 142.361860][ T7213] resolve_pseudo_ldimm64+0xcd/0x2950 [ 142.363262][ T7213] ? __pfx_add_subprog_and_kfunc+0x10/0x10 [ 142.364781][ T7213] ? __pfx_resolve_pseudo_ldimm64+0x10/0x10 [ 142.366380][ T7213] ? trace_kmalloc+0x2d/0xe0 [ 142.367621][ T7213] ? __kmalloc_node_noprof+0x22f/0x430 [ 142.369102][ T7213] ? security_capable+0x41/0x260 [ 142.370411][ T7213] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 142.371847][ T7213] bpf_check+0x6e0f/0xb430 [ 142.373107][ T7213] ? kasan_save_stack+0x42/0x60 [ 142.374396][ T7213] ? __pfx_bpf_check+0x10/0x10 [ 142.375674][ T7213] ? __kasan_kmalloc+0xaa/0xb0 [ 142.376944][ T7213] ? selinux_bpf_prog_load+0x15f/0x1c0 [ 142.378407][ T7213] bpf_prog_load+0xedb/0x2660 [ 142.379647][ T7213] ? __pfx_bpf_prog_load+0x10/0x10 [ 142.380997][ T7213] ? avc_has_perm_noaudit+0x143/0x3a0 [ 142.382414][ T7213] ? selinux_bpf+0xde/0x130 [ 142.383862][ T7213] __sys_bpf+0x402b/0x49a0 [ 142.385059][ T7213] ? ksys_write+0x21e/0x260 [ 142.386276][ T7213] ? reacquire_held_locks+0x450/0x4c0 [ 142.387695][ T7213] ? __pfx___sys_bpf+0x10/0x10 [ 142.389205][ T7213] ? vfs_write+0x14d/0x1140 [ 142.390657][ T7213] ? __mutex_unlock_slowpath+0x164/0x650 [ 142.392142][ T7213] ? fput+0x30/0x390 [ 142.393405][ T7213] ? ksys_write+0x1ad/0x260 [ 142.394623][ T7213] ? __pfx_ksys_write+0x10/0x10 [ 142.395936][ T7213] __x64_sys_bpf+0x78/0xc0 [ 142.397148][ T7213] ? lockdep_hardirqs_on+0x7c/0x110 [ 142.398536][ T7213] do_syscall_64+0xcd/0x250 [ 142.399757][ T7213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.401333][ T7213] RIP: 0033:0x7ff07017dff9 [ 142.402526][ T7213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.407535][ T7213] RSP: 002b:00007ff070f64038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 142.409728][ T7213] RAX: ffffffffffffffda RBX: 00007ff070335f80 RCX: 00007ff07017dff9 [ 142.411797][ T7213] RDX: 0000000000000094 RSI: 0000000020000040 RDI: 0000000000000005 [ 142.413894][ T7213] RBP: 00007ff070f64090 R08: 0000000000000000 R09: 0000000000000000 [ 142.415991][ T7213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 142.418083][ T7213] R13: 0000000000000000 R14: 00007ff070335f80 R15: 00007fff9d19c1d8 [ 142.420169][ T7213] [ 142.422527][ T7213] syz.1.508: vmalloc error: size 64, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 142.427023][ T7213] CPU: 0 UID: 0 PID: 7213 Comm: syz.1.508 Not tainted 6.12.0-rc4-syzkaller #0 [ 142.429450][ T7213] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 142.432237][ T7213] Call Trace: [ 142.433190][ T7213] [ 142.433976][ T7213] dump_stack_lvl+0x16c/0x1f0 [ 142.435229][ T7213] warn_alloc+0x24d/0x3a0 [ 142.436377][ T7213] ? __pfx_warn_alloc+0x10/0x10 [ 142.437686][ T7213] ? kfree+0x14f/0x4b0 [ 142.438793][ T7213] ? __get_vm_area_node+0x1bc/0x2d0 [ 142.440164][ T7213] __vmalloc_node_range_noprof+0xd27/0x15a0 [ 142.441733][ T7213] ? arch_stack_walk+0xa7/0x100 [ 142.443026][ T7213] ? bpf_prog_calc_tag+0x108/0x720 [ 142.444377][ T7213] ? __pfx_stack_trace_save+0x10/0x10 [ 142.445801][ T7213] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 142.447460][ T7213] ? kasan_save_stack+0x42/0x60 [ 142.448848][ T7213] ? kasan_save_stack+0x33/0x60 [ 142.450144][ T7213] ? kasan_save_track+0x14/0x30 [ 142.451429][ T7213] ? bpf_prog_calc_tag+0x108/0x720 [ 142.452799][ T7213] vmalloc_noprof+0x6b/0x90 [ 142.454023][ T7213] ? bpf_prog_calc_tag+0x108/0x720 [ 142.455402][ T7213] bpf_prog_calc_tag+0x108/0x720 [ 142.456717][ T7213] ? __pfx_bpf_prog_calc_tag+0x10/0x10 [ 142.458160][ T7213] ? __pfx_add_subprog+0x10/0x10 [ 142.459470][ T7213] ? add_subprog_and_kfunc+0x5e5/0x1b90 [ 142.460933][ T7213] resolve_pseudo_ldimm64+0xcd/0x2950 [ 142.462345][ T7213] ? __pfx_add_subprog_and_kfunc+0x10/0x10 [ 142.463908][ T7213] ? __pfx_resolve_pseudo_ldimm64+0x10/0x10 [ 142.465573][ T7213] ? trace_kmalloc+0x2d/0xe0 [ 142.466804][ T7213] ? __kmalloc_node_noprof+0x22f/0x430 [ 142.468240][ T7213] ? security_capable+0x41/0x260 [ 142.470013][ T7213] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 142.472018][ T7213] bpf_check+0x6e0f/0xb430 [ 142.473615][ T7213] ? kasan_save_stack+0x42/0x60 [ 142.474906][ T7213] ? __pfx_bpf_check+0x10/0x10 [ 142.476185][ T7213] ? __kasan_kmalloc+0xaa/0xb0 [ 142.477468][ T7213] ? selinux_bpf_prog_load+0x15f/0x1c0 [ 142.479120][ T7213] bpf_prog_load+0xedb/0x2660 [ 142.480869][ T7213] ? __pfx_bpf_prog_load+0x10/0x10 [ 142.482378][ T7213] ? avc_has_perm_noaudit+0x143/0x3a0 [ 142.483810][ T7213] ? selinux_bpf+0xde/0x130 [ 142.485023][ T7213] __sys_bpf+0x402b/0x49a0 [ 142.486207][ T7213] ? ksys_write+0x21e/0x260 [ 142.487421][ T7213] ? reacquire_held_locks+0x450/0x4c0 [ 142.488881][ T7213] ? __pfx___sys_bpf+0x10/0x10 [ 142.490138][ T7213] ? vfs_write+0x14d/0x1140 [ 142.491342][ T7213] ? __mutex_unlock_slowpath+0x164/0x650 [ 142.492853][ T7213] ? fput+0x30/0x390 [ 142.493910][ T7213] ? ksys_write+0x1ad/0x260 [ 142.495115][ T7213] ? __pfx_ksys_write+0x10/0x10 [ 142.496457][ T7213] __x64_sys_bpf+0x78/0xc0 [ 142.497651][ T7213] ? lockdep_hardirqs_on+0x7c/0x110 [ 142.499094][ T7213] do_syscall_64+0xcd/0x250 [ 142.500303][ T7213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.501866][ T7213] RIP: 0033:0x7ff07017dff9 [ 142.503046][ T7213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.508049][ T7213] RSP: 002b:00007ff070f64038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 142.510253][ T7213] RAX: ffffffffffffffda RBX: 00007ff070335f80 RCX: 00007ff07017dff9 [ 142.512314][ T7213] RDX: 0000000000000094 RSI: 0000000020000040 RDI: 0000000000000005 [ 142.514411][ T7213] RBP: 00007ff070f64090 R08: 0000000000000000 R09: 0000000000000000 [ 142.516477][ T7213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 142.518578][ T7213] R13: 0000000000000000 R14: 00007ff070335f80 R15: 00007fff9d19c1d8 [ 142.520636][ T7213] [ 142.523957][ T7213] Mem-Info: [ 142.524861][ T7213] active_anon:15970 inactive_anon:0 isolated_anon:0 [ 142.524861][ T7213] active_file:10081 inactive_file:38699 isolated_file:0 [ 142.524861][ T7213] unevictable:1768 dirty:254 writeback:0 [ 142.524861][ T7213] slab_reclaimable:6413 slab_unreclaimable:69863 [ 142.524861][ T7213] mapped:30915 shmem:12930 pagetables:876 [ 142.524861][ T7213] sec_pagetables:310 bounce:0 [ 142.524861][ T7213] kernel_misc_reclaimable:0 [ 142.524861][ T7213] free:484249 free_pcp:2702 free_cma:0 [ 142.538002][ T7213] Node 0 active_anon:63880kB inactive_anon:0kB active_file:40324kB inactive_file:154716kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:123660kB dirty:1012kB writeback:0kB shmem:48184kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11536kB pagetables:3504kB sec_pagetables:1240kB all_unreclaimable? no [ 142.546923][ T7213] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:80kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 142.554974][ T7213] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 142.561847][ T7213] lowmem_reserve[]: 0 1214 0 0 0 [ 142.563232][ T7213] Node 0 DMA32 free:304044kB boost:0kB min:27636kB low:34544kB high:41452kB reserved_highatomic:0KB active_anon:63956kB inactive_anon:0kB active_file:40324kB inactive_file:154716kB unevictable:3536kB writepending:1012kB present:2080628kB managed:1272188kB mlocked:0kB bounce:0kB free_pcp:12536kB local_pcp:4740kB free_cma:0kB [ 142.570871][ T7213] lowmem_reserve[]: 0 0 0 0 0 [ 142.572127][ T7213] Node 1 Normal free:1612796kB boost:0kB min:39600kB low:49500kB high:59400kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:80kB unevictable:3536kB writepending:4kB present:2097152kB managed:1781924kB mlocked:0kB bounce:0kB free_pcp:2548kB local_pcp:2048kB free_cma:0kB [ 142.618724][ T7213] lowmem_reserve[]: 0 0 0 0 0 [ 142.682964][ T7213] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 142.692031][ T7213] Node 0 DMA32: 5*4kB (UE) 161*8kB (UE) 159*16kB (UME) 155*32kB (UE) 167*64kB (UME) 97*128kB (ME) 33*256kB (UME) 21*512kB (UME) 9*1024kB (UM) 7*2048kB (ME) 56*4096kB (UME) = 304044kB [ 142.697055][ T7213] Node 1 Normal: 3*4kB (UME) 12*8kB (UME) 23*16kB (UME) 147*32kB (UME) 77*64kB (UME) 19*128kB (UME) 7*256kB (UE) 10*512kB (UME) 2*1024kB (UE) 3*2048kB (UM) 387*4096kB (M) = 1612796kB [ 142.701908][ T7213] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 142.708018][ T7213] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 142.711139][ T7213] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 142.715379][ T7213] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 142.719151][ T7213] 61732 total pagecache pages [ 142.721451][ T7213] 0 pages in swap cache [ 142.722854][ T7213] Free swap = 124996kB [ 142.724192][ T7213] Total swap = 124996kB [ 142.725803][ T7213] 1048443 pages RAM [ 142.727077][ T7213] 0 pages HighMem/MovableOnly [ 142.728519][ T7213] 281075 pages reserved [ 142.729874][ T7213] 0 pages cma reserved [ 142.952962][ T5345] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 143.330363][ T7233] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 143.334767][ T7233] syzkaller0: entered promiscuous mode [ 143.336220][ T7233] syzkaller0: entered allmulticast mode [ 144.652877][ T39] audit: type=1400 audit(1729549146.574:436): avc: denied { listen } for pid=7253 comm="syz.0.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 144.655807][ T828] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 144.657902][ T39] audit: type=1400 audit(1729549146.574:437): avc: denied { read write } for pid=7253 comm="syz.0.516" name="uhid" dev="devtmpfs" ino=1110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 144.657929][ T39] audit: type=1400 audit(1729549146.574:438): avc: denied { open } for pid=7253 comm="syz.0.516" path="/dev/uhid" dev="devtmpfs" ino=1110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 144.660266][ T828] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 144.680236][ T828] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 144.690446][ T828] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 144.692406][ T828] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 144.695328][ T828] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 144.697773][ T828] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 144.699706][ T828] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 144.701641][ T828] hid-generic 0001:0000:0000.0003: unknown main item tag 0x1 [ 144.703721][ T828] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 144.706170][ T828] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 144.708148][ T828] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 144.708249][ T39] audit: type=1400 audit(1729549146.634:439): avc: denied { create } for pid=7255 comm="syz.1.517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 144.715432][ T828] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 144.720871][ T828] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 144.722982][ T828] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 144.725011][ T828] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 144.726941][ T828] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 144.728875][ T828] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 144.730804][ T828] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 144.732746][ T828] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 144.734904][ T828] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 144.736849][ T828] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 144.738780][ T828] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 144.740709][ T828] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 144.742654][ T828] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 144.744639][ T828] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 144.746567][ T828] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 144.748492][ T828] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 144.750418][ T828] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 144.752336][ T828] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 144.754750][ T828] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 144.757457][ T828] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 144.759450][ T828] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 144.761385][ T828] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 144.763367][ T828] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 144.765299][ T828] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 144.767210][ T828] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 144.769142][ T828] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 144.771065][ T828] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 144.773108][ T828] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 144.775024][ T828] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 144.776988][ T828] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 144.778918][ T828] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 144.780843][ T828] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 144.782763][ T828] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 144.784735][ T828] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 144.786908][ T828] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 144.788863][ T828] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 144.790787][ T828] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 144.792720][ T828] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 144.794749][ T828] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 144.796681][ T828] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 144.798664][ T828] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 144.800591][ T828] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 144.802527][ T828] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 144.804868][ T828] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 144.809728][ T828] hid-generic 0001:0000:0000.0003: hidraw1: HID v0.00 Device [syz0] on syz1 [ 145.963901][ T7256] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 145.965566][ T7256] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 145.969099][ T7256] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 146.921108][ T7294] tmpfs: Bad value for 'mpol' [ 147.993079][ T5348] Bluetooth: hci3: command 0x0c1a tx timeout [ 148.002958][ T5345] Bluetooth: hci2: Opcode 0x206c failed: -110 [ 148.003086][ T5357] Bluetooth: hci1: command 0x0c1a tx timeout [ 148.004711][ T5348] Bluetooth: hci2: command 0x0c1a tx timeout [ 148.866004][ T7308] netlink: 8 bytes leftover after parsing attributes in process `syz.1.528'. [ 149.269115][ T7316] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 149.273613][ T7316] syzkaller0: entered promiscuous mode [ 149.275082][ T7316] syzkaller0: entered allmulticast mode [ 150.073998][ T5345] Bluetooth: hci2: Opcode 0x2046 failed: -110 [ 150.082981][ T5345] Bluetooth: hci2: command 0x0c1a tx timeout [ 150.578998][ T39] audit: type=1400 audit(1729549152.514:440): avc: denied { write } for pid=7336 comm="syz.1.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 150.623608][ T7340] netlink: 'syz.1.538': attribute type 1 has an invalid length. [ 150.625681][ T7340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.538'. [ 151.027238][ T7349] syz.0.541 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 151.053172][ T39] audit: type=1400 audit(1729549152.984:441): avc: denied { write } for pid=7351 comm="syz.0.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 151.202430][ T7356] input: syz0 as /devices/virtual/input/input11 [ 151.204994][ T7356] input: failed to attach handler leds to device input11, error: -6 [ 151.233940][ T39] audit: type=1400 audit(1729549153.164:442): avc: denied { ioctl } for pid=7353 comm="syz.0.543" path="socket:[17114]" dev="sockfs" ino=17114 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 151.993821][ T7369] warning: `syz.2.546' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 152.152994][ T5345] Bluetooth: hci2: command 0x0c1a tx timeout [ 152.233856][ T7377] netlink: 12 bytes leftover after parsing attributes in process `syz.0.548'. [ 152.237209][ T7377] netlink: 24 bytes leftover after parsing attributes in process `syz.0.548'. [ 152.555814][ T39] audit: type=1400 audit(1729549154.474:443): avc: denied { listen } for pid=7382 comm="syz.2.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 152.562182][ T39] audit: type=1400 audit(1729549154.484:444): avc: denied { connect } for pid=7382 comm="syz.2.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 152.783319][ C2] hrtimer: interrupt took 526583 ns [ 152.792423][ T7396] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 152.813139][ T7396] syzkaller0: entered promiscuous mode [ 152.814676][ T7396] syzkaller0: entered allmulticast mode [ 153.048880][ T7400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.555'. [ 153.052428][ T39] audit: type=1400 audit(1729549154.974:445): avc: denied { getopt } for pid=7399 comm="syz.0.555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 154.307631][ T39] audit: type=1400 audit(1729549156.234:446): avc: denied { create } for pid=7415 comm="syz.0.559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 154.313213][ T39] audit: type=1400 audit(1729549156.234:447): avc: denied { bind } for pid=7415 comm="syz.0.559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 154.318374][ T39] audit: type=1400 audit(1729549156.244:448): avc: denied { setopt } for pid=7415 comm="syz.0.559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 154.924522][ T7435] FAULT_INJECTION: forcing a failure. [ 154.924522][ T7435] name failslab, interval 1, probability 0, space 0, times 0 [ 154.927979][ T7435] CPU: 1 UID: 0 PID: 7435 Comm: syz.3.565 Not tainted 6.12.0-rc4-syzkaller #0 [ 154.930278][ T7435] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 154.932971][ T7435] Call Trace: [ 154.933843][ T7435] [ 154.934593][ T7435] dump_stack_lvl+0x16c/0x1f0 [ 154.935789][ T7435] should_fail_ex+0x497/0x5b0 [ 154.936963][ T7435] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 154.938355][ T7435] should_failslab+0xc2/0x120 [ 154.939601][ T7435] __kmalloc_node_track_caller_noprof+0xcf/0x430 [ 154.941278][ T7435] ? sidtab_sid2str_get+0x17a/0x680 [ 154.942648][ T7435] kmemdup_noprof+0x29/0x60 [ 154.943846][ T7435] sidtab_sid2str_get+0x17a/0x680 [ 154.945180][ T7435] sidtab_entry_to_string+0x33/0x110 [ 154.946577][ T7435] security_sid_to_context_core+0x35c/0x640 [ 154.948129][ T7435] avc_audit_post_callback+0x1ac/0x8c0 [ 154.949572][ T7435] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 154.951146][ T7435] ? audit_log_format+0xe9/0x130 [ 154.952471][ T7435] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 154.954050][ T7435] ? skb_put+0x138/0x1b0 [ 154.955174][ T7435] ? audit_log_n_string+0x251/0x540 [ 154.956476][ T7435] ? audit_log_n_untrustedstring+0xf2/0x100 [ 154.958027][ T7435] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 154.959779][ T7435] common_lsm_audit+0x260/0x2210 [ 154.961390][ T7435] ? irqentry_exit+0x3b/0x90 [ 154.962796][ T7435] ? lockdep_hardirqs_on+0x7c/0x110 [ 154.964507][ T7435] ? __pfx_common_lsm_audit+0x10/0x10 [ 154.966246][ T7435] ? preempt_schedule_thunk+0x1a/0x30 [ 154.967895][ T7435] ? preempt_schedule_common+0x44/0xc0 [ 154.969684][ T7435] ? slow_avc_audit+0x17d/0x210 [ 154.971109][ T7435] slow_avc_audit+0x17d/0x210 [ 154.972336][ T7435] ? __pfx_slow_avc_audit+0x10/0x10 [ 154.973982][ T7435] ? avc_denied+0x138/0x180 [ 154.975110][ T7435] ? avc_has_perm_noaudit+0x2f8/0x3a0 [ 154.976445][ T7435] avc_has_perm+0x18d/0x1c0 [ 154.977629][ T7435] ? __pfx_avc_has_perm+0x10/0x10 [ 154.978964][ T7435] security_uring_override_creds+0x1b9/0x1e0 [ 154.980524][ T7435] io_submit_sqes+0xd43/0x2530 [ 154.981813][ T7435] __do_sys_io_uring_enter+0xc0f/0x1170 [ 154.983265][ T7435] ? __pfx___schedule+0x10/0x10 [ 154.984582][ T7435] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 154.986346][ T7435] do_syscall_64+0xcd/0x250 [ 154.987469][ T7435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.989041][ T7435] RIP: 0033:0x7f63adf7dff9 [ 154.990223][ T7435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.996061][ T7435] RSP: 002b:00007f63aecf6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 154.998168][ T7435] RAX: ffffffffffffffda RBX: 00007f63ae136130 RCX: 00007f63adf7dff9 [ 155.000684][ T7435] RDX: 0000000000000000 RSI: 00000000000047f6 RDI: 0000000000000006 [ 155.003221][ T7435] RBP: 00007f63aecf6090 R08: 0000000000000000 R09: 0000000000000000 [ 155.005706][ T7435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 155.007997][ T7435] R13: 0000000000000000 R14: 00007f63ae136130 R15: 00007ffe9bfbc908 [ 155.010117][ T7435] [ 155.011619][ T39] audit: type=1400 audit(1729549156.854:449): avc: denied { override_creds } for pid=7431 comm="syz.3.565" scontext=root:sysadm_r:sysadm_t tsid=147 tclass=io_uring permissive=1 [ 155.336593][ T7442] 9pnet_virtio: no channels available for device syz [ 156.479721][ T7472] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 156.510131][ T7472] syzkaller0: entered promiscuous mode [ 156.511599][ T7472] syzkaller0: entered allmulticast mode [ 158.356892][ T7505] input: syz0 as /devices/virtual/input/input14 [ 158.358736][ T7505] input: failed to attach handler leds to device input14, error: -6 [ 158.408704][ T7502] netlink: 'syz.0.585': attribute type 4 has an invalid length. [ 159.070468][ T7515] 9pnet_virtio: no channels available for device syz [ 159.107130][ T7516] xt_CT: You must specify a L4 protocol and not use inversions on it [ 159.519699][ T7524] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 159.531769][ T7524] syzkaller0: entered promiscuous mode [ 159.533484][ T7524] syzkaller0: entered allmulticast mode [ 159.808850][ T7529] netlink: 'syz.0.591': attribute type 1 has an invalid length. [ 159.841087][ T7529] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 159.849407][ T7529] 8021q: adding VLAN 0 to HW filter on device bond3 [ 159.861664][ T70] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 159.973001][ T12] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 162.992783][ T7568] xt_CT: You must specify a L4 protocol and not use inversions on it [ 166.360393][ T7600] xt_CT: You must specify a L4 protocol and not use inversions on it [ 166.779823][ T7612] netlink: 'syz.1.612': attribute type 10 has an invalid length. [ 166.785682][ T7612] bridge0: port 3(team0) entered blocking state [ 166.788104][ T7612] bridge0: port 3(team0) entered disabled state [ 166.790539][ T7612] team0: entered allmulticast mode [ 166.792411][ T7612] team_slave_0: entered allmulticast mode [ 166.794991][ T7612] team_slave_1: entered allmulticast mode [ 166.798273][ T7612] team0: entered promiscuous mode [ 166.799872][ T7612] team_slave_0: entered promiscuous mode [ 166.801472][ T7612] team_slave_1: entered promiscuous mode [ 166.804035][ T7612] bridge0: port 3(team0) entered blocking state [ 166.805654][ T7612] bridge0: port 3(team0) entered forwarding state [ 167.037637][ T7620] FAULT_INJECTION: forcing a failure. [ 167.037637][ T7620] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 167.041073][ T7620] CPU: 0 UID: 0 PID: 7620 Comm: syz.3.615 Not tainted 6.12.0-rc4-syzkaller #0 [ 167.043450][ T7620] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 167.046263][ T7620] Call Trace: [ 167.047156][ T7620] [ 167.047947][ T7620] dump_stack_lvl+0x16c/0x1f0 [ 167.049216][ T7620] should_fail_ex+0x497/0x5b0 [ 167.050474][ T7620] _copy_to_user+0x30/0xc0 [ 167.051667][ T7620] bpf_test_finish.isra.0+0x4a1/0x680 [ 167.053111][ T7620] ? __pfx_bpf_test_finish.isra.0+0x10/0x10 [ 167.054680][ T7620] ? __might_fault+0xe3/0x190 [ 167.055937][ T7620] ? _copy_from_user+0x5d/0xf0 [ 167.057366][ T7620] bpf_prog_test_run_xdp+0xa13/0x1580 [ 167.058803][ T7620] ? lock_acquire+0x2f/0xb0 [ 167.060020][ T7620] ? __fget_files+0x40/0x3f0 [ 167.061310][ T7620] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 167.062996][ T7620] ? fput+0x30/0x390 [ 167.064046][ T7620] ? __bpf_prog_get+0xa0/0x290 [ 167.065380][ T7620] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 167.066928][ T7620] __sys_bpf+0xfc6/0x49a0 [ 167.068085][ T7620] ? ksys_write+0x21e/0x260 [ 167.069311][ T7620] ? reacquire_held_locks+0x450/0x4c0 [ 167.070735][ T7620] ? __pfx___sys_bpf+0x10/0x10 [ 167.072012][ T7620] ? vfs_write+0x14d/0x1140 [ 167.073254][ T7620] ? __mutex_unlock_slowpath+0x164/0x650 [ 167.074760][ T7620] ? fput+0x30/0x390 [ 167.075811][ T7620] ? ksys_write+0x1ad/0x260 [ 167.077037][ T7620] ? __pfx_ksys_write+0x10/0x10 [ 167.078337][ T7620] __x64_sys_bpf+0x78/0xc0 [ 167.079531][ T7620] ? lockdep_hardirqs_on+0x7c/0x110 [ 167.080928][ T7620] do_syscall_64+0xcd/0x250 [ 167.082147][ T7620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.083725][ T7620] RIP: 0033:0x7f63adf7dff9 [ 167.084929][ T7620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.089968][ T7620] RSP: 002b:00007f63aed38038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 167.092162][ T7620] RAX: ffffffffffffffda RBX: 00007f63ae135f80 RCX: 00007f63adf7dff9 [ 167.094258][ T7620] RDX: 0000000000000050 RSI: 0000000020000340 RDI: 000000000000000a [ 167.096338][ T7620] RBP: 00007f63aed38090 R08: 0000000000000000 R09: 0000000000000000 [ 167.098425][ T7620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 167.100504][ T7620] R13: 0000000000000000 R14: 00007f63ae135f80 R15: 00007ffe9bfbc908 [ 167.102606][ T7620] [ 167.176584][ T7623] sctp: [Deprecated]: syz.3.616 (pid 7623) Use of int in max_burst socket option deprecated. [ 167.176584][ T7623] Use struct sctp_assoc_value instead [ 168.013195][ T7647] FAULT_INJECTION: forcing a failure. [ 168.013195][ T7647] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.016882][ T7647] CPU: 2 UID: 0 PID: 7647 Comm: syz.2.621 Not tainted 6.12.0-rc4-syzkaller #0 [ 168.019186][ T7647] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 168.021978][ T7647] Call Trace: [ 168.022874][ T7647] [ 168.023796][ T7647] dump_stack_lvl+0x16c/0x1f0 [ 168.025135][ T7647] should_fail_ex+0x497/0x5b0 [ 168.026375][ T7647] strncpy_from_user+0x3b/0x2a0 [ 168.027667][ T7647] setxattr_copy+0x8a/0x200 [ 168.028881][ T7647] path_setxattr+0xfc/0x280 [ 168.030087][ T7647] ? __pfx_path_setxattr+0x10/0x10 [ 168.031436][ T7647] ? __pfx_lock_release+0x10/0x10 [ 168.032783][ T7647] ? fput+0x30/0x390 [ 168.033818][ T7647] ? ksys_write+0x1ad/0x260 [ 168.035024][ T7647] ? __pfx_ksys_write+0x10/0x10 [ 168.036314][ T7647] __x64_sys_lsetxattr+0xc1/0x160 [ 168.037648][ T7647] ? do_syscall_64+0x91/0x250 [ 168.038902][ T7647] ? lockdep_hardirqs_on+0x7c/0x110 [ 168.040270][ T7647] do_syscall_64+0xcd/0x250 [ 168.041484][ T7647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.043039][ T7647] RIP: 0033:0x7f7440f7dff9 [ 168.044209][ T7647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.049191][ T7647] RSP: 002b:00007f7441d82038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 168.051367][ T7647] RAX: ffffffffffffffda RBX: 00007f7441136130 RCX: 00007f7440f7dff9 [ 168.053440][ T7647] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 00000000200000c0 [ 168.055495][ T7647] RBP: 00007f7441d82090 R08: 0000000000000000 R09: 0000000000000000 [ 168.057545][ T7647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.059597][ T7647] R13: 0000000000000000 R14: 00007f7441136130 R15: 00007ffc68602e68 [ 168.061666][ T7647] [ 168.119664][ T7650] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 168.122047][ T7650] overlayfs: missing 'lowerdir' [ 169.554053][ T39] audit: type=1400 audit(1729549171.484:450): avc: denied { bind } for pid=7666 comm="syz.2.627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 169.559049][ T39] audit: type=1400 audit(1729549171.484:451): avc: denied { getopt } for pid=7666 comm="syz.2.627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 169.888194][ T39] audit: type=1400 audit(1729549171.814:452): avc: denied { getopt } for pid=7678 comm="syz.0.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 169.938744][ T7683] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=7683 comm=syz.3.632 [ 169.943484][ T7682] netlink: 8 bytes leftover after parsing attributes in process `syz.3.632'. [ 169.945924][ T7682] netlink: 'syz.3.632': attribute type 3 has an invalid length. [ 170.578153][ T7696] lo speed is unknown, defaulting to 1000 [ 170.599849][ T39] audit: type=1400 audit(1729549172.524:453): avc: denied { create } for pid=7693 comm="syz.2.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 170.841482][ T7706] openvswitch: netlink: Actions may not be safe on all matching packets [ 171.267455][ T39] audit: type=1400 audit(1729549173.194:454): avc: denied { create } for pid=7710 comm="syz.2.639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 171.273085][ T39] audit: type=1400 audit(1729549173.194:455): avc: denied { search } for pid=7710 comm="syz.2.639" name="/" dev="configfs" ino=2138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 171.566657][ T39] audit: type=1400 audit(1729549173.494:456): avc: denied { write } for pid=7716 comm="syz.2.641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 171.710422][ T39] audit: type=1400 audit(1729549173.634:457): avc: denied { write } for pid=7720 comm="syz.2.643" path="socket:[19946]" dev="sockfs" ino=19946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 172.541722][ T39] audit: type=1400 audit(1729549174.464:458): avc: denied { ioctl } for pid=7732 comm="syz.2.647" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 173.955508][ T39] audit: type=1400 audit(1729549175.884:459): avc: denied { connect } for pid=7767 comm="syz.2.655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 174.085764][ T7773] lo speed is unknown, defaulting to 1000 [ 175.505640][ T39] kauditd_printk_skb: 2 callbacks suppressed [ 175.505655][ T39] audit: type=1400 audit(1729549177.434:462): avc: denied { connect } for pid=7808 comm="syz.3.666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 175.516998][ T39] audit: type=1400 audit(1729549177.444:463): avc: denied { read } for pid=7808 comm="syz.3.666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 175.622435][ T39] audit: type=1400 audit(1729549177.544:464): avc: denied { write } for pid=7808 comm="syz.3.666" path="socket:[19181]" dev="sockfs" ino=19181 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 177.742917][ T5345] Bluetooth: hci3: command 0x0c1a tx timeout [ 177.816825][ T7865] openvswitch: netlink: Actions may not be safe on all matching packets [ 178.094839][ T39] audit: type=1400 audit(1729549180.024:465): avc: denied { read } for pid=7879 comm="syz.3.684" dev="sockfs" ino=20240 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 178.100892][ T7880] 9pnet_fd: Insufficient options for proto=fd [ 178.168849][ T39] audit: type=1400 audit(1729549180.094:466): avc: denied { associate } for pid=7868 comm="syz.1.682" name="cpuacct.usage_percpu" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 178.373991][ T7889] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 178.379637][ T7889] syzkaller0: entered promiscuous mode [ 178.381140][ T7889] syzkaller0: entered allmulticast mode [ 179.101372][ T7903] xt_CT: You must specify a L4 protocol and not use inversions on it [ 179.802007][ T7912] virtio-fs: tag <(null)> not found [ 180.261883][ T7909] lo speed is unknown, defaulting to 1000 [ 181.399076][ T39] audit: type=1400 audit(1729549183.324:467): avc: denied { write } for pid=7939 comm="syz.0.697" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 181.404801][ T39] audit: type=1400 audit(1729549183.324:468): avc: denied { open } for pid=7939 comm="syz.0.697" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 182.059642][ T7947] xt_CT: You must specify a L4 protocol and not use inversions on it [ 183.384726][ T7964] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 183.402631][ T7964] syzkaller0: entered promiscuous mode [ 183.404219][ T7964] syzkaller0: entered allmulticast mode [ 184.746784][ T7985] xt_CT: You must specify a L4 protocol and not use inversions on it [ 185.806017][ T7999] FAULT_INJECTION: forcing a failure. [ 185.806017][ T7999] name failslab, interval 1, probability 0, space 0, times 0 [ 185.811496][ T7999] CPU: 3 UID: 0 PID: 7999 Comm: syz.1.713 Not tainted 6.12.0-rc4-syzkaller #0 [ 185.813817][ T7999] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 185.816580][ T7999] Call Trace: [ 185.817457][ T7999] [ 185.818236][ T7999] dump_stack_lvl+0x16c/0x1f0 [ 185.819485][ T7999] should_fail_ex+0x497/0x5b0 [ 185.820737][ T7999] ? fs_reclaim_acquire+0xae/0x150 [ 185.822079][ T7999] should_failslab+0xc2/0x120 [ 185.823327][ T7999] __kmalloc_noprof+0xcb/0x400 [ 185.824605][ T7999] sock_kmalloc+0x111/0x170 [ 185.825791][ T7999] skcipher_recvmsg+0x49d/0x1020 [ 185.827080][ T7999] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 185.828493][ T7999] sock_recvmsg+0x1f6/0x250 [ 185.829700][ T7999] sock_read_iter+0x2bb/0x3b0 [ 185.830933][ T7999] ? __pfx_sock_read_iter+0x10/0x10 [ 185.832306][ T7999] ? bpf_lsm_file_permission+0x9/0x10 [ 185.833722][ T7999] ? security_file_permission+0x71/0x210 [ 185.835203][ T7999] vfs_read+0xa3b/0xbd0 [ 185.836318][ T7999] ? __pfx_vfs_read+0x10/0x10 [ 185.837573][ T7999] ? __fget_files+0x40/0x3f0 [ 185.838806][ T7999] ksys_read+0x1fa/0x260 [ 185.839942][ T7999] ? __pfx_ksys_read+0x10/0x10 [ 185.841232][ T7999] do_syscall_64+0xcd/0x250 [ 185.842442][ T7999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.844002][ T7999] RIP: 0033:0x7ff07017dff9 [ 185.845175][ T7999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.850045][ T7999] RSP: 002b:00007ff070f43038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 185.852143][ T7999] RAX: ffffffffffffffda RBX: 00007ff070336058 RCX: 00007ff07017dff9 [ 185.854137][ T7999] RDX: 00000000fffffc7c RSI: 0000000020002000 RDI: 0000000000000005 [ 185.856087][ T7999] RBP: 00007ff070f43090 R08: 0000000000000000 R09: 0000000000000000 [ 185.858085][ T7999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 185.860049][ T7999] R13: 0000000000000000 R14: 00007ff070336058 R15: 00007fff9d19c1d8 [ 185.862129][ T7999] [ 187.820277][ T8028] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 187.831655][ T8028] syzkaller0: entered promiscuous mode [ 187.833199][ T8028] syzkaller0: entered allmulticast mode [ 188.003771][ T8033] FAULT_INJECTION: forcing a failure. [ 188.003771][ T8033] name failslab, interval 1, probability 0, space 0, times 0 [ 188.008606][ T8033] CPU: 0 UID: 0 PID: 8033 Comm: syz.2.723 Not tainted 6.12.0-rc4-syzkaller #0 [ 188.011698][ T8033] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 188.015340][ T8033] Call Trace: [ 188.016518][ T8033] [ 188.017537][ T8033] dump_stack_lvl+0x16c/0x1f0 [ 188.019193][ T8033] should_fail_ex+0x497/0x5b0 [ 188.020821][ T8033] ? fs_reclaim_acquire+0xae/0x150 [ 188.022594][ T8033] should_failslab+0xc2/0x120 [ 188.024215][ T8033] __kmalloc_noprof+0xcb/0x400 [ 188.025874][ T8033] ? tomoyo_realpath_from_path+0xad/0x720 [ 188.027823][ T8033] ? rcu_is_watching+0x12/0xc0 [ 188.029499][ T8033] tomoyo_realpath_from_path+0xb9/0x720 [ 188.031401][ T8033] ? tomoyo_path_number_perm+0x232/0x590 [ 188.033358][ T8033] tomoyo_path_number_perm+0x245/0x590 [ 188.035225][ T8033] ? tomoyo_path_number_perm+0x232/0x590 [ 188.037161][ T8033] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 188.039274][ T8033] ? d_alloc_parallel+0x6b8/0x12b0 [ 188.041070][ T8033] tomoyo_path_mknod+0x10d/0x190 [ 188.042768][ T8033] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 188.044645][ T8033] ? get_current_fs_domain+0x188/0x1f0 [ 188.046521][ T8033] security_path_mknod+0x161/0x310 [ 188.048277][ T8033] lookup_open.isra.0+0x54f/0x14c0 [ 188.050049][ T8033] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 188.051951][ T8033] ? rcu_is_watching+0x12/0xc0 [ 188.053624][ T8033] ? lock_acquire+0x2f/0xb0 [ 188.055177][ T8033] ? path_openat+0x153e/0x2d60 [ 188.056832][ T8033] ? __pfx_down_write+0x10/0x10 [ 188.058510][ T8033] ? mnt_get_write_access+0x20c/0x300 [ 188.060351][ T8033] path_openat+0x904/0x2d60 [ 188.061938][ T8033] ? __pfx_path_openat+0x10/0x10 [ 188.063628][ T8033] ? __pfx___lock_acquire+0x10/0x10 [ 188.065441][ T8033] do_filp_open+0x1dc/0x430 [ 188.067000][ T8033] ? __pfx_do_filp_open+0x10/0x10 [ 188.068758][ T8033] ? _raw_spin_unlock+0x28/0x50 [ 188.070438][ T8033] ? alloc_fd+0x2d7/0x6c0 [ 188.071944][ T8033] do_sys_openat2+0x17a/0x1e0 [ 188.073498][ T8033] ? __pfx_do_sys_openat2+0x10/0x10 [ 188.074826][ T8033] ? __fget_files+0x244/0x3f0 [ 188.076026][ T8033] __x64_sys_creat+0xcd/0x120 [ 188.077234][ T8033] ? __pfx___x64_sys_creat+0x10/0x10 [ 188.078598][ T8033] ? __pfx_ksys_write+0x10/0x10 [ 188.079873][ T8033] ? do_syscall_64+0x91/0x250 [ 188.081088][ T8033] do_syscall_64+0xcd/0x250 [ 188.082439][ T8033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.083980][ T8033] RIP: 0033:0x7f7440f7dff9 [ 188.085143][ T8033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.089956][ T8033] RSP: 002b:00007f7441dc4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 188.092316][ T8033] RAX: ffffffffffffffda RBX: 00007f7441135f80 RCX: 00007f7440f7dff9 [ 188.094330][ T8033] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000dc0 [ 188.096350][ T8033] RBP: 00007f7441dc4090 R08: 0000000000000000 R09: 0000000000000000 [ 188.098306][ T8033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 188.100282][ T8033] R13: 0000000000000001 R14: 00007f7441135f80 R15: 00007ffc68602e68 [ 188.102571][ T8033] [ 188.104763][ T8033] ERROR: Out of memory at tomoyo_realpath_from_path. [ 188.109980][ T8031] xt_CT: You must specify a L4 protocol and not use inversions on it [ 190.931767][ T8082] xt_CT: You must specify a L4 protocol and not use inversions on it [ 192.074042][ T8090] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 192.089175][ T8090] syzkaller0: entered promiscuous mode [ 192.090647][ T8090] syzkaller0: entered allmulticast mode [ 193.360810][ T8115] xt_CT: You must specify a L4 protocol and not use inversions on it [ 193.921057][ T1379] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.928948][ T1379] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.551833][ T8156] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 195.565843][ T8156] syzkaller0: entered promiscuous mode [ 195.567373][ T8156] syzkaller0: entered allmulticast mode [ 195.762214][ T8159] xt_CT: You must specify a L4 protocol and not use inversions on it [ 197.709347][ T8181] netlink: 48 bytes leftover after parsing attributes in process `syz.0.762'. [ 197.714947][ T8181] netlink: 16 bytes leftover after parsing attributes in process `syz.0.762'. [ 198.101765][ T8197] xt_CT: You must specify a L4 protocol and not use inversions on it [ 198.512948][ T8202] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 198.519974][ T8202] syzkaller0: entered promiscuous mode [ 198.521457][ T8202] syzkaller0: entered allmulticast mode [ 198.739453][ T39] audit: type=1400 audit(1729549200.664:469): avc: denied { name_bind } for pid=8205 comm="syz.2.769" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 201.073811][ T8235] xt_CT: You must specify a L4 protocol and not use inversions on it [ 201.487894][ T8240] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 201.492191][ T8240] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 201.944071][ T8250] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 201.949339][ T8250] syzkaller0: entered promiscuous mode [ 201.951208][ T8250] syzkaller0: entered allmulticast mode [ 201.977811][ T8252] ipip0: entered promiscuous mode [ 203.778782][ T8272] FAULT_INJECTION: forcing a failure. [ 203.778782][ T8272] name failslab, interval 1, probability 0, space 0, times 0 [ 203.782268][ T8272] CPU: 0 UID: 0 PID: 8272 Comm: syz.2.787 Not tainted 6.12.0-rc4-syzkaller #0 [ 203.784868][ T8272] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 203.787709][ T8272] Call Trace: [ 203.788621][ T8272] [ 203.789421][ T8272] dump_stack_lvl+0x16c/0x1f0 [ 203.790685][ T8272] should_fail_ex+0x497/0x5b0 [ 203.791935][ T8272] ? fs_reclaim_acquire+0xae/0x150 [ 203.793351][ T8272] should_failslab+0xc2/0x120 [ 203.794593][ T8272] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 203.796006][ T8272] ? __asan_memcpy+0x3c/0x60 [ 203.797253][ T8272] ? __kernfs_new_node+0xd3/0x890 [ 203.798660][ T8272] ? kstrdup+0x5c/0x70 [ 203.799740][ T8272] __kernfs_new_node+0xd3/0x890 [ 203.801031][ T8272] ? __pfx___kernfs_new_node+0x10/0x10 [ 203.802471][ T8272] ? __pfx_lock_release+0x10/0x10 [ 203.803923][ T8272] ? kernfs_add_one+0x39d/0x520 [ 203.805320][ T8272] ? lock_acquire.part.0+0x11b/0x380 [ 203.806703][ T8272] ? find_held_lock+0x2d/0x110 [ 203.808012][ T8272] kernfs_new_node+0x186/0x240 [ 203.809307][ T8272] kernfs_create_link+0xcc/0x240 [ 203.810610][ T8272] sysfs_do_create_link_sd+0x90/0x140 [ 203.812040][ T8272] sysfs_create_link+0x61/0xc0 [ 203.813357][ T8272] device_add+0x62e/0x1a70 [ 203.814545][ T8272] ? __pfx_device_add+0x10/0x10 [ 203.815838][ T8272] ? __init_waitqueue_head+0xca/0x150 [ 203.817393][ T8272] tty_register_device_attr+0x38f/0x7c0 [ 203.818928][ T8272] ? __pfx_tty_register_device_attr+0x10/0x10 [ 203.820543][ T8272] ? lockdep_init_map_type+0x16d/0x7d0 [ 203.821971][ T8272] ? tty_port_init+0x156/0x1c0 [ 203.823297][ T8272] gsm_activate_mux+0x157/0x2e0 [ 203.824585][ T8272] gsmld_ioctl+0x8cc/0x1550 [ 203.825889][ T8272] ? __pfx_gsmld_ioctl+0x10/0x10 [ 203.827320][ T8272] ? __ldsem_down_read_nested+0xf4/0x920 [ 203.829142][ T8272] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 203.831083][ T8272] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 203.832735][ T8272] ? __pfx_pty_bsd_ioctl+0x10/0x10 [ 203.834189][ T8272] ? __pfx_gsmld_ioctl+0x10/0x10 [ 203.835521][ T8272] tty_ioctl+0x6ee/0x15d0 [ 203.836707][ T8272] ? __pfx_tty_ioctl+0x10/0x10 [ 203.838000][ T8272] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 203.839874][ T8272] ? trace_lock_acquire+0x14a/0x1d0 [ 203.841294][ T8272] ? selinux_file_ioctl+0x180/0x270 [ 203.842695][ T8272] ? selinux_file_ioctl+0xb4/0x270 [ 203.844113][ T8272] ? __pfx_tty_ioctl+0x10/0x10 [ 203.845423][ T8272] __x64_sys_ioctl+0x18f/0x220 [ 203.846716][ T8272] do_syscall_64+0xcd/0x250 [ 203.847945][ T8272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.849578][ T8272] RIP: 0033:0x7f7440f7dff9 [ 203.850806][ T8272] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.855927][ T8272] RSP: 002b:00007f7441dc4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 203.858149][ T8272] RAX: ffffffffffffffda RBX: 00007f7441135f80 RCX: 00007f7440f7dff9 [ 203.860289][ T8272] RDX: 0000000020000000 RSI: 00000000404c4701 RDI: 0000000000000008 [ 203.862427][ T8272] RBP: 00007f7441dc4090 R08: 0000000000000000 R09: 0000000000000000 [ 203.864620][ T8272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 203.866710][ T8272] R13: 0000000000000000 R14: 00007f7441135f80 R15: 00007ffc68602e68 [ 203.868838][ T8272] [ 204.042176][ T8275] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.124160][ T8280] xt_CT: You must specify a L4 protocol and not use inversions on it [ 205.745377][ T8307] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 205.751670][ T8307] syzkaller0: entered promiscuous mode [ 205.753291][ T8307] syzkaller0: entered allmulticast mode [ 206.357571][ T8316] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 206.360863][ T8316] File: /199/bus PID: 8316 Comm: syz.0.798 [ 207.100269][ T8316] syz.0.798 (8316) used greatest stack depth: 20576 bytes left [ 207.280234][ T8323] xt_CT: You must specify a L4 protocol and not use inversions on it [ 209.172445][ T39] audit: type=1400 audit(1729549211.094:470): avc: denied { ioctl } for pid=8351 comm="syz.2.808" path="socket:[22083]" dev="sockfs" ino=22083 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 209.416940][ T8362] xt_CT: You must specify a L4 protocol and not use inversions on it [ 209.530861][ T8371] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 209.543451][ T8371] syzkaller0: entered promiscuous mode [ 209.545293][ T8371] syzkaller0: entered allmulticast mode [ 211.440619][ T8398] netlink: 28 bytes leftover after parsing attributes in process `syz.1.819'. [ 211.443541][ T8398] netlink: 28 bytes leftover after parsing attributes in process `syz.1.819'. [ 211.522670][ T8401] FAULT_INJECTION: forcing a failure. [ 211.522670][ T8401] name failslab, interval 1, probability 0, space 0, times 0 [ 211.526147][ T8401] CPU: 0 UID: 0 PID: 8401 Comm: syz.3.820 Not tainted 6.12.0-rc4-syzkaller #0 [ 211.528525][ T8401] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 211.531354][ T8401] Call Trace: [ 211.532279][ T8401] [ 211.533093][ T8401] dump_stack_lvl+0x16c/0x1f0 [ 211.534373][ T8401] should_fail_ex+0x497/0x5b0 [ 211.535641][ T8401] ? fs_reclaim_acquire+0xae/0x150 [ 211.537026][ T8401] should_failslab+0xc2/0x120 [ 211.538301][ T8401] __kmalloc_noprof+0xcb/0x400 [ 211.539600][ T8401] tomoyo_encode2+0x100/0x3e0 [ 211.540886][ T8401] tomoyo_encode+0x29/0x50 [ 211.542088][ T8401] tomoyo_realpath_from_path+0x19d/0x720 [ 211.543599][ T8401] ? tomoyo_path_number_perm+0x232/0x590 [ 211.545107][ T8401] tomoyo_path_number_perm+0x245/0x590 [ 211.546562][ T8401] ? tomoyo_path_number_perm+0x232/0x590 [ 211.548059][ T8401] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 211.549674][ T8401] ? trace_lock_acquire+0x14a/0x1d0 [ 211.551062][ T8401] ? lock_acquire+0x2f/0xb0 [ 211.552299][ T8401] ? __fget_files+0x40/0x3f0 [ 211.553538][ T8401] ? __fget_files+0x244/0x3f0 [ 211.554852][ T8401] security_file_ioctl+0x9b/0x240 [ 211.556551][ T8401] __x64_sys_ioctl+0xbb/0x220 [ 211.558168][ T8401] do_syscall_64+0xcd/0x250 [ 211.559508][ T8401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.561159][ T8401] RIP: 0033:0x7f63adf7dff9 [ 211.562356][ T8401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.567402][ T8401] RSP: 002b:00007f63aed38038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 211.569585][ T8401] RAX: ffffffffffffffda RBX: 00007f63ae135f80 RCX: 00007f63adf7dff9 [ 211.571718][ T8401] RDX: 00000000200000c0 RSI: 00000000000089e3 RDI: 0000000000000004 [ 211.574055][ T8401] RBP: 00007f63aed38090 R08: 0000000000000000 R09: 0000000000000000 [ 211.576311][ T8401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.578501][ T8401] R13: 0000000000000000 R14: 00007f63ae135f80 R15: 00007ffe9bfbc908 [ 211.580582][ T8401] [ 211.583654][ T8401] ERROR: Out of memory at tomoyo_realpath_from_path. [ 211.609092][ T983] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 211.610858][ T983] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 211.614822][ T983] hid-generic 0000:0000:0000.0004: hidraw1: HID v0.00 Device [syz0] on syz1 [ 211.701809][ T8398] sp0: Synchronizing with TNC [ 212.514667][ T8419] xt_CT: You must specify a L4 protocol and not use inversions on it [ 212.832898][ T39] audit: type=1400 audit(1729549214.754:471): avc: denied { ioctl } for pid=8427 comm="syz.2.827" path="/dev/usbmon0" dev="devtmpfs" ino=721 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 214.934263][ T8462] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 214.964035][ T8462] syzkaller0: entered promiscuous mode [ 214.965566][ T8462] syzkaller0: entered allmulticast mode [ 215.288178][ T8471] xt_CT: You must specify a L4 protocol and not use inversions on it [ 218.422494][ T8519] xt_CT: You must specify a L4 protocol and not use inversions on it [ 219.819474][ T8547] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 219.836659][ T8547] syzkaller0: entered promiscuous mode [ 219.838706][ T8547] syzkaller0: entered allmulticast mode [ 220.616199][ T39] audit: type=1400 audit(1729549222.544:472): avc: denied { create } for pid=8556 comm="syz.1.853" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 221.382340][ T39] audit: type=1400 audit(1729549223.304:473): avc: denied { unlink } for pid=5342 comm="syz-executor" name="file0" dev="tmpfs" ino=1165 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 221.616334][ T8575] xt_CT: You must specify a L4 protocol and not use inversions on it [ 222.652443][ T8587] xt_CT: You must specify a L4 protocol and not use inversions on it [ 222.815983][ T8592] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 222.835636][ T8592] syzkaller0: entered promiscuous mode [ 222.837156][ T8592] syzkaller0: entered allmulticast mode [ 225.367617][ T8629] xt_CT: You must specify a L4 protocol and not use inversions on it [ 228.235768][ T8658] syzkaller0: entered promiscuous mode [ 228.239372][ T8658] syzkaller0: entered allmulticast mode [ 228.425258][ T8664] 9pnet_virtio: no channels available for device syz [ 229.264242][ T8669] xt_CT: You must specify a L4 protocol and not use inversions on it [ 231.514112][ T8696] lo speed is unknown, defaulting to 1000 [ 232.007228][ T8709] overlayfs: failed to resolve './file1': -2 [ 232.836313][ T8723] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 232.840663][ T8723] syzkaller0: entered promiscuous mode [ 232.842124][ T8723] syzkaller0: entered allmulticast mode [ 232.882233][ T8729] bridge0: port 3(team0) entered blocking state [ 232.884674][ T8729] bridge0: port 3(team0) entered disabled state [ 232.887000][ T8729] team0: entered allmulticast mode [ 232.888844][ T8729] team_slave_0: entered allmulticast mode [ 232.891034][ T8729] team_slave_1: entered allmulticast mode [ 232.896077][ T8729] team0: entered promiscuous mode [ 232.897614][ T8729] team_slave_0: entered promiscuous mode [ 232.899266][ T8729] team_slave_1: entered promiscuous mode [ 232.901556][ T8729] bridge0: port 3(team0) entered blocking state [ 232.903444][ T8729] bridge0: port 3(team0) entered forwarding state [ 233.206016][ T8741] vxcan1: tx address claim with dest, not broadcast [ 234.192319][ T39] audit: type=1326 audit(1729549236.114:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8755 comm="syz.3.896" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f63adf7dff9 code=0x0 [ 234.300863][ T39] audit: type=1400 audit(1729549236.224:475): avc: denied { connect } for pid=8755 comm="syz.3.896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 234.347005][ T39] audit: type=1400 audit(1729549236.274:476): avc: denied { ioctl } for pid=8755 comm="syz.3.896" path="socket:[25605]" dev="sockfs" ino=25605 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 234.355530][ T39] audit: type=1400 audit(1729549236.274:477): avc: denied { getopt } for pid=8755 comm="syz.3.896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 234.383879][ T8761] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 234.649106][ T8770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.899'. [ 234.654299][ T8770] binder: 8769:8770 ioctl c06864ce 20001d40 returned -22 [ 234.660316][ T8770] binder: 8769:8770 ioctl c06864b8 20001e00 returned -22 [ 234.772063][ T8774] netlink: 180 bytes leftover after parsing attributes in process `syz.1.900'. [ 236.020046][ T8790] netlink: 12 bytes leftover after parsing attributes in process `syz.3.905'. [ 236.279373][ T8797] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 236.295867][ T8797] syzkaller0: entered promiscuous mode [ 236.297245][ T8797] syzkaller0: entered allmulticast mode [ 236.353111][ T8798] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 236.378804][ T8798] syzkaller0: entered promiscuous mode [ 236.380255][ T8798] syzkaller0: entered allmulticast mode [ 237.324376][ T8809] FAULT_INJECTION: forcing a failure. [ 237.324376][ T8809] name failslab, interval 1, probability 0, space 0, times 0 [ 237.331181][ T8809] CPU: 2 UID: 0 PID: 8809 Comm: syz.0.909 Not tainted 6.12.0-rc4-syzkaller #0 [ 237.333519][ T8809] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 237.336304][ T8809] Call Trace: [ 237.337500][ T8809] [ 237.338308][ T8809] dump_stack_lvl+0x16c/0x1f0 [ 237.339607][ T8809] should_fail_ex+0x497/0x5b0 [ 237.340857][ T8809] ? fs_reclaim_acquire+0xae/0x150 [ 237.342209][ T8809] should_failslab+0xc2/0x120 [ 237.343452][ T8809] __kmalloc_cache_node_noprof+0x6e/0x350 [ 237.344949][ T8809] ? __get_vm_area_node+0xe1/0x2d0 [ 237.346604][ T8809] __get_vm_area_node+0xe1/0x2d0 [ 237.348047][ T8809] __vmalloc_node_range_noprof+0x26a/0x15a0 [ 237.349602][ T8809] ? hashlimit_mt_check_common+0x8b0/0x1450 [ 237.351527][ T8809] ? __pfx___lock_acquire+0x10/0x10 [ 237.353316][ T8809] ? rcu_is_watching+0x12/0xc0 [ 237.354766][ T8809] ? hashlimit_mt_check_common+0x8b0/0x1450 [ 237.356346][ T8809] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 237.358002][ T8809] ? __pfx_lock_release+0x10/0x10 [ 237.359324][ T8809] ? trace_lock_acquire+0x14a/0x1d0 [ 237.360711][ T8809] ? hashlimit_mt_check_common+0x8b0/0x1450 [ 237.362273][ T8809] vmalloc_noprof+0x6b/0x90 [ 237.363665][ T8809] ? hashlimit_mt_check_common+0x8b0/0x1450 [ 237.365518][ T8809] hashlimit_mt_check_common+0x8b0/0x1450 [ 237.367061][ T8809] hashlimit_mt_check_v1+0x2fe/0x370 [ 237.368584][ T8809] ? __pfx_hashlimit_mt_check_v1+0x10/0x10 [ 237.370143][ T8809] ? rcu_is_watching+0x12/0xc0 [ 237.371416][ T8809] ? __pfx_hashlimit_mt_check_v1+0x10/0x10 [ 237.372987][ T8809] xt_check_match+0x284/0xa50 [ 237.374230][ T8809] ? mem_cgroup_css_alloc+0x1690/0x1cf0 [ 237.375672][ T8809] ? __pfx_xt_check_match+0x10/0x10 [ 237.377060][ T8809] ? pcpu_alloc_noprof+0x1f5/0x1690 [ 237.378426][ T8809] ? xt_find_match+0x1f2/0x290 [ 237.379689][ T8809] find_check_entry.constprop.0+0x325/0x9d0 [ 237.381247][ T8809] ? __pfx_find_check_entry.constprop.0+0x10/0x10 [ 237.382930][ T8809] ? kfree+0x14f/0x4b0 [ 237.384021][ T8809] ? kvfree+0x47/0x50 [ 237.385080][ T8809] translate_table+0xc93/0x1710 [ 237.386367][ T8809] ? __pfx_translate_table+0x10/0x10 [ 237.387759][ T8809] do_ipt_set_ctl+0x605/0xc30 [ 237.389025][ T8809] ? trace_contention_end+0xea/0x140 [ 237.390413][ T8809] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 237.391790][ T8809] ? __pfx___mutex_lock+0x10/0x10 [ 237.393130][ T8809] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 237.394702][ T8809] ? nf_sockopt_find.constprop.0+0x221/0x290 [ 237.396300][ T8809] nf_setsockopt+0x8a/0xf0 [ 237.397483][ T8809] ip_setsockopt+0xcb/0xf0 [ 237.398668][ T8809] udp_setsockopt+0x7d/0xd0 [ 237.399875][ T8809] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 237.401440][ T8809] do_sock_setsockopt+0x222/0x480 [ 237.402763][ T8809] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 237.404232][ T8809] ? fdget+0x176/0x210 [ 237.405319][ T8809] __sys_setsockopt+0x1a4/0x270 [ 237.406613][ T8809] ? __pfx___sys_setsockopt+0x10/0x10 [ 237.408062][ T8809] ? fput+0x30/0x390 [ 237.409106][ T8809] ? ksys_write+0x1ad/0x260 [ 237.410320][ T8809] ? __pfx_ksys_write+0x10/0x10 [ 237.411608][ T8809] __x64_sys_setsockopt+0xbd/0x160 [ 237.412987][ T8809] ? do_syscall_64+0x91/0x250 [ 237.414233][ T8809] ? lockdep_hardirqs_on+0x7c/0x110 [ 237.415636][ T8809] do_syscall_64+0xcd/0x250 [ 237.416867][ T8809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.418418][ T8809] RIP: 0033:0x7fbf08d7dff9 [ 237.419592][ T8809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.424596][ T8809] RSP: 002b:00007fbf09b60038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 237.426780][ T8809] RAX: ffffffffffffffda RBX: 00007fbf08f35f80 RCX: 00007fbf08d7dff9 [ 237.428854][ T8809] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 237.431197][ T8809] RBP: 00007fbf09b60090 R08: 0000000000000580 R09: 0000000000000000 [ 237.433291][ T8809] R10: 0000000020000580 R11: 0000000000000246 R12: 0000000000000001 [ 237.435364][ T8809] R13: 0000000000000000 R14: 00007fbf08f35f80 R15: 00007ffd5b272c28 [ 237.437466][ T8809] [ 237.447489][ T8809] syz.0.909: vmalloc error: size 65872, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 237.451331][ T8809] CPU: 2 UID: 0 PID: 8809 Comm: syz.0.909 Not tainted 6.12.0-rc4-syzkaller #0 [ 237.454552][ T8809] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 237.457398][ T8809] Call Trace: [ 237.458287][ T8809] [ 237.459086][ T8809] dump_stack_lvl+0x16c/0x1f0 [ 237.460366][ T8809] warn_alloc+0x24d/0x3a0 [ 237.461528][ T8809] ? __pfx_warn_alloc+0x10/0x10 [ 237.462838][ T8809] ? __kasan_kmalloc+0x8a/0xb0 [ 237.464127][ T8809] ? __get_vm_area_node+0x1bc/0x2d0 [ 237.465520][ T8809] __vmalloc_node_range_noprof+0xd27/0x15a0 [ 237.467074][ T8809] ? __pfx___lock_acquire+0x10/0x10 [ 237.468424][ T8809] ? rcu_is_watching+0x12/0xc0 [ 237.469714][ T8809] ? hashlimit_mt_check_common+0x8b0/0x1450 [ 237.471265][ T8809] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 237.472888][ T8809] ? __pfx_lock_release+0x10/0x10 [ 237.474166][ T8809] ? trace_lock_acquire+0x14a/0x1d0 [ 237.475491][ T8809] ? hashlimit_mt_check_common+0x8b0/0x1450 [ 237.477000][ T8809] vmalloc_noprof+0x6b/0x90 [ 237.478194][ T8809] ? hashlimit_mt_check_common+0x8b0/0x1450 [ 237.479752][ T8809] hashlimit_mt_check_common+0x8b0/0x1450 [ 237.481180][ T8809] hashlimit_mt_check_v1+0x2fe/0x370 [ 237.482532][ T8809] ? __pfx_hashlimit_mt_check_v1+0x10/0x10 [ 237.484037][ T8809] ? rcu_is_watching+0x12/0xc0 [ 237.485344][ T8809] ? __pfx_hashlimit_mt_check_v1+0x10/0x10 [ 237.486812][ T8809] xt_check_match+0x284/0xa50 [ 237.487983][ T8809] ? mem_cgroup_css_alloc+0x1690/0x1cf0 [ 237.489387][ T8809] ? __pfx_xt_check_match+0x10/0x10 [ 237.490712][ T8809] ? pcpu_alloc_noprof+0x1f5/0x1690 [ 237.492063][ T8809] ? xt_find_match+0x1f2/0x290 [ 237.493267][ T8809] find_check_entry.constprop.0+0x325/0x9d0 [ 237.494764][ T8809] ? __pfx_find_check_entry.constprop.0+0x10/0x10 [ 237.496526][ T8809] ? kfree+0x14f/0x4b0 [ 237.497833][ T8809] ? kvfree+0x47/0x50 [ 237.498848][ T8809] translate_table+0xc93/0x1710 [ 237.500107][ T8809] ? __pfx_translate_table+0x10/0x10 [ 237.501421][ T8809] do_ipt_set_ctl+0x605/0xc30 [ 237.502616][ T8809] ? trace_contention_end+0xea/0x140 [ 237.503916][ T8809] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 237.505231][ T8809] ? __pfx___mutex_lock+0x10/0x10 [ 237.506458][ T8809] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 237.507992][ T8809] ? nf_sockopt_find.constprop.0+0x221/0x290 [ 237.509484][ T8809] nf_setsockopt+0x8a/0xf0 [ 237.510597][ T8809] ip_setsockopt+0xcb/0xf0 [ 237.511741][ T8809] udp_setsockopt+0x7d/0xd0 [ 237.512909][ T8809] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 237.514498][ T8809] do_sock_setsockopt+0x222/0x480 [ 237.515796][ T8809] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 237.517221][ T8809] ? fdget+0x176/0x210 [ 237.518225][ T8809] __sys_setsockopt+0x1a4/0x270 [ 237.519449][ T8809] ? __pfx___sys_setsockopt+0x10/0x10 [ 237.520777][ T8809] ? fput+0x30/0x390 [ 237.521726][ T8809] ? ksys_write+0x1ad/0x260 [ 237.522924][ T8809] ? __pfx_ksys_write+0x10/0x10 [ 237.524219][ T8809] __x64_sys_setsockopt+0xbd/0x160 [ 237.525559][ T8809] ? do_syscall_64+0x91/0x250 [ 237.526734][ T8809] ? lockdep_hardirqs_on+0x7c/0x110 [ 237.528036][ T8809] do_syscall_64+0xcd/0x250 [ 237.529140][ T8809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.530569][ T8809] RIP: 0033:0x7fbf08d7dff9 [ 237.531715][ T8809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.536363][ T8809] RSP: 002b:00007fbf09b60038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 237.538427][ T8809] RAX: ffffffffffffffda RBX: 00007fbf08f35f80 RCX: 00007fbf08d7dff9 [ 237.540418][ T8809] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 237.542386][ T8809] RBP: 00007fbf09b60090 R08: 0000000000000580 R09: 0000000000000000 [ 237.544367][ T8809] R10: 0000000020000580 R11: 0000000000000246 R12: 0000000000000001 [ 237.546381][ T8809] R13: 0000000000000000 R14: 00007fbf08f35f80 R15: 00007ffd5b272c28 [ 237.548372][ T8809] [ 237.549780][ T8809] Mem-Info: [ 237.550611][ T8809] active_anon:16553 inactive_anon:0 isolated_anon:0 [ 237.550611][ T8809] active_file:11194 inactive_file:38738 isolated_file:0 [ 237.550611][ T8809] unevictable:1768 dirty:294 writeback:0 [ 237.550611][ T8809] slab_reclaimable:6565 slab_unreclaimable:70295 [ 237.550611][ T8809] mapped:30664 shmem:12973 pagetables:926 [ 237.550611][ T8809] sec_pagetables:314 bounce:0 [ 237.550611][ T8809] kernel_misc_reclaimable:0 [ 237.550611][ T8809] free:479978 free_pcp:1853 free_cma:0 [ 237.562098][ T8809] Node 0 active_anon:66212kB inactive_anon:0kB active_file:44776kB inactive_file:154872kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:122656kB dirty:1176kB writeback:0kB shmem:48356kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11856kB pagetables:3704kB sec_pagetables:1256kB all_unreclaimable? no [ 237.571289][ T8809] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:80kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 237.581104][ T8809] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 237.588179][ T8809] lowmem_reserve[]: 0 1214 0 0 0 [ 237.589528][ T8809] Node 0 DMA32 free:289636kB boost:6144kB min:33780kB low:40688kB high:47596kB reserved_highatomic:0KB active_anon:66212kB inactive_anon:0kB active_file:44776kB inactive_file:154872kB unevictable:3536kB writepending:1176kB present:2080628kB managed:1272188kB mlocked:0kB bounce:0kB free_pcp:7324kB local_pcp:0kB free_cma:0kB [ 237.597396][ T8809] lowmem_reserve[]: 0 0 0 0 0 [ 237.598671][ T8809] Node 1 Normal free:1614788kB boost:0kB min:39600kB low:49500kB high:59400kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:80kB unevictable:3536kB writepending:0kB present:2097152kB managed:1781924kB mlocked:0kB bounce:0kB free_pcp:256kB local_pcp:0kB free_cma:0kB [ 237.606195][ T8809] lowmem_reserve[]: 0 0 0 0 0 [ 237.607456][ T8809] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 237.614277][ T8809] Node 0 DMA32: 139*4kB (UM) 117*8kB (UME) 180*16kB (UME) 196*32kB (UME) 464*64kB (UME) 307*128kB (UME) 186*256kB (UME) 95*512kB (UME) 63*1024kB (UM) 20*2048kB (UM) 2*4096kB (UM) = 289556kB [ 237.619175][ T8809] Node 1 Normal: 3*4kB (UME) 11*8kB (ME) 10*16kB (UME) 144*32kB (UME) 79*64kB (UME) 20*128kB (UME) 7*256kB (UE) 10*512kB (UME) 2*1024kB (UE) 4*2048kB (UM) 387*4096kB (M) = 1614788kB [ 237.623939][ T8809] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 237.626400][ T8809] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 237.628830][ T8809] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 237.631287][ T8809] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 237.633794][ T8809] 62905 total pagecache pages [ 237.635032][ T8809] 0 pages in swap cache [ 237.636130][ T8809] Free swap = 124728kB [ 237.637218][ T8809] Total swap = 124996kB [ 237.638340][ T8809] 1048443 pages RAM [ 237.639352][ T8809] 0 pages HighMem/MovableOnly [ 237.640589][ T8809] 281075 pages reserved [ 237.641676][ T8809] 0 pages cma reserved [ 237.789887][ T39] audit: type=1400 audit(1729549239.714:478): avc: denied { map } for pid=8810 comm="syz.0.910" path="/dev/usbmon0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 239.464343][ T8823] netlink: 'syz.0.914': attribute type 16 has an invalid length. [ 239.572205][ T39] audit: type=1400 audit(1729549241.484:479): avc: denied { connect } for pid=8824 comm="syz.0.915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 240.110339][ T8839] 9pnet_virtio: no channels available for device syz [ 240.181634][ T8840] xt_CT: You must specify a L4 protocol and not use inversions on it [ 240.373891][ T8842] FAULT_INJECTION: forcing a failure. [ 240.373891][ T8842] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 240.379743][ T8842] CPU: 2 UID: 0 PID: 8842 Comm: syz.0.918 Not tainted 6.12.0-rc4-syzkaller #0 [ 240.382079][ T8842] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 240.384869][ T8842] Call Trace: [ 240.385755][ T8842] [ 240.386539][ T8842] dump_stack_lvl+0x16c/0x1f0 [ 240.387825][ T8842] should_fail_ex+0x497/0x5b0 [ 240.389082][ T8842] ? fs_reclaim_acquire+0xae/0x150 [ 240.390454][ T8842] should_fail_alloc_page+0xe7/0x130 [ 240.391908][ T8842] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 240.393543][ T8842] ? __pfx_mark_lock+0x10/0x10 [ 240.394814][ T8842] __alloc_pages_noprof+0x190/0x25a0 [ 240.396250][ T8842] ? hlock_class+0x4e/0x130 [ 240.397451][ T8842] ? mark_lock+0xb5/0xc60 [ 240.398586][ T8842] ? __pfx___lock_acquire+0x10/0x10 [ 240.399962][ T8842] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 240.401501][ T8842] ? __pfx_lock_release+0x10/0x10 [ 240.402823][ T8842] ? __pfx___lock_acquire+0x10/0x10 [ 240.404283][ T8842] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 240.405878][ T8842] ? policy_nodemask+0xea/0x4e0 [ 240.407186][ T8842] alloc_pages_mpol_noprof+0x2c9/0x610 [ 240.408644][ T8842] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 240.410239][ T8842] ? __pfx_lock_release+0x10/0x10 [ 240.411586][ T8842] ? xas_load+0x49/0x5b0 [ 240.412739][ T8842] ? filemap_get_entry+0xd0/0x3c0 [ 240.414086][ T8842] folio_alloc_noprof+0x1e/0xc0 [ 240.415380][ T8842] filemap_alloc_folio_noprof+0x3b4/0x480 [ 240.416889][ T8842] ? __pfx_filemap_get_entry+0x10/0x10 [ 240.418325][ T8842] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 240.419988][ T8842] __filemap_get_folio+0x539/0xaf0 [ 240.421349][ T8842] ioctx_alloc+0x757/0x1fc0 [ 240.423510][ T8842] ? __might_fault+0x13b/0x190 [ 240.425786][ T8842] ? __pfx_ioctx_alloc+0x10/0x10 [ 240.427191][ T8842] ? lock_acquire+0x2f/0xb0 [ 240.428262][ T8842] ? __might_fault+0xe3/0x190 [ 240.429565][ T8842] __x64_sys_io_setup+0xc9/0x210 [ 240.431002][ T8842] do_syscall_64+0xcd/0x250 [ 240.432267][ T8842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.433973][ T8842] RIP: 0033:0x7fbf08d7dff9 [ 240.435181][ T8842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 240.440230][ T8842] RSP: 002b:00007fbf09b60038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 240.442440][ T8842] RAX: ffffffffffffffda RBX: 00007fbf08f35f80 RCX: 00007fbf08d7dff9 [ 240.444532][ T8842] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000202 [ 240.446605][ T8842] RBP: 00007fbf09b60090 R08: 0000000000000000 R09: 0000000000000000 [ 240.448681][ T8842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 240.450742][ T8842] R13: 0000000000000000 R14: 00007fbf08f35f80 R15: 00007ffd5b272c28 [ 240.452976][ T8842] [ 240.465117][ T39] audit: type=1400 audit(1729549242.394:480): avc: denied { write } for pid=4817 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 240.472000][ T39] audit: type=1400 audit(1729549242.394:481): avc: denied { remove_name } for pid=4817 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 240.478463][ T39] audit: type=1400 audit(1729549242.394:482): avc: denied { add_name } for pid=4817 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 240.623089][ T39] audit: type=1400 audit(1729549242.554:483): avc: denied { bind } for pid=8851 comm="syz.0.922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 240.636576][ T39] audit: type=1400 audit(1729549242.554:484): avc: denied { write } for pid=8851 comm="syz.0.922" path="socket:[24880]" dev="sockfs" ino=24880 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 240.759326][ T39] audit: type=1400 audit(1729549242.684:485): avc: denied { accept } for pid=8845 comm="syz.1.919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 240.828505][ T39] audit: type=1400 audit(1729549242.754:486): avc: denied { ioctl } for pid=8854 comm="syz.3.923" path="mnt:[4026533298]" dev="nsfs" ino=4026533298 ioctlcmd=0x940b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 240.835157][ T39] audit: type=1400 audit(1729549242.754:487): avc: denied { write } for pid=8854 comm="syz.3.923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 240.841268][ T39] audit: type=1400 audit(1729549242.754:488): avc: denied { setopt } for pid=8854 comm="syz.3.923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 240.972929][ T828] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 241.134095][ T828] usb 5-1: Using ep0 maxpacket: 8 [ 241.139665][ T828] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 241.141646][ T828] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 241.152941][ T828] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 241.156054][ T828] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 241.158929][ T828] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 241.168036][ T828] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 241.170016][ T828] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 241.177937][ T828] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 241.180994][ T828] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 241.184525][ T828] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 241.188251][ T828] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 241.192352][ T828] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 241.203118][ T828] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 241.212997][ T828] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 241.216621][ T828] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 241.224973][ T828] usb 5-1: string descriptor 0 read error: -22 [ 241.227247][ T828] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 241.243001][ T828] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.256131][ T828] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 241.315495][ T8863] netlink: 16 bytes leftover after parsing attributes in process `syz.2.924'. [ 241.528806][ T829] usb 5-1: USB disconnect, device number 3 [ 242.702001][ T8886] netlink: 80 bytes leftover after parsing attributes in process `syz.3.930'. [ 242.775918][ T8888] Bluetooth: MGMT ver 1.23 [ 243.103020][ T983] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 243.242914][ T983] usb 8-1: device descriptor read/64, error -71 [ 243.502944][ T983] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 243.632906][ T983] usb 8-1: device descriptor read/64, error -71 [ 243.754578][ T983] usb usb8-port1: attempt power cycle [ 243.918698][ T8895] xt_CT: You must specify a L4 protocol and not use inversions on it [ 244.102942][ T983] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 244.123605][ T983] usb 8-1: device descriptor read/8, error -71 [ 244.362924][ T983] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 244.383310][ T983] usb 8-1: device descriptor read/8, error -71 [ 244.493138][ T983] usb usb8-port1: unable to enumerate USB device [ 245.160278][ T39] kauditd_printk_skb: 1 callbacks suppressed [ 245.160290][ T39] audit: type=1400 audit(1729549247.084:490): avc: denied { connect } for pid=8906 comm="syz.0.936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 245.170776][ T39] audit: type=1400 audit(1729549247.104:491): avc: denied { bind } for pid=8906 comm="syz.0.936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 245.474606][ T39] audit: type=1400 audit(1729549247.404:492): avc: denied { ioctl } for pid=8913 comm="syz.1.938" path="socket:[24473]" dev="sockfs" ino=24473 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 245.769331][ T8925] 9pnet_virtio: no channels available for device syz [ 245.781704][ T8925] netlink: 132 bytes leftover after parsing attributes in process `syz.3.941'. [ 246.440582][ T8940] lo speed is unknown, defaulting to 1000 [ 246.558911][ T8943] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 246.574228][ T8943] syzkaller0: entered promiscuous mode [ 246.575806][ T8943] syzkaller0: entered allmulticast mode [ 246.581068][ T8945] lo speed is unknown, defaulting to 1000 [ 248.287457][ T8966] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 248.311938][ T8966] syzkaller0: entered promiscuous mode [ 248.314381][ T8966] syzkaller0: entered allmulticast mode [ 248.498168][ T8976] mkiss: ax0: crc mode is auto. [ 248.677269][ T8979] xt_CT: You must specify a L4 protocol and not use inversions on it [ 249.468326][ T39] audit: type=1400 audit(1729549251.394:493): avc: denied { map } for pid=8980 comm="syz.3.953" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 250.117843][ T39] audit: type=1400 audit(1729549252.044:494): avc: denied { name_bind } for pid=8985 comm="syz.2.955" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 250.294095][ T8995] lo speed is unknown, defaulting to 1000 [ 250.323530][ T39] audit: type=1400 audit(1729549252.244:495): avc: denied { mount } for pid=8983 comm="syz.1.954" name="/" dev="autofs" ino=25239 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 250.358172][ T39] audit: type=1400 audit(1729549252.284:496): avc: denied { getopt } for pid=8990 comm="syz.0.958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 250.359091][ T5345] block nbd0: Wrong magic (0x14000000) [ 250.381940][ T39] audit: type=1400 audit(1729549252.304:497): avc: denied { setattr } for pid=8990 comm="syz.0.958" name="controlC0" dev="devtmpfs" ino=1125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 250.462154][ T8990] block nbd0: shutting down sockets [ 250.912874][ T9004] netlink: 116 bytes leftover after parsing attributes in process `syz.0.960'. [ 250.973374][ T39] audit: type=1400 audit(1729549252.904:498): avc: denied { unmount } for pid=5342 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 251.001827][ T9005] netlink: 40 bytes leftover after parsing attributes in process `syz.0.960'. [ 252.115099][ T39] audit: type=1400 audit(1729549254.044:499): avc: denied { setopt } for pid=9025 comm="syz.3.967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 253.232402][ T9044] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 253.295481][ T9045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.972'. [ 254.432881][ T25] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 254.599868][ T25] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 254.604139][ T25] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 254.607874][ T25] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 254.611240][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.619542][ T9054] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 254.631540][ T25] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 254.889038][ T829] usb 6-1: USB disconnect, device number 3 [ 255.072202][ T39] audit: type=1400 audit(1729549256.994:500): avc: denied { connect } for pid=9063 comm="syz.3.976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 255.078194][ T39] audit: type=1400 audit(1729549257.004:501): avc: denied { read } for pid=9063 comm="syz.3.976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 255.161518][ T39] audit: type=1400 audit(1729549257.084:502): avc: denied { map } for pid=9071 comm="syz.0.977" path="socket:[27979]" dev="sockfs" ino=27979 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 255.365420][ T1379] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.367148][ T1379] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.370117][ T1139] sl0: compressed packet ignored [ 255.626332][ T9085] ------------[ cut here ]------------ [ 255.628015][ T9085] kmem_cache of name '9p-fcall-cache-syz' already exists [ 255.629902][ T9085] WARNING: CPU: 1 PID: 9085 at mm/slab_common.c:107 __kmem_cache_create_args+0xb0/0x3c0 [ 255.633144][ T9085] Modules linked in: [ 255.634170][ T9085] CPU: 1 UID: 0 PID: 9085 Comm: syz.0.978 Not tainted 6.12.0-rc4-syzkaller #0 [ 255.638003][ T9085] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 255.640581][ T9085] RIP: 0010:__kmem_cache_create_args+0xb0/0x3c0 [ 255.642125][ T9085] Code: 98 48 3d b0 d6 31 8e 74 25 48 8b 7b 60 48 89 ee e8 65 e6 42 09 85 c0 75 e0 90 48 c7 c7 48 1f 7b 8d 48 89 ee e8 41 11 7e ff 90 <0f> 0b 90 90 be 20 00 00 00 48 89 ef e8 ef e7 42 09 48 85 c0 0f 85 [ 255.647118][ T9085] RSP: 0018:ffffc9002286f900 EFLAGS: 00010282 [ 255.648798][ T9085] RAX: 0000000000000000 RBX: ffff888022fc4f00 RCX: ffffc9000cab2000 [ 255.650860][ T9085] RDX: 0000000000040000 RSI: ffffffff814e71b6 RDI: 0000000000000001 [ 255.652978][ T9085] RBP: ffff88804cfb2640 R08: 0000000000000001 R09: 0000000000000000 [ 255.655424][ T9085] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 255.657920][ T9085] R13: 0000000000020018 R14: ffffc9002286f9f0 R15: 0000000000020018 [ 255.660095][ T9085] FS: 00007fbf09b1e6c0(0000) GS:ffff88806a700000(0000) knlGS:0000000000000000 [ 255.662420][ T9085] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 255.664204][ T9085] CR2: 0000000000000000 CR3: 00000000524ce000 CR4: 0000000000352ef0 [ 255.666175][ T9085] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 255.668205][ T9085] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 255.670852][ T9085] Call Trace: [ 255.671775][ T9085] [ 255.672570][ T9085] ? __warn+0xea/0x3d0 [ 255.673779][ T9085] ? __kmem_cache_create_args+0xb0/0x3c0 [ 255.675529][ T9085] ? report_bug+0x3c0/0x580 [ 255.676951][ T9085] ? handle_bug+0x54/0xa0 [ 255.678293][ T9085] ? exc_invalid_op+0x17/0x50 [ 255.679809][ T9085] ? asm_exc_invalid_op+0x1a/0x20 [ 255.681229][ T9085] ? __warn_printk+0x1a6/0x350 [ 255.682525][ T9085] ? __kmem_cache_create_args+0xb0/0x3c0 [ 255.684428][ T9085] p9_client_create+0xee0/0x11f0 [ 255.685863][ T9085] ? __pfx_p9_client_create+0x10/0x10 [ 255.687291][ T9085] ? __raw_spin_lock_init+0x3a/0x110 [ 255.688781][ T9085] v9fs_session_init+0x1f8/0x1a80 [ 255.690196][ T9085] ? __pfx_v9fs_session_init+0x10/0x10 [ 255.691646][ T9085] ? kasan_save_track+0x14/0x30 [ 255.693063][ T9085] v9fs_mount+0xc6/0xa50 [ 255.694191][ T9085] ? __pfx_v9fs_mount+0x10/0x10 [ 255.695473][ T9085] ? selinux_sb_eat_lsm_opts+0x594/0x700 [ 255.696980][ T9085] ? cap_capable+0x1cf/0x240 [ 255.698210][ T9085] ? __pfx_v9fs_mount+0x10/0x10 [ 255.699592][ T9085] legacy_get_tree+0x109/0x220 [ 255.700873][ T9085] vfs_get_tree+0x8f/0x380 [ 255.702071][ T9085] path_mount+0x14e6/0x1f20 [ 255.703367][ T9085] ? kmem_cache_free+0x152/0x4b0 [ 255.704694][ T9085] ? __pfx_path_mount+0x10/0x10 [ 255.705988][ T9085] ? putname+0x12e/0x170 [ 255.707108][ T9085] __x64_sys_mount+0x294/0x320 [ 255.708378][ T9085] ? __pfx___x64_sys_mount+0x10/0x10 [ 255.709936][ T9085] do_syscall_64+0xcd/0x250 [ 255.711160][ T9085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.712735][ T9085] RIP: 0033:0x7fbf08d7dff9 [ 255.713939][ T9085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.719187][ T9085] RSP: 002b:00007fbf09b1e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 255.722136][ T9085] RAX: ffffffffffffffda RBX: 00007fbf08f36130 RCX: 00007fbf08d7dff9 [ 255.725089][ T9085] RDX: 0000000020000000 RSI: 0000000020000480 RDI: 00000000200000c0 [ 255.727987][ T9085] RBP: 00007fbf08df0296 R08: 0000000020000c00 R09: 0000000000000000 [ 255.730573][ T9085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 255.732740][ T9085] R13: 0000000000000000 R14: 00007fbf08f36130 R15: 00007ffd5b272c28 [ 255.735556][ T9085] [ 255.736679][ T9085] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 255.739149][ T9085] CPU: 1 UID: 0 PID: 9085 Comm: syz.0.978 Not tainted 6.12.0-rc4-syzkaller #0 [ 255.742098][ T9085] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 255.745628][ T9085] Call Trace: [ 255.746759][ T9085] [ 255.747796][ T9085] dump_stack_lvl+0x3d/0x1f0 [ 255.749402][ T9085] panic+0x71d/0x800 [ 255.750728][ T9085] ? __pfx_panic+0x10/0x10 [ 255.752397][ T9085] ? show_trace_log_lvl+0x29d/0x3d0 [ 255.754323][ T9085] ? __kmem_cache_create_args+0xb0/0x3c0 [ 255.756375][ T9085] check_panic_on_warn+0xab/0xb0 [ 255.758207][ T9085] __warn+0xf6/0x3d0 [ 255.759599][ T9085] ? __kmem_cache_create_args+0xb0/0x3c0 [ 255.761605][ T9085] report_bug+0x3c0/0x580 [ 255.763192][ T9085] handle_bug+0x54/0xa0 [ 255.764616][ T9085] exc_invalid_op+0x17/0x50 [ 255.766049][ T9085] asm_exc_invalid_op+0x1a/0x20 [ 255.767606][ T9085] RIP: 0010:__kmem_cache_create_args+0xb0/0x3c0 [ 255.769705][ T9085] Code: 98 48 3d b0 d6 31 8e 74 25 48 8b 7b 60 48 89 ee e8 65 e6 42 09 85 c0 75 e0 90 48 c7 c7 48 1f 7b 8d 48 89 ee e8 41 11 7e ff 90 <0f> 0b 90 90 be 20 00 00 00 48 89 ef e8 ef e7 42 09 48 85 c0 0f 85 [ 255.776582][ T9085] RSP: 0018:ffffc9002286f900 EFLAGS: 00010282 [ 255.778776][ T9085] RAX: 0000000000000000 RBX: ffff888022fc4f00 RCX: ffffc9000cab2000 [ 255.781245][ T9085] RDX: 0000000000040000 RSI: ffffffff814e71b6 RDI: 0000000000000001 [ 255.783285][ T9085] RBP: ffff88804cfb2640 R08: 0000000000000001 R09: 0000000000000000 [ 255.785336][ T9085] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 255.787380][ T9085] R13: 0000000000020018 R14: ffffc9002286f9f0 R15: 0000000000020018 [ 255.790214][ T9085] ? __warn_printk+0x1a6/0x350 [ 255.791992][ T9085] p9_client_create+0xee0/0x11f0 [ 255.793818][ T9085] ? __pfx_p9_client_create+0x10/0x10 [ 255.795766][ T9085] ? __raw_spin_lock_init+0x3a/0x110 [ 255.797676][ T9085] v9fs_session_init+0x1f8/0x1a80 [ 255.799495][ T9085] ? __pfx_v9fs_session_init+0x10/0x10 [ 255.801507][ T9085] ? kasan_save_track+0x14/0x30 [ 255.803284][ T9085] v9fs_mount+0xc6/0xa50 [ 255.804674][ T9085] ? __pfx_v9fs_mount+0x10/0x10 [ 255.805973][ T9085] ? selinux_sb_eat_lsm_opts+0x594/0x700 [ 255.807457][ T9085] ? cap_capable+0x1cf/0x240 [ 255.808730][ T9085] ? __pfx_v9fs_mount+0x10/0x10 [ 255.810037][ T9085] legacy_get_tree+0x109/0x220 [ 255.811321][ T9085] vfs_get_tree+0x8f/0x380 [ 255.812552][ T9085] path_mount+0x14e6/0x1f20 [ 255.813765][ T9085] ? kmem_cache_free+0x152/0x4b0 [ 255.815081][ T9085] ? __pfx_path_mount+0x10/0x10 [ 255.816380][ T9085] ? putname+0x12e/0x170 [ 255.817427][ T9085] __x64_sys_mount+0x294/0x320 [ 255.818612][ T9085] ? __pfx___x64_sys_mount+0x10/0x10 [ 255.819928][ T9085] do_syscall_64+0xcd/0x250 [ 255.821054][ T9085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.822515][ T9085] RIP: 0033:0x7fbf08d7dff9 [ 255.823944][ T9085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.828750][ T9085] RSP: 002b:00007fbf09b1e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 255.830824][ T9085] RAX: ffffffffffffffda RBX: 00007fbf08f36130 RCX: 00007fbf08d7dff9 [ 255.832829][ T9085] RDX: 0000000020000000 RSI: 0000000020000480 RDI: 00000000200000c0 [ 255.834799][ T9085] RBP: 00007fbf08df0296 R08: 0000000020000c00 R09: 0000000000000000 [ 255.836801][ T9085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 255.838867][ T9085] R13: 0000000000000000 R14: 00007fbf08f36130 R15: 00007ffd5b272c28 [ 255.840944][ T9085] [ 255.842400][ T9085] Kernel Offset: disabled [ 255.843656][ T9085] Rebooting in 86400 seconds.. VM DIAGNOSIS: 22:20:57 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000001 RBX=0000000000000022 RCX=ffffffff8169b9fe RDX=fffffbfff2dc5389 RSI=0000000000000008 RDI=ffffffff96e29c40 RBP=0000000000000000 RSP=ffffc900065f7948 R8 =0000000000000000 R9 =fffffbfff2dc5388 R10=ffffffff96e29c47 R11=0000000000000002 R12=0000000000000000 R13=ffff888027418b30 R14=0000000000000022 R15=ffff888027418000 RIP=ffffffff8169ba06 RFL=00000047 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ff0703052d8 CR3=0000000044d8e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000020000040 Opmask01=0000000000000000 Opmask02=00000000fc000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff9d19c570 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff0701f1133 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff0701f1140 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff0701f113a ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff0701f114e ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff0701f11d4 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff0701f12b2 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000027800000004 ffffffff00000130 0000009800000000 ffffffffffffffff ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7400736e6f736972 61706d6f6320796e 616d206f6f740075 6c6c253d73706d6f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 636e00644674754f 6b2065736f6c6320 6f742064656c6961 66007265746c6966 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000000004e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff850af9e5 RDI=ffffffff9aae6b80 RBP=ffffffff9aae6b40 RSP=ffffc9002286f268 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=000000000000004e R14=ffffffff850af980 R15=0000000000000000 RIP=ffffffff850afa0f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fbf09b1e6c0 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=00000000524ce000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 ffffffff81d4e79c ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbf08df1133 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbf08df1140 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbf08df113a ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbf08df114e ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbf08df11d4 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbf08df12b2 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbf08f0b488 00007fbf08f0b480 00007fbf08f0b478 00007fbf08f0b450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbf09a6d100 00007fbf08f0b440 00007fbf08f0b458 00007fbf08f0b4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbf08f0b498 00007fbf08f0b490 00007fbf08f0b488 00007fbf08f0b480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000038 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000475467 RBX=0000000000000002 RCX=ffffffff8b226579 RDX=0000000000000000 RSI=ffffffff8b6cd020 RDI=ffffffff8bd1a9c0 RBP=ffffed1003b5b000 RSP=ffffc90000197e08 R8 =0000000000000001 R9 =ffffed100d507025 R10=ffff88806a83812b R11=0000000000000000 R12=0000000000000002 R13=ffff88801dad8000 R14=ffffffff905f4b08 R15=0000000000000000 RIP=ffffffff8b22795f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fdc21ffff5c CR3=00000000305b4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000097 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555755b3490 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdc2630bd00 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555755c129f 00005555755c0ff0 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555755b4fb4 00005555755b4fb0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0800089003000800 0888030004000008 0003ffffffff0401 c7100008012fc422 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0003002e01ffffff fffffffffffb0802 8003010000040806 020104a403800400 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 080004044f90006b 73617401ffffffff fffffffff5080380 0310000205000403 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff04088004 0285d2080008004d ca00000000000000 000000000001ffff ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffe708 08b80301080008b0 0300080008a00300 0800089803088480 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffe708 08b80301080008b0 0300080008a00300 0800089803088480 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff04088004 0285d2080008004d ca00000000000000 000000000001ffff ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 080004044f90006b 73617401ffffffff fffffffff5080380 0310000205000403 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100100005ba8008 0001080006011aac 03ffffffff040180 0404014ab6408010 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000080000000 RBX=0000000000000000 RCX=ffffffff84900423 RDX=ffff888027a7c880 RSI=0000000000000000 RDI=0000000000000007 RBP=0000000000000038 RSP=ffffc9000f657a30 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=00000000200aa278 R13=ffffc9000f657a88 R14=0000000000000000 R15=ffffc9000f657a88 RIP=ffffffff818d7f18 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fbf09b3f6c0 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005555841fd5c8 CR3=00000000524ce000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000097 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 ffffffff81582abc ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbf08df1133 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbf08df1140 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbf08df113a ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbf08df114e ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbf08df11d4 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbf08df12b2 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbf08f0b488 00007fbf08f0b480 00007fbf08f0b478 00007fbf08f0b450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbf09a6d100 00007fbf08f0b440 00007fbf08f0b458 00007fbf08f0b4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbf08f0b498 00007fbf08f0b490 00007fbf08f0b488 00007fbf08f0b480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000038 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000