last executing test programs: 36.874496499s ago: executing program 2 (id=122): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000070027bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0c080100a8000100140003007767300000000000000000000000000008000a00", @ANYRES32, @ANYBLOB="575301daf43fcb"], 0x3c}}, 0x0) 36.814757428s ago: executing program 2 (id=124): r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a18000000120a050000000000000000000a0000040400048014140000110001000000000000000000ed00000a"], 0x40}, 0x1, 0x0, 0x0, 0x4011}, 0x4) 36.811625771s ago: executing program 2 (id=126): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x401, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x58dd}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x40}}, 0xff9e) 36.744665846s ago: executing program 2 (id=128): syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x401c0}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}]}, 0x3c}}, 0x0) rt_sigsuspend(&(0x7f00000000c0)={[0x7e44]}, 0x8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x3}, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r7 = fsopen(&(0x7f0000000140)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000040)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006280)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x90, 0x0, 0x4000000a74e, {0x1, 0x0, 0x0, 0xffff, 0xfffffff8, 0x84, {0x4, 0x5, 0x7, 0x80000000, 0xfff, 0xffff, 0x7d59, 0x4, 0x4, 0x2000, 0x7f, 0x0, 0x0, 0x78002, 0xff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="00000000000000005c001280110001006272696467655f736c61766500000000440005800500050000000000050020000100000005000800000000000600", @ANYRES8=r3], 0x7c}}, 0x80) 35.895030736s ago: executing program 2 (id=143): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@updpolicy={0xd4, 0x19, 0x200, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x6, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb}}, [@replay_val={0x10, 0xa, {0x70bd2a, 0x70bd2a, 0x1}}, @sec_ctx={0xc, 0x8, {0x8}}]}, 0xd4}}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x400000004a882, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2145c99, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000023c0)={'veth1_to_batadv\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000000c80)={0x2c, r7, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x2c}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000000a0a01030000000000000009000000000900010073797a3000000000"], 0x20}}, 0x0) sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x74, r5, 0x4, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="f61e69a44ada"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="1c949229028e"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa}]}, 0x74}}, 0x20000854) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x30, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x652}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r10 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r10, 0x40305652, &(0x7f00000000c0)={0x0, 0x1, 0x10, 0x0, 0x2, 0x2080, 0x6ae0}) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r12, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000880)={'syztnl2\x00', r8, 0x29, 0x80, 0x5, 0x80000402, 0x7b, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x3c20, 0x2f00, 0xfffffffe, 0x8}}) sendmsg$nl_route_sched(r11, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x4000}, @TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 35.894464354s ago: executing program 2 (id=144): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) (async) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x4c, 0x12, 0x1, 0x70bd2b, 0x25dfdbfd, {0x2b, 0x40, 0xd8, 0x3, {0x4e22, 0x4e21, [0xffff64ac, 0x1014, 0x4, 0x6], [0xb3a, 0x80000001, 0xec, 0x5ae], 0x0, [0xffff0001, 0x9]}, 0x6, 0x9}}, 0x4c}}, 0xc4) 20.852982084s ago: executing program 32 (id=144): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) (async) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x4c, 0x12, 0x1, 0x70bd2b, 0x25dfdbfd, {0x2b, 0x40, 0xd8, 0x3, {0x4e22, 0x4e21, [0xffff64ac, 0x1014, 0x4, 0x6], [0xb3a, 0x80000001, 0xec, 0x5ae], 0x0, [0xffff0001, 0x9]}, 0x6, 0x9}}, 0x4c}}, 0xc4) 5.634393541s ago: executing program 4 (id=695): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}, 0x1f000000}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000004010) 5.334528317s ago: executing program 4 (id=698): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @last={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x74}, 0x1, 0x0, 0x0, 0x840}, 0x4000) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000001c0)=0xff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000300)=0x23) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000100)={0xfffffff6, 0x3fe, 0xfffffffd, 0xe, 0x4, "04ae080000000000007800000500080100", 0x1, 0x5fe}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000140)=0x8) r4 = syz_open_dev$video4linux(&(0x7f0000000040), 0x40007ff, 0x28842) ioctl$VIDIOC_ENUMSTD(r4, 0xc0485619, &(0x7f0000000080)={0xfffffffb, 0x100, "cde939b73644e113dd00b3eb443710d2ab8943e11513fc39", {0x3, 0xa0}, 0x101}) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000640)=0xa) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r0, 0x0, 0x0, 0x0) recvmsg$unix(r6, 0x0, 0x12060) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r6) 4.510348967s ago: executing program 4 (id=710): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0xffea, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c00018008000100000001000c0002"], 0x30}}, 0x0) 4.444818194s ago: executing program 4 (id=712): syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), 0xffffffffffffffff) mount(0x0, 0x0, 0x0, 0x208001, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x2) socket(0x2, 0x80805, 0x0) close(0x3) 4.394215853s ago: executing program 4 (id=714): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)={0x6c, r4, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x21, 0x1, @in6={0xa, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x13}, 0xf8}}, {0x20, 0x2, @in6={0xa, 0x0, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x6c}}, 0x0) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000500), 0x4001, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r5) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x188, r4, 0x100, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA={0xa0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe354}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x78d5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffb}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x6c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x682}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xdfe}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x542}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xee38}]}, @TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x20040041}, 0x44) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f0000000540)={"13c2de8a14e12887c33f146ff0f8f5927f197f471c79a874d1333da9a7cb12d2", r5, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r7, 0xc0383e04, &(0x7f0000000580)={""/32, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000600)=[{}, {}, {}]}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001fc0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000002000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(r8, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000002040)={0x1c, r9, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}, ["", "", "", ""]}, 0x1c}}, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000700)={&(0x7f0000000740)={0x1c, r1, 0x4, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xd9c5b5675bc215de}, 0x48081) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x24}}, 0xc0c4) 4.343195074s ago: executing program 4 (id=716): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) pselect6(0x40, &(0x7f0000000080)={0x7, 0x3, 0x1, 0x1, 0x3fc0000000, 0x100000001, 0x8, 0x2}, &(0x7f0000000240)={0x9, 0x5, 0x9, 0x0, 0x299, 0x2, 0xffffffff80000001, 0x2c362cc3}, 0x0, 0x0, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = creat(&(0x7f0000000140)='./bus\x00', 0xc) write$cgroup_int(r2, &(0x7f0000000540), 0xfffffdd8) write$P9_RLERROR(r2, &(0x7f0000000080)={0x10, 0x7, 0x1, {0x7, ']9%]\xffp#'}}, 0x10) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @loopback, 0x1087}, 0x1c) (async, rerun: 32) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (rerun: 32) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) (async) pipe(&(0x7f0000000440)={0xffffffffffffffff}) (async) r4 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000000000)='fd', 0x0, r3) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r1) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) (async) sendmsg$tipc(r5, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) (async, rerun: 32) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041800f3fe8000000000000000000000000000aafe8000000000000227bfa7b09303960e2f80ae"], 0xfdef) (async) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) shutdown(r1, 0x0) (async) accept4$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000200)=0x14, 0x800) 777.2517ms ago: executing program 3 (id=802): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0xff02) 696.573092ms ago: executing program 3 (id=803): syz_open_dev$usbmon(&(0x7f0000000140), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_RUN(r0, 0xae80, 0x0) syz_open_dev$usbfs(&(0x7f0000000c00), 0x71, 0x2081) syz_open_dev$usbmon(&(0x7f0000000140), 0x0, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) (async) ioctl$KVM_RUN(r0, 0xae80, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000c00), 0x71, 0x2081) (async) 627.117833ms ago: executing program 3 (id=804): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4400000010000104000081000000000000000000", @ANYRES32=0x0, @ANYBLOB="8a450200000000002400128009000100626f6e640000000014000280050001000600000008000200", @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x20000044}, 0x40) 625.170626ms ago: executing program 3 (id=812): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap$qrtrtun(&(0x7f000054d000/0x4000)=nil, 0x4000, 0x100000c, 0x4010, r0, 0x10000) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000200)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x7000000) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)={0x0, 0x2000, 0x0, 0x0, 0x0, 0x3cd}) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r3, 0x5760, 0x5e) fallocate(r0, 0x1, 0x6, 0x401) ioctl$SNDCTL_SEQ_GETTIME(r0, 0x80045113, &(0x7f0000000000)) 566.648668ms ago: executing program 3 (id=807): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}, 0xffffff7f}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000004010) 482.987977ms ago: executing program 1 (id=809): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0xc040) 482.678707ms ago: executing program 1 (id=810): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002a00)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x9}, {0x10, 0xffff}}}, 0x24}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@setlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4280}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0x3a}]}, 0x3c}}, 0x0) 375.101803ms ago: executing program 1 (id=811): syz_open_dev$dri(0x0, 0xd21, 0x0) syz_open_dev$dri(0x0, 0xfffffffffffffff0, 0x278342) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "3f60eb8f2777c39a", "5985e81ad0d9585bc175cbecd3f55eb699e3070cc206f3ba527c85bde06fbf19", "bc5ec28f", "b200"}, 0x38) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, &(0x7f0000000100)=@gcm_256={{}, "24747942338921a1", "d830005894bf527ae179a7173985202bbfb61b36f3678de8ea2d0d6616076243", "5615d9f5", "7c5cec21291a43fe"}, 0x38) 374.874229ms ago: executing program 0 (id=813): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000100)={[0xa2]}, 0x8, 0x100800) ioctl$KVM_RUN(r2, 0xae80, 0xe000000) 311.005584ms ago: executing program 3 (id=814): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="20000004000000000000005a99427cfd2a", @ANYRES16=r2, @ANYBLOB="01002cbd7000fcdbdf25020000000c00018008000100", @ANYRES32=r5, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x8001}, 0x4) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x4, 0x4, 0x8, 0x5, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x8, 0xa1, 0x2}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0xef787c6c885c6a6d, 0x8000, 0x200, 0x5, {{0x23, 0x4, 0x3, 0x0, 0x8c, 0x66, 0x0, 0x1, 0x33a065802793e5c6, 0x0, @multicast1, @multicast1, {[@timestamp_addr={0x44, 0x24, 0x75, 0x1, 0x5, [{@private=0xa010101, 0x8}, {@broadcast, 0x1}, {@broadcast, 0x4}, {@broadcast, 0x90f}]}, @rr={0x7, 0x1b, 0x44, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @broadcast, @loopback, @private=0xa010102]}, @timestamp_prespec={0x44, 0x1c, 0x5f, 0x3, 0x0, [{@loopback, 0x8}, {@remote, 0x8e}, {@loopback, 0x67}]}, @ra={0x94, 0x4}, @cipso={0x86, 0xb, 0x3, [{0x0, 0x5, "0015d5"}]}, @timestamp={0x44, 0xc, 0x5e, 0x0, 0x0, [0x4, 0x200]}]}}}}}) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x53, 0x800, 0xfffc, {0x4, 0x1}, {0x7f, 0x2}, @cond=[{0x7, 0x3, 0x200, 0xfe2d, 0xb, 0xfbfe}, {0x9, 0xb, 0x6, 0x801, 0x0, 0x529}]}) r8 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) poll(&(0x7f00000005c0)=[{r9, 0x1600}, {r8}], 0x2, 0x80000) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000340)={@broadcast, @local, 0x0}, &(0x7f0000000380)=0xc) r11 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r13 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r13, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r13, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) r15 = socket$nl_route(0x10, 0x3, 0x0) r16 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r16, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f94ea3c92b", 0x14}], 0x1}, 0x0) sendmsg$nl_route(r15, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r14, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r14], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r13, 0x89f3, &(0x7f0000000440)={'syztnl0\x00', &(0x7f0000000540)={'ip6gre0\x00', 0x0, 0x29, 0x39, 0x6, 0x800, 0x4, @private0, @loopback, 0x10, 0x118, 0x7}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000700)={0x128, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x128}}, 0x2000c000) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x36) 226.180571ms ago: executing program 0 (id=815): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x12, 0x3, &(0x7f0000000000)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) socket$l2tp(0x2, 0x2, 0x73) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x24, 0x140f, 0x1, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'umad\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x20008000) 225.888291ms ago: executing program 0 (id=816): r0 = socket$inet(0x2, 0x1, 0x100) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x8000003d) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) listen(r0, 0x9) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xffff}, {0x0, 0x0, 0x0, 0x8, 0x2, 0x3}, 0x0, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x4000080) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000000)=0x8, 0x4) 172.883051ms ago: executing program 1 (id=817): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r1 = socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES32=r2], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000001980)=""/236, &(0x7f0000000080)=0x18) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, 0x0) 172.653508ms ago: executing program 0 (id=818): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x56, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) mknod(&(0x7f0000000080)='./bus\x00', 0xc000, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/171, 0xab}], 0x1, &(0x7f0000000280)=""/85, 0x55}, 0x40000120) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="041817aaaaaaaaaa10"], 0x1a) 172.554324ms ago: executing program 0 (id=819): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0xc040) 171.490438ms ago: executing program 1 (id=820): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05e8ce00000000f7ffff4300000008000300", @ANYRES32=r2], 0x28}}, 0x0) (fail_nth: 10) 119.514044ms ago: executing program 0 (id=821): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r2, 0xae03, 0x51) clock_settime(0x0, &(0x7f0000009ac0)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000640)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x5, 0x7fff, 0x0, 0x62, 0x200}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x4}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x9, {0x1a9}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000820}, 0x14) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) setsockopt$inet_udp_int(r4, 0x11, 0x1, &(0x7f0000000080)=0x4, 0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="6c01000010001307fefffffffcdbdf252001000000000000000000000000000120010000000000000000000000000001000000004e210002020000206c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) 0s ago: executing program 1 (id=822): syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x401c0}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}]}, 0x3c}}, 0x0) rt_sigsuspend(&(0x7f00000000c0)={[0x7e44]}, 0x8) socket$inet6(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x3}, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006280)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x90, 0x0, 0x4000000a74e, {0x1, 0x0, 0x0, 0xffff, 0xfffffff8, 0x84, {0x4, 0x5, 0x7, 0x80000000, 0xfff, 0xffff, 0x7d59, 0x4, 0x4, 0x2000, 0x7f, 0x0, 0x0, 0x78002, 0xff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="00000000000000005c001280110001006272696467655f736c61766500000000440005800500050000000000050020000100000005000800000000000600", @ANYRES8=r3], 0x7c}}, 0x80) kernel console output (not intermixed with test programs): 0 PID: 5331 Comm: kworker/u33:1 Not tainted syzkaller #0 PREEMPT(full) [ 66.871395][ T5331] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 66.871403][ T5331] Workqueue: hci3 hci_rx_work [ 66.871418][ T5331] Call Trace: [ 66.871422][ T5331] [ 66.871426][ T5331] dump_stack_lvl+0x16c/0x1f0 [ 66.871441][ T5331] sysfs_warn_dup+0x7f/0xa0 [ 66.871456][ T5331] sysfs_create_dir_ns+0x24b/0x2b0 [ 66.871482][ T5331] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 66.871497][ T5331] ? find_held_lock+0x2b/0x80 [ 66.871514][ T5331] ? do_raw_spin_unlock+0x172/0x230 [ 66.871528][ T5331] kobject_add_internal+0x2c4/0x9b0 [ 66.871544][ T5331] kobject_add+0x16e/0x240 [ 66.871557][ T5331] ? __pfx_kobject_add+0x10/0x10 [ 66.871571][ T5331] ? do_raw_spin_unlock+0x172/0x230 [ 66.871583][ T5331] ? kobject_put+0xab/0x5a0 [ 66.871599][ T5331] device_add+0x288/0x1aa0 [ 66.871614][ T5331] ? __pfx_dev_set_name+0x10/0x10 [ 66.871629][ T5331] ? __pfx_device_add+0x10/0x10 [ 66.871643][ T5331] ? mgmt_send_event_skb+0x2fb/0x460 [ 66.871664][ T5331] hci_conn_add_sysfs+0x17e/0x230 [ 66.871676][ T5331] le_conn_complete_evt+0x1075/0x1d70 [ 66.871692][ T5331] ? preempt_count_sub+0xe0/0x160 [ 66.871709][ T5331] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 66.871725][ T5331] ? bt_warn+0xe4/0x120 [ 66.871739][ T5331] ? __pfx_bt_warn+0x10/0x10 [ 66.871758][ T5331] hci_le_conn_complete_evt+0x23c/0x370 [ 66.871778][ T5331] hci_le_meta_evt+0x357/0x5e0 [ 66.871788][ T5331] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 66.871806][ T5331] hci_event_packet+0x682/0x11c0 [ 66.871823][ T5331] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 66.871834][ T5331] ? __pfx_hci_event_packet+0x10/0x10 [ 66.871852][ T5331] ? kcov_remote_start+0x3c9/0x6d0 [ 66.871864][ T5331] ? lockdep_hardirqs_on+0x7c/0x110 [ 66.871879][ T5331] hci_rx_work+0x2c5/0x16b0 [ 66.871890][ T5331] ? rcu_is_watching+0x12/0xc0 [ 66.871906][ T5331] process_one_work+0x9cf/0x1b70 [ 66.871924][ T5331] ? __pfx_process_one_work+0x10/0x10 [ 66.871940][ T5331] ? assign_work+0x1a0/0x250 [ 66.871952][ T5331] worker_thread+0x6c8/0xf10 [ 66.871968][ T5331] ? __kthread_parkme+0x19e/0x250 [ 66.871989][ T5331] ? __pfx_worker_thread+0x10/0x10 [ 66.872001][ T5331] kthread+0x3c5/0x780 [ 66.872011][ T5331] ? __pfx_kthread+0x10/0x10 [ 66.872023][ T5331] ? rcu_is_watching+0x12/0xc0 [ 66.872036][ T5331] ? __pfx_kthread+0x10/0x10 [ 66.872048][ T5331] ret_from_fork+0x5d7/0x6f0 [ 66.872059][ T5331] ? __pfx_kthread+0x10/0x10 [ 66.872070][ T5331] ret_from_fork_asm+0x1a/0x30 [ 66.872093][ T5331] [ 66.872146][ T5331] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 66.874735][ T6721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.877391][ T5331] Bluetooth: hci3: failed to register connection device [ 66.884619][ T6721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.985639][ T6721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.210464][ T6244] usb 6-1: string descriptor 0 read error: -71 [ 67.223216][ T6244] usb 6-1: USB disconnect, device number 2 [ 67.231951][ T6752] genirq: Flags mismatch irq 4. 00200000 (pcl818) vs. 00200080 (ttyS0) [ 67.672013][ T6754] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 67.675262][ T6754] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 67.835359][ T40] kauditd_printk_skb: 35 callbacks suppressed [ 67.835375][ T40] audit: type=1400 audit(1756197715.512:323): avc: denied { getopt } for pid=6760 comm="syz.0.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 67.845554][ T40] audit: type=1400 audit(1756197715.512:324): avc: denied { ioctl } for pid=6760 comm="syz.0.247" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0xae41 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 67.861905][ T40] audit: type=1400 audit(1756197715.532:325): avc: denied { setopt } for pid=6713 comm="syz.3.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 68.158256][ T40] audit: type=1400 audit(1756197715.822:326): avc: denied { bind } for pid=6772 comm="syz.1.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 68.179516][ T6777] Bluetooth: (null): Invalid header checksum [ 68.225390][ T40] audit: type=1400 audit(1756197715.902:328): avc: denied { ioctl } for pid=6779 comm="syz.0.255" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 68.233656][ T40] audit: type=1400 audit(1756197715.902:327): avc: denied { ioctl } for pid=6779 comm="syz.0.255" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 68.280616][ T6040] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 68.366751][ T6785] FAULT_INJECTION: forcing a failure. [ 68.366751][ T6785] name failslab, interval 1, probability 0, space 0, times 0 [ 68.373554][ T6785] CPU: 0 UID: 0 PID: 6785 Comm: syz.3.256 Not tainted syzkaller #0 PREEMPT(full) [ 68.373582][ T6785] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 68.373593][ T6785] Call Trace: [ 68.373600][ T6785] [ 68.373607][ T6785] dump_stack_lvl+0x16c/0x1f0 [ 68.373638][ T6785] should_fail_ex+0x512/0x640 [ 68.373661][ T6785] ? __kvmalloc_node_noprof+0x124/0x620 [ 68.373683][ T6785] should_failslab+0xc2/0x120 [ 68.373707][ T6785] __kvmalloc_node_noprof+0x137/0x620 [ 68.373727][ T6785] ? __kvm_mmu_topup_memory_cache+0x450/0x600 [ 68.373755][ T6785] ? kvm_hv_setup_tsc_page+0x29a/0x8d0 [ 68.373814][ T6785] ? __kvm_mmu_topup_memory_cache+0x450/0x600 [ 68.373843][ T6785] __kvm_mmu_topup_memory_cache+0x450/0x600 [ 68.373880][ T6785] mmu_topup_memory_caches+0x25/0x170 [ 68.373904][ T6785] kvm_mmu_load+0xd6/0x23c0 [ 68.373925][ T6785] ? kvm_apic_has_interrupt+0x106/0x1f0 [ 68.373946][ T6785] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 68.373970][ T6785] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 68.373996][ T6785] ? __pfx_kvm_guest_time_update+0x10/0x10 [ 68.374021][ T6785] ? __pfx_kvm_mmu_load+0x10/0x10 [ 68.374041][ T6785] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 68.374069][ T6785] ? kvm_check_and_inject_events+0x71c/0x1310 [ 68.374102][ T6785] vcpu_run+0x358c/0x5580 [ 68.374130][ T6785] ? __lock_acquire+0xb97/0x1ce0 [ 68.374168][ T6785] ? __pfx_vcpu_run+0x10/0x10 [ 68.374199][ T6785] ? fpu_swap_kvm_fpstate+0x1be/0x410 [ 68.374223][ T6785] ? __local_bh_enable_ip+0xa4/0x120 [ 68.374253][ T6785] ? kvm_arch_vcpu_ioctl_run+0x1023/0x1980 [ 68.374286][ T6785] kvm_arch_vcpu_ioctl_run+0x1023/0x1980 [ 68.374330][ T6785] kvm_vcpu_ioctl+0x5eb/0x1690 [ 68.374360][ T6785] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 68.374387][ T6785] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 68.374410][ T6785] ? do_vfs_ioctl+0x128/0x14f0 [ 68.374441][ T6785] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 68.374472][ T6785] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 68.374511][ T6785] ? hook_file_ioctl_common+0x145/0x410 [ 68.374540][ T6785] ? selinux_file_ioctl+0x180/0x270 [ 68.374566][ T6785] ? selinux_file_ioctl+0xb4/0x270 [ 68.374593][ T6785] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 68.374620][ T6785] __x64_sys_ioctl+0x18b/0x210 [ 68.374652][ T6785] do_syscall_64+0xcd/0x4c0 [ 68.374677][ T6785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.374696][ T6785] RIP: 0033:0x7fdbf138ebe9 [ 68.374713][ T6785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.374730][ T6785] RSP: 002b:00007fdbef5f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 68.374748][ T6785] RAX: ffffffffffffffda RBX: 00007fdbf15b5fa0 RCX: 00007fdbf138ebe9 [ 68.374762][ T6785] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 68.374772][ T6785] RBP: 00007fdbef5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 68.374783][ T6785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.374795][ T6785] R13: 00007fdbf15b6038 R14: 00007fdbf15b5fa0 R15: 00007ffde6553488 [ 68.374821][ T6785] [ 68.627791][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 68.648962][ T40] audit: type=1400 audit(1756197716.332:329): avc: denied { setopt } for pid=6789 comm="syz.3.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 68.650009][ T6790] overlayfs: failed to resolve './bus/file0': -2 [ 68.698579][ T6790] netlink: 'syz.3.258': attribute type 32 has an invalid length. [ 68.800846][ T10] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 68.804483][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 68.808886][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 68.812499][ T10] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 68.827857][ T10] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 68.831619][ T10] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 68.834695][ T10] usb 5-1: Product: syz [ 68.836338][ T10] usb 5-1: Manufacturer: syz [ 68.847104][ T10] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 68.883911][ T6802] netlink: 16 bytes leftover after parsing attributes in process `syz.3.259'. [ 69.008258][ T40] audit: type=1400 audit(1756197716.692:330): avc: denied { read } for pid=6806 comm="syz.1.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 69.059514][ T40] audit: type=1400 audit(1756197716.742:331): avc: denied { write } for pid=6806 comm="syz.1.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 69.253715][ T949] usb 5-1: USB disconnect, device number 6 [ 69.333886][ T6812] support for the xor transformation has been removed. [ 69.476254][ T6827] FAULT_INJECTION: forcing a failure. [ 69.476254][ T6827] name failslab, interval 1, probability 0, space 0, times 0 [ 69.477267][ T6829] netlink: 16 bytes leftover after parsing attributes in process `syz.1.270'. [ 69.480663][ T6827] CPU: 2 UID: 0 PID: 6827 Comm: syz.3.269 Not tainted syzkaller #0 PREEMPT(full) [ 69.480679][ T6827] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 69.480685][ T6827] Call Trace: [ 69.480689][ T6827] [ 69.480693][ T6827] dump_stack_lvl+0x16c/0x1f0 [ 69.480708][ T6827] should_fail_ex+0x512/0x640 [ 69.480721][ T6827] ? __kvmalloc_node_noprof+0x124/0x620 [ 69.480733][ T6827] should_failslab+0xc2/0x120 [ 69.480747][ T6827] __kvmalloc_node_noprof+0x137/0x620 [ 69.480758][ T6827] ? __kvm_mmu_topup_memory_cache+0x450/0x600 [ 69.480775][ T6827] ? kvm_hv_setup_tsc_page+0x29a/0x8d0 [ 69.480793][ T6827] ? __kvm_mmu_topup_memory_cache+0x450/0x600 [ 69.480810][ T6827] __kvm_mmu_topup_memory_cache+0x450/0x600 [ 69.480830][ T6827] mmu_topup_memory_caches+0x25/0x170 [ 69.480843][ T6827] kvm_mmu_load+0xd6/0x23c0 [ 69.480853][ T6827] ? kvm_apic_has_interrupt+0x106/0x1f0 [ 69.480866][ T6827] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 69.480878][ T6827] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 69.480894][ T6827] ? __pfx_kvm_guest_time_update+0x10/0x10 [ 69.480907][ T6827] ? __pfx_kvm_mmu_load+0x10/0x10 [ 69.480918][ T6827] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 69.480934][ T6827] ? kvm_check_and_inject_events+0x71c/0x1310 [ 69.480952][ T6827] vcpu_run+0x358c/0x5580 [ 69.480968][ T6827] ? __lock_acquire+0xb97/0x1ce0 [ 69.480992][ T6827] ? __pfx_vcpu_run+0x10/0x10 [ 69.481009][ T6827] ? fpu_swap_kvm_fpstate+0x1be/0x410 [ 69.481024][ T6827] ? __local_bh_enable_ip+0xa4/0x120 [ 69.481040][ T6827] ? kvm_arch_vcpu_ioctl_run+0x1023/0x1980 [ 69.481055][ T6827] kvm_arch_vcpu_ioctl_run+0x1023/0x1980 [ 69.481074][ T6827] kvm_vcpu_ioctl+0x5eb/0x1690 [ 69.481090][ T6827] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 69.481105][ T6827] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 69.481122][ T6827] ? do_vfs_ioctl+0x128/0x14f0 [ 69.481139][ T6827] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 69.481156][ T6827] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 69.481178][ T6827] ? hook_file_ioctl_common+0x145/0x410 [ 69.481194][ T6827] ? selinux_file_ioctl+0x180/0x270 [ 69.481209][ T6827] ? selinux_file_ioctl+0xb4/0x270 [ 69.481225][ T6827] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 69.481240][ T6827] __x64_sys_ioctl+0x18b/0x210 [ 69.481257][ T6827] do_syscall_64+0xcd/0x4c0 [ 69.481271][ T6827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.481282][ T6827] RIP: 0033:0x7fdbf138ebe9 [ 69.481291][ T6827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.481301][ T6827] RSP: 002b:00007fdbef5f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 69.481312][ T6827] RAX: ffffffffffffffda RBX: 00007fdbf15b5fa0 RCX: 00007fdbf138ebe9 [ 69.481319][ T6827] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 69.481325][ T6827] RBP: 00007fdbef5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 69.481332][ T6827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.481338][ T6827] R13: 00007fdbf15b6038 R14: 00007fdbf15b5fa0 R15: 00007ffde6553488 [ 69.481351][ T6827] [ 69.630219][ T6832] bond1: entered promiscuous mode [ 69.636140][ T40] audit: type=1400 audit(1756197717.312:332): avc: denied { read append } for pid=6831 comm="syz.1.271" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 69.836391][ T6850] syzkaller0: entered promiscuous mode [ 69.838540][ T6850] syzkaller0: entered allmulticast mode [ 69.994263][ T6855] geneve2: entered promiscuous mode [ 69.996125][ T6855] geneve2: entered allmulticast mode [ 70.282639][ T6865] FAULT_INJECTION: forcing a failure. [ 70.282639][ T6865] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 70.287531][ T6865] CPU: 3 UID: 0 PID: 6865 Comm: syz.0.282 Not tainted syzkaller #0 PREEMPT(full) [ 70.287547][ T6865] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 70.287553][ T6865] Call Trace: [ 70.287558][ T6865] [ 70.287563][ T6865] dump_stack_lvl+0x16c/0x1f0 [ 70.287596][ T6865] should_fail_ex+0x512/0x640 [ 70.287617][ T6865] should_fail_alloc_page+0xe7/0x130 [ 70.287645][ T6865] prepare_alloc_pages+0x3c2/0x610 [ 70.287660][ T6865] ? rcu_is_watching+0x12/0xc0 [ 70.287676][ T6865] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 70.287690][ T6865] ? rcu_is_watching+0x12/0xc0 [ 70.287703][ T6865] ? trace_mm_page_alloc+0x11f/0x1a0 [ 70.287719][ T6865] ? __alloc_frozen_pages_noprof+0x294/0x23f0 [ 70.287731][ T6865] ? __pfx_stack_trace_save+0x10/0x10 [ 70.287747][ T6865] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 70.287758][ T6865] ? stack_depot_save_flags+0x29/0x9c0 [ 70.287775][ T6865] ? alloc_vmap_area+0x645/0x29c0 [ 70.287789][ T6865] ? __vmalloc_node_range_noprof+0x271/0x14b0 [ 70.287805][ T6865] ? copy_process+0x2c70/0x7690 [ 70.287819][ T6865] ? vhost_task_create+0x1d2/0x2e0 [ 70.287830][ T6865] ? kvm_mmu_post_init_vm+0x1b7/0x380 [ 70.287842][ T6865] ? kvm_arch_vcpu_ioctl_run+0x66/0x1980 [ 70.287857][ T6865] ? kvm_vcpu_ioctl+0x5eb/0x1690 [ 70.287870][ T6865] ? __x64_sys_ioctl+0x18b/0x210 [ 70.287886][ T6865] ? do_syscall_64+0xcd/0x4c0 [ 70.287903][ T6865] alloc_pages_bulk_noprof+0x71c/0x1410 [ 70.287915][ T6865] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 70.287929][ T6865] ? policy_nodemask+0xea/0x4e0 [ 70.287943][ T6865] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 70.287955][ T6865] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 70.287974][ T6865] kasan_populate_vmalloc+0xf1/0x1f0 [ 70.287996][ T6865] alloc_vmap_area+0x959/0x29c0 [ 70.288016][ T6865] ? __pfx_alloc_vmap_area+0x10/0x10 [ 70.288034][ T6865] __get_vm_area_node+0x1ca/0x330 [ 70.288055][ T6865] __vmalloc_node_range_noprof+0x271/0x14b0 [ 70.288072][ T6865] ? vhost_task_create+0x1d2/0x2e0 [ 70.288082][ T6865] ? local_lock_release+0x99/0x140 [ 70.288099][ T6865] ? vhost_task_create+0x1d2/0x2e0 [ 70.288109][ T6865] ? rcu_read_unlock+0x17/0x60 [ 70.288124][ T6865] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 70.288146][ T6865] ? vhost_task_create+0x1d2/0x2e0 [ 70.288156][ T6865] __vmalloc_node_noprof+0xad/0xf0 [ 70.288171][ T6865] ? vhost_task_create+0x1d2/0x2e0 [ 70.288183][ T6865] copy_process+0x2c70/0x7690 [ 70.288205][ T6865] ? __pfx_copy_process+0x10/0x10 [ 70.288222][ T6865] ? lockdep_init_map_type+0x5c/0x280 [ 70.288234][ T6865] ? lockdep_init_map_type+0x5c/0x280 [ 70.288244][ T6865] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 70.288259][ T6865] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 70.288277][ T6865] vhost_task_create+0x1d2/0x2e0 [ 70.288288][ T6865] ? __pfx_vhost_task_create+0x10/0x10 [ 70.288304][ T6865] ? __pfx_vhost_task_fn+0x10/0x10 [ 70.288322][ T6865] kvm_mmu_post_init_vm+0x1b7/0x380 [ 70.288336][ T6865] kvm_arch_vcpu_ioctl_run+0x66/0x1980 [ 70.288351][ T6865] ? kvm_vcpu_ioctl+0x14c6/0x1690 [ 70.288375][ T6865] kvm_vcpu_ioctl+0x5eb/0x1690 [ 70.288398][ T6865] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 70.288419][ T6865] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 70.288438][ T6865] ? do_vfs_ioctl+0x128/0x14f0 [ 70.288462][ T6865] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 70.288485][ T6865] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 70.288519][ T6865] ? hook_file_ioctl_common+0x145/0x410 [ 70.288541][ T6865] ? selinux_file_ioctl+0x180/0x270 [ 70.288563][ T6865] ? selinux_file_ioctl+0xb4/0x270 [ 70.288588][ T6865] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 70.288614][ T6865] __x64_sys_ioctl+0x18b/0x210 [ 70.288642][ T6865] do_syscall_64+0xcd/0x4c0 [ 70.288663][ T6865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.288680][ T6865] RIP: 0033:0x7f2f6cb8ebe9 [ 70.288695][ T6865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.288710][ T6865] RSP: 002b:00007f2f6d9f9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 70.288726][ T6865] RAX: ffffffffffffffda RBX: 00007f2f6cdb5fa0 RCX: 00007f2f6cb8ebe9 [ 70.288738][ T6865] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 70.288748][ T6865] RBP: 00007f2f6d9f9090 R08: 0000000000000000 R09: 0000000000000000 [ 70.288757][ T6865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.288766][ T6865] R13: 00007f2f6cdb6038 R14: 00007f2f6cdb5fa0 R15: 00007ffe653590b8 [ 70.288789][ T6865] [ 70.453199][ T6865] syz.0.282: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 70.459753][ T6865] CPU: 3 UID: 0 PID: 6865 Comm: syz.0.282 Not tainted syzkaller #0 PREEMPT(full) [ 70.459768][ T6865] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 70.459775][ T6865] Call Trace: [ 70.459779][ T6865] [ 70.459784][ T6865] dump_stack_lvl+0x16c/0x1f0 [ 70.459801][ T6865] warn_alloc+0x248/0x3a0 [ 70.459814][ T6865] ? __pfx_warn_alloc+0x10/0x10 [ 70.459826][ T6865] ? kfree+0x2b4/0x4d0 [ 70.459845][ T6865] ? __get_vm_area_node+0x208/0x330 [ 70.459863][ T6865] __vmalloc_node_range_noprof+0xb2d/0x14b0 [ 70.459879][ T6865] ? local_lock_release+0x99/0x140 [ 70.459896][ T6865] ? vhost_task_create+0x1d2/0x2e0 [ 70.459908][ T6865] ? rcu_read_unlock+0x17/0x60 [ 70.459923][ T6865] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 70.459944][ T6865] ? vhost_task_create+0x1d2/0x2e0 [ 70.459954][ T6865] __vmalloc_node_noprof+0xad/0xf0 [ 70.459970][ T6865] ? vhost_task_create+0x1d2/0x2e0 [ 70.459982][ T6865] copy_process+0x2c70/0x7690 [ 70.460004][ T6865] ? __pfx_copy_process+0x10/0x10 [ 70.460021][ T6865] ? lockdep_init_map_type+0x5c/0x280 [ 70.460033][ T6865] ? lockdep_init_map_type+0x5c/0x280 [ 70.460047][ T6865] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 70.460063][ T6865] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 70.460081][ T6865] vhost_task_create+0x1d2/0x2e0 [ 70.460092][ T6865] ? __pfx_vhost_task_create+0x10/0x10 [ 70.460107][ T6865] ? __pfx_vhost_task_fn+0x10/0x10 [ 70.460124][ T6865] kvm_mmu_post_init_vm+0x1b7/0x380 [ 70.460138][ T6865] kvm_arch_vcpu_ioctl_run+0x66/0x1980 [ 70.460155][ T6865] ? kvm_vcpu_ioctl+0x14c6/0x1690 [ 70.460172][ T6865] kvm_vcpu_ioctl+0x5eb/0x1690 [ 70.460188][ T6865] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 70.460203][ T6865] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 70.460217][ T6865] ? do_vfs_ioctl+0x128/0x14f0 [ 70.460234][ T6865] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 70.460254][ T6865] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 70.460279][ T6865] ? hook_file_ioctl_common+0x145/0x410 [ 70.460300][ T6865] ? selinux_file_ioctl+0x180/0x270 [ 70.460320][ T6865] ? selinux_file_ioctl+0xb4/0x270 [ 70.460343][ T6865] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 70.460368][ T6865] __x64_sys_ioctl+0x18b/0x210 [ 70.460397][ T6865] do_syscall_64+0xcd/0x4c0 [ 70.460420][ T6865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.460433][ T6865] RIP: 0033:0x7f2f6cb8ebe9 [ 70.460443][ T6865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.460453][ T6865] RSP: 002b:00007f2f6d9f9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 70.460464][ T6865] RAX: ffffffffffffffda RBX: 00007f2f6cdb5fa0 RCX: 00007f2f6cb8ebe9 [ 70.460470][ T6865] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 70.460477][ T6865] RBP: 00007f2f6d9f9090 R08: 0000000000000000 R09: 0000000000000000 [ 70.460483][ T6865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.460489][ T6865] R13: 00007f2f6cdb6038 R14: 00007f2f6cdb5fa0 R15: 00007ffe653590b8 [ 70.460503][ T6865] [ 70.460507][ T6865] Mem-Info: [ 70.585697][ T6865] active_anon:12282 inactive_anon:0 isolated_anon:0 [ 70.585697][ T6865] active_file:2403 inactive_file:40584 isolated_file:0 [ 70.585697][ T6865] unevictable:1768 dirty:2283 writeback:0 [ 70.585697][ T6865] slab_reclaimable:11883 slab_unreclaimable:68258 [ 70.585697][ T6865] mapped:25217 shmem:2391 pagetables:1275 [ 70.585697][ T6865] sec_pagetables:301 bounce:0 [ 70.585697][ T6865] kernel_misc_reclaimable:0 [ 70.585697][ T6865] free:469117 free_pcp:14501 free_cma:0 [ 70.603353][ T6865] Node 0 active_anon:49128kB inactive_anon:0kB active_file:9612kB inactive_file:162132kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:100868kB dirty:9132kB writeback:0kB shmem:6028kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12784kB pagetables:4884kB sec_pagetables:1204kB all_unreclaimable? no Balloon:0kB [ 70.616732][ T6865] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:144kB pagetables:216kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 70.631139][ T6865] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 70.643839][ T6865] lowmem_reserve[]: 0 1233 1233 1233 1233 [ 70.646388][ T6865] Node 0 DMA32 free:262908kB boost:0kB min:27516kB low:34392kB high:41268kB reserved_highatomic:0KB free_highatomic:0KB active_anon:49128kB inactive_anon:0kB active_file:9612kB inactive_file:162132kB unevictable:3536kB writepending:9136kB present:2080628kB managed:1263488kB mlocked:0kB bounce:0kB free_pcp:46292kB local_pcp:16128kB free_cma:0kB [ 70.661682][ T6865] lowmem_reserve[]: 0 0 0 0 0 [ 70.663774][ T6865] Node 1 Normal free:1598200kB boost:0kB min:39720kB low:49648kB high:59576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:3536kB writepending:4kB present:2097152kB managed:1781892kB mlocked:0kB bounce:0kB free_pcp:11264kB local_pcp:4096kB free_cma:0kB [ 70.676758][ T6865] lowmem_reserve[]: 0 0 0 0 0 [ 70.679212][ T6865] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 70.684462][ T6865] Node 0 DMA32: 4*4kB (UE) 74*8kB (UE) 431*16kB (UME) 302*32kB (UME) 68*64kB (UME) 39*128kB (UME) 23*256kB (UME) 16*512kB (UM) 11*1024kB (UM) 1*2048kB (M) 51*4096kB (UM) = 262800kB [ 70.692545][ T6865] Node 1 Normal: 56*4kB (UME) 7*8kB (UME) 24*16kB (UME) 33*32kB (UME) 11*64kB (UME) 7*128kB (UME) 4*256kB (UE) 3*512kB (M) 3*1024kB (UE) 2*2048kB (UM) 387*4096kB (M) = 1598200kB [ 70.700669][ T6865] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 70.704518][ T6865] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 70.708885][ T6865] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 70.712768][ T6865] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 70.716605][ T6865] 45377 total pagecache pages [ 70.719234][ T6865] 0 pages in swap cache [ 70.720991][ T6865] Free swap = 124996kB [ 70.722740][ T6865] Total swap = 124996kB [ 70.724491][ T6865] 1048443 pages RAM [ 70.726133][ T6865] 0 pages HighMem/MovableOnly [ 70.728591][ T6865] 283258 pages reserved [ 70.730593][ T6865] 0 pages cma reserved [ 70.894649][ T6885] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 70.965424][ T6893] block nbd1: Attempted send on invalid socket [ 70.967524][ T6893] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 70.972004][ T6893] vxfs: unable to read disk superblock at 1 [ 70.974300][ T6893] block nbd1: Attempted send on invalid socket [ 70.976398][ T6893] I/O error, dev nbd1, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 70.980613][ T6893] vxfs: unable to read disk superblock at 8 [ 70.983283][ T6893] vxfs: can't find superblock. [ 71.155949][ T6916] FAULT_INJECTION: forcing a failure. [ 71.155949][ T6916] name failslab, interval 1, probability 0, space 0, times 0 [ 71.161491][ T6916] CPU: 3 UID: 0 PID: 6916 Comm: syz.1.296 Not tainted syzkaller #0 PREEMPT(full) [ 71.161507][ T6916] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 71.161513][ T6916] Call Trace: [ 71.161518][ T6916] [ 71.161522][ T6916] dump_stack_lvl+0x16c/0x1f0 [ 71.161538][ T6916] should_fail_ex+0x512/0x640 [ 71.161552][ T6916] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 71.161565][ T6916] should_failslab+0xc2/0x120 [ 71.161578][ T6916] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 71.161589][ T6916] ? __kvm_mmu_topup_memory_cache+0x450/0x600 [ 71.161606][ T6916] ? kvm_hv_setup_tsc_page+0x29a/0x8d0 [ 71.161621][ T6916] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 71.161640][ T6916] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 71.161661][ T6916] mmu_topup_memory_caches+0x25/0x170 [ 71.161673][ T6916] kvm_mmu_load+0xd6/0x23c0 [ 71.161684][ T6916] ? kvm_apic_has_interrupt+0x106/0x1f0 [ 71.161696][ T6916] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 71.161709][ T6916] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 71.161725][ T6916] ? __pfx_kvm_guest_time_update+0x10/0x10 [ 71.161738][ T6916] ? __pfx_kvm_mmu_load+0x10/0x10 [ 71.161777][ T6916] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 71.161796][ T6916] ? kvm_check_and_inject_events+0x71c/0x1310 [ 71.161814][ T6916] vcpu_run+0x358c/0x5580 [ 71.161830][ T6916] ? __lock_acquire+0xb97/0x1ce0 [ 71.161850][ T6916] ? __pfx_vcpu_run+0x10/0x10 [ 71.161867][ T6916] ? fpu_swap_kvm_fpstate+0x1be/0x410 [ 71.161882][ T6916] ? __local_bh_enable_ip+0xa4/0x120 [ 71.161899][ T6916] ? kvm_arch_vcpu_ioctl_run+0x1023/0x1980 [ 71.161914][ T6916] kvm_arch_vcpu_ioctl_run+0x1023/0x1980 [ 71.161934][ T6916] kvm_vcpu_ioctl+0x5eb/0x1690 [ 71.161950][ T6916] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 71.161965][ T6916] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 71.161979][ T6916] ? do_vfs_ioctl+0x128/0x14f0 [ 71.161996][ T6916] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 71.162013][ T6916] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 71.162035][ T6916] ? hook_file_ioctl_common+0x145/0x410 [ 71.162055][ T6916] ? selinux_file_ioctl+0x180/0x270 [ 71.162070][ T6916] ? selinux_file_ioctl+0xb4/0x270 [ 71.162086][ T6916] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 71.162101][ T6916] __x64_sys_ioctl+0x18b/0x210 [ 71.162119][ T6916] do_syscall_64+0xcd/0x4c0 [ 71.162132][ T6916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.162144][ T6916] RIP: 0033:0x7ff01458ebe9 [ 71.162153][ T6916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.162163][ T6916] RSP: 002b:00007ff015433038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 71.162174][ T6916] RAX: ffffffffffffffda RBX: 00007ff0147b5fa0 RCX: 00007ff01458ebe9 [ 71.162181][ T6916] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 71.162187][ T6916] RBP: 00007ff015433090 R08: 0000000000000000 R09: 0000000000000000 [ 71.162193][ T6916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 71.162199][ T6916] R13: 00007ff0147b6038 R14: 00007ff0147b5fa0 R15: 00007ffda8a66e48 [ 71.162213][ T6916] [ 71.480784][ T6923] binder: 6922:6923 unknown command 0 [ 71.482678][ T6923] binder: 6922:6923 ioctl c0306201 200000000080 returned -22 [ 71.489261][ T6923] input: syz1 as /devices/virtual/input/input11 [ 71.852947][ T6940] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 71.910802][ T6947] binder: 6946:6947 ioctl c0306201 200000000080 returned -14 [ 72.415951][ T6979] bridge_slave_0: default FDB implementation only supports local addresses [ 72.423218][ T6987] netlink: 8 bytes leftover after parsing attributes in process `syz.1.318'. [ 72.426259][ T6989] netlink: 8 bytes leftover after parsing attributes in process `syz.1.318'. [ 72.451454][ T6993] netlink: 16 bytes leftover after parsing attributes in process `syz.0.320'. [ 72.478009][ T6998] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 72.480850][ T6998] efs: cannot read volume header [ 72.561656][ T7011] netlink: 40 bytes leftover after parsing attributes in process `syz.3.327'. [ 72.581896][ T7011] sp0: Synchronizing with TNC [ 72.791613][ T7025] netlink: 16 bytes leftover after parsing attributes in process `syz.3.332'. [ 72.824917][ T7027] overlayfs: missing 'workdir' [ 73.040406][ T7043] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 73.044649][ T46] Bluetooth: hci4: Frame reassembly failed (-84) [ 73.047287][ T12] Bluetooth: hci4: Frame reassembly failed (-84) [ 73.077439][ T7047] netlink: 16 bytes leftover after parsing attributes in process `syz.0.341'. [ 73.174756][ T40] kauditd_printk_skb: 24 callbacks suppressed [ 73.174767][ T40] audit: type=1400 audit(1756197720.852:357): avc: denied { read } for pid=7052 comm="syz.0.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 73.194029][ T7053] genirq: Flags mismatch irq 4. 00200000 (pcl818) vs. 00200080 (ttyS0) [ 73.489583][ T40] audit: type=1400 audit(1756197721.172:358): avc: denied { ioctl } for pid=7054 comm="syz.1.345" path="socket:[15560]" dev="sockfs" ino=15560 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 73.498694][ T40] audit: type=1400 audit(1756197721.172:359): avc: denied { name_connect } for pid=7054 comm="syz.1.345" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 73.533017][ T40] audit: type=1400 audit(1756197721.212:360): avc: denied { call } for pid=7056 comm="syz.1.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 74.163737][ T7063] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 74.166919][ T7063] efs: cannot read volume header [ 74.199238][ T7065] netlink: 16 bytes leftover after parsing attributes in process `syz.0.350'. [ 74.230915][ T40] audit: type=1400 audit(1756197721.912:361): avc: denied { setopt } for pid=7066 comm="syz.0.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 74.236069][ T7067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.351'. [ 74.238581][ T40] audit: type=1400 audit(1756197721.912:362): avc: denied { connect } for pid=7066 comm="syz.0.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 74.248044][ T7067] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 74.251099][ T7067] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 74.288333][ T7070] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 74.291483][ T7070] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 74.394785][ T40] audit: type=1400 audit(1756197722.072:363): avc: denied { mount } for pid=7075 comm="syz.1.356" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 74.407509][ T7077] erspan0: entered promiscuous mode [ 74.427751][ T7078] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 74.433192][ T7078] genirq: Flags mismatch irq 4. 00200000 (pcl818) vs. 00200080 (ttyS0) [ 74.441495][ T7077] syzkaller0: entered promiscuous mode [ 74.442340][ T40] audit: type=1400 audit(1756197722.122:364): avc: denied { bind } for pid=7076 comm="syz.0.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 74.443653][ T7077] syzkaller0: entered allmulticast mode [ 75.109642][ T5972] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 75.110001][ T5331] Bluetooth: hci4: command 0x1003 tx timeout [ 75.356960][ T7087] overlayfs: failed to resolve './file1': -2 [ 75.362413][ T40] audit: type=1400 audit(1756197723.042:365): avc: denied { unmount } for pid=5968 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 75.375958][ T7090] netlink: 16 bytes leftover after parsing attributes in process `syz.0.360'. [ 75.400305][ T7092] FAULT_INJECTION: forcing a failure. [ 75.400305][ T7092] name failslab, interval 1, probability 0, space 0, times 0 [ 75.406818][ T7092] CPU: 1 UID: 0 PID: 7092 Comm: syz.1.361 Not tainted syzkaller #0 PREEMPT(full) [ 75.406844][ T7092] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.406854][ T7092] Call Trace: [ 75.406861][ T7092] [ 75.406868][ T7092] dump_stack_lvl+0x16c/0x1f0 [ 75.406893][ T7092] should_fail_ex+0x512/0x640 [ 75.406913][ T7092] ? fs_reclaim_acquire+0xae/0x150 [ 75.406940][ T7092] ? tomoyo_encode2+0x100/0x3e0 [ 75.406966][ T7092] should_failslab+0xc2/0x120 [ 75.406987][ T7092] __kmalloc_noprof+0xd2/0x510 [ 75.407020][ T7092] tomoyo_encode2+0x100/0x3e0 [ 75.407050][ T7092] tomoyo_encode+0x29/0x50 [ 75.407075][ T7092] tomoyo_mount_acl+0x144/0x850 [ 75.407099][ T7092] ? bpf_ksym_find+0x127/0x1c0 [ 75.407126][ T7092] ? is_bpf_text_address+0x94/0x1a0 [ 75.407148][ T7092] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 75.407170][ T7092] ? __kernel_text_address+0xd/0x40 [ 75.407191][ T7092] ? unwind_get_return_address+0x59/0xa0 [ 75.407214][ T7092] ? arch_stack_walk+0xa6/0x100 [ 75.407262][ T7092] ? tomoyo_domain+0xbb/0x150 [ 75.407279][ T7092] ? tomoyo_profile+0x47/0x60 [ 75.407301][ T7092] tomoyo_mount_permission+0x16d/0x420 [ 75.407325][ T7092] ? tomoyo_mount_permission+0x14f/0x420 [ 75.407352][ T7092] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 75.407394][ T7092] security_sb_mount+0x9b/0x260 [ 75.407421][ T7092] path_mount+0x15f/0x2000 [ 75.407451][ T7092] ? __pfx_path_mount+0x10/0x10 [ 75.407476][ T7092] ? kmem_cache_free+0x2d1/0x4d0 [ 75.407494][ T7092] ? putname+0x154/0x1a0 [ 75.407522][ T7092] ? putname+0x154/0x1a0 [ 75.407548][ T7092] ? __x64_sys_mount+0x28d/0x310 [ 75.407570][ T7092] __x64_sys_mount+0x28d/0x310 [ 75.407594][ T7092] ? __pfx___x64_sys_mount+0x10/0x10 [ 75.407641][ T7092] do_syscall_64+0xcd/0x4c0 [ 75.407663][ T7092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.407682][ T7092] RIP: 0033:0x7ff01458ebe9 [ 75.407696][ T7092] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.407711][ T7092] RSP: 002b:00007ff015433038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 75.407728][ T7092] RAX: ffffffffffffffda RBX: 00007ff0147b5fa0 RCX: 00007ff01458ebe9 [ 75.407739][ T7092] RDX: 0000000000000000 RSI: 0000200000001340 RDI: 0000000000000000 [ 75.407748][ T7092] RBP: 00007ff015433090 R08: 0000000000000000 R09: 0000000000000000 [ 75.407758][ T7092] R10: 000000000294dcf7 R11: 0000000000000246 R12: 0000000000000001 [ 75.407768][ T7092] R13: 00007ff0147b6038 R14: 00007ff0147b5fa0 R15: 00007ffda8a66e48 [ 75.407792][ T7092] [ 75.511355][ T7097] netlink: 'syz.3.362': attribute type 2 has an invalid length. [ 75.524480][ T7099] binder: 7098:7099 ioctl c0306201 200000000180 returned -14 [ 75.546592][ T7097] evm: overlay not supported [ 75.555136][ T7105] capability: warning: `syz.0.366' uses 32-bit capabilities (legacy support in use) [ 75.570641][ T7105] netlink: 12 bytes leftover after parsing attributes in process `syz.0.366'. [ 75.623529][ T7112] genirq: Flags mismatch irq 4. 00200000 (pcl818) vs. 00200080 (ttyS0) [ 75.665934][ T7114] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 75.670673][ T7114] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 75.866020][ T7122] FAULT_INJECTION: forcing a failure. [ 75.866020][ T7122] name failslab, interval 1, probability 0, space 0, times 0 [ 75.870972][ T7122] CPU: 0 UID: 0 PID: 7122 Comm: syz.0.373 Not tainted syzkaller #0 PREEMPT(full) [ 75.870988][ T7122] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.870995][ T7122] Call Trace: [ 75.870999][ T7122] [ 75.871004][ T7122] dump_stack_lvl+0x16c/0x1f0 [ 75.871021][ T7122] should_fail_ex+0x512/0x640 [ 75.871035][ T7122] ? fs_reclaim_acquire+0xae/0x150 [ 75.871052][ T7122] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 75.871085][ T7122] should_failslab+0xc2/0x120 [ 75.871101][ T7122] __kmalloc_noprof+0xd2/0x510 [ 75.871112][ T7122] ? trace_kmalloc+0x2b/0xd0 [ 75.871126][ T7122] ? __kmalloc_noprof+0x242/0x510 [ 75.871139][ T7122] tomoyo_realpath_from_path+0xc2/0x6e0 [ 75.871158][ T7122] ? tomoyo_fill_path_info+0x233/0x420 [ 75.871174][ T7122] tomoyo_mount_acl+0x1ae/0x850 [ 75.871189][ T7122] ? bpf_ksym_find+0x127/0x1c0 [ 75.871209][ T7122] ? is_bpf_text_address+0x94/0x1a0 [ 75.871223][ T7122] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 75.871238][ T7122] ? __kernel_text_address+0xd/0x40 [ 75.871251][ T7122] ? unwind_get_return_address+0x59/0xa0 [ 75.871265][ T7122] ? arch_stack_walk+0xa6/0x100 [ 75.871293][ T7122] ? tomoyo_domain+0xbb/0x150 [ 75.871304][ T7122] ? tomoyo_profile+0x47/0x60 [ 75.871316][ T7122] tomoyo_mount_permission+0x16d/0x420 [ 75.871332][ T7122] ? tomoyo_mount_permission+0x14f/0x420 [ 75.871349][ T7122] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 75.871375][ T7122] security_sb_mount+0x9b/0x260 [ 75.871391][ T7122] path_mount+0x15f/0x2000 [ 75.871409][ T7122] ? __pfx_path_mount+0x10/0x10 [ 75.871425][ T7122] ? kmem_cache_free+0x2d1/0x4d0 [ 75.871436][ T7122] ? putname+0x154/0x1a0 [ 75.871453][ T7122] ? putname+0x154/0x1a0 [ 75.871469][ T7122] ? __x64_sys_mount+0x28d/0x310 [ 75.871483][ T7122] __x64_sys_mount+0x28d/0x310 [ 75.871498][ T7122] ? __pfx___x64_sys_mount+0x10/0x10 [ 75.871518][ T7122] do_syscall_64+0xcd/0x4c0 [ 75.871533][ T7122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.871545][ T7122] RIP: 0033:0x7f2f6cb8ebe9 [ 75.871555][ T7122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.871566][ T7122] RSP: 002b:00007f2f6d9f9038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 75.871577][ T7122] RAX: ffffffffffffffda RBX: 00007f2f6cdb5fa0 RCX: 00007f2f6cb8ebe9 [ 75.871585][ T7122] RDX: 0000000000000000 RSI: 0000200000001340 RDI: 0000000000000000 [ 75.871591][ T7122] RBP: 00007f2f6d9f9090 R08: 0000000000000000 R09: 0000000000000000 [ 75.871598][ T7122] R10: 000000000294dcf7 R11: 0000000000000246 R12: 0000000000000001 [ 75.871605][ T7122] R13: 00007f2f6cdb6038 R14: 00007f2f6cdb5fa0 R15: 00007ffe653590b8 [ 75.871619][ T7122] [ 75.871656][ T7122] ERROR: Out of memory at tomoyo_realpath_from_path. [ 75.911099][ T40] audit: type=1400 audit(1756197723.592:366): avc: denied { execute } for pid=7123 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 76.107959][ T5331] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.112440][ T5331] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.116347][ T5331] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.120221][ T5331] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.123287][ T5331] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.138947][ T7135] FAULT_INJECTION: forcing a failure. [ 76.138947][ T7135] name failslab, interval 1, probability 0, space 0, times 0 [ 76.143232][ T7135] CPU: 1 UID: 0 PID: 7135 Comm: syz.0.378 Not tainted syzkaller #0 PREEMPT(full) [ 76.143247][ T7135] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 76.143254][ T7135] Call Trace: [ 76.143258][ T7135] [ 76.143262][ T7135] dump_stack_lvl+0x16c/0x1f0 [ 76.143278][ T7135] should_fail_ex+0x512/0x640 [ 76.143291][ T7135] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 76.143304][ T7135] should_failslab+0xc2/0x120 [ 76.143317][ T7135] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 76.143328][ T7135] ? __kvm_mmu_topup_memory_cache+0x450/0x600 [ 76.143344][ T7135] ? kvm_hv_setup_tsc_page+0x29a/0x8d0 [ 76.143360][ T7135] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 76.143379][ T7135] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 76.143400][ T7135] mmu_topup_memory_caches+0x25/0x170 [ 76.143413][ T7135] kvm_mmu_load+0xd6/0x23c0 [ 76.143425][ T7135] ? kvm_apic_has_interrupt+0x106/0x1f0 [ 76.143437][ T7135] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 76.143450][ T7135] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 76.143466][ T7135] ? __pfx_kvm_guest_time_update+0x10/0x10 [ 76.143479][ T7135] ? __pfx_kvm_mmu_load+0x10/0x10 [ 76.143489][ T7135] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 76.143507][ T7135] ? kvm_check_and_inject_events+0x71c/0x1310 [ 76.143525][ T7135] vcpu_run+0x358c/0x5580 [ 76.143540][ T7135] ? __lock_acquire+0xb97/0x1ce0 [ 76.143561][ T7135] ? __pfx_vcpu_run+0x10/0x10 [ 76.143578][ T7135] ? fpu_swap_kvm_fpstate+0x1be/0x410 [ 76.143593][ T7135] ? __local_bh_enable_ip+0xa4/0x120 [ 76.143610][ T7135] ? kvm_arch_vcpu_ioctl_run+0x1023/0x1980 [ 76.143625][ T7135] kvm_arch_vcpu_ioctl_run+0x1023/0x1980 [ 76.143644][ T7135] kvm_vcpu_ioctl+0x5eb/0x1690 [ 76.143661][ T7135] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 76.143675][ T7135] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 76.143690][ T7135] ? do_vfs_ioctl+0x128/0x14f0 [ 76.143707][ T7135] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 76.143724][ T7135] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 76.143746][ T7135] ? hook_file_ioctl_common+0x145/0x410 [ 76.143762][ T7135] ? selinux_file_ioctl+0x180/0x270 [ 76.143776][ T7135] ? selinux_file_ioctl+0xb4/0x270 [ 76.143793][ T7135] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 76.143808][ T7135] __x64_sys_ioctl+0x18b/0x210 [ 76.143825][ T7135] do_syscall_64+0xcd/0x4c0 [ 76.143839][ T7135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.143850][ T7135] RIP: 0033:0x7f2f6cb8ebe9 [ 76.143860][ T7135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.143870][ T7135] RSP: 002b:00007f2f6d9f9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 76.143881][ T7135] RAX: ffffffffffffffda RBX: 00007f2f6cdb5fa0 RCX: 00007f2f6cb8ebe9 [ 76.143887][ T7135] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 76.143893][ T7135] RBP: 00007f2f6d9f9090 R08: 0000000000000000 R09: 0000000000000000 [ 76.143900][ T7135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 76.143906][ T7135] R13: 00007f2f6cdb6038 R14: 00007f2f6cdb5fa0 R15: 00007ffe653590b8 [ 76.143919][ T7135] [ 76.327583][ T7132] chnl_net:caif_netlink_parms(): no params data found [ 76.340765][ T7143] FAULT_INJECTION: forcing a failure. [ 76.340765][ T7143] name failslab, interval 1, probability 0, space 0, times 0 [ 76.345009][ T7143] CPU: 3 UID: 0 PID: 7143 Comm: syz.3.380 Not tainted syzkaller #0 PREEMPT(full) [ 76.345024][ T7143] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 76.345031][ T7143] Call Trace: [ 76.345035][ T7143] [ 76.345039][ T7143] dump_stack_lvl+0x16c/0x1f0 [ 76.345055][ T7143] should_fail_ex+0x512/0x640 [ 76.345068][ T7143] ? __kvmalloc_node_noprof+0x124/0x620 [ 76.345080][ T7143] should_failslab+0xc2/0x120 [ 76.345094][ T7143] __kvmalloc_node_noprof+0x137/0x620 [ 76.345105][ T7143] ? seq_read_iter+0x826/0x12c0 [ 76.345118][ T7143] ? seq_read_iter+0x826/0x12c0 [ 76.345128][ T7143] seq_read_iter+0x826/0x12c0 [ 76.345138][ T7143] ? register_lock_class+0x41/0x4c0 [ 76.345162][ T7143] seq_read+0x3a3/0x570 [ 76.345173][ T7143] ? __pfx_seq_read+0x10/0x10 [ 76.345186][ T7143] ? avc_policy_seqno+0x9/0x20 [ 76.345201][ T7143] ? rw_verify_area+0xcf/0x6c0 [ 76.345217][ T7143] ? __pfx_seq_read+0x10/0x10 [ 76.345228][ T7143] vfs_read+0x1e4/0xcf0 [ 76.345241][ T7143] ? __pfx___mutex_lock+0x10/0x10 [ 76.345263][ T7143] ? __pfx_vfs_read+0x10/0x10 [ 76.345278][ T7143] ? __fget_files+0x20e/0x3c0 [ 76.345294][ T7143] ksys_read+0x12a/0x250 [ 76.345304][ T7143] ? __pfx_ksys_read+0x10/0x10 [ 76.345319][ T7143] do_syscall_64+0xcd/0x4c0 [ 76.345333][ T7143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.345346][ T7143] RIP: 0033:0x7fdbf138ebe9 [ 76.345355][ T7143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.345366][ T7143] RSP: 002b:00007fdbef5f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 76.345376][ T7143] RAX: ffffffffffffffda RBX: 00007fdbf15b5fa0 RCX: 00007fdbf138ebe9 [ 76.345383][ T7143] RDX: 0000000000002020 RSI: 0000200000000940 RDI: 0000000000000004 [ 76.345389][ T7143] RBP: 00007fdbef5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 76.345395][ T7143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.345401][ T7143] R13: 00007fdbf15b6038 R14: 00007fdbf15b5fa0 R15: 00007ffde6553488 [ 76.345415][ T7143] [ 76.393096][ T1041] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.401024][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.436454][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.454999][ T7147] bond0: option mode: unable to set because the bond device has slaves [ 76.587484][ T1041] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.649571][ T7132] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.652764][ T7132] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.655672][ T7132] bridge_slave_0: entered allmulticast mode [ 76.663354][ T7132] bridge_slave_0: entered promiscuous mode [ 76.684773][ T1041] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.686849][ T7165] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 76.694544][ T7165] efs: cannot read volume header [ 76.702854][ T7132] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.707988][ T7132] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.711039][ T7132] bridge_slave_1: entered allmulticast mode [ 76.716367][ T7132] bridge_slave_1: entered promiscuous mode [ 76.771941][ T7132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.781665][ T7132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.825373][ T1041] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.917534][ T7132] team0: Port device team_slave_0 added [ 76.922764][ T7179] syz.1.394 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 76.923910][ T7132] team0: Port device team_slave_1 added [ 76.977321][ T7132] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.982475][ T7132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.994018][ T7186] FAULT_INJECTION: forcing a failure. [ 76.994018][ T7186] name failslab, interval 1, probability 0, space 0, times 0 [ 76.994144][ T7132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.000164][ T7186] CPU: 3 UID: 0 PID: 7186 Comm: syz.0.398 Not tainted syzkaller #0 PREEMPT(full) [ 77.000188][ T7186] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 77.000200][ T7186] Call Trace: [ 77.000212][ T7186] [ 77.000219][ T7186] dump_stack_lvl+0x16c/0x1f0 [ 77.000266][ T7186] should_fail_ex+0x512/0x640 [ 77.000294][ T7186] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 77.000317][ T7186] should_failslab+0xc2/0x120 [ 77.000335][ T7186] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 77.000355][ T7186] ? __alloc_skb+0x2b2/0x380 [ 77.000373][ T7186] ? avc_has_perm+0x144/0x1f0 [ 77.000393][ T7186] __alloc_skb+0x2b2/0x380 [ 77.000411][ T7186] ? __pfx___alloc_skb+0x10/0x10 [ 77.000427][ T7186] ? selinux_socket_getpeersec_dgram+0x1a4/0x370 [ 77.000449][ T7186] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 77.000479][ T7186] netlink_alloc_large_skb+0x69/0x130 [ 77.000501][ T7186] netlink_sendmsg+0x6a1/0xdd0 [ 77.000527][ T7186] ? __pfx_netlink_sendmsg+0x10/0x10 [ 77.000556][ T7186] ____sys_sendmsg+0xa98/0xc70 [ 77.000583][ T7186] ? copy_msghdr_from_user+0x10a/0x160 [ 77.000601][ T7186] ? __pfx_____sys_sendmsg+0x10/0x10 [ 77.000635][ T7186] ___sys_sendmsg+0x134/0x1d0 [ 77.000656][ T7186] ? __pfx____sys_sendmsg+0x10/0x10 [ 77.000703][ T7186] __sys_sendmsg+0x16d/0x220 [ 77.000724][ T7186] ? __pfx___sys_sendmsg+0x10/0x10 [ 77.000757][ T7186] do_syscall_64+0xcd/0x4c0 [ 77.000782][ T7186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.000799][ T7186] RIP: 0033:0x7f2f6cb8ebe9 [ 77.000813][ T7186] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.000831][ T7186] RSP: 002b:00007f2f6d9f9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 77.000847][ T7186] RAX: ffffffffffffffda RBX: 00007f2f6cdb5fa0 RCX: 00007f2f6cb8ebe9 [ 77.000859][ T7186] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 77.000870][ T7186] RBP: 00007f2f6d9f9090 R08: 0000000000000000 R09: 0000000000000000 [ 77.000881][ T7186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.000891][ T7186] R13: 00007f2f6cdb6038 R14: 00007f2f6cdb5fa0 R15: 00007ffe653590b8 [ 77.000913][ T7186] [ 77.006739][ T7188] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 77.011112][ T7132] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.012479][ T7188] efs: cannot read volume header [ 77.012561][ T7132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.090970][ T7132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.159521][ T7192] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 77.162270][ T7192] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 77.172245][ T7132] hsr_slave_0: entered promiscuous mode [ 77.174512][ T7132] hsr_slave_1: entered promiscuous mode [ 77.176548][ T7132] debugfs: 'hsr0' already exists in 'hsr' [ 77.178629][ T7132] Cannot create hsr debugfs directory [ 77.241004][ T7202] FAULT_INJECTION: forcing a failure. [ 77.241004][ T7202] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 77.246513][ T7202] CPU: 3 UID: 0 PID: 7202 Comm: syz.0.404 Not tainted syzkaller #0 PREEMPT(full) [ 77.246530][ T7202] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 77.246537][ T7202] Call Trace: [ 77.246542][ T7202] [ 77.246546][ T7202] dump_stack_lvl+0x16c/0x1f0 [ 77.246562][ T7202] should_fail_ex+0x512/0x640 [ 77.246579][ T7202] _copy_to_user+0x32/0xd0 [ 77.246595][ T7202] simple_read_from_buffer+0xcb/0x170 [ 77.246608][ T7202] proc_fail_nth_read+0x197/0x240 [ 77.246622][ T7202] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 77.246636][ T7202] ? rw_verify_area+0xcf/0x6c0 [ 77.246653][ T7202] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 77.246665][ T7202] vfs_read+0x1e4/0xcf0 [ 77.246678][ T7202] ? __pfx___mutex_lock+0x10/0x10 [ 77.246700][ T7202] ? __pfx_vfs_read+0x10/0x10 [ 77.246715][ T7202] ? __fget_files+0x20e/0x3c0 [ 77.246731][ T7202] ksys_read+0x12a/0x250 [ 77.246758][ T7202] ? __pfx_ksys_read+0x10/0x10 [ 77.246784][ T7202] do_syscall_64+0xcd/0x4c0 [ 77.246799][ T7202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.246812][ T7202] RIP: 0033:0x7f2f6cb8d5fc [ 77.246821][ T7202] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 77.246831][ T7202] RSP: 002b:00007f2f6d9f9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 77.246842][ T7202] RAX: ffffffffffffffda RBX: 00007f2f6cdb5fa0 RCX: 00007f2f6cb8d5fc [ 77.246849][ T7202] RDX: 000000000000000f RSI: 00007f2f6d9f90a0 RDI: 0000000000000003 [ 77.246856][ T7202] RBP: 00007f2f6d9f9090 R08: 0000000000000000 R09: 0000000000000000 [ 77.246862][ T7202] R10: 000000000294dcf7 R11: 0000000000000246 R12: 0000000000000001 [ 77.246868][ T7202] R13: 00007f2f6cdb6038 R14: 00007f2f6cdb5fa0 R15: 00007ffe653590b8 [ 77.246882][ T7202] [ 77.307660][ C3] vkms_vblank_simulate: vblank timer overrun [ 77.379832][ T1041] bridge_slave_1: left allmulticast mode [ 77.382350][ T1041] bridge_slave_1: left promiscuous mode [ 77.386873][ T1041] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.406252][ T1041] bridge_slave_0: left allmulticast mode [ 77.415272][ T7216] FAULT_INJECTION: forcing a failure. [ 77.415272][ T7216] name failslab, interval 1, probability 0, space 0, times 0 [ 77.417759][ T1041] bridge_slave_0: left promiscuous mode [ 77.420720][ T7216] CPU: 2 UID: 0 PID: 7216 Comm: syz.3.408 Not tainted syzkaller #0 PREEMPT(full) [ 77.420742][ T7216] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 77.420753][ T7216] Call Trace: [ 77.420759][ T7216] [ 77.420767][ T7216] dump_stack_lvl+0x16c/0x1f0 [ 77.420792][ T7216] should_fail_ex+0x512/0x640 [ 77.420811][ T7216] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 77.420833][ T7216] should_failslab+0xc2/0x120 [ 77.420853][ T7216] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 77.420870][ T7216] ? __kvm_mmu_topup_memory_cache+0x450/0x600 [ 77.420895][ T7216] ? kvm_hv_setup_tsc_page+0x29a/0x8d0 [ 77.420918][ T7216] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 77.420948][ T7216] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 77.420981][ T7216] mmu_topup_memory_caches+0x25/0x170 [ 77.421008][ T7216] kvm_mmu_load+0xd6/0x23c0 [ 77.421027][ T7216] ? kvm_apic_has_interrupt+0x106/0x1f0 [ 77.421066][ T7216] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 77.421086][ T7216] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 77.421110][ T7216] ? __pfx_kvm_guest_time_update+0x10/0x10 [ 77.421132][ T7216] ? __pfx_kvm_mmu_load+0x10/0x10 [ 77.421148][ T7216] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 77.421174][ T7216] ? kvm_check_and_inject_events+0x71c/0x1310 [ 77.421205][ T7216] vcpu_run+0x358c/0x5580 [ 77.421230][ T7216] ? __lock_acquire+0xb97/0x1ce0 [ 77.421263][ T7216] ? __pfx_vcpu_run+0x10/0x10 [ 77.421290][ T7216] ? fpu_swap_kvm_fpstate+0x1be/0x410 [ 77.421313][ T7216] ? __local_bh_enable_ip+0xa4/0x120 [ 77.421339][ T7216] ? kvm_arch_vcpu_ioctl_run+0x1023/0x1980 [ 77.421362][ T7216] kvm_arch_vcpu_ioctl_run+0x1023/0x1980 [ 77.421392][ T7216] kvm_vcpu_ioctl+0x5eb/0x1690 [ 77.421416][ T7216] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 77.421439][ T7216] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 77.421460][ T7216] ? do_vfs_ioctl+0x128/0x14f0 [ 77.421487][ T7216] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 77.421512][ T7216] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 77.421546][ T7216] ? hook_file_ioctl_common+0x145/0x410 [ 77.421571][ T7216] ? selinux_file_ioctl+0x180/0x270 [ 77.421594][ T7216] ? selinux_file_ioctl+0xb4/0x270 [ 77.421619][ T7216] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 77.421642][ T7216] __x64_sys_ioctl+0x18b/0x210 [ 77.421668][ T7216] do_syscall_64+0xcd/0x4c0 [ 77.421715][ T7216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.421736][ T7216] RIP: 0033:0x7fdbf138ebe9 [ 77.421751][ T7216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.421768][ T7216] RSP: 002b:00007fdbef5f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 77.421785][ T7216] RAX: ffffffffffffffda RBX: 00007fdbf15b5fa0 RCX: 00007fdbf138ebe9 [ 77.421797][ T7216] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 77.421807][ T7216] RBP: 00007fdbef5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 77.421817][ T7216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 77.421828][ T7216] R13: 00007fdbf15b6038 R14: 00007fdbf15b5fa0 R15: 00007ffde6553488 [ 77.421854][ T7216] [ 77.547071][ T1041] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.804005][ T1041] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 77.810241][ T1041] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 77.815344][ T1041] bond0 (unregistering): Released all slaves [ 77.956058][ T7242] FAULT_INJECTION: forcing a failure. [ 77.956058][ T7242] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 77.961747][ T7242] CPU: 2 UID: 0 PID: 7242 Comm: syz.0.415 Not tainted syzkaller #0 PREEMPT(full) [ 77.961771][ T7242] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 77.961783][ T7242] Call Trace: [ 77.961789][ T7242] [ 77.961795][ T7242] dump_stack_lvl+0x16c/0x1f0 [ 77.961820][ T7242] should_fail_ex+0x512/0x640 [ 77.961844][ T7242] _copy_to_user+0x32/0xd0 [ 77.961869][ T7242] simple_read_from_buffer+0xcb/0x170 [ 77.961891][ T7242] proc_fail_nth_read+0x197/0x240 [ 77.961913][ T7242] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 77.961935][ T7242] ? rw_verify_area+0xcf/0x6c0 [ 77.961962][ T7242] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 77.961981][ T7242] vfs_read+0x1e4/0xcf0 [ 77.962002][ T7242] ? __pfx___mutex_lock+0x10/0x10 [ 77.962022][ T7242] ? __pfx_vfs_read+0x10/0x10 [ 77.962047][ T7242] ? __fget_files+0x20e/0x3c0 [ 77.962074][ T7242] ksys_read+0x12a/0x250 [ 77.962091][ T7242] ? __pfx_ksys_read+0x10/0x10 [ 77.962117][ T7242] do_syscall_64+0xcd/0x4c0 [ 77.962139][ T7242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.962156][ T7242] RIP: 0033:0x7f2f6cb8d5fc [ 77.962170][ T7242] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 77.962187][ T7242] RSP: 002b:00007f2f6d9f9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 77.962204][ T7242] RAX: ffffffffffffffda RBX: 00007f2f6cdb5fa0 RCX: 00007f2f6cb8d5fc [ 77.962215][ T7242] RDX: 000000000000000f RSI: 00007f2f6d9f90a0 RDI: 0000000000000005 [ 77.962231][ T7242] RBP: 00007f2f6d9f9090 R08: 0000000000000000 R09: 0000000000000000 [ 77.962241][ T7242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.962251][ T7242] R13: 00007f2f6cdb6038 R14: 00007f2f6cdb5fa0 R15: 00007ffe653590b8 [ 77.962275][ T7242] [ 78.050319][ T7244] bond0: option mode: unable to set because the bond device has slaves [ 78.054132][ T7254] tipc: Started in network mode [ 78.055944][ T7254] tipc: Node identity c, cluster identity 4711 [ 78.058065][ T7254] tipc: Node number set to 12 [ 78.093846][ T7132] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 78.110490][ T7244] __nla_validate_parse: 8 callbacks suppressed [ 78.110502][ T7244] netlink: 32 bytes leftover after parsing attributes in process `syz.3.416'. [ 78.116123][ T7261] genirq: Flags mismatch irq 4. 00200000 (comedi_parport) vs. 00200080 (ttyS0) [ 78.121561][ T7132] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 78.131842][ T7132] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 78.143400][ T7132] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 78.148918][ T5331] Bluetooth: hci0: command tx timeout [ 78.226934][ T7132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.250881][ T1041] hsr_slave_0: left promiscuous mode [ 78.254167][ T1041] hsr_slave_1: left promiscuous mode [ 78.257218][ T1041] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.261263][ T1041] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.265242][ T1041] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.269907][ T1041] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.301433][ T1041] veth1_macvtap: left promiscuous mode [ 78.303972][ T1041] veth0_macvtap: left promiscuous mode [ 78.306407][ T1041] veth1_vlan: left promiscuous mode [ 78.455759][ T7288] loop2: detected capacity change from 0 to 7 [ 78.463503][ T5974] Dev loop2: unable to read RDB block 7 [ 78.468373][ T5974] loop2: AHDI p1 p2 p3 [ 78.469868][ T5974] loop2: partition table partially beyond EOD, truncated [ 78.475118][ T5974] loop2: p3 start 335544320 is beyond EOD, truncated [ 78.485634][ T7288] Dev loop2: unable to read RDB block 7 [ 78.489649][ T7288] loop2: AHDI p1 p2 p3 [ 78.491282][ T7288] loop2: partition table partially beyond EOD, truncated [ 78.494150][ T7288] loop2: p3 start 335544320 is beyond EOD, truncated [ 78.644552][ T40] kauditd_printk_skb: 18 callbacks suppressed [ 78.644793][ T40] audit: type=1400 audit(1756197726.322:385): avc: denied { write } for pid=7291 comm="syz.1.423" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 78.921748][ T1041] team0 (unregistering): Port device team_slave_1 removed [ 79.001360][ T1041] team0 (unregistering): Port device team_slave_0 removed [ 79.010656][ T40] audit: type=1400 audit(1756197726.692:386): avc: denied { nlmsg_write } for pid=7302 comm="syz.0.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 79.017261][ T40] audit: type=1107 audit(1756197726.692:387): pid=7302 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 79.047326][ T40] audit: type=1400 audit(1756197726.722:388): avc: denied { write } for pid=7304 comm="syz.0.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 79.086745][ T40] audit: type=1400 audit(1756197726.732:389): avc: denied { listen } for pid=7304 comm="syz.0.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 79.560842][ T7132] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.564006][ T7292] tipc: Started in network mode [ 79.565502][ T7292] tipc: Node identity c, cluster identity 4711 [ 79.567446][ T7292] tipc: Node number set to 12 [ 79.602253][ T40] audit: type=1400 audit(1756197727.282:390): avc: denied { connect } for pid=7312 comm="syz.3.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 79.615221][ T7132] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 79.619874][ T7132] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.632391][ T1179] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.635981][ T1179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.641628][ T1179] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.644682][ T1179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.663839][ T7318] netlink: 'syz.3.429': attribute type 1 has an invalid length. [ 79.666406][ T7318] netlink: 228 bytes leftover after parsing attributes in process `syz.3.429'. [ 79.707405][ T40] audit: type=1400 audit(1756197727.382:391): avc: denied { setopt } for pid=7319 comm="syz.1.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 79.761898][ T7331] netlink: 24 bytes leftover after parsing attributes in process `syz.1.432'. [ 79.828745][ T7132] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.905755][ T7343] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 79.917926][ T7343] efs: cannot read volume header [ 80.047863][ T7359] FAULT_INJECTION: forcing a failure. [ 80.047863][ T7359] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 80.051978][ T7359] CPU: 3 UID: 0 PID: 7359 Comm: syz.3.439 Not tainted syzkaller #0 PREEMPT(full) [ 80.051994][ T7359] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 80.052000][ T7359] Call Trace: [ 80.052005][ T7359] [ 80.052010][ T7359] dump_stack_lvl+0x16c/0x1f0 [ 80.052025][ T7359] should_fail_ex+0x512/0x640 [ 80.052041][ T7359] should_fail_alloc_page+0xe7/0x130 [ 80.052056][ T7359] prepare_alloc_pages+0x3c2/0x610 [ 80.052073][ T7359] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 80.052085][ T7359] ? stack_trace_save+0x8e/0xc0 [ 80.052101][ T7359] ? __pfx_stack_trace_save+0x10/0x10 [ 80.052120][ T7359] ? stack_depot_save_flags+0x29/0x9c0 [ 80.052135][ T7359] ? kasan_save_stack+0x42/0x60 [ 80.052146][ T7359] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 80.052157][ T7359] ? kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 80.052169][ T7359] ? __get_vm_area_node+0x1ca/0x330 [ 80.052183][ T7359] ? __vmalloc_node_noprof+0xad/0xf0 [ 80.052198][ T7359] ? kernel_read_file+0x6ff/0x910 [ 80.052214][ T7359] ? init_module_from_file+0xb8/0x150 [ 80.052223][ T7359] ? idempotent_init_module+0x227/0x790 [ 80.052233][ T7359] ? __x64_sys_finit_module+0xc5/0x150 [ 80.052242][ T7359] ? do_syscall_64+0xcd/0x4c0 [ 80.052254][ T7359] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.052271][ T7359] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 80.052285][ T7359] ? policy_nodemask+0xea/0x4e0 [ 80.052299][ T7359] alloc_pages_mpol+0x1fb/0x550 [ 80.052313][ T7359] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 80.052330][ T7359] alloc_pages_noprof+0x131/0x390 [ 80.052343][ T7359] get_free_pages_noprof+0x10/0xb0 [ 80.052356][ T7359] kasan_populate_vmalloc+0x89/0x1f0 [ 80.052377][ T7359] alloc_vmap_area+0x959/0x29c0 [ 80.052397][ T7359] ? __pfx_alloc_vmap_area+0x10/0x10 [ 80.052415][ T7359] __get_vm_area_node+0x1ca/0x330 [ 80.052432][ T7359] __vmalloc_node_range_noprof+0x271/0x14b0 [ 80.052449][ T7359] ? kernel_read_file+0x6ff/0x910 [ 80.052464][ T7359] ? avc_has_perm+0x144/0x1f0 [ 80.052477][ T7359] ? __pfx_avc_has_perm+0x10/0x10 [ 80.052489][ T7359] ? kernel_read_file+0x6ff/0x910 [ 80.052508][ T7359] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 80.052525][ T7359] ? __pfx_selinux_kernel_load_from_file+0x10/0x10 [ 80.052542][ T7359] ? ima_read_file+0x139/0x1a0 [ 80.052557][ T7359] ? __pfx_ima_read_file+0x10/0x10 [ 80.052572][ T7359] ? find_held_lock+0x2b/0x80 [ 80.052586][ T7359] ? kernel_read_file+0x6ff/0x910 [ 80.052602][ T7359] __vmalloc_node_noprof+0xad/0xf0 [ 80.052617][ T7359] ? kernel_read_file+0x6ff/0x910 [ 80.052634][ T7359] kernel_read_file+0x6ff/0x910 [ 80.052652][ T7359] ? __pfx_kernel_read_file+0x10/0x10 [ 80.052669][ T7359] ? __lock_acquire+0x62e/0x1ce0 [ 80.052687][ T7359] init_module_from_file+0xb8/0x150 [ 80.052698][ T7359] ? __pfx_init_module_from_file+0x10/0x10 [ 80.052715][ T7359] ? find_held_lock+0x2b/0x80 [ 80.052729][ T7359] ? idempotent_init_module+0x5e1/0x790 [ 80.052740][ T7359] ? do_raw_spin_unlock+0x172/0x230 [ 80.052753][ T7359] idempotent_init_module+0x227/0x790 [ 80.052765][ T7359] ? __pfx_idempotent_init_module+0x10/0x10 [ 80.052774][ T7359] ? find_held_lock+0x2b/0x80 [ 80.052796][ T7359] __x64_sys_finit_module+0xc5/0x150 [ 80.052806][ T7359] ? do_syscall_64+0x91/0x4c0 [ 80.052819][ T7359] do_syscall_64+0xcd/0x4c0 [ 80.052832][ T7359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.052843][ T7359] RIP: 0033:0x7fdbf138ebe9 [ 80.052853][ T7359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.052863][ T7359] RSP: 002b:00007fdbef5f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000139 [ 80.052874][ T7359] RAX: ffffffffffffffda RBX: 00007fdbf15b5fa0 RCX: 00007fdbf138ebe9 [ 80.052881][ T7359] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000003 [ 80.052887][ T7359] RBP: 00007fdbef5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 80.052893][ T7359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.052900][ T7359] R13: 00007fdbf15b6038 R14: 00007fdbf15b5fa0 R15: 00007ffde6553488 [ 80.052913][ T7359] [ 80.055813][ T7132] veth0_vlan: entered promiscuous mode [ 80.106446][ T40] audit: type=1804 audit(1756197727.782:392): pid=7362 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.437" name="/newroot/153/bus/bus" dev="overlay" ino=828 res=1 errno=0 [ 80.144671][ T7132] veth1_vlan: entered promiscuous mode [ 80.228973][ T5331] Bluetooth: hci0: command tx timeout [ 80.247971][ T40] audit: type=1400 audit(1756197727.922:393): avc: denied { create } for pid=7371 comm="syz.3.443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 80.248633][ T7132] veth0_macvtap: entered promiscuous mode [ 80.255335][ T7372] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 80.258275][ T40] audit: type=1400 audit(1756197727.922:394): avc: denied { write } for pid=7371 comm="syz.3.443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 80.293137][ T7132] veth1_macvtap: entered promiscuous mode [ 80.310159][ T7132] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.320180][ T7132] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.330874][ T1041] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.335923][ T1041] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.340054][ T1041] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.346284][ T1041] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.410511][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.413811][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.442349][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.445485][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.451507][ T7382] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 80.455377][ T7382] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 80.493479][ T7384] netlink: 16 bytes leftover after parsing attributes in process `syz.3.447'. [ 80.506902][ T7386] binder: 7385:7386 ioctl c0306201 200000000180 returned -14 [ 80.532434][ T7388] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 80.623065][ T7400] netlink: 68 bytes leftover after parsing attributes in process `syz.3.454'. [ 80.688715][ T7407] binder: 7406:7407 ioctl c0306201 200000000180 returned -14 [ 80.696059][ T7409] bridge0: entered allmulticast mode [ 80.882007][ T7431] Invalid logical block size (-3) [ 80.939654][ T7439] netlink: 'syz.1.470': attribute type 1 has an invalid length. [ 81.004317][ T7446] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 81.007367][ T7446] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 81.012098][ T7447] netlink: 16 bytes leftover after parsing attributes in process `syz.3.473'. [ 81.092923][ T7455] FAULT_INJECTION: forcing a failure. [ 81.092923][ T7455] name failslab, interval 1, probability 0, space 0, times 0 [ 81.097145][ T7455] CPU: 2 UID: 0 PID: 7455 Comm: syz.1.475 Not tainted syzkaller #0 PREEMPT(full) [ 81.097162][ T7455] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 81.097174][ T7455] Call Trace: [ 81.097178][ T7455] [ 81.097183][ T7455] dump_stack_lvl+0x16c/0x1f0 [ 81.097200][ T7455] should_fail_ex+0x512/0x640 [ 81.097213][ T7455] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 81.097227][ T7455] should_failslab+0xc2/0x120 [ 81.097242][ T7455] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 81.097253][ T7455] ? __kvm_mmu_topup_memory_cache+0x450/0x600 [ 81.097272][ T7455] ? kvm_hv_setup_tsc_page+0x29a/0x8d0 [ 81.097288][ T7455] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 81.097308][ T7455] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 81.097330][ T7455] mmu_topup_memory_caches+0x25/0x170 [ 81.097344][ T7455] kvm_mmu_load+0xd6/0x23c0 [ 81.097356][ T7455] ? kvm_apic_has_interrupt+0x106/0x1f0 [ 81.097369][ T7455] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 81.097382][ T7455] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 81.097399][ T7455] ? __pfx_kvm_guest_time_update+0x10/0x10 [ 81.097413][ T7455] ? __pfx_kvm_mmu_load+0x10/0x10 [ 81.097425][ T7455] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 81.097443][ T7455] ? kvm_check_and_inject_events+0x71c/0x1310 [ 81.097462][ T7455] vcpu_run+0x358c/0x5580 [ 81.097479][ T7455] ? __lock_acquire+0xb97/0x1ce0 [ 81.097501][ T7455] ? __pfx_vcpu_run+0x10/0x10 [ 81.097519][ T7455] ? fpu_swap_kvm_fpstate+0x1be/0x410 [ 81.097535][ T7455] ? __local_bh_enable_ip+0xa4/0x120 [ 81.097553][ T7455] ? kvm_arch_vcpu_ioctl_run+0x1023/0x1980 [ 81.097569][ T7455] kvm_arch_vcpu_ioctl_run+0x1023/0x1980 [ 81.097590][ T7455] kvm_vcpu_ioctl+0x5eb/0x1690 [ 81.097607][ T7455] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 81.097635][ T7455] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 81.097652][ T7455] ? do_vfs_ioctl+0x128/0x14f0 [ 81.097689][ T7455] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 81.097707][ T7455] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 81.097731][ T7455] ? hook_file_ioctl_common+0x145/0x410 [ 81.097761][ T7455] ? selinux_file_ioctl+0x180/0x270 [ 81.097777][ T7455] ? selinux_file_ioctl+0xb4/0x270 [ 81.097794][ T7455] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 81.097811][ T7455] __x64_sys_ioctl+0x18b/0x210 [ 81.097830][ T7455] do_syscall_64+0xcd/0x4c0 [ 81.097844][ T7455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.097856][ T7455] RIP: 0033:0x7ff01458ebe9 [ 81.097866][ T7455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.097878][ T7455] RSP: 002b:00007ff015433038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 81.097890][ T7455] RAX: ffffffffffffffda RBX: 00007ff0147b5fa0 RCX: 00007ff01458ebe9 [ 81.097897][ T7455] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 81.097904][ T7455] RBP: 00007ff015433090 R08: 0000000000000000 R09: 0000000000000000 [ 81.097911][ T7455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 81.097918][ T7455] R13: 00007ff0147b6038 R14: 00007ff0147b5fa0 R15: 00007ffda8a66e48 [ 81.097933][ T7455] [ 81.348206][ T6040] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 81.427476][ T7473] netlink: 20 bytes leftover after parsing attributes in process `syz.1.483'. [ 81.458324][ T7475] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 81.461325][ T7475] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 81.521311][ T6040] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 81.525167][ T6040] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.537723][ T6040] usb 5-1: Product: syz [ 81.539530][ T6040] usb 5-1: Manufacturer: syz [ 81.541457][ T6040] usb 5-1: SerialNumber: syz [ 81.594197][ T7486] netlink: 68 bytes leftover after parsing attributes in process `syz.3.488'. [ 81.691913][ T7494] netlink: 4 bytes leftover after parsing attributes in process `syz.3.492'. [ 81.751421][ T7494] netlink: 4 bytes leftover after parsing attributes in process `syz.3.492'. [ 81.818808][ T7503] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 81.821959][ T7503] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 81.960325][ T7453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.963215][ T7453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.986476][ T7518] fuse: Unknown parameter 'fdÖPx‹mºÛ<¬LŸŽD±zž/›š×«æz‡' [ 82.059965][ T7528] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 82.063062][ T7528] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 82.097111][ T6040] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 82.102429][ T6040] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 82.105643][ T6040] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 82.118505][ T6040] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 82.149551][ T7536] IPVS: length: 24 != 12312 [ 82.152120][ T6040] usb 5-1: USB disconnect, device number 7 [ 82.255738][ T7556] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 82.259149][ T7556] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 82.319624][ T5331] Bluetooth: hci0: command tx timeout [ 82.361908][ T7561] bond0: option mode: unable to set because the bond device has slaves [ 82.955261][ T7579] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 82.968280][ T7579] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 83.350600][ T7602] __nla_validate_parse: 10 callbacks suppressed [ 83.350611][ T7602] netlink: 108 bytes leftover after parsing attributes in process `syz.0.531'. [ 83.356131][ T7608] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 83.445231][ T7620] bond0: option mode: unable to set because the bond device has slaves [ 83.521182][ T7632] netlink: 16 bytes leftover after parsing attributes in process `syz.1.542'. [ 83.526014][ T7629] netlink: 32 bytes leftover after parsing attributes in process `syz.4.537'. [ 83.609275][ T7638] netlink: 12 bytes leftover after parsing attributes in process `syz.0.545'. [ 84.123861][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 84.123876][ T40] audit: type=1804 audit(1756197731.802:410): pid=7660 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.552" name="/newroot/151/bus/bus" dev="overlay" ino=845 res=1 errno=0 [ 84.301581][ T7664] program syz.0.555 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 84.377899][ T7670] netlink: 12 bytes leftover after parsing attributes in process `syz.0.558'. [ 84.397820][ T5331] Bluetooth: hci0: command tx timeout [ 84.419919][ T7673] netlink: 16 bytes leftover after parsing attributes in process `syz.0.559'. [ 84.444822][ T40] audit: type=1400 audit(1756197732.122:411): avc: denied { write } for pid=7665 comm="syz.4.556" lport=34377 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 84.618438][ T7691] tap0: tun_chr_ioctl cmd 1074025672 [ 84.620458][ T7691] tap0: ignored: set checksum enabled [ 84.673134][ T7698] netlink: 16 bytes leftover after parsing attributes in process `syz.4.570'. [ 84.715564][ T40] audit: type=1400 audit(1756197732.392:412): avc: denied { read } for pid=7699 comm="syz.4.571" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 84.723194][ T40] audit: type=1400 audit(1756197732.402:413): avc: denied { open } for pid=7699 comm="syz.4.571" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 84.755816][ T7701] netlink: 144 bytes leftover after parsing attributes in process `syz.1.568'. [ 84.763726][ T40] audit: type=1400 audit(1756197732.442:414): avc: denied { sqpoll } for pid=7690 comm="syz.1.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 84.767412][ T7703] netlink: 'syz.0.572': attribute type 8 has an invalid length. [ 84.779734][ T7703] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7703 comm=syz.0.572 [ 84.785666][ T7703] trusted_key: encrypted_key: key trusted:‘8s‰X not found [ 84.801376][ T7703] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 84.981705][ T7716] binder: 7715:7716 ioctl c0306201 200000000180 returned -14 [ 85.068191][ T40] audit: type=1400 audit(1756197732.752:415): avc: denied { read } for pid=7717 comm="syz.0.579" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 85.068890][ T7718] ***************************************************** [ 85.075750][ T40] audit: type=1400 audit(1756197732.752:416): avc: denied { open } for pid=7717 comm="syz.0.579" path="/192/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 85.075795][ T40] audit: type=1400 audit(1756197732.752:417): avc: denied { write } for pid=7717 comm="syz.0.579" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 85.081969][ T60] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 85.090407][ T7718] ORANGEFS Device Error: You cannot open the device file [ 85.099563][ T7718] [ 85.099563][ T7718] /dev/pvfs2-req more than once. Please make sure that [ 85.099563][ T7718] there are no [ 85.102491][ T7718] instances of a program using this device [ 85.102491][ T7718] currently running. (You must verify this!) [ 85.113341][ T7718] For example, you can use the lsof program as follows: [ 85.116324][ T7718] 'lsof | grep pvfs2-req' (run this as root) [ 85.119128][ T7718] open_access_count = 1 [ 85.120967][ T7718] ***************************************************** [ 85.257828][ T60] usb 9-1: Using ep0 maxpacket: 8 [ 85.262102][ T60] usb 9-1: config 0 interface 0 has no altsetting 0 [ 85.264772][ T60] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 85.270115][ T60] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.276015][ T60] usb 9-1: config 0 descriptor?? [ 85.699110][ T60] mcp2221 0003:04D8:00DD.0002: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 85.733832][ T7730] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 85.737573][ T7730] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 85.810683][ T7738] netlink: 28 bytes leftover after parsing attributes in process `syz.1.585'. [ 85.878692][ T7742] binder: 7741:7742 ioctl c0306201 200000000180 returned -14 [ 85.907834][ T40] audit: type=1400 audit(1756197733.582:418): avc: denied { mount } for pid=7705 comm="syz.4.573" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 85.939846][ T6016] usb 9-1: USB disconnect, device number 2 [ 85.960446][ T7752] netlink: 16 bytes leftover after parsing attributes in process `syz.0.592'. [ 86.117145][ T40] audit: type=1400 audit(1756197733.792:419): avc: denied { read } for pid=7753 comm="syz.1.593" name="usbmon7" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 86.292948][ T7767] binder: 7766:7767 ioctl c0306201 200000000180 returned -14 [ 86.463364][ T7781] FAULT_INJECTION: forcing a failure. [ 86.463364][ T7781] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 86.470576][ T7781] CPU: 3 UID: 0 PID: 7781 Comm: syz.1.609 Not tainted syzkaller #0 PREEMPT(full) [ 86.470600][ T7781] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.470611][ T7781] Call Trace: [ 86.470616][ T7781] [ 86.470624][ T7781] dump_stack_lvl+0x16c/0x1f0 [ 86.470648][ T7781] should_fail_ex+0x512/0x640 [ 86.470673][ T7781] _copy_to_user+0x32/0xd0 [ 86.470698][ T7781] simple_read_from_buffer+0xcb/0x170 [ 86.470719][ T7781] proc_fail_nth_read+0x197/0x240 [ 86.470742][ T7781] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 86.470764][ T7781] ? rw_verify_area+0xcf/0x6c0 [ 86.470792][ T7781] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 86.470813][ T7781] vfs_read+0x1e4/0xcf0 [ 86.470834][ T7781] ? __pfx___mutex_lock+0x10/0x10 [ 86.470856][ T7781] ? __pfx_vfs_read+0x10/0x10 [ 86.470881][ T7781] ? __fget_files+0x20e/0x3c0 [ 86.470915][ T7781] ksys_read+0x12a/0x250 [ 86.470933][ T7781] ? __pfx_ksys_read+0x10/0x10 [ 86.470958][ T7781] do_syscall_64+0xcd/0x4c0 [ 86.470981][ T7781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.471000][ T7781] RIP: 0033:0x7ff01458d5fc [ 86.471015][ T7781] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 86.471032][ T7781] RSP: 002b:00007ff015433030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 86.471049][ T7781] RAX: ffffffffffffffda RBX: 00007ff0147b5fa0 RCX: 00007ff01458d5fc [ 86.471060][ T7781] RDX: 000000000000000f RSI: 00007ff0154330a0 RDI: 0000000000000004 [ 86.471072][ T7781] RBP: 00007ff015433090 R08: 0000000000000000 R09: 0000000000000000 [ 86.471082][ T7781] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.471092][ T7781] R13: 00007ff0147b6038 R14: 00007ff0147b5fa0 R15: 00007ffda8a66e48 [ 86.471117][ T7781] [ 86.555114][ C3] vkms_vblank_simulate: vblank timer overrun [ 86.630189][ T53] cfg80211: failed to load regulatory.db [ 86.771301][ T7797] netlink: 'syz.1.606': attribute type 3 has an invalid length. [ 86.775225][ T7797] netlink: 'syz.1.606': attribute type 2 has an invalid length. [ 87.081150][ T7812] binder: 7811:7812 ioctl c0306201 200000000180 returned -14 [ 87.109946][ T7815] openvswitch: netlink: IPv4 tunnel dst address is zero [ 87.141519][ T7819] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 87.145790][ T7819] efs: cannot read volume header [ 87.277155][ T7825] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.361389][ T7825] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.397528][ T7832] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 87.400764][ T7832] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 87.435020][ T7825] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.526262][ T7825] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.549533][ T7840] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 87.553159][ T7840] efs: cannot read volume header [ 87.612519][ T1041] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.628737][ T1041] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.640790][ T1041] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.650151][ T1041] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.777003][ T7853] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 87.781812][ T7853] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 87.945038][ T7861] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 87.949181][ T7861] efs: cannot read volume header [ 88.407190][ T7874] netlink: 'syz.1.640': attribute type 12 has an invalid length. [ 88.481685][ T7882] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 88.485648][ T7882] efs: cannot read volume header [ 88.500482][ T7884] binder_alloc: 7883: binder_alloc_buf, no vma [ 88.503887][ T7884] binder: 7883:7884 ioctl c0306201 200000000180 returned -14 [ 88.527915][ T7886] netlink: 'syz.0.647': attribute type 10 has an invalid length. [ 88.534362][ T7886] __nla_validate_parse: 6 callbacks suppressed [ 88.534378][ T7886] netlink: 2 bytes leftover after parsing attributes in process `syz.0.647'. [ 88.545145][ T7886] netlink: 8 bytes leftover after parsing attributes in process `syz.0.647'. [ 88.550283][ T7886] netlink: 12 bytes leftover after parsing attributes in process `syz.0.647'. [ 88.558193][ T7886] netlink: 4 bytes leftover after parsing attributes in process `syz.0.647'. [ 88.640416][ T7886] team_slave_0 (unregistering): left promiscuous mode [ 88.643448][ T7886] team_slave_0 (unregistering): left allmulticast mode [ 88.647556][ T7886] team0: Port device team_slave_0 removed [ 88.736416][ T7891] tmpfs: Bad value for 'huge' [ 88.847011][ T7900] netlink: 16 bytes leftover after parsing attributes in process `syz.4.653'. [ 88.892184][ T7904] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 88.895356][ T7905] netlink: 52 bytes leftover after parsing attributes in process `syz.4.656'. [ 88.896101][ T7904] efs: cannot read volume header [ 88.961957][ T7909] binder: 7908:7909 ioctl c0306201 200000000180 returned -14 [ 90.056032][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 90.056048][ T40] audit: type=1400 audit(1756197737.732:431): avc: denied { remount } for pid=7926 comm="syz.1.666" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 90.081306][ T40] audit: type=1400 audit(1756197737.762:432): avc: denied { unmount } for pid=7928 comm="syz.4.667" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 90.220453][ T40] audit: type=1400 audit(1756197737.902:433): avc: denied { read write } for pid=7939 comm="syz.1.671" name="file0" dev="tmpfs" ino=1119 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 90.227581][ T40] audit: type=1400 audit(1756197737.902:434): avc: denied { open } for pid=7939 comm="syz.1.671" path="/210/file0" dev="tmpfs" ino=1119 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 90.250343][ T7943] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 90.254461][ T7943] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 90.375979][ T40] audit: type=1400 audit(1756197738.052:435): avc: denied { connect } for pid=7958 comm="syz.1.679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 90.383727][ T40] audit: type=1400 audit(1756197738.052:436): avc: denied { ioctl } for pid=7958 comm="syz.1.679" path="socket:[19141]" dev="sockfs" ino=19141 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 90.779700][ T7994] FAULT_INJECTION: forcing a failure. [ 90.779700][ T7994] name failslab, interval 1, probability 0, space 0, times 0 [ 90.784719][ T7994] CPU: 2 UID: 0 PID: 7994 Comm: syz.4.688 Not tainted syzkaller #0 PREEMPT(full) [ 90.784742][ T7994] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 90.784754][ T7994] Call Trace: [ 90.784761][ T7994] [ 90.784767][ T7994] dump_stack_lvl+0x16c/0x1f0 [ 90.784791][ T7994] should_fail_ex+0x512/0x640 [ 90.784811][ T7994] ? fs_reclaim_acquire+0xae/0x150 [ 90.784834][ T7994] ? tomoyo_encode2+0x100/0x3e0 [ 90.784858][ T7994] should_failslab+0xc2/0x120 [ 90.784879][ T7994] __kmalloc_noprof+0xd2/0x510 [ 90.784897][ T7994] ? d_absolute_path+0x136/0x1a0 [ 90.784925][ T7994] tomoyo_encode2+0x100/0x3e0 [ 90.784952][ T7994] tomoyo_encode+0x29/0x50 [ 90.784975][ T7994] tomoyo_realpath_from_path+0x18f/0x6e0 [ 90.785007][ T7994] tomoyo_path_number_perm+0x245/0x580 [ 90.785028][ T7994] ? tomoyo_path_number_perm+0x237/0x580 [ 90.785052][ T7994] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 90.785080][ T7994] ? find_held_lock+0x2b/0x80 [ 90.785122][ T7994] ? find_held_lock+0x2b/0x80 [ 90.785143][ T7994] ? hook_file_ioctl_common+0x145/0x410 [ 90.785167][ T7994] ? __fget_files+0x20e/0x3c0 [ 90.785187][ T7994] security_file_ioctl+0x9b/0x240 [ 90.785209][ T7994] __x64_sys_ioctl+0xb7/0x210 [ 90.785237][ T7994] do_syscall_64+0xcd/0x4c0 [ 90.785259][ T7994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.785275][ T7994] RIP: 0033:0x7f4bd798ebe9 [ 90.785290][ T7994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.785305][ T7994] RSP: 002b:00007f4bd880b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 90.785322][ T7994] RAX: ffffffffffffffda RBX: 00007f4bd7bb5fa0 RCX: 00007f4bd798ebe9 [ 90.785332][ T7994] RDX: 0000000000000000 RSI: 000000000000541c RDI: 0000000000000003 [ 90.785341][ T7994] RBP: 00007f4bd880b090 R08: 0000000000000000 R09: 0000000000000000 [ 90.785349][ T7994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.785358][ T7994] R13: 00007f4bd7bb6038 R14: 00007f4bd7bb5fa0 R15: 00007ffdb96f32c8 [ 90.785380][ T7994] [ 90.785398][ T7994] ERROR: Out of memory at tomoyo_realpath_from_path. [ 90.944548][ T40] audit: type=1400 audit(1756197738.622:437): avc: denied { unmount } for pid=7132 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 91.005840][ T40] audit: type=1400 audit(1756197738.682:438): avc: denied { name_bind } for pid=8001 comm="syz.3.692" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 91.058034][ T8006] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.694'. [ 91.270760][ T8013] FAULT_INJECTION: forcing a failure. [ 91.270760][ T8013] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 91.275991][ T8013] CPU: 0 UID: 0 PID: 8013 Comm: syz.3.696 Not tainted syzkaller #0 PREEMPT(full) [ 91.276017][ T8013] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 91.276028][ T8013] Call Trace: [ 91.276034][ T8013] [ 91.276041][ T8013] dump_stack_lvl+0x16c/0x1f0 [ 91.276088][ T8013] should_fail_ex+0x512/0x640 [ 91.276121][ T8013] _copy_to_iter+0x463/0x1710 [ 91.276152][ T8013] ? __pfx__copy_to_iter+0x10/0x10 [ 91.276175][ T8013] ? m_stop+0x386/0x4f0 [ 91.276203][ T8013] ? m_stop+0x301/0x4f0 [ 91.276246][ T8013] seq_read_iter+0xcf8/0x12c0 [ 91.276278][ T8013] seq_read+0x3a3/0x570 [ 91.276297][ T8013] ? __pfx_seq_read+0x10/0x10 [ 91.276321][ T8013] ? avc_policy_seqno+0x9/0x20 [ 91.276347][ T8013] ? rw_verify_area+0xcf/0x6c0 [ 91.276375][ T8013] ? __pfx_seq_read+0x10/0x10 [ 91.276394][ T8013] vfs_read+0x1e4/0xcf0 [ 91.276417][ T8013] ? __pfx___mutex_lock+0x10/0x10 [ 91.276447][ T8013] ? __pfx_vfs_read+0x10/0x10 [ 91.276474][ T8013] ? __fget_files+0x20e/0x3c0 [ 91.276503][ T8013] ksys_read+0x12a/0x250 [ 91.276522][ T8013] ? __pfx_ksys_read+0x10/0x10 [ 91.276550][ T8013] do_syscall_64+0xcd/0x4c0 [ 91.276574][ T8013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.276592][ T8013] RIP: 0033:0x7fdbf138ebe9 [ 91.276607][ T8013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.276627][ T8013] RSP: 002b:00007fdbef5f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 91.276651][ T8013] RAX: ffffffffffffffda RBX: 00007fdbf15b5fa0 RCX: 00007fdbf138ebe9 [ 91.276662][ T8013] RDX: 0000000000002020 RSI: 00002000000005c0 RDI: 0000000000000003 [ 91.276674][ T8013] RBP: 00007fdbef5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 91.276686][ T8013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.276698][ T8013] R13: 00007fdbf15b6038 R14: 00007fdbf15b5fa0 R15: 00007ffde6553488 [ 91.276723][ T8013] [ 91.482418][ T8021] FAULT_INJECTION: forcing a failure. [ 91.482418][ T8021] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 91.492013][ T8021] CPU: 0 UID: 0 PID: 8021 Comm: syz.1.699 Not tainted syzkaller #0 PREEMPT(full) [ 91.492041][ T8021] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 91.492053][ T8021] Call Trace: [ 91.492060][ T8021] [ 91.492067][ T8021] dump_stack_lvl+0x16c/0x1f0 [ 91.492100][ T8021] should_fail_ex+0x512/0x640 [ 91.492126][ T8021] _copy_from_user+0x2e/0xd0 [ 91.492152][ T8021] kstrtouint_from_user+0xd6/0x1d0 [ 91.492171][ T8021] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 91.492189][ T8021] ? __lock_acquire+0xb97/0x1ce0 [ 91.492230][ T8021] proc_fail_nth_write+0x83/0x220 [ 91.492254][ T8021] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 91.492283][ T8021] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 91.492303][ T8021] vfs_write+0x29d/0x11d0 [ 91.492327][ T8021] ? __pfx___mutex_lock+0x10/0x10 [ 91.492348][ T8021] ? __pfx_vfs_write+0x10/0x10 [ 91.492374][ T8021] ? __fget_files+0x20e/0x3c0 [ 91.492403][ T8021] ksys_write+0x12a/0x250 [ 91.492422][ T8021] ? __pfx_ksys_write+0x10/0x10 [ 91.492441][ T8021] ? fput+0x9b/0xd0 [ 91.492469][ T8021] do_syscall_64+0xcd/0x4c0 [ 91.492493][ T8021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.492512][ T8021] RIP: 0033:0x7ff01458d69f [ 91.492527][ T8021] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 91.492545][ T8021] RSP: 002b:00007ff015433030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 91.492563][ T8021] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff01458d69f [ 91.492575][ T8021] RDX: 0000000000000001 RSI: 00007ff0154330a0 RDI: 0000000000000004 [ 91.492587][ T8021] RBP: 00007ff015433090 R08: 0000000000000000 R09: 0000000000000000 [ 91.492598][ T8021] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 91.492609][ T8021] R13: 00007ff0147b6038 R14: 00007ff0147b5fa0 R15: 00007ffda8a66e48 [ 91.492635][ T8021] [ 91.584185][ T1179] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 91.847814][ T1472] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 91.860165][ T40] audit: type=1400 audit(1756197739.542:439): avc: denied { getopt } for pid=8035 comm="syz.3.703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 91.997724][ T1472] usb 6-1: Using ep0 maxpacket: 32 [ 92.001599][ T1472] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.004645][ T40] audit: type=1400 audit(1756197739.682:440): avc: denied { mount } for pid=8039 comm="syz.3.705" name="/" dev="hugetlbfs" ino=20894 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 92.005773][ T1472] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.016171][ T1472] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 92.020989][ T1472] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.025123][ T1472] usb 6-1: config 0 descriptor?? [ 92.345934][ T8063] netlink: 16 bytes leftover after parsing attributes in process `syz.4.714'. [ 92.349406][ T8063] tipc: Invalid UDP bearer configuration [ 92.349431][ T8063] tipc: Enabling of bearer rejected, failed to enable media [ 92.380398][ T8066] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 92.383406][ T8066] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 92.430660][ T8024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.433930][ T8024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.511283][ T1472] usbhid 6-1:0.0: can't add hid device: -71 [ 92.513307][ T1472] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 92.524206][ T1472] usb 6-1: USB disconnect, device number 3 [ 92.536088][ T8080] FAULT_INJECTION: forcing a failure. [ 92.536088][ T8080] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 92.541492][ T8080] CPU: 1 UID: 0 PID: 8080 Comm: syz.3.719 Not tainted syzkaller #0 PREEMPT(full) [ 92.541507][ T8080] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 92.541514][ T8080] Call Trace: [ 92.541518][ T8080] [ 92.541522][ T8080] dump_stack_lvl+0x16c/0x1f0 [ 92.541538][ T8080] should_fail_ex+0x512/0x640 [ 92.541575][ T8080] _copy_from_user+0x2e/0xd0 [ 92.541597][ T8080] copy_msghdr_from_user+0x98/0x160 [ 92.541611][ T8080] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 92.541630][ T8080] ___sys_sendmsg+0xfe/0x1d0 [ 92.541642][ T8080] ? __pfx____sys_sendmsg+0x10/0x10 [ 92.541671][ T8080] __sys_sendmsg+0x16d/0x220 [ 92.541683][ T8080] ? __pfx___sys_sendmsg+0x10/0x10 [ 92.541710][ T8080] do_syscall_64+0xcd/0x4c0 [ 92.541730][ T8080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.541749][ T8080] RIP: 0033:0x7fdbf138ebe9 [ 92.541763][ T8080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.541783][ T8080] RSP: 002b:00007fdbef5f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 92.541801][ T8080] RAX: ffffffffffffffda RBX: 00007fdbf15b5fa0 RCX: 00007fdbf138ebe9 [ 92.541813][ T8080] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 92.541823][ T8080] RBP: 00007fdbef5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 92.541832][ T8080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.541841][ T8080] R13: 00007fdbf15b6038 R14: 00007fdbf15b5fa0 R15: 00007ffde6553488 [ 92.541863][ T8080] [ 92.655058][ T8082] warning: `syz.3.720' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 92.688736][ T8084] Bluetooth: MGMT ver 1.23 [ 92.742687][ T8092] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=8092 comm=syz.3.725 [ 92.747528][ T8092] netlink: 12 bytes leftover after parsing attributes in process `syz.3.725'. [ 92.764589][ T8092] netlink: 12 bytes leftover after parsing attributes in process `syz.3.725'. [ 92.764598][ T1179] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.774252][ T1179] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.778376][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.781110][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.994741][ T8112] FAULT_INJECTION: forcing a failure. [ 92.994741][ T8112] name failslab, interval 1, probability 0, space 0, times 0 [ 93.000359][ T8112] CPU: 3 UID: 0 PID: 8112 Comm: syz.3.734 Not tainted syzkaller #0 PREEMPT(full) [ 93.000391][ T8112] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 93.000401][ T8112] Call Trace: [ 93.000407][ T8112] [ 93.000414][ T8112] dump_stack_lvl+0x16c/0x1f0 [ 93.000437][ T8112] should_fail_ex+0x512/0x640 [ 93.000455][ T8112] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 93.000471][ T8112] should_failslab+0xc2/0x120 [ 93.000484][ T8112] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 93.000496][ T8112] ? __alloc_skb+0x2b2/0x380 [ 93.000510][ T8112] __alloc_skb+0x2b2/0x380 [ 93.000520][ T8112] ? __pfx___alloc_skb+0x10/0x10 [ 93.000532][ T8112] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 93.000549][ T8112] netlink_alloc_large_skb+0x69/0x130 [ 93.000563][ T8112] netlink_sendmsg+0x6a1/0xdd0 [ 93.000578][ T8112] ? __pfx_netlink_sendmsg+0x10/0x10 [ 93.000596][ T8112] ____sys_sendmsg+0xa98/0xc70 [ 93.000612][ T8112] ? copy_msghdr_from_user+0x10a/0x160 [ 93.000624][ T8112] ? __pfx_____sys_sendmsg+0x10/0x10 [ 93.000645][ T8112] ___sys_sendmsg+0x134/0x1d0 [ 93.000657][ T8112] ? __pfx____sys_sendmsg+0x10/0x10 [ 93.000686][ T8112] __sys_sendmsg+0x16d/0x220 [ 93.000698][ T8112] ? __pfx___sys_sendmsg+0x10/0x10 [ 93.000718][ T8112] do_syscall_64+0xcd/0x4c0 [ 93.000732][ T8112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.000744][ T8112] RIP: 0033:0x7fdbf138ebe9 [ 93.000754][ T8112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.000765][ T8112] RSP: 002b:00007fdbef5f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 93.000777][ T8112] RAX: ffffffffffffffda RBX: 00007fdbf15b5fa0 RCX: 00007fdbf138ebe9 [ 93.000784][ T8112] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 93.000791][ T8112] RBP: 00007fdbef5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 93.000797][ T8112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.000804][ T8112] R13: 00007fdbf15b6038 R14: 00007fdbf15b5fa0 R15: 00007ffde6553488 [ 93.000817][ T8112] [ 93.008493][ T1472] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 93.138057][ T8125] bond0: option mode: unable to set because the bond device has slaves [ 93.217917][ T46] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 93.269731][ T1472] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 93.273811][ T1472] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 93.278235][ T1472] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 93.286682][ T1472] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 93.290477][ T1472] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.294317][ T1472] usb 6-1: Product: syz [ 93.295992][ T1472] usb 6-1: Manufacturer: syz [ 93.298336][ T1472] usb 6-1: SerialNumber: syz [ 93.306318][ T1472] hub 6-1:1.0: bad descriptor, ignoring hub [ 93.309065][ T1472] hub 6-1:1.0: probe with driver hub failed with error -5 [ 93.531452][ T1472] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 93.839733][ T8155] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 93.843499][ T8155] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 93.883693][ T8157] program syz.0.752 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 94.018464][ T8163] __nla_validate_parse: 3 callbacks suppressed [ 94.018482][ T8163] netlink: 12 bytes leftover after parsing attributes in process `syz.0.755'. [ 94.138277][ T8175] FAULT_INJECTION: forcing a failure. [ 94.138277][ T8175] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 94.144656][ T8175] CPU: 3 UID: 0 PID: 8175 Comm: syz.0.759 Not tainted syzkaller #0 PREEMPT(full) [ 94.144681][ T8175] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 94.144692][ T8175] Call Trace: [ 94.144698][ T8175] [ 94.144705][ T8175] dump_stack_lvl+0x16c/0x1f0 [ 94.144756][ T8175] should_fail_ex+0x512/0x640 [ 94.144789][ T8175] _copy_from_iter+0x29f/0x1720 [ 94.144816][ T8175] ? __alloc_skb+0x200/0x380 [ 94.144841][ T8175] ? __pfx__copy_from_iter+0x10/0x10 [ 94.144867][ T8175] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 94.144895][ T8175] netlink_sendmsg+0x829/0xdd0 [ 94.144921][ T8175] ? __pfx_netlink_sendmsg+0x10/0x10 [ 94.144952][ T8175] ____sys_sendmsg+0xa98/0xc70 [ 94.144977][ T8175] ? copy_msghdr_from_user+0x10a/0x160 [ 94.144996][ T8175] ? __pfx_____sys_sendmsg+0x10/0x10 [ 94.145031][ T8175] ___sys_sendmsg+0x134/0x1d0 [ 94.145052][ T8175] ? __pfx____sys_sendmsg+0x10/0x10 [ 94.145100][ T8175] __sys_sendmsg+0x16d/0x220 [ 94.145120][ T8175] ? __pfx___sys_sendmsg+0x10/0x10 [ 94.145154][ T8175] do_syscall_64+0xcd/0x4c0 [ 94.145177][ T8175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.145197][ T8175] RIP: 0033:0x7f2f6cb8ebe9 [ 94.145212][ T8175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.145229][ T8175] RSP: 002b:00007f2f6d9f9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 94.145244][ T8175] RAX: ffffffffffffffda RBX: 00007f2f6cdb5fa0 RCX: 00007f2f6cb8ebe9 [ 94.145251][ T8175] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 94.145258][ T8175] RBP: 00007f2f6d9f9090 R08: 0000000000000000 R09: 0000000000000000 [ 94.145264][ T8175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.145271][ T8175] R13: 00007f2f6cdb6038 R14: 00007f2f6cdb5fa0 R15: 00007ffe653590b8 [ 94.145285][ T8175] [ 94.271921][ T8178] binder: 8177:8178 ioctl c0109414 200000004ac0 returned -22 [ 94.293527][ T8094] usb 6-1: reset high-speed USB device number 4 using dummy_hcd [ 94.320517][ T8178] binder: 8177:8178 ioctl 8010500c 200000000280 returned -22 [ 94.328482][ T8178] binder: 8177:8178 ioctl 40603d10 200000000200 returned -22 [ 94.332309][ T8178] binder: 8177:8178 ioctl c0306201 200000000180 returned -14 [ 94.396495][ T8186] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 94.404012][ T8186] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 94.596086][ T8206] FAULT_INJECTION: forcing a failure. [ 94.596086][ T8206] name failslab, interval 1, probability 0, space 0, times 0 [ 94.600399][ T8206] CPU: 0 UID: 0 PID: 8206 Comm: syz.3.770 Not tainted syzkaller #0 PREEMPT(full) [ 94.600416][ T8206] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 94.600423][ T8206] Call Trace: [ 94.600428][ T8206] [ 94.600432][ T8206] dump_stack_lvl+0x16c/0x1f0 [ 94.600450][ T8206] should_fail_ex+0x512/0x640 [ 94.600465][ T8206] should_failslab+0xc2/0x120 [ 94.600479][ T8206] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 94.600491][ T8206] ? skb_clone+0x190/0x3f0 [ 94.600505][ T8206] skb_clone+0x190/0x3f0 [ 94.600527][ T8206] netlink_deliver_tap+0xabd/0xd30 [ 94.600551][ T8206] netlink_unicast+0x64c/0x870 [ 94.600571][ T8206] ? __pfx_netlink_unicast+0x10/0x10 [ 94.600589][ T8206] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 94.600614][ T8206] netlink_sendmsg+0x8d1/0xdd0 [ 94.600637][ T8206] ? __pfx_netlink_sendmsg+0x10/0x10 [ 94.600665][ T8206] ____sys_sendmsg+0xa98/0xc70 [ 94.600690][ T8206] ? copy_msghdr_from_user+0x10a/0x160 [ 94.600709][ T8206] ? __pfx_____sys_sendmsg+0x10/0x10 [ 94.600745][ T8206] ___sys_sendmsg+0x134/0x1d0 [ 94.600766][ T8206] ? __pfx____sys_sendmsg+0x10/0x10 [ 94.600814][ T8206] __sys_sendmsg+0x16d/0x220 [ 94.600835][ T8206] ? __pfx___sys_sendmsg+0x10/0x10 [ 94.600870][ T8206] do_syscall_64+0xcd/0x4c0 [ 94.600914][ T8206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.600932][ T8206] RIP: 0033:0x7fdbf138ebe9 [ 94.600947][ T8206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.600963][ T8206] RSP: 002b:00007fdbef5f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 94.600982][ T8206] RAX: ffffffffffffffda RBX: 00007fdbf15b5fa0 RCX: 00007fdbf138ebe9 [ 94.600997][ T8206] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 94.601008][ T8206] RBP: 00007fdbef5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 94.601018][ T8206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.601028][ T8206] R13: 00007fdbf15b6038 R14: 00007fdbf15b5fa0 R15: 00007ffde6553488 [ 94.601057][ T8206] [ 94.601099][ T8206] netlink: 12 bytes leftover after parsing attributes in process `syz.3.770'. [ 94.709760][ T59] usb 6-1: USB disconnect, device number 4 [ 94.715507][ T59] usblp0: removed [ 94.721392][ T8215] binder: BINDER_SET_CONTEXT_MGR already set [ 94.723954][ T8215] binder: 8214:8215 ioctl 4018620d 200000004a80 returned -16 [ 94.766170][ T8219] netlink: 16 bytes leftover after parsing attributes in process `syz.0.772'. [ 94.797184][ T8222] CUSE: unknown device info "" [ 94.799053][ T8222] CUSE: zero length info key specified [ 94.958518][ T8236] netlink: 12 bytes leftover after parsing attributes in process `syz.0.776'. [ 95.101815][ T8246] vlan0: entered promiscuous mode [ 95.109204][ T8246] vlan0: entered allmulticast mode [ 95.111008][ T8246] veth0_vlan: entered allmulticast mode [ 95.113564][ T8246] team0: Port device vlan0 added [ 95.269488][ T8252] FAULT_INJECTION: forcing a failure. [ 95.269488][ T8252] name failslab, interval 1, probability 0, space 0, times 0 [ 95.274945][ T8252] CPU: 3 UID: 0 PID: 8252 Comm: syz.1.783 Not tainted syzkaller #0 PREEMPT(full) [ 95.274968][ T8252] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 95.274978][ T8252] Call Trace: [ 95.274983][ T8252] [ 95.274990][ T8252] dump_stack_lvl+0x16c/0x1f0 [ 95.275013][ T8252] should_fail_ex+0x512/0x640 [ 95.275033][ T8252] ? __kmalloc_noprof+0xbf/0x510 [ 95.275059][ T8252] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 95.275084][ T8252] should_failslab+0xc2/0x120 [ 95.275104][ T8252] __kmalloc_noprof+0xd2/0x510 [ 95.275128][ T8252] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 95.275158][ T8252] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 95.275182][ T8252] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 95.275215][ T8252] ? bpf_lsm_capable+0x9/0x10 [ 95.275238][ T8252] ? security_capable+0x7e/0x260 [ 95.275261][ T8252] ? ns_capable+0xd7/0x110 [ 95.275285][ T8252] genl_rcv_msg+0x55c/0x800 [ 95.275311][ T8252] ? __pfx_genl_rcv_msg+0x10/0x10 [ 95.275334][ T8252] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 95.275360][ T8252] ? __pfx_nl80211_tx_mgmt_cancel_wait+0x10/0x10 [ 95.275387][ T8252] ? __pfx_nl80211_post_doit+0x10/0x10 [ 95.275417][ T8252] netlink_rcv_skb+0x155/0x420 [ 95.275438][ T8252] ? __pfx_genl_rcv_msg+0x10/0x10 [ 95.275462][ T8252] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 95.275494][ T8252] ? netlink_deliver_tap+0x1ae/0xd30 [ 95.275517][ T8252] genl_rcv+0x28/0x40 [ 95.275537][ T8252] netlink_unicast+0x5aa/0x870 [ 95.275561][ T8252] ? __pfx_netlink_unicast+0x10/0x10 [ 95.275581][ T8252] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 95.275610][ T8252] netlink_sendmsg+0x8d1/0xdd0 [ 95.275635][ T8252] ? __pfx_netlink_sendmsg+0x10/0x10 [ 95.275666][ T8252] ____sys_sendmsg+0xa98/0xc70 [ 95.275690][ T8252] ? copy_msghdr_from_user+0x10a/0x160 [ 95.275708][ T8252] ? __pfx_____sys_sendmsg+0x10/0x10 [ 95.275744][ T8252] ___sys_sendmsg+0x134/0x1d0 [ 95.275764][ T8252] ? __pfx____sys_sendmsg+0x10/0x10 [ 95.275833][ T8252] __sys_sendmsg+0x16d/0x220 [ 95.275854][ T8252] ? __pfx___sys_sendmsg+0x10/0x10 [ 95.275881][ T8252] ? fput+0x9b/0xd0 [ 95.275908][ T8252] do_syscall_64+0xcd/0x4c0 [ 95.275930][ T8252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.275947][ T8252] RIP: 0033:0x7ff01458ebe9 [ 95.275961][ T8252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.275977][ T8252] RSP: 002b:00007ff015433038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 95.275994][ T8252] RAX: ffffffffffffffda RBX: 00007ff0147b5fa0 RCX: 00007ff01458ebe9 [ 95.276005][ T8252] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 95.276015][ T8252] RBP: 00007ff015433090 R08: 0000000000000000 R09: 0000000000000000 [ 95.276025][ T8252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.276039][ T8252] R13: 00007ff0147b6038 R14: 00007ff0147b5fa0 R15: 00007ffda8a66e48 [ 95.276063][ T8252] [ 95.276871][ T8254] netlink: 16 bytes leftover after parsing attributes in process `syz.0.784'. [ 95.457823][ T8261] macvlan0: entered promiscuous mode [ 95.520709][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 95.521692][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 95.521704][ T40] audit: type=1400 audit(1756197743.030:451): avc: denied { write } for pid=8260 comm="syz.0.787" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 95.524417][ T8263] netlink: 12 bytes leftover after parsing attributes in process `syz.0.787'. [ 95.694184][ T8256] overlayfs: statfs failed on './file0' [ 95.695804][ T8269] binder: 8268:8269 ioctl c0109414 200000004ac0 returned -22 [ 95.713912][ T8269] binder: 8268:8269 ioctl 8010500c 200000000280 returned -22 [ 95.717136][ T8269] binder: 8268:8269 ioctl 40603d10 200000000200 returned -22 [ 95.721307][ T8269] binder: 8268:8269 ioctl c0306201 200000000180 returned -14 [ 95.776362][ T40] audit: type=1400 audit(1756197743.264:452): avc: denied { create } for pid=8272 comm="syz.3.792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 95.790325][ T8276] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 95.794647][ T8276] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 95.804892][ T40] audit: type=1400 audit(1756197743.292:453): avc: denied { write } for pid=8272 comm="syz.3.792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 95.827955][ T40] audit: type=1400 audit(1756197743.292:454): avc: denied { module_request } for pid=8272 comm="syz.3.792" kmod="netdev-wpan4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 95.846312][ T40] audit: type=1400 audit(1756197743.292:455): avc: denied { ioctl } for pid=8272 comm="syz.3.792" path="socket:[20329]" dev="sockfs" ino=20329 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 95.867049][ T8284] XFS (nullb0): Invalid superblock magic number [ 96.104098][ T8312] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 96.108266][ T8312] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 96.121387][ T8316] binder: BINDER_SET_CONTEXT_MGR already set [ 96.124009][ T8316] binder: 8313:8316 ioctl 4018620d 200000000040 returned -16 [ 96.158020][ T40] audit: type=1400 audit(1756197743.619:456): avc: denied { map } for pid=8317 comm="syz.3.812" path="/proc/504/task/505/smaps" dev="proc" ino=21212 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 96.170279][ T40] audit: type=1400 audit(1756197743.619:457): avc: denied { execute } for pid=8317 comm="syz.3.812" path="/proc/504/task/505/smaps" dev="proc" ino=21212 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 96.286463][ T8332] netlink: 24 bytes leftover after parsing attributes in process `syz.1.810'. [ 96.310960][ T8332] vcan1: entered allmulticast mode [ 96.423900][ T8338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.814'. [ 96.473331][ T8338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 96.527557][ T8345] netlink: 12 bytes leftover after parsing attributes in process `syz.0.816'. [ 96.606513][ T8354] netlink: 12 bytes leftover after parsing attributes in process `syz.1.820'. [ 96.610566][ T8354] FAULT_INJECTION: forcing a failure. [ 96.610566][ T8354] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.617073][ T8354] CPU: 3 UID: 0 PID: 8354 Comm: syz.1.820 Not tainted syzkaller #0 PREEMPT(full) [ 96.617088][ T8354] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 96.617095][ T8354] Call Trace: [ 96.617099][ T8354] [ 96.617103][ T8354] dump_stack_lvl+0x16c/0x1f0 [ 96.617120][ T8354] should_fail_ex+0x512/0x640 [ 96.617135][ T8354] _copy_to_user+0x32/0xd0 [ 96.617151][ T8354] simple_read_from_buffer+0xcb/0x170 [ 96.617164][ T8354] proc_fail_nth_read+0x197/0x240 [ 96.617178][ T8354] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 96.617191][ T8354] ? rw_verify_area+0xcf/0x6c0 [ 96.617209][ T8354] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 96.617221][ T8354] vfs_read+0x1e4/0xcf0 [ 96.617234][ T8354] ? __pfx___mutex_lock+0x10/0x10 [ 96.617257][ T8354] ? __pfx_vfs_read+0x10/0x10 [ 96.617271][ T8354] ? __fget_files+0x20e/0x3c0 [ 96.617288][ T8354] ksys_read+0x12a/0x250 [ 96.617299][ T8354] ? __pfx_ksys_read+0x10/0x10 [ 96.617314][ T8354] do_syscall_64+0xcd/0x4c0 [ 96.617328][ T8354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.617340][ T8354] RIP: 0033:0x7ff01458d5fc [ 96.617351][ T8354] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 96.617363][ T8354] RSP: 002b:00007ff015433030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 96.617374][ T8354] RAX: ffffffffffffffda RBX: 00007ff0147b5fa0 RCX: 00007ff01458d5fc [ 96.617381][ T8354] RDX: 000000000000000f RSI: 00007ff0154330a0 RDI: 0000000000000004 [ 96.617387][ T8354] RBP: 00007ff015433090 R08: 0000000000000000 R09: 0000000000000000 [ 96.617394][ T8354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 96.617400][ T8354] R13: 00007ff0147b6038 R14: 00007ff0147b5fa0 R15: 00007ffda8a66e48 [ 96.617414][ T8354] [ 96.723169][ T8359] bond0: option mode: unable to set because the bond device has slaves [ 96.806269][ T5970] ------------[ cut here ]------------ [ 96.808645][ T5970] WARNING: CPU: 0 PID: 5970 at net/bluetooth/hci_conn.c:569 hci_conn_timeout+0x11a/0x210 [ 96.812756][ T5970] Modules linked in: [ 96.814969][ T5970] CPU: 0 UID: 0 PID: 5970 Comm: kworker/u33:3 Not tainted syzkaller #0 PREEMPT(full) [ 96.818044][ T8361] netlink: 'syz.1.822': attribute type 10 has an invalid length. [ 96.820890][ T5970] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 96.830457][ T5970] Workqueue: hci1 hci_conn_timeout [ 96.832610][ T5970] RIP: 0010:hci_conn_timeout+0x11a/0x210 [ 96.834906][ T5970] Code: 00 e8 2a bf 2e f7 4c 89 f1 4c 89 e2 48 c7 c6 a0 3d fd 8c 48 c7 c7 e0 e0 a6 90 e8 81 d8 88 fa e9 4d ff ff ff e8 07 bf 2e f7 90 <0f> 0b 90 e8 fe be 2e f7 48 8d bb f5 f6 ff ff 48 b8 00 00 00 00 00 [ 96.843023][ T5970] RSP: 0018:ffffc9000339fc30 EFLAGS: 00010293 [ 96.845014][ T5970] RAX: 0000000000000000 RBX: ffff888035938948 RCX: ffffffff8a8ccc4f [ 96.847692][ T5970] RDX: ffff88802325a440 RSI: ffffffff8a8cccf9 RDI: 0000000000000005 [ 96.850281][ T5970] RBP: 00000000ffffffff R08: 0000000000000005 R09: 0000000000000000 [ 96.853003][ T5970] R10: 00000000ffffffff R11: 0000000000002c10 R12: ffff888035938000 [ 96.856121][ T5970] R13: 0000000000000000 R14: ffffffff90ab7e54 R15: ffffc9000339fd10 [ 96.859660][ T5970] FS: 0000000000000000(0000) GS:ffff8880d66b9000(0000) knlGS:0000000000000000 [ 96.863149][ T5970] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 96.866197][ T5970] CR2: 0000200000008000 CR3: 000000000e380000 CR4: 0000000000352ef0 [ 96.869860][ T5970] Call Trace: [ 96.871405][ T5970] [ 96.872809][ T5970] process_one_work+0x9cf/0x1b70 [ 96.874994][ T5970] ? __pfx_process_one_work+0x10/0x10 [ 96.877724][ T5970] ? assign_work+0x1a0/0x250 [ 96.879821][ T5970] worker_thread+0x6c8/0xf10 [ 96.881791][ T5970] ? __kthread_parkme+0x19e/0x250 [ 96.883915][ T5970] ? __pfx_worker_thread+0x10/0x10 [ 96.886050][ T5970] kthread+0x3c5/0x780 [ 96.887795][ T5970] ? __pfx_kthread+0x10/0x10 [ 96.889864][ T5970] ? rcu_is_watching+0x12/0xc0 [ 96.891862][ T5970] ? __pfx_kthread+0x10/0x10 [ 96.893807][ T5970] ret_from_fork+0x5d7/0x6f0 [ 96.895773][ T5970] ? __pfx_kthread+0x10/0x10 [ 96.897730][ T5970] ret_from_fork_asm+0x1a/0x30 [ 96.899935][ T5970] [ 96.901338][ T5970] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 96.904373][ T5970] CPU: 0 UID: 0 PID: 5970 Comm: kworker/u33:3 Not tainted syzkaller #0 PREEMPT(full) [ 96.908156][ T5970] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 96.912495][ T5970] Workqueue: hci1 hci_conn_timeout [ 96.914578][ T5970] Call Trace: [ 96.915980][ T5970] [ 96.917201][ T5970] dump_stack_lvl+0x3d/0x1f0 [ 96.919098][ T5970] vpanic+0x6e8/0x7a0 [ 96.920749][ T5970] ? __pfx_vpanic+0x10/0x10 [ 96.922563][ T5970] ? hci_conn_timeout+0x11a/0x210 [ 96.924500][ T5970] panic+0xca/0xd0 [ 96.926103][ T5970] ? __pfx_panic+0x10/0x10 [ 96.928034][ T5970] ? check_panic_on_warn+0x1f/0xb0 [ 96.930227][ T5970] check_panic_on_warn+0xab/0xb0 [ 96.932299][ T5970] __warn+0xf6/0x3c0 [ 96.933967][ T5970] ? hci_conn_timeout+0x11a/0x210 [ 96.936073][ T5970] report_bug+0x3c3/0x580 [ 96.937899][ T5970] ? hci_conn_timeout+0x11a/0x210 [ 96.940042][ T5970] handle_bug+0x184/0x210 [ 96.941471][ T5970] exc_invalid_op+0x17/0x50 [ 96.942945][ T5970] asm_exc_invalid_op+0x1a/0x20 [ 96.944525][ T5970] RIP: 0010:hci_conn_timeout+0x11a/0x210 [ 96.946381][ T5970] Code: 00 e8 2a bf 2e f7 4c 89 f1 4c 89 e2 48 c7 c6 a0 3d fd 8c 48 c7 c7 e0 e0 a6 90 e8 81 d8 88 fa e9 4d ff ff ff e8 07 bf 2e f7 90 <0f> 0b 90 e8 fe be 2e f7 48 8d bb f5 f6 ff ff 48 b8 00 00 00 00 00 [ 96.954342][ T5970] RSP: 0018:ffffc9000339fc30 EFLAGS: 00010293 [ 96.956698][ T5970] RAX: 0000000000000000 RBX: ffff888035938948 RCX: ffffffff8a8ccc4f [ 96.959232][ T5970] RDX: ffff88802325a440 RSI: ffffffff8a8cccf9 RDI: 0000000000000005 [ 96.961945][ T5970] RBP: 00000000ffffffff R08: 0000000000000005 R09: 0000000000000000 [ 96.965553][ T5970] R10: 00000000ffffffff R11: 0000000000002c10 R12: ffff888035938000 [ 96.968989][ T5970] R13: 0000000000000000 R14: ffffffff90ab7e54 R15: ffffc9000339fd10 [ 96.971935][ T5970] ? hci_conn_timeout+0x6f/0x210 [ 96.973897][ T5970] ? hci_conn_timeout+0x119/0x210 [ 96.975942][ T5970] process_one_work+0x9cf/0x1b70 [ 96.977881][ T5970] ? __pfx_process_one_work+0x10/0x10 [ 96.979814][ T5970] ? assign_work+0x1a0/0x250 [ 96.981746][ T5970] worker_thread+0x6c8/0xf10 [ 96.983543][ T5970] ? __kthread_parkme+0x19e/0x250 [ 96.985131][ T5970] ? __pfx_worker_thread+0x10/0x10 [ 96.986757][ T5970] kthread+0x3c5/0x780 [ 96.988044][ T5970] ? __pfx_kthread+0x10/0x10 [ 96.989638][ T5970] ? rcu_is_watching+0x12/0xc0 [ 96.991517][ T5970] ? __pfx_kthread+0x10/0x10 [ 96.993330][ T5970] ret_from_fork+0x5d7/0x6f0 [ 96.995189][ T5970] ? __pfx_kthread+0x10/0x10 [ 96.996970][ T5970] ret_from_fork_asm+0x1a/0x30 [ 96.998679][ T5970] [ 97.000844][ T5970] Kernel Offset: disabled [ 97.002304][ T5970] Rebooting in 86400 seconds.. VM DIAGNOSIS: 08:42:24 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000039 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85643c85 RDI=ffffffff9b1110a0 RBP=ffffffff9b111060 RSP=ffffc9000339f5a0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000039 R14=ffffffff9b111060 R15=ffffffff85643c20 RIP=ffffffff85643caf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d66b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000008000 CR3=000000000e380000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000020080810 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffde6553810 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffde6553996 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffde6553996 00007ffde655399c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdbf1412e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdbf1412e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdbf1412e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdbf1412e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdbf1412ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdbf1412fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffffc90006580000 RBX=0000000000000000 RCX=ffff888029471070 RDX=000000000000009d RSI=ffffffff86b3da18 RDI=ffff8880294712d0 RBP=0000000000000001 RSP=ffffc900006a0b60 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000005cbf R12=0000000000000001 R13=0000000000004e20 R14=ffff888029471070 R15=0000000000000001 RIP=ffffffff86b3da55 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d67b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f2f6d9f8f98 CR3=0000000032239000 CR4=00352ef0 DR0=0000000100000000 DR1=0000000000001000 DR2=0000000000000009 DR3=0000000000000800 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=00000000000000ff Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555816f0ee0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555816fda6f 00005555816fc510 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555816e94a8 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555816f416a 00005555816f4030 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 01c71000080049f4 006d766b2f766564 2f01ffffffffffff ffffed080180030e ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 f8ba6638f57381e1 c4d8220f00000008 35d8200f300f0000 000135320fc00000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a003ae4100461c0f 460000a81a2dc08e 008eb866ec0cfcba 66ef87e47938b80c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff0401e810000210 0018800400040100 0004080601080010 0174a2018e100018 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8010001010000480 04010800080170c8 02c4100004800300 10000fffffffffff ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0101f08080801000 05ba800800010000 04080606011f8e01 80a0801000101000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0480040108000801 70c802c410000480 030010000fffffff ffffff0401e81000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0210001880040004 0100000408060108 00100174a2018e10 0018a003ae410046 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1c0f460000a81a2d c08e008eb866ec0c fcba66ef87e47938 b80cf8ba6638f573 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffffc90000a6f8f0 RCX=0000000000000000 RDX=1ffff1100d4c7471 RSI=ffffc90000a6f678 RDI=ffffc90000a6f8f0 RBP=1ffff9200014decb RSP=ffffc90000a6f638 R8 =0000000000000000 R9 =ffffed100d4c47f8 R10=ffff88806a623fc7 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=dffffc0000000000 R15=dffffc0000000000 RIP=ffffffff818eb3a0 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c3e35a9 CR3=000000002c783000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe653595c6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe653595c6 00007ffe653595cc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2f6cc12e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2f6cc12e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2f6cc12e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2f6cc12e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2f6cc12ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2f6cc12fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2f6cd874a8 00007f2f6cd874a0 00007f2f6cd87498 00007f2f6cd87470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2f6d8ed100 00007f2f6cd87460 00007f2f6cd80004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2f6cd874b8 00007f2f6cd874b0 00007f2f6cd874a8 00007f2f6cd874a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000000a222f RBX=0000000000000003 RCX=ffffffff8b93bc29 RDX=0000000000000000 RSI=ffffffff8de50218 RDI=ffffffff8c162900 RBP=ffffed1003bda000 RSP=ffffc90000197df8 R8 =0000000000000001 R9 =ffffed100d4e6655 R10=ffff88806a7332ab R11=0000000000000000 R12=0000000000000003 R13=ffff88801ded0000 R14=ffffffff90ab4c90 R15=0000000000000000 RIP=ffffffff8b93a78f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fa8d7c70e9c CR3=0000000032c45000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000534c002 Opmask01=0000000000000000 Opmask02=00000000f0400000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055b8149e0600 000055b8149e0600 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe185ee630 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 69617420746f4e20 333a3333752f7265 6b726f776b203a6d 6d6f432030373935 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3834203030203230 2033392066652038 6520383020343220 3434203938203834 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2037632039382034 3420343320373720 6666206666203066 203030206433203e ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 38343c2035302066 3020306320313320 3830203432206337 2062382030632039 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3820313420303120 3432203437206238 2038342038312034 3220343520623820 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000