last executing test programs: 1m11.671504968s ago: executing program 1 (id=28): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x210008, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/class/net/bridge0/bridge/multicast_router\x00', 0x42, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r0) copy_file_range(r0, 0x0, r0, &(0x7f00000001c0)=0x800000001, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x18) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000b40)={'syzkaller0\x00', 0x1}) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000b80)='syzkaller0\x00', 0xb) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000bc0)={0x2, 0x4e20, @loopback}, 0x10) 1m11.406532419s ago: executing program 1 (id=29): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x20000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f00000000c0)=0x1, 0x4) sendto$inet6(r1, &(0x7f0000000140)="04", 0x1, 0x2404c081, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000200)='vegas', 0x5) syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902"], 0x0) mount(0x0, 0x0, &(0x7f0000000300)='configfs\x00', 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, 0x0) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000480), 0x4) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000840)={0x0, 0xdd, 0x2}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000008c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0e00000010000000", @ANYRES32=r2, @ANYBLOB, @ANYRES32], 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/target/core/rd_mcp_0/dev0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/target/core/rd_mcp_0/dev0/alua/default_tg_pt_gp/alua_access_type\x00', 0x2, 0x52) shutdown(r1, 0x1) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r3, 0x40045010, &(0x7f0000000640)=0x9) socket$nl_generic(0x10, 0x3, 0x10) 1m10.221392385s ago: executing program 1 (id=46): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000380)={&(0x7f00000003c0)={0x1d, r2}, 0x10, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {0x10, 0xb}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) openat2(0xffffffffffffffff, 0x0, 0x0, 0x68) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r6 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) ioctl$CDROMREADAUDIO(r6, 0x530e, &(0x7f00000005c0)={@lba=0x6, 0x1, 0x1e, &(0x7f0000000600)=""/30}) ioctl$HIDIOCGUSAGE(r5, 0xc0105b08, &(0x7f0000000040)={0xffffffff, 0xfce1a86b0db46002, 0x3cf2, 0x202000, 0x110001, 0x80000001}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="b700000000000000bf160000000000007961a800000000001501020000000000850000008a000000b70000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000280)=r7, 0x4) sendmsg(r9, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x80800) set_mempolicy(0x2002, &(0x7f0000000000)=0x2000009, 0x9) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) writev(0xffffffffffffffff, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) syz_usb_control_io$rtl8150(r4, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000340)={0x20, 0x14}, 0x0, 0x0, 0x0, 0x0}) 58.390334981s ago: executing program 1 (id=58): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r0, @ANYRES8=r0, @ANYRES16=r0, @ANYRES32, @ANYRESOCT=r0], 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000700)={0xffffffffffffffff, &(0x7f0000000740), &(0x7f0000000780)=""/27}, 0x20) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'veth1_to_batadv\x00', 0x2}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000140)={'geneve1\x00', 0x400}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x200040, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f00000001c0)={0x0, 0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x8) r3 = socket(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89fe, &(0x7f00000004c0)={'bridge0\x00', &(0x7f00000006c0)=@ethtool_ringparam={0xe, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x9}}) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) sched_setscheduler(r4, 0x1, &(0x7f0000000380)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000480), 0x651, 0x0) recvmmsg(r5, &(0x7f00000004c0), 0x4000087, 0x2, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000500)={{0xa, 0x0, 0x101, @empty}, {0xa, 0x4e22, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, 0xffffffffffffffff, {[0x0, 0x657, 0xe8, 0xfffffff9, 0x2, 0x1, 0x400]}}, 0x5c) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000640)=ANY=[@ANYBLOB="b70000000000000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x127ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000200)={0x1, &(0x7f0000000240)=[{0x591, 0xe0, 0xd6}]}) r8 = syz_open_dev$dri(&(0x7f0000000480), 0x78, 0xa02) ioctl$DRM_IOCTL_GET_STATS(r8, 0x80f86406, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'rose0\x00', 0x102}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x2002, 0x0) sendfile(r9, r7, 0x0, 0x8) ioctl$CEC_ADAP_S_LOG_ADDRS(r9, 0xc05c6104, &(0x7f0000000040)={"48d80ebc", 0x9, 0x0, 0x7, 0x81, 0x7, "e8fdb3d702421fa5ad283c13089ecd", "c55e1c39", "20b3dffe", '\x00', ["ad547dedf99cfce6848f0263", "47d79bc01b792f355e88e12c", 'r`?\x00', "8eeb6ff0fcbc6fdffb0ac5d5"]}) sendfile(r9, 0xffffffffffffffff, &(0x7f0000000800)=0x1, 0xf21f) 58.361194833s ago: executing program 1 (id=67): mkdir(&(0x7f0000000080)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x10000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_get$pid(0x2, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) r2 = userfaultfd(0x801) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f00000003c0)={0x0, 0x0, 0x80, 0x2, 0x27e}, &(0x7f0000000440)=0x0, &(0x7f0000000480)=0x0, &(0x7f00000004c0)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000540)=@IORING_OP_ACCEPT={0xd, 0x8, 0x3, r1, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0xffffffff}}) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f00000005c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000640)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) write(r0, &(0x7f00000001c0)='27', 0x2) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000700)={0xaa, 0x1}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/locks\x00', 0x0, 0x0) r7 = socket$kcm(0x10, 0x400000002, 0x0) r8 = syz_open_dev$video4linux(&(0x7f0000000680), 0x4, 0x101000) ioctl$VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f00000006c0)={0x5, 0x7, 0x2, 0x0, 0xfb}) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r9, 0x84, 0x12, &(0x7f0000000340), &(0x7f0000000380)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x0, 0xfffffff6, 0x9, 0x12, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x8004}, 0x50) write$cgroup_subtree(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="33fe0000660091ef"], 0xfe33) openat$vnet(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/cluster/ocfs2/heartbeat/hb0/start_block\x00', 0x1, 0x0) 58.211055398s ago: executing program 1 (id=72): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x20000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f00000000c0)=0x1, 0x4) sendto$inet6(r1, &(0x7f0000000140)="04", 0x1, 0x2404c081, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000200)='vegas', 0x5) syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902"], 0x0) mount(0x0, 0x0, &(0x7f0000000300)='configfs\x00', 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, 0x0) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000480), 0x4) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000840)={0x0, 0xdd, 0x2}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000008c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0e00000010000000", @ANYRES32=r2, @ANYBLOB], 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/target/core/rd_mcp_0/dev0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/target/core/rd_mcp_0/dev0/alua/default_tg_pt_gp/alua_access_type\x00', 0x2, 0x52) shutdown(r1, 0x1) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r3, 0x40045010, &(0x7f0000000640)=0x9) socket$nl_generic(0x10, 0x3, 0x10) 43.16045868s ago: executing program 32 (id=72): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x20000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f00000000c0)=0x1, 0x4) sendto$inet6(r1, &(0x7f0000000140)="04", 0x1, 0x2404c081, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000200)='vegas', 0x5) syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902"], 0x0) mount(0x0, 0x0, &(0x7f0000000300)='configfs\x00', 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, 0x0) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000480), 0x4) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000840)={0x0, 0xdd, 0x2}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000008c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0e00000010000000", @ANYRES32=r2, @ANYBLOB], 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/target/core/rd_mcp_0/dev0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/target/core/rd_mcp_0/dev0/alua/default_tg_pt_gp/alua_access_type\x00', 0x2, 0x52) shutdown(r1, 0x1) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r3, 0x40045010, &(0x7f0000000640)=0x9) socket$nl_generic(0x10, 0x3, 0x10) 42.827311806s ago: executing program 3 (id=226): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000016c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x450, 0x0, 0x1f0, 0x288, 0x320, 0x3b8, 0x158, 0x1f0, 0x288, 0x320, 0x3b8, 0x6, 0x0, {[{{@uncond, 0x0, 0x130, 0x158, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x20, 0x80, 'kmp\x00', 'abc\x00', 0x3}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x4b0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r1, 0xc0485630, &(0x7f0000000080)={0x1, "90bad48c8138774ab4a23548f1671ae2d048b74ac386c332749c124ba2609f94", 0x1, 0x5, 0xd2d1, 0x3000000, 0x2}) syz_emit_ethernet(0x30, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @esp={{0x5, 0x4, 0x0, 0x0, 0x22, 0x0, 0x0, 0x40, 0x32, 0x0, @remote, @local}, {0x4d2, 0x7ffffffe}}}}}, 0x0) 42.743933211s ago: executing program 3 (id=228): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltuid}]}}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x400002, 0x0) ioctl$XFS_IOC_GETBMAPA(r2, 0xc020582c, &(0x7f0000000040)={0xffffffff00000000, 0x300000, 0x7f, 0x7, 0x80000000}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000003c00010325bd7002fedbdf2509"], 0x1c}, 0x1, 0x0, 0x0, 0x200448d3}, 0x24044014) 42.581587296s ago: executing program 3 (id=229): getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000000)={0x2, 0xffffffffffffffff, 0x80000}, &(0x7f0000000040)=0xc) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000080), &(0x7f00000000c0)=0x4) mount$tmpfs(0x0, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000140), 0x204002, &(0x7f0000000180)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}], [{@dont_measure}]}) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 42.581383791s ago: executing program 3 (id=230): mkdirat(0xffffffffffffff9c, &(0x7f0000001280)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000012c0), &(0x7f0000001300)='./file0\x00', &(0x7f0000001340), 0x0, 0x0) chdir(&(0x7f0000001380)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001480)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000014c0)='./dev\x00', &(0x7f0000001500)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001540)='./mnt\x00', 0x1ff) mount(&(0x7f0000001580)=@filename='./dev/sda1\x00', &(0x7f00000015c0)='./mnt\x00', &(0x7f0000001600)='ext4\x00', 0x8410, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001640)='./mnt\x00', 0x519001, 0x10) write(r0, &(0x7f0000001680)="7f1be94b12", 0x5) write$tun(r0, &(0x7f00000016c0)=ANY=[], 0x1d4c0) ioctl$OCFS2_IOC_UNRESVSP64(r0, 0x4030582b, &(0x7f0000001700)={0x1, 0x0, 0x2, 0x2433, 0x6, 0x4}) setxattr$security_capability(&(0x7f00000013c0)='./file1\x00', &(0x7f0000001400), &(0x7f0000001440)=@v3={0x3000000, [{0x10000}, {0x4902, 0x3}]}, 0x18, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="0500000010000000f9ff00000900000000000000587e286a7be694204715950f9804a29c5298e7fde298f58ab4ca484e270ccd1251821062b12cef3fe12a5d7b9a0302000000787d396b90459db040202b8ae6123182713bed6bc066497ddd6b8bfe8932edb7285ef61459886e819717d1e925dd24f8289f4ad09b0c442e8784068df8a613858d7f0f69e1b98e766ba0c3b76f47da264380bdfe512b9af83eef0be22f369bdeff8c36e43736919c98969430db47a84f", @ANYRES32, @ANYBLOB="00000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r2, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20001880) personality(0x5d28870e52b2f29b) uname(&(0x7f0000000280)=""/4096) connect$phonet_pipe(r2, &(0x7f0000000240)={0x23, 0x0, 0x58}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0xf, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0xd3}}}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 42.361027582s ago: executing program 3 (id=233): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) fsopen(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000140)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000440)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000540)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000000580)={0x0, 0x1, 0x0, 0x1, 0x255}, &(0x7f0000000600)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x800, 0x2000, 0x10000004, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0xc0, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x800, 0x1, 0x0, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x1, 0x49}}], 0x1, &(0x7f0000000880)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x81000fff, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="14"], 0x7c}}, 0x0) ioctl$OCFS2_IOC_GROUP_EXTEND(r3, 0x5220, 0x0) r11 = landlock_create_ruleset(&(0x7f0000000100)={0x22b, 0x1}, 0x30, 0x0) landlock_restrict_self(r11, 0xa) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x84, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xf}}, [@TCA_STAB={0x60, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x10, 0x100, 0xff, 0x2, 0x4, 0x8, 0x5}}, {0xe, 0x2, [0x1, 0x0, 0xcd29, 0x40, 0x200]}}, {{0x1c, 0x1, {0xc, 0x1, 0x0, 0x9, 0x2, 0x8, 0xa35, 0x7}}, {0x12, 0x2, [0xfff, 0x2, 0x6, 0x3, 0xa, 0x3, 0x289]}}]}]}, 0x84}}, 0x0) r12 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r12, &(0x7f0000000400)="00112233445500aabbccddee080045000028000100004006f9d37f", 0x1b, 0x0, &(0x7f0000000500)={0x11, 0x300, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) 41.978071468s ago: executing program 3 (id=238): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) dup3(r2, r1, 0x80000) shutdown(r0, 0x0) 41.920752819s ago: executing program 33 (id=238): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) dup3(r2, r1, 0x80000) shutdown(r0, 0x0) 22.030507705s ago: executing program 5 (id=450): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000240)={0x4, 0x0, 0x0, 0x1a8, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@writecache={0x0, 0xc00, 0x0, 0x70, 'writecache\x00', {0x73, 0x20, @ram_num={'1:', 0x1}, 0x20, @ram_num={'1:', 0x0}, 0x20, '512', 0x20, '2 high_watermark 50'}}]}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x100000, &(0x7f0000000000/0x100000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000200)={0x10004, 0x0, &(0x7f0000023000/0x2000)=nil}) close_range(r1, 0xffffffffffffffff, 0x0) 21.930596969s ago: executing program 5 (id=451): rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffeffffffffff]}, 0x0, 0x8) r0 = gettid() timer_create(0x1, &(0x7f0000000040)={0x0, 0x12, 0x4, @tid=r0}, &(0x7f0000000080)=0x0) timer_create(0x0, &(0x7f0000001880)={0x0, 0x1e, 0x0, @thr={&(0x7f0000000400)="4b606bca50017ec0db01dbb7d89ad2011590f91abd2d7613ef0e6bb20c64588ed128ab06b48dca0a5fa05c77c067dccca681b52986cc6f212c70f7b744272e4528467b8948ccfe1194f6e9ec45118b3a01a5c77e101ca943fc363648dd82a8debb0ec2f8e746de97953cefcb17375df9e5", &(0x7f0000000880)="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"}}, &(0x7f00000018c0)) r2 = gettid() timer_create(0x1, &(0x7f00000000c0)={0x0, 0x12, 0x4, @tid=r2}, &(0x7f0000000100)=0x0) timer_create(0x7, &(0x7f00000001c0)={0x0, 0x18, 0x1, @tid=r0}, &(0x7f0000000200)) timer_settime(r3, 0x1, &(0x7f0000000140)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_settime(r1, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x989680}}, 0x0) r4 = gettid() tkill(r4, 0x16) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000640)=@routing={0x3a, 0x14, 0x1, 0x5, 0x0, [@empty, @loopback, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, @private2, @remote, @private2, @dev={0xfe, 0x80, '\x00', 0x39}]}, 0xa8) ptrace$getenv(0x4201, r0, 0xd7, &(0x7f0000000480)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f0000000280)={0xfffffff8, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r8, &(0x7f0000000340)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r8, 0x402c5342, &(0x7f0000000380)={0x0, 0x7a120, 0x60, {0xfffffff8, 0xffffffff}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000840)={0x24, r6, 0x5, 0xffffffff, 0xfffffff8, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x8, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x40000) 21.930257955s ago: executing program 5 (id=452): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x37, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000003c00010325bd7002fedbdf2509"], 0x1c}, 0x1, 0x0, 0x0, 0x200448d3}, 0x24044014) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000201000008000300", @ANYRES32=r3, @ANYBLOB="08003f000002"], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r2, 0x608, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x5d}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}]}, 0x30}}, 0x0) 21.868271087s ago: executing program 5 (id=453): syz_emit_ethernet(0xe, &(0x7f0000001780)={@random="aaaaaaaaaaaa", @random="aaaaaaaaaabb", @void, {@generic={0x800}}}, 0x0) (async) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0xd, 0x10, &(0x7f00000014c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="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"], &(0x7f0000000480)='syzkaller\x00', 0x2, 0xff6, &(0x7f00000004c0)=""/4086}, 0x94) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400), 0x80383, 0x0) (async) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x2082) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f0000001700)={0x0, 0x10000, 0x2}) (async) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r2, 0x21081c22) (async) keyctl$join(0x1, &(0x7f00000000c0)={'syz', 0x2}) keyctl$join(0x1, &(0x7f0000000240)={'syz', 0x2}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='sysfs\x00', 0x1214040, 0x0) (async) chroot(&(0x7f0000000200)='./file0\x00') mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x21d000, 0x0) pivot_root(&(0x7f00000002c0)='./file0/../file0/../file0\x00', &(0x7f0000000300)='./file0\x00') 21.751287439s ago: executing program 5 (id=454): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r0, 0x0, 0x28, &(0x7f00000015c0)="170000000200020000ffbe8c5ee17688a2003300010100000077fc5ad90200fb6a880000d6c9db0000db15d088bd8b7000000000d9ce9bc7e28db3000200ff01800a0000ebfc0607bdff59100ac45761547a681f009ceeff5acba400001fb700674f00c8e365d00b5033bf79ac2dfc061f15003901dee2000000000062068f5ee50c08af9b1c568302ffff02ff03310800ab0840024f02d8e9e90539062a80e605007f71174ab498ff0b3e5a1b47b6df7b23de8caa000000", 0xb8) 21.430776767s ago: executing program 5 (id=457): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x11}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xf}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000b40)=ANY=[@ANYBLOB="ff03"], 0x390) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f0000000b00)={0xa, 0x4e20, 0x10, @mcast2}, 0x1c) sendto$inet6(r1, &(0x7f0000000b40), 0x3000, 0xd8050000, 0x0, 0x0) 21.374075867s ago: executing program 34 (id=457): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x11}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xf}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000b40)=ANY=[@ANYBLOB="ff03"], 0x390) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f0000000b00)={0xa, 0x4e20, 0x10, @mcast2}, 0x1c) sendto$inet6(r1, &(0x7f0000000b40), 0x3000, 0xd8050000, 0x0, 0x0) 10.081065544s ago: executing program 6 (id=592): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f0000001440)="b805000000090200e10f01df0000320f01d9660ff7e31bf7ecec05000000b90000670f01dfae41d9010f323667dbd20f300f0826f30fc7b205000000660fc775022e0ffa600c980f320f3566b85700", 0x4f}], 0x1, 0x1e, 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x23, 0x4, 0x8, 0xbc0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x1, 0x3}, 0x50) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r4, &(0x7f0000000080)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x5, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@map_idx={0x18, 0x3, 0x5, 0x0, 0x3}]}, &(0x7f0000000400)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback=0xe, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./nfsd\x00', &(0x7f00000014c0)='nfsd\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./nfsd/nfsv4gracetime\x00', 0x2, 0x0) write(r6, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000003c0)) getdents(r7, &(0x7f0000000440)=""/4096, 0x1000) ioctl$SIOCPNADDRESOURCE(0xffffffffffffffff, 0x89ee, &(0x7f0000000100)=0x1) socket(0x8, 0x80000, 0x200) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xe, 0x4, &(0x7f0000001600)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000001780)='GPL\x00', 0x4, 0xfd90, &(0x7f00000017c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f00000018c0), 0x366, 0x10, &(0x7f0000001900), 0x1dd}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001940)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r10 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001980)={r8, r9, 0x26, 0x0, @val=@perf_event={0x7e}}, 0x18) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000019c0)={r10, 0x0, 0x0}, 0x10) write$binfmt_aout(r5, &(0x7f00000003c0)=ANY=[], 0xc8) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x6bb6c4a5b2d35090, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)) unshare(0x14020080) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9.260280374s ago: executing program 6 (id=611): r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000000000000000000000000001850000002c00000095000000000000004495e980d4ab43a654dbda1289491fde9751ca443daaa97c18e213"], &(0x7f00000003c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000880)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) ioctl$XFS_IOC_FSINUMBERS(r2, 0xc0205867, &(0x7f0000000800)={&(0x7f00000000c0)=0xfffffffffffffffc, 0x2, &(0x7f0000000640)=[{}, {}], &(0x7f00000007c0)}) sendmsg$nl_route(r2, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001000010828bd7000000000000000000063bd00febf1cf956ae7bea43f813b7211f4be51b64993a8b36f60a440cdf56b1065658699c221e8011bd95623e5e8f8d1be612fa149c56a5bc17f5a386e53f03d8104a5b4600c2090a0975bb9906be3ce1e18e7b903b2da1cffb0328db5a08cbc68a3b5af7aa7c995ee64b3cfcb6d7b455c4fec94efff256992c651bb79242937c3fd6e532475e817ef2e7d4e6b60b245749cc1c0101a4c9b6aa074599fe9baaf8287265f80449fa3ac404b7441e2e77e858544f504c57c7c7e3ca3f", @ANYRES32=0x0, @ANYBLOB="00000000042404001c002b80080003001900000008000100", @ANYRES32=r3, @ANYBLOB='\b\x00\b\x00', @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x44}}, 0x0) signalfd(r0, &(0x7f0000000100)={[0x8]}, 0x8) write$binfmt_misc(r1, &(0x7f0000001980)="6de54b233145d891f177fdf59a6c884cc7d3112472212913e5fcb2d3e362268341e7493e4b2939238b09a914d120c36d37c06d380d02cecc1b58856a24d66efa2d659c48cc609cb2b99c61587d8143343688a77f32c00773ede924e0f036667adb40255d47f1d54fddf4e7ffe91a3ae947590e829504edd751a960d1ee76a32da84e6d9c7887a86ad0e924c43f9b9269878f02a2d8b4a0592446b47d727847014db89f75f813ef6189e874c54dbb7db7b73c544a06415b35e7250508b24ce7ff43fb0c010735d13835515d", 0xcb) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000840)=ANY=[@ANYBLOB="24800000", @ANYRES16=r4, @ANYBLOB="0500fffffffff8ffffff2100000008000300", @ANYRES32=r5, @ANYBLOB="08007d8004000200"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x40000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r6, @ANYBLOB="000227bd7000fedbdf2568000000d1959d7f000000007f0000001c00c7000806880101020001060009000e020306eb69f7c457d547d42600c7000b0401030700ad03ba05f4060400060a05020b030101fb050807b55e9574045fcafe0000140006000000060503010f0211b873ff6e2f75d32800c7000001300404026e0504050307000602040100040301050307ff0105022f2dbc48e592913c2000c70009030d053a00e8050f2156050203af00c0030004fb8ab18de3838f8c3fad1f5b2994b996e75ddcde262c583f93d4f3cdc35fc7ab5efb500e07d778b04ec41807a128f93adf82b4"], 0xc0}, 0x1, 0x0, 0x0, 0x40}, 0x1) 9.210769327s ago: executing program 6 (id=612): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) getsockname$packet(r2, 0x0, &(0x7f0000000000)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x800448d3, &(0x7f0000000000)) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000080)={0x80001009, 0x4, 0x0, 'queue0\x00', 0xffff7ffc}) write$sndseq(r4, &(0x7f0000000140)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x200448d3}, 0x24044054) 9.158333468s ago: executing program 6 (id=613): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000300)={0x7f, 0x4d, 0x2ba8, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000380)={0x200, 0x4f, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000180)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000380)={0x8, 0x2cb, 0x2ba8}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000700)={r1}) sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r0], 0x24}}, 0x44004) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x1, 0x3, 0x9}) setresuid(0x0, 0xee01, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$bind(&(0x7f0000000140)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0/file0\x00', &(0x7f00000002c0)='./file0/../file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x80000, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r4, 0xc01464a6, &(0x7f00000004c0)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000580)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f00000006c0)={0xb02, 0x2, &(0x7f00000005c0)=[r6, r7], &(0x7f0000000600)=[0x5, 0x8001, 0x1504, 0x100, 0xf636, 0x10000, 0x5ba], &(0x7f0000000640)=[0x0], &(0x7f0000000680)=[0x2f, 0x2000, 0x2], 0x0, 0x7}) mount$bind(&(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000400)='./file0\x00', 0x0, 0x125c03, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000380)={0x200, 0x51, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f00000001c0)={r9}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000180)={r1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0xf, 0x52a1, 0x1e}) 9.155848546s ago: executing program 6 (id=617): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) listen(r1, 0x1) shutdown(r1, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000040)={'syz0\x00', {0x3, 0x5, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95e, 0x1, 0x8, 0x7ffffffc, 0x2, 0x80007, 0x7f, 0x20000006, 0xca, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x100001, 0x3, 0x9, 0x5, 0x6, 0x2000001, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0xfffffffc, 0x80008071, 0x7, 0x17, 0x4, 0x3, 0x2, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x800400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0x5, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x169432e6, 0x9, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0x8, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ffe, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x2, 0xd8a1, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x200008ce, 0x9, 0x5, 0x7fff, 0x0, 0x9, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x5, 0x2, 0x2, 0x20000008, 0x4, 0x6d01, 0x6, 0xa83c, 0x800003, 0x1fe, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0x4000a9, 0x5, 0x400010, 0xac8, 0x2000af, 0xfffffffe, 0x8, 0x7ff, 0x12b, 0x4, 0x10001, 0x0, 0x0, 0x5, 0x1f, 0x796a, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x2, 0x5, 0x42c2, 0x6, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x57, 0x4, 0x8000003, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x1, 0x1, 0x6, 0x6, 0xe7, 0x8, 0x16, 0x6, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0x3, 0x10000, 0x3, 0x7e, 0x6, 0x9602, 0x7, 0xaf, 0x6, 0x6, 0xffffffff, 0x5, 0x45, 0x8, 0x30b1d691, 0x5, 0x1f40, 0x7, 0x41, 0x6c1b, 0x7ff, 0x804, 0xac1, 0xb1e, 0xd7, 0x9, 0xffff3441, 0x8]}, 0x45c) ppoll(&(0x7f00000004c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000000500)=ANY=[@ANYBLOB="300000001100bd7000fddbdf2500000000000000000000ffffffffffff000004d20a002b000500c4b701000000000000f412bdcb1abcf21d6727f948537e48419ba53a71e5d1eb7ff0df98ac95b718141f978f087b8b00f2e18a0ffc1c9c1255b6ce1e5958d54850c362a743ab28d6f104575c60b8af1a82c5f99f1d9a4e7be54be3fb39de24e2086094fb1087e1041bb761caae974af586dd436ef0713b0e828501f019acbf8432a85327db03a7eab21a338af8c71898bb1372eff708852331c2e0810c0546a0a0cdad2d3eccb5000000000000000000"], 0x30}}, 0x800) 8.801083481s ago: executing program 6 (id=620): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0x16, 0x0, @void}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) setsockopt$inet_int(r3, 0x0, 0x22, &(0x7f00000000c0)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r1, 0x0, 0x80) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0x16, 0x0, @void}, 0x10) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) (async) setsockopt$inet_int(r3, 0x0, 0x22, &(0x7f00000000c0)=0x1, 0x4) (async) 8.719261603s ago: executing program 35 (id=620): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0x16, 0x0, @void}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) setsockopt$inet_int(r3, 0x0, 0x22, &(0x7f00000000c0)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r1, 0x0, 0x80) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0x16, 0x0, @void}, 0x10) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) (async) setsockopt$inet_int(r3, 0x0, 0x22, &(0x7f00000000c0)=0x1, 0x4) (async) 1.946072083s ago: executing program 7 (id=732): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000002c80)=ANY=[@ANYBLOB="300000004000070127bd7000fedbdf25037c00000400c18014000180100010800c000b"], 0x30}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$sock(r1, &(0x7f0000000a80)={&(0x7f0000000180)=@ethernet={0x6}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000200)="e264ccff653d923e2150dbd2fa3f8820808ab91818a4c0c60b6d7b634d1326a803e87931451abd3131614d99a543d35a5cbc70b841ed97fd791b8c60037ad3ddcc95dcd00544b1cf5d16e857c2591baa452f55a7d8c5686e006478d1a814b36f70a55dce6e0ad5ca9decd437689798579a", 0x71}, {&(0x7f0000000280)="5ecd168020fd57da18b3c0e10edcf1a3f0c941dc9b5bc0477d40da12e81c8b09b3697852f791c2e0c9a3ad68b370f12c793785b4c6711ab722961965d20a357f7473d3db5ce491830ecd8402c466c81c5a9fbd806e36c1c0deaee66548af74c76101e6b4b2d089a9061eb9b62578d8d21b3e34a5eee8a5a781bd4692939dc336fcd59a125a365a3627bffcdca12812ca521b38a235bc39b26ee36db249710cdd709ec8e99941bbdad2115cd8eb367dada4b3f1989542fc5eb99ae88a51fc66e19fd309f43f773edee7506ff449c7968dad960357e15e54222ffb", 0xda}, {&(0x7f0000000380)="7633f2a2280112eeb9e549ca964d129b53d1453b8a6a15d4af084413e44983464601656d42a09a447b3dbed147ff8192e560f1875024e56b3209b7e7682fbc76bcc0f29230818036f0e019ec396cfd69ea9cc70af94b14557e255dab4854dc3a13cf0f4dcc695209758191d1d364ab04a78196cd7b762ee4797a7d35bc43d5941570faf4f60d7233418c1163bd2a6384b13f99b8940c2a68e0a56ed51ef23f9de1e25af6cb5a9b8740cfbb904e41c4488c2494cebc756f7c715752b398f5967292752bbdaa16093113968a00fea455a2dff54b84bbf32ba149aa09e40e9bf47a89c94fdd9d046f8c449fb8ba8247774b19f179340d", 0xf5}, {&(0x7f0000000480)="ccce35cf917e099f439099100274dc88ee80e0a7c16dc11ec176982f34662362c98cdf8852b7cd9c546beaeafb5076834f1255583a8c4c6cbf7847802a74d2fb9214e301a4a15b3d029ea2de1f4e9e00f7920c31bb45fb52538cc5364400df961e48a37307e3b22cbe92758d72684c78cd50cd715eb8c58198e13d1a2397063edeade928692aff86f581df63e4fb972b3b549231f69d52b186b860c436d2a9cef3880a513dcf127f0fbbf20231e604bc2bc16f128387a5b08e0e5c927b80200ca1f8f151aab413cf7e0c9907a297d1530df5661f389b", 0xd6}, {&(0x7f0000000580)="afd0cb7a2b8440f2d47439e763ec0516a6574c6b70a5fb2bf3b0279ec5c06c525be48d1143f35732ec20760115da150f50ee4ecf1f66a03103f6", 0x3a}, {&(0x7f00000005c0)="1f32b20ee2b448a5aa99c1a1eec41573b6332a9fe737f71dff651ea45ef1e52ba2041a010f9edc94e5b97faeccf040c4de48d2a1171a891fb4493a70fb337199ea23d48f4b39e2762ffd551ac20811743a7286462fed3856ee997c681239c01a7e05fe04cdfff7883cfb801263", 0x6d}, {&(0x7f0000000640)="fe0c83fe4e80bbbddb827b9d7f3028ebbce4e7e7093088c966c935f33cfa60b3140e72784b9146b6089aaf0d7443be3b39fd1cd7c5ec4e453b83e1886cb8675fc2b8809e5b29fbcd89968d32c9c4b555b8bb5014d9157ed17c4acd8b2b23630d30cf6d34a4c6d8ed5ec6cd043832634ae89e44b05feb5996d986a09ac9cf1ade63a24fad51b0e8acca3426ed7c6fb7c55e6739a41eaac33e9cd7f883b68fea62e0b1a7decb8dcb52d6bd2f4ca2ed686a1696297623a32a23bf490f27886d8cd9a62bcd69deada24b212a5838694f37b810f73a4bd62426f3f680186f3f8db17a382e", 0xe2}, {&(0x7f0000000740)="4eadbfff1e7d36c18475d392fce81e7563545cb9b8255cf065f08eb6d270e8eec9506e0b8c0ed66b9d3f074ebe84ca7e79f48db96d965e9e23d18329bf8289c5287e26c95e5c4125f7405c05689b37af8f91254d27e252807c267068f78f916437549abe09d3affacb702de15a9abdb97ec0020c6844765b33efb5dbae3c3078be1115fcb89f5fbc21c1b6beb688cef9da9882bc524ed755760276caf85937", 0x9f}, {&(0x7f0000000800)="5d5205470fac4c57bf8ef1b1ac40cd3009b96c2c183e2623cb95dc73d3abc1429592a9cd5fa3ee2aa35f1b6178a946b95093c992a486895055702c3c80c28f13d01eea3dc04f26324d46f987b2f7f0f096a3531678ae6a6511cd1f472899a5448c9427840e650bfbd0adea3c9622e8f45759c1bf6cfad7f82c06bd9bcf566d8154c1d75c834dd6909392d0d48086ca5d35278b3adbc6ab611d5021609be50899a8d6f3dd929210bdbca6fd4ecec2a89fae241f791e49366b7bce8baeca25e8e67fbfc98ff48b4096a57566fc5c905cbf9196", 0xd2}], 0x9, &(0x7f00000009c0)=[@txtime={{0x18, 0x1, 0x3d, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x7fff}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}], 0xa8}, 0x801) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000040), 0x11000) r4 = fsopen(&(0x7f0000000040)='vfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000100)='iocharset', &(0x7f0000000140)='\xe0^@&&}\'\x00', 0x0) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f0000000ac0)={0x1ffe, 0x5000}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0xfffffffffffffffb, 0x0, 0x10000}) ioctl$DRM_IOCTL_AGP_UNBIND(r3, 0x40106437, &(0x7f00000000c0)={r6, 0x1945}) 1.479555804s ago: executing program 4 (id=742): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440), 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fffffffffffffffe00000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.472107495s ago: executing program 4 (id=744): r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$md_new_array(r0, &(0x7f00000000c0)={'md', @num=0x0}, 0x3) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)={'/dev/md', @num=0x0}, 0x2, 0x0) ioctl$SET_ARRAY_INFO(r1, 0x40480923, &(0x7f0000000140)={0x0, 0x5a, 0x0, 0x0, 0x1, 0x800, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f00000001c0)={0x0, {0x1, 0x0}, 0x0, 0x6}) ioctl$ADD_NEW_DISK(r1, 0x40140921, 0x0) ioctl$RUN_ARRAY(r1, 0x400c0930, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) pipe2(0x0, 0x80000) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) pwrite64(r1, &(0x7f0000000300)="aaaaaaaaaaaaaaaa", 0x8, 0x1000) ioctl$STOP_ARRAY(r1, 0x932, 0x0) 1.471896659s ago: executing program 0 (id=745): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/1/root/var\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/1/root/var/run\x00', 0x1ff) (async, rerun: 32) r0 = socket$unix(0x1, 0x1, 0x0) (rerun: 32) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000340)=@nfc_llcp, 0x80, &(0x7f0000000a40)=[{&(0x7f00000003c0)=""/255, 0xff}, {&(0x7f00000004c0)=""/247, 0xf7}, {&(0x7f00000005c0)=""/254, 0xfe}, {&(0x7f00000006c0)}, {&(0x7f0000000700)=""/106, 0x6a}, {&(0x7f0000000780)=""/162, 0xa2}, {&(0x7f0000000840)=""/194, 0xc2}, {&(0x7f0000000940)=""/227, 0xe3}], 0x8, &(0x7f0000000ac0)=""/67, 0x43}, 0x40) (async, rerun: 64) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './proc/1/root/var/run/gssproxy.sock\x00'}, 0x30) (async, rerun: 64) listen(r0, 0x5) (async) r1 = syz_open_dev$media(&(0x7f0000000000), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f00000006c0)=0xffffffffffffffff) r3 = syz_open_dev$radio(&(0x7f0000000b80), 0x3, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000bc0)={0xf010000, 0x0, 0x0, r2, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) close_range(r4, r2, 0x2) (async) write(r4, &(0x7f0000000c40)='27', 0x2) (async) openat(r4, 0x0, 0x900, 0x87) r5 = openat(r4, &(0x7f0000000240)='./proc/net/rpc/use-gss-proxy\x00', 0x280801, 0x20) r6 = openat$binderfs_ctrl(0xffffffffffffff9c, 0x0, 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0x400}, {r5, 0x100}, {r0, 0x406}, {r6, 0x1040}, {r0, 0x212}, {r0, 0x1138}, {r5, 0x2080}], 0x7, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000300), 0x8) write(r5, &(0x7f0000000280)='1', 0x1) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x3) 1.39987306s ago: executing program 0 (id=746): socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)='fdinfo\x00') socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket(0x10, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1, 0x10000}}, 0xa) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) (fail_nth: 1) 1.279785613s ago: executing program 0 (id=748): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000000), 0x8, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on}, {@verity_on}]}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000400)=@security={'security\x00', 0xe, 0x4, 0x518, 0xffffffff, 0x378, 0x378, 0x138, 0xffffffff, 0xffffffff, 0x448, 0x448, 0x448, 0xffffffff, 0x4, &(0x7f0000000180), {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x4, 0x0, [0x6, 0x80, 0x3ff, 0x1, 0x3, 0x2, 0x3, 0x0, 0x3, 0x184, 0x4bc, 0x5, 0x0, 0x3, 0xd92, 0x1ff], 0x6}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x1, {0x2c7109ec}}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, [0x0, 0xffffff00, 0xffffffff, 0xff000000], [0xff, 0xffffff00], 'pimreg1\x00', 'ip6erspan0\x00', {0xff}, {0xff}, 0x1, 0x5, 0x6}, 0x0, 0x200, 0x240, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, [0xff, 0xff, 0x0, 0xffffff00], @ipv4=@rand_addr=0x64010100, [0xff000000, 0xffffffff, 0xff, 0xc935ea9afd441494], 0x4d6, 0x3503, 0x2e, 0x1, 0x12, 0xc}, {@ipv6=@local, [0xff000000, 0x0, 0xff, 0xff], @ipv4=@broadcast, [0xffffff00, 0xff000000, 0xff, 0xffffffff], 0x4d4, 0x3501, 0x0, 0x0, 0x0, 0x13}, {@ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, [0xffffff00, 0xffffff00, 0x0, 0xffffffff], @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], 0x4d5, 0x34ff, 0xc, 0x0, 0x15}, {@ipv6=@mcast1, [0xffffff00, 0xff, 0xff, 0xff000000], @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffff00, 0xff, 0xff000000], 0x4d3, 0x3505, 0x2f, 0x0, 0x0, 0x10}], 0x0, 0x4}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x6, 0x6, 0xce27, 0x2, 0x65, 0xfffffff7, 0x1, 0x6]}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x578) r0 = openat$binderfs_proc_dir(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f00000003c0)='./file0/file2\x00', 0x400) 1.279639627s ago: executing program 0 (id=749): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, 0x0, 0x4080) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x6c, r1, 0x5, 0x0, 0x0, {0x1, 0x1}, [@IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x1f90}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}]}]}, 0x6c}}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x7000000, &(0x7f00000002c0)={0xa, 0x1f90, 0x0, @local}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@ipv6_getaddrlabel={0x1c, 0x4a, 0x3, 0x0, 0x0, {0xa, 0x0, 0x80}}, 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)={0x1c, 0x29, 0x1, 0x0, 0x1, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @u32}]}, 0x1c}}, 0x20000040) 1.223421349s ago: executing program 0 (id=750): syz_clone3(&(0x7f0000000100)={0x400101000, 0x0, 0x0, &(0x7f0000000180), {0x17}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="540000001800010400000000000000000a000000fe03000100000000080004000100"], 0x54}}, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40440d0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.223222605s ago: executing program 0 (id=751): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0), 0xa7c, r0}, 0x36) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR(r2, 0x114, 0x2, &(0x7f0000000080)={{0x0}, 0x0, 0x4}, 0x20) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r4 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PPPIOCDISCONN(r4, 0x7439) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r6, 0x0, 0x0, 0x20004041, 0x0, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x6, &(0x7f0000000240)=0x2, 0x4) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4000054}, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8982, &(0x7f0000000740)={0x6, 'veth0_virt_wifi\x00', {0x8}, 0x2}) fchmodat(0xffffffffffffff9c, &(0x7f0000000780)='.\x00', 0xfffffffb) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, &(0x7f0000000640), 0x0}, 0x20) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="640000001000010000000000000000000000000a040000000800010000000001"], 0x64}}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r8, 0x6, 0x21, 0x0, &(0x7f00000000c0)) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r10 = gettid() timer_create(0xb, &(0x7f0000000280)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f00000002c0)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_usb_connect(0x2, 0x24, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./dev\x00', &(0x7f00000003c0)='devtmpfs\x00', 0x0, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/vhci\x00', 0x0, 0x0) read$FUSE(r11, &(0x7f0000000900)={0x2020}, 0x2020) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x42, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000008510"], &(0x7f00000005c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680), 0x10}, 0x94) 1.219405823s ago: executing program 4 (id=752): fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000340)="96", 0x1, 0x0, &(0x7f0000000380)={0xa, 0x0, 0x0, @private2}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000003c0)=0x6, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104, 0xa01}, [@IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x1f000000}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = syz_open_dev$dvb_demux(0x0, 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_STOP(r3, 0x6f2a) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x8922, &(0x7f0000000280)={'lo\x00', {0x43, 0x0, @rand_addr=0xff}}) 1.139337258s ago: executing program 2 (id=753): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000540)={'syzkaller0\x00', 0x5005}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000740)=@newtfilter={0x34, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000780)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@deltfilter={0x24, 0x2d, 0x3f, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}}, 0x24}, 0x1, 0x200000000000000}, 0x0) 1.132237488s ago: executing program 4 (id=754): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000005c0), 0x41, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000240)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000004300010000ffe900feffffff020000000e0001006172705f63616368650000001800068008000100ba"], 0x3c}}, 0x0) (async) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000d80)={0xf642, 0x20, 0x6, 0x9dfe, 0x11}) (async) write$binfmt_aout(r0, &(0x7f00000007c0)=ANY=[@ANYRES16], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000e00)={0x0, 0x0, 0xfffffff9, 0x6, 0x16, "0062007d8200f7ffffff00"}) (async) r2 = syz_open_pts(r0, 0x20000) (async) r3 = syz_open_dev$loop(&(0x7f0000000580), 0x554, 0x8c860) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x1000) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000800)={"568139cb5050a7a31ebfc4330c2bf68f86101d9a301cbe14b15f4f23031ceb319db01a783479d6b9a1201fb1cc7235f57f4251316b05b60536a1611da4d3a6a06d308650343e59d307e34d8c2ec3ef05629a47f994dd2e9f8b9ce05b338ae7db5267bc4082bd43ca93b78947a7c79e82df466d4fee2b222f1ebde976d2272a4f52329796330ee917cc4f5b36c45ac1ecdaaf3dffe03c40b7c209e44cfeb08aad00e1b48da4289228d7d82d4f6a661942ace64f115d3cc6ac80f74420c390d89e7ab2133567aa41047d775e333184cc0b468ec5eb9bc3cb0fa00516e5452bf32a9e760f07efd5a5e5eb37eaff28ef92bb59498369808bdd310a4a95a5414a8ff450411ff67d3167eec8372455a19c0c5a608adfebded6974660fd85308a07860e16f62963da37448d6e1218f2092fb3d1662804623b63a07f3e5e881df9a5ac27ce3f1519003118aa6170ff423eb292dc70147bde37963f72d0642660e7107753167886fc10e108631a9ea4d6752145b8646187ba7e152b6bcbcedd6b83fb9435d5c8e8d5d25a3f173745eab94a4a296572d459a50d622c8769dc57a7cdf7efe9f259dc36f538d1836362f1bcb2c4ebceae7e3655d5e98ba481906f3f4bd03710005994eca8cbf8302dc8e2c21736b697b5f868e8af96fa8bbb1ae56571616a70ce05970d1e4142f303f7586fd2fc6f0ee3dce1db6524dd6aa28faab046e074df38c96b89aa3f24ce0728f16539744b7867e19c856e670e8b799d52da435bb07beea683a52e4d13602e7d4675a798a12c898ad5b00caa34313ff8fb6c3407cf815eca9795cffd9a24959653cc816851048ebf0772bebdd3ff9b8cfbd2c65c30e41586b00a14943e4815361789158139d440c4f627edb8ed59e1ca0bb0c60106e09635fa9335677337c554db885f75b8f9fffffff1ea9796f8258de36636346ab768856bbdfc51843a53701423d75c1f43be24469aa03d366bbfb81218b31e5c0ad716efea52175c2fa78317cafb16ee173eb5e9428509ca4c8f9bf798adc7da1758a9c0334e44200c0578495ff805fce84456205caa70f0976a8603f84cb542d0df1416602321c587556785af525ddf5548b4f51113c52a7a17042faf6c8c02d8d1835e0f67f60ab392c20fc12188db029e45bb77cfccc423671d52ec5a92d08c2bb27a676b66f3b89ac084d99e3f516426a015268a1f3fb91b13c8baba49a0765a305c13cd1f47b3ea7a6393182759b614a08d36192a8b68abef6e5c16849452c74af3a9f854e1f2bc1c2eac2f055f8ffd8fdaa6bb04a68850c585f433c0e6b8dba1401fce5aab11d75d2323d8079891175096e31013c80a3763511c86f2fbc31a33458c52059ebe253dcd3e837fed39765a11842028df450479dd56e1325cd8d088ff12a8f7dd23f200"}) (async) ioctl$KVM_CAP_HYPERV_SYNIC2(r6, 0x4068aea3, &(0x7f0000000c00)) (async) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000c80)={0x2, 0x0, [{0x400000b0, 0x0, 0x7fff}, {0x400000b1, 0x0, 0x89}]}) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) r7 = dup3(r2, r0, 0x0) (async) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r8, 0x1, 0x3}, 0x48) (async) r10 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000780), 0x40000, 0x0) ioctl$CDROMCLOSETRAY(r10, 0x5381) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x10, &(0x7f00000006c0)=ANY=[@ANYBLOB="bfa200000000000007020000fcfeffff620200000000000018110000", @ANYRES32=r9, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf610000000000000701000004000000850000005d000000bf61000000000000070100000400000085000000c2000000b70000000000000095"], &(0x7f0000000740)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000e40)=0x17) (async) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f0000000e80)={{{@in6=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6}}, &(0x7f0000000f80)=0xe8) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x100804, &(0x7f0000000fc0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@access_user}, {@access_any}], [{@subj_type={'subj_type', 0x3d, '/dev/loop#\x00'}}, {@euid_eq}, {@obj_type={'obj_type', 0x3d, 'GPL\x00'}}, {@uid_gt={'uid>', r11}}, {@euid_lt={'euid<', r12}}, {@flag='silent'}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) 1.079985712s ago: executing program 7 (id=755): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000002c80)=ANY=[@ANYBLOB="300000004000070127bd7000fedbdf25037c00000400c18014000180100010800c000b0006000008"], 0x30}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xae, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x98, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000380)={0x0, @dev, @loopback}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000480)=0x14) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r6) getsockname$packet(r6, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000540)=0x14) sendmsg$nl_route(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000e0abffffffdbdf2500000000", @ANYRES32=r7, @ANYBLOB="c30407001b14bf261800128008000100736974000c00028008000200ac14141c08001f0070000000"], 0x40}, 0x1, 0x0, 0x0, 0x20a7d52d1a3e1087}, 0x1000c014) sendmmsg$inet(r5, &(0x7f0000000640)=[{{&(0x7f0000000680)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000007c0)={'gre0\x00', &(0x7f0000000700)={'tunl0\x00', 0x0, 0x8, 0x80, 0x80, 0x7, {{0x1f, 0x4, 0x1, 0x26, 0x7c, 0x66, 0x0, 0x9, 0x29, 0x0, @local, @empty, {[@timestamp_prespec={0x44, 0x44, 0xfe, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x3e}, 0x1}, {@multicast1, 0x200}, {@broadcast, 0xfffffffd}, {@remote, 0x94}, {@remote, 0x1ff}, {@rand_addr=0x64010102, 0xcf64}, {@multicast2}, {@multicast1, 0xf9}]}, @ssrr={0x89, 0x23, 0xa6, [@rand_addr=0x64010100, @private=0xa010100, @local, @remote, @dev={0xac, 0x14, 0x14, 0xa}, @private=0xa010100, @multicast2, @private=0xa010101]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000008c0)={'gretap0\x00', &(0x7f0000000800)={'gretap0\x00', 0x0, 0x1, 0x40, 0x7, 0x7, {{0x27, 0x4, 0x0, 0x23, 0x9c, 0x67, 0x0, 0x81, 0x2f, 0x0, @private=0xa010101, @remote, {[@lsrr={0x83, 0x27, 0xa0, [@dev={0xac, 0x14, 0x14, 0xf}, @private=0xa010101, @loopback, @empty, @private=0xa010102, @rand_addr=0x64010101, @loopback, @empty, @multicast1]}, @generic={0x94, 0x9, "4718496c4e7055"}, @timestamp_prespec={0x44, 0x2c, 0x9, 0x3, 0xb, [{@multicast1, 0xfffffff7}, {@loopback, 0x8}, {@remote, 0xa}, {@remote, 0x9}, {@empty}]}, @lsrr={0x83, 0x2b, 0xd1, [@local, @private=0xa010100, @private=0xa010100, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2f}, @multicast2, @empty, @multicast2, @multicast1]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000009c0)={'gretap0\x00', &(0x7f0000000900)={'gretap0\x00', 0x0, 0x7, 0x20, 0x7, 0xab9, {{0x24, 0x4, 0x0, 0x2a, 0x90, 0x68, 0x0, 0xb, 0x2f, 0x0, @remote, @loopback, {[@rr={0x7, 0x1f, 0xad, [@broadcast, @multicast1, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @private=0xa010101, @private=0xa010101]}, @timestamp_prespec={0x44, 0x44, 0x3e, 0x3, 0x9, [{@multicast1, 0x7}, {@multicast2, 0x9}, {@multicast2, 0x3ff}, {@rand_addr=0x64010100, 0x8}, {@dev={0xac, 0x14, 0x14, 0x16}, 0x3}, {@private=0xa010102, 0x6}, {@local, 0x3}, {@broadcast, 0x9}]}, @rr={0x7, 0x17, 0xed, [@multicast1, @private=0xa010101, @empty, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000a00)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000ac0)={'syztnl1\x00', &(0x7f0000000a40)={'syztnl0\x00', 0x0, 0x4, 0x0, 0x3, 0x3, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, 0x700, 0x80, 0x6, 0x8}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000b40)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000c00)={'syztnl1\x00', &(0x7f0000000b80)={'ip6gre0\x00', 0x0, 0x29, 0x80, 0x7, 0x172, 0xc, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x1, 0x7f, 0x14}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000c40)=0x0, &(0x7f0000000c80)=0x4) r16 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r16, 0x8933, &(0x7f0000000cc0)={'vcan0\x00', 0x0}) connect$can_bcm(r16, &(0x7f0000000d00)={0x1d, r17}, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000d40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000d80)=0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000dc0)={@mcast1, 0x0}, &(0x7f0000000e00)=0x14) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000001100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000010c0)={&(0x7f0000000e40)={0x258, 0x0, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}]}]}, 0x258}, 0x1, 0x0, 0x0, 0x894}, 0x10800) 999.993153ms ago: executing program 2 (id=756): setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@in6={0x2, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x1}, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000180)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18, 0x1000000}, 0x20000840) 998.73184ms ago: executing program 7 (id=757): r0 = socket$unix(0x1, 0x5, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x4c, &(0x7f0000000080)=0xcdb, 0x4) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r1, 0x7aa, &(0x7f00000001c0)={{@hyper, 0x5}, 0x4, 0x8}) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f00000000c0)=""/124, &(0x7f0000000140)=0x7c) connect$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) 998.614ms ago: executing program 2 (id=758): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xc, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2356], &(0x7f0000001280)='syzkaller\x00'}, 0x48) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x6, &(0x7f0000000240)=ANY=[@ANYBLOB="b700000000000000bf160000000000007961a80000000000150101000000000085000000c400000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001340)={r0, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000000)="b9ff03076044238cb89e36e9080047e0ffff00004000632f77fb8035140cac14140c", 0x0, 0x100fe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 4) 940.472728ms ago: executing program 7 (id=759): bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000140)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='bridge0\x00', 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e23, @multicast1}, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="e7ff27bd7000fedbdf250200000008000100", @ANYRESOCT=r1, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="414601"], 0x4) 940.271779ms ago: executing program 2 (id=760): r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$md_new_array(r0, &(0x7f00000000c0)={'md', @num=0x0}, 0x3) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)={'/dev/md', @num=0x0}, 0x2, 0x0) ioctl$SET_ARRAY_INFO(r1, 0x40480923, &(0x7f0000000140)={0x0, 0x5a, 0x0, 0x0, 0x1, 0x800, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f00000001c0)={0x0, {0x1, 0x0}, 0x0, 0x6}) ioctl$ADD_NEW_DISK(r1, 0x40140921, 0x0) ioctl$RUN_ARRAY(r1, 0x400c0930, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) pipe2(0x0, 0x80000) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) pwrite64(r1, &(0x7f0000000300)="aaaaaaaaaaaaaaaa", 0x8, 0x1000) ioctl$STOP_ARRAY(r1, 0x932, 0x0) 716.893382ms ago: executing program 2 (id=761): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./dev/sda\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f00000003c0)={0x3c1842d, 0x1000, 0x1}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x12) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4140aecd, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"/2832], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff4f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r5, 0x18000000000002a0, 0xe, 0x26f9, &(0x7f0000000040)="76389e147583ddd0569ba56a5cfd", 0x0, 0x14000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) read$FUSE(r0, &(0x7f0000002ac0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004b00), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000004b40)='./file0\x00', &(0x7f0000004b80), 0x404, &(0x7f0000004bc0)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f0000004c40)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000006c80)={0x50, 0x0, r10, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) syz_fuse_handle_req(r9, &(0x7f0000006d00)="aa8e9df36226466e888b39901e75023156b5530e75c1e203314842ea78a6048cdec3383c60dcd8fa24f6928f6e02ab1090989c59ae38dceda05af132af4546a298837c63ea70975feb0919d7f7766791d530b90d522b23c58776ac7a4035383c5a0dd90d8b766c96816631f1742a0da0ce6ddd053a05966f6b6ec22dd28a0a2636d07696a307496b0b0d8bb370227dca3c96838e556681409be388f1dfbf500f1aee82b374f4473aecbdb77cf567fece7f8ec733fa91aa92a186f9768d16d0257ef826959fb3a73e4976a019bde8a82e9bb0a0443cbb1ab2c6e8f8748489948710294efb79d70edec2271491bc1cddc9c9d2713cc3063761f2bea07f5577bbe5224302ef23adcc96cb5ecee406c7977c97d7000000006e28198954bba79006fd58b2a2b43047e7f3ead143ccb6b27043d7a7512e9d3bad0138554f4b465ab6d1cec9b40cb301ac6491ee7fcdc0588e53eb2510471de91e3e73c98f0a3cc9929eac63f477a1208a80f8c75d0a1d9edb895d675d036a1863dddea98b18c846ac253b2470324b21eaaa6e69389b91bcd470995cd6835c6fac80d5ca41b66562c910f893124cf0f20dc65d90aa0f9cd1a7c88f755aaf33875d7639ae1b7413834636de57f44302b723646257ee7456bdfee10f2eaf0c05f2cf01a115ed8ac2908827af3d85da2f1bcf53d87ee830dc5e98fcfc1a22e547ce57508f606945a7599d8e1cc0268987cb7b3d00a6bfacea7bd05430255bc8b473a071b83695783944ef856fc89906e0b44a13166309bc8cc1dbae68399e1e8e4a2ea265c1a104dd862563cdaeee2b37e72fbda323cc72360b6d4fad2fd2409397f90422bbe6e9068aaf38e18918736e6357a6caac59ae803ffbe853ff716a388423bbc93bb2d6b1222bb94c96a3bddf421288d47039fa1b73573dbed87e1f6b280f8b045f9be8e0d85f6cf416bfc0f3f4ce988aefa2382cccf39e40b2a1657814b7953d0a0aea45d50d02d66982e5269f1ededd6a9f8f9e212314a4bb5c2f4898278fd3a585c1ff60e435b186c552134e5ddb0f2cc95dac405bc4bd32ccda41b05c6a376070c8ef2d6eb3ea7fce97da8f09440d47dc5faca6271d1ce4f4201b315d1cc3fa1d4cc2baa14e4c57bafb7b5bb2e9e859505360e1738a36100dd6c2fb6610fc0ed88e452148ecd8b73517f69c28f0c979525d21ba4fef353eebb2326f48217c44a322e9f1f08f92af1ff5ee5f2dc563f1a0edb09d0646105be0c46ddc8b71301e68013e863d539af5b3a2b11f770d8c0c086988216602619ec440f98d434add23bc7f54d145260773e53121188ca179832d5c406f2b4a91045edca91232416219fade02bf6ba002352943850294b05d9a142889205e6b69336cecfe8a7cfc88688368d54b475f3915eea851334395f80b41177ed4d17d91880a22c1c0cf33a550e32fbf76505458d07ebccc4e77bafae1700c9997f6fe28452f011e370642f228bbf0e2f3dc05741127f6d73e96c073b26e730ac19cb17dfc63c0ed4b5d53ffd6e312e3e80822c8bbea3cf2914f3f8ee53fb4edde1d4507fa9d7de54eecb75132befab6bf486cb05bc8727dadac49c83bf08d9eb94621b42241f9eb8fd1e6fbf969d932a023760faa62c178b7f0a1d43adbf5c21a35a58d381442ecdfc2dcce2d11e5efae8433b14fc9fc28294ae76eaa95f38ac121f255d9b478c81a1caf5c606c34e6efa80dd3aa77cc4001b9fceebcc77a1efea7bf9f749f62c7a8bd5deb0f70c54ab5daab010cf14b2f1012516dc1639edb2d890638b73559d060be47f594f322efdd40c5945148fe1690585923488910fcb3159006f935f7d184e4b4c404ccb6e2a799cc67aa2b56a13c16e3ad92b85a12060881c1d140708ffece6965f9746ed4eef74d37424e760f4b266c80c93390523eadc65494962bed4efc86a0fead2fe25c9108c5d591770cee92f9ff2d916ba0dedc6551a47ce3a4dbc97043e588b3483f0793786fe9f32f1b79ba3f4c4ccabba52a59861c8024bcdfc8ecb0acc821160b060d5dc24f0ade14d08b56218a32a03f9eba729c02fc6b714bc72b11cc7fe47b51b3a174cfa2d8f5df80a0fd4d1dd2ed36b868b46ee5a8cc72e91b57bd05005b5142b5531650813fb5496af379f9e7b1b73c49c64dead9725af0742a41b770205390791de856715c0138ca22f134911a28d2caf22ef21049d1ba721d278bcf675317c5303cbaf96535414fd92c55d741120200d49729e01e399e4c30fa8da659654196af7991a3d294c775a610f242a56c88d542641036de7eccbd64f9f306a3920596d350637a6409f667110b46c6d85ab94df4d7b0af12318522ba1e745e7de45176789a53213b9b3d23b2599275e4f1858fdb2fd63f8c6f7990235e2fb3c4c8f215715973b60b1e56d1f061b6ff33510d08fa403559cbcc21bd141b41f1e9ab4e163a0f80a918ba13031c483931a9dcdb790ad77fbdf5634662cb75e79d986e4724f64c80203600df7ac9950330431b83777bd968a86be5698b13c37513235ac89a0a1dcb799112a86a2d96b1708e0c5e983756d8243927fc7d42be6ff4c946c0763a9745897726f38b65920363b7c32051bf9e770ab1ec140ff11fc639f36fa760afcfd6ba2f609df8cb0949f26119895b69c8ffd0836a01da1e407ba08f37a1144674f5a71b3499ffcccb21e75f19cdfb33c7eded5fa5c264784a78edc5f6de17da15317a66fea522b6e92a52efa5013797212d816c3229c7dd523e2165f9f042c3b3b16e608a1d87ab9c46c2b291bf547e1f4312913b16e39a714c24ebc5cb4f4f80bb20ce4efdf2921db45b7389fef98bd0e8aa40be16758b0d7755ab631b27c5d49225e84fea63e3f031c665851ef4ed18628b26445da2cad4741800cf72a401ad79a7462657068e0f2ee65eeb86da66890247cb45b31d3ad06ea7500eac5be65528c55bf190b0ec27673b67b36117344097a0dbb9db47a2b5144218002d14cbb98629c2ed35db5cdcf93994e3e3d1a1673ff60ec0d9bae1217ba6f39ae4ac4c9e5a19f85634f3091150c4724aaabe3bd1445cfa33fac93b86c5871ca168a728899e2e0062a596fba22b962764420f1268bb8ae0a894559c488cfce6b71aa8478964d2eef5086b2cee891ca031b6543bb7ba55006621f1d80e17abcba9f9d05fc5e61c6c4a890aba4b205f5570e7866ec4de380420c4758de63ff0f7b1acb0521e45cd9bc54df1a4614c04c524f43e86f58757eddb645bbc56a63de5bb560f56a31796dc344d58e2ff2d3fe5228d87c0439e6353943c92160fb847a172eea37ad0c22de5d1e7cd66730218832c87b73366131e29a1545b26d4c500a9afd75864b460cea1ba33a5dca6e5585e9c78a8ee3361f20e2b79489ed2ef1c935d7deeef6de0d009b72a0751929209b351331c0225c29341f5d476b278061a0a33c1e455815bbb83eebf5f5c3fe97c4b3df32846a094501a157196b6c1db1e05cec4f2dee823ebea7da05f5ee63aee1670128471465ae83defcf26aba78f18544146fcc9305ed5899965edbcf9f677c499a52d984db346c12faf02553338e6553488c29c9f3f4537a9437b5eb7382f95f9e844d27fa0b1ffc48d2b44e383b1fdb567b7f23863e8e10b6210f8031859cea410d52f99b5a8d2f218e7c92e231904b171dc077c636db15087cfb0ca6a2cd09f6b7973627a03ebfb4772daddc8ad7c9e534d8bc58cfc6d1305374b589a2a85c8a3c471c7408712ff5cfd7a50bee627d0417a5667dba71866320857cdb84e071a37e477f1b5ac16bdd464d8bf3ae31860ad19722bea1d85d1a5c09e1ab36dcd6c4bf524ed2137745e3562147081027d7852bee1ccc9563e4ff0ce72affa7002e9a066591ddf31abc4388281d98d2d88fa1c5f22cb60523e72e3d838fc6b0163fe0082ce0d8d59098363a174818113182d40cdb6367cb4a867c5aaa480c95f4a98439a2b58291fedcbfedfc3ebb41fe6b0a12fce36518ea6082fb919cdff23e3b40aa26eac8d634e03fc3a1e0fafe402c875709b15b622f35bfdd233ea8d7989ec38dfa1e5b5688d76c615b5efba62dd7d50be97b92f16c838edecd426e18dd270ddda42121d7ad8d26ec28df29580e6dcd7f968885d1cbc5f573efda890a408b45701bdf5cb2e3c54f8481710145ac1f5bdb1b53a1e9a7efd8a3ad7dad7bd0fa017e080854913beda2ccc95631a5c1da5c5afaa84bcc3f1a7041208fac9e09ef52140f142bed882b8988ea062cc8ecd7fd78fd33aeee8e8d5cc891514e3407fbb171e84e45fa14713e995513e16763424e356032ac81047c8e2bfe05dfecc510b55866d4a8696c91afd7b6b809fcf2e0f8a21834f43149d8e2b5dc5fddacb8ff9341376281e8f7d762fdb61a8e6536529b0d4d3cd8217fdb4f0b8341587737da7f50dbe4e5b7851a25d52066bd0e3ad11aed47ee02bec11d0f125cdee1f505cc5c1223d386b2fda556331cf57d8df433927cf12a5fbff853be266c5a64b6424f7b106931d312f0fd447206d21c1945579915e7e21627c7fc423a813823ce5fa2c6f3114303d0995c5706418a088535c62eda2a60c82b727c31177252f8ea025c16a3676ea0ccec24ea57e68c7e0f1b0e06f78a8ccead63eb4c0ef5c59b1d3a805644f8089e604a5bd3aa4494ff7fca02dd5894a6f02e572edd487af04ace3e37f19074325613d6f7d2af73062607b45a3c9365337a1c5e6bae9702a65f0a1b9ce75e43f6381efd9d610ad37532b62c6ab5957ded77a5d01604f67d7ccaa495266ab7fe161268b9a6156643ab6289fa0be75ac433a0204df164c02d3d0cb1b7bf0acd92ca8ff19b710b0b511820d0500fdf58f598fc611380a0f7dffce7bbc934edc967ba0094a0281750176748a4e2c99684c1c4a40258b0da77a0bfb9a4b808d5932443389f0f346dad998cee519624aeb07ea4446064282b1448bfa2e5ac3393d30b5c3865a8995869f69bab0747cfcbbd2bfd407c82e198da326f36be9a508e12d6d73fb262b37fcd7ff70b372c966b7198a9f2364012ff8127f200c079cb70d550f9483c1bf9fba69ebc961c989a82fc38cffe853e4738f33f1fa42fe7167e4bb79110f237d7e4989d2f6f4bd21905e491e2d4b6ac5a66025c11a93ab1eddcade3c3e78c270eaf6a0a6ed43df6e35bcaea9aa716d547d2136c2388379abf645e3f7cad1cc1fdc92b882729ff92b0612302970bd9ca7e36d76b2eb4d9dfe35116bb7771e448867e57026e622e1e54422b064fdb707fef339aa16fde808f622a7269b77c292c7e85fade6dcde475c2f61d71370209bc0e46ba7c7b71e41df246d283f5574205ca6b4819c63d97193eb084fd6b0c20b956cfc4b45b51fd46b2e034ff0f003179c7539fbc4e888c0633767604ed0f07beb4fe00f5a3b56ad9f3997cb49c7a8b92a719411b20874686a8a5ab462914baa85d016df99796a868af3dfa6ad98ceaaa18af2f2fad2ebf3dee1df8c8863e84ed83d6da5e283ca9cc385e0ded20531f127ff4aa974b91634d8f367154d3e23ebb04571a5a453d1265e873d00d40be7e1eb7e74529822b4c81d742c981a988fb786084cbd1e721358c7a1ea5293aa609773b890a5c9de4d1349588def4232d41fa5d7cfbc3dd130754891c304118a895268555874613e9c89c66bceea609e7ca1a914ea327db1f85a3809098e801289d8ab71997c2ad5bd1f3fd4b3c6b80667ac2b6b23b35018206dbf708284f0e0fac58d0b6d72c0d0034b6ed37b1f9931158f2443f045f65e33084ebc6aac93d8c0e3c1c52878dd3f54b9f88a40821090cdeb3bdbb61f0be16338a2a7ba0f77e9ecd5400b6f809a49eee78346c69e7ab560fcc32f2d19e665bb91fbc00e4c00838a1385d5156d1696f694027a9e6a7ef66933202012caca81c1b3ebe64976a9d000e28a6aae5d6f061c5acf8e4bca00bc5ecc547ab1664cdb2125300130a5a92abc0d36cf911fb3123034e925ea097fde14253dd3de52bf5c8a6bf01436c92dbbf5450a9b7775a981b09eab05406dae83f8ddcf898b1bace4b8487f0b4ec5b5316a9b7e3bcd6da41caa23604b3932ff3daf31bb19e74c687773bb54503f6b3ed74aef1410dc4a9a72fa05b1e120e682a7e7f9b8c7b6836fa9d8f96d16fa17975bc3dd7784f0d621d5a69038b0947d1cb47381c82c6df030fc8033dd66b380d884b12991ef5d5283e552f723aaf791bf3af581423c57b536b91e5a158695b68f7eccfd72fd2af1016e261ec863215d1df0fe756366e56fa86c4495cd9a45e83227af93a5b431c5d33fea2b3d469aab08f57b85b3a14a47d7da8ca74dae34f963cf660057466dac3937ce00060f8db8099178944aa37474a37eaef3b9ca04bd0eb1d03c25887d530cd690625f5829830851a6a58a7b411bc87aa70f26e80514799664e35c44db243d61add5bcaba3695e45e9f1a3cbf8ebdfb87571c44b9dcddc5fd422e94cbeb02bb58abd14e140829e12f7f0c7e3cc1a1bcae8429775e531710bfa504e103b17c20c329f653c015ab514fd6cf162b96d871930de99413e148fa58c1ff262a997c6ed1bc008912c6b864031dc95b5a3ad6aa3521167a62fe771baff828cafaf178539048d2e91a62ee7a50df04062422150347774db320fb535ddd4c03a8cdfc3affd253c200e1d5678ff12eb6f5bd43da636778cd2f8551295f4cbbc902322e491c5c10fee144daeaec4cc2a2f855f5312f4c8cac1155c8d3b93a5fe6a60118a0a9912b16d583582b478e4f05c375247d4cd897c49a8cfd2540833311039d9b121e5d5779d71b206d0d862b95e0eab28005f86ddd6ec514d931a521fc035eaacfd10ec5f97af541cabf08512f6c79e7e0db5217bd14aab6d3e9458018c3e59769bcb689347d7e394b469e9c9d9da2be8fc7a54b1aab301b68c1faf7ba7bfd05b8a313c902ad3733e523fd64739d9af110e39a96f1048fd6a43d13045ec71ff3d1f64a904f3878cb18f58b3b84942331ec05d3372a328a83e8aab828574313964f6f6c5af246faf2c69a95e9ceca77c0fbf303103a2d38ef6da2929a3dbccae5823f82d9a37c989154c8a760df8e7d8589daf1fd69683cadd2c7ac13e285a7661c23913912ee272797e3a0808654fd0b9f74f2fe04cb34167aa630b8aa58efc2586bef8c7c2e354d7c8d08de7d25a80b08bae8d2326d16a15d537d8baffcbbae460ce608ded63a45bdf0caf9dc335aa8d2aac03a62a9c6c62ce7c2caa9a731baa549d1880d3facdb4bee43ae27ccd5a22f143da8e7b4deb5c2a194d450eb5ff6949a950115d4e1d60fc75115346a0aaaf1400a301dcc8a04f9d2762c093f88adac799f6bd5150ca9c7d3ac1f728b88b1b0807a7407ad9b8febd89a801c9845af62bf2fc98aea4835d52871774e72b9fc07d26d55ef163833fd2f5c951ff963f43fcdaf03995cf3f14360b05be587e7a19fb760a944166b1fbd04c0d02bda8ff5d92a23c4e683db1b2823a6b02a16a7bc7963aaeeec43d97a85752fa439544127fb71d8b4fee6a09b966bc4e7be67acca35bfe4acabf18f6e9cc938c1e0af43e11754cbe7b37738019d9a162083f5f1fcdd9299921a349f1e0ee840b19fed4c0b5273d5e71ff5f1f20dbb36c89e1edbbef78de1a6229a2cd22bcf2164a1b567f7c08c6ba78ff2e53bc348dd2ab53b9deffc9cf8726feaf9cb07b4f94d189314da8c0005f3bb031e44c402339588832779790e814c707fdbe0830d53b4d35812f27e7709bee185d6d6d67a65382dcf56d567180a4a74cb05b0f7d0202bf33b88729f2bab7003264a2d67ea93d022baea74d7ca54a0081923a82e56750f22f58bc997ea57afe1bce18405383055745f0c6bfbbc514df76107b3c5d04bfe033dace72bd5bead25e736a0052b6efe7eb1153d1afe9202e227d60e4e38f5f294894d2ef9b89998194492e427442a18506e24ddcc1952354fe0250ad949be08a63b6c0e206ecbac70415c36f1bf78d7068ce8eb804561eab2540c6c984e63d1217de1242ae70a5dd457d7a96f24ad9e8a59c060a2a95e9e04a6a4429f40d47d2770e9d3ece295d748aa30a7bbd2aec570733be7855c3a789d71d94b3c86ccdd3cca3ddcb35a969e8c2d5b17ded6ab8b81b90a4206ac2ff163c04ba9886b5ec6138db5eb6ffc19201f66a1057858e564960de679b2996bb93c8d2b440fde169d1fbb5886fe673639c514c2eb8bca75f79abbb73c4a125e5f4d7d4ccd5c9fc85cedc9fe6f2b2b75ec384fa6ecec37579a70bd29b4c9893badb36e1b33cf61b07ee7d2a5550ac9f23b5fe629297efe94eb8a8c2adce65a61ddae84544fe8f81455e2d053fdf7efde38b92b0b4d3e7ff9d81f5de7d571cb4db7e059cbe1ac2153b22b57b4d45d58fa50d152efa2d85d262238ce4816e40f93b65f53b6646297f69e3dde4ae7c57e9112054cb831eca5716863196db7667674b00be7c83f900c944ea2bc8e8e6b6b335a6e9f63e6f6635f6afc0889355aa4f0b928b90f76e6f03b5d40e9a0cace6243aff4590c0ef255860401b16da288687e890b1921b8ba63860df7aad86279c89d16cc4ad1ef4633639f203724c1958fb3b6a990f555e8df8f494fbdae25b353c14fe524541347c1d7f61c349f55773575fab73df09ebd1c635ad5f93fc8e075093ec3fd8b832e5331e329c2578d1f6f7a0a44838e578fe40db7d11645c2c73e0a438a80085988294d98a4ef4c5faa593dd5a9b0dec12d8a6dfd15cc4503bb2078739f26f9c10d0b1fc2634094cfd2ff6bec88a7513debde5fcabb85fd31df8d97bcfaf247edb89cb056fc52bc06f117a3e1022a57817b9abe1793cf279e163212f501681eb9ef08e39adb9ba80ec3cd45f5ae7afc0c256a3470e8ed3ca41c5502c510f0526eab848ec5a7115a53741cf05846989b9b5fc6d2ad74fb855a852e3fc7234bb0ed8b6937167133925dbeb4313a9895860e761300a0695e03e81c2c1e3fe3f4b8c42c946b010259ffa4c1d345350020cddc8e9697fb83c22fff5190558551584368e7a270f958bc72e2624c3e45bbef318b5134f0419e725945e445993f2f176f0a21f5dba86398529fe5159d57c0d75d64f950763b52935e778b20356615409dcb088514eeba3f811e9ce6ce2bd1ba6ac932bd79f7a518959f99d52acbc2a1d0c02c70b9ea46d662d39c315b36315f4220e5dce293275050a3e6df506d0c1d7786017572cd758ba4995963fa034ecd49cadb42bb1ee280600557ce2e17488e1dd4595b8c7d4f20f420a3a01b6228d764c5069222cc93e2091fd2053f05a50eda7840c13f45c6e2a2fbc0f9de4baefb7b40ea1fb7e9d30fb1fdb8f20eafca0c7c8c61c57dfcb8e2836e8d0ce546e8e37b9fc467e1bbeab314be171573398e0c2fb032049a99acf174a857c019609e83010dda8da078a4311efcaaff62fa908dde87cec4d41078c343eec5a80c42d0146d57e9a14f2b5611be05e3b665728c14ea9536d146926fe1e8d5acf12afca415ef5ad77bdfead7ea087183962592296d3d892c64a0a3b9fc95b50f03df7f4f50f950b43a289af09ca92a01a684e5c649b8da4a3365878273a00afd14b4fa2ddaeea5007f728899ba9f5fc9d1d7893a489e56c5fb152e5f775042f4b3bab6cea9cbf9a2b91647fe3c62d3ae4b5d065460b51d51b6e91f2f4fe90a3775e6312ffc805612fee8c314ee70c92de3feefb3cda56a59ddba83757b0e85cb0ee7ad1ac608a1e6a64656d9f586afc38fd1f6474b521724532d88cd351688db077dc9d229a78f8704b21f85324bf9c697874cac5f709c6701a421ac368edda0ec3a0b90268c449acf753d7e8cab501ae3d7e04788e899ec54a2517545b68fd928fb659349e1692bdeccca648fd13a7602868c44e77ed6fd587538a74adc6acdb1ebd1816af88ece2ca64f2603428a0aa842fe86be6b2b568fd29c23433c9e3f9f0e45bd13beb22ac06eb82ae0eb2b3b328aca4abba5e72a155e2cc82ac92c4697fdb9439511c1144fe2ba36f516fa181f7f8d58af69f87a6c936d1e561fff0509819e65a681aaea445a106f8ff3dfd987e2e24e977281cb85cc5e5eb987da2d17e73dacfd9880bd14ecad13d5705643f926303b389a61fd63139577de263a5fdef1facdac0068a9471fc17ac654e88e0a0d12c8aca1e850b64a88f2382e0cf3a4e3363827a06abc1eeb87216e3447dfbf8c04080ca2fe1a08cc2e2001eb386cf02ac0d3b328bcf1de009d048a03cd955c628971c30a137dc66879cbe938390a8f63251f55e559549dd11969b637876a20bc7c6f5fe2b753923d2f0269f2082206eb2312f40654cc95bb38add159104495018a5aa7b8f5836162de9a03b6981c662f2ee02a168d530a002616c09c4cc26c2a2726711e3e25b4e3acb6dcba25fde78ecede51f01e22a2f79409c77011a599ff57d81e70dbde5fcbdc841f9af0e49e8200cd2d3c73013e0e5608ee1951ac04a111864b545e7bc2434c2474286519feaff4da07324d1b13bb16d1daa1d485bcd5466b82c9622f92664f1153d08c6e644b3d0f5902b4d749895f7763015bf0e2849703ed920a3866a260f22fe40f46c76ca6ca10ae8994505fa613a6b1aec84ee6620c25ca4d002f56ddd21b12eed5132634a3194281283fe5fdac07d2fec091dc0f748fe25c6b08cf8d4ff893e863a43c4c92fba47d86c8dfbbabbdca0cec09f732bc0b8df2a97ee7208e64512249300aa4c44c10d4c4503bd76e7b4e2c9aa2e274166ef103d5c832a760f33b5a0eae4dab922f0fec5adbf409bff956b4ce40e6157d498d46ae053f1ad73655bfb0a3dfac6b96c09bac4d07e6bd7f3ac6337f58cccc631466985f6ad680d21a5fe9a9bde4b6980c689e6e8c7a413b6e3084997c089443ffaca9be80c96ce1d9b6de074b4aecfd2db3b679a2d5cf0523aa14414699d481eace4aa397d818ff4d3e73d82031849c7e4f1f1503b636728637f87cf7a7df5472abfcb7e5d77439e1018dba49a41e1c8e63942fe0d1a426f390e8e225fee14501a34762b8d835ca14d6a3a3d8042724ea9e6b568fe0eb84306397ffa8345935e9be8642e6ffbd96e636fd16cacae5d4b88fd0aa0bfbba8221f68eabc98c67de6f9eab2cca07b096b458bbfdc7f1da0bb845a1a6e19c6da87a958acb1aad0b74d6537e97fb0673a20178cbb963f909839e49ec593ddcfc3046aa54c22e3a54148c440d1f2ba1fa7417572c629e48e6d2e07760a87581971d1edccc03c0e465d4d6321d820b3346fb516c1813585a6a8462124f91428a90ed037f40cd6f23596dc90c03825636e55a061838964213c70104ec0c5909a0c62240e93314f9b67ce8fafa115251282a6ee7a036a861d1af11919dbfa7ceb7b2260e66be6300a536e78ebdf60a6f022574b35205341f3557e409d8ecc0c2304b372605c9284aebe1b92f13051db78210df83873b0496625507cf8e1ee5e90aa66f45be75e388d6e0a021b8af3787ee06cd710719b4d06ca5ba5f87de812a660f939584ea880d3c71bc58135e612431850180ee39b707bd98aff26d2c5e4396b43daefd82b2ec1004978637b8d389cc415d628fea6f66f28664f9409448e68a2d48a0a00", 0x2000, &(0x7f0000008d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000008dc0)={0x90, 0x0, 0x7, {0x5, 0x3, 0xdc, 0x8, 0x3, 0x1, {0x6, 0x638, 0xfffffffffffffff8, 0x8, 0x3, 0x79, 0xfffffffe, 0x7, 0x1, 0x4000, 0x4, r11, r12, 0x7, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000008e80)='./dev/sda\x00', &(0x7f0000008ec0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) mount$fuseblk(&(0x7f0000000440), &(0x7f0000000480)='./dev/sda\x00', &(0x7f00000004c0), 0x0, &(0x7f0000008f40)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r8}, 0x2c, {'group_id', 0x3d, r12}, 0x2c, {[{@default_permissions}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x1ff}}], [{@seclabel}, {@uid_gt={'uid>', r13}}]}}) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r7}, 0xc) r14 = openat$cgroup_pressure(r4, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) close(r14) 640.029469ms ago: executing program 2 (id=762): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x16, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000700)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0xfffffed4}, 0x48) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x7f, 0x3a400) ioctl$VIDIOC_QUERYMENU(r3, 0xc02c5625, &(0x7f00000002c0)={0x4, 0x1, @name="e1a4d9d3e63bcb60495f739b4a99eec88b4918ce25d4296560425734faeb4fc8"}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000240)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000280), 0x12) r6 = syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(r6, 0x806c4120, &(0x7f0000000100)) r7 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xfffffdef}}, 0x1) 191.091683ms ago: executing program 4 (id=763): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x11}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xf}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000b40)=ANY=[@ANYBLOB="ff03"], 0x390) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f0000000b00)={0xa, 0x4e20, 0x10, @mcast2}, 0x1c) sendto$inet6(r1, &(0x7f0000000b40), 0x3000, 0x0, 0x0, 0x0) (fail_nth: 27) 190.551278ms ago: executing program 4 (id=764): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new '], 0x2d, 0xfffffffffffffff9) mkdir(&(0x7f0000000000)='./my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./my_sys\x00', &(0x7f0000000a80)='sysfs\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x0, 0x2, 0x4}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f00000003c0)=r3, 0x2) sendmsg$inet(r0, &(0x7f0000000400)={&(0x7f0000000440)={0x2, 0x10, @local}, 0x10, &(0x7f0000000480)=[{&(0x7f00000004c0)='{', 0x34000}], 0x1}, 0x80d1) recvmsg$kcm(r0, &(0x7f0000000500)={&(0x7f0000000540)=@ethernet={0x0, @broadcast}, 0x80, 0x0}, 0x40000000) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./my_sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r4, &(0x7f00000001c0)='1', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./lower/file1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./upper\x00', 0x1a) r5 = socket$inet(0x2, 0x5, 0x2) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000980)='bridge0\x00', 0x10) sendto$inet(r5, 0x0, 0x0, 0x8004, &(0x7f00000009c0)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r5, &(0x7f0000000a00)="cde0095f3d989229", 0x8, 0x0, &(0x7f0000000a40)={0x2, 0x4e26, @multicast1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./work\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000005c0)='./my_sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x42, 0x1ff) mkdir(&(0x7f0000000140)='./myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000680)='./myproc\x00', &(0x7f0000000880)='proc\x00', 0x0, 0x0) r6 = openat(r3, &(0x7f00000008c0)='./myproc/scsi/device_info\x00', 0x2, 0x0) pread64(r6, &(0x7f0000000ac0)=""/190, 0xbe, 0x80000000) mount(0x0, &(0x7f0000000700)='./mnt\x00', &(0x7f0000000740)='overlay\x00', 0x0, &(0x7f0000000780)='lowerdir=lower,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000800)='./mnt/file1\x00', 0x0) umount2(&(0x7f0000000840)='./mnt\x00', 0x0) add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f0000000180), &(0x7f0000000100), 0x0, 0x0) 336.844µs ago: executing program 7 (id=765): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000097000000000030000000001818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007baaf8fe00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b5001c008200000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bf080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000070000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa20000000000000702000000feffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 7 (id=766): socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./mnt\x00', &(0x7f0000000440)='tmpfs\x00', 0x0, &(0x7f0000000480)='casefold,strict_encoding\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./mnt/dir\x00', 0x1ff) mount$overlay(0x0, &(0x7f0000000500)='./mnt/dir\x00', &(0x7f0000000540), 0x0, &(0x7f0000000580)={[{@lowerdir={'lowerdir', 0x3d, './mnt'}}]}) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000680)='fdinfo\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket(0x10, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000080)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000280)={r5, 0x8002}, 0x8) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r3, 0x10000}}, 0xa) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) kernel console output (not intermixed with test programs): driver are: [ 106.611818][ T7911] ni6501 [ 106.611822][ T7911] comedi: valid board names for dt9812 driver are: [ 106.611826][ T7911] dt9812 [ 106.611829][ T7911] comedi: valid board names for ni_labpc_cs driver are: [ 106.611834][ T7911] ni_labpc_cs [ 106.611837][ T7911] comedi: valid board names for ni_daq_700 driver are: [ 106.611841][ T7911] ni_daq_700 [ 106.611845][ T7911] comedi: valid board names for labpc_pci driver are: [ 106.611849][ T7911] labpc_pci [ 106.611852][ T7911] comedi: valid board names for adl_pci9118 driver are: [ 106.611857][ T7911] pci9118dg [ 106.611860][ T7911] pci9118hg [ 106.611864][ T7911] pci9118hr [ 106.611867][ T7911] comedi: valid board names for 8255_pci driver are: [ 106.611871][ T7911] 8255_pci [ 106.611875][ T7911] comedi: valid board names for s526 driver are: [ 106.611879][ T7911] s526 [ 106.611882][ T7911] comedi: valid board names for multiq3 driver are: [ 106.611886][ T7911] multiq3 [ 106.611889][ T7911] comedi: valid board names for pcmuio driver are: [ 106.611894][ T7911] pcmuio48 [ 106.611898][ T7911] pcmuio96 [ 106.611901][ T7911] comedi: valid board names for pcmmio driver are: [ 106.611907][ T7911] pcmmio [ 106.611910][ T7911] comedi: valid board names for pcmda12 driver are: [ 106.611915][ T7911] pcmda12 [ 106.611919][ T7911] comedi: valid board names for pcmad driver are: [ 106.611923][ T7911] pcmad12 [ 106.611927][ T7911] pcmad16 [ 106.611930][ T7911] comedi: valid board names for ni_labpc driver are: [ 106.611934][ T7911] lab-pc-1200 [ 106.611938][ T7911] lab-pc-1200ai [ 106.611942][ T7911] lab-pc+ [ 106.611946][ T7911] comedi: valid board names for atmio16 driver are: [ 106.611951][ T7911] atmio16 [ 106.611954][ T7911] atmio16d [ 106.611958][ T7911] comedi: valid board names for ni_at_ao driver are: [ 106.611963][ T7911] at-ao-6 [ 106.611966][ T7911] at-ao-10 [ 106.611970][ T7911] comedi: valid board names for ni_at_a2150 driver are: [ 106.611975][ T7911] ni_at_a2150 [ 106.611978][ T7911] comedi: valid board names for adq12b driver are: [ 106.611982][ T7911] adq12b [ 106.611986][ T7911] comedi: valid board names for mpc624 driver are: [ 106.611990][ T7911] mpc624 [ 106.611993][ T7911] comedi: valid board names for c6xdigio driver are: [ 106.611997][ T7911] c6xdigio [ 106.612001][ T7911] comedi: valid board names for aio_iiro_16 driver are: [ 106.612005][ T7911] aio_iiro_16 [ 106.612008][ T7911] comedi: valid board names for aio_aio12_8 driver are: [ 106.612012][ T7911] aio_aio12_8 [ 106.612016][ T7911] aio_ai12_8 [ 106.612024][ T7911] aio_ao12_4 [ 106.612027][ T7911] comedi: valid board names for fl512 driver are: [ 106.612032][ T7911] fl512 [ 106.612036][ T7911] comedi: valid board names for dmm32at driver are: [ 106.612040][ T7911] dmm32at [ 106.612043][ T7911] comedi: valid board names for dt282x driver are: [ 106.612048][ T7911] dt2821 [ 106.612052][ T7911] dt2821-f [ 106.612055][ T7911] dt2821-g [ 106.612059][ T7911] dt2823 [ 106.612062][ T7911] dt2824-pgh [ 106.612066][ T7911] dt2824-pgl [ 106.612070][ T7911] dt2825 [ 106.612073][ T7911] dt2827 [ 106.612077][ T7911] dt2828 [ 106.612080][ T7911] dt2829 [ 106.612083][ T7911] dt21-ez [ 106.612087][ T7911] dt23-ez [ 106.612091][ T7911] dt24-ez [ 106.612094][ T7911] dt24-ez-pgl [ 106.612098][ T7911] comedi: valid board names for dt2817 driver are: [ 106.612102][ T7911] dt2817 [ 106.612105][ T7911] comedi: valid board names for dt2815 driver are: [ 106.612110][ T7911] dt2815 [ 106.612113][ T7911] comedi: valid board names for dt2814 driver are: [ 106.612117][ T7911] dt2814 [ 106.612121][ T7911] comedi: valid board names for dt2811 driver are: [ 106.612126][ T7911] dt2811-pgh [ 106.612130][ T7911] dt2811-pgl [ 106.612133][ T7911] comedi: valid board names for dt2801 driver are: [ 106.612138][ T7911] dt2801 [ 106.612141][ T7911] comedi: valid board names for das6402 driver are: [ 106.612145][ T7911] das6402-12 [ 106.612149][ T7911] das6402-16 [ 106.612153][ T7911] comedi: valid board names for das1800 driver are: [ 106.612157][ T7911] das-1701st [ 106.612161][ T7911] das-1701st-da [ 106.612164][ T7911] das-1702st [ 106.612168][ T7911] das-1702st-da [ 106.612172][ T7911] das-1702hr [ 106.612175][ T7911] das-1702hr-da [ 106.612179][ T7911] das-1701ao [ 106.612182][ T7911] das-1702ao [ 106.612186][ T7911] das-1801st [ 106.612190][ T7911] das-1801st-da [ 106.612193][ T7911] das-1802st [ 106.612197][ T7911] das-1802st-da [ 106.612201][ T7911] das-1802hr [ 106.612204][ T7911] das-1802hr-da [ 106.612208][ T7911] das-1801hc [ 106.612211][ T7911] das-1802hc [ 106.612215][ T7911] das-1801ao [ 106.612218][ T7911] das-1802ao [ 106.612221][ T7911] comedi: valid board names for das800 driver are: [ 106.612226][ T7911] das-800 [ 106.612229][ T7911] cio-das800 [ 106.612232][ T7911] das-801 [ 106.612235][ T7911] cio-das801 [ 106.612239][ T7911] das-802 [ 106.612242][ T7911] cio-das802 [ 106.612246][ T7911] cio-das802/16 [ 106.612249][ T7911] comedi: valid board names for isa-das08 driver are: [ 106.612253][ T7911] isa-das08 [ 106.612257][ T7911] das08-pgm [ 106.612260][ T7911] das08-pgh [ 106.612263][ T7911] das08-pgl [ 106.612267][ T7911] das08-aoh [ 106.612270][ T7911] das08-aol [ 106.612273][ T7911] das08-aom [ 106.612276][ T7911] das08/jr-ao [ 106.612280][ T7911] das08jr-16-ao [ 106.612283][ T7911] pc104-das08 [ 106.612287][ T7911] das08jr/16 [ 106.612290][ T7911] comedi: valid board names for das16m1 driver are: [ 106.612294][ T7911] das16m1 [ 106.612297][ T7911] comedi: valid board names for dac02 driver are: [ 106.612301][ T7911] dac02 [ 106.612305][ T7911] comedi: valid board names for rti802 driver are: [ 106.612309][ T7911] rti802 [ 106.612312][ T7911] comedi: valid board names for rti800 driver are: [ 106.612316][ T7911] rti800 [ 106.612319][ T7911] rti815 [ 106.612322][ T7911] comedi: valid board names for pcm3724 driver are: [ 106.612327][ T7911] pcm3724 [ 106.612330][ T7911] comedi: valid board names for pcl818 driver are: [ 106.612334][ T7911] pcl818l [ 106.612337][ T7911] pcl818h [ 106.612340][ T7911] pcl818hd [ 106.612343][ T7911] pcl818hg [ 106.612347][ T7911] pcl818 [ 106.612350][ T7911] pcl718 [ 106.612353][ T7911] pcm3718 [ 106.612356][ T7911] comedi: valid board names for pcl816 driver are: [ 106.612361][ T7911] pcl816 [ 106.612364][ T7911] pcl814b [ 106.612367][ T7911] comedi: valid board names for pcl812 driver are: [ 106.612371][ T7911] pcl812 [ 106.612374][ T7911] pcl812pg [ 106.612378][ T7911] acl8112pg [ 106.612381][ T7911] acl8112dg [ 106.612384][ T7911] acl8112hg [ 106.612387][ T7911] a821pgl [ 106.612391][ T7911] a821pglnda [ 106.612394][ T7911] a821pgh [ 106.612397][ T7911] a822pgl [ 106.612400][ T7911] a822pgh [ 106.612404][ T7911] a823pgl [ 106.612407][ T7911] a823pgh [ 106.612410][ T7911] pcl813 [ 106.612413][ T7911] pcl813b [ 106.612416][ T7911] acl8113 [ 106.612420][ T7911] iso813 [ 106.612423][ T7911] acl8216 [ 106.612426][ T7911] a826pg [ 106.612430][ T7911] comedi: valid board names for pcl730 driver are: [ 106.612434][ T7911] pcl730 [ 106.612437][ T7911] iso730 [ 106.612440][ T7911] acl7130 [ 106.612443][ T7911] pcm3730 [ 106.612447][ T7911] pcl725 [ 106.612450][ T7911] p8r8dio [ 106.612453][ T7911] acl7225b [ 106.612457][ T7911] p16r16dio [ 106.612460][ T7911] pcl733 [ 106.612463][ T7911] pcl734 [ 106.612466][ T7911] opmm-1616-xt [ 106.612470][ T7911] pearl-mm-p [ 106.612473][ T7911] ir104-pbf [ 106.612477][ T7911] comedi: valid board names for pcl726 driver are: [ 106.612481][ T7911] pcl726 [ 106.612484][ T7911] pcl727 [ 106.612487][ T7911] pcl728 [ 106.612491][ T7911] acl6126 [ 106.612494][ T7911] acl6128 [ 106.612497][ T7911] comedi: valid board names for pcl724 driver are: [ 106.612501][ T7911] pcl724 [ 106.612504][ T7911] pcl722 [ 106.612508][ T7911] pcl731 [ 106.612511][ T7911] acl7122 [ 106.612514][ T7911] acl7124 [ 106.612518][ T7911] pet48dio [ 106.612521][ T7911] pcmio48 [ 106.612524][ T7911] onyx-mm-dio [ 106.612528][ T7911] comedi: valid board names for pcl711 driver are: [ 106.612532][ T7911] pcl711 [ 106.612535][ T7911] pcl711b [ 106.612538][ T7911] acl8112hg [ 106.612542][ T7911] acl8112dg [ 106.612545][ T7911] comedi: valid board names for amplc_pc263 driver are: [ 106.612550][ T7911] pc263 [ 106.612553][ T7911] comedi: valid board names for amplc_pc236 driver are: [ 106.612557][ T7911] pc36at [ 106.612560][ T7911] comedi: valid board names for amplc_dio200 driver are: [ 106.612565][ T7911] pc212e [ 106.612568][ T7911] pc214e [ 106.612571][ T7911] pc215e [ 106.612574][ T7911] pc218e [ 106.612578][ T7911] pc272e [ 106.612581][ T7911] comedi: valid board names for comedi_parport driver are: [ 106.612585][ T7911] comedi_parport [ 106.612589][ T7911] comedi: valid board names for comedi_test driver are: [ 106.612593][ T7911] comedi_test [ 106.612597][ T7911] comedi: valid board names for comedi_bond driver are: [ 106.612601][ T7911] comedi_bond [ 106.667112][ T7917] FAULT_INJECTION: forcing a failure. [ 106.667112][ T7917] name failslab, interval 1, probability 0, space 0, times 0 [ 106.667132][ T7917] CPU: 2 UID: 0 PID: 7917 Comm: syz.2.506 Not tainted syzkaller #0 PREEMPT(full) [ 106.667152][ T7917] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 106.667163][ T7917] Call Trace: [ 106.667169][ T7917] [ 106.667175][ T7917] dump_stack_lvl+0x100/0x190 [ 106.667206][ T7917] should_fail_ex.cold+0x5/0xa [ 106.667236][ T7917] should_failslab+0xc2/0x120 [ 106.667258][ T7917] kmem_cache_alloc_noprof+0x92/0x6a0 [ 106.667280][ T7917] ? __kernfs_new_node+0xd2/0xa10 [ 106.667331][ T7917] __kernfs_new_node+0xd2/0xa10 [ 106.667354][ T7917] ? __pfx___kernfs_new_node+0x10/0x10 [ 106.667376][ T7917] ? lock_acquire+0x1d1/0x380 [ 106.667394][ T7917] ? kernfs_root+0x23/0x2a0 [ 106.667421][ T7917] ? find_held_lock+0x2b/0x80 [ 106.667440][ T7917] ? kernfs_root+0xee/0x2a0 [ 106.667465][ T7917] ? kernfs_root+0xee/0x2a0 [ 106.667492][ T7917] kernfs_new_node+0x194/0x200 [ 106.667512][ T7917] ? __pfx_kernfs_new_node+0x10/0x10 [ 106.667532][ T7917] ? kernfs_add_one+0x213/0xb40 [ 106.667555][ T7917] __kernfs_create_file+0x53/0x350 [ 106.667577][ T7917] sysfs_add_file_mode_ns+0x207/0x3c0 [ 106.667604][ T7917] internal_create_group+0x593/0xfb0 [ 106.667636][ T7917] ? __pfx_internal_create_group+0x10/0x10 [ 106.667667][ T7917] ? kernfs_create_link+0x1f1/0x280 [ 106.667687][ T7917] internal_create_groups+0x9d/0x150 [ 106.667715][ T7917] device_add+0x77a/0x1970 [ 106.667768][ T7917] ? __pfx_device_add+0x10/0x10 [ 106.667793][ T7917] ? __pfx___might_resched+0x10/0x10 [ 106.667817][ T7917] ? rcu_is_watching+0x13/0xc0 [ 106.667843][ T7917] input_register_device+0x888/0xe60 [ 106.667885][ T7917] ? __pfx_down_write+0x10/0x10 [ 106.667933][ T7917] hidp_session_dev_add+0xe5/0x170 [ 106.667959][ T7917] hidp_session_probe+0x157/0x920 [ 106.667987][ T7917] ? __pfx_hidp_session_probe+0x10/0x10 [ 106.668015][ T7917] ? dev_set_name+0xc7/0x100 [ 106.668039][ T7917] ? lockdep_init_map_type+0x5c/0x250 [ 106.668069][ T7917] l2cap_register_user+0xb7/0x240 [ 106.668096][ T7917] hidp_connection_add+0xc47/0x1f80 [ 106.668129][ T7917] do_hidp_sock_ioctl.isra.0+0x365/0x520 [ 106.668156][ T7917] ? __pfx_do_hidp_sock_ioctl.isra.0+0x10/0x10 [ 106.668178][ T7917] ? avc_has_extended_perms+0x33a/0x10b0 [ 106.668214][ T7917] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 106.668253][ T7917] ? tomoyo_path_number_perm+0x188/0x580 [ 106.668281][ T7917] sock_do_ioctl+0x118/0x280 [ 106.668306][ T7917] ? __pfx_sock_do_ioctl+0x10/0x10 [ 106.668331][ T7917] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 106.668363][ T7917] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 106.668375][ T7917] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 106.668394][ T7917] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 106.668418][ T7917] sock_ioctl+0x599/0x6b0 [ 106.668436][ T7917] ? __pfx_sock_ioctl+0x10/0x10 [ 106.668455][ T7917] ? selinux_file_ioctl+0x1e0/0x290 [ 106.668468][ T7917] ? selinux_file_ioctl+0x1e7/0x290 [ 106.668486][ T7917] ? __pfx_sock_ioctl+0x10/0x10 [ 106.668503][ T7917] __x64_sys_ioctl+0x18e/0x210 [ 106.668523][ T7917] do_syscall_64+0x123/0x7b0 [ 106.668547][ T7917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.668564][ T7917] RIP: 0033:0x7fd86479fb19 [ 106.668576][ T7917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.668592][ T7917] RSP: 002b:00007fd865746028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 106.668609][ T7917] RAX: ffffffffffffffda RBX: 00007fd864a25fa0 RCX: 00007fd86479fb19 [ 106.668621][ T7917] RDX: 0000200000000b00 RSI: 00000000400448c8 RDI: 000000000000000c [ 106.668632][ T7917] RBP: 00007fd864837b70 R08: 0000000000000000 R09: 0000000000000000 [ 106.668642][ T7917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.668650][ T7917] R13: 00007fd864a26038 R14: 00007fd864a25fa0 R15: 00007fffa8ff6388 [ 106.668672][ T7917] [ 106.737748][ T7928] netlink: 'syz.0.508': attribute type 10 has an invalid length. [ 106.851697][ T7940] FAULT_INJECTION: forcing a failure. [ 106.851697][ T7940] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 106.851730][ T7940] CPU: 0 UID: 0 PID: 7940 Comm: syz.4.512 Not tainted syzkaller #0 PREEMPT(full) [ 106.851744][ T7940] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 106.851750][ T7940] Call Trace: [ 106.851754][ T7940] [ 106.851759][ T7940] dump_stack_lvl+0x100/0x190 [ 106.851780][ T7940] should_fail_ex.cold+0x5/0xa [ 106.851798][ T7940] _copy_to_user+0x32/0xd0 [ 106.851813][ T7940] bpf_log_attr_finalize+0x169/0x1a0 [ 106.851828][ T7940] ? __pfx_bpf_log_attr_finalize+0x10/0x10 [ 106.851841][ T7940] ? ktime_get+0x22c/0x320 [ 106.851860][ T7940] bpf_check+0x2ad4/0xa0f0 [ 106.851881][ T7940] ? __pfx_bpf_check+0x10/0x10 [ 106.851891][ T7940] ? lock_acquire+0x1d1/0x380 [ 106.851905][ T7940] ? bpf_prog_load+0x1af0/0x2b20 [ 106.851920][ T7940] ? find_held_lock+0x2b/0x80 [ 106.851931][ T7940] ? bpf_prog_load+0x1af0/0x2b20 [ 106.851949][ T7940] ? __asan_memset+0x23/0x50 [ 106.851967][ T7940] ? bpf_prog_load+0x1baf/0x2b20 [ 106.851981][ T7940] bpf_prog_load+0x1baf/0x2b20 [ 106.851996][ T7940] ? avc_has_perm_noaudit+0x11e/0x470 [ 106.852013][ T7940] ? __pfx_bpf_prog_load+0x10/0x10 [ 106.852040][ T7940] __sys_bpf+0x146f/0x4b60 [ 106.852054][ T7940] ? __pfx___sys_bpf+0x10/0x10 [ 106.852064][ T7940] ? find_held_lock+0x2b/0x80 [ 106.852080][ T7940] ? get_pid_task+0xfc/0x250 [ 106.852093][ T7940] ? get_pid_task+0xfc/0x250 [ 106.852113][ T7940] ? find_held_lock+0x2b/0x80 [ 106.852134][ T7940] ? rcu_read_lock_any_held+0x6a/0x90 [ 106.852155][ T7940] ? find_held_lock+0x2b/0x80 [ 106.852170][ T7940] ? ksys_write+0x190/0x250 [ 106.852188][ T7940] ? ksys_write+0x190/0x250 [ 106.852206][ T7940] ? lock_acquire+0x1d1/0x380 [ 106.852233][ T7940] ? fput+0x7c/0x100 [ 106.852247][ T7940] ? ksys_write+0x1ac/0x250 [ 106.852259][ T7940] ? __x64_sys_bpf+0xce/0x140 [ 106.852268][ T7940] __x64_sys_bpf+0xce/0x140 [ 106.852279][ T7940] ? do_syscall_64+0xae/0x7b0 [ 106.852293][ T7940] do_syscall_64+0x123/0x7b0 [ 106.852306][ T7940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.852317][ T7940] RIP: 0033:0x7f1b98f9fb19 [ 106.852327][ T7940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.852337][ T7940] RSP: 002b:00007f1b99df0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 106.852348][ T7940] RAX: ffffffffffffffda RBX: 00007f1b99225fa0 RCX: 00007f1b98f9fb19 [ 106.852355][ T7940] RDX: 0000000000000094 RSI: 0000200000000e00 RDI: 0000000000000005 [ 106.852361][ T7940] RBP: 00007f1b99df0090 R08: 0000000000000000 R09: 0000000000000000 [ 106.852367][ T7940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 106.852373][ T7940] R13: 00007f1b99226038 R14: 00007f1b99225fa0 R15: 00007ffd8bc15e88 [ 106.852387][ T7940] [ 106.879044][ T7941] kAFS: unable to lookup cell '(G' [ 106.881852][ T7941] kAFS: No cell specified [ 106.937569][ T7955] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 106.938506][ T5784] Bluetooth: hci1: failed to read key size for handle 200 [ 107.113834][ T1045] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 107.284056][ T1045] usb 9-1: Using ep0 maxpacket: 16 [ 107.284589][ T1045] usb 9-1: New USB device found: idVendor=1781, idProduct=0898, bcdDevice=0.00 [ 107.285695][ T1045] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.285707][ T1045] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 107.285735][ T1045] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.287317][ T1045] usb 9-1: config 0 descriptor?? [ 107.295557][ T1045] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input15 [ 107.476968][ T7958] FAULT_INJECTION: forcing a failure. [ 107.476968][ T7958] name failslab, interval 1, probability 0, space 0, times 0 [ 107.476985][ T7958] CPU: 3 UID: 0 PID: 7958 Comm: syz.6.516 Not tainted syzkaller #0 PREEMPT(full) [ 107.476998][ T7958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 107.477004][ T7958] Call Trace: [ 107.477009][ T7958] [ 107.477013][ T7958] dump_stack_lvl+0x100/0x190 [ 107.477035][ T7958] should_fail_ex.cold+0x5/0xa [ 107.477054][ T7958] should_failslab+0xc2/0x120 [ 107.477069][ T7958] __kmalloc_node_noprof+0xff/0x870 [ 107.477087][ T7958] ? __get_vm_area_node+0x1ff/0x350 [ 107.477098][ T7958] ? __get_vm_area_node+0x22b/0x350 [ 107.477108][ T7958] ? __vmalloc_node_range_noprof+0x424/0x1440 [ 107.477123][ T7958] __vmalloc_node_range_noprof+0x424/0x1440 [ 107.477140][ T7958] ? bpf_prog_calc_tag+0x65/0x380 [ 107.477157][ T7958] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 107.477169][ T7958] ? vscnprintf+0x5b/0x90 [ 107.477183][ T7958] ? bpf_verifier_vlog+0x19d/0x6d0 [ 107.477197][ T7958] ? bpf_prog_calc_tag+0x65/0x380 [ 107.477209][ T7958] __vmalloc_node_noprof+0xad/0xf0 [ 107.477221][ T7958] ? bpf_prog_calc_tag+0x65/0x380 [ 107.477234][ T7958] __vmalloc_noprof+0xa3/0x120 [ 107.477246][ T7958] ? __pfx___vmalloc_noprof+0x10/0x10 [ 107.477260][ T7958] ? __pfx_bpf_check_btf_info+0x10/0x10 [ 107.477271][ T7958] ? bpf_jmp_offset+0x82/0xf0 [ 107.477286][ T7958] bpf_prog_calc_tag+0x65/0x380 [ 107.477301][ T7958] bpf_check+0x2ea7/0xa0f0 [ 107.477322][ T7958] ? __pfx_bpf_check+0x10/0x10 [ 107.477332][ T7958] ? lock_acquire+0x1d1/0x380 [ 107.477346][ T7958] ? bpf_prog_load+0x1af0/0x2b20 [ 107.477362][ T7958] ? find_held_lock+0x2b/0x80 [ 107.477373][ T7958] ? bpf_prog_load+0x1af0/0x2b20 [ 107.477390][ T7958] ? __asan_memset+0x23/0x50 [ 107.477408][ T7958] ? bpf_prog_load+0x1baf/0x2b20 [ 107.477441][ T7958] bpf_prog_load+0x1baf/0x2b20 [ 107.477458][ T7958] ? avc_has_perm_noaudit+0x11e/0x470 [ 107.477475][ T7958] ? __pfx_bpf_prog_load+0x10/0x10 [ 107.477503][ T7958] __sys_bpf+0x146f/0x4b60 [ 107.477516][ T7958] ? __pfx___sys_bpf+0x10/0x10 [ 107.477526][ T7958] ? find_held_lock+0x2b/0x80 [ 107.477537][ T7958] ? get_pid_task+0xfc/0x250 [ 107.477547][ T7958] ? get_pid_task+0xfc/0x250 [ 107.477561][ T7958] ? find_held_lock+0x2b/0x80 [ 107.477575][ T7958] ? rcu_read_lock_any_held+0x6a/0x90 [ 107.477588][ T7958] ? find_held_lock+0x2b/0x80 [ 107.477598][ T7958] ? ksys_write+0x190/0x250 [ 107.477609][ T7958] ? ksys_write+0x190/0x250 [ 107.477619][ T7958] ? lock_acquire+0x1d1/0x380 [ 107.477642][ T7958] ? fput+0x7c/0x100 [ 107.477656][ T7958] ? ksys_write+0x1ac/0x250 [ 107.477668][ T7958] ? __x64_sys_bpf+0xce/0x140 [ 107.477677][ T7958] __x64_sys_bpf+0xce/0x140 [ 107.477688][ T7958] ? do_syscall_64+0xae/0x7b0 [ 107.477701][ T7958] do_syscall_64+0x123/0x7b0 [ 107.477715][ T7958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.477726][ T7958] RIP: 0033:0x7f3e5f39fb19 [ 107.477735][ T7958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.477746][ T7958] RSP: 002b:00007f3e6027d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 107.477757][ T7958] RAX: ffffffffffffffda RBX: 00007f3e5f625fa0 RCX: 00007f3e5f39fb19 [ 107.477764][ T7958] RDX: 0000000000000094 RSI: 0000200000000780 RDI: 0000000000000005 [ 107.477771][ T7958] RBP: 00007f3e6027d090 R08: 0000000000000000 R09: 0000000000000000 [ 107.477777][ T7958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 107.477783][ T7958] R13: 00007f3e5f626038 R14: 00007f3e5f625fa0 R15: 00007ffd2b8c6788 [ 107.477797][ T7958] [ 107.477870][ T7958] warn_alloc: 1 callbacks suppressed [ 107.477877][ T7958] syz.6.516: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x400cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 107.477915][ T7958] CPU: 3 UID: 0 PID: 7958 Comm: syz.6.516 Not tainted syzkaller #0 PREEMPT(full) [ 107.477926][ T7958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 107.477932][ T7958] Call Trace: [ 107.477936][ T7958] [ 107.477940][ T7958] dump_stack_lvl+0x100/0x190 [ 107.477958][ T7958] warn_alloc.cold+0x9e/0xb2 [ 107.477984][ T7958] ? __pfx_warn_alloc+0x10/0x10 [ 107.477998][ T7958] ? dump_stack_lvl+0x17c/0x190 [ 107.478014][ T7958] ? rcu_is_watching+0x13/0xc0 [ 107.478026][ T7958] ? __kasan_kmalloc+0x8a/0xb0 [ 107.478038][ T7958] ? __kmalloc_node_noprof+0x360/0x870 [ 107.478053][ T7958] ? __get_vm_area_node+0x1ff/0x350 [ 107.478063][ T7958] ? __get_vm_area_node+0x22b/0x350 [ 107.478074][ T7958] ? __vmalloc_node_range_noprof+0x424/0x1440 [ 107.478088][ T7958] __vmalloc_node_range_noprof+0x107c/0x1440 [ 107.478105][ T7958] ? bpf_prog_calc_tag+0x65/0x380 [ 107.478120][ T7958] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 107.478133][ T7958] ? vscnprintf+0x5b/0x90 [ 107.478145][ T7958] ? bpf_verifier_vlog+0x19d/0x6d0 [ 107.478158][ T7958] ? bpf_prog_calc_tag+0x65/0x380 [ 107.478170][ T7958] __vmalloc_node_noprof+0xad/0xf0 [ 107.478181][ T7958] ? bpf_prog_calc_tag+0x65/0x380 [ 107.478195][ T7958] __vmalloc_noprof+0xa3/0x120 [ 107.478207][ T7958] ? __pfx___vmalloc_noprof+0x10/0x10 [ 107.478220][ T7958] ? __pfx_bpf_check_btf_info+0x10/0x10 [ 107.478231][ T7958] ? bpf_jmp_offset+0x82/0xf0 [ 107.478246][ T7958] bpf_prog_calc_tag+0x65/0x380 [ 107.478261][ T7958] bpf_check+0x2ea7/0xa0f0 [ 107.478302][ T7958] ? __pfx_bpf_check+0x10/0x10 [ 107.478314][ T7958] ? lock_acquire+0x1d1/0x380 [ 107.478328][ T7958] ? bpf_prog_load+0x1af0/0x2b20 [ 107.478343][ T7958] ? find_held_lock+0x2b/0x80 [ 107.478354][ T7958] ? bpf_prog_load+0x1af0/0x2b20 [ 107.478392][ T7958] ? __asan_memset+0x23/0x50 [ 107.478410][ T7958] ? bpf_prog_load+0x1baf/0x2b20 [ 107.478425][ T7958] bpf_prog_load+0x1baf/0x2b20 [ 107.478457][ T7958] ? avc_has_perm_noaudit+0x11e/0x470 [ 107.478474][ T7958] ? __pfx_bpf_prog_load+0x10/0x10 [ 107.478502][ T7958] __sys_bpf+0x146f/0x4b60 [ 107.478515][ T7958] ? __pfx___sys_bpf+0x10/0x10 [ 107.478525][ T7958] ? find_held_lock+0x2b/0x80 [ 107.478536][ T7958] ? get_pid_task+0xfc/0x250 [ 107.478545][ T7958] ? get_pid_task+0xfc/0x250 [ 107.478559][ T7958] ? find_held_lock+0x2b/0x80 [ 107.478573][ T7958] ? rcu_read_lock_any_held+0x6a/0x90 [ 107.478585][ T7958] ? find_held_lock+0x2b/0x80 [ 107.478596][ T7958] ? ksys_write+0x190/0x250 [ 107.478606][ T7958] ? ksys_write+0x190/0x250 [ 107.478616][ T7958] ? lock_acquire+0x1d1/0x380 [ 107.478639][ T7958] ? fput+0x7c/0x100 [ 107.478652][ T7958] ? ksys_write+0x1ac/0x250 [ 107.478664][ T7958] ? __x64_sys_bpf+0xce/0x140 [ 107.478674][ T7958] __x64_sys_bpf+0xce/0x140 [ 107.478684][ T7958] ? do_syscall_64+0xae/0x7b0 [ 107.478697][ T7958] do_syscall_64+0x123/0x7b0 [ 107.478711][ T7958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.478721][ T7958] RIP: 0033:0x7f3e5f39fb19 [ 107.478730][ T7958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.478740][ T7958] RSP: 002b:00007f3e6027d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 107.478750][ T7958] RAX: ffffffffffffffda RBX: 00007f3e5f625fa0 RCX: 00007f3e5f39fb19 [ 107.478757][ T7958] RDX: 0000000000000094 RSI: 0000200000000780 RDI: 0000000000000005 [ 107.478763][ T7958] RBP: 00007f3e6027d090 R08: 0000000000000000 R09: 0000000000000000 [ 107.478769][ T7958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 107.478775][ T7958] R13: 00007f3e5f626038 R14: 00007f3e5f625fa0 R15: 00007ffd2b8c6788 [ 107.478789][ T7958] [ 107.478793][ T7958] Mem-Info: [ 107.478798][ T7958] active_anon:11225 inactive_anon:0 isolated_anon:0 [ 107.478798][ T7958] active_file:0 inactive_file:63317 isolated_file:0 [ 107.478798][ T7958] unevictable:1000 dirty:118 writeback:18 [ 107.478798][ T7958] slab_reclaimable:12969 slab_unreclaimable:71592 [ 107.478798][ T7958] mapped:25190 shmem:1565 pagetables:3963 [ 107.478798][ T7958] sec_pagetables:299 bounce:0 [ 107.478798][ T7958] kernel_misc_reclaimable:0 [ 107.478798][ T7958] free:429936 free_pcp:15119 free_cma:0 [ 107.478823][ T7958] Node 0 active_anon:44544kB inactive_anon:0kB active_file:0kB inactive_file:253048kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:100760kB dirty:460kB writeback:72kB shmem:4260kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15040kB pagetables:7288kB sec_pagetables:1196kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 107.478848][ T7958] Node 1 active_anon:356kB inactive_anon:0kB active_file:0kB inactive_file:220kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:12kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:288kB pagetables:8564kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 107.478872][ T7958] Node 0 DMA free:15100kB boost:0kB min:344kB low:428kB high:512kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:152kB local_pcp:0kB free_cma:0kB [ 107.478960][ T7958] lowmem_reserve[]: 0 1201 1201 1201 1201 [ 107.478980][ T7958] Node 0 DMA32 free:93252kB boost:2048kB min:29112kB low:35876kB high:42640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:44544kB inactive_anon:0kB active_file:0kB inactive_file:253048kB unevictable:2000kB writepending:408kB zspages:0kB present:2080628kB managed:1230580kB mlocked:0kB bounce:0kB free_pcp:32900kB local_pcp:7636kB free_cma:0kB [ 107.479007][ T7958] lowmem_reserve[]: 0 0 0 0 0 [ 107.479024][ T7958] Node 1 Normal free:1611392kB boost:0kB min:40168kB low:50208kB high:60248kB reserved_highatomic:0kB free_highatomic:0kB active_anon:356kB inactive_anon:0kB active_file:0kB inactive_file:220kB unevictable:2000kB writepending:12kB zspages:0kB present:2097152kB managed:1781880kB mlocked:0kB bounce:0kB free_pcp:27424kB local_pcp:10704kB free_cma:0kB [ 107.479051][ T7958] lowmem_reserve[]: 0 0 0 0 0 [ 107.479067][ T7958] Node 0 DMA: 13*4kB (UM) 17*8kB (UM) 16*16kB (U) 14*32kB (U) 14*64kB (UM) 10*128kB (UM) 9*256kB (UM) 7*512kB (UM) 4*1024kB (UM) 1*2048kB (U) 0*4096kB = 15100kB [ 107.479142][ T7958] Node 0 DMA32: 1152*4kB (UM) 1296*8kB (UME) 570*16kB (UME) 622*32kB (UME) 190*64kB (UME) 39*128kB (UME) 15*256kB (UME) 15*512kB (UME) 12*1024kB (UME) 4*2048kB (UM) 0*4096kB = 93152kB [ 107.479217][ T7958] Node 1 Normal: 326*4kB (UM) 303*8kB (UM) 324*16kB (UM) 329*32kB (UM) 317*64kB (UME) 283*128kB (UM) 260*256kB (UME) 227*512kB (UM) 187*1024kB (UME) 7*2048kB (UE) 280*4096kB (UM) = 1611440kB [ 107.479338][ T7958] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 107.479346][ T7958] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 107.479354][ T7958] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 107.479361][ T7958] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 107.479369][ T7958] 64878 total pagecache pages [ 107.479373][ T7958] 0 pages in swap cache [ 107.479376][ T7958] Free swap = 124996kB [ 107.479380][ T7958] Total swap = 124996kB [ 107.479384][ T7958] 1048443 pages RAM [ 107.479388][ T7958] 0 pages HighMem/MovableOnly [ 107.479391][ T7958] 291488 pages reserved [ 107.479394][ T7958] 0 pages cma reserved [ 107.493602][ T1045] usb 9-1: USB disconnect, device number 5 [ 107.506455][ T5174] pxrc 9-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 107.842107][ T7972] netlink: 'syz.0.521': attribute type 49 has an invalid length. [ 107.857446][ T7972] bond0: (slave bond_slave_0): Releasing backup interface [ 107.935937][ T7972] bond_slave_0: left promiscuous mode [ 107.935992][ T7972] bond_slave_0: entered promiscuous mode [ 107.936000][ T7972] bond_slave_0: entered allmulticast mode [ 108.260293][ T7997] tipc: Enabling of bearer rejected, failed to enable media [ 108.398558][ T8009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.530'. [ 108.423710][ T8009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.530'. [ 108.717639][ T8023] netlink: 'syz.0.534': attribute type 29 has an invalid length. [ 108.719971][ T8023] netlink: 'syz.0.534': attribute type 29 has an invalid length. [ 108.725746][ T8025] netlink: 'syz.2.535': attribute type 1 has an invalid length. [ 108.741514][ T8025] 8021q: adding VLAN 0 to HW filter on device bond2 [ 108.746779][ T8025] team0: entered allmulticast mode [ 108.746789][ T8025] team_slave_0: entered allmulticast mode [ 108.746797][ T8025] team_slave_1: entered allmulticast mode [ 108.751896][ T8025] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.753497][ T8025] bond2: (slave team0): Enslaving as a backup interface with an up link [ 108.796497][ T8030] ntfs3: unknown option "g2dÁ-«#†û¦º€". Use uid,gid,umask,dmask,fmask,sys_immutable,discard,force,sparse,nohidden,hide_dot_files,windows_names,showmeta,acl,iocharset,prealloc,nocase,delalloc,ads,ugm [ 108.827098][ T8037] ip6t_srh: unknown srh match flags 45F8 [ 108.995732][ T5784] Bluetooth: hci1: command tx timeout [ 109.075610][ T43] kauditd_printk_skb: 24 callbacks suppressed [ 109.075619][ T43] audit: type=1400 audit(1794194846.227:697): avc: denied { create } for pid=8042 comm="syz.2.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 109.076207][ T43] audit: type=1400 audit(1794194846.227:698): avc: denied { ioctl } for pid=8042 comm="syz.2.542" path="socket:[25431]" dev="sockfs" ino=25431 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 109.077462][ T43] audit: type=1400 audit(1794194846.227:699): avc: denied { setopt } for pid=8042 comm="syz.2.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 109.080009][ T43] audit: type=1400 audit(1794194846.227:700): avc: denied { write } for pid=8042 comm="syz.2.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 109.128213][ T8046] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 109.167901][ T8052] fuse: Bad value for 'user_id' [ 109.167911][ T8052] fuse: Bad value for 'user_id' [ 109.169909][ T43] audit: type=1326 audit(1794194846.317:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8051 comm="syz.4.545" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1b98f9fb19 code=0x0 [ 109.487419][ T8059] netlink: 4 bytes leftover after parsing attributes in process `syz.2.547'. [ 109.540989][ T43] audit: type=1400 audit(1794194846.687:702): avc: denied { mount } for pid=8058 comm="syz.2.547" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 109.779919][ T8068] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 109.780183][ T8068] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 109.780242][ T8068] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 109.784610][ T8068] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 110.020996][ T8075] FAULT_INJECTION: forcing a failure. [ 110.020996][ T8075] name failslab, interval 1, probability 0, space 0, times 0 [ 110.021013][ T8075] CPU: 3 UID: 0 PID: 8075 Comm: syz.4.552 Not tainted syzkaller #0 PREEMPT(full) [ 110.021026][ T8075] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 110.021032][ T8075] Call Trace: [ 110.021036][ T8075] [ 110.021041][ T8075] dump_stack_lvl+0x100/0x190 [ 110.021063][ T8075] should_fail_ex.cold+0x5/0xa [ 110.021080][ T8075] should_failslab+0xc2/0x120 [ 110.021094][ T8075] __kmalloc_cache_noprof+0x91/0x6d0 [ 110.021110][ T8075] ? bpf_prog_stream_init+0x121/0x390 [ 110.021127][ T8075] bpf_prog_stream_init+0x121/0x390 [ 110.021143][ T8075] bpf_prog_load+0xa27/0x2b20 [ 110.021159][ T8075] ? avc_has_perm_noaudit+0x11e/0x470 [ 110.021177][ T8075] ? __pfx_bpf_prog_load+0x10/0x10 [ 110.021205][ T8075] __sys_bpf+0x146f/0x4b60 [ 110.021218][ T8075] ? __pfx___sys_bpf+0x10/0x10 [ 110.021228][ T8075] ? find_held_lock+0x2b/0x80 [ 110.021240][ T8075] ? get_pid_task+0xfc/0x250 [ 110.021250][ T8075] ? get_pid_task+0xfc/0x250 [ 110.021264][ T8075] ? find_held_lock+0x2b/0x80 [ 110.021278][ T8075] ? rcu_read_lock_any_held+0x6a/0x90 [ 110.021291][ T8075] ? find_held_lock+0x2b/0x80 [ 110.021302][ T8075] ? ksys_write+0x190/0x250 [ 110.021313][ T8075] ? ksys_write+0x190/0x250 [ 110.021324][ T8075] ? lock_acquire+0x1d1/0x380 [ 110.021348][ T8075] ? fput+0x7c/0x100 [ 110.021362][ T8075] ? ksys_write+0x1ac/0x250 [ 110.021374][ T8075] ? __x64_sys_bpf+0xce/0x140 [ 110.021384][ T8075] __x64_sys_bpf+0xce/0x140 [ 110.021394][ T8075] ? do_syscall_64+0xae/0x7b0 [ 110.021408][ T8075] do_syscall_64+0x123/0x7b0 [ 110.021421][ T8075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.021433][ T8075] RIP: 0033:0x7f1b98f9fb19 [ 110.021442][ T8075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.021452][ T8075] RSP: 002b:00007f1b99df0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 110.021471][ T8075] RAX: ffffffffffffffda RBX: 00007f1b99225fa0 RCX: 00007f1b98f9fb19 [ 110.021478][ T8075] RDX: 0000000000000048 RSI: 0000200000000540 RDI: 0000000000000005 [ 110.021484][ T8075] RBP: 00007f1b99df0090 R08: 0000000000000000 R09: 0000000000000000 [ 110.021491][ T8075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.021497][ T8075] R13: 00007f1b99226038 R14: 00007f1b99225fa0 R15: 00007ffd8bc15e88 [ 110.021511][ T8075] [ 110.208722][ T43] audit: type=1400 audit(1794194847.357:703): avc: denied { mount } for pid=8080 comm="syz.2.554" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 111.060553][ T43] audit: type=1400 audit(1794194848.207:704): avc: denied { remount } for pid=8102 comm="syz.4.562" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 111.062930][ T8103] netlink: 'syz.4.562': attribute type 4 has an invalid length. [ 111.062941][ T8103] netlink: 5620 bytes leftover after parsing attributes in process `syz.4.562'. [ 111.073879][ T30] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 111.150027][ T43] audit: type=1400 audit(1794194848.297:705): avc: denied { mount } for pid=8105 comm="syz.4.563" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 111.151507][ T43] audit: type=1400 audit(1794194848.297:706): avc: denied { watch watch_reads } for pid=8105 comm="syz.4.563" path="/64/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 111.175969][ T8106] SELinux: DCCP has been removed, pid=8106 comm=syz.4.563 [ 111.196256][ T5494] net_ratelimit: 397 callbacks suppressed [ 111.234674][ T30] usb 11-1: Using ep0 maxpacket: 8 [ 111.235439][ T30] usb 11-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 111.239770][ T30] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 111.239838][ T30] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 111.239855][ T30] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 111.239869][ T30] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 111.239880][ T30] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 111.239911][ T30] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.342765][ T8113] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 111.466144][ T8098] tmpfs: Bad value for 'mpol' [ 111.467189][ T30] usb 11-1: usb_control_msg returned -32 [ 111.467211][ T30] usbtmc 11-1:16.0: can't read capabilities [ 111.794163][ T5791] Bluetooth: hci1: command 0x0c1a tx timeout [ 111.794293][ T5784] Bluetooth: hci4: command 0x040f tx timeout [ 111.947696][ T8098] syz.6.560: attempt to access beyond end of device [ 111.947696][ T8098] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 111.947741][ T8098] gfs2: error -5 reading superblock [ 111.952482][ T5861] usb 11-1: USB disconnect, device number 2 [ 112.299142][ T8166] bond2: (slave team0): Removing an active aggregator [ 112.301172][ T8166] bond2: (slave team0): Releasing backup interface [ 112.347352][ T8166] bond0: (slave bond_slave_0): Releasing backup interface [ 112.378413][ T8166] bond0: (slave bond_slave_1): Releasing backup interface [ 112.415841][ T8166] team_slave_0: left allmulticast mode [ 112.420513][ T8166] team0: Port device team_slave_0 removed [ 112.420989][ T8166] team_slave_1: left allmulticast mode [ 112.428790][ T8166] team0: Port device team_slave_1 removed [ 112.429147][ T8166] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.429158][ T8166] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.433122][ T8166] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.433132][ T8166] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.753778][ C0] e1000e 0000:00:02.0 eth1: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5350 ms [ 112.755981][ T1045] e1000e 0000:00:02.0 eth1: Reset adapter unexpectedly [ 112.883653][ T1045] e1000e 0000:00:02.0: Some CPU C-states have been disabled in order to enable jumbo frames [ 112.986888][ T8192] zero sized request [ 112.988178][ T8192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.578'. [ 113.072109][ T8194] netlink: 12 bytes leftover after parsing attributes in process `syz.6.579'. [ 113.072282][ T8194] 8021q: VLANs not supported on teql0 [ 113.086419][ T8194] futex_wake_op: syz.6.579 tries to shift op by -1; fix this program [ 113.183062][ T8205] netlink: 'syz.6.583': attribute type 1 has an invalid length. [ 113.183084][ T8206] netlink: 'syz.6.583': attribute type 1 has an invalid length. [ 113.219641][ T8209] FAULT_INJECTION: forcing a failure. [ 113.219641][ T8209] name failslab, interval 1, probability 0, space 0, times 0 [ 113.219685][ T8209] CPU: 3 UID: 0 PID: 8209 Comm: syz.0.584 Not tainted syzkaller #0 PREEMPT(full) [ 113.219706][ T8209] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 113.219717][ T8209] Call Trace: [ 113.219731][ T8209] [ 113.219740][ T8209] dump_stack_lvl+0x100/0x190 [ 113.219784][ T8209] should_fail_ex.cold+0x5/0xa [ 113.219821][ T8209] should_failslab+0xc2/0x120 [ 113.219855][ T8209] __kmalloc_node_noprof+0xff/0x870 [ 113.219882][ T8209] ? __get_vm_area_node+0x1ff/0x350 [ 113.219899][ T8209] ? __get_vm_area_node+0x22b/0x350 [ 113.219915][ T8209] ? __vmalloc_node_range_noprof+0x424/0x1440 [ 113.219940][ T8209] __vmalloc_node_range_noprof+0x424/0x1440 [ 113.219962][ T8209] ? kasan_save_track+0x14/0x30 [ 113.219979][ T8209] ? __kasan_kmalloc+0xaa/0xb0 [ 113.219996][ T8209] ? __kvmalloc_node_noprof+0x35b/0x9b0 [ 113.220033][ T8209] ? bpf_prog_calc_tag+0x65/0x380 [ 113.220060][ T8209] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 113.220090][ T8209] ? bpf_prog_calc_tag+0x65/0x380 [ 113.220109][ T8209] __vmalloc_node_noprof+0xad/0xf0 [ 113.220129][ T8209] ? bpf_prog_calc_tag+0x65/0x380 [ 113.220152][ T8209] __vmalloc_noprof+0xa3/0x120 [ 113.220170][ T8209] ? __pfx___vmalloc_noprof+0x10/0x10 [ 113.220191][ T8209] ? add_subprog+0x3aa/0x490 [ 113.220213][ T8209] ? __pfx_bpf_check_btf_info+0x10/0x10 [ 113.220231][ T8209] ? bpf_jmp_offset+0x82/0xf0 [ 113.220258][ T8209] bpf_prog_calc_tag+0x65/0x380 [ 113.220283][ T8209] bpf_check+0x2ea7/0xa0f0 [ 113.220319][ T8209] ? __pfx_bpf_check+0x10/0x10 [ 113.220336][ T8209] ? lock_acquire+0x1d1/0x380 [ 113.220359][ T8209] ? bpf_prog_load+0x1af0/0x2b20 [ 113.220384][ T8209] ? find_held_lock+0x2b/0x80 [ 113.220401][ T8209] ? bpf_prog_load+0x1af0/0x2b20 [ 113.220432][ T8209] ? __asan_memset+0x23/0x50 [ 113.220462][ T8209] ? bpf_prog_load+0x1baf/0x2b20 [ 113.220487][ T8209] bpf_prog_load+0x1baf/0x2b20 [ 113.220512][ T8209] ? avc_has_perm_noaudit+0x11e/0x470 [ 113.220567][ T8209] ? __pfx_bpf_prog_load+0x10/0x10 [ 113.220615][ T8209] __sys_bpf+0x146f/0x4b60 [ 113.220640][ T8209] ? __pfx___sys_bpf+0x10/0x10 [ 113.220657][ T8209] ? find_held_lock+0x2b/0x80 [ 113.220674][ T8209] ? get_pid_task+0xfc/0x250 [ 113.220690][ T8209] ? get_pid_task+0xfc/0x250 [ 113.220715][ T8209] ? find_held_lock+0x2b/0x80 [ 113.220739][ T8209] ? rcu_read_lock_any_held+0x6a/0x90 [ 113.220762][ T8209] ? find_held_lock+0x2b/0x80 [ 113.220780][ T8209] ? ksys_write+0x190/0x250 [ 113.220798][ T8209] ? ksys_write+0x190/0x250 [ 113.220817][ T8209] ? lock_acquire+0x1d1/0x380 [ 113.220856][ T8209] ? fput+0x7c/0x100 [ 113.220880][ T8209] ? ksys_write+0x1ac/0x250 [ 113.220901][ T8209] ? __x64_sys_bpf+0xce/0x140 [ 113.220917][ T8209] __x64_sys_bpf+0xce/0x140 [ 113.220934][ T8209] ? do_syscall_64+0xae/0x7b0 [ 113.220968][ T8209] do_syscall_64+0x123/0x7b0 [ 113.220992][ T8209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.221034][ T8209] RIP: 0033:0x7f4e7a39fb19 [ 113.221049][ T8209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.221066][ T8209] RSP: 002b:00007f4e7b28d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 113.221084][ T8209] RAX: ffffffffffffffda RBX: 00007f4e7a625fa0 RCX: 00007f4e7a39fb19 [ 113.221096][ T8209] RDX: 0000000000000094 RSI: 00002000000002c0 RDI: 0000000000000005 [ 113.221106][ T8209] RBP: 00007f4e7b28d090 R08: 0000000000000000 R09: 0000000000000000 [ 113.221117][ T8209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 113.221128][ T8209] R13: 00007f4e7a626038 R14: 00007f4e7a625fa0 R15: 00007fff57c3fec8 [ 113.221154][ T8209] [ 113.287542][ T8214] netlink: 16 bytes leftover after parsing attributes in process `syz.6.586'. [ 113.589722][ T8231] qrtr: Invalid version 46 [ 113.651051][ T8231] kvm [8230]: vcpu0, guest rIP: 0x912f Unhandled WRMSR(0x11e) = 0xbe702111 [ 113.818707][ T8256] FAULT_INJECTION: forcing a failure. [ 113.818707][ T8256] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 113.818724][ T8256] CPU: 0 UID: 0 PID: 8256 Comm: syz.2.597 Not tainted syzkaller #0 PREEMPT(full) [ 113.818737][ T8256] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 113.818744][ T8256] Call Trace: [ 113.818756][ T8256] [ 113.818760][ T8256] dump_stack_lvl+0x100/0x190 [ 113.818791][ T8256] should_fail_ex.cold+0x5/0xa [ 113.818815][ T8256] should_fail_alloc_page+0xeb/0x140 [ 113.818839][ T8256] prepare_alloc_pages+0x1f0/0x5b0 [ 113.818855][ T8256] __alloc_frozen_pages_noprof+0x1ae/0x31e0 [ 113.818872][ T8256] ? __pfx_get_page_from_freelist+0x10/0x10 [ 113.818893][ T8256] ? rcu_is_watching+0x13/0xc0 [ 113.818906][ T8256] ? trace_mm_page_alloc+0x164/0x1c0 [ 113.818918][ T8256] ? __alloc_frozen_pages_noprof+0x2f1/0x31e0 [ 113.818935][ T8256] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 113.818951][ T8256] ? lock_acquire+0x1d1/0x380 [ 113.818965][ T8256] ? is_bpf_text_address+0x25/0x1a0 [ 113.818980][ T8256] ? find_held_lock+0x2b/0x80 [ 113.818991][ T8256] ? is_bpf_text_address+0x8a/0x1a0 [ 113.819004][ T8256] ? is_bpf_text_address+0x8a/0x1a0 [ 113.819017][ T8256] ? bpf_ksym_find+0x128/0x1c0 [ 113.819032][ T8256] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 113.819049][ T8256] ? kernel_text_address+0x8d/0x100 [ 113.819060][ T8256] ? lock_acquire+0x1d1/0x380 [ 113.819084][ T8256] alloc_pages_bulk_noprof+0x5f0/0x1480 [ 113.819103][ T8256] ? policy_nodemask+0xed/0x5e0 [ 113.819118][ T8256] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 113.819141][ T8256] __kasan_populate_vmalloc+0xf0/0x210 [ 113.819161][ T8256] alloc_vmap_area+0x963/0x2bc0 [ 113.819182][ T8256] ? kasan_save_track+0x14/0x30 [ 113.819193][ T8256] ? __kasan_kmalloc+0xaa/0xb0 [ 113.819203][ T8256] ? __pfx_alloc_vmap_area+0x10/0x10 [ 113.819221][ T8256] ? __get_vm_area_node+0x124/0x350 [ 113.819233][ T8256] __get_vm_area_node+0x1ed/0x350 [ 113.819247][ T8256] __vmalloc_node_range_noprof+0x2ad/0x1440 [ 113.819259][ T8256] ? bpf_prog_calc_tag+0x65/0x380 [ 113.819272][ T8256] ? vsnprintf+0x4c5/0x1300 [ 113.819299][ T8256] ? bpf_prog_calc_tag+0x65/0x380 [ 113.819315][ T8256] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 113.819327][ T8256] ? vscnprintf+0x5b/0x90 [ 113.819339][ T8256] ? bpf_verifier_vlog+0x19d/0x6d0 [ 113.819354][ T8256] ? bpf_prog_calc_tag+0x65/0x380 [ 113.819366][ T8256] __vmalloc_node_noprof+0xad/0xf0 [ 113.819378][ T8256] ? bpf_prog_calc_tag+0x65/0x380 [ 113.819409][ T8256] __vmalloc_noprof+0xa3/0x120 [ 113.819421][ T8256] ? __pfx___vmalloc_noprof+0x10/0x10 [ 113.819435][ T8256] ? __pfx_bpf_check_btf_info+0x10/0x10 [ 113.819446][ T8256] ? bpf_jmp_offset+0x82/0xf0 [ 113.819461][ T8256] bpf_prog_calc_tag+0x65/0x380 [ 113.819477][ T8256] bpf_check+0x2ea7/0xa0f0 [ 113.819498][ T8256] ? __pfx_bpf_check+0x10/0x10 [ 113.819508][ T8256] ? lock_acquire+0x1d1/0x380 [ 113.819521][ T8256] ? bpf_prog_load+0x1af0/0x2b20 [ 113.819537][ T8256] ? find_held_lock+0x2b/0x80 [ 113.819548][ T8256] ? bpf_prog_load+0x1af0/0x2b20 [ 113.819566][ T8256] ? __asan_memset+0x23/0x50 [ 113.819584][ T8256] ? bpf_prog_load+0x1baf/0x2b20 [ 113.819599][ T8256] bpf_prog_load+0x1baf/0x2b20 [ 113.819614][ T8256] ? avc_has_perm_noaudit+0x11e/0x470 [ 113.819652][ T8256] ? __pfx_bpf_prog_load+0x10/0x10 [ 113.819680][ T8256] __sys_bpf+0x146f/0x4b60 [ 113.819693][ T8256] ? __pfx___sys_bpf+0x10/0x10 [ 113.819703][ T8256] ? find_held_lock+0x2b/0x80 [ 113.819714][ T8256] ? get_pid_task+0xfc/0x250 [ 113.819724][ T8256] ? get_pid_task+0xfc/0x250 [ 113.819738][ T8256] ? find_held_lock+0x2b/0x80 [ 113.819752][ T8256] ? rcu_read_lock_any_held+0x6a/0x90 [ 113.819765][ T8256] ? find_held_lock+0x2b/0x80 [ 113.819776][ T8256] ? ksys_write+0x190/0x250 [ 113.819787][ T8256] ? ksys_write+0x190/0x250 [ 113.819797][ T8256] ? lock_acquire+0x1d1/0x380 [ 113.819821][ T8256] ? fput+0x7c/0x100 [ 113.819835][ T8256] ? ksys_write+0x1ac/0x250 [ 113.819848][ T8256] ? __x64_sys_bpf+0xce/0x140 [ 113.819857][ T8256] __x64_sys_bpf+0xce/0x140 [ 113.819868][ T8256] ? do_syscall_64+0xae/0x7b0 [ 113.819881][ T8256] do_syscall_64+0x123/0x7b0 [ 113.819899][ T8256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.819910][ T8256] RIP: 0033:0x7fd86479fb19 [ 113.819920][ T8256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.819930][ T8256] RSP: 002b:00007fd865746028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 113.819944][ T8256] RAX: ffffffffffffffda RBX: 00007fd864a25fa0 RCX: 00007fd86479fb19 [ 113.819951][ T8256] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 113.819958][ T8256] RBP: 00007fd865746090 R08: 0000000000000000 R09: 0000000000000000 [ 113.819964][ T8256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 113.819970][ T8256] R13: 00007fd864a26038 R14: 00007fd864a25fa0 R15: 00007fffa8ff6388 [ 113.819985][ T8256] [ 113.883813][ T5784] Bluetooth: hci1: command 0x0c1a tx timeout [ 113.886615][ T8259] netlink: 'syz.2.598': attribute type 8 has an invalid length. [ 114.031866][ T8272] FAULT_INJECTION: forcing a failure. [ 114.031866][ T8272] name failslab, interval 1, probability 0, space 0, times 0 [ 114.031882][ T8272] CPU: 2 UID: 0 PID: 8272 Comm: syz.2.602 Not tainted syzkaller #0 PREEMPT(full) [ 114.031894][ T8272] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 114.031900][ T8272] Call Trace: [ 114.031905][ T8272] [ 114.031909][ T8272] dump_stack_lvl+0x100/0x190 [ 114.031950][ T8272] should_fail_ex.cold+0x5/0xa [ 114.031969][ T8272] should_failslab+0xc2/0x120 [ 114.031982][ T8272] kmem_cache_alloc_noprof+0x92/0x6a0 [ 114.032005][ T8272] ? current_cpuset_is_being_rebound+0xf6/0x370 [ 114.032021][ T8272] ? sp_alloc+0x27/0x160 [ 114.032039][ T8272] sp_alloc+0x27/0x160 [ 114.032053][ T8272] ? __pfx_shmem_set_policy+0x10/0x10 [ 114.032069][ T8272] mpol_set_shared_policy+0xa5/0x850 [ 114.032087][ T8272] ? __pfx_shmem_set_policy+0x10/0x10 [ 114.032100][ T8272] mbind_range+0x339/0x550 [ 114.032117][ T8272] do_mbind+0x81a/0x1030 [ 114.032135][ T8272] ? __pfx_do_mbind+0x10/0x10 [ 114.032153][ T8272] ? _copy_from_user+0x59/0xd0 [ 114.032182][ T8272] ? __pfx_get_nodes+0x10/0x10 [ 114.032199][ T8272] kernel_mbind+0x1b7/0x200 [ 114.032217][ T8272] ? __pfx_kernel_mbind+0x10/0x10 [ 114.032238][ T8272] do_syscall_64+0x123/0x7b0 [ 114.032254][ T8272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.032266][ T8272] RIP: 0033:0x7fd86479fb19 [ 114.032275][ T8272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.032286][ T8272] RSP: 002b:00007fd865746028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 114.032297][ T8272] RAX: ffffffffffffffda RBX: 00007fd864a25fa0 RCX: 00007fd86479fb19 [ 114.032304][ T8272] RDX: 0000000000000005 RSI: 0000000000600000 RDI: 0000200000000000 [ 114.032310][ T8272] RBP: 00007fd864837b70 R08: 0000000000000008 R09: 0000000000000000 [ 114.032316][ T8272] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 114.032323][ T8272] R13: 00007fd864a26038 R14: 00007fd864a25fa0 R15: 00007fffa8ff6388 [ 114.032338][ T8272] [ 114.089001][ T8274] netlink: 4 bytes leftover after parsing attributes in process `syz.2.604'. [ 114.117990][ T8277] netlink: 'syz.2.605': attribute type 8 has an invalid length. [ 114.207548][ T8286] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 114.241217][ T8286] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 114.241961][ T8286] overlayfs: failed to look up (tracing) for ino (-66) [ 114.355155][ T8291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.609'. [ 114.358082][ T43] kauditd_printk_skb: 31 callbacks suppressed [ 114.358092][ T43] audit: type=1400 audit(1794194851.507:738): avc: denied { setopt } for pid=8288 comm="syz.0.609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 114.362272][ T8294] netlink: 36 bytes leftover after parsing attributes in process `syz.6.611'. [ 114.485088][ T8305] netlink: 48 bytes leftover after parsing attributes in process `syz.0.616'. [ 114.485100][ T8305] IPv6: NLM_F_CREATE should be specified when creating new route [ 114.485421][ T8305] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 114.485430][ T8305] IPv6: NLM_F_CREATE should be set when creating new route [ 114.488571][ T8305] netlink: 8 bytes leftover after parsing attributes in process `syz.0.616'. [ 114.503571][ T8305] 8021q: adding VLAN 0 to HW filter on device bond1 [ 114.562191][ T8310] netlink: 'syz.4.618': attribute type 1 has an invalid length. [ 114.888727][ T5863] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.997371][ T5791] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 115.003916][ T5791] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 115.004734][ T5791] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 115.005921][ T5791] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 115.006464][ T5791] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 115.061362][ T5863] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.181324][ T8325] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 115.181336][ T8325] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 115.181346][ T8325] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x903c instead [ 115.181357][ T8325] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x097a instead [ 115.181366][ T8325] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 115.181375][ T8325] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 115.181383][ T8325] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 115.181394][ T8325] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 115.181411][ T8325] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 115.181429][ T8325] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 115.181438][ T8325] jffs2: Further such events for this erase block will not be printed [ 115.181618][ T8325] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 115.181627][ T8325] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead ** 93 printk messages dropped ** ** 110 printk messages dropped ** ** 135 printk messages dropped ** ** 153 printk messages dropped ** ** 144 printk messages dropped ** ** 140 printk messages dropped ** ** 129 printk messages dropped ** ** 142 printk messages dropped ** ** 134 printk messages dropped ** ** 141 printk messages dropped ** ** 165 printk messages dropped ** ** 123 printk messages dropped ** ** 85 printk messages dropped ** ** 99 printk messages dropped ** ** 85 printk messages dropped ** ** 92 printk messages dropped ** ** 86 printk messages dropped ** ** 92 printk messages dropped ** ** 84 printk messages dropped ** ** 107 printk messages dropped ** ** 88 printk messages dropped ** ** 93 printk messages dropped ** ** 133 printk messages dropped ** ** 137 printk messages dropped ** ** 141 printk messages dropped ** ** 136 printk messages dropped ** ** 153 printk messages dropped ** ** 159 printk messages dropped ** ** 160 printk messages dropped ** ** 149 printk messages dropped ** ** 152 printk messages dropped ** ** 17 printk messages dropped ** [ 115.342479][ T5863] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.443918][ T43] audit: type=1400 audit(1794194852.597:739): avc: denied { write } for pid=8329 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 115.446901][ T8317] rxe_eth0 speed is unknown, defaulting to 1000 [ 115.481287][ T5863] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.514610][ T43] audit: type=1400 audit(1794194852.667:740): avc: denied { write } for pid=8335 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 115.559710][ T8333] FAULT_INJECTION: forcing a failure. [ 115.559710][ T8333] name failslab, interval 1, probability 0, space 0, times 0 [ 115.559723][ T8333] CPU: 1 UID: 0 PID: 8333 Comm: syz.2.623 Not tainted syzkaller #0 PREEMPT(full) [ 115.559736][ T8333] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 115.559744][ T8333] Call Trace: [ 115.559748][ T8333] [ 115.559753][ T8333] dump_stack_lvl+0x100/0x190 [ 115.559775][ T8333] should_fail_ex.cold+0x5/0xa [ 115.559794][ T8333] should_failslab+0xc2/0x120 [ 115.559808][ T8333] __kmalloc_cache_noprof+0x91/0x6d0 [ 115.559823][ T8333] ? inode_doinit_with_dentry+0x70b/0x1340 [ 115.559850][ T8333] ? inode_doinit_with_dentry+0x7b1/0x1340 [ 115.559870][ T8333] inode_doinit_with_dentry+0x7b1/0x1340 [ 115.559890][ T8333] ? inode_set_ctime_current+0x283/0x850 [ 115.559907][ T8333] ? __pfx_inode_doinit_with_dentry+0x10/0x10 [ 115.559925][ T8333] ? __pfx_inode_set_ctime_current+0x10/0x10 [ 115.559941][ T8333] ? new_inode+0x15a/0x1c0 [ 115.559954][ T8333] selinux_d_instantiate+0x26/0x40 [ 115.559969][ T8333] security_d_instantiate+0x14c/0x1b0 [ 115.559982][ T8333] d_make_persistent+0x64/0x180 [ 115.559999][ T8333] __debugfs_create_file+0x261/0x500 [ 115.560034][ T8333] debugfs_create_file_full+0x41/0x60 [ 115.560050][ T8333] kvm_dev_ioctl+0x14d7/0x1ac0 [ 115.560078][ T8333] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 115.560094][ T8333] ? selinux_file_ioctl+0x1e0/0x290 [ 115.560104][ T8333] ? selinux_file_ioctl+0x1e7/0x290 [ 115.560115][ T8333] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 115.560131][ T8333] __x64_sys_ioctl+0x18e/0x210 ** 10 printk messages dropped ** [ 115.560243][ T8333] ** 205 printk messages dropped ** ** 117 printk messages dropped ** ** 136 printk messages dropped ** ** 83 printk messages dropped ** ** 115 printk messages dropped ** ** 110 printk messages dropped ** ** 77 printk messages dropped ** ** 2 printk messages dropped ** ** 111 printk messages dropped ** ** 111 printk messages dropped ** ** 224 printk messages dropped ** ** 190 printk messages dropped ** ** 159 printk messages dropped ** ** 60 printk messages dropped ** ** 184 printk messages dropped ** ** 214 printk messages dropped ** ** 16 printk messages dropped ** [ 115.731593][ T5863] bridge_slave_1: left allmulticast mode [ 115.731606][ T5863] bridge_slave_1: left promiscuous mode [ 115.731708][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.733620][ T5863] bridge_slave_0: left allmulticast mode [ 115.733655][ T5863] bridge_slave_0: left promiscuous mode [ 115.734326][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.841002][ T5863] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 115.876145][ T5863] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.915388][ T5863] bond0 (unregistering): Released all slaves [ 115.945782][ T8346] xfrm0: entered allmulticast mode [ 115.946533][ T8346] team0: Port device xfrm0 added [ 116.000198][ T8352] netlink: 4 bytes leftover after parsing attributes in process `syz.2.628'. [ 116.046116][ T43] audit: type=1400 audit(1794194853.197:742): avc: denied { create } for pid=8353 comm="syz.4.629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=iucv_socket permissive=1 [ 116.077354][ T43] audit: type=1400 audit(1794194853.227:743): avc: denied { write } for pid=8356 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.133756][ T8368] netlink: 24 bytes leftover after parsing attributes in process `syz.2.632'. [ 116.137549][ T43] audit: type=1400 audit(1794194853.287:744): avc: denied { write } for pid=8366 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.190001][ T5494] 8021q: adding VLAN 0 to HW filter on device eth15 [ 116.200401][ T8368] netlink: 28 bytes leftover after parsing attributes in process `syz.2.632'. [ 116.210110][ T8381] FAULT_INJECTION: forcing a failure. [ 116.210110][ T8381] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 116.210126][ T8381] CPU: 3 UID: 0 PID: 8381 Comm: syz.4.635 Not tainted syzkaller #0 PREEMPT(full) [ 116.210138][ T8381] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 116.210144][ T8381] Call Trace: [ 116.210149][ T8381] [ 116.210153][ T8381] dump_stack_lvl+0x100/0x190 [ 116.210174][ T8381] should_fail_ex.cold+0x5/0xa [ 116.210191][ T8381] _copy_from_user+0x2e/0xd0 [ 116.210206][ T8381] bpf_test_init.isra.0+0xaf/0x100 [ 116.210220][ T8381] bpf_prog_test_run_skb+0x48e/0x3560 [ 116.210254][ T8381] ? lock_acquire+0x1d1/0x380 [ 116.210271][ T8381] ? __fget_files+0x34/0x3d0 [ 116.210286][ T8381] ? find_held_lock+0x2b/0x80 [ 116.210298][ T8381] ? __fget_files+0x171/0x3d0 [ 116.210319][ T8381] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 116.210335][ T8381] ? fput+0x7c/0x100 [ 116.210351][ T8381] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 116.210365][ T8381] __sys_bpf+0x1d13/0x4b60 [ 116.210380][ T8381] ? __pfx___sys_bpf+0x10/0x10 [ 116.210392][ T8381] ? find_held_lock+0x2b/0x80 [ 116.210403][ T8381] ? get_pid_task+0xfc/0x250 [ 116.210413][ T8381] ? get_pid_task+0xfc/0x250 [ 116.210427][ T8381] ? find_held_lock+0x2b/0x80 [ 116.210441][ T8381] ? rcu_read_lock_any_held+0x6a/0x90 [ 116.210454][ T8381] ? find_held_lock+0x2b/0x80 [ 116.210465][ T8381] ? ksys_write+0x190/0x250 [ 116.210475][ T8381] ? ksys_write+0x190/0x250 [ 116.210485][ T8381] ? lock_acquire+0x1d1/0x380 [ 116.210509][ T8381] ? fput+0x7c/0x100 [ 116.210523][ T8381] ? ksys_write+0x1ac/0x250 [ 116.210535][ T8381] ? __x64_sys_bpf+0xce/0x140 [ 116.210544][ T8381] __x64_sys_bpf+0xce/0x140 [ 116.210555][ T8381] ? do_syscall_64+0xae/0x7b0 [ 116.210569][ T8381] do_syscall_64+0x123/0x7b0 [ 116.210582][ T8381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.210594][ T8381] RIP: 0033:0x7f1b98f9fb19 [ 116.210604][ T8381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.210614][ T8381] RSP: 002b:00007f1b99df0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 116.210624][ T8381] RAX: ffffffffffffffda RBX: 00007f1b99225fa0 RCX: 00007f1b98f9fb19 [ 116.210631][ T8381] RDX: 0000000000000050 RSI: 0000200000001340 RDI: 000000000000000a [ 116.210638][ T8381] RBP: 00007f1b99df0090 R08: 0000000000000000 R09: 0000000000000000 [ 116.210644][ T8381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.210650][ T8381] R13: 00007f1b99226038 R14: 00007f1b99225fa0 R15: 00007ffd8bc15e88 [ 116.210664][ T8381] [ 116.263762][ T43] audit: type=1400 audit(1794194853.407:745): avc: denied { write } for pid=8382 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.317810][ T43] audit: type=1400 audit(1794194853.467:746): avc: denied { write } for pid=8390 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.331989][ T8317] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.332065][ T8317] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.332164][ T8317] bridge_slave_0: entered allmulticast mode [ 116.332943][ T8317] bridge_slave_0: entered promiscuous mode [ 116.335259][ T8317] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.335334][ T8317] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.335409][ T8317] bridge_slave_1: entered allmulticast mode [ 116.338492][ T8317] bridge_slave_1: entered promiscuous mode [ 116.375590][ T8317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.433736][ C2] net_ratelimit: 707 callbacks suppressed [ 116.434323][ T8317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.473295][ T8403] ip_tables: iptables: counters copy to user failed while replacing table [ 116.481692][ T8403] netlink: 8 bytes leftover after parsing attributes in process `syz.4.639'. [ 116.488054][ T43] audit: type=1400 audit(1794194853.637:747): avc: denied { write } for pid=8400 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.519474][ T8317] team0: Port device team_slave_0 added [ 116.550498][ T8317] team0: Port device team_slave_1 added [ 116.599356][ T8317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.599362][ T8317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.599374][ T8317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.612378][ T5863] hsr_slave_0: left promiscuous mode [ 116.614364][ T5863] hsr_slave_1: left promiscuous mode [ 116.614835][ T5863] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.614845][ T5863] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.618301][ T5863] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.618310][ T5863] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.624438][ T5863] veth1_macvtap: left promiscuous mode [ 116.624514][ T5863] veth0_macvtap: left promiscuous mode [ 116.624557][ T5863] veth1_vlan: left promiscuous mode [ 116.624588][ T5863] veth0_vlan: left promiscuous mode [ 116.768409][ T5863] team0 (unregistering): Port device team_slave_1 removed [ 116.784445][ T5863] team0 (unregistering): Port device team_slave_0 removed [ 116.856861][ T8317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.856867][ T8317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.856879][ T8317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.904419][ T8317] hsr_slave_0: entered promiscuous mode [ 116.904902][ T8317] hsr_slave_1: entered promiscuous mode [ 117.021183][ T8417] netlink: 24 bytes leftover after parsing attributes in process `syz.0.641'. [ 117.051012][ T8417] overlayfs: unescaped trailing colons in lowerdir mount option. [ 117.051629][ T8417] netlink: 'syz.0.641': attribute type 8 has an invalid length. [ 117.073314][ T5494] 8021q: adding VLAN 0 to HW filter on device eth16 [ 117.077452][ T8420] netlink: 4 bytes leftover after parsing attributes in process `syz.0.642'. [ 117.084143][ T5791] Bluetooth: hci1: command tx timeout [ 117.090475][ T8420] input: syz1 as /devices/virtual/input/input17 [ 117.091097][ T8420] input: failed to attach handler leds to device input17, error: -6 [ 117.130380][ T8424] FAULT_INJECTION: forcing a failure. [ 117.130380][ T8424] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 117.130397][ T8424] CPU: 0 UID: 0 PID: 8424 Comm: syz.2.643 Not tainted syzkaller #0 PREEMPT(full) [ 117.130411][ T8424] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 117.130417][ T8424] Call Trace: [ 117.130422][ T8424] [ 117.130426][ T8424] dump_stack_lvl+0x100/0x190 [ 117.130446][ T8424] should_fail_ex.cold+0x5/0xa [ 117.130463][ T8424] _copy_from_user+0x2e/0xd0 [ 117.130478][ T8424] csum_and_copy_from_iter_full+0x21a/0x1fe0 [ 117.130498][ T8424] ? rcu_is_watching+0x13/0xc0 [ 117.130510][ T8424] ? trace_kmalloc+0xeb/0x110 [ 117.130522][ T8424] ? __kasan_kmalloc+0xaa/0xb0 [ 117.130534][ T8424] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 117.130550][ T8424] ? trace_kmem_cache_alloc+0xdd/0x100 [ 117.130561][ T8424] ? __alloc_skb+0x185/0x710 [ 117.130576][ T8424] ? kmalloc_reserve+0xf9/0x350 [ 117.130593][ T8424] ip_generic_getfrag+0x172/0x270 [ 117.130605][ T8424] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 117.130618][ T8424] ? sk_page_frag_refill+0x6c/0x340 [ 117.130631][ T8424] __ip6_append_data+0x29a6/0x4b30 [ 117.130648][ T8424] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 117.130665][ T8424] ? __pfx___ip6_append_data+0x10/0x10 [ 117.130676][ T8424] ? lock_acquire+0x1d1/0x380 [ 117.130690][ T8424] ? do_raw_spin_lock+0x128/0x260 [ 117.130703][ T8424] ip6_append_data+0x10b/0x410 [ 117.130714][ T8424] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 117.130727][ T8424] udpv6_sendmsg+0x836/0x2c20 [ 117.130743][ T8424] ? avc_has_perm_noaudit+0x56/0x470 [ 117.130758][ T8424] ? avc_has_perm_noaudit+0x11e/0x470 [ 117.130773][ T8424] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 117.130787][ T8424] ? avc_has_perm_noaudit+0x145/0x470 [ 117.130803][ T8424] ? __pfx_avc_has_perm+0x10/0x10 [ 117.130823][ T8424] ? __lock_acquire+0x5c0/0x1f40 [ 117.130839][ T8424] ? sock_has_perm+0x254/0x320 [ 117.130863][ T8424] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 117.130879][ T8424] ? inet6_sendmsg+0x105/0x140 [ 117.130895][ T8424] inet6_sendmsg+0x105/0x140 [ 117.130910][ T8424] __sys_sendto+0x36d/0x4e0 [ 117.130923][ T8424] ? __pfx___sys_sendto+0x10/0x10 [ 117.130938][ T8424] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 117.130958][ T8424] ? ksys_write+0x1ac/0x250 [ 117.130969][ T8424] ? __pfx_ksys_write+0x10/0x10 [ 117.130982][ T8424] __x64_sys_sendto+0xe0/0x1c0 [ 117.130993][ T8424] ? do_syscall_64+0xae/0x7b0 [ 117.131005][ T8424] ? lockdep_hardirqs_on+0x7d/0x110 [ 117.131017][ T8424] do_syscall_64+0x123/0x7b0 [ 117.131030][ T8424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.131041][ T8424] RIP: 0033:0x7fd86479fb19 [ 117.131051][ T8424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.131061][ T8424] RSP: 002b:00007fd865746028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 117.131071][ T8424] RAX: ffffffffffffffda RBX: 00007fd864a25fa0 RCX: 00007fd86479fb19 [ 117.131078][ T8424] RDX: 0000000000003000 RSI: 0000200000000b40 RDI: 0000000000000004 [ 117.131084][ T8424] RBP: 00007fd865746090 R08: 0000000000000000 R09: 0000000000000000 [ 117.131090][ T8424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 117.131097][ T8424] R13: 00007fd864a26038 R14: 00007fd864a25fa0 R15: 00007fffa8ff6388 [ 117.131111][ T8424] [ 117.215104][ T8317] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 117.227673][ T8317] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 117.228196][ T8317] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 117.245634][ T8317] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 117.246044][ T8317] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 117.247161][ T8432] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 117.255226][ T8317] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 117.255776][ T8317] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 117.261870][ T8317] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 117.319606][ T8317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.329758][ T8317] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.337927][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.337968][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.349389][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.349435][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.464702][ T5494] 8021q: adding VLAN 0 to HW filter on device eth17 [ 117.554183][ T8462] netlink: 4 bytes leftover after parsing attributes in process `syz.2.650'. [ 117.584739][ T8471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.651'. [ 117.585086][ T8471] netlink: 12 bytes leftover after parsing attributes in process `syz.2.651'. [ 117.591298][ T8317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.597861][ T8471] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 117.597874][ T8471] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 117.599712][ T8471] vhci_hcd vhci_hcd.0: Device attached [ 117.600203][ T8474] vhci_hcd: connection closed [ 117.602615][ T14] vhci_hcd vhci_hcd.2: stop threads [ 117.602628][ T14] vhci_hcd vhci_hcd.2: release socket [ 117.602672][ T14] vhci_hcd vhci_hcd.2: disconnect device [ 117.630483][ T5494] 8021q: adding VLAN 0 to HW filter on device eth18 [ 117.722215][ T8317] veth0_vlan: entered promiscuous mode [ 117.731181][ T8317] veth1_vlan: entered promiscuous mode [ 117.744876][ T8317] veth0_macvtap: entered promiscuous mode [ 117.747908][ T8317] veth1_macvtap: entered promiscuous mode [ 117.754571][ T8317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.763043][ T8317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.784339][ T6827] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.784361][ T6827] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.784378][ T6827] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.784395][ T6827] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.807867][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.807876][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.828789][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.828799][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.892660][ T8443] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input19 [ 118.005204][ T8502] netlink: 88 bytes leftover after parsing attributes in process `syz.7.656'. [ 118.231926][ T8517] syzkaller1: entered promiscuous mode [ 118.231935][ T8517] syzkaller1: entered allmulticast mode [ 118.263650][ T8520] TCP: TCP_TX_DELAY enabled [ 118.322690][ T8522] syzkaller1: entered promiscuous mode [ 118.322703][ T8522] syzkaller1: entered allmulticast mode [ 118.352182][ T8526] netlink: 'syz.7.666': attribute type 10 has an invalid length. [ 118.360765][ T8526] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 118.361830][ T8526] team0: Port device netdevsim1 added [ 118.391830][ T8537] FAULT_INJECTION: forcing a failure. [ 118.391830][ T8537] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 118.391847][ T8537] CPU: 1 UID: 0 PID: 8537 Comm: syz.7.668 Not tainted syzkaller #0 PREEMPT(full) [ 118.391860][ T8537] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 118.391867][ T8537] Call Trace: [ 118.391871][ T8537] [ 118.391875][ T8537] dump_stack_lvl+0x100/0x190 [ 118.391905][ T8537] should_fail_ex.cold+0x5/0xa [ 118.391931][ T8537] _copy_to_user+0x32/0xd0 [ 118.391955][ T8537] bpf_log_attr_finalize+0x169/0x1a0 [ 118.391971][ T8537] ? __pfx_bpf_log_attr_finalize+0x10/0x10 [ 118.391986][ T8537] ? ktime_get+0x22c/0x320 [ 118.392006][ T8537] bpf_check+0x2ad4/0xa0f0 [ 118.392028][ T8537] ? __pfx_bpf_check+0x10/0x10 [ 118.392038][ T8537] ? lock_acquire+0x1d1/0x380 [ 118.392054][ T8537] ? bpf_prog_load+0x1af0/0x2b20 [ 118.392071][ T8537] ? find_held_lock+0x2b/0x80 [ 118.392082][ T8537] ? bpf_prog_load+0x1af0/0x2b20 [ 118.392101][ T8537] ? __asan_memset+0x23/0x50 [ 118.392145][ T8537] ? bpf_prog_load+0x1baf/0x2b20 [ 118.392163][ T8537] bpf_prog_load+0x1baf/0x2b20 [ 118.392180][ T8537] ? avc_has_perm_noaudit+0x11e/0x470 [ 118.392207][ T8537] ? __pfx_bpf_prog_load+0x10/0x10 [ 118.392237][ T8537] __sys_bpf+0x146f/0x4b60 [ 118.392251][ T8537] ? __pfx___sys_bpf+0x10/0x10 [ 118.392261][ T8537] ? find_held_lock+0x2b/0x80 [ 118.392273][ T8537] ? get_pid_task+0xfc/0x250 [ 118.392283][ T8537] ? get_pid_task+0xfc/0x250 [ 118.392298][ T8537] ? find_held_lock+0x2b/0x80 [ 118.392313][ T8537] ? rcu_read_lock_any_held+0x6a/0x90 [ 118.392327][ T8537] ? find_held_lock+0x2b/0x80 [ 118.392338][ T8537] ? ksys_write+0x190/0x250 [ 118.392350][ T8537] ? ksys_write+0x190/0x250 [ 118.392362][ T8537] ? lock_acquire+0x1d1/0x380 [ 118.392403][ T8537] ? fput+0x7c/0x100 [ 118.392424][ T8537] ? ksys_write+0x1ac/0x250 [ 118.392444][ T8537] ? __x64_sys_bpf+0xce/0x140 [ 118.392460][ T8537] __x64_sys_bpf+0xce/0x140 [ 118.392474][ T8537] ? do_syscall_64+0xae/0x7b0 [ 118.392489][ T8537] do_syscall_64+0x123/0x7b0 [ 118.392504][ T8537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.392516][ T8537] RIP: 0033:0x7feae959fb19 [ 118.392527][ T8537] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.392538][ T8537] RSP: 002b:00007feaea455028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 118.392549][ T8537] RAX: ffffffffffffffda RBX: 00007feae9825fa0 RCX: 00007feae959fb19 [ 118.392557][ T8537] RDX: 0000000000000094 RSI: 0000200000000e00 RDI: 0000000000000005 [ 118.392564][ T8537] RBP: 00007feaea455090 R08: 0000000000000000 R09: 0000000000000000 [ 118.392571][ T8537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 118.392577][ T8537] R13: 00007feae9826038 R14: 00007feae9825fa0 R15: 00007ffdaa903cf8 [ 118.392592][ T8537] [ 118.454927][ T8543] FAULT_INJECTION: forcing a failure. [ 118.454927][ T8543] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 118.454945][ T8543] CPU: 1 UID: 0 PID: 8543 Comm: syz.7.671 Not tainted syzkaller #0 PREEMPT(full) [ 118.454961][ T8543] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 118.454968][ T8543] Call Trace: [ 118.454975][ T8543] [ 118.454980][ T8543] dump_stack_lvl+0x100/0x190 [ 118.455003][ T8543] should_fail_ex.cold+0x5/0xa [ 118.455022][ T8543] should_fail_alloc_page+0xeb/0x140 [ 118.455040][ T8543] prepare_alloc_pages+0x1f0/0x5b0 [ 118.455058][ T8543] __alloc_frozen_pages_noprof+0x1ae/0x31e0 [ 118.455076][ T8543] ? lock_acquire+0x1d1/0x380 [ 118.455094][ T8543] ? stack_depot_save_flags+0x4c2/0xa10 [ 118.455112][ T8543] ? mark_held_locks+0x40/0x70 [ 118.455127][ T8543] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 118.455140][ T8543] ? lockdep_hardirqs_on+0x7d/0x110 [ 118.455153][ T8543] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 118.455172][ T8543] ? alloc_vmap_area+0x211d/0x2bc0 [ 118.455189][ T8543] ? kasan_save_stack+0x3f/0x50 [ 118.455201][ T8543] ? kasan_save_stack+0x30/0x50 [ 118.455211][ T8543] ? kasan_save_track+0x14/0x30 [ 118.455222][ T8543] ? kasan_save_free_info+0x3b/0x70 [ 118.455237][ T8543] ? __kasan_slab_free+0x5f/0x80 [ 118.455248][ T8543] ? kmem_cache_free+0x127/0x6c0 [ 118.455263][ T8543] ? alloc_vmap_area+0x211d/0x2bc0 [ 118.455279][ T8543] ? __get_vm_area_node+0x1ed/0x350 [ 118.455289][ T8543] ? __vmalloc_node_range_noprof+0x2ad/0x1440 [ 118.455302][ T8543] ? __vmalloc_node_noprof+0xad/0xf0 [ 118.455313][ T8543] ? __vmalloc_noprof+0xa3/0x120 [ 118.455324][ T8543] ? bpf_prog_calc_tag+0x65/0x380 [ 118.455337][ T8543] ? bpf_check+0x2ea7/0xa0f0 [ 118.455346][ T8543] ? bpf_prog_load+0x1baf/0x2b20 [ 118.455362][ T8543] ? __sys_bpf+0x146f/0x4b60 [ 118.455377][ T8543] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 118.455397][ T8543] ? policy_nodemask+0xed/0x5e0 [ 118.455412][ T8543] alloc_pages_mpol+0x201/0x560 [ 118.455430][ T8543] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 118.455454][ T8543] alloc_pages_noprof+0x1a/0x160 [ 118.455476][ T8543] get_free_pages_noprof+0x10/0xb0 [ 118.455493][ T8543] __kasan_populate_vmalloc+0xa0/0x210 [ 118.455522][ T8543] alloc_vmap_area+0x963/0x2bc0 [ 118.455546][ T8543] ? __pfx_alloc_vmap_area+0x10/0x10 [ 118.455571][ T8543] ? __get_vm_area_node+0x124/0x350 [ 118.455589][ T8543] __get_vm_area_node+0x1ed/0x350 [ 118.455608][ T8543] __vmalloc_node_range_noprof+0x2ad/0x1440 [ 118.455629][ T8543] ? bpf_prog_calc_tag+0x65/0x380 [ 118.455647][ T8543] ? vsnprintf+0x4c5/0x1300 [ 118.455663][ T8543] ? bpf_prog_calc_tag+0x65/0x380 [ 118.455688][ T8543] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 118.455708][ T8543] ? vscnprintf+0x5b/0x90 [ 118.455728][ T8543] ? bpf_verifier_vlog+0x19d/0x6d0 [ 118.455746][ T8543] ? bpf_prog_calc_tag+0x65/0x380 [ 118.455759][ T8543] __vmalloc_node_noprof+0xad/0xf0 [ 118.455772][ T8543] ? bpf_prog_calc_tag+0x65/0x380 [ 118.455786][ T8543] __vmalloc_noprof+0xa3/0x120 [ 118.455798][ T8543] ? __pfx___vmalloc_noprof+0x10/0x10 [ 118.455813][ T8543] ? __pfx_bpf_check_btf_info+0x10/0x10 [ 118.455823][ T8543] ? bpf_jmp_offset+0x82/0xf0 [ 118.455839][ T8543] bpf_prog_calc_tag+0x65/0x380 [ 118.455854][ T8543] bpf_check+0x2ea7/0xa0f0 [ 118.455874][ T8543] ? __pfx_bpf_check+0x10/0x10 [ 118.455883][ T8543] ? lock_acquire+0x1d1/0x380 [ 118.455897][ T8543] ? bpf_prog_load+0x1af0/0x2b20 [ 118.455917][ T8543] ? find_held_lock+0x2b/0x80 [ 118.455929][ T8543] ? bpf_prog_load+0x1af0/0x2b20 [ 118.455946][ T8543] ? __asan_memset+0x23/0x50 [ 118.455964][ T8543] ? bpf_prog_load+0x1baf/0x2b20 [ 118.455979][ T8543] bpf_prog_load+0x1baf/0x2b20 [ 118.455994][ T8543] ? avc_has_perm_noaudit+0x11e/0x470 [ 118.456011][ T8543] ? __pfx_bpf_prog_load+0x10/0x10 [ 118.456038][ T8543] __sys_bpf+0x146f/0x4b60 [ 118.456051][ T8543] ? __pfx___sys_bpf+0x10/0x10 [ 118.456061][ T8543] ? find_held_lock+0x2b/0x80 [ 118.456072][ T8543] ? get_pid_task+0xfc/0x250 [ 118.456081][ T8543] ? get_pid_task+0xfc/0x250 [ 118.456095][ T8543] ? find_held_lock+0x2b/0x80 [ 118.456109][ T8543] ? rcu_read_lock_any_held+0x6a/0x90 [ 118.456122][ T8543] ? find_held_lock+0x2b/0x80 [ 118.456133][ T8543] ? ksys_write+0x190/0x250 [ 118.456143][ T8543] ? ksys_write+0x190/0x250 [ 118.456154][ T8543] ? lock_acquire+0x1d1/0x380 [ 118.456177][ T8543] ? fput+0x7c/0x100 [ 118.456190][ T8543] ? ksys_write+0x1ac/0x250 [ 118.456202][ T8543] ? __x64_sys_bpf+0xce/0x140 [ 118.456212][ T8543] __x64_sys_bpf+0xce/0x140 [ 118.456222][ T8543] ? do_syscall_64+0xae/0x7b0 [ 118.456235][ T8543] do_syscall_64+0x123/0x7b0 [ 118.456248][ T8543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.456260][ T8543] RIP: 0033:0x7feae959fb19 [ 118.456270][ T8543] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.456281][ T8543] RSP: 002b:00007feaea455028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 118.456291][ T8543] RAX: ffffffffffffffda RBX: 00007feae9825fa0 RCX: 00007feae959fb19 [ 118.456298][ T8543] RDX: 0000000000000094 RSI: 0000200000000780 RDI: 0000000000000005 [ 118.456304][ T8543] RBP: 00007feaea455090 R08: 0000000000000000 R09: 0000000000000000 [ 118.456310][ T8543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 118.456316][ T8543] R13: 00007feae9826038 R14: 00007feae9825fa0 R15: 00007ffdaa903cf8 [ 118.456330][ T8543] [ 118.456345][ T8543] warn_alloc: 2 callbacks suppressed [ 118.456350][ T8543] syz.7.671: vmalloc error: size 128, align 0x1, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 118.456380][ T8543] CPU: 1 UID: 0 PID: 8543 Comm: syz.7.671 Not tainted syzkaller #0 PREEMPT(full) [ 118.456391][ T8543] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 118.456397][ T8543] Call Trace: [ 118.456401][ T8543] [ 118.456405][ T8543] dump_stack_lvl+0x100/0x190 [ 118.456421][ T8543] warn_alloc.cold+0x9e/0xb2 [ 118.456446][ T8543] ? __pfx_warn_alloc+0x10/0x10 [ 118.456460][ T8543] ? lockdep_hardirqs_on+0x7d/0x110 [ 118.456474][ T8543] ? __get_vm_area_node+0x2f0/0x350 [ 118.456487][ T8543] ? __get_vm_area_node+0x22b/0x350 [ 118.456501][ T8543] __vmalloc_node_range_noprof+0xdc6/0x1440 [ 118.456513][ T8543] ? vsnprintf+0x4c5/0x1300 [ 118.456528][ T8543] ? bpf_prog_calc_tag+0x65/0x380 [ 118.456543][ T8543] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 118.456556][ T8543] ? vscnprintf+0x5b/0x90 [ 118.456567][ T8543] ? bpf_verifier_vlog+0x19d/0x6d0 [ 118.456581][ T8543] ? bpf_prog_calc_tag+0x65/0x380 [ 118.456593][ T8543] __vmalloc_node_noprof+0xad/0xf0 [ 118.456605][ T8543] ? bpf_prog_calc_tag+0x65/0x380 [ 118.456618][ T8543] __vmalloc_noprof+0xa3/0x120 [ 118.456630][ T8543] ? __pfx___vmalloc_noprof+0x10/0x10 [ 118.456644][ T8543] ? __pfx_bpf_check_btf_info+0x10/0x10 [ 118.456654][ T8543] ? bpf_jmp_offset+0x82/0xf0 [ 118.456669][ T8543] bpf_prog_calc_tag+0x65/0x380 [ 118.456684][ T8543] bpf_check+0x2ea7/0xa0f0 [ 118.456720][ T8543] ? __pfx_bpf_check+0x10/0x10 [ 118.456732][ T8543] ? lock_acquire+0x1d1/0x380 [ 118.456746][ T8543] ? bpf_prog_load+0x1af0/0x2b20 [ 118.456762][ T8543] ? find_held_lock+0x2b/0x80 [ 118.456772][ T8543] ? bpf_prog_load+0x1af0/0x2b20 [ 118.456790][ T8543] ? __asan_memset+0x23/0x50 [ 118.456808][ T8543] ? bpf_prog_load+0x1baf/0x2b20 [ 118.456823][ T8543] bpf_prog_load+0x1baf/0x2b20 [ 118.456838][ T8543] ? avc_has_perm_noaudit+0x11e/0x470 [ 118.456855][ T8543] ? __pfx_bpf_prog_load+0x10/0x10 [ 118.456882][ T8543] __sys_bpf+0x146f/0x4b60 [ 118.456896][ T8543] ? __pfx___sys_bpf+0x10/0x10 [ 118.456909][ T8543] ? find_held_lock+0x2b/0x80 [ 118.456920][ T8543] ? get_pid_task+0xfc/0x250 [ 118.456929][ T8543] ? get_pid_task+0xfc/0x250 [ 118.456943][ T8543] ? find_held_lock+0x2b/0x80 [ 118.456957][ T8543] ? rcu_read_lock_any_held+0x6a/0x90 [ 118.456969][ T8543] ? find_held_lock+0x2b/0x80 [ 118.456980][ T8543] ? ksys_write+0x190/0x250 [ 118.456990][ T8543] ? ksys_write+0x190/0x250 [ 118.457001][ T8543] ? lock_acquire+0x1d1/0x380 [ 118.457024][ T8543] ? fput+0x7c/0x100 [ 118.457037][ T8543] ? ksys_write+0x1ac/0x250 [ 118.457049][ T8543] ? __x64_sys_bpf+0xce/0x140 [ 118.457059][ T8543] __x64_sys_bpf+0xce/0x140 [ 118.457069][ T8543] ? do_syscall_64+0xae/0x7b0 [ 118.457082][ T8543] do_syscall_64+0x123/0x7b0 [ 118.457095][ T8543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.457106][ T8543] RIP: 0033:0x7feae959fb19 [ 118.457114][ T8543] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.457124][ T8543] RSP: 002b:00007feaea455028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 118.457133][ T8543] RAX: ffffffffffffffda RBX: 00007feae9825fa0 RCX: 00007feae959fb19 [ 118.457140][ T8543] RDX: 0000000000000094 RSI: 0000200000000780 RDI: 0000000000000005 [ 118.457146][ T8543] RBP: 00007feaea455090 R08: 0000000000000000 R09: 0000000000000000 [ 118.457152][ T8543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 118.457158][ T8543] R13: 00007feae9826038 R14: 00007feae9825fa0 R15: 00007ffdaa903cf8 [ 118.457172][ T8543] [ 118.458670][ T8543] Mem-Info: [ 118.458680][ T8543] active_anon:11853 inactive_anon:0 isolated_anon:0 [ 118.458680][ T8543] active_file:0 inactive_file:64415 isolated_file:0 [ 118.458680][ T8543] unevictable:1000 dirty:348 writeback:0 [ 118.458680][ T8543] slab_reclaimable:13131 slab_unreclaimable:72621 [ 118.458680][ T8543] mapped:25528 shmem:1568 pagetables:4021 [ 118.458680][ T8543] sec_pagetables:299 bounce:0 [ 118.458680][ T8543] kernel_misc_reclaimable:0 [ 118.458680][ T8543] free:421632 free_pcp:17749 free_cma:0 [ 118.458706][ T8543] Node 0 active_anon:47064kB inactive_anon:0kB active_file:0kB inactive_file:257440kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:102112kB dirty:1392kB writeback:0kB shmem:4272kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15424kB pagetables:7464kB sec_pagetables:1196kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 118.458734][ T8543] Node 1 active_anon:348kB inactive_anon:0kB active_file:0kB inactive_file:220kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:160kB pagetables:8620kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 118.458767][ T8543] Node 0 DMA free:15192kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:68kB local_pcp:0kB free_cma:0kB [ 118.458796][ T8543] lowmem_reserve[]: 0 1201 1201 1201 1201 [ 118.458815][ T8543] Node 0 DMA32 free:55944kB boost:0kB min:27464kB low:34328kB high:41192kB reserved_highatomic:0kB free_highatomic:0kB active_anon:47064kB inactive_anon:0kB active_file:0kB inactive_file:257440kB unevictable:2000kB writepending:1392kB zspages:0kB present:2080628kB managed:1230580kB mlocked:0kB bounce:0kB free_pcp:41456kB local_pcp:10656kB free_cma:0kB [ 118.458845][ T8543] lowmem_reserve[]: 0 0 0 0 0 [ 118.458863][ T8543] Node 1 Normal free:1615392kB boost:0kB min:39772kB low:49712kB high:59652kB reserved_highatomic:0kB free_highatomic:0kB active_anon:348kB inactive_anon:0kB active_file:0kB inactive_file:220kB unevictable:2000kB writepending:0kB zspages:0kB present:2097152kB managed:1781880kB mlocked:0kB bounce:0kB free_pcp:29472kB local_pcp:11388kB free_cma:0kB [ 118.458892][ T8543] lowmem_reserve[]: 0 0 0 0 0 [ 118.458909][ T8543] Node 0 DMA: 8*4kB (UM) 7*8kB (UM) 12*16kB (U) 8*32kB (U) 11*64kB (UM) 11*128kB (UM) 9*256kB (UM) 8*512kB (UM) 4*1024kB (UM) 1*2048kB (U) 0*4096kB = 15192kB [ 118.458986][ T8543] Node 0 DMA32: 2*4kB (UE) 40*8kB (UME) 92*16kB (UME) 176*32kB (UME) 162*64kB (UME) 48*128kB (UM) 23*256kB (UME) 21*512kB (UME) 7*1024kB (UME) 4*2048kB (M) 0*4096kB = 55944kB [ 118.459061][ T8543] Node 1 Normal: 338*4kB (UM) 337*8kB (UM) 341*16kB (UM) 334*32kB (UM) 315*64kB (UME) 287*128kB (UM) 261*256kB (UME) 228*512kB (UM) 189*1024kB (UME) 7*2048kB (UE) 280*4096kB (UM) = 1615392kB [ 118.459138][ T8543] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 118.459147][ T8543] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 118.459154][ T8543] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 118.459162][ T8543] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 118.459169][ T8543] 65979 total pagecache pages [ 118.459203][ T8543] 0 pages in swap cache [ 118.459209][ T8543] Free swap = 124996kB [ 118.459212][ T8543] Total swap = 124996kB [ 118.459216][ T8543] 1048443 pages RAM [ 118.459220][ T8543] 0 pages HighMem/MovableOnly [ 118.459223][ T8543] 291488 pages reserved [ 118.459227][ T8543] 0 pages cma reserved [ 118.676994][ T8558] rxe_eth0 speed is unknown, defaulting to 1000 [ 118.764017][ T60] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 118.883339][ T8573] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 118.916202][ T60] usb 9-1: New USB device found: idVendor=1e7d, idProduct=2d5a, bcdDevice=0.00 [ 118.917377][ T60] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.917400][ T60] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.917430][ T60] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.919266][ T60] usb 9-1: config 0 descriptor?? [ 119.153804][ T5791] Bluetooth: hci1: command tx timeout [ 119.159897][ T8593] netlink: 'syz.2.687': attribute type 1 has an invalid length. [ 119.173904][ T8593] 8021q: adding VLAN 0 to HW filter on device bond3 [ 119.328266][ T60] savu 0003:1E7D:2D5A.0004: unknown main item tag 0x0 [ 119.328280][ T60] savu 0003:1E7D:2D5A.0004: unknown main item tag 0x0 [ 119.328291][ T60] savu 0003:1E7D:2D5A.0004: unknown main item tag 0x0 [ 119.328303][ T60] savu 0003:1E7D:2D5A.0004: unknown main item tag 0x0 [ 119.328314][ T60] savu 0003:1E7D:2D5A.0004: unknown main item tag 0x0 [ 119.328326][ T60] savu 0003:1E7D:2D5A.0004: unknown main item tag 0x0 [ 119.328337][ T60] savu 0003:1E7D:2D5A.0004: unknown main item tag 0x0 [ 119.328348][ T60] savu 0003:1E7D:2D5A.0004: unknown main item tag 0x0 [ 119.328360][ T60] savu 0003:1E7D:2D5A.0004: unknown main item tag 0x0 [ 119.328371][ T60] savu 0003:1E7D:2D5A.0004: unknown main item tag 0x0 [ 119.333961][ T8550] kernel profiling enabled (shift: 7) [ 119.340511][ T60] savu 0003:1E7D:2D5A.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 119.411247][ T43] kauditd_printk_skb: 26 callbacks suppressed [ 119.411257][ T43] audit: type=1400 audit(1794194856.557:774): avc: denied { watch } for pid=8614 comm="syz.0.691" path="/172/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 119.414094][ T43] audit: type=1400 audit(1794194856.567:775): avc: denied { watch_reads } for pid=8614 comm="syz.0.691" path="/172/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 119.415114][ T8615] overlayfs: workdir and upperdir must reside under the same mount [ 119.415197][ T43] audit: type=1400 audit(1794194856.567:776): avc: denied { mounton } for pid=8614 comm="syz.0.691" path="/172/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 119.489854][ T43] audit: type=1400 audit(1794194856.637:777): avc: denied { accept } for pid=8617 comm="syz.2.692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 119.498747][ T43] audit: type=1400 audit(1794194856.647:778): avc: denied { write } for pid=8616 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 119.540908][ T8623] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 9 (only 8 groups) [ 119.555745][ T6891] usb 9-1: USB disconnect, device number 6 [ 119.557649][ T43] audit: type=1400 audit(1794194856.707:779): avc: denied { write } for pid=8626 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 119.798447][ T8633] kvm: pic: non byte write [ 119.806702][ T8633] syz.2.695 (pid 8633) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 119.808499][ T8633] fscrypt: AES-128-CBC-CTS using implementation "cts-cbc-aes-lib" [ 119.882451][ T8633] fscrypt: AES-128-CBC-ESSIV using blk-crypto-fallback [ 120.103335][ T8645] FAULT_INJECTION: forcing a failure. [ 120.103335][ T8645] name failslab, interval 1, probability 0, space 0, times 0 [ 120.103352][ T8645] CPU: 1 UID: 0 PID: 8645 Comm: syz.7.699 Tainted: G L syzkaller #0 PREEMPT(full) [ 120.103366][ T8645] Tainted: [L]=SOFTLOCKUP [ 120.103370][ T8645] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 120.103377][ T8645] Call Trace: [ 120.103385][ T8645] [ 120.103390][ T8645] dump_stack_lvl+0x100/0x190 [ 120.103420][ T8645] should_fail_ex.cold+0x5/0xa [ 120.103445][ T8645] should_failslab+0xc2/0x120 [ 120.103467][ T8645] __kmalloc_cache_noprof+0x91/0x6d0 [ 120.103484][ T8645] ? bpf_prog_stream_init+0x121/0x390 [ 120.103501][ T8645] bpf_prog_stream_init+0x121/0x390 [ 120.103517][ T8645] bpf_prog_load+0xa27/0x2b20 [ 120.103533][ T8645] ? avc_has_perm_noaudit+0x11e/0x470 [ 120.103569][ T8645] ? __pfx_bpf_prog_load+0x10/0x10 [ 120.103597][ T8645] __sys_bpf+0x146f/0x4b60 [ 120.103611][ T8645] ? __pfx___sys_bpf+0x10/0x10 [ 120.103621][ T8645] ? find_held_lock+0x2b/0x80 [ 120.103632][ T8645] ? get_pid_task+0xfc/0x250 [ 120.103641][ T8645] ? get_pid_task+0xfc/0x250 [ 120.103656][ T8645] ? find_held_lock+0x2b/0x80 [ 120.103686][ T8645] ? rcu_read_lock_any_held+0x6a/0x90 [ 120.103702][ T8645] ? find_held_lock+0x2b/0x80 [ 120.103713][ T8645] ? ksys_write+0x190/0x250 [ 120.103724][ T8645] ? ksys_write+0x190/0x250 [ 120.103735][ T8645] ? lock_acquire+0x1d1/0x380 [ 120.103759][ T8645] ? fput+0x7c/0x100 [ 120.103772][ T8645] ? ksys_write+0x1ac/0x250 [ 120.103785][ T8645] ? __x64_sys_bpf+0xce/0x140 [ 120.103794][ T8645] __x64_sys_bpf+0xce/0x140 [ 120.103805][ T8645] ? do_syscall_64+0xae/0x7b0 [ 120.103829][ T8645] do_syscall_64+0x123/0x7b0 [ 120.103842][ T8645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.103854][ T8645] RIP: 0033:0x7feae959fb19 [ 120.103864][ T8645] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.103874][ T8645] RSP: 002b:00007feaea455028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 120.103885][ T8645] RAX: ffffffffffffffda RBX: 00007feae9825fa0 RCX: 00007feae959fb19 [ 120.103892][ T8645] RDX: 0000000000000048 RSI: 0000200000000540 RDI: 0000000000000005 [ 120.103898][ T8645] RBP: 00007feaea455090 R08: 0000000000000000 R09: 0000000000000000 [ 120.103905][ T8645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.103911][ T8645] R13: 00007feae9826038 R14: 00007feae9825fa0 R15: 00007ffdaa903cf8 [ 120.103930][ T8645] [ 120.112812][ T8647] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 120.113270][ T43] audit: type=1400 audit(1794194857.257:780): avc: denied { write } for pid=8646 comm="syz.4.698" name="md4" dev="devtmpfs" ino=2938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 120.143629][ T43] audit: type=1404 audit(1794194857.287:781): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 120.154895][ T8647] md: array md4 already has disks! [ 120.155497][ T43] audit: type=1400 audit(1794194857.307:782): avc: denied { ioctl } for pid=8646 comm="syz.4.698" path="/dev/md4" dev="devtmpfs" ino=2938 ioctlcmd=0x40140921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 120.155886][ T43] audit: type=1400 audit(1794194857.307:783): avc: denied { ioctl } for pid=8646 comm="syz.4.698" path="/dev/md4" dev="devtmpfs" ino=2938 ioctlcmd=0x40140921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 120.485476][ T8671] kAFS: No cell specified [ 120.515951][ T5791] Bluetooth: hci4: unexpected event for opcode 0x2040 [ 120.538390][ T8675] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 120.604444][ T8681] netlink: 'syz.7.713': attribute type 10 has an invalid length. [ 120.609690][ T8681] team0: Port device netdevsim1 removed [ 120.611519][ T8681] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 120.615127][ T8681] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 120.640753][ T8675] md/raid1:md0: active with 1 out of 2 mirrors [ 120.641122][ T8675] md0: detected capacity change from 0 to 4096 [ 120.724819][ T8689] FAULT_INJECTION: forcing a failure. [ 120.724819][ T8689] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 120.724838][ T8689] CPU: 0 UID: 0 PID: 8689 Comm: syz.7.716 Tainted: G L syzkaller #0 PREEMPT(full) [ 120.724853][ T8689] Tainted: [L]=SOFTLOCKUP [ 120.724858][ T8689] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 120.724864][ T8689] Call Trace: [ 120.724868][ T8689] [ 120.724873][ T8689] dump_stack_lvl+0x100/0x190 [ 120.724895][ T8689] should_fail_ex.cold+0x5/0xa [ 120.724912][ T8689] should_fail_alloc_page+0xeb/0x140 [ 120.724927][ T8689] prepare_alloc_pages+0x1f0/0x5b0 [ 120.724942][ T8689] __alloc_frozen_pages_noprof+0x1ae/0x31e0 [ 120.724959][ T8689] ? __pfx_get_page_from_freelist+0x10/0x10 [ 120.724975][ T8689] ? rcu_is_watching+0x13/0xc0 [ 120.724987][ T8689] ? trace_mm_page_alloc+0x164/0x1c0 [ 120.725000][ T8689] ? __alloc_frozen_pages_noprof+0x2f1/0x31e0 [ 120.725018][ T8689] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 120.725037][ T8689] ? stack_trace_save+0x8e/0xc0 [ 120.725051][ T8689] ? __pfx_stack_trace_save+0x10/0x10 [ 120.725066][ T8689] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 120.725085][ T8689] ? __kasan_slab_alloc+0x89/0x90 [ 120.725097][ T8689] ? kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 120.725113][ T8689] ? alloc_vmap_area+0x643/0x2bc0 [ 120.725129][ T8689] ? __get_vm_area_node+0x1ed/0x350 [ 120.725138][ T8689] ? __vmalloc_node_range_noprof+0x2ad/0x1440 [ 120.725150][ T8689] ? __vmalloc_node_noprof+0xad/0xf0 [ 120.725161][ T8689] ? __vmalloc_noprof+0xa3/0x120 [ 120.725172][ T8689] ? bpf_prog_calc_tag+0x65/0x380 [ 120.725184][ T8689] ? bpf_check+0x2ea7/0xa0f0 [ 120.725193][ T8689] ? bpf_prog_load+0x1baf/0x2b20 [ 120.725208][ T8689] ? __sys_bpf+0x146f/0x4b60 [ 120.725217][ T8689] ? __x64_sys_bpf+0xce/0x140 [ 120.725226][ T8689] ? do_syscall_64+0x123/0x7b0 [ 120.725244][ T8689] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.725259][ T8689] alloc_pages_bulk_noprof+0x5f0/0x1480 [ 120.725278][ T8689] ? policy_nodemask+0xed/0x5e0 [ 120.725293][ T8689] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 120.725317][ T8689] __kasan_populate_vmalloc+0xf0/0x210 [ 120.725337][ T8689] alloc_vmap_area+0x963/0x2bc0 [ 120.725358][ T8689] ? kasan_save_track+0x14/0x30 [ 120.725369][ T8689] ? __kasan_kmalloc+0xaa/0xb0 [ 120.725379][ T8689] ? __pfx_alloc_vmap_area+0x10/0x10 [ 120.725397][ T8689] ? __get_vm_area_node+0x124/0x350 [ 120.725410][ T8689] __get_vm_area_node+0x1ed/0x350 [ 120.725423][ T8689] __vmalloc_node_range_noprof+0x2ad/0x1440 [ 120.725436][ T8689] ? bpf_prog_calc_tag+0x65/0x380 [ 120.725448][ T8689] ? kasan_save_stack+0x3f/0x50 [ 120.725459][ T8689] ? kasan_save_stack+0x30/0x50 [ 120.725468][ T8689] ? kasan_save_track+0x14/0x30 [ 120.725479][ T8689] ? __kasan_kmalloc+0xaa/0xb0 [ 120.725488][ T8689] ? __kvmalloc_node_noprof+0x35b/0x9b0 [ 120.725504][ T8689] ? bpf_check+0x1fa5/0xa0f0 [ 120.725513][ T8689] ? bpf_prog_load+0x1baf/0x2b20 [ 120.725528][ T8689] ? __sys_bpf+0x146f/0x4b60 [ 120.725538][ T8689] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.725550][ T8689] ? bpf_prog_calc_tag+0x65/0x380 [ 120.725566][ T8689] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 120.725583][ T8689] ? bpf_prog_calc_tag+0x65/0x380 [ 120.725595][ T8689] __vmalloc_node_noprof+0xad/0xf0 [ 120.725607][ T8689] ? bpf_prog_calc_tag+0x65/0x380 [ 120.725621][ T8689] __vmalloc_noprof+0xa3/0x120 [ 120.725633][ T8689] ? __pfx___vmalloc_noprof+0x10/0x10 [ 120.725645][ T8689] ? add_subprog+0x3aa/0x490 [ 120.725658][ T8689] ? __pfx_bpf_check_btf_info+0x10/0x10 [ 120.725669][ T8689] ? bpf_jmp_offset+0x82/0xf0 [ 120.725685][ T8689] bpf_prog_calc_tag+0x65/0x380 [ 120.725700][ T8689] bpf_check+0x2ea7/0xa0f0 [ 120.725721][ T8689] ? __pfx_bpf_check+0x10/0x10 [ 120.725730][ T8689] ? lock_acquire+0x1d1/0x380 [ 120.725747][ T8689] ? bpf_prog_load+0x1af0/0x2b20 [ 120.725763][ T8689] ? find_held_lock+0x2b/0x80 [ 120.725774][ T8689] ? bpf_prog_load+0x1af0/0x2b20 [ 120.725792][ T8689] ? __asan_memset+0x23/0x50 [ 120.725810][ T8689] ? bpf_prog_load+0x1baf/0x2b20 [ 120.725826][ T8689] bpf_prog_load+0x1baf/0x2b20 [ 120.725841][ T8689] ? avc_has_perm_noaudit+0x11e/0x470 [ 120.725859][ T8689] ? __pfx_bpf_prog_load+0x10/0x10 [ 120.725886][ T8689] __sys_bpf+0x146f/0x4b60 [ 120.725900][ T8689] ? __pfx___sys_bpf+0x10/0x10 [ 120.725909][ T8689] ? find_held_lock+0x2b/0x80 [ 120.725920][ T8689] ? get_pid_task+0xfc/0x250 [ 120.725930][ T8689] ? get_pid_task+0xfc/0x250 [ 120.725944][ T8689] ? find_held_lock+0x2b/0x80 [ 120.725959][ T8689] ? rcu_read_lock_any_held+0x6a/0x90 [ 120.725971][ T8689] ? find_held_lock+0x2b/0x80 [ 120.725982][ T8689] ? ksys_write+0x190/0x250 [ 120.725993][ T8689] ? ksys_write+0x190/0x250 [ 120.726004][ T8689] ? lock_acquire+0x1d1/0x380 [ 120.726027][ T8689] ? fput+0x7c/0x100 [ 120.726041][ T8689] ? ksys_write+0x1ac/0x250 [ 120.726053][ T8689] ? __x64_sys_bpf+0xce/0x140 [ 120.726062][ T8689] __x64_sys_bpf+0xce/0x140 [ 120.726073][ T8689] ? do_syscall_64+0xae/0x7b0 [ 120.726086][ T8689] do_syscall_64+0x123/0x7b0 [ 120.726100][ T8689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.726111][ T8689] RIP: 0033:0x7feae959fb19 [ 120.726121][ T8689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.726132][ T8689] RSP: 002b:00007feaea455028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 120.726143][ T8689] RAX: ffffffffffffffda RBX: 00007feae9825fa0 RCX: 00007feae959fb19 [ 120.726150][ T8689] RDX: 0000000000000094 RSI: 00002000000002c0 RDI: 0000000000000005 [ 120.726156][ T8689] RBP: 00007feaea455090 R08: 0000000000000000 R09: 0000000000000000 [ 120.726163][ T8689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 120.726169][ T8689] R13: 00007feae9826038 R14: 00007feae9825fa0 R15: 00007ffdaa903cf8 [ 120.726183][ T8689] [ 120.727066][ T8675] md0: detected capacity change from 4096 to 0 [ 120.727074][ T8675] md: md0 stopped. [ 120.752566][ T8691] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=262 sclass=netlink_route_socket pid=8691 comm=syz.7.717 [ 121.234011][ T5791] Bluetooth: hci1: command tx timeout [ 121.381944][ T8711] __nla_validate_parse: 5 callbacks suppressed [ 121.381956][ T8711] netlink: 24 bytes leftover after parsing attributes in process `syz.2.724'. [ 121.382075][ T8711] netlink: 24 bytes leftover after parsing attributes in process `syz.2.724'. [ 121.449126][ T8717] FAULT_INJECTION: forcing a failure. [ 121.449126][ T8717] name failslab, interval 1, probability 0, space 0, times 0 [ 121.449147][ T8717] CPU: 2 UID: 0 PID: 8717 Comm: syz.2.726 Tainted: G L syzkaller #0 PREEMPT(full) [ 121.449164][ T8717] Tainted: [L]=SOFTLOCKUP [ 121.449168][ T8717] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 121.449176][ T8717] Call Trace: [ 121.449181][ T8717] [ 121.449186][ T8717] dump_stack_lvl+0x100/0x190 [ 121.449208][ T8717] should_fail_ex.cold+0x5/0xa [ 121.449226][ T8717] should_failslab+0xc2/0x120 [ 121.449240][ T8717] __kmalloc_cache_noprof+0x91/0x6d0 [ 121.449255][ T8717] ? bfq_cpd_alloc+0x96/0x150 [ 121.449284][ T8717] bfq_cpd_alloc+0x96/0x150 [ 121.449301][ T8717] blkcg_css_alloc+0x273/0x8c0 [ 121.449313][ T8717] ? __pfx_bfq_cpd_alloc+0x10/0x10 [ 121.449331][ T8717] cgroup_apply_control_enable+0x602/0xdd0 [ 121.449351][ T8717] ? css_populate_dir+0x233/0x590 [ 121.449366][ T8717] cgroup_mkdir+0x9da/0x13a0 [ 121.449387][ T8717] ? __pfx_cgroup_mkdir+0x10/0x10 [ 121.449404][ T8717] kernfs_iop_mkdir+0x111/0x190 [ 121.449435][ T8717] ? security_inode_mkdir+0xc9/0x2b0 [ 121.449450][ T8717] vfs_mkdir+0x36d/0x8a0 [ 121.449464][ T8717] filename_mkdirat+0x4c4/0x630 [ 121.449481][ T8717] ? __pfx_filename_mkdirat+0x10/0x10 [ 121.449496][ T8717] ? strncpy_from_user+0x19d/0x2d0 [ 121.449516][ T8717] ? do_getname+0x191/0x390 [ 121.449534][ T8717] __x64_sys_mkdirat+0x89/0xc0 [ 121.449549][ T8717] do_syscall_64+0x123/0x7b0 [ 121.449564][ T8717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.449575][ T8717] RIP: 0033:0x7fd86479fb19 [ 121.449585][ T8717] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.449595][ T8717] RSP: 002b:00007fd865746028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 121.449605][ T8717] RAX: ffffffffffffffda RBX: 00007fd864a25fa0 RCX: 00007fd86479fb19 [ 121.449612][ T8717] RDX: 00000000000001ff RSI: 00002000000002c0 RDI: ffffffffffffff9c [ 121.449619][ T8717] RBP: 00007fd864837b70 R08: 0000000000000000 R09: 0000000000000000 [ 121.449626][ T8717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.449633][ T8717] R13: 00007fd864a26038 R14: 00007fd864a25fa0 R15: 00007fffa8ff6388 [ 121.449648][ T8717] [ 121.490752][ T8719] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 121.551837][ T8723] FAULT_INJECTION: forcing a failure. [ 121.551837][ T8723] name failslab, interval 1, probability 0, space 0, times 0 [ 121.551861][ T8723] CPU: 3 UID: 0 PID: 8723 Comm: syz.0.729 Tainted: G L syzkaller #0 PREEMPT(full) [ 121.551884][ T8723] Tainted: [L]=SOFTLOCKUP [ 121.551890][ T8723] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 121.551901][ T8723] Call Trace: [ 121.551907][ T8723] [ 121.551915][ T8723] dump_stack_lvl+0x100/0x190 [ 121.551948][ T8723] should_fail_ex.cold+0x5/0xa [ 121.551976][ T8723] should_failslab+0xc2/0x120 [ 121.551997][ T8723] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 121.552027][ T8723] ? alloc_vmap_area+0x643/0x2bc0 [ 121.552056][ T8723] alloc_vmap_area+0x643/0x2bc0 [ 121.552089][ T8723] ? kasan_save_track+0x14/0x30 [ 121.552107][ T8723] ? __kasan_kmalloc+0xaa/0xb0 [ 121.552150][ T8723] ? __pfx_alloc_vmap_area+0x10/0x10 [ 121.552178][ T8723] ? __get_vm_area_node+0x124/0x350 [ 121.552199][ T8723] __get_vm_area_node+0x1ed/0x350 [ 121.552223][ T8723] __vmalloc_node_range_noprof+0x2ad/0x1440 [ 121.552244][ T8723] ? bpf_prog_calc_tag+0x65/0x380 [ 121.552264][ T8723] ? vsnprintf+0x4c5/0x1300 [ 121.552292][ T8723] ? bpf_prog_calc_tag+0x65/0x380 [ 121.552314][ T8723] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 121.552331][ T8723] ? vscnprintf+0x5b/0x90 [ 121.552348][ T8723] ? bpf_verifier_vlog+0x19d/0x6d0 [ 121.552368][ T8723] ? bpf_prog_calc_tag+0x65/0x380 [ 121.552385][ T8723] __vmalloc_node_noprof+0xad/0xf0 [ 121.552402][ T8723] ? bpf_prog_calc_tag+0x65/0x380 [ 121.552422][ T8723] __vmalloc_noprof+0xa3/0x120 [ 121.552438][ T8723] ? __pfx___vmalloc_noprof+0x10/0x10 [ 121.552457][ T8723] ? __pfx_bpf_check_btf_info+0x10/0x10 [ 121.552472][ T8723] ? bpf_jmp_offset+0x82/0xf0 [ 121.552494][ T8723] bpf_prog_calc_tag+0x65/0x380 [ 121.552517][ T8723] bpf_check+0x2ea7/0xa0f0 [ 121.552550][ T8723] ? __pfx_bpf_check+0x10/0x10 [ 121.552564][ T8723] ? lock_acquire+0x1d1/0x380 [ 121.552583][ T8723] ? bpf_prog_load+0x1af0/0x2b20 [ 121.552605][ T8723] ? find_held_lock+0x2b/0x80 [ 121.552622][ T8723] ? bpf_prog_load+0x1af0/0x2b20 [ 121.552650][ T8723] ? __asan_memset+0x23/0x50 [ 121.552678][ T8723] ? bpf_prog_load+0x1baf/0x2b20 [ 121.552701][ T8723] bpf_prog_load+0x1baf/0x2b20 [ 121.552723][ T8723] ? avc_has_perm_noaudit+0x11e/0x470 [ 121.552748][ T8723] ? __pfx_bpf_prog_load+0x10/0x10 [ 121.552788][ T8723] __sys_bpf+0x146f/0x4b60 [ 121.552809][ T8723] ? __pfx___sys_bpf+0x10/0x10 [ 121.552826][ T8723] ? find_held_lock+0x2b/0x80 [ 121.552841][ T8723] ? get_pid_task+0xfc/0x250 [ 121.552853][ T8723] ? get_pid_task+0xfc/0x250 [ 121.552872][ T8723] ? find_held_lock+0x2b/0x80 [ 121.552894][ T8723] ? rcu_read_lock_any_held+0x6a/0x90 [ 121.552913][ T8723] ? find_held_lock+0x2b/0x80 [ 121.552929][ T8723] ? ksys_write+0x190/0x250 [ 121.552947][ T8723] ? ksys_write+0x190/0x250 [ 121.552963][ T8723] ? lock_acquire+0x1d1/0x380 [ 121.552996][ T8723] ? fput+0x7c/0x100 [ 121.553013][ T8723] ? ksys_write+0x1ac/0x250 [ 121.553032][ T8723] ? __x64_sys_bpf+0xce/0x140 [ 121.553047][ T8723] __x64_sys_bpf+0xce/0x140 [ 121.553063][ T8723] ? do_syscall_64+0xae/0x7b0 [ 121.553084][ T8723] do_syscall_64+0x123/0x7b0 [ 121.553106][ T8723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.553125][ T8723] RIP: 0033:0x7f4e7a39fb19 [ 121.553141][ T8723] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.553158][ T8723] RSP: 002b:00007f4e7b28d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 121.553176][ T8723] RAX: ffffffffffffffda RBX: 00007f4e7a625fa0 RCX: 00007f4e7a39fb19 [ 121.553188][ T8723] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 121.553199][ T8723] RBP: 00007f4e7b28d090 R08: 0000000000000000 R09: 0000000000000000 [ 121.553209][ T8723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 121.553218][ T8723] R13: 00007f4e7a626038 R14: 00007f4e7a625fa0 R15: 00007fff57c3fec8 [ 121.553243][ T8723] [ 121.573925][ T8719] md: could not open device unknown-block(1,4). [ 121.573970][ T8719] md: error, md_import_device() returned -16 [ 121.633781][ C1] net_ratelimit: 723 callbacks suppressed [ 121.670318][ T8734] netlink: 4 bytes leftover after parsing attributes in process `syz.7.732'. [ 121.670378][ T8734] openvswitch: netlink: VXLAN extension message has 8 unknown bytes. [ 121.690814][ T8733] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1541 sclass=netlink_route_socket pid=8733 comm=syz.0.733 [ 121.705697][ T8729] md: md2 stopped. [ 121.729720][ T8737] netlink: 'syz.0.734': attribute type 8 has an invalid length. [ 121.877928][ T8751] netlink: 216 bytes leftover after parsing attributes in process `syz.0.737'. [ 122.018810][ T8759] FAULT_INJECTION: forcing a failure. [ 122.018810][ T8759] name failslab, interval 1, probability 0, space 0, times 0 [ 122.018834][ T8759] CPU: 3 UID: 0 PID: 8759 Comm: syz.4.739 Tainted: G L syzkaller #0 PREEMPT(full) [ 122.018849][ T8759] Tainted: [L]=SOFTLOCKUP [ 122.018853][ T8759] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 122.018859][ T8759] Call Trace: [ 122.018863][ T8759] [ 122.018868][ T8759] dump_stack_lvl+0x100/0x190 [ 122.018896][ T8759] should_fail_ex.cold+0x5/0xa [ 122.018919][ T8759] should_failslab+0xc2/0x120 [ 122.018941][ T8759] __kmalloc_noprof+0xfc/0x840 [ 122.018957][ T8759] ? rcu_is_watching+0x13/0xc0 [ 122.018974][ T8759] ? tomoyo_realpath_from_path+0xb6/0x690 [ 122.018997][ T8759] tomoyo_realpath_from_path+0xb6/0x690 [ 122.019012][ T8759] tomoyo_path_number_perm+0x23c/0x580 [ 122.019027][ T8759] ? tomoyo_path_number_perm+0x22e/0x580 [ 122.019044][ T8759] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 122.019066][ T8759] ? __lock_acquire+0x5c0/0x1f40 [ 122.019087][ T8759] ? __fget_files+0x34/0x3d0 [ 122.019101][ T8759] ? find_held_lock+0x2b/0x80 [ 122.019112][ T8759] ? hook_file_ioctl_common+0x140/0x440 [ 122.019128][ T8759] ? __fget_files+0x21f/0x3d0 [ 122.019144][ T8759] security_file_ioctl+0xd3/0x230 [ 122.019160][ T8759] __x64_sys_ioctl+0xb7/0x210 [ 122.019173][ T8759] do_syscall_64+0x123/0x7b0 [ 122.019192][ T8759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.019203][ T8759] RIP: 0033:0x7f1b98f9fb19 [ 122.019213][ T8759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.019223][ T8759] RSP: 002b:00007f1b99df0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 122.019234][ T8759] RAX: ffffffffffffffda RBX: 00007f1b99225fa0 RCX: 00007f1b98f9fb19 [ 122.019241][ T8759] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 122.019247][ T8759] RBP: 00007f1b99df0090 R08: 0000000000000000 R09: 0000000000000000 [ 122.019253][ T8759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.019260][ T8759] R13: 00007f1b99226038 R14: 00007f1b99225fa0 R15: 00007ffd8bc15e88 [ 122.019278][ T8759] [ 122.019282][ T8759] ERROR: Out of memory at tomoyo_realpath_from_path. [ 122.135481][ T8782] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 122.183880][ T8782] md: array md4 already has disks! [ 122.202534][ T8789] FAULT_INJECTION: forcing a failure. [ 122.202534][ T8789] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.202553][ T8789] CPU: 2 UID: 0 PID: 8789 Comm: syz.0.746 Tainted: G L syzkaller #0 PREEMPT(full) [ 122.202568][ T8789] Tainted: [L]=SOFTLOCKUP [ 122.202572][ T8789] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 122.202578][ T8789] Call Trace: [ 122.202582][ T8789] [ 122.202587][ T8789] dump_stack_lvl+0x100/0x190 [ 122.202608][ T8789] should_fail_ex.cold+0x5/0xa [ 122.202626][ T8789] _copy_from_user+0x2e/0xd0 [ 122.202651][ T8789] ucma_write+0x123/0x330 [ 122.202685][ T8789] ? __pfx_ucma_write+0x10/0x10 [ 122.202701][ T8789] ? bpf_lsm_file_permission+0x9/0x10 [ 122.202717][ T8789] ? security_file_permission+0x76/0x210 [ 122.202729][ T8789] ? rw_verify_area+0xce/0x6d0 [ 122.202752][ T8789] ? __pfx_ucma_write+0x10/0x10 [ 122.202766][ T8789] vfs_writev+0x5ed/0xdd0 [ 122.202780][ T8789] ? __pfx_vfs_writev+0x10/0x10 [ 122.202793][ T8789] ? lock_acquire+0x1d1/0x380 [ 122.202808][ T8789] ? __fget_files+0x34/0x3d0 [ 122.202826][ T8789] ? __fget_files+0x21f/0x3d0 [ 122.202842][ T8789] ? do_writev+0x28a/0x340 [ 122.202851][ T8789] do_writev+0x28a/0x340 [ 122.202861][ T8789] ? __pfx_do_writev+0x10/0x10 [ 122.202875][ T8789] do_syscall_64+0x123/0x7b0 [ 122.202891][ T8789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.202902][ T8789] RIP: 0033:0x7f4e7a39fb19 [ 122.202926][ T8789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.202937][ T8789] RSP: 002b:00007f4e7b28d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 122.202948][ T8789] RAX: ffffffffffffffda RBX: 00007f4e7a625fa0 RCX: 00007f4e7a39fb19 [ 122.202954][ T8789] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 000000000000000f [ 122.202961][ T8789] RBP: 00007f4e7b28d090 R08: 0000000000000000 R09: 0000000000000000 [ 122.202967][ T8789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.202973][ T8789] R13: 00007f4e7a626038 R14: 00007f4e7a625fa0 R15: 00007fff57c3fec8 [ 122.202987][ T8789] [ 122.234152][ T8782] md: invalid raid superblock magic on ram8 [ 122.234161][ T8782] md: ram8 does not have a valid v0.0 superblock, not importing! [ 122.234197][ T8782] md: md_import_device returned -22 [ 122.329381][ T8795] overlayfs: missing 'workdir' [ 122.343973][ T8792] md: md4 stopped. [ 122.361662][ T8797] IPVS: lblc: UDP [fe80::aa]:8080 - no destination available [ 122.388210][ T8799] netlink: 48 bytes leftover after parsing attributes in process `syz.0.750'. [ 122.421266][ T8801] netlink: 68 bytes leftover after parsing attributes in process `syz.0.751'. [ 122.433828][ T8803] team0: Device xfrm0 is of different type [ 122.481655][ T8809] netlink: 12 bytes leftover after parsing attributes in process `syz.4.754'. [ 122.533652][ T8813] netlink: 4 bytes leftover after parsing attributes in process `syz.7.755'. [ 122.649712][ T8821] FAULT_INJECTION: forcing a failure. [ 122.649712][ T8821] name failslab, interval 1, probability 0, space 0, times 0 [ 122.649740][ T8821] CPU: 1 UID: 0 PID: 8821 Comm: syz.2.758 Tainted: G L syzkaller #0 PREEMPT(full) [ 122.649764][ T8821] Tainted: [L]=SOFTLOCKUP [ 122.649771][ T8821] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 122.649782][ T8821] Call Trace: [ 122.649789][ T8821] [ 122.649797][ T8821] dump_stack_lvl+0x100/0x190 [ 122.649832][ T8821] should_fail_ex.cold+0x5/0xa [ 122.649861][ T8821] should_failslab+0xc2/0x120 [ 122.649884][ T8821] __kmalloc_noprof+0xfc/0x840 [ 122.649913][ T8821] ? sk_prot_alloc+0x10b/0x2a0 [ 122.649946][ T8821] sk_prot_alloc+0x10b/0x2a0 [ 122.649974][ T8821] sk_alloc+0x36/0xe80 [ 122.649995][ T8821] bpf_prog_test_run_skb+0x4d2/0x3560 [ 122.650022][ T8821] ? lock_acquire+0x1d1/0x380 [ 122.650044][ T8821] ? __fget_files+0x34/0x3d0 [ 122.650066][ T8821] ? find_held_lock+0x2b/0x80 [ 122.650087][ T8821] ? __fget_files+0x171/0x3d0 [ 122.650114][ T8821] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 122.650139][ T8821] ? fput+0x7c/0x100 [ 122.650181][ T8821] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 122.650204][ T8821] __sys_bpf+0x1d13/0x4b60 [ 122.650259][ T8821] ? __pfx___sys_bpf+0x10/0x10 [ 122.650275][ T8821] ? find_held_lock+0x2b/0x80 [ 122.650293][ T8821] ? get_pid_task+0xfc/0x250 [ 122.650311][ T8821] ? get_pid_task+0xfc/0x250 [ 122.650336][ T8821] ? find_held_lock+0x2b/0x80 [ 122.650360][ T8821] ? rcu_read_lock_any_held+0x6a/0x90 [ 122.650382][ T8821] ? find_held_lock+0x2b/0x80 [ 122.650399][ T8821] ? ksys_write+0x190/0x250 [ 122.650416][ T8821] ? ksys_write+0x190/0x250 [ 122.650434][ T8821] ? lock_acquire+0x1d1/0x380 [ 122.650479][ T8821] ? fput+0x7c/0x100 [ 122.650502][ T8821] ? ksys_write+0x1ac/0x250 [ 122.650524][ T8821] ? __x64_sys_bpf+0xce/0x140 [ 122.650540][ T8821] __x64_sys_bpf+0xce/0x140 [ 122.650558][ T8821] ? do_syscall_64+0xae/0x7b0 [ 122.650581][ T8821] do_syscall_64+0x123/0x7b0 [ 122.650605][ T8821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.650624][ T8821] RIP: 0033:0x7fd86479fb19 [ 122.650640][ T8821] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.650657][ T8821] RSP: 002b:00007fd865746028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 122.650675][ T8821] RAX: ffffffffffffffda RBX: 00007fd864a25fa0 RCX: 00007fd86479fb19 [ 122.650687][ T8821] RDX: 0000000000000050 RSI: 0000200000001340 RDI: 000000000000000a [ 122.650698][ T8821] RBP: 00007fd865746090 R08: 0000000000000000 R09: 0000000000000000 [ 122.650708][ T8821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.650719][ T8821] R13: 00007fd864a26038 R14: 00007fd864a25fa0 R15: 00007fffa8ff6388 [ 122.650743][ T8821] [ 122.696471][ T8824] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 122.824796][ T8830] md: could not open device unknown-block(1,4). [ 122.824846][ T8830] md: error, md_import_device() returned -16 [ 122.903869][ T8830] md: md2 stopped. [ 122.934494][ T8834] sd 0:0:0:0: PR command failed: 1026 [ 122.934518][ T8834] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 122.934537][ T8834] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 123.314645][ T5791] Bluetooth: hci1: command tx timeout [ 123.406267][ T8840] FAULT_INJECTION: forcing a failure. [ 123.406267][ T8840] name failslab, interval 1, probability 0, space 0, times 0 [ 123.406296][ T8840] CPU: 1 UID: 0 PID: 8840 Comm: syz.4.763 Tainted: G L syzkaller #0 PREEMPT(full) [ 123.406324][ T8840] Tainted: [L]=SOFTLOCKUP [ 123.406330][ T8840] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 123.406340][ T8840] Call Trace: [ 123.406347][ T8840] [ 123.406354][ T8840] dump_stack_lvl+0x100/0x190 [ 123.406385][ T8840] should_fail_ex.cold+0x5/0xa [ 123.406412][ T8840] should_failslab+0xc2/0x120 [ 123.406432][ T8840] __kmalloc_cache_noprof+0x91/0x6d0 [ 123.406456][ T8840] ? sel_netif_sid+0x619/0x910 [ 123.406484][ T8840] sel_netif_sid+0x619/0x910 [ 123.406512][ T8840] selinux_ip_postroute+0xb88/0xdd0 [ 123.406536][ T8840] ? __pfx_selinux_ip_postroute+0x10/0x10 [ 123.406562][ T8840] ? nf_nat_ipv6_fn+0xff/0x2d0 [ 123.406587][ T8840] ? dl_seq_show_v1+0x90/0x4e0 [ 123.406613][ T8840] ? nf_nat_ipv6_out+0x3cd/0x4b0 [ 123.406636][ T8840] nf_hook_slow+0xbf/0x220 [ 123.406661][ T8840] ip6_output+0x608/0xa50 [ 123.406682][ T8840] ? __pfx_ip6_output+0x10/0x10 [ 123.406700][ T8840] ? lock_acquire+0x1d1/0x380 [ 123.406724][ T8840] ? __pfx_ip6_finish_output+0x10/0x10 [ 123.406748][ T8840] ip6_mr_output+0x23a/0x11b0 [ 123.406768][ T8840] ? __pfx_ip6table_mangle_hook+0x10/0x10 [ 123.406795][ T8840] ? __pfx_ip6_mr_output+0x10/0x10 [ 123.406815][ T8840] ? __ip6_local_out+0x4f4/0xaf0 [ 123.406835][ T8840] ? __ip6_local_out+0x4f4/0xaf0 [ 123.406868][ T8840] ? __pfx_dst_output+0x10/0x10 [ 123.406886][ T8840] ? lock_acquire+0x1d1/0x380 [ 123.406906][ T8840] ? ip6_send_skb+0xb9/0x430 [ 123.406924][ T8840] ? __pfx_ip6_mr_output+0x10/0x10 [ 123.406948][ T8840] ? ip6_local_out+0x1ad/0x1f0 [ 123.406984][ T8840] ip6_local_out+0x1ad/0x1f0 [ 123.407007][ T8840] ip6_send_skb+0x112/0x430 [ 123.407028][ T8840] udp_v6_send_skb+0x9b0/0x1380 [ 123.407060][ T8840] udp_v6_push_pending_frames+0x96/0x160 [ 123.407086][ T8840] udpv6_sendmsg+0x1d17/0x2c20 [ 123.407107][ T8840] ? avc_has_perm_noaudit+0x56/0x470 [ 123.407129][ T8840] ? avc_has_perm_noaudit+0x11e/0x470 [ 123.407154][ T8840] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 123.407175][ T8840] ? avc_has_perm_noaudit+0x145/0x470 [ 123.407201][ T8840] ? __pfx_avc_has_perm+0x10/0x10 [ 123.407226][ T8840] ? __lock_acquire+0x5c0/0x1f40 [ 123.407250][ T8840] ? sock_has_perm+0x254/0x320 [ 123.407291][ T8840] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 123.407321][ T8840] ? inet6_sendmsg+0x105/0x140 [ 123.407344][ T8840] inet6_sendmsg+0x105/0x140 [ 123.407368][ T8840] __sys_sendto+0x36d/0x4e0 [ 123.407388][ T8840] ? __pfx___sys_sendto+0x10/0x10 [ 123.407413][ T8840] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 123.407445][ T8840] ? ksys_write+0x1ac/0x250 [ 123.407463][ T8840] ? __pfx_ksys_write+0x10/0x10 [ 123.407482][ T8840] __x64_sys_sendto+0xe0/0x1c0 [ 123.407501][ T8840] ? do_syscall_64+0xae/0x7b0 [ 123.407518][ T8840] ? lockdep_hardirqs_on+0x7d/0x110 [ 123.407531][ T8840] do_syscall_64+0x123/0x7b0 [ 123.407545][ T8840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.407556][ T8840] RIP: 0033:0x7f1b98f9fb19 [ 123.407566][ T8840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.407577][ T8840] RSP: 002b:00007f1b99df0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 123.407588][ T8840] RAX: ffffffffffffffda RBX: 00007f1b99225fa0 RCX: 00007f1b98f9fb19 [ 123.407595][ T8840] RDX: 0000000000003000 RSI: 0000200000000b40 RDI: 0000000000000004 [ 123.407602][ T8840] RBP: 00007f1b99df0090 R08: 0000000000000000 R09: 0000000000000000 [ 123.407608][ T8840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 123.407614][ T8840] R13: 00007f1b99226038 R14: 00007f1b99225fa0 R15: 00007ffd8bc15e88 [ 123.407629][ T8840] [ 123.471797][ T8842] Console: switching to colour dummy device 80x25 [ 123.619953][ T8851] tmpfs: Using encoding : utf8-12.1.0 [ 123.621389][ T8851] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 123.725007][ T8842] ------------[ cut here ]------------ [ 123.725017][ T8842] Memory manager not clean during takedown. [ 123.725022][ T8842] WARNING: drivers/gpu/drm/drm_mm.c:965 at drm_mm_takedown+0x62/0x280, CPU#3: syz.4.764/8842 [ 123.731826][ T8842] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 123.733169][ T8842] CPU: 3 UID: 0 PID: 8842 Comm: syz.4.764 Tainted: G L syzkaller #0 PREEMPT(full) [ 123.736947][ T8842] Tainted: [L]=SOFTLOCKUP [ 123.738387][ T8842] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 123.741526][ T8842] RIP: 0010:drm_mm_takedown+0x62/0x280 [ 123.743274][ T8842] Code: 8b 43 38 48 39 c5 75 16 e8 ab 3b 28 fc 48 83 c4 08 5b 5d 41 5c 41 5d 41 5e c3 cc cc cc cc e8 95 3b 28 fc 48 8d 3d ee eb 8f 0c <67> 48 0f b9 3a 48 c7 c0 80 a4 8f 8e 48 ba 00 00 00 00 00 fc ff df [ 123.749290][ T8842] RSP: 0018:ffffc9000d3ef788 EFLAGS: 00010287 [ 123.751208][ T8842] RAX: 0000000000063ae8 RBX: ffff888029743468 RCX: ffffc9003021c000 [ 123.753704][ T8842] RDX: 0000000000080000 RSI: ffffffff85e6456b RDI: ffffffff92763160 [ 123.756152][ T8842] RBP: ffff8880297434a0 R08: 0000000000000000 R09: 0000000000000000 [ 123.758864][ T8842] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88802905b280 [ 123.761691][ T8842] R13: ffff88802905b298 R14: ffffffff85e51c60 R15: 0000000000000000 [ 123.764504][ T8842] FS: 00007f1b99df06c0(0000) GS:ffff8880d4771000(0000) knlGS:0000000000000000 [ 123.767259][ T8842] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 123.769304][ T8842] CR2: 0000000000000000 CR3: 000000005a96b000 CR4: 0000000000352ef0 [ 123.771833][ T8842] DR0: 0000000000000010 DR1: 00000000fffffffd DR2: 400000000001001d [ 123.774423][ T8842] DR3: fffffffffffffff6 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 123.776869][ T8842] Call Trace: [ 123.777921][ T8842] [ 123.778867][ T8842] ? __pfx_drm_gem_init_release+0x10/0x10 [ 123.780840][ T8842] drm_managed_release+0x1bb/0x540 [ 123.782508][ T8842] ? __pfx_virtio_gpu_release+0x10/0x10 [ 123.784328][ T8842] drm_dev_put.part.0+0xca/0x140 [ 123.785875][ T8842] drm_dev_put+0x1f/0x30 [ 123.787231][ T8842] virtio_dev_remove+0xbf/0x220 [ 123.788758][ T8842] ? __pfx_virtio_dev_remove+0x10/0x10 [ 123.790512][ T8842] device_remove+0xcb/0x180 [ 123.791964][ T8842] device_release_driver_internal+0x441/0x610 [ 123.794159][ T8842] ? driver_release+0x80/0x90 [ 123.795656][ T8842] bus_remove_device+0x2bc/0x560 [ 123.797286][ T8842] ? __pfx_bus_remove_device+0x10/0x10 [ 123.799018][ T8842] ? __pfx_device_remove_attrs+0x10/0x10 [ 123.800784][ T8842] device_del+0x376/0x9b0 [ 123.802185][ T8842] ? __pfx_device_del+0x10/0x10 [ 123.803946][ T8842] ? __pfx___might_resched+0x10/0x10 [ 123.805714][ T8842] device_unregister+0x1d/0xe0 [ 123.807247][ T8842] unregister_virtio_device+0x39/0x60 [ 123.808949][ T8842] virtio_pci_remove+0x7c/0x110 [ 123.810506][ T8842] pci_device_remove+0xb2/0x1d0 [ 123.812116][ T8842] ? __pfx_pci_device_remove+0x10/0x10 [ 123.813924][ T8842] device_remove+0xcb/0x180 [ 123.815389][ T8842] device_release_driver_internal+0x441/0x610 [ 123.817298][ T8842] pci_stop_bus_device+0x120/0x160 [ 123.818915][ T8842] pci_stop_and_remove_bus_device+0x58/0xa0 [ 123.820757][ T8842] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 123.822882][ T8842] remove_store+0x123/0x140 [ 123.824471][ T8842] ? __pfx_remove_store+0x10/0x10 [ 123.826050][ T8842] ? find_held_lock+0x2b/0x80 [ 123.827551][ T8842] ? sysfs_file_kobj+0xe4/0x290 [ 123.829083][ T8842] ? sysfs_file_kobj+0xe4/0x290 [ 123.830633][ T8842] ? __pfx_remove_store+0x10/0x10 [ 123.832255][ T8842] dev_attr_store+0x58/0x80 [ 123.833762][ T8842] ? __pfx_dev_attr_store+0x10/0x10 [ 123.835398][ T8842] sysfs_kf_write+0xf2/0x150 [ 123.836855][ T8842] kernfs_fop_write_iter+0x3e0/0x5f0 [ 123.838526][ T8842] ? __pfx_sysfs_kf_write+0x10/0x10 [ 123.840148][ T8842] vfs_write+0x6af/0x1040 [ 123.841544][ T8842] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 123.843382][ T8842] ? __pfx_vfs_write+0x10/0x10 [ 123.844943][ T8842] ? find_held_lock+0x2b/0x80 [ 123.846429][ T8842] ksys_write+0x12a/0x250 [ 123.847805][ T8842] ? __pfx_ksys_write+0x10/0x10 [ 123.849335][ T8842] do_syscall_64+0x123/0x7b0 [ 123.850799][ T8842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.852720][ T8842] RIP: 0033:0x7f1b98f9fb19 [ 123.854367][ T8842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.860275][ T8842] RSP: 002b:00007f1b99df0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 123.862889][ T8842] RAX: ffffffffffffffda RBX: 00007f1b99225fa0 RCX: 00007f1b98f9fb19 [ 123.865422][ T8842] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000005 [ 123.867880][ T8842] RBP: 00007f1b99037b70 R08: 0000000000000000 R09: 0000000000000000 [ 123.870337][ T8842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.872793][ T8842] R13: 00007f1b99226038 R14: 00007f1b99225fa0 R15: 00007ffd8bc15e88 [ 123.875418][ T8842] [ 123.876436][ T8842] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 123.878688][ T8842] CPU: 3 UID: 0 PID: 8842 Comm: syz.4.764 Tainted: G L syzkaller #0 PREEMPT(full) [ 123.882005][ T8842] Tainted: [L]=SOFTLOCKUP [ 123.883369][ T8842] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 123.886495][ T8842] Call Trace: [ 123.887549][ T8842] [ 123.888486][ T8842] dump_stack_lvl+0x100/0x190 [ 123.889969][ T8842] vpanic+0x2dc/0x6f8 [ 123.891250][ T8842] panic+0xd1/0xe0 [ 123.892431][ T8842] ? __pfx_panic+0x10/0x10 [ 123.893844][ T8842] check_panic_on_warn.cold+0x19/0x34 [ 123.895513][ T8842] ? drm_mm_takedown+0x62/0x280 [ 123.897032][ T8842] __warn.cold+0x191/0x321 [ 123.898426][ T8842] __report_bug+0x30f/0x440 [ 123.899853][ T8842] ? drm_mm_takedown+0x62/0x280 [ 123.901389][ T8842] ? __pfx___report_bug+0x10/0x10 [ 123.902983][ T8842] ? device_remove+0xcb/0x180 [ 123.904463][ T8842] ? device_release_driver_internal+0x441/0x610 [ 123.906400][ T8842] ? pci_stop_bus_device+0x120/0x160 [ 123.908051][ T8842] ? drm_mm_takedown+0x5b/0x280 [ 123.909576][ T8842] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.911513][ T8842] report_bug_entry+0xe2/0x290 [ 123.913016][ T8842] ? drm_mm_takedown+0x62/0x280 [ 123.914545][ T8842] handle_bug+0x1cd/0x2a0 [ 123.915903][ T8842] exc_invalid_op+0x17/0x50 [ 123.917328][ T8842] asm_exc_invalid_op+0x1a/0x20 [ 123.918900][ T8842] RIP: 0010:drm_mm_takedown+0x62/0x280 [ 123.920598][ T8842] Code: 8b 43 38 48 39 c5 75 16 e8 ab 3b 28 fc 48 83 c4 08 5b 5d 41 5c 41 5d 41 5e c3 cc cc cc cc e8 95 3b 28 fc 48 8d 3d ee eb 8f 0c <67> 48 0f b9 3a 48 c7 c0 80 a4 8f 8e 48 ba 00 00 00 00 00 fc ff df [ 123.926546][ T8842] RSP: 0018:ffffc9000d3ef788 EFLAGS: 00010287 [ 123.928426][ T8842] RAX: 0000000000063ae8 RBX: ffff888029743468 RCX: ffffc9003021c000 [ 123.930868][ T8842] RDX: 0000000000080000 RSI: ffffffff85e6456b RDI: ffffffff92763160 [ 123.933330][ T8842] RBP: ffff8880297434a0 R08: 0000000000000000 R09: 0000000000000000 [ 123.935771][ T8842] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88802905b280 [ 123.938215][ T8842] R13: ffff88802905b298 R14: ffffffff85e51c60 R15: 0000000000000000 [ 123.940667][ T8842] ? __pfx_drm_gem_init_release+0x10/0x10 [ 123.942489][ T8842] ? drm_mm_takedown+0x5b/0x280 [ 123.944021][ T8842] ? drm_mm_takedown+0x5b/0x280 [ 123.945546][ T8842] ? __pfx_drm_gem_init_release+0x10/0x10 [ 123.947327][ T8842] drm_managed_release+0x1bb/0x540 [ 123.948935][ T8842] ? __pfx_virtio_gpu_release+0x10/0x10 [ 123.950665][ T8842] drm_dev_put.part.0+0xca/0x140 [ 123.952212][ T8842] drm_dev_put+0x1f/0x30 [ 123.953537][ T8842] virtio_dev_remove+0xbf/0x220 [ 123.955068][ T8842] ? __pfx_virtio_dev_remove+0x10/0x10 [ 123.956748][ T8842] device_remove+0xcb/0x180 [ 123.958180][ T8842] device_release_driver_internal+0x441/0x610 [ 123.960087][ T8842] ? driver_release+0x80/0x90 [ 123.961580][ T8842] bus_remove_device+0x2bc/0x560 [ 123.963450][ T8842] ? __pfx_bus_remove_device+0x10/0x10 [ 123.965304][ T8842] ? __pfx_device_remove_attrs+0x10/0x10 [ 123.967060][ T8842] device_del+0x376/0x9b0 [ 123.968417][ T8842] ? __pfx_device_del+0x10/0x10 [ 123.969939][ T8842] ? __pfx___might_resched+0x10/0x10 [ 123.971614][ T8842] device_unregister+0x1d/0xe0 [ 123.973109][ T8842] unregister_virtio_device+0x39/0x60 [ 123.974787][ T8842] virtio_pci_remove+0x7c/0x110 [ 123.976307][ T8842] pci_device_remove+0xb2/0x1d0 [ 123.977844][ T8842] ? __pfx_pci_device_remove+0x10/0x10 [ 123.979503][ T8842] device_remove+0xcb/0x180 [ 123.980938][ T8842] device_release_driver_internal+0x441/0x610 [ 123.982870][ T8842] pci_stop_bus_device+0x120/0x160 [ 123.984484][ T8842] pci_stop_and_remove_bus_device+0x58/0xa0 [ 123.986336][ T8842] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 123.988352][ T8842] remove_store+0x123/0x140 [ 123.989780][ T8842] ? __pfx_remove_store+0x10/0x10 [ 123.991371][ T8842] ? find_held_lock+0x2b/0x80 [ 123.992842][ T8842] ? sysfs_file_kobj+0xe4/0x290 [ 123.994378][ T8842] ? sysfs_file_kobj+0xe4/0x290 [ 123.995906][ T8842] ? __pfx_remove_store+0x10/0x10 [ 123.997515][ T8842] dev_attr_store+0x58/0x80 [ 123.998967][ T8842] ? __pfx_dev_attr_store+0x10/0x10 [ 124.000594][ T8842] sysfs_kf_write+0xf2/0x150 [ 124.002077][ T8842] kernfs_fop_write_iter+0x3e0/0x5f0 [ 124.003724][ T8842] ? __pfx_sysfs_kf_write+0x10/0x10 [ 124.005343][ T8842] vfs_write+0x6af/0x1040 [ 124.006706][ T8842] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 124.008526][ T8842] ? __pfx_vfs_write+0x10/0x10 [ 124.010032][ T8842] ? find_held_lock+0x2b/0x80 [ 124.011553][ T8842] ksys_write+0x12a/0x250 [ 124.012909][ T8842] ? __pfx_ksys_write+0x10/0x10 [ 124.014482][ T8842] do_syscall_64+0x123/0x7b0 [ 124.015939][ T8842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.017780][ T8842] RIP: 0033:0x7f1b98f9fb19 [ 124.019214][ T8842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.025175][ T8842] RSP: 002b:00007f1b99df0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 124.027753][ T8842] RAX: ffffffffffffffda RBX: 00007f1b99225fa0 RCX: 00007f1b98f9fb19 [ 124.030215][ T8842] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000005 [ 124.032703][ T8842] RBP: 00007f1b99037b70 R08: 0000000000000000 R09: 0000000000000000 [ 124.035167][ T8842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.037609][ T8842] R13: 00007f1b99226038 R14: 00007f1b99225fa0 R15: 00007ffd8bc15e88 [ 124.040077][ T8842] [ 124.041793][ T8842] Kernel Offset: disabled [ 124.043164][ T8842] Rebooting in 86400 seconds..