last executing test programs: 1m17.807871082s ago: executing program 3 (id=2024): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002"], 0x64}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000010000100000000f7ff0000000000000a20000000000a01030000000000000000010000020900010073797a310000000034000000030a01020000000000000000010000000900030073797a310000000008000a40000000040900010073797a31000000002c000000050a0102"], 0xa8}}, 0x8000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0xa4}}, 0x20000000) 1m17.807458709s ago: executing program 3 (id=2025): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), 0xffffffffffffffff) connect$inet(r0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ff07000000ffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newsa={0x14c, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4001, 0x71c, 0x4e23, 0x5, 0xa, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@multicast1, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0x81}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0x3fc, 0xff}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @coaddr={0x14, 0xe, @in=@broadcast}]}, 0x14c}}, 0x844) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) socket$nl_netfilter(0x10, 0x3, 0xc) 1m14.968485126s ago: executing program 3 (id=2032): syz_emit_ethernet(0x46, &(0x7f0000000080)={@multicast, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}}}}}}}}, 0x0) 1m14.962630547s ago: executing program 3 (id=2033): r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0xffffbbff) r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x402000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="00370befe772628764679339375b61b454e4746f4d746b55463acd0de42faa3449e0008e038a36e1d3f48a525f"], 0x10) close_range(r1, r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x0, [{0x0, 0x4d88, 0x6, &(0x7f0000000640)="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"}, {0x0, 0x0, 0x1ff, 0x0}, {0x3, 0x0, 0x100d5b6, 0x0}, {0x2, 0x0, 0xfffffff8, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x7, 0x0}, {0x2, 0x0, 0xa2d, 0x0}, {0x0, 0x0, 0x1, 0x0}, {0x1, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0x1000, 0x0}, {0x3, 0x0, 0x6, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x1545, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40007, 0x0}]}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xffffdffc, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000040)={0x4, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) ioctl$KVM_RUN(r8, 0xae80, 0x0) listen(r5, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000140)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r10, 0x14) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r11, 0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r12, 0x4000000) setsockopt$inet6_tcp_TCP_MD5SIG(r12, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6803e10951cd4b347113e55eb289519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) r13 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r13, 0x0) 1m14.850045892s ago: executing program 3 (id=2037): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000044) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000005480), 0x200202, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r2, 0x80044dff, &(0x7f00000054c0)) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000004c0)={0x0, 0xd, 0xf, 0x8, 0x1ff, 0x13f5, 0xb523, 0x8, {0x0, @in={{0x2, 0x4e21, @rand_addr=0x64010100}}, 0xfffffff9, 0x401, 0x4, 0xe3, 0x2}}, &(0x7f00000005c0)=0xb0) r4 = socket(0x10, 0x803, 0x0) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000040)={'veth1_macvtap\x00', 0xb9}) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = userfaultfd(0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) readv(r5, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/114, 0x72}], 0x1) syz_clone3(&(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$UFFDIO_UNREGISTER(r5, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000140)={r3, 0x6d207ee5}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x2}, 0x2}, 0x1c) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000300)="aa19d7a8b3198faa19d5c115b4d92a72f13640b8b3eaae544fdbc9a8cdc4acde2158c877f2d3716ff047261fe8d403a4774abde8f09893f198642abb80e842bd41faf027b8d705b0be401adc8246fac1", 0x50}], 0x1, 0x0, 0x0, 0x8010}, 0x200448d1) r6 = socket$netlink(0x10, 0x3, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='pvfs2\x00', 0x2004430, 0x0) r7 = openat(0xffffffffffffffff, &(0x7f0000000180)='./proc\x00', 0x228702, 0x20) write(r7, &(0x7f0000000100)='+192.168.1.1', 0xc) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0xf0ffffff, 0x0, 0x20040890}, 0x200080c0) 1m14.628912493s ago: executing program 3 (id=2040): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) connect(0xffffffffffffffff, 0x0, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) write$nci(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="61050103030082"], 0x10e6) 1m12.608206238s ago: executing program 2 (id=2069): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000080)={@multicast, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}}}}}}}}, 0x0) 1m12.469681183s ago: executing program 2 (id=2072): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg$inet(r2, &(0x7f0000001500)=[{{0x0, 0x100000019, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x34000}, {0x0}], 0x2, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40) recvmmsg(r2, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0xfff}], 0x400000000000227, 0x400121a0, 0x0) 1m11.596254229s ago: executing program 2 (id=2088): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000180)=0x200) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) write$dsp(r0, &(0x7f0000000200)="dce480febb0ccd0bcb66ade3495e87b440e5afdc984cc06eb1c91c85a7fec04b2f82e267c1edd1543b79d80c0f949073bdbaa464c040e61ea6e658101100101097a5821b6c0c79d177b96995281707ce6d20a6db", 0x54) write$dsp(r0, &(0x7f0000000080)="cd", 0x1) timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000000c0)={0x2, 0x8000, 0x3, 0x81, r3}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={r3, 0x665}, &(0x7f0000000100)=0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000004992720000000000000a54000000060a0b1600000000000000000200000828000480260001800b0001007470726f787900001400028008000e4000000014080001400000001f090001007379fa30000400000900020073797a3200001100140000001100010000010000000000000000000a"], 0x7c}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) 1m11.466452108s ago: executing program 2 (id=2091): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1c5) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000003c0)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x1}, {0x1fffffff, 0x0, 0x1, 0x1}}], 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r2, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000280)}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)={r3, &(0x7f00000000c0), &(0x7f0000000100)=""/180, 0x4}, 0x20) r5 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x101400) ioctl$BLKBSZSET(r5, 0x40081271, &(0x7f0000000240)=0x100000001) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$FIOCLEX(r4, 0x5451) sendmsg$nl_xfrm(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=@newsa={0x164, 0x10, 0x1, 0x0, 0x25dfdbff, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x33}, @in=@broadcast, {0x2abe9d7c, 0x40000000000000, 0x0, 0x0, 0xfffffffffffffffc, 0x4, 0x0, 0xfffffffffffffffe}, {0x1}, {0x200, 0x0, 0xfffffff7}, 0xfffffffd, 0xfffffffc, 0xa, 0x3, 0x0, 0x28}, [@algo_auth_trunc={0x4c, 0x14, {{'cbcmac(aes)\x00'}}}, @offload={0xc, 0x1c, {0x0, 0x1}}, @encap={0x1c, 0x4, {0x0, 0x4e22, 0x4e24, @in6=@private1={0xfc, 0x1, '\x00', 0x1}}}]}, 0x164}}, 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r7, &(0x7f0000000340)="07000000010001", 0x7) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000200), 0x40, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}]}) chdir(&(0x7f00000001c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r8, &(0x7f0000000600)='sessname=s+ device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x2) 1m11.384251879s ago: executing program 2 (id=2094): setsockopt$sock_int(0xffffffffffffffff, 0x110, 0x7, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket(0x400000000010, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1m11.150596466s ago: executing program 2 (id=2097): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)}, 0x700) 1m11.107968541s ago: executing program 32 (id=2097): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)}, 0x700) 59.525256351s ago: executing program 33 (id=2040): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) connect(0xffffffffffffffff, 0x0, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) write$nci(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="61050103030082"], 0x10e6) 7.07364434s ago: executing program 1 (id=2731): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) accept4$tipc(0xffffffffffffffff, &(0x7f0000000040)=@name, &(0x7f0000000140)=0x10, 0x0) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fanotify_init(0x200, 0x2) fanotify_mark(r3, 0x1, 0x1012, r1, 0x0) write(r2, &(0x7f00000004c0)='g', 0x1) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000140)={0x0, 0x2f, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYRES64=r4], 0x68}, 0x1, 0x0, 0x0, 0xeb68d0083a1ed75c}, 0x20048001) r5 = getpgrp(0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x48, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x15}}, {0x8, 0x2, @remote}}}]}, @CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x408}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x408}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x406c450}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=r8, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c0008"], 0x78}}, 0x0) syz_open_procfs(r5, &(0x7f0000000100)='children\x00') r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/ima/policy\x00', 0x1, 0x0) write$FUSE_INTERRUPT(r9, &(0x7f0000002280)={0x2f, 0xffffffffffffffda}, 0x10) 6.971272363s ago: executing program 1 (id=2733): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x3, 0x55}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd, 0x0, 0x0, 0x5, 0xc, 0x1}) io_uring_enter(r1, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x20}, 0x0) r5 = syz_ublk_setup_io_uring(0x22, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1db}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0, &(0x7f00000004c0)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000980)=@IORING_OP_RECVMSG={0xa, 0x37, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)=[{0x0}], 0x1}, 0x0, 0x100, 0x1, {0x3}}) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x0, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) socket$tipc(0x1e, 0x2, 0x0) 6.923002937s ago: executing program 1 (id=2735): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={{0x14, 0x11}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) 6.819591081s ago: executing program 1 (id=2736): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000611004000000000063000eff000000009500000c00000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) 6.819325382s ago: executing program 1 (id=2737): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') r1 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) readv(r1, &(0x7f0000001a40)=[{&(0x7f0000000080)=""/144, 0x7c}], 0x1) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x383, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r3, 0x0) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0, 0x180) r4 = socket$nl_rdma(0x10, 0x3, 0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002c40), r5) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000002c80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r5, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000000200)=ANY=[@ANYBLOB="017423d6fbdc", @ANYRES16=r6, @ANYBLOB="01002bbd7000ffdbdf256900000008000300", @ANYRES32=r7, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x24004050}, 0x24008004) 6.641603112s ago: executing program 1 (id=2740): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x300, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050026bd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08007700000001000600eb000100000006009800900000000c007d8004000200"], 0x4c}}, 0x0) 6.288592086s ago: executing program 0 (id=2742): r0 = socket$inet(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount$nfs(&(0x7f0000000080)='127.0.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{'addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,soft,timeo=1,retrans=1\x00', 0x5e}]}) accept$inet(r0, 0x0, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x0, [0x3, 0x80000000, 0x5, 0x4, 0x1, 0xfffffffffffffff7]}, &(0x7f0000000240)=0x78) 6.038151103s ago: executing program 0 (id=2743): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="8ef34bb2bac8dd"], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000140)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) 5.967392211s ago: executing program 0 (id=2746): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000100)=0x100000001, 0x4) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000200)={0x7, 0x0, [{0x0, 0x3, 0x5, 0x7, 0x800, 0x0, 0x101}, {0x40000001, 0x87, 0x1, 0x2, 0x2, 0xee, 0x7ff}, {0x80000007, 0xcc, 0x1, 0x8, 0x2a, 0x6, 0x3}, {0xc0000001, 0x0, 0x0, 0x1, 0x6, 0xfffffff8, 0xb671}, {0x40000001, 0x0, 0x7, 0x6, 0x3, 0x4, 0xffff0001}, {0x80000001, 0x42, 0x4, 0x4, 0x3, 0x7fffffff, 0x40}, {0x6, 0x1, 0x1, 0x2, 0x7, 0x7, 0x810}]}) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001500)='ns/time_for_children\x00') ioctl$TUNGETVNETHDRSZ(r1, 0xb703, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r5, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0003000000080026000816"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) r6 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_elf64(r6, &(0x7f0000000880)=ANY=[@ANYBLOB="7f454c460809c507ff7f00000000000002000300050000004101000000000000400000000000000086030000000000000200000046003800030000805c53000003000000ff7f000081000000000000007f000000000000000800000000000000f7ffffffffffffff1c00000000000000000000000000000001000000040000000100000000000000010000000000000008000000000000006b00000000000000010000000000000062de00000000000006000000ffffffff0104000000000000a6000000000000000400000000000000ffffffffffffff7f000200000000000090040000000000002f20fa8dae1a6ebfcf0626915e72a8bb1c48383635a7eebd7e77c9cd692b7f67895270d2f8c432791e8b55a237e65f48ba00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000043000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dde80c1bd731ef59e491bbba814b82f57f320ecb524a132cc13dd457640521a8e8e3add1b9a343a038b4085b0fc8ccfe87bb873ed84ade7b18ddc45247886fc528"], 0x219) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r7}, 0x0, &(0x7f0000000280)=r8}, 0x20) (async) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r8, r10, 0x25, 0x2}, 0x3a) syz_emit_ethernet(0x3a, 0x0, 0x0) (async) r11 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r2) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010025bd7000fcffffff2a00007007c46ff5449a606f6e646e5a6d650000"], 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 5.728390839s ago: executing program 0 (id=2747): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fedbdf252800000008000300", @ANYRES32=r2, @ANYBLOB="0c003400cb80257e9b74e65504005f000a0006"], 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x80) (fail_nth: 4) 2.908174991s ago: executing program 0 (id=2754): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="8ef34bb2bac8dd"], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000140)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) 2.813797818s ago: executing program 0 (id=2756): r0 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="89e1bf5a69bcab744c429e627b6c11d3abb70f1e1eca0c8d52cb925c9e33e7e4af5b12b2a69f2dbb0ca5c6eec40b4e78bfc896fc38513670df98f74db308a586379b9caf436cda87ac3e03cadbc9ded9b7a93778da7a444ae10122d6882d9327871bafb3294e70b94f3f86c5e22b8942da5d982b26a7dc73d332b1518302214f57bc59b56831fde98690ea5e98c1d6df4bdd95afac67acf9c53becef50187dfc393ac2b57f51a4b457c914ac56cf2635bc90c2f9f446896eb8e8a593bb35d26502c70b2f60dee5f7269a4c21b5da4d3ae7", 0xd1, 0xfffffffffffffffb) r1 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)="5a2afc3809436c4b61539ee3be", 0xd, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000240)={r0, 0x0, r1}, &(0x7f0000000280)=""/31, 0x1f, &(0x7f0000000340)={&(0x7f00000002c0)={'cbcmac-aes-ce\x00'}, &(0x7f0000000300)="749feefadea2c141598c1a9b6109bfbddfa3dd9c23c9d9f386eca8c9c145c4ad8d44f7a44bb8c7e1d36a2265ce7af38dba46750feef3d45772ae6320c52744", 0x3f}) keyctl$dh_compute(0x17, &(0x7f0000000380)={r0, 0x0, r0}, &(0x7f00000003c0)=""/186, 0xba, &(0x7f0000000580)={&(0x7f0000000480)={'sha512-neon\x00'}, &(0x7f00000004c0)="c301a8627d052796c9335c22a6d9af716fe31954a5d05d50e4e809c64b053bfc6e84b3b351892fac16a26d09a84b6464eab7d78494026561e885edb12f84d5345f64f85d4a0799377fd08a5ed16966e330dddb18a02ca467948ea5e098477e282e2f541903a9c2f29a9703ca7ca5e08eda7efb9935cff2efe6764b11d84a1f9b338036b0fd607da3866954565c5d969ed88dc8fb5c7438aee452b67ee7b3aa007511f856b6f44a65cefd68893a", 0xad}) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x14) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000b80)={0x0, &(0x7f00000005c0)=[@nested_load_syzos={0x136, 0x108, {0x1, 0x0, [@uexit={0x0, 0x18, 0xa487}, @set_irq_handler={0xc8, 0x20, {0x39, 0x2}}, @set_irq_handler={0xc8, 0x20, {0x55, 0x2}}, @wr_crn={0x67, 0x20, {0x0, 0x9}}, @nested_create_vm={0x12d, 0x18, 0x3}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @host_nat=0x6c08, 0x3, 0x4, 0x5}}, @set_irq_handler={0xc8, 0x20, {0x12, 0x1}}]}}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0x8, 0x5}}, @nested_vmresume={0x130, 0x18}, @wr_drn={0x68, 0x20, {0x0, 0x9}}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0x8, 0x0, 0x1}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @ro_nat=0x640a, 0x0, 0x65d1, 0x1}}, @nested_load_code={0x12e, 0x76, {0x1, "470f09c40125584f01f30fc775cd48b824950000000000000f23d00f21f835200000080f23f8b9af010000b8ae030000ba000000000f306f660f388157f6f3470f01b97b1c00003e65400f0137b9e00b0000b8aece0000ba000000000f30"}}, @nested_amd_vmsave={0x183, 0x18, 0x2}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0x31, 0x2, 0xffffffff}}, @code={0xa, 0x57, {"460f01b0005000000f20e035800000000f22e06743a00000008065f30f34660f3881b4eddd00000066b83f008ee066ba4200b01dee0f06420fc75a4d660f3a41890400000000"}}, @cpuid={0x64, 0x18, {0x5499, 0x4}}, @cpuid={0x64, 0x18, {0x3, 0x8e}}, @nested_amd_vmload={0x182, 0x18, 0x3}, @wr_crn={0x67, 0x20, {0xf, 0x4}}, @in_dx={0x69, 0x20, {0xd04d, 0x2}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @control_area=0x41, 0x9, 0x7, 0x5}}, @nested_amd_vmsave={0x183, 0x18, 0x2}, @enable_nested={0x12c, 0x18}, @nested_amd_inject_event={0x180, 0x38, {0x1, 0xea, 0x2, 0x1, 0x1}}, @nested_create_vm={0x12d, 0x18, 0x2}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @host16=0xc00, 0x2, 0x573}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @save_area=0x663, 0xe, 0x4, 0x7}}, @rdmsr={0x66, 0x18, {0xb6f}}, @in_dx={0x69, 0x20, {0x322e, 0x1}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @save_area=0x4f7, 0x361f, 0x7, 0x7}}, @wr_drn={0x68, 0x20, {0x3, 0x76a1}}, @nested_amd_vmload={0x182, 0x18, 0x2}, @out_dx={0x6a, 0x28, {0x67c8, 0x4, 0x2}}], 0x585}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000c40)=[@text16={0x10, &(0x7f0000000bc0)="0f211bbaf80c66b86b15798d66efbafc0cecbaf80c66b85893dd8c66efbafc0cb80380ef0f20e06635010000000f22e066b8010000000f01c10f070fbaa20d000c0f01fb66b9f90b000066b80300000066ba000000000f30f26c", 0x5a}], 0x1, 0x40, &(0x7f0000000c80), 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000cc0)='./file0\x00', 0x88000) read$FUSE(0xffffffffffffffff, &(0x7f0000000d00)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000002d40)={0x50, 0xfffffffffffffff5, r5, {0x7, 0x2d, 0x46, 0x200400, 0xfffc, 0x433, 0x0, 0x1, 0x0, 0x0, 0x10, 0x7}}, 0x50) timer_create(0x5, &(0x7f0000002f00)={0x0, 0x32, 0x4, @thr={&(0x7f0000002dc0)="da38ad4af11274ce0a4870c4ae8b455078917002164c6a8034c81a7fb121ce70e9f6beaa86b2be04ca382b8bd6e57f6cd6473178ee9d34ef73410f61aeaf7ebfecb29b9f270e94e75669e84b1a037abf9c636048d440e2d27ec7f55a67efd20dd94c83311c7e0b2fdabb5fcce941fc9862c1a50f3fa9d0dab7e95d7e9d54735decbf0be6b523baa76647ed78db6ba33415b93bcd6e6ebd4c783c3f19c6173bd9d74d90629d8a37768e5ec931557146f95384f560213fac0fb4d1923a39e06e05b46131582c409d1f7751ee2f693b87f76bafaffb8e6d31ec97384052fe09098db090", &(0x7f0000002ec0)="9c31b01a12e5ca"}}, &(0x7f0000002f40)) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r4, 0xaea2, 0x9) bind$inet(r4, &(0x7f0000002f80)={0x2, 0x4e23, @broadcast}, 0x10) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000002fc0)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000003340)={0xa4, 0x0, &(0x7f0000003240)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000003000)={@fda={0x66646185, 0x8, 0x0, 0x13}, @flat=@weak_handle={0x77682a85, 0x100}, @fda={0x66646185, 0xa, 0x0, 0x2e}}, &(0x7f0000003080)={0x0, 0x20, 0x38}}}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000003180)={@ptr={0x70742a85, 0x1, &(0x7f00000030c0)=""/6, 0x6, 0x2, 0x18}, @ptr={0x70742a85, 0x0, &(0x7f0000003100)=""/102, 0x66, 0x0, 0x1a}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000003200)={0x0, 0x28, 0x50}}, 0x400}, @request_death={0x400c630e, 0x2}, @enter_looper], 0x12, 0x0, &(0x7f0000003300)="52168fd603dc7eb424ce302031174af1f6c1"}) ioctl$FE_SET_PROPERTY(r4, 0x40106f52, &(0x7f0000003440)={0x37, &(0x7f0000003380)=[{0x3d, '\x00', @buffer={"db304f8fc3d7d9d834f033097cea06e7baaba72497d17cf537d45d540c443ad7", 0x20}, 0x25}, {0xd, '\x00', @buffer={"dcec42864d28398ba5d285a2101a05c4038013e64e7578751177e5776ff17aa8", 0x20}, 0xff}]}) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000003600)={'filter\x00', 0x0, 0x3, 0x97, [0x101, 0x3, 0x567, 0x5, 0xfffffffffffffffe, 0x1], 0x9, &(0x7f0000003480)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000003540)=""/151}, &(0x7f0000003680)=0x78) syz_ublk_setup_queues(r4, 0x0, &(0x7f00000036c0)={0x0, 0x36d1, 0x1000, 0x3, 0xd7}, &(0x7f0000003740)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x13d9, 0x1, 0x0, 0x259, 0x0, r4}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3917, 0x20, 0x3, 0x19c, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9371, 0x40000, 0x1, 0x396, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93d1, 0x40000, 0x1, 0x359, 0x0, r4}}], 0x4, &(0x7f00000049c0)={0x2e, 0x10, 0x0, r4, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x8}, 0x0, 0x0, '\x00', {0x0, 0x233, 0x0, &(0x7f00000039c0)=@buf_max_buf="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"}}, &(0x7f0000004a40)) io_uring_enter(r7, 0x4dce, 0xf26f, 0xe1, &(0x7f0000004a80)={[0x9d02]}, 0x8) r9 = syz_usb_connect$uac1(0x1, 0xf3, &(0x7f0000004ac0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x2a39, 0x3f8c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe1, 0x3, 0x1, 0x3, 0xf0, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x28}, [@mixer_unit={0x5, 0x24, 0x4, 0x1}, @processing_unit={0xd, 0x24, 0x7, 0x5, 0x1, 0x0, "72de7b9e1bbb"}, @extension_unit={0xc, 0x24, 0x8, 0x6, 0x0, 0x7, "b04ba922a8"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7, 0x1, 0x8, 0xf}, @as_header={0x7, 0x24, 0x1, 0xd, 0x1, 0x5}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x4, 0x2, 0x4, 0x3}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x6, 0x90, 0x3, 0x2, 0xd9}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0xd, 0x4, 0x13, {0x7, 0x25, 0x1, 0xc, 0x20, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x4, 0x1, 0x5, 0xca, 0x8}, @as_header={0x7, 0x24, 0x1, 0x5, 0x7, 0x4}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x7, 0x3, 0x4, 0x8, "2aab"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x5, 0x1, 0x0, 0xee, "", "b7f049"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0xff, 0x2, 0x18, 0x2, "6a9cfe09"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x3, 0x3, 0xf1, 0x9, "ff82a808c4459938"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x2, 0x80, 0x40, {0x7, 0x25, 0x1, 0x0, 0xfc, 0x5}}}}}}}}]}}, &(0x7f0000005040)={0xa, &(0x7f0000004bc0)={0xa, 0x6, 0x300, 0x5, 0xba, 0xf9, 0x2c1706a3e239f950, 0xd9}, 0x39, &(0x7f0000004c00)={0x5, 0xf, 0x39, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x80, 0x9, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x4, 0x0, 0x7, 0x2, 0x6}, @ssp_cap={0x14, 0x10, 0xa, 0x3, 0x2, 0x7, 0xf00f, 0x5, [0x0, 0x7f40f0]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0x2, 0x0, 0x1, 0x67}]}, 0x8, [{0x4, &(0x7f0000004c40)=@lang_id={0x4, 0x3, 0x40d}}, {0xc9, &(0x7f0000004c80)=@string={0xc9, 0x3, "0e68e530f4a4bf1d1d925d73a26f0f4c11891b821387cf064a635ca91778aa95cefce594137a4ca71ab01e496f9290394f5f8972c67aa3c1385366192e34c06ee80d48e031f9eac7d46cfd12b56d87896cb69025a535f0a1e4fdbfc0cacba1a8cdf6206282c8332b52848a6d19ac624c3074f8a48a770350f85bfff7eb6136d30a93580483e687ca9ea099074275fa71741d76159fa56b3445479304628042d8d204b3125272ca85f9f605610c0a85189168fae4d1d4d78b88b1b8cb7dcca33fabca731cb95bc9"}}, {0xa9, &(0x7f0000004d80)=@string={0xa9, 0x3, "f4196ed92da804e0a89e7ff82e13e85ea7bebb90dd40182b186480f7159d320200a65a40de1985c8ac4587e037596dc58f8976e60a77f377b4cbf0ebe14250f550b2d5a84be492850883282076f7d16e863dca8e4a76bce6fb22287932592ac83122ceef6849a6c8c3ab6f2ec3fc97c4c157a24980829378dd47bab8bfb1845915c8fcb09fb3c427dc79671028aa42d15be45fd6eaf409b49a22e58c2f1ef17619a6103b41aa2a"}}, {0x3e, &(0x7f0000004e40)=@string={0x3e, 0x3, "b7eb049e6f38328722d14bb31c0069d0113cfbda0dc937f327a0c3ed985d13ac4c4448fe62574223bf08aa8a8b3ad6f910b3a9acc7a43fdb97679eb7"}}, {0x10, &(0x7f0000004e80)=@string={0x10, 0x3, "e6e3a4bca0caf77172e0e02248a3"}}, {0x5a, &(0x7f0000004ec0)=@string={0x5a, 0x3, "73d3bfa379b37b30bef502ee70ab54d6d9042fb84c8c200b6dcfc9bb8edb3e8dd50bc3d38dc92a8d898f34097778d051b813941f1d829b0712e3583c737ff1bfb24ffaf678749e09e5b184989f93595b8c8dc7474b67a1e3"}}, {0x4, &(0x7f0000004f40)=@lang_id={0x4, 0x3, 0x455}}, {0x87, &(0x7f0000004f80)=@string={0x87, 0x3, "f151fcfbab138fea2da5f76118dab20976a71480d94db5eec63c5b259cc0686c5038509683bfd033f0b45c2562b2441b075de51ad908bf0899f51b8139842dbb08b674cbf4ace7730f8bc721f1ebd6937b9b8d9150a6093d90bf083d6c95d29b22e7decac3c07231d525e37b0c924a8f62f43cfdf76110ad0ccdca56fd7321b0461018c5ca"}}]}) syz_usb_disconnect(r9) syz_usb_connect(0x1, 0x744, &(0x7f00000050c0)={{0x12, 0x1, 0x110, 0x6f, 0x3f, 0x39, 0x40, 0x45e, 0x477, 0x126d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x732, 0x3, 0x1, 0x1c, 0x20, 0xfa, "", [{{0x9, 0x4, 0xa3, 0xc1, 0x1, 0x78, 0xa7, 0xd3, 0x7, [], [{{0x9, 0x5, 0x7, 0x10, 0x40, 0x3, 0x2a, 0x4, [@generic={0xd6, 0x2, "4b0b7a716b1a78c31bb449d459ce3ef369e10a961481e0b5249449e7e43107aa1ab6268b9a9910b78b8954a716450a77592d77e40c764d6ec0b7673ab77381e206d31ad632dfc2c67d8e37c3aba4804d1043f595105710bbc225ed518da17843a1b07cff298ff33e593e22a45a0aadf09a2345015bacbd5c80b9efb006536a776b30916a60e33e8114444305aab36c9d33cc43cee978bc39ad9715d4d5e9473166261e6382a1f5789bb4a13472d5d116fbf6bae6278212a3ab222e8e5281395781e08ed7d7675c41982b095771d92fa32dddc1c6"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x6}]}}]}}, {{0x9, 0x4, 0x63, 0x9, 0x4, 0xbe, 0x3d, 0x67, 0x2, [@generic={0x60, 0x21, "a285e8886c129c837a4fb8b0659e04b57f4e300e942b3f4b723ed6473ee9483fba0ec6ccce6cd52f0119b1a0bfe3e9a88c324f6d26dae21812e4dc20bc8248abe68a792b93cf09c8ca4a93f3e601d3c58669d0295837648674e948434413"}, @generic={0x84, 0x23, "5ca52a75bab8c3005744ec6d50268a9f52e9294f49526cc5ca4c2dbba96f2c96aa35a8b5ec61790638d49de2a2b07ac240e47734ba06d8cf5078e74a2cce9296416da0aec9f16a80b694e1261af66de9248228b0bf3af6c301d2893581b5136349b55fbe4d5abfa5ec547cb1bfb5311f020b5dde7c54553c35776c24ba1039fa003c"}], [{{0x9, 0x5, 0x4, 0x0, 0x20, 0x0, 0x40, 0x80, [@generic={0xd7, 0x31, "d1afa2fec6cf40d853168bcc0664f07bf119db1343b2c40f89385b1c375e3cb62d1a38fa166a6a57e5fe1b02b8f36c7df64375c1f67cdfa95086649cfe8012f2a4ff1a5435693539d812bc04320d4e37f18449ed74ebae5acdb78637adf5b102e4053d0dc60ca68d0fa7c263deb77ed0860661de1528a7913f9554cac5f342313931f6dded4e117060296d437fda52aacfc16577f75078a723d83a54e912460ef8a23d8955bb2ebe2d5042340b3132930ab50d34c728472683bb6d2b91e647d4e4e23f11941d38656512b8d22bd57ebedc95fd3646"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x400, 0x7, 0xf8, 0x2}}, {{0x9, 0x5, 0xf, 0x4, 0x20, 0x22, 0x7f, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xf1, 0x2}]}}, {{0x9, 0x5, 0x0, 0x8, 0x400, 0x6, 0x49, 0x7}}]}}, {{0x9, 0x4, 0x11, 0x8, 0xd, 0x1, 0x1, 0x8, 0x2, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x80, 0xc61, 0x4}, [@mdlm_detail={0xe0, 0x24, 0x13, 0x6c, "52d61270d9cdab65c4c5e6b6195c03540f6f164560bc7bf91a9cdc7dc462ef661d4efb54e2ca6b5144b4e6fbe5a478e613438c501ea0e4313fad86b0519770d52733f5de14027d530fd5bbc9c6ee51c78bbf0bff7260618c0fbf772adb79ca0e69b84301f1c372242e0c8b5432c4dbc4ab080ec512eac06612e090adf6950cbbaf64fc5c03eecf3ab8121bdeb4722c4140ae25dfb6b0331a6a2be6a24fb7139f838264704f4a705f6616797c90557791c750337f62203083878211ff73f759ef903e7ddac2d0394882c6fbfcc0bb64039844ba9bb1f3477e2a32fc30"}, @country_functional={0x12, 0x24, 0x7, 0x6, 0x5, [0xa, 0x9, 0x4, 0xffff, 0x3, 0x7a]}]}, @uac_control={{0xa, 0x24, 0x1, 0x0, 0xa}}], [{{0x9, 0x5, 0xe, 0x1, 0x200, 0x4, 0x5, 0xf4, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x8, 0x7}]}}, {{0x9, 0x5, 0xc, 0x10, 0x400, 0xff, 0x9, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x44, 0x42ac}]}}, {{0x9, 0x5, 0x0, 0xc, 0x40, 0x4, 0xd7, 0xb, [@generic={0xd7, 0x23, "d10e4b4c3054441a84e4136b84a39d92463051b08f2bb25648fd910c8cddb6a5e6e7a84ea98f8d6396fee9f881f726d2c627eeb250f54bf4b0faea1ab836284775e819ac1aafdba73c6c3c237eba0f162c5362c224d6c7dc66e1ad4e61e6afb1abd1bd52ef25283ae36a1a6ea2ebe934d643cf924f28d859f579d8268347561d3e890a64507435f91bfd1cfb7479bc3fa938f2aab414a1e27ae71b61290901e551593a124ee57709a60fe51eb8f36c2077a3524201ce4dc8a4b2e095783dbb4099d581cf8311b9aff17f9bb35eff05bbb3f93917b3"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x40, 0x6, 0x2, 0xd, [@generic={0x40, 0x21, "60850757e23c4ee07b218a5a6f444f78acdc1f5f46ad3ce0e40616f74295e110a31e6af703fe1f55f0c9db6aa57c65b2b6d40e7da029c915f334a2db5469"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x31, 0x5}]}}, {{0x9, 0x5, 0xa, 0x8, 0x200, 0x7, 0x3, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x80}]}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0xc, 0x3, 0xdd}}, {{0x9, 0x5, 0x7, 0x10, 0x40, 0x2e, 0x0, 0x8, [@generic={0x76, 0x11, "67904fc10c2256d17a4e7c77b0d450f839705a9ccb80eecff1d7c27dd1806df46934a22f98fed469ab86ce4c5beb22caea6a5d656b38033b970aff7423249ab6252208a3abc68f1b5b9028fc8a825d36514fcbec9c09ef65d3142fae7a216ddd08d3501e5a55eb1c3c7c153926c5235d00b9ad69"}]}}, {{0x9, 0x5, 0x9, 0x1, 0x27c, 0x6, 0x3, 0xf}}, {{0x9, 0x5, 0x8, 0xc, 0x40, 0x0, 0x1, 0x9, [@generic={0xfc, 0x10, "13d7d242a61017d6ddb7d02b33a0718c298d8d777f6c6ab63cb86b0639d7c090a63c99571f968fc5a223b31d0d1dc7c1093e3289e6b7a5882c58af06b044df9fc490a78af1b6dd8f68a9b686fa7c55c2a59ab639dfb449aea653b7c99ce9436a940127097317a87dd584a97f1a3693b488b39db5263519cfe2660b7b1d22f48b761fecc677ddb7f36fd0485da72593984c68965f042db962097ade1ca4a2c3d319ea61745b859046fc8f9a81840c6e36963c75622804e2d40c6fcf68d625ac2fb29aa3b13d0d196a4d418292e8a600981b52ff6330f53d6cc67910537e72c1097054e1d6e9d38f23cb64cab88f1b5296099fe607634d23791993"}]}}, {{0x9, 0x5, 0xe, 0x1, 0x3ff, 0x10, 0x0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x7c, 0xfc00}]}}, {{0x9, 0x5, 0x2, 0x10, 0x10, 0xff, 0x3b, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xe, 0x101}]}}, {{0x9, 0x5, 0x5, 0x0, 0x40, 0x81, 0xa, 0xec, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x5, 0x5}]}}, {{0x9, 0x5, 0xe, 0x3, 0x10, 0x9e, 0x1, 0x1}}]}}]}}]}}, &(0x7f0000005e40)={0xa, &(0x7f0000005840)={0xa, 0x6, 0x200, 0x5, 0xe, 0x5, 0x8, 0xb}, 0xab, &(0x7f0000005880)={0x5, 0xf, 0xab, 0x3, [@generic={0x83, 0x10, 0x1, "07d1e31116f78d104122d4967899c5b7dcb8a8854d2c4be7e77680a9afe55f5c7ba61e3c07fed23243bdd2a726dc349f3ec622802f9dcfc1a07bbbad5cf178e5db11cf2957ac93700d51d0083009a403e5e309156bdafdfd4146bc7d20ee1668a925587fc526ddb0dca62967ac7fe4f39c511349468a44cb0426a571f0de9203"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x6, 0x5, 0x4}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x10001, 0xf00, 0xb, [0xffff0f, 0xff3f30, 0x8752b31ecc1f71da, 0xc0c0]}]}, 0xa, [{0x4, &(0x7f0000005940)=@lang_id={0x4, 0x3, 0x42f}}, {0xf6, &(0x7f0000005980)=@string={0xf6, 0x3, "cb909c361b1f569ff35656b03741dc82902b05da8b53e34e83387f27a37c25a0db195fd1d44538a46fdca73ec243032ea445928d0e46381340b27aec1d3a40f3bc7847b6a6df212af92a1735d34b7f03c9800ddfda9cc9411f2e908571933bb312b37e10b0c4c2092bed38bfb92157a91ba2b4c03e9c5ef5a5ffb2e68e97de9df0f2342bf7a77001a9156711885ecd6841cd296b1387c60b5bbfb04e40f4dd8dc738221f34db2c7695b43068251fc0000f13a1c7468d077b14b11caf107226aac4adb13be040371533b2a546aa5a7e1c9e2a0998060dd11e71a4a8413e991fbe4dab3ec002b0fcca84b823a90c3799d8a8467369"}}, {0x69, &(0x7f0000005a80)=@string={0x69, 0x3, "9d97f99e369f205bcd2312d7067d7ecfa327ad97f1e855620da0f01589260b1be6f584d2ab52ed7fcd125d182966e2237f056bbe1e02758b46e8c7968d78ad39fd4b936e5580861fccddc09f7d86728be8861e5a4ce6e4c97bb5ae19d5022f23023cc5790a7315"}}, {0xaf, &(0x7f0000005b00)=@string={0xaf, 0x3, "20a622a4a32f49d7f884f39e8902330257a40430e4a30d8c508927d880ac1824456d4207bbf73ff7d0b9b333688bfae2d45f1986f742b3f970d54e11f0b388c78e2ee44763be828184b2b035ed1556be72a24ff6c5520029c69a7cad6c041aac229fd7a46b5eaf201ec4f7b3f4b6563fc623402a9f8da344eba03b99bf181f00b033299e36cb86f21b404825fa2a22b39f010f13cb426775105d3f499825056d696e138cce8f2ea757d1fd8e24"}}, {0x2c, &(0x7f0000005bc0)=@string={0x2c, 0x3, "0bc954504f4608b2c959aa4166218460d8771ed41108b7c5fdb4b6e9adff056dce99c218bc9abf2d8aed"}}, {0x11, &(0x7f0000005c00)=@string={0x11, 0x3, "1b30cc4ea5f012537171a7c61ba907"}}, {0x4, &(0x7f0000005c40)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x6e, &(0x7f0000005c80)=@string={0x6e, 0x3, "7566b1d1cd7075f58579b27407558d0441ae7968fa446f295b23cad2c5fc98600cfd5ad6783afc14e0d72365508f7e2e6d6b0dba5f5c58aef481a8157a37c4752b7a1e31da03fe59449e2d15fe78739ece1ecf8d2590cf4e13d7e82f16bd38c563b4fdc51a807ccd3c2f840b"}}, {0x6d, &(0x7f0000005d00)=@string={0x6d, 0x3, "612c42b70b1844d75752ed46febbb4e9e81faefdb0c7cd5691b016021253e109c32a2ca7c6bb8fe94e850b7bcfa9078147195efee01596c44434688636116d52eb606c9274e582c5a87da0a0cd0295ab405f711d5afe9fbe6f9bfaa9c42451f363424874f2a3d17c206013"}}, {0x9f, &(0x7f0000005d80)=@string={0x9f, 0x3, "f376ec5dfbcff286bc6c24f33498d6d060ea66a8d9e7bbcd64484427b173cc3fcad9f3b084019ed0df2c446d9ea954bf1657c65af47b90dc7bfe841f59420cd2540c9291612693a9608e88f0c87224a7f5c5f163f1e836112b6b91bbd0169efb4a2bad38e6cee4967b9f0261601c8ef0e1293707dc33215b8164a620728e1d3eabc62faecbb373f14321c0279bb0d74e66e7001dbf85acb2df3d105cab"}}]}) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000005f00)={r0, 0x60, 0xf6}, &(0x7f0000005f40)={'enc=', 'oaep', ' hash=', {'sha224-generic\x00'}}, &(0x7f0000005fc0)="65d1bc4cf2bad5ab03f2a7d106902e7fdef5969ed7d0a1300c5b17445e2e21b2bed957060d8e314b8aed23589ebe64c5b58a62969e38419b283e4c13dfe649ffbe100c8243f8a71c420847a7522eeb709b0dd3162a8b5f0ae3bec824e1345173", &(0x7f0000006040)=""/246) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000006180), r4) sendmsg$L2TP_CMD_SESSION_CREATE(r8, &(0x7f0000006240)={&(0x7f0000006140)={0x10, 0x0, 0x0, 0xa004200c}, 0xc, &(0x7f0000006200)={&(0x7f00000061c0)={0x1c, r10, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000050) syz_usb_connect$midi(0x0, 0xdd, &(0x7f0000006280)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x499, 0x1022, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcb, 0x1, 0x1, 0x80, 0x20, 0xa, "", {{{0x9, 0x4, 0x0, 0x0, 0x7, 0x1, 0x3, 0x30, 0x2, [@midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x6, 0x4}, @ms_header={0x7, 0x24, 0x1, 0xbfc4, 0x7}, @midi_out_jack={0x13, 0x24, 0x3, 0x1, 0x7f, 0x6, [{0xf2, 0x9}, {}, {0x6, 0x2}, {0x80, 0x8}, {0x2, 0xf8}, {0x80, 0x3}], 0xc}], [{{0x9, 0x5, 0x7, 0x0, 0x40, 0x4, 0x8, 0x8d, {0x6, 0x25, 0x1, 0x2, "f800"}}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x7, 0x7, 0x7, {0x14, 0x25, 0x1, 0x10, "58fa81873e0aa4b730a5e365908864f4"}}}, {{0x9, 0x5, 0xb, 0x0, 0x40, 0x3, 0x9, 0xd, {0x5, 0x25, 0x1, 0x1, 'g'}}}, {{0x9, 0x5, 0x2, 0x2, 0x3ff, 0x2, 0x1, 0x5, {0x6, 0x25, 0x1, 0x2, "5098"}}}, {{0x9, 0x5, 0x6, 0x3, 0x8, 0x3, 0x5, 0x2d, {0x12, 0x25, 0x1, 0xe, "79f17f1188e60d9b9b5721e366c7"}}}, {{0x9, 0x5, 0x80, 0xc, 0x20, 0x7, 0x7, 0x8a, {0x13, 0x25, 0x1, 0xf, "ff01b63aac51e66c505fcbca04971d"}}}, {{0x9, 0x5, 0xe, 0x10, 0x400, 0x10, 0xf, 0x9, {0x10, 0x25, 0x1, 0xc, "68e985419888319590ba63f2"}}}]}}}}}]}}, &(0x7f0000006500)={0xa, &(0x7f0000006380)={0xa, 0x6, 0x110, 0x40, 0xa5, 0x8, 0x20, 0x7d}, 0x2c, &(0x7f00000063c0)={0x5, 0xf, 0x2c, 0x2, [@ssp_cap={0x24, 0x10, 0xa, 0x7f, 0x6, 0x7f, 0xf00f, 0x2, [0x3f00, 0x50, 0x1bf00, 0x3f0f, 0xc000, 0xc000]}, @ptm_cap={0x3}]}, 0x1, [{0xc9, &(0x7f0000006400)=@string={0xc9, 0x3, "6cee0b4415344494d017e359be7f3276ec85d92d924b437cf79107915aea9f9a5020750401b6a86820d6890a50132bd271ca3eb113a92739c63942bce36381239e0f40b07e23759205844b58ad458549dbe53a574e25a7e83209d230fda29b259db692f598a13b22c7e7134236b031f1c2cd6e3f7917e5bcebfe63613b4c40b1bda1138ff5d08ec222e4dd85ca1592312c04156ed3b4df71a2b04bbb6020978f337c1eb3ba1d1642cc49dd7835c9389e3c92f693c17d973628206b3b47f6b869e81a1530a45401"}}]}) ioctl$MEMUNLOCK(r4, 0x40084d06, &(0x7f0000006540)={0x65a, 0xdb7}) r11 = fsmount(r4, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000006580)={0x4, 0x1, 0xeeee0000, 0x1000, &(0x7f0000ff2000/0x1000)=nil}) 594.501115ms ago: executing program 5 (id=2786): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x4, 0x0, 0x0) mlockall(0x2) r0 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='.\x00', 0xa4000921) read(r2, 0x0, 0x0) close(r2) openat(0xffffffffffffff9c, &(0x7f0000000480)='./debug\x00', 0x141042, 0x80) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x17, 0x1, 0x70bd26, 0x25dfdbfd, {0x8}}, 0x14}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x80, 0x16, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_FLOWTABLE_HOOK={0x54, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'gre0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc8}, 0x1, 0x0, 0x0, 0xc040}, 0x80) 410.671398ms ago: executing program 5 (id=2788): setsockopt$sock_int(0xffffffffffffffff, 0x110, 0x7, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000180)={0x0, 0x0, r4, r5, 0x4, 0x0, 0x14, 0x6, {0x209, 0x3, 0x3, 0x5, 0xd, 0x1, 0xfffd, 0x10, 0xfff, 0xe953, 0x1000, 0xfffffffd, 0xfffff215, 0xffffffff, "fe1d010034130000000020b42717e47f400000000e00"}}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = syz_init_net_socket$nfc_raw(0x27, 0xf, 0x0) shutdown(r8, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r9, &(0x7f0000000480), 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x24, 0x2c, 0x100, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r10, {0xf000, 0xffff}, {}, {0x7, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 351.278464ms ago: executing program 5 (id=2790): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda108000000000047010000f8ffffffb702000008000000b70300000000001385000000050000001801000020786c250000000000202020db1af8ff41000000bda100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 349.437472ms ago: executing program 5 (id=2792): r0 = socket$inet(0x2, 0x1, 0x6) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0xa, [@volatile={0xe, 0x0, 0x0, 0x9, 0x5}, @union={0x4, 0x3, 0x0, 0x5, 0x1, 0x9, [{0x0, 0x3, 0x80000001}, {0x10, 0x1, 0x7}, {0x1, 0x4, 0x1}]}, @decl_tag={0xd, 0x0, 0x0, 0x11, 0x1, 0x9}, @typedef={0x8, 0x0, 0x0, 0x8, 0x5}]}, {0x0, [0x61, 0x5f, 0x5f, 0x5f, 0x0, 0x5f, 0x61, 0x5f]}}, &(0x7f0000000440)=""/111, 0x7a, 0x6f, 0x0, 0x10, 0x10000}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000002c0)=ANY=[@ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) setsockopt$inet_buf(r0, 0x0, 0x1, &(0x7f0000000300)="800001000000000000000001", 0xc) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x8, @remote, 0xfffffffb}, r3}}, 0x30) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount$nfs(&(0x7f0000000080)='127.0.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{'addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,soft,timeo=1,retrans=1\x00', 0x5e}]}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x45) r6 = accept$inet(r0, 0x0, 0x0) read(r6, &(0x7f0000000100), 0x4) read(r6, &(0x7f0000000304), 0x4) write(r6, &(0x7f0000000300), 0x100) 250.669474ms ago: executing program 4 (id=2793): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@rights={{0x10}}, @rights={{0x10}}], 0x20}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x80}, &(0x7f0000000540)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x0, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa5ec, 0x800, 0x4, 0x3aa, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x83e9, 0x200, 0x1, 0x2b8, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0xd8}}], 0x1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000200000020000180140002006e657464657673696d30000000000000080003"], 0x34}}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 250.484141ms ago: executing program 5 (id=2794): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="8ef34bb2bac8dd"], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000140)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) 170.743068ms ago: executing program 5 (id=2795): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0x8, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x101000) write$sndseq(r5, &(0x7f00000002c0)=[{0xf8, 0x8, 0x5, 0xe, @time={0x2e6, 0x9}, {0x7, 0x6}, {0x30, 0x9a}, @control={0x1, 0x6f, 0x1}}, {0x9, 0x7, 0x1, 0x5, @tick=0x6af, {0xc5, 0xfb}, {0x40, 0xff}, @queue={0x8, {0x1, 0x10001}}}], 0x38) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x90, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0x1, 0xffff}, {0x300, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x100000d, 0x9, 0x4, 0x6, 0x588}, 0x2}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x1fc16}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x90}}, 0x0) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x352302, 0x0) read$char_usb(r6, &(0x7f0000001300)=""/4096, 0x1000) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100001, 0x5, 0x5, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000100), 0x20000402, r7}, 0x38) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r8 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r8, 0x4004480d, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="70000000aaaaaaaaaaaa0180c200000188a82b0081"], 0x11e) 170.529761ms ago: executing program 4 (id=2796): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f00000002c0)={{0xfff, 0x9}, 0x100, './file0\x00'}) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/class/thermal/cooling_device0/cur_state\x00', 0x1, 0x0) writev(r5, &(0x7f0000000740)=[{&(0x7f0000000080)='0', 0x1}], 0x1) write$FUSE_INIT(r3, &(0x7f0000004300)={0x50, 0x0, r4}, 0x50) write$FUSE_NOTIFY_INVAL_ENTRY(r3, &(0x7f00000043c0)={0x29, 0x3, 0x0, {0x1, 0x8, 0x0, 'group_id'}}, 0x29) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="97328d035acbb9f700"/20, @ANYRES32=r2, @ANYBLOB="46060900000800001c00128009000100626f6e64000000000c00028008000b00", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x4000) 50.335771ms ago: executing program 4 (id=2797): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d03000000000000000000000400000000000000000006000b030000000000000063"], 0x0, 0x52}, 0x28) 50.181631ms ago: executing program 4 (id=2798): r0 = socket$kcm(0xa, 0x2, 0x0) socket(0x2, 0x80805, 0x0) sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18, 0x700}, 0x0) 185.946µs ago: executing program 4 (id=2799): mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)) prctl$PR_SET_SECUREBITS(0x1c, 0x25) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x40c, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a44a9, &(0x7f0000000140)={[{@inode32}]}) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x8000000000000000, 0x6, 0x1000, 0x3, 0x1000, 0x1000008, 0xb, 0xfffffffffffff7fc, 0x100fff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) 0s ago: executing program 4 (id=2800): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x90, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0x1, 0xffff}, {0x300, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x100000d, 0x9, 0x4, 0x6, 0x588}, 0x2}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x1fc16}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x90}}, 0x0) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="70010c00aaaaaaaaaaaa0180c200000188a82b0081"], 0x11e) 0s ago: executing program 4 (id=2801): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/target/usb_gadget/naa.6001405c935d7912\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/nexus\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='na', 0x2) r4 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x11883}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2404c0c5}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd0100000000001400"], 0xfdef) kernel console output (not intermixed with test programs): ile permissive=1 [ 224.277334][ T43] audit: type=1400 audit(1790559884.666:641): avc: denied { open } for pid=13081 comm="syz.4.2582" path="/138/nfsd/versions" dev="nfsd" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 224.277368][ T43] audit: type=1400 audit(1790559884.666:642): avc: denied { search } for pid=13081 comm="syz.4.2582" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 224.277404][ T43] audit: type=1400 audit(1790559884.666:643): avc: denied { search } for pid=13081 comm="syz.4.2582" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 224.288483][ T5884] net_ratelimit: 1734 callbacks suppressed [ 224.288496][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.289129][ T43] audit: type=1400 audit(1790559884.676:644): avc: denied { search } for pid=13081 comm="syz.4.2582" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 224.289423][ T43] audit: type=1400 audit(1790559884.685:645): avc: denied { search } for pid=13081 comm="syz.4.2582" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 224.289571][ T43] audit: type=1400 audit(1790559884.685:646): avc: denied { search } for pid=13081 comm="syz.4.2582" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 224.289727][ T43] audit: type=1400 audit(1790559884.685:647): avc: denied { search } for pid=13081 comm="syz.4.2582" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 224.291891][T13080] syzkaller1: entered promiscuous mode [ 224.291904][T13080] syzkaller1: entered allmulticast mode [ 224.310691][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.310705][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.365970][ T1182] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.365984][ T1182] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.467376][T13097] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2587'. [ 224.473813][T13094] tipc: Started in network mode [ 224.473829][T13094] tipc: Node identity de26ff602315, cluster identity 4711 [ 224.473900][T13094] tipc: Enabled bearer , priority 0 [ 224.530599][T13094] syzkaller0: entered promiscuous mode [ 224.530616][T13094] syzkaller0: entered allmulticast mode [ 224.531022][T13094] tipc: Resetting bearer [ 224.538400][T13093] tipc: Resetting bearer [ 224.703780][T13115] FAULT_INJECTION: forcing a failure. [ 224.703780][T13115] name failslab, interval 1, probability 0, space 0, times 0 [ 224.703808][T13115] CPU: 1 UID: 0 PID: 13115 Comm: syz.1.2592 Not tainted syzkaller #0 PREEMPT(full) [ 224.703828][T13115] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 224.703839][T13115] Call Trace: [ 224.703853][T13115] [ 224.703861][T13115] dump_stack_lvl+0x100/0x190 [ 224.703900][T13115] should_fail_ex.cold+0x5/0xa [ 224.703925][T13115] should_failslab+0xc2/0x120 [ 224.703954][T13115] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 224.703975][T13115] ? __alloc_skb+0x5b7/0x710 [ 224.703999][T13115] ? __alloc_skb+0x140/0x710 [ 224.704022][T13115] __alloc_skb+0x140/0x710 [ 224.704042][T13115] ? __alloc_skb+0x5b7/0x710 [ 224.704061][T13115] ? __pfx___alloc_skb+0x10/0x10 [ 224.704089][T13115] netlink_alloc_large_skb+0x69/0x150 [ 224.704111][T13115] netlink_sendmsg+0x680/0xda0 [ 224.704135][T13115] ? __pfx_netlink_sendmsg+0x10/0x10 [ 224.704158][T13115] ? selinux_socket_sendmsg+0x198/0x2f0 [ 224.704183][T13115] ____sys_sendmsg+0xa4d/0xbe0 [ 224.704208][T13115] ? __pfx_netlink_sendmsg+0x10/0x10 [ 224.704231][T13115] ? __pfx_____sys_sendmsg+0x10/0x10 [ 224.704259][T13115] ? ring_buffer_unlock_commit+0x2e7/0x700 [ 224.704287][T13115] ___sys_sendmsg+0x190/0x1e0 [ 224.704307][T13115] ? __pfx____sys_sendmsg+0x10/0x10 [ 224.704336][T13115] ? find_held_lock+0x2b/0x80 [ 224.704375][T13115] __sys_sendmsg+0x160/0x210 [ 224.704399][T13115] ? __pfx___sys_sendmsg+0x10/0x10 [ 224.704435][T13115] do_syscall_64+0x123/0x790 [ 224.704468][T13115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.704486][T13115] RIP: 0033:0x7fa7e119e159 [ 224.704501][T13115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.704517][T13115] RSP: 002b:00007fa7e207e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 224.704540][T13115] RAX: ffffffffffffffda RBX: 00007fa7e1425fa0 RCX: 00007fa7e119e159 [ 224.704553][T13115] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 224.704564][T13115] RBP: 00007fa7e207e090 R08: 0000000000000000 R09: 0000000000000000 [ 224.704574][T13115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.704586][T13115] R13: 00007fa7e1426038 R14: 00007fa7e1425fa0 R15: 00007fff17e5ab58 [ 224.704615][T13115] [ 224.849168][ T2362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.329783][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.470317][T13126] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2595'. [ 225.814354][T13093] tipc: Disabling bearer [ 225.822125][T13113] syzkaller0: entered promiscuous mode [ 225.822141][T13113] syzkaller0: entered allmulticast mode [ 225.861978][ T5884] tipc: Node number set to 4248043360 [ 225.914866][T13129] FAULT_INJECTION: forcing a failure. [ 225.914866][T13129] name failslab, interval 1, probability 0, space 0, times 0 [ 225.914896][T13129] CPU: 0 UID: 0 PID: 13129 Comm: syz.0.2596 Not tainted syzkaller #0 PREEMPT(full) [ 225.914918][T13129] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 225.914929][T13129] Call Trace: [ 225.914936][T13129] [ 225.914944][T13129] dump_stack_lvl+0x100/0x190 [ 225.914977][T13129] should_fail_ex.cold+0x5/0xa [ 225.915004][T13129] should_failslab+0xc2/0x120 [ 225.915028][T13129] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 225.915050][T13129] ? __alloc_skb+0x5b7/0x710 [ 225.915070][T13129] ? __alloc_skb+0x140/0x710 [ 225.915095][T13129] __alloc_skb+0x140/0x710 [ 225.915115][T13129] ? __alloc_skb+0x5b7/0x710 [ 225.915137][T13129] ? __pfx___alloc_skb+0x10/0x10 [ 225.915166][T13129] netlink_ack+0x117/0xb80 [ 225.915203][T13129] netlink_rcv_skb+0x333/0x420 [ 225.915225][T13129] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 225.915253][T13129] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 225.915285][T13129] ? netlink_deliver_tap+0x1ae/0xcc0 [ 225.915311][T13129] netlink_unicast+0x585/0x850 [ 225.915336][T13129] ? __pfx_netlink_unicast+0x10/0x10 [ 225.915364][T13129] netlink_sendmsg+0x8b0/0xda0 [ 225.915391][T13129] ? __pfx_netlink_sendmsg+0x10/0x10 [ 225.915415][T13129] ? selinux_socket_sendmsg+0x198/0x2f0 [ 225.915441][T13129] ____sys_sendmsg+0xa4d/0xbe0 [ 225.915468][T13129] ? __pfx_netlink_sendmsg+0x10/0x10 [ 225.915492][T13129] ? __pfx_____sys_sendmsg+0x10/0x10 [ 225.915522][T13129] ? ring_buffer_unlock_commit+0x2e7/0x700 [ 225.915575][T13129] ___sys_sendmsg+0x190/0x1e0 [ 225.915596][T13129] ? __pfx____sys_sendmsg+0x10/0x10 [ 225.915626][T13129] ? find_held_lock+0x2b/0x80 [ 225.915669][T13129] __sys_sendmsg+0x160/0x210 [ 225.915693][T13129] ? __pfx___sys_sendmsg+0x10/0x10 [ 225.915734][T13129] do_syscall_64+0x123/0x790 [ 225.915764][T13129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.915783][T13129] RIP: 0033:0x7fed6b19e159 [ 225.915800][T13129] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.915818][T13129] RSP: 002b:00007fed6c14f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 225.915837][T13129] RAX: ffffffffffffffda RBX: 00007fed6b425fa0 RCX: 00007fed6b19e159 [ 225.915850][T13129] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 225.915861][T13129] RBP: 00007fed6c14f090 R08: 0000000000000000 R09: 0000000000000000 [ 225.915873][T13129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.915885][T13129] R13: 00007fed6b426038 R14: 00007fed6b425fa0 R15: 00007ffdd2620348 [ 225.915910][T13129] [ 225.965972][T13140] FAULT_INJECTION: forcing a failure. [ 225.965972][T13140] name failslab, interval 1, probability 0, space 0, times 0 [ 225.965992][T13140] CPU: 2 UID: 0 PID: 13140 Comm: syz.0.2599 Not tainted syzkaller #0 PREEMPT(full) [ 225.966005][T13140] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 225.966011][T13140] Call Trace: [ 225.966016][T13140] [ 225.966021][T13140] dump_stack_lvl+0x100/0x190 [ 225.966042][T13140] should_fail_ex.cold+0x5/0xa [ 225.966058][T13140] should_failslab+0xc2/0x120 [ 225.966073][T13140] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 225.966087][T13140] ? __alloc_skb+0x140/0x710 [ 225.966104][T13140] __alloc_skb+0x140/0x710 [ 225.966117][T13140] ? __alloc_skb+0x5b7/0x710 [ 225.966136][T13140] ? __pfx___alloc_skb+0x10/0x10 [ 225.966153][T13140] _sctp_make_chunk+0x51/0x270 [ 225.966171][T13140] sctp_make_control+0x2f/0x2d0 [ 225.966188][T13140] sctp_make_strreset_req+0xea/0x420 [ 225.966202][T13140] ? __pfx_sctp_make_strreset_req+0x10/0x10 [ 225.966215][T13140] ? __kmalloc_noprof+0x350/0x840 [ 225.966227][T13140] ? sctp_send_reset_streams+0x30b/0xf30 [ 225.966245][T13140] ? sctp_stream_outq_is_empty+0x17c/0x1f0 [ 225.966264][T13140] sctp_send_reset_streams+0x41d/0xf30 [ 225.966285][T13140] sctp_setsockopt+0x40bc/0xb370 [ 225.966303][T13140] ? __pfx_sctp_setsockopt+0x10/0x10 [ 225.966317][T13140] ? __fget_files+0x215/0x3d0 [ 225.966333][T13140] ? selinux_socket_setsockopt+0x6a/0x80 [ 225.966345][T13140] ? sock_common_setsockopt+0x2e/0xf0 [ 225.966362][T13140] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 225.966381][T13140] do_sock_setsockopt+0xf3/0x1d0 [ 225.966398][T13140] __sys_setsockopt+0x195/0x220 [ 225.966415][T13140] __x64_sys_setsockopt+0xbd/0x160 [ 225.966429][T13140] ? trace_syscall_enter+0xd6/0x120 [ 225.966444][T13140] do_syscall_64+0x123/0x790 [ 225.966462][T13140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.966475][T13140] RIP: 0033:0x7fed6b19e159 [ 225.966485][T13140] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.966495][T13140] RSP: 002b:00007fed6c14f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 225.966507][T13140] RAX: ffffffffffffffda RBX: 00007fed6b425fa0 RCX: 00007fed6b19e159 [ 225.966515][T13140] RDX: 0000000000000077 RSI: 0000000000000084 RDI: 0000000000000003 [ 225.966522][T13140] RBP: 00007fed6c14f090 R08: 000000000000000a R09: 0000000000000000 [ 225.966529][T13140] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000001 [ 225.966535][T13140] R13: 00007fed6b426038 R14: 00007fed6b425fa0 R15: 00007ffdd2620348 [ 225.966550][T13140] [ 226.133727][T13152] tipc: Enabled bearer , priority 0 [ 226.151502][T13152] syzkaller0: entered promiscuous mode [ 226.151518][T13152] syzkaller0: entered allmulticast mode [ 226.151946][T13152] tipc: Resetting bearer [ 226.157120][T13150] tipc: Resetting bearer [ 226.305223][T13161] netlink: zone id is out of range [ 226.305233][T13161] netlink: zone id is out of range [ 226.305236][T13161] netlink: zone id is out of range [ 226.305240][T13161] netlink: zone id is out of range [ 226.305244][T13161] netlink: zone id is out of range [ 226.305248][T13161] netlink: zone id is out of range [ 226.305252][T13161] netlink: zone id is out of range [ 227.339199][T13150] tipc: Disabling bearer [ 227.356579][T13175] syzkaller0: entered promiscuous mode [ 227.356603][T13175] syzkaller0: entered allmulticast mode [ 227.455812][T13191] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 227.466761][T13193] FAULT_INJECTION: forcing a failure. [ 227.466761][T13193] name failslab, interval 1, probability 0, space 0, times 0 [ 227.466779][T13193] CPU: 0 UID: 0 PID: 13193 Comm: syz.0.2614 Not tainted syzkaller #0 PREEMPT(full) [ 227.466792][T13193] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 227.466799][T13193] Call Trace: [ 227.466803][T13193] [ 227.466808][T13193] dump_stack_lvl+0x100/0x190 [ 227.466829][T13193] should_fail_ex.cold+0x5/0xa [ 227.466845][T13193] should_failslab+0xc2/0x120 [ 227.466860][T13193] __kmalloc_noprof+0xfc/0x840 [ 227.466873][T13193] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 227.466894][T13193] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 227.466913][T13193] genl_family_rcv_msg_doit+0xc7/0x300 [ 227.466929][T13193] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 227.466949][T13193] ? bpf_lsm_capable+0x9/0x10 [ 227.466966][T13193] ? security_capable+0x80/0x260 [ 227.466984][T13193] ? ns_capable+0xd2/0xf0 [ 227.466997][T13193] genl_rcv_msg+0x560/0x800 [ 227.467014][T13193] ? __pfx_genl_rcv_msg+0x10/0x10 [ 227.467029][T13193] ? __lock_acquire+0x5c0/0x1f40 [ 227.467041][T13193] ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10 [ 227.467084][T13193] netlink_rcv_skb+0x159/0x420 [ 227.467098][T13193] ? __pfx_genl_rcv_msg+0x10/0x10 [ 227.467113][T13193] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 227.467137][T13193] ? netlink_deliver_tap+0x1ae/0xcc0 [ 227.467170][T13193] genl_rcv+0x28/0x40 [ 227.467183][T13193] netlink_unicast+0x585/0x850 [ 227.467198][T13193] ? __pfx_netlink_unicast+0x10/0x10 [ 227.467211][T13193] ? __build_skb_around+0x278/0x390 [ 227.467226][T13193] netlink_sendmsg+0x8b0/0xda0 [ 227.467242][T13193] ? __pfx_netlink_sendmsg+0x10/0x10 [ 227.467257][T13193] ? selinux_socket_sendmsg+0x198/0x2f0 [ 227.467272][T13193] ____sys_sendmsg+0xa4d/0xbe0 [ 227.467289][T13193] ? __pfx_netlink_sendmsg+0x10/0x10 [ 227.467303][T13193] ? __pfx_____sys_sendmsg+0x10/0x10 [ 227.467322][T13193] ? ring_buffer_unlock_commit+0x2e7/0x700 [ 227.467340][T13193] ___sys_sendmsg+0x190/0x1e0 [ 227.467352][T13193] ? __pfx____sys_sendmsg+0x10/0x10 [ 227.467370][T13193] ? find_held_lock+0x2b/0x80 [ 227.467395][T13193] __sys_sendmsg+0x160/0x210 [ 227.467410][T13193] ? __pfx___sys_sendmsg+0x10/0x10 [ 227.467432][T13193] do_syscall_64+0x123/0x790 [ 227.467450][T13193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.467463][T13193] RIP: 0033:0x7fed6b19e159 [ 227.467473][T13193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.467484][T13193] RSP: 002b:00007fed6c14f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 227.467495][T13193] RAX: ffffffffffffffda RBX: 00007fed6b425fa0 RCX: 00007fed6b19e159 [ 227.467503][T13193] RDX: 0000000004008094 RSI: 00002000000002c0 RDI: 0000000000000003 [ 227.467510][T13193] RBP: 00007fed6c14f090 R08: 0000000000000000 R09: 0000000000000000 [ 227.467517][T13193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.467540][T13193] R13: 00007fed6b426038 R14: 00007fed6b425fa0 R15: 00007ffdd2620348 [ 227.467558][T13193] [ 227.493779][T13195] FAULT_INJECTION: forcing a failure. [ 227.493779][T13195] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 227.493808][T13195] CPU: 3 UID: 0 PID: 13195 Comm: syz.5.2615 Not tainted syzkaller #0 PREEMPT(full) [ 227.493827][T13195] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 227.493839][T13195] Call Trace: [ 227.493846][T13195] [ 227.493854][T13195] dump_stack_lvl+0x100/0x190 [ 227.493886][T13195] should_fail_ex.cold+0x5/0xa [ 227.493907][T13195] ? prepare_alloc_pages+0x16d/0x5b0 [ 227.493934][T13195] should_fail_alloc_page+0xeb/0x140 [ 227.493960][T13195] prepare_alloc_pages+0x1f0/0x5b0 [ 227.493983][T13195] ? __memcg_kmem_charge_page+0x373/0x4d0 [ 227.494013][T13195] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 227.494039][T13195] ? tomoyo_check_open_permission+0x1a2/0x3c0 [ 227.494063][T13195] ? look_up_lock_class+0x55/0x120 [ 227.494097][T13195] ? register_lock_class+0x3f/0x7b0 [ 227.494120][T13195] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 227.494138][T13195] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 227.494162][T13195] ? __lock_acquire+0x5c0/0x1f40 [ 227.494191][T13195] ? __lock_acquire+0x5c0/0x1f40 [ 227.494211][T13195] ? __css_rstat_updated+0x1ce/0x590 [ 227.494238][T13195] ? __lock_acquire+0x5c0/0x1f40 [ 227.494257][T13195] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 227.494281][T13195] ? policy_nodemask+0xed/0x4f0 [ 227.494308][T13195] alloc_pages_mpol+0x201/0x550 [ 227.494333][T13195] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 227.494357][T13195] ? find_held_lock+0x2b/0x80 [ 227.494382][T13195] ? __pud_alloc+0x4f6/0x690 [ 227.494403][T13195] ? __pud_alloc+0x4f6/0x690 [ 227.494427][T13195] alloc_pages_noprof+0x1a/0x160 [ 227.494455][T13195] __pmd_alloc+0x3b/0x950 [ 227.494475][T13195] ? __pud_alloc+0x4fb/0x690 [ 227.494498][T13195] __handle_mm_fault+0xa9d/0x2f60 [ 227.494530][T13195] ? __pfx___handle_mm_fault+0x10/0x10 [ 227.494554][T13195] ? __pfx_mt_find+0x10/0x10 [ 227.494585][T13195] ? find_vma+0xbf/0x140 [ 227.494605][T13195] ? __pfx_find_vma+0x10/0x10 [ 227.494628][T13195] handle_mm_fault+0x363/0xa20 [ 227.494659][T13195] do_user_addr_fault+0x745/0x12f0 [ 227.494691][T13195] exc_page_fault+0x6f/0xd0 [ 227.494718][T13195] asm_exc_page_fault+0x26/0x30 [ 227.494736][T13195] RIP: 0010:_copy_from_user+0x93/0xd0 [ 227.494756][T13195] Code: 30 e1 fc 89 ee 4c 89 ef 48 b8 00 f0 ff ff ff 7f 00 00 48 39 c3 48 0f 47 d8 e8 99 79 54 fd 0f 01 cb 4c 89 ef 48 89 de 48 89 e9 a4 0f 1f 00 49 89 cc 48 89 cb 0f 01 ca 31 ff 48 89 ce e8 a5 2a [ 227.494773][T13195] RSP: 0018:ffffc9000557fb48 EFLAGS: 00050246 [ 227.494789][T13195] RAX: 0000000000000001 RBX: 0000200000000100 RCX: 0000000000000018 [ 227.494800][T13195] RDX: 0000000000000001 RSI: 0000200000000100 RDI: ffffc9000557fbf8 [ 227.494812][T13195] RBP: 0000000000000018 R08: 0000000000000001 R09: fffff52000aaff81 [ 227.494824][T13195] R10: ffffc9000557fc0f R11: 0000000000000000 R12: 0000000000000000 [ 227.494836][T13195] R13: ffffc9000557fbf8 R14: 00000000800452d3 R15: 0000200000000100 [ 227.494860][T13195] ? _copy_from_user+0x87/0xd0 [ 227.494881][T13195] rfcomm_dev_ioctl+0x31f/0x1db0 [ 227.494904][T13195] ? bt_sock_ioctl+0x1df/0x580 [ 227.494924][T13195] ? __pfx_bt_sock_ioctl+0x10/0x10 [ 227.494945][T13195] ? __pfx_rfcomm_dev_ioctl+0x10/0x10 [ 227.494964][T13195] ? tomoyo_path_number_perm+0x28f/0x580 [ 227.494989][T13195] ? tomoyo_path_number_perm+0x188/0x580 [ 227.495012][T13195] rfcomm_sock_ioctl+0xcc/0xf0 [ 227.495041][T13195] sock_do_ioctl+0x118/0x280 [ 227.495068][T13195] ? __pfx_sock_do_ioctl+0x10/0x10 [ 227.495100][T13195] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 227.495127][T13195] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 227.495143][T13195] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 227.495168][T13195] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 227.495195][T13195] sock_ioctl+0x599/0x6b0 [ 227.495214][T13195] ? __pfx_sock_ioctl+0x10/0x10 [ 227.495237][T13195] ? selinux_file_ioctl+0x13b/0x290 [ 227.495256][T13195] ? selinux_file_ioctl+0xb6/0x290 [ 227.495280][T13195] ? __pfx_sock_ioctl+0x10/0x10 [ 227.495299][T13195] __x64_sys_ioctl+0x18e/0x210 [ 227.495320][T13195] do_syscall_64+0x123/0x790 [ 227.495349][T13195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.495368][T13195] RIP: 0033:0x7fd132f9e159 [ 227.495383][T13195] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.495399][T13195] RSP: 002b:00007fd133ee7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 227.495415][T13195] RAX: ffffffffffffffda RBX: 00007fd133225fa0 RCX: 00007fd132f9e159 [ 227.495427][T13195] RDX: 0000200000000100 RSI: 00000000800452d3 RDI: 0000000000000004 [ 227.495439][T13195] RBP: 00007fd133ee7090 R08: 0000000000000000 R09: 0000000000000000 [ 227.495449][T13195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.495459][T13195] R13: 00007fd133226038 R14: 00007fd133225fa0 R15: 00007ffdd987f408 [ 227.495484][T13195] [ 227.621106][T13206] FAULT_INJECTION: forcing a failure. [ 227.621106][T13206] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 227.621128][T13206] CPU: 2 UID: 0 PID: 13206 Comm: syz.1.2619 Not tainted syzkaller #0 PREEMPT(full) [ 227.621141][T13206] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 227.621148][T13206] Call Trace: [ 227.621152][T13206] [ 227.621157][T13206] dump_stack_lvl+0x100/0x190 [ 227.621194][T13206] should_fail_ex.cold+0x5/0xa [ 227.621212][T13206] _copy_from_iter+0x1f4/0x1690 [ 227.621227][T13206] ? __asan_memset+0x23/0x50 [ 227.621239][T13206] ? __pfx__copy_from_iter+0x10/0x10 [ 227.621251][T13206] ? __pfx___alloc_skb+0x10/0x10 [ 227.621271][T13206] netlink_sendmsg+0x808/0xda0 [ 227.621287][T13206] ? __pfx_netlink_sendmsg+0x10/0x10 [ 227.621302][T13206] ? selinux_socket_sendmsg+0x198/0x2f0 [ 227.621318][T13206] ____sys_sendmsg+0xa4d/0xbe0 [ 227.621334][T13206] ? __pfx_netlink_sendmsg+0x10/0x10 [ 227.621349][T13206] ? __pfx_____sys_sendmsg+0x10/0x10 [ 227.621368][T13206] ? ring_buffer_unlock_commit+0x2e7/0x700 [ 227.621386][T13206] ___sys_sendmsg+0x190/0x1e0 [ 227.621398][T13206] ? __pfx____sys_sendmsg+0x10/0x10 [ 227.621416][T13206] ? find_held_lock+0x2b/0x80 [ 227.621441][T13206] __sys_sendmsg+0x160/0x210 [ 227.621456][T13206] ? __pfx___sys_sendmsg+0x10/0x10 [ 227.621478][T13206] do_syscall_64+0x123/0x790 [ 227.621497][T13206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.621509][T13206] RIP: 0033:0x7fa7e119e159 [ 227.621519][T13206] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.621531][T13206] RSP: 002b:00007fa7e207e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 227.621542][T13206] RAX: ffffffffffffffda RBX: 00007fa7e1425fa0 RCX: 00007fa7e119e159 [ 227.621550][T13206] RDX: 0000000020000000 RSI: 000020000000c2c0 RDI: 0000000000000003 [ 227.621557][T13206] RBP: 00007fa7e207e090 R08: 0000000000000000 R09: 0000000000000000 [ 227.621564][T13206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.621571][T13206] R13: 00007fa7e1426038 R14: 00007fa7e1425fa0 R15: 00007fff17e5ab58 [ 227.621590][T13206] [ 227.655360][T13204] tipc: Enabled bearer , priority 0 [ 227.676162][T13209] input: syz1 as /devices/virtual/input/input9 [ 227.683949][T13209] netlink: 'syz.1.2620': attribute type 8 has an invalid length. [ 227.715004][T13204] syzkaller0: entered promiscuous mode [ 227.715019][T13204] syzkaller0: entered allmulticast mode [ 227.715430][T13204] tipc: Resetting bearer [ 227.741242][T13203] tipc: Resetting bearer [ 228.914089][T13203] tipc: Disabling bearer [ 229.064223][T13246] netlink: 'syz.0.2629': attribute type 1 has an invalid length. [ 229.118700][T13253] tipc: Enabled bearer , priority 0 [ 229.147379][T13253] syzkaller0: entered promiscuous mode [ 229.147402][T13253] syzkaller0: entered allmulticast mode [ 229.148100][T13253] tipc: Resetting bearer [ 229.151494][T13249] netlink: 'syz.5.2631': attribute type 32 has an invalid length. [ 229.151511][T13249] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2631'. [ 229.152871][T13256] netlink: 'syz.1.2634': attribute type 1 has an invalid length. [ 229.162162][T13252] tipc: Resetting bearer [ 229.207226][T13259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2634'. [ 229.261728][T13261] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2634'. [ 229.535502][ T5884] net_ratelimit: 1721 callbacks suppressed [ 229.535536][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.331795][ T5839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.334225][T13252] tipc: Disabling bearer [ 230.345225][T13271] syzkaller0: entered promiscuous mode [ 230.345241][T13271] syzkaller0: entered allmulticast mode [ 230.398474][ T43] kauditd_printk_skb: 77 callbacks suppressed [ 230.398491][ T43] audit: type=1400 audit(1790559890.735:725): avc: denied { read write } for pid=13280 comm="syz.1.2638" name="rtc0" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 230.399728][ T43] audit: type=1400 audit(1790559890.735:726): avc: denied { open } for pid=13280 comm="syz.1.2638" path="/dev/rtc0" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 230.399757][ T43] audit: type=1400 audit(1790559890.735:727): avc: denied { ioctl } for pid=13280 comm="syz.1.2638" path="/dev/rtc0" dev="devtmpfs" ino=942 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 230.409019][ T43] audit: type=1400 audit(1790559890.744:728): avc: denied { getopt } for pid=13280 comm="syz.1.2638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 230.488013][T13290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.488063][T13290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.488100][T13290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.488316][T13290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.488354][T13290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.488390][T13290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.489732][T13290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.489789][T13290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.493266][T13296] netlink: 'syz.1.2646': attribute type 2 has an invalid length. [ 230.498598][ T43] audit: type=1400 audit(1790559890.834:729): avc: denied { read append } for pid=13286 comm="syz.5.2642" name="ppp" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 230.498627][ T43] audit: type=1400 audit(1790559890.834:730): avc: denied { open } for pid=13286 comm="syz.5.2642" path="/dev/ppp" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 230.499018][T13295] FAULT_INJECTION: forcing a failure. [ 230.499018][T13295] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 230.499036][T13295] CPU: 2 UID: 0 PID: 13295 Comm: syz.0.2645 Not tainted syzkaller #0 PREEMPT(full) [ 230.499049][T13295] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 230.499055][T13295] Call Trace: [ 230.499060][T13295] [ 230.499064][T13295] dump_stack_lvl+0x100/0x190 [ 230.499085][T13295] should_fail_ex.cold+0x5/0xa [ 230.499101][T13295] _copy_from_user+0x2e/0xd0 [ 230.499115][T13295] kstrtouint_from_user+0xd6/0x1d0 [ 230.499132][T13295] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 230.499168][T13295] ? lock_acquire+0x1d1/0x380 [ 230.499184][T13295] proc_fail_nth_write+0x83/0x220 [ 230.499199][T13295] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 230.499218][T13295] vfs_write+0x2aa/0x1050 [ 230.499231][T13295] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 230.499245][T13295] ? lock_acquire+0x1d1/0x380 [ 230.499257][T13295] ? __fget_files+0x34/0x3d0 [ 230.499272][T13295] ? __pfx_vfs_write+0x10/0x10 [ 230.499283][T13295] ? find_held_lock+0x2b/0x80 [ 230.499300][T13295] ? __fget_files+0x215/0x3d0 [ 230.499316][T13295] ? __fget_files+0x21f/0x3d0 [ 230.499335][T13295] ksys_write+0x12a/0x250 [ 230.499347][T13295] ? __pfx_ksys_write+0x10/0x10 [ 230.499358][T13295] ? trace_syscall_enter+0xcc/0x120 [ 230.499378][T13295] do_syscall_64+0x123/0x790 [ 230.499396][T13295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.499408][T13295] RIP: 0033:0x7fed6b15e98e [ 230.499418][T13295] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 230.499429][T13295] RSP: 002b:00007fed6c14efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 230.499441][T13295] RAX: ffffffffffffffda RBX: 00007fed6c14f6c0 RCX: 00007fed6b15e98e [ 230.499448][T13295] RDX: 0000000000000001 RSI: 00007fed6c14f0a0 RDI: 0000000000000006 [ 230.499455][T13295] RBP: 00007fed6c14f090 R08: 0000000000000000 R09: 0000000000000000 [ 230.499462][T13295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.499469][T13295] R13: 00007fed6b426038 R14: 00007fed6b425fa0 R15: 00007ffdd2620348 [ 230.499484][T13295] [ 230.640176][T13303] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2648'. [ 230.674470][T13305] tipc: Enabled bearer , priority 0 [ 230.691457][T13305] syzkaller0: entered promiscuous mode [ 230.691472][T13305] syzkaller0: entered allmulticast mode [ 230.692071][T13305] tipc: Resetting bearer [ 230.698215][T13304] tipc: Resetting bearer [ 230.853912][T13311] xt_hashlimit: size too large, truncated to 1048576 [ 230.854175][T13311] xt_hashlimit: max too large, truncated to 1048576 [ 230.854300][T13311] xt_hashlimit: Unknown mode mask 52C95688, kernel too old? [ 231.586138][T13330] FAULT_INJECTION: forcing a failure. [ 231.586138][T13330] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 231.586158][T13330] CPU: 3 UID: 0 PID: 13330 Comm: syz.5.2654 Not tainted syzkaller #0 PREEMPT(full) [ 231.586172][T13330] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 231.586178][T13330] Call Trace: [ 231.586183][T13330] [ 231.586187][T13330] dump_stack_lvl+0x100/0x190 [ 231.586207][T13330] should_fail_ex.cold+0x5/0xa [ 231.586224][T13330] _copy_to_user+0x32/0xd0 [ 231.586238][T13330] simple_read_from_buffer+0xcb/0x170 [ 231.586254][T13330] proc_fail_nth_read+0x1af/0x230 [ 231.586269][T13330] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 231.586285][T13330] ? rw_verify_area+0xce/0x6d0 [ 231.586302][T13330] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 231.586317][T13330] vfs_read+0x1e4/0xb40 [ 231.586329][T13330] ? lock_acquire+0x1d1/0x380 [ 231.586341][T13330] ? __fget_files+0x34/0x3d0 [ 231.586355][T13330] ? __pfx_vfs_read+0x10/0x10 [ 231.586365][T13330] ? find_held_lock+0x2b/0x80 [ 231.586382][T13330] ? __fget_files+0x215/0x3d0 [ 231.586398][T13330] ? __fget_files+0x21f/0x3d0 [ 231.586416][T13330] ksys_read+0x12a/0x250 [ 231.586428][T13330] ? __pfx_ksys_read+0x10/0x10 [ 231.586439][T13330] ? trace_syscall_enter+0xcc/0x120 [ 231.586458][T13330] do_syscall_64+0x123/0x790 [ 231.586476][T13330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.586489][T13330] RIP: 0033:0x7fd132f5e98e [ 231.586498][T13330] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 231.586509][T13330] RSP: 002b:00007fd133ee6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 231.586520][T13330] RAX: ffffffffffffffda RBX: 00007fd133ee76c0 RCX: 00007fd132f5e98e [ 231.586528][T13330] RDX: 000000000000000f RSI: 00007fd133ee70a0 RDI: 0000000000000005 [ 231.586534][T13330] RBP: 00007fd133ee7090 R08: 0000000000000000 R09: 0000000000000000 [ 231.586541][T13330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.586547][T13330] R13: 00007fd133226038 R14: 00007fd133225fa0 R15: 00007ffdd987f408 [ 231.586562][T13330] [ 231.660454][T13332] FAULT_INJECTION: forcing a failure. [ 231.660454][T13332] name failslab, interval 1, probability 0, space 0, times 0 [ 231.660482][T13332] CPU: 1 UID: 0 PID: 13332 Comm: syz.5.2655 Not tainted syzkaller #0 PREEMPT(full) [ 231.660501][T13332] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 231.660511][T13332] Call Trace: [ 231.660517][T13332] [ 231.660524][T13332] dump_stack_lvl+0x100/0x190 [ 231.660552][T13332] should_fail_ex.cold+0x5/0xa [ 231.660573][T13332] should_failslab+0xc2/0x120 [ 231.660595][T13332] kmem_cache_alloc_noprof+0x92/0x6a0 [ 231.660614][T13332] ? ovs_flow_alloc+0x1e/0x210 [ 231.660638][T13332] ovs_flow_alloc+0x1e/0x210 [ 231.660658][T13332] ovs_flow_cmd_new+0x231/0xe10 [ 231.660683][T13332] ? kasan_save_stack+0x30/0x50 [ 231.660701][T13332] ? kasan_save_track+0x14/0x30 [ 231.660719][T13332] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 231.660740][T13332] ? genl_family_rcv_msg_doit+0xc7/0x300 [ 231.660762][T13332] ? netlink_rcv_skb+0x159/0x420 [ 231.660780][T13332] ? genl_rcv+0x28/0x40 [ 231.660798][T13332] ? netlink_unicast+0x585/0x850 [ 231.660817][T13332] ? __sys_sendmsg+0x160/0x210 [ 231.660840][T13332] ? do_syscall_64+0x123/0x790 [ 231.660863][T13332] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.660916][T13332] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 231.660938][T13332] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 231.660964][T13332] genl_family_rcv_msg_doit+0x214/0x300 [ 231.660988][T13332] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 231.661017][T13332] ? bpf_lsm_capable+0x9/0x10 [ 231.661040][T13332] ? security_capable+0x80/0x260 [ 231.661066][T13332] ? ns_capable+0xd2/0xf0 [ 231.661086][T13332] genl_rcv_msg+0x560/0x800 [ 231.661110][T13332] ? __pfx_genl_rcv_msg+0x10/0x10 [ 231.661131][T13332] ? __lock_acquire+0x5c0/0x1f40 [ 231.661148][T13332] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 231.661184][T13332] netlink_rcv_skb+0x159/0x420 [ 231.661202][T13332] ? __pfx_genl_rcv_msg+0x10/0x10 [ 231.661225][T13332] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 231.661253][T13332] ? netlink_deliver_tap+0x1ae/0xcc0 [ 231.661275][T13332] genl_rcv+0x28/0x40 [ 231.661293][T13332] netlink_unicast+0x585/0x850 [ 231.661315][T13332] ? __pfx_netlink_unicast+0x10/0x10 [ 231.661340][T13332] netlink_sendmsg+0x8b0/0xda0 [ 231.661363][T13332] ? __pfx_netlink_sendmsg+0x10/0x10 [ 231.661385][T13332] ? selinux_socket_sendmsg+0x198/0x2f0 [ 231.661407][T13332] ____sys_sendmsg+0xa4d/0xbe0 [ 231.661431][T13332] ? __pfx_netlink_sendmsg+0x10/0x10 [ 231.661452][T13332] ? __pfx_____sys_sendmsg+0x10/0x10 [ 231.661479][T13332] ? ring_buffer_unlock_commit+0x2e7/0x700 [ 231.661506][T13332] ___sys_sendmsg+0x190/0x1e0 [ 231.661525][T13332] ? __pfx____sys_sendmsg+0x10/0x10 [ 231.661553][T13332] ? find_held_lock+0x2b/0x80 [ 231.661591][T13332] __sys_sendmsg+0x160/0x210 [ 231.661612][T13332] ? __pfx___sys_sendmsg+0x10/0x10 [ 231.661647][T13332] do_syscall_64+0x123/0x790 [ 231.661673][T13332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.661690][T13332] RIP: 0033:0x7fd132f9e159 [ 231.661705][T13332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.661720][T13332] RSP: 002b:00007fd133ee7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 231.661737][T13332] RAX: ffffffffffffffda RBX: 00007fd133225fa0 RCX: 00007fd132f9e159 [ 231.661748][T13332] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000005 [ 231.661758][T13332] RBP: 00007fd133ee7090 R08: 0000000000000000 R09: 0000000000000000 [ 231.661768][T13332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.661777][T13332] R13: 00007fd133226038 R14: 00007fd133225fa0 R15: 00007ffdd987f408 [ 231.661801][T13332] [ 232.009609][T13304] tipc: Disabling bearer [ 232.013308][T13309] gretap0: entered promiscuous mode [ 232.013481][T13310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2651'. [ 232.013504][T13310] gretap0: left promiscuous mode [ 232.159311][T13347] FAULT_INJECTION: forcing a failure. [ 232.159311][T13347] name failslab, interval 1, probability 0, space 0, times 0 [ 232.159341][T13347] CPU: 3 UID: 0 PID: 13347 Comm: syz.4.2660 Not tainted syzkaller #0 PREEMPT(full) [ 232.159362][T13347] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 232.159374][T13347] Call Trace: [ 232.159381][T13347] [ 232.159389][T13347] dump_stack_lvl+0x100/0x190 [ 232.159421][T13347] should_fail_ex.cold+0x5/0xa [ 232.159448][T13347] should_failslab+0xc2/0x120 [ 232.159473][T13347] kmem_cache_alloc_noprof+0x92/0x6a0 [ 232.159494][T13347] ? __pfx___alloc_skb+0x10/0x10 [ 232.159548][T13347] ? __skb_ext_alloc+0x1a/0x80 [ 232.159577][T13347] __skb_ext_alloc+0x1a/0x80 [ 232.159595][T13347] mptcp_sendmsg_frag+0x7f3/0x3020 [ 232.159621][T13347] ? lockdep_count_forward_deps+0x1a8/0x200 [ 232.159651][T13347] ? __pfx_mptcp_sendmsg_frag+0x10/0x10 [ 232.159675][T13347] ? lock_acquire+0x1d1/0x380 [ 232.159699][T13347] __subflow_push_pending+0x34b/0xbb0 [ 232.159735][T13347] __mptcp_push_pending+0x2cc/0x540 [ 232.159767][T13347] ? __pfx___mptcp_push_pending+0x10/0x10 [ 232.159803][T13347] mptcp_sendmsg+0xda9/0x2210 [ 232.159842][T13347] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 232.159875][T13347] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 232.159904][T13347] inet6_sendmsg+0x11c/0x140 [ 232.159924][T13347] ____sys_sendmsg+0x704/0xbe0 [ 232.159955][T13347] ? __pfx_____sys_sendmsg+0x10/0x10 [ 232.159990][T13347] ? ring_buffer_lock_reserve+0x4bb/0x1220 [ 232.160014][T13347] ___sys_sendmsg+0x190/0x1e0 [ 232.160035][T13347] ? __pfx____sys_sendmsg+0x10/0x10 [ 232.160064][T13347] ? __fget_files+0x34/0x3d0 [ 232.160108][T13347] __sys_sendmmsg+0x20c/0x440 [ 232.160135][T13347] ? __pfx___sys_sendmmsg+0x10/0x10 [ 232.160182][T13347] ? find_held_lock+0x2b/0x80 [ 232.160207][T13347] ? trace_syscall_enter+0xcc/0x120 [ 232.160230][T13347] ? trace_syscall_enter+0xcc/0x120 [ 232.160258][T13347] __x64_sys_sendmmsg+0x9c/0x100 [ 232.160281][T13347] ? trace_syscall_enter+0xd6/0x120 [ 232.160304][T13347] do_syscall_64+0x123/0x790 [ 232.160334][T13347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.160353][T13347] RIP: 0033:0x7f3f5119e159 [ 232.160370][T13347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.160387][T13347] RSP: 002b:00007f3f4f3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 232.160406][T13347] RAX: ffffffffffffffda RBX: 00007f3f51425fa0 RCX: 00007f3f5119e159 [ 232.160419][T13347] RDX: 0000000000000001 RSI: 0000200000000ec0 RDI: 0000000000000003 [ 232.160430][T13347] RBP: 00007f3f4f3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 232.160442][T13347] R10: 0000000004004000 R11: 0000000000000246 R12: 0000000000000001 [ 232.160454][T13347] R13: 00007f3f51426038 R14: 00007f3f51425fa0 R15: 00007fff68d74f58 [ 232.160480][T13347] [ 232.301744][T13355] syzkaller0: entered promiscuous mode [ 232.301757][T13355] syzkaller0: entered allmulticast mode [ 232.301767][T13357] raw_sendmsg: syz.0.2666 forgot to set AF_INET. Fix it! [ 232.355228][T13360] tipc: Enabled bearer , priority 0 [ 232.374552][T13360] syzkaller0: entered promiscuous mode [ 232.374570][T13360] syzkaller0: entered allmulticast mode [ 232.375011][T13360] tipc: Resetting bearer [ 232.379193][T13359] tipc: Resetting bearer [ 232.554671][ T5839] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 232.712212][ T5839] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40 [ 232.718463][ T5839] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 232.718479][ T5839] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 232.720120][ T5839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.720134][ T5839] usb 5-1: Product: syz [ 232.720143][ T5839] usb 5-1: Manufacturer: syz [ 232.720152][ T5839] usb 5-1: SerialNumber: syz [ 233.003207][ T43] audit: type=1400 audit(1790559893.328:731): avc: denied { listen } for pid=13356 comm="syz.0.2666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 233.003468][ T43] audit: type=1400 audit(1790559893.328:732): avc: denied { accept } for pid=13356 comm="syz.0.2666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 233.687715][T13359] tipc: Disabling bearer [ 233.872561][ T43] audit: type=1400 audit(1790559894.193:733): avc: denied { mount } for pid=13389 comm="syz.4.2673" name="/" dev="autofs" ino=41594 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 233.893324][ T43] audit: type=1400 audit(1790559894.213:734): avc: denied { unmount } for pid=11178 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 233.962023][T13401] FAULT_INJECTION: forcing a failure. [ 233.962023][T13401] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 233.962052][T13401] CPU: 1 UID: 0 PID: 13401 Comm: syz.4.2677 Not tainted syzkaller #0 PREEMPT(full) [ 233.962082][T13401] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 233.962093][T13401] Call Trace: [ 233.962100][T13401] [ 233.962109][T13401] dump_stack_lvl+0x100/0x190 [ 233.962153][T13401] should_fail_ex.cold+0x5/0xa [ 233.962180][T13401] _copy_to_user+0x32/0xd0 [ 233.962210][T13401] simple_read_from_buffer+0xcb/0x170 [ 233.962238][T13401] proc_fail_nth_read+0x1af/0x230 [ 233.962265][T13401] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 233.962291][T13401] ? rw_verify_area+0xce/0x6d0 [ 233.962320][T13401] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 233.962344][T13401] vfs_read+0x1e4/0xb40 [ 233.962363][T13401] ? lock_acquire+0x1d1/0x380 [ 233.962384][T13401] ? __fget_files+0x34/0x3d0 [ 233.962407][T13401] ? __pfx_vfs_read+0x10/0x10 [ 233.962422][T13401] ? find_held_lock+0x2b/0x80 [ 233.962448][T13401] ? __fget_files+0x215/0x3d0 [ 233.962475][T13401] ? __fget_files+0x21f/0x3d0 [ 233.962507][T13401] ksys_read+0x12a/0x250 [ 233.962527][T13401] ? __pfx_ksys_read+0x10/0x10 [ 233.962544][T13401] ? trace_syscall_enter+0xcc/0x120 [ 233.962574][T13401] do_syscall_64+0x123/0x790 [ 233.962609][T13401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.962631][T13401] RIP: 0033:0x7f3f5115e98e [ 233.962647][T13401] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 233.962665][T13401] RSP: 002b:00007f3f4f3f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 233.962685][T13401] RAX: ffffffffffffffda RBX: 00007f3f4f3f66c0 RCX: 00007f3f5115e98e [ 233.962699][T13401] RDX: 000000000000000f RSI: 00007f3f4f3f60a0 RDI: 0000000000000004 [ 233.962710][T13401] RBP: 00007f3f4f3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 233.962723][T13401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.962734][T13401] R13: 00007f3f51426038 R14: 00007f3f51425fa0 R15: 00007fff68d74f58 [ 233.962767][T13401] [ 234.085807][T13407] tipc: Enabled bearer , priority 0 [ 234.107637][T13407] syzkaller0: entered promiscuous mode [ 234.107655][T13407] syzkaller0: entered allmulticast mode [ 234.108022][T13407] tipc: Resetting bearer [ 234.111982][T13406] tipc: Resetting bearer [ 234.152345][ T5882] usb 10-1: new low-speed USB device number 6 using dummy_hcd [ 234.303630][ T5882] usb 10-1: Invalid ep0 maxpacket: 64 [ 234.435379][ T5882] usb 10-1: new low-speed USB device number 7 using dummy_hcd [ 234.584716][ T5882] usb 10-1: Invalid ep0 maxpacket: 64 [ 234.585021][ T5882] usb usb10-port1: attempt power cycle [ 234.730303][T13411] netlink: 'syz.1.2682': attribute type 10 has an invalid length. [ 234.757452][ T1359] net_ratelimit: 58 callbacks suppressed [ 234.757468][ T1359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.936567][ T5882] usb 10-1: new low-speed USB device number 8 using dummy_hcd [ 234.962033][ T5882] usb 10-1: Invalid ep0 maxpacket: 64 [ 235.097274][ T5882] usb 10-1: new low-speed USB device number 9 using dummy_hcd [ 235.117892][ T5882] usb 10-1: Invalid ep0 maxpacket: 64 [ 235.118062][ T5882] usb usb10-port1: unable to enumerate USB device [ 235.157798][ T5819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.270164][T13406] tipc: Disabling bearer [ 235.273793][T13411] syz_tun: entered promiscuous mode [ 235.278638][T13411] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 235.403567][T13419] FAULT_INJECTION: forcing a failure. [ 235.403567][T13419] name failslab, interval 1, probability 0, space 0, times 0 [ 235.403588][T13419] CPU: 3 UID: 0 PID: 13419 Comm: syz.4.2686 Not tainted syzkaller #0 PREEMPT(full) [ 235.403601][T13419] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 235.403608][T13419] Call Trace: [ 235.403612][T13419] [ 235.403617][T13419] dump_stack_lvl+0x100/0x190 [ 235.403638][T13419] should_fail_ex.cold+0x5/0xa [ 235.403659][T13419] should_failslab+0xc2/0x120 [ 235.403683][T13419] __kmalloc_noprof+0xfc/0x840 [ 235.403698][T13419] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 235.403725][T13419] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 235.403759][T13419] genl_family_rcv_msg_doit+0xc7/0x300 [ 235.403786][T13419] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 235.403807][T13419] ? bpf_lsm_capable+0x9/0x10 [ 235.403824][T13419] ? security_capable+0x80/0x260 [ 235.403845][T13419] ? ns_capable+0xd2/0xf0 [ 235.403865][T13419] genl_rcv_msg+0x560/0x800 [ 235.403888][T13419] ? __pfx_genl_rcv_msg+0x10/0x10 [ 235.403903][T13419] ? __lock_acquire+0x5c0/0x1f40 [ 235.403916][T13419] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 235.403935][T13419] ? __pfx_nl80211_join_mesh+0x10/0x10 [ 235.403955][T13419] ? __pfx_nl80211_post_doit+0x10/0x10 [ 235.404025][T13419] netlink_rcv_skb+0x159/0x420 [ 235.404048][T13419] ? __pfx_genl_rcv_msg+0x10/0x10 [ 235.404071][T13419] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 235.404099][T13419] ? netlink_deliver_tap+0x1ae/0xcc0 [ 235.404119][T13419] genl_rcv+0x28/0x40 [ 235.404139][T13419] netlink_unicast+0x585/0x850 [ 235.404162][T13419] ? __pfx_netlink_unicast+0x10/0x10 [ 235.404187][T13419] netlink_sendmsg+0x8b0/0xda0 [ 235.404208][T13419] ? __pfx_netlink_sendmsg+0x10/0x10 [ 235.404231][T13419] ? selinux_socket_sendmsg+0x198/0x2f0 [ 235.404255][T13419] ____sys_sendmsg+0xa4d/0xbe0 [ 235.404277][T13419] ? __pfx_netlink_sendmsg+0x10/0x10 [ 235.404297][T13419] ? __pfx_____sys_sendmsg+0x10/0x10 [ 235.404326][T13419] ? ring_buffer_unlock_commit+0x2e7/0x700 [ 235.404354][T13419] ___sys_sendmsg+0x190/0x1e0 [ 235.404372][T13419] ? __pfx____sys_sendmsg+0x10/0x10 [ 235.404401][T13419] ? find_held_lock+0x2b/0x80 [ 235.404436][T13419] __sys_sendmsg+0x160/0x210 [ 235.404459][T13419] ? __pfx___sys_sendmsg+0x10/0x10 [ 235.404491][T13419] do_syscall_64+0x123/0x790 [ 235.404517][T13419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.404542][T13419] RIP: 0033:0x7f3f5119e159 [ 235.404556][T13419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.404573][T13419] RSP: 002b:00007f3f4f3f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 235.404585][T13419] RAX: ffffffffffffffda RBX: 00007f3f51425fa0 RCX: 00007f3f5119e159 [ 235.404596][T13419] RDX: 0000000000000000 RSI: 0000200000000700 RDI: 0000000000000003 [ 235.404607][T13419] RBP: 00007f3f4f3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 235.404617][T13419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.404627][T13419] R13: 00007f3f51426038 R14: 00007f3f51425fa0 R15: 00007fff68d74f58 [ 235.404652][T13419] [ 235.412607][ T5839] usb 5-1: Unsupported UAC3 BADD profile [ 235.472608][T13422] syzkaller0: entered promiscuous mode [ 235.472629][T13422] syzkaller0: entered allmulticast mode [ 235.486778][ T5839] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 235.499886][ T5839] usb 5-1: USB disconnect, device number 2 [ 235.506245][ T43] kauditd_printk_skb: 1 callbacks suppressed [ 235.506257][ T43] audit: type=1804 audit(1790559895.815:736): pid=13424 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.2688" name="/newroot/163/file0" dev="tmpfs" ino=884 res=1 errno=0 [ 235.507403][T13424] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2688'. [ 235.514771][ T5752] udevd[5752]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 235.541342][T13425] syz.0.2687 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=1, oom_score_adj=1000 [ 235.541366][T13425] CPU: 3 UID: 0 PID: 13425 Comm: syz.0.2687 Not tainted syzkaller #0 PREEMPT(full) [ 235.541381][T13425] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 235.541388][T13425] Call Trace: [ 235.541392][T13425] [ 235.541397][T13425] dump_stack_lvl+0x100/0x190 [ 235.541419][T13425] dump_header+0xfb/0x606 [ 235.541433][T13425] oom_kill_process.cold+0xd/0x380 [ 235.541449][T13425] out_of_memory+0x340/0x14f0 [ 235.541468][T13425] ? __pfx_out_of_memory+0x10/0x10 [ 235.541488][T13425] mem_cgroup_out_of_memory+0xc6/0x130 [ 235.541503][T13425] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 235.541516][T13425] ? find_held_lock+0x2b/0x80 [ 235.541534][T13425] ? do_raw_spin_unlock+0x145/0x1e0 [ 235.541549][T13425] ? _raw_spin_unlock+0x28/0x50 [ 235.541566][T13425] try_charge_memcg+0x783/0xf60 [ 235.541585][T13425] ? __pfx_try_charge_memcg+0x10/0x10 [ 235.541602][T13425] ? find_held_lock+0x2b/0x80 [ 235.541617][T13425] ? rcu_read_unlock+0x17/0x60 [ 235.541633][T13425] ? rcu_read_unlock+0x17/0x60 [ 235.541654][T13425] obj_cgroup_charge_pages+0x2b/0x1f0 [ 235.541673][T13425] __memcg_slab_post_alloc_hook+0x47f/0x10c0 [ 235.541694][T13425] ? kasan_unpoison+0x27/0x60 [ 235.541709][T13425] __kvmalloc_node_noprof+0x750/0x9b0 [ 235.541724][T13425] ? do_raw_spin_lock+0x128/0x260 [ 235.541739][T13425] ? alloc_fdtable+0x110/0x2d0 [ 235.541755][T13425] alloc_fdtable+0x110/0x2d0 [ 235.541769][T13425] dup_fd+0x995/0xd10 [ 235.541784][T13425] ? do_raw_spin_unlock+0x145/0x1e0 [ 235.541799][T13425] ? _raw_spin_unlock+0x28/0x50 [ 235.541812][T13425] ? copy_fs_struct+0x2a0/0x340 [ 235.541826][T13425] ksys_unshare+0x7c7/0xa70 [ 235.541841][T13425] ? __pfx_ksys_unshare+0x10/0x10 [ 235.541855][T13425] ? find_held_lock+0x2b/0x80 [ 235.541891][T13425] ? trace_syscall_enter+0xcc/0x120 [ 235.541906][T13425] ? trace_syscall_enter+0xcc/0x120 [ 235.541925][T13425] __x64_sys_unshare+0x31/0x40 [ 235.541940][T13425] do_syscall_64+0x123/0x790 [ 235.541960][T13425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.541973][T13425] RIP: 0033:0x7fed6b19e159 [ 235.541984][T13425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.541995][T13425] RSP: 002b:00007fed6c14f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 235.542007][T13425] RAX: ffffffffffffffda RBX: 00007fed6b425fa0 RCX: 00007fed6b19e159 [ 235.542014][T13425] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020400 [ 235.542021][T13425] RBP: 00007fed6b23506b R08: 0000000000000000 R09: 0000000000000000 [ 235.542028][T13425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 235.542035][T13425] R13: 00007fed6b426038 R14: 00007fed6b425fa0 R15: 00007ffdd2620348 [ 235.542050][T13425] [ 235.542938][T13425] memory: usage 4kB, limit 8kB, failcnt 20 [ 235.542950][T13425] memory+swap: usage 4kB, limit 9007199254740988kB, failcnt 0 [ 235.542966][T13425] kmem: usage 4kB, limit 9007199254740988kB, failcnt 0 [ 235.542974][T13425] Memory cgroup stats for /syz0/test: [ 235.543051][T13425] cache 0 [ 235.543057][T13425] rss 0 [ 235.543061][T13425] rss_huge 0 [ 235.543070][T13425] shmem 0 [ 235.543075][T13425] mapped_file 0 [ 235.543079][T13425] dirty 0 [ 235.543083][T13425] writeback 0 [ 235.543088][T13425] workingset_refault_anon 0 [ 235.543093][T13425] workingset_refault_file 0 [ 235.543098][T13425] swap 0 [ 235.543102][T13425] swapcached 0 [ 235.543107][T13425] pgpgin 0 [ 235.543111][T13425] pgpgout 0 [ 235.543116][T13425] pgfault 0 [ 235.543120][T13425] pgmajfault 0 [ 235.543125][T13425] inactive_anon 0 [ 235.543129][T13425] active_anon 0 [ 235.543133][T13425] inactive_file 0 [ 235.543137][T13425] active_file 0 [ 235.543142][T13425] unevictable 0 [ 235.543146][T13425] hierarchical_memory_limit 8192 [ 235.543151][T13425] hierarchical_memsw_limit 9223372036854771712 [ 235.543157][T13425] total_cache 0 [ 235.543162][T13425] total_rss 0 [ 235.543166][T13425] total_rss_huge 0 [ 235.543976][T13425] total_shmem 0 [ 235.543984][T13425] total_mapped_file 0 [ 235.543989][T13425] total_dirty 0 [ 235.543993][T13425] total_writeback 0 [ 235.543998][T13425] total_workingset_refault_anon 0 [ 235.544004][T13425] total_workingset_refault_file 0 [ 235.544009][T13425] total_swap 0 [ 235.544013][T13425] total_swapcached 0 [ 235.544018][T13425] total_pgpgin 0 [ 235.544023][T13425] total_pgpgout 0 [ 235.544027][T13425] total_pgfault 0 [ 235.544032][T13425] total_pgmajfault 0 [ 235.544037][T13425] total_inactive_anon 0 [ 235.544042][T13425] total_active_anon 0 [ 235.544047][T13425] total_inactive_file 0 [ 235.544052][T13425] total_active_file 0 [ 235.544056][T13425] total_unevictable 0 [ 235.544061][T13425] anon_cost 0 [ 235.544071][T13425] file_cost 0 [ 235.544075][T13425] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0/test,task_memcg=/syz0/test,task=syz.0.2687,pid=13421,uid=0 [ 235.544693][T13425] Memory cgroup out of memory: Killed process 13421 (syz.0.2687) total-vm:103856kB, anon-rss:1676kB, file-rss:24788kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 235.552048][T13427] FAULT_INJECTION: forcing a failure. [ 235.552048][T13427] name failslab, interval 1, probability 0, space 0, times 0 [ 235.552074][T13427] CPU: 2 UID: 0 PID: 13427 Comm: syz.4.2689 Not tainted syzkaller #0 PREEMPT(full) [ 235.552092][T13427] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 235.552101][T13427] Call Trace: [ 235.552108][T13427] [ 235.552116][T13427] dump_stack_lvl+0x100/0x190 [ 235.552146][T13427] should_fail_ex.cold+0x5/0xa [ 235.552168][T13427] ? __netlink_lookup+0x652/0x900 [ 235.552191][T13427] should_failslab+0xc2/0x120 [ 235.552213][T13427] kmem_cache_alloc_noprof+0x92/0x6a0 [ 235.552234][T13427] ? skb_clone+0x190/0x400 [ 235.552261][T13427] skb_clone+0x190/0x400 [ 235.552285][T13427] netlink_deliver_tap+0xaed/0xcc0 [ 235.552310][T13427] netlink_unicast+0x62b/0x850 [ 235.552332][T13427] ? __pfx_netlink_unicast+0x10/0x10 [ 235.552360][T13427] netlink_sendmsg+0x8b0/0xda0 [ 235.552385][T13427] ? __pfx_netlink_sendmsg+0x10/0x10 [ 235.552409][T13427] ? selinux_socket_sendmsg+0x198/0x2f0 [ 235.552435][T13427] ____sys_sendmsg+0xa4d/0xbe0 [ 235.552459][T13427] ? __pfx_netlink_sendmsg+0x10/0x10 [ 235.552482][T13427] ? __pfx_____sys_sendmsg+0x10/0x10 [ 235.552513][T13427] ? ring_buffer_unlock_commit+0x2e7/0x700 [ 235.552542][T13427] ___sys_sendmsg+0x190/0x1e0 [ 235.552559][T13427] ? __pfx____sys_sendmsg+0x10/0x10 [ 235.552589][T13427] ? find_held_lock+0x2b/0x80 [ 235.552632][T13427] __sys_sendmsg+0x160/0x210 [ 235.552655][T13427] ? __pfx___sys_sendmsg+0x10/0x10 [ 235.552690][T13427] do_syscall_64+0x123/0x790 [ 235.552720][T13427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.552745][T13427] RIP: 0033:0x7f3f5119e159 [ 235.552761][T13427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.552777][T13427] RSP: 002b:00007f3f4f3f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 235.552793][T13427] RAX: ffffffffffffffda RBX: 00007f3f51425fa0 RCX: 00007f3f5119e159 [ 235.552806][T13427] RDX: 0000000028008004 RSI: 0000200000003740 RDI: 0000000000000004 [ 235.552818][T13427] RBP: 00007f3f4f3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 235.552829][T13427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.552840][T13427] R13: 00007f3f51426038 R14: 00007f3f51425fa0 R15: 00007fff68d74f58 [ 235.552866][T13427] [ 235.623999][T13432] FAULT_INJECTION: forcing a failure. [ 235.623999][T13432] name failslab, interval 1, probability 0, space 0, times 0 [ 235.624026][T13432] CPU: 1 UID: 0 PID: 13432 Comm: syz.0.2691 Not tainted syzkaller #0 PREEMPT(full) [ 235.624038][T13432] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 235.624049][T13432] Call Trace: [ 235.624055][T13432] [ 235.624062][T13432] dump_stack_lvl+0x100/0x190 [ 235.624091][T13432] should_fail_ex.cold+0x5/0xa [ 235.624115][T13432] should_failslab+0xc2/0x120 [ 235.624138][T13432] kmem_cache_alloc_noprof+0x92/0x6a0 [ 235.624152][T13432] ? __pud_alloc+0x4f6/0x690 [ 235.624169][T13432] ? __pmd_alloc+0xbf/0x950 [ 235.624186][T13432] __pmd_alloc+0xbf/0x950 [ 235.624199][T13432] ? __pud_alloc+0x4fb/0x690 [ 235.624214][T13432] __handle_mm_fault+0xa9d/0x2f60 [ 235.624233][T13432] ? __pfx___handle_mm_fault+0x10/0x10 [ 235.624253][T13432] ? __pfx_mt_find+0x10/0x10 [ 235.624281][T13432] ? find_vma+0xbf/0x140 [ 235.624300][T13432] ? __pfx_find_vma+0x10/0x10 [ 235.624320][T13432] handle_mm_fault+0x363/0xa20 [ 235.624349][T13432] do_user_addr_fault+0x745/0x12f0 [ 235.624378][T13432] exc_page_fault+0x6f/0xd0 [ 235.624406][T13432] asm_exc_page_fault+0x26/0x30 [ 235.624423][T13432] RIP: 0010:_copy_from_user+0x93/0xd0 [ 235.624442][T13432] Code: 30 e1 fc 89 ee 4c 89 ef 48 b8 00 f0 ff ff ff 7f 00 00 48 39 c3 48 0f 47 d8 e8 99 79 54 fd 0f 01 cb 4c 89 ef 48 89 de 48 89 e9 a4 0f 1f 00 49 89 cc 48 89 cb 0f 01 ca 31 ff 48 89 ce e8 a5 2a [ 235.624458][T13432] RSP: 0018:ffffc90003787b48 EFLAGS: 00050246 [ 235.624472][T13432] RAX: 0000000000000001 RBX: 0000200000000100 RCX: 0000000000000018 [ 235.624483][T13432] RDX: 0000000000000001 RSI: 0000200000000100 RDI: ffffc90003787bf8 [ 235.624494][T13432] RBP: 0000000000000018 R08: 0000000000000001 R09: fffff520006f0f81 [ 235.624504][T13432] R10: ffffc90003787c0f R11: 0000000000000000 R12: 0000000000000000 [ 235.624514][T13432] R13: ffffc90003787bf8 R14: 00000000800452d3 R15: 0000200000000100 [ 235.624540][T13432] ? _copy_from_user+0x87/0xd0 [ 235.624560][T13432] rfcomm_dev_ioctl+0x31f/0x1db0 [ 235.624580][T13432] ? bt_sock_ioctl+0x1df/0x580 [ 235.624599][T13432] ? __pfx_bt_sock_ioctl+0x10/0x10 [ 235.624619][T13432] ? __pfx_rfcomm_dev_ioctl+0x10/0x10 [ 235.624639][T13432] ? tomoyo_path_number_perm+0x28f/0x580 [ 235.624663][T13432] ? tomoyo_path_number_perm+0x188/0x580 [ 235.624685][T13432] rfcomm_sock_ioctl+0xcc/0xf0 [ 235.624712][T13432] sock_do_ioctl+0x118/0x280 [ 235.624739][T13432] ? __pfx_sock_do_ioctl+0x10/0x10 [ 235.624764][T13432] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 235.624789][T13432] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 235.624804][T13432] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 235.624819][T13432] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 235.624836][T13432] sock_ioctl+0x599/0x6b0 [ 235.624850][T13432] ? __pfx_sock_ioctl+0x10/0x10 [ 235.624865][T13432] ? selinux_file_ioctl+0x13b/0x290 [ 235.624878][T13432] ? selinux_file_ioctl+0xb6/0x290 [ 235.624893][T13432] ? __pfx_sock_ioctl+0x10/0x10 [ 235.624911][T13432] __x64_sys_ioctl+0x18e/0x210 [ 235.624930][T13432] do_syscall_64+0x123/0x790 [ 235.624973][T13432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.624993][T13432] RIP: 0033:0x7fed6b19e159 [ 235.625007][T13432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.625023][T13432] RSP: 002b:00007fed6c14f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 235.625038][T13432] RAX: ffffffffffffffda RBX: 00007fed6b425fa0 RCX: 00007fed6b19e159 [ 235.625049][T13432] RDX: 0000200000000100 RSI: 00000000800452d3 RDI: 0000000000000004 [ 235.625060][T13432] RBP: 00007fed6c14f090 R08: 0000000000000000 R09: 0000000000000000 [ 235.625071][T13432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.625081][T13432] R13: 00007fed6b426038 R14: 00007fed6b425fa0 R15: 00007ffdd2620348 [ 235.625105][T13432] [ 235.636557][T13429] bond1: entered allmulticast mode [ 235.636801][T13429] 8021q: adding VLAN 0 to HW filter on device bond1 [ 235.648029][T13429] macvlan2: entered allmulticast mode [ 235.648042][T13429] veth1_vlan: entered allmulticast mode [ 235.649495][T13429] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 235.695429][ T43] audit: type=1400 audit(1790559896.004:737): avc: denied { accept } for pid=13428 comm="syz.4.2690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 235.695936][T13429] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2690'. [ 235.731374][T13429] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.744892][T13429] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.757920][T13429] bond0 (unregistering): Released all slaves [ 235.777752][T13445] FAULT_INJECTION: forcing a failure. [ 235.777752][T13445] name failslab, interval 1, probability 0, space 0, times 0 [ 235.777771][T13445] CPU: 1 UID: 0 PID: 13445 Comm: syz.1.2695 Not tainted syzkaller #0 PREEMPT(full) [ 235.777784][T13445] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 235.777791][T13445] Call Trace: [ 235.777795][T13445] [ 235.777800][T13445] dump_stack_lvl+0x100/0x190 [ 235.777821][T13445] should_fail_ex.cold+0x5/0xa [ 235.777857][T13445] should_failslab+0xc2/0x120 [ 235.777872][T13445] __kmalloc_noprof+0xfc/0x840 [ 235.777885][T13445] ? nl80211_trigger_scan+0x4de/0x1f10 [ 235.777902][T13445] nl80211_trigger_scan+0x4de/0x1f10 [ 235.777918][T13445] ? nl80211_pre_doit+0x19a/0xae0 [ 235.777937][T13445] genl_family_rcv_msg_doit+0x214/0x300 [ 235.777955][T13445] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 235.777976][T13445] ? bpf_lsm_capable+0x9/0x10 [ 235.777992][T13445] ? security_capable+0x80/0x260 [ 235.778010][T13445] ? ns_capable+0xd2/0xf0 [ 235.778023][T13445] genl_rcv_msg+0x560/0x800 [ 235.778040][T13445] ? __pfx_genl_rcv_msg+0x10/0x10 [ 235.778055][T13445] ? __lock_acquire+0x5c0/0x1f40 [ 235.778067][T13445] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 235.778084][T13445] ? __pfx_nl80211_trigger_scan+0x10/0x10 [ 235.778097][T13445] ? __pfx_nl80211_post_doit+0x10/0x10 [ 235.778119][T13445] netlink_rcv_skb+0x159/0x420 [ 235.778138][T13445] ? __pfx_genl_rcv_msg+0x10/0x10 [ 235.778154][T13445] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 235.778173][T13445] ? netlink_deliver_tap+0x1ae/0xcc0 [ 235.778187][T13445] genl_rcv+0x28/0x40 [ 235.778200][T13445] netlink_unicast+0x585/0x850 [ 235.778215][T13445] ? __pfx_netlink_unicast+0x10/0x10 [ 235.778229][T13445] ? __pfx_sock_has_perm+0x10/0x10 [ 235.778243][T13445] netlink_sendmsg+0x8b0/0xda0 [ 235.778258][T13445] ? __pfx_netlink_sendmsg+0x10/0x10 [ 235.778273][T13445] ? selinux_socket_sendmsg+0x198/0x2f0 [ 235.778288][T13445] ____sys_sendmsg+0xa4d/0xbe0 [ 235.778304][T13445] ? __pfx_netlink_sendmsg+0x10/0x10 [ 235.778319][T13445] ? __pfx_____sys_sendmsg+0x10/0x10 [ 235.778338][T13445] ? ring_buffer_unlock_commit+0x2e7/0x700 [ 235.778355][T13445] ___sys_sendmsg+0x190/0x1e0 [ 235.778367][T13445] ? __pfx____sys_sendmsg+0x10/0x10 [ 235.778385][T13445] ? find_held_lock+0x2b/0x80 [ 235.778410][T13445] __sys_sendmsg+0x160/0x210 [ 235.778425][T13445] ? __pfx___sys_sendmsg+0x10/0x10 [ 235.778447][T13445] do_syscall_64+0x123/0x790 [ 235.778466][T13445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.778478][T13445] RIP: 0033:0x7fa7e119e159 [ 235.778488][T13445] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.778499][T13445] RSP: 002b:00007fa7e207e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 235.778511][T13445] RAX: ffffffffffffffda RBX: 00007fa7e1425fa0 RCX: 00007fa7e119e159 [ 235.778518][T13445] RDX: 0000000000008000 RSI: 00002000000035c0 RDI: 0000000000000004 [ 235.778525][T13445] RBP: 00007fa7e207e090 R08: 0000000000000000 R09: 0000000000000000 [ 235.778532][T13445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.778539][T13445] R13: 00007fa7e1426038 R14: 00007fa7e1425fa0 R15: 00007fff17e5ab58 [ 235.778554][T13445] [ 235.802526][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.887061][T13449] 9p: Unknown access argument ÿÿÿÿ;Pǹ”æWøg¶y¥ä€*Õ(ó&®8׬!8h²×db»hCL¸ [ 235.887061][T13449] .å–@¼H5ô£ÙWõã‹èKHi¬BMÆã¡9k™ùL«°ŒX(r~x‰Øq­W [ 235.887061][T13449] ˜A–ËÔÞ’˜®ÈÓêɨ‘d{Sðy`Âu¼H0’: -22 [ 236.002359][T13456] syzkaller0: entered promiscuous mode [ 236.002378][T13456] syzkaller0: entered allmulticast mode [ 236.176633][ T43] audit: type=1807 audit(1790559896.482:738): UNKNOWN=m res=0 [ 236.176662][ T43] audit: type=1802 audit(1790559896.482:739): pid=13473 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=update_policy cause=invalid-policy comm="syz.0.2705" res=0 errno=0 [ 236.177301][T13472] ima: policy update failed [ 236.177397][ T43] audit: type=1802 audit(1790559896.482:740): pid=13472 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.0.2705" res=0 errno=0 [ 236.228965][ T5741] Bluetooth: Unexpected continuation frame (len 22) [ 236.260617][T13476] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 236.268217][ T43] audit: type=1326 audit(1790559896.571:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13478 comm="syz.1.2707" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa7e119e159 code=0x0 [ 236.375425][T13482] /dev/nullb0: Can't open blockdev [ 236.845853][ T1359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.934651][ T43] audit: type=1400 audit(1790559897.238:742): avc: denied { bind } for pid=13483 comm="syz.5.2708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 236.934681][ T43] audit: type=1400 audit(1790559897.238:743): avc: denied { mount } for pid=13483 comm="syz.5.2708" name="/" dev="hugetlbfs" ino=41689 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 236.935116][T13485] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.935816][ T43] audit: type=1400 audit(1790559897.238:744): avc: denied { read } for pid=13483 comm="syz.5.2708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 236.938125][ T43] audit: type=1400 audit(1790559897.248:745): avc: denied { remount } for pid=13483 comm="syz.5.2708" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 236.985300][T13488] FAULT_INJECTION: forcing a failure. [ 236.985300][T13488] name failslab, interval 1, probability 0, space 0, times 0 [ 236.985321][T13488] CPU: 0 UID: 0 PID: 13488 Comm: syz.5.2709 Not tainted syzkaller #0 PREEMPT(full) [ 236.985335][T13488] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 236.985358][T13488] Call Trace: [ 236.985365][T13488] [ 236.985371][T13488] dump_stack_lvl+0x100/0x190 [ 236.985408][T13488] should_fail_ex.cold+0x5/0xa [ 236.985425][T13488] should_failslab+0xc2/0x120 [ 236.985444][T13488] __kmalloc_noprof+0xfc/0x840 [ 236.985457][T13488] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 236.985481][T13488] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 236.985500][T13488] genl_family_rcv_msg_doit+0xc7/0x300 [ 236.985517][T13488] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 236.985537][T13488] ? bpf_lsm_capable+0x9/0x10 [ 236.985554][T13488] ? security_capable+0x80/0x260 [ 236.985574][T13488] ? ns_capable+0xd2/0xf0 [ 236.985587][T13488] genl_rcv_msg+0x560/0x800 [ 236.985604][T13488] ? __pfx_genl_rcv_msg+0x10/0x10 [ 236.985619][T13488] ? __lock_acquire+0x5c0/0x1f40 [ 236.985631][T13488] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 236.985647][T13488] ? __pfx_nl80211_new_station+0x10/0x10 [ 236.985659][T13488] ? __pfx_nl80211_post_doit+0x10/0x10 [ 236.985681][T13488] netlink_rcv_skb+0x159/0x420 [ 236.985694][T13488] ? __pfx_genl_rcv_msg+0x10/0x10 [ 236.985710][T13488] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 236.985729][T13488] ? netlink_deliver_tap+0x1ae/0xcc0 [ 236.985744][T13488] genl_rcv+0x28/0x40 [ 236.985757][T13488] netlink_unicast+0x585/0x850 [ 236.985773][T13488] ? __pfx_netlink_unicast+0x10/0x10 [ 236.985790][T13488] netlink_sendmsg+0x8b0/0xda0 [ 236.985805][T13488] ? __pfx_netlink_sendmsg+0x10/0x10 [ 236.985820][T13488] ? selinux_socket_sendmsg+0x198/0x2f0 [ 236.985835][T13488] ____sys_sendmsg+0xa4d/0xbe0 [ 236.985852][T13488] ? __pfx_netlink_sendmsg+0x10/0x10 [ 236.985866][T13488] ? __pfx_____sys_sendmsg+0x10/0x10 [ 236.985885][T13488] ? ring_buffer_unlock_commit+0x2e7/0x700 [ 236.985903][T13488] ___sys_sendmsg+0x190/0x1e0 [ 236.985915][T13488] ? __pfx____sys_sendmsg+0x10/0x10 [ 236.985933][T13488] ? find_held_lock+0x2b/0x80 [ 236.985958][T13488] __sys_sendmsg+0x160/0x210 [ 236.985973][T13488] ? __pfx___sys_sendmsg+0x10/0x10 [ 236.985996][T13488] do_syscall_64+0x123/0x790 [ 236.986018][T13488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.986029][T13488] RIP: 0033:0x7fd132f9e159 [ 236.986039][T13488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.986050][T13488] RSP: 002b:00007fd133ee7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 236.986065][T13488] RAX: ffffffffffffffda RBX: 00007fd133225fa0 RCX: 00007fd132f9e159 [ 236.986073][T13488] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 236.986079][T13488] RBP: 00007fd133ee7090 R08: 0000000000000000 R09: 0000000000000000 [ 236.986086][T13488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.986093][T13488] R13: 00007fd133226038 R14: 00007fd133225fa0 R15: 00007ffdd987f408 [ 236.986108][T13488] [ 237.033889][T13490] FAULT_INJECTION: forcing a failure. [ 237.033889][T13490] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 237.033908][T13490] CPU: 0 UID: 0 PID: 13490 Comm: syz.5.2710 Not tainted syzkaller #0 PREEMPT(full) [ 237.033921][T13490] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 237.033927][T13490] Call Trace: [ 237.033932][T13490] [ 237.033936][T13490] dump_stack_lvl+0x100/0x190 [ 237.033971][T13490] should_fail_ex.cold+0x5/0xa [ 237.033988][T13490] _copy_from_iter+0x1f4/0x1690 [ 237.034005][T13490] ? __pfx__copy_from_iter+0x10/0x10 [ 237.034017][T13490] ? _copy_from_iter+0x270/0x1690 [ 237.034032][T13490] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 237.034049][T13490] skb_copy_datagram_from_iter+0x11f/0x720 [ 237.034068][T13490] ? iov_iter_advance+0xac/0x6d0 [ 237.034083][T13490] tun_get_user+0x1866/0x3cc0 [ 237.034110][T13490] ? __lock_acquire+0x5c0/0x1f40 [ 237.034128][T13490] ? __pfx_tun_get_user+0x10/0x10 [ 237.034144][T13490] ? ring_buffer_unlock_commit+0x2e7/0x700 [ 237.034158][T13490] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 237.034179][T13490] ? find_held_lock+0x2b/0x80 [ 237.034194][T13490] ? tun_get+0x191/0x370 [ 237.034206][T13490] ? tun_get+0x191/0x370 [ 237.034222][T13490] tun_chr_write_iter+0xdc/0x200 [ 237.034237][T13490] vfs_write+0x6af/0x1050 [ 237.034250][T13490] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 237.034265][T13490] ? __pfx_vfs_write+0x10/0x10 [ 237.034276][T13490] ? find_held_lock+0x2b/0x80 [ 237.034300][T13490] ksys_write+0x12a/0x250 [ 237.034312][T13490] ? __pfx_ksys_write+0x10/0x10 [ 237.034322][T13490] ? trace_syscall_enter+0xcc/0x120 [ 237.034340][T13490] do_syscall_64+0x123/0x790 [ 237.034359][T13490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.034370][T13490] RIP: 0033:0x7fd132f9e159 [ 237.034380][T13490] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.034391][T13490] RSP: 002b:00007fd133ee7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 237.034403][T13490] RAX: ffffffffffffffda RBX: 00007fd133225fa0 RCX: 00007fd132f9e159 [ 237.034411][T13490] RDX: 0000000000000046 RSI: 0000200000000800 RDI: 0000000000000003 [ 237.034417][T13490] RBP: 00007fd133ee7090 R08: 0000000000000000 R09: 0000000000000000 [ 237.034424][T13490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.034430][T13490] R13: 00007fd133226038 R14: 00007fd133225fa0 R15: 00007ffdd987f408 [ 237.034444][T13490] [ 237.229810][T13501] FAULT_INJECTION: forcing a failure. [ 237.229810][T13501] name failslab, interval 1, probability 0, space 0, times 0 [ 237.229830][T13501] CPU: 2 UID: 0 PID: 13501 Comm: syz.1.2715 Not tainted syzkaller #0 PREEMPT(full) [ 237.229843][T13501] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 237.229850][T13501] Call Trace: [ 237.229854][T13501] [ 237.229859][T13501] dump_stack_lvl+0x100/0x190 [ 237.229879][T13501] should_fail_ex.cold+0x5/0xa [ 237.229895][T13501] should_failslab+0xc2/0x120 [ 237.229911][T13501] __kmalloc_noprof+0xfc/0x840 [ 237.229923][T13501] ? rcu_is_watching+0x13/0xc0 [ 237.229939][T13501] ? tomoyo_realpath_from_path+0xb6/0x690 [ 237.229957][T13501] tomoyo_realpath_from_path+0xb6/0x690 [ 237.229975][T13501] tomoyo_path_number_perm+0x23c/0x580 [ 237.229987][T13501] ? tomoyo_path_number_perm+0x22e/0x580 [ 237.230000][T13501] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 237.230017][T13501] ? __lock_acquire+0x5c0/0x1f40 [ 237.230036][T13501] ? __fget_files+0x34/0x3d0 [ 237.230051][T13501] ? find_held_lock+0x2b/0x80 [ 237.230067][T13501] ? hook_file_ioctl_common+0x140/0x440 [ 237.230086][T13501] ? __fget_files+0x21f/0x3d0 [ 237.230102][T13501] security_file_ioctl+0xd3/0x230 [ 237.230116][T13501] __x64_sys_ioctl+0xb7/0x210 [ 237.230129][T13501] do_syscall_64+0x123/0x790 [ 237.230148][T13501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.230160][T13501] RIP: 0033:0x7fa7e119e159 [ 237.230170][T13501] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.230181][T13501] RSP: 002b:00007fa7e207e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 237.230193][T13501] RAX: ffffffffffffffda RBX: 00007fa7e1425fa0 RCX: 00007fa7e119e159 [ 237.230200][T13501] RDX: 0000200000000140 RSI: 00000000000089e7 RDI: 0000000000000004 [ 237.230207][T13501] RBP: 00007fa7e207e090 R08: 0000000000000000 R09: 0000000000000000 [ 237.230214][T13501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.230221][T13501] R13: 00007fa7e1426038 R14: 00007fa7e1425fa0 R15: 00007fff17e5ab58 [ 237.230235][T13501] [ 237.230240][T13501] ERROR: Out of memory at tomoyo_realpath_from_path. [ 237.231600][T13499] syzkaller0: entered promiscuous mode [ 237.231612][T13499] syzkaller0: entered allmulticast mode [ 237.367238][T13507] 0: reclassify loop, rule prio 0, protocol 800 [ 237.496265][T13511] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.496593][T13511] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.496811][T13511] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.497102][T13511] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.656578][T13520] FAULT_INJECTION: forcing a failure. [ 237.656578][T13520] name failslab, interval 1, probability 0, space 0, times 0 [ 237.656607][T13520] CPU: 2 UID: 0 PID: 13520 Comm: syz.5.2724 Not tainted syzkaller #0 PREEMPT(full) [ 237.656626][T13520] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 237.656637][T13520] Call Trace: [ 237.656644][T13520] [ 237.656651][T13520] dump_stack_lvl+0x100/0x190 [ 237.656682][T13520] should_fail_ex.cold+0x5/0xa [ 237.656703][T13520] ? __netlink_lookup+0x652/0x900 [ 237.656725][T13520] should_failslab+0xc2/0x120 [ 237.656749][T13520] kmem_cache_alloc_noprof+0x92/0x6a0 [ 237.656770][T13520] ? skb_clone+0x190/0x400 [ 237.656797][T13520] skb_clone+0x190/0x400 [ 237.656821][T13520] netlink_deliver_tap+0xaed/0xcc0 [ 237.656847][T13520] netlink_unicast+0x62b/0x850 [ 237.656872][T13520] ? __pfx_netlink_unicast+0x10/0x10 [ 237.656901][T13520] netlink_sendmsg+0x8b0/0xda0 [ 237.656927][T13520] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.656951][T13520] ? selinux_socket_sendmsg+0x198/0x2f0 [ 237.656977][T13520] ____sys_sendmsg+0xa4d/0xbe0 [ 237.657004][T13520] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.657026][T13520] ? __pfx_____sys_sendmsg+0x10/0x10 [ 237.657057][T13520] ? ring_buffer_unlock_commit+0x2e7/0x700 [ 237.657086][T13520] ___sys_sendmsg+0x190/0x1e0 [ 237.657105][T13520] ? __pfx____sys_sendmsg+0x10/0x10 [ 237.657135][T13520] ? find_held_lock+0x2b/0x80 [ 237.657177][T13520] __sys_sendmsg+0x160/0x210 [ 237.657200][T13520] ? __pfx___sys_sendmsg+0x10/0x10 [ 237.657263][T13520] do_syscall_64+0x123/0x790 [ 237.657294][T13520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.657313][T13520] RIP: 0033:0x7fd132f9e159 [ 237.657329][T13520] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.657346][T13520] RSP: 002b:00007fd133ee7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 237.657364][T13520] RAX: ffffffffffffffda RBX: 00007fd133225fa0 RCX: 00007fd132f9e159 [ 237.657376][T13520] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 237.657387][T13520] RBP: 00007fd133ee7090 R08: 0000000000000000 R09: 0000000000000000 [ 237.657398][T13520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.657409][T13520] R13: 00007fd133226038 R14: 00007fd133225fa0 R15: 00007ffdd987f408 [ 237.657434][T13520] [ 237.657520][T13520] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2724'. [ 237.740004][T13522] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 237.925099][T13530] FAULT_INJECTION: forcing a failure. [ 237.925099][T13530] name failslab, interval 1, probability 0, space 0, times 0 [ 237.925130][T13530] CPU: 3 UID: 0 PID: 13530 Comm: syz.1.2727 Not tainted syzkaller #0 PREEMPT(full) [ 237.925153][T13530] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 237.925164][T13530] Call Trace: [ 237.925175][T13530] [ 237.925184][T13530] dump_stack_lvl+0x100/0x190 [ 237.925225][T13530] should_fail_ex.cold+0x5/0xa [ 237.925252][T13530] should_failslab+0xc2/0x120 [ 237.925283][T13530] __kmalloc_noprof+0xfc/0x840 [ 237.925305][T13530] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 237.925343][T13530] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 237.925374][T13530] genl_family_rcv_msg_doit+0xc7/0x300 [ 237.925402][T13530] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 237.925436][T13530] ? bpf_lsm_capable+0x9/0x10 [ 237.925463][T13530] ? security_capable+0x80/0x260 [ 237.925494][T13530] ? ns_capable+0xd2/0xf0 [ 237.925516][T13530] genl_rcv_msg+0x560/0x800 [ 237.925544][T13530] ? __pfx_genl_rcv_msg+0x10/0x10 [ 237.925568][T13530] ? __lock_acquire+0x5c0/0x1f40 [ 237.925588][T13530] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 237.925615][T13530] ? __pfx_nl80211_add_tx_ts+0x10/0x10 [ 237.925637][T13530] ? __pfx_nl80211_post_doit+0x10/0x10 [ 237.925677][T13530] netlink_rcv_skb+0x159/0x420 [ 237.925697][T13530] ? __pfx_genl_rcv_msg+0x10/0x10 [ 237.925714][T13530] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 237.925733][T13530] ? netlink_deliver_tap+0x1ae/0xcc0 [ 237.925748][T13530] genl_rcv+0x28/0x40 [ 237.925761][T13530] netlink_unicast+0x585/0x850 [ 237.925776][T13530] ? __pfx_netlink_unicast+0x10/0x10 [ 237.925790][T13530] ? __pfx_sock_has_perm+0x10/0x10 [ 237.925804][T13530] netlink_sendmsg+0x8b0/0xda0 [ 237.925820][T13530] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.925834][T13530] ? selinux_socket_sendmsg+0x198/0x2f0 [ 237.925850][T13530] ____sys_sendmsg+0xa4d/0xbe0 [ 237.925867][T13530] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.925881][T13530] ? __pfx_____sys_sendmsg+0x10/0x10 [ 237.925900][T13530] ? ring_buffer_unlock_commit+0x2e7/0x700 [ 237.925918][T13530] ___sys_sendmsg+0x190/0x1e0 [ 237.925930][T13530] ? __pfx____sys_sendmsg+0x10/0x10 [ 237.925948][T13530] ? find_held_lock+0x2b/0x80 [ 237.925972][T13530] __sys_sendmsg+0x160/0x210 [ 237.925987][T13530] ? __pfx___sys_sendmsg+0x10/0x10 [ 237.926009][T13530] do_syscall_64+0x123/0x790 [ 237.926033][T13530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.926045][T13530] RIP: 0033:0x7fa7e119e159 [ 237.926055][T13530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.926067][T13530] RSP: 002b:00007fa7e207e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 237.926082][T13530] RAX: ffffffffffffffda RBX: 00007fa7e1425fa0 RCX: 00007fa7e119e159 [ 237.926090][T13530] RDX: 0000000024008004 RSI: 0000200000002d80 RDI: 0000000000000004 [ 237.926097][T13530] RBP: 00007fa7e207e090 R08: 0000000000000000 R09: 0000000000000000 [ 237.926103][T13530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.926110][T13530] R13: 00007fa7e1426038 R14: 00007fa7e1425fa0 R15: 00007fff17e5ab58 [ 237.926124][T13530] [ 238.041803][ T108] IPVS: starting estimator thread 0... [ 238.047601][T13535] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2729'. [ 238.072356][T13538] FAULT_INJECTION: forcing a failure. [ 238.072356][T13538] name failslab, interval 1, probability 0, space 0, times 0 [ 238.072377][T13538] CPU: 3 UID: 0 PID: 13538 Comm: syz.0.2730 Not tainted syzkaller #0 PREEMPT(full) [ 238.072390][T13538] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 238.072415][T13538] Call Trace: [ 238.072420][T13538] [ 238.072424][T13538] dump_stack_lvl+0x100/0x190 [ 238.072445][T13538] should_fail_ex.cold+0x5/0xa [ 238.072461][T13538] should_failslab+0xc2/0x120 [ 238.072477][T13538] kmem_cache_alloc_noprof+0x92/0x6a0 [ 238.072490][T13538] ? skb_clone+0x190/0x400 [ 238.072508][T13538] skb_clone+0x190/0x400 [ 238.072522][T13538] nfnetlink_rcv_batch+0x1c8/0x2880 [ 238.072546][T13538] ? kmem_cache_free+0x127/0x6c0 [ 238.072566][T13538] ? __lock_acquire+0x5c0/0x1f40 [ 238.072581][T13538] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 238.072600][T13538] ? lock_acquire+0x1d1/0x380 [ 238.072612][T13538] ? avc_has_perm_noaudit+0x56/0x470 [ 238.072634][T13538] ? avc_has_perm_noaudit+0x145/0x470 [ 238.072651][T13538] ? __asan_memset+0x23/0x50 [ 238.072663][T13538] ? __nla_validate_parse+0x1e7/0x28b0 [ 238.072685][T13538] ? __pfx___nla_validate_parse+0x10/0x10 [ 238.072703][T13538] ? rcu_is_watching+0x13/0xc0 [ 238.072719][T13538] ? cap_capable+0x107/0x430 [ 238.072740][T13538] ? __nla_parse+0x40/0x60 [ 238.072759][T13538] nfnetlink_rcv+0x3bd/0x440 [ 238.072776][T13538] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 238.072796][T13538] netlink_unicast+0x585/0x850 [ 238.072812][T13538] ? __pfx_netlink_unicast+0x10/0x10 [ 238.072825][T13538] ? __pfx_sock_has_perm+0x10/0x10 [ 238.072839][T13538] netlink_sendmsg+0x8b0/0xda0 [ 238.072854][T13538] ? __pfx_netlink_sendmsg+0x10/0x10 [ 238.072869][T13538] ? selinux_socket_sendmsg+0x198/0x2f0 [ 238.072884][T13538] ____sys_sendmsg+0xa4d/0xbe0 [ 238.072901][T13538] ? __pfx_netlink_sendmsg+0x10/0x10 [ 238.072916][T13538] ? __pfx_____sys_sendmsg+0x10/0x10 [ 238.072935][T13538] ? ring_buffer_unlock_commit+0x2e7/0x700 [ 238.072952][T13538] ___sys_sendmsg+0x190/0x1e0 [ 238.072964][T13538] ? __pfx____sys_sendmsg+0x10/0x10 [ 238.072982][T13538] ? find_held_lock+0x2b/0x80 [ 238.073006][T13538] __sys_sendmsg+0x160/0x210 [ 238.073021][T13538] ? __pfx___sys_sendmsg+0x10/0x10 [ 238.073045][T13538] do_syscall_64+0x123/0x790 [ 238.073064][T13538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.073076][T13538] RIP: 0033:0x7fed6b19e159 [ 238.073086][T13538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.073096][T13538] RSP: 002b:00007fed6c14f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 238.073108][T13538] RAX: ffffffffffffffda RBX: 00007fed6b425fa0 RCX: 00007fed6b19e159 [ 238.073115][T13538] RDX: 0000000004040080 RSI: 0000200000000000 RDI: 0000000000000003 [ 238.073122][T13538] RBP: 00007fed6c14f090 R08: 0000000000000000 R09: 0000000000000000 [ 238.073129][T13538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.073136][T13538] R13: 00007fed6b426038 R14: 00007fed6b425fa0 R15: 00007ffdd2620348 [ 238.073150][T13538] [ 238.144969][T13536] IPVS: using max 43 ests per chain, 103200 per kthread [ 238.163909][T13542] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2731'. [ 238.163950][T13542] bond0: ARP target 8.4.0.0 is already present [ 238.163967][T13542] bond0: option arp_ip_target: invalid value (1032) [ 238.165635][T13541] ima: policy update failed [ 238.474672][T13557] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2738'. [ 238.477545][T13557] FAULT_INJECTION: forcing a failure. [ 238.477545][T13557] name failslab, interval 1, probability 0, space 0, times 0 [ 238.477566][T13557] CPU: 1 UID: 0 PID: 13557 Comm: syz.0.2738 Not tainted syzkaller #0 PREEMPT(full) [ 238.477579][T13557] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 238.477586][T13557] Call Trace: [ 238.477590][T13557] [ 238.477595][T13557] dump_stack_lvl+0x100/0x190 [ 238.477616][T13557] should_fail_ex.cold+0x5/0xa [ 238.477633][T13557] should_failslab+0xc2/0x120 [ 238.477648][T13557] kmem_cache_alloc_noprof+0x92/0x6a0 [ 238.477660][T13557] ? lock_acquire+0x1d1/0x380 [ 238.477673][T13557] ? dst_alloc+0x99/0x1a0 [ 238.477687][T13557] ? __pfx_ip6_dst_gc+0x10/0x10 [ 238.477705][T13557] dst_alloc+0x99/0x1a0 [ 238.477720][T13557] ip6_pol_route+0x9fd/0x1310 [ 238.477736][T13557] ? __pfx_ip6_pol_route+0x10/0x10 [ 238.477751][T13557] ? ip6t_do_table+0xbed/0x1c90 [ 238.477764][T13557] ? __local_bh_enable_ip+0xa5/0x120 [ 238.477784][T13557] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 238.477799][T13557] fib6_rule_lookup+0x52f/0x720 [ 238.477813][T13557] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 238.477827][T13557] ? __pfx_ip6t_do_table+0x10/0x10 [ 238.477842][T13557] ? nf_nat_ipv6_fn+0xff/0x2d0 [ 238.477860][T13557] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 238.477880][T13557] ip6_route_input+0x662/0xc50 [ 238.477897][T13557] ? __pfx_ip6_route_input+0x10/0x10 [ 238.477916][T13557] ? find_held_lock+0x2b/0x80 [ 238.477932][T13557] ? nf_hook.constprop.0+0x2d9/0x750 [ 238.477951][T13557] ? nf_hook.constprop.0+0x2e3/0x750 [ 238.477966][T13557] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 238.477981][T13557] ? udp_v6_early_demux+0x4a8/0xfd0 [ 238.477996][T13557] ip6_rcv_finish_core.isra.0+0x1b1/0x1260 [ 238.478017][T13557] ipv6_rcv+0x1e8/0x3d0 [ 238.478033][T13557] ? __pfx_ipv6_rcv+0x10/0x10 [ 238.478047][T13557] __netif_receive_skb_one_core+0x12d/0x1e0 [ 238.478061][T13557] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 238.478075][T13557] ? lock_acquire+0x1d1/0x380 [ 238.478091][T13557] __netif_receive_skb+0x1f/0x120 [ 238.478104][T13557] netif_receive_skb+0x139/0x7d0 [ 238.478116][T13557] ? __pfx_netif_receive_skb+0x10/0x10 [ 238.478134][T13557] tun_rx_batched.isra.0+0x3f6/0x750 [ 238.478149][T13557] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 238.478164][T13557] ? tun_get_user+0x1e1e/0x3cc0 [ 238.478181][T13557] tun_get_user+0x1f53/0x3cc0 [ 238.478200][T13557] ? __lock_acquire+0x5c0/0x1f40 [ 238.478212][T13557] ? __pfx_tun_get_user+0x10/0x10 [ 238.478226][T13557] ? ring_buffer_unlock_commit+0x2e7/0x700 [ 238.478240][T13557] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 238.478260][T13557] ? find_held_lock+0x2b/0x80 [ 238.478276][T13557] ? tun_get+0x191/0x370 [ 238.478287][T13557] ? tun_get+0x191/0x370 [ 238.478303][T13557] tun_chr_write_iter+0xdc/0x200 [ 238.478319][T13557] vfs_write+0x6af/0x1050 [ 238.478331][T13557] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 238.478346][T13557] ? __pfx_vfs_write+0x10/0x10 [ 238.478357][T13557] ? find_held_lock+0x2b/0x80 [ 238.478381][T13557] ksys_write+0x12a/0x250 [ 238.478393][T13557] ? __pfx_ksys_write+0x10/0x10 [ 238.478404][T13557] ? trace_syscall_enter+0xcc/0x120 [ 238.478423][T13557] do_syscall_64+0x123/0x790 [ 238.478441][T13557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.478453][T13557] RIP: 0033:0x7fed6b15e98e [ 238.478463][T13557] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 238.478474][T13557] RSP: 002b:00007fed6c14efb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 238.478486][T13557] RAX: ffffffffffffffda RBX: 00007fed6c14f6c0 RCX: 00007fed6b15e98e [ 238.478493][T13557] RDX: 000000000000004c RSI: 0000200000000080 RDI: 00000000000000c8 [ 238.478505][T13557] RBP: 00007fed6c14f090 R08: 0000000000000000 R09: 0000000000000000 [ 238.478512][T13557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.478518][T13557] R13: 00007fed6b426038 R14: 00007fed6b425fa0 R15: 00007ffdd2620348 [ 238.478533][T13557] [ 239.171948][T13589] FAULT_INJECTION: forcing a failure. [ 239.171948][T13589] name failslab, interval 1, probability 0, space 0, times 0 [ 239.171978][T13589] CPU: 0 UID: 0 PID: 13589 Comm: syz.4.2744 Not tainted syzkaller #0 PREEMPT(full) [ 239.171999][T13589] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 239.172011][T13589] Call Trace: [ 239.172025][T13589] [ 239.172033][T13589] dump_stack_lvl+0x100/0x190 [ 239.172066][T13589] should_fail_ex.cold+0x5/0xa [ 239.172092][T13589] should_failslab+0xc2/0x120 [ 239.172118][T13589] kmem_cache_alloc_noprof+0x92/0x6a0 [ 239.172139][T13589] ? skb_clone+0x190/0x400 [ 239.172167][T13589] skb_clone+0x190/0x400 [ 239.172191][T13589] nfnetlink_rcv_batch+0x1c8/0x2880 [ 239.172221][T13589] ? kmem_cache_free+0x127/0x6c0 [ 239.172253][T13589] ? __lock_acquire+0x5c0/0x1f40 [ 239.172279][T13589] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 239.172310][T13589] ? lock_acquire+0x1d1/0x380 [ 239.172330][T13589] ? avc_has_perm_noaudit+0x56/0x470 [ 239.172367][T13589] ? avc_has_perm_noaudit+0x145/0x470 [ 239.172403][T13589] ? __asan_memset+0x23/0x50 [ 239.172423][T13589] ? __nla_validate_parse+0x1e7/0x28b0 [ 239.172469][T13589] ? __pfx___nla_validate_parse+0x10/0x10 [ 239.172498][T13589] ? rcu_is_watching+0x13/0xc0 [ 239.172599][T13589] ? cap_capable+0x107/0x430 [ 239.172636][T13589] ? __nla_parse+0x40/0x60 [ 239.172671][T13589] nfnetlink_rcv+0x3bd/0x440 [ 239.172697][T13589] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 239.172730][T13589] netlink_unicast+0x585/0x850 [ 239.172756][T13589] ? __pfx_netlink_unicast+0x10/0x10 [ 239.172777][T13589] ? __pfx_sock_has_perm+0x10/0x10 [ 239.172802][T13589] netlink_sendmsg+0x8b0/0xda0 [ 239.172829][T13589] ? __pfx_netlink_sendmsg+0x10/0x10 [ 239.172853][T13589] ? selinux_socket_sendmsg+0x198/0x2f0 [ 239.172879][T13589] ____sys_sendmsg+0xa4d/0xbe0 [ 239.172923][T13589] ? __pfx_netlink_sendmsg+0x10/0x10 [ 239.172947][T13589] ? __pfx_____sys_sendmsg+0x10/0x10 [ 239.172977][T13589] ? ring_buffer_unlock_commit+0x2e7/0x700 [ 239.173008][T13589] ___sys_sendmsg+0x190/0x1e0 [ 239.173029][T13589] ? __pfx____sys_sendmsg+0x10/0x10 [ 239.173060][T13589] ? find_held_lock+0x2b/0x80 [ 239.173110][T13589] __sys_sendmsg+0x160/0x210 [ 239.173135][T13589] ? __pfx___sys_sendmsg+0x10/0x10 [ 239.173173][T13589] do_syscall_64+0x123/0x790 [ 239.173205][T13589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.173225][T13589] RIP: 0033:0x7f3f5119e159 [ 239.173242][T13589] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.173261][T13589] RSP: 002b:00007f3f4f3f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 239.173282][T13589] RAX: ffffffffffffffda RBX: 00007f3f51425fa0 RCX: 00007f3f5119e159 [ 239.173294][T13589] RDX: 0000000000000000 RSI: 0000200000000840 RDI: 0000000000000003 [ 239.173306][T13589] RBP: 00007f3f4f3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 239.173318][T13589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.173330][T13589] R13: 00007f3f51426038 R14: 00007f3f51425fa0 R15: 00007fff68d74f58 [ 239.173356][T13589] [ 239.356633][T13602] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2746'. [ 239.522469][T13610] FAULT_INJECTION: forcing a failure. [ 239.522469][T13610] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 239.522490][T13610] CPU: 1 UID: 0 PID: 13610 Comm: syz.0.2747 Not tainted syzkaller #0 PREEMPT(full) [ 239.522506][T13610] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 239.522513][T13610] Call Trace: [ 239.522517][T13610] [ 239.522522][T13610] dump_stack_lvl+0x100/0x190 [ 239.522542][T13610] should_fail_ex.cold+0x5/0xa [ 239.522559][T13610] _copy_from_iter+0x1f4/0x1690 [ 239.522574][T13610] ? __asan_memset+0x23/0x50 [ 239.522586][T13610] ? __pfx__copy_from_iter+0x10/0x10 [ 239.522599][T13610] ? __pfx___alloc_skb+0x10/0x10 [ 239.522619][T13610] netlink_sendmsg+0x808/0xda0 [ 239.522635][T13610] ? __pfx_netlink_sendmsg+0x10/0x10 [ 239.522650][T13610] ? selinux_socket_sendmsg+0x198/0x2f0 [ 239.522666][T13610] ____sys_sendmsg+0xa4d/0xbe0 [ 239.522682][T13610] ? __pfx_netlink_sendmsg+0x10/0x10 [ 239.522697][T13610] ? __pfx_____sys_sendmsg+0x10/0x10 [ 239.522716][T13610] ? ring_buffer_unlock_commit+0x2e7/0x700 [ 239.522734][T13610] ___sys_sendmsg+0x190/0x1e0 [ 239.522746][T13610] ? __pfx____sys_sendmsg+0x10/0x10 [ 239.522763][T13610] ? find_held_lock+0x2b/0x80 [ 239.522788][T13610] __sys_sendmsg+0x160/0x210 [ 239.522803][T13610] ? __pfx___sys_sendmsg+0x10/0x10 [ 239.522825][T13610] do_syscall_64+0x123/0x790 [ 239.522843][T13610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.522855][T13610] RIP: 0033:0x7fed6b19e159 [ 239.522865][T13610] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.522876][T13610] RSP: 002b:00007fed6c12e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 239.522887][T13610] RAX: ffffffffffffffda RBX: 00007fed6b426090 RCX: 00007fed6b19e159 [ 239.522895][T13610] RDX: 0000000000000080 RSI: 0000200000000200 RDI: 0000000000000003 [ 239.522902][T13610] RBP: 00007fed6c12e090 R08: 0000000000000000 R09: 0000000000000000 [ 239.522908][T13610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.522915][T13610] R13: 00007fed6b426128 R14: 00007fed6b426090 R15: 00007ffdd2620348 [ 239.522929][T13610] [ 239.979234][ T74] net_ratelimit: 7 callbacks suppressed [ 239.979253][ T74] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.980616][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.022283][ T74] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.263028][ T5819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.018985][T13616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.019577][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.030316][ T43] kauditd_printk_skb: 13 callbacks suppressed [ 242.030331][ T43] audit: type=1400 audit(1790559902.309:759): avc: denied { mounton } for pid=13615 comm="syz.5.2749" path="/147/proc_mnt" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 242.066502][ T1359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.198736][ T43] audit: type=1400 audit(1790559902.478:760): avc: denied { mounton } for pid=13625 comm="syz.5.2752" path="/150/my_configfs" dev="configfs" ino=30 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 242.203786][ T43] audit: type=1400 audit(1790559902.488:761): avc: denied { write } for pid=13625 comm="syz.5.2752" name="nullb" dev="configfs" ino=5234 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 242.206235][ T43] audit: type=1400 audit(1790559902.488:762): avc: denied { write } for pid=13625 comm="syz.5.2752" name="nullb" dev="configfs" ino=5234 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 242.232327][T13592] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 242.333015][T13631] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2753'. [ 242.334352][T13631] l2tp_ppp: sess 2/0: no socket in recv [ 242.383220][T13635] FAULT_INJECTION: forcing a failure. [ 242.383220][T13635] name failslab, interval 1, probability 0, space 0, times 0 [ 242.383249][T13635] CPU: 3 UID: 0 PID: 13635 Comm: syz.5.2755 Not tainted syzkaller #0 PREEMPT(full) [ 242.383269][T13635] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 242.383279][T13635] Call Trace: [ 242.383285][T13635] [ 242.383293][T13635] dump_stack_lvl+0x100/0x190 [ 242.383325][T13635] should_fail_ex.cold+0x5/0xa [ 242.383352][T13635] should_failslab+0xc2/0x120 [ 242.383376][T13635] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 242.383398][T13635] ? __alloc_skb+0x140/0x710 [ 242.383425][T13635] __alloc_skb+0x140/0x710 [ 242.383445][T13635] ? __alloc_skb+0x5b7/0x710 [ 242.383496][T13635] ? __pfx___alloc_skb+0x10/0x10 [ 242.383519][T13635] ? xfrm_policy_lookup_bytype+0x577/0x12b0 [ 242.383553][T13635] xfrm_send_migrate+0x11c/0xab0 [ 242.383585][T13635] ? __pfx_xfrm_send_migrate+0x10/0x10 [ 242.383609][T13635] ? __lock_acquire+0x5c0/0x1f40 [ 242.383635][T13635] ? __lock_acquire+0x5c0/0x1f40 [ 242.383659][T13635] ? lock_acquire+0x1d1/0x380 [ 242.383678][T13635] ? km_migrate+0x47/0x2b0 [ 242.383704][T13635] ? __pfx_xfrm_send_migrate+0x10/0x10 [ 242.383728][T13635] ? km_migrate+0x102/0x2b0 [ 242.383748][T13635] ? rcu_is_watching+0x13/0xc0 [ 242.383771][T13635] km_migrate+0x102/0x2b0 [ 242.383799][T13635] xfrm_migrate+0xe0a/0x1ba0 [ 242.383841][T13635] ? __pfx_xfrm_migrate+0x10/0x10 [ 242.383872][T13635] ? arch_stack_walk+0x88/0xf0 [ 242.383902][T13635] ? lock_acquire+0x1d1/0x380 [ 242.383925][T13635] xfrm_do_migrate+0xb9c/0xf00 [ 242.383961][T13635] ? __pfx_xfrm_do_migrate+0x10/0x10 [ 242.383990][T13635] ? lock_acquire+0x1d1/0x380 [ 242.384009][T13635] ? is_bpf_text_address+0x25/0x1a0 [ 242.384099][T13635] ? rcu_is_watching+0x13/0xc0 [ 242.384125][T13635] ? cap_capable+0x107/0x430 [ 242.384161][T13635] ? __nla_parse+0x40/0x60 [ 242.384189][T13635] ? __pfx_xfrm_do_migrate+0x10/0x10 [ 242.384220][T13635] ? xfrm_user_rcv_msg+0x483/0xd80 [ 242.384242][T13635] xfrm_user_rcv_msg+0x483/0xd80 [ 242.384272][T13635] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 242.384296][T13635] ? kfree_skbmem+0x19f/0x210 [ 242.384314][T13635] ? consume_skb+0xd6/0x110 [ 242.384367][T13635] ? rcu_is_watching+0x13/0xc0 [ 242.384392][T13635] ? trace_contention_end+0x126/0x160 [ 242.384415][T13635] ? __mutex_lock+0x26c/0x1bd0 [ 242.384446][T13635] netlink_rcv_skb+0x159/0x420 [ 242.384469][T13635] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 242.384494][T13635] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 242.384530][T13635] xfrm_netlink_rcv+0x71/0x90 [ 242.384552][T13635] netlink_unicast+0x585/0x850 [ 242.384577][T13635] ? __pfx_netlink_unicast+0x10/0x10 [ 242.384606][T13635] netlink_sendmsg+0x8b0/0xda0 [ 242.384630][T13635] ? __pfx_netlink_sendmsg+0x10/0x10 [ 242.384654][T13635] ? selinux_socket_sendmsg+0x198/0x2f0 [ 242.384680][T13635] ____sys_sendmsg+0xa4d/0xbe0 [ 242.384707][T13635] ? __pfx_netlink_sendmsg+0x10/0x10 [ 242.384729][T13635] ? __pfx_____sys_sendmsg+0x10/0x10 [ 242.384777][T13635] ? ring_buffer_unlock_commit+0x2e7/0x700 [ 242.384808][T13635] ___sys_sendmsg+0x190/0x1e0 [ 242.384828][T13635] ? __pfx____sys_sendmsg+0x10/0x10 [ 242.384858][T13635] ? find_held_lock+0x2b/0x80 [ 242.384899][T13635] __sys_sendmsg+0x160/0x210 [ 242.384924][T13635] ? __pfx___sys_sendmsg+0x10/0x10 [ 242.384961][T13635] do_syscall_64+0x123/0x790 [ 242.384991][T13635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.385010][T13635] RIP: 0033:0x7fd132f9e159 [ 242.385025][T13635] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.385042][T13635] RSP: 002b:00007fd133ee7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 242.385060][T13635] RAX: ffffffffffffffda RBX: 00007fd133225fa0 RCX: 00007fd132f9e159 [ 242.385071][T13635] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 242.385082][T13635] RBP: 00007fd133ee7090 R08: 0000000000000000 R09: 0000000000000000 [ 242.385092][T13635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.385103][T13635] R13: 00007fd133226038 R14: 00007fd133225fa0 R15: 00007ffdd987f408 [ 242.385129][T13635] [ 242.523621][ T5741] Bluetooth: Frame is too long (len 12, expected len 4) [ 242.633397][T13648] FAULT_INJECTION: forcing a failure. [ 242.633397][T13648] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 242.633417][T13648] CPU: 0 UID: 0 PID: 13648 Comm: syz.5.2760 Not tainted syzkaller #0 PREEMPT(full) [ 242.633429][T13648] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 242.633436][T13648] Call Trace: [ 242.633440][T13648] [ 242.633445][T13648] dump_stack_lvl+0x100/0x190 [ 242.633465][T13648] should_fail_ex.cold+0x5/0xa [ 242.633481][T13648] _copy_from_iter+0x1f4/0x1690 [ 242.633496][T13648] ? __asan_memset+0x23/0x50 [ 242.633508][T13648] ? __pfx__copy_from_iter+0x10/0x10 [ 242.633521][T13648] ? __pfx___alloc_skb+0x10/0x10 [ 242.633540][T13648] netlink_sendmsg+0x808/0xda0 [ 242.633556][T13648] ? __pfx_netlink_sendmsg+0x10/0x10 [ 242.633571][T13648] ? selinux_socket_sendmsg+0x198/0x2f0 [ 242.633586][T13648] ____sys_sendmsg+0xa4d/0xbe0 [ 242.633603][T13648] ? __pfx_netlink_sendmsg+0x10/0x10 [ 242.633617][T13648] ? __pfx_____sys_sendmsg+0x10/0x10 [ 242.633636][T13648] ? ring_buffer_unlock_commit+0x2e7/0x700 [ 242.633654][T13648] ___sys_sendmsg+0x190/0x1e0 [ 242.633666][T13648] ? __pfx____sys_sendmsg+0x10/0x10 [ 242.633683][T13648] ? find_held_lock+0x2b/0x80 [ 242.633708][T13648] __sys_sendmsg+0x160/0x210 [ 242.633723][T13648] ? __pfx___sys_sendmsg+0x10/0x10 [ 242.633744][T13648] do_syscall_64+0x123/0x790 [ 242.633783][T13648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.633795][T13648] RIP: 0033:0x7fd132f9e159 [ 242.633805][T13648] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.633816][T13648] RSP: 002b:00007fd133ee7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 242.633828][T13648] RAX: ffffffffffffffda RBX: 00007fd133225fa0 RCX: 00007fd132f9e159 [ 242.633835][T13648] RDX: 0000000000000000 RSI: 0000200000000900 RDI: 0000000000000004 [ 242.633842][T13648] RBP: 00007fd133ee7090 R08: 0000000000000000 R09: 0000000000000000 [ 242.633848][T13648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.633855][T13648] R13: 00007fd133226038 R14: 00007fd133225fa0 R15: 00007ffdd987f408 [ 242.633870][T13648] [ 242.635861][T13644] could not allocate digest TFM handle cbcmac-aes-ce [ 242.759097][T13651] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2761'. [ 242.785052][ T43] audit: type=1326 audit(1790559903.067:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13652 comm="syz.5.2762" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd132f9e159 code=0x0 [ 242.867963][ T63] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 242.958237][T13658] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.958363][T13658] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.958461][T13658] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.993164][ T43] audit: type=1400 audit(1790559903.276:764): avc: denied { write } for pid=13657 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 243.018353][ T63] usb 5-1: Invalid ep0 maxpacket: 64 [ 243.052869][ T43] audit: type=1400 audit(1790559903.336:765): avc: denied { write } for pid=13661 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 243.072418][T13664] FAULT_INJECTION: forcing a failure. [ 243.072418][T13664] name failslab, interval 1, probability 0, space 0, times 0 [ 243.072438][T13664] CPU: 1 UID: 0 PID: 13664 Comm: syz.4.2763 Not tainted syzkaller #0 PREEMPT(full) [ 243.072452][T13664] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 243.072459][T13664] Call Trace: [ 243.072463][T13664] [ 243.072468][T13664] dump_stack_lvl+0x100/0x190 [ 243.072488][T13664] should_fail_ex.cold+0x5/0xa [ 243.072505][T13664] should_failslab+0xc2/0x120 [ 243.072521][T13664] __kmalloc_cache_noprof+0x91/0x6d0 [ 243.072539][T13664] ? nf_tables_newtable+0xd0a/0x1a90 [ 243.072558][T13664] nf_tables_newtable+0xd0a/0x1a90 [ 243.072578][T13664] ? __pfx_nf_tables_newtable+0x10/0x10 [ 243.072593][T13664] ? net_generic+0x25/0x2a0 [ 243.072611][T13664] ? __nla_parse+0x40/0x60 [ 243.072631][T13664] nfnetlink_rcv_batch+0x1410/0x2880 [ 243.072655][T13664] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 243.072674][T13664] ? lock_acquire+0x1d1/0x380 [ 243.072687][T13664] ? avc_has_perm_noaudit+0x56/0x470 [ 243.072715][T13664] ? avc_has_perm_noaudit+0x145/0x470 [ 243.072744][T13664] ? __nla_parse+0x40/0x60 [ 243.072764][T13664] nfnetlink_rcv+0x3bd/0x440 [ 243.072780][T13664] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 243.072800][T13664] netlink_unicast+0x585/0x850 [ 243.072816][T13664] ? __pfx_netlink_unicast+0x10/0x10 [ 243.072833][T13664] netlink_sendmsg+0x8b0/0xda0 [ 243.072848][T13664] ? __pfx_netlink_sendmsg+0x10/0x10 [ 243.072863][T13664] ? selinux_socket_sendmsg+0x198/0x2f0 [ 243.072878][T13664] ____sys_sendmsg+0xa4d/0xbe0 [ 243.072895][T13664] ? __pfx_netlink_sendmsg+0x10/0x10 [ 243.072909][T13664] ? __pfx_____sys_sendmsg+0x10/0x10 [ 243.072929][T13664] ? ring_buffer_unlock_commit+0x2e7/0x700 [ 243.072946][T13664] ___sys_sendmsg+0x190/0x1e0 [ 243.072958][T13664] ? __pfx____sys_sendmsg+0x10/0x10 [ 243.072976][T13664] ? find_held_lock+0x2b/0x80 [ 243.073000][T13664] __sys_sendmsg+0x160/0x210 [ 243.073015][T13664] ? __pfx___sys_sendmsg+0x10/0x10 [ 243.073037][T13664] do_syscall_64+0x123/0x790 [ 243.073056][T13664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.073068][T13664] RIP: 0033:0x7f3f5119e159 [ 243.073078][T13664] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.073088][T13664] RSP: 002b:00007f3f4f3f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 243.073100][T13664] RAX: ffffffffffffffda RBX: 00007f3f51425fa0 RCX: 00007f3f5119e159 [ 243.073107][T13664] RDX: 0000000020000000 RSI: 000020000000c2c0 RDI: 0000000000000003 [ 243.073114][T13664] RBP: 00007f3f4f3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 243.073121][T13664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.073127][T13664] R13: 00007f3f51426038 R14: 00007f3f51425fa0 R15: 00007fff68d74f58 [ 243.073142][T13664] [ 243.148762][ T63] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 243.183724][ T43] audit: type=1400 audit(1790559903.465:766): avc: denied { write } for pid=13665 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 243.232575][ T43] audit: type=1400 audit(1790559903.515:767): avc: denied { write } for pid=13670 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 243.299242][ T63] usb 5-1: Invalid ep0 maxpacket: 64 [ 243.299786][ T63] usb usb5-port1: attempt power cycle [ 243.640196][ T63] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 243.660973][ T63] usb 5-1: Invalid ep0 maxpacket: 64 [ 243.685329][T13678] netlink: 'syz.5.2767': attribute type 3 has an invalid length. [ 243.685343][T13678] netlink: 'syz.5.2767': attribute type 2 has an invalid length. [ 243.710501][T13680] FAULT_INJECTION: forcing a failure. [ 243.710501][T13680] name failslab, interval 1, probability 0, space 0, times 0 [ 243.710522][T13680] CPU: 3 UID: 0 PID: 13680 Comm: syz.5.2768 Not tainted syzkaller #0 PREEMPT(full) [ 243.710535][T13680] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 243.710541][T13680] Call Trace: [ 243.710546][T13680] [ 243.710551][T13680] dump_stack_lvl+0x100/0x190 [ 243.710572][T13680] should_fail_ex.cold+0x5/0xa [ 243.710586][T13680] ? __netlink_lookup+0x652/0x900 [ 243.710601][T13680] should_failslab+0xc2/0x120 [ 243.710617][T13680] kmem_cache_alloc_noprof+0x92/0x6a0 [ 243.710630][T13680] ? skb_clone+0x190/0x400 [ 243.710646][T13680] skb_clone+0x190/0x400 [ 243.710661][T13680] netlink_deliver_tap+0xaed/0xcc0 [ 243.710676][T13680] netlink_unicast+0x62b/0x850 [ 243.710692][T13680] ? __pfx_netlink_unicast+0x10/0x10 [ 243.710704][T13680] ? __build_skb_around+0x278/0x390 [ 243.710720][T13680] netlink_sendmsg+0x8b0/0xda0 [ 243.710736][T13680] ? __pfx_netlink_sendmsg+0x10/0x10 [ 243.710751][T13680] ? selinux_socket_sendmsg+0x198/0x2f0 [ 243.710767][T13680] ____sys_sendmsg+0xa4d/0xbe0 [ 243.710784][T13680] ? __pfx_netlink_sendmsg+0x10/0x10 [ 243.710798][T13680] ? __pfx_____sys_sendmsg+0x10/0x10 [ 243.710817][T13680] ? ring_buffer_unlock_commit+0x2e7/0x700 [ 243.710835][T13680] ___sys_sendmsg+0x190/0x1e0 [ 243.710847][T13680] ? __pfx____sys_sendmsg+0x10/0x10 [ 243.710864][T13680] ? find_held_lock+0x2b/0x80 [ 243.710889][T13680] __sys_sendmsg+0x160/0x210 [ 243.710904][T13680] ? __pfx___sys_sendmsg+0x10/0x10 [ 243.710926][T13680] do_syscall_64+0x123/0x790 [ 243.710947][T13680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.710959][T13680] RIP: 0033:0x7fd132f9e159 [ 243.710969][T13680] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.710979][T13680] RSP: 002b:00007fd133ee7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 243.710991][T13680] RAX: ffffffffffffffda RBX: 00007fd133225fa0 RCX: 00007fd132f9e159 [ 243.710998][T13680] RDX: 000000000000c000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 243.711005][T13680] RBP: 00007fd133ee7090 R08: 0000000000000000 R09: 0000000000000000 [ 243.711012][T13680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.711019][T13680] R13: 00007fd133226038 R14: 00007fd133225fa0 R15: 00007ffdd987f408 [ 243.711033][T13680] [ 243.711050][T13680] netlink: 20672 bytes leftover after parsing attributes in process `syz.5.2768'. [ 243.791913][ T63] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 243.811234][ T63] usb 5-1: Invalid ep0 maxpacket: 64 [ 243.811491][ T63] usb usb5-port1: unable to enumerate USB device [ 243.856779][T13687] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2771'. [ 244.026535][T13700] FAULT_INJECTION: forcing a failure. [ 244.026535][T13700] name failslab, interval 1, probability 0, space 0, times 0 [ 244.026557][T13700] CPU: 2 UID: 0 PID: 13700 Comm: syz.5.2777 Not tainted syzkaller #0 PREEMPT(full) [ 244.026570][T13700] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 244.026577][T13700] Call Trace: [ 244.026581][T13700] [ 244.026586][T13700] dump_stack_lvl+0x100/0x190 [ 244.026607][T13700] should_fail_ex.cold+0x5/0xa [ 244.026624][T13700] should_failslab+0xc2/0x120 [ 244.026639][T13700] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 244.026652][T13700] ? __alloc_skb+0x5b7/0x710 [ 244.026666][T13700] ? __alloc_skb+0x140/0x710 [ 244.026682][T13700] __alloc_skb+0x140/0x710 [ 244.026695][T13700] ? __alloc_skb+0x5b7/0x710 [ 244.026708][T13700] ? __pfx___alloc_skb+0x10/0x10 [ 244.026725][T13700] netlink_ack+0x117/0xb80 [ 244.026743][T13700] netlink_rcv_skb+0x333/0x420 [ 244.026756][T13700] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 244.026773][T13700] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 244.026791][T13700] ? netlink_deliver_tap+0x1ae/0xcc0 [ 244.026806][T13700] netlink_unicast+0x585/0x850 [ 244.026821][T13700] ? __pfx_netlink_unicast+0x10/0x10 [ 244.026838][T13700] netlink_sendmsg+0x8b0/0xda0 [ 244.026853][T13700] ? __pfx_netlink_sendmsg+0x10/0x10 [ 244.026868][T13700] ? selinux_socket_sendmsg+0x198/0x2f0 [ 244.026883][T13700] ____sys_sendmsg+0xa4d/0xbe0 [ 244.026900][T13700] ? __pfx_netlink_sendmsg+0x10/0x10 [ 244.026914][T13700] ? __pfx_____sys_sendmsg+0x10/0x10 [ 244.026933][T13700] ? ring_buffer_unlock_commit+0x2e7/0x700 [ 244.026951][T13700] ___sys_sendmsg+0x190/0x1e0 [ 244.026963][T13700] ? __pfx____sys_sendmsg+0x10/0x10 [ 244.026994][T13700] ? find_held_lock+0x2b/0x80 [ 244.027023][T13700] __sys_sendmsg+0x160/0x210 [ 244.027038][T13700] ? __pfx___sys_sendmsg+0x10/0x10 [ 244.027060][T13700] do_syscall_64+0x123/0x790 [ 244.027079][T13700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.027091][T13700] RIP: 0033:0x7fd132f9e159 [ 244.027101][T13700] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.027112][T13700] RSP: 002b:00007fd133ee7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 244.027123][T13700] RAX: ffffffffffffffda RBX: 00007fd133225fa0 RCX: 00007fd132f9e159 [ 244.027131][T13700] RDX: 0000000004004000 RSI: 00002000000012c0 RDI: 0000000000000008 [ 244.027137][T13700] RBP: 00007fd133ee7090 R08: 0000000000000000 R09: 0000000000000000 [ 244.027144][T13700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.027151][T13700] R13: 00007fd133226038 R14: 00007fd133225fa0 R15: 00007ffdd987f408 [ 244.027165][T13700] [ 244.141573][T13702] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2775'. [ 244.180892][T13704] FAULT_INJECTION: forcing a failure. [ 244.180892][T13704] name failslab, interval 1, probability 0, space 0, times 0 [ 244.180922][T13704] CPU: 3 UID: 0 PID: 13704 Comm: syz.4.2778 Not tainted syzkaller #0 PREEMPT(full) [ 244.180948][T13704] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 244.180960][T13704] Call Trace: [ 244.180966][T13704] [ 244.180974][T13704] dump_stack_lvl+0x100/0x190 [ 244.181006][T13704] should_fail_ex.cold+0x5/0xa [ 244.181032][T13704] should_failslab+0xc2/0x120 [ 244.181057][T13704] __kmalloc_noprof+0xfc/0x840 [ 244.181077][T13704] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 244.181110][T13704] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 244.181139][T13704] genl_family_rcv_msg_doit+0xc7/0x300 [ 244.181175][T13704] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 244.181200][T13704] ? genl_get_cmd+0x3e7/0x760 [ 244.181230][T13704] ? __dev_queue_xmit+0xa33/0x4970 [ 244.181251][T13704] ? __radix_tree_lookup+0x217/0x2b0 [ 244.181284][T13704] genl_rcv_msg+0x560/0x800 [ 244.181311][T13704] ? __pfx_genl_rcv_msg+0x10/0x10 [ 244.181333][T13704] ? __lock_acquire+0x5c0/0x1f40 [ 244.181354][T13704] ? __pfx_ovs_ct_limit_cmd_get+0x10/0x10 [ 244.181383][T13704] netlink_rcv_skb+0x159/0x420 [ 244.181404][T13704] ? __pfx_genl_rcv_msg+0x10/0x10 [ 244.181430][T13704] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 244.181463][T13704] ? netlink_deliver_tap+0x1ae/0xcc0 [ 244.181487][T13704] genl_rcv+0x28/0x40 [ 244.181508][T13704] netlink_unicast+0x585/0x850 [ 244.181535][T13704] ? __pfx_netlink_unicast+0x10/0x10 [ 244.181552][T13704] ? __build_skb_around+0x278/0x390 [ 244.181581][T13704] netlink_sendmsg+0x8b0/0xda0 [ 244.181609][T13704] ? __pfx_netlink_sendmsg+0x10/0x10 [ 244.181651][T13704] ? selinux_socket_sendmsg+0x198/0x2f0 [ 244.181677][T13704] ____sys_sendmsg+0xa4d/0xbe0 [ 244.181702][T13704] ? __pfx_netlink_sendmsg+0x10/0x10 [ 244.181726][T13704] ? __pfx_____sys_sendmsg+0x10/0x10 [ 244.181756][T13704] ? ring_buffer_unlock_commit+0x2e7/0x700 [ 244.181788][T13704] ___sys_sendmsg+0x190/0x1e0 [ 244.181810][T13704] ? __pfx____sys_sendmsg+0x10/0x10 [ 244.181840][T13704] ? find_held_lock+0x2b/0x80 [ 244.181882][T13704] __sys_sendmsg+0x160/0x210 [ 244.181905][T13704] ? __pfx___sys_sendmsg+0x10/0x10 [ 244.181942][T13704] do_syscall_64+0x123/0x790 [ 244.181971][T13704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.181992][T13704] RIP: 0033:0x7f3f5119e159 [ 244.182007][T13704] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.182021][T13704] RSP: 002b:00007f3f4f3f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 244.182038][T13704] RAX: ffffffffffffffda RBX: 00007f3f51425fa0 RCX: 00007f3f5119e159 [ 244.182052][T13704] RDX: 000000000000c000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 244.182065][T13704] RBP: 00007f3f4f3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 244.182077][T13704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.182087][T13704] R13: 00007f3f51426038 R14: 00007f3f51425fa0 R15: 00007fff68d74f58 [ 244.182114][T13704] [ 244.228505][ T43] audit: type=1400 audit(1790559904.502:768): avc: denied { bind } for pid=13705 comm="syz.4.2779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 244.356973][T13719] FAULT_INJECTION: forcing a failure. [ 244.356973][T13719] name failslab, interval 1, probability 0, space 0, times 0 [ 244.356997][T13719] CPU: 2 UID: 0 PID: 13719 Comm: syz.5.2781 Not tainted syzkaller #0 PREEMPT(full) [ 244.357010][T13719] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 244.357017][T13719] Call Trace: [ 244.357022][T13719] [ 244.357027][T13719] dump_stack_lvl+0x100/0x190 [ 244.357050][T13719] should_fail_ex.cold+0x5/0xa [ 244.357067][T13719] should_failslab+0xc2/0x120 [ 244.357083][T13719] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 244.357097][T13719] ? __alloc_skb+0x5b7/0x710 [ 244.357110][T13719] ? __alloc_skb+0x140/0x710 [ 244.357125][T13719] __alloc_skb+0x140/0x710 [ 244.357138][T13719] ? __alloc_skb+0x5b7/0x710 [ 244.357151][T13719] ? __pfx___alloc_skb+0x10/0x10 [ 244.357168][T13719] netlink_ack+0x117/0xb80 [ 244.357186][T13719] netlink_rcv_skb+0x333/0x420 [ 244.357199][T13719] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 244.357216][T13719] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 244.357234][T13719] ? netlink_deliver_tap+0x1ae/0xcc0 [ 244.357249][T13719] netlink_unicast+0x585/0x850 [ 244.357264][T13719] ? __pfx_netlink_unicast+0x10/0x10 [ 244.357281][T13719] netlink_sendmsg+0x8b0/0xda0 [ 244.357296][T13719] ? __pfx_netlink_sendmsg+0x10/0x10 [ 244.357311][T13719] ? selinux_socket_sendmsg+0x198/0x2f0 [ 244.357327][T13719] ____sys_sendmsg+0xa4d/0xbe0 [ 244.357343][T13719] ? __pfx_netlink_sendmsg+0x10/0x10 [ 244.357358][T13719] ? __pfx_____sys_sendmsg+0x10/0x10 [ 244.357377][T13719] ? ring_buffer_unlock_commit+0x2e7/0x700 [ 244.357395][T13719] ___sys_sendmsg+0x190/0x1e0 [ 244.357407][T13719] ? __pfx____sys_sendmsg+0x10/0x10 [ 244.357424][T13719] ? find_held_lock+0x2b/0x80 [ 244.357448][T13719] __sys_sendmsg+0x160/0x210 [ 244.357463][T13719] ? __pfx___sys_sendmsg+0x10/0x10 [ 244.357485][T13719] do_syscall_64+0x123/0x790 [ 244.357504][T13719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.357516][T13719] RIP: 0033:0x7fd132f9e159 [ 244.357526][T13719] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.357537][T13719] RSP: 002b:00007fd133ec6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 244.357549][T13719] RAX: ffffffffffffffda RBX: 00007fd133226090 RCX: 00007fd132f9e159 [ 244.357557][T13719] RDX: 0000000020000800 RSI: 0000200000000900 RDI: 0000000000000003 [ 244.357564][T13719] RBP: 00007fd133ec6090 R08: 0000000000000000 R09: 0000000000000000 [ 244.357571][T13719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.357578][T13719] R13: 00007fd133226128 R14: 00007fd133226090 R15: 00007ffdd987f408 [ 244.357592][T13719] [ 244.537334][T13721] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2784'. [ 244.635474][T13726] FAULT_INJECTION: forcing a failure. [ 244.635474][T13726] name failslab, interval 1, probability 0, space 0, times 0 [ 244.635504][T13726] CPU: 1 UID: 0 PID: 13726 Comm: syz.4.2785 Not tainted syzkaller #0 PREEMPT(full) [ 244.635524][T13726] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 244.635535][T13726] Call Trace: [ 244.635541][T13726] [ 244.635548][T13726] dump_stack_lvl+0x100/0x190 [ 244.635579][T13726] should_fail_ex.cold+0x5/0xa [ 244.635603][T13726] should_failslab+0xc2/0x120 [ 244.635626][T13726] __kmalloc_noprof+0xfc/0x840 [ 244.635646][T13726] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 244.635676][T13726] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 244.635705][T13726] genl_family_rcv_msg_doit+0xc7/0x300 [ 244.635730][T13726] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 244.635752][T13726] ? genl_get_cmd+0x3e7/0x760 [ 244.635780][T13726] ? __dev_queue_xmit+0xa33/0x4970 [ 244.635798][T13726] ? __radix_tree_lookup+0x217/0x2b0 [ 244.635826][T13726] genl_rcv_msg+0x560/0x800 [ 244.635851][T13726] ? __pfx_genl_rcv_msg+0x10/0x10 [ 244.635873][T13726] ? __lock_acquire+0x5c0/0x1f40 [ 244.635891][T13726] ? __pfx_ovs_ct_limit_cmd_get+0x10/0x10 [ 244.635918][T13726] netlink_rcv_skb+0x159/0x420 [ 244.635938][T13726] ? __pfx_genl_rcv_msg+0x10/0x10 [ 244.635962][T13726] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 244.635991][T13726] ? netlink_deliver_tap+0x1ae/0xcc0 [ 244.636013][T13726] genl_rcv+0x28/0x40 [ 244.636038][T13726] netlink_unicast+0x585/0x850 [ 244.636061][T13726] ? __pfx_netlink_unicast+0x10/0x10 [ 244.636080][T13726] ? __build_skb_around+0x278/0x390 [ 244.636104][T13726] netlink_sendmsg+0x8b0/0xda0 [ 244.636128][T13726] ? __pfx_netlink_sendmsg+0x10/0x10 [ 244.636150][T13726] ? selinux_socket_sendmsg+0x198/0x2f0 [ 244.636174][T13726] ____sys_sendmsg+0xa4d/0xbe0 [ 244.636199][T13726] ? __pfx_netlink_sendmsg+0x10/0x10 [ 244.636221][T13726] ? __pfx_____sys_sendmsg+0x10/0x10 [ 244.636249][T13726] ? ring_buffer_unlock_commit+0x2e7/0x700 [ 244.636275][T13726] ___sys_sendmsg+0x190/0x1e0 [ 244.636294][T13726] ? __pfx____sys_sendmsg+0x10/0x10 [ 244.636322][T13726] ? find_held_lock+0x2b/0x80 [ 244.636375][T13726] __sys_sendmsg+0x160/0x210 [ 244.636398][T13726] ? __pfx___sys_sendmsg+0x10/0x10 [ 244.636432][T13726] do_syscall_64+0x123/0x790 [ 244.636459][T13726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.636478][T13726] RIP: 0033:0x7f3f5119e159 [ 244.636493][T13726] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.636510][T13726] RSP: 002b:00007f3f4f3f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 244.636528][T13726] RAX: ffffffffffffffda RBX: 00007f3f51425fa0 RCX: 00007f3f5119e159 [ 244.636539][T13726] RDX: 000000000000c000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 244.636551][T13726] RBP: 00007f3f4f3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 244.636562][T13726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.636572][T13726] R13: 00007f3f51426038 R14: 00007f3f51425fa0 R15: 00007fff68d74f58 [ 244.636596][T13726] [ 245.051086][T13749] netlink: 'syz.4.2796': attribute type 1 has an invalid length. [ 245.098795][T13749] 8021q: adding VLAN 0 to HW filter on device bond2 [ 245.101655][T13749] bond0: (slave bond2): making interface the new active one [ 245.101966][T13749] bond0: (slave bond2): Enslaving as an active interface with an up link [ 245.194636][ T1359] net_ratelimit: 21 callbacks suppressed [ 245.194656][ T1359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.244320][T13763] syzkaller1: entered promiscuous mode [ 245.244334][T13763] syzkaller1: entered allmulticast mode [ 245.409611][T13766] [ 245.410422][T13766] ====================================================== [ 245.412619][T13766] WARNING: possible circular locking dependency detected [ 245.414771][T13766] syzkaller #0 Not tainted [ 245.416266][T13766] ------------------------------------------------------ [ 245.418437][T13766] syz.4.2801/13766 is trying to acquire lock: [ 245.420317][T13766] ffff888020489440 (&sb->s_type->i_mutex_key#24){++++}-{4:4}, at: configfs_depend_item_unlocked+0xf3/0x6a0 [ 245.423860][T13766] [ 245.423860][T13766] but task is already holding lock: [ 245.426130][T13766] ffffffff90480000 (tpg_instances_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x10b/0x610 [ 245.429036][T13766] [ 245.429036][T13766] which lock already depends on the new lock. [ 245.429036][T13766] [ 245.432243][T13766] [ 245.432243][T13766] the existing dependency chain (in reverse order) is: [ 245.435001][T13766] [ 245.435001][T13766] -> #2 (tpg_instances_lock){+.+.}-{4:4}: [ 245.437470][T13766] lock_acquire+0x1d1/0x380 [ 245.439046][T13766] __mutex_lock+0x1a4/0x1bd0 [ 245.440655][T13766] usbg_make_tpg+0x10b/0x610 [ 245.442259][T13766] target_fabric_make_tpg+0xab/0x8c0 [ 245.444087][T13766] configfs_mkdir+0x525/0xd40 [ 245.445709][T13766] vfs_mkdir+0x364/0x850 [ 245.447426][T13766] filename_mkdirat+0x48b/0x5e0 [ 245.449236][T13766] __x64_sys_mkdirat+0x89/0xc0 [ 245.450910][T13766] do_syscall_64+0x123/0x790 [ 245.452550][T13766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.454551][T13766] [ 245.454551][T13766] -> #1 (&subsys->su_mutex){+.+.}-{4:4}: [ 245.457009][T13766] lock_acquire+0x1d1/0x380 [ 245.458596][T13766] __mutex_lock+0x1a4/0x1bd0 [ 245.460225][T13766] configfs_rmdir+0x5ae/0x950 [ 245.461858][T13766] vfs_rmdir+0x328/0x8a0 [ 245.463380][T13766] filename_rmdir+0x31a/0x5c0 [ 245.465040][T13766] __x64_sys_rmdir+0x46/0x70 [ 245.466657][T13766] do_syscall_64+0x123/0x790 [ 245.468316][T13766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.470312][T13766] [ 245.470312][T13766] -> #0 (&sb->s_type->i_mutex_key#24){++++}-{4:4}: [ 245.473038][T13766] check_prev_add+0xeb/0xe60 [ 245.474644][T13766] __lock_acquire+0x1528/0x1f40 [ 245.476333][T13766] lock_acquire+0x1d1/0x380 [ 245.477926][T13766] down_write+0x8b/0x1f0 [ 245.479426][T13766] configfs_depend_item_unlocked+0xf3/0x6a0 [ 245.481440][T13766] usbg_make_tpg+0x251/0x610 [ 245.483074][T13766] target_fabric_make_tpg+0xab/0x8c0 [ 245.484912][T13766] configfs_mkdir+0x525/0xd40 [ 245.486506][T13766] vfs_mkdir+0x364/0x850 [ 245.488020][T13766] filename_mkdirat+0x48b/0x5e0 [ 245.489717][T13766] __x64_sys_mkdirat+0x89/0xc0 [ 245.491385][T13766] do_syscall_64+0x123/0x790 [ 245.493043][T13766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.495060][T13766] [ 245.495060][T13766] other info that might help us debug this: [ 245.495060][T13766] [ 245.498208][T13766] Chain exists of: [ 245.498208][T13766] &sb->s_type->i_mutex_key#24 --> &subsys->su_mutex --> tpg_instances_lock [ 245.498208][T13766] [ 245.502726][T13766] Possible unsafe locking scenario: [ 245.502726][T13766] [ 245.505041][T13766] CPU0 CPU1 [ 245.506712][T13766] ---- ---- [ 245.508428][T13766] lock(tpg_instances_lock); [ 245.509905][T13766] lock(&subsys->su_mutex); [ 245.512141][T13766] lock(tpg_instances_lock); [ 245.514392][T13766] lock(&sb->s_type->i_mutex_key#24); [ 245.516120][T13766] [ 245.516120][T13766] *** DEADLOCK *** [ 245.516120][T13766] [ 245.518655][T13766] locks held by syz.4.2801/13766: 4, last CPU#2: [ 245.520642][T13766] #0: ffff88802495e460 (sb_writers#22){.+.+}-{0:0}, at: filename_create+0x10d/0x400 [ 245.523624][T13766] #1: ffff888061d52740 (&sb->s_type->i_mutex_key#7/1){+.+.}-{4:4}, at: filename_create+0x1c0/0x400 [ 245.526952][T13766] #2: ffffffff8ffb2e68 (&subsys->su_mutex){+.+.}-{4:4}, at: configfs_mkdir+0x4c0/0xd40 [ 245.529970][T13766] #3: ffffffff90480000 (tpg_instances_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x10b/0x610 [ 245.533097][T13766] [ 245.533097][T13766] stack backtrace: [ 245.534938][T13766] CPU: 2 UID: 0 PID: 13766 Comm: syz.4.2801 Not tainted syzkaller #0 PREEMPT(full) [ 245.537858][T13766] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 245.540987][T13766] Call Trace: [ 245.542038][T13766] [ 245.542993][T13766] dump_stack_lvl+0x100/0x190 [ 245.544491][T13766] print_circular_bug.cold+0x178/0x1be [ 245.546199][T13766] check_noncircular+0x146/0x160 [ 245.547793][T13766] check_prev_add+0xeb/0xe60 [ 245.549250][T13766] __lock_acquire+0x1528/0x1f40 [ 245.550782][T13766] ? rcu_is_watching+0x13/0xc0 [ 245.552323][T13766] lock_acquire+0x1d1/0x380 [ 245.553760][T13766] ? configfs_depend_item_unlocked+0xf3/0x6a0 [ 245.555667][T13766] ? __pfx___might_resched+0x10/0x10 [ 245.557339][T13766] down_write+0x8b/0x1f0 [ 245.558678][T13766] ? configfs_depend_item_unlocked+0xf3/0x6a0 [ 245.560585][T13766] ? __pfx_down_write+0x10/0x10 [ 245.562136][T13766] ? kstrtou16+0xde/0x130 [ 245.563518][T13766] configfs_depend_item_unlocked+0xf3/0x6a0 [ 245.565363][T13766] usbg_make_tpg+0x251/0x610 [ 245.566823][T13766] ? __pfx_usbg_make_tpg+0x10/0x10 [ 245.568484][T13766] ? find_held_lock+0x2b/0x80 [ 245.569984][T13766] ? __pfx_usbg_make_tpg+0x10/0x10 [ 245.571592][T13766] ? __pfx_target_fabric_make_tpg+0x10/0x10 [ 245.573472][T13766] target_fabric_make_tpg+0xab/0x8c0 [ 245.575127][T13766] ? __pfx_target_fabric_make_tpg+0x10/0x10 [ 245.576982][T13766] configfs_mkdir+0x525/0xd40 [ 245.578456][T13766] ? may_create+0x285/0x440 [ 245.579902][T13766] ? __pfx_configfs_mkdir+0x10/0x10 [ 245.581537][T13766] vfs_mkdir+0x364/0x850 [ 245.582898][T13766] filename_mkdirat+0x48b/0x5e0 [ 245.584444][T13766] ? __pfx_filename_mkdirat+0x10/0x10 [ 245.586123][T13766] ? strncpy_from_user+0x19d/0x2d0 [ 245.587767][T13766] ? do_getname+0x191/0x390 [ 245.589199][T13766] __x64_sys_mkdirat+0x89/0xc0 [ 245.590702][T13766] do_syscall_64+0x123/0x790 [ 245.592189][T13766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.594025][T13766] RIP: 0033:0x7f3f5119e159 [ 245.595405][T13766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.601281][T13766] RSP: 002b:00007f3f4f3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 245.603880][T13766] RAX: ffffffffffffffda RBX: 00007f3f51425fa0 RCX: 00007f3f5119e159 [ 245.606317][T13766] RDX: 00000000000001ff RSI: 0000200000000380 RDI: ffffffffffffff9c [ 245.608784][T13766] RBP: 00007f3f5123506b R08: 0000000000000000 R09: 0000000000000000 [ 245.611226][T13766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 245.613694][T13766] R13: 00007f3f51426038 R14: 00007f3f51425fa0 R15: 00007fff68d74f58 [ 245.616157][T13766] [ 246.237304][ T74] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.279817][ T1359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.359872][ T2362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.322414][ T74] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.364342][ T1359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.604700][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.246031][ T2362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.416217][ T1359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.448131][ T74] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.180213][ T5839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.489957][ T1359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.291782][ T5819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.531677][ T1359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.093880][ T5819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.573108][ T74] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog