last executing test programs: 2m24.195408207s ago: executing program 1 (id=616): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14f5ff001000010000000000000001000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a0b080000000000000000010000000900030073797a32000000001400048008000240fffffffe08000140000000040900010073797a30000000004c000000060a010400000000000000000100000208000b40000000000900010073797a300000000024000480200001800700010072740000140002800800024000000003080001400000000414000000110001"], 0xd4}, 0x1, 0x0, 0x0, 0x2000c045}, 0x4000) 2m24.195210077s ago: executing program 1 (id=618): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='-# 3 4\n', 0x9) 2m24.125339443s ago: executing program 1 (id=619): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000240)={0x0, 0x78, "450534d2a5478ceaee496b3bdee42fc0b4d9b7100de29f6adc1c034eda2a40074abbbfd46845f982d28778edadecfdafc06afed5179deec2afb36844b2fa1201c09dffd2f9060596ee68195fb8732a86ad9c2b3ace68f55501cceefdafa42bf16f88cc39e6759c9d67fec75657e7af989ae6e9c5ec1a83fa"}, &(0x7f00000002c0)=0x80) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000300)={r1, 0x8}, &(0x7f0000000340)=0x8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="8f92", 0x2}], 0x1}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x1a, 0x3b00, 0x0, 0xfffffffffffffdfd) 2m24.125039338s ago: executing program 1 (id=620): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x4400000000) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r2, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e2c, @multicast1}, 0x10) keyctl$describe(0x6, r2, 0x0, 0x0) keyctl$update(0x2, r2, &(0x7f0000000040)="fac2ee4454381885b3014643d92a7d0521a5ae1a226bb9d91cf38085af80b3e316560348197a88d9114628ec1ff6085276", 0x31) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r5 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_GET_PROPERTY(r5, 0x80106f53, &(0x7f0000000580)={0x32, &(0x7f0000000340)=[{0x3f, '\x00', @st={0x4, [{0x2, @uvalue=0x100000001}, {0x1, @svalue=0xffffffffffff0001}, {0x3, @uvalue=0x7}, {0x3, @uvalue=0x1ff}]}, 0x3}]}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r8) sendmsg$NLBL_CALIPSO_C_REMOVE(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r9, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x45}, 0x84) sendmsg$NLBL_CALIPSO_C_LISTALL(r6, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1c, r9, 0x8, 0x70bd27, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000811}, 0x1) ioctl$KVM_SET_MSRS(r4, 0xc048aeca, &(0x7f0000000280)={0x4, 0x0, [{0xaf2, 0x0, 0x4}, {0x244, 0x0, 0x4}, {0x9f7, 0x0, 0x10000}, {0x385, 0x0, 0x1}]}) keyctl$instantiate_iov(0x14, r2, &(0x7f00000007c0)=[{&(0x7f0000000400)="3f210535e416f63f3f4833913849243e2354382e4a0e8a99c42dff818d4b5c787864bc7d05169a09f7827cf35b421286554f64a6a6ee5212a66993dfad9b91dfcf4300e0532b3f0f22be77d2ad1ece553e5acaff7ba75af10dd7d17f3b562574527fbff924b9cf96dae776", 0x6b}, {&(0x7f0000000480)="6d2ca62bf55c619f1358b87df6cb98503a92458431a85034d9ec60cdd991f0573cd670907c77808acee86b91c4b2b11ed28815bd57b223acd71b28", 0x3b}, {&(0x7f00000004c0)="4550218681233b7fb110c7860b0b62d6743948d620fb0a15bac6925da90e4d7664dfb9a6c8135d0fbcbff16b885e7288efcfe940a1419349ea2c98775fba5f778eb6511c0879d0980019dc9a16953a0818dc0bdc89ab191c5c8958bb97424919c180f8f98f1034d489b9b9f9b802f24a3383e43f880cd6c7fc9f9daa78a29bc897d21f60df657902d28797d628587042", 0x90}, {&(0x7f00000005c0)="e45d244ef43e30c9ff73c9ad3954d8c3dcd1be174bc152b65a48d59c5b84108d9ef4a0851977bdd02372111e359f7e7bfff4c0053929ef0aba57d221dc4224b7ec16b8264cc347888da128e3805f5037d23dede65761143b2817409743e8ed1e305211d81be5c86c1f5156bfd9b699d5dd8601b5624117e963198c4f1cb57559a3281bbee04c07e7289e6b1c39da63de10d192", 0x93}, {&(0x7f0000000680)="0330d44179a33c56e366c38db2a17b2c0eaacee3eb99536c0c0b78206cb9b5721d62a0821c367d145f67bf621700da138e78ad2dd63bc760626cf7c620a7cb3864c2b7434f005d13dfcf0ce3d50acd904fdbf092a07e9d315c640ae9b6e4ac3f7722712d05151a977830b47f21d3f0e71815617d", 0x74}, {&(0x7f0000000700)="1fc1acc28b5e8bf2b77d5fbaf01d129602cd4403fed6f3fb61b791f6a27c67d4a5a94fb0f22ccecf27015694507193ac80fbf6f364b13d0b4fc4f8013dd3c67c1e55ab0d3c7b5fcc3b15592ff63508901bf13007163ecd3a83a0235de68f134461b6435d8a1c1054c33fb979f623d6fb30db0d285c46fbda1c11adc44a9020ae5823a1ffce1d781f80605fa0a69437b48914f52495033bdce54df090a11a0b939392bad7530a2a2206fbf616", 0xac}], 0x6, r2) 2m24.035621067s ago: executing program 1 (id=621): fsopen(&(0x7f0000000100)='ceph\x00', 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2) socket$netlink(0x10, 0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) read(r0, &(0x7f0000000100)=""/9, 0xfffffd87) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="76aa001c"], 0xffe) socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) socket$inet6(0x10, 0x3, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x101100, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000240)={0x10, 0x45, 0x40, 0x5, 0xfa, 0x4, 0x3, 0x4, 0xe, 0x6, 0x7, 0x1, 0x4f, 0x4}, 0xe) socket$netlink(0x10, 0x3, 0x0) memfd_create(&(0x7f0000002b40)='/$!}\\\x00', 0x4) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) wait4(r2, 0x0, 0x0, &(0x7f00000002c0)) wait4(r2, &(0x7f0000000280), 0x1000000, &(0x7f0000000140)) socket$l2tp(0x2, 0x2, 0x73) openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) 2m23.943574378s ago: executing program 1 (id=622): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) io_setup(0x200, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f00000000c0)={0x0, 0x0, 0xa1, 0x0, 0x4, r0, &(0x7f0000000200)="1d", 0x1, 0x1100}]) (fail_nth: 11) 2m8.95980199s ago: executing program 32 (id=622): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) io_setup(0x200, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f00000000c0)={0x0, 0x0, 0xa1, 0x0, 0x4, r0, &(0x7f0000000200)="1d", 0x1, 0x1100}]) (fail_nth: 11) 2m3.42525841s ago: executing program 4 (id=830): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000005, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000540)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000240)=""/17, 0x11, 0x6, 0x4, 0x9, 0x4, 0xc08}}, 0x120) read$FUSE(r0, 0x0, 0x0) 2m3.344643553s ago: executing program 4 (id=831): syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x3e, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0xff, 0x0, @empty}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x50, 0xc00, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 2m3.343256238s ago: executing program 4 (id=832): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000300)={0x0, 0x8}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="8f92", 0x2}], 0x1}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x1a, 0x3b00, 0x0, 0xfffffffffffffdfd) 2m3.273704391s ago: executing program 4 (id=834): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000007044f16c01b1fbfd000000000000008af65f0df9928941994cc8c173fac5688671085a86d143c59fed0e57feb97f422c51d8e63b4ed9e295df3ccd1a55752dfc2f32f14b6c8f0e7413c3e9caaad30dcb412d0f54623f388bb2c63d2b1f7d83cd0cc021867bb4aee9967a6ee83e1b18fd8beca7d7eddcd96634"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x80) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x0, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000010000000000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1, 0x4}, 0x94) r2 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r2, 0xc06c4124, &(0x7f0000000080)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x0, 0x6a, 0x3, 0x0, 0x38800, 0xffffffffffffffff, 0x2, '\x00', 0x0, r0, 0x2, 0x2, 0x3, 0x0, @value=r0}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000700)={r3, &(0x7f0000000640)="c9fb3f3be5ad1803e125369bfeb8fe9db5936e5436d6d0d64c3dbdd4e09ecdd155c38012d34d06d81d56087423f7dd5601835b693f721cd6837d9edb75b99a408fb8d93bc4facf6636ec4a061b70bcf5e39de0faca98e0266e9b615d8e8b8b11036d2a5aa77b315b537e5013c6742ef45f4e3653e809c7c8a14ed3bbe774504657825dd2ac2cc95899e2c7c99b1edf11169a1fe5f8593b11cf8c4681b1d6cce475b681e39065c338"}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x7, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x20, 0x10, &(0x7f0000000000)={0x0, 0x5}, 0xfffffffffffffd00}, 0x48) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000000c0)={[0x3, 0x2, 0xfffffffffffffc00, 0x100000001, 0xeb, 0x6, 0x9, 0x8, 0x40, 0x977, 0x2, 0x8, 0x0, 0x3, 0x2, 0xf], 0x2, 0x3a200}) write(r4, &(0x7f0000000600)='sessname=s+ device_path=/', 0x19) 2m3.273487678s ago: executing program 4 (id=835): socket$inet6(0xa, 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='sys\x00', 0x1ff) mount(0x0, &(0x7f00000007c0)='sys\x00', &(0x7f00000007e0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000008c0)='./sys/devices/platform/vhci_hcd.0/attach\x00', 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$kvm(0x0, &(0x7f0000000080), 0x600002, 0x0) socket$tipc(0x1e, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x1, @loopback}, {0x2, 0x4e23, @multicast1}, 0x118, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x1, 0x5, 0x4}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) syz_clone(0x80202000, 0x0, 0xfffffffffffffe70, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000400), 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000080)=[{r3, 0x2000}], 0x1, 0x0, 0x0, 0x0) close(r2) syz_open_dev$sndctrl(0x0, 0x80, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000000a0605000000000000000000010000050900020073797a30000000000500010007000000080009400000000114000880100007800a001100aa"], 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x44000) 2m3.134807636s ago: executing program 4 (id=837): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="58000000020601080000000000000000030000000900020073797a3100000000050001000700000005000500020000000c00078008000840000000af11000300686173683a6e65742c6e657400000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x20048000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x11, 0x800, 0xfffffffe, 0x25dfdbfd, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0x24000840) r2 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff, 0x2}, 0x18, 0x0) read$FUSE(r2, 0x0, 0x0) setns(0xc9, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r6 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x34, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300, 0x7}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[], 0x3c}}, 0x40000) setns(0xc9, 0x0) r8 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x7fff, @empty, 0x19f4d29}], 0x1c) listen(r8, 0x100) sendmsg$inet_sctp(r8, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @loopback=0x7f00fffd}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000300)="b2", 0x1a000}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000008008400000007f9ffff0900020f00000000"], 0x18}, 0x8050) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe00000100000000080005"], 0x24}}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) mlock(&(0x7f0000520000/0x1000)=nil, 0x1000) sendmsg$nl_generic(r0, &(0x7f0000001300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001340)=ANY=[@ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="3078207b22717c2153da135bb20d230c443320464abd94f513b940a439b63d9b65229506f03195127c6635fde268ec661886608983239a70148da024e2582365aa9c288b75a2ca51101b847d4b2e69e9e1e770a95f6754c463e3baf64a6033e61c0f41cc1829ec198dacf966fb4270c2bd010a17b642f3295c85ac5fc039707840bb8b574226fb5df100f95e5823092fff75efd80e8bb73f25f4ab10f74386c74334323dd629ff2f928f30019a85c87f00000065ad08007800", @ANYRES32=r0, @ANYBLOB='\x00\x00'], 0x10d0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008801) 2m0.633763576s ago: executing program 0 (id=869): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x74, 0x3]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e24, 0x100, @local, 0x4}, {0xa, 0x4e23, 0x7, @empty, 0xd473}, 0x0, {[0x4, 0x7, 0x3, 0x8001, 0xe10, 0xe, 0x3]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0xa4ff, @local}, {0xa, 0x4e20, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c) 2m0.633296973s ago: executing program 0 (id=871): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0x30000, 0x8, 0xd, 0x3, 0xe5, 0x40, 0x2d, 0x0, 0x30, 0x19}, {0x41000, 0x4, 0xe, 0x0, 0x40, 0x5, 0x7e, 0x9, 0x58, 0x3, 0x23, 0x1}, {0xdddd1000, 0xe000, 0xe, 0x5, 0x3, 0x6, 0xfe, 0x89, 0x1, 0xab, 0x5, 0x81}, {0x30000, 0x8000000, 0x3, 0x5d, 0x4, 0x43, 0x9, 0xfa, 0x80, 0x7, 0xe}, {0x0, 0x9000, 0x10, 0x1, 0x3, 0x7, 0xab, 0x7f, 0x47, 0x83, 0xf7, 0x82}, {0x1000, 0x80a0000, 0x8, 0xa0, 0xb1, 0x8, 0x1, 0xd, 0x88, 0x13, 0x1, 0xfd}, {0x54000, 0x2, 0x4, 0x5, 0x7, 0xff, 0xb, 0x0, 0x5, 0x81, 0xff, 0x70}, {0xd000, 0xb000, 0xe, 0x5, 0xf, 0x7, 0x1, 0x18, 0x2, 0x3, 0x7, 0x9}, {0xb000, 0x2d}, {0x10000, 0x7fff}, 0x80000031, 0x0, 0x6000, 0x42024, 0x9, 0x0, 0x3000, [0x6840000000000002, 0x3, 0x91, 0xff]}) close(0x3) r5 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xfffffff9}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x4) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r6 = syz_open_dev$dmmidi(&(0x7f0000000080), 0x2, 0x2003) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r6, 0xc0245720, &(0x7f0000000040)) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'geneve0\x00', 0x0}) sendto$packet(r7, &(0x7f00000002c0)="05031600d3fc140000004788031c09103328", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14) write$bt_hci(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e0001000200", @ANYBLOB=','], 0x8) 2m0.416012885s ago: executing program 0 (id=873): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001500010000000000000000000100000008000100", @ANYRESHEX=r0], 0x1c}}, 0x804) keyctl$set_reqkey_keyring(0xe, 0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000001140)=""/4096, 0x1000}], 0x1, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x4, 0x10, 0x4}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x0, 0xfffffffa, 0xb, 0x220, r1, 0x7, '\x00', 0x0, r2, 0x0, 0x0, 0x2}, 0x50) 2m0.415816172s ago: executing program 0 (id=874): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_START_POLL(r2, 0x0, 0x0) write$nci(r0, &(0x7f0000000300)=@NCI_OP_RF_DISCOVER_RSP={0x1, 0x0, 0x2, 0x3, 0x1}, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9) listns(&(0x7f0000000080)={0x20, 0x0, 0xa, 0x20000, 0x0, 0x1}, 0x0, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) timer_create(0x0, 0x0, &(0x7f0000000100)=0x0) r5 = epoll_create1(0x0) epoll_pwait(r5, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0x2d516fb8, 0x0, 0x0) epoll_wait(r5, &(0x7f0000000240)=[{}], 0x1, 0x404) syz_usb_connect(0x5, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002100010000000000000000000a000000000000000000000005001e"], 0x24}}, 0x0) timer_delete(r4) r7 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f0000000000)={0x1ff, 0x2006, 0x1, {0x2, @raw_data="246d9dd8a3b2024b96fb4d09f483fbc1badea5d04658b1259a9dec4e821ea7e527a121db45857a34a1127edf2a9a5b9b1640915dc4cf6737cd20bb0c650893e338fd3a0d7291937ca6e6ff5d12601c09c5a6bf88b242a123ddccfd8baf1ccb986ca725a7b27db64c6f32772bf1661c468ab281fce3ae7c148ff4427035297d0be8172ef4ce699e8004ee92c5b7ee8342c3d69701000003c92feb73a94eeaa5745999175068ce1ec1f5f5ab8266e82b2878918c54941258154dd265860c5133aa7c892d1400"}, 0x3ff}) 1m57.352011875s ago: executing program 0 (id=882): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079a0480000000000610448000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) mmap$usbfs(&(0x7f0000bdc000/0x2000)=nil, 0x2000, 0x8, 0x8010, r1, 0x200) r2 = socket$inet(0x2, 0x2, 0x11) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x115c, @loopback}, 0x1, 0x0, 0x1}}, 0x26) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r4 = add_key$user(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)="19", 0x1, 0xfffffffffffffffc) fsetxattr$security_ima(r0, &(0x7f0000000200), &(0x7f0000000240)=@ng={0x4, 0x12, "17c7dd"}, 0x5, 0x0) keyctl$get_security(0x11, r4, &(0x7f0000000180)=""/64, 0x40) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/net/pppol2tp\x00', 0x80, 0x0) read(r5, &(0x7f0000000300), 0x1) read(r5, &(0x7f0000000400), 0x120) read(r5, &(0x7f0000000500), 0x1000) r6 = syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x22140000, 0x0, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[r6], 0x1}, 0x58) 1m57.239942943s ago: executing program 0 (id=884): r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f0000001300)={&(0x7f0000000300)=[0x8, 0xc, 0xe, 0x1, 0x8, 0x9d6, 0x1, 0x10000, 0x0, 0x8001, 0x7, 0x9, 0x5, 0x6, 0x4, 0x8, 0x1000, 0x7, 0x0, 0x3ff, 0xc, 0x0, 0x2, 0xa, 0x7, 0x6, 0x7f, 0x0, 0x9, 0x80, 0x4, 0x6, 0x3, 0x2, 0xe2e, 0x0, 0x1, 0x7, 0xdac, 0x80000000, 0x1, 0x9, 0x7ff, 0xf1b, 0x6, 0x38, 0x100, 0x4, 0x0, 0x1, 0xfffffffb, 0xfffffffe, 0x5, 0x1, 0x1, 0x9, 0x2, 0x5, 0x5, 0x655, 0x1, 0x3, 0x515a, 0x50, 0x6, 0xffffffff, 0x53e, 0x50a3, 0x4, 0xffffffff, 0x0, 0x3eb9, 0xb, 0x9, 0x8001, 0x100, 0x9, 0x10, 0x4, 0xff6, 0x8, 0x2, 0x5, 0x2, 0x0, 0x8, 0xfffff056, 0xff, 0x7a72280, 0x4, 0x9, 0x100, 0xffffffff, 0xfff, 0x5, 0xffffffff, 0x1bb, 0x6, 0xd9, 0x2, 0x6, 0xfffffff9, 0xf5, 0x2, 0x4, 0x4, 0x2, 0x2, 0x0, 0x2, 0x2, 0x101, 0xde, 0x3ff, 0x80000001, 0x7d80000, 0xc922, 0x0, 0x406, 0xe, 0x3, 0x6, 0x6, 0x1, 0x887, 0xeaa, 0x4, 0x4, 0x7, 0x2, 0xb, 0x6, 0x2, 0x6, 0x0, 0xf, 0x7, 0x0, 0x3, 0x2, 0x5, 0xffff, 0x80, 0x5312, 0x2, 0xfffffff1, 0x8, 0x4, 0x6, 0xc5, 0x8, 0xb, 0x9, 0x4, 0x4, 0x9, 0xfff, 0xc1a, 0x9, 0x7ff, 0xa7, 0x6, 0x8, 0xdc, 0x678, 0xff, 0x10, 0x3ff, 0x5, 0xcadc, 0x7fff, 0x7, 0x1, 0x1, 0x7fff8, 0x2, 0x62, 0xb, 0x9, 0xc, 0x6, 0xcf2a, 0x101, 0x6, 0xfff, 0x8, 0x6, 0x40, 0x4, 0xe4, 0xac, 0x8, 0x5, 0x3, 0x461, 0x2, 0x5, 0x0, 0xee, 0x5, 0x7, 0x9, 0x80000000, 0x2, 0x9b, 0x1200000, 0x2, 0x7, 0x2, 0x8, 0x2, 0xff, 0x6, 0x0, 0xfff, 0x4, 0x6, 0x980, 0xfffffffb, 0xffffffff, 0xfffffff0, 0xfffffff9, 0x5, 0x40, 0x8, 0xc76, 0x80000000, 0x1, 0x400, 0x6, 0x80000001, 0x2000, 0x8001, 0x7fff, 0x2, 0x885, 0x7, 0x0, 0x9, 0x1, 0x6, 0x1, 0x63b5, 0x7, 0xfff, 0x9, 0x7fff, 0xffffffff, 0x5, 0x4, 0x2, 0x6, 0x0, 0x2, 0x0, 0xa, 0x3, 0x0, 0x8, 0xef14, 0x1ff, 0xfff, 0x3, 0x52e, 0x5, 0x2, 0x3, 0x8, 0xffffffff, 0x3ff, 0x9, 0x3, 0x2, 0x101, 0x6, 0x1, 0xe2, 0x0, 0x6, 0xfedb, 0x7, 0x2, 0xfffffeff, 0x3, 0x7f, 0x8, 0x9, 0x1000, 0x0, 0x3, 0x3, 0xd2e, 0x9, 0x7, 0x9, 0x6ab, 0x401, 0x2, 0xd8, 0x1000000, 0x3, 0x0, 0x7, 0x7, 0x32, 0x7, 0x400, 0x6, 0x6, 0x9, 0x6, 0x4fe, 0x8, 0x7, 0x8, 0x1, 0x10, 0x2, 0x4, 0x0, 0x61f, 0xfffffffe, 0x4, 0x4, 0x6, 0x7, 0x7, 0x10, 0x3800000, 0x9, 0x0, 0x0, 0x4, 0x40, 0x10, 0xbf3a, 0x21b8, 0x6, 0xc27f, 0x9, 0x200, 0x4, 0x9, 0x3, 0x0, 0x4, 0x2, 0xd, 0x8, 0xfff, 0x3, 0x6, 0xccf, 0x10, 0x200, 0x6cb, 0x385c, 0x8, 0xeba, 0x9, 0x100, 0x5, 0xfffffffa, 0x1ff, 0x6, 0xfffffffa, 0x401, 0x8, 0x6, 0xa, 0x6726, 0x4, 0x401, 0xfffffffb, 0x5, 0xfffffffb, 0x6, 0x4, 0x280, 0x1, 0x80000000, 0xffffffff, 0x8000, 0x54, 0x1, 0x3, 0x7, 0x87ac4a6, 0x4, 0x9000000, 0x3, 0xb77, 0x100, 0x0, 0x30000000, 0xb22, 0x3, 0x6, 0x5, 0x400, 0x2, 0x7, 0xb9a2, 0x40, 0x1, 0x8001, 0x71e, 0x8, 0x2, 0xf, 0x0, 0xfffffdcf, 0x6, 0x9, 0x9de0, 0x66, 0x3, 0x1, 0x0, 0x3, 0x7, 0x1, 0x4, 0xfffffffb, 0xfffffff7, 0x307, 0x0, 0x2, 0x10, 0x9, 0xfffffffd, 0xfe51, 0x2, 0xf6d7, 0xfffffff7, 0x7fff, 0x7d, 0x8001, 0x1, 0x45, 0x9, 0x28, 0x9, 0xde, 0xd163, 0x80000000, 0x8, 0x4, 0x8, 0x8001, 0x5, 0xd36, 0x0, 0x1a, 0x4, 0x9, 0x80, 0xd955, 0x10000, 0x6, 0x2d6, 0x2, 0xa, 0xfd, 0xb, 0x8, 0x2, 0x3fff80, 0x56, 0x2, 0x8, 0x38, 0xfffffffa, 0x4, 0x0, 0xf, 0x69, 0x81, 0x9, 0x1, 0x9, 0x8, 0xad4, 0x9, 0x0, 0x316, 0x81, 0xe64, 0xfffffffc, 0xfffffffe, 0x6, 0x9, 0xa4, 0xd7c2, 0x41, 0x8, 0x8001, 0xc4d4, 0xb8, 0x1, 0x0, 0x4, 0x8, 0x40, 0x4, 0x10, 0x6b3a1746, 0x5, 0x6, 0x9, 0x2, 0x0, 0x4, 0x4, 0x0, 0x401, 0x20000, 0x3, 0x5, 0x3, 0xfffffff8, 0x568, 0x9, 0x6c5, 0x5, 0x40, 0xaa, 0x4, 0x4, 0x3, 0x7, 0x90, 0x6, 0xfc1, 0x0, 0x9, 0x8, 0x101, 0x2, 0x9, 0x1ff, 0x0, 0x8, 0x2, 0x0, 0xffff, 0x8a3, 0x8, 0x7, 0x3ff, 0xe, 0xfffffffc, 0x7, 0x6, 0x7, 0x10000, 0x10, 0x7, 0x4, 0x0, 0x5, 0x9, 0x7, 0x23d, 0x6, 0x400, 0x34, 0x1, 0x7ff, 0x3, 0x8001, 0xffff8000, 0x0, 0x7, 0x8, 0x7, 0x0, 0x0, 0xffffffff, 0x9, 0xffff, 0x400, 0x3, 0x0, 0x905bde19, 0x5, 0x101, 0xfffffff8, 0x10000, 0x42e, 0x9, 0x2, 0xff, 0x8001, 0x80, 0x3, 0x8, 0x808, 0x2, 0x3, 0x7f, 0x6, 0x3, 0x7fffffff, 0x1, 0x3ff, 0x2, 0x9, 0x4000040, 0xe2, 0x9, 0xff, 0xee, 0x4, 0xa7f, 0x7fff, 0x9, 0x9, 0x3, 0x3, 0x0, 0xb499, 0x1, 0x2, 0x4, 0x9, 0x1, 0x5, 0x18, 0x7fffffff, 0x8, 0x5, 0x0, 0x56, 0xfe6b, 0x6, 0xff, 0x6c9, 0x7, 0x100, 0x1c0, 0x0, 0x8, 0x2, 0x7ff, 0x9, 0x200, 0xb07, 0xffff, 0x503f65a7, 0x3, 0x6, 0x9, 0x9, 0xb, 0x4, 0x2, 0x3, 0x3, 0x0, 0xad4, 0x7, 0x7, 0xce4, 0xc, 0x300, 0x5, 0x48, 0x5, 0x0, 0x4, 0x37f1, 0x4, 0x0, 0x9, 0x1, 0x0, 0x6, 0xc, 0xbd8, 0x7, 0xab, 0x5, 0x6, 0x5270, 0x4, 0xff, 0x1, 0x80, 0x4cf2, 0x5, 0x7adc, 0x8, 0x8, 0x922e, 0x4, 0x8, 0x6, 0x2, 0xfffffe70, 0x0, 0x6, 0x10001, 0x5, 0x0, 0x5, 0x9, 0x800, 0x6, 0xfd, 0x101, 0x8000, 0x8, 0x0, 0xfffff64e, 0x5, 0x0, 0xc, 0x5, 0x9, 0x8, 0x3, 0x0, 0x1, 0x2, 0x6, 0x40000, 0x1, 0x0, 0xfff, 0x9, 0x2, 0x3ff, 0x81, 0x1, 0x43, 0xfffffffb, 0x6, 0xffffb8d4, 0x6, 0x1, 0xf, 0x8, 0x6, 0x1, 0x6, 0x1000, 0xf4, 0x9, 0x4, 0x10000, 0x9, 0x5, 0x8, 0x1000, 0xa, 0xff, 0x80000001, 0xfffffffd, 0x0, 0xa, 0x0, 0x7, 0x3, 0x6, 0x7, 0x0, 0x6103, 0xff59, 0xa20, 0x2, 0x2, 0xaa87, 0x80, 0x9, 0xc7, 0xe34d, 0x0, 0x2, 0xffffffff, 0x5, 0x9, 0xfffffffc, 0x6, 0x4, 0x2, 0x80000001, 0x7f, 0x7fff, 0x7f, 0xc, 0x80000001, 0x1, 0x95ff, 0x10000, 0x4, 0x3, 0x5, 0x8d1e, 0x5, 0x7c4, 0xb8c1, 0xa, 0x695, 0x8, 0x9, 0xc, 0x6, 0x8001, 0x1000, 0x9, 0x0, 0x3, 0x7fffffff, 0x7, 0x9, 0x7, 0x101, 0x1000, 0xdd, 0x2, 0x4, 0x7, 0x8, 0x9, 0xff, 0x2, 0x4, 0x9, 0x9, 0xfffffffa, 0x9, 0x7, 0x3, 0x2000, 0x8, 0x40, 0x3, 0x3, 0x7, 0x0, 0x401, 0x40, 0x7fffffff, 0xc96, 0x80000001, 0x2b44, 0xb, 0x5, 0xff, 0x3, 0x853, 0x3, 0x4f6, 0x4, 0x101, 0x2, 0x0, 0x3ff, 0x6, 0x2, 0x1646, 0x2, 0xc, 0x800, 0x7, 0x8, 0x6, 0x2, 0xd52, 0x65, 0x10001, 0x8, 0xfcb9, 0xffffffff, 0x9, 0x80, 0xb5, 0x2, 0x4, 0x0, 0x7fff, 0x3, 0xfffffffd, 0xfff, 0x8, 0x6, 0x4, 0x40, 0x5, 0x1, 0x8, 0x5, 0x6, 0x0, 0x0, 0x1, 0x1d, 0x40, 0x0, 0x5, 0x9, 0x1e, 0x400, 0xbc2b, 0x7, 0xcca, 0x0, 0x5, 0x200, 0xf, 0x21, 0x9, 0xd82, 0xf, 0x4, 0x3, 0x4, 0x48, 0x6, 0x4, 0x4, 0x1, 0x3, 0x2, 0x8001, 0x1, 0x7, 0x7, 0x10000, 0xff, 0x7, 0xff, 0xc, 0xc, 0xc0000, 0x20f, 0x0, 0x2, 0x2, 0x2, 0x5, 0x9, 0x5, 0x4, 0x3c0, 0xfff, 0x8001, 0x9, 0x8, 0x3, 0x4, 0x9083, 0x10000, 0x1000, 0x3d, 0xc, 0x6, 0x2, 0x80000000, 0x4, 0x8, 0x1, 0x5, 0x8001, 0x2, 0xfffffff6, 0xffff64dc, 0x0, 0x6, 0x8, 0x8, 0xfff, 0x4, 0x2243e56, 0x7, 0xffff, 0xd0de, 0x6, 0x800, 0x4, 0x3, 0x5, 0xfffffd36, 0x5, 0xc51, 0x3, 0x6, 0x401, 0x0, 0xfff, 0x3, 0x8, 0x95, 0x2, 0x3e5, 0x0, 0xc0000000, 0x3, 0x9, 0x3, 0x2, 0x80, 0x3, 0x9, 0xa, 0x6e, 0x10001, 0x100, 0x80000000, 0x5380, 0x4000000, 0x2, 0xaf1, 0x6, 0x10, 0x8, 0x3, 0x770, 0x9, 0x0, 0x7c76, 0x9, 0x80], 0x2, 0x400, 0x8000}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000005500010004000000ffdbdf2507000000", @ANYRES32, @ANYRES8=0x0, @ANYRES32, @ANYBLOB="0002065e00000000000000002000ffffe000000108"], 0x38}, 0x1, 0x0, 0x0, 0x2000c800}, 0x40000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000008000000000000500000a7c000000060a010400000000000000000a0000013c000480380001800a0001006d617463680000002800028010000300709c897c82b1095a67232d630800024000000001090001006d61726b000000000900020073797a32000000000900010073797a3100000000140005800800024000000002080001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 1m47.947721918s ago: executing program 33 (id=837): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="58000000020601080000000000000000030000000900020073797a3100000000050001000700000005000500020000000c00078008000840000000af11000300686173683a6e65742c6e657400000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x20048000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x11, 0x800, 0xfffffffe, 0x25dfdbfd, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0x24000840) r2 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff, 0x2}, 0x18, 0x0) read$FUSE(r2, 0x0, 0x0) setns(0xc9, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r6 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x34, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300, 0x7}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[], 0x3c}}, 0x40000) setns(0xc9, 0x0) r8 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x7fff, @empty, 0x19f4d29}], 0x1c) listen(r8, 0x100) sendmsg$inet_sctp(r8, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @loopback=0x7f00fffd}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000300)="b2", 0x1a000}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000008008400000007f9ffff0900020f00000000"], 0x18}, 0x8050) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe00000100000000080005"], 0x24}}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) mlock(&(0x7f0000520000/0x1000)=nil, 0x1000) sendmsg$nl_generic(r0, &(0x7f0000001300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001340)=ANY=[@ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="3078207b22717c2153da135bb20d230c443320464abd94f513b940a439b63d9b65229506f03195127c6635fde268ec661886608983239a70148da024e2582365aa9c288b75a2ca51101b847d4b2e69e9e1e770a95f6754c463e3baf64a6033e61c0f41cc1829ec198dacf966fb4270c2bd010a17b642f3295c85ac5fc039707840bb8b574226fb5df100f95e5823092fff75efd80e8bb73f25f4ab10f74386c74334323dd629ff2f928f30019a85c87f00000065ad08007800", @ANYRES32=r0, @ANYBLOB='\x00\x00'], 0x10d0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008801) 1m42.187499991s ago: executing program 34 (id=884): r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f0000001300)={&(0x7f0000000300)=[0x8, 0xc, 0xe, 0x1, 0x8, 0x9d6, 0x1, 0x10000, 0x0, 0x8001, 0x7, 0x9, 0x5, 0x6, 0x4, 0x8, 0x1000, 0x7, 0x0, 0x3ff, 0xc, 0x0, 0x2, 0xa, 0x7, 0x6, 0x7f, 0x0, 0x9, 0x80, 0x4, 0x6, 0x3, 0x2, 0xe2e, 0x0, 0x1, 0x7, 0xdac, 0x80000000, 0x1, 0x9, 0x7ff, 0xf1b, 0x6, 0x38, 0x100, 0x4, 0x0, 0x1, 0xfffffffb, 0xfffffffe, 0x5, 0x1, 0x1, 0x9, 0x2, 0x5, 0x5, 0x655, 0x1, 0x3, 0x515a, 0x50, 0x6, 0xffffffff, 0x53e, 0x50a3, 0x4, 0xffffffff, 0x0, 0x3eb9, 0xb, 0x9, 0x8001, 0x100, 0x9, 0x10, 0x4, 0xff6, 0x8, 0x2, 0x5, 0x2, 0x0, 0x8, 0xfffff056, 0xff, 0x7a72280, 0x4, 0x9, 0x100, 0xffffffff, 0xfff, 0x5, 0xffffffff, 0x1bb, 0x6, 0xd9, 0x2, 0x6, 0xfffffff9, 0xf5, 0x2, 0x4, 0x4, 0x2, 0x2, 0x0, 0x2, 0x2, 0x101, 0xde, 0x3ff, 0x80000001, 0x7d80000, 0xc922, 0x0, 0x406, 0xe, 0x3, 0x6, 0x6, 0x1, 0x887, 0xeaa, 0x4, 0x4, 0x7, 0x2, 0xb, 0x6, 0x2, 0x6, 0x0, 0xf, 0x7, 0x0, 0x3, 0x2, 0x5, 0xffff, 0x80, 0x5312, 0x2, 0xfffffff1, 0x8, 0x4, 0x6, 0xc5, 0x8, 0xb, 0x9, 0x4, 0x4, 0x9, 0xfff, 0xc1a, 0x9, 0x7ff, 0xa7, 0x6, 0x8, 0xdc, 0x678, 0xff, 0x10, 0x3ff, 0x5, 0xcadc, 0x7fff, 0x7, 0x1, 0x1, 0x7fff8, 0x2, 0x62, 0xb, 0x9, 0xc, 0x6, 0xcf2a, 0x101, 0x6, 0xfff, 0x8, 0x6, 0x40, 0x4, 0xe4, 0xac, 0x8, 0x5, 0x3, 0x461, 0x2, 0x5, 0x0, 0xee, 0x5, 0x7, 0x9, 0x80000000, 0x2, 0x9b, 0x1200000, 0x2, 0x7, 0x2, 0x8, 0x2, 0xff, 0x6, 0x0, 0xfff, 0x4, 0x6, 0x980, 0xfffffffb, 0xffffffff, 0xfffffff0, 0xfffffff9, 0x5, 0x40, 0x8, 0xc76, 0x80000000, 0x1, 0x400, 0x6, 0x80000001, 0x2000, 0x8001, 0x7fff, 0x2, 0x885, 0x7, 0x0, 0x9, 0x1, 0x6, 0x1, 0x63b5, 0x7, 0xfff, 0x9, 0x7fff, 0xffffffff, 0x5, 0x4, 0x2, 0x6, 0x0, 0x2, 0x0, 0xa, 0x3, 0x0, 0x8, 0xef14, 0x1ff, 0xfff, 0x3, 0x52e, 0x5, 0x2, 0x3, 0x8, 0xffffffff, 0x3ff, 0x9, 0x3, 0x2, 0x101, 0x6, 0x1, 0xe2, 0x0, 0x6, 0xfedb, 0x7, 0x2, 0xfffffeff, 0x3, 0x7f, 0x8, 0x9, 0x1000, 0x0, 0x3, 0x3, 0xd2e, 0x9, 0x7, 0x9, 0x6ab, 0x401, 0x2, 0xd8, 0x1000000, 0x3, 0x0, 0x7, 0x7, 0x32, 0x7, 0x400, 0x6, 0x6, 0x9, 0x6, 0x4fe, 0x8, 0x7, 0x8, 0x1, 0x10, 0x2, 0x4, 0x0, 0x61f, 0xfffffffe, 0x4, 0x4, 0x6, 0x7, 0x7, 0x10, 0x3800000, 0x9, 0x0, 0x0, 0x4, 0x40, 0x10, 0xbf3a, 0x21b8, 0x6, 0xc27f, 0x9, 0x200, 0x4, 0x9, 0x3, 0x0, 0x4, 0x2, 0xd, 0x8, 0xfff, 0x3, 0x6, 0xccf, 0x10, 0x200, 0x6cb, 0x385c, 0x8, 0xeba, 0x9, 0x100, 0x5, 0xfffffffa, 0x1ff, 0x6, 0xfffffffa, 0x401, 0x8, 0x6, 0xa, 0x6726, 0x4, 0x401, 0xfffffffb, 0x5, 0xfffffffb, 0x6, 0x4, 0x280, 0x1, 0x80000000, 0xffffffff, 0x8000, 0x54, 0x1, 0x3, 0x7, 0x87ac4a6, 0x4, 0x9000000, 0x3, 0xb77, 0x100, 0x0, 0x30000000, 0xb22, 0x3, 0x6, 0x5, 0x400, 0x2, 0x7, 0xb9a2, 0x40, 0x1, 0x8001, 0x71e, 0x8, 0x2, 0xf, 0x0, 0xfffffdcf, 0x6, 0x9, 0x9de0, 0x66, 0x3, 0x1, 0x0, 0x3, 0x7, 0x1, 0x4, 0xfffffffb, 0xfffffff7, 0x307, 0x0, 0x2, 0x10, 0x9, 0xfffffffd, 0xfe51, 0x2, 0xf6d7, 0xfffffff7, 0x7fff, 0x7d, 0x8001, 0x1, 0x45, 0x9, 0x28, 0x9, 0xde, 0xd163, 0x80000000, 0x8, 0x4, 0x8, 0x8001, 0x5, 0xd36, 0x0, 0x1a, 0x4, 0x9, 0x80, 0xd955, 0x10000, 0x6, 0x2d6, 0x2, 0xa, 0xfd, 0xb, 0x8, 0x2, 0x3fff80, 0x56, 0x2, 0x8, 0x38, 0xfffffffa, 0x4, 0x0, 0xf, 0x69, 0x81, 0x9, 0x1, 0x9, 0x8, 0xad4, 0x9, 0x0, 0x316, 0x81, 0xe64, 0xfffffffc, 0xfffffffe, 0x6, 0x9, 0xa4, 0xd7c2, 0x41, 0x8, 0x8001, 0xc4d4, 0xb8, 0x1, 0x0, 0x4, 0x8, 0x40, 0x4, 0x10, 0x6b3a1746, 0x5, 0x6, 0x9, 0x2, 0x0, 0x4, 0x4, 0x0, 0x401, 0x20000, 0x3, 0x5, 0x3, 0xfffffff8, 0x568, 0x9, 0x6c5, 0x5, 0x40, 0xaa, 0x4, 0x4, 0x3, 0x7, 0x90, 0x6, 0xfc1, 0x0, 0x9, 0x8, 0x101, 0x2, 0x9, 0x1ff, 0x0, 0x8, 0x2, 0x0, 0xffff, 0x8a3, 0x8, 0x7, 0x3ff, 0xe, 0xfffffffc, 0x7, 0x6, 0x7, 0x10000, 0x10, 0x7, 0x4, 0x0, 0x5, 0x9, 0x7, 0x23d, 0x6, 0x400, 0x34, 0x1, 0x7ff, 0x3, 0x8001, 0xffff8000, 0x0, 0x7, 0x8, 0x7, 0x0, 0x0, 0xffffffff, 0x9, 0xffff, 0x400, 0x3, 0x0, 0x905bde19, 0x5, 0x101, 0xfffffff8, 0x10000, 0x42e, 0x9, 0x2, 0xff, 0x8001, 0x80, 0x3, 0x8, 0x808, 0x2, 0x3, 0x7f, 0x6, 0x3, 0x7fffffff, 0x1, 0x3ff, 0x2, 0x9, 0x4000040, 0xe2, 0x9, 0xff, 0xee, 0x4, 0xa7f, 0x7fff, 0x9, 0x9, 0x3, 0x3, 0x0, 0xb499, 0x1, 0x2, 0x4, 0x9, 0x1, 0x5, 0x18, 0x7fffffff, 0x8, 0x5, 0x0, 0x56, 0xfe6b, 0x6, 0xff, 0x6c9, 0x7, 0x100, 0x1c0, 0x0, 0x8, 0x2, 0x7ff, 0x9, 0x200, 0xb07, 0xffff, 0x503f65a7, 0x3, 0x6, 0x9, 0x9, 0xb, 0x4, 0x2, 0x3, 0x3, 0x0, 0xad4, 0x7, 0x7, 0xce4, 0xc, 0x300, 0x5, 0x48, 0x5, 0x0, 0x4, 0x37f1, 0x4, 0x0, 0x9, 0x1, 0x0, 0x6, 0xc, 0xbd8, 0x7, 0xab, 0x5, 0x6, 0x5270, 0x4, 0xff, 0x1, 0x80, 0x4cf2, 0x5, 0x7adc, 0x8, 0x8, 0x922e, 0x4, 0x8, 0x6, 0x2, 0xfffffe70, 0x0, 0x6, 0x10001, 0x5, 0x0, 0x5, 0x9, 0x800, 0x6, 0xfd, 0x101, 0x8000, 0x8, 0x0, 0xfffff64e, 0x5, 0x0, 0xc, 0x5, 0x9, 0x8, 0x3, 0x0, 0x1, 0x2, 0x6, 0x40000, 0x1, 0x0, 0xfff, 0x9, 0x2, 0x3ff, 0x81, 0x1, 0x43, 0xfffffffb, 0x6, 0xffffb8d4, 0x6, 0x1, 0xf, 0x8, 0x6, 0x1, 0x6, 0x1000, 0xf4, 0x9, 0x4, 0x10000, 0x9, 0x5, 0x8, 0x1000, 0xa, 0xff, 0x80000001, 0xfffffffd, 0x0, 0xa, 0x0, 0x7, 0x3, 0x6, 0x7, 0x0, 0x6103, 0xff59, 0xa20, 0x2, 0x2, 0xaa87, 0x80, 0x9, 0xc7, 0xe34d, 0x0, 0x2, 0xffffffff, 0x5, 0x9, 0xfffffffc, 0x6, 0x4, 0x2, 0x80000001, 0x7f, 0x7fff, 0x7f, 0xc, 0x80000001, 0x1, 0x95ff, 0x10000, 0x4, 0x3, 0x5, 0x8d1e, 0x5, 0x7c4, 0xb8c1, 0xa, 0x695, 0x8, 0x9, 0xc, 0x6, 0x8001, 0x1000, 0x9, 0x0, 0x3, 0x7fffffff, 0x7, 0x9, 0x7, 0x101, 0x1000, 0xdd, 0x2, 0x4, 0x7, 0x8, 0x9, 0xff, 0x2, 0x4, 0x9, 0x9, 0xfffffffa, 0x9, 0x7, 0x3, 0x2000, 0x8, 0x40, 0x3, 0x3, 0x7, 0x0, 0x401, 0x40, 0x7fffffff, 0xc96, 0x80000001, 0x2b44, 0xb, 0x5, 0xff, 0x3, 0x853, 0x3, 0x4f6, 0x4, 0x101, 0x2, 0x0, 0x3ff, 0x6, 0x2, 0x1646, 0x2, 0xc, 0x800, 0x7, 0x8, 0x6, 0x2, 0xd52, 0x65, 0x10001, 0x8, 0xfcb9, 0xffffffff, 0x9, 0x80, 0xb5, 0x2, 0x4, 0x0, 0x7fff, 0x3, 0xfffffffd, 0xfff, 0x8, 0x6, 0x4, 0x40, 0x5, 0x1, 0x8, 0x5, 0x6, 0x0, 0x0, 0x1, 0x1d, 0x40, 0x0, 0x5, 0x9, 0x1e, 0x400, 0xbc2b, 0x7, 0xcca, 0x0, 0x5, 0x200, 0xf, 0x21, 0x9, 0xd82, 0xf, 0x4, 0x3, 0x4, 0x48, 0x6, 0x4, 0x4, 0x1, 0x3, 0x2, 0x8001, 0x1, 0x7, 0x7, 0x10000, 0xff, 0x7, 0xff, 0xc, 0xc, 0xc0000, 0x20f, 0x0, 0x2, 0x2, 0x2, 0x5, 0x9, 0x5, 0x4, 0x3c0, 0xfff, 0x8001, 0x9, 0x8, 0x3, 0x4, 0x9083, 0x10000, 0x1000, 0x3d, 0xc, 0x6, 0x2, 0x80000000, 0x4, 0x8, 0x1, 0x5, 0x8001, 0x2, 0xfffffff6, 0xffff64dc, 0x0, 0x6, 0x8, 0x8, 0xfff, 0x4, 0x2243e56, 0x7, 0xffff, 0xd0de, 0x6, 0x800, 0x4, 0x3, 0x5, 0xfffffd36, 0x5, 0xc51, 0x3, 0x6, 0x401, 0x0, 0xfff, 0x3, 0x8, 0x95, 0x2, 0x3e5, 0x0, 0xc0000000, 0x3, 0x9, 0x3, 0x2, 0x80, 0x3, 0x9, 0xa, 0x6e, 0x10001, 0x100, 0x80000000, 0x5380, 0x4000000, 0x2, 0xaf1, 0x6, 0x10, 0x8, 0x3, 0x770, 0x9, 0x0, 0x7c76, 0x9, 0x80], 0x2, 0x400, 0x8000}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000005500010004000000ffdbdf2507000000", @ANYRES32, @ANYRES8=0x0, @ANYRES32, @ANYBLOB="0002065e00000000000000002000ffffe000000108"], 0x38}, 0x1, 0x0, 0x0, 0x2000c800}, 0x40000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000008000000000000500000a7c000000060a010400000000000000000a0000013c000480380001800a0001006d617463680000002800028010000300709c897c82b1095a67232d630800024000000001090001006d61726b000000000900020073797a32000000000900010073797a3100000000140005800800024000000002080001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 52.628257967s ago: executing program 3 (id=1857): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=ANY=[@ANYBLOB="58010000100013070020000000000000fc020000000000000000000000000001fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141417000000000000000000000000000004d533000000e000000100000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000220000000000000000000000000000000200000000000000000000005c001400636d616328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000003509fe8fd57fd44aa5074c50bc700e530c001c00", @ANYRES32=0x0, @ANYBLOB="06"], 0x158}, 0x1, 0x0, 0x0, 0x40001}, 0x0) 52.57946142s ago: executing program 3 (id=1859): syz_clone(0x111, 0x0, 0x9, 0x0, 0x0, 0x0) r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000b"], 0x28}, 0xfc40) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@delnexthop={0x28, 0x69, 0x300, 0x70bd2c, 0x25dfdbff, {}, [{0x8}, {0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x11}, 0x4010) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x28}, 0xfc40) 52.499849773s ago: executing program 3 (id=1861): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./gadget\x00', &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000100)={'security\x00', 0x2, [{}, {}]}, 0x48) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x0) read(r1, 0x0, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000000000)=0xfffffffc, 0x4) 52.439237038s ago: executing program 3 (id=1863): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) (async) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f00000003c0)='vfat\x00', 0x40, 0x0) creat(&(0x7f0000000080)='./trace/error_log\x00', 0x118) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x2041, 0x0) syz_emit_ethernet(0x26, &(0x7f00000007c0)={@link_local, @random="f070a23f0d69", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x3, 0x32, 0x18, 0x4068, 0x0, 0xd2, 0x89, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, "8f84e8eb"}}}}, 0x0) write$sndseq(r2, &(0x7f0000000200)=[{0x6, 0x3, 0x0, 0x0, @tick, {0x4}, {}, @addr={0x5b, 0x5d}}, {0x3, 0x0, 0x0, 0x0, @time, {}, {0x5}, @quote={{0x5, 0x5}, 0x2}}, {0x0, 0x0, 0x0, 0x7, @tick=0x100, {}, {}, @connect={{0x7, 0x5f}, {0xff, 0x1}}}, {0x1, 0xfd, 0x1, 0x0, @tick=0x2, {0x4, 0x4}, {0x7, 0x5}, @quote={{0x2, 0xd8}, 0x8}}], 0x70) (async) write$sndseq(r2, &(0x7f0000000200)=[{0x6, 0x3, 0x0, 0x0, @tick, {0x4}, {}, @addr={0x5b, 0x5d}}, {0x3, 0x0, 0x0, 0x0, @time, {}, {0x5}, @quote={{0x5, 0x5}, 0x2}}, {0x0, 0x0, 0x0, 0x7, @tick=0x100, {}, {}, @connect={{0x7, 0x5f}, {0xff, 0x1}}}, {0x1, 0xfd, 0x1, 0x0, @tick=0x2, {0x4, 0x4}, {0x7, 0x5}, @quote={{0x2, 0xd8}, 0x8}}], 0x70) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000440)={0x6, 0x20000006, 0x0, 0x0, 0xd}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000440)={0x6, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c000000100003045aca666e77e4430500007000d4dc3b27b42cb2520956a63727d90d739c6370241db812580194ecfd150686d87a55677ba5c2cc43b6ab", @ANYRES32=0x0, @ANYBLOB="00000000031201001c0012800b00010062726964676500000c00028005002d0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfc}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfc}], 0x0, 0x0, 0x0}) close_range(r1, 0xffffffffffffffff, 0x400000000000000) 52.438657193s ago: executing program 3 (id=1865): r0 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) getxattr(&(0x7f0000000000)='./dev\x00', &(0x7f0000000100)=@random={'os2.', '*{:*_,$\xdc\x00'}, &(0x7f0000000240)=""/66, 0x42) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 52.337070667s ago: executing program 3 (id=1867): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1, 0x0, 0x0, 0x6000000}}], 0x1, 0x8000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r2, r2, 0x0, 0xe3aa6ea) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f0000000000)) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0x1e}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000680)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xab, @loopback, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x20000014) 37.139617904s ago: executing program 35 (id=1867): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1, 0x0, 0x0, 0x6000000}}], 0x1, 0x8000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r2, r2, 0x0, 0xe3aa6ea) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f0000000000)) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0x1e}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000680)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xab, @loopback, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x20000014) 31.877801223s ago: executing program 7 (id=2051): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001a00010000000000000000000a000000000000000000000008001f"], 0x24}, 0x1, 0x0, 0x0, 0x4048890}, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd58c, 0x80, 0x2, 0x1e2}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000980)=@IORING_OP_URING_CMD128=@generic_cmd_sqes={0x2e, 0x10, 0x0, 0x0, {0x3}, {0x1, 0x8}, 0x0, 0x3, 0x1, {0x6, 0x0, 0x1, 0xf973c9d}}) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x3e) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, 0xffffffffffffffff) 24.781715091s ago: executing program 7 (id=2051): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001a00010000000000000000000a000000000000000000000008001f"], 0x24}, 0x1, 0x0, 0x0, 0x4048890}, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd58c, 0x80, 0x2, 0x1e2}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000980)=@IORING_OP_URING_CMD128=@generic_cmd_sqes={0x2e, 0x10, 0x0, 0x0, {0x3}, {0x1, 0x8}, 0x0, 0x3, 0x1, {0x6, 0x0, 0x1, 0xf973c9d}}) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x3e) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, 0xffffffffffffffff) 18.166297682s ago: executing program 7 (id=2051): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001a00010000000000000000000a000000000000000000000008001f"], 0x24}, 0x1, 0x0, 0x0, 0x4048890}, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd58c, 0x80, 0x2, 0x1e2}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000980)=@IORING_OP_URING_CMD128=@generic_cmd_sqes={0x2e, 0x10, 0x0, 0x0, {0x3}, {0x1, 0x8}, 0x0, 0x3, 0x1, {0x6, 0x0, 0x1, 0xf973c9d}}) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x3e) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, 0xffffffffffffffff) 11.160546281s ago: executing program 7 (id=2051): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001a00010000000000000000000a000000000000000000000008001f"], 0x24}, 0x1, 0x0, 0x0, 0x4048890}, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd58c, 0x80, 0x2, 0x1e2}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000980)=@IORING_OP_URING_CMD128=@generic_cmd_sqes={0x2e, 0x10, 0x0, 0x0, {0x3}, {0x1, 0x8}, 0x0, 0x3, 0x1, {0x6, 0x0, 0x1, 0xf973c9d}}) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x3e) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, 0xffffffffffffffff) 3.412245047s ago: executing program 7 (id=2051): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001a00010000000000000000000a000000000000000000000008001f"], 0x24}, 0x1, 0x0, 0x0, 0x4048890}, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd58c, 0x80, 0x2, 0x1e2}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000980)=@IORING_OP_URING_CMD128=@generic_cmd_sqes={0x2e, 0x10, 0x0, 0x0, {0x3}, {0x1, 0x8}, 0x0, 0x3, 0x1, {0x6, 0x0, 0x1, 0xf973c9d}}) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x3e) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, 0xffffffffffffffff) 1.618775391s ago: executing program 2 (id=2518): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42082, 0x0) (async) r2 = syz_open_dev$vbi(&(0x7f0000000380), 0x2, 0x2) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f0000000000)={0xfffffffd, 0xfffffff9}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000c40)={'filter\x00', 0x104, 0x4, 0x3a0, 0x0, 0xe8, 0x1d0, 0x2b8, 0x2b8, 0x2b8, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0xfff6}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x80ca, 0x8}}}, {{@arp={@broadcast, @local, 0xff, 0xff000000, 0xa, 0x0, {@mac=@remote, {[0x0, 0xff, 0xff, 0x0, 0x0, 0xff]}}, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}, {[0xff, 0x0, 0xff, 0xff, 0x0, 0xff]}}, 0x3c, 0x0, 0x3a1, 0xc, 0x542, 0x5, 'team0\x00', 'team0\x00', {}, {0xff}, 0x0, 0x2}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f0) close(r3) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x0, 0x4, 0x2, {0xa, 0x4e21, 0x9, @local}}}, 0x3a) (async) r6 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r6, 0x89b0, &(0x7f0000000080)={'vlan1\x00', &(0x7f00000000c0)=@ethtool_channels={0x1, 0x0, 0x0, 0x4, 0x3, 0x0, 0x88, 0x2000000}}) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000480)=ANY=[@ANYRES16=r3, @ANYRES32=r3]) socket$netlink(0x10, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) (async) r9 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r9, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x2, r8, 0x1, 0x7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r10 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r10, 0x84, 0xb, &(0x7f0000000240)={0xbf, 0x99, 0x9c, 0x3, 0x0, 0x5, 0xfb, 0x5, 0xec, 0xff, 0x83, 0x84, 0x8, 0x7}, 0xe) (async) sendto$inet6(r10, &(0x7f0000000040)='T', 0x1, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r10, 0x84, 0x21, &(0x7f0000000000)=0x4, 0x4) (async) shutdown(r10, 0x1) (async) r11 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r11, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000008f"]) recvmmsg(r10, &(0x7f0000001b80)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x4, 0x0) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000440)) 1.480353808s ago: executing program 2 (id=2523): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000019c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="090b00000000000000000500000008000300", @ANYRES32=r4], 0x1c}}, 0x0) ioctl$UI_DEV_CREATE(r1, 0x5501) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) 1.381598909s ago: executing program 2 (id=2524): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cfg\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./cfg\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cfg/usb_gadget/g1\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./cfg/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="480000001000010027bd7000fbd9dfa500000000", @ANYRES32, @ANYBLOB="104e0600d5ba2259280012800900010076657468000000001800028014000100000000000206e9b43d"], 0x7c}, 0x1, 0x0, 0x0, 0x404c000}, 0x2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./ffs\x00', 0x14f) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='functionfs\x00', 0x1ff) (async) socket$inet(0x2, 0x800, 0x66) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='disable=', 0x8) (async) mount(&(0x7f0000000280)=@filename='usb0\x00', &(0x7f0000000200)='./ffs\x00', &(0x7f0000000040), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b0400000000000000000200000030000a80390001800a00010071756575650000001c0002800600034000040000060001400000000006000240000400000900010073797a300000"], 0x84}}, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="070600000000000000002d0000000c0005000201aaaaaaaaaaaa0a0001007770616e3000000008002f000500000005002e001500000005002b"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x8090) (async) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(r3, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2a972f97aea568179a5861d4ac65bbfbbe9140efa400dcfe2461bc660be957a96dd02ac8f71418fbcce4084f2fd812b24c080887bddd2ba68a69b13e28a6b0bc8d715cc9400cada46e39a41d19e23c8d61d5e6f700000000000000000000000000000000af60c1d50cbe4350342c2200a0768b649c47d7388c513c2d7204dfda33c86536b41c705b97a98aca16e2e637715c1efa9f0509d35c57ff191b2e9dd6d640132828fecdc280a4c060ea76edd9064fa30c215de8bf92456dabdc57a473fdc7489eb24a6377e899c3b1a17b353ef8ed974fdc629f818caeac9e8ef42bd0faddcce320065a4a8fcf30071d7aade1b4fd437e68e8be562b44d76de847cc5341b340245822a5ff7d15a221d4734c04131fd3de29ec4f95282574e584ddd9622547d07fea16c59dd0d8e662325fca87a8785627800b29ce24b3ff0cc5fa73d5fd292c0556f674bf7826890744b7290336a2162eac27095915", @ANYRES16=r5, @ANYBLOB="04002abd7000fddbdf25280000000a0001007770616e330000000c002d000200aaaaaaaaaaaa"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4008051) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="900000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="8b04240000000000700012800b00010067656e6576650000600002800500"], 0x90}}, 0x4048084) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./ffs/ep0\x00', 0x2, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r6, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) (async) connect$l2tp6(r6, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) (async) sendmmsg$inet6(r6, &(0x7f0000000800)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x0) (async) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="74726166646e6f3d00000fad133659833b623036990000000000", @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB=',\x00']) 1.249678162s ago: executing program 6 (id=2527): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)=0x0) ptrace$ARCH_SHSTK_STATUS(0x1e, r0, &(0x7f00000000c0), 0x5005) syz_open_pts(0xffffffffffffffff, 0x80000) (async) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000006d40)=[{{&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000140)='j', 0x1}], 0x1}}], 0x1, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000002680)={r2, 0x2}, 0x8) (async) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000080)={r2, 0x3, 0x3}, 0x8) (async) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={r2, 0x5, 0x3}, 0xc) (async) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001200010000000000010000000a0100004e234e2300000000efffffffffffffff0000000303000000000010000002000008000000", @ANYRES32=0x0, @ANYBLOB="01000000f8ffffff00000000000000000800030011000000"], 0x54}, 0x1, 0x0, 0x0, 0x640440c5}, 0x20004010) (async) ioctl$F2FS_IOC_DEFRAGMENT(r3, 0xc010f508, &(0x7f0000000000)={0x94, 0x105}) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="a36f5906c900675b03eb047bfcff"], 0xe) (async, rerun: 32) r4 = socket$inet(0x2, 0x80000, 0x5) (rerun: 32) getsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f0000000080)={@dev, @multicast2}, &(0x7f0000000200)=0xc) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) r6 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) (rerun: 64) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r6, 0xc0884123, &(0x7f0000000080)={0x2, "fe9dbfa8d6493ee02eeb4c2696f22d88cad3e670d26f4ddf3d9de4df724a1b744062b1634aafb5da15a80fc3a2b4917c868bf9a7d46a01388fcb0892251f2652"}) (async) r7 = dup(r5) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async, rerun: 64) r8 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) sendmmsg$inet(r8, &(0x7f0000002240)=[{{&(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_retopts={{0x10}}], 0x30}}], 0x1, 0x40010) (async) mkdirat(r7, &(0x7f0000000140)='./file0\x00', 0x1) 1.130915338s ago: executing program 2 (id=2529): add_key(0x0, &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) r0 = socket$netlink(0x10, 0x3, 0xf) setsockopt$sock_int(r0, 0x1, 0x2b, 0x0, 0x0) sendfile(r0, r0, &(0x7f0000000040)=0xfffffffc, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}, 0x6}, 0x1c) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002080)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x24004881}, 0xc041) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0) write(r2, &(0x7f0000000070)='syz0:127.0.0.1', 0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x1ff) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x33) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mount$afs(0x0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000c00), 0x0, 0x0) 360.959062ms ago: executing program 6 (id=2540): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x4, 0x1, 0x0, @private1, @mcast2, 0x7, 0x10, 0x5, 0xd6c6}}) sendmsg$can_bcm(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x1d, r1}, 0x10, &(0x7f00000002c0)={&(0x7f0000000240)={0x5, 0x4, 0xfffffffc, {0x77359400}, {0x77359400}, {0x1, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x2, 0x1, 0x0, 0x1}, 0x3d, 0x1, 0x0, 0x0, "a7752bc2211755163aa1d3e74922359e148471435b42249f294d3e4f2797ec434258ff7091766fd6d86f57a3da8d560f6531d1cab689d7a0f9b77f82de050c26"}}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRES64=r2], 0x7c}}, 0x4028800) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x54}, 0x20008000) 360.560835ms ago: executing program 5 (id=2541): syz_clone3(0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x15, @loopback}, 0x10) listen(r0, 0x5) r1 = getpid() getpgid(r1) r2 = fcntl$getown(r0, 0x9) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000500)=ANY=[], 0x32600) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0x3, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000000040)={r3, r0, 0xcb54}) ioprio_get$pid(0x2, r1) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)={0x8, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) r7 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r7, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10) write(r7, &(0x7f0000000400)='PASV\r\n', 0x6) accept4(r0, 0x0, 0x0, 0x0) 360.386153ms ago: executing program 5 (id=2542): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0xe23df1efaf6b6caf, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_USERDATA={0x5, 0xd, 0x1, 0x0, "df"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) syz_emit_ethernet(0x14, &(0x7f0000000280)={@local, @remote, @val={@void}, {@generic={0x88a2, 'f\n'}}}, 0x0) 310.326037ms ago: executing program 6 (id=2543): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, 0x0) sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)=' 294967 95 2\\0-0 0000 0\n', 0x18) 310.153982ms ago: executing program 5 (id=2544): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x4, 0x2}, 0x10) write$bt_hci(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e00010002"], 0x8) 236.774012ms ago: executing program 2 (id=2545): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) (async) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xc) (async) r2 = semget(0x3, 0x4, 0x69c) semop(r2, &(0x7f0000000340)=[{0x2, 0x7f, 0x1800}, {0x1, 0xbbdb, 0x1000}, {0x1, 0x5}], 0x3) (async) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff]) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) (async) ioctl$TUNSETPERSIST(r3, 0x400454c9, 0x1) (async) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYBLOB="010000000400afaf38e127176bd6cf013bddba618660632076373df6701c8ff669cf9a4ad33d3d410249599fcaddea159fb3db6f692a8549758c403eaf35821a2ac3d03766094626f2514b2b5366cfa697a76ff29e581b1743eaaf2ef1bcd02ca43e6464989022a6bc1344127c07b09f0bbab11d133e29fc5a69a56534fcd23ef598aa9316179fcbc6a095f9c96bae6b1bece57628158402a9"]) 236.567418ms ago: executing program 5 (id=2546): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r0, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000340)=""/185, 0xb9, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg(r0, &(0x7f0000000540)={0x1, {&(0x7f0000000040)=""/62, 0x3e, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000700)={0x2, 0x0, {&(0x7f00000005c0)=""/134, 0x86, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg(r0, &(0x7f0000003b80)={0x1, {&(0x7f0000000840)=""/248, 0xf8, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f00000004c0)={0x2, 0x0, {&(0x7f0000000400)=""/192, 0xffffffdc, 0x0, 0x3, 0x2}}, 0x48) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000cc0)={0x18, 0x110, 0xfa00, {0xffffffffffffffff, 0x7fffffff, 0x12, 0x0, 0x0, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e20, @loopback}}}, 0x118) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa64fe9c"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000280)=""/184, 0x2562bac182d8b35a, 0x0, 0x2, 0x3}}, 0x48) 120.785791ms ago: executing program 5 (id=2547): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x4) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7ff}, 0x1c) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r2, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000140)=ANY=[@ANYRES32=r3], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff1000/0xe000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040)="f18f9be72d32747ea3278b45fcea5116848976afd7ed47aa86226c841d50f3c5eed64edd99415c7b0965d1a571d8fbe48ba4e71b7b9e6e245b4f7ad12006f7014b348f62eb8886b9830fb0c4cd39ccb603e1b241df736104f5f4ebc784618bf39bc557e0eb1f696d83234984f0afcc60d5a0dcda8328", 0x76, r3}, 0x68) 64.149591ms ago: executing program 6 (id=2548): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) preadv(r0, &(0x7f0000002180)=[{&(0x7f0000000dc0)=""/152, 0x98}], 0x1, 0x7, 0x54042847) setns(0xc9, 0x0) r1 = socket(0x8, 0x2, 0x0) ioctl$sock_SIOCINQ(r1, 0x541b, 0x0) chdir(0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r2, 0x0, 0x0, 0x1001f0) 63.884558ms ago: executing program 5 (id=2549): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3400000018000100200000000000000002009400ff00fe09008c00000600150003000000100016800c000280080001"], 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x30, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="24000000190001000000000000c3b2000a0000000003c8000000000008000600ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r1, &(0x7f0000000040), 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40300, 0x0) ioctl$TIOCCONS(r2, 0x541d) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340000001100050026bd7000ffdbdf25070fef93", @ANYRES32=r3, @ANYBLOB="cfe819000000000014001a80100005"], 0x34}, 0x1, 0x0, 0x0, 0x2800c895}, 0x20040854) 63.194022ms ago: executing program 2 (id=2550): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x102, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) set_mempolicy(0x4005, &(0x7f0000000040)=0x13, 0x6) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) ioctl$int_in(r1, 0x5452, &(0x7f0000001840)=0x5d4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) poll(&(0x7f00000002c0)=[{r2, 0x2000}], 0x1, 0x1ff) write$FUSE_INTERRUPT(r1, &(0x7f00000000c0)={0x10}, 0x10) openat(r1, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x80800, 0x8) 260.504µs ago: executing program 6 (id=2551): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/43, 0x2b}], 0x1}, 0x1}], 0x1, 0x40000182, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r2}, 0x48) 0s ago: executing program 6 (id=2552): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f000000aa40), r1) sendmsg$IEEE802154_START_REQ(r1, &(0x7f000000ab40)={0x0, 0x0, &(0x7f000000ab00)={&(0x7f0000000680)={0x24, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x404c044}, 0x4000) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r6 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r10, 0x8933, &(0x7f0000000280)={'wg2\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newlink={0x50, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r12}, @IFLA_HSR_VERSION={0x5, 0x6, 0x10}, @IFLA_HSR_SLAVE1={0x8, 0x1, r11}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x50}}, 0x0) io_uring_enter(r6, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, r5, {0x0, 0x8}, {0xc, 0xa}, {0x1, 0x5}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x101}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) kernel console output (not intermixed with test programs): RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 167.480957][T11162] RBP: 00007f663663503b R08: ffffffffffffffff R09: 0000000000000000 [ 167.480970][T11162] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 167.480983][T11162] R13: 00007f6636826038 R14: 00007f6636825fa0 R15: 00007fff862481c8 [ 167.481010][T11162] [ 167.804647][ T5731] Bluetooth: hci3: unexpected event for opcode 0x202d [ 168.022803][T11179] 9pnet_fd: p9_fd_create_unix (11179): problem connecting socket: ./file1: -2 [ 168.023138][ T43] audit: type=1400 audit(1789986150.408:874): avc: denied { mounton } for pid=11178 comm="syz.3.1718" path="/403/file0/file0" dev="fuse" ino=68719476738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 168.202077][T11186] fuse: fd is not a fuse device [ 168.261984][ T5868] usb 8-1: new low-speed USB device number 6 using dummy_hcd [ 168.391785][ T5868] usb 8-1: device descriptor read/64, error -71 [ 168.460142][T11202] A link change request failed with some changes committed already. Interface ªªªªªª may have been left with an inconsistent configuration, please check. [ 168.631808][ T5868] usb 8-1: new low-speed USB device number 7 using dummy_hcd [ 168.728089][ T43] audit: type=1400 audit(1789986151.117:875): avc: denied { create } for pid=11206 comm="syz.6.1728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 168.763000][ T5868] usb 8-1: device descriptor read/64, error -71 [ 168.872149][ T5868] usb usb8-port1: attempt power cycle [ 168.915507][T11220] kAFS: bad VL server IP address [ 169.170661][T11246] FAULT_INJECTION: forcing a failure. [ 169.170661][T11246] name failslab, interval 1, probability 0, space 0, times 0 [ 169.170711][T11246] CPU: 0 UID: 0 PID: 11246 Comm: syz.2.1741 Tainted: G L syzkaller #0 PREEMPT(full) [ 169.170738][T11246] Tainted: [L]=SOFTLOCKUP [ 169.170744][T11246] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 169.170750][T11246] Call Trace: [ 169.170760][T11246] [ 169.170765][T11246] dump_stack_lvl+0x100/0x190 [ 169.170793][T11246] should_fail_ex.cold+0x5/0xa [ 169.170810][T11246] should_failslab+0xc2/0x120 [ 169.170828][T11246] __kmalloc_cache_noprof+0x91/0x6d0 [ 169.170844][T11246] ? get_mm_exe_file+0x8a/0x1a0 [ 169.170856][T11246] ? get_current_details+0xa0/0x670 [ 169.170875][T11246] get_current_details+0xa0/0x670 [ 169.170894][T11246] landlock_merge_ruleset+0x7ef/0xd10 [ 169.170912][T11246] __do_sys_landlock_restrict_self+0x264/0x10a0 [ 169.170928][T11246] do_syscall_64+0x123/0x790 [ 169.170947][T11246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.170959][T11246] RIP: 0033:0x7fd6dcf9e159 [ 169.170970][T11246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.170980][T11246] RSP: 002b:00007fd6ddde6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 169.170997][T11246] RAX: ffffffffffffffda RBX: 00007fd6dd225fa0 RCX: 00007fd6dcf9e159 [ 169.171004][T11246] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 169.171011][T11246] RBP: 00007fd6dd03503b R08: 0000000000000000 R09: 0000000000000000 [ 169.171018][T11246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.171025][T11246] R13: 00007fd6dd226038 R14: 00007fd6dd225fa0 R15: 00007ffe735c6248 [ 169.171039][T11246] [ 169.212120][ T5868] usb 8-1: new low-speed USB device number 8 using dummy_hcd [ 169.233472][ T5868] usb 8-1: device descriptor read/8, error -71 [ 169.472289][ T5868] usb 8-1: new low-speed USB device number 9 using dummy_hcd [ 169.486460][T11268] syz.5.1752 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 169.492660][ T5868] usb 8-1: device descriptor read/8, error -71 [ 169.584935][ T43] audit: type=1400 audit(1789986151.977:876): avc: denied { bind } for pid=11275 comm="syz.6.1756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 169.585305][ T43] audit: type=1400 audit(1789986151.977:877): avc: denied { listen } for pid=11275 comm="syz.6.1756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 169.602632][ T5868] usb usb8-port1: unable to enumerate USB device [ 169.690989][T11281] Failed to initialize the IGMP autojoin socket (err -2) [ 170.103485][ T43] audit: type=1400 audit(1789986152.487:878): avc: denied { write } for pid=11285 comm="syz.6.1760" name="functions" dev="configfs" ino=9986 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 170.103561][ T43] audit: type=1400 audit(1789986152.487:879): avc: denied { write } for pid=11285 comm="syz.6.1760" name="c.1" dev="configfs" ino=23569 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 170.103607][ T43] audit: type=1400 audit(1789986152.487:880): avc: denied { write } for pid=11285 comm="syz.6.1760" name="c.1" dev="configfs" ino=23569 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 170.201687][T11290] netlink: 'syz.2.1762': attribute type 39 has an invalid length. [ 170.254473][T11295] netlink: set zone limit has 4 unknown bytes [ 170.342825][ T6046] usb 11-1: new high-speed USB device number 12 using dummy_hcd [ 170.493750][ T6046] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 170.494915][ T6046] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.703150][ T6046] cdc_acm 11-1:1.0: ttyACM0: USB ACM device [ 170.747181][T11321] lo: entered allmulticast mode [ 170.747303][T11321] tunl0: entered allmulticast mode [ 170.747374][T11321] gre0: entered allmulticast mode [ 170.747430][T11321] gretap0: entered allmulticast mode [ 170.747489][T11321] erspan0: entered allmulticast mode [ 170.747551][T11321] ip_vti0: entered allmulticast mode [ 170.747628][T11321] ip6_vti0: entered allmulticast mode [ 170.747679][T11321] sit0: entered allmulticast mode [ 170.747730][T11321] ip6tnl0: entered allmulticast mode [ 170.747780][T11321] ip6gre0: entered allmulticast mode [ 170.747833][T11321] syz_tun: entered allmulticast mode [ 170.747898][T11321] ip6gretap0: entered allmulticast mode [ 170.747976][T11321] bridge0: entered allmulticast mode [ 170.748042][T11321] vcan0: entered allmulticast mode [ 170.748104][T11321] bond0: entered allmulticast mode [ 170.748117][T11321] bond_slave_0: entered allmulticast mode [ 170.748126][T11321] bond_slave_1: entered allmulticast mode [ 170.748197][T11321] team0: entered allmulticast mode [ 170.748205][T11321] team_slave_0: entered allmulticast mode [ 170.748213][T11321] team_slave_1: entered allmulticast mode [ 170.748284][T11321] nlmon0: entered allmulticast mode [ 170.748362][T11321] batadv0: entered allmulticast mode [ 170.748424][T11321] vxcan0: entered allmulticast mode [ 170.748483][T11321] vxcan1: entered allmulticast mode [ 170.748547][T11321] veth0: entered allmulticast mode [ 170.748624][T11321] veth1: entered allmulticast mode [ 170.748725][T11321] wg0: entered allmulticast mode [ 170.748796][T11321] wg1: entered allmulticast mode [ 170.748889][T11321] wg2: entered allmulticast mode [ 170.748962][T11321] veth0_to_bridge: entered allmulticast mode [ 170.749074][T11321] veth1_to_bridge: entered allmulticast mode [ 170.749190][T11321] veth0_to_bond: entered allmulticast mode [ 170.749343][T11321] veth1_to_bond: entered allmulticast mode [ 170.749457][T11321] veth0_to_team: entered allmulticast mode [ 170.749588][T11321] veth1_to_team: entered allmulticast mode [ 170.749720][T11321] veth0_to_batadv: entered allmulticast mode [ 170.749790][T11321] batadv_slave_0: entered allmulticast mode [ 170.749867][T11321] veth1_to_batadv: entered allmulticast mode [ 170.749947][T11321] batadv_slave_1: entered allmulticast mode [ 170.750008][T11321] xfrm0: entered allmulticast mode [ 170.750069][T11321] veth0_to_hsr: entered allmulticast mode [ 170.750142][T11321] hsr_slave_0: entered allmulticast mode [ 170.750208][T11321] veth1_to_hsr: entered allmulticast mode [ 170.750275][T11321] hsr_slave_1: entered allmulticast mode [ 170.750348][T11321] veth1_virt_wifi: entered allmulticast mode [ 170.750416][T11321] veth0_virt_wifi: entered allmulticast mode [ 170.750479][T11321] virt_wifi0: entered allmulticast mode [ 170.750539][T11321] veth1_vlan: entered allmulticast mode [ 170.750601][T11321] veth0_vlan: entered allmulticast mode [ 170.750662][T11321] ªªªªªª: entered allmulticast mode [ 170.750724][T11321] vlan1: entered allmulticast mode [ 170.750783][T11321] macvlan0: entered allmulticast mode [ 170.750854][T11321] macvlan1: entered allmulticast mode [ 170.750922][T11321] ipvlan0: entered allmulticast mode [ 170.750982][T11321] ipvlan1: entered allmulticast mode [ 170.751053][T11321] veth1_macvtap: entered allmulticast mode [ 170.751117][T11321] veth0_macvtap: entered allmulticast mode [ 170.751178][T11321] macvtap0: entered allmulticast mode [ 170.751291][T11321] geneve0: entered allmulticast mode [ 170.751356][T11321] geneve1: entered allmulticast mode [ 170.751433][T11321] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 170.751505][T11321] netdevsim netdevsim5 netdevsim1: entered allmulticast mode [ 170.751560][T11321] netdevsim netdevsim5 netdevsim2: entered allmulticast mode [ 170.751614][T11321] netdevsim netdevsim5 netdevsim3: entered allmulticast mode [ 170.751670][T11321] mac80211_hwsim hwsim14 wlan0: entered allmulticast mode [ 170.751745][T11321] mac80211_hwsim hwsim15 wlan1: entered allmulticast mode [ 170.751813][T11321] gtp0: entered allmulticast mode [ 170.751891][T11321] bridge1: entered allmulticast mode [ 170.751955][T11321] bridge2: entered allmulticast mode [ 170.752020][T11321] bond1: entered allmulticast mode [ 170.752083][T11321] vti60: entered allmulticast mode [ 170.752135][T11321] macsec1: entered allmulticast mode [ 170.752191][T11321] bridge3: entered allmulticast mode [ 170.752249][T11321] bond2: entered allmulticast mode [ 170.752301][T11321] bridge4: entered allmulticast mode [ 170.752407][T11321] geneve2: entered allmulticast mode [ 170.752473][T11321] hsr0: entered allmulticast mode [ 170.752535][T11321] gtp1: entered allmulticast mode [ 170.902399][ T6046] usb 11-1: USB disconnect, device number 12 [ 170.915308][T11331] nft_compat: unsupported protocol 6 [ 171.107544][T11339] __nla_validate_parse: 11 callbacks suppressed [ 171.107744][T11339] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1783'. [ 171.401243][ T5731] Bluetooth: hci2: unexpected event 0x04 length: 11 > 10 [ 171.483168][ T5868] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 171.608284][T11352] FAULT_INJECTION: forcing a failure. [ 171.608284][T11352] name failslab, interval 1, probability 0, space 0, times 0 [ 171.608335][T11352] CPU: 3 UID: 0 PID: 11352 Comm: syz.6.1788 Tainted: G L syzkaller #0 PREEMPT(full) [ 171.608357][T11352] Tainted: [L]=SOFTLOCKUP [ 171.608362][T11352] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 171.608368][T11352] Call Trace: [ 171.608373][T11352] [ 171.608378][T11352] dump_stack_lvl+0x100/0x190 [ 171.608406][T11352] should_fail_ex.cold+0x5/0xa [ 171.608423][T11352] should_failslab+0xc2/0x120 [ 171.608441][T11352] __kmalloc_cache_noprof+0x91/0x6d0 [ 171.608457][T11352] ? mpi_alloc+0x46/0x230 [ 171.608470][T11352] mpi_alloc+0x46/0x230 [ 171.608480][T11352] ? mpi_free+0xe6/0x150 [ 171.608490][T11352] mpi_read_raw_data+0xf5/0x430 [ 171.608507][T11352] ? rsa_free_mpi_key+0x15a/0x3a0 [ 171.608520][T11352] rsa_set_pub_key+0x116/0x270 [ 171.608532][T11352] ? __pfx_rsa_set_pub_key+0x10/0x10 [ 171.608548][T11352] ? __asan_memcpy+0x3c/0x60 [ 171.608561][T11352] rsassa_pkcs1_set_pub_key+0xce/0x1f0 [ 171.608575][T11352] public_key_verify_signature+0x4e5/0x910 [ 171.608595][T11352] ? __pfx_public_key_verify_signature+0x10/0x10 [ 171.608618][T11352] ? asymmetric_key_generate_id+0x7e/0x180 [ 171.608636][T11352] x509_check_for_self_signed+0x325/0x510 [ 171.608656][T11352] x509_cert_parse+0x60c/0x910 [ 171.608685][T11352] x509_key_preparse+0x65/0x9c0 [ 171.608726][T11352] asymmetric_key_preparse+0xce/0x1d0 [ 171.608741][T11352] ? __pfx_asymmetric_key_preparse+0x10/0x10 [ 171.608758][T11352] __key_create_or_update+0x463/0xe30 [ 171.608774][T11352] ? __pfx___key_create_or_update+0x10/0x10 [ 171.608788][T11352] ? lookup_user_key+0x3f3/0x1300 [ 171.608813][T11352] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 171.608836][T11352] key_create_or_update+0x42/0x60 [ 171.608851][T11352] __do_sys_add_key+0x2e8/0x460 [ 171.608868][T11352] ? __pfx___do_sys_add_key+0x10/0x10 [ 171.608882][T11352] ? ksys_write+0x1ac/0x250 [ 171.608898][T11352] do_syscall_64+0x123/0x790 [ 171.608918][T11352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.608929][T11352] RIP: 0033:0x7f663659e159 [ 171.608939][T11352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.608950][T11352] RSP: 002b:00007f6637509028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 171.608962][T11352] RAX: ffffffffffffffda RBX: 00007f6636825fa0 RCX: 00007f663659e159 [ 171.608971][T11352] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 171.608979][T11352] RBP: 00007f663663503b R08: ffffffffffffffff R09: 0000000000000000 [ 171.608987][T11352] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 171.608994][T11352] R13: 00007f6636826038 R14: 00007f6636825fa0 R15: 00007fff862481c8 [ 171.609010][T11352] [ 171.613871][ T5868] usb 8-1: device descriptor read/64, error -71 [ 171.752507][T11363] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1794'. [ 171.854410][ T5868] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 171.924996][T11377] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.926377][T11377] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.983583][ T5868] usb 8-1: device descriptor read/64, error -71 [ 172.050005][T11377] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.061237][T11377] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.093801][ T5868] usb usb8-port1: attempt power cycle [ 172.183551][ T5798] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.213701][ T5770] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.213769][ T5770] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.213833][ T5770] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.259442][T11391] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1804'. [ 172.289731][T11396] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 172.290719][T11396] rtrs_client L2095: : Failed to resolve address, err: -ENODEV [ 172.290820][T11396] rtrs_client L2636: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 172.341469][T11398] FAULT_INJECTION: forcing a failure. [ 172.341469][T11398] name failslab, interval 1, probability 0, space 0, times 0 [ 172.341548][T11398] CPU: 3 UID: 0 PID: 11398 Comm: syz.6.1807 Tainted: G L syzkaller #0 PREEMPT(full) [ 172.341575][T11398] Tainted: [L]=SOFTLOCKUP [ 172.341582][T11398] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 172.341596][T11398] Call Trace: [ 172.341603][T11398] [ 172.341612][T11398] dump_stack_lvl+0x100/0x190 [ 172.341645][T11398] should_fail_ex.cold+0x5/0xa [ 172.341675][T11398] should_failslab+0xc2/0x120 [ 172.341703][T11398] __kmalloc_cache_noprof+0x91/0x6d0 [ 172.341734][T11398] ? mpi_alloc+0x46/0x230 [ 172.341758][T11398] mpi_alloc+0x46/0x230 [ 172.341776][T11398] ? mpi_free+0xe6/0x150 [ 172.341799][T11398] mpi_read_raw_data+0xf5/0x430 [ 172.341827][T11398] ? rsa_free_mpi_key+0x15a/0x3a0 [ 172.341852][T11398] rsa_set_pub_key+0x116/0x270 [ 172.341875][T11398] ? __pfx_rsa_set_pub_key+0x10/0x10 [ 172.341909][T11398] ? __asan_memcpy+0x3c/0x60 [ 172.341932][T11398] rsassa_pkcs1_set_pub_key+0xce/0x1f0 [ 172.341958][T11398] public_key_verify_signature+0x4e5/0x910 [ 172.341991][T11398] ? __pfx_public_key_verify_signature+0x10/0x10 [ 172.342034][T11398] ? asymmetric_key_generate_id+0x7e/0x180 [ 172.342066][T11398] x509_check_for_self_signed+0x325/0x510 [ 172.342101][T11398] x509_cert_parse+0x60c/0x910 [ 172.342134][T11398] x509_key_preparse+0x65/0x9c0 [ 172.342169][T11398] asymmetric_key_preparse+0xce/0x1d0 [ 172.342196][T11398] ? __pfx_asymmetric_key_preparse+0x10/0x10 [ 172.342223][T11398] __key_create_or_update+0x463/0xe30 [ 172.342252][T11398] ? __pfx___key_create_or_update+0x10/0x10 [ 172.342276][T11398] ? lookup_user_key+0x3f3/0x1300 [ 172.342319][T11398] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 172.342365][T11398] key_create_or_update+0x42/0x60 [ 172.342393][T11398] __do_sys_add_key+0x2e8/0x460 [ 172.342424][T11398] ? __pfx___do_sys_add_key+0x10/0x10 [ 172.342462][T11398] do_syscall_64+0x123/0x790 [ 172.342492][T11398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.342514][T11398] RIP: 0033:0x7f663659e159 [ 172.342531][T11398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.342552][T11398] RSP: 002b:00007f6637509028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 172.342573][T11398] RAX: ffffffffffffffda RBX: 00007f6636825fa0 RCX: 00007f663659e159 [ 172.342602][T11398] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 172.342617][T11398] RBP: 00007f663663503b R08: ffffffffffffffff R09: 0000000000000000 [ 172.342631][T11398] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 172.342644][T11398] R13: 00007f6636826038 R14: 00007f6636825fa0 R15: 00007fff862481c8 [ 172.342675][T11398] [ 172.363819][ T5731] Bluetooth: hci2: command 0x0c1a tx timeout [ 172.416556][T11407] tipc: Enabling of bearer rejected, already enabled [ 172.453796][ T5868] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 172.468278][ T5868] usb 8-1: device descriptor read/8, error -71 [ 172.703945][ T5868] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 172.736428][ T5868] usb 8-1: device descriptor read/8, error -71 [ 172.854270][ T5868] usb usb8-port1: unable to enumerate USB device [ 173.007585][T11418] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1815'. [ 173.325631][T11431] FAULT_INJECTION: forcing a failure. [ 173.325631][T11431] name failslab, interval 1, probability 0, space 0, times 0 [ 173.325705][T11431] CPU: 0 UID: 0 PID: 11431 Comm: syz.6.1822 Tainted: G L syzkaller #0 PREEMPT(full) [ 173.325733][T11431] Tainted: [L]=SOFTLOCKUP [ 173.325739][T11431] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 173.325746][T11431] Call Trace: [ 173.325751][T11431] [ 173.325756][T11431] dump_stack_lvl+0x100/0x190 [ 173.325785][T11431] should_fail_ex.cold+0x5/0xa [ 173.325802][T11431] should_failslab+0xc2/0x120 [ 173.325822][T11431] __kmalloc_cache_noprof+0x91/0x6d0 [ 173.325840][T11431] ? mpi_alloc+0x46/0x230 [ 173.325854][T11431] mpi_alloc+0x46/0x230 [ 173.325864][T11431] ? mpi_free+0xe6/0x150 [ 173.325875][T11431] mpi_read_raw_data+0xf5/0x430 [ 173.325892][T11431] ? rsa_free_mpi_key+0x15a/0x3a0 [ 173.325904][T11431] rsa_set_pub_key+0x116/0x270 [ 173.325915][T11431] ? __pfx_rsa_set_pub_key+0x10/0x10 [ 173.325932][T11431] ? __asan_memcpy+0x3c/0x60 [ 173.325945][T11431] rsassa_pkcs1_set_pub_key+0xce/0x1f0 [ 173.325960][T11431] public_key_verify_signature+0x4e5/0x910 [ 173.325992][T11431] ? __pfx_public_key_verify_signature+0x10/0x10 [ 173.326017][T11431] ? asymmetric_key_generate_id+0x7e/0x180 [ 173.326035][T11431] x509_check_for_self_signed+0x325/0x510 [ 173.326054][T11431] x509_cert_parse+0x60c/0x910 [ 173.326072][T11431] x509_key_preparse+0x65/0x9c0 [ 173.326091][T11431] asymmetric_key_preparse+0xce/0x1d0 [ 173.326105][T11431] ? __pfx_asymmetric_key_preparse+0x10/0x10 [ 173.326120][T11431] __key_create_or_update+0x463/0xe30 [ 173.326136][T11431] ? __pfx___key_create_or_update+0x10/0x10 [ 173.326150][T11431] ? lookup_user_key+0x3f3/0x1300 [ 173.326173][T11431] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 173.326193][T11431] key_create_or_update+0x42/0x60 [ 173.326207][T11431] __do_sys_add_key+0x2e8/0x460 [ 173.326222][T11431] ? __pfx___do_sys_add_key+0x10/0x10 [ 173.326242][T11431] do_syscall_64+0x123/0x790 [ 173.326261][T11431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.326273][T11431] RIP: 0033:0x7f663659e159 [ 173.326283][T11431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.326294][T11431] RSP: 002b:00007f6637509028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 173.326305][T11431] RAX: ffffffffffffffda RBX: 00007f6636825fa0 RCX: 00007f663659e159 [ 173.326313][T11431] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 173.326325][T11431] RBP: 00007f663663503b R08: ffffffffffffffff R09: 0000000000000000 [ 173.326332][T11431] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 173.326338][T11431] R13: 00007f6636826038 R14: 00007f6636825fa0 R15: 00007fff862481c8 [ 173.326353][T11431] [ 173.359100][T11435] netlink: 'syz.6.1823': attribute type 10 has an invalid length. [ 173.362282][T11435] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 173.434316][ T5871] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 173.501382][ T43] kauditd_printk_skb: 1 callbacks suppressed [ 173.501462][ T43] audit: type=1326 audit(1789986155.885:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11436 comm="syz.6.1824" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f663659e159 code=0x7fc00000 [ 173.501972][ T43] audit: type=1326 audit(1789986155.885:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11436 comm="syz.6.1824" exe="/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f663659e159 code=0x7fc00000 [ 173.564515][ T5871] usb 7-1: device descriptor read/64, error -71 [ 173.796940][T11457] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1828'. [ 173.824584][ T5871] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 173.976240][ T5871] usb 7-1: device descriptor read/64, error -71 [ 174.013835][T11472] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1834'. [ 174.094730][ T5871] usb usb7-port1: attempt power cycle [ 174.122549][ T43] audit: type=1400 audit(2000000000.369:884): avc: denied { getopt } for pid=11477 comm="syz.5.1837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 174.161499][T11480] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1838'. [ 174.196805][T11484] __vm_enough_memory: pid: 11484, comm: syz.5.1840, bytes: 4278190080 not enough memory for the allocation [ 174.202008][T11484] __vm_enough_memory: pid: 11484, comm: syz.5.1840, bytes: 4278190080 not enough memory for the allocation [ 174.229931][ T43] audit: type=1326 audit(2000000000.479:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11436 comm="syz.6.1824" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f663659e159 code=0x7fc00000 [ 174.259227][ T43] audit: type=1400 audit(2000000000.509:886): avc: denied { mount } for pid=11492 comm="syz.6.1842" name="/" dev="pstore" ino=1420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 174.268607][T11493] input: syz0 as /devices/virtual/input/input20 [ 174.445445][ T5731] Bluetooth: hci2: command 0x0c1a tx timeout [ 174.446363][ T5871] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 174.468213][ T43] audit: type=1400 audit(2000000000.719:887): avc: denied { mount } for pid=11514 comm="syz.3.1850" name="/" dev="configfs" ino=1062 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 174.471767][ T43] audit: type=1400 audit(2000000000.719:888): avc: denied { write } for pid=11514 comm="syz.3.1850" name="c.1" dev="configfs" ino=23569 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 174.471849][ T43] audit: type=1400 audit(2000000000.719:889): avc: denied { write } for pid=11514 comm="syz.3.1850" name="c.1" dev="configfs" ino=23569 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 174.474876][ T5871] usb 7-1: device descriptor read/8, error -71 [ 174.542714][T11516] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 174.542783][T11516] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk [ 174.677504][T11516] configfs-gadget.g1 gadget.0: HOST MAC e6:7a:3d:85:cf:7c [ 174.677584][T11516] configfs-gadget.g1 gadget.0: MAC 92:96:e4:c8:65:e1 [ 174.719951][ T43] audit: type=1400 audit(2000000000.969:890): avc: denied { unmount } for pid=5730 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 174.725866][ T5871] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 174.745085][ T5871] usb 7-1: device descriptor read/8, error -71 [ 174.752958][ T43] audit: type=1400 audit(2000000000.999:891): avc: denied { write } for pid=11531 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 174.855051][ T5871] usb usb7-port1: unable to enumerate USB device [ 174.914334][ T5829] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 174.933632][T11558] binder: BINDER_SET_CONTEXT_MGR already set [ 174.933678][T11558] binder: 11557:11558 ioctl 4018620d 200000000100 returned -16 [ 174.935496][T11558] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1863'. [ 174.990738][T11567] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 175.072369][ T5829] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.03 [ 175.073949][ T5829] usb 5-1: Dual-Role OTG device on HNP port [ 175.074192][ T5829] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.074204][ T5829] usb 5-1: SerialNumber: 123456 [ 175.091129][ T5829] gspca_main: spca501-2.14.0 probing 0000:0000 [ 175.095148][ T5829] gspca_spca501: reg write: error -32 [ 175.095189][ T5829] spca501 5-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 175.095237][ T5829] spca501 5-1:1.0: probe with driver spca501 failed with error -22 [ 175.106528][ T5829] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 175.192122][ T5829] cdc_ncm 5-1:1.4: MAC-Address: e6:7a:3d:85:cf:7c [ 175.241776][ T5829] cdc_ncm 5-1:1.4 usb1: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), e6:7a:3d:85:cf:7c [ 175.310744][T11576] fuse: fd is not a fuse device [ 175.314978][T11576] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2570 sclass=netlink_route_socket pid=11576 comm=syz.5.1871 [ 175.358928][T11579] netlink: 112 bytes leftover after parsing attributes in process `syz.5.1872'. [ 175.828462][ T5731] Bluetooth: hci4: Malformed Event: 0x13 [ 175.829690][T11612] netlink: 'syz.6.1882': attribute type 3 has an invalid length. [ 175.829707][T11612] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1882'. [ 175.849448][T11612] sg_write: data in/out 238747628/14 bytes for SCSI command 0x8-- guessing data in; [ 175.849448][T11612] program syz.6.1882 not setting count and/or reply_len properly [ 175.924949][T11620] netlink: 'syz.6.1886': attribute type 1 has an invalid length. [ 175.937658][T11620] 8021q: adding VLAN 0 to HW filter on device bond1 [ 175.942556][T11620] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 175.946758][T11620] bond1: entered promiscuous mode [ 175.946802][T11620] bond1: entered allmulticast mode [ 175.958130][T11620] macvlan0: entered promiscuous mode [ 175.958167][T11620] macvlan0: entered allmulticast mode [ 175.966740][T11620] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 176.253445][T11634] FAULT_INJECTION: forcing a failure. [ 176.253445][T11634] name failslab, interval 1, probability 0, space 0, times 0 [ 176.253516][T11634] CPU: 0 UID: 0 PID: 11634 Comm: syz.2.1891 Tainted: G L syzkaller #0 PREEMPT(full) [ 176.253543][T11634] Tainted: [L]=SOFTLOCKUP [ 176.253549][T11634] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 176.253557][T11634] Call Trace: [ 176.253561][T11634] [ 176.253567][T11634] dump_stack_lvl+0x100/0x190 [ 176.253596][T11634] should_fail_ex.cold+0x5/0xa [ 176.253613][T11634] should_failslab+0xc2/0x120 [ 176.253632][T11634] __kmalloc_cache_noprof+0x91/0x6d0 [ 176.253649][T11634] ? mpi_alloc+0x46/0x230 [ 176.253663][T11634] mpi_alloc+0x46/0x230 [ 176.253673][T11634] ? mpi_free+0xe6/0x150 [ 176.253683][T11634] mpi_read_raw_data+0xf5/0x430 [ 176.253699][T11634] ? rsa_free_mpi_key+0x15a/0x3a0 [ 176.253712][T11634] rsa_set_pub_key+0x116/0x270 [ 176.253724][T11634] ? __pfx_rsa_set_pub_key+0x10/0x10 [ 176.253740][T11634] ? __asan_memcpy+0x3c/0x60 [ 176.253753][T11634] rsassa_pkcs1_set_pub_key+0xce/0x1f0 [ 176.253769][T11634] public_key_verify_signature+0x4e5/0x910 [ 176.253788][T11634] ? __pfx_public_key_verify_signature+0x10/0x10 [ 176.253818][T11634] ? asymmetric_key_generate_id+0x7e/0x180 [ 176.253837][T11634] x509_check_for_self_signed+0x325/0x510 [ 176.253858][T11634] x509_cert_parse+0x60c/0x910 [ 176.253877][T11634] x509_key_preparse+0x65/0x9c0 [ 176.253898][T11634] asymmetric_key_preparse+0xce/0x1d0 [ 176.253912][T11634] ? __pfx_asymmetric_key_preparse+0x10/0x10 [ 176.253928][T11634] __key_create_or_update+0x463/0xe30 [ 176.253944][T11634] ? __pfx___key_create_or_update+0x10/0x10 [ 176.253959][T11634] ? lookup_user_key+0x3f3/0x1300 [ 176.253984][T11634] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 176.254005][T11634] key_create_or_update+0x42/0x60 [ 176.254018][T11634] __do_sys_add_key+0x2e8/0x460 [ 176.254034][T11634] ? __pfx___do_sys_add_key+0x10/0x10 [ 176.254054][T11634] do_syscall_64+0x123/0x790 [ 176.254073][T11634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.254084][T11634] RIP: 0033:0x7fd6dcf9e159 [ 176.254094][T11634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.254106][T11634] RSP: 002b:00007fd6ddde6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 176.254118][T11634] RAX: ffffffffffffffda RBX: 00007fd6dd225fa0 RCX: 00007fd6dcf9e159 [ 176.254126][T11634] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 176.254134][T11634] RBP: 00007fd6dd03503b R08: ffffffffffffffff R09: 0000000000000000 [ 176.254142][T11634] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 176.254148][T11634] R13: 00007fd6dd226038 R14: 00007fd6dd225fa0 R15: 00007ffe735c6248 [ 176.254163][T11634] [ 176.352716][T11650] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1896'. [ 176.352777][T11650] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1896'. [ 176.352831][T11650] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1896'. [ 176.576966][T11667] FAULT_INJECTION: forcing a failure. [ 176.576966][T11667] name failslab, interval 1, probability 0, space 0, times 0 [ 176.577034][T11667] CPU: 3 UID: 0 PID: 11667 Comm: syz.6.1902 Tainted: G L syzkaller #0 PREEMPT(full) [ 176.577061][T11667] Tainted: [L]=SOFTLOCKUP [ 176.577067][T11667] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 176.577074][T11667] Call Trace: [ 176.577079][T11667] [ 176.577084][T11667] dump_stack_lvl+0x100/0x190 [ 176.577103][T11667] should_fail_ex.cold+0x5/0xa [ 176.577121][T11667] should_failslab+0xc2/0x120 [ 176.577135][T11667] __kmalloc_cache_noprof+0x91/0x6d0 [ 176.577154][T11667] ? mpi_alloc+0x46/0x230 [ 176.577167][T11667] mpi_alloc+0x46/0x230 [ 176.577176][T11667] ? mpi_free+0xe6/0x150 [ 176.577186][T11667] mpi_read_raw_data+0xf5/0x430 [ 176.577201][T11667] ? rsa_free_mpi_key+0x15a/0x3a0 [ 176.577214][T11667] rsa_set_pub_key+0x116/0x270 [ 176.577225][T11667] ? __pfx_rsa_set_pub_key+0x10/0x10 [ 176.577242][T11667] ? __asan_memcpy+0x3c/0x60 [ 176.577254][T11667] rsassa_pkcs1_set_pub_key+0xce/0x1f0 [ 176.577270][T11667] public_key_verify_signature+0x4e5/0x910 [ 176.577292][T11667] ? __pfx_public_key_verify_signature+0x10/0x10 [ 176.577315][T11667] ? asymmetric_key_generate_id+0x7e/0x180 [ 176.577333][T11667] x509_check_for_self_signed+0x325/0x510 [ 176.577352][T11667] x509_cert_parse+0x60c/0x910 [ 176.577369][T11667] x509_key_preparse+0x65/0x9c0 [ 176.577389][T11667] asymmetric_key_preparse+0xce/0x1d0 [ 176.577403][T11667] ? __pfx_asymmetric_key_preparse+0x10/0x10 [ 176.577418][T11667] __key_create_or_update+0x463/0xe30 [ 176.577432][T11667] ? __pfx___key_create_or_update+0x10/0x10 [ 176.577446][T11667] ? lookup_user_key+0x3f3/0x1300 [ 176.577469][T11667] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 176.577490][T11667] key_create_or_update+0x42/0x60 [ 176.577504][T11667] __do_sys_add_key+0x2e8/0x460 [ 176.577520][T11667] ? __pfx___do_sys_add_key+0x10/0x10 [ 176.577533][T11667] ? ksys_write+0x1ac/0x250 [ 176.577549][T11667] do_syscall_64+0x123/0x790 [ 176.577565][T11667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.577577][T11667] RIP: 0033:0x7f663659e159 [ 176.577587][T11667] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.577597][T11667] RSP: 002b:00007f6637509028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 176.577610][T11667] RAX: ffffffffffffffda RBX: 00007f6636825fa0 RCX: 00007f663659e159 [ 176.577618][T11667] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 176.577626][T11667] RBP: 00007f663663503b R08: ffffffffffffffff R09: 0000000000000000 [ 176.577633][T11667] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 176.577639][T11667] R13: 00007f6636826038 R14: 00007f6636825fa0 R15: 00007fff862481c8 [ 176.577654][T11667] [ 176.704798][ T5871] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 176.854657][ T5871] usb 7-1: Using ep0 maxpacket: 32 [ 176.855291][ T5871] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 176.856440][ T5871] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 176.858734][ T5871] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 176.858755][ T5871] usb 7-1: Product: syz [ 176.858770][ T5871] usb 7-1: Manufacturer: syz [ 176.858783][ T5871] usb 7-1: SerialNumber: syz [ 176.863593][ T5871] usb 7-1: config 0 descriptor?? [ 176.866841][T11658] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 176.965196][T11680] IPv6: NLM_F_CREATE should be specified when creating new route [ 177.971861][T11708] FAULT_INJECTION: forcing a failure. [ 177.971861][T11708] name failslab, interval 1, probability 0, space 0, times 0 [ 177.971950][T11708] CPU: 3 UID: 0 PID: 11708 Comm: syz.6.1922 Tainted: G L syzkaller #0 PREEMPT(full) [ 177.971987][T11708] Tainted: [L]=SOFTLOCKUP [ 177.971995][T11708] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 177.972005][T11708] Call Trace: [ 177.972012][T11708] [ 177.972019][T11708] dump_stack_lvl+0x100/0x190 [ 177.972063][T11708] should_fail_ex.cold+0x5/0xa [ 177.972089][T11708] should_failslab+0xc2/0x120 [ 177.972111][T11708] __kmalloc_cache_noprof+0x91/0x6d0 [ 177.972136][T11708] ? mpi_alloc+0x46/0x230 [ 177.972184][T11708] mpi_alloc+0x46/0x230 [ 177.972200][T11708] ? mpi_free+0xe6/0x150 [ 177.972216][T11708] mpi_read_raw_data+0xf5/0x430 [ 177.972240][T11708] ? rsa_free_mpi_key+0x15a/0x3a0 [ 177.972266][T11708] rsa_set_pub_key+0x116/0x270 [ 177.972285][T11708] ? __pfx_rsa_set_pub_key+0x10/0x10 [ 177.972311][T11708] ? __asan_memcpy+0x3c/0x60 [ 177.972331][T11708] rsassa_pkcs1_set_pub_key+0xce/0x1f0 [ 177.972354][T11708] public_key_verify_signature+0x4e5/0x910 [ 177.972382][T11708] ? __pfx_public_key_verify_signature+0x10/0x10 [ 177.972417][T11708] ? asymmetric_key_generate_id+0x7e/0x180 [ 177.972444][T11708] x509_check_for_self_signed+0x325/0x510 [ 177.972473][T11708] x509_cert_parse+0x60c/0x910 [ 177.972500][T11708] x509_key_preparse+0x65/0x9c0 [ 177.972529][T11708] asymmetric_key_preparse+0xce/0x1d0 [ 177.972550][T11708] ? __pfx_asymmetric_key_preparse+0x10/0x10 [ 177.972572][T11708] __key_create_or_update+0x463/0xe30 [ 177.972595][T11708] ? __pfx___key_create_or_update+0x10/0x10 [ 177.972616][T11708] ? lookup_user_key+0x3f3/0x1300 [ 177.972652][T11708] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 177.972708][T11708] key_create_or_update+0x42/0x60 [ 177.972731][T11708] __do_sys_add_key+0x2e8/0x460 [ 177.972755][T11708] ? __pfx___do_sys_add_key+0x10/0x10 [ 177.972775][T11708] ? ksys_write+0x1ac/0x250 [ 177.972801][T11708] do_syscall_64+0x123/0x790 [ 177.972826][T11708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.972843][T11708] RIP: 0033:0x7f663659e159 [ 177.972858][T11708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.972874][T11708] RSP: 002b:00007f6637509028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 177.972893][T11708] RAX: ffffffffffffffda RBX: 00007f6636825fa0 RCX: 00007f663659e159 [ 177.972905][T11708] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 177.972917][T11708] RBP: 00007f663663503b R08: ffffffffffffffff R09: 0000000000000000 [ 177.972928][T11708] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 177.972938][T11708] R13: 00007f6636826038 R14: 00007f6636825fa0 R15: 00007fff862481c8 [ 177.972962][T11708] [ 178.368684][T11711] FAULT_INJECTION: forcing a failure. [ 178.368684][T11711] name failslab, interval 1, probability 0, space 0, times 0 [ 178.372775][T11711] CPU: 2 UID: 0 PID: 11711 Comm: syz.6.1924 Tainted: G L syzkaller #0 PREEMPT(full) [ 178.372805][T11711] Tainted: [L]=SOFTLOCKUP [ 178.372811][T11711] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 178.372819][T11711] Call Trace: [ 178.372824][T11711] [ 178.372829][T11711] dump_stack_lvl+0x100/0x190 [ 178.372849][T11711] should_fail_ex.cold+0x5/0xa [ 178.372867][T11711] should_failslab+0xc2/0x120 [ 178.372896][T11711] __kmalloc_noprof+0xfc/0x840 [ 178.372908][T11711] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 178.372924][T11711] ? mpi_alloc_limb_space+0x31/0x60 [ 178.372939][T11711] mpi_alloc_limb_space+0x31/0x60 [ 178.372950][T11711] mpi_alloc+0x199/0x230 [ 178.372962][T11711] ? mpi_free+0xe6/0x150 [ 178.372976][T11711] mpi_read_raw_data+0xf5/0x430 [ 178.372999][T11711] ? rsa_free_mpi_key+0x15a/0x3a0 [ 178.373018][T11711] rsa_set_pub_key+0x116/0x270 [ 178.373040][T11711] ? __pfx_rsa_set_pub_key+0x10/0x10 [ 178.373065][T11711] ? __asan_memcpy+0x3c/0x60 [ 178.373078][T11711] rsassa_pkcs1_set_pub_key+0xce/0x1f0 [ 178.373093][T11711] public_key_verify_signature+0x4e5/0x910 [ 178.373112][T11711] ? __pfx_public_key_verify_signature+0x10/0x10 [ 178.373135][T11711] ? asymmetric_key_generate_id+0x7e/0x180 [ 178.373153][T11711] x509_check_for_self_signed+0x325/0x510 [ 178.373172][T11711] x509_cert_parse+0x60c/0x910 [ 178.373190][T11711] x509_key_preparse+0x65/0x9c0 [ 178.373209][T11711] asymmetric_key_preparse+0xce/0x1d0 [ 178.373223][T11711] ? __pfx_asymmetric_key_preparse+0x10/0x10 [ 178.373238][T11711] __key_create_or_update+0x463/0xe30 [ 178.373254][T11711] ? __pfx___key_create_or_update+0x10/0x10 [ 178.373272][T11711] ? lookup_user_key+0x3f3/0x1300 [ 178.373297][T11711] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 178.373318][T11711] key_create_or_update+0x42/0x60 [ 178.373333][T11711] __do_sys_add_key+0x2e8/0x460 [ 178.373350][T11711] ? __pfx___do_sys_add_key+0x10/0x10 [ 178.373371][T11711] do_syscall_64+0x123/0x790 [ 178.373388][T11711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.373401][T11711] RIP: 0033:0x7f663659e159 [ 178.373411][T11711] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.373423][T11711] RSP: 002b:00007f6637509028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 178.373436][T11711] RAX: ffffffffffffffda RBX: 00007f6636825fa0 RCX: 00007f663659e159 [ 178.373443][T11711] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 178.373450][T11711] RBP: 00007f663663503b R08: ffffffffffffffff R09: 0000000000000000 [ 178.373457][T11711] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 178.373463][T11711] R13: 00007f6636826038 R14: 00007f6636825fa0 R15: 00007fff862481c8 [ 178.373479][T11711] [ 178.975879][T11740] overlayfs: failed to clone upperpath [ 179.460398][ T5871] usb 7-1: USB disconnect, device number 41 [ 179.532479][T11744] tipc: Started in network mode [ 179.532526][T11744] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 179.532591][T11744] tipc: Enabled bearer , priority 0 [ 179.604214][T11750] netlink: 172 bytes leftover after parsing attributes in process `syz.5.1931'. [ 179.633617][T11749] syzkaller0: entered promiscuous mode [ 179.636207][T11749] syzkaller0: entered allmulticast mode [ 180.013067][T11761] FAULT_INJECTION: forcing a failure. [ 180.013067][T11761] name failslab, interval 1, probability 0, space 0, times 0 [ 180.014439][T11761] CPU: 0 UID: 0 PID: 11761 Comm: syz.6.1935 Tainted: G L syzkaller #0 PREEMPT(full) [ 180.014458][T11761] Tainted: [L]=SOFTLOCKUP [ 180.014462][T11761] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 180.014470][T11761] Call Trace: [ 180.014475][T11761] [ 180.014480][T11761] dump_stack_lvl+0x100/0x190 [ 180.014500][T11761] should_fail_ex.cold+0x5/0xa [ 180.014518][T11761] should_failslab+0xc2/0x120 [ 180.014548][T11761] __kmalloc_cache_noprof+0x91/0x6d0 [ 180.014566][T11761] ? mpi_alloc+0x46/0x230 [ 180.014579][T11761] mpi_alloc+0x46/0x230 [ 180.014589][T11761] ? mpi_free+0xe6/0x150 [ 180.014600][T11761] mpi_read_raw_data+0xf5/0x430 [ 180.014617][T11761] ? rsa_free_mpi_key+0x15a/0x3a0 [ 180.014630][T11761] rsa_set_pub_key+0x116/0x270 [ 180.014641][T11761] ? __pfx_rsa_set_pub_key+0x10/0x10 [ 180.014657][T11761] ? __asan_memcpy+0x3c/0x60 [ 180.014670][T11761] rsassa_pkcs1_set_pub_key+0xce/0x1f0 [ 180.014685][T11761] public_key_verify_signature+0x4e5/0x910 [ 180.014706][T11761] ? __pfx_public_key_verify_signature+0x10/0x10 [ 180.014730][T11761] ? asymmetric_key_generate_id+0x7e/0x180 [ 180.014748][T11761] x509_check_for_self_signed+0x325/0x510 [ 180.014767][T11761] x509_cert_parse+0x60c/0x910 [ 180.014785][T11761] x509_key_preparse+0x65/0x9c0 [ 180.014804][T11761] asymmetric_key_preparse+0xce/0x1d0 [ 180.014818][T11761] ? __pfx_asymmetric_key_preparse+0x10/0x10 [ 180.014833][T11761] __key_create_or_update+0x463/0xe30 [ 180.014848][T11761] ? __pfx___key_create_or_update+0x10/0x10 [ 180.014861][T11761] ? lookup_user_key+0x3f3/0x1300 [ 180.014884][T11761] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 180.014906][T11761] key_create_or_update+0x42/0x60 [ 180.014919][T11761] __do_sys_add_key+0x2e8/0x460 [ 180.014935][T11761] ? __pfx___do_sys_add_key+0x10/0x10 [ 180.014955][T11761] do_syscall_64+0x123/0x790 [ 180.014971][T11761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.014982][T11761] RIP: 0033:0x7f663659e159 [ 180.014992][T11761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.015003][T11761] RSP: 002b:00007f6637509028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 180.015016][T11761] RAX: ffffffffffffffda RBX: 00007f6636825fa0 RCX: 00007f663659e159 [ 180.015024][T11761] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 180.015032][T11761] RBP: 00007f663663503b R08: ffffffffffffffff R09: 0000000000000000 [ 180.015039][T11761] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 180.015047][T11761] R13: 00007f6636826038 R14: 00007f6636825fa0 R15: 00007fff862481c8 [ 180.015062][T11761] [ 180.137384][T11765] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1937'. [ 181.237866][ T5871] tipc: Node number set to 43690 [ 181.244430][ T43] kauditd_printk_skb: 8 callbacks suppressed [ 181.244484][ T43] audit: type=1400 audit(2000000007.490:900): avc: denied { execute } for pid=11776 comm="syz.6.1942" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 181.458966][T11789] netlink: 'syz.6.1952': attribute type 12 has an invalid length. [ 181.459038][T11789] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1952'. [ 181.507617][T11794] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1947'. [ 181.513144][T11796] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1948'. [ 181.514027][T11796] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=11796 comm=syz.6.1948 [ 181.573091][T11805] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1953'. [ 181.926050][ T5829] usb 11-1: new high-speed USB device number 13 using dummy_hcd [ 182.084827][ T5829] usb 11-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 182.087375][ T5829] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 182.087390][ T5829] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 0 [ 182.087409][ T5829] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.095673][ T5829] usb 11-1: USB2VGA dongle found at address 13 [ 182.102718][ T5829] usb 11-1: Allocated 8 output buffers [ 182.294699][T11817] Illegal XDP return value 4294967294 on prog (id 265) dev N/A, expect packet loss! [ 182.639834][ T43] audit: type=1326 audit(2000000008.890:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11833 comm="syz.5.1965" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2246f9e159 code=0x0 [ 182.901059][T11846] Failed to initialize the IGMP autojoin socket (err -2) [ 183.683788][T11880] kAFS: bad VL server IP address [ 183.697359][T11882] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1982'. [ 183.701096][ T43] audit: type=1326 audit(2000000009.950:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11881 comm="syz.5.1982" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2246f9e159 code=0x0 [ 183.732014][T11885] vivid-000: disconnect [ 183.816717][ T3373] vivid-000: reconnect [ 184.133817][T11900] tmpfs: Unknown parameter 'dont_measure' [ 184.133817][ T43] audit: type=1400 audit(2000000010.380:903): avc: denied { mounton } for pid=11899 comm="syz.2.1988" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 184.254567][T11908] Failed to initialize the IGMP autojoin socket (err -2) [ 184.416946][ T43] audit: type=1400 audit(2000000010.670:904): avc: denied { setopt } for pid=11907 comm="syz.2.1992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 184.619698][ T43] audit: type=1326 audit(2000000010.870:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11887 comm="syz.6.1985" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f663659e159 code=0x7fc00000 [ 184.619795][ T43] audit: type=1326 audit(2000000010.870:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11887 comm="syz.6.1985" exe="/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f663659e159 code=0x7fc00000 [ 184.619828][ T43] audit: type=1326 audit(2000000010.870:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11887 comm="syz.6.1985" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f663659e159 code=0x7fc00000 [ 184.619932][ T43] audit: type=1326 audit(2000000010.870:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11887 comm="syz.6.1985" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f663659e159 code=0x7fc00000 [ 184.620054][ T43] audit: type=1326 audit(2000000010.870:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11887 comm="syz.6.1985" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f663659e159 code=0x7fc00000 [ 184.863706][T11923] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=8208 sclass=netlink_xfrm_socket pid=11923 comm=syz.6.1998 [ 185.126109][T11932] comedi comedi0: board detection failed [ 185.199131][T11939] FAULT_INJECTION: forcing a failure. [ 185.199131][T11939] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 185.199179][T11939] CPU: 3 UID: 0 PID: 11939 Comm: syz.6.2006 Tainted: G L syzkaller #0 PREEMPT(full) [ 185.199206][T11939] Tainted: [L]=SOFTLOCKUP [ 185.199212][T11939] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 185.199224][T11939] Call Trace: [ 185.199228][T11939] [ 185.199233][T11939] dump_stack_lvl+0x100/0x190 [ 185.199263][T11939] should_fail_ex.cold+0x5/0xa [ 185.199280][T11939] strncpy_from_user+0x3b/0x2d0 [ 185.199298][T11939] __do_sys_add_key+0xd4/0x460 [ 185.199315][T11939] ? __pfx___do_sys_add_key+0x10/0x10 [ 185.199335][T11939] do_syscall_64+0x123/0x790 [ 185.199354][T11939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.199366][T11939] RIP: 0033:0x7f663659e159 [ 185.199375][T11939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.199386][T11939] RSP: 002b:00007f6637509028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 185.199398][T11939] RAX: ffffffffffffffda RBX: 00007f6636825fa0 RCX: 00007f663659e159 [ 185.199405][T11939] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 185.199412][T11939] RBP: 00007f663663503b R08: ffffffffffffffff R09: 0000000000000000 [ 185.199419][T11939] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 185.199427][T11939] R13: 00007f6636826038 R14: 00007f6636825fa0 R15: 00007fff862481c8 [ 185.199443][T11939] [ 185.297036][T11946] netlink: 192 bytes leftover after parsing attributes in process `syz.6.2009'. [ 185.372736][T11953] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2012'. [ 185.403017][T11948] syzkaller0: entered promiscuous mode [ 185.403088][T11948] syzkaller0: entered allmulticast mode [ 185.407976][T11948] TC_ACT_REPEAT abuse ? [ 185.486957][T11956] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2013'. [ 187.044457][T11974] netlink: 'syz.2.2020': attribute type 1 has an invalid length. [ 187.067375][T11974] 8021q: adding VLAN 0 to HW filter on device bond3 [ 187.087818][T11974] 8021q: adding VLAN 0 to HW filter on device bond3 [ 187.088112][T11974] bond3: (slave vti0): The slave device specified does not support setting the MAC address [ 187.088418][T11974] bond3: (slave vti0): Error -95 calling set_mac_address [ 187.161721][T11979] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 187.289414][T11987] netlink: 'syz.6.2025': attribute type 10 has an invalid length. [ 187.290018][T11987] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 187.290756][T11987] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 187.321919][T11991] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2026'. [ 187.514288][ T6682] usb 7-1: new low-speed USB device number 42 using dummy_hcd [ 187.684495][ T6682] usb 7-1: Invalid ep0 maxpacket: 32 [ 187.826454][ T6682] usb 7-1: new low-speed USB device number 43 using dummy_hcd [ 187.974203][ T6682] usb 7-1: Invalid ep0 maxpacket: 32 [ 187.974398][ T6682] usb usb7-port1: attempt power cycle [ 188.134164][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 188.314184][ T6682] usb 7-1: new low-speed USB device number 44 using dummy_hcd [ 188.334776][ T6682] usb 7-1: Invalid ep0 maxpacket: 32 [ 188.464281][ T6682] usb 7-1: new low-speed USB device number 45 using dummy_hcd [ 188.485684][ T6682] usb 7-1: Invalid ep0 maxpacket: 32 [ 188.485840][ T6682] usb usb7-port1: unable to enumerate USB device [ 188.845218][T12009] xfrm1: entered allmulticast mode [ 189.013116][T12017] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2035'. [ 189.130502][T12023] overlayfs: failed to clone upperpath [ 189.176333][T12027] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12027 comm=syz.5.2040 [ 189.379122][T12048] tmpfs: Bad value for 'mpol' [ 189.530531][T12062] PKCS7: Unknown OID: [158] 2.16.840.1.101.3.4.2.13 [ 189.530593][T12062] Unsupported digest algo: 106 [ 190.287007][ T5726] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 190.295749][ T5726] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 190.299217][ T5726] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 190.299920][ T5726] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 190.306155][ T5726] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 190.366000][T12073] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2053'. [ 190.366040][T12073] openvswitch: netlink: Flow actions attr not present in new flow. [ 190.397992][ T8549] bond0: (slave syz_tun): Releasing backup interface [ 190.432877][ T43] kauditd_printk_skb: 3 callbacks suppressed [ 190.432938][ T43] audit: type=1326 audit(2000000016.680:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12080 comm="syz.2.2056" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd6dcf9e159 code=0x0 [ 190.484107][T12085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2056'. [ 190.485113][ T43] audit: type=1400 audit(2000000016.740:914): avc: denied { getopt } for pid=12080 comm="syz.2.2056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 190.563628][T12066] Failed to initialize the IGMP autojoin socket (err -2) [ 190.758697][ T43] audit: type=1400 audit(2000000017.010:915): avc: denied { write } for pid=12100 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 190.819610][ T43] audit: type=1400 audit(2000000017.070:916): avc: denied { write } for pid=12108 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 190.851617][T12066] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.851747][T12066] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.852064][T12066] bridge_slave_0: entered allmulticast mode [ 190.853257][T12066] bridge_slave_0: entered promiscuous mode [ 190.855634][T12066] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.855699][T12066] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.855760][T12066] bridge_slave_1: entered allmulticast mode [ 190.858654][T12066] bridge_slave_1: entered promiscuous mode [ 190.901968][T12066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.911711][T12066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.956291][T12066] team0: Port device team_slave_0 added [ 190.960224][T12066] team0: Port device team_slave_1 added [ 190.986095][T12066] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.986145][T12066] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 190.986184][T12066] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.990529][T12066] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.990538][T12066] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 190.990551][T12066] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.061094][T12066] hsr_slave_0: entered promiscuous mode [ 191.061727][T12066] hsr_slave_1: entered promiscuous mode [ 191.063002][T12066] debugfs: 'hsr0' already exists in 'hsr' [ 191.063015][T12066] Cannot create hsr debugfs directory [ 191.283435][T12066] netdevsim netdevsim7 netdevsim0: renamed from eth14 [ 191.293726][T12066] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 191.295828][T12066] netdevsim netdevsim7 netdevsim1: renamed from eth15 [ 191.301770][T12066] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 191.306643][ T43] audit: type=1400 audit(2000000017.560:917): avc: denied { write } for pid=12114 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 191.307732][T12066] netdevsim netdevsim7 netdevsim2: renamed from eth16 [ 191.318568][T12066] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 191.318986][T12066] netdevsim netdevsim7 netdevsim3: renamed from eth17 [ 191.326652][T12066] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 191.345795][T12066] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.345871][T12066] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.346024][T12066] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.347736][T12066] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.359445][ T43] audit: type=1400 audit(2000000017.610:918): avc: denied { write } for pid=12120 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 191.422092][ T9524] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.425560][ T9524] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.438913][ T43] audit: type=1326 audit(2000000017.690:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12117 comm="syz.2.2063" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6dcf9e159 code=0x7fc00000 [ 191.439257][ T43] audit: type=1326 audit(2000000017.690:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12117 comm="syz.2.2063" exe="/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7fd6dcf9e159 code=0x7fc00000 [ 191.440592][ T43] audit: type=1326 audit(2000000017.690:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12117 comm="syz.2.2063" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6dcf9e159 code=0x7fc00000 [ 191.463467][T12066] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.480951][ T9524] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.481034][ T9524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.495718][ T9524] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.497547][ T9524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.805208][T12066] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.026326][T12066] veth0_vlan: entered promiscuous mode [ 192.034365][T12066] veth1_vlan: entered promiscuous mode [ 192.089458][T12066] veth0_macvtap: entered promiscuous mode [ 192.103323][T12066] veth1_macvtap: entered promiscuous mode [ 192.135085][T12066] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.155830][T12066] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.162659][T12066] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 192.166997][T12066] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 192.169817][T12066] wireguard: wg0: Could not create IPv4 socket [ 192.172578][T12066] wireguard: wg1: Could not create IPv4 socket [ 192.175414][T12066] wireguard: wg2: Could not create IPv4 socket [ 192.218708][T12161] FAULT_INJECTION: forcing a failure. [ 192.218708][T12161] name failslab, interval 1, probability 0, space 0, times 0 [ 192.218805][T12161] CPU: 2 UID: 0 PID: 12161 Comm: syz.2.2069 Tainted: G L syzkaller #0 PREEMPT(full) [ 192.218844][T12161] Tainted: [L]=SOFTLOCKUP [ 192.218853][T12161] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 192.218865][T12161] Call Trace: [ 192.218872][T12161] [ 192.218879][T12161] dump_stack_lvl+0x100/0x190 [ 192.218912][T12161] should_fail_ex.cold+0x5/0xa [ 192.218938][T12161] should_failslab+0xc2/0x120 [ 192.218960][T12161] __kvmalloc_node_noprof+0x113/0x9b0 [ 192.218982][T12161] ? drm_property_create_blob+0x79/0x340 [ 192.219017][T12161] drm_property_create_blob+0x79/0x340 [ 192.219047][T12161] ? find_held_lock+0x2b/0x80 [ 192.219075][T12161] drm_mode_createblob_ioctl+0x10d/0x450 [ 192.219096][T12161] drm_ioctl_kernel+0x1f3/0x3e0 [ 192.219117][T12161] ? __pfx_drm_mode_createblob_ioctl+0x10/0x10 [ 192.219135][T12161] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 192.219160][T12161] drm_ioctl+0x5e6/0xc60 [ 192.219180][T12161] ? __pfx_drm_mode_createblob_ioctl+0x10/0x10 [ 192.219199][T12161] ? __pfx_drm_ioctl+0x10/0x10 [ 192.219216][T12161] ? __fget_files+0x34/0x3d0 [ 192.219244][T12161] ? selinux_file_ioctl+0x13b/0x290 [ 192.219261][T12161] ? selinux_file_ioctl+0xb6/0x290 [ 192.219286][T12161] ? __pfx_drm_ioctl+0x10/0x10 [ 192.219309][T12161] __x64_sys_ioctl+0x18e/0x210 [ 192.219331][T12161] do_syscall_64+0x123/0x790 [ 192.219353][T12161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.219373][T12161] RIP: 0033:0x7fd6dcf9e159 [ 192.219390][T12161] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.219408][T12161] RSP: 002b:00007fd6ddde6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 192.219427][T12161] RAX: ffffffffffffffda RBX: 00007fd6dd225fa0 RCX: 00007fd6dcf9e159 [ 192.219441][T12161] RDX: 0000200000000280 RSI: 00000000c01064bd RDI: 0000000000000008 [ 192.219453][T12161] RBP: 00007fd6dd03503b R08: 0000000000000000 R09: 0000000000000000 [ 192.219464][T12161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.219475][T12161] R13: 00007fd6dd226038 R14: 00007fd6dd225fa0 R15: 00007ffe735c6248 [ 192.219498][T12161] [ 192.426288][ T43] audit: type=1800 audit(2000000018.680:922): pid=12169 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.2071" name="tmpfs" dev="sda1" ino=2044 res=0 errno=0 [ 192.587521][T12182] overlayfs: failed to clone upperpath [ 192.591137][T12182] overlayfs: missing 'lowerdir' [ 192.646735][T12188] Device name not specified. [ 192.646735][T12188] [ 192.753079][ T3373] hid_parser_main: 24 callbacks suppressed [ 192.753269][ T3373] hid-generic 0006:0004:0009.0010: unknown main item tag 0x0 [ 192.753291][ T3373] hid-generic 0006:0004:0009.0010: unknown main item tag 0x0 [ 192.753303][ T3373] hid-generic 0006:0004:0009.0010: unknown main item tag 0x0 [ 192.753315][ T3373] hid-generic 0006:0004:0009.0010: unknown main item tag 0x0 [ 192.753327][ T3373] hid-generic 0006:0004:0009.0010: unknown main item tag 0x0 [ 192.753339][ T3373] hid-generic 0006:0004:0009.0010: unknown main item tag 0x0 [ 192.753351][ T3373] hid-generic 0006:0004:0009.0010: unknown main item tag 0x0 [ 192.753363][ T3373] hid-generic 0006:0004:0009.0010: unknown main item tag 0x0 [ 192.753374][ T3373] hid-generic 0006:0004:0009.0010: unknown main item tag 0x0 [ 192.753386][ T3373] hid-generic 0006:0004:0009.0010: unknown main item tag 0x0 [ 192.761750][ T3373] hid-generic 0006:0004:0009.0010: hidraw1: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 192.823363][T12208] fido_id[12208]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 192.963476][T12230] netlink: 'syz.5.2091': attribute type 2 has an invalid length. [ 193.148437][T12243] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2094'. [ 193.164658][ T42] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 193.314770][ T42] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 193.315739][ T42] usb 7-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 193.315765][ T42] usb 7-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 193.315785][ T42] usb 7-1: config 0 interface 0 has no altsetting 0 [ 193.317582][ T42] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 193.317603][ T42] usb 7-1: Product: syz [ 193.317616][ T42] usb 7-1: Manufacturer: syz [ 193.317629][ T42] usb 7-1: SerialNumber: syz [ 193.320037][ T42] usb 7-1: config 0 descriptor?? [ 193.324755][ T42] usb 7-1: selecting invalid altsetting 0 [ 193.525588][ T42] usb 7-1: USB disconnect, device number 46 [ 193.801458][T12268] FAULT_INJECTION: forcing a failure. [ 193.801458][T12268] name fail_futex, interval 1, probability 0, space 0, times 0 [ 193.801522][T12268] CPU: 1 UID: 0 PID: 12268 Comm: syz.6.2096 Tainted: G L syzkaller #0 PREEMPT(full) [ 193.801549][T12268] Tainted: [L]=SOFTLOCKUP [ 193.801555][T12268] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 193.801563][T12268] Call Trace: [ 193.801568][T12268] [ 193.801573][T12268] dump_stack_lvl+0x100/0x190 [ 193.801592][T12268] should_fail_ex.cold+0x5/0xa [ 193.801610][T12268] get_futex_key+0x1d0/0x14f0 [ 193.801628][T12268] ? __pfx_get_futex_key+0x10/0x10 [ 193.801649][T12268] futex_wait_setup+0x91/0x540 [ 193.801677][T12268] __futex_wait+0x19f/0x300 [ 193.801696][T12268] ? __pfx___futex_wait+0x10/0x10 [ 193.801713][T12268] ? __pfx_try_to_wake_up+0x10/0x10 [ 193.801727][T12268] ? futex_hash+0x311/0x400 [ 193.801742][T12268] ? __pfx_futex_wake_mark+0x10/0x10 [ 193.801762][T12268] ? find_held_lock+0x2b/0x80 [ 193.801778][T12268] ? futex_wake+0x4ea/0x5e0 [ 193.801810][T12268] futex_wait+0xe6/0x370 [ 193.801829][T12268] ? __pfx_futex_wait+0x10/0x10 [ 193.801849][T12268] ? find_held_lock+0x2b/0x80 [ 193.801867][T12268] do_futex+0x265/0x440 [ 193.801882][T12268] ? __pfx_do_futex+0x10/0x10 [ 193.801898][T12268] ? fput+0x7c/0x100 [ 193.801913][T12268] __x64_sys_futex+0x34f/0x4d0 [ 193.801929][T12268] ? __pfx___x64_sys_futex+0x10/0x10 [ 193.801949][T12268] do_syscall_64+0x123/0x790 [ 193.801967][T12268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.801979][T12268] RIP: 0033:0x7f663659e159 [ 193.801989][T12268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.802000][T12268] RSP: 002b:00007f66375090e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 193.802011][T12268] RAX: ffffffffffffffda RBX: 00007f6636825fa8 RCX: 00007f663659e159 [ 193.802019][T12268] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6636825fa8 [ 193.802025][T12268] RBP: 00007f6636825fa0 R08: 0000000000000000 R09: 0000000000000000 [ 193.802032][T12268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 193.802038][T12268] R13: 00007f6636826038 R14: 00007fff862480e0 R15: 00007fff862481c8 [ 193.802052][T12268] [ 193.811370][T12246] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2095'. [ 193.811393][T12246] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2095'. [ 193.812039][T12246] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2095'. [ 193.812056][T12246] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2095'. [ 193.958119][T12278] Failed to initialize the IGMP autojoin socket (err -2) [ 194.050203][ T1438] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.052831][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.340132][T12300] netlink: 'syz.5.2100': attribute type 11 has an invalid length. [ 194.385473][T12306] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2102'. [ 194.385550][T12306] openvswitch: netlink: Flow key attr not present in new flow. [ 194.954478][T12338] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2106'. [ 195.125264][T12349] netlink: 'syz.5.2109': attribute type 32 has an invalid length. [ 195.213144][T12351] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 195.213172][T12351] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 195.213255][T12351] vhci_hcd vhci_hcd.0: Device attached [ 195.441818][ T43] kauditd_printk_skb: 22 callbacks suppressed [ 195.444689][ T43] audit: type=1400 audit(2000000021.690:945): avc: denied { write } for pid=12375 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.473864][ T3373] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 195.502138][ T43] audit: type=1400 audit(2000000021.750:946): avc: denied { write } for pid=12378 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.626791][ T43] audit: type=1400 audit(2000000021.880:947): avc: denied { write } for pid=12381 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.687975][ T43] audit: type=1400 audit(2000000021.940:948): avc: denied { write } for pid=12385 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.730830][ T5731] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 195.734233][ T5731] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 195.739085][ T5731] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 195.743613][ T5731] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 195.749666][ T5731] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 195.831626][ T43] audit: type=1400 audit(2000000022.080:949): avc: denied { write } for pid=12390 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.883368][ T43] audit: type=1400 audit(2000000022.130:950): avc: denied { write } for pid=12399 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.936514][T12387] Failed to initialize the IGMP autojoin socket (err -2) [ 195.982682][T12363] vhci_hcd: connection reset by peer [ 195.985094][ T43] audit: type=1400 audit(2000000022.230:951): avc: denied { write } for pid=12404 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.985575][ T5770] vhci_hcd vhci_hcd.2: stop threads [ 195.985590][ T5770] vhci_hcd vhci_hcd.2: release socket [ 195.987003][ T5770] vhci_hcd vhci_hcd.2: disconnect device [ 196.030892][ T43] audit: type=1400 audit(2000000022.280:952): avc: denied { write } for pid=12407 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 196.169126][ T43] audit: type=1400 audit(2000000022.420:953): avc: denied { write } for pid=12412 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 196.223580][ T43] audit: type=1400 audit(2000000022.470:954): avc: denied { write } for pid=12415 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 196.771205][T12439] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2115'. [ 197.804117][ T5731] Bluetooth: hci0: command tx timeout [ 198.197784][T12360] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 198.203719][T12387] netdevsim netdevsim7 netdevsim0: renamed from eth14 [ 198.239722][T12387] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 198.254044][T12387] netdevsim netdevsim7 netdevsim1: renamed from eth15 [ 198.269201][T12387] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 198.271936][T12387] netdevsim netdevsim7 netdevsim2: renamed from eth16 [ 198.283722][T12387] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 198.289110][T12387] netdevsim netdevsim7 netdevsim3: renamed from eth17 [ 198.300751][T12387] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 198.305716][T12497] Failed to initialize the IGMP autojoin socket (err -2) [ 198.387274][T12511] netlink: 'syz.5.2123': attribute type 39 has an invalid length. [ 198.502086][T12520] netlink: 'syz.6.2124': attribute type 6 has an invalid length. [ 198.505295][T12520] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2124'. [ 198.568696][T12527] netlink: 'syz.6.2126': attribute type 63 has an invalid length. [ 198.568758][T12527] netlink: 5 bytes leftover after parsing attributes in process `syz.6.2126'. [ 198.793009][T12561] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2132'. [ 198.800409][T12564] netlink: 'syz.2.2134': attribute type 39 has an invalid length. [ 198.800769][T12564] FAULT_INJECTION: forcing a failure. [ 198.800769][T12564] name failslab, interval 1, probability 0, space 0, times 0 [ 198.800789][T12564] CPU: 3 UID: 0 PID: 12564 Comm: syz.2.2134 Tainted: G L syzkaller #0 PREEMPT(full) [ 198.800804][T12564] Tainted: [L]=SOFTLOCKUP [ 198.800809][T12564] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 198.800816][T12564] Call Trace: [ 198.800821][T12564] [ 198.800826][T12564] dump_stack_lvl+0x100/0x190 [ 198.800857][T12564] should_fail_ex.cold+0x5/0xa [ 198.800876][T12564] should_failslab+0xc2/0x120 [ 198.800894][T12564] kmem_cache_alloc_noprof+0x92/0x6a0 [ 198.800906][T12564] ? alloc_empty_file+0x5b/0x1c0 [ 198.800925][T12564] alloc_empty_file+0x5b/0x1c0 [ 198.800940][T12564] path_openat+0xdb/0x2440 [ 198.800956][T12564] ? __pfx_path_openat+0x10/0x10 [ 198.800975][T12564] do_file_open+0x20e/0x430 [ 198.800990][T12564] ? __pfx_do_file_open+0x10/0x10 [ 198.801015][T12564] ? _raw_spin_unlock+0x28/0x50 [ 198.801031][T12564] ? alloc_fd+0x471/0x7a0 [ 198.801048][T12564] do_sys_openat2+0x10f/0x1e0 [ 198.801062][T12564] ? __pfx_do_sys_openat2+0x10/0x10 [ 198.801078][T12564] ? __pfx_do_set_mempolicy+0x10/0x10 [ 198.801095][T12564] __x64_sys_openat+0x12d/0x210 [ 198.801111][T12564] ? __pfx___x64_sys_openat+0x10/0x10 [ 198.801133][T12564] do_syscall_64+0x123/0x790 [ 198.801149][T12564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.801161][T12564] RIP: 0033:0x7fd6dcf9e159 [ 198.801171][T12564] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.801181][T12564] RSP: 002b:00007fd6ddde6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 198.801192][T12564] RAX: ffffffffffffffda RBX: 00007fd6dd225fa0 RCX: 00007fd6dcf9e159 [ 198.801200][T12564] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 198.801207][T12564] RBP: 00007fd6dd03503b R08: 0000000000000000 R09: 0000000000000000 [ 198.801213][T12564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 198.801220][T12564] R13: 00007fd6dd226038 R14: 00007fd6dd225fa0 R15: 00007ffe735c6248 [ 198.801234][T12564] [ 198.863214][T12571] netlink: 'syz.2.2135': attribute type 39 has an invalid length. [ 198.877899][T12571] hsr_slave_0 (unregistering): left promiscuous mode [ 198.895306][T12576] overlayfs: failed to clone upperpath [ 198.926977][T12387] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 198.937497][T12387] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 198.942510][T12579] tipc: Enabling of bearer rejected, already enabled [ 198.943972][T12387] wireguard: wg0: Could not create IPv4 socket [ 198.945677][T12387] wireguard: wg1: Could not create IPv4 socket [ 198.946734][T12387] wireguard: wg2: Could not create IPv4 socket [ 198.952718][T12585] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2140'. [ 198.963030][T12571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2135'. [ 198.966694][T12585] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 199.056423][T12594] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2143'. [ 199.143199][T12598] bond4: (slave bond_slave_0): Device is not our slave [ 199.143289][T12598] bond4: option active_slave: invalid value (bond_slave_0) [ 199.149116][T12598] bond4 (unregistering): Released all slaves [ 199.282531][ T5731] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 199.379001][T12619] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2148'. [ 199.379051][T12619] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2148'. [ 199.989437][ T5731] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 200.232047][T12677] fuse: fd is not a fuse device [ 200.534354][ T43] kauditd_printk_skb: 42 callbacks suppressed [ 200.534638][ T43] audit: type=1400 audit(2000000026.780:997): avc: denied { write } for pid=12695 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 200.542077][ T5807] hid_parser_main: 7 callbacks suppressed [ 200.542095][ T5807] hid-generic 0006:0004:0009.0011: unknown main item tag 0x0 [ 200.542117][ T5807] hid-generic 0006:0004:0009.0011: unknown main item tag 0x0 [ 200.542136][ T5807] hid-generic 0006:0004:0009.0011: unknown main item tag 0x0 [ 200.542154][ T5807] hid-generic 0006:0004:0009.0011: unknown main item tag 0x1 [ 200.542172][ T5807] hid-generic 0006:0004:0009.0011: unknown main item tag 0x0 [ 200.542190][ T5807] hid-generic 0006:0004:0009.0011: unknown main item tag 0x0 [ 200.542208][ T5807] hid-generic 0006:0004:0009.0011: unknown main item tag 0x0 [ 200.542227][ T5807] hid-generic 0006:0004:0009.0011: unknown main item tag 0x0 [ 200.542245][ T5807] hid-generic 0006:0004:0009.0011: unknown main item tag 0x0 [ 200.542263][ T5807] hid-generic 0006:0004:0009.0011: unknown main item tag 0x0 [ 200.542304][ T5807] hid-generic 0006:0004:0009.0011: item fetching failed at offset 16/17 [ 200.542811][ T5807] hid-generic 0006:0004:0009.0011: probe with driver hid-generic failed with error -22 [ 200.604249][ T43] audit: type=1400 audit(2000000026.850:998): avc: denied { write } for pid=12701 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 200.604622][ T3373] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 200.707220][ T43] audit: type=1400 audit(2000000026.950:999): avc: denied { write } for pid=12704 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 200.765745][ T43] audit: type=1400 audit(2000000027.010:1000): avc: denied { write } for pid=12707 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 200.862463][T12714] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2165'. [ 201.130779][ T43] audit: type=1400 audit(2000000027.370:1001): avc: denied { write } for pid=12724 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 201.190875][ T43] audit: type=1400 audit(2000000027.430:1002): avc: denied { write } for pid=12727 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 201.321034][ T43] audit: type=1400 audit(2000000027.560:1003): avc: denied { write } for pid=12730 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 201.375271][ T43] audit: type=1400 audit(2000000027.620:1004): avc: denied { write } for pid=12733 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 201.398810][T12736] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2167'. [ 201.487524][ T43] audit: type=1400 audit(2000000027.730:1005): avc: denied { write } for pid=12742 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 201.538060][ T43] audit: type=1400 audit(2000000027.780:1006): avc: denied { write } for pid=12753 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 201.596375][T12756] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=4240390349 (8480780698 ns) > initial count (422248798 ns). Using initial count to start timer. [ 201.605024][T12756] kvm [12755]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 201.605803][T12756] kvm [12755]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 201.812357][T12776] blktrace: Concurrent blktraces are not allowed on sg0 [ 201.858014][T12779] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 201.864364][T12782] netlink: 'syz.5.2179': attribute type 4 has an invalid length. [ 202.329968][T12820] fuse: fd is not a fuse device [ 202.719160][T12842] block nbd2: NBD_DISCONNECT [ 202.855203][ T5726] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 202.860421][ T5726] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 202.861863][ T5726] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 202.863243][ T5726] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 202.863766][ T5726] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 203.123143][T12850] Failed to initialize the IGMP autojoin socket (err -2) [ 203.479421][T12886] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 203.498181][T12886] ip6erspan0: entered allmulticast mode [ 203.660520][T12898] FAULT_INJECTION: forcing a failure. [ 203.660520][T12898] name failslab, interval 1, probability 0, space 0, times 0 [ 203.660602][T12898] CPU: 0 UID: 0 PID: 12898 Comm: syz.2.2197 Tainted: G L syzkaller #0 PREEMPT(full) [ 203.660629][T12898] Tainted: [L]=SOFTLOCKUP [ 203.660636][T12898] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 203.660644][T12898] Call Trace: [ 203.660649][T12898] [ 203.660654][T12898] dump_stack_lvl+0x100/0x190 [ 203.660684][T12898] should_fail_ex.cold+0x5/0xa [ 203.660702][T12898] should_failslab+0xc2/0x120 [ 203.660732][T12898] __kmalloc_noprof+0xfc/0x840 [ 203.660744][T12898] ? __pfx_dynamic_dname+0x10/0x10 [ 203.660757][T12898] ? tomoyo_encode2+0xfb/0x3c0 [ 203.660773][T12898] tomoyo_encode2+0xfb/0x3c0 [ 203.660786][T12898] tomoyo_encode+0x29/0x50 [ 203.660798][T12898] tomoyo_realpath_from_path+0x18c/0x690 [ 203.660815][T12898] tomoyo_check_open_permission+0x2af/0x3c0 [ 203.660834][T12898] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 203.660856][T12898] ? hook_file_open+0x248/0x8e0 [ 203.660879][T12898] ? path_get+0x61/0x80 [ 203.660895][T12898] tomoyo_file_open+0x6b/0x90 [ 203.660910][T12898] security_file_open+0xb5/0x1e0 [ 203.660923][T12898] do_dentry_open+0x588/0x14d0 [ 203.660939][T12898] vfs_open+0x82/0x3f0 [ 203.660954][T12898] path_openat+0x19fa/0x2440 [ 203.660970][T12898] ? __pfx_path_openat+0x10/0x10 [ 203.660987][T12898] do_file_open+0x20e/0x430 [ 203.661001][T12898] ? __pfx_do_file_open+0x10/0x10 [ 203.661024][T12898] ? _raw_spin_unlock+0x28/0x50 [ 203.661040][T12898] ? alloc_fd+0x471/0x7a0 [ 203.661058][T12898] do_sys_openat2+0x10f/0x1e0 [ 203.661073][T12898] ? __pfx_do_sys_openat2+0x10/0x10 [ 203.661093][T12898] __x64_sys_openat+0x12d/0x210 [ 203.661108][T12898] ? __pfx___x64_sys_openat+0x10/0x10 [ 203.661128][T12898] do_syscall_64+0x123/0x790 [ 203.661143][T12898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.661155][T12898] RIP: 0033:0x7fd6dcf5e98e [ 203.661170][T12898] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 203.661182][T12898] RSP: 002b:00007fd6ddde5f18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 203.661195][T12898] RAX: ffffffffffffffda RBX: 00007fd6ddde66c0 RCX: 00007fd6dcf5e98e [ 203.661203][T12898] RDX: 0000000000000000 RSI: 00007fd6dd034776 RDI: ffffffffffffff9c [ 203.661210][T12898] RBP: 00007fd6dd03503b R08: 0000000000000000 R09: 0000000000000000 [ 203.661217][T12898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 203.661225][T12898] R13: 00007fd6dd226038 R14: 00007fd6dd225fa0 R15: 00007ffe735c6248 [ 203.661241][T12898] [ 203.665681][T12898] ERROR: Out of memory at tomoyo_realpath_from_path. [ 203.667608][T12898] tmpfs: Bad value for 'mpol' [ 203.678306][T12900] CIFS mount error: No usable UNC path provided in device string! [ 203.678306][T12900] [ 203.678318][T12900] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 203.898280][T12921] __nla_validate_parse: 4 callbacks suppressed [ 203.900196][T12921] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2204'. [ 203.952787][T12918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2203'. [ 204.172262][T12934] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.179161][T12934] busy [ 204.270272][T12941] Failed to initialize the IGMP autojoin socket (err -2) [ 204.347884][T12850] netdevsim netdevsim7 netdevsim0: renamed from eth14 [ 204.366805][T12850] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 204.367396][T12850] netdevsim netdevsim7 netdevsim1: renamed from eth15 [ 204.376606][T12850] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 204.377083][T12850] netdevsim netdevsim7 netdevsim2: renamed from eth16 [ 204.381340][T12850] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 204.381916][T12850] netdevsim netdevsim7 netdevsim3: renamed from eth17 [ 204.396302][T12850] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 204.425821][T12958] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2214'. [ 204.660744][T12991] fuse: fd is not a fuse device [ 204.803997][T13007] netlink: 'syz.5.2218': attribute type 1 has an invalid length. [ 204.846539][T13012] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2220'. [ 204.880022][T13007] bond4: entered promiscuous mode [ 204.880395][T13007] 8021q: adding VLAN 0 to HW filter on device bond4 [ 204.923787][ T5726] Bluetooth: hci0: command tx timeout [ 204.924433][T13007] 8021q: adding VLAN 0 to HW filter on device bond4 [ 204.924775][T13007] bond4: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 204.924787][T13007] bond4: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 204.936021][T13007] bond4: (slave ip6gre1): making interface the new active one [ 204.936036][T13007] ip6gre1: entered promiscuous mode [ 204.941130][T13007] bond4: (slave ip6gre1): Enslaving as an active interface with an up link [ 205.140221][T12850] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 205.148053][T12850] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 205.152628][T12850] wireguard: wg0: Could not create IPv4 socket [ 205.167968][T12850] wireguard: wg1: Could not create IPv4 socket [ 205.176827][T12850] wireguard: wg2: Could not create IPv4 socket [ 205.321362][T13026] bridge0: port 1(macsec1) entered blocking state [ 205.321490][T13026] bridge0: port 1(macsec1) entered disabled state [ 205.321591][T13026] macsec1: entered allmulticast mode [ 205.326210][T13026] macsec1: left allmulticast mode [ 205.417592][T13029] netlink: 'syz.2.2223': attribute type 7 has an invalid length. [ 205.528763][T13036] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2226'. [ 205.562252][T13040] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2228'. [ 205.562611][T13040] fuseblk: fd is not a fuse device [ 205.569035][T13039] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2227'. [ 205.569097][T13039] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2227'. [ 205.641643][T13044] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2229'. [ 205.813364][ T43] kauditd_printk_skb: 27 callbacks suppressed [ 205.813426][ T43] audit: type=1400 audit(2000000032.051:1034): avc: denied { write } for pid=13049 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 205.820748][T13059] overlayfs: failed to resolve 'ower2': -2 [ 205.872092][ T43] audit: type=1400 audit(2000000032.111:1035): avc: denied { write } for pid=13063 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 205.958580][T13072] netlink: 'syz.5.2238': attribute type 12 has an invalid length. [ 205.958662][T13072] netlink: 'syz.5.2238': attribute type 29 has an invalid length. [ 205.958699][T13072] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2238'. [ 205.958731][T13072] netlink: 'syz.5.2238': attribute type 1 has an invalid length. [ 205.958759][T13072] netlink: 'syz.5.2238': attribute type 2 has an invalid length. [ 205.977172][ T43] audit: type=1400 audit(2000000032.221:1036): avc: denied { mounton } for pid=13069 comm="syz.2.2236" path="/541/dev/sda1" dev="devtmpfs" ino=724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 206.134010][T13079] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13079 comm=syz.6.2239 [ 206.135852][ T43] audit: type=1400 audit(2000000032.381:1037): avc: denied { load_policy } for pid=13078 comm="syz.6.2239" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 206.139657][T13079] SELinux: policydb version -1136730338 does not match my version range 15-35 [ 206.139818][T13079] SELinux: failed to load policy [ 206.323029][ T43] audit: type=1400 audit(2000000032.571:1038): avc: denied { write } for pid=13102 comm="syz.2.2246" name="/" dev="9p" ino=74469303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 206.324363][ T43] audit: type=1400 audit(2000000032.571:1039): avc: denied { write } for pid=13102 comm="syz.2.2246" name="/" dev="9p" ino=74469303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 206.497966][T13113] fuse: fd is not a fuse device [ 206.826178][ T43] audit: type=1400 audit(2000000033.071:1040): avc: denied { write } for pid=13134 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 206.875598][ T43] audit: type=1400 audit(2000000033.121:1041): avc: denied { write } for pid=13137 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 206.946260][T13141] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 206.947173][T13141] rtrs_client L2095: : Failed to resolve address, err: -ENODEV [ 206.947287][T13141] rtrs_client L2636: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 207.012954][ T43] audit: type=1400 audit(2000000033.251:1042): avc: denied { write } for pid=13142 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 207.067802][ T43] audit: type=1400 audit(2000000033.311:1043): avc: denied { write } for pid=13150 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 207.711887][T13180] netlink: 'syz.2.2259': attribute type 39 has an invalid length. [ 208.254262][T13225] netlink: 'syz.6.2270': attribute type 1 has an invalid length. [ 208.583031][ T5907] usb 7-1: new full-speed USB device number 47 using dummy_hcd [ 208.738808][ T5907] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 208.743319][ T5907] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 208.743356][ T5907] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 208.743415][ T5907] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.753621][T13277] macvlan0: left allmulticast mode [ 208.753795][T13277] netlink: 'syz.5.2283': attribute type 1 has an invalid length. [ 208.753810][T13277] netlink: 'syz.5.2283': attribute type 2 has an invalid length. [ 208.972379][T13234] CUSE: unknown device info "" [ 208.972411][T13234] CUSE: unknown device info "" [ 208.972487][T13234] CUSE: unknown device info "" [ 208.972505][T13234] CUSE: unknown device info "" [ 208.972551][T13234] CUSE: zero length info key specified [ 208.982051][ T5907] usb 7-1: usb_control_msg returned -32 [ 208.984016][ T5907] usbtmc 7-1:16.0: can't read capabilities [ 208.992893][T13295] syz.5.2288 (13295): attempted to duplicate a private mapping with mremap. This is not supported. [ 209.473786][ T5731] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 209.479046][ T5731] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 209.482338][ T5731] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 209.492553][ T5731] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 209.495852][ T5731] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 209.649286][T13344] fuse: fd is not a fuse device [ 209.780121][T13329] Failed to initialize the IGMP autojoin socket (err -2) [ 210.048868][T13370] __nla_validate_parse: 12 callbacks suppressed [ 210.049056][T13370] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2299'. [ 210.596802][T13407] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2306'. [ 210.667821][T13329] netdevsim netdevsim7 netdevsim0: renamed from eth14 [ 210.678698][T13329] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 210.684022][T13329] netdevsim netdevsim7 netdevsim1: renamed from eth15 [ 210.691172][T13329] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 210.695386][T13329] netdevsim netdevsim7 netdevsim2: renamed from eth16 [ 210.704659][T13329] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 210.708882][T13329] netdevsim netdevsim7 netdevsim3: renamed from eth17 [ 210.719759][T13329] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 210.839141][T13426] tipc: Started in network mode [ 210.839241][T13426] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 210.841597][T13426] tipc: Enabled bearer , priority 0 [ 210.879111][ T43] kauditd_printk_skb: 36 callbacks suppressed [ 210.879194][ T43] audit: type=1400 audit(2000000037.121:1080): avc: denied { write } for pid=13427 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 210.897415][T13435] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2313'. [ 210.897484][T13435] netlink: 'syz.5.2313': attribute type 30 has an invalid length. [ 210.944966][T13433] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2313'. [ 210.945037][T13433] netlink: 'syz.5.2313': attribute type 30 has an invalid length. [ 211.072651][ T43] audit: type=1400 audit(2000000037.311:1081): avc: denied { write } for pid=13446 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 211.141194][T13461] netlink: 'syz.6.2319': attribute type 10 has an invalid length. [ 211.158633][T13461] bond0: (slave netdevsim1): Releasing backup interface [ 211.168468][T13461] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 211.170917][T13461] team0: Port device netdevsim1 added [ 211.189407][ T43] audit: type=1400 audit(2000000037.431:1082): avc: denied { write } for pid=13462 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 211.333603][T13482] fuse: fd is not a fuse device [ 211.335445][T13482] netlink: Conntrack attr has 8 unknown bytes [ 211.335795][T13482] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 211.357796][ T5871] usb 7-1: USB disconnect, device number 47 [ 211.379708][T13329] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 211.389554][T13329] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 211.397167][T13329] wireguard: wg0: Could not create IPv4 socket [ 211.401046][T13490] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2326'. [ 211.407304][T13329] wireguard: wg1: Could not create IPv4 socket [ 211.411812][T13329] wireguard: wg2: Could not create IPv4 socket [ 211.418983][ T43] audit: type=1400 audit(2000000037.661:1083): avc: denied { write } for pid=13480 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 211.429632][T13489] Failed to initialize the IGMP autojoin socket (err -2) [ 211.487122][ T43] audit: type=1400 audit(2000000037.731:1084): avc: denied { write } for pid=13494 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 211.501297][T13500] fuse: fd is not a fuse device [ 211.505792][T13500] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2330'. [ 211.512210][T13502] netlink: 'syz.6.2331': attribute type 21 has an invalid length. [ 211.598815][T13513] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2334'. [ 211.669577][ T43] audit: type=1400 audit(2000000037.911:1085): avc: denied { write } for pid=13512 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 211.730370][ T43] audit: type=1400 audit(2000000037.971:1086): avc: denied { write } for pid=13522 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 211.953956][ T6682] tipc: Node number set to 11578026 [ 212.051126][ T3373] libceph: ceph_tcp_connect failed: -2 [ 212.051198][ T3373] libceph: mon0 (2)127.0.0.1:6789 connect error [ 212.315639][ T3373] libceph: ceph_tcp_connect failed: -2 [ 212.316372][ T3373] libceph: mon0 (2)127.0.0.1:6789 connect error [ 212.666876][T13609] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 212.726824][T13613] gre0: left allmulticast mode [ 212.823038][ T5132] libceph: ceph_tcp_connect failed: -2 [ 212.823078][ T5132] libceph: mon0 (2)127.0.0.1:6789 connect error [ 212.855041][ T43] audit: type=1400 audit(2000000039.101:1087): avc: denied { write } for pid=13617 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.864212][T13568] ceph: No mds server is up or the cluster is laggy [ 212.907271][ T43] audit: type=1400 audit(2000000039.151:1088): avc: denied { write } for pid=13620 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 213.036554][ T43] audit: type=1400 audit(2000000039.281:1089): avc: denied { write } for pid=13625 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 213.121489][T13636] fuse: fd is not a fuse device [ 213.187457][T13642] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2350'. [ 214.434805][T13665] GUP no longer grows the stack in syz.5.2355 (13665): 200000007000-20000000a000 (200000004000) [ 214.434878][T13665] CPU: 0 UID: 0 PID: 13665 Comm: syz.5.2355 Tainted: G L syzkaller #0 PREEMPT(full) [ 214.434906][T13665] Tainted: [L]=SOFTLOCKUP [ 214.434913][T13665] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 214.434923][T13665] Call Trace: [ 214.434932][T13665] [ 214.434939][T13665] dump_stack_lvl+0x100/0x190 [ 214.434972][T13665] gup_vma_lookup.cold+0x83/0x96 [ 214.435002][T13665] __get_user_pages+0x252/0x2c30 [ 214.435028][T13665] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 214.435062][T13665] ? __pfx___get_user_pages+0x10/0x10 [ 214.435084][T13665] ? __pfx_down_read_killable+0x10/0x10 [ 214.435119][T13665] __gup_longterm_locked+0x87d/0x16f0 [ 214.435140][T13665] ? mas_pause+0x211/0x220 [ 214.435170][T13665] ? __pfx___gup_longterm_locked+0x10/0x10 [ 214.435191][T13665] ? lock_acquire+0x1d1/0x380 [ 214.435211][T13665] ? gup_fast_fallback+0x946/0x2790 [ 214.435243][T13665] gup_fast_fallback+0x16dc/0x2790 [ 214.435285][T13665] ? __pfx_gup_fast_fallback+0x10/0x10 [ 214.435309][T13665] ? __lock_acquire+0x5c0/0x1f40 [ 214.435330][T13665] ? rcu_is_watching+0x13/0xc0 [ 214.435355][T13665] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 214.435383][T13665] get_user_pages_fast+0xa7/0xf0 [ 214.435405][T13665] ? __pfx_get_user_pages_fast+0x10/0x10 [ 214.435426][T13665] ? lock_acquire+0x1d1/0x380 [ 214.435444][T13665] ? pipe_lock+0x69/0x80 [ 214.435472][T13665] __iov_iter_get_pages_alloc+0x8f2/0x1f20 [ 214.435506][T13665] ? __mutex_lock+0x26c/0x1bd0 [ 214.435529][T13665] ? pipe_lock+0x69/0x80 [ 214.435552][T13665] ? __pfx___iov_iter_get_pages_alloc+0x10/0x10 [ 214.435583][T13665] ? __pfx___mutex_lock+0x10/0x10 [ 214.435606][T13665] ? __fget_files+0x34/0x3d0 [ 214.435629][T13665] ? import_ubuf+0x1b6/0x220 [ 214.435664][T13665] iov_iter_get_pages2+0xa3/0x100 [ 214.435694][T13665] ? __pfx_iov_iter_get_pages2+0x10/0x10 [ 214.435723][T13665] ? wait_for_space+0x2ca/0x3b0 [ 214.435753][T13665] __do_sys_vmsplice+0x7dd/0x13c0 [ 214.435785][T13665] ? find_held_lock+0x2b/0x80 [ 214.435813][T13665] ? __pfx___do_sys_vmsplice+0x10/0x10 [ 214.435847][T13665] ? __pfx_futex_wait+0x10/0x10 [ 214.435923][T13665] ? do_syscall_64+0x123/0x790 [ 214.435946][T13665] do_syscall_64+0x123/0x790 [ 214.435972][T13665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.435992][T13665] RIP: 0033:0x7f2246f9e159 [ 214.436009][T13665] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.436044][T13665] RSP: 002b:00007f2247dba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 214.436068][T13665] RAX: ffffffffffffffda RBX: 00007f2247225fa0 RCX: 00007f2246f9e159 [ 214.436082][T13665] RDX: 0000000000000001 RSI: 00002000000013c0 RDI: 0000000000000005 [ 214.436094][T13665] RBP: 00007f224703503b R08: 0000000000000000 R09: 0000000000000000 [ 214.436107][T13665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 214.436121][T13665] R13: 00007f2247226038 R14: 00007f2247225fa0 R15: 00007ffd59b9b0e8 [ 214.436150][T13665] [ 214.482439][T13669] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2356'. [ 214.600865][T13678] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2360'. [ 214.601487][T13678] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5131 sclass=netlink_route_socket pid=13678 comm=syz.6.2360 [ 214.764656][ T5726] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 214.930685][T13703] overlayfs: failed to resolve 'work': -2 [ 215.016465][T13710] Failed to initialize the IGMP autojoin socket (err -2) [ 215.135045][T13728] __nla_validate_parse: 1 callbacks suppressed [ 215.135275][T13728] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2376'. [ 215.180707][T13737] hsr_slave_1: left promiscuous mode [ 215.233741][T13743] CIFS mount error: No usable UNC path provided in device string! [ 215.233741][T13743] [ 215.237092][T13743] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 215.243597][T13737] bond0: entered promiscuous mode [ 215.247375][T13737] gretap0: entered promiscuous mode [ 215.249558][T13737] dummy0: entered promiscuous mode [ 215.252927][T13737] debugfs: 'hsr0' already exists in 'hsr' [ 215.254729][T13737] Cannot create hsr debugfs directory [ 215.258087][T13737] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2375'. [ 215.268340][T13737] dummy0 (unregistering): left promiscuous mode [ 215.907418][ T43] kauditd_printk_skb: 14 callbacks suppressed [ 215.907496][ T43] audit: type=1400 audit(2000000042.151:1104): avc: denied { write } for pid=13777 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 215.945620][ T43] audit: type=1400 audit(2000000042.191:1105): avc: denied { write } for pid=13780 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 216.068443][ T43] audit: type=1400 audit(2000000042.311:1106): avc: denied { write } for pid=13782 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 216.137168][ T43] audit: type=1400 audit(2000000042.381:1107): avc: denied { write } for pid=13796 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 216.284098][ T43] audit: type=1400 audit(2000000042.531:1108): avc: denied { write } for pid=13806 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 216.346665][ T43] audit: type=1400 audit(2000000042.591:1109): avc: denied { write } for pid=13814 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 216.444913][ T43] audit: type=1400 audit(2000000042.691:1110): avc: denied { write } for pid=13816 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 216.489758][ T43] audit: type=1400 audit(2000000042.731:1111): avc: denied { write } for pid=13819 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 216.848867][ T5731] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 216.853434][ T5731] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 216.855566][ T5731] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 216.860631][ T5731] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 216.864214][ T5731] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 216.895327][ T43] audit: type=1400 audit(2000000043.141:1112): avc: denied { write } for pid=13838 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 216.947686][ T43] audit: type=1400 audit(2000000043.191:1113): avc: denied { write } for pid=13850 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 217.069762][T13839] Failed to initialize the IGMP autojoin socket (err -2) [ 217.243148][T13888] jffs2: notice: (13888) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 217.317280][T13872] overlayfs: failed to clone upperpath [ 217.745431][T13928] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2412'. [ 217.800624][T13839] netdevsim netdevsim7 netdevsim0: renamed from eth14 [ 217.804968][T13839] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 217.805379][T13839] netdevsim netdevsim7 netdevsim1: renamed from eth15 [ 217.816726][T13839] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 217.821668][T13839] netdevsim netdevsim7 netdevsim2: renamed from eth16 [ 217.826562][T13839] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 217.829837][T13839] netdevsim netdevsim7 netdevsim3: renamed from eth17 [ 217.837641][T13839] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 218.110484][T13956] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 218.145287][T13982] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2423'. [ 218.146526][T13978] Failed to initialize the IGMP autojoin socket (err -2) [ 218.325796][T13839] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 218.329119][T13839] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 218.330266][T13839] wireguard: wg0: Could not create IPv4 socket [ 218.331346][T13839] wireguard: wg1: Could not create IPv4 socket [ 218.338618][T13839] wireguard: wg2: Could not create IPv4 socket [ 218.610223][T14033] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2433'. [ 218.646004][T14036] Failed to initialize the IGMP autojoin socket (err -2) [ 218.827607][T14061] fuse: fd is not a fuse device [ 220.156342][ T12] bridge_slave_1: left allmulticast mode [ 220.156423][ T12] bridge_slave_1: left promiscuous mode [ 220.156818][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.161678][ T12] bridge_slave_0: left allmulticast mode [ 220.161693][ T12] bridge_slave_0: left promiscuous mode [ 220.161786][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.301177][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.305634][ T12] bond0 (unregistering): Released all slaves [ 220.308397][ T12] bond1 (unregistering): Released all slaves [ 220.313913][T14129] FAULT_INJECTION: forcing a failure. [ 220.313913][T14129] name failslab, interval 1, probability 0, space 0, times 0 [ 220.313969][T14129] CPU: 0 UID: 0 PID: 14129 Comm: syz.2.2446 Tainted: G L syzkaller #0 PREEMPT(full) [ 220.313996][T14129] Tainted: [L]=SOFTLOCKUP [ 220.314001][T14129] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 220.314008][T14129] Call Trace: [ 220.314012][T14129] [ 220.314017][T14129] dump_stack_lvl+0x100/0x190 [ 220.314038][T14129] should_fail_ex.cold+0x5/0xa [ 220.314055][T14129] should_failslab+0xc2/0x120 [ 220.314069][T14129] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 220.314081][T14129] ? __alloc_skb+0x5b7/0x710 [ 220.314099][T14129] ? __alloc_skb+0x140/0x710 [ 220.314112][T14129] __alloc_skb+0x140/0x710 [ 220.314121][T14129] ? __alloc_skb+0x5b7/0x710 [ 220.314132][T14129] ? __pfx___alloc_skb+0x10/0x10 [ 220.314146][T14129] netlink_alloc_large_skb+0x69/0x150 [ 220.314165][T14129] netlink_sendmsg+0x680/0xda0 [ 220.314178][T14129] ? __pfx_netlink_sendmsg+0x10/0x10 [ 220.314191][T14129] ? selinux_socket_sendmsg+0x198/0x2f0 [ 220.314215][T14129] ____sys_sendmsg+0xa4d/0xbe0 [ 220.314230][T14129] ? __pfx_netlink_sendmsg+0x10/0x10 [ 220.314241][T14129] ? __pfx_____sys_sendmsg+0x10/0x10 [ 220.314259][T14129] ? lock_acquire+0x1d1/0x380 [ 220.314271][T14129] ? get_pid_task+0x2a/0x250 [ 220.314287][T14129] ___sys_sendmsg+0x190/0x1e0 [ 220.314303][T14129] ? __pfx____sys_sendmsg+0x10/0x10 [ 220.314319][T14129] ? get_pid_task+0x106/0x250 [ 220.314339][T14129] ? find_held_lock+0x2b/0x80 [ 220.314363][T14129] __sys_sendmsg+0x160/0x210 [ 220.314375][T14129] ? __pfx___sys_sendmsg+0x10/0x10 [ 220.314406][T14129] do_syscall_64+0x123/0x790 [ 220.314424][T14129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.314437][T14129] RIP: 0033:0x7fd6dcf9e159 [ 220.314446][T14129] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.314458][T14129] RSP: 002b:00007fd6ddde6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 220.314470][T14129] RAX: ffffffffffffffda RBX: 00007fd6dd225fa0 RCX: 00007fd6dcf9e159 [ 220.314477][T14129] RDX: 0000000024048040 RSI: 00002000000001c0 RDI: 0000000000000003 [ 220.314484][T14129] RBP: 00007fd6ddde6090 R08: 0000000000000000 R09: 0000000000000000 [ 220.314490][T14129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.314497][T14129] R13: 00007fd6dd226038 R14: 00007fd6dd225fa0 R15: 00007ffe735c6248 [ 220.314511][T14129] [ 220.314603][ T12] bond2 (unregistering): Released all slaves [ 220.438602][ T12] tipc: Disabling bearer [ 220.450072][ T12] tipc: Left network mode [ 220.631917][ T5726] Bluetooth: hci2: unexpected event 0x04 length: 11 > 10 [ 220.632928][T14159] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2451'. [ 220.656757][ T12] hsr_slave_0: left promiscuous mode [ 220.660606][ T12] hsr_slave_1: left promiscuous mode [ 220.661580][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.664317][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.763056][T14175] 9pnet_fd: p9_fd_create_unix (14175): problem connecting socket: ./sys/module/damon_reclaim/parameters/enabled: -2 [ 220.780580][ T12] team0 (unregistering): Port device team_slave_1 removed [ 220.795040][ T12] team0 (unregistering): Port device team_slave_0 removed [ 220.933845][ T43] kauditd_printk_skb: 43 callbacks suppressed [ 220.933907][ T43] audit: type=1400 audit(2000000047.181:1157): avc: denied { getopt } for pid=14185 comm="syz.5.2461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 220.948137][ T43] audit: type=1400 audit(2000000047.191:1158): avc: denied { write } for pid=14178 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 221.000971][ T43] audit: type=1400 audit(2000000047.241:1159): avc: denied { write } for pid=14189 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 221.090305][ T43] audit: type=1400 audit(2000000047.331:1160): avc: denied { write } for pid=14197 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 221.151962][ T43] audit: type=1400 audit(2000000047.391:1161): avc: denied { write } for pid=14204 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 221.255010][ T43] audit: type=1400 audit(2000000047.501:1162): avc: denied { write } for pid=14215 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 221.289461][T14223] netlink: 'syz.5.2472': attribute type 1 has an invalid length. [ 221.303152][T14223] 8021q: adding VLAN 0 to HW filter on device bond5 [ 221.315538][ T43] audit: type=1400 audit(2000000047.561:1163): avc: denied { write } for pid=14225 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 221.326762][T14228] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2473'. [ 221.331538][T14228] IPv6: sit1: Disabled Multicast RS [ 221.371832][T14235] key id 00000004 not found [ 221.423573][T14244] fuse: fd is not a fuse device [ 221.427646][T14244] netlink: 'syz.2.2478': attribute type 39 has an invalid length. [ 221.440441][ T43] audit: type=1400 audit(2000000047.682:1164): avc: denied { write } for pid=14237 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 221.451204][T14248] fuse: fd is not a fuse device [ 221.496173][ T43] audit: type=1400 audit(2000000047.742:1165): avc: denied { write } for pid=14254 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 221.904394][T14307] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2491'. [ 221.904479][T14307] netlink: 'syz.6.2491': attribute type 30 has an invalid length. [ 221.956019][T14308] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2491'. [ 221.956076][T14308] netlink: 'syz.6.2491': attribute type 30 has an invalid length. [ 222.009132][T14307] netlink: 'syz.6.2491': attribute type 12 has an invalid length. [ 222.388099][ T43] audit: type=1400 audit(2000000048.632:1166): avc: denied { write } for pid=14310 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 222.692372][ T5726] Bluetooth: hci2: command 0x0c1a tx timeout [ 222.923622][T14333] netlink: 'syz.6.2493': attribute type 23 has an invalid length. [ 222.978315][T14342] netlink: 'syz.6.2493': attribute type 23 has an invalid length. [ 223.127505][T14351] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2495'. [ 223.331125][T14367] netlink: 'syz.6.2499': attribute type 11 has an invalid length. [ 224.703797][T14457] netlink: 'syz.6.2502': attribute type 7 has an invalid length. [ 224.762497][ T5731] Bluetooth: hci2: command 0x0c1a tx timeout [ 224.828504][ T65] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 224.837355][ T65] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 224.841461][ T65] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 224.843409][ T5726] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 224.857499][ T65] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 224.861240][ T65] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 225.221452][T14469] Failed to initialize the IGMP autojoin socket (err -2) [ 225.231927][T14509] Failed to initialize the IGMP autojoin socket (err -2) [ 225.562326][T14532] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2514'. [ 225.837624][T14550] syzkaller0: entered promiscuous mode [ 225.838560][T14550] syzkaller0: entered allmulticast mode [ 225.853296][T14550] program syz.2.2518 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 225.932024][T14559] netlink: 'syz.6.2521': attribute type 30 has an invalid length. [ 225.980765][ T43] kauditd_printk_skb: 33 callbacks suppressed [ 225.981289][ T43] audit: type=1400 audit(2000000308.228:1200): avc: denied { write } for pid=14566 comm="syz.2.2524" name="functions" dev="configfs" ino=9986 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 225.996133][T14569] file system registered [ 226.121314][T14567] netlink: 'syz.2.2524': attribute type 1 has an invalid length. [ 226.121350][T14567] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2524'. [ 226.212388][T14588] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2528'. [ 226.214022][T14588] Failed to initialize the IGMP autojoin socket (err -2) [ 226.228004][ T43] audit: type=1400 audit(2000000308.478:1201): avc: denied { write } for pid=14586 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 226.267454][T14593] trusted_key: encrypted_key: insufficient parameters specified [ 226.298118][T14593] busy [ 226.340374][ T43] audit: type=1400 audit(2000000308.588:1202): avc: denied { write } for pid=14597 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 226.357448][T14601] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2530'. [ 226.439354][T14469] netdevsim netdevsim7 netdevsim0: renamed from eth18 [ 226.512737][T14469] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 226.513808][T14469] netdevsim netdevsim7 netdevsim1: renamed from eth19 [ 226.554007][T14469] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 226.556691][T14469] netdevsim netdevsim7 netdevsim2: renamed from eth20 [ 226.574520][T14469] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 226.578738][T14469] netdevsim netdevsim7 netdevsim3: renamed from eth21 [ 226.589057][T14469] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 226.796419][T14637] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2536'. [ 226.796488][T14637] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2536'. [ 226.842063][ T65] Bluetooth: hci2: command 0x0c1a tx timeout [ 226.923557][ T65] Bluetooth: hci3: command tx timeout [ 227.314687][T14469] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 227.327649][T14469] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 227.337882][T14469] wireguard: wg0: Could not create IPv4 socket [ 227.341628][T14469] wireguard: wg1: Could not create IPv4 socket [ 227.345149][T14469] wireguard: wg2: Could not create IPv4 socket [ 227.378830][T14691] FAULT_INJECTION: forcing a failure. [ 227.378830][T14691] name failslab, interval 1, probability 0, space 0, times 0 [ 227.378884][T14691] CPU: 0 UID: 0 PID: 14691 Comm: syz.2.2550 Tainted: G L syzkaller #0 PREEMPT(full) [ 227.378919][T14691] Tainted: [L]=SOFTLOCKUP [ 227.378924][T14691] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 227.378931][T14691] Call Trace: [ 227.378936][T14691] [ 227.378942][T14691] dump_stack_lvl+0x100/0x190 [ 227.378962][T14691] should_fail_ex.cold+0x5/0xa [ 227.378979][T14691] should_failslab+0xc2/0x120 [ 227.378994][T14691] __kmalloc_cache_noprof+0x91/0x6d0 [ 227.379012][T14691] ? vcs_poll_data_get.part.0+0x41/0x250 [ 227.379032][T14691] vcs_poll_data_get.part.0+0x41/0x250 [ 227.379050][T14691] vcs_fasync+0x88/0xa0 [ 227.379065][T14691] ? __pfx_vcs_fasync+0x10/0x10 [ 227.379079][T14691] do_vfs_ioctl+0xfb2/0x13e0 [ 227.379090][T14691] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 227.379101][T14691] ? bpf_fd_pass+0x56/0x290 [ 227.379116][T14691] ? __file_has_perm+0x336/0x460 [ 227.379133][T14691] ? __pfx___file_has_perm+0x10/0x10 [ 227.379148][T14691] ? find_held_lock+0x2b/0x80 [ 227.379168][T14691] ? selinux_file_ioctl+0xb6/0x290 [ 227.379182][T14691] __x64_sys_ioctl+0x114/0x210 [ 227.379194][T14691] do_syscall_64+0x123/0x790 [ 227.379210][T14691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.379221][T14691] RIP: 0033:0x7fd6dcf9e159 [ 227.379232][T14691] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.379242][T14691] RSP: 002b:00007fd6ddde6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 227.379253][T14691] RAX: ffffffffffffffda RBX: 00007fd6dd225fa0 RCX: 00007fd6dcf9e159 [ 227.379261][T14691] RDX: 0000200000001840 RSI: 0000000000005452 RDI: 0000000000000005 [ 227.379267][T14691] RBP: 00007fd6dd03503b R08: 0000000000000000 R09: 0000000000000000 [ 227.379274][T14691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 227.379280][T14691] R13: 00007fd6dd226038 R14: 00007fd6dd225fa0 R15: 00007ffe735c6248 [ 227.379295][T14691] [ 227.427205][T14694] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 227.493173][T14469] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN NOPTI [ 227.497275][T14469] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 227.498506][ T43] audit: type=1400 audit(2000000309.748:1203): avc: denied { write } for pid=5640 comm="syz-executor" path="pipe:[6938]" dev="pipefs" ino=6938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 227.507682][T14469] CPU: 3 UID: 0 PID: 14469 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 227.511124][T14469] Tainted: [L]=SOFTLOCKUP [ 227.512530][T14469] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 227.515649][T14469] RIP: 0010:klist_put+0x4d/0x1d0 [ 227.517238][T14469] Code: c1 ea 03 80 3c 02 00 0f 85 74 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 43 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 0c ef 0c [ 227.523203][T14469] RSP: 0018:ffffc900055f7950 EFLAGS: 00010202 [ 227.525094][T14469] RAX: dffffc0000000000 RBX: ffff888034939060 RCX: 0000000000000000 [ 227.527499][T14469] RDX: 000000000000000b RSI: ffffffff8bc63645 RDI: 0000000000000058 [ 227.529950][T14469] RBP: 0000000000000001 R08: 0000000000000000 R09: fffffbfff224e3b8 [ 227.532409][T14469] R10: ffffffff91271dc3 R11: 0000000000000001 R12: 0000000000000000 [ 227.534888][T14469] R13: 0000000000000001 R14: ffffffff91271d80 R15: dffffc0000000000 [ 227.537375][T14469] FS: 0000000000000000(0000) GS:ffff8880d5e5d000(0000) knlGS:0000000000000000 [ 227.540167][T14469] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 227.542241][T14469] CR2: 00007fcc40a08398 CR3: 0000000052ade000 CR4: 0000000000352ef0 [ 227.544802][T14469] Call Trace: [ 227.546147][T14469] [ 227.547340][T14469] klist_remove+0x14c/0x2e0 [ 227.548892][T14469] ? __pfx_klist_remove+0x10/0x10 [ 227.550499][T14469] ? __pfx_kobject_move+0x10/0x10 [ 227.552127][T14469] ? kobject_put+0xb9/0x640 [ 227.553583][T14469] device_move+0x12d/0x1140 [ 227.555021][T14469] hci_conn_del_sysfs+0x86/0x1a0 [ 227.556635][T14469] hci_conn_del+0x506/0x1180 [ 227.558098][T14469] hci_conn_hash_flush+0x186/0x280 [ 227.559724][T14469] hci_dev_close_sync+0x5cc/0x13e0 [ 227.561351][T14469] ? find_held_lock+0x2b/0x80 [ 227.562842][T14469] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 227.564578][T14469] hci_dev_do_close+0x2e/0xb0 [ 227.566037][T14469] hci_unregister_dev+0x23f/0x690 [ 227.567618][T14469] vhci_release+0x17d/0x230 [ 227.569064][T14469] ? __pfx_vhci_release+0x10/0x10 [ 227.570657][T14469] __fput+0x3ff/0xb50 [ 227.571927][T14469] task_work_run+0x150/0x240 [ 227.573397][T14469] ? __pfx_task_work_run+0x10/0x10 [ 227.575007][T14469] do_exit+0x951/0x2ae0 [ 227.576337][T14469] ? do_raw_spin_lock+0x128/0x260 [ 227.577936][T14469] ? __pfx_do_exit+0x10/0x10 [ 227.579410][T14469] ? do_group_exit+0x1bd/0x2a0 [ 227.580948][T14469] ? rcu_is_watching+0x13/0xc0 [ 227.582457][T14469] do_group_exit+0xd5/0x2a0 [ 227.583893][T14469] __x64_sys_exit_group+0x3e/0x50 [ 227.585477][T14469] x64_sys_call+0x1567/0x1570 [ 227.586955][T14469] do_syscall_64+0x123/0x790 [ 227.588422][T14469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.590288][T14469] RIP: 0033:0x7fe1e699e159 [ 227.591693][T14469] Code: Unable to access opcode bytes at 0x7fe1e699e12f. [ 227.593869][T14469] RSP: 002b:00007ffc5293ab68 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 227.596470][T14469] RAX: ffffffffffffffda RBX: 00007fe1e6a354cc RCX: 00007fe1e699e159 [ 227.598924][T14469] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 227.601393][T14469] RBP: 00007fe1e6a0af48 R08: 0000000000000000 R09: 000000000000002f [ 227.603864][T14469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 227.606304][T14469] R13: 000000000000002f R14: 0000000000000026 R15: 00007ffc5293aca2 [ 227.609160][T14469] [ 227.610383][T14469] Modules linked in: [ 227.612062][T14469] ---[ end trace 0000000000000000 ]--- [ ** replaying previous printk message ** [ 227.614663][T14469] RIP: 0010:klist_put+0x4d/0x1d0 [ 227.614730][T14469] Code: c1 ea 03 80 3c 02 00 0f 85 74 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 43 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 0c ef 0c [ 227.614760][T14469] RSP: 0018:ffffc900055f7950 EFLAGS: 00010202 [ 227.614790][T14469] RAX: dffffc0000000000 RBX: ffff888034939060 RCX: 0000000000000000 [ 227.614802][T14469] RDX: 000000000000000b RSI: ffffffff8bc63645 RDI: 0000000000000058 [ 227.614813][T14469] RBP: 0000000000000001 R08: 0000000000000000 R09: fffffbfff224e3b8 [ 227.614824][T14469] R10: ffffffff91271dc3 R11: 0000000000000001 R12: 0000000000000000 [ 227.614835][T14469] R13: 0000000000000001 R14: ffffffff91271d80 R15: dffffc0000000000 [ 227.614849][T14469] FS: 0000000000000000(0000) GS:ffff8880d5e5d000(0000) knlGS:0000000000000000 [ 227.614873][T14469] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 227.614882][T14469] CR2: 00007fcc40a08398 CR3: 00000000228ae000 CR4: 0000000000352ef0 [ 227.614891][T14469] Kernel panic - not syncing: Fatal exception [ 227.648358][T14469] Kernel Offset: disabled [ 227.649803][T14469] Rebooting in 86400 seconds..