last executing test programs: 24.271112424s ago: executing program 0 (id=268): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_hsr\x00', 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r2, 0x10000) sendfile(r1, r2, 0x0, 0x7ffff004) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000680)}], 0x5, 0x4, 0x5) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x5, 0xfffffff8, 0x0, 0xff, 0xff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, &(0x7f00000000c0)={0xbe, 0x0, 0x1}) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r6, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 24.090736322s ago: executing program 0 (id=273): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000004c40)=[{{&(0x7f0000000180)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10, &(0x7f00000007c0)=[{&(0x7f00000001c0)="fcef4667434d78cf0973fb59663a86ffd51ba5661be0714943033abc35b9a23a9430ff6034765431c328aa20326037a6983b858400bd649a978a12cbe5b4cac2e5eb3469ac21c3e4c60e8afd24831e802dbe00d110507efcab8406bf6f98f6a1b76323817926028e7b4789859f4dc84656817f6f7088d3a3f8b539c818127738b2e7125c0edb02e19f95ca219f77dd43f467e2b492d638cd37a163493c42e1c54b07d7682a159d5e069d3be043321bb495800f93a1ff", 0xb6}, {&(0x7f00000002c0)="4282be42aba512fe9f4e1c1efa0883f768ef2cdc940b9798a30438d13de1b4b36049168c7eb4132cc4841e54317d9d64bc3495189606edc6c43485d6db77d91aa0d6d2f63deb1f00c4d3e733eef1e0b788cc4f3f149d3351e0d4bafe9ed0bd87ea051a46cff8412be0b87360db77dc8fd23b", 0x72}, {&(0x7f0000000340)="932aa6cf28bc3eaafb27cb5e275c22affd17067b35d9c3645f9a389b5f", 0x1d}, {&(0x7f0000000580)="62ee74a139ea58d634c2358528f233eddc5fee26cc62848a41861df0d613031a8813841adbd9bca47d4de586fff939f1d2292c55083e48c4b1cca4fff733aeeb00e63f5603f75daa0a9cbfc5110561ae0aa8923491a573a0f714ae162a27387f8000bd64a06c90b7406affd1eb6685bbcd6a404e12a796797ccd", 0x7a}, {&(0x7f0000000680)="78fb9403be50942f20e6988d6babf6179b8fd2acff2108cea48acd7727e424141c8ef01dde9104b4a2813474d270578961cf73ed2114d759e81773073e1e81542730a309871f908d9a1ab8086f05a0f5202db2a35f2272df62a27be88d878ad3dccb0c59da040e8aa0fe", 0x6a}, {&(0x7f0000000700)}], 0x6, &(0x7f0000000900)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xd}}, @ip_ttl={{0x14}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfa}}], 0x48}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000000b80)="d1a53e3631de8e2cb9ecb17b938de843f6d3858a58ac0ccda5551c44847a0f5011d5417690a6325a71976b65b1da08fcac5f4957b7cadce8", 0x38}, {&(0x7f0000000bc0)="d274c0b018218fd1aa4ac235887f2f38679306a1f5f19ca299b5d69ac02e203764e0e61a929246bbb289578bb44d0124ebbfbd822f6a1c748237e0838a73ccb5a563f13efce9792d017518b7136d15a16604bc607ac29aaec9486d505f70b668e6696cdeb71f937a6fac37cd94ea2783a1236bfae873fd7a80a13f97d2d5b508276eacac94223b00d8f5ccd2b539493c0227abb0a0842f9bedd1a1605b7f20869f882dded27cc8abc3d551c9c451ed73ed3a38de8a205f8e7c749f40fb3441657e27f617a6a3adead40bd8f0a88aea823eb275081b088e2d283b4b255e24fb17913406edc3", 0xe5}, {&(0x7f0000000cc0)="57c5f1422a61d0fceb6c40b9ba4b38a0a09dedc9e257889de69a8b9d6d5c4697e4b641e6574a6723870b5f18864ce4c557d33cf52364df1d5e33f68a2b3778ba9370c9d9b54841a55240baa3be10e02b41b283907c87772e79f4fe0547e137c174796b", 0x63}, {&(0x7f0000000d40)="5a0c0ca95a4ee8068539f2127a79661d15a8d6f7aa300071d748c5f470a5d0df7173cd87d5fd96f78a934c5b12bd88625468d1b4ca02736440fc91eb193b2cd593069c568e9345218ee6f7f0905ba462386b44d0cc357d17ab14bf02ee2f51785eb18a542aae12464e39024c37203cb272014b46234f52915f7e10d19ccfe304bc61f50bc111cfaf13b2", 0x8a}, {&(0x7f0000002500)="06a24cea0cf41d141883039516b8fc181732b7ffff261cd5051809c1741f08f33c42d789d6aff41bea3f2e27d66dea5b35ea4810dcacca523d6aa0a88421964a2f9d88a845de908898ea2c8b1af6366269ae10165bb0eb1b3981ffbc0312407c967f0b658629cd500ab4935156bbe7e4dd0113f2dce053fdfbb2a62a8e793e5653071d702c81cc59726f78d83083b44803f995557c3bdc99a0219d1470fe9b8e30d3f117d554b3a1688fdcb23c1ca3e6c60a8a8640278e37fa6c90d9c333716ea3aff98b39698d948a7dbf4f905c0fa7a3c9ba049f70013146f817c6745c2d534da007e0451af732e2cda6c0bee53a19cb0a64351425b6400bc24f0be01f50696ea5980ce3cfa2b856340bb0eca7579de03fec88ec339fcdb59cb39f83e7595c7396523e9e8753faa781e0b4844a71d2b88e2f4a7611e8d2a50b9ebca44b0d2b576a2cad8e03a2e1f9e1178a7d90fa86f2b9870ae6f75498a3a17859b356415bc08eaa28a890b7d8def5546213c80483a6f74f0751f26a860b56ed34f2f4a9b0c73589b0d9776bf16a57f83e0f44bb24ad9d6e40f737e0e5e0bf533d2f03c0a96b68d8b3b3af3167c5d79a57a8e0c7754479159769160e575f797008f4efa033624d82b8ff3426947edba3524d3d9effdd2e0a0597e2c3dc7d9102f841a2d7890ec1de62da971a3232b8cf608b69ccd2232c117badccf0f4c9da58390c1af7f7a22d5fcd06c9f0b8b46f034b9dcb388c9544389fa93a5e36fe78c2f1a7dc38b341437857cdbdffd54acd48c75f85d588aeebf503c8f2b2020dedd01ab6d181910f6a003095bd343725376a1ccd76e8dd0e5b268da39ac5b3b0a9f4ca1548bb01293ea393ff040c6d1ba7378f11b06e588e778da94ec465bcf1e8b6c8811cbc40c57d8126b7450e55c6397ec4a2dc50de9b0f45665da3caa95b0bff7d60a58eeac13545b41e87c079cf0c4a6e3365652a587c7e34649fcb6be8c4939d6ae85d5df44fde9bc13766190bf3cbc6c4dcd37d3476405e9853312146250631cb8c94f106fb9e3686643b364cf56a337cf6ebda82a3165b9eb730ba54cfcd405e27f7fda61443e7cf616e5984a68c9455b000be012cb39ff49500ea254548c77f0e3adc3b8ecf710836cfe8b3bdc7534eb784dc7cfb4717c7cfef46ce6293bd248cd92329b5cc3a1ec02595d0b3ae8efff0eb4d9c749f15564cfe40fa75434a3b1ddf5682a768095d46531be8bb59e0726ce59c4115c790c79fd1c20acf47ba776a0de1efe0b62c31a2bf0d3ed29c3b13f2ee74cef4c8f8389f18b36164f62310af07a748c8bdd46aff85c38b73957d0d5a2c81a349402cab7320641a4866fec475c126b802a427c41b77aa603d27a7666e6b03554456308e2cbe7170f828bdbb6d8c9bb2be261ad604449c783f64157686b1428f753b966e67491bf69f3399363da057425b57ca0ad01ff691ee277521259c3c77bcacadfddeb8ced2f4ae8184f6e3630c83e4b3d31a297fc6c99795051e0d180b46946653cc124c7ab5b609f62540929d5b5e21afe20121ff9ec21f26f15ffc4f3a307a070fb4ee6f28ecbba8f6e78d7bfb41a6de4604b2affec1e01674a9749abb471144bb7c5193abad00bdaa2026dfb96d944ec7741c905296a6404df3bbcde4e47e1fe4a4cdfa0eec530d9584fddecf255eb56cd73debcc80c399f88d16036e55606f2fb3356c7f3dabc5c95c55bf47dc3f31b8e03c0b51d878af33ce4f9d46acf2eb29d869921705a8c423af3181d66b0e759d8184abeebdca9a0b4c28aaf82484bea0aea0a778bdc4ba04707378d5295a1d2ee01928400e67ff9c67f9d3c18fbb69d63b07ba258c925e7e83918b56586de564f7c3c19ebb725d577318d94de27d06053c70a5ccfb632299101413aa7c1bca8f035e42e4e832ffe100c236b4b6fcd8e09c55f1cdde20461eee0611932200db75693895fcbd426ba9b5e9b92f9b353bde312af8f8c541ee5050e5036a2d4f4713a32f0f5bfefbb741879c2226d135633d0e437e2310ba331a701c709a1f033e45797581a89deb44f8e221717ee57baab3add1b22e17bce1784f0fbe6b78b3a7c34b9bf1c660b017ab659d6b87d8a4de027bea0b530c4fe3bc15bd305373dd94ab36173b2e53199bb2977e254acea3ad8e51e3e8a111cd7aa1b394f067cd8e83436439133df5ca1fe78514bcb802d5ce3e92fb628f3fd3dcc0c220fc77e853d7e1809c44e2cdf201ca82d9d6e286e799a3d567bcea5c76e0eaf326d70067b9824aa1b4af0ae271ead3dba0894f40eb8314abf9fe757d1f70a039431d8d7fc1ccf7d62e431843ff46e35a66c2bd411fde93443c2d437d41384f0dc16d9ee26e50655ef7f3908eca5ffc685b2b97d0811c5a601ee4c564f421f7d425f780488017655f0de1414336ac9216c057a1142613f334e89e6e6346e22c855e1db224c3c2af665ccf740e2d308aeceacb057cbc6e2315de469fc61e5b38d24556d91b266b531f0b3da1f94c9cd677e2a214d293c139793125278260ae20b0764e4aa8841084cc3caf6965aac507b8b60346c83dbe3779d0b951e8bb947b3c455c98f7338dae7a9e4c3a07ee06aa106067a86ad47db04a12b34a8a9115b0fb04b041f0fc841b2880567ab4f6822c129d1ffb84255931ea492d6cce9d755a465375b2aa5e1a642dd43a0ddc7dbcd7990c04ad49e99708ff9154d0aaa17eca74e5bc1b2a2683d65706dae8b6da99ac68e60f501ce8738cd503c4eef3b06470117c05a8b39b101fb9a202cdf864d522ba0adaad7d2160b4ba50dabf6189559b98285379a1ef9c7c2bc9e45bb1cfef97163f8db8e860a2f3d95e5495b5fd7e816ff054f855c4cf12522439449b7e5fe2d4f46c280f7f6479969d2f4d5c2d660df3e87cc11811d83aaffadac212c758914222f433c65338bd567f6ac6264622141776227bf96f0109d36a961a010066f918a8cc343cd636089985f1588aeaaa1b6841b4da86ff80b4c7854106642644ad2f204e7ee49e8bd5fe112267472e9735c00305ec8a0868be6afe862237ee84fb6f020b7788789cad5f906379e0b93e7ff89684ed0020cb17a4447321c2ac6b00a34ac84202c4ca593e14f0365f96c58cd23fe776099e331541840ea65fdd833f109acb469336afbc19b81880ed68050e65d897596e4a1937e3fe691dbfa86caf015be695997f83e1b8590c629dea1efc5983dd6f2739c501ebcdefe36014fae6dd9b882479711f303037ea9e38bc763307cc75b4a826e4c38777de728408bf7dcd4b8991e82b040d234d683e09f4f3ddef5fd519f788029e1a25f379f456d00ffee27c9e38689316e8190a5d385c38383f6f82e85aa8295514d727eba526c122fd0a56876e4738f9e5edadc4661247f4237e6bf703f5225711ad7a88120c3650ecc44ace2a483fe18f24506fdecb6ac141cb9b03ab1526164cabca6b68e6644fe05f3eeec17ed0162a588ffeb3d85d6704538cb83f86dff2da948ea42ce1c2d72af13b6c9b63d01e5e6ef1dc43d538ca93864d75a4ae9add9053c5f5fdaa409f1b6985e043065219c837ce14bf3d73e195bd7611bc1c56dbe79341c33d369687e368d4f9589ac69b05b0bbe293c4850b62e3433bbf8991d8d23205e2030ede303ee27af3d509db9f13613740fcd9a358a621c42a8085a730d608a8190df88c091d7c18be799a7bdcfd6fbba87772d840ff52dbd163087ae53b225ea5db983f0d2dab979168be21bff3432483180c33b50a7acc6e984682e7f3c0b0bf8bbfa3891718b2314a3bb378d67c74a0ce35214ec60e40433e2b52124c263e527044c5836a0effd8dae11ec09b3e0354561201cc909439c5ed4133979c6c5ff325f7858c8753d27156ca5cdd03fcfcd6d3c41783db2fdec57404223a1ce59128cbc8d0a8cc9ffdd5ee405bf96df3cca5af3b2a3835a05685010e1ef75d3b5991c02b3e172c5d0078d5867594efd7c9a15902c369c6cbdfde988bb0082013561bc0170495a62e29d7726f45aa91ebb2f34b081d4408d63ce93def40be9d7d7ff7e96989a5b38cb65daa0466608ae36a46032cf5e68dfaeb3ff73e9b67a9ec521bbd7159b5db887754438238ab1c25c0976251cb47d9a35f40b84d81a837d2b5a98cd88a0100930bb4999d54a6355cfeb9b47f9d92e9ec31a9b94cdacd9ec9f668f79f45203143ad78abd1413a2c568376aea87d04f2ecf75a8003363297c229a97b1835ffd6e61ca70d263b19844931c5066ceba90bf34ad66679216e8b7e850ee30a14044825fd080eb4e6b15f6d556ff43589127368a3a8eb1557a7a5385f358b138a0a97748f1804d124494fed3a0c691d92426bb81640ffb4784f297e7cf6831cdaed5b01377a4268aa0f7611f09af0f9e1971cf4a4cd850d4cd6fe56e1b09d8ba739ad8db67fef900809f66c913f345c4a1e622a9e727a00df4ef3cba6a77d9ab3d84f62f444dabed9a01764cfe6df427dbc981fc337ded55b0bdd2207c3a640820a295396354993ec950a6e13b18330303022c5be8c3a41ce2aafde760cb14189ba0f02abaa433528d73c59716edbcfe044730c14118126b67c5c8bfb5f0eeeb6abb08a7d5f19a2c32976bc4642b5afcd3f7aa254b4ee900e2fd93409bc84aaf602c2bd25941119f1f8eb001f54430458db1388693c3360c732d79dbfc5b4bab8f32073407d890ad5f3e5a98db5478ddf1a9fd1397d593769c1b5aee15f03eeaa1a953e296c0a5b927c4c25544fbb9a9fb51d39c7ab7f64a3c7f5083abb62c1a1ae3719ca920ee107bacacbfc90ecc8c3dcd90413b88e0d8766454ffd526a7373767c63a273f9ef94cf25bd6c00aa40037aa32e408cd08ac6f9b36e8090fde4d823eac2f635a62480ecf6901553cbc4858ae0653dd3248a528a138a65fc1a0dd5e4bdd9226890a1a2580e19247a38a72816b4fb41a2e9df9cd2c48f752fdf3484bccdea615894b9d1d3a21d225db1da358f4e10ca35ad9b4bfafc2b66d31b3fb0ced38657ee524336438bd7edbe3b223ce0eff367dee0ebe790c1e16916f388258a1ec001150d759bf3895a146d6e32bfabdf17cec080c03d6cb60f5209cd7d8cb601bb7946a39550ee0ae674e7ccef98b50ddf1490e62cca1efad234375acf9fe7da1a42d660651502344a782ef1ecd31516dac2b6a76688acf2290088a476d25b50681c1889b357d7547f5c666ffcb5df2f92a3a228723fbd4ea2b3ef1c842e5f7bdba983f57a9a3d0ba3097089de7bf4188f8f7c43f2fa7e42d841b3de72fd331897e52c632d9348f6a5c99a59652b380e5b4c9d686fef9524b5c1a115ec7f7779a93f1c61c27fb337937555715cf01ddb90223f2defc4aff6aae0c89e33e45fe3e44514c99a3155690fdde9034c6fd39392129230206ee52202e39fffc4dc4ce29a9eab1309c324ea334f44e6d4cd989633d2823bc4f2f77f85ba235c24dd6f355d77e76344eab329fc5208b89bbd0758557068d6b2c4292313a3f992c2f15a73327325aad724b51e1a26783cb3abb270445776362797eca0f30f2ce8a9dff38956574cc07d596e5580df47158391712c8ae5764ff3740c8635de5f551a164b1d59ffadfebbee8ce3a2f26e8abc394b99438728e798418f46455e6b322b8cb20ee2229e5d4aadc4493f692d7ba24fd7372b4f733aeb93d898f3f7330dcddca79bb1ce458dfd3f155391b66ce2196623a5ba360fa628bc3321b72372394a80dbdfd2c6c863aedcbb400bfdac8c23bec5c420b86a9e1b2444e0cf0bf7f6d9302cadb6faa333d2797cff467d1c4627db914724", 0x1000}, {&(0x7f0000003500)="b0db87b35f622f786b909a83f88c663c0d989414a1e26bfe91b32b7fff922482ae3ee6df8fd06d476969908db044c2ab0df6500110d2df1bcea2e14edb1154119168e69687301a01613dca73715964ecd21b2147b4617d5ea854be0b5717d80dfeea0f7da889adc5a239932da6d0890ca0e17ef3fb1daa4eedd0242a31eae5dac8d9e95f17da4c3e2a", 0x89}], 0x6}}, {{0x0, 0x0, &(0x7f0000003980)=[{&(0x7f0000003700)="b7cdba8db70681d2f01078e2ff4e3d2b8a4165c7d62b27ad51b53f986a6f4e09bb5e2c1f9381bfdb1f8a56d65caa4d1c9731631be9a969655d22113f88f953621323689d32c1e89209c69f553a86409e4a0a64121b28b4d48c69886c2ba537ba5500bc8e3ef56a819fe2f09710c5135cbeb303a7f5bc78d4bab73dfd22a04274e319f21852e5b0d1a3f81b857cec86255ed4b5521ae6cc17eecffad4fe45f49528dec99aa601d8bda23c178a1c823e7a1cf7b1130ccfb0424882a992e89d0e", 0xbf}], 0x1}}], 0x3, 0x885) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000a80)="005bd59ea6e8b3e0e917b21f7ed0cd7b84ced4929f916ac305000000000000004f6dcfa6e816645a5c9dba071ed15f985b8352928ef8ebdb06be85dfd44b6103316367a66294fd7fca2b79e815bf4cfdc6ff0ff960aed1e1f393bf8be3a69838e572a8be740246b05ad30c0c2f0bd9015a8bc6ac592e0230c5fbd6746996689cd656b1e562b23ab7018c8bc0200fe5ba03a24c594176033170c9084ad5477dd5d3c8fc19d9bb706fe824dba5a0c82ac91c013a0060b74b21214c153173924c7718cbc4995c4b759eb4ee6c86c12d448dab3360b579b1f32b3c638fadfc08b850b8dd5ec65d809ad6046a01b0dc9b45799170f473", 0xf4, 0x10008095, 0x0, 0x0) 24.011185605s ago: executing program 0 (id=274): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES16=r0, @ANYBLOB="b43d43e34c6e59c7b9e8700422828a2c30c127f19e01bdd197568d0e37878b62199c7ab3df5bfc3d4e1997fcfd5fe692fcd7e68c57f1cec11f3a6a7f0016b87e7d9c872d5a53f8ea30f0204285737954ade9ee3d0cd2d0d8ed95237644e773f3566cd672c93852e11bb7888ff74747f9cf24679ae1f56fb33843851927a85f8854a7751922229edccc0fb9892d94116c32f621d45cd38c8b687868d0edf2c155513eb55edf8384100b9725889a172395e501f5797653966587e50fab9c358a8d7ce76c1deedf2a14fc0654f15f5d9cc31e424ed5faef86040fa492c2b69ca1942a4290025f78de85f3"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r1, 0x0, 0x0}, 0x20) r2 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@quota}]}) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x3) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r2, 0x1, 0x0, 0x2000}) 23.950600184s ago: executing program 0 (id=276): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, &(0x7f0000000400)={0x28, 0x2, r1, 0x0, 0x0, 0x0, 0x1a7}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40086602, &(0x7f0000000000)) socket(0x9, 0x1, 0xffffffff) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000002b40)={0xe, {"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", 0x942}}, 0x1006) symlinkat(&(0x7f0000000200)='./file0/file0\x00', r2, &(0x7f0000000240)='./file0\x00') 23.848910986s ago: executing program 0 (id=277): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080), 0x1) sendto$inet6(r0, &(0x7f0000000100), 0x0, 0x2404c8d5, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 23.592024963s ago: executing program 0 (id=283): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000700)=ANY=[@ANYBLOB="500000000104010800000000000000000a00000808000440000000060500010004000000080005400000800008000540000000030500010001"], 0x50}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000040) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r1, r1, 0x0, 0x2000fb) 23.50719867s ago: executing program 32 (id=283): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000700)=ANY=[@ANYBLOB="500000000104010800000000000000000a00000808000440000000060500010004000000080005400000800008000540000000030500010001"], 0x50}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000040) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r1, r1, 0x0, 0x2000fb) 7.597436673s ago: executing program 2 (id=538): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) write$UHID_INPUT(r2, &(0x7f0000000880)={0x8, {"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", 0x1000}}, 0x1006) write$9p(r2, &(0x7f0000000840)="d7", 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 7.58365745s ago: executing program 2 (id=539): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) write$UHID_INPUT(r2, &(0x7f0000000880)={0x8, {"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", 0x1000}}, 0x1006) write$9p(r2, &(0x7f0000000840)="d7", 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) (fail_nth: 1) 7.519047161s ago: executing program 2 (id=541): r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002004e20e0000002"], 0x190) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000540)="2deafb41ac54b8c17ecc776a333ae032c2dbc6ab4df474bced3e71d771809b9d1bc766b79e6d2f8bd4b680f8148a9df1de8efc1056d0c0bd72634c8ae34246a366ea47bfeb4b91d5be84ecc1cc0c5260b5351d9c6b72cb78fe7991e8dc25846f0ceea953485051b2bec319620ac66b6310c1131c2062cdb571f9d434bb87cf380c05de76734d1dcaa7d87b7f248f0e9a86614fa1ddc2471d814698d5917014a2cc6210ad55663dced2cda8b19d4756c7", 0xb0}, {&(0x7f00000000c0)='.', 0x1}, {&(0x7f0000000640)="a568861a8f2c5d186483b095dbe059a659e63626dc283693216e022c9ef3e6402e9cbef1d33b41f403178c06063949ec051c66a20765e7a51182dd01aad0c354fdb737b3fb103863fbe5d8a481e0f8e0e3f9086e8bffe7cf5f1b7a986b2bb28514e4d745fadea42769ede34d53b312f4f822c3202e9823dce8d4fec55318b6d4117468d5b7c466cfada70b78dea696d57cd4fbbae07b3f6568458a007c7102627c36e66c0691a8155aaa9ad0cbfb39d47020f8b8231099e7b9243f165326ef32f72cf2cbf86b7c1d61eafaf84c933d7fcd87f6bbb1b8df6b442441f6f1850850a7", 0xe1}], 0x3}, 0x48043) r5 = landlock_create_ruleset(&(0x7f0000000300)={0x1c2, 0xa, 0x0, 0x6, 0x3, 0x1}, 0x30, 0x2) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000500)='wg0\x00', 0x4) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r5, 0x2, &(0x7f0000000340)={0x8, 0x371d}, 0x1) r6 = dup(r3) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r7, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000001f00)={0x30, r8, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x80000000, 0x1, 0x1, 0x5}}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r6, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x1c, r8, 0x100, 0x70bd28, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x4000004) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x40}}}, 0x20b4, 0xfff7, 0x3, 0x2, 0xc5, 0x6, 0x6}, &(0x7f0000000440)=0x9c) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000480)={r9, 0x8e7, 0x10}, &(0x7f00000004c0)=0xc) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x20, r11, 0x60b, 0x870bd2d, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}}, 0x0) write$9p(r6, &(0x7f0000000840)="d7", 0x1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 7.45123449s ago: executing program 2 (id=543): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchmodat(r1, &(0x7f00000000c0)='./file1\x00', 0x0) unlink(&(0x7f0000000180)='./file1\x00') mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x20, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newtaction={0x8c, 0x30, 0xb, 0x5, 0x0, {}, [{0x78, 0x1, [@m_ct={0x74, 0x1, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @loopback}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8890}, 0x40) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4043, 0x6f) open_tree(r0, &(0x7f0000000080)='./file1\x00', 0x80800) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r3) ptrace$peeksig(0x4209, r3, &(0x7f0000000140)={0x500000000000000, 0x0, 0x4e}, &(0x7f0000000fc0)) linkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file1\x00', 0xffffffffffffff9c, 0x0, 0x1000) ioctl$SIOCGETLINKNAME(r0, 0x89e0, &(0x7f0000000100)={0x2, 0x2}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x6e, &(0x7f00000003c0)=ANY=[@ANYBLOB="bbbbbbbbbbbba617c17719295658b9127493dc033d323e70d25ef95987b38fa6180e0d5468ece92d86dd6002adf700383a00fe880000000000000000000000000001ff020000000000000000000000000001020090780000000060fd906300003a00000000000900000000000000"], 0x0) 6.581581973s ago: executing program 2 (id=566): openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x42, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x81) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2a1) 6.350243802s ago: executing program 2 (id=571): openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x42, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x81) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) (fail_nth: 6) 6.251002888s ago: executing program 33 (id=571): openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x42, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x81) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) (fail_nth: 6) 3.783170598s ago: executing program 4 (id=609): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000001480)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$XFS_IOC_FSCOUNTS(0xffffffffffffffff, 0x80205871, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'vlan0\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x68) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000001c0)=ANY=[@ANYRESOCT=r0], 0xdd12}], 0x1, 0x0, 0x0, 0x80c1}, 0x20040890) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0}) r5 = dup3(r4, r1, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_PREFIX={0x8, 0x2, 0x1, 0x0, 'log\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x1, 0x2000000, &(0x7f0000000b00)='X'}) ioctl$RTC_PIE_OFF(r5, 0x7006) open(&(0x7f0000000300)='./file0\x00', 0x42c3, 0x1) open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x140) epoll_create(0x4) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000100)={'bridge_slave_0\x00', {0x2, 0x4e24, @private=0xa010102}}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 3.500915223s ago: executing program 4 (id=615): sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x48885) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)=0x800000) r1 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000040), 0x142, 0x0) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000440)={0x3, 0x0, 0x98, &(0x7f00000000c0)={0x400, 0x1000, 0xd}}) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) r2 = socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x894a, &(0x7f00000028c0)={'ip6_vti0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000080)="b2e1257055fca37af52fcb156610b54ae7a06c62778f334d159daa70c8335ccd073fd0fbf3de32d7816cb566bdf5", 0xfffffffffffffcca) 3.3608664s ago: executing program 4 (id=619): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0xfd, &(0x7f0000000400)={&(0x7f0000000440)={0x30, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x1d, 0x0, 0x0, @binary}, @nested={0x18, 0x9, 0x0, 0x1, [@typed={0x14, 0xae, 0x0, 0x0, @ipv6=@local}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x42804}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001300)={0x14, 0x2d, 0x8c7c251b32d84713, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20008040) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x22}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1808000000000000100100000d000000aa00000069000000180000000000000010010000010041e3f6cf424747f96d8611348c0876d60b12b2fa9c"], 0x30}, 0x4004005) r3 = socket$inet(0x2, 0x0, 0xf83) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x48, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xd}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "758bcd936fea094f473f4c4a65c12e40"}]}}]}, 0x48}}, 0x0) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0xd0f, 0x470bd30, 0x25dfdc01, {0x60, 0x0, 0x0, r8, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf, 0x4, 0x2, 0x81, 0x0, 0x6080, 0x40000ef3, 0x1}}, {0xffffffffffffffcf, 0x2, [0x7]}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x440c0) sendmmsg(r3, &(0x7f0000002840)=[{{&(0x7f0000000140)=@hci={0x1f, 0xffffffffffffffff, 0x3}, 0x80, &(0x7f0000000600)=[{&(0x7f00000001c0)="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", 0xfe}, {&(0x7f00000002c0)="ddb236a02888e45ebe86da5ef92c892c50f1a4214925abb473b6bd3bf5186fe206551fd99635c99a0d49903479c908021fb7c6b73df9d9fed4a42371dae59d8e1f5a0fb458c789ebb25383afcd6e2a65fca7ad83344676854723393bc3dbcf029acefdbb23d519c5c91ae0351dadfd31fd0afa94b91ba7c0295caf1eaac256131efaac17a1f0a98ae67d03cedb3c6297092c5e80b7de32707da60550e12f72ffe45b6e06973c96b4c16091e13e57ed379b3ad5964d6a2b1db1afac090a55080f1d428d48da421e45a27d577ab741ef76c23c41dac0bd20916f59fc6e935201d2aa2491eb6cce735175d7d95aad1dc0e74f", 0xf1}, {&(0x7f0000000480)="b43bf803113c8356652559a750e6ac94fff3127e5d8fb1b72f32bfc7eeb1f31997f8ca2ba6b7f361702eb892a326fdb6d443c298a18694219999aa782b3ef984c0d0c3be0cb4a662a57b9f0201c46588ee59d9ec8956d7764f82cd8331b094a399c4c82747f3b515cbcc2d1579cc55b6afb28443722904ff353befe05e80f4f5e0", 0x81}, {&(0x7f0000000540)="da27126cc18548c099ee9064e452190071bf6bf2f87b4210f9a7a15f990d3d7f825d46ba7bf3657c0bd11d264eaf247d3a0649b518106fc505aa1e261b1106dd1c8f9c62aad1c9e35c4a002ed07b9ec91cf603f4ac1ac922b19e31df1f240bae1e870f05c84b36edd9ea55c55e23a4e1f7f2f6f302cf6f4c801083463316a2cb3f19370720167f6fc2e9baa3cdebedb8948d929e32f4b2c8eb810de56a4d6f", 0x9f}], 0x4, &(0x7f0000000d00)=ANY=[@ANYBLOB="b000000000000000ff00000008000000752588f4798477fbb242c353a90c2899fbb594a82c2a967f2015e92e15ea38039b5a371313ea8140463336f0c26d558815ebb0eb18092251dfbda24f3fb73e99795ce28e3f74ab366751bd2b7d2287ad2151af4154f87d061ded9edb5a67f8f92f64fa17a41df5367e598a2aa9bd20eb6b5c8b35ca87687760a5ce5dbd51eea4943146d8950a616b085bfa26dd8fdb066778f570a5586123b954526dc4346ca174420c90e712099302650020000000000000e70301000004000000a803c6ee57dfb949773cc826cc14adb7c0000000000000000101000008000000f22c2155eb422be23f19386a0ca490932288fd43d72374cf53a8ef161a82c9ca632bd1fa765f0d4d1ba99780080df9099e6840979cf33b04cf0a79cae7278892112d545d7b5c1e09cd36848bf05d95b7f74e76f20b4eb3146d783af794686f06098006850755d3fb3a761dc7e871e9c57e910b6c51d644c05908fe74bd9562be14cd4b308c144d06625d2981e8b6f6a9c93ea082c2ddf9e79ba304d4c2e29ef3087e8e51fd94c21c49343002195b00004000000000000000290000000a000000dde8942737aada447b0b81c8a6193c11ffacf4beee4b3fe2881bd8e056bad12d796f0305f108a695a6737848000000003c2598fa451e1fdadb2a9c2a1792b2a6260790cf7434a0d15833fbf7fafcaccf728007d505dc3c0a1077271d8e38f672c5bf978da506dd67bce6936fb40177f3d79dd5f02b7f95d665a8b596dbb096bb1f7a6ee800104bd1852e64064400c22a26ec04cc6c57689fb41b024c2b7907c68e34c0563b747623cd026122ecd90dea4433505a3191a93c0ffc796d78015c5e6749c436b8c3b01ed5fcc43fc3d7660daaca3b9b9c04a29c1577ce99"], 0x1d0}}, {{&(0x7f0000000840)=@ll={0x11, 0x1c, r5, 0x1, 0x6c, 0x6, @multicast}, 0x80, &(0x7f0000000900)=[{&(0x7f00000008c0)}], 0x1, &(0x7f0000000940)=[{0x70, 0x3a, 0x7, "e7fe90029144df0aac9b8997118593e91bc0236cb590f9b852eda8f354d21ed25481377096b00d00d7da924bb403317d9345e36a183006a10c2191997578d65faffb58ed3a83027a88bae6199c22864ebfa608558eddfdc8dc92246e07f6c7"}, {0x100, 0x110, 0x6, "f1341c739c070d3b339ddb4e143c63e0a7dead1eb38a6a3d71ccb68286ed22da0db900a8ccceae79b0bbc034026e7db75866e48239dd9e55a0b2b43b743e4c0cf9a98a3a8f2ca0bba696b3926abd0913e3735f8e5d1a8b90eb46aa8fbe3aa865f86d5b848677a05f45df3496624fbb5ba5bed487dd8e50585528b989ac80e4636b60ecd9a48304868b000d0b68b03b2c564c60a65d87457ee08a189a1c8764dd3f4dc02ff37dbf392a95793ebd6bb932ddf988ec2903697fd0681187c7da48762ba92cf49ef4b487b42c968023cedf1befe3951a712bfe3c6ed5a0d70c0a29f3f2b3fceb2b17db1b86e07a68d5"}, {0x48, 0x102, 0x3f, "7200fbac67430082c2c82b06d6f24a36a2de289b4a7f3b58bf2c1ffff81358bf69a2981b16592d4115799ef195d7fc1704"}, {0x78, 0x112, 0x597, "0902122c86817d03dfd6d2cdb03c0cd4a399763092a7eb19bd0fc343a459d66eba6a874266317fd4b68912daacdd1afd59eaf66530de40d794480ce4b3316800aa078ddd4bcccce08113b536bb745cc595cad1241bdc03da9dcc97496c42abd06d"}], 0x230}}, {{&(0x7f0000000b80)=@can={0x1d, r8}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000c00)="8f08f3a83d6538b28ce19fd6483e128667150e685fe2bb34f56332b3cd996f672e07a5de09a640c2e4ce021fec153b4f", 0x30}, {&(0x7f0000000c40)="cc496b5f2333a0ebe38454c4ec9ef2ebf5d8ede4a7a02fa224e516f3654c9b53fe173c21816ca947ed08801aee6f36b6bf277d51a5b0d5a1317cbe55cd76ce0e057f35acd4d01e7171331389c8a68b5e23dbfb11847285547fcf26e45374d22eff387c25410abd851f6289a056ba9f1f2b3c5ea1e57c6826c5", 0x79}], 0x2, &(0x7f0000001440)=[{0xc0, 0x111, 0x9, "fe19d59fb44db4c7883ced1e5642fc3cf1bdc8911154f2b7a6349f0dc5eefa9a9f8123394e8965a4b9b754e8dd63c1fd62cc82de2f7b65dc33888b200014b72d84a6dfc2c22f504c3a649c44a2489fdb7781f329d3a5b61299bd44a436dcb1f6b30fa6f5fcef125565edc2617bbcb591c56807fe9607bab10ecddf5be448d7a93ddfdb00ab186116f252d42ed827b986ce3b1c84efa2f5540e5a309d90934e944cb4b68f43d3e6223de03c3a82a468"}, {0xc8, 0x118, 0xfffffc00, "1b7dd0a3a5d73a09a541f0661ba809b9cc2a301aa91a39a661a4ef40d5c709f4045c1a7e4b47327255445b182a54a503e7a17cdbe7dc62748a05d081f0807ca4a50f1aeb3f07f897698ab41da6f8cfd0a431b9046cab54197b50d27fef674368e89d25fbaba3c4c83cf67c17538a37f60ae53568d08d615ce3b39e8d8305de66cc5001e4e5c69a9c9824baac36b4ac4c51b806e878e3eb4a25a2eb5dee91b43a73cfd8b604e0d41032382968d97045591e485e7c8769"}, {0xe0, 0x109, 0x7ff, "d2bd694cb58e9792493e957a5fb0e982f7dfc37926e7acbe878ab4c15dfbbe5ac9814069a5c1261f31fd47b69796d64220303422fdf4a2c93bfc30a5401ef5b79acc3dfe17a1ca261f69af98e475f6de629fa5c5c44f45f50a32e0e8f27419f05dd1058d9e8e6b4d43e12bca9ff6d9abfc4a206f2c4965bb91f76c296ce125690e2522d5e5e38f79740638afa7faf64bbff08c7084b6ed3701832cab78047c7901d876dedf67a243f65dde13423e796d0faa4f2b72ebad8f6a4e4652c2b31b4cf0f3edeff0eafc396e3dacae413d07b2"}, {0x100, 0x10d, 0x7, "154d0784afa06804014d83a098da697399dcb00a7c6f0cca73cc71e66524efd09c787e0a4718e3fefdaaa2446aca661b53790b5b8d35cd348aeb2ae50afd6e7cc7209a5fc4a1b07b85a23be917fc0bc2ef500600435d35400233937966dc32cabb8c5bcd728738d33fda18fae3b41ea1e9f307bbdbaa495f3444fcaea985d72d368ef3c8bece879f7e81c57067a60bfc85b416cb9cd3762c0c21118d3060a2513b5b682f8a273f49fed6ff6f1c4cddcfd8a863ee868d7359702b30a4d4f1822ee10865c377c6ee65c7c67a2af8dd9d1d2b3565442fac93abf2af84400c9283cc25e808469a94eb5bf1819ec830"}, {0x78, 0x88, 0xc431cec, "7aefccbb5ebd2953e74c229d0c720343cc0128a8bbe6e51dabb669a4d5b05667fef06b5a58dbdc4598a8a16ab86e3895addde13c435ad36e89ef7d81b38b5e0686f80858e92132e0d8ac8f1ab3fb2488c30ac4a9a531736ceb18cb8a285f71ed618b0359"}, {0x1010, 0x84, 0x3ff, "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"}], 0x13f0}}], 0x3, 0x841) 3.227795789s ago: executing program 4 (id=625): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) shutdown(r0, 0x1) request_key(&(0x7f0000000080)='trusted\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22903) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0xf3, 0x1b1c07, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000000)={{0x80}, 'port0\x00', 0xbf, 0xc0006, 0x0, 0x0, 0x0, 0x4a9e47b3, 0xffffff3e, 0x0, 0x6}) 3.15010635s ago: executing program 4 (id=627): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r2, 0x5b02, 0x0) (fail_nth: 6) 1.348251642s ago: executing program 3 (id=655): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f00000021c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[], 0x3, 0x880}], 0x1, 0x80001) recvmmsg(r1, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000240)=""/12, 0xc}], 0x1}, 0x10000}], 0x1, 0x102, 0x0) (fail_nth: 1) 1.211169928s ago: executing program 3 (id=657): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000040)=0x1c) rt_sigqueueinfo(0x0, 0x3c, &(0x7f0000000000)={0x30, 0x6, 0xfb2}) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), r0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x2000005) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x86b40, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) ioctl$AUTOFS_IOC_FAIL(r5, 0x4c81, 0x7ff) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, r3, 0x80000}) exit(0x7) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) getsockopt(0xffffffffffffffff, 0x200000000114, 0x271a, 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r9, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2800000011000100000000000085ff00003f048cbcf20000000000000000000008001c00"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYRESHEX=r2, @ANYRES32=0x0, @ANYBLOB="000000005f4c7b0c1733bb247d00080000001400350073797a5f7475fd71f7824137f3c92fa841bb8af196b26dde4c6c4426799a893b53746e0000000000000000000500210005000000180016801400018010000200f8ffffff7106000007000000"], 0x54}, 0x1, 0x0, 0x0, 0x5}, 0x40080) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r7, &(0x7f0000004900)={0x0, 0x0, &(0x7f0000002400)={&(0x7f0000004880)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="01002cbd7000fcdbdff14b0000000c000300", @ANYRES32=r8, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x24000800}, 0x800) syz_open_dev$sndpcmp(&(0x7f0000000300), 0x1, 0x203) syz_open_procfs(0x0, &(0x7f00000001c0)='net/snmp\x00') 1.091156086s ago: executing program 1 (id=660): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x1}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}, 0x1000000000000000}], 0x0, 0x0, 0x0}) 1.011305002s ago: executing program 1 (id=661): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x40001}, 0x881) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x13f, 0x3}}, 0x20) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0xffffff95, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) r2 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) preadv(r2, &(0x7f0000001880)=[{&(0x7f0000000380)=""/153, 0x99}, {&(0x7f0000000440)=""/255, 0xff}, {&(0x7f0000000540)}, {&(0x7f0000000580)=""/220, 0xdc}, {&(0x7f0000000740)=""/172, 0xac}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/93, 0x5d}], 0x7, 0x5, 0x2b) ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, &(0x7f00000000c0)={r2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@ipv6_newrule={0x44, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x10, 0xf8, 0xff, 0x0, 0x0, 0x1, 0x1000a}, [@FRA_SRC={0x14, 0x2, @loopback}, @FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'rose0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x840}, 0x4000000) close(0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_macvtap\x00', 0x10) 1.007565591s ago: executing program 1 (id=662): write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi2\x00', 0x1, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x202102, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) fsetxattr$security_selinux(r0, 0x0, 0x0, 0x0, 0x1) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000040)=0xf4a6, 0x4) epoll_create1(0x0) pselect6(0x40, &(0x7f0000000080)={0x0, 0x3, 0x7fffffff, 0x0, 0x0, 0x0, 0x200, 0xfffffffffffffffe}, 0x0, &(0x7f0000000100)={0x18, 0x1, 0x0, 0x2, 0x0, 0x0, 0x5}, 0x0, 0x0) 479.224111ms ago: executing program 5 (id=665): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@TCA_STAB={0x78, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x0, 0x7, 0x101, 0x0, 0x2, 0x80000000, 0x2}}, {0x8, 0x2, [0xbf, 0x81]}}, {{0x1c, 0x1, {0xff, 0xf, 0xfffd, 0x6, 0x0, 0x2, 0x43, 0x8}}, {0x14, 0x2, [0x10, 0x1, 0x8, 0x7, 0x400, 0x9, 0x7, 0x10]}}, {{0x1c, 0x1, {0x5, 0x0, 0xfc01, 0x2, 0x1, 0x7, 0x3}}, {0x4}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x24018840}, 0x40d4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r4 = dup(r0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) unshare(0x40080) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/time_for_children\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0xff}, [{}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {}, {}, {}, {}, {}, {0x4, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x1000000}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x3, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x5}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x200}, {}, {}, {}, {0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x8003, 0xbffc, 0x0, 0x5, 0x134, 0x48, 0x2}, 0x9c) write$UHID_INPUT(r4, &(0x7f0000000880)={0x8, {"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", 0x1000}}, 0x1006) write$9p(r4, &(0x7f0000000840)="d7", 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 387.866509ms ago: executing program 5 (id=666): r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000180), &(0x7f0000000e00)=0x68) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a80), 0x101200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f00000000c0)="c4a17a100d0f000000c7442400a8000000c74424020a961cecff2c24b9880000000f3248b800380000000000000f23c00f21f835000004000f23f8b9410101c00f3248b800000000008000000f23c80f21f835000060000f23f866bad00466ed66baf80cb8fe6f3183ef66bafc0cec2ef30f09c4e175df0cce", 0x79}], 0x1, 0x14, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000540)={'batadv0\x00', 0x0}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r4) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r6, 0x83625fc5352ba305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x20088c4) ioctl$KVM_RUN(r3, 0xae80, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1f, 0xd, &(0x7f0000000100)=ANY=[@ANYRESDEC=r0, @ANYRES32, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000001100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x59}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) io_uring_register$IORING_REGISTER_SEND_MSG_RING(0xffffffffffffffff, 0x1f, &(0x7f00000000c0)={0x28, 0x1e, 0x0, r7, &(0x7f0000000040)="4f0843c834e3ddf7da403843243478971ec49dcb71964aa4e82171975c2cbfe9ed16e3378da2aad0d5f91072a2fb4a425a148280233abbcffe6ea1bbc39217aa8dff347cd461eebbcc014e2bb92ecf06c89689cc214d", 0x0, 0x8, 0x1, 0x1, {0x0, 0x0, r7, 0x99}}, 0x1) 387.393778ms ago: executing program 3 (id=667): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000004c40)=[{{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000000b80)="d1a53e3631de8e2cb9ecb17b938de843f6d3858a58ac0ccda5551c44847a0f5011d5417690a6325a71976b65b1da08fcac5f4957b7cadce8", 0x38}, {&(0x7f0000000bc0)="d274c0b018218fd1aa4ac235887f2f38679306a1f5f19ca299b5d69ac02e203764e0e61a929246bbb289578bb44d0124ebbfbd822f6a1c748237e0838a73ccb5a563f13efce9792d017518b7136d15a16604bc607ac29aaec9486d505f70b668e6696cdeb71f937a6fac37cd94ea2783a1236bfae873fd7a80a13f97d2d5b508276eacac94223b00d8f5ccd2b539493c0227abb0a0842f9bedd1a1605b7f20869f882dded27cc8abc3d551c9c451ed73ed3a38de8a205f8e7c749f40fb3441657e27f617a6a3adead40bd8f0a88aea823eb275081b088e2d283b4b255e24fb17913406edc3", 0xe5}, {&(0x7f0000000cc0)="57c5f1422a61d0fceb6c40b9ba4b38a0a09dedc9e257889de69a8b9d6d5c4697e4b641e6574a6723870b5f18864ce4c557d33cf52364df1d5e33f68a2b3778ba9370c9d9b54841a55240baa3be10e02b41b283907c87772e79f4fe0547e137c174796b", 0x63}, {&(0x7f0000000d40)="5a0c0ca95a4ee8068539f2127a79661d15a8d6f7aa300071d748c5f470a5d0df7173cd87d5fd96f78a934c5b12bd88625468d1b4ca02736440fc91eb193b2cd593069c568e9345218ee6f7f0905ba462386b44d0cc357d17ab14bf02ee2f51785eb18a542aae12464e39024c37203cb272014b46234f52915f7e10d19ccfe304bc61f50bc111cfaf13b2", 0x8a}, {&(0x7f0000002500)="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", 0x4c7}], 0x5}}], 0x1, 0x885) sendmmsg$inet_sctp(r0, &(0x7f0000006240)=[{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000380)="814c594d0bd78f542ea6a16cec7785d432e2f8a665a1968faa5d7b0517bec0169c184f9ad000641ab638f707ba01bd87f403d521f2c4ea80d483c6e7709d741f7525d98c7a2d029f8e6f13003417a90a9d4b3b9be5510b7e12246be2714983cb18c82b4bc716ea5f50b26463b53aa2dab41dbd7135c862ac612c19892b810ca51cc005af6bbcbc9430e06f59cf75804d62df7ecbacfa0a6c500b541c8ba3d7958fe338b7c9d9eecc39328a7cf84cf20fa0e26fc9b2a305de84adec380f24ddb80c043333895aece33ff72f6bd0abc14bcfb340cfd7891ecf601421b795eb664019bf74add4c1481f1e47", 0xea}, {&(0x7f0000000480)="cf4a1e93489489671fe50f83a397f0db2f33d454d616b2009ba858", 0x1b}, {&(0x7f0000000500)="872daa3013c515f04108fccef6f8f95e34015799685768823dca2ad088b3ff94ac7a5b", 0x23}], 0x3, 0x0, 0x0, 0x20000000}], 0x1, 0x20000000) sendmmsg$inet(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000980)="91f8a9849519def28691bbc4173c3d6f357d0272b7e95a136b3ffec75b73e6937b7b22a1319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000f2ffffff2e3591ceb1757de97fb25500620d0d30506e7429fa5337b74945da657f", 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000880)="b527ce144a9e865255e6f85f4d18156225c3396c992b47cedd740a6a6c3c82aba6b56bd441a6dd0856d664fb959853821ce9917ed023550816ba4b21413e5e7c41c7e2197da810d26109c4572ec3dfb28073599772cf3e04b596b22fce7db25609f21c6da4db35a48c20cdfa45bba5", 0x6f}], 0x1}}], 0x2, 0x2090) 290.934346ms ago: executing program 3 (id=668): syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) setns(0xc9, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r1) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000c80)={0x34, r2, 0x1, 0x70bd2d, 0xa000000, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}, 0x1, 0x2000000}, 0x24000000) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=@newtfilter={0x30, 0x2c, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=@delqdisc={0x24, 0x25, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x800, 0x0, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e) 250.142375ms ago: executing program 5 (id=669): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfffa}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_plug={{0x9}, {0x1, 0x2, {0x3, 0xbc}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x15}, 0x4040010) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r2) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000094ce77ef5f616d7bcf438df196a7cd04e14de17fd8bf367dccccc281d5", @ANYRES16=r3, @ANYBLOB="010025bd7000fedbdf250100000014000600ff0100000000000000000000000000010e0001006e65742f6c32636170000000080002000500000014000500ff010000000000000000000000000001"], 0x54}, 0x1, 0x2000000, 0x0, 0x20000000}, 0x80) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x200001, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000400)={0x0, 0x4, 0x4a, 0xd9b, @vifc_lcl_addr=@broadcast, @empty}, 0x10) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0xec0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) fallocate(r6, 0x40, 0x544248a4, 0x6) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="39e02390", @ANYRES16=r7, @ANYBLOB="1102000000000000000001000000"], 0x14}}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r5, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x4c, r7, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x24048014) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xd, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000800000000000000004000000180100002020702500000000002020207b1af8ff00000000bfa108000000000047010000f6ffffffb702000008001000b703000000000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x1}, 0x94) 160.04369ms ago: executing program 5 (id=670): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000ffffff8c00000006000000080004000000000008000500ea8c00002200070073797374656d5f753a6f626a6563745f723a756e6c6162656c65645f74"], 0x48}}, 0x0) 159.815954ms ago: executing program 5 (id=671): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000100)={0x980901, 0x2}) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) recvmmsg(r1, &(0x7f0000006100)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000200)=""/98, 0x62}], 0x1, &(0x7f0000001640)=""/106, 0x6a}, 0x100}], 0x40000000000008f, 0x12300, 0x0) close(r0) 99.807987ms ago: executing program 4 (id=672): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2c) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000815000/0x18000)=nil, &(0x7f0000000980)=[@text16={0x10, &(0x7f00000023c0)="660f3a406709610f01ca66b9c30d00000f3266b80500000066b9008000000f01c10fe52d0f01c80f20e06635000002000f22e0660ffe00d9ec650f01cb", 0x3d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000180)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x4b564d02}]}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x1}, 0xe) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, 0x0) ioctl$KVM_SET_CPUID(r7, 0x4008ae8a, &(0x7f0000000300)={0x1, 0x0, [{0xd, 0x530f9803, 0x1, 0x80, 0x7}]}) getsockopt$bt_BT_SNDMTU(r4, 0x112, 0xc, 0x0, &(0x7f00000000c0)) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000100)={{0x21, @empty, 0x4e23, 0x2, 'wlc\x00', 0x0, 0xca, 0x3f}, {@remote, 0x4e21, 0x3, 0xe, 0x0, 0x80}}, 0x44) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x70bd2a, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x1a}}}}]}, 0x38}}, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 99.48305ms ago: executing program 1 (id=673): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket(0xa, 0x3, 0xff) recvmmsg$unix(r1, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x60, 0x0) connect$pppl2tp(r0, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x0, 0x1, 0x1, 0x3, {0xa, 0x4e20, 0x80, @mcast1, 0x7}}}, 0x32) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) r2 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x80081, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', r2, 0x4000, r0}, 0x18) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000080)=0x8) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) connect$inet6(r4, &(0x7f0000000f40)={0xa, 0x4e21, 0x98d0, @empty, 0x718}, 0x1c) connect$pppl2tp(r5, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4000, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1, 0xfffffffc, 0xfffffffe}}, 0x2e) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r6, &(0x7f0000000f00)={&(0x7f0000000e40), 0xc, &(0x7f0000000ec0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="2c0000000714100028bd7000dbdf2508000122272000e480bd6e1ef87a616c65c019701d2d71c4828858ceb167b4ecc69ac1afa3280637a25dbb9c113bf239698b51e1d295af51c726c5a5d889843e3ddd6562835f40dd31eb18e9bb1d000443c9ab70c75238ec0bd20cb65d444ab94f94f832e510d27e330c8069db8b566184855af1218bcc343d7f7573275ecd2aba78f065690c5d32fa6c336a5e3ab4da2a6450a000eb693ec4", @ANYRES32=r2, @ANYBLOB="0900020073797a3100000000"], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x80800) 99.30167ms ago: executing program 3 (id=674): setns(0xc9, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0x9, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@map_fd, @generic={0x66}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x94) setsockopt$MRT_DEL_VIF(r1, 0x0, 0xcb, &(0x7f0000000000)={0x1, 0xc, 0xf, 0x8, @vifc_lcl_ifindex, @loopback}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=@newtfilter={0x30, 0x2c, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}}, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000040)={'raw\x00'}, 0x28) 31.003325ms ago: executing program 3 (id=675): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="90", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000340)=0x3, 0x4) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, r7, 0x701, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40015}, 0x20000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000540)={'batadv0\x00', 0x0}) r9 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000000)={'dummy0\x00', 0x800}) r10 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r5) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r10, 0x83625fc5352ba305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x1c}}, 0x20088c4) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) sendmsg$NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r11, 0x400, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40011}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0xffff, 0xc) 30.688941ms ago: executing program 1 (id=676): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000004c40)=[{{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000000b80)="d1a53e3631de8e2cb9ecb17b938de843f6d3858a58ac0ccda5551c44847a0f5011d5417690a6325a71976b65b1da08fcac5f4957b7cadce8", 0x38}, {&(0x7f0000000bc0)="d274c0b018218fd1aa4ac235887f2f38679306a1f5f19ca299b5d69ac02e203764e0e61a929246bbb289578bb44d0124ebbfbd822f6a1c748237e0838a73ccb5a563f13efce9792d017518b7136d15a16604bc607ac29aaec9486d505f70b668e6696cdeb71f937a6fac37cd94ea2783a1236bfae873fd7a80a13f97d2d5b508276eacac94223b00d8f5ccd2b539493c0227abb0a0842f9bedd1a1605b7f20869f882dded27cc8abc3d551c9c451ed73ed3a38de8a205f8e7c749f40fb3441657e27f617a6a3adead40bd8f0a88aea823eb275081b088e2d283b4b255e24fb17913406edc3", 0xe5}, {&(0x7f0000000cc0)="57c5f1422a61d0fceb6c40b9ba4b38a0a09dedc9e257889de69a8b9d6d5c4697e4b641e6574a6723870b5f18864ce4c557d33cf52364df1d5e33f68a2b3778ba9370c9d9b54841a55240baa3be10e02b41b283907c87772e79f4fe0547e137c174796b", 0x63}, {&(0x7f0000000d40)="5a0c0ca95a4ee8068539f2127a79661d15a8d6f7aa300071d748c5f470a5d0df7173cd87d5fd96f78a934c5b12bd88625468d1b4ca02736440fc91eb193b2cd593069c568e9345218ee6f7f0905ba462386b44d0cc357d17ab14bf02ee2f51785eb18a542aae12464e39024c37203cb272014b46234f52915f7e10d19ccfe304bc61f50bc111cfaf13b2", 0x8a}, {&(0x7f0000002500)="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", 0x4c7}], 0x5}}], 0x1, 0x885) sendmmsg$inet_sctp(r0, &(0x7f0000006240)=[{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000380)="814c594d0bd78f542ea6a16cec7785d432e2f8a665a1968faa5d7b0517bec0169c184f9ad000641ab638f707ba01bd87f403d521f2c4ea80d483c6e7709d741f7525d98c7a2d029f8e6f13003417a90a9d4b3b9be5510b7e12246be2714983cb18c82b4bc716ea5f50b26463b53aa2dab41dbd7135c862ac612c19892b810ca51cc005af6bbcbc9430e06f59cf75804d62df7ecbacfa0a6c500b541c8ba3d7958fe338b7c9d9eecc39328a7cf84cf20fa0e26fc9b2a305de84adec380f24ddb80c043333895aece33ff72f6bd0abc14bcfb340cfd7891ecf601421b795eb664019bf74add4c1481f1e47", 0xea}, {&(0x7f0000000480)="cf4a1e93489489671fe50f83a397f0db2f33d454d616b2009ba858", 0x1b}, {&(0x7f0000000500)="872daa3013c515f04108fccef6f8f95e34015799685768823dca2ad088b3ff94ac7a5b", 0x23}], 0x3, 0x0, 0x0, 0x20000000}], 0x1, 0x20000000) sendmmsg$inet(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000980)="91f8a9849519def28691bbc4173c3d6f357d0272b7e95a136b3ffec75b73e6937b7b22a1319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000f2ffffff2e3591ceb1757de97fb25500620d0d30506e7429fa5337b74945da657f", 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000880)="b527ce144a9e865255e6f85f4d18156225c3396c992b47cedd740a6a6c3c82aba6b56bd441a6dd0856d664fb959853821ce9917ed023550816ba4b21413e5e7c41c7e2197da810d26109c4572ec3dfb28073599772cf3e04b596b22fce7db25609f21c6da4db35a48c20cdfa45bba5", 0x6f}, {0x0}], 0x2}}], 0x2, 0x2090) 5.634917ms ago: executing program 5 (id=677): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./gadget\x00', &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc03064ca, &(0x7f0000000280)={&(0x7f00000000c0)=[r2], &(0x7f0000000200)=[0x1000000000003fd], 0x0, 0x1}) write(r0, &(0x7f0000000200)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48) 0s ago: executing program 1 (id=678): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280), &(0x7f00000005c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="640000001000010429bd700000000000e0000000", @ANYRES32=r1, @ANYBLOB="00010000316f0600300012800b00010067656e657665000020000280080011"], 0x64}}, 0x20000000) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000200)={0xfffa, [0x0, 0xfffffffc], 0x4}, 0x10) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000240)=0x80000000, 0x4) recvmmsg(r0, &(0x7f0000004780)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): ump+0x194/0xd00 [ 69.538497][ T6599] ? ip_set_dump_start+0x2e9/0x460 [ 69.538515][ T6599] ? __pfx_netlink_dump+0x10/0x10 [ 69.538535][ T6599] __netlink_dump_start+0x6d6/0x990 [ 69.538549][ T6599] ip_set_dump+0x1c2/0x200 [ 69.538565][ T6599] ? __pfx_ip_set_dump+0x10/0x10 [ 69.538579][ T6599] ? __pfx_ip_set_dump_start+0x10/0x10 [ 69.538596][ T6599] ? __pfx_ip_set_dump_do+0x10/0x10 [ 69.538613][ T6599] ? __pfx_ip_set_dump_done+0x10/0x10 [ 69.538636][ T6599] nfnetlink_rcv_msg+0x9d5/0x11e0 [ 69.538657][ T6599] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 69.538672][ T6599] ? skb_release_data+0x6ca/0x8e0 [ 69.538689][ T6599] ? __lock_acquire+0x49f/0x1a40 [ 69.538715][ T6599] ? avc_has_perm_noaudit+0x145/0x3b0 [ 69.538733][ T6599] netlink_rcv_skb+0x159/0x420 [ 69.538745][ T6599] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 69.538762][ T6599] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 69.538781][ T6599] ? ns_capable+0xd2/0xf0 [ 69.538798][ T6599] nfnetlink_rcv+0x1b3/0x440 [ 69.538814][ T6599] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 69.538829][ T6599] ? netlink_deliver_tap+0x1ae/0xcc0 [ 69.538849][ T6599] netlink_unicast+0x585/0x850 [ 69.538864][ T6599] ? __pfx_netlink_unicast+0x10/0x10 [ 69.538881][ T6599] netlink_sendmsg+0x8b0/0xda0 [ 69.538896][ T6599] ? __pfx_netlink_sendmsg+0x10/0x10 [ 69.538910][ T6599] ? selinux_socket_sendmsg+0x198/0x2f0 [ 69.538929][ T6599] ____sys_sendmsg+0xa4d/0xbe0 [ 69.538947][ T6599] ? __pfx_netlink_sendmsg+0x10/0x10 [ 69.538972][ T6599] ? __pfx_____sys_sendmsg+0x10/0x10 [ 69.538998][ T6599] ___sys_sendmsg+0x190/0x1e0 [ 69.539011][ T6599] ? __pfx____sys_sendmsg+0x10/0x10 [ 69.539021][ T6599] ? __lock_acquire+0x49f/0x1a40 [ 69.539036][ T6599] ? get_pid_task+0x106/0x250 [ 69.539063][ T6599] __sys_sendmsg+0x160/0x210 [ 69.539079][ T6599] ? __pfx___sys_sendmsg+0x10/0x10 [ 69.539102][ T6599] do_syscall_64+0x115/0x870 [ 69.539118][ T6599] ? clear_bhb_loop+0x70/0xc0 [ 69.539132][ T6599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.539144][ T6599] RIP: 0033:0x7ff9b819e0d9 [ 69.539154][ T6599] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.539165][ T6599] RSP: 002b:00007ff9b90ad028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 69.539177][ T6599] RAX: ffffffffffffffda RBX: 00007ff9b8425fa0 RCX: 00007ff9b819e0d9 [ 69.539184][ T6599] RDX: 0000000000048810 RSI: 0000200000000140 RDI: 0000000000000003 [ 69.539191][ T6599] RBP: 00007ff9b90ad090 R08: 0000000000000000 R09: 0000000000000000 [ 69.539198][ T6599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.539205][ T6599] R13: 00007ff9b8426038 R14: 00007ff9b8425fa0 R15: 00007fff94c2ed48 [ 69.539219][ T6599] [ 69.556969][ T6601] netlink: 24 bytes leftover after parsing attributes in process `syz.2.236'. [ 69.559076][ T1481] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 69.627443][ T42] audit: type=1400 audit(1786574057.967:411): avc: denied { recv } for pid=6604 comm="syz.0.239" dest=20000 netif=hwsim0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 69.738301][ T6613] syzkaller0: entered promiscuous mode [ 69.742833][ T6613] syzkaller0: entered allmulticast mode [ 69.753248][ T42] audit: type=1400 audit(1786574058.087:412): avc: denied { connect } for pid=6611 comm="syz.0.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 69.763026][ T6617] capability: warning: `syz.2.242' uses deprecated v2 capabilities in a way that may be insecure [ 69.818844][ T6623] FAULT_INJECTION: forcing a failure. [ 69.818844][ T6623] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 69.820225][ T6615] evm: overlay not supported [ 69.823961][ T6623] CPU: 3 UID: 0 PID: 6623 Comm: syz.0.244 Tainted: G L syzkaller #0 PREEMPT(full) [ 69.823987][ T6623] Tainted: [L]=SOFTLOCKUP [ 69.823993][ T6623] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 69.824002][ T6623] Call Trace: [ 69.824007][ T6623] [ 69.824015][ T6623] dump_stack_lvl+0x100/0x190 [ 69.824042][ T6623] should_fail_ex.cold+0x5/0xa [ 69.824065][ T6623] _copy_from_user+0x2e/0xd0 [ 69.824091][ T6623] vmemdup_user+0x6b/0xe0 [ 69.824113][ T6623] path_setxattrat+0x29e/0x3b0 [ 69.824132][ T6623] ? __pfx_path_setxattrat+0x10/0x10 [ 69.824156][ T6623] ? ksys_write+0x190/0x250 [ 69.824170][ T6623] ? ksys_write+0x190/0x250 [ 69.824201][ T6623] ? fput+0x79/0x100 [ 69.824223][ T6623] ? ksys_write+0x1ac/0x250 [ 69.824240][ T6623] ? __pfx_ksys_write+0x10/0x10 [ 69.824259][ T6623] __x64_sys_lsetxattr+0xc9/0x140 [ 69.824280][ T6623] ? do_syscall_64+0x90/0x870 [ 69.824303][ T6623] ? lockdep_hardirqs_on+0x78/0x100 [ 69.824325][ T6623] do_syscall_64+0x115/0x870 [ 69.824345][ T6623] ? clear_bhb_loop+0x70/0xc0 [ 69.824366][ T6623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.824381][ T6623] RIP: 0033:0x7ff9b819e0d9 [ 69.824394][ T6623] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.824410][ T6623] RSP: 002b:00007ff9b90ad028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 69.824426][ T6623] RAX: ffffffffffffffda RBX: 00007ff9b8425fa0 RCX: 00007ff9b819e0d9 [ 69.824435][ T6623] RDX: 0000200000000280 RSI: 0000200000000240 RDI: 00002000000001c0 [ 69.824446][ T6623] RBP: 00007ff9b90ad090 R08: 0000000000000001 R09: 0000000000000000 [ 69.824456][ T6623] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000001 [ 69.824465][ T6623] R13: 00007ff9b8426038 R14: 00007ff9b8425fa0 R15: 00007fff94c2ed48 [ 69.824484][ T6623] [ 69.844017][ T1481] usb 8-1: USB disconnect, device number 3 [ 69.904421][ T1481] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 69.918238][ T1481] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 69.924796][ T1481] keyspan 8-1:1.0: device disconnected [ 69.978338][ T6634] openvswitch: netlink: Missing key (keys=40, expected=100) [ 69.992559][ T6636] FAULT_INJECTION: forcing a failure. [ 69.992559][ T6636] name failslab, interval 1, probability 0, space 0, times 0 [ 70.003622][ T6636] CPU: 2 UID: 0 PID: 6636 Comm: syz.2.247 Tainted: G L syzkaller #0 PREEMPT(full) [ 70.003642][ T6636] Tainted: [L]=SOFTLOCKUP [ 70.003646][ T6636] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 70.003652][ T6636] Call Trace: [ 70.003657][ T6636] [ 70.003661][ T6636] dump_stack_lvl+0x100/0x190 [ 70.003680][ T6636] should_fail_ex.cold+0x5/0xa [ 70.003695][ T6636] should_failslab+0xc2/0x120 [ 70.003711][ T6636] __kvmalloc_node_noprof+0x116/0x970 [ 70.003726][ T6636] ? udmabuf_create+0x2e8/0x12a0 [ 70.003756][ T6636] udmabuf_create+0x2e8/0x12a0 [ 70.003772][ T6636] ? __lock_acquire+0x49f/0x1a40 [ 70.003791][ T6636] ? __pfx_udmabuf_create+0x10/0x10 [ 70.003807][ T6636] ? find_held_lock+0x2b/0x80 [ 70.003819][ T6636] ? __might_fault+0xc5/0x140 [ 70.003830][ T6636] ? __might_fault+0xc5/0x140 [ 70.003847][ T6636] udmabuf_ioctl+0x18f/0x300 [ 70.003868][ T6636] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 70.003888][ T6636] ? selinux_file_ioctl+0xb6/0x290 [ 70.003908][ T6636] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 70.003926][ T6636] __x64_sys_ioctl+0x18e/0x210 [ 70.003950][ T6636] do_syscall_64+0x115/0x870 [ 70.003970][ T6636] ? clear_bhb_loop+0x70/0xc0 [ 70.003988][ T6636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.004003][ T6636] RIP: 0033:0x7f1b30f9e0d9 [ 70.004016][ T6636] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.004031][ T6636] RSP: 002b:00007f1b31db5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 70.004044][ T6636] RAX: ffffffffffffffda RBX: 00007f1b31225fa0 RCX: 00007f1b30f9e0d9 [ 70.004052][ T6636] RDX: 0000200000000000 RSI: 0000000040187542 RDI: 0000000000000003 [ 70.004058][ T6636] RBP: 00007f1b31db5090 R08: 0000000000000000 R09: 0000000000000000 [ 70.004064][ T6636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.004071][ T6636] R13: 00007f1b31226038 R14: 00007f1b31225fa0 R15: 00007fff298ac668 [ 70.004084][ T6636] [ 70.114641][ T6647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.253'. [ 70.119053][ T6647] netlink: 'syz.1.253': attribute type 10 has an invalid length. [ 70.121539][ T6647] netlink: 12 bytes leftover after parsing attributes in process `syz.1.253'. [ 70.125859][ T6651] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 70.208745][ T6660] xt_ipcomp: unknown flags 1D [ 70.627276][ T5082] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 70.723371][ T5082] Bluetooth: hci0: unexpected cc 0x204b length: 2 < 3 [ 70.726600][ T5082] Bluetooth: hci0: unexpected event for opcode 0x204b [ 70.735876][ T64] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 70.761918][ T6693] netlink: 'syz.3.270': attribute type 1 has an invalid length. [ 70.781062][ T6693] bond1: entered promiscuous mode [ 70.783513][ T6693] 8021q: adding VLAN 0 to HW filter on device bond1 [ 70.792028][ T6693] netlink: 28 bytes leftover after parsing attributes in process `syz.3.270'. [ 70.795996][ T6693] bond1: entered allmulticast mode [ 70.829860][ T6693] bond1: (slave bridge1): making interface the new active one [ 70.832317][ T6693] bridge1: entered promiscuous mode [ 70.834163][ T6693] bridge1: entered allmulticast mode [ 70.837020][ T6693] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 70.893789][ T6697] syzkaller0: entered promiscuous mode [ 70.899616][ T6697] syzkaller0: entered allmulticast mode [ 70.962041][ T6702] netlink: 'syz.2.272': attribute type 3 has an invalid length. [ 71.017520][ T6708] ufs: You didn't specify the type of your ufs filesystem [ 71.017520][ T6708] [ 71.017520][ T6708] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 71.017520][ T6708] [ 71.017520][ T6708] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 71.030948][ T6708] ufs: ufstype=old is supported read-only [ 71.034677][ T6708] ufs: ufs_fill_super(): bad magic number [ 71.519736][ T6732] syzkaller0: entered promiscuous mode [ 71.521590][ T6732] syzkaller0: entered allmulticast mode [ 71.562155][ T5082] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.566449][ T5082] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.569500][ T5082] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.573008][ T5082] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.575867][ T5082] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.646098][ T6743] binder_alloc: 6742: binder_alloc_buf size 12312 failed, no address space [ 71.648783][ T6743] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 71.841606][ T6761] syz_tun: entered allmulticast mode [ 71.895372][ T6760] syz_tun: left allmulticast mode [ 72.140823][ T6737] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.143128][ T6737] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.146536][ T6737] bridge_slave_0: entered allmulticast mode [ 72.149319][ T6737] bridge_slave_0: entered promiscuous mode [ 72.152557][ T6737] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.154736][ T6737] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.157179][ T6737] bridge_slave_1: entered allmulticast mode [ 72.159945][ T6737] bridge_slave_1: entered promiscuous mode [ 72.234066][ T6737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.241159][ T6737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.272711][ T6737] team0: Port device team_slave_0 added [ 72.277886][ T6737] team0: Port device team_slave_1 added [ 72.315749][ T6737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.319136][ T6737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.329881][ T6737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.338449][ T6737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.341748][ T6737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.352615][ T6737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.414365][ T6737] hsr_slave_0: entered promiscuous mode [ 72.417740][ T6737] hsr_slave_1: entered promiscuous mode [ 72.420527][ T6737] debugfs: 'hsr0' already exists in 'hsr' [ 72.422819][ T6737] Cannot create hsr debugfs directory [ 72.535226][ T6786] netlink: 52 bytes leftover after parsing attributes in process `syz.3.299'. [ 72.545281][ T5435] veth1_vlan: left promiscuous mode [ 72.605303][ T6737] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.610704][ T6737] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.613548][ T6737] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.620625][ T6737] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.623456][ T6737] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.634334][ T6737] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.638296][ T6737] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.646567][ T6737] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.707119][ T6737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.712972][ T6808] syz.3.301 uses obsolete (PF_INET,SOCK_PACKET) [ 72.720100][ T6737] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.730481][ T6385] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.733537][ T6385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.744401][ T6385] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.747499][ T6385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.802635][ T5435] veth1_vlan: entered promiscuous mode [ 73.024947][ T6828] netlink: 12 bytes leftover after parsing attributes in process `syz.2.302'. [ 73.097816][ T6737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.159575][ T6843] FAULT_INJECTION: forcing a failure. [ 73.159575][ T6843] name failslab, interval 1, probability 0, space 0, times 0 [ 73.164872][ T6843] CPU: 2 UID: 0 PID: 6843 Comm: syz.3.305 Tainted: G L syzkaller #0 PREEMPT(full) [ 73.164898][ T6843] Tainted: [L]=SOFTLOCKUP [ 73.164904][ T6843] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 73.164914][ T6843] Call Trace: [ 73.164921][ T6843] [ 73.164928][ T6843] dump_stack_lvl+0x100/0x190 [ 73.164975][ T6843] should_fail_ex.cold+0x5/0xa [ 73.164993][ T6843] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 73.165036][ T6843] should_failslab+0xc2/0x120 [ 73.165059][ T6843] kmem_cache_alloc_noprof+0x91/0x6a0 [ 73.165107][ T6843] ? skb_clone+0x190/0x400 [ 73.165172][ T6843] skb_clone+0x190/0x400 [ 73.165195][ T6843] netlink_deliver_tap+0xaed/0xcc0 [ 73.165230][ T6843] netlink_unicast+0x62b/0x850 [ 73.165253][ T6843] ? __pfx_netlink_unicast+0x10/0x10 [ 73.165280][ T6843] netlink_sendmsg+0x8b0/0xda0 [ 73.165303][ T6843] ? __pfx_netlink_sendmsg+0x10/0x10 [ 73.165325][ T6843] ? selinux_socket_sendmsg+0x198/0x2f0 [ 73.165364][ T6843] ____sys_sendmsg+0xa4d/0xbe0 [ 73.165391][ T6843] ? __pfx_netlink_sendmsg+0x10/0x10 [ 73.165412][ T6843] ? __pfx_____sys_sendmsg+0x10/0x10 [ 73.165451][ T6843] ___sys_sendmsg+0x190/0x1e0 [ 73.165470][ T6843] ? __pfx____sys_sendmsg+0x10/0x10 [ 73.165488][ T6843] ? __lock_acquire+0x49f/0x1a40 [ 73.165510][ T6843] ? get_pid_task+0x106/0x250 [ 73.165551][ T6843] __sys_sendmsg+0x160/0x210 [ 73.165573][ T6843] ? __pfx___sys_sendmsg+0x10/0x10 [ 73.165608][ T6843] do_syscall_64+0x115/0x870 [ 73.165672][ T6843] ? clear_bhb_loop+0x70/0xc0 [ 73.165693][ T6843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.165711][ T6843] RIP: 0033:0x7f574a99e0d9 [ 73.165727][ T6843] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.165748][ T6843] RSP: 002b:00007f574b7bd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 73.165790][ T6843] RAX: ffffffffffffffda RBX: 00007f574ac25fa0 RCX: 00007f574a99e0d9 [ 73.165801][ T6843] RDX: 0000000020040040 RSI: 00002000000004c0 RDI: 0000000000000003 [ 73.165812][ T6843] RBP: 00007f574b7bd090 R08: 0000000000000000 R09: 0000000000000000 [ 73.165821][ T6843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.165831][ T6843] R13: 00007f574ac26038 R14: 00007f574ac25fa0 R15: 00007ffca3c07068 [ 73.165854][ T6843] [ 73.259001][ T6843] netlink: 12 bytes leftover after parsing attributes in process `syz.3.305'. [ 73.262741][ T6843] bridge_slave_0: default FDB implementation only supports local addresses [ 73.290812][ T6842] netlink: 12 bytes leftover after parsing attributes in process `syz.2.306'. [ 73.334506][ T6737] veth0_vlan: entered promiscuous mode [ 73.345742][ T6737] veth1_vlan: entered promiscuous mode [ 73.393181][ T6737] veth0_macvtap: entered promiscuous mode [ 73.402612][ T6737] veth1_macvtap: entered promiscuous mode [ 73.408644][ T6860] af_packet: tpacket_rcv: packet too big, clamped from 65007 to 3966. macoff=82 [ 73.418642][ T6737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.431769][ T6737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.493662][ T6362] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.497030][ T6362] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.533881][ T6359] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.538774][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.539984][ T6359] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.542497][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.567343][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.574562][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.607090][ T64] Bluetooth: hci2: command tx timeout [ 73.612097][ T6872] gfs2: Unknown parameter 'norecoveryt' [ 73.648214][ T6876] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 73.656220][ T6876] CIFS: Attempting to mount //127.0.0.1/test [ 73.905951][ T5828] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 73.918141][ T6889] netlink: 'syz.3.318': attribute type 2 has an invalid length. [ 74.066536][ T5828] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 74.072072][ T5828] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 74.074661][ T5828] usb 9-1: config 0 has no interface number 0 [ 74.076780][ T5828] usb 9-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 74.080367][ T5828] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 74.083646][ T5828] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 74.088449][ T5828] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 74.091340][ T5828] usb 9-1: Product: syz [ 74.092590][ T5828] usb 9-1: SerialNumber: syz [ 74.095660][ T5828] usb 9-1: config 0 descriptor?? [ 74.101686][ T5828] cm109 9-1:0.8: invalid payload size 0, expected 4 [ 74.106639][ T5828] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.8/input/input7 [ 74.113018][ T42] kauditd_printk_skb: 64 callbacks suppressed [ 74.113029][ T42] audit: type=1400 audit(1786574062.447:477): avc: denied { read } for pid=5118 comm="acpid" name="event4" dev="devtmpfs" ino=2897 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 74.122325][ T42] audit: type=1400 audit(1786574062.447:478): avc: denied { open } for pid=5118 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2897 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 74.129652][ T42] audit: type=1400 audit(1786574062.447:479): avc: denied { ioctl } for pid=5118 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2897 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 74.329014][ C2] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 74.332161][ C2] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 74.335337][ C2] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 74.337891][ C2] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 74.341220][ C2] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 74.343738][ C2] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 74.345139][ T42] audit: type=1400 audit(1786574062.677:480): avc: denied { read write } for pid=6895 comm="syz.2.320" name="rdma_cm" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 74.347210][ C2] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 74.354434][ T42] audit: type=1400 audit(1786574062.677:481): avc: denied { open } for pid=6895 comm="syz.2.320" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 74.357314][ C2] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 74.364447][ T42] audit: type=1400 audit(1786574062.687:482): avc: denied { ioctl } for pid=6895 comm="syz.2.320" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1292 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 74.367293][ C2] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 74.380095][ T5828] usb 9-1: USB disconnect, device number 2 [ 74.382715][ C2] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 74.382735][ C2] cm109 9-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 74.407033][ T5828] cm109 9-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 74.477417][ T6876] CIFS: VFS: cifs_mount failed w/return code = -112 [ 74.485692][ T42] audit: type=1400 audit(1786574062.817:483): avc: denied { read write } for pid=6897 comm="syz.2.321" name="uinput" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 74.496693][ T42] audit: type=1400 audit(1786574062.827:484): avc: denied { open } for pid=6897 comm="syz.2.321" path="/dev/uinput" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 74.577923][ T42] audit: type=1400 audit(1786574062.917:485): avc: denied { append } for pid=6902 comm="syz.1.323" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 74.699082][ T42] audit: type=1400 audit(1786574063.037:486): avc: denied { bind } for pid=6906 comm="syz.3.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 74.818058][ T6912] gfs2: gfs2 mount does not exist [ 75.283213][ T6948] binder: 6947:6948 unknown command 0 [ 75.285601][ T6948] binder: 6947:6948 ioctl c0306201 200000000080 returned -22 [ 75.341207][ T6951] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 75.474300][ T6955] base or size exceeds the MTRR width [ 75.685966][ T64] Bluetooth: hci2: command tx timeout [ 75.939927][ T6981] syzkaller0: entered promiscuous mode [ 75.941823][ T6981] syzkaller0: entered allmulticast mode [ 76.161758][ T6991] SET target dimension over the limit! [ 76.274210][ T6997] tipc: Started in network mode [ 76.276882][ T6997] tipc: Node identity ac141441, cluster identity 4711 [ 76.279665][ T6997] FAULT_INJECTION: forcing a failure. [ 76.279665][ T6997] name failslab, interval 1, probability 0, space 0, times 0 [ 76.286564][ T6997] CPU: 1 UID: 0 PID: 6997 Comm: syz.3.359 Tainted: G L syzkaller #0 PREEMPT(full) [ 76.286590][ T6997] Tainted: [L]=SOFTLOCKUP [ 76.286597][ T6997] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 76.286607][ T6997] Call Trace: [ 76.286614][ T6997] [ 76.286621][ T6997] dump_stack_lvl+0x100/0x190 [ 76.286650][ T6997] should_fail_ex.cold+0x5/0xa [ 76.286674][ T6997] should_failslab+0xc2/0x120 [ 76.286698][ T6997] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 76.286721][ T6997] ? sock_alloc_inode+0x26/0x2c0 [ 76.286750][ T6997] ? __pfx_sock_alloc_inode+0x10/0x10 [ 76.286777][ T6997] sock_alloc_inode+0x26/0x2c0 [ 76.286802][ T6997] ? __pfx_sock_alloc_inode+0x10/0x10 [ 76.286826][ T6997] alloc_inode+0x68/0x250 [ 76.286852][ T6997] sock_alloc+0x44/0x280 [ 76.286873][ T6997] ? security_socket_create+0x7f/0x250 [ 76.286900][ T6997] __sock_create+0xc2/0x860 [ 76.286922][ T6997] udp_sock_create4+0xa6/0x450 [ 76.286944][ T6997] ? __pfx_udp_sock_create4+0x10/0x10 [ 76.286963][ T6997] ? find_held_lock+0x2b/0x80 [ 76.286996][ T6997] ? net_generic+0xea/0x2a0 [ 76.287022][ T6997] ? net_generic+0xea/0x2a0 [ 76.287047][ T6997] ? __asan_memcpy+0x3c/0x60 [ 76.287067][ T6997] tipc_udp_enable+0xd6a/0x1010 [ 76.287095][ T6997] ? __pfx_tipc_udp_enable+0x10/0x10 [ 76.287152][ T6997] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 76.287170][ T6997] ? tipc_enable_bearer+0x772/0xe60 [ 76.287198][ T6997] tipc_enable_bearer+0x857/0xe60 [ 76.287232][ T6997] ? __pfx_tipc_enable_bearer+0x10/0x10 [ 76.287255][ T6997] ? lock_acquire+0x1b9/0x370 [ 76.287283][ T6997] ? __nla_parse+0x40/0x60 [ 76.287305][ T6997] __tipc_nl_bearer_enable+0x332/0x420 [ 76.287331][ T6997] ? __pfx___tipc_nl_bearer_enable+0x10/0x10 [ 76.287354][ T6997] ? __pfx___mutex_lock+0x10/0x10 [ 76.287397][ T6997] tipc_nl_bearer_enable+0x21/0x40 [ 76.287421][ T6997] genl_family_rcv_msg_doit+0x214/0x300 [ 76.287447][ T6997] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 76.287478][ T6997] ? bpf_lsm_capable+0x9/0x10 [ 76.287496][ T6997] ? security_capable+0x80/0x260 [ 76.287520][ T6997] ? ns_capable+0xd2/0xf0 [ 76.287545][ T6997] genl_rcv_msg+0x560/0x800 [ 76.287570][ T6997] ? __pfx_genl_rcv_msg+0x10/0x10 [ 76.287591][ T6997] ? __pfx_tipc_nl_bearer_enable+0x10/0x10 [ 76.287624][ T6997] netlink_rcv_skb+0x159/0x420 [ 76.287642][ T6997] ? __pfx_genl_rcv_msg+0x10/0x10 [ 76.287664][ T6997] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 76.287693][ T6997] ? netlink_deliver_tap+0x1ae/0xcc0 [ 76.287715][ T6997] genl_rcv+0x28/0x40 [ 76.287733][ T6997] netlink_unicast+0x585/0x850 [ 76.287755][ T6997] ? __pfx_netlink_unicast+0x10/0x10 [ 76.287780][ T6997] netlink_sendmsg+0x8b0/0xda0 [ 76.287804][ T6997] ? __pfx_netlink_sendmsg+0x10/0x10 [ 76.287825][ T6997] ? selinux_socket_sendmsg+0x198/0x2f0 [ 76.287855][ T6997] ____sys_sendmsg+0xa4d/0xbe0 [ 76.287881][ T6997] ? __pfx_netlink_sendmsg+0x10/0x10 [ 76.287901][ T6997] ? __pfx_____sys_sendmsg+0x10/0x10 [ 76.287941][ T6997] ___sys_sendmsg+0x190/0x1e0 [ 76.287961][ T6997] ? __pfx____sys_sendmsg+0x10/0x10 [ 76.287976][ T6997] ? __lock_acquire+0x49f/0x1a40 [ 76.287998][ T6997] ? get_pid_task+0x106/0x250 [ 76.288044][ T6997] __sys_sendmsg+0x160/0x210 [ 76.288067][ T6997] ? __pfx___sys_sendmsg+0x10/0x10 [ 76.288103][ T6997] do_syscall_64+0x115/0x870 [ 76.288126][ T6997] ? clear_bhb_loop+0x70/0xc0 [ 76.288147][ T6997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.288166][ T6997] RIP: 0033:0x7f574a99e0d9 [ 76.288181][ T6997] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.288198][ T6997] RSP: 002b:00007f574b7bd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 76.288215][ T6997] RAX: ffffffffffffffda RBX: 00007f574ac25fa0 RCX: 00007f574a99e0d9 [ 76.288230][ T6997] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 76.288240][ T6997] RBP: 00007f574b7bd090 R08: 0000000000000000 R09: 0000000000000000 [ 76.288251][ T6997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.288261][ T6997] R13: 00007f574ac26038 R14: 00007f574ac25fa0 R15: 00007ffca3c07068 [ 76.288286][ T6997] [ 76.288393][ T6997] socket: no more sockets [ 76.461235][ T6997] tipc: Enabling of bearer rejected, failed to enable media [ 76.603635][ T7003] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 76.667732][ T7008] FAULT_INJECTION: forcing a failure. [ 76.667732][ T7008] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 76.671926][ T7008] CPU: 1 UID: 0 PID: 7008 Comm: syz.3.363 Tainted: G L syzkaller #0 PREEMPT(full) [ 76.671944][ T7008] Tainted: [L]=SOFTLOCKUP [ 76.671948][ T7008] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 76.671956][ T7008] Call Trace: [ 76.671960][ T7008] [ 76.671964][ T7008] dump_stack_lvl+0x100/0x190 [ 76.671985][ T7008] should_fail_ex.cold+0x5/0xa [ 76.671999][ T7008] _copy_to_user+0x32/0xd0 [ 76.672028][ T7008] simple_read_from_buffer+0xcb/0x170 [ 76.672042][ T7008] proc_fail_nth_read+0x1af/0x230 [ 76.672069][ T7008] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 76.672088][ T7008] ? rw_verify_area+0xce/0x6d0 [ 76.672104][ T7008] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 76.672123][ T7008] vfs_read+0x1e4/0xb40 [ 76.672142][ T7008] ? __pfx_vfs_read+0x10/0x10 [ 76.672160][ T7008] ? __fget_files+0x215/0x3d0 [ 76.672175][ T7008] ? __fget_files+0x21f/0x3d0 [ 76.672193][ T7008] ksys_read+0x12a/0x250 [ 76.672207][ T7008] ? __pfx_ksys_read+0x10/0x10 [ 76.672227][ T7008] do_syscall_64+0x115/0x870 [ 76.672254][ T7008] ? clear_bhb_loop+0x70/0xc0 [ 76.672274][ T7008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.672290][ T7008] RIP: 0033:0x7f574a95e90e [ 76.672302][ T7008] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 76.672317][ T7008] RSP: 002b:00007f574b7bcfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 76.672332][ T7008] RAX: ffffffffffffffda RBX: 00007f574b7bd6c0 RCX: 00007f574a95e90e [ 76.672341][ T7008] RDX: 000000000000000f RSI: 00007f574b7bd0a0 RDI: 0000000000000005 [ 76.672349][ T7008] RBP: 00007f574b7bd090 R08: 0000000000000000 R09: 0000000000000000 [ 76.672358][ T7008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.672366][ T7008] R13: 00007f574ac26038 R14: 00007f574ac25fa0 R15: 00007ffca3c07068 [ 76.672385][ T7008] [ 76.901101][ T7014] FAULT_INJECTION: forcing a failure. [ 76.901101][ T7014] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 76.906433][ T7014] CPU: 0 UID: 0 PID: 7014 Comm: syz.3.366 Tainted: G L syzkaller #0 PREEMPT(full) [ 76.906452][ T7014] Tainted: [L]=SOFTLOCKUP [ 76.906456][ T7014] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 76.906463][ T7014] Call Trace: [ 76.906471][ T7014] [ 76.906475][ T7014] dump_stack_lvl+0x100/0x190 [ 76.906515][ T7014] should_fail_ex.cold+0x5/0xa [ 76.906540][ T7014] _copy_to_user+0x32/0xd0 [ 76.906565][ T7014] simple_read_from_buffer+0xcb/0x170 [ 76.906579][ T7014] proc_fail_nth_read+0x1af/0x230 [ 76.906604][ T7014] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 76.906624][ T7014] ? rw_verify_area+0xce/0x6d0 [ 76.906640][ T7014] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 76.906659][ T7014] vfs_read+0x1e4/0xb40 [ 76.906678][ T7014] ? __pfx_vfs_read+0x10/0x10 [ 76.906695][ T7014] ? __fget_files+0x215/0x3d0 [ 76.906710][ T7014] ? __fget_files+0x21f/0x3d0 [ 76.906726][ T7014] ksys_read+0x12a/0x250 [ 76.906735][ T7014] ? __pfx_ksys_read+0x10/0x10 [ 76.906749][ T7014] do_syscall_64+0x115/0x870 [ 76.906790][ T7014] ? clear_bhb_loop+0x70/0xc0 [ 76.906804][ T7014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.906816][ T7014] RIP: 0033:0x7f574a95e90e [ 76.906826][ T7014] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 76.906837][ T7014] RSP: 002b:00007f574b7bcfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 76.906855][ T7014] RAX: ffffffffffffffda RBX: 00007f574b7bd6c0 RCX: 00007f574a95e90e [ 76.906862][ T7014] RDX: 000000000000000f RSI: 00007f574b7bd0a0 RDI: 0000000000000006 [ 76.906868][ T7014] RBP: 00007f574b7bd090 R08: 0000000000000000 R09: 0000000000000000 [ 76.906875][ T7014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.906882][ T7014] R13: 00007f574ac26038 R14: 00007f574ac25fa0 R15: 00007ffca3c07068 [ 76.906895][ T7014] [ 77.201522][ T7020] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7020 comm=syz.2.368 [ 77.254865][ T7025] netlink: 'syz.2.369': attribute type 2 has an invalid length. [ 77.259018][ T7025] netlink: 'syz.2.369': attribute type 2 has an invalid length. [ 77.261655][ T7025] netlink: 1347 bytes leftover after parsing attributes in process `syz.2.369'. [ 77.295260][ T7027] FAULT_INJECTION: forcing a failure. [ 77.295260][ T7027] name failslab, interval 1, probability 0, space 0, times 0 [ 77.301443][ T7027] CPU: 3 UID: 0 PID: 7027 Comm: syz.2.370 Tainted: G L syzkaller #0 PREEMPT(full) [ 77.301462][ T7027] Tainted: [L]=SOFTLOCKUP [ 77.301466][ T7027] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 77.301473][ T7027] Call Trace: [ 77.301478][ T7027] [ 77.301483][ T7027] dump_stack_lvl+0x100/0x190 [ 77.301501][ T7027] should_fail_ex.cold+0x5/0xa [ 77.301517][ T7027] should_failslab+0xc2/0x120 [ 77.301533][ T7027] __kmalloc_cache_noprof+0x91/0x6c0 [ 77.301544][ T7027] ? vhost_iotlb_add_range_ctx+0x69d/0xb70 [ 77.301590][ T7027] ? vhost_iotlb_add_range_ctx+0x7b5/0xb70 [ 77.301607][ T7027] vhost_iotlb_add_range_ctx+0x7b5/0xb70 [ 77.301626][ T7027] vhost_dev_ioctl+0x942/0xe70 [ 77.301642][ T7027] ? __pfx_vhost_dev_ioctl+0x10/0x10 [ 77.301661][ T7027] vhost_net_ioctl+0x75f/0x1910 [ 77.301672][ T7027] ? do_vfs_ioctl+0x226/0x13e0 [ 77.301690][ T7027] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 77.301707][ T7027] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 77.301724][ T7027] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 77.301755][ T7027] ? __fget_files+0x215/0x3d0 [ 77.301767][ T7027] ? hook_file_ioctl_common+0x140/0x440 [ 77.301790][ T7027] ? selinux_file_ioctl+0xb6/0x290 [ 77.301808][ T7027] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 77.301821][ T7027] __x64_sys_ioctl+0x18e/0x210 [ 77.301839][ T7027] do_syscall_64+0x115/0x870 [ 77.301859][ T7027] ? clear_bhb_loop+0x70/0xc0 [ 77.301872][ T7027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.301884][ T7027] RIP: 0033:0x7f1b30f9e0d9 [ 77.301895][ T7027] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.301906][ T7027] RSP: 002b:00007f1b31db5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 77.301918][ T7027] RAX: ffffffffffffffda RBX: 00007f1b31225fa0 RCX: 00007f1b30f9e0d9 [ 77.301924][ T7027] RDX: 0000200000000000 RSI: 000000004008af03 RDI: 0000000000000003 [ 77.301932][ T7027] RBP: 00007f1b31db5090 R08: 0000000000000000 R09: 0000000000000000 [ 77.301938][ T7027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 77.301945][ T7027] R13: 00007f1b31226038 R14: 00007f1b31225fa0 R15: 00007fff298ac668 [ 77.301958][ T7027] [ 77.766426][ T64] Bluetooth: hci2: command tx timeout [ 78.385433][ T7051] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 78.395188][ T7051] Bluetooth: MGMT ver 1.23 [ 78.449852][ T7055] FAULT_INJECTION: forcing a failure. [ 78.449852][ T7055] name failslab, interval 1, probability 0, space 0, times 0 [ 78.456544][ T7055] CPU: 0 UID: 0 PID: 7055 Comm: syz.2.380 Tainted: G L syzkaller #0 PREEMPT(full) [ 78.456574][ T7055] Tainted: [L]=SOFTLOCKUP [ 78.456580][ T7055] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 78.456600][ T7055] Call Trace: [ 78.456612][ T7055] [ 78.456620][ T7055] dump_stack_lvl+0x100/0x190 [ 78.456661][ T7055] should_fail_ex.cold+0x5/0xa [ 78.456703][ T7055] should_failslab+0xc2/0x120 [ 78.456727][ T7055] __kmalloc_noprof+0xfc/0x820 [ 78.456749][ T7055] ? tomoyo_encode2+0xfb/0x3c0 [ 78.456788][ T7055] tomoyo_encode2+0xfb/0x3c0 [ 78.456807][ T7055] tomoyo_encode+0x29/0x50 [ 78.456823][ T7055] tomoyo_realpath_from_path+0x18c/0x690 [ 78.456851][ T7055] tomoyo_mount_acl+0x1b6/0x8b0 [ 78.456875][ T7055] ? is_bpf_text_address+0x8a/0x1a0 [ 78.456895][ T7055] ? bpf_ksym_find+0x128/0x1c0 [ 78.456919][ T7055] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 78.456941][ T7055] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 78.456963][ T7055] ? kernel_text_address+0x8d/0x100 [ 78.456984][ T7055] ? unwind_get_return_address+0x59/0xa0 [ 78.457025][ T7055] ? tomoyo_domain+0xb2/0x150 [ 78.457075][ T7055] ? tomoyo_profile+0x47/0x60 [ 78.457097][ T7055] tomoyo_mount_permission+0x214/0x460 [ 78.457122][ T7055] ? tomoyo_mount_permission+0x1f6/0x460 [ 78.457150][ T7055] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 78.457191][ T7055] security_sb_mount+0xdd/0x270 [ 78.457219][ T7055] path_mount+0x158/0x23d0 [ 78.457246][ T7055] ? __pfx_path_mount+0x10/0x10 [ 78.457267][ T7055] ? lockdep_hardirqs_on+0x78/0x100 [ 78.457334][ T7055] ? putname+0xb1/0x110 [ 78.457353][ T7055] ? kmem_cache_free+0x127/0x6b0 [ 78.457379][ T7055] ? __x64_sys_mount+0x293/0x310 [ 78.457400][ T7055] __x64_sys_mount+0x293/0x310 [ 78.457426][ T7055] ? __pfx___x64_sys_mount+0x10/0x10 [ 78.457456][ T7055] do_syscall_64+0x115/0x870 [ 78.457479][ T7055] ? clear_bhb_loop+0x70/0xc0 [ 78.457500][ T7055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.457518][ T7055] RIP: 0033:0x7f1b30f9e0d9 [ 78.457534][ T7055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.457551][ T7055] RSP: 002b:00007f1b31db5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 78.457579][ T7055] RAX: ffffffffffffffda RBX: 00007f1b31225fa0 RCX: 00007f1b30f9e0d9 [ 78.457590][ T7055] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000200000000080 [ 78.457601][ T7055] RBP: 00007f1b31db5090 R08: 0000200000000140 R09: 0000000000000000 [ 78.457611][ T7055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 78.457621][ T7055] R13: 00007f1b31226038 R14: 00007f1b31225fa0 R15: 00007fff298ac668 [ 78.457646][ T7055] [ 78.457665][ T7055] ERROR: Out of memory at tomoyo_realpath_from_path. [ 78.695928][ T40] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 78.847903][ T40] usb 8-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 78.853163][ T40] usb 8-1: config 0 has an invalid interface number: 8 but max is 0 [ 78.855703][ T40] usb 8-1: config 0 has no interface number 0 [ 78.858129][ T40] usb 8-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 78.862637][ T40] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 78.867091][ T40] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 78.872321][ T40] usb 8-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 78.875531][ T40] usb 8-1: Product: syz [ 78.877421][ T40] usb 8-1: SerialNumber: syz [ 78.882764][ T40] usb 8-1: config 0 descriptor?? [ 78.886809][ T40] cm109 8-1:0.8: invalid payload size 0, expected 4 [ 78.890005][ T40] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.8/input/input8 [ 79.121368][ T2043] usb 8-1: USB disconnect, device number 4 [ 79.121438][ C2] cm109 8-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 79.138031][ T2043] cm109 8-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 79.246332][ T7065] mount: server 107.0.0.1 not responding, timed out [ 79.306935][ T42] kauditd_printk_skb: 23 callbacks suppressed [ 79.306953][ T42] audit: type=1400 audit(1786574067.647:510): avc: denied { ioctl } for pid=7079 comm="syz.4.389" path="/dev/input/event1" dev="devtmpfs" ino=941 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 79.313445][ T7080] ehci-pci 0000:00:1d.7: remove, state 1 [ 79.327198][ T7080] usb usb1: USB disconnect, device number 1 [ 79.330082][ T7080] usb 1-1: USB disconnect, device number 2 [ 79.520821][ T7080] ehci-pci 0000:00:1d.7: USB bus 1 deregistered [ 79.637123][ T5724] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 79.648056][ T7100] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 79.665604][ T2043] IPVS: starting estimator thread 0... [ 79.767683][ T7102] IPVS: using max 42 ests per chain, 100800 per kthread [ 79.769853][ T42] audit: type=1400 audit(1786574068.107:511): avc: denied { ioctl } for pid=7108 comm="syz.1.401" path="socket:[15046]" dev="sockfs" ino=15046 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 79.785964][ T5872] usb 2-1: new full-speed USB device number 2 using uhci_hcd [ 79.806421][ T5724] usb 9-1: Using ep0 maxpacket: 8 [ 79.810995][ T5724] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 79.817499][ T5724] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 79.820979][ T5724] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 79.827340][ T5724] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 79.831244][ T5724] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 79.835569][ T5724] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 79.841447][ T5724] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.859456][ T64] Bluetooth: hci2: command tx timeout [ 79.917449][ T7121] syzkaller0: entered promiscuous mode [ 79.921883][ T7121] syzkaller0: entered allmulticast mode [ 79.937872][ T7120] bridge_slave_0: left allmulticast mode [ 79.939759][ T7120] bridge_slave_0: left promiscuous mode [ 79.942684][ T7120] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.951116][ T7120] bridge_slave_1: left allmulticast mode [ 79.952828][ T5872] usb 2-1: not running at top speed; connect to a high speed hub [ 79.953592][ T7120] bridge_slave_1: left promiscuous mode [ 79.953804][ T7120] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.956457][ T5872] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 79.973084][ T7120] bond0: (slave bond_slave_0): Releasing backup interface [ 79.982176][ T7120] bond0: (slave bond_slave_1): Releasing backup interface [ 79.987545][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 79.992372][ T5872] usb 2-1: Product: QEMU USB Tablet [ 79.994474][ T7120] team0: Port device team_slave_0 removed [ 79.994562][ T5872] usb 2-1: Manufacturer: QEMU [ 79.998886][ T5872] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 80.004294][ T7120] team0: Port device team_slave_1 removed [ 80.007834][ T7120] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.010861][ T7120] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.015719][ T7120] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 80.059461][ T5724] usb 9-1: usb_control_msg returned -32 [ 80.061725][ T5724] usbtmc 9-1:16.0: can't read capabilities [ 80.064719][ T5872] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb2/2-1/2-1:1.0/0003:0627:0001.0002/input/input9 [ 80.126182][ T7128] ceph: Path missing in source [ 80.166043][ T5872] hid-generic 0003:0627:0001.0002: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0 [ 80.412234][ T7083] usbtmc 9-1:16.0: usb_control_msg returned -32 [ 80.417796][ T56] usb 9-1: USB disconnect, device number 3 [ 80.687048][ T42] audit: type=1400 audit(1786574069.027:512): avc: denied { read } for pid=7151 comm="syz.3.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 80.694652][ T42] audit: type=1400 audit(1786574069.027:513): avc: denied { name_bind } for pid=7151 comm="syz.3.418" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 80.880434][ T7157] syzkaller1: entered promiscuous mode [ 80.882403][ T7157] syzkaller1: entered allmulticast mode [ 80.951683][ T7159] jffs2: notice: (7159) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 80.961652][ T42] audit: type=1400 audit(1786574069.297:514): avc: denied { write } for pid=7158 comm="syz.4.421" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 80.976794][ T42] audit: type=1400 audit(1786574069.297:515): avc: denied { add_name } for pid=7158 comm="syz.4.421" name="test" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 80.984828][ T42] audit: type=1400 audit(1786574069.297:516): avc: denied { create } for pid=7158 comm="syz.4.421" name="test" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 80.991322][ T42] audit: type=1400 audit(1786574069.297:517): avc: denied { read write open } for pid=7158 comm="syz.4.421" path="/7/file0/test" dev="jffs2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 81.031326][ T64] Bluetooth: hci2: unexpected cc 0x204b length: 2 < 3 [ 81.178301][ T7177] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 81.203152][ T7177] netlink: 20 bytes leftover after parsing attributes in process `syz.4.430'. [ 81.229125][ T7177] misc userio: No port type given on /dev/userio [ 81.278542][ T7190] netlink: 12 bytes leftover after parsing attributes in process `syz.4.431'. [ 81.295747][ T7190] netlink: 12 bytes leftover after parsing attributes in process `syz.4.431'. [ 81.306323][ T13] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.309900][ T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.313524][ T13] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.317510][ T13] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.336031][ T64] Bluetooth: hci2: unexpected cc 0x204b length: 2 < 3 [ 81.704481][ T1036] cfg80211: failed to load regulatory.db [ 82.179444][ T7215] FAULT_INJECTION: forcing a failure. [ 82.179444][ T7215] name failslab, interval 1, probability 0, space 0, times 0 [ 82.184125][ T7215] CPU: 3 UID: 0 PID: 7215 Comm: syz.3.442 Tainted: G L syzkaller #0 PREEMPT(full) [ 82.184152][ T7215] Tainted: [L]=SOFTLOCKUP [ 82.184158][ T7215] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 82.184169][ T7215] Call Trace: [ 82.184176][ T7215] [ 82.184184][ T7215] dump_stack_lvl+0x100/0x190 [ 82.184212][ T7215] should_fail_ex.cold+0x5/0xa [ 82.184236][ T7215] should_failslab+0xc2/0x120 [ 82.184260][ T7215] __kmalloc_cache_noprof+0x91/0x6c0 [ 82.184279][ T7215] ? rtnl_newlink+0x126/0x2380 [ 82.184344][ T7215] ? __pfx_rtnl_newlink+0x10/0x10 [ 82.184370][ T7215] rtnl_newlink+0x126/0x2380 [ 82.184408][ T7215] ? __pfx_rtnl_newlink+0x10/0x10 [ 82.184431][ T7215] ? find_held_lock+0x2b/0x80 [ 82.184448][ T7215] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 82.184470][ T7215] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 82.184494][ T7215] ? avc_has_perm_noaudit+0x145/0x3b0 [ 82.184522][ T7215] ? __lock_acquire+0x49f/0x1a40 [ 82.184555][ T7215] ? find_held_lock+0x2b/0x80 [ 82.184572][ T7215] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 82.184595][ T7215] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 82.184621][ T7215] ? __pfx_rtnl_newlink+0x10/0x10 [ 82.184645][ T7215] rtnetlink_rcv_msg+0x95e/0xe90 [ 82.184671][ T7215] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 82.184702][ T7215] ? ref_tracker_free+0x37e/0x6c0 [ 82.184741][ T7215] netlink_rcv_skb+0x159/0x420 [ 82.184772][ T7215] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 82.184799][ T7215] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 82.184827][ T7215] ? netlink_deliver_tap+0x1ae/0xcc0 [ 82.184851][ T7215] netlink_unicast+0x585/0x850 [ 82.184874][ T7215] ? __pfx_netlink_unicast+0x10/0x10 [ 82.184915][ T7215] netlink_sendmsg+0x8b0/0xda0 [ 82.184935][ T7215] ? __pfx_netlink_sendmsg+0x10/0x10 [ 82.184959][ T7215] ? selinux_socket_sendmsg+0x198/0x2f0 [ 82.184987][ T7215] ____sys_sendmsg+0xa4d/0xbe0 [ 82.185015][ T7215] ? __pfx_netlink_sendmsg+0x10/0x10 [ 82.185060][ T7215] ? __pfx_____sys_sendmsg+0x10/0x10 [ 82.185100][ T7215] ___sys_sendmsg+0x190/0x1e0 [ 82.185120][ T7215] ? __pfx____sys_sendmsg+0x10/0x10 [ 82.185135][ T7215] ? __lock_acquire+0x49f/0x1a40 [ 82.185158][ T7215] ? get_pid_task+0x106/0x250 [ 82.185202][ T7215] __sys_sendmsg+0x160/0x210 [ 82.185226][ T7215] ? __pfx___sys_sendmsg+0x10/0x10 [ 82.185262][ T7215] do_syscall_64+0x115/0x870 [ 82.185286][ T7215] ? clear_bhb_loop+0x70/0xc0 [ 82.185308][ T7215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.185326][ T7215] RIP: 0033:0x7f574a99e0d9 [ 82.185342][ T7215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.185359][ T7215] RSP: 002b:00007f574b7bd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 82.185377][ T7215] RAX: ffffffffffffffda RBX: 00007f574ac25fa0 RCX: 00007f574a99e0d9 [ 82.185393][ T7215] RDX: 0000000000004040 RSI: 0000200000000180 RDI: 0000000000000003 [ 82.185404][ T7215] RBP: 00007f574b7bd090 R08: 0000000000000000 R09: 0000000000000000 [ 82.185414][ T7215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.185425][ T7215] R13: 00007f574ac26038 R14: 00007f574ac25fa0 R15: 00007ffca3c07068 [ 82.185449][ T7215] [ 82.190387][ T42] audit: type=1400 audit(1786574070.527:518): avc: denied { bind } for pid=7216 comm="syz.1.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 82.232302][ T7221] netlink: 32 bytes leftover after parsing attributes in process `syz.3.444'. [ 82.233006][ T42] audit: type=1400 audit(1786574070.537:519): avc: denied { mount } for pid=7218 comm="syz.2.443" name="/" dev="hugetlbfs" ino=17447 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 82.235606][ T7221] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 82.314824][ T7221] IPv6: NLM_F_CREATE should be set when creating new route [ 82.357975][ T7229] FAULT_INJECTION: forcing a failure. [ 82.357975][ T7229] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 82.362716][ T7229] CPU: 3 UID: 0 PID: 7229 Comm: syz.2.445 Tainted: G L syzkaller #0 PREEMPT(full) [ 82.362741][ T7229] Tainted: [L]=SOFTLOCKUP [ 82.362746][ T7229] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 82.362755][ T7229] Call Trace: [ 82.362761][ T7229] [ 82.362767][ T7229] dump_stack_lvl+0x100/0x190 [ 82.362791][ T7229] should_fail_ex.cold+0x5/0xa [ 82.362809][ T7229] strncpy_from_user+0x3b/0x2d0 [ 82.362831][ T7229] do_getname+0x78/0x390 [ 82.362852][ T7229] user_path_at+0x26/0x60 [ 82.362867][ T7229] __x64_sys_mount+0x1fb/0x310 [ 82.362887][ T7229] ? __pfx___x64_sys_mount+0x10/0x10 [ 82.362914][ T7229] do_syscall_64+0x115/0x870 [ 82.362934][ T7229] ? clear_bhb_loop+0x70/0xc0 [ 82.362967][ T7229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.362982][ T7229] RIP: 0033:0x7f1b30f9e0d9 [ 82.362995][ T7229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.363010][ T7229] RSP: 002b:00007f1b31db5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 82.363025][ T7229] RAX: ffffffffffffffda RBX: 00007f1b31225fa0 RCX: 00007f1b30f9e0d9 [ 82.363035][ T7229] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 0000000000000000 [ 82.363043][ T7229] RBP: 00007f1b31db5090 R08: 00002000000000c0 R09: 0000000000000000 [ 82.363051][ T7229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.363060][ T7229] R13: 00007f1b31226038 R14: 00007f1b31225fa0 R15: 00007fff298ac668 [ 82.363080][ T7229] [ 82.486227][ T7242] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(0) [ 82.488895][ T7242] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 82.497009][ T7242] vhci_hcd vhci_hcd.0: Device attached [ 82.499816][ T7248] vhci_hcd: unknown pdu 1 [ 82.501924][ T13] vhci_hcd vhci_hcd.2: stop threads [ 82.504029][ T13] vhci_hcd vhci_hcd.2: release socket [ 82.507987][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 82.605656][ T7264] netlink: 8 bytes leftover after parsing attributes in process `syz.3.457'. [ 82.609284][ T7264] netlink: 4 bytes leftover after parsing attributes in process `syz.3.457'. [ 82.731373][ T7275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.462'. [ 82.773895][ T7278] FAULT_INJECTION: forcing a failure. [ 82.773895][ T7278] name failslab, interval 1, probability 0, space 0, times 0 [ 82.782067][ T7278] CPU: 3 UID: 0 PID: 7278 Comm: syz.1.463 Tainted: G L syzkaller #0 PREEMPT(full) [ 82.782095][ T7278] Tainted: [L]=SOFTLOCKUP [ 82.782102][ T7278] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 82.782113][ T7278] Call Trace: [ 82.782120][ T7278] [ 82.782127][ T7278] dump_stack_lvl+0x100/0x190 [ 82.782155][ T7278] should_fail_ex.cold+0x5/0xa [ 82.782178][ T7278] should_failslab+0xc2/0x120 [ 82.782203][ T7278] __kmalloc_cache_noprof+0x91/0x6c0 [ 82.782222][ T7278] ? sctp_transport_new+0xa4/0x760 [ 82.782270][ T7278] sctp_transport_new+0xa4/0x760 [ 82.782293][ T7278] sctp_assoc_add_peer+0x34b/0x1550 [ 82.782318][ T7278] sctp_connect_new_asoc+0x1f8/0x770 [ 82.782341][ T7278] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 82.782363][ T7278] ? selinux_sctp_bind_connect+0xe0/0x230 [ 82.782401][ T7278] sctp_sendmsg+0x1743/0x22e0 [ 82.782428][ T7278] ? __pfx_sctp_sendmsg+0x10/0x10 [ 82.782447][ T7278] ? sock_has_perm+0x25a/0x2f0 [ 82.782469][ T7278] ? __pfx_sock_has_perm+0x10/0x10 [ 82.782500][ T7278] ? __might_fault+0xc5/0x140 [ 82.782526][ T7278] ? __pfx_sctp_sendmsg+0x10/0x10 [ 82.782547][ T7278] inet_sendmsg+0x11c/0x140 [ 82.782575][ T7278] __sys_sendto+0x453/0x4e0 [ 82.782596][ T7278] ? __pfx_inet_sendmsg+0x10/0x10 [ 82.782621][ T7278] ? __pfx___sys_sendto+0x10/0x10 [ 82.782648][ T7278] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 82.782683][ T7278] ? ksys_write+0x1ac/0x250 [ 82.782700][ T7278] ? __pfx_ksys_write+0x10/0x10 [ 82.782720][ T7278] __x64_sys_sendto+0xe0/0x1c0 [ 82.782740][ T7278] ? do_syscall_64+0x90/0x870 [ 82.782762][ T7278] ? lockdep_hardirqs_on+0x78/0x100 [ 82.782784][ T7278] do_syscall_64+0x115/0x870 [ 82.782806][ T7278] ? clear_bhb_loop+0x70/0xc0 [ 82.782828][ T7278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.782847][ T7278] RIP: 0033:0x7fe1ee99e0d9 [ 82.782863][ T7278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.782879][ T7278] RSP: 002b:00007fe1ef922028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 82.782896][ T7278] RAX: ffffffffffffffda RBX: 00007fe1eec25fa0 RCX: 00007fe1ee99e0d9 [ 82.782907][ T7278] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 82.782919][ T7278] RBP: 00007fe1ef922090 R08: 000020000005ffe4 R09: 000000000000001c [ 82.782928][ T7278] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000001 [ 82.782951][ T7278] R13: 00007fe1eec26038 R14: 00007fe1eec25fa0 R15: 00007ffc8db3ee78 [ 82.782975][ T7278] [ 82.965219][ T7288] FAULT_INJECTION: forcing a failure. [ 82.965219][ T7288] name failslab, interval 1, probability 0, space 0, times 0 [ 82.976435][ T7288] CPU: 1 UID: 0 PID: 7288 Comm: syz.1.466 Tainted: G L syzkaller #0 PREEMPT(full) [ 82.976457][ T7288] Tainted: [L]=SOFTLOCKUP [ 82.976461][ T7288] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 82.976469][ T7288] Call Trace: [ 82.976474][ T7288] [ 82.976479][ T7288] dump_stack_lvl+0x100/0x190 [ 82.976498][ T7288] should_fail_ex.cold+0x5/0xa [ 82.976513][ T7288] should_failslab+0xc2/0x120 [ 82.976529][ T7288] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 82.976545][ T7288] ? __alloc_skb+0x140/0x710 [ 82.976563][ T7288] __alloc_skb+0x140/0x710 [ 82.976575][ T7288] ? __alloc_skb+0x5b7/0x710 [ 82.976588][ T7288] ? __pfx___alloc_skb+0x10/0x10 [ 82.976606][ T7288] tipc_nl_compat_dumpit+0x295/0x820 [ 82.976624][ T7288] tipc_nl_compat_recv+0x973/0xc40 [ 82.976638][ T7288] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 82.976652][ T7288] ? __pfx_tipc_nl_bearer_dump+0x10/0x10 [ 82.976668][ T7288] ? __pfx_tipc_nl_compat_bearer_dump+0x10/0x10 [ 82.976687][ T7288] ? trace_contention_end+0x126/0x160 [ 82.976709][ T7288] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 82.976737][ T7288] genl_family_rcv_msg_doit+0x214/0x300 [ 82.976760][ T7288] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 82.976780][ T7288] ? genl_get_cmd+0x3e7/0x760 [ 82.976804][ T7288] ? __dev_queue_xmit+0xa33/0x4970 [ 82.976819][ T7288] ? __radix_tree_lookup+0x217/0x2b0 [ 82.976845][ T7288] genl_rcv_msg+0x560/0x800 [ 82.976867][ T7288] ? __pfx_genl_rcv_msg+0x10/0x10 [ 82.976887][ T7288] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 82.976914][ T7288] netlink_rcv_skb+0x159/0x420 [ 82.976933][ T7288] ? __pfx_genl_rcv_msg+0x10/0x10 [ 82.976953][ T7288] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 82.976982][ T7288] ? netlink_deliver_tap+0x1ae/0xcc0 [ 82.977002][ T7288] genl_rcv+0x28/0x40 [ 82.977020][ T7288] netlink_unicast+0x585/0x850 [ 82.977066][ T7288] ? __pfx_netlink_unicast+0x10/0x10 [ 82.977091][ T7288] netlink_sendmsg+0x8b0/0xda0 [ 82.977113][ T7288] ? __pfx_netlink_sendmsg+0x10/0x10 [ 82.977135][ T7288] ? selinux_socket_sendmsg+0x198/0x2f0 [ 82.977165][ T7288] ____sys_sendmsg+0xa4d/0xbe0 [ 82.977190][ T7288] ? __pfx_netlink_sendmsg+0x10/0x10 [ 82.977211][ T7288] ? __pfx_____sys_sendmsg+0x10/0x10 [ 82.977248][ T7288] ___sys_sendmsg+0x190/0x1e0 [ 82.977267][ T7288] ? __pfx____sys_sendmsg+0x10/0x10 [ 82.977283][ T7288] ? __lock_acquire+0x49f/0x1a40 [ 82.977304][ T7288] ? get_pid_task+0x106/0x250 [ 82.977348][ T7288] __sys_sendmsg+0x160/0x210 [ 82.977371][ T7288] ? __pfx___sys_sendmsg+0x10/0x10 [ 82.977411][ T7288] do_syscall_64+0x115/0x870 [ 82.977434][ T7288] ? clear_bhb_loop+0x70/0xc0 [ 82.977456][ T7288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.977475][ T7288] RIP: 0033:0x7fe1ee99e0d9 [ 82.977491][ T7288] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.977508][ T7288] RSP: 002b:00007fe1ef922028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 82.977525][ T7288] RAX: ffffffffffffffda RBX: 00007fe1eec25fa0 RCX: 00007fe1ee99e0d9 [ 82.977536][ T7288] RDX: 0000000020000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 82.977545][ T7288] RBP: 00007fe1ef922090 R08: 0000000000000000 R09: 0000000000000000 [ 82.977556][ T7288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.977566][ T7288] R13: 00007fe1eec26038 R14: 00007fe1eec25fa0 R15: 00007ffc8db3ee78 [ 82.977589][ T7288] [ 83.551289][ T7301] netlink: 224 bytes leftover after parsing attributes in process `syz.3.471'. [ 83.657453][ T7305] CUSE: info not properly terminated [ 83.659733][ T7305] overlay: Unknown parameter 'posixacl' [ 83.756736][ T7307] netlink: 'syz.3.474': attribute type 2 has an invalid length. [ 83.759809][ T7307] netlink: 'syz.3.474': attribute type 2 has an invalid length. [ 84.293760][ T7323] mmap: syz.1.482 (7323) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 84.365737][ T42] kauditd_printk_skb: 13 callbacks suppressed [ 84.365754][ T42] audit: type=1400 audit(1786574072.697:533): avc: denied { write } for pid=7326 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.392241][ T7334] FAULT_INJECTION: forcing a failure. [ 84.392241][ T7334] name failslab, interval 1, probability 0, space 0, times 0 [ 84.416461][ T7334] CPU: 3 UID: 0 PID: 7334 Comm: syz.1.484 Tainted: G L syzkaller #0 PREEMPT(full) [ 84.416491][ T7334] Tainted: [L]=SOFTLOCKUP [ 84.416497][ T7334] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 84.416508][ T7334] Call Trace: [ 84.416514][ T7334] [ 84.416521][ T7334] dump_stack_lvl+0x100/0x190 [ 84.416548][ T7334] should_fail_ex.cold+0x5/0xa [ 84.416570][ T7334] should_failslab+0xc2/0x120 [ 84.416607][ T7334] kmem_cache_alloc_noprof+0x91/0x6a0 [ 84.416628][ T7334] ? do_getname+0x35/0x390 [ 84.416655][ T7334] do_getname+0x35/0x390 [ 84.416678][ T7334] user_path_at+0x26/0x60 [ 84.416693][ T7334] __x64_sys_mount+0x1fb/0x310 [ 84.416717][ T7334] ? __pfx___x64_sys_mount+0x10/0x10 [ 84.416746][ T7334] do_syscall_64+0x115/0x870 [ 84.416768][ T7334] ? clear_bhb_loop+0x70/0xc0 [ 84.416788][ T7334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.416805][ T7334] RIP: 0033:0x7fe1ee99e0d9 [ 84.416819][ T7334] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.416835][ T7334] RSP: 002b:00007fe1ef922028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 84.416852][ T7334] RAX: ffffffffffffffda RBX: 00007fe1eec25fa0 RCX: 00007fe1ee99e0d9 [ 84.416864][ T7334] RDX: 0000200000002100 RSI: 00002000000020c0 RDI: 0000000000000000 [ 84.416874][ T7334] RBP: 00007fe1ef922090 R08: 0000200000000480 R09: 0000000000000000 [ 84.416885][ T7334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.416895][ T7334] R13: 00007fe1eec26038 R14: 00007fe1eec25fa0 R15: 00007ffc8db3ee78 [ 84.416918][ T7334] [ 84.545887][ T42] audit: type=1400 audit(1786574072.877:534): avc: denied { setattr } for pid=7335 comm="syz.2.487" name="[io_uring]" dev="anon_inodefs" ino=16756 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 84.558609][ T42] audit: type=1400 audit(1786574072.887:535): avc: denied { write } for pid=7338 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.683997][ T42] audit: type=1400 audit(1786574073.017:536): avc: denied { write } for pid=7343 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.743321][ T42] audit: type=1400 audit(1786574073.077:537): avc: denied { write } for pid=7349 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.757265][ T7350] block nbd2: NBD_DISCONNECT [ 84.772587][ T7353] team0: Device vlan2 is already an upper device of the team interface [ 84.785923][ T6527] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 84.823193][ T42] audit: type=1400 audit(1786574073.157:538): avc: denied { create } for pid=7351 comm="syz.3.491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 84.840273][ T42] audit: type=1400 audit(1786574073.167:539): avc: denied { ioctl } for pid=7355 comm="syz.4.492" path="socket:[18445]" dev="sockfs" ino=18445 ioctlcmd=0x662c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 84.879611][ T7362] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 84.885439][ T42] audit: type=1400 audit(1786574073.217:540): avc: denied { search } for pid=7361 comm="syz.3.494" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 84.893907][ T42] audit: type=1400 audit(1786574073.217:541): avc: denied { search } for pid=7361 comm="syz.3.494" name="events" dev="tracefs" ino=1073 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 84.905100][ T42] audit: type=1400 audit(1786574073.217:542): avc: denied { search } for pid=7361 comm="syz.3.494" name="kvm" dev="tracefs" ino=16135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 84.937462][ T6527] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 84.943540][ T6527] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 84.956000][ T6527] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 84.965887][ T6527] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.982075][ T7340] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 85.010306][ T6527] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 85.047448][ T64] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 85.051265][ T64] Bluetooth: hci2: Injecting HCI hardware error event [ 85.055911][ T64] Bluetooth: hci2: hardware error 0x00 [ 85.068772][ T7373] netlink: 8 bytes leftover after parsing attributes in process `syz.2.497'. [ 85.074822][ T7373] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 85.095085][ T7373] cramfs: block size(16384) > page size(4096) not supported by filesystem [ 85.121860][ T7373] cramfs: wrong magic [ 85.191646][ T7340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.199196][ T7340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.210604][ T6527] usb 6-1: USB disconnect, device number 2 [ 86.360559][ T7446] bond0: invalid NS target ff00:: specified for addition [ 86.367279][ T7446] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 86.569388][ T7455] FAULT_INJECTION: forcing a failure. [ 86.569388][ T7455] name failslab, interval 1, probability 0, space 0, times 0 [ 86.572347][ T7457] FAULT_INJECTION: forcing a failure. [ 86.572347][ T7457] name failslab, interval 1, probability 0, space 0, times 0 [ 86.579603][ T7457] CPU: 2 UID: 0 PID: 7457 Comm: syz.1.525 Tainted: G L syzkaller #0 PREEMPT(full) [ 86.579622][ T7457] Tainted: [L]=SOFTLOCKUP [ 86.579625][ T7457] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.579632][ T7457] Call Trace: [ 86.579637][ T7457] [ 86.579644][ T7457] dump_stack_lvl+0x100/0x190 [ 86.579669][ T7457] should_fail_ex.cold+0x5/0xa [ 86.579697][ T7457] should_failslab+0xc2/0x120 [ 86.579721][ T7457] __kmalloc_cache_noprof+0x91/0x6c0 [ 86.579739][ T7457] ? fuse_lookup_name+0x198/0x780 [ 86.579776][ T7457] fuse_lookup_name+0x198/0x780 [ 86.579799][ T7457] ? __pfx_fuse_lookup_name+0x10/0x10 [ 86.579818][ T7457] ? __pfx___mutex_lock+0x10/0x10 [ 86.579864][ T7457] fuse_lookup+0x209/0x550 [ 86.579883][ T7457] ? kasan_save_track+0x14/0x30 [ 86.579903][ T7457] ? __pfx_fuse_lookup+0x10/0x10 [ 86.579926][ T7457] ? do_raw_spin_unlock+0x145/0x1e0 [ 86.579944][ T7457] ? _raw_spin_unlock+0x28/0x50 [ 86.579959][ T7457] lookup_one_qstr_excl+0x1cd/0x250 [ 86.579976][ T7457] ? mnt_want_write+0x161/0x410 [ 86.579988][ T7457] filename_unlinkat+0x275/0x730 [ 86.580002][ T7457] ? __might_fault+0xc5/0x140 [ 86.580019][ T7457] ? __pfx_filename_unlinkat+0x10/0x10 [ 86.580046][ T7457] ? do_getname+0x191/0x390 [ 86.580069][ T7457] __x64_sys_unlinkat+0xc0/0x130 [ 86.580089][ T7457] do_syscall_64+0x115/0x870 [ 86.580109][ T7457] ? clear_bhb_loop+0x70/0xc0 [ 86.580130][ T7457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.580148][ T7457] RIP: 0033:0x7fe1ee99e0d9 [ 86.580164][ T7457] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.580181][ T7457] RSP: 002b:00007fe1ef922028 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 86.580199][ T7457] RAX: ffffffffffffffda RBX: 00007fe1eec25fa0 RCX: 00007fe1ee99e0d9 [ 86.580210][ T7457] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 86.580221][ T7457] RBP: 00007fe1ef922090 R08: 0000000000000000 R09: 0000000000000000 [ 86.580231][ T7457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.580241][ T7457] R13: 00007fe1eec26038 R14: 00007fe1eec25fa0 R15: 00007ffc8db3ee78 [ 86.580267][ T7457] [ 86.586608][ T7455] CPU: 3 UID: 0 PID: 7455 Comm: syz.2.524 Tainted: G L syzkaller #0 PREEMPT(full) [ 86.586632][ T7455] Tainted: [L]=SOFTLOCKUP [ 86.586638][ T7455] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.586647][ T7455] Call Trace: [ 86.586652][ T7455] [ 86.586658][ T7455] dump_stack_lvl+0x100/0x190 [ 86.586681][ T7455] should_fail_ex.cold+0x5/0xa [ 86.586700][ T7455] should_failslab+0xc2/0x120 [ 86.586721][ T7455] __kmalloc_cache_noprof+0x91/0x6c0 [ 86.586737][ T7455] ? tc_new_tfilter+0xe17/0x24a0 [ 86.586760][ T7455] tc_new_tfilter+0xe17/0x24a0 [ 86.586782][ T7455] ? avc_has_perm_noaudit+0x20/0x3b0 [ 86.586801][ T7455] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 86.586819][ T7455] ? __pfx_tc_new_tfilter+0x10/0x10 [ 86.586854][ T7455] ? find_held_lock+0x2b/0x80 [ 86.586868][ T7455] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 86.586897][ T7455] ? __pfx_tc_new_tfilter+0x10/0x10 [ 86.586913][ T7455] rtnetlink_rcv_msg+0x95e/0xe90 [ 86.586935][ T7455] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 86.586959][ T7455] ? __lock_acquire+0x49f/0x1a40 [ 86.586981][ T7455] netlink_rcv_skb+0x159/0x420 [ 86.586999][ T7455] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 86.587020][ T7455] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 86.587043][ T7455] ? netlink_deliver_tap+0x1ae/0xcc0 [ 86.587062][ T7455] netlink_unicast+0x585/0x850 [ 86.587080][ T7455] ? __pfx_netlink_unicast+0x10/0x10 [ 86.587095][ T7455] ? __pfx_sock_has_perm+0x10/0x10 [ 86.587119][ T7455] netlink_sendmsg+0x8b0/0xda0 [ 86.587138][ T7455] ? __pfx_netlink_sendmsg+0x10/0x10 [ 86.587156][ T7455] ? selinux_socket_sendmsg+0x198/0x2f0 [ 86.587179][ T7455] ____sys_sendmsg+0xa4d/0xbe0 [ 86.587202][ T7455] ? __pfx_netlink_sendmsg+0x10/0x10 [ 86.587220][ T7455] ? __pfx_____sys_sendmsg+0x10/0x10 [ 86.587251][ T7455] ___sys_sendmsg+0x190/0x1e0 [ 86.587267][ T7455] ? __pfx____sys_sendmsg+0x10/0x10 [ 86.587280][ T7455] ? __lock_acquire+0x49f/0x1a40 [ 86.587298][ T7455] ? get_pid_task+0x106/0x250 [ 86.587335][ T7455] __sys_sendmsg+0x160/0x210 [ 86.587354][ T7455] ? __pfx___sys_sendmsg+0x10/0x10 [ 86.587383][ T7455] do_syscall_64+0x115/0x870 [ 86.587404][ T7455] ? clear_bhb_loop+0x70/0xc0 [ 86.587422][ T7455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.587436][ T7455] RIP: 0033:0x7f1b30f9e0d9 [ 86.587451][ T7455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.587478][ T7455] RSP: 002b:00007f1b31db5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 86.587494][ T7455] RAX: ffffffffffffffda RBX: 00007f1b31225fa0 RCX: 00007f1b30f9e0d9 [ 86.587504][ T7455] RDX: 0000000000004880 RSI: 00002000000001c0 RDI: 0000000000000004 [ 86.587512][ T7455] RBP: 00007f1b31db5090 R08: 0000000000000000 R09: 0000000000000000 [ 86.587521][ T7455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.587530][ T7455] R13: 00007f1b31226038 R14: 00007f1b31225fa0 R15: 00007fff298ac668 [ 86.587550][ T7455] [ 86.894640][ T7466] FAULT_INJECTION: forcing a failure. [ 86.894640][ T7466] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 86.908130][ T7466] CPU: 1 UID: 0 PID: 7466 Comm: syz.3.527 Tainted: G L syzkaller #0 PREEMPT(full) [ 86.908161][ T7466] Tainted: [L]=SOFTLOCKUP [ 86.908168][ T7466] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.908178][ T7466] Call Trace: [ 86.908185][ T7466] [ 86.908191][ T7466] dump_stack_lvl+0x100/0x190 [ 86.908216][ T7466] should_fail_ex.cold+0x5/0xa [ 86.908231][ T7466] _copy_to_user+0x32/0xd0 [ 86.908260][ T7466] simple_read_from_buffer+0xcb/0x170 [ 86.908274][ T7466] proc_fail_nth_read+0x1af/0x230 [ 86.908301][ T7466] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 86.908330][ T7466] ? rw_verify_area+0xce/0x6d0 [ 86.908353][ T7466] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 86.908381][ T7466] vfs_read+0x1e4/0xb40 [ 86.908411][ T7466] ? __pfx_vfs_read+0x10/0x10 [ 86.908438][ T7466] ? __fget_files+0x215/0x3d0 [ 86.908463][ T7466] ? __fget_files+0x21f/0x3d0 [ 86.908487][ T7466] ksys_read+0x12a/0x250 [ 86.908501][ T7466] ? __pfx_ksys_read+0x10/0x10 [ 86.908515][ T7466] ? v4l2_ioctl+0x1c5/0x250 [ 86.908552][ T7466] do_syscall_64+0x115/0x870 [ 86.908567][ T7466] ? clear_bhb_loop+0x70/0xc0 [ 86.908581][ T7466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.908593][ T7466] RIP: 0033:0x7f574a95e90e [ 86.908604][ T7466] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 86.908615][ T7466] RSP: 002b:00007f574b7bcfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 86.908627][ T7466] RAX: ffffffffffffffda RBX: 00007f574b7bd6c0 RCX: 00007f574a95e90e [ 86.908634][ T7466] RDX: 000000000000000f RSI: 00007f574b7bd0a0 RDI: 0000000000000004 [ 86.908641][ T7466] RBP: 00007f574b7bd090 R08: 0000000000000000 R09: 0000000000000000 [ 86.908648][ T7466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.908654][ T7466] R13: 00007f574ac26038 R14: 00007f574ac25fa0 R15: 00007ffca3c07068 [ 86.908668][ T7466] [ 87.046544][ T7473] xt_l2tp: wrong L2TP version: 4 [ 87.139672][ T64] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 87.213490][ T7481] kvm: kvm [7480]: vcpu6, guest rIP: 0x9139 Unhandled WRMSR(0xc1) = 0xe50000000000 [ 87.217312][ T7481] kvm: kvm [7480]: vcpu6, guest rIP: 0x9139 Unhandled WRMSR(0xc2) = 0xe50000000000 [ 87.239699][ T7481] kvm: kvm [7480]: vcpu6, guest rIP: 0x9139 Unhandled WRMSR(0x11e) = 0xe500be702111 [ 87.260903][ T7481] kvm: kvm [7480]: vcpu6, guest rIP: 0x9139 Unhandled WRMSR(0x186) = 0xe50000000000 [ 87.264338][ T7481] kvm: kvm [7480]: vcpu6, guest rIP: 0x9139 Unhandled WRMSR(0x187) = 0xe50000000000 [ 87.390529][ T7494] netlink: 'syz.3.537': attribute type 10 has an invalid length. [ 87.642826][ T7515] overlayfs: failed to verify origin (120/file1, ino=672, err=-116) [ 87.646368][ T7517] netlink: 'syz.3.547': attribute type 2 has an invalid length. [ 87.646555][ T7515] overlayfs: failed to verify origin (120/file1, ino=672, err=-116) [ 87.649512][ T7517] FAULT_INJECTION: forcing a failure. [ 87.649512][ T7517] name failslab, interval 1, probability 0, space 0, times 0 [ 87.659063][ T7517] CPU: 3 UID: 0 PID: 7517 Comm: syz.3.547 Tainted: G L syzkaller #0 PREEMPT(full) [ 87.659090][ T7517] Tainted: [L]=SOFTLOCKUP [ 87.659097][ T7517] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 87.659107][ T7517] Call Trace: [ 87.659114][ T7517] [ 87.659120][ T7517] dump_stack_lvl+0x100/0x190 [ 87.659149][ T7517] should_fail_ex.cold+0x5/0xa [ 87.659172][ T7517] should_failslab+0xc2/0x120 [ 87.659195][ T7517] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 87.659220][ T7517] ? __alloc_skb+0x5b7/0x710 [ 87.659242][ T7517] ? __alloc_skb+0x140/0x710 [ 87.659265][ T7517] __alloc_skb+0x140/0x710 [ 87.659285][ T7517] ? __alloc_skb+0x5b7/0x710 [ 87.659303][ T7517] ? __pfx___alloc_skb+0x10/0x10 [ 87.659332][ T7517] rtnl_net_getid+0x4ac/0x9e0 [ 87.659359][ T7517] ? __pfx_rtnl_net_getid+0x10/0x10 [ 87.659391][ T7517] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 87.659414][ T7517] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 87.659440][ T7517] ? __pfx_rtnl_net_getid+0x10/0x10 [ 87.659465][ T7517] rtnetlink_rcv_msg+0x95e/0xe90 [ 87.659490][ T7517] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 87.659521][ T7517] ? ref_tracker_free+0x37e/0x6c0 [ 87.659551][ T7517] netlink_rcv_skb+0x159/0x420 [ 87.659569][ T7517] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 87.659596][ T7517] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 87.659622][ T7517] ? netlink_deliver_tap+0x1ae/0xcc0 [ 87.659645][ T7517] netlink_unicast+0x585/0x850 [ 87.659675][ T7517] ? __pfx_netlink_unicast+0x10/0x10 [ 87.659699][ T7517] netlink_sendmsg+0x8b0/0xda0 [ 87.659723][ T7517] ? __pfx_netlink_sendmsg+0x10/0x10 [ 87.659743][ T7517] ? selinux_socket_sendmsg+0x198/0x2f0 [ 87.659774][ T7517] ____sys_sendmsg+0xa4d/0xbe0 [ 87.659800][ T7517] ? __pfx_netlink_sendmsg+0x10/0x10 [ 87.659821][ T7517] ? __pfx_____sys_sendmsg+0x10/0x10 [ 87.659860][ T7517] ___sys_sendmsg+0x190/0x1e0 [ 87.659880][ T7517] ? __pfx____sys_sendmsg+0x10/0x10 [ 87.659895][ T7517] ? __lock_acquire+0x49f/0x1a40 [ 87.659918][ T7517] ? get_pid_task+0x106/0x250 [ 87.659962][ T7517] __sys_sendmsg+0x160/0x210 [ 87.659986][ T7517] ? __pfx___sys_sendmsg+0x10/0x10 [ 87.660023][ T7517] do_syscall_64+0x115/0x870 [ 87.660047][ T7517] ? clear_bhb_loop+0x70/0xc0 [ 87.660069][ T7517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.660087][ T7517] RIP: 0033:0x7f574a99e0d9 [ 87.660104][ T7517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.660121][ T7517] RSP: 002b:00007f574b7bd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 87.660140][ T7517] RAX: ffffffffffffffda RBX: 00007f574ac25fa0 RCX: 00007f574a99e0d9 [ 87.660152][ T7517] RDX: 0000000004040014 RSI: 00002000000003c0 RDI: 0000000000000003 [ 87.660163][ T7517] RBP: 00007f574b7bd090 R08: 0000000000000000 R09: 0000000000000000 [ 87.660173][ T7517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.660183][ T7517] R13: 00007f574ac26038 R14: 00007f574ac25fa0 R15: 00007ffca3c07068 [ 87.660207][ T7517] [ 87.860704][ T7525] FAULT_INJECTION: forcing a failure. [ 87.860704][ T7525] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 87.866256][ T7525] CPU: 2 UID: 0 PID: 7525 Comm: syz.3.550 Tainted: G L syzkaller #0 PREEMPT(full) [ 87.866284][ T7525] Tainted: [L]=SOFTLOCKUP [ 87.866291][ T7525] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 87.866302][ T7525] Call Trace: [ 87.866308][ T7525] [ 87.866315][ T7525] dump_stack_lvl+0x100/0x190 [ 87.866343][ T7525] should_fail_ex.cold+0x5/0xa [ 87.866367][ T7525] _copy_from_iter+0x1f4/0x1690 [ 87.866393][ T7525] ? __lock_acquire+0x49f/0x1a40 [ 87.866418][ T7525] ? __pfx__copy_from_iter+0x10/0x10 [ 87.866454][ T7525] ping_common_sendmsg+0xc4/0x2e0 [ 87.866483][ T7525] ping_v6_sendmsg+0x1fa/0x1600 [ 87.866506][ T7525] ? look_up_lock_class+0x64/0x120 [ 87.866536][ T7525] ? __pfx_ping_v6_sendmsg+0x10/0x10 [ 87.866570][ T7525] ? reacquire_held_locks+0xce/0x1e0 [ 87.866591][ T7525] ? release_sock+0x21/0x280 [ 87.866617][ T7525] ? inet_autobind+0x145/0x1a0 [ 87.866645][ T7525] ? lockdep_hardirqs_on+0x78/0x100 [ 87.866666][ T7525] ? inet_autobind+0x145/0x1a0 [ 87.866685][ T7525] ? __local_bh_enable_ip+0x9e/0x120 [ 87.866709][ T7525] ? inet_autobind+0x14a/0x1a0 [ 87.866729][ T7525] ? __pfx_ping_v6_sendmsg+0x10/0x10 [ 87.866754][ T7525] inet_sendmsg+0x11c/0x140 [ 87.866779][ T7525] ____sys_sendmsg+0x9c9/0xbe0 [ 87.866804][ T7525] ? __pfx_inet_sendmsg+0x10/0x10 [ 87.866831][ T7525] ? __pfx_____sys_sendmsg+0x10/0x10 [ 87.866868][ T7525] ___sys_sendmsg+0x190/0x1e0 [ 87.866893][ T7525] ? __pfx____sys_sendmsg+0x10/0x10 [ 87.866909][ T7525] ? __lock_acquire+0x49f/0x1a40 [ 87.866931][ T7525] ? get_pid_task+0x106/0x250 [ 87.866974][ T7525] __sys_sendmsg+0x160/0x210 [ 87.866996][ T7525] ? __pfx___sys_sendmsg+0x10/0x10 [ 87.867030][ T7525] do_syscall_64+0x115/0x870 [ 87.867051][ T7525] ? clear_bhb_loop+0x70/0xc0 [ 87.867073][ T7525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.867090][ T7525] RIP: 0033:0x7f574a99e0d9 [ 87.867106][ T7525] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.867122][ T7525] RSP: 002b:00007f574b7bd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 87.867140][ T7525] RAX: ffffffffffffffda RBX: 00007f574ac25fa0 RCX: 00007f574a99e0d9 [ 87.867151][ T7525] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 87.867161][ T7525] RBP: 00007f574b7bd090 R08: 0000000000000000 R09: 0000000000000000 [ 87.867172][ T7525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.867182][ T7525] R13: 00007f574ac26038 R14: 00007f574ac25fa0 R15: 00007ffca3c07068 [ 87.867205][ T7525] [ 87.921350][ T7529] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 88.009128][ T7534] FAULT_INJECTION: forcing a failure. [ 88.009128][ T7534] name failslab, interval 1, probability 0, space 0, times 0 [ 88.014596][ T7534] CPU: 3 UID: 0 PID: 7534 Comm: syz.1.554 Tainted: G L syzkaller #0 PREEMPT(full) [ 88.014628][ T7534] Tainted: [L]=SOFTLOCKUP [ 88.014632][ T7534] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 88.014639][ T7534] Call Trace: [ 88.014644][ T7534] [ 88.014649][ T7534] dump_stack_lvl+0x100/0x190 [ 88.014668][ T7534] should_fail_ex.cold+0x5/0xa [ 88.014682][ T7534] should_failslab+0xc2/0x120 [ 88.014699][ T7534] __kmalloc_cache_noprof+0x91/0x6c0 [ 88.014711][ T7534] ? sctp_transport_new+0xa4/0x760 [ 88.014728][ T7534] sctp_transport_new+0xa4/0x760 [ 88.014744][ T7534] sctp_assoc_add_peer+0x34b/0x1550 [ 88.014759][ T7534] sctp_connect_new_asoc+0x1f8/0x770 [ 88.014773][ T7534] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 88.014787][ T7534] ? selinux_sctp_bind_connect+0xe0/0x230 [ 88.014808][ T7534] sctp_sendmsg+0x1743/0x22e0 [ 88.014824][ T7534] ? __pfx_sctp_sendmsg+0x10/0x10 [ 88.014836][ T7534] ? sock_has_perm+0x25a/0x2f0 [ 88.014851][ T7534] ? __pfx_sock_has_perm+0x10/0x10 [ 88.014870][ T7534] ? __might_fault+0xc5/0x140 [ 88.014885][ T7534] ? __pfx_sctp_sendmsg+0x10/0x10 [ 88.014898][ T7534] inet_sendmsg+0x11c/0x140 [ 88.014916][ T7534] __sys_sendto+0x453/0x4e0 [ 88.014930][ T7534] ? __pfx_inet_sendmsg+0x10/0x10 [ 88.014946][ T7534] ? __pfx___sys_sendto+0x10/0x10 [ 88.014963][ T7534] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 88.014985][ T7534] ? ksys_write+0x1ac/0x250 [ 88.014996][ T7534] ? __pfx_ksys_write+0x10/0x10 [ 88.015007][ T7534] __x64_sys_sendto+0xe0/0x1c0 [ 88.015020][ T7534] ? do_syscall_64+0x90/0x870 [ 88.015035][ T7534] ? lockdep_hardirqs_on+0x78/0x100 [ 88.015050][ T7534] do_syscall_64+0x115/0x870 [ 88.015064][ T7534] ? clear_bhb_loop+0x70/0xc0 [ 88.015078][ T7534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.015090][ T7534] RIP: 0033:0x7fe1ee99e0d9 [ 88.015101][ T7534] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.015112][ T7534] RSP: 002b:00007fe1ef922028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 88.015124][ T7534] RAX: ffffffffffffffda RBX: 00007fe1eec25fa0 RCX: 00007fe1ee99e0d9 [ 88.015131][ T7534] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000003 [ 88.015137][ T7534] RBP: 00007fe1ef922090 R08: 0000200000000140 R09: 000000000000001c [ 88.015144][ T7534] R10: 000000002404c8d5 R11: 0000000000000246 R12: 0000000000000001 [ 88.015151][ T7534] R13: 00007fe1eec26038 R14: 00007fe1eec25fa0 R15: 00007ffc8db3ee78 [ 88.015165][ T7534] [ 88.139315][ T7540] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7540 comm=syz.1.556 [ 88.209220][ T7544] 9pnet_virtio: no channels available for device syz [ 88.383098][ T5722] overlayfs: metacopy with no lower data found - abort lookup (/file1) [ 88.388560][ T5722] overlayfs: failed to look up (file1) for ino (-5) [ 88.392771][ T5722] overlayfs: failed lookup in lower (newroot/120, name='file0', err=-40): overlapping layers [ 88.397343][ T5722] overlayfs: failed lookup in lower (newroot/120, name='file0', err=-40): overlapping layers [ 88.440843][ T7567] FAULT_INJECTION: forcing a failure. [ 88.440843][ T7567] name failslab, interval 1, probability 0, space 0, times 0 [ 88.445952][ T7567] CPU: 0 UID: 0 PID: 7567 Comm: syz.4.568 Tainted: G L syzkaller #0 PREEMPT(full) [ 88.445978][ T7567] Tainted: [L]=SOFTLOCKUP [ 88.445983][ T7567] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 88.445993][ T7567] Call Trace: [ 88.445999][ T7567] [ 88.446005][ T7567] dump_stack_lvl+0x100/0x190 [ 88.446031][ T7567] should_fail_ex.cold+0x5/0xa [ 88.446049][ T7567] should_failslab+0xc2/0x120 [ 88.446071][ T7567] kmem_cache_alloc_noprof+0x91/0x6a0 [ 88.446090][ T7567] ? find_held_lock+0x2b/0x80 [ 88.446106][ T7567] ? do_getname+0x35/0x390 [ 88.446131][ T7567] do_getname+0x35/0x390 [ 88.446154][ T7567] do_utimes_path+0xc9/0x1b0 [ 88.446190][ T7567] ? __pfx_do_utimes_path+0x10/0x10 [ 88.446218][ T7567] do_utimes+0x34/0x100 [ 88.446240][ T7567] do_futimesat+0x18b/0x200 [ 88.446261][ T7567] ? __pfx_do_futimesat+0x10/0x10 [ 88.446283][ T7567] ? ksys_write+0x1ac/0x250 [ 88.446305][ T7567] do_syscall_64+0x115/0x870 [ 88.446327][ T7567] ? clear_bhb_loop+0x70/0xc0 [ 88.446352][ T7567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.446369][ T7567] RIP: 0033:0x7f9eb819e0d9 [ 88.446382][ T7567] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.446397][ T7567] RSP: 002b:00007f9eb9049028 EFLAGS: 00000246 ORIG_RAX: 00000000000000eb [ 88.446410][ T7567] RAX: ffffffffffffffda RBX: 00007f9eb8425fa0 RCX: 00007f9eb819e0d9 [ 88.446422][ T7567] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000200000000040 [ 88.446432][ T7567] RBP: 00007f9eb9049090 R08: 0000000000000000 R09: 0000000000000000 [ 88.446441][ T7567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.446452][ T7567] R13: 00007f9eb8426038 R14: 00007f9eb8425fa0 R15: 00007fffbaa94df8 [ 88.446474][ T7567] [ 88.665865][ T1481] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 88.839065][ T1481] usb 6-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 88.840081][ T5082] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.843499][ T1481] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 88.848087][ T5082] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.851894][ T1481] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 88.853426][ T5082] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.858152][ T1481] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.858743][ T5082] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.861138][ T1481] usb 6-1: Product: syz [ 88.864524][ T1481] usb 6-1: Manufacturer: syz [ 88.864958][ T5082] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.866481][ T1481] usb 6-1: SerialNumber: syz [ 88.879974][ T1481] ti_usb_3410_5052 6-1:2.0: TI USB 5052 2 port adapter converter detected [ 88.894460][ T1481] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 88.902151][ T1481] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 89.148874][ T7594] netlink: 'syz.3.577': attribute type 10 has an invalid length. [ 89.202511][ T7598] fuse: Bad value for 'user_id' [ 89.205288][ T7598] fuse: Bad value for 'user_id' [ 89.328492][ T7580] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.333400][ T7580] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.336613][ T7580] bridge_slave_0: entered allmulticast mode [ 89.342624][ T7580] bridge_slave_0: entered promiscuous mode [ 89.355309][ T7580] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.358992][ T7580] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.361365][ T7580] bridge_slave_1: entered allmulticast mode [ 89.364489][ T7580] bridge_slave_1: entered promiscuous mode [ 89.394040][ T7609] netlink: 48 bytes leftover after parsing attributes in process `syz.3.581'. [ 89.409994][ T7580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.414738][ T7580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.431011][ T7611] FAULT_INJECTION: forcing a failure. [ 89.431011][ T7611] name failslab, interval 1, probability 0, space 0, times 0 [ 89.431672][ T7580] team0: Port device team_slave_0 added [ 89.435128][ T7611] CPU: 1 UID: 0 PID: 7611 Comm: syz.3.582 Tainted: G L syzkaller #0 PREEMPT(full) [ 89.435146][ T7611] Tainted: [L]=SOFTLOCKUP [ 89.435150][ T7611] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 89.435157][ T7611] Call Trace: [ 89.435162][ T7611] [ 89.435167][ T7611] dump_stack_lvl+0x100/0x190 [ 89.435186][ T7611] should_fail_ex.cold+0x5/0xa [ 89.435215][ T7611] should_failslab+0xc2/0x120 [ 89.435234][ T7611] __kmalloc_noprof+0xfc/0x820 [ 89.435247][ T7611] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 89.435267][ T7611] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 89.435289][ T7611] genl_family_rcv_msg_doit+0xc7/0x300 [ 89.435305][ T7611] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 89.435324][ T7611] ? bpf_lsm_capable+0x9/0x10 [ 89.435336][ T7611] ? security_capable+0x80/0x260 [ 89.435351][ T7611] ? ns_capable+0xd2/0xf0 [ 89.435367][ T7611] genl_rcv_msg+0x560/0x800 [ 89.435383][ T7611] ? __pfx_genl_rcv_msg+0x10/0x10 [ 89.435397][ T7611] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 89.435415][ T7611] netlink_rcv_skb+0x159/0x420 [ 89.435427][ T7611] ? __pfx_genl_rcv_msg+0x10/0x10 [ 89.435441][ T7611] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 89.435459][ T7611] ? netlink_deliver_tap+0x1ae/0xcc0 [ 89.435472][ T7611] genl_rcv+0x28/0x40 [ 89.435484][ T7611] netlink_unicast+0x585/0x850 [ 89.435498][ T7611] ? __pfx_netlink_unicast+0x10/0x10 [ 89.435510][ T7611] ? __pfx_sock_has_perm+0x10/0x10 [ 89.435528][ T7611] netlink_sendmsg+0x8b0/0xda0 [ 89.435543][ T7611] ? __pfx_netlink_sendmsg+0x10/0x10 [ 89.435556][ T7611] ? selinux_socket_sendmsg+0x198/0x2f0 [ 89.435575][ T7611] ____sys_sendmsg+0xa4d/0xbe0 [ 89.435593][ T7611] ? __pfx_netlink_sendmsg+0x10/0x10 [ 89.435606][ T7611] ? __pfx_____sys_sendmsg+0x10/0x10 [ 89.435630][ T7611] ___sys_sendmsg+0x190/0x1e0 [ 89.435642][ T7611] ? __pfx____sys_sendmsg+0x10/0x10 [ 89.435653][ T7611] ? __lock_acquire+0x49f/0x1a40 [ 89.435667][ T7611] ? get_pid_task+0x106/0x250 [ 89.435693][ T7611] __sys_sendmsg+0x160/0x210 [ 89.435708][ T7611] ? __pfx___sys_sendmsg+0x10/0x10 [ 89.435730][ T7611] do_syscall_64+0x115/0x870 [ 89.435746][ T7611] ? clear_bhb_loop+0x70/0xc0 [ 89.435759][ T7611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.435771][ T7611] RIP: 0033:0x7f574a99e0d9 [ 89.435781][ T7611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.435792][ T7611] RSP: 002b:00007f574b7bd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 89.435804][ T7611] RAX: ffffffffffffffda RBX: 00007f574ac25fa0 RCX: 00007f574a99e0d9 [ 89.435811][ T7611] RDX: 00000000040040c4 RSI: 0000200000000200 RDI: 0000000000000003 [ 89.435817][ T7611] RBP: 00007f574b7bd090 R08: 0000000000000000 R09: 0000000000000000 [ 89.435825][ T7611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.435834][ T7611] R13: 00007f574ac26038 R14: 00007f574ac25fa0 R15: 00007ffca3c07068 [ 89.435856][ T7611] [ 89.539294][ T7580] team0: Port device team_slave_1 added [ 89.554211][ T7580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.557271][ T7580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.564893][ T7580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.570080][ T7580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.572151][ T7580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.579940][ T7580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.602019][ T7580] hsr_slave_0: entered promiscuous mode [ 89.604221][ T7580] hsr_slave_1: entered promiscuous mode [ 89.606353][ T7580] debugfs: 'hsr0' already exists in 'hsr' [ 89.608105][ T7580] Cannot create hsr debugfs directory [ 89.646171][ T7619] xt_connbytes: Forcing CT accounting to be enabled [ 89.648393][ T7619] xt_CT: You must specify a L4 protocol and not use inversions on it [ 89.667275][ T7621] netlink: 'syz.4.587': attribute type 2 has an invalid length. [ 89.762849][ T42] kauditd_printk_skb: 38 callbacks suppressed [ 89.762863][ T42] audit: type=1400 audit(1786574078.097:581): avc: denied { watch watch_reads } for pid=7631 comm="syz.4.591" path="/44/file0" dev="tmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 89.773164][ T42] audit: type=1400 audit(1786574078.107:582): avc: denied { create } for pid=7631 comm="syz.4.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 89.774277][ T7632] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 89.781528][ T42] audit: type=1400 audit(1786574078.107:583): avc: denied { setopt } for pid=7631 comm="syz.4.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 89.785083][ T7632] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 89.794257][ T42] audit: type=1400 audit(1786574078.107:584): avc: denied { write } for pid=7631 comm="syz.4.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 89.830226][ T7580] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 89.845647][ T7580] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.850162][ T7580] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 89.855520][ T7580] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.860925][ T7580] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 89.866617][ T7580] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.870744][ T7580] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 89.877531][ T7580] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.902868][ T7580] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.905966][ T7580] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.909129][ T7580] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.912032][ T7580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.962275][ T7580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.977735][ T6385] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.980779][ T6385] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.990200][ T7580] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.999522][ T6107] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.001770][ T6107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.010477][ T6107] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.012667][ T6107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.153248][ T7660] FAULT_INJECTION: forcing a failure. [ 90.153248][ T7660] name failslab, interval 1, probability 0, space 0, times 0 [ 90.158455][ T7660] CPU: 2 UID: 0 PID: 7660 Comm: syz.4.597 Tainted: G L syzkaller #0 PREEMPT(full) [ 90.158474][ T7660] Tainted: [L]=SOFTLOCKUP [ 90.158478][ T7660] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 90.158485][ T7660] Call Trace: [ 90.158489][ T7660] [ 90.158493][ T7660] dump_stack_lvl+0x100/0x190 [ 90.158512][ T7660] should_fail_ex.cold+0x5/0xa [ 90.158528][ T7660] should_failslab+0xc2/0x120 [ 90.158544][ T7660] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 90.158559][ T7660] ? __alloc_skb+0x140/0x710 [ 90.158577][ T7660] __alloc_skb+0x140/0x710 [ 90.158589][ T7660] ? __alloc_skb+0x5b7/0x710 [ 90.158602][ T7660] ? __pfx___alloc_skb+0x10/0x10 [ 90.158620][ T7660] _sctp_make_chunk+0x51/0x270 [ 90.158638][ T7660] sctp_make_control+0x2f/0x2d0 [ 90.158654][ T7660] sctp_make_heartbeat+0xad/0x2f0 [ 90.158671][ T7660] ? __pfx_sctp_make_heartbeat+0x10/0x10 [ 90.158691][ T7660] ? sctp_sm_lookup_event+0x10e/0x520 [ 90.158707][ T7660] ? __pfx_sctp_sm_lookup_event+0x10/0x10 [ 90.158724][ T7660] ? __pfx_sctp_pname+0x10/0x10 [ 90.158739][ T7660] sctp_sf_do_prm_requestheartbeat+0x27/0x220 [ 90.158753][ T7660] ? __pfx_sctp_pname+0x10/0x10 [ 90.158768][ T7660] sctp_do_sm+0x17a/0x5be0 [ 90.158782][ T7660] ? stack_depot_save_flags+0x27/0x9d0 [ 90.158809][ T7660] ? __pfx_sctp_do_sm+0x10/0x10 [ 90.158821][ T7660] ? __kasan_kmalloc+0xaa/0xb0 [ 90.158835][ T7660] ? sctp_setsockopt+0x511/0xb370 [ 90.158846][ T7660] ? do_sock_setsockopt+0xf3/0x1d0 [ 90.158863][ T7660] ? __sys_setsockopt+0x195/0x220 [ 90.158877][ T7660] ? __x64_sys_setsockopt+0xbd/0x160 [ 90.158890][ T7660] ? do_syscall_64+0x115/0x870 [ 90.158923][ T7660] sctp_primitive_REQUESTHEARTBEAT+0x9f/0xd0 [ 90.158939][ T7660] sctp_apply_peer_addr_params+0x110/0x3690 [ 90.158961][ T7660] sctp_setsockopt+0x28d6/0xb370 [ 90.158977][ T7660] ? __pfx_sctp_setsockopt+0x10/0x10 [ 90.158990][ T7660] ? __fget_files+0x215/0x3d0 [ 90.159004][ T7660] ? selinux_socket_setsockopt+0x6a/0x80 [ 90.159020][ T7660] ? sock_common_setsockopt+0x2e/0xf0 [ 90.159037][ T7660] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 90.159056][ T7660] do_sock_setsockopt+0xf3/0x1d0 [ 90.159074][ T7660] __sys_setsockopt+0x195/0x220 [ 90.159091][ T7660] __x64_sys_setsockopt+0xbd/0x160 [ 90.159104][ T7660] ? do_syscall_64+0x90/0x870 [ 90.159119][ T7660] ? lockdep_hardirqs_on+0x78/0x100 [ 90.159133][ T7660] do_syscall_64+0x115/0x870 [ 90.159148][ T7660] ? clear_bhb_loop+0x70/0xc0 [ 90.159162][ T7660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.159173][ T7660] RIP: 0033:0x7f9eb819e0d9 [ 90.159183][ T7660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.159194][ T7660] RSP: 002b:00007f9eb9049028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 90.159206][ T7660] RAX: ffffffffffffffda RBX: 00007f9eb8425fa0 RCX: 00007f9eb819e0d9 [ 90.159213][ T7660] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000005 [ 90.159219][ T7660] RBP: 00007f9eb9049090 R08: 000000000000009c R09: 0000000000000000 [ 90.159225][ T7660] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 90.159232][ T7660] R13: 00007f9eb8426038 R14: 00007f9eb8425fa0 R15: 00007fffbaa94df8 [ 90.159245][ T7660] [ 90.219806][ T7665] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 90.268374][ T7665] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 90.274081][ T42] audit: type=1400 audit(1786574078.607:585): avc: denied { read } for pid=7668 comm="syz.4.600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 90.274438][ T7665] vhci_hcd vhci_hcd.0: Device attached [ 90.292157][ T42] audit: type=1400 audit(1786574078.627:586): avc: denied { accept } for pid=7664 comm="syz.3.599" laddr=::1 lport=44647 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 90.326820][ T7674] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5132 sclass=netlink_route_socket pid=7674 comm=syz.4.600 [ 90.332955][ T7674] sctp: [Deprecated]: syz.4.600 (pid 7674) Use of struct sctp_assoc_value in delayed_ack socket option. [ 90.332955][ T7674] Use struct sctp_sack_info instead [ 90.361457][ T7666] vhci_hcd: connection closed [ 90.365080][ T13] vhci_hcd vhci_hcd.3: stop threads [ 90.372639][ T13] vhci_hcd vhci_hcd.3: release socket [ 90.374505][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 90.400904][ T7580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.559240][ T7580] veth0_vlan: entered promiscuous mode [ 90.564758][ T7580] veth1_vlan: entered promiscuous mode [ 90.581565][ T7580] veth0_macvtap: entered promiscuous mode [ 90.587915][ T7580] veth1_macvtap: entered promiscuous mode [ 90.598406][ T7580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.607367][ T7580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.661281][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.692353][ T6385] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.695078][ T6385] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.708449][ T6389] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.711983][ T6389] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.723157][ T42] audit: type=1400 audit(1786574079.057:587): avc: denied { mounton } for pid=7580 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 90.735936][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.740674][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.744832][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.817450][ T7565] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot clear input buffers, -110 [ 90.824111][ T1036] usb 6-1: USB disconnect, device number 3 [ 90.828594][ T7687] geneve2: entered promiscuous mode [ 90.830889][ T7687] geneve2: entered allmulticast mode [ 90.844767][ T1036] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 90.856451][ T1036] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 90.869478][ T1036] ti_usb_3410_5052 6-1:2.0: device disconnected [ 90.872224][ T7688] netlink: 8 bytes leftover after parsing attributes in process `syz.5.601'. [ 90.877601][ T7688] netlink: 12 bytes leftover after parsing attributes in process `syz.5.601'. [ 90.881461][ T7688] netlink: 'syz.5.601': attribute type 19 has an invalid length. [ 90.886543][ T5082] Bluetooth: hci3: command tx timeout [ 90.906827][ T12] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.910380][ T12] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.913824][ T12] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.917143][ T12] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.975079][ T7694] FAULT_INJECTION: forcing a failure. [ 90.975079][ T7694] name failslab, interval 1, probability 0, space 0, times 0 [ 90.980612][ T7694] CPU: 1 UID: 0 PID: 7694 Comm: syz.5.604 Tainted: G L syzkaller #0 PREEMPT(full) [ 90.980632][ T7694] Tainted: [L]=SOFTLOCKUP [ 90.980636][ T7694] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 90.980643][ T7694] Call Trace: [ 90.980647][ T7694] [ 90.980652][ T7694] dump_stack_lvl+0x100/0x190 [ 90.980671][ T7694] should_fail_ex.cold+0x5/0xa [ 90.980686][ T7694] should_failslab+0xc2/0x120 [ 90.980703][ T7694] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 90.980719][ T7694] ? trace_kmem_cache_alloc+0xdd/0x100 [ 90.980734][ T7694] ? __kasan_slab_alloc+0x89/0x90 [ 90.980749][ T7694] ? cond_bools_copy+0x45/0xf0 [ 90.980769][ T7694] kmemdup_noprof+0x29/0x60 [ 90.980787][ T7694] cond_bools_copy+0x45/0xf0 [ 90.980805][ T7694] hashtab_duplicate+0x24a/0x5c0 [ 90.980831][ T7694] ? __pfx_cond_bools_copy+0x10/0x10 [ 90.980854][ T7694] ? __pfx_cond_bools_destroy+0x10/0x10 [ 90.980879][ T7694] cond_policydb_dup+0x155/0x750 [ 90.980901][ T7694] ? security_set_bools+0x115/0x6c0 [ 90.980923][ T7694] ? __asan_memcpy+0x3c/0x60 [ 90.980943][ T7694] security_set_bools+0x13f/0x6c0 [ 90.980963][ T7694] ? sel_commit_bools_write+0x25b/0x420 [ 90.980980][ T7694] sel_commit_bools_write+0x36d/0x420 [ 90.981020][ T7694] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 90.981039][ T7694] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 90.981054][ T7694] vfs_writev+0x5ed/0xdd0 [ 90.981075][ T7694] ? __pfx_vfs_writev+0x10/0x10 [ 90.981093][ T7694] ? rcu_read_lock_any_held+0x6a/0xa0 [ 90.981113][ T7694] ? __fget_files+0x21f/0x3d0 [ 90.981129][ T7694] ? do_writev+0x13e/0x340 [ 90.981146][ T7694] do_writev+0x13e/0x340 [ 90.981163][ T7694] ? __pfx_do_writev+0x10/0x10 [ 90.981183][ T7694] do_syscall_64+0x115/0x870 [ 90.981200][ T7694] ? clear_bhb_loop+0x70/0xc0 [ 90.981214][ T7694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.981226][ T7694] RIP: 0033:0x7f707b79e0d9 [ 90.981236][ T7694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.981248][ T7694] RSP: 002b:00007f707c6fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 90.981259][ T7694] RAX: ffffffffffffffda RBX: 00007f707ba25fa0 RCX: 00007f707b79e0d9 [ 90.981267][ T7694] RDX: 0000000000000001 RSI: 00002000000025c0 RDI: 0000000000000003 [ 90.981273][ T7694] RBP: 00007f707c6fe090 R08: 0000000000000000 R09: 0000000000000000 [ 90.981280][ T7694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 90.981287][ T7694] R13: 00007f707ba26038 R14: 00007f707ba25fa0 R15: 00007fff41c5c308 [ 90.981301][ T7694] [ 91.083194][ T42] audit: type=1400 audit(1786574079.417:588): avc: denied { bpf } for pid=7696 comm="syz.5.605" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 91.091709][ T42] audit: type=1400 audit(1786574079.417:589): avc: denied { module_request } for pid=7696 comm="syz.5.605" kmod=72746E6C2D6C696E6B2D6272696467655F73A1980138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 91.151272][ T42] audit: type=1400 audit(1786574079.487:590): avc: denied { connect } for pid=7699 comm="syz.5.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 91.181143][ T7705] FAULT_INJECTION: forcing a failure. [ 91.181143][ T7705] name failslab, interval 1, probability 0, space 0, times 0 [ 91.188842][ T7705] CPU: 1 UID: 0 PID: 7705 Comm: syz.3.608 Tainted: G L syzkaller #0 PREEMPT(full) [ 91.188862][ T7705] Tainted: [L]=SOFTLOCKUP [ 91.188866][ T7705] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 91.188873][ T7705] Call Trace: [ 91.188877][ T7705] [ 91.188882][ T7705] dump_stack_lvl+0x100/0x190 [ 91.188901][ T7705] should_fail_ex.cold+0x5/0xa [ 91.188916][ T7705] should_failslab+0xc2/0x120 [ 91.188932][ T7705] __kmalloc_noprof+0xfc/0x820 [ 91.188947][ T7705] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 91.188966][ T7705] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 91.188984][ T7705] genl_family_rcv_msg_doit+0xc7/0x300 [ 91.189021][ T7705] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 91.189039][ T7705] ? bpf_lsm_capable+0x9/0x10 [ 91.189052][ T7705] ? security_capable+0x80/0x260 [ 91.189068][ T7705] ? ns_capable+0xd2/0xf0 [ 91.189083][ T7705] genl_rcv_msg+0x560/0x800 [ 91.189099][ T7705] ? __pfx_genl_rcv_msg+0x10/0x10 [ 91.189113][ T7705] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 91.189131][ T7705] netlink_rcv_skb+0x159/0x420 [ 91.189143][ T7705] ? __pfx_genl_rcv_msg+0x10/0x10 [ 91.189157][ T7705] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 91.189175][ T7705] ? netlink_deliver_tap+0x1ae/0xcc0 [ 91.189189][ T7705] genl_rcv+0x28/0x40 [ 91.189201][ T7705] netlink_unicast+0x585/0x850 [ 91.189214][ T7705] ? __pfx_netlink_unicast+0x10/0x10 [ 91.189226][ T7705] ? __pfx_sock_has_perm+0x10/0x10 [ 91.189244][ T7705] netlink_sendmsg+0x8b0/0xda0 [ 91.189258][ T7705] ? __pfx_netlink_sendmsg+0x10/0x10 [ 91.189271][ T7705] ? selinux_socket_sendmsg+0x198/0x2f0 [ 91.189290][ T7705] ____sys_sendmsg+0xa4d/0xbe0 [ 91.189308][ T7705] ? __pfx_netlink_sendmsg+0x10/0x10 [ 91.189321][ T7705] ? __pfx_____sys_sendmsg+0x10/0x10 [ 91.189350][ T7705] ___sys_sendmsg+0x190/0x1e0 [ 91.189363][ T7705] ? __pfx____sys_sendmsg+0x10/0x10 [ 91.189373][ T7705] ? __lock_acquire+0x49f/0x1a40 [ 91.189387][ T7705] ? get_pid_task+0x106/0x250 [ 91.189413][ T7705] __sys_sendmsg+0x160/0x210 [ 91.189428][ T7705] ? __pfx___sys_sendmsg+0x10/0x10 [ 91.189450][ T7705] do_syscall_64+0x115/0x870 [ 91.189466][ T7705] ? clear_bhb_loop+0x70/0xc0 [ 91.189479][ T7705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.189491][ T7705] RIP: 0033:0x7f574a99e0d9 [ 91.189501][ T7705] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.189512][ T7705] RSP: 002b:00007f574b7bd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 91.189524][ T7705] RAX: ffffffffffffffda RBX: 00007f574ac25fa0 RCX: 00007f574a99e0d9 [ 91.189531][ T7705] RDX: 00000000040040c4 RSI: 0000200000000200 RDI: 0000000000000003 [ 91.189538][ T7705] RBP: 00007f574b7bd090 R08: 0000000000000000 R09: 0000000000000000 [ 91.189544][ T7705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.189553][ T7705] R13: 00007f574ac26038 R14: 00007f574ac25fa0 R15: 00007ffca3c07068 [ 91.189567][ T7705] [ 91.253552][ T7709] binder: 7706:7709 ioctl 7006 0 returned -22 [ 91.371772][ T7724] netlink: 28 bytes leftover after parsing attributes in process `syz.1.614'. [ 91.381351][ T7724] netlink: 28 bytes leftover after parsing attributes in process `syz.1.614'. [ 91.390044][ T7721] netlink: 'syz.3.613': attribute type 10 has an invalid length. [ 91.430493][ T7729] FAULT_INJECTION: forcing a failure. [ 91.430493][ T7729] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 91.434902][ T7729] CPU: 3 UID: 0 PID: 7729 Comm: syz.1.616 Tainted: G L syzkaller #0 PREEMPT(full) [ 91.434920][ T7729] Tainted: [L]=SOFTLOCKUP [ 91.434924][ T7729] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 91.434931][ T7729] Call Trace: [ 91.434936][ T7729] [ 91.434941][ T7729] dump_stack_lvl+0x100/0x190 [ 91.434959][ T7729] should_fail_ex.cold+0x5/0xa [ 91.434975][ T7729] _copy_to_iter+0x1f3/0x1720 [ 91.434994][ T7729] ? __pfx__copy_to_iter+0x10/0x10 [ 91.435015][ T7729] simple_copy_to_iter+0x46/0x90 [ 91.435028][ T7729] __skb_datagram_iter+0x5c8/0x900 [ 91.435039][ T7729] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 91.435054][ T7729] skb_copy_datagram_iter+0xa1/0x250 [ 91.435068][ T7729] tcp_recvmsg_locked+0x1b74/0x2a30 [ 91.435092][ T7729] ? __pfx_tcp_recvmsg_locked+0x10/0x10 [ 91.435108][ T7729] ? register_lock_class+0x40/0x560 [ 91.435125][ T7729] ? ima_match_policy+0x8b8/0x2340 [ 91.435141][ T7729] ? import_ubuf+0x1b6/0x220 [ 91.435156][ T7729] tcp_zerocopy_receive+0x14cd/0x27b0 [ 91.435179][ T7729] ? __pfx_tcp_zerocopy_receive+0x10/0x10 [ 91.435199][ T7729] ? process_measurement+0x4c8/0x2350 [ 91.435215][ T7729] ? __lock_acquire+0x49f/0x1a40 [ 91.435241][ T7729] ? __local_bh_enable_ip+0x9e/0x120 [ 91.435256][ T7729] ? lockdep_hardirqs_on+0x78/0x100 [ 91.435274][ T7729] do_tcp_getsockopt+0xc0e/0x2aa0 [ 91.435287][ T7729] ? __pfx_do_tcp_getsockopt+0x10/0x10 [ 91.435299][ T7729] ? find_held_lock+0x2b/0x80 [ 91.435312][ T7729] ? __lock_acquire+0x49f/0x1a40 [ 91.435332][ T7729] ? find_held_lock+0x2b/0x80 [ 91.435346][ T7729] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 91.435359][ T7729] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 91.435375][ T7729] ? avc_has_perm_noaudit+0x145/0x3b0 [ 91.435389][ T7729] ? __lock_acquire+0x49f/0x1a40 [ 91.435404][ T7729] ? __pfx_avc_has_perm+0x10/0x10 [ 91.435421][ T7729] ? find_held_lock+0x2b/0x80 [ 91.435430][ T7729] ? __might_fault+0xc5/0x140 [ 91.435442][ T7729] ? __might_fault+0xc5/0x140 [ 91.435456][ T7729] ? _copy_from_user+0x59/0xd0 [ 91.435474][ T7729] tcp_getsockopt+0xe4/0x110 [ 91.435485][ T7729] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 91.435505][ T7729] do_sock_getsockopt+0x50a/0x6e0 [ 91.435522][ T7729] ? __lock_acquire+0x49f/0x1a40 [ 91.435538][ T7729] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 91.435556][ T7729] ? rcu_read_lock_any_held+0x6a/0xa0 [ 91.435570][ T7729] ? find_held_lock+0x2b/0x80 [ 91.435584][ T7729] ? __fget_files+0x21f/0x3d0 [ 91.435600][ T7729] __sys_getsockopt+0x148/0x260 [ 91.435618][ T7729] ? __x64_sys_getsockopt+0xbd/0x160 [ 91.435632][ T7729] __x64_sys_getsockopt+0xbd/0x160 [ 91.435646][ T7729] ? do_syscall_64+0x90/0x870 [ 91.435660][ T7729] ? lockdep_hardirqs_on+0x78/0x100 [ 91.435685][ T7729] do_syscall_64+0x115/0x870 [ 91.435700][ T7729] ? clear_bhb_loop+0x70/0xc0 [ 91.435713][ T7729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.435725][ T7729] RIP: 0033:0x7fe1ee99e0d9 [ 91.435736][ T7729] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.435747][ T7729] RSP: 002b:00007fe1ef922028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 91.435759][ T7729] RAX: ffffffffffffffda RBX: 00007fe1eec25fa0 RCX: 00007fe1ee99e0d9 [ 91.435766][ T7729] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000003 [ 91.435785][ T7729] RBP: 00007fe1ef922090 R08: 00002000000002c0 R09: 0000000000000000 [ 91.435792][ T7729] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001 [ 91.435799][ T7729] R13: 00007fe1eec26038 R14: 00007fe1eec25fa0 R15: 00007ffc8db3ee78 [ 91.435813][ T7729] [ 91.665746][ T7735] netlink: 'syz.4.619': attribute type 9 has an invalid length. [ 91.685253][ T7738] jffs2: notice: (7738) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 91.737743][ T7735] netlink: 8 bytes leftover after parsing attributes in process `syz.4.619'. [ 92.035474][ T7769] dlm: plock device version mismatch: kernel (1.2.0), user (1.1792.4194304) [ 92.042126][ T7769] xfs: Unknown parameter 'norecoveryyšY' [ 92.076349][ T5827] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 92.105756][ T7776] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 92.225945][ T5827] usb 9-1: Using ep0 maxpacket: 8 [ 92.228851][ T5827] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 92.233770][ T5827] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 92.237520][ T5827] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 92.242037][ T5827] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 92.245665][ T5827] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 92.252299][ T5827] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 92.260791][ T5827] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.284064][ T7782] fuse: Bad value for 'fd' [ 92.362328][ T7787] netlink: 32 bytes leftover after parsing attributes in process `syz.3.640'. [ 92.467892][ T5827] usb 9-1: usb_control_msg returned -32 [ 92.470484][ T5827] usbtmc 9-1:16.0: can't read capabilities [ 92.519396][ T7795] syzkaller0: entered promiscuous mode [ 92.521178][ T7795] syzkaller0: entered allmulticast mode [ 92.530651][ T7795] tipc: Started in network mode [ 92.532503][ T7795] tipc: Node identity 46c2cf09a806, cluster identity 4711 [ 92.534883][ T7795] tipc: Enabled bearer , priority 0 [ 92.541581][ T7794] tipc: Resetting bearer [ 92.553212][ T7794] tipc: Disabling bearer [ 92.580261][ T7803] netlink: 'syz.1.645': attribute type 1 has an invalid length. [ 92.584794][ T7803] netlink: 224 bytes leftover after parsing attributes in process `syz.1.645'. [ 92.782607][ T7813] IPVS: set_ctl: invalid protocol: 12 172.20.20.187:20004 [ 92.823093][ T7816] FAULT_INJECTION: forcing a failure. [ 92.823093][ T7816] name failslab, interval 1, probability 0, space 0, times 0 [ 92.828089][ T7816] CPU: 1 UID: 0 PID: 7816 Comm: syz.4.627 Tainted: G L syzkaller #0 PREEMPT(full) [ 92.828126][ T7816] Tainted: [L]=SOFTLOCKUP [ 92.828133][ T7816] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 92.828151][ T7816] Call Trace: [ 92.828158][ T7816] [ 92.828168][ T7816] dump_stack_lvl+0x100/0x190 [ 92.828211][ T7816] should_fail_ex.cold+0x5/0xa [ 92.828253][ T7816] should_failslab+0xc2/0x120 [ 92.828277][ T7816] __kmalloc_cache_noprof+0x91/0x6c0 [ 92.828297][ T7816] ? kasan_save_stack+0x3f/0x50 [ 92.828319][ T7816] ? kasan_save_stack+0x30/0x50 [ 92.828339][ T7816] ? dummy_urb_enqueue+0xa3/0x880 [ 92.828406][ T7816] dummy_urb_enqueue+0xa3/0x880 [ 92.828432][ T7816] ? usb_hcd_map_urb_for_dma+0x28a/0x1190 [ 92.828466][ T7816] usb_hcd_submit_urb+0x268/0x2150 [ 92.828501][ T7816] usb_submit_urb+0x827/0x19b0 [ 92.828527][ T7816] ? __init_swait_queue_head+0xca/0x150 [ 92.828554][ T7816] usb_start_wait_urb+0x10e/0x580 [ 92.828577][ T7816] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 92.828597][ T7816] ? trace_kmalloc+0xeb/0x110 [ 92.828628][ T7816] ? __asan_memset+0x23/0x50 [ 92.828652][ T7816] usb_control_msg+0x328/0x4b0 [ 92.828672][ T7816] ? __pfx_usb_control_msg+0x10/0x10 [ 92.828692][ T7816] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 92.828709][ T7816] ? usbtmc_ioctl+0x8f0/0x2840 [ 92.828739][ T7816] usbtmc_ioctl+0x973/0x2840 [ 92.828767][ T7816] ? do_vfs_ioctl+0x226/0x13e0 [ 92.828796][ T7816] ? __pfx_usbtmc_ioctl+0x10/0x10 [ 92.828819][ T7816] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 92.828866][ T7816] ? __fget_files+0x215/0x3d0 [ 92.828886][ T7816] ? hook_file_ioctl_common+0x140/0x440 [ 92.828921][ T7816] ? selinux_file_ioctl+0x13b/0x290 [ 92.828945][ T7816] ? selinux_file_ioctl+0xb6/0x290 [ 92.828972][ T7816] ? __pfx_usbtmc_ioctl+0x10/0x10 [ 92.829024][ T7816] __x64_sys_ioctl+0x18e/0x210 [ 92.829050][ T7816] do_syscall_64+0x115/0x870 [ 92.829105][ T7816] ? clear_bhb_loop+0x70/0xc0 [ 92.829124][ T7816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.829143][ T7816] RIP: 0033:0x7f9eb819e0d9 [ 92.829161][ T7816] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.829177][ T7816] RSP: 002b:00007f9eb9028028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 92.829204][ T7816] RAX: ffffffffffffffda RBX: 00007f9eb8426090 RCX: 00007f9eb819e0d9 [ 92.829215][ T7816] RDX: 0000000000000000 RSI: 0000000000005b02 RDI: 0000000000000004 [ 92.829227][ T7816] RBP: 00007f9eb9028090 R08: 0000000000000000 R09: 0000000000000000 [ 92.829237][ T7816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.829247][ T7816] R13: 00007f9eb8426128 R14: 00007f9eb8426090 R15: 00007fffbaa94df8 [ 92.829269][ T7816] [ 92.829337][ T7816] usbtmc 9-1:16.0: usb_control_msg returned -12 [ 92.906028][ T7820] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 92.966985][ T5082] Bluetooth: hci3: command tx timeout [ 93.647009][ T7832] FAULT_INJECTION: forcing a failure. [ 93.647009][ T7832] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 93.651858][ T7832] CPU: 0 UID: 0 PID: 7832 Comm: syz.3.655 Tainted: G L syzkaller #0 PREEMPT(full) [ 93.651891][ T7832] Tainted: [L]=SOFTLOCKUP [ 93.651898][ T7832] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 93.651909][ T7832] Call Trace: [ 93.651917][ T7832] [ 93.651924][ T7832] dump_stack_lvl+0x100/0x190 [ 93.651952][ T7832] should_fail_ex.cold+0x5/0xa [ 93.651974][ T7832] _copy_from_user+0x2e/0xd0 [ 93.652013][ T7832] copy_msghdr_from_user+0x9f/0x4c0 [ 93.652055][ T7832] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 93.652079][ T7832] ? __lock_acquire+0x49f/0x1a40 [ 93.652103][ T7832] ? __lock_acquire+0x49f/0x1a40 [ 93.652127][ T7832] ___sys_recvmsg+0xdd/0x1a0 [ 93.652145][ T7832] ? __pfx____sys_recvmsg+0x10/0x10 [ 93.652165][ T7832] ? find_held_lock+0x2b/0x80 [ 93.652197][ T7832] do_recvmmsg+0x2f3/0x740 [ 93.652219][ T7832] ? __pfx_do_recvmmsg+0x10/0x10 [ 93.652241][ T7832] ? __mutex_unlock_slowpath+0x35d/0x930 [ 93.652273][ T7832] ? __fget_files+0x21f/0x3d0 [ 93.652298][ T7832] __x64_sys_recvmmsg+0x22a/0x280 [ 93.652324][ T7832] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 93.652355][ T7832] do_syscall_64+0x115/0x870 [ 93.652378][ T7832] ? clear_bhb_loop+0x70/0xc0 [ 93.652401][ T7832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.652421][ T7832] RIP: 0033:0x7f574a99e0d9 [ 93.652435][ T7832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.652452][ T7832] RSP: 002b:00007f574b7bd028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 93.652472][ T7832] RAX: ffffffffffffffda RBX: 00007f574ac25fa0 RCX: 00007f574a99e0d9 [ 93.652482][ T7832] RDX: 0000000000000001 RSI: 0000200000000980 RDI: 0000000000000004 [ 93.652492][ T7832] RBP: 00007f574b7bd090 R08: 0000000000000000 R09: 0000000000000000 [ 93.652501][ T7832] R10: 0000000000000102 R11: 0000000000000246 R12: 0000000000000001 [ 93.652512][ T7832] R13: 00007f574ac26038 R14: 00007f574ac25fa0 R15: 00007ffca3c07068 [ 93.652533][ T7832] [ 93.832788][ T7840] netlink: 8 bytes leftover after parsing attributes in process `syz.3.657'. [ 93.835909][ T7841] fuse: Unknown parameter 'defaultñ´û|¿­ßÖȲU\/_permissions' [ 93.909308][ T7845] binder_alloc: 7844: binder_alloc_buf size 1152921504606847000 failed, no address space [ 93.913573][ T7845] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 94.757647][ T7872] netlink: 12 bytes leftover after parsing attributes in process `syz.5.669'. [ 94.768091][ T7872] pimreg: entered allmulticast mode [ 94.839205][ T40] usb 9-1: USB disconnect, device number 4 [ 94.889329][ T7880] capability: warning: `syz.1.673' uses 32-bit capabilities (legacy support in use) [ 94.902605][ T42] kauditd_printk_skb: 19 callbacks suppressed [ 94.902743][ T42] audit: type=1400 audit(1786574083.237:610): avc: denied { getopt } for pid=7877 comm="syz.4.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 94.913673][ T7878] IPVS: set_ctl: invalid protocol: 33 0.0.0.0:20003 [ 94.971731][ T7889] netlink: 8 bytes leftover after parsing attributes in process `syz.4.672'. [ 95.016847][ T7892] netlink: 20 bytes leftover after parsing attributes in process `syz.1.678'. [ 95.021068][ T7892] netlink: 20 bytes leftover after parsing attributes in process `syz.1.678'. [ 95.021161][ T7894] BUG: spinlock bad magic on CPU#1, syz.5.677/7894 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 95.026663][ T7894] ================================================================== [ 95.030072][ T7894] BUG: KASAN: slab-out-of-bounds in spin_dump+0xe7/0x160 [ 95.032907][ T7894] Read of size 4 at addr ffff888056de8650 by task syz.5.677/7894 [ 95.035962][ T7894] [ 95.036139][ T42] audit: type=1400 audit(1786574083.367:611): avc: denied { read } for pid=5115 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 95.036934][ T7894] CPU: 1 UID: 0 PID: 7894 Comm: syz.5.677 Tainted: G L syzkaller #0 PREEMPT(full) [ 95.036962][ T7894] Tainted: [L]=SOFTLOCKUP [ 95.036987][ T7894] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 95.036999][ T7894] Call Trace: [ 95.037008][ T7894] [ 95.037016][ T7894] dump_stack_lvl+0x100/0x190 [ 95.037043][ T7894] print_report+0x13d/0x4b0 [ 95.037073][ T7894] ? __virt_addr_valid+0x239/0x430 [ 95.037098][ T7894] ? spin_dump+0xe7/0x160 [ 95.037127][ T7894] kasan_report+0xdf/0x1c0 [ 95.037156][ T7894] ? spin_dump+0xe7/0x160 [ 95.037182][ T7894] spin_dump+0xe7/0x160 [ 95.037206][ T7894] do_raw_spin_lock.cold+0x37/0x3c [ 95.037232][ T7894] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 95.037257][ T7894] ? _raw_spin_lock_irq+0x45/0x50 [ 95.037280][ T7894] gadget_dev_open+0x44/0x1b0 [ 95.037306][ T7894] do_dentry_open+0x6ab/0x14d0 [ 95.037324][ T7894] ? __pfx_gadget_dev_open+0x10/0x10 [ 95.037350][ T7894] vfs_open+0x82/0x3f0 [ 95.037373][ T7894] path_openat+0x2873/0x4280 [ 95.037395][ T7894] ? trace_sched_exit_tp+0x120/0x160 [ 95.037423][ T7894] ? __schedule+0x126e/0x6730 [ 95.037441][ T7894] ? __pfx_path_openat+0x10/0x10 [ 95.037463][ T7894] do_file_open+0x20e/0x430 [ 95.037482][ T7894] ? __pfx_do_file_open+0x10/0x10 [ 95.037500][ T7894] ? __pfx___schedule+0x10/0x10 [ 95.037525][ T7894] ? alloc_fd+0x471/0x7a0 [ 95.037545][ T7894] ? do_getname+0x191/0x390 [ 95.037568][ T7894] do_sys_openat2+0x10f/0x1e0 [ 95.037588][ T7894] ? __pfx_do_sys_openat2+0x10/0x10 [ 95.037613][ T7894] __x64_sys_openat+0x12d/0x210 [ 95.037637][ T7894] ? __pfx___x64_sys_openat+0x10/0x10 [ 95.037662][ T7894] do_syscall_64+0x115/0x870 [ 95.037683][ T7894] ? clear_bhb_loop+0x70/0xc0 [ 95.037704][ T7894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.037722][ T7894] RIP: 0033:0x7f707b79e0d9 [ 95.037737][ T7894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.037756][ T7894] RSP: 002b:00007f707c6fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 95.037774][ T7894] RAX: ffffffffffffffda RBX: 00007f707ba25fa0 RCX: 00007f707b79e0d9 [ 95.037786][ T7894] RDX: 0000000000000002 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 95.037797][ T7894] RBP: 00007f707b835024 R08: 0000000000000000 R09: 0000000000000000 [ 95.037807][ T7894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.037819][ T7894] R13: 00007f707ba26038 R14: 00007f707ba25fa0 R15: 00007fff41c5c308 [ 95.037834][ T7894] [ 95.037842][ T7894] [ 95.044377][ T42] audit: type=1400 audit(1786574083.367:612): avc: denied { search } for pid=5115 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.047856][ T7894] Allocated by task 6737: [ 95.047885][ T7894] kasan_save_stack+0x30/0x50 [ 95.047911][ T7894] kasan_save_track+0x14/0x30 [ 95.047934][ T7894] __kasan_kmalloc+0xaa/0xb0 [ 95.047956][ T7894] __kmalloc_noprof+0x322/0x820 [ 95.051585][ T42] audit: type=1400 audit(1786574083.367:613): avc: denied { write search } for pid=5115 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.053239][ T7894] __alloc_workqueue+0x1bd/0x1940 [ 95.053269][ T7894] alloc_workqueue_noprof+0xc7/0x130 [ 95.054364][ T42] audit: type=1400 audit(1786574083.367:614): avc: denied { add_name } for pid=5115 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.055515][ T7894] tipc_topsrv_init_net+0x469/0x980 [ 95.057357][ T42] audit: type=1400 audit(1786574083.367:615): avc: denied { create } for pid=5115 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 95.058872][ T7894] ops_init+0x1e2/0x5f0 [ 95.060530][ T42] audit: type=1400 audit(1786574083.367:616): avc: denied { append open } for pid=5115 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 95.062176][ T7894] setup_net+0x118/0x3a0 [ 95.063630][ T42] audit: type=1400 audit(1786574083.367:617): avc: denied { getattr } for pid=5115 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 95.065317][ T7894] copy_net_ns+0x46f/0x7c0 [ 95.215173][ T7894] create_new_namespaces+0x3ea/0xac0 [ 95.217362][ T7894] unshare_nsproxy_namespaces+0xf2/0x220 [ 95.219637][ T7894] ksys_unshare+0x438/0xab0 [ 95.221434][ T7894] __x64_sys_unshare+0x31/0x40 [ 95.223428][ T7894] do_syscall_64+0x115/0x870 [ 95.225359][ T7894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.227777][ T7894] [ 95.228765][ T7894] The buggy address belongs to the object at ffff888056de8000 [ 95.228765][ T7894] which belongs to the cache kmalloc-1k of size 1024 [ 95.234273][ T7894] The buggy address is located 1080 bytes to the right of [ 95.234273][ T7894] allocated 536-byte region [ffff888056de8000, ffff888056de8218) [ 95.240012][ T7894] [ 95.241016][ T7894] The buggy address belongs to the physical page: [ 95.243641][ T7894] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x56de8 [ 95.247222][ T7894] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 95.250648][ T7894] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 95.253726][ T7894] page_type: f5(slab) [ 95.255391][ T7894] raw: 00fff00000000040 ffff88801bc42dc0 dead000000000100 dead000000000122 [ 95.258856][ T7894] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 95.262350][ T7894] head: 00fff00000000040 ffff88801bc42dc0 dead000000000100 dead000000000122 [ 95.265879][ T7894] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 95.269351][ T7894] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 95.272815][ T7894] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 95.276175][ T7894] page dumped because: kasan: bad access detected [ 95.278726][ T7894] page_owner tracks the page as allocated [ 95.281203][ T7894] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5719, tgid 5719 (syz-executor), ts 57027453771, free_ts 0 [ 95.289280][ T7894] post_alloc_hook+0xfd/0x120 [ 95.291255][ T7894] get_page_from_freelist+0xf48/0x3530 [ 95.293517][ T7894] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 95.295996][ T7894] new_slab+0xa2/0x640 [ 95.297744][ T7894] refill_objects+0xe3/0x410 [ 95.299737][ T7894] __pcs_replace_empty_main+0x376/0x680 [ 95.302090][ T7894] __kmalloc_noprof+0x66d/0x820 [ 95.304168][ T7894] tomoyo_init_log+0x1224/0x20c0 [ 95.306287][ T7894] tomoyo_supervisor+0x506/0x1340 [ 95.308407][ T7894] tomoyo_mount_acl+0x580/0x8b0 [ 95.310466][ T7894] tomoyo_mount_permission+0x214/0x460 [ 95.312747][ T7894] security_sb_mount+0xdd/0x270 [ 95.314814][ T7894] path_mount+0x158/0x23d0 [ 95.316682][ T7894] __x64_sys_mount+0x293/0x310 [ 95.318728][ T7894] do_syscall_64+0x115/0x870 [ 95.320684][ T7894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.323118][ T7894] page_owner free stack trace missing [ 95.325378][ T7894] [ 95.326401][ T7894] Memory state around the buggy address: [ 95.328728][ T7894] ffff888056de8500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 95.332044][ T7894] ffff888056de8580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 95.335387][ T7894] >ffff888056de8600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 95.338760][ T7894] ^ [ 95.341522][ T7894] ffff888056de8680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 95.344647][ T7894] ffff888056de8700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 95.347902][ T7894] ================================================================== [ 95.351248][ T7894] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 95.354220][ T7894] CPU: 1 UID: 0 PID: 7894 Comm: syz.5.677 Tainted: G L syzkaller #0 PREEMPT(full) [ 95.358643][ T7894] Tainted: [L]=SOFTLOCKUP [ 95.360429][ T7894] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 95.364513][ T7894] Call Trace: [ 95.365985][ T7894] [ 95.367233][ T7894] dump_stack_lvl+0x100/0x190 [ 95.369253][ T7894] vpanic+0x552/0x970 [ 95.370943][ T7894] ? __pfx_vpanic+0x10/0x10 [ 95.372854][ T7894] ? __pfx_vprintk_emit+0x10/0x10 [ 95.374997][ T7894] ? spin_dump+0xe7/0x160 [ 95.376823][ T7894] panic+0xd1/0xe0 [ 95.378450][ T7894] ? __pfx_panic+0x10/0x10 [ 95.380321][ T7894] ? end_report.part.0+0x23/0x90 [ 95.382417][ T7894] ? rcu_is_watching+0x12/0xc0 [ 95.384429][ T7894] ? end_report.part.0+0x23/0x90 [ 95.386580][ T7894] check_panic_on_warn.cold+0x19/0x34 [ 95.388894][ T7894] end_report.part.0+0x3a/0x90 [ 95.390974][ T7894] kasan_report.cold+0xe/0x18 [ 95.392949][ T7894] ? spin_dump+0xe7/0x160 [ 95.394812][ T7894] spin_dump+0xe7/0x160 [ 95.396578][ T7894] do_raw_spin_lock.cold+0x37/0x3c [ 95.398811][ T7894] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 95.401098][ T7894] ? _raw_spin_lock_irq+0x45/0x50 [ 95.403239][ T7894] gadget_dev_open+0x44/0x1b0 [ 95.404793][ T7894] do_dentry_open+0x6ab/0x14d0 [ 95.406705][ T7894] ? __pfx_gadget_dev_open+0x10/0x10 [ 95.408871][ T7894] vfs_open+0x82/0x3f0 [ 95.410608][ T7894] path_openat+0x2873/0x4280 [ 95.412555][ T7894] ? trace_sched_exit_tp+0x120/0x160 [ 95.414763][ T7894] ? __schedule+0x126e/0x6730 [ 95.416718][ T7894] ? __pfx_path_openat+0x10/0x10 [ 95.418806][ T7894] do_file_open+0x20e/0x430 [ 95.420687][ T7894] ? __pfx_do_file_open+0x10/0x10 [ 95.422836][ T7894] ? __pfx___schedule+0x10/0x10 [ 95.424896][ T7894] ? alloc_fd+0x471/0x7a0 [ 95.426724][ T7894] ? do_getname+0x191/0x390 [ 95.428627][ T7894] do_sys_openat2+0x10f/0x1e0 [ 95.430651][ T7894] ? __pfx_do_sys_openat2+0x10/0x10 [ 95.432836][ T7894] __x64_sys_openat+0x12d/0x210 [ 95.434894][ T7894] ? __pfx___x64_sys_openat+0x10/0x10 [ 95.437140][ T7894] do_syscall_64+0x115/0x870 [ 95.439001][ T7894] ? clear_bhb_loop+0x70/0xc0 [ 95.440918][ T7894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.443422][ T7894] RIP: 0033:0x7f707b79e0d9 [ 95.445307][ T7894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.453128][ T7894] RSP: 002b:00007f707c6fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 95.456497][ T7894] RAX: ffffffffffffffda RBX: 00007f707ba25fa0 RCX: 00007f707b79e0d9 [ 95.459809][ T7894] RDX: 0000000000000002 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 95.463097][ T7894] RBP: 00007f707b835024 R08: 0000000000000000 R09: 0000000000000000 [ 95.466300][ T7894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.469561][ T7894] R13: 00007f707ba26038 R14: 00007f707ba25fa0 R15: 00007fff41c5c308 [ 95.472810][ T7894] [ 95.474932][ T7894] Kernel Offset: disabled [ 95.476765][ T7894] Rebooting in 86400 seconds..