last executing test programs: 1m6.418180108s ago: executing program 0 (id=129): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) connect$llc(r0, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x10) 1m6.20031309s ago: executing program 0 (id=139): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) connect$llc(r0, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x10) 1m6.121155384s ago: executing program 0 (id=132): mkdir(&(0x7f0000000100)='./file0\x00', 0x11c) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000fc0)={0x14, r1, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000001440)={0x50, 0x3, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x3b}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x1}]}]}, 0x50}, 0x1, 0x10000000000, 0x0, 0x2400009c}, 0x40010) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000400), 0x8) sendmsg$AUDIT_USER_TTY(r4, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xdc, 0x464, 0x100, 0x70bd29, 0x25dfdbfc, "5797724cce47c8705914b008ff165470d550c8b04d07cd3e98c8d150d5434f3f91c441c8abf2f46b308a9ca1f9d4df1167a1a23a0ed2374d32789f9645e00b54cb04ea8bf5fb2ed3bee8a3b9df40f2fa7380ca86b94555d88c69ed594725e9f06f1da447d287fe863a6af697c2f9fbf93b1ca67c092f632a400929ba47cf4c1616c8ee42eeaf9e3884b50459cc9cf654709356441ee0d39021981ea063aa120c46d0d118266b45ea6949712a3f2a0cffa76762111f154b20f25538d8dc202058ee4f832aa756931b6ab9", ["", ""]}, 0xdc}, 0x1, 0x0, 0x0, 0x20004801}, 0x20004080) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x380, 0xffffffff, 0x210, 0x210, 0x210, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xc0, 0xe8, 0x0, {0x100000000000000}, [@common=@inet=@socket2={{0x28}, 0x2}, @common=@ttl={{0x28}, {0x2, 0x4}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x4e23, 0x4e20], [0x4e23, 0x4e21], 0x5, 0x10, 0x1a7, 0x1}}, @common=@icmp={{0x28}, {0x0, "54e9", 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x4, 0x6, 0x2, 0x4, 0x6], 0x6, 0x4}, {0x1, [0x1, 0x2, 0x1, 0x1, 0x2, 0x4], 0x3, 0x7}}}}, {{@uncond, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0xff}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x8, 0x5}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000600)={0x18, 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}, 'sit0\x00'}}, 0x1e) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f00000001c0)={0x18, 0x0, {0x1, @local, 'ip_vti0\x00'}}, 0x1e) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='befs\x00', 0x126073, 0x0) 1m6.034253748s ago: executing program 0 (id=133): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x48) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) close(0x3) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000002c0), 0x10000, 0xffffffffffffffff, 0x0, 0x1c000000007400}, 0x38) mknodat(r4, &(0x7f0000000200)='./file0\x00', 0x80, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) sendto(r3, &(0x7f0000000140)='A', 0xfffff, 0x40008c1, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001d40)=""/4096, 0x1000}], 0x1}, 0x1}], 0x256, 0x10022, 0x0) epoll_create1(0x80000) pselect6(0x40, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x1, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x6, 0xb7fb}, &(0x7f0000000100)={0x0, 0x3938700}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r6, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) write$tun(r5, &(0x7f0000000300)={@val={0xa}, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0x9c, 0x11, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], {0x4f19, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "786b8afe8ef6c8e90c1e350689fcd4d61b4576015011084c54b22430637a2838", "563c538774ee22ce2bb8f46f7373cb97218dd5ee5af3108bd6d195c614d44230e598e0731465bf4fcdfa004c93ce4b4e", "02833533ce8152a09040f08bd2892b7233376dcda3f0b6962e66f617", {"2e7c8cbccc480860f94cd609888bc51a", "38a461132eddc6aef8a88f02e0ed7e13"}}}}}}}}}, 0xd6) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 1m5.152417433s ago: executing program 0 (id=140): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x515}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}]}]}, 0x3c}}, 0x40) sendmsg$nl_route(r4, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@getnetconf={0x14, 0x52, 0x200, 0x70bd2c, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000001) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x44, r7, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0xfffffffffffffe4b, 0x9, 0x4}}]}, 0x44}}, 0x4004810) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), r4) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000640)={'vxcan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r6, &(0x7f0000000940)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000900)={&(0x7f00000007c0)={0x120, r8, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xefab8b2c73f860da}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x20040084) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=@newtfilter={0x38, 0x2c, 0xd27, 0x170bd2b, 0x3, {0x0, 0x0, 0x0, r14, {0x0, 0x5}, {}, {0x2, 0x5}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x3, 0xfff2}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc804}, 0x2) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x11c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa, 0x7, 0x6, 0x2c, 0x2, 0x7, 0x7ff, 0x6}}, {0x10, 0x2, [0xffff, 0x100, 0x18b, 0x4, 0x4, 0x7]}}, {{0x1c, 0x1, {0x4, 0x7, 0x0, 0x2, 0x2, 0x2, 0xf, 0x1}}, {0x6, 0x2, [0x1ff]}}, {{0x1c, 0x1, {0x0, 0x9b, 0x7, 0x5, 0x1, 0x3, 0xd3, 0x3}}, {0xa, 0x2, [0x7, 0x4, 0x3]}}, {{0x1c, 0x1, {0x4, 0x3, 0xffff, 0x0, 0x0, 0x62, 0x4, 0x9}}, {0x16, 0x2, [0x0, 0x1, 0x4, 0x4, 0xc44c, 0x7fff, 0x2, 0x1, 0x1ff]}}, {{0x1c, 0x1, {0x9, 0x5, 0x0, 0x3, 0x2, 0x9, 0x5}}, {0x4}}, {{0x1c, 0x1, {0x1d, 0x1, 0x1, 0x80000001, 0x2, 0x6274, 0x4, 0x3}}, {0xa, 0x2, [0x5, 0x2, 0x401]}}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x81}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=@gettclass={0x24, 0x2a, 0x4, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r14, {0xc, 0xf}, {0xffff, 0xc}, {0xfff1, 0x8}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000041}, 0x4000010) write(r15, 0x0, 0x0) connect$unix(r16, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 1m4.799591261s ago: executing program 0 (id=147): r0 = socket(0x10, 0x803, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000000280), &(0x7f0000000340)=0x30) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010003"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x884) 1m4.725271951s ago: executing program 32 (id=147): r0 = socket(0x10, 0x803, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000000280), &(0x7f0000000340)=0x30) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010003"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x884) 52.129863572s ago: executing program 3 (id=408): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x450, 0x2c, 0xf3f, 0x70fd2c, 0x25dfdbbd, {0x0, 0x0, 0x0, 0x0, {0xc, 0xc}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_fw={{0x7}, {0x424, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x8}}, @TCA_FW_CLASSID={0x8, 0x1, {0xa, 0xe}}, @TCA_FW_MASK={0x8, 0x5, 0x80000001}, @TCA_FW_POLICE={0x408, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x400, 0x6, 0x10000, 0x9, 0x839, 0x4, 0x44, 0x3aff, 0x9, 0x7, 0x28d, 0x4, 0x9, 0x40, 0xff, 0x37d7, 0x9, 0xfffffff8, 0xffff, 0x4, 0x1b, 0xffffffff, 0x81, 0x800, 0x2, 0x81, 0xa, 0x6, 0x7fffffff, 0x2, 0x9, 0xfffffff9, 0x4, 0x672b, 0x3, 0x7fff, 0x100, 0x10000, 0x978, 0x5fd8, 0x3, 0x100, 0xd08c, 0x587, 0x1c, 0x2, 0xe4f, 0x3, 0x2, 0x7, 0x1, 0x5fc, 0xc, 0x7, 0x2, 0x4, 0xfffffff7, 0x1, 0x8, 0x9, 0x7, 0x1e5, 0x900000, 0x800, 0xc0000000, 0xf9, 0x34434231, 0x3743, 0x100, 0x2, 0x9, 0x8, 0x1, 0xc, 0xe6, 0x2fc, 0x81, 0x2, 0x80000000, 0x2, 0x9b6, 0x3, 0x2, 0x2, 0x6, 0x10001, 0x9, 0x8, 0xe, 0x509f, 0x2, 0x7, 0xffff, 0x7ba, 0x7, 0x6, 0x2, 0x8, 0xa, 0x8, 0x3ff, 0x0, 0x4, 0x81, 0x2, 0x7fff, 0xecf5, 0x500, 0xe, 0x9, 0xfffff8bb, 0xd8c, 0x2, 0x9, 0x9, 0x4, 0x28000000, 0x4, 0x7, 0x1, 0x4, 0x11, 0x400, 0x4, 0x3e, 0xec, 0x4, 0x21e, 0x1, 0x2a, 0x9, 0x6, 0xfffffffa, 0x9ce5, 0x5, 0x0, 0x2, 0x8, 0xffff, 0x5, 0x800, 0x8000, 0x4f, 0xb04, 0x7, 0x0, 0x3, 0x6, 0x10001, 0x1, 0x2, 0x1, 0x9, 0x27, 0x8, 0x1, 0x0, 0xfffffff7, 0x10001, 0x5, 0x5, 0x0, 0x80000000, 0x2, 0x3, 0x7, 0x9, 0x9, 0x7, 0x5, 0x1, 0x8, 0x0, 0x1, 0x4, 0x4, 0x1, 0x8, 0x1, 0x3, 0x6, 0x8, 0x3c, 0x5f, 0x9, 0x10000, 0x3, 0xfff, 0x1, 0xc, 0x2, 0x8, 0x5, 0x9b75, 0x81, 0x81, 0x86, 0x3, 0x5, 0x5, 0xfffffffe, 0x0, 0x6, 0xe3, 0x12, 0x2, 0x9, 0x4, 0x140000, 0x3, 0x79984e08, 0x3, 0x5de93e4a, 0xad63, 0x9, 0xffffffff, 0xffff, 0xd2d9, 0x9, 0xba9, 0x8, 0x6, 0x8, 0xffc0, 0x5, 0x9, 0x7ff, 0xa, 0x80000000, 0x2, 0x2, 0x4, 0x3, 0xffffff80, 0x80000001, 0x6, 0x6, 0xbb2a, 0x3ff, 0x9, 0xfff, 0xa6, 0x8, 0x0, 0x3, 0x8, 0x3, 0xff, 0xd570, 0x7, 0x923, 0xc00, 0x2, 0x3, 0x1ff]}]}]}}]}, 0x450}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) r0 = syz_open_dev$mouse(&(0x7f0000000340), 0x0, 0x8042) r1 = syz_open_dev$evdev(&(0x7f0000000280), 0x2, 0x822f01) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000d80)) r2 = getpid() syz_pidfd_open(r2, 0x0) statx(r0, &(0x7f0000001380)='./file0\x00', 0x1000, 0x7ff, &(0x7f00000013c0)) statx(r0, &(0x7f00000014c0)='./file0\x00', 0x800, 0x400, &(0x7f0000001500)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001600), &(0x7f0000001640)=0xc) statx(r0, &(0x7f0000001680)='./file0\x00', 0x400, 0x800, &(0x7f00000016c0)) getegid() openat$cgroup_ro(r0, &(0x7f00000017c0)='pids.current\x00', 0x0, 0x0) getpgrp(0xffffffffffffffff) read$FUSE(r0, &(0x7f00000103c0)={0x2020}, 0x2020) newfstatat(0xffffffffffffff9c, &(0x7f0000003840)='./file0\x00', &(0x7f0000003880), 0x4d00) r3 = socket$inet6(0xa, 0x3, 0x2f) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x4e21, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, 0x1c) fcntl$getown(r0, 0x9) stat(&(0x7f0000003900)='./file0\x00', &(0x7f0000003940)) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(r4, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f0000004200)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x3, 0x0, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x8, 0xffffffff, 0xfffffffe, 0x0, 0x80000, 0x8000, 0x0, 0x0, r6, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$char_usb(r1, &(0x7f0000000040)="e2", 0x12d8) 51.230623975s ago: executing program 3 (id=433): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000300), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000000)=0x5, 0x4) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x4, 0x43033, 0xffffffffffffffff, 0x0) 51.140967033s ago: executing program 3 (id=434): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a80), 0x181200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x14, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x40482, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0x2020) umount2(&(0x7f0000000380)='./file0\x00', 0x1) 51.006942218s ago: executing program 3 (id=435): sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000900)=ANY=[@ANYBLOB="28000000fd3dbc9798095be8"], 0x28}, 0x1, 0x0, 0x0, 0x48005}, 0x400c090) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x3a, [0xfffffff8, 0x0, 0x5, 0x10009, 0x8, 0x155f, 0x6, 0x2, 0x25cd, 0x401, 0x40000b4, 0xa, 0xb2b9, 0x24, 0x81, 0xe4, 0x6, 0xfc000000, 0x10003, 0xbbf, 0x1000, 0x1, 0x48, 0x100d, 0x3, 0x12a0, 0x8000, 0x1, 0x7, 0x6, 0x7, 0x81, 0x40008a, 0x79, 0x2, 0x10001, 0x4, 0x91, 0x4, 0xe769, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x84, 0x9, 0xf9a2, 0x80000001, 0xff, 0x2, 0x2, 0x2, 0x2, 0x7, 0x8, 0x7, 0x5, 0x4007f, 0xffffffff, 0x6], [0x3, 0x16e, 0x6, 0xf6ca, 0x4, 0xda, 0xb8a9, 0x20000070, 0x8e, 0xd50, 0x7, 0x5, 0xfffffffe, 0x80d, 0x4, 0xa7, 0x1000, 0x0, 0x200b395, 0x400000, 0x80000000, 0x4, 0x19, 0x7, 0x400001, 0x3, 0x3, 0x8, 0xffffff7f, 0x401, 0x6, 0x200, 0x96, 0x0, 0xfffffff6, 0x401, 0x6, 0xf1, 0x6, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x0, 0x1ce, 0x1, 0x80000004, 0x80000001, 0x2, 0x2, 0x9, 0x95, 0x80000000, 0x4, 0xfffffff9, 0x40000003, 0x1000, 0xfffff804, 0x5], [0x2, 0xfffffffe, 0xfffc, 0x6, 0x2, 0x2e6bf783, 0xfffff100, 0x5, 0x400005, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x5, 0xee4b, 0x2008004, 0x1, 0x691, 0x5, 0x89, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xffe, 0x10000a, 0x8000, 0x401, 0x3e55, 0x9, 0xd3, 0x8, 0x3437, 0x2, 0xd, 0x7, 0x601, 0x101, 0x200dd80, 0x60a0, 0x1, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0x0, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xa, 0x10000, 0x3, 0x8, 0x1], [0xa772, 0x6, 0x7, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xc, 0x1005, 0x1, 0x8000007, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xfffffeff, 0xffbffff7, 0x8, 0x7, 0x5396, 0x939, 0x6, 0x80008001, 0x7777, 0x7fffffff, 0x2, 0x100, 0xffffffff, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0x6, 0x10000, 0x0, 0x8004, 0x6fff, 0x2, 0x3, 0xf, 0xe, 0x10, 0x26c, 0x6, 0xfffffff9, 0x4, 0xfffffff8, 0x9, 0xf, 0x463f, 0x4, 0xdad, 0x8003, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x8, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x204344}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = syz_open_procfs$userns(0x0, &(0x7f0000000280)) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r7, 0x660c) 50.810920702s ago: executing program 3 (id=440): syz_open_procfs$userns(0x0, &(0x7f0000000280)) (fail_nth: 6) 50.67033832s ago: executing program 3 (id=442): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000300), 0x12) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0xd85fd000) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000000)=0x5, 0x4) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x4, 0x43033, 0xffffffffffffffff, 0x0) 35.669772162s ago: executing program 33 (id=442): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000300), 0x12) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0xd85fd000) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000000)=0x5, 0x4) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x4, 0x43033, 0xffffffffffffffff, 0x0) 937.593675ms ago: executing program 4 (id=1229): r0 = syz_open_dev$loop(&(0x7f0000000040), 0x40d6, 0x1ea3a0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/oops_count', 0x8a883, 0x2) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x9]}}) (fail_nth: 12) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x40000000003a) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0xfffffffffffffffc) 859.075109ms ago: executing program 5 (id=1230): r0 = syz_open_dev$loop(&(0x7f0000000040), 0x40d6, 0x1ea3a0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/oops_count', 0x8a883, 0x2) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x600, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x9]}}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x40000000003a) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0xfffffffffffffffc) 858.700048ms ago: executing program 5 (id=1232): r0 = socket(0x10, 0x80002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)="8e", 0x1}], 0x1, 0x8001, 0x80) close(r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) (async) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) sendfile(r2, r1, 0x0, 0xf03a0005) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0xffffffffffffffcf, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x80) recvmmsg$unix(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001380)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x1000000}}], 0x1, 0x23, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() (async) r4 = gettid() process_vm_writev(r4, 0x0, 0x0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/223, 0xdf}], 0x1, 0x0) madvise(&(0x7f00007e6000/0x2000)=nil, 0x2000, 0x15) (async) madvise(&(0x7f00007e6000/0x2000)=nil, 0x2000, 0x15) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r5, &(0x7f0000000080)=""/1, 0x1) (async) read(r5, &(0x7f0000000080)=""/1, 0x1) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) (async) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x1, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20040845}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) read$char_usb(0xffffffffffffffff, 0x0, 0x0) (async) read$char_usb(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48048}, 0x0) 858.584477ms ago: executing program 2 (id=1233): r0 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x34, r2, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x4}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x408c4}, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x4000000, 0x1, 0x0, 'queue0\x00', 0x1c52}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) writev(r4, &(0x7f00000004c0)=[{&(0x7f0000000000)="26eba9fdb4cbab48929e1af151000000000000000500000000000100", 0x1c}], 0x1) r5 = socket$igmp(0x2, 0x3, 0x2) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$inet(r5, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, r2, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x7}]}, 0x30}}, 0x240000d0) r8 = fsmount(r0, 0x0, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) sendfile(r9, r9, 0x0, 0x1000007fd) 778.589646ms ago: executing program 4 (id=1234): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000037000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_io_uring_setup(0x4b4, &(0x7f0000010400)={0x0, 0x2b2b, 0x400, 0x8, 0x10000000}, &(0x7f00000000c0), &(0x7f0000000040), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000003c0)=[{0x0}, {0x0}], 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) 772.105529ms ago: executing program 2 (id=1235): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)={0x20, 0x43, 0x107, 0x70bd25, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0x4, 0x145}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x1c}]}]}, 0x20}}, 0xc000) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x5, 0x6, 0x0, 0x0, 0x10003, 0x0, 0x400200cc4, 0xffe, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6a, 0x8d], 0xeeee8000, 0x2811c0}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$media(&(0x7f0000000040), 0x37f, 0x10000) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000140)={&(0x7f0000000100)=""/32, 0x20}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x60840, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x401, 0x9, 0xfffffffffffffffd, 0x2, 0x10000, 0x5, 0x4002004c2, 0x7ff, 0x1, 0x0, 0x400, 0x40, 0x88, 0x0, 0x8, 0x8d], 0xfec00000, 0x240046}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xa8, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0xe}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0xe}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xe}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xe}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xc0}]}, 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af12, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newnexthop={0x18, 0x68, 0x1, 0x100003, 0x7ffffffd}, 0x18}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) 597.342486ms ago: executing program 1 (id=1237): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x93, 0x1, 0x2, 0xd59f80, 0x19ef, 0x6, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x8, {0x8, 0xffffffff}, 0xd0, 0x9}}) ptrace$pokeuser(0x6, r0, 0x358, 0x0) ptrace$pokeuser(0x6, r0, 0x388, 0x552355c2) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 596.446965ms ago: executing program 4 (id=1238): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x9c, 0x0, @val=0x80}}}}}}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000740)=""/221, 0xdd}], 0x1}, 0x1ff}], 0x1, 0x4, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000100)={0xb0, 0xffffffff, 0x4095eca9, 0x3, 0x9}) 571.029404ms ago: executing program 1 (id=1239): r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000001c0)=[{0x0, 0x0, [0x100, 0x800, 0x9, 0x0, 0x5, 0x800, 0x3, 0x5, 0x7ff, 0x4, 0x4, 0xfb4, 0x8, 0x15, 0x7, 0x8]}, {0x2, 0x0, [0x7, 0x7f, 0x707, 0x6, 0x0, 0x7, 0x101, 0xfffffbff, 0xffffffff, 0xf82, 0x8, 0x800, 0x2000000, 0x6, 0xfffffffb, 0x8]}, {0x20, 0x0, [0x3, 0x4, 0x3fb, 0x8, 0x3, 0x7, 0x3, 0xffffffff, 0x7, 0x80000001, 0x5, 0x5, 0x3, 0xfffff801, 0xdc, 0x10]}, {0x4, 0x0, [0x1000, 0x2, 0xe45c, 0x8000, 0x2, 0x56978b0b, 0xd, 0x6, 0x1, 0x2, 0x6, 0x6, 0x1, 0xff, 0x7, 0x1]}, {0x0, 0x0, [0x9, 0x8, 0x120, 0x3, 0x4, 0x180000, 0xd, 0x80000000, 0x99, 0x200, 0x1a8, 0x7, 0x7fff, 0x3, 0x5, 0xffffffff]}, {0x1, 0x0, [0x2, 0x6, 0xc41, 0x3, 0x4, 0x3, 0xc30, 0x2, 0x401, 0x200, 0xe, 0x0, 0x8, 0x2, 0x1acab, 0x10001]}, {0x8, 0x0, [0x0, 0x8001, 0xf, 0x2, 0x4d8, 0xfff, 0x40, 0x46, 0x396, 0x10000, 0x5, 0x400, 0xbda, 0x9, 0xccdf, 0x800]}], 0xffffffffffffffff, 0x1, 0x1, 0x1f8}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000500)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in={0x2, 0x4e24, @local}}}, 0x90) 519.423792ms ago: executing program 5 (id=1240): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = gettid() syz_open_procfs(r1, &(0x7f0000000040)='timerslack_ns\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={'\x00', 0x5, 0xbac3, 0x7f, 0x7, 0x8, r1}) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) 519.120743ms ago: executing program 2 (id=1241): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x2c, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008081}, 0x20004800) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0x5e}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0xa7ba) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x4e20, 0x4, @loopback, 0x6}}, 0x0, 0x0, 0x9, 0x0, "a084b82243ac8ffa95d5c8a136fa33a44e173ee67576d57fe5d2865eb56d8a6d403363508e535efbb14a3929baf4a3d59954cb22c3da266caebcfe3581dc5036d9c42694cbc2492381d899e48e522dc0"}, 0xd8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@RTM_DELMDB={0x18, 0x55, 0x1, 0x70bd2c, 0x25df9bfc, {0x7, r10}}, 0x18}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x8b1012, 0x0) r11 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='./file0/../file0\x00', 0x81801) move_mount(r11, &(0x7f0000000680)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) listen(r8, 0x0) r12 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r12, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 518.930938ms ago: executing program 1 (id=1242): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f00000000c0)={0x0, 0x0, 0x8, 0x200000000}) fcntl$lock(r4, 0x24, &(0x7f0000000080)={0x2, 0x2, 0x2007, 0x1fd}) (async) r5 = socket$netlink(0x10, 0x3, 0x0) (async) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x106, 0x1, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x2}]) (async) sendmsg$netlink(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e0001"], 0x1c}], 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/seq/clients\x00', 0x0, 0x0) read$rfkill(r7, &(0x7f00000000c0), 0x8) (async) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 460.427247ms ago: executing program 5 (id=1243): mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x4, 0x43033, 0xffffffffffffffff, 0x2000000) 460.289711ms ago: executing program 5 (id=1244): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x24, r1, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040021}, 0x40080) (fail_nth: 8) 240.298965ms ago: executing program 5 (id=1245): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$tipc(0x1e, 0x2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000004c0)={0x20, r5, 0x1, 0x70bd26, 0x0, {0x25}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x22048041}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x20000000) ioctl$KVM_RUN(r3, 0xae80, 0x0) r7 = syz_io_uring_setup(0x4b4, &(0x7f0000010400)={0x0, 0x2b2b, 0x400, 0x8, 0x10000000}, &(0x7f00000000c0), &(0x7f0000000040), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f00000003c0)=[{0x0}, {0x0}], 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r7, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) syz_clone3(&(0x7f00000004c0)={0x100801000, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58) 240.106398ms ago: executing program 2 (id=1246): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) close(r0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x8010) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r2) tkill(r2, 0x12) tkill(r2, 0x12) ptrace(0x4208, r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.dequeue\x00', 0x275a, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000000)={0x200a, 0xd}) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r3, 0x5381) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) 215.064805ms ago: executing program 4 (id=1247): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a3a0000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000054000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f8b6163767461700000000800014000000005"], 0xf0}}, 0x8090) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000000)={0x5, 0xfcfc, 0x0, 0x3, 0x1b, "c9170438bf4dc6cf"}) 168.832299ms ago: executing program 1 (id=1248): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x500, 0x102) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r1, 0xee01, 0x0) fcntl$notify(r0, 0x402, 0x34) 168.534017ms ago: executing program 2 (id=1249): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) (fail_nth: 13) mount(0x0, 0x0, 0x0, 0x8e341d, 0x0) 168.186009ms ago: executing program 4 (id=1250): r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@gettaction={0x5c, 0x32, 0x400, 0x70bd25, 0x25dfdbff}, 0xffffffffffffff09}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000d40)=@filter={'filter\x00', 0x2, 0x4, 0x4a8, 0xffffffff, 0x0, 0xf0, 0xf0, 0xfeffffff, 0xffffffff, 0x3d8, 0x3d8, 0x3d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, [0xff, 0xff, 0x0, 0xffffff00], [], 'pimreg0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x3}, 0x2f2, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@dev={0xac, 0x14, 0x14, 0x1d}, 'caif0\x00', {0x7}}}}, {{@ipv6={@mcast1, @loopback, [], [0x0, 0x0, 0xffffffff], 'netdevsim0\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "ddabf53d9b1435965491f6531877000001e770b689f173dfa40b58c10327e3121114449fd20ba2be6eb0cde72a972f25170163232ed996b4789b9d00"}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x602, 'system_u:object_r:boot_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x508) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, r3, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x6}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x2, 0x80, @remote}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000880)=""/4092, 0xffc}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="0500000000000000791090000000000063000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) 168.068124ms ago: executing program 1 (id=1251): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000001c0)=[{0x0, 0x0, [0x100, 0x800, 0x9, 0x0, 0x5, 0x800, 0x3, 0x5, 0x7ff, 0x4, 0x4, 0xfb4, 0x8, 0x15, 0x7, 0x8]}, {0x2, 0x0, [0x7, 0x7f, 0x707, 0x6, 0x0, 0x7, 0x101, 0xfffffbff, 0xffffffff, 0xf82, 0x8, 0x800, 0x2000000, 0x6, 0xfffffffb, 0x8]}, {0x20, 0x0, [0x3, 0x4, 0x3fb, 0x8, 0x3, 0x7, 0x3, 0xffffffff, 0x7, 0x80000001, 0x5, 0x5, 0x3, 0xfffff801, 0xdc, 0x10]}, {0x4, 0x0, [0x1000, 0x2, 0xe45c, 0x8000, 0x2, 0x56978b0b, 0xd, 0x6, 0x1, 0x2, 0x6, 0x6, 0x1, 0xff, 0x7, 0x1]}, {0x0, 0x0, [0x9, 0x8, 0x120, 0x3, 0x4, 0x180000, 0xd, 0x80000000, 0x99, 0x200, 0x1a8, 0x7, 0x7fff, 0x3, 0x5, 0xffffffff]}, {0x1, 0x0, [0x2, 0x6, 0xc41, 0x3, 0x4, 0x3, 0xc30, 0x2, 0x401, 0x200, 0xe, 0x0, 0x8, 0x2, 0x1acab, 0x10001]}, {0x8, 0x0, [0x0, 0x8001, 0xf, 0x2, 0x4d8, 0xfff, 0x40, 0x46, 0x396, 0x10000, 0x5, 0x400, 0xbda, 0x9, 0xccdf, 0x800]}], 0xffffffffffffffff, 0x1, 0x1, 0x1f8}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000500)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x4e24, @local}}}, 0x90) 67.784217ms ago: executing program 1 (id=1252): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x32) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0xc8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x60, r5, 0x1, 0x70bd2a, 0x25efdc03, {}, [{{0x8, 0x1, r6}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r4}}}]}}]}, 0x60}, 0x1, 0x400000000000000}, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x1b, &(0x7f0000000280)=@raw=[@map_fd={0x18, 0x8}, @tail_call, @printk, @call={0x85, 0x0, 0x0, 0x3a}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @tail_call, @map_fd={0x18, 0x0, 0x1, 0x0, 0x1}, @map_fd={0x18, 0xa}], &(0x7f0000000380)='GPL\x00', 0x6, 0x39, &(0x7f00000003c0)=""/57, 0x41100, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000440)={0x5, 0x4, 0x5, 0x9}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000480)=[{0x2, 0x5, 0x8, 0x6}, {0x4, 0x2, 0x2, 0x3}, {0x1, 0x1, 0xc}, {0x5, 0x5, 0x2, 0x6}, {0x4, 0x1, 0xc, 0x7}], 0x10, 0xe664}, 0x94) r8 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x80e40, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r8, 0x50009405, &(0x7f0000000200)={0x4, 0x40, 0x5}) r9 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000005c0), 0x20080, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{0x1, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000640)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x15, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@exit, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x9}, @map_fd={0x18, 0x3, 0x1, 0x0, 0x1}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0xb, 0x32, &(0x7f00000001c0)=""/50, 0x40f00, 0x38, '\x00', r6, @fallback=0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0xa, 0x50, 0x7}, 0x10, 0xffffffffffffffff, r7, 0x6, &(0x7f00000006c0)=[r8, r9, r10], &(0x7f0000000700)=[{0x3, 0x3, 0xb, 0xb}, {0x4, 0x2, 0xc, 0xa}, {0x3, 0x4, 0x2, 0xb}, {0x0, 0x4, 0x6}, {0x5, 0x2, 0xf, 0x5}, {0x3, 0x1, 0xe, 0x6}], 0x10, 0x6}, 0x94) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1200000) 67.539695ms ago: executing program 2 (id=1253): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008072, 0xffffffffffffffff, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3c) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r0, 0x4068aea3, &(0x7f0000000080)={0xa4, 0x0, 0x1}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x3c, r2, 0x905, 0x0, 0x0, {0x24}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x3c}}, 0x0) madvise(&(0x7f000015c000/0x2000)=nil, 0x2000, 0x15) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r3, &(0x7f0000000340)=ANY=[], 0x200002e6) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000040)={0x6, 0x8, 0x8001, 0x101, 0x0, 0x1000}) fcntl$setpipe(r3, 0x407, 0x7000000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 0s ago: executing program 4 (id=1254): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xc3, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='!\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32, @ANYBLOB="2000128008000100687372001400028008000100", @ANYRES32=r2, @ANYBLOB="08000200", @ANYRES32=r1], 0x48}, 0x1, 0x0, 0x0, 0x20044094}, 0x8010) kernel console output (not intermixed with test programs): 0000000000000246 R12: 0000000000000001 [ 124.407023][ T8861] R13: 00007fa18ae16038 R14: 00007fa18ae15fa0 R15: 00007ffce7104bf8 [ 124.407046][ T8861] [ 124.645590][ T8869] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 124.672703][ T8872] loop8: detected capacity change from 0 to 7 [ 124.715921][ T8877] FAULT_INJECTION: forcing a failure. [ 124.715921][ T8877] name failslab, interval 1, probability 0, space 0, times 0 [ 124.725382][ T8877] CPU: 2 UID: 0 PID: 8877 Comm: syz.5.1040 Tainted: G L syzkaller #0 PREEMPT(full) [ 124.725406][ T8877] Tainted: [L]=SOFTLOCKUP [ 124.725411][ T8877] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 124.725419][ T8877] Call Trace: [ 124.725424][ T8877] [ 124.725429][ T8877] dump_stack_lvl+0x100/0x190 [ 124.725453][ T8877] should_fail_ex.cold+0x5/0xa [ 124.725473][ T8877] should_failslab+0xc2/0x120 [ 124.725489][ T8877] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 124.725510][ T8877] ? security_file_alloc+0x34/0x2c0 [ 124.725530][ T8877] ? trace_kmem_cache_alloc+0xd5/0x100 [ 124.725548][ T8877] security_file_alloc+0x34/0x2c0 [ 124.725568][ T8877] init_file+0x95/0x480 [ 124.725588][ T8877] alloc_empty_file+0x79/0x1c0 [ 124.725607][ T8877] path_openat+0xe8/0x31a0 [ 124.725624][ T8877] ? kasan_save_stack+0x3f/0x50 [ 124.725636][ T8877] ? kasan_save_stack+0x30/0x50 [ 124.725647][ T8877] ? kasan_save_track+0x14/0x30 [ 124.725657][ T8877] ? __kasan_slab_alloc+0x89/0x90 [ 124.725670][ T8877] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 124.725689][ T8877] ? do_getname+0x35/0x390 [ 124.725708][ T8877] ? do_sys_openat2+0xc5/0x1e0 [ 124.725728][ T8877] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.725745][ T8877] ? __pfx_path_openat+0x10/0x10 [ 124.725769][ T8877] do_file_open+0x20e/0x430 [ 124.725804][ T8877] ? __pfx_do_file_open+0x10/0x10 [ 124.725836][ T8877] ? alloc_fd+0x476/0x790 [ 124.725856][ T8877] ? do_getname+0x191/0x390 [ 124.725877][ T8877] do_sys_openat2+0x10d/0x1e0 [ 124.725896][ T8877] ? __pfx_do_sys_openat2+0x10/0x10 [ 124.725914][ T8877] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 124.725937][ T8877] ? __fget_files+0x21f/0x3d0 [ 124.725957][ T8877] __x64_sys_openat+0x12d/0x210 [ 124.725977][ T8877] ? __pfx___x64_sys_openat+0x10/0x10 [ 124.725995][ T8877] ? ksys_write+0x1ac/0x250 [ 124.726013][ T8877] ? rcu_is_watching+0x12/0xc0 [ 124.726037][ T8877] do_syscall_64+0x10b/0xf80 [ 124.726056][ T8877] ? clear_bhb_loop+0x40/0x90 [ 124.726073][ T8877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.726086][ T8877] RIP: 0033:0x7f7e38f5d68e [ 124.726099][ T8877] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 124.726112][ T8877] RSP: 002b:00007f7e39e85ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 124.726126][ T8877] RAX: ffffffffffffffda RBX: 00007f7e39e866c0 RCX: 00007f7e38f5d68e [ 124.726135][ T8877] RDX: 0000000000000000 RSI: 00007f7e39e85f90 RDI: ffffffffffffff9c [ 124.726143][ T8877] RBP: 00007f7e39e86090 R08: 0000000000000000 R09: 0000000000000000 [ 124.726151][ T8877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 124.726158][ T8877] R13: 00007f7e39216038 R14: 00007f7e39215fa0 R15: 00007ffc51af3e38 [ 124.726176][ T8877] [ 124.773301][ T8880] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1041'. [ 124.819252][ T8883] FAULT_INJECTION: forcing a failure. [ 124.819252][ T8883] name failslab, interval 1, probability 0, space 0, times 0 [ 124.846541][ T8883] CPU: 2 UID: 0 PID: 8883 Comm: syz.5.1042 Tainted: G L syzkaller #0 PREEMPT(full) [ 124.846560][ T8883] Tainted: [L]=SOFTLOCKUP [ 124.846564][ T8883] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 124.846571][ T8883] Call Trace: [ 124.846575][ T8883] [ 124.846579][ T8883] dump_stack_lvl+0x100/0x190 [ 124.846599][ T8883] should_fail_ex.cold+0x5/0xa [ 124.846616][ T8883] should_failslab+0xc2/0x120 [ 124.846630][ T8883] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 124.846646][ T8883] ? skb_clone+0x190/0x400 [ 124.846661][ T8883] skb_clone+0x190/0x400 [ 124.846672][ T8883] netlink_deliver_tap+0xaed/0xcc0 [ 124.846690][ T8883] netlink_unicast+0x62b/0x850 [ 124.846707][ T8883] ? __pfx_netlink_unicast+0x10/0x10 [ 124.846725][ T8883] netlink_sendmsg+0x8b0/0xda0 [ 124.846742][ T8883] ? __pfx_netlink_sendmsg+0x10/0x10 [ 124.846764][ T8883] sock_write_iter+0x524/0x5a0 [ 124.846778][ T8883] ? __pfx_netlink_sendmsg+0x10/0x10 [ 124.846794][ T8883] ? __pfx_sock_write_iter+0x10/0x10 [ 124.846814][ T8883] ? bpf_lsm_file_permission+0x9/0x10 [ 124.846832][ T8883] ? security_file_permission+0x76/0x210 [ 124.846850][ T8883] ? rw_verify_area+0xce/0x6d0 [ 124.846862][ T8883] vfs_write+0x6ac/0x1070 [ 124.846875][ T8883] ? __pfx_sock_write_iter+0x10/0x10 [ 124.846890][ T8883] ? __pfx_vfs_write+0x10/0x10 [ 124.846900][ T8883] ? find_held_lock+0x2b/0x80 [ 124.846919][ T8883] ksys_write+0x1f8/0x250 [ 124.846931][ T8883] ? __pfx_ksys_write+0x10/0x10 [ 124.846944][ T8883] ? rcu_is_watching+0x12/0xc0 [ 124.846963][ T8883] do_syscall_64+0x10b/0xf80 [ 124.846978][ T8883] ? clear_bhb_loop+0x40/0x90 [ 124.846991][ T8883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.847002][ T8883] RIP: 0033:0x7f7e38f9ce59 [ 124.847011][ T8883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.847021][ T8883] RSP: 002b:00007f7e39e86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 124.847032][ T8883] RAX: ffffffffffffffda RBX: 00007f7e39215fa0 RCX: 00007f7e38f9ce59 [ 124.847038][ T8883] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000003 [ 124.847044][ T8883] RBP: 00007f7e39e86090 R08: 0000000000000000 R09: 0000000000000000 [ 124.847050][ T8883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.847056][ T8883] R13: 00007f7e39216038 R14: 00007f7e39215fa0 R15: 00007ffc51af3e38 [ 124.847069][ T8883] [ 124.901954][ T8888] FAULT_INJECTION: forcing a failure. [ 124.901954][ T8888] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 124.935922][ T8888] CPU: 1 UID: 0 PID: 8888 Comm: syz.4.1044 Tainted: G L syzkaller #0 PREEMPT(full) [ 124.935941][ T8888] Tainted: [L]=SOFTLOCKUP [ 124.935945][ T8888] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 124.935951][ T8888] Call Trace: [ 124.935954][ T8888] [ 124.935959][ T8888] dump_stack_lvl+0x100/0x190 [ 124.935978][ T8888] should_fail_ex.cold+0x5/0xa [ 124.935992][ T8888] ? prepare_alloc_pages+0x16d/0x5f0 [ 124.936008][ T8888] should_fail_alloc_page+0xeb/0x140 [ 124.936021][ T8888] prepare_alloc_pages+0x1f0/0x5f0 [ 124.936036][ T8888] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 124.936053][ T8888] ? vmap_small_pages_range_noflush+0xc20/0xd50 [ 124.936071][ T8888] ? __pfx_vmap_small_pages_range_noflush+0x10/0x10 [ 124.936083][ T8888] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 124.936102][ T8888] ? __vmap_pages_range_noflush+0x3db/0x660 [ 124.936114][ T8888] ? is_vmalloc_addr+0x86/0xa0 [ 124.936133][ T8888] ? __lock_acquire+0x4a5/0x2630 [ 124.936148][ T8888] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 124.936186][ T8888] ? policy_nodemask+0xed/0x4f0 [ 124.936199][ T8888] alloc_pages_mpol+0x1fb/0x540 [ 124.936211][ T8888] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 124.936223][ T8888] ? allocate_vpid.part.0+0x77/0x90 [ 124.936258][ T8888] alloc_pages_noprof+0x1a/0x160 [ 124.936272][ T8888] vmx_vcpu_create+0x5c2/0xb90 [ 124.936288][ T8888] ? intel_pmu_init+0x3ac/0x560 [ 124.936305][ T8888] ? __pfx_vmx_vcpu_create+0x10/0x10 [ 124.936321][ T8888] ? _raw_spin_unlock_irq+0x23/0x50 [ 124.936334][ T8888] ? lockdep_hardirqs_on+0x78/0x100 [ 124.936351][ T8888] kvm_arch_vcpu_create+0x683/0xac0 [ 124.936386][ T8888] kvm_vm_ioctl+0x756/0x4050 [ 124.936434][ T8888] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 124.936458][ T8888] ? kasan_quarantine_put+0x104/0x240 [ 124.936476][ T8888] ? lockdep_hardirqs_on+0x78/0x100 [ 124.936491][ T8888] ? find_held_lock+0x2b/0x80 [ 124.936501][ T8888] ? tomoyo_path_number_perm+0x28f/0x580 [ 124.936515][ T8888] ? tomoyo_path_number_perm+0x28f/0x580 [ 124.936530][ T8888] ? tomoyo_path_number_perm+0x188/0x580 [ 124.936544][ T8888] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 124.936561][ T8888] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 124.936574][ T8888] ? do_vfs_ioctl+0x226/0x13e0 [ 124.936586][ T8888] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 124.936597][ T8888] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 124.936616][ T8888] ? __fget_files+0x215/0x3d0 [ 124.936629][ T8888] ? hook_file_ioctl_common+0x149/0x410 [ 124.936642][ T8888] ? selinux_file_ioctl+0x13b/0x290 [ 124.936656][ T8888] ? selinux_file_ioctl+0xb6/0x290 [ 124.936671][ T8888] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 124.936687][ T8888] __x64_sys_ioctl+0x18e/0x210 [ 124.936699][ T8888] do_syscall_64+0x10b/0xf80 [ 124.936714][ T8888] ? clear_bhb_loop+0x40/0x90 [ 124.936727][ T8888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.936738][ T8888] RIP: 0033:0x7f4c6479ce59 [ 124.936747][ T8888] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.936757][ T8888] RSP: 002b:00007f4c65612028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 124.936768][ T8888] RAX: ffffffffffffffda RBX: 00007f4c64a15fa0 RCX: 00007f4c6479ce59 [ 124.936775][ T8888] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 124.936781][ T8888] RBP: 00007f4c65612090 R08: 0000000000000000 R09: 0000000000000000 [ 124.936787][ T8888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 124.936820][ T8888] R13: 00007f4c64a16038 R14: 00007f4c64a15fa0 R15: 00007ffeac33ae78 [ 124.936843][ T8888] [ 124.977502][ T8894] FAULT_INJECTION: forcing a failure. [ 124.977502][ T8894] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 125.019585][ T40] audit: type=1400 audit(1779363368.686:606): avc: denied { bind } for pid=8895 comm="syz.5.1048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 125.020644][ T8894] CPU: 2 UID: 0 PID: 8894 Comm: syz.2.1047 Tainted: G L syzkaller #0 PREEMPT(full) [ 125.020662][ T8894] Tainted: [L]=SOFTLOCKUP [ 125.020666][ T8894] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 125.020672][ T8894] Call Trace: [ 125.020676][ T8894] [ 125.020681][ T8894] dump_stack_lvl+0x100/0x190 [ 125.020701][ T8894] should_fail_ex.cold+0x5/0xa [ 125.020715][ T8894] ? prepare_alloc_pages+0x16d/0x5f0 [ 125.020731][ T8894] should_fail_alloc_page+0xeb/0x140 [ 125.020744][ T8894] prepare_alloc_pages+0x1f0/0x5f0 [ 125.020759][ T8894] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 125.020781][ T8894] ? __lock_acquire+0x4a5/0x2630 [ 125.020825][ T8894] ? __lock_acquire+0x4a5/0x2630 [ 125.020845][ T8894] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 125.020864][ T8894] ? __lock_acquire+0x4a5/0x2630 [ 125.020880][ T8894] ? __lock_acquire+0x4a5/0x2630 [ 125.020896][ T8894] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 125.020911][ T8894] ? policy_nodemask+0xed/0x4f0 [ 125.020924][ T8894] alloc_pages_mpol+0x1fb/0x540 [ 125.020936][ T8894] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 125.020949][ T8894] ? __lock_acquire+0x4a5/0x2630 [ 125.020964][ T8894] folio_alloc_mpol_noprof+0x36/0x260 [ 125.020979][ T8894] vma_alloc_folio_noprof+0xed/0x1d0 [ 125.020992][ T8894] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 125.021012][ T8894] do_anonymous_page+0xb46/0x2050 [ 125.021028][ T8894] ? rcu_read_unlock+0x2d/0xb0 [ 125.021047][ T8894] __handle_mm_fault+0x1d2c/0x2a00 [ 125.021063][ T8894] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 125.021081][ T8894] ? __pfx___handle_mm_fault+0x10/0x10 [ 125.021097][ T8894] ? pte_offset_map_lock+0x174/0x320 [ 125.021109][ T8894] ? find_held_lock+0x2b/0x80 [ 125.021124][ T8894] ? follow_page_pte+0x4d0/0x13f0 [ 125.021138][ T8894] handle_mm_fault+0x36d/0xa20 [ 125.021156][ T8894] __get_user_pages+0x1178/0x32a0 [ 125.021172][ T8894] ? down_read_killable+0x307/0x4b0 [ 125.021184][ T8894] ? __pfx___get_user_pages+0x10/0x10 [ 125.021201][ T8894] __gup_longterm_locked+0x279/0x16f0 [ 125.021217][ T8894] ? __pfx___gup_longterm_locked+0x10/0x10 [ 125.021230][ T8894] ? __get_pfnblock_flags_mask+0x128/0x240 [ 125.021243][ T8894] ? find_held_lock+0x2b/0x80 [ 125.021253][ T8894] ? sanity_check_pinned_pages+0x4f2/0x8b0 [ 125.021267][ T8894] gup_fast_fallback+0x16dc/0x2790 [ 125.021289][ T8894] ? __pfx_gup_fast_fallback+0x10/0x10 [ 125.021312][ T8894] pin_user_pages_fast+0xa7/0xf0 [ 125.021326][ T8894] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 125.021337][ T8894] ? io_pin_pages+0xc3/0x1e0 [ 125.021352][ T8894] ? avc_has_perm_noaudit+0x145/0x3b0 [ 125.021364][ T8894] io_pin_pages+0xe6/0x1e0 [ 125.021378][ T8894] io_create_region+0x3f9/0xbe0 [ 125.021394][ T8894] ? __pfx_io_create_region+0x10/0x10 [ 125.021407][ T8894] ? rcu_is_watching+0x12/0xc0 [ 125.021424][ T8894] ? cap_capable+0x10b/0x440 [ 125.021437][ T8894] ? bpf_lsm_capable+0x9/0x10 [ 125.021449][ T8894] ? security_capable+0x80/0x260 [ 125.021462][ T8894] io_uring_setup.cold+0x10fe/0x1cde [ 125.021476][ T8894] ? __pfx_io_uring_setup+0x10/0x10 [ 125.021487][ T8894] ? find_held_lock+0x2b/0x80 [ 125.021507][ T8894] ? ksys_write+0x1ac/0x250 [ 125.021519][ T8894] ? __pfx_ksys_write+0x10/0x10 [ 125.021533][ T8894] __x64_sys_io_uring_setup+0xc2/0x170 [ 125.021545][ T8894] do_syscall_64+0x10b/0xf80 [ 125.021560][ T8894] ? clear_bhb_loop+0x40/0x90 [ 125.021573][ T8894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.021585][ T8894] RIP: 0033:0x7f58e9d9ce59 [ 125.021595][ T8894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.021606][ T8894] RSP: 002b:00007f58eabca028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 125.021617][ T8894] RAX: ffffffffffffffda RBX: 00007f58ea015fa0 RCX: 00007f58e9d9ce59 [ 125.021623][ T8894] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000004fef [ 125.021629][ T8894] RBP: 00007f58eabca090 R08: 0000000000000000 R09: 0000000000000000 [ 125.021635][ T8894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 125.021641][ T8894] R13: 00007f58ea016038 R14: 00007f58ea015fa0 R15: 00007ffdccfa4568 [ 125.021659][ T8894] [ 125.129350][ T8900] binder: Bad value for 'max' [ 127.673457][ T8904] netem: change failed [ 127.674807][ T8906] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1051'. [ 127.682484][ T40] audit: type=1400 audit(1779363371.346:607): avc: denied { append } for pid=8903 comm="syz.4.1050" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 127.706390][ T8908] fuse: Unknown parameter 'grou00000000000000000000' [ 127.792432][ T8916] FAULT_INJECTION: forcing a failure. [ 127.792432][ T8916] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 127.796614][ T8916] CPU: 2 UID: 0 PID: 8916 Comm: syz.5.1056 Tainted: G L syzkaller #0 PREEMPT(full) [ 127.796631][ T8916] Tainted: [L]=SOFTLOCKUP [ 127.796635][ T8916] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 127.796642][ T8916] Call Trace: [ 127.796646][ T8916] [ 127.796650][ T8916] dump_stack_lvl+0x100/0x190 [ 127.796668][ T8916] should_fail_ex.cold+0x5/0xa [ 127.796684][ T8916] _copy_from_user+0x2e/0xd0 [ 127.796702][ T8916] copy_msghdr_from_user+0x9f/0x4f0 [ 127.796719][ T8916] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 127.796740][ T8916] ___sys_sendmsg+0x106/0x1e0 [ 127.796783][ T8916] ? __pfx____sys_sendmsg+0x10/0x10 [ 127.796818][ T8916] __sys_sendmsg+0x170/0x220 [ 127.796830][ T8916] ? __pfx___sys_sendmsg+0x10/0x10 [ 127.796846][ T8916] ? rcu_is_watching+0x12/0xc0 [ 127.796867][ T8916] do_syscall_64+0x10b/0xf80 [ 127.796882][ T8916] ? clear_bhb_loop+0x40/0x90 [ 127.796895][ T8916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.796905][ T8916] RIP: 0033:0x7f7e38f9ce59 [ 127.796915][ T8916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.796925][ T8916] RSP: 002b:00007f7e39e86028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 127.796936][ T8916] RAX: ffffffffffffffda RBX: 00007f7e39215fa0 RCX: 00007f7e38f9ce59 [ 127.796943][ T8916] RDX: 0000000000040080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 127.796949][ T8916] RBP: 00007f7e39e86090 R08: 0000000000000000 R09: 0000000000000000 [ 127.796955][ T8916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.796960][ T8916] R13: 00007f7e39216038 R14: 00007f7e39215fa0 R15: 00007ffc51af3e38 [ 127.796974][ T8916] [ 127.820964][ T8918] XFS (loop1): SB validate failed with error -5. [ 127.899415][ T40] audit: type=1400 audit(1779363371.566:608): avc: denied { append } for pid=8917 comm="syz.1.1055" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 127.907952][ T40] audit: type=1400 audit(1779363371.576:609): avc: denied { map } for pid=8917 comm="syz.1.1055" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 127.998998][ T8943] SELinux: policydb version 1402900228 does not match my version range 15-35 [ 128.005854][ T8943] SELinux: failed to load policy [ 128.084879][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 128.084891][ T40] audit: type=1400 audit(1779363371.756:611): avc: denied { write } for pid=8946 comm="syz.5.1064" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 128.254506][ T8973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1073'. [ 128.255662][ T40] audit: type=1400 audit(1779363371.926:612): avc: denied { getopt } for pid=8972 comm="syz.1.1073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 128.263848][ T40] audit: type=1400 audit(1779363371.926:613): avc: denied { write } for pid=8972 comm="syz.1.1073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 128.270567][ T40] audit: type=1400 audit(1779363371.926:614): avc: denied { connect } for pid=8972 comm="syz.1.1073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 128.349638][ T40] audit: type=1400 audit(1779363372.016:615): avc: denied { ioctl } for pid=8976 comm="syz.4.1076" path="socket:[31262]" dev="sockfs" ino=31262 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 128.356149][ T8977] netlink: 'syz.4.1076': attribute type 10 has an invalid length. [ 128.367420][ T8977] team0: Port device veth0 added [ 128.471530][ T8992] FAULT_INJECTION: forcing a failure. [ 128.471530][ T8992] name failslab, interval 1, probability 0, space 0, times 0 [ 128.475422][ T8992] CPU: 1 UID: 0 PID: 8992 Comm: syz.1.1074 Tainted: G L syzkaller #0 PREEMPT(full) [ 128.475440][ T8992] Tainted: [L]=SOFTLOCKUP [ 128.475443][ T8992] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 128.475450][ T8992] Call Trace: [ 128.475453][ T8992] [ 128.475457][ T8992] dump_stack_lvl+0x100/0x190 [ 128.475476][ T8992] should_fail_ex.cold+0x5/0xa [ 128.475492][ T8992] ? tomoyo_encode2+0xfb/0x3c0 [ 128.475507][ T8992] should_failslab+0xc2/0x120 [ 128.475520][ T8992] __kmalloc_noprof+0xe0/0x850 [ 128.475536][ T8992] ? d_absolute_path+0x136/0x1b0 [ 128.475551][ T8992] tomoyo_encode2+0xfb/0x3c0 [ 128.475567][ T8992] tomoyo_encode+0x29/0x50 [ 128.475582][ T8992] tomoyo_realpath_from_path+0x18c/0x690 [ 128.475600][ T8992] tomoyo_path_perm+0x276/0x460 [ 128.475612][ T8992] ? tomoyo_path_perm+0x262/0x460 [ 128.475626][ T8992] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 128.475638][ T8992] ? ima_match_policy+0x8b8/0x2340 [ 128.475653][ T8992] ? __lock_acquire+0x4a5/0x2630 [ 128.475677][ T8992] ? rcu_is_watching+0x12/0xc0 [ 128.475697][ T8992] security_inode_getattr+0x116/0x280 [ 128.475713][ T8992] vfs_getattr+0x25/0x60 [ 128.475728][ T8992] loop_query_min_dio_size.isra.0+0x117/0x250 [ 128.475750][ T8992] ? __pfx_loop_query_min_dio_size.isra.0+0x10/0x10 [ 128.475772][ T8992] ? filemap_check_errors+0xa9/0x150 [ 128.475786][ T8992] ? filemap_write_and_wait_range+0x7d/0x130 [ 128.475804][ T8992] loop_configure+0x6e4/0x15b0 [ 128.475822][ T8992] ? tomoyo_path_number_perm+0x46d/0x580 [ 128.475836][ T8992] ? stack_trace_save+0x8e/0xc0 [ 128.475849][ T8992] ? __lock_acquire+0x4a5/0x2630 [ 128.475863][ T8992] ? __pfx_loop_configure+0x10/0x10 [ 128.475890][ T8992] lo_ioctl+0xcf3/0x1bc0 [ 128.475908][ T8992] ? __pfx_lo_ioctl+0x10/0x10 [ 128.475922][ T8992] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 128.475935][ T8992] ? kasan_quarantine_put+0x104/0x240 [ 128.475951][ T8992] ? blk_get_meta_cap+0xd4/0x6c0 [ 128.475962][ T8992] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 128.475983][ T8992] ? blkdev_common_ioctl+0x515/0x2b80 [ 128.476023][ T8992] ? __fget_files+0x215/0x3d0 [ 128.476043][ T8992] ? __pfx_lo_ioctl+0x10/0x10 [ 128.476067][ T8992] blkdev_ioctl+0x5ad/0x6f0 [ 128.476083][ T8992] ? __pfx_blkdev_ioctl+0x10/0x10 [ 128.476097][ T8992] ? selinux_file_ioctl+0x13b/0x290 [ 128.476119][ T8992] ? selinux_file_ioctl+0xb6/0x290 [ 128.476144][ T8992] ? __pfx_blkdev_ioctl+0x10/0x10 [ 128.476163][ T8992] __x64_sys_ioctl+0x18e/0x210 [ 128.476183][ T8992] do_syscall_64+0x10b/0xf80 [ 128.476208][ T8992] ? clear_bhb_loop+0x40/0x90 [ 128.476229][ T8992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.476247][ T8992] RIP: 0033:0x7fa18ab9ce59 [ 128.476264][ T8992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.476279][ T8992] RSP: 002b:00007fa18ba20028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 128.476296][ T8992] RAX: ffffffffffffffda RBX: 00007fa18ae15fa0 RCX: 00007fa18ab9ce59 [ 128.476306][ T8992] RDX: 0000200000000080 RSI: 0000000000004c0a RDI: 0000000000000003 [ 128.476314][ T8992] RBP: 00007fa18ba20090 R08: 0000000000000000 R09: 0000000000000000 [ 128.476320][ T8992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.476326][ T8992] R13: 00007fa18ae16038 R14: 00007fa18ae15fa0 R15: 00007ffce7104bf8 [ 128.476341][ T8992] [ 128.476353][ T8992] ERROR: Out of memory at tomoyo_realpath_from_path. [ 128.603848][ T8992] loop8: detected capacity change from 0 to 7 [ 128.607773][ T8992] ldm_validate_partition_table(): Disk read failed. [ 128.616051][ T8992] Dev loop8: unable to read RDB block 0 [ 128.618962][ T8992] loop8: unable to read partition table [ 128.621491][ T8992] loop8: partition table beyond EOD, truncated [ 128.626291][ T8992] loop_reread_partitions: partition scan of loop8 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 128.669951][ T9001] FAULT_INJECTION: forcing a failure. [ 128.669951][ T9001] name failslab, interval 1, probability 0, space 0, times 0 [ 128.677925][ T9001] CPU: 2 UID: 0 PID: 9001 Comm: syz.5.1083 Tainted: G L syzkaller #0 PREEMPT(full) [ 128.677952][ T9001] Tainted: [L]=SOFTLOCKUP [ 128.677958][ T9001] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 128.677967][ T9001] Call Trace: [ 128.677973][ T9001] [ 128.677980][ T9001] dump_stack_lvl+0x100/0x190 [ 128.678009][ T9001] should_fail_ex.cold+0x5/0xa [ 128.678033][ T9001] should_failslab+0xc2/0x120 [ 128.678052][ T9001] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 128.678075][ T9001] ? mm_alloc+0x1c/0xd0 [ 128.678129][ T9001] mm_alloc+0x1c/0xd0 [ 128.678151][ T9001] alloc_bprm+0x2af/0x710 [ 128.678172][ T9001] do_execveat_common.isra.0+0x19c/0x580 [ 128.678189][ T9001] ? do_getname+0x191/0x390 [ 128.678215][ T9001] __x64_sys_execve+0x93/0xd0 [ 128.678234][ T9001] do_syscall_64+0x10b/0xf80 [ 128.678257][ T9001] ? clear_bhb_loop+0x40/0x90 [ 128.678278][ T9001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.678295][ T9001] RIP: 0033:0x7f7e38f9ce59 [ 128.678308][ T9001] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.678322][ T9001] RSP: 002b:00007f7e39e86028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 128.678340][ T9001] RAX: ffffffffffffffda RBX: 00007f7e39215fa0 RCX: 00007f7e38f9ce59 [ 128.678352][ T9001] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000002c0 [ 128.678362][ T9001] RBP: 00007f7e39e86090 R08: 0000000000000000 R09: 0000000000000000 [ 128.678372][ T9001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.678382][ T9001] R13: 00007f7e39216038 R14: 00007f7e39215fa0 R15: 00007ffc51af3e38 [ 128.678406][ T9001] [ 128.680179][ T40] audit: type=1400 audit(1779363372.346:616): avc: denied { shutdown } for pid=8996 comm="syz.4.1081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 128.762912][ T8997] ALSA: seq fatal error: cannot create timer (-19) [ 128.763990][ T9013] xt_hashlimit: size too large, truncated to 1048576 [ 128.831653][ T9016] loop8: detected capacity change from 0 to 7 [ 128.836787][ C3] blk_print_req_error: 36 callbacks suppressed [ 128.836857][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 128.843097][ C3] buffer_io_error: 35 callbacks suppressed [ 128.843114][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 128.850006][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 128.853610][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 128.858250][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 128.861870][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 128.865584][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 128.869299][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 128.872579][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 128.876226][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 128.886230][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 128.889952][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 128.896002][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 128.899685][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 128.902843][ T9016] ldm_validate_partition_table(): Disk read failed. [ 128.908456][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 128.912166][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 128.916150][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 128.919908][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 128.923376][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 128.926249][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 128.930199][ T9016] Dev loop8: unable to read RDB block 0 [ 128.933131][ T9016] loop8: unable to read partition table [ 128.935576][ T9016] loop8: partition table beyond EOD, truncated [ 128.938269][ T9016] loop_reread_partitions: partition scan of loop8 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 128.984192][ T9021] tipc: Enabling of bearer rejected, failed to enable media [ 128.995145][ T40] audit: type=1326 audit(1779363372.666:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9020 comm="syz.4.1088" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4c6479ce59 code=0x0 [ 129.109150][ T9031] FAULT_INJECTION: forcing a failure. [ 129.109150][ T9031] name failslab, interval 1, probability 0, space 0, times 0 [ 129.113698][ T9031] CPU: 0 UID: 0 PID: 9031 Comm: syz.1.1091 Tainted: G L syzkaller #0 PREEMPT(full) [ 129.113714][ T9031] Tainted: [L]=SOFTLOCKUP [ 129.113718][ T9031] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 129.113724][ T9031] Call Trace: [ 129.113728][ T9031] [ 129.113733][ T9031] dump_stack_lvl+0x100/0x190 [ 129.113902][ T9031] should_fail_ex.cold+0x5/0xa [ 129.113945][ T9031] should_failslab+0xc2/0x120 [ 129.114002][ T9031] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 129.114037][ T9031] ? security_inode_alloc+0x3b/0x2c0 [ 129.114107][ T9031] ? lockdep_init_map_type+0x5c/0x250 [ 129.114156][ T9031] security_inode_alloc+0x3b/0x2c0 [ 129.114169][ T9031] inode_init_always_gfp+0xcc0/0x1000 [ 129.114215][ T9031] alloc_inode+0x8e/0x250 [ 129.114226][ T9031] path_from_stashed+0x25b/0x750 [ 129.114249][ T9031] ns_get_path+0x60/0x80 [ 129.114265][ T9031] proc_ns_get_link+0x121/0x230 [ 129.114296][ T9031] ? __pfx_proc_ns_get_link+0x10/0x10 [ 129.114309][ T9031] ? try_to_unlazy+0x2f1/0x910 [ 129.114337][ T9031] pick_link+0xd17/0x13c0 [ 129.114347][ T9031] ? __pfx_proc_ns_get_link+0x10/0x10 [ 129.114362][ T9031] step_into_slowpath+0x9ba/0xf90 [ 129.114373][ T9031] ? security_task_to_inode+0x7d/0x140 [ 129.114384][ T9031] ? find_held_lock+0x2b/0x80 [ 129.114396][ T9031] ? __pfx_step_into_slowpath+0x10/0x10 [ 129.114409][ T9031] ? lookup_fast+0x2da/0x600 [ 129.114421][ T9031] path_openat+0xf95/0x31a0 [ 129.114440][ T9031] ? __pfx_path_openat+0x10/0x10 [ 129.114458][ T9031] do_file_open+0x20e/0x430 [ 129.114473][ T9031] ? __pfx_do_file_open+0x10/0x10 [ 129.114496][ T9031] ? alloc_fd+0x476/0x790 [ 129.114511][ T9031] ? do_getname+0x191/0x390 [ 129.114529][ T9031] do_sys_openat2+0x10d/0x1e0 [ 129.114546][ T9031] ? __pfx_do_sys_openat2+0x10/0x10 [ 129.114560][ T9031] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 129.114588][ T9031] ? __fget_files+0x21f/0x3d0 [ 129.114603][ T9031] __x64_sys_openat+0x12d/0x210 [ 129.114619][ T9031] ? __pfx___x64_sys_openat+0x10/0x10 [ 129.114634][ T9031] ? ksys_write+0x1ac/0x250 [ 129.114647][ T9031] ? rcu_is_watching+0x12/0xc0 [ 129.114681][ T9031] do_syscall_64+0x10b/0xf80 [ 129.114696][ T9031] ? clear_bhb_loop+0x40/0x90 [ 129.114710][ T9031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.114720][ T9031] RIP: 0033:0x7fa18ab5d68e [ 129.114731][ T9031] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 129.114741][ T9031] RSP: 002b:00007fa18ba1fec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 129.114753][ T9031] RAX: ffffffffffffffda RBX: 00007fa18ba206c0 RCX: 00007fa18ab5d68e [ 129.114759][ T9031] RDX: 0000000000000000 RSI: 00007fa18ba1ff90 RDI: ffffffffffffff9c [ 129.114766][ T9031] RBP: 00007fa18ba20090 R08: 0000000000000000 R09: 0000000000000000 [ 129.114772][ T9031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 129.114778][ T9031] R13: 00007fa18ae16038 R14: 00007fa18ae15fa0 R15: 00007ffce7104bf8 [ 129.114791][ T9031] [ 129.237088][ T9033] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1092'. [ 129.239884][ T9033] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1092'. [ 129.243851][ T9033] netlink: 'syz.1.1092': attribute type 15 has an invalid length. [ 129.246701][ T9033] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1092'. [ 129.249438][ T9033] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1092'. [ 129.252136][ T9033] netlink: 'syz.1.1092': attribute type 15 has an invalid length. [ 129.330550][ T9042] FAULT_INJECTION: forcing a failure. [ 129.330550][ T9042] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 129.335856][ T9042] CPU: 0 UID: 0 PID: 9042 Comm: syz.1.1102 Tainted: G L syzkaller #0 PREEMPT(full) [ 129.335885][ T9042] Tainted: [L]=SOFTLOCKUP [ 129.335892][ T9042] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 129.335902][ T9042] Call Trace: [ 129.335909][ T9042] [ 129.335917][ T9042] dump_stack_lvl+0x100/0x190 [ 129.335946][ T9042] should_fail_ex.cold+0x5/0xa [ 129.335973][ T9042] _copy_from_user+0x2e/0xd0 [ 129.336026][ T9042] kstrtouint_from_user+0xd6/0x1d0 [ 129.336047][ T9042] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 129.336068][ T9042] ? __lock_acquire+0x4a5/0x2630 [ 129.336097][ T9042] ? lock_acquire+0x1b1/0x370 [ 129.336125][ T9042] proc_fail_nth_write+0x83/0x220 [ 129.336149][ T9042] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 129.336176][ T9042] vfs_write+0x2aa/0x1070 [ 129.336197][ T9042] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 129.336219][ T9042] ? __pfx_vfs_write+0x10/0x10 [ 129.336238][ T9042] ? __fget_files+0x215/0x3d0 [ 129.336267][ T9042] ? __fget_files+0x21f/0x3d0 [ 129.336296][ T9042] ksys_write+0x12a/0x250 [ 129.336315][ T9042] ? __pfx_ksys_write+0x10/0x10 [ 129.336337][ T9042] ? rcu_is_watching+0x12/0xc0 [ 129.336367][ T9042] do_syscall_64+0x10b/0xf80 [ 129.336392][ T9042] ? clear_bhb_loop+0x40/0x90 [ 129.336414][ T9042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.336431][ T9042] RIP: 0033:0x7fa18ab5d68e [ 129.336446][ T9042] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 129.336463][ T9042] RSP: 002b:00007fa18ba1ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 129.336480][ T9042] RAX: ffffffffffffffda RBX: 00007fa18ba206c0 RCX: 00007fa18ab5d68e [ 129.336491][ T9042] RDX: 0000000000000001 RSI: 00007fa18ba200a0 RDI: 0000000000000003 [ 129.336501][ T9042] RBP: 00007fa18ba20090 R08: 0000000000000000 R09: 0000000000000000 [ 129.336511][ T9042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 129.336520][ T9042] R13: 00007fa18ae16038 R14: 00007fa18ae15fa0 R15: 00007ffce7104bf8 [ 129.336545][ T9042] [ 129.511003][ T9046] XFS (loop5): SB validate failed with error -5. [ 129.617375][ T40] audit: type=1400 audit(1779363373.286:618): avc: denied { lock } for pid=9062 comm="syz.5.1097" path="socket:[33476]" dev="sockfs" ino=33476 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 129.618872][ T9063] tmpfs: Bad value for 'mpol' [ 129.839403][ T9082] loop8: detected capacity change from 0 to 7 [ 129.849513][ T9082] ldm_validate_partition_table(): Disk read failed. [ 129.853706][ T9082] Dev loop8: unable to read RDB block 0 [ 129.856805][ T9082] loop8: unable to read partition table [ 129.859437][ T9082] loop8: partition table beyond EOD, truncated [ 129.862088][ T9082] loop_reread_partitions: partition scan of loop8 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 129.928948][ T9087] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1107'. [ 129.934555][ T9087] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1107'. [ 129.940804][ T40] audit: type=1400 audit(1779363373.606:619): avc: denied { read } for pid=9086 comm="syz.4.1107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 129.944670][ T9087] ufs: You didn't specify the type of your ufs filesystem [ 129.944670][ T9087] [ 129.944670][ T9087] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 129.944670][ T9087] [ 129.944670][ T9087] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 129.958522][ T9087] ufs: ufstype=old is supported read-only [ 129.963499][ T9087] ufs: ufs_fill_super(): bad magic number [ 129.993025][ T9069] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1100'. [ 130.109089][ T9098] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 130.263940][ T9112] fuse: Unknown parameter 'grou00000000000000000000' [ 130.562950][ T5831] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 130.714789][ T5831] usb 9-1: config index 0 descriptor too short (expected 39, got 27) [ 130.718414][ T5831] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 49070, setting to 1023 [ 130.724038][ T5831] usb 9-1: config 0 interface 0 has no altsetting 0 [ 130.730867][ T5831] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 130.735036][ T5831] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 130.738454][ T5831] usb 9-1: Product: syz [ 130.740276][ T5831] usb 9-1: Manufacturer: syz [ 130.742324][ T5831] usb 9-1: SerialNumber: syz [ 130.747839][ T5831] usb 9-1: config 0 descriptor?? [ 130.752503][ T5831] hub 9-1:0.0: bad descriptor, ignoring hub [ 130.755451][ T5831] hub 9-1:0.0: probe with driver hub failed with error -5 [ 130.762557][ T5831] usb 9-1: selecting invalid altsetting 0 [ 130.952908][ T9118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.956411][ T9118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.093438][ T5831] usb 9-1: USB disconnect, device number 5 [ 131.127699][ T40] audit: type=1400 audit(1779363374.796:620): avc: denied { name_bind } for pid=9131 comm="syz.1.1120" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 131.202317][ T9138] bond0: option ad_select: unable to set because the bond device is up [ 131.436676][ T9146] netlink: 'syz.1.1125': attribute type 39 has an invalid length. [ 131.553377][ T9137] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1122'. [ 131.592372][ T9151] FAULT_INJECTION: forcing a failure. [ 131.592372][ T9151] name failslab, interval 1, probability 0, space 0, times 0 [ 131.596576][ T9151] CPU: 1 UID: 0 PID: 9151 Comm: syz.4.1126 Tainted: G L syzkaller #0 PREEMPT(full) [ 131.596595][ T9151] Tainted: [L]=SOFTLOCKUP [ 131.596599][ T9151] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 131.596604][ T9151] Call Trace: [ 131.596609][ T9151] [ 131.596613][ T9151] dump_stack_lvl+0x100/0x190 [ 131.596806][ T9151] should_fail_ex.cold+0x5/0xa [ 131.596855][ T9151] should_failslab+0xc2/0x120 [ 131.596913][ T9151] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 131.596947][ T9151] ? __kernfs_new_node+0xd2/0x9f0 [ 131.596998][ T9151] __kernfs_new_node+0xd2/0x9f0 [ 131.597012][ T9151] ? __lock_acquire+0x4a5/0x2630 [ 131.597057][ T9151] ? __pfx___kernfs_new_node+0x10/0x10 [ 131.597073][ T9151] ? find_held_lock+0x2b/0x80 [ 131.597083][ T9151] ? kernfs_root+0xee/0x2a0 [ 131.597096][ T9151] ? kernfs_root+0xee/0x2a0 [ 131.597112][ T9151] kernfs_new_node+0x11b/0x1a0 [ 131.597129][ T9151] __kernfs_create_file+0x53/0x350 [ 131.597146][ T9151] sysfs_add_file_mode_ns+0x207/0x3c0 [ 131.597163][ T9151] internal_create_group+0x593/0xf40 [ 131.597181][ T9151] ? __pfx_internal_create_group+0x10/0x10 [ 131.597200][ T9151] loop_configure+0xad9/0x15b0 [ 131.597291][ T9151] ? __pfx_loop_configure+0x10/0x10 [ 131.597318][ T9151] lo_ioctl+0xcf3/0x1bc0 [ 131.597337][ T9151] ? __pfx_lo_ioctl+0x10/0x10 [ 131.597353][ T9151] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 131.597415][ T9151] ? kasan_quarantine_put+0x104/0x240 [ 131.597432][ T9151] ? blk_get_meta_cap+0xd4/0x6c0 [ 131.597459][ T9151] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 131.597472][ T9151] ? blkdev_common_ioctl+0x515/0x2b80 [ 131.597499][ T9151] ? __fget_files+0x215/0x3d0 [ 131.597528][ T9151] ? __pfx_lo_ioctl+0x10/0x10 [ 131.597544][ T9151] blkdev_ioctl+0x5ad/0x6f0 [ 131.597555][ T9151] ? __pfx_blkdev_ioctl+0x10/0x10 [ 131.597565][ T9151] ? selinux_file_ioctl+0x13b/0x290 [ 131.597579][ T9151] ? selinux_file_ioctl+0xb6/0x290 [ 131.597594][ T9151] ? __pfx_blkdev_ioctl+0x10/0x10 [ 131.597605][ T9151] __x64_sys_ioctl+0x18e/0x210 [ 131.597619][ T9151] do_syscall_64+0x10b/0xf80 [ 131.597643][ T9151] ? clear_bhb_loop+0x40/0x90 [ 131.597658][ T9151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.597669][ T9151] RIP: 0033:0x7f4c6479ce59 [ 131.597678][ T9151] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.597689][ T9151] RSP: 002b:00007f4c65612028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 131.597717][ T9151] RAX: ffffffffffffffda RBX: 00007f4c64a15fa0 RCX: 00007f4c6479ce59 [ 131.597724][ T9151] RDX: 0000200000000080 RSI: 0000000000004c0a RDI: 0000000000000003 [ 131.597730][ T9151] RBP: 00007f4c65612090 R08: 0000000000000000 R09: 0000000000000000 [ 131.597736][ T9151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.597741][ T9151] R13: 00007f4c64a16038 R14: 00007f4c64a15fa0 R15: 00007ffeac33ae78 [ 131.597755][ T9151] [ 131.600360][ T9151] loop8: detected capacity change from 0 to 7 [ 131.710194][ T9151] ldm_validate_partition_table(): Disk read failed. [ 131.713291][ T9151] Dev loop8: unable to read RDB block 0 [ 131.715537][ T9151] loop8: unable to read partition table [ 131.717775][ T9151] loop8: partition table beyond EOD, truncated [ 131.720027][ T9151] loop_reread_partitions: partition scan of loop8 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 131.843315][ T9166] openvswitch: netlink: Duplicate key (type 6). [ 131.888958][ T9168] tipc: Enabling of bearer rejected, failed to enable media [ 132.039725][ T9176] FAULT_INJECTION: forcing a failure. [ 132.039725][ T9176] name failslab, interval 1, probability 0, space 0, times 0 [ 132.044876][ T9176] CPU: 1 UID: 0 PID: 9176 Comm: syz.1.1132 Tainted: G L syzkaller #0 PREEMPT(full) [ 132.044901][ T9176] Tainted: [L]=SOFTLOCKUP [ 132.044907][ T9176] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 132.044916][ T9176] Call Trace: [ 132.044921][ T9176] [ 132.044926][ T9176] dump_stack_lvl+0x100/0x190 [ 132.044945][ T9176] should_fail_ex.cold+0x5/0xa [ 132.044961][ T9176] should_failslab+0xc2/0x120 [ 132.044973][ T9176] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 132.044990][ T9176] ? vm_area_alloc+0x1f/0x160 [ 132.045008][ T9176] vm_area_alloc+0x1f/0x160 [ 132.045022][ T9176] create_init_stack_vma+0x2ad/0xc10 [ 132.045035][ T9176] ? __lock_acquire+0x4a5/0x2630 [ 132.045050][ T9176] ? __pfx_create_init_stack_vma+0x10/0x10 [ 132.045060][ T9176] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 132.045079][ T9176] ? rcu_is_watching+0x12/0xc0 [ 132.045116][ T9176] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 132.045134][ T9176] ? do_raw_spin_lock+0x128/0x260 [ 132.045149][ T9176] ? find_held_lock+0x2b/0x80 [ 132.045159][ T9176] ? alloc_bprm+0x3da/0x710 [ 132.045188][ T9176] ? alloc_bprm+0x3da/0x710 [ 132.045201][ T9176] alloc_bprm+0x405/0x710 [ 132.045214][ T9176] do_execveat_common.isra.0+0x19c/0x580 [ 132.045226][ T9176] ? do_getname+0x191/0x390 [ 132.045243][ T9176] __x64_sys_execve+0x93/0xd0 [ 132.045260][ T9176] do_syscall_64+0x10b/0xf80 [ 132.045275][ T9176] ? clear_bhb_loop+0x40/0x90 [ 132.045288][ T9176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.045299][ T9176] RIP: 0033:0x7fa18ab9ce59 [ 132.045308][ T9176] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.045319][ T9176] RSP: 002b:00007fa18ba20028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 132.045348][ T9176] RAX: ffffffffffffffda RBX: 00007fa18ae15fa0 RCX: 00007fa18ab9ce59 [ 132.045354][ T9176] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000002c0 [ 132.045360][ T9176] RBP: 00007fa18ba20090 R08: 0000000000000000 R09: 0000000000000000 [ 132.045366][ T9176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.045372][ T9176] R13: 00007fa18ae16038 R14: 00007fa18ae15fa0 R15: 00007ffce7104bf8 [ 132.045385][ T9176] [ 132.217468][ T9182] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 132.229910][ T9182] xfrm1: entered allmulticast mode [ 132.756906][ T9190] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1137'. [ 132.860106][ T9212] FAULT_INJECTION: forcing a failure. [ 132.860106][ T9212] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 132.862320][ T9211] fuse: Unknown parameter 'group_i00000000000000000000' [ 132.864834][ T9212] CPU: 2 UID: 0 PID: 9212 Comm: syz.2.1143 Tainted: G L syzkaller #0 PREEMPT(full) [ 132.864852][ T9212] Tainted: [L]=SOFTLOCKUP [ 132.864856][ T9212] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 132.864862][ T9212] Call Trace: [ 132.864865][ T9212] [ 132.864869][ T9212] dump_stack_lvl+0x100/0x190 [ 132.864889][ T9212] should_fail_ex.cold+0x5/0xa [ 132.864905][ T9212] _copy_from_iter+0x1f4/0x1690 [ 132.864924][ T9212] ? __asan_memset+0x23/0x50 [ 132.864942][ T9212] ? __pfx__copy_from_iter+0x10/0x10 [ 132.864958][ T9212] ? __pfx___alloc_skb+0x10/0x10 [ 132.865063][ T9212] netlink_sendmsg+0x808/0xda0 [ 132.865099][ T9212] ? __pfx_netlink_sendmsg+0x10/0x10 [ 132.865114][ T9212] ? __might_fault+0x70/0x140 [ 132.865139][ T9212] ____sys_sendmsg+0x9e1/0xb70 [ 132.865157][ T9212] ? __pfx_netlink_sendmsg+0x10/0x10 [ 132.865177][ T9212] ? __pfx_____sys_sendmsg+0x10/0x10 [ 132.865314][ T9212] ___sys_sendmsg+0x190/0x1e0 [ 132.865338][ T9212] ? __pfx____sys_sendmsg+0x10/0x10 [ 132.865386][ T9212] __sys_sendmsg+0x170/0x220 [ 132.865404][ T9212] ? __pfx___sys_sendmsg+0x10/0x10 [ 132.865430][ T9212] ? rcu_is_watching+0x12/0xc0 [ 132.865459][ T9212] do_syscall_64+0x10b/0xf80 [ 132.865480][ T9212] ? clear_bhb_loop+0x40/0x90 [ 132.865501][ T9212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.865516][ T9212] RIP: 0033:0x7f58e9d9ce59 [ 132.865530][ T9212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.865546][ T9212] RSP: 002b:00007f58eaba9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 132.865562][ T9212] RAX: ffffffffffffffda RBX: 00007f58ea016090 RCX: 00007f58e9d9ce59 [ 132.865572][ T9212] RDX: 0000000000040080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 132.865582][ T9212] RBP: 00007f58eaba9090 R08: 0000000000000000 R09: 0000000000000000 [ 132.865591][ T9212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.865600][ T9212] R13: 00007f58ea016128 R14: 00007f58ea016090 R15: 00007ffdccfa4568 [ 132.865623][ T9212] [ 133.085821][ T9223] FAULT_INJECTION: forcing a failure. [ 133.085821][ T9223] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 133.090697][ T9223] CPU: 1 UID: 0 PID: 9223 Comm: syz.1.1146 Tainted: G L syzkaller #0 PREEMPT(full) [ 133.090723][ T9223] Tainted: [L]=SOFTLOCKUP [ 133.090729][ T9223] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 133.090739][ T9223] Call Trace: [ 133.090744][ T9223] [ 133.090751][ T9223] dump_stack_lvl+0x100/0x190 [ 133.090780][ T9223] should_fail_ex.cold+0x5/0xa [ 133.090801][ T9223] ? prepare_alloc_pages+0x16d/0x5f0 [ 133.090824][ T9223] should_fail_alloc_page+0xeb/0x140 [ 133.090844][ T9223] prepare_alloc_pages+0x1f0/0x5f0 [ 133.090869][ T9223] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 133.090901][ T9223] ? __lock_acquire+0x4a5/0x2630 [ 133.090930][ T9223] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 133.090959][ T9223] ? __lock_acquire+0x4a5/0x2630 [ 133.090979][ T9223] ? __lock_acquire+0x4a5/0x2630 [ 133.090999][ T9223] ? css_rstat_updated+0x1ce/0x5a0 [ 133.091057][ T9223] ? lock_acquire+0x1b1/0x370 [ 133.091078][ T9223] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 133.091101][ T9223] ? policy_nodemask+0xed/0x4f0 [ 133.091122][ T9223] alloc_pages_mpol+0x1fb/0x540 [ 133.091142][ T9223] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 133.091162][ T9223] ? __lock_acquire+0x4a5/0x2630 [ 133.091184][ T9223] folio_alloc_mpol_noprof+0x36/0x260 [ 133.091211][ T9223] vma_alloc_folio_noprof+0xed/0x1d0 [ 133.091232][ T9223] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 133.091259][ T9223] do_anonymous_page+0xb46/0x2050 [ 133.091283][ T9223] ? rcu_read_unlock+0x2d/0xb0 [ 133.091313][ T9223] __handle_mm_fault+0x1d2c/0x2a00 [ 133.091338][ T9223] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 133.091365][ T9223] ? __pfx___handle_mm_fault+0x10/0x10 [ 133.091390][ T9223] ? pte_offset_map_lock+0x174/0x320 [ 133.091408][ T9223] ? find_held_lock+0x2b/0x80 [ 133.091432][ T9223] ? follow_page_pte+0x4d0/0x13f0 [ 133.091455][ T9223] handle_mm_fault+0x36d/0xa20 [ 133.091483][ T9223] __get_user_pages+0x1178/0x32a0 [ 133.091508][ T9223] ? down_read_killable+0x307/0x4b0 [ 133.091527][ T9223] ? __pfx___get_user_pages+0x10/0x10 [ 133.091553][ T9223] __gup_longterm_locked+0x279/0x16f0 [ 133.091579][ T9223] ? __pfx___gup_longterm_locked+0x10/0x10 [ 133.091600][ T9223] ? __get_pfnblock_flags_mask+0x128/0x240 [ 133.091620][ T9223] ? find_held_lock+0x2b/0x80 [ 133.091637][ T9223] ? sanity_check_pinned_pages+0x4f2/0x8b0 [ 133.091660][ T9223] gup_fast_fallback+0x16dc/0x2790 [ 133.091696][ T9223] ? __pfx_gup_fast_fallback+0x10/0x10 [ 133.091727][ T9223] pin_user_pages_fast+0xa7/0xf0 [ 133.091747][ T9223] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 133.091765][ T9223] ? io_pin_pages+0xc3/0x1e0 [ 133.091787][ T9223] ? avc_has_perm_noaudit+0x145/0x3b0 [ 133.091809][ T9223] io_pin_pages+0xe6/0x1e0 [ 133.091830][ T9223] io_create_region+0x3f9/0xbe0 [ 133.091855][ T9223] ? __pfx_io_create_region+0x10/0x10 [ 133.091876][ T9223] ? rcu_is_watching+0x12/0xc0 [ 133.091902][ T9223] ? cap_capable+0x10b/0x440 [ 133.091923][ T9223] ? bpf_lsm_capable+0x9/0x10 [ 133.091961][ T9223] ? security_capable+0x80/0x260 [ 133.091982][ T9223] io_uring_setup.cold+0x10fe/0x1cde [ 133.092023][ T9223] ? __pfx_io_uring_setup+0x10/0x10 [ 133.092040][ T9223] ? find_held_lock+0x2b/0x80 [ 133.092074][ T9223] ? ksys_write+0x1ac/0x250 [ 133.092094][ T9223] ? __pfx_ksys_write+0x10/0x10 [ 133.092117][ T9223] __x64_sys_io_uring_setup+0xc2/0x170 [ 133.092135][ T9223] do_syscall_64+0x10b/0xf80 [ 133.092158][ T9223] ? clear_bhb_loop+0x40/0x90 [ 133.092180][ T9223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.092200][ T9223] RIP: 0033:0x7fa18ab9ce59 [ 133.092215][ T9223] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.092231][ T9223] RSP: 002b:00007fa18ba20028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 133.092247][ T9223] RAX: ffffffffffffffda RBX: 00007fa18ae15fa0 RCX: 00007fa18ab9ce59 [ 133.092257][ T9223] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000004fef [ 133.092267][ T9223] RBP: 00007fa18ba20090 R08: 0000000000000000 R09: 0000000000000000 [ 133.092277][ T9223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 133.092286][ T9223] R13: 00007fa18ae16038 R14: 00007fa18ae15fa0 R15: 00007ffce7104bf8 [ 133.092310][ T9223] [ 133.255950][ T9227] FAULT_INJECTION: forcing a failure. [ 133.255950][ T9227] name failslab, interval 1, probability 0, space 0, times 0 [ 133.260035][ T9227] CPU: 0 UID: 0 PID: 9227 Comm: syz.1.1148 Tainted: G L syzkaller #0 PREEMPT(full) [ 133.260053][ T9227] Tainted: [L]=SOFTLOCKUP [ 133.260057][ T9227] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 133.260063][ T9227] Call Trace: [ 133.260067][ T9227] [ 133.260071][ T9227] dump_stack_lvl+0x100/0x190 [ 133.260090][ T9227] should_fail_ex.cold+0x5/0xa [ 133.260108][ T9227] should_failslab+0xc2/0x120 [ 133.260121][ T9227] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 133.260138][ T9227] ? __alloc_skb+0x140/0x710 [ 133.260148][ T9227] ? __alloc_skb+0x5b7/0x710 [ 133.260159][ T9227] __alloc_skb+0x140/0x710 [ 133.260168][ T9227] ? __alloc_skb+0x5b7/0x710 [ 133.260177][ T9227] ? __pfx___alloc_skb+0x10/0x10 [ 133.260190][ T9227] netlink_alloc_large_skb+0x69/0x150 [ 133.260208][ T9227] netlink_sendmsg+0x680/0xda0 [ 133.260224][ T9227] ? __pfx_netlink_sendmsg+0x10/0x10 [ 133.260238][ T9227] ? __might_fault+0x70/0x140 [ 133.260261][ T9227] ____sys_sendmsg+0x9e1/0xb70 [ 133.260274][ T9227] ? __pfx_netlink_sendmsg+0x10/0x10 [ 133.260290][ T9227] ? __pfx_____sys_sendmsg+0x10/0x10 [ 133.260309][ T9227] ___sys_sendmsg+0x190/0x1e0 [ 133.260325][ T9227] ? __pfx____sys_sendmsg+0x10/0x10 [ 133.260354][ T9227] __sys_sendmsg+0x170/0x220 [ 133.260366][ T9227] ? __pfx___sys_sendmsg+0x10/0x10 [ 133.260383][ T9227] ? rcu_is_watching+0x12/0xc0 [ 133.260402][ T9227] do_syscall_64+0x10b/0xf80 [ 133.260417][ T9227] ? clear_bhb_loop+0x40/0x90 [ 133.260430][ T9227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.260441][ T9227] RIP: 0033:0x7fa18ab9ce59 [ 133.260450][ T9227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.260461][ T9227] RSP: 002b:00007fa18ba20028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 133.260472][ T9227] RAX: ffffffffffffffda RBX: 00007fa18ae15fa0 RCX: 00007fa18ab9ce59 [ 133.260479][ T9227] RDX: 0000000000008010 RSI: 0000200000000040 RDI: 0000000000000003 [ 133.260485][ T9227] RBP: 00007fa18ba20090 R08: 0000000000000000 R09: 0000000000000000 [ 133.260491][ T9227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.260497][ T9227] R13: 00007fa18ae16038 R14: 00007fa18ae15fa0 R15: 00007ffce7104bf8 [ 133.260510][ T9227] [ 133.622848][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 133.622860][ T40] audit: type=1400 audit(1779363377.286:624): avc: denied { wake_alarm } for pid=9249 comm="syz.2.1156" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 133.691079][ T40] audit: type=1400 audit(1779363377.356:625): avc: denied { mounton } for pid=9249 comm="syz.2.1156" path="/322/bus" dev="tmpfs" ino=1723 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 133.862940][ T9243] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1155'. [ 133.972931][ T846] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 134.125487][ T846] usb 9-1: Using ep0 maxpacket: 16 [ 134.131351][ T846] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 134.139232][ T846] usb 9-1: config 0 interface 0 has no altsetting 0 [ 134.145109][ T846] usb 9-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 134.148076][ T846] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.150570][ T846] usb 9-1: Product: syz [ 134.151869][ T846] usb 9-1: Manufacturer: syz [ 134.153619][ T846] usb 9-1: SerialNumber: syz [ 134.163270][ T846] usb 9-1: config 0 descriptor?? [ 134.172172][ T9251] sysfs: cannot create duplicate filename '/class/ieee80211/1^!0x0000000000000003' [ 134.176443][ T9251] CPU: 1 UID: 0 PID: 9251 Comm: syz.5.1154 Tainted: G L syzkaller #0 PREEMPT(full) [ 134.176472][ T9251] Tainted: [L]=SOFTLOCKUP [ 134.176480][ T9251] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 134.176493][ T9251] Call Trace: [ 134.176501][ T9251] [ 134.176508][ T9251] dump_stack_lvl+0x100/0x190 [ 134.176542][ T9251] sysfs_warn_dup.cold+0x1c/0x28 [ 134.176599][ T9251] sysfs_do_create_link_sd+0x113/0x140 [ 134.176634][ T9251] sysfs_create_link+0x61/0xc0 [ 134.176681][ T9251] device_add+0x675/0x1950 [ 134.176731][ T9251] ? __pfx_device_add+0x10/0x10 [ 134.176751][ T9251] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 134.176776][ T9251] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 134.176825][ T9251] wiphy_register+0x1edd/0x2d90 [ 134.176848][ T9251] ? __rtnl_unlock+0xb9/0xf0 [ 134.176879][ T9251] ? __pfx_wiphy_register+0x10/0x10 [ 134.176903][ T9251] ? __asan_memset+0x23/0x50 [ 134.176931][ T9251] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 134.176961][ T9251] ieee80211_register_hw+0x3055/0x4570 [ 134.177005][ T9251] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 134.177035][ T9251] ? __pfx___debug_object_init+0x10/0x10 [ 134.177069][ T9251] ? find_held_lock+0x2b/0x80 [ 134.177090][ T9251] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 134.177114][ T9251] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 134.177176][ T9251] ? __hrtimer_setup+0x208/0x330 [ 134.177232][ T9251] mac80211_hwsim_new_radio+0x2a01/0x5aa0 [ 134.177272][ T9251] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 134.177296][ T9251] ? __asan_memcpy+0x3c/0x60 [ 134.177328][ T9251] hwsim_new_radio_nl+0xc5f/0x1370 [ 134.177347][ T9251] ? rcu_is_watching+0x12/0xc0 [ 134.177379][ T9251] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 134.177408][ T9251] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 134.177439][ T9251] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 134.177475][ T9251] genl_family_rcv_msg_doit+0x214/0x300 [ 134.177507][ T9251] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 134.177546][ T9251] ? bpf_lsm_capable+0x9/0x10 [ 134.177566][ T9251] ? security_capable+0x80/0x260 [ 134.177589][ T9251] ? ns_capable+0xd2/0xf0 [ 134.177648][ T9251] genl_rcv_msg+0x560/0x800 [ 134.177680][ T9251] ? __pfx_genl_rcv_msg+0x10/0x10 [ 134.177711][ T9251] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 134.177741][ T9251] netlink_rcv_skb+0x159/0x420 [ 134.177769][ T9251] ? __pfx_genl_rcv_msg+0x10/0x10 [ 134.177801][ T9251] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 134.177841][ T9251] ? netlink_deliver_tap+0x1ae/0xcc0 [ 134.177870][ T9251] genl_rcv+0x28/0x40 [ 134.177897][ T9251] netlink_unicast+0x585/0x850 [ 134.177928][ T9251] ? __pfx_netlink_unicast+0x10/0x10 [ 134.177962][ T9251] netlink_sendmsg+0x8b0/0xda0 [ 134.177993][ T9251] ? __pfx_netlink_sendmsg+0x10/0x10 [ 134.178016][ T9251] ? __might_fault+0x70/0x140 [ 134.178049][ T9251] ____sys_sendmsg+0x9e1/0xb70 [ 134.178073][ T9251] ? __pfx_netlink_sendmsg+0x10/0x10 [ 134.178101][ T9251] ? __pfx_____sys_sendmsg+0x10/0x10 [ 134.178132][ T9251] ? __pfx_futex_wake_mark+0x10/0x10 [ 134.178157][ T9251] ___sys_sendmsg+0x190/0x1e0 [ 134.178185][ T9251] ? __pfx____sys_sendmsg+0x10/0x10 [ 134.178245][ T9251] __sys_sendmsg+0x170/0x220 [ 134.178268][ T9251] ? __pfx___sys_sendmsg+0x10/0x10 [ 134.178288][ T9251] ? __x64_sys_futex+0x34f/0x4d0 [ 134.178326][ T9251] ? rcu_is_watching+0x12/0xc0 [ 134.178358][ T9251] do_syscall_64+0x10b/0xf80 [ 134.178383][ T9251] ? clear_bhb_loop+0x40/0x90 [ 134.178408][ T9251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.178429][ T9251] RIP: 0033:0x7f7e38f9ce59 [ 134.178446][ T9251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.178464][ T9251] RSP: 002b:00007f7e39e65028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 134.178483][ T9251] RAX: ffffffffffffffda RBX: 00007f7e39216090 RCX: 00007f7e38f9ce59 [ 134.178511][ T9251] RDX: 0000000004000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 134.178523][ T9251] RBP: 00007f7e39032d6f R08: 0000000000000000 R09: 0000000000000000 [ 134.178536][ T9251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.178547][ T9251] R13: 00007f7e39216128 R14: 00007f7e39216090 R15: 00007ffc51af3e38 [ 134.178574][ T9251] [ 134.378093][ C0] imon 9-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 134.378593][ T9278] FAULT_INJECTION: forcing a failure. [ 134.378593][ T9278] name failslab, interval 1, probability 0, space 0, times 0 [ 134.384321][ T9278] CPU: 3 UID: 0 PID: 9278 Comm: syz.1.1160 Tainted: G L syzkaller #0 PREEMPT(full) [ 134.384347][ T9278] Tainted: [L]=SOFTLOCKUP [ 134.384353][ T9278] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 134.384362][ T9278] Call Trace: [ 134.384369][ T9278] [ 134.384377][ T9278] dump_stack_lvl+0x100/0x190 [ 134.384402][ T9278] should_fail_ex.cold+0x5/0xa [ 134.384418][ T9278] should_failslab+0xc2/0x120 [ 134.384431][ T9278] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 134.384448][ T9278] ? security_file_alloc+0x34/0x2c0 [ 134.384464][ T9278] ? trace_kmem_cache_alloc+0xd5/0x100 [ 134.384478][ T9278] security_file_alloc+0x34/0x2c0 [ 134.384494][ T9278] init_file+0x95/0x480 [ 134.384510][ T9278] alloc_empty_file+0x79/0x1c0 [ 134.384526][ T9278] alloc_file_pseudo+0x13a/0x230 [ 134.384542][ T9278] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 134.384558][ T9278] ? pidfs_register_pid+0x70/0x1b0 [ 134.384599][ T9278] sock_alloc_file+0x50/0x210 [ 134.384614][ T9278] __sys_socketpair+0x321/0x5b0 [ 134.384630][ T9278] ? __pfx___sys_socketpair+0x10/0x10 [ 134.384647][ T9278] ? __pfx_ksys_write+0x10/0x10 [ 134.384681][ T9278] __x64_sys_socketpair+0x96/0x100 [ 134.384696][ T9278] ? lockdep_hardirqs_on+0x78/0x100 [ 134.384712][ T9278] do_syscall_64+0x10b/0xf80 [ 134.384726][ T9278] ? clear_bhb_loop+0x40/0x90 [ 134.384739][ T9278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.384750][ T9278] RIP: 0033:0x7fa18ab9ce59 [ 134.384760][ T9278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.384775][ T9278] RSP: 002b:00007fa18ba20028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 134.384786][ T9278] RAX: ffffffffffffffda RBX: 00007fa18ae15fa0 RCX: 00007fa18ab9ce59 [ 134.384793][ T9278] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 134.384798][ T9278] RBP: 00007fa18ba20090 R08: 0000000000000000 R09: 0000000000000000 [ 134.384804][ T9278] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000002 [ 134.384810][ T9278] R13: 00007fa18ae16038 R14: 00007fa18ae15fa0 R15: 00007ffce7104bf8 [ 134.384823][ T9278] [ 134.396170][ T846] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input9 [ 134.433413][ T9281] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1161'. [ 134.438432][ T9282] FAULT_INJECTION: forcing a failure. [ 134.438432][ T9282] name failslab, interval 1, probability 0, space 0, times 0 [ 134.441498][ T9281] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1161'. [ 134.455900][ T9282] CPU: 0 UID: 0 PID: 9282 Comm: syz.1.1162 Tainted: G L syzkaller #0 PREEMPT(full) [ 134.455928][ T9282] Tainted: [L]=SOFTLOCKUP [ 134.455933][ T9282] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 134.455943][ T9282] Call Trace: [ 134.455948][ T9282] [ 134.455954][ T9282] dump_stack_lvl+0x100/0x190 [ 134.455983][ T9282] should_fail_ex.cold+0x5/0xa [ 134.456006][ T9282] should_failslab+0xc2/0x120 [ 134.456025][ T9282] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 134.456049][ T9282] ? __kernfs_new_node+0xd2/0x9f0 [ 134.456074][ T9282] __kernfs_new_node+0xd2/0x9f0 [ 134.456098][ T9282] ? __pfx___kernfs_new_node+0x10/0x10 [ 134.456123][ T9282] ? find_held_lock+0x2b/0x80 [ 134.456139][ T9282] ? kernfs_root+0xee/0x2a0 [ 134.456158][ T9282] ? kernfs_root+0xee/0x2a0 [ 134.456188][ T9282] kernfs_new_node+0x11b/0x1a0 [ 134.456215][ T9282] __kernfs_create_file+0x53/0x350 [ 134.456235][ T9282] sysfs_add_file_mode_ns+0x207/0x3c0 [ 134.456260][ T9282] internal_create_group+0x593/0xf40 [ 134.456286][ T9282] ? __pfx_internal_create_group+0x10/0x10 [ 134.456317][ T9282] loop_configure+0xad9/0x15b0 [ 134.456359][ T9282] ? __pfx_loop_configure+0x10/0x10 [ 134.456403][ T9282] lo_ioctl+0xcf3/0x1bc0 [ 134.456430][ T9282] ? __pfx_lo_ioctl+0x10/0x10 [ 134.456451][ T9282] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 134.456472][ T9282] ? kasan_quarantine_put+0x104/0x240 [ 134.456495][ T9282] ? blk_get_meta_cap+0xd4/0x6c0 [ 134.456512][ T9282] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 134.456534][ T9282] ? blkdev_common_ioctl+0x515/0x2b80 [ 134.456577][ T9282] ? __fget_files+0x215/0x3d0 [ 134.456599][ T9282] ? __pfx_lo_ioctl+0x10/0x10 [ 134.456622][ T9282] blkdev_ioctl+0x5ad/0x6f0 [ 134.456639][ T9282] ? __pfx_blkdev_ioctl+0x10/0x10 [ 134.456679][ T9282] ? selinux_file_ioctl+0x13b/0x290 [ 134.456701][ T9282] ? selinux_file_ioctl+0xb6/0x290 [ 134.456724][ T9282] ? __pfx_blkdev_ioctl+0x10/0x10 [ 134.456742][ T9282] __x64_sys_ioctl+0x18e/0x210 [ 134.456761][ T9282] do_syscall_64+0x10b/0xf80 [ 134.456785][ T9282] ? clear_bhb_loop+0x40/0x90 [ 134.456803][ T9282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.456824][ T9282] RIP: 0033:0x7fa18ab9ce59 [ 134.456839][ T9282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.456855][ T9282] RSP: 002b:00007fa18ba20028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 134.456872][ T9282] RAX: ffffffffffffffda RBX: 00007fa18ae15fa0 RCX: 00007fa18ab9ce59 [ 134.456882][ T9282] RDX: 0000200000000080 RSI: 0000000000004c0a RDI: 0000000000000003 [ 134.456892][ T9282] RBP: 00007fa18ba20090 R08: 0000000000000000 R09: 0000000000000000 [ 134.456900][ T9282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.456907][ T9282] R13: 00007fa18ae16038 R14: 00007fa18ae15fa0 R15: 00007ffce7104bf8 [ 134.456921][ T9282] [ 134.457086][ T9282] loop8: detected capacity change from 0 to 7 [ 134.462000][ T9281] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1161'. [ 134.467271][ T846] imon:send_packet: packet tx failed (-71) [ 134.472950][ C2] blk_print_req_error: 50 callbacks suppressed [ 134.472966][ C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 134.478318][ T9281] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1161'. [ 134.481775][ C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 134.488391][ T9281] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1161'. [ 134.488836][ C2] buffer_io_error: 50 callbacks suppressed [ 134.488848][ C2] Buffer I/O error on dev loop8, logical block 0, async page read [ 134.490636][ T9281] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1161'. [ 134.492878][ T846] imon 9-1:0.0: panel buttons/knobs setup failed [ 134.496843][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 134.498693][ T9281] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1161'. [ 134.499995][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 134.500583][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 134.502384][ T9281] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1161'. [ 134.503715][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 134.542894][ T846] rc_core: IR keymap rc-imon-pad not found [ 134.552346][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 134.557346][ T846] Registered IR keymap rc-empty [ 134.562398][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 134.565137][ T846] imon 9-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 134.568482][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 134.570068][ T846] imon 9-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 134.572632][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 134.573333][ C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 134.578007][ T846] imon:send_packet: packet tx failed (-71) [ 134.578911][ C2] Buffer I/O error on dev loop8, logical block 0, async page read [ 134.594671][ T846] imon 9-1:0.0: remote input dev register failed [ 134.596505][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 134.599339][ T846] imon 9-1:0.0: imon_init_intf0: rc device setup failed [ 134.601106][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 134.661927][ C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 134.664963][ C2] Buffer I/O error on dev loop8, logical block 0, async page read [ 134.668227][ C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 134.671137][ C2] Buffer I/O error on dev loop8, logical block 0, async page read [ 134.673866][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 134.677944][ T9282] ldm_validate_partition_table(): Disk read failed. [ 134.680754][ T846] imon 9-1:0.0: unable to initialize intf0, err 0 [ 134.681222][ T9282] Dev loop8: unable to read RDB block 0 [ 134.683380][ T846] imon:imon_probe: failed to initialize context! [ 134.683395][ T846] imon 9-1:0.0: unable to register, err -19 [ 134.687400][ T846] usb 9-1: USB disconnect, device number 6 [ 134.694285][ T9282] loop8: unable to read partition table [ 134.696593][ T9282] loop8: partition table beyond EOD, truncated [ 134.699078][ T9282] loop_reread_partitions: partition scan of loop8 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 134.745696][ T9292] fuse: Unknown parameter 'group_i00000000000000000000' [ 134.913272][ T40] audit: type=1400 audit(1779363378.586:626): avc: denied { read } for pid=9297 comm="syz.5.1167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 135.022906][ T846] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 135.059363][ T40] audit: type=1800 audit(1779363378.726:627): pid=9305 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.1170" name="file1" dev="overlay" ino=580 res=0 errno=0 [ 135.106358][ T9307] loop8: detected capacity change from 0 to 7 [ 135.111383][ T9307] ldm_validate_partition_table(): Disk read failed. [ 135.117341][ T9307] Dev loop8: unable to read RDB block 0 [ 135.119953][ T9307] loop8: unable to read partition table [ 135.122164][ T9307] loop8: partition table beyond EOD, truncated [ 135.124923][ T9307] loop_reread_partitions: partition scan of loop8 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 135.173348][ T846] usb 9-1: Using ep0 maxpacket: 16 [ 135.179437][ T846] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 135.190570][ T846] usb 9-1: config 0 interface 0 has no altsetting 0 [ 135.199484][ T846] usb 9-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 135.203011][ T846] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.205808][ T846] usb 9-1: Product: syz [ 135.207336][ T846] usb 9-1: Manufacturer: syz [ 135.208894][ T846] usb 9-1: SerialNumber: syz [ 135.217354][ T846] usb 9-1: config 0 descriptor?? [ 135.432948][ T846] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input11 [ 135.571280][ T9325] overlayfs: failed to resolve './file1': -2 [ 135.581040][ T9325] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only [ 135.584195][ T9325] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 135.693935][ T9239] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 135.696206][ T846] rc_core: IR keymap rc-imon-pad not found [ 135.700203][ T846] Registered IR keymap rc-empty [ 135.703701][ T846] imon 9-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 135.707456][ T846] imon 9-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 135.773907][ T40] audit: type=1400 audit(1779363379.446:628): avc: denied { map } for pid=9332 comm="syz.5.1179" path="socket:[36865]" dev="sockfs" ino=36865 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 135.782932][ T40] audit: type=1400 audit(1779363379.446:629): avc: denied { read accept } for pid=9332 comm="syz.5.1179" path="socket:[36865]" dev="sockfs" ino=36865 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 135.790212][ T40] audit: type=1804 audit(1779363379.446:630): pid=9333 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.1179" name="/newroot/114/cgroup.controllers" dev="tmpfs" ino=629 res=1 errno=0 [ 135.798695][ T40] audit: type=1800 audit(1779363379.446:631): pid=9333 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.1179" name="cgroup.controllers" dev="tmpfs" ino=629 res=0 errno=0 [ 135.849663][ T9339] FAULT_INJECTION: forcing a failure. [ 135.849663][ T9339] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.853957][ T9339] CPU: 1 UID: 0 PID: 9339 Comm: syz.5.1180 Tainted: G L syzkaller #0 PREEMPT(full) [ 135.853975][ T9339] Tainted: [L]=SOFTLOCKUP [ 135.853979][ T9339] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 135.853985][ T9339] Call Trace: [ 135.853989][ T9339] [ 135.853994][ T9339] dump_stack_lvl+0x100/0x190 [ 135.854159][ T9339] should_fail_ex.cold+0x5/0xa [ 135.854207][ T9339] _copy_from_iter+0x1f4/0x1690 [ 135.854275][ T9339] ? __asan_memset+0x23/0x50 [ 135.854337][ T9339] ? __pfx__copy_from_iter+0x10/0x10 [ 135.854353][ T9339] ? __pfx___alloc_skb+0x10/0x10 [ 135.854456][ T9339] netlink_sendmsg+0x808/0xda0 [ 135.854491][ T9339] ? __pfx_netlink_sendmsg+0x10/0x10 [ 135.854509][ T9339] ? __might_fault+0x70/0x140 [ 135.854562][ T9339] ____sys_sendmsg+0x9e1/0xb70 [ 135.854585][ T9339] ? __pfx_netlink_sendmsg+0x10/0x10 [ 135.854611][ T9339] ? __pfx_____sys_sendmsg+0x10/0x10 [ 135.854647][ T9339] ___sys_sendmsg+0x190/0x1e0 [ 135.854663][ T9339] ? __pfx____sys_sendmsg+0x10/0x10 [ 135.854693][ T9339] __sys_sendmsg+0x170/0x220 [ 135.854705][ T9339] ? __pfx___sys_sendmsg+0x10/0x10 [ 135.854721][ T9339] ? rcu_is_watching+0x12/0xc0 [ 135.854773][ T9339] do_syscall_64+0x10b/0xf80 [ 135.854794][ T9339] ? clear_bhb_loop+0x40/0x90 [ 135.854809][ T9339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.854820][ T9339] RIP: 0033:0x7f7e38f9ce59 [ 135.854830][ T9339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.854841][ T9339] RSP: 002b:00007f7e39e86028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 135.854852][ T9339] RAX: ffffffffffffffda RBX: 00007f7e39215fa0 RCX: 00007f7e38f9ce59 [ 135.854859][ T9339] RDX: 0000000000008010 RSI: 0000200000000040 RDI: 0000000000000003 [ 135.854865][ T9339] RBP: 00007f7e39e86090 R08: 0000000000000000 R09: 0000000000000000 [ 135.854872][ T9339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.854878][ T9339] R13: 00007f7e39216038 R14: 00007f7e39215fa0 R15: 00007ffc51af3e38 [ 135.854894][ T9339] [ 135.855105][ T846] rc rc0: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0 [ 135.927823][ T846] input: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0/input12 [ 135.936414][ T846] imon 9-1:0.0: iMON device (15c2:0045, intf0) on usb<9:7> initialized [ 136.030203][ T9261] imon:lcd_write: invalid payload size: 0 (expected 8) [ 136.042748][ T9261] usb usb9: check_ctrlrecip: process 9261 (syz.4.1157) requesting ep 01 but needs 81 [ 136.049770][ T9261] usb usb9: usbfs: process 9261 (syz.4.1157) did not claim interface 0 before use [ 136.126594][ C0] imon 9-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 136.127014][ T5831] usb 9-1: USB disconnect, device number 7 [ 136.410500][ T9352] fuse: Unknown parameter 'group_id00000000000000000000' [ 136.672226][ T40] audit: type=1400 audit(1779363380.336:632): avc: denied { append } for pid=9359 comm="syz.4.1187" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 136.836378][ T9362] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=30300 sclass=netlink_route_socket pid=9362 comm=syz.4.1187 [ 136.837391][ T40] audit: type=1400 audit(1779363380.506:633): avc: denied { map } for pid=9359 comm="syz.4.1187" path="/proc/644/mountinfo" dev="proc" ino=36065 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 137.278513][ T9399] FAULT_INJECTION: forcing a failure. [ 137.278513][ T9399] name failslab, interval 1, probability 0, space 0, times 0 [ 137.283709][ T9399] CPU: 3 UID: 0 PID: 9399 Comm: syz.2.1193 Tainted: G L syzkaller #0 PREEMPT(full) [ 137.283735][ T9399] Tainted: [L]=SOFTLOCKUP [ 137.283741][ T9399] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 137.283753][ T9399] Call Trace: [ 137.283759][ T9399] [ 137.283766][ T9399] dump_stack_lvl+0x100/0x190 [ 137.283796][ T9399] should_fail_ex.cold+0x5/0xa [ 137.283822][ T9399] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 137.283851][ T9399] should_failslab+0xc2/0x120 [ 137.283888][ T9399] __kmalloc_noprof+0xe0/0x850 [ 137.283921][ T9399] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 137.283954][ T9399] genl_family_rcv_msg_doit+0xc7/0x300 [ 137.283984][ T9399] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 137.284024][ T9399] ? bpf_lsm_capable+0x9/0x10 [ 137.284069][ T9399] ? security_capable+0x80/0x260 [ 137.284116][ T9399] genl_rcv_msg+0x560/0x800 [ 137.284146][ T9399] ? __pfx_genl_rcv_msg+0x10/0x10 [ 137.284178][ T9399] ? __pfx_fou_nl_add_doit+0x10/0x10 [ 137.284209][ T9399] netlink_rcv_skb+0x159/0x420 [ 137.284234][ T9399] ? __pfx_genl_rcv_msg+0x10/0x10 [ 137.284263][ T9399] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 137.284298][ T9399] ? netlink_deliver_tap+0x1ae/0xcc0 [ 137.284325][ T9399] genl_rcv+0x28/0x40 [ 137.284349][ T9399] netlink_unicast+0x585/0x850 [ 137.284376][ T9399] ? __pfx_netlink_unicast+0x10/0x10 [ 137.284408][ T9399] netlink_sendmsg+0x8b0/0xda0 [ 137.284437][ T9399] ? __pfx_netlink_sendmsg+0x10/0x10 [ 137.284460][ T9399] ? __might_fault+0x70/0x140 [ 137.284496][ T9399] ____sys_sendmsg+0x9e1/0xb70 [ 137.284519][ T9399] ? __pfx_netlink_sendmsg+0x10/0x10 [ 137.284546][ T9399] ? __pfx_____sys_sendmsg+0x10/0x10 [ 137.284581][ T9399] ___sys_sendmsg+0x190/0x1e0 [ 137.284607][ T9399] ? __pfx____sys_sendmsg+0x10/0x10 [ 137.284683][ T9399] __sys_sendmsg+0x170/0x220 [ 137.284704][ T9399] ? __pfx___sys_sendmsg+0x10/0x10 [ 137.284734][ T9399] ? rcu_is_watching+0x12/0xc0 [ 137.284765][ T9399] do_syscall_64+0x10b/0xf80 [ 137.284790][ T9399] ? clear_bhb_loop+0x40/0x90 [ 137.284812][ T9399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.284830][ T9399] RIP: 0033:0x7f58e9d9ce59 [ 137.284846][ T9399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.284863][ T9399] RSP: 002b:00007f58eabca028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 137.284883][ T9399] RAX: ffffffffffffffda RBX: 00007f58ea015fa0 RCX: 00007f58e9d9ce59 [ 137.284895][ T9399] RDX: 0000000000040080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 137.284906][ T9399] RBP: 00007f58eabca090 R08: 0000000000000000 R09: 0000000000000000 [ 137.284917][ T9399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.284928][ T9399] R13: 00007f58ea016038 R14: 00007f58ea015fa0 R15: 00007ffdccfa4568 [ 137.284955][ T9399] [ 137.459956][ T9406] FAULT_INJECTION: forcing a failure. [ 137.459956][ T9406] name failslab, interval 1, probability 0, space 0, times 0 [ 137.464472][ T9406] CPU: 2 UID: 0 PID: 9406 Comm: syz.2.1196 Tainted: G L syzkaller #0 PREEMPT(full) [ 137.464490][ T9406] Tainted: [L]=SOFTLOCKUP [ 137.464494][ T9406] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 137.464501][ T9406] Call Trace: [ 137.464505][ T9406] [ 137.464509][ T9406] dump_stack_lvl+0x100/0x190 [ 137.464529][ T9406] should_fail_ex.cold+0x5/0xa [ 137.464546][ T9406] should_failslab+0xc2/0x120 [ 137.464559][ T9406] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 137.464576][ T9406] ? vm_area_dup+0x27/0x8e0 [ 137.464594][ T9406] vm_area_dup+0x27/0x8e0 [ 137.464629][ T9406] __split_vma+0x18c/0xd90 [ 137.464648][ T9406] ? find_held_lock+0x2b/0x80 [ 137.464680][ T9406] ? __pfx___split_vma+0x10/0x10 [ 137.464694][ T9406] ? is_bpf_text_address+0x8a/0x1a0 [ 137.464731][ T9406] ? kernel_text_address+0x8d/0x100 [ 137.464765][ T9406] ? __kernel_text_address+0xd/0x30 [ 137.464779][ T9406] ? unwind_get_return_address+0x59/0xa0 [ 137.464817][ T9406] vms_gather_munmap_vmas+0x1d2/0x1720 [ 137.464835][ T9406] ? mtree_range_walk+0x72b/0xb70 [ 137.464850][ T9406] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 137.464870][ T9406] ? mas_walk+0x6ef/0x9b0 [ 137.464889][ T9406] __mmap_region+0x4aa/0x2da0 [ 137.464907][ T9406] ? __pfx___mmap_region+0x10/0x10 [ 137.464924][ T9406] ? __pfx___might_resched+0x10/0x10 [ 137.464942][ T9406] ? find_held_lock+0x2b/0x80 [ 137.464952][ T9406] ? process_measurement+0x4c8/0x2350 [ 137.464968][ T9406] ? process_measurement+0x4c8/0x2350 [ 137.464987][ T9406] ? process_measurement+0x1f4/0x2350 [ 137.465004][ T9406] ? find_held_lock+0x2b/0x80 [ 137.465021][ T9406] ? __lock_acquire+0x4a5/0x2630 [ 137.465040][ T9406] ? __lock_acquire+0x4a5/0x2630 [ 137.465055][ T9406] ? find_held_lock+0x2b/0x80 [ 137.465065][ T9406] ? is_bpf_text_address+0x8a/0x1a0 [ 137.465094][ T9406] ? do_raw_read_unlock+0x3f/0x70 [ 137.465110][ T9406] ? _raw_read_unlock+0x28/0x50 [ 137.465124][ T9406] ? drm_vma_node_is_allowed+0xd4/0x110 [ 137.465204][ T9406] mmap_region+0x35d/0x620 [ 137.465226][ T9406] ? __pfx_mmap_region+0x10/0x10 [ 137.465243][ T9406] ? drm_gem_get_unmapped_area+0x17b/0x220 [ 137.465255][ T9406] ? __pfx_shmem_get_unmapped_area+0x10/0x10 [ 137.465288][ T9406] ? selinux_mmap_addr+0x2b/0x110 [ 137.465302][ T9406] ? bpf_lsm_mmap_addr+0x9/0x30 [ 137.465312][ T9406] ? security_mmap_addr+0x71/0x1e0 [ 137.465328][ T9406] ? __get_unmapped_area+0x255/0x3e0 [ 137.465344][ T9406] do_mmap+0xc63/0x12f0 [ 137.465359][ T9406] ? __pfx_do_mmap+0x10/0x10 [ 137.465371][ T9406] ? __pfx_down_write_killable+0x10/0x10 [ 137.465384][ T9406] vm_mmap_pgoff+0x29e/0x470 [ 137.465401][ T9406] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 137.465413][ T9406] ? __fget_files+0x215/0x3d0 [ 137.465463][ T9406] ? __fget_files+0x21f/0x3d0 [ 137.465480][ T9406] ksys_mmap_pgoff+0x3cb/0x610 [ 137.465493][ T9406] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 137.465505][ T9406] ? fput+0x79/0x100 [ 137.465537][ T9406] ? ksys_write+0x1ac/0x250 [ 137.465549][ T9406] ? __pfx_ksys_write+0x10/0x10 [ 137.465562][ T9406] __x64_sys_mmap+0x125/0x190 [ 137.465595][ T9406] do_syscall_64+0x10b/0xf80 [ 137.465610][ T9406] ? clear_bhb_loop+0x40/0x90 [ 137.465624][ T9406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.465635][ T9406] RIP: 0033:0x7f58e9d9ce59 [ 137.465645][ T9406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.465655][ T9406] RSP: 002b:00007f58eabca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 137.465666][ T9406] RAX: ffffffffffffffda RBX: 00007f58ea015fa0 RCX: 00007f58e9d9ce59 [ 137.465673][ T9406] RDX: 0000000000000004 RSI: 0000000000004000 RDI: 0000200000001000 [ 137.465679][ T9406] RBP: 00007f58eabca090 R08: 0000000000000003 R09: 0000000100000000 [ 137.465686][ T9406] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 137.465693][ T9406] R13: 00007f58ea016038 R14: 00007f58ea015fa0 R15: 00007ffdccfa4568 [ 137.465707][ T9406] [ 137.685304][ T9415] FAULT_INJECTION: forcing a failure. [ 137.685304][ T9415] name failslab, interval 1, probability 0, space 0, times 0 [ 137.690269][ T9415] CPU: 3 UID: 0 PID: 9415 Comm: syz.2.1200 Tainted: G L syzkaller #0 PREEMPT(full) [ 137.690293][ T9415] Tainted: [L]=SOFTLOCKUP [ 137.690299][ T9415] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 137.690308][ T9415] Call Trace: [ 137.690313][ T9415] [ 137.690319][ T9415] dump_stack_lvl+0x100/0x190 [ 137.690349][ T9415] should_fail_ex.cold+0x5/0xa [ 137.690372][ T9415] should_failslab+0xc2/0x120 [ 137.690390][ T9415] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 137.690411][ T9415] ? alloc_empty_file+0x5b/0x1c0 [ 137.690433][ T9415] ? __pfx_stack_trace_save+0x10/0x10 [ 137.690453][ T9415] alloc_empty_file+0x5b/0x1c0 [ 137.690475][ T9415] path_openat+0xe8/0x31a0 [ 137.690494][ T9415] ? kasan_save_stack+0x3f/0x50 [ 137.690510][ T9415] ? kasan_save_stack+0x30/0x50 [ 137.690523][ T9415] ? kasan_save_track+0x14/0x30 [ 137.690537][ T9415] ? __kasan_slab_alloc+0x89/0x90 [ 137.690552][ T9415] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 137.690575][ T9415] ? do_getname+0x35/0x390 [ 137.690592][ T9415] ? do_sys_openat2+0xc5/0x1e0 [ 137.690609][ T9415] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.690622][ T9415] ? __pfx_path_openat+0x10/0x10 [ 137.690640][ T9415] do_file_open+0x20e/0x430 [ 137.690655][ T9415] ? __pfx_do_file_open+0x10/0x10 [ 137.690678][ T9415] ? alloc_fd+0x476/0x790 [ 137.690694][ T9415] ? do_getname+0x191/0x390 [ 137.690711][ T9415] do_sys_openat2+0x10d/0x1e0 [ 137.690727][ T9415] ? __pfx_do_sys_openat2+0x10/0x10 [ 137.690747][ T9415] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 137.690766][ T9415] ? __fget_files+0x21f/0x3d0 [ 137.690782][ T9415] __x64_sys_openat+0x12d/0x210 [ 137.690798][ T9415] ? __pfx___x64_sys_openat+0x10/0x10 [ 137.690814][ T9415] ? ksys_write+0x1ac/0x250 [ 137.690827][ T9415] ? rcu_is_watching+0x12/0xc0 [ 137.690848][ T9415] do_syscall_64+0x10b/0xf80 [ 137.690863][ T9415] ? clear_bhb_loop+0x40/0x90 [ 137.690876][ T9415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.690887][ T9415] RIP: 0033:0x7f58e9d9ce59 [ 137.690898][ T9415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.690909][ T9415] RSP: 002b:00007f58eabca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 137.690921][ T9415] RAX: ffffffffffffffda RBX: 00007f58ea015fa0 RCX: 00007f58e9d9ce59 [ 137.690928][ T9415] RDX: 000000000000275a RSI: 0000200000000280 RDI: ffffffffffffff9c [ 137.690935][ T9415] RBP: 00007f58eabca090 R08: 0000000000000000 R09: 0000000000000000 [ 137.690942][ T9415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.690948][ T9415] R13: 00007f58ea016038 R14: 00007f58ea015fa0 R15: 00007ffdccfa4568 [ 137.690962][ T9415] [ 137.840243][ T9423] FAULT_INJECTION: forcing a failure. [ 137.840243][ T9423] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 137.845577][ T9423] CPU: 1 UID: 0 PID: 9423 Comm: syz.2.1203 Tainted: G L syzkaller #0 PREEMPT(full) [ 137.845604][ T9423] Tainted: [L]=SOFTLOCKUP [ 137.845610][ T9423] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 137.845620][ T9423] Call Trace: [ 137.845625][ T9423] [ 137.845632][ T9423] dump_stack_lvl+0x100/0x190 [ 137.845666][ T9423] should_fail_ex.cold+0x5/0xa [ 137.845686][ T9423] ? prepare_alloc_pages+0x16d/0x5f0 [ 137.845709][ T9423] should_fail_alloc_page+0xeb/0x140 [ 137.845729][ T9423] prepare_alloc_pages+0x1f0/0x5f0 [ 137.845747][ T9423] ? rcu_is_watching+0x12/0xc0 [ 137.845775][ T9423] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 137.845800][ T9423] ? __alloc_frozen_pages_noprof+0x2b1/0x2bc0 [ 137.845824][ T9423] ? arch_stack_walk+0xa6/0xf0 [ 137.845855][ T9423] ? mas_next_node+0x29c/0x1020 [ 137.845876][ T9423] ? stack_trace_save+0x8e/0xc0 [ 137.845894][ T9423] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 137.845917][ T9423] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 137.845943][ T9423] ? mt_validate_nulls+0x1b3/0xa10 [ 137.845966][ T9423] ? look_up_lock_class+0x64/0x120 [ 137.845992][ T9423] ? __lock_acquire+0x4a5/0x2630 [ 137.846016][ T9423] ? __lock_acquire+0x4a5/0x2630 [ 137.846034][ T9423] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 137.846086][ T9423] ? policy_nodemask+0xed/0x4f0 [ 137.846106][ T9423] alloc_pages_mpol+0x1fb/0x540 [ 137.846125][ T9423] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 137.846143][ T9423] ? find_held_lock+0x2b/0x80 [ 137.846158][ T9423] ? __pud_alloc+0x4f6/0x690 [ 137.846177][ T9423] ? __pud_alloc+0x4f6/0x690 [ 137.846198][ T9423] alloc_pages_noprof+0x1a/0x160 [ 137.846219][ T9423] __pmd_alloc+0x3b/0x950 [ 137.846236][ T9423] ? __pud_alloc+0x4fb/0x690 [ 137.846256][ T9423] __handle_mm_fault+0xa9c/0x2a00 [ 137.846282][ T9423] ? mt_find+0x45e/0x8e0 [ 137.846306][ T9423] ? __pfx___handle_mm_fault+0x10/0x10 [ 137.846326][ T9423] ? __pfx_mt_find+0x10/0x10 [ 137.846367][ T9423] handle_mm_fault+0x36d/0xa20 [ 137.846394][ T9423] __get_user_pages+0x1178/0x32a0 [ 137.846421][ T9423] ? __pfx___get_user_pages+0x10/0x10 [ 137.846447][ T9423] get_user_pages_remote+0x3d2/0xb10 [ 137.846470][ T9423] ? __pfx_get_user_pages_remote+0x10/0x10 [ 137.846490][ T9423] ? __pfx_create_init_stack_vma+0x10/0x10 [ 137.846513][ T9423] get_arg_page+0xf4/0x310 [ 137.846531][ T9423] ? __pfx_get_arg_page+0x10/0x10 [ 137.846548][ T9423] ? alloc_bprm+0x3da/0x710 [ 137.846566][ T9423] ? alloc_bprm+0x3da/0x710 [ 137.846585][ T9423] copy_string_kernel+0x17d/0x3f0 [ 137.846604][ T9423] ? alloc_bprm+0x420/0x710 [ 137.846624][ T9423] do_execveat_common.isra.0+0x2e6/0x580 [ 137.846646][ T9423] __x64_sys_execve+0x93/0xd0 [ 137.846674][ T9423] do_syscall_64+0x10b/0xf80 [ 137.846696][ T9423] ? clear_bhb_loop+0x40/0x90 [ 137.846718][ T9423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.846735][ T9423] RIP: 0033:0x7f58e9d9ce59 [ 137.846750][ T9423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.846766][ T9423] RSP: 002b:00007f58eabca028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 137.846784][ T9423] RAX: ffffffffffffffda RBX: 00007f58ea015fa0 RCX: 00007f58e9d9ce59 [ 137.846795][ T9423] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000002c0 [ 137.846806][ T9423] RBP: 00007f58eabca090 R08: 0000000000000000 R09: 0000000000000000 [ 137.846815][ T9423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 137.846825][ T9423] R13: 00007f58ea016038 R14: 00007f58ea015fa0 R15: 00007ffdccfa4568 [ 137.846847][ T9423] [ 138.142892][ T9410] __nla_validate_parse: 58 callbacks suppressed [ 138.142905][ T9410] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1198'. [ 138.152549][ T9429] FAULT_INJECTION: forcing a failure. [ 138.152549][ T9429] name failslab, interval 1, probability 0, space 0, times 0 [ 138.156664][ T9429] CPU: 2 UID: 0 PID: 9429 Comm: syz.1.1205 Tainted: G L syzkaller #0 PREEMPT(full) [ 138.156683][ T9429] Tainted: [L]=SOFTLOCKUP [ 138.156687][ T9429] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 138.156694][ T9429] Call Trace: [ 138.156698][ T9429] [ 138.156703][ T9429] dump_stack_lvl+0x100/0x190 [ 138.156723][ T9429] should_fail_ex.cold+0x5/0xa [ 138.156740][ T9429] should_failslab+0xc2/0x120 [ 138.156753][ T9429] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 138.156770][ T9429] ? __kernfs_new_node+0xd2/0x9f0 [ 138.156803][ T9429] __kernfs_new_node+0xd2/0x9f0 [ 138.156818][ T9429] ? __pfx___kernfs_new_node+0x10/0x10 [ 138.156836][ T9429] ? find_held_lock+0x2b/0x80 [ 138.156847][ T9429] ? kernfs_root+0xee/0x2a0 [ 138.156860][ T9429] ? kernfs_root+0xee/0x2a0 [ 138.156876][ T9429] kernfs_new_node+0x11b/0x1a0 [ 138.156894][ T9429] __kernfs_create_file+0x53/0x350 [ 138.156907][ T9429] sysfs_add_file_mode_ns+0x207/0x3c0 [ 138.156923][ T9429] internal_create_group+0x593/0xf40 [ 138.156941][ T9429] ? __pfx_internal_create_group+0x10/0x10 [ 138.156961][ T9429] loop_configure+0xad9/0x15b0 [ 138.157028][ T9429] ? __pfx_loop_configure+0x10/0x10 [ 138.157056][ T9429] lo_ioctl+0xcf3/0x1bc0 [ 138.157074][ T9429] ? __pfx_lo_ioctl+0x10/0x10 [ 138.157089][ T9429] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 138.157103][ T9429] ? kasan_quarantine_put+0x104/0x240 [ 138.157120][ T9429] ? blk_get_meta_cap+0xd4/0x6c0 [ 138.157132][ T9429] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 138.157146][ T9429] ? blkdev_common_ioctl+0x515/0x2b80 [ 138.157173][ T9429] ? __fget_files+0x215/0x3d0 [ 138.157191][ T9429] ? __pfx_lo_ioctl+0x10/0x10 [ 138.157207][ T9429] blkdev_ioctl+0x5ad/0x6f0 [ 138.157219][ T9429] ? __pfx_blkdev_ioctl+0x10/0x10 [ 138.157231][ T9429] ? selinux_file_ioctl+0x13b/0x290 [ 138.157247][ T9429] ? selinux_file_ioctl+0xb6/0x290 [ 138.157262][ T9429] ? __pfx_blkdev_ioctl+0x10/0x10 [ 138.157274][ T9429] __x64_sys_ioctl+0x18e/0x210 [ 138.157287][ T9429] do_syscall_64+0x10b/0xf80 [ 138.157303][ T9429] ? clear_bhb_loop+0x40/0x90 [ 138.157317][ T9429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.157328][ T9429] RIP: 0033:0x7fa18ab9ce59 [ 138.157338][ T9429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.157349][ T9429] RSP: 002b:00007fa18ba20028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 138.157360][ T9429] RAX: ffffffffffffffda RBX: 00007fa18ae15fa0 RCX: 00007fa18ab9ce59 [ 138.157367][ T9429] RDX: 0000200000000080 RSI: 0000000000004c0a RDI: 0000000000000003 [ 138.157374][ T9429] RBP: 00007fa18ba20090 R08: 0000000000000000 R09: 0000000000000000 [ 138.157381][ T9429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 138.157387][ T9429] R13: 00007fa18ae16038 R14: 00007fa18ae15fa0 R15: 00007ffce7104bf8 [ 138.157401][ T9429] [ 138.158665][ T9429] loop8: detected capacity change from 0 to 7 [ 138.254762][ T9429] ldm_validate_partition_table(): Disk read failed. [ 138.257846][ T9429] Dev loop8: unable to read RDB block 0 [ 138.260150][ T9429] loop8: unable to read partition table [ 138.262227][ T9429] loop8: partition table beyond EOD, truncated [ 138.266778][ T9429] loop_reread_partitions: partition scan of loop8 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 138.328120][ T1437] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.330299][ T1437] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.476284][ T9446] netlink: 'syz.4.1207': attribute type 8 has an invalid length. [ 138.479788][ T9446] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1207'. [ 138.492521][ T9446] bond0: entered promiscuous mode [ 138.496289][ T9446] bond_slave_0: entered promiscuous mode [ 138.499007][ T9446] bond_slave_1: entered promiscuous mode [ 138.507331][ T9446] batadv0: entered promiscuous mode [ 138.515936][ T9446] team0: entered promiscuous mode [ 138.521085][ T9446] team_slave_0: entered promiscuous mode [ 138.526575][ T9446] team_slave_1: entered promiscuous mode [ 138.529238][ T9446] veth0: entered promiscuous mode [ 138.536311][ T9446] hsr1: entered promiscuous mode [ 138.538484][ T9446] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 138.565392][ T9453] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.1210'. [ 138.568372][ T9453] veth0_to_bond: default FDB implementation only supports local addresses [ 138.619760][ T9458] FAULT_INJECTION: forcing a failure. [ 138.619760][ T9458] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 138.625915][ T9458] CPU: 1 UID: 0 PID: 9458 Comm: syz.2.1211 Tainted: G L syzkaller #0 PREEMPT(full) [ 138.625944][ T9458] Tainted: [L]=SOFTLOCKUP [ 138.625950][ T9458] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 138.625960][ T9458] Call Trace: [ 138.625967][ T9458] [ 138.625975][ T9458] dump_stack_lvl+0x100/0x190 [ 138.626003][ T9458] should_fail_ex.cold+0x5/0xa [ 138.626026][ T9458] ? prepare_alloc_pages+0x16d/0x5f0 [ 138.626052][ T9458] should_fail_alloc_page+0xeb/0x140 [ 138.626074][ T9458] prepare_alloc_pages+0x1f0/0x5f0 [ 138.626099][ T9458] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 138.626141][ T9458] ? __lock_acquire+0x4a5/0x2630 [ 138.626171][ T9458] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 138.626203][ T9458] ? __lock_acquire+0x4a5/0x2630 [ 138.626223][ T9458] ? __lock_acquire+0x4a5/0x2630 [ 138.626245][ T9458] ? css_rstat_updated+0x1ce/0x5a0 [ 138.626275][ T9458] ? lock_acquire+0x1b1/0x370 [ 138.626295][ T9458] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 138.626318][ T9458] ? policy_nodemask+0xed/0x4f0 [ 138.626339][ T9458] alloc_pages_mpol+0x1fb/0x540 [ 138.626359][ T9458] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 138.626381][ T9458] ? __lock_acquire+0x4a5/0x2630 [ 138.626405][ T9458] folio_alloc_mpol_noprof+0x36/0x260 [ 138.626427][ T9458] vma_alloc_folio_noprof+0xed/0x1d0 [ 138.626447][ T9458] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 138.626475][ T9458] do_anonymous_page+0xb46/0x2050 [ 138.626500][ T9458] ? rcu_read_unlock+0x2d/0xb0 [ 138.626571][ T9458] __handle_mm_fault+0x1d2c/0x2a00 [ 138.626598][ T9458] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 138.626627][ T9458] ? __pfx___handle_mm_fault+0x10/0x10 [ 138.626704][ T9458] ? pte_offset_map_lock+0x174/0x320 [ 138.626726][ T9458] ? find_held_lock+0x2b/0x80 [ 138.626752][ T9458] ? follow_page_pte+0x4d0/0x13f0 [ 138.626776][ T9458] handle_mm_fault+0x36d/0xa20 [ 138.626805][ T9458] __get_user_pages+0x1178/0x32a0 [ 138.626832][ T9458] ? down_read_killable+0x307/0x4b0 [ 138.626851][ T9458] ? __pfx___get_user_pages+0x10/0x10 [ 138.626878][ T9458] __gup_longterm_locked+0x279/0x16f0 [ 138.626906][ T9458] ? __pfx___gup_longterm_locked+0x10/0x10 [ 138.626926][ T9458] ? __get_pfnblock_flags_mask+0x128/0x240 [ 138.626949][ T9458] ? find_held_lock+0x2b/0x80 [ 138.626966][ T9458] ? sanity_check_pinned_pages+0x4f2/0x8b0 [ 138.626990][ T9458] gup_fast_fallback+0x16dc/0x2790 [ 138.627028][ T9458] ? __pfx_gup_fast_fallback+0x10/0x10 [ 138.627061][ T9458] pin_user_pages_fast+0xa7/0xf0 [ 138.627082][ T9458] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 138.627101][ T9458] ? io_pin_pages+0xc3/0x1e0 [ 138.627126][ T9458] ? avc_has_perm_noaudit+0x145/0x3b0 [ 138.627154][ T9458] io_pin_pages+0xe6/0x1e0 [ 138.627177][ T9458] io_create_region+0x3f9/0xbe0 [ 138.627206][ T9458] ? __pfx_io_create_region+0x10/0x10 [ 138.627229][ T9458] ? rcu_is_watching+0x12/0xc0 [ 138.627256][ T9458] ? cap_capable+0x10b/0x440 [ 138.627278][ T9458] ? bpf_lsm_capable+0x9/0x10 [ 138.627296][ T9458] ? security_capable+0x80/0x260 [ 138.627319][ T9458] io_uring_setup.cold+0x10fe/0x1cde [ 138.627366][ T9458] ? __pfx_io_uring_setup+0x10/0x10 [ 138.627384][ T9458] ? find_held_lock+0x2b/0x80 [ 138.627419][ T9458] ? ksys_write+0x1ac/0x250 [ 138.627440][ T9458] ? __pfx_ksys_write+0x10/0x10 [ 138.627463][ T9458] __x64_sys_io_uring_setup+0xc2/0x170 [ 138.627483][ T9458] do_syscall_64+0x10b/0xf80 [ 138.627506][ T9458] ? clear_bhb_loop+0x40/0x90 [ 138.627527][ T9458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.627544][ T9458] RIP: 0033:0x7f58e9d9ce59 [ 138.627561][ T9458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.627575][ T9458] RSP: 002b:00007f58eabca028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 138.627590][ T9458] RAX: ffffffffffffffda RBX: 00007f58ea015fa0 RCX: 00007f58e9d9ce59 [ 138.627601][ T9458] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000004fef [ 138.627610][ T9458] RBP: 00007f58eabca090 R08: 0000000000000000 R09: 0000000000000000 [ 138.627620][ T9458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 138.627629][ T9458] R13: 00007f58ea016038 R14: 00007f58ea015fa0 R15: 00007ffdccfa4568 [ 138.627653][ T9458] [ 138.809509][ T9464] binder_alloc: 9462: binder_alloc_buf, no vma [ 138.832753][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 138.835766][ T40] audit: type=1400 audit(1779363382.496:636): avc: denied { create } for pid=9466 comm="syz.1.1216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 138.843451][ T40] audit: type=1400 audit(1779363382.506:637): avc: denied { setopt } for pid=9466 comm="syz.1.1216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 138.896390][ T9479] FAULT_INJECTION: forcing a failure. [ 138.896390][ T9479] name failslab, interval 1, probability 0, space 0, times 0 [ 138.900242][ T9479] CPU: 0 UID: 0 PID: 9479 Comm: syz.2.1219 Tainted: G L syzkaller #0 PREEMPT(full) [ 138.900260][ T9479] Tainted: [L]=SOFTLOCKUP [ 138.900264][ T9479] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 138.900270][ T9479] Call Trace: [ 138.900275][ T9479] [ 138.900280][ T9479] dump_stack_lvl+0x100/0x190 [ 138.900299][ T9479] should_fail_ex.cold+0x5/0xa [ 138.900316][ T9479] should_failslab+0xc2/0x120 [ 138.900329][ T9479] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 138.900346][ T9479] ? mas_preallocate+0x1105/0x14a0 [ 138.900361][ T9479] mas_preallocate+0x1105/0x14a0 [ 138.900374][ T9479] ? __pfx_mas_preallocate+0x10/0x10 [ 138.900388][ T9479] ? anon_vma_name+0x5a/0x250 [ 138.900405][ T9479] __split_vma+0x33d/0xd90 [ 138.900422][ T9479] ? __pfx___split_vma+0x10/0x10 [ 138.900436][ T9479] ? is_bpf_text_address+0x8a/0x1a0 [ 138.900456][ T9479] ? kernel_text_address+0x8d/0x100 [ 138.900471][ T9479] ? __kernel_text_address+0xd/0x30 [ 138.900485][ T9479] ? unwind_get_return_address+0x59/0xa0 [ 138.900505][ T9479] vms_gather_munmap_vmas+0x1d2/0x1720 [ 138.900522][ T9479] ? mtree_range_walk+0x72b/0xb70 [ 138.900537][ T9479] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 138.900557][ T9479] ? mas_walk+0x6ef/0x9b0 [ 138.900575][ T9479] __mmap_region+0x4aa/0x2da0 [ 138.900612][ T9479] ? __pfx___mmap_region+0x10/0x10 [ 138.900630][ T9479] ? __pfx___might_resched+0x10/0x10 [ 138.900647][ T9479] ? find_held_lock+0x2b/0x80 [ 138.900658][ T9479] ? process_measurement+0x4c8/0x2350 [ 138.900674][ T9479] ? process_measurement+0x4c8/0x2350 [ 138.900694][ T9479] ? process_measurement+0x1f4/0x2350 [ 138.900711][ T9479] ? find_held_lock+0x2b/0x80 [ 138.900727][ T9479] ? __lock_acquire+0x4a5/0x2630 [ 138.900746][ T9479] ? __lock_acquire+0x4a5/0x2630 [ 138.900761][ T9479] ? find_held_lock+0x2b/0x80 [ 138.900770][ T9479] ? is_bpf_text_address+0x8a/0x1a0 [ 138.900799][ T9479] ? do_raw_read_unlock+0x3f/0x70 [ 138.900815][ T9479] ? _raw_read_unlock+0x28/0x50 [ 138.900829][ T9479] ? drm_vma_node_is_allowed+0xd4/0x110 [ 138.900848][ T9479] mmap_region+0x35d/0x620 [ 138.900865][ T9479] ? __pfx_mmap_region+0x10/0x10 [ 138.900883][ T9479] ? drm_gem_get_unmapped_area+0x17b/0x220 [ 138.900894][ T9479] ? __pfx_shmem_get_unmapped_area+0x10/0x10 [ 138.900911][ T9479] ? selinux_mmap_addr+0x2b/0x110 [ 138.900924][ T9479] ? bpf_lsm_mmap_addr+0x9/0x30 [ 138.900934][ T9479] ? security_mmap_addr+0x71/0x1e0 [ 138.900949][ T9479] ? __get_unmapped_area+0x255/0x3e0 [ 138.900965][ T9479] do_mmap+0xc63/0x12f0 [ 138.900980][ T9479] ? __pfx_do_mmap+0x10/0x10 [ 138.900992][ T9479] ? __pfx_down_write_killable+0x10/0x10 [ 138.901005][ T9479] vm_mmap_pgoff+0x29e/0x470 [ 138.901020][ T9479] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 138.901032][ T9479] ? __fget_files+0x215/0x3d0 [ 138.901049][ T9479] ? __fget_files+0x21f/0x3d0 [ 138.901064][ T9479] ksys_mmap_pgoff+0x3cb/0x610 [ 138.901078][ T9479] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 138.901089][ T9479] ? fput+0x79/0x100 [ 138.901104][ T9479] ? ksys_write+0x1ac/0x250 [ 138.901115][ T9479] ? __pfx_ksys_write+0x10/0x10 [ 138.901128][ T9479] __x64_sys_mmap+0x125/0x190 [ 138.901145][ T9479] do_syscall_64+0x10b/0xf80 [ 138.901160][ T9479] ? clear_bhb_loop+0x40/0x90 [ 138.901174][ T9479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.901185][ T9479] RIP: 0033:0x7f58e9d9ce59 [ 138.901195][ T9479] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.901209][ T9479] RSP: 002b:00007f58eabca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 138.901220][ T9479] RAX: ffffffffffffffda RBX: 00007f58ea015fa0 RCX: 00007f58e9d9ce59 [ 138.901227][ T9479] RDX: 0000000000000004 RSI: 0000000000004000 RDI: 0000200000001000 [ 138.901233][ T9479] RBP: 00007f58eabca090 R08: 0000000000000003 R09: 0000000100000000 [ 138.901240][ T9479] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 138.901246][ T9479] R13: 00007f58ea016038 R14: 00007f58ea015fa0 R15: 00007ffdccfa4568 [ 138.901260][ T9479] [ 138.913231][ T9481] FAULT_INJECTION: forcing a failure. [ 138.913231][ T9481] name failslab, interval 1, probability 0, space 0, times 0 [ 138.934262][ T9484] FAULT_INJECTION: forcing a failure. [ 138.934262][ T9484] name failslab, interval 1, probability 0, space 0, times 0 [ 138.945784][ T9481] CPU: 3 UID: 0 PID: 9481 Comm: syz.4.1220 Tainted: G L syzkaller #0 PREEMPT(full) [ 138.945802][ T9481] Tainted: [L]=SOFTLOCKUP [ 138.945807][ T9481] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 138.945813][ T9481] Call Trace: [ 138.945817][ T9481] [ 138.945821][ T9481] dump_stack_lvl+0x100/0x190 [ 138.945840][ T9481] should_fail_ex.cold+0x5/0xa [ 138.945857][ T9481] should_failslab+0xc2/0x120 [ 138.945870][ T9481] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 138.945886][ T9481] ? security_file_alloc+0x34/0x2c0 [ 138.945903][ T9481] ? trace_kmem_cache_alloc+0xd5/0x100 [ 138.945918][ T9481] security_file_alloc+0x34/0x2c0 [ 138.945934][ T9481] init_file+0x95/0x480 [ 138.945950][ T9481] alloc_empty_file+0x79/0x1c0 [ 138.945966][ T9481] path_openat+0xe8/0x31a0 [ 138.945981][ T9481] ? kasan_save_stack+0x3f/0x50 [ 138.945990][ T9481] ? kasan_save_stack+0x30/0x50 [ 138.945999][ T9481] ? kasan_save_track+0x14/0x30 [ 138.946008][ T9481] ? __kasan_slab_alloc+0x89/0x90 [ 138.946018][ T9481] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 138.946034][ T9481] ? do_getname+0x35/0x390 [ 138.946049][ T9481] ? do_sys_openat2+0xc5/0x1e0 [ 138.946064][ T9481] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.946077][ T9481] ? __pfx_path_openat+0x10/0x10 [ 138.946096][ T9481] do_file_open+0x20e/0x430 [ 138.946111][ T9481] ? __pfx_do_file_open+0x10/0x10 [ 138.946134][ T9481] ? alloc_fd+0x476/0x790 [ 138.946150][ T9481] ? do_getname+0x191/0x390 [ 138.946167][ T9481] do_sys_openat2+0x10d/0x1e0 [ 138.946183][ T9481] ? __pfx_do_sys_openat2+0x10/0x10 [ 138.946198][ T9481] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 138.946217][ T9481] ? __fget_files+0x21f/0x3d0 [ 138.946303][ T9481] __x64_sys_openat+0x12d/0x210 [ 138.946322][ T9481] ? __pfx___x64_sys_openat+0x10/0x10 [ 138.946337][ T9481] ? ksys_write+0x1ac/0x250 [ 138.946351][ T9481] ? rcu_is_watching+0x12/0xc0 [ 138.946371][ T9481] do_syscall_64+0x10b/0xf80 [ 138.946386][ T9481] ? clear_bhb_loop+0x40/0x90 [ 138.946399][ T9481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.946410][ T9481] RIP: 0033:0x7f4c6479ce59 [ 138.946421][ T9481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.946432][ T9481] RSP: 002b:00007f4c65612028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 138.946444][ T9481] RAX: ffffffffffffffda RBX: 00007f4c64a15fa0 RCX: 00007f4c6479ce59 [ 138.946451][ T9481] RDX: 000000000000275a RSI: 0000200000000280 RDI: ffffffffffffff9c [ 138.946458][ T9481] RBP: 00007f4c65612090 R08: 0000000000000000 R09: 0000000000000000 [ 138.946464][ T9481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.946471][ T9481] R13: 00007f4c64a16038 R14: 00007f4c64a15fa0 R15: 00007ffeac33ae78 [ 138.946484][ T9481] [ 139.150286][ T9484] CPU: 0 UID: 0 PID: 9484 Comm: syz.2.1221 Tainted: G L syzkaller #0 PREEMPT(full) [ 139.150316][ T9484] Tainted: [L]=SOFTLOCKUP [ 139.150323][ T9484] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 139.150333][ T9484] Call Trace: [ 139.150340][ T9484] [ 139.150348][ T9484] dump_stack_lvl+0x100/0x190 [ 139.150376][ T9484] should_fail_ex.cold+0x5/0xa [ 139.150402][ T9484] should_failslab+0xc2/0x120 [ 139.150423][ T9484] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 139.150448][ T9484] ? __pmd_alloc+0xbf/0x950 [ 139.150474][ T9484] __pmd_alloc+0xbf/0x950 [ 139.150492][ T9484] ? __pud_alloc+0x4fb/0x690 [ 139.150512][ T9484] __handle_mm_fault+0xa9c/0x2a00 [ 139.150540][ T9484] ? mt_find+0x45e/0x8e0 [ 139.150576][ T9484] ? __pfx___handle_mm_fault+0x10/0x10 [ 139.150598][ T9484] ? __pfx_mt_find+0x10/0x10 [ 139.150644][ T9484] handle_mm_fault+0x36d/0xa20 [ 139.150673][ T9484] __get_user_pages+0x1178/0x32a0 [ 139.150705][ T9484] ? __pfx___get_user_pages+0x10/0x10 [ 139.150732][ T9484] get_user_pages_remote+0x3d2/0xb10 [ 139.150758][ T9484] ? __pfx_get_user_pages_remote+0x10/0x10 [ 139.150779][ T9484] ? __pfx_create_init_stack_vma+0x10/0x10 [ 139.150803][ T9484] get_arg_page+0xf4/0x310 [ 139.150821][ T9484] ? __pfx_get_arg_page+0x10/0x10 [ 139.150839][ T9484] ? alloc_bprm+0x3da/0x710 [ 139.150858][ T9484] ? alloc_bprm+0x3da/0x710 [ 139.150878][ T9484] copy_string_kernel+0x17d/0x3f0 [ 139.150899][ T9484] ? alloc_bprm+0x420/0x710 [ 139.150920][ T9484] do_execveat_common.isra.0+0x2e6/0x580 [ 139.150946][ T9484] __x64_sys_execve+0x93/0xd0 [ 139.150966][ T9484] do_syscall_64+0x10b/0xf80 [ 139.151008][ T9484] ? clear_bhb_loop+0x40/0x90 [ 139.151044][ T9484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.151063][ T9484] RIP: 0033:0x7f58e9d9ce59 [ 139.151079][ T9484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.151096][ T9484] RSP: 002b:00007f58eabca028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 139.151115][ T9484] RAX: ffffffffffffffda RBX: 00007f58ea015fa0 RCX: 00007f58e9d9ce59 [ 139.151126][ T9484] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000002c0 [ 139.151138][ T9484] RBP: 00007f58eabca090 R08: 0000000000000000 R09: 0000000000000000 [ 139.151147][ T9484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 139.151156][ T9484] R13: 00007f58ea016038 R14: 00007f58ea015fa0 R15: 00007ffdccfa4568 [ 139.151179][ T9484] [ 139.648479][ T9506] FAULT_INJECTION: forcing a failure. [ 139.648479][ T9506] name failslab, interval 1, probability 0, space 0, times 0 [ 139.652459][ T9506] CPU: 1 UID: 0 PID: 9506 Comm: syz.4.1229 Tainted: G L syzkaller #0 PREEMPT(full) [ 139.652477][ T9506] Tainted: [L]=SOFTLOCKUP [ 139.652481][ T9506] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 139.652488][ T9506] Call Trace: [ 139.652492][ T9506] [ 139.652497][ T9506] dump_stack_lvl+0x100/0x190 [ 139.652516][ T9506] should_fail_ex.cold+0x5/0xa [ 139.652533][ T9506] should_failslab+0xc2/0x120 [ 139.652546][ T9506] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 139.652563][ T9506] ? __kernfs_new_node+0xd2/0x9f0 [ 139.652598][ T9506] __kernfs_new_node+0xd2/0x9f0 [ 139.652615][ T9506] ? __pfx___kernfs_new_node+0x10/0x10 [ 139.652631][ T9506] ? find_held_lock+0x2b/0x80 [ 139.652644][ T9506] ? kernfs_root+0xee/0x2a0 [ 139.652656][ T9506] ? kernfs_root+0xee/0x2a0 [ 139.652673][ T9506] kernfs_new_node+0x11b/0x1a0 [ 139.652691][ T9506] __kernfs_create_file+0x53/0x350 [ 139.652703][ T9506] sysfs_add_file_mode_ns+0x207/0x3c0 [ 139.652720][ T9506] internal_create_group+0x593/0xf40 [ 139.652738][ T9506] ? __pfx_internal_create_group+0x10/0x10 [ 139.652768][ T9506] loop_configure+0xad9/0x15b0 [ 139.652798][ T9506] ? __pfx_loop_configure+0x10/0x10 [ 139.652826][ T9506] lo_ioctl+0xcf3/0x1bc0 [ 139.652845][ T9506] ? __pfx_lo_ioctl+0x10/0x10 [ 139.652860][ T9506] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 139.652874][ T9506] ? kasan_quarantine_put+0x104/0x240 [ 139.652891][ T9506] ? blk_get_meta_cap+0xd4/0x6c0 [ 139.652904][ T9506] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 139.652918][ T9506] ? blkdev_common_ioctl+0x515/0x2b80 [ 139.652946][ T9506] ? __fget_files+0x215/0x3d0 [ 139.652961][ T9506] ? __pfx_lo_ioctl+0x10/0x10 [ 139.652977][ T9506] blkdev_ioctl+0x5ad/0x6f0 [ 139.652988][ T9506] ? __pfx_blkdev_ioctl+0x10/0x10 [ 139.652998][ T9506] ? selinux_file_ioctl+0x13b/0x290 [ 139.653012][ T9506] ? selinux_file_ioctl+0xb6/0x290 [ 139.653028][ T9506] ? __pfx_blkdev_ioctl+0x10/0x10 [ 139.653039][ T9506] __x64_sys_ioctl+0x18e/0x210 [ 139.653052][ T9506] do_syscall_64+0x10b/0xf80 [ 139.653067][ T9506] ? clear_bhb_loop+0x40/0x90 [ 139.653081][ T9506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.653092][ T9506] RIP: 0033:0x7f4c6479ce59 [ 139.653102][ T9506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.653112][ T9506] RSP: 002b:00007f4c65612028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 139.653124][ T9506] RAX: ffffffffffffffda RBX: 00007f4c64a15fa0 RCX: 00007f4c6479ce59 [ 139.653130][ T9506] RDX: 0000200000000080 RSI: 0000000000004c0a RDI: 0000000000000003 [ 139.653141][ T9506] RBP: 00007f4c65612090 R08: 0000000000000000 R09: 0000000000000000 [ 139.653147][ T9506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 139.653153][ T9506] R13: 00007f4c64a16038 R14: 00007f4c64a15fa0 R15: 00007ffeac33ae78 [ 139.653168][ T9506] [ 139.755935][ T9506] loop8: detected capacity change from 0 to 7 [ 139.760354][ C0] blk_print_req_error: 51 callbacks suppressed [ 139.760366][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 139.763074][ T9475] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1217'. [ 139.765291][ C0] buffer_io_error: 50 callbacks suppressed [ 139.765300][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 139.771138][ T9475] block nbd10: shutting down sockets [ 139.773365][ C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 139.778685][ C2] Buffer I/O error on dev loop8, logical block 0, async page read [ 139.783100][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 139.787078][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 139.790775][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 139.794545][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 139.797975][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 139.801498][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 139.805098][ C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 139.808399][ C2] Buffer I/O error on dev loop8, logical block 0, async page read [ 139.814361][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 139.818215][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 139.821616][ T9506] ldm_validate_partition_table(): Disk read failed. [ 139.825158][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 139.828414][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 139.832809][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 139.836228][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 139.839735][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 139.843354][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 139.846950][ T9506] Dev loop8: unable to read RDB block 0 [ 139.850048][ T9506] loop8: unable to read partition table [ 139.852631][ T9506] loop8: partition table beyond EOD, truncated [ 139.859569][ T9506] loop_reread_partitions: partition scan of loop8 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 139.934042][ T9522] netlink: del zone limit has 4 unknown bytes [ 140.238669][ T9550] FAULT_INJECTION: forcing a failure. [ 140.238669][ T9550] name failslab, interval 1, probability 0, space 0, times 0 [ 140.249489][ T9550] CPU: 3 UID: 0 PID: 9550 Comm: syz.5.1244 Tainted: G L syzkaller #0 PREEMPT(full) [ 140.249509][ T9550] Tainted: [L]=SOFTLOCKUP [ 140.249514][ T9550] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 140.249520][ T9550] Call Trace: [ 140.249524][ T9550] [ 140.249529][ T9550] dump_stack_lvl+0x100/0x190 [ 140.249720][ T9550] should_fail_ex.cold+0x5/0xa [ 140.249768][ T9550] should_failslab+0xc2/0x120 [ 140.249825][ T9550] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 140.249860][ T9550] ? sock_alloc_inode+0x26/0x290 [ 140.249971][ T9550] ? selinux_socket_create+0xec/0x590 [ 140.250039][ T9550] ? __pfx_sock_alloc_inode+0x10/0x10 [ 140.250053][ T9550] sock_alloc_inode+0x26/0x290 [ 140.250065][ T9550] ? __pfx_sock_alloc_inode+0x10/0x10 [ 140.250082][ T9550] alloc_inode+0x68/0x250 [ 140.250122][ T9550] sock_alloc+0x44/0x280 [ 140.250134][ T9550] ? security_socket_create+0x7f/0x250 [ 140.250147][ T9550] __sock_create+0xc2/0x860 [ 140.250165][ T9550] udp_sock_create6+0xc7/0x6a0 [ 140.250196][ T9550] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 140.250215][ T9550] ? genl_family_rcv_msg_doit+0xc7/0x300 [ 140.250232][ T9550] ? __pfx_udp_sock_create6+0x10/0x10 [ 140.250244][ T9550] ? netlink_unicast+0x585/0x850 [ 140.250258][ T9550] ? ____sys_sendmsg+0x9e1/0xb70 [ 140.250271][ T9550] ? ___sys_sendmsg+0x190/0x1e0 [ 140.250284][ T9550] ? __sys_sendmsg+0x170/0x220 [ 140.250300][ T9550] fou_create.constprop.0+0x109/0xc50 [ 140.250316][ T9550] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 140.250388][ T9550] ? __nla_validate_parse+0x1e7/0x28b0 [ 140.250422][ T9550] ? __pfx_fou_create.constprop.0+0x10/0x10 [ 140.250434][ T9550] ? parse_nl_config+0x732/0xa80 [ 140.250447][ T9550] ? rcu_is_watching+0x12/0xc0 [ 140.250484][ T9550] fou_nl_add_doit+0xcf/0x130 [ 140.250495][ T9550] ? __pfx_fou_nl_add_doit+0x10/0x10 [ 140.250506][ T9550] ? __nla_parse+0x40/0x60 [ 140.250520][ T9550] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 140.250538][ T9550] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 140.250558][ T9550] genl_family_rcv_msg_doit+0x214/0x300 [ 140.250578][ T9550] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 140.250600][ T9550] ? bpf_lsm_capable+0x9/0x10 [ 140.250630][ T9550] ? security_capable+0x80/0x260 [ 140.250644][ T9550] genl_rcv_msg+0x560/0x800 [ 140.250663][ T9550] ? __pfx_genl_rcv_msg+0x10/0x10 [ 140.250680][ T9550] ? __pfx_fou_nl_add_doit+0x10/0x10 [ 140.250696][ T9550] netlink_rcv_skb+0x159/0x420 [ 140.250711][ T9550] ? __pfx_genl_rcv_msg+0x10/0x10 [ 140.250728][ T9550] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 140.250749][ T9550] ? netlink_deliver_tap+0x1ae/0xcc0 [ 140.250765][ T9550] genl_rcv+0x28/0x40 [ 140.250800][ T9550] netlink_unicast+0x585/0x850 [ 140.250817][ T9550] ? __pfx_netlink_unicast+0x10/0x10 [ 140.250836][ T9550] netlink_sendmsg+0x8b0/0xda0 [ 140.250853][ T9550] ? __pfx_netlink_sendmsg+0x10/0x10 [ 140.250867][ T9550] ? __might_fault+0x70/0x140 [ 140.250889][ T9550] ____sys_sendmsg+0x9e1/0xb70 [ 140.250902][ T9550] ? __pfx_netlink_sendmsg+0x10/0x10 [ 140.250918][ T9550] ? __pfx_____sys_sendmsg+0x10/0x10 [ 140.250938][ T9550] ___sys_sendmsg+0x190/0x1e0 [ 140.250954][ T9550] ? __pfx____sys_sendmsg+0x10/0x10 [ 140.250986][ T9550] __sys_sendmsg+0x170/0x220 [ 140.250997][ T9550] ? __pfx___sys_sendmsg+0x10/0x10 [ 140.251017][ T9550] ? rcu_is_watching+0x12/0xc0 [ 140.251044][ T9550] do_syscall_64+0x10b/0xf80 [ 140.251082][ T9550] ? clear_bhb_loop+0x40/0x90 [ 140.251119][ T9550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.251136][ T9550] RIP: 0033:0x7f7e38f9ce59 [ 140.251153][ T9550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.251166][ T9550] RSP: 002b:00007f7e39e86028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 140.251178][ T9550] RAX: ffffffffffffffda RBX: 00007f7e39215fa0 RCX: 00007f7e38f9ce59 [ 140.251185][ T9550] RDX: 0000000000040080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 140.251192][ T9550] RBP: 00007f7e39e86090 R08: 0000000000000000 R09: 0000000000000000 [ 140.251198][ T9550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.251204][ T9550] R13: 00007f7e39216038 R14: 00007f7e39215fa0 R15: 00007ffc51af3e38 [ 140.251218][ T9550] [ 140.251260][ T9550] socket: no more sockets [ 140.506504][ T9561] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1247'. [ 140.545422][ T9568] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 140.549029][ T9569] FAULT_INJECTION: forcing a failure. [ 140.549029][ T9569] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 140.558758][ T9569] CPU: 2 UID: 0 PID: 9569 Comm: syz.2.1249 Tainted: G L syzkaller #0 PREEMPT(full) [ 140.558787][ T9569] Tainted: [L]=SOFTLOCKUP [ 140.558794][ T9569] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 140.558805][ T9569] Call Trace: [ 140.558812][ T9569] [ 140.558819][ T9569] dump_stack_lvl+0x100/0x190 [ 140.558849][ T9569] should_fail_ex.cold+0x5/0xa [ 140.558872][ T9569] ? prepare_alloc_pages+0x16d/0x5f0 [ 140.558898][ T9569] should_fail_alloc_page+0xeb/0x140 [ 140.558921][ T9569] prepare_alloc_pages+0x1f0/0x5f0 [ 140.558943][ T9569] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 140.558968][ T9569] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 140.559018][ T9569] ? unwind_get_return_address+0x59/0xa0 [ 140.559078][ T9569] ? arch_stack_walk+0xa6/0xf0 [ 140.559132][ T9569] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 140.559159][ T9569] ? __pfx_stack_trace_save+0x10/0x10 [ 140.559192][ T9569] ? __alloc_frozen_pages_noprof+0x2b1/0x2bc0 [ 140.559222][ T9569] ? arch_stack_walk+0xa6/0xf0 [ 140.559266][ T9569] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 140.559293][ T9569] ? __pmd_alloc+0xbf/0x950 [ 140.559314][ T9569] ? __handle_mm_fault+0xa9c/0x2a00 [ 140.559337][ T9569] ? handle_mm_fault+0x36d/0xa20 [ 140.559361][ T9569] ? __get_user_pages+0x1178/0x32a0 [ 140.559381][ T9569] ? get_user_pages_remote+0x3d2/0xb10 [ 140.559401][ T9569] ? get_arg_page+0xf4/0x310 [ 140.559444][ T9569] ? copy_string_kernel+0x17d/0x3f0 [ 140.559461][ T9569] ? do_execveat_common.isra.0+0x2e6/0x580 [ 140.559482][ T9569] ? __x64_sys_execve+0x93/0xd0 [ 140.559500][ T9569] ? do_syscall_64+0x10b/0xf80 [ 140.559525][ T9569] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.559544][ T9569] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 140.559574][ T9569] ? policy_nodemask+0xed/0x4f0 [ 140.559597][ T9569] alloc_pages_mpol+0x1fb/0x540 [ 140.559615][ T9569] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 140.559632][ T9569] ? __lock_acquire+0x4a5/0x2630 [ 140.559685][ T9569] alloc_pages_noprof+0x1a/0x160 [ 140.559707][ T9569] pte_alloc_one+0x1c/0x3d0 [ 140.559732][ T9569] __pte_alloc+0x6d/0x3e0 [ 140.559750][ T9569] ? __pfx___pte_alloc+0x10/0x10 [ 140.559768][ T9569] ? do_raw_spin_lock+0x128/0x260 [ 140.559792][ T9569] ? find_held_lock+0x2b/0x80 [ 140.559810][ T9569] do_anonymous_page+0x13c6/0x2050 [ 140.559838][ T9569] ? __pmd_alloc+0x3fb/0x950 [ 140.559862][ T9569] __handle_mm_fault+0x1d2c/0x2a00 [ 140.559891][ T9569] ? mt_find+0x45e/0x8e0 [ 140.559920][ T9569] ? __pfx___handle_mm_fault+0x10/0x10 [ 140.559945][ T9569] ? __pfx_mt_find+0x10/0x10 [ 140.559986][ T9569] handle_mm_fault+0x36d/0xa20 [ 140.560015][ T9569] __get_user_pages+0x1178/0x32a0 [ 140.560046][ T9569] ? __pfx___get_user_pages+0x10/0x10 [ 140.560074][ T9569] get_user_pages_remote+0x3d2/0xb10 [ 140.560101][ T9569] ? __pfx_get_user_pages_remote+0x10/0x10 [ 140.560123][ T9569] ? __pfx_create_init_stack_vma+0x10/0x10 [ 140.560148][ T9569] get_arg_page+0xf4/0x310 [ 140.560168][ T9569] ? __pfx_get_arg_page+0x10/0x10 [ 140.560187][ T9569] ? alloc_bprm+0x3da/0x710 [ 140.560203][ T9569] ? alloc_bprm+0x3da/0x710 [ 140.560223][ T9569] copy_string_kernel+0x17d/0x3f0 [ 140.560241][ T9569] ? alloc_bprm+0x420/0x710 [ 140.560263][ T9569] do_execveat_common.isra.0+0x2e6/0x580 [ 140.560288][ T9569] __x64_sys_execve+0x93/0xd0 [ 140.560309][ T9569] do_syscall_64+0x10b/0xf80 [ 140.560334][ T9569] ? clear_bhb_loop+0x40/0x90 [ 140.560357][ T9569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.560375][ T9569] RIP: 0033:0x7f58e9d9ce59 [ 140.560392][ T9569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.560410][ T9569] RSP: 002b:00007f58eabca028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 140.560428][ T9569] RAX: ffffffffffffffda RBX: 00007f58ea015fa0 RCX: 00007f58e9d9ce59 [ 140.560438][ T9569] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000002c0 [ 140.560448][ T9569] RBP: 00007f58eabca090 R08: 0000000000000000 R09: 0000000000000000 [ 140.560459][ T9569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 140.560469][ T9569] R13: 00007f58ea016038 R14: 00007f58ea015fa0 R15: 00007ffdccfa4568 [ 140.560494][ T9569] [ 140.573882][ C3] ------------[ cut here ]------------ [ 140.599575][ T9568] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1250'. [ 140.600889][ C3] sk->sk_forward_alloc [ 140.600900][ C3] WARNING: net/ipv4/af_inet.c:162 at inet_sock_destruct+0x653/0x800, CPU#3: syz-executor/5734 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 140.603029][ T9568] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1250'. [ 140.605048][ C3] Modules linked in: [ 140.613382][ T1258] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.613412][ T1258] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.613430][ T1258] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.613447][ T1258] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.613552][ T9568] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1250'. [ 140.615687][ C3] CPU: 3 UID: 0 PID: 5734 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 140.615716][ C3] Tainted: [L]=SOFTLOCKUP [ 140.617168][ T9568] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1250'. [ 140.619225][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 140.622147][ T9568] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=9568 comm=syz.4.1250 [ 140.622714][ C3] RIP: 0010:inet_sock_destruct+0x653/0x800 [ 140.763864][ C3] Code: 2f 4d ff e9 06 fd ff ff e8 ea 7d fd f7 90 0f 0b 90 e9 35 fe ff ff e8 dc 7d fd f7 90 0f 0b 90 e9 c5 fe ff ff e8 ce 7d fd f7 90 <0f> 0b 90 e9 04 ff ff ff e8 c0 7d fd f7 90 0f 0b 90 e9 65 fe ff ff [ 140.769545][ C3] RSP: 0018:ffffc900006f8d88 EFLAGS: 00010246 [ 140.771375][ C3] RAX: 0000000000000000 RBX: ffff88802cc89980 RCX: ffffffff8a0b31d7 [ 140.773796][ C3] RDX: ffff88802b52ca00 RSI: ffffffff8a0b32d2 RDI: ffff88802b52ca00 [ 140.776188][ C3] RBP: 0000000000000f70 R08: 0000000000000005 R09: 0000000000000000 [ 140.778639][ C3] R10: 0000000000000f70 R11: 0000000000000000 R12: ffff88802cc89980 [ 140.781109][ C3] R13: ffff88802cc89a10 R14: ffffffff81ee353d R15: 0000000000000004 [ 140.783622][ C3] FS: 0000555563e99500(0000) GS:ffff8880d666d000(0000) knlGS:0000000000000000 [ 140.786435][ C3] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 140.788481][ C3] CR2: 00007fa18b9456b8 CR3: 0000000026da5000 CR4: 0000000000352ef0 [ 140.790940][ C3] Call Trace: [ 140.792015][ C3] [ 140.792995][ C3] ? __pfx_udp_destruct_sock+0x10/0x10 [ 140.794714][ C3] ? rcu_core+0x59d/0x10d0 [ 140.796130][ C3] __sk_destruct+0x85/0xab0 [ 140.797615][ C3] ? rcu_core+0x59d/0x10d0 [ 140.799221][ C3] rcu_core+0x5a2/0x10d0 [ 140.800625][ C3] ? __pfx_rcu_core+0x10/0x10 [ 140.802151][ C3] ? mark_held_locks+0x40/0x70 [ 140.803846][ C3] handle_softirqs+0x1ea/0xa00 [ 140.805339][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 140.806988][ C3] ? _raw_spin_unlock+0x28/0x50 [ 140.808522][ C3] ? __hrtimer_rearm_deferred+0x9b/0x740 [ 140.810307][ C3] __irq_exit_rcu+0x162/0x210 [ 140.811770][ C3] irq_exit_rcu+0x9/0x30 [ 140.813159][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 140.814913][ C3] [ 140.815848][ C3] [ 140.816786][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 140.818712][ C3] RIP: 0010:__sanitizer_cov_trace_pc+0xb/0x70 [ 140.820620][ C3] Code: 61 00 be 03 00 00 00 5b e9 52 02 f1 02 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 65 8b 05 85 7f 02 12 <48> 8b 34 24 65 48 8b 15 61 7f 02 12 a9 00 01 ff 00 74 1b f6 c4 01 [ 140.826497][ C3] RSP: 0018:ffffc90003837400 EFLAGS: 00000287 [ 140.828336][ C3] RAX: 0000000080000002 RBX: 000000000000000a RCX: ffffffff828267fe [ 140.830746][ C3] RDX: 0000000000000000 RSI: 0000000000001000 RDI: ffff88802b52ca00 [ 140.833303][ C3] RBP: 0000000000001000 R08: 0000000000000006 R09: 0000000000001000 [ 140.835788][ C3] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 140.838251][ C3] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 140.841047][ C3] ? __nr_to_section+0x3e/0x100 [ 140.842564][ C3] __nr_to_section+0x4c/0x100 [ 140.844088][ C3] lookup_page_ext+0x46/0x100 [ 140.845545][ C3] page_table_check_set+0x300/0x920 [ 140.847162][ C3] __page_table_check_ptes_set+0x27a/0x4e0 [ 140.848956][ C3] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 140.850887][ C3] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 140.852591][ C3] copy_page_range+0x217a/0x5b00 [ 140.854186][ C3] ? mas_wr_store_entry+0xa1/0x1e80 [ 140.855803][ C3] ? __pfx_copy_page_range+0x10/0x10 [ 140.857471][ C3] ? __pfx___might_resched+0x10/0x10 [ 140.859116][ C3] ? up_write+0x28c/0x4f0 [ 140.860480][ C3] dup_mmap+0xd25/0x2180 [ 140.861823][ C3] ? __pfx_dup_mmap+0x10/0x10 [ 140.863330][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 140.865132][ C3] ? __lock_acquire+0x4a5/0x2630 [ 140.866693][ C3] ? find_held_lock+0x2b/0x80 [ 140.868181][ C3] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 140.870010][ C3] copy_process+0x6c78/0x7ed0 [ 140.871463][ C3] ? __pfx_copy_process+0x10/0x10 [ 140.873115][ C3] ? do_raw_spin_lock+0x128/0x260 [ 140.874687][ C3] kernel_clone+0x12e/0x9c0 [ 140.876078][ C3] ? __pfx_kernel_clone+0x10/0x10 [ 140.877648][ C3] ? __lock_acquire+0x4a5/0x2630 [ 140.879170][ C3] ? find_held_lock+0x2b/0x80 [ 140.880630][ C3] ? __might_fault+0xc5/0x140 [ 140.882098][ C3] __do_sys_clone+0xd9/0x120 [ 140.883591][ C3] ? __pfx___do_sys_clone+0x10/0x10 [ 140.885241][ C3] ? rcu_is_watching+0x12/0xc0 [ 140.886753][ C3] do_syscall_64+0x10b/0xf80 [ 140.888202][ C3] ? clear_bhb_loop+0x40/0x90 [ 140.889664][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.891450][ C3] RIP: 0033:0x7fa18abc58d2 [ 140.892697][ C3] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 140.898523][ C3] RSP: 002b:00007ffce7104e10 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 140.901131][ C3] RAX: ffffffffffffffda RBX: 00007ffce7104e10 RCX: 00007fa18abc58d2 [ 140.903584][ C3] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 140.906002][ C3] RBP: 00007ffce7104f9c R08: 0000000000000000 R09: 0000000000000001 [ 140.908430][ C3] R10: 0000555563e997d0 R11: 0000000000000246 R12: 0000000000000001 [ 140.910846][ C3] R13: 00000000000927c0 R14: 0000000000022471 R15: 00007ffce7104ff0 [ 140.913305][ C3] [ 140.914272][ C3] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 140.916505][ C3] CPU: 3 UID: 0 PID: 5734 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 140.919861][ C3] Tainted: [L]=SOFTLOCKUP [ 140.921227][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 140.924317][ C3] Call Trace: [ 140.925378][ C3] [ 140.926290][ C3] dump_stack_lvl+0x100/0x190 [ 140.927796][ C3] vpanic+0x552/0x970 [ 140.929068][ C3] ? __pfx_vpanic+0x10/0x10 [ 140.930490][ C3] panic+0xd1/0xe0 [ 140.931675][ C3] ? __pfx_panic+0x10/0x10 [ 140.933076][ C3] ? check_panic_on_warn+0x1f/0x90 [ 140.934668][ C3] check_panic_on_warn.cold+0x19/0x34 [ 140.936333][ C3] ? inet_sock_destruct+0x653/0x800 [ 140.937988][ C3] __warn.cold+0x191/0x328 [ 140.939393][ C3] __report_bug+0x296/0x3d0 [ 140.940828][ C3] ? inet_sock_destruct+0x653/0x800 [ 140.942449][ C3] ? __pfx___report_bug+0x10/0x10 [ 140.944020][ C3] ? __page_table_check_ptes_set+0x27a/0x4e0 [ 140.945882][ C3] ? copy_page_range+0x217a/0x5b00 [ 140.947506][ C3] ? dup_mmap+0xd25/0x2180 [ 140.948888][ C3] ? copy_process+0x6c78/0x7ed0 [ 140.950224][ C3] ? kernel_clone+0x12e/0x9c0 [ 140.951515][ C3] ? __do_sys_clone+0xd9/0x120 [ 140.952997][ C3] ? do_syscall_64+0x10b/0xf80 [ 140.954500][ C3] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.956369][ C3] ? inet_sock_destruct+0x653/0x800 [ 140.957999][ C3] report_bug+0xb2/0x220 [ 140.959340][ C3] ? inet_sock_destruct+0x653/0x800 [ 140.961004][ C3] handle_bug+0x16a/0x2a0 [ 140.962359][ C3] exc_invalid_op+0x17/0x50 [ 140.963784][ C3] asm_exc_invalid_op+0x1a/0x20 [ 140.965312][ C3] RIP: 0010:inet_sock_destruct+0x653/0x800 [ 140.967143][ C3] Code: 2f 4d ff e9 06 fd ff ff e8 ea 7d fd f7 90 0f 0b 90 e9 35 fe ff ff e8 dc 7d fd f7 90 0f 0b 90 e9 c5 fe ff ff e8 ce 7d fd f7 90 <0f> 0b 90 e9 04 ff ff ff e8 c0 7d fd f7 90 0f 0b 90 e9 65 fe ff ff [ 140.973065][ C3] RSP: 0018:ffffc900006f8d88 EFLAGS: 00010246 [ 140.974938][ C3] RAX: 0000000000000000 RBX: ffff88802cc89980 RCX: ffffffff8a0b31d7 [ 140.977401][ C3] RDX: ffff88802b52ca00 RSI: ffffffff8a0b32d2 RDI: ffff88802b52ca00 [ 140.979844][ C3] RBP: 0000000000000f70 R08: 0000000000000005 R09: 0000000000000000 [ 140.982289][ C3] R10: 0000000000000f70 R11: 0000000000000000 R12: ffff88802cc89980 [ 140.984746][ C3] R13: ffff88802cc89a10 R14: ffffffff81ee353d R15: 0000000000000004 [ 140.987204][ C3] ? rcu_core+0x59d/0x10d0 [ 140.988632][ C3] ? inet_sock_destruct+0x557/0x800 [ 140.990267][ C3] ? inet_sock_destruct+0x652/0x800 [ 140.991947][ C3] ? inet_sock_destruct+0x652/0x800 [ 140.993586][ C3] ? __pfx_udp_destruct_sock+0x10/0x10 [ 140.995278][ C3] ? rcu_core+0x59d/0x10d0 [ 140.996723][ C3] __sk_destruct+0x85/0xab0 [ 140.998152][ C3] ? rcu_core+0x59d/0x10d0 [ 140.999567][ C3] rcu_core+0x5a2/0x10d0 [ 141.000909][ C3] ? __pfx_rcu_core+0x10/0x10 [ 141.002391][ C3] ? mark_held_locks+0x40/0x70 [ 141.003906][ C3] handle_softirqs+0x1ea/0xa00 [ 141.005413][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 141.007093][ C3] ? _raw_spin_unlock+0x28/0x50 [ 141.008636][ C3] ? __hrtimer_rearm_deferred+0x9b/0x740 [ 141.010366][ C3] __irq_exit_rcu+0x162/0x210 [ 141.011835][ C3] irq_exit_rcu+0x9/0x30 [ 141.013141][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 141.014871][ C3] [ 141.015795][ C3] [ 141.016766][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 141.018632][ C3] RIP: 0010:__sanitizer_cov_trace_pc+0xb/0x70 [ 141.020508][ C3] Code: 61 00 be 03 00 00 00 5b e9 52 02 f1 02 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 65 8b 05 85 7f 02 12 <48> 8b 34 24 65 48 8b 15 61 7f 02 12 a9 00 01 ff 00 74 1b f6 c4 01 [ 141.026248][ C3] RSP: 0018:ffffc90003837400 EFLAGS: 00000287 [ 141.028098][ C3] RAX: 0000000080000002 RBX: 000000000000000a RCX: ffffffff828267fe [ 141.030500][ C3] RDX: 0000000000000000 RSI: 0000000000001000 RDI: ffff88802b52ca00 [ 141.032917][ C3] RBP: 0000000000001000 R08: 0000000000000006 R09: 0000000000001000 [ 141.035312][ C3] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 141.037737][ C3] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 141.040167][ C3] ? __nr_to_section+0x3e/0x100 [ 141.041693][ C3] __nr_to_section+0x4c/0x100 [ 141.043147][ C3] lookup_page_ext+0x46/0x100 [ 141.044611][ C3] page_table_check_set+0x300/0x920 [ 141.046208][ C3] __page_table_check_ptes_set+0x27a/0x4e0 [ 141.048020][ C3] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 141.049957][ C3] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 141.051620][ C3] copy_page_range+0x217a/0x5b00 [ 141.053157][ C3] ? mas_wr_store_entry+0xa1/0x1e80 [ 141.054750][ C3] ? __pfx_copy_page_range+0x10/0x10 [ 141.056423][ C3] ? __pfx___might_resched+0x10/0x10 [ 141.058068][ C3] ? up_write+0x28c/0x4f0 [ 141.059444][ C3] dup_mmap+0xd25/0x2180 [ 141.060795][ C3] ? __pfx_dup_mmap+0x10/0x10 [ 141.062269][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 141.064081][ C3] ? __lock_acquire+0x4a5/0x2630 [ 141.065645][ C3] ? find_held_lock+0x2b/0x80 [ 141.067150][ C3] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 141.069007][ C3] copy_process+0x6c78/0x7ed0 [ 141.070485][ C3] ? __pfx_copy_process+0x10/0x10 [ 141.072056][ C3] ? do_raw_spin_lock+0x128/0x260 [ 141.073509][ C3] kernel_clone+0x12e/0x9c0 [ 141.074875][ C3] ? __pfx_kernel_clone+0x10/0x10 [ 141.076462][ C3] ? __lock_acquire+0x4a5/0x2630 [ 141.078025][ C3] ? find_held_lock+0x2b/0x80 [ 141.079503][ C3] ? __might_fault+0xc5/0x140 [ 141.080991][ C3] __do_sys_clone+0xd9/0x120 [ 141.082435][ C3] ? __pfx___do_sys_clone+0x10/0x10 [ 141.084124][ C3] ? rcu_is_watching+0x12/0xc0 [ 141.085644][ C3] do_syscall_64+0x10b/0xf80 [ 141.087116][ C3] ? clear_bhb_loop+0x40/0x90 [ 141.088600][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.090439][ C3] RIP: 0033:0x7fa18abc58d2 [ 141.091843][ C3] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 141.097792][ C3] RSP: 002b:00007ffce7104e10 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 141.100365][ C3] RAX: ffffffffffffffda RBX: 00007ffce7104e10 RCX: 00007fa18abc58d2 [ 141.102804][ C3] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 141.105199][ C3] RBP: 00007ffce7104f9c R08: 0000000000000000 R09: 0000000000000001 [ 141.107630][ C3] R10: 0000555563e997d0 R11: 0000000000000246 R12: 0000000000000001 [ 141.110022][ C3] R13: 00000000000927c0 R14: 0000000000022471 R15: 00007ffce7104ff0 [ 141.112461][ C3] [ 141.114082][ C3] Kernel Offset: disabled [ 141.115418][ C3] Rebooting in 86400 seconds..