last executing test programs: 12.966874523s ago: executing program 0 (id=2199): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x8c, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r10, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x5c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x1, 0x80000001, 0x26b0}, 0x59}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4094}, 0x2) sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r5, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000380)="da", 0x1}], 0x1}, 0x20000885) 12.730401203s ago: executing program 0 (id=2204): recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x2020, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x4, 0x0, 0x2, {0xa, 0x4e22, 0x2, @loopback, 0x6}}}, 0x80) r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{}], 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc0d4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001700090025bd700001dcdf250c0000000800010003"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000200)={@remote, @local}, 0x8) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000a0000000000000a07000000080000000000000b0400000009000000010000130c0000000740"], 0x0, 0x4a, 0x0, 0x1, 0x7fe, 0x10000}, 0x28) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x32752275d7d1e3ca, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050000008500000006"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'macvlan0\x00', @random="bdbd67c12945"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) 12.529987043s ago: executing program 0 (id=2205): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$nl_crypto(0x10, 0x3, 0x15) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) sendmsg$nl_crypto(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f00000001200"], 0xf0}}, 0x0) close(r1) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xc, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20d42, 0x4) fcntl$setstatus(r5, 0x4, 0x42000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x12cf7}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r3, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x6, r6, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000640)="270302000000020000ff8807c2e04b4f6b00000000000000427286c31909d084b266a85b8bb599e1049f0806328b4b8df79ba6dcc3536c169d5b2aa922a1d9f5b7432a944a7b7867b2d7f9fd4eb04fc42973d037ea0b4e5fced29fea0ae1acb8e7e53d2810537b53df15a9b3fd9a889160248b465794716d9ddc350aadad9cba6c1aa306f4c9ecd36c984b026b95dbb81db950ce4b0568568c110bb52155031fc57e573634fa7984d2315670482333a3a08449837e6278f22f9cc3f4b4b51726f6e5c7f550e130aba23dad6ad71e07ba5e3ff962fc509f924c00495108732f2dcdd8d24b25a790e414b973d2", 0xec}], 0x1}, 0x400c890) 8.079112704s ago: executing program 0 (id=2214): r0 = socket$inet6(0xa, 0x1, 0x84) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x28bd, 0x42, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1, 0x80, 0x2, "", [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x1, 0x2, 0x40, {0x9, 0x21, 0x7aa0, 0x0, 0x1, {0x22, 0xf0b}}, {{{0x9, 0x5, 0x81, 0x3, 0x5f7, 0x4, 0x0, 0x3}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x8, 0x3, 0x1c}}]}}}]}}]}}, &(0x7f0000001400)={0xa, &(0x7f0000001240)={0xa, 0x6, 0x110, 0x8, 0x81, 0x6, 0xff, 0x3}, 0x21, &(0x7f0000001280)={0x5, 0xf, 0x21, 0x3, [@ptm_cap={0x3}, @generic={0xf, 0x10, 0x2, "b4c47135ba27f903a8d9d6e2"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x5, 0x4, 0x81}]}, 0x5, [{0x5, &(0x7f00000012c0)=@string={0x5, 0x3, "c1c387"}}, {0x4, &(0x7f0000001300)=@lang_id={0x4, 0x3, 0x3401}}, {0x4, &(0x7f0000001340)=@lang_id={0x4, 0x3, 0x411}}, {0x4, &(0x7f0000001380)=@lang_id={0x4, 0x3, 0x1007}}, {0x4, &(0x7f00000013c0)=@lang_id={0x4, 0x3, 0x40c}}]}) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) accept4$llc(r2, &(0x7f0000001480)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f00000014c0)=0x10, 0x80800) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000240)=0x2) ioctl$PPPIOCBRIDGECHAN(r4, 0x40047435, &(0x7f0000000200)=0x2) socket$rds(0x15, 0x5, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x1003ffffffc]}, 0x8, 0x0) read$FUSE(r6, &(0x7f0000001340)={0x2020}, 0x2020) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x13) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004680), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r9, 0x0, 0x840) sendmsg$NL80211_CMD_SET_WDS_PEER(r7, &(0x7f0000001200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r8, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="d4313a4eab98"}]}, 0x20}, 0x1, 0x0, 0x0, 0x24008001}, 0xc040) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}, {0x28, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xdc}}, 0x0) getsockopt$bt_hci(r0, 0x84, 0x0, &(0x7f00000001c0)=""/4128, &(0x7f0000000180)=0x1020) 4.892286437s ago: executing program 2 (id=2218): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x31) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x400000, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000480)={0x15, 0x110, 0xfa08, {r4, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x10}}, @in={0x2, 0x4000, @broadcast}}}, 0x118) (async) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000200)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0xa}, r4}}, 0x30) write$mtd(r2, &(0x7f0000000180)="3b9fb7bd97ae8e6af101941d64c2c2ec1a4cee61f15e982c67ee8d78e2c3cc0da7c0c02aa107973deb4ec629aa7200afab2b3d55fc0918b8ca3d8077364e9e8f00398f7c9933418b15cf0969715c7ecbb95d819b794359102570efcf962aa9f8dc5e2cb434373cf9a40808cfdba20c12d5bfe1d4ec6e1b361b3cf308f6fced", 0x7f) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000080)=@e={0xff, 0xb, 0x0, 0x0, @generic=0x3}) (async) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, 0x2c, 0x301, 0x270bda5, 0x25dfdbfa, {0x1}}, 0x14}}, 0x80) write$UHID_SET_REPORT_REPLY(r2, &(0x7f0000000240)={0xe, {0x3, 0x8, 0x8, 0x50, "b760336f493152dcdb8d888b843df4ca8771ed5d06605692646d0ae65d2ddb5eb3d649f21338548ed16cf4536dd12ffb67f605f31350ab5e401c71a5f1ad7ee476965631feeca84b10c388397b6b828f"}}, 0x5c) 4.790126225s ago: executing program 0 (id=2219): socket$phonet_pipe(0x23, 0x5, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x8881}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x7, 0x100}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$loop(&(0x7f0000000000), 0x7b, 0xa004) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$sock_attach_bpf(r4, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$unix(r3, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000812}, 0x4000010) recvmmsg(r4, &(0x7f0000004000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/202, 0xca}, 0x9}], 0x1, 0x22, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xd, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5b", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}}, 0x90) 4.631809097s ago: executing program 0 (id=2221): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys_link\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys_link\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1) r0 = open$dir(&(0x7f0000000000)='./sys_link\x00', 0x121000, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) r3 = socket(0xa, 0x3, 0x3a) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x0, 0x6, r5, 0x1}, 0xc) r6 = openat$incfs(r0, &(0x7f00000000c0)='.pending_reads\x00', 0x10040, 0x22) mount(0x0, &(0x7f0000001080)='./sys_link\x00', &(0x7f0000001040)='fusectl\x00', 0x11, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r7, &(0x7f0000000580)=ANY=[@ANYBLOB="4300000002"], 0x8) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x11050ca, 0x0) r8 = io_uring_setup(0x3200, &(0x7f0000000140)={0x0, 0xb618, 0x8, 0x3, 0x3e4}) ftruncate(r6, 0x9) r9 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r9, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa806}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x440b0) io_uring_setup(0x5281, &(0x7f0000000340)={0x0, 0xcd23, 0x10, 0x2, 0x289, 0x0, r8}) 4.631508009s ago: executing program 2 (id=2222): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}, @TCA_FLOWER_KEY_MPLS_TC={0x5, 0x45, 0x80}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) (fail_nth: 15) 4.631386935s ago: executing program 3 (id=2223): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe0}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc53", 0x35}, {&(0x7f0000000e80)="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", 0x120}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df0", 0x28}], 0x3}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000500)="cbc6", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000880)="2588e09c666f7c2e1106c4b4839bf483707b3603c0580d4ea3d894cc071395c4737f5f4840a109613a98c563d9d35e1d30ca9911819a41dbfd9738e9c1125ca897831d701969b199ec46f793e0be4ddb8d9826811efc4e049594868a96ae2daab085b6ba229f384a9463eb764b9ea4c74e5460b9a82983e2d22885fbc6d1d731e8d02f8246b3f0ae936b34987046e18afad35e79c363b701eb8455e1f4ea1c12e4a706789339df763dd4505497e474d21689760747e6d2c3c2d85aa253b16d60ddb3514870d74268c55233", 0xcb}, {&(0x7f0000000980)="b58e23c2095b3eca9b630c1d411197505e88b68339fc3ca18b0fd3186d253cf0556b7f8b7172a7ecda83c0bfb299b17792211571807b64f65caf151aa7f1b0bd962717d5fd2f9f0ceec19df6106bdba8c3292328dce4b38e", 0x58}], 0x2}}], 0x3, 0x14042082) 4.631267954s ago: executing program 3 (id=2224): socket$rds(0x15, 0x5, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000040)=0x1, 0x4) accept(r0, 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) socket$kcm(0x21, 0x2, 0x2) sendmmsg$inet(r1, &(0x7f0000000040)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000140)="41cd", 0x2}], 0x1}}], 0x1, 0x20008000) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000001680)=@nat={'nat\x00', 0x19, 0x2, 0x90, [0x200000001400, 0x0, 0x0, 0x20000000150e, 0x200000001644], 0x0, 0x0, &(0x7f0000001400)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}]}, 0x108) ioctl$BTRFS_IOC_ENCODED_WRITE(0xffffffffffffffff, 0x40809440, 0x0) recvfrom(r1, &(0x7f0000001640)=""/249, 0xf9, 0x40000161, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000080) 4.560035735s ago: executing program 1 (id=2225): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$kcm(0x29, 0x7, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0xffff2a4b, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008841}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc02, {0x0, 0x0, 0x0, r9, {0x0, 0xec2fa4b81eaeea5e}, {0xc, 0xb}, {0xd, 0xfff1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x54815}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) mmap$snddsp_status(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9, 0x12, 0xffffffffffffffff, 0x82000000) 4.53704538s ago: executing program 3 (id=2226): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000a538ae0cb38e93b828c4d78b1f0e23314d46463208004500001c0000000000029078ac1e"], 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_expedited', 0x40082, 0x509cb86664327f4) r2 = fanotify_init(0x81, 0x40000) fanotify_mark(r2, 0x105, 0x30, r1, 0x0) (async) write$tun(r1, &(0x7f0000000900)=ANY=[@ANYBLOB="aaaaaaaaaabbaaaaaaaaaabb070000000000000086dd06100002aaaaaaaaaa2efc020000000000000000000000000000aaaaaaaaaaaa200100"/70], 0x46) (async) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x4, 0x1, 0x4000, 0x1000, &(0x7f0000004000/0x1000)=nil}) (async, rerun: 64) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000200)="9d", 0x1}], 0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) (async) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x4, 0x9, 0xe4, 0x81, 0x9, 0x99, 0x40, 0x41, 0xf7, 0x1, 0xc, 0x2, 0x2, 0x41, 0x1, 0xf0}}) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f00000008c0)={0x10000, 0x40, 0x380, &(0x7f00000004c0)=[0x3, 0x7, 0x7, 0x5, 0x10, 0xc, 0x7, 0x6, 0x3, 0xcd5, 0x101, 0x9, 0x8, 0x2, 0x2, 0x101, 0x1ff, 0x2, 0x7, 0x8, 0x25, 0x80000001, 0x1, 0x5, 0xfffffffffffffffe, 0x2, 0x6, 0x9ee3, 0x3, 0x29, 0xcc5, 0x100000000, 0xc9, 0x6, 0xdf, 0x5, 0x4, 0xf345, 0x7ff, 0x7, 0x10, 0x6, 0x4, 0x6, 0xff, 0x7, 0x6, 0x100, 0xfffffffffffffcad, 0xffffffffffffffff, 0x6, 0x4, 0x5, 0x7, 0x9, 0x42, 0xf, 0x9, 0x3, 0x8, 0x10000, 0xb, 0xc, 0xf, 0x6, 0x829, 0xe457, 0x7, 0x2, 0x9, 0x8000, 0x6, 0x8, 0x9, 0x0, 0xf8, 0x8, 0x6, 0x1ff, 0x9, 0x769b, 0x1, 0x5, 0x0, 0xff, 0x2, 0xfffffffffffffffd, 0x7, 0xfe6, 0x3, 0x55d, 0x4, 0x8000, 0x3, 0x1, 0x40, 0xfffffffffffffff7, 0x0, 0x3, 0x2, 0xfffffffffffffffb, 0xe9, 0xfffffffffffffffe, 0x10001, 0x8000000000000001, 0xa, 0x5, 0x8000000000000001, 0x2, 0x0, 0xfffffffffffffff0, 0x9, 0x8, 0x50000, 0xeb45, 0x8001, 0x8, 0x26, 0x7fffffffffffffff, 0xc25, 0x5, 0x0, 0x26dd, 0x1ff, 0xffff, 0x4, 0x29b0, 0x6]}) (async) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x3fffc, 0x180, 0x2, 0x0, 0xf5, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x8, 0x0, 0x45, 0xfffffffffffffffd, 0xbdb], 0x200000, 0x1c6017}) (async, rerun: 32) ioctl$KVM_RUN(r6, 0xae80, 0x0) (rerun: 32) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r7, r3, &(0x7f0000002080)=0x3b, 0x23e) ftruncate(r7, 0x6) (async) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001d80)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) (async) r8 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDFONTOP_SET(r8, 0x4b4b, &(0x7f0000000040)={0x4, 0x0, 0x1, 0x1c, 0x100, 0x0}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000001d40)={0x5, 0x0, &(0x7f0000001c80)=[{&(0x7f0000000980)=""/57, 0x39}, {&(0x7f00000009c0)=""/182, 0xb6}, {&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/240, 0xf0}, {&(0x7f0000001b80)=""/220, 0xdc}], &(0x7f0000001d00)=[0x7], 0x5}, 0x20) (async) recvmsg$can_raw(r1, &(0x7f00000025c0)={&(0x7f0000001dc0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f00000024c0)=[{&(0x7f0000001e40)=""/228, 0xe4}, {&(0x7f0000001f40)=""/246, 0xf6}, {&(0x7f00000020c0)=""/153, 0x99}, {&(0x7f0000002180)=""/202, 0xca}, {&(0x7f0000002280)=""/3, 0x3}, {&(0x7f00000022c0)=""/212, 0xd4}, {&(0x7f00000023c0)=""/237, 0xed}], 0x7, &(0x7f0000002540)=""/68, 0x44}, 0x0) (async, rerun: 32) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) (rerun: 32) 4.533788678s ago: executing program 2 (id=2227): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000e80)={'team_slave_0\x00', &(0x7f0000000dc0)=@ethtool_rxnfc={0x34, 0x3, 0x3, {0x12, @sctp_ip4_spec={@loopback, @dev={0xac, 0x14, 0x14, 0x43}, 0x4e21, 0x4e20, 0x6}, {0x0, @empty, 0xff, 0x0, [0x7f, 0x5]}, @sctp_ip6_spec={@private1, @empty, 0x4e20, 0x4e21, 0xff}, {0x0, @random="736b266a38a2", 0x7, 0xfffd, [0x2, 0xfffffffc]}, 0x8000000000000001, 0x101}}}) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = gettid() ioprio_get$pid(0x1, r3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote, r4}, 0x14) 4.330232042s ago: executing program 3 (id=2228): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'veth0_to_bond\x00', &(0x7f00000000c0)=@ethtool_ringparam={0x1d, 0x3, 0x2, 0x0, 0x9, 0xffff, 0x8, 0xa8, 0x435}}) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee00}}, './file0\x00'}) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r2) r3 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)={0x120, 0x0, 0x8, 0x70bd2c, 0x25dfdc00, {}, [@TIPC_NLA_NODE={0xb8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xa, 0x3, "ab554247fb1c"}, @TIPC_NLA_NODE_ID={0xa7, 0x3, "daf07dfbb4dcd5a653eec89ac4d8e8ae2e872422e8c07a8d7f92946395a4cb9c3cee65e11eefa38cc1f5024abad75779d7f39235d235400f5dbd24d4333e66c0d2ac8984feb2c369c28df0ff158a675e119c1d408fd31b00b152a08c8657dcf68ce4d968355031333cbebc598c711c597e91db063eeed839cda5077569972d536b2cc949b46c55d084b2c4bb33f130c14134220f08f869d649fa8fdeea5408784f897f"}]}, @TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x83f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x32ca1243}]}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth1_to_bond\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xff}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4b0c}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x800}, 0x0) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/66, 0x42}], 0x1}, 0x151) unlink(&(0x7f0000000180)='./file1\x00') 1.450186788s ago: executing program 2 (id=2229): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x12) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') ppoll(&(0x7f0000000b00)=[{r7, 0x4009}], 0x1, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0xc53a, 0xd, 0xfff, 0x0, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000000), 0x8) r11 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r11, 0x107, 0x12, &(0x7f0000000000), 0x8) r12 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x1d9) ioctl$FS_IOC_FSSETXATTR(r12, 0x401c5820, &(0x7f0000000240)={0x10001, 0x402000, 0x1000000, 0xfffffffc, 0xc}) r13 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r13, 0xffffffffffffffff, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 1.449874975s ago: executing program 1 (id=2230): listns(&(0x7f00000000c0)={0x20, 0x0, 0xc, 0x4000000, 0x0, 0x3}, 0x0, 0xf4240, 0x0) 1.448172295s ago: executing program 3 (id=2231): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x3580, &(0x7f0000000440)={&(0x7f00000007c0)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}, @TCA_FLOWER_KEY_MPLS_TC={0x5, 0x45, 0x80}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1.299919554s ago: executing program 1 (id=2232): r0 = socket$inet(0x2, 0x2, 0x6c1) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000300)='127.0.0.1:/\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='addr=127.0.0.1,port=20000,proto=tcp,vers=4.1,noresvport\x00']) close(0x3) 1.249906542s ago: executing program 1 (id=2233): syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f000054e000/0x400000)=nil) (async) syz_clone(0x0, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x3, 0x2}) (async) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000000)=0x7f, 0x1000, 0x1) 1.178748549s ago: executing program 1 (id=2234): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe0}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc53", 0x35}, {&(0x7f0000000e80)="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", 0x120}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df0", 0x28}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c483271361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8", 0xa4}], 0x4}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000500)="cbc635", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000880)="2588e09c666f7c2e1106c4b4839bf483707b3603c0580d4ea3d894cc071395c4737f5f4840a109613a98c563d9d35e1d30ca9911819a41dbfd9738e9c1125ca897831d701969b199ec46f793e0be4ddb8d9826811efc4e049594868a96ae2daab085b6ba229f384a9463eb764b9ea4c74e5460b9a82983e2d22885fbc6d1d731e8d02f8246b3f0ae936b34987046e18afad35e79c363b701eb8455e1f4ea1c12e4a706789339df763d", 0xa9}, {&(0x7f0000000980)="b58e23c2095b3eca9b630c1d411197505e88b68339fc3ca18b0fd3186d253cf0556b7f8b7172a7ecda83c0bfb299b17792211571807b64f65caf151aa7f1b0bd962717d5fd2f9f0ceec19df6106bdba8c3292328dce4b38ecc0c6cbaed777b7d2f6f229a0ee04cc5c0cd92b973485c74f5a33bb3e68099b2de241b322610c87a569eca6f", 0x84}], 0x2}}], 0x3, 0x14042082) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.110183797s ago: executing program 1 (id=2235): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe2(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r4, &(0x7f0000000040)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r3, r6, 0xfffffffffffffc01, 0x0) tee(r3, r6, 0x60000000000, 0x0) read$FUSE(r5, &(0x7f00000005c0)={0x2020}, 0x2020) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r10) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) socket$kcm(0x11, 0x3, 0x0) r11 = socket(0x400000000010, 0x3, 0x0) r12 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r12, &(0x7f00000000c0)={0x20000000}) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001300)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r14, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x20000000, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x8, 0x5, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x3, 0x1, 0x8, 0x101, 0x1}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x6}, {0x3, 0x8004, 0xc, 0x101, 0x103, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x9, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0xfffffff8, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x1, 0xfffffffe, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x10000}, {0xfffffffe, 0xfffffffb, 0x4, 0x5, 0x7ff, 0x5}, {0x240, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x168, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x6, 0x87}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x2008, 0x7fff, 0x4, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x0, 0x3, 0x2}, {0x0, 0x3, 0x2, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0x80000e, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x8006, 0xe, 0x0, 0x80}, {0xd, 0x1, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x4003, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16c, 0x2}, {0x1ff, 0x5, 0x1000007, 0x5, 0x2, 0xffffffff}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x8, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0xfff, 0x4, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x6, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80010000, 0x7fff}, {0x8c7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x9, 0xfffe, 0x9f98, 0xbb, 0x8, 0x66a}, {0x9, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xff, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e6, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x4, 0x7, 0x6, 0x8, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x9, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x8, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x4, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x5, 0x4, 0x8000, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x10000, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0xffffffff, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x4, 0x5}, {0x3, 0x18, 0x1, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x5, 0x100, 0x57}, {0x9, 0x5, 0x8, 0x3, 0xa, 0x2}, {0xb3, 0x4, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x2, 0x6}, {0x1, 0x8f, 0xb0, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd52, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1fd}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0x68}, {0x7, 0x20, 0x83ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x6, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0x400, 0x4, 0x9}, {0x9, 0x8, 0x8001, 0x7, 0x2, 0x2}, {0x5, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x0, 0xfffff9de}, {0x9, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x9, 0xffffff11, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x6}, {0x7, 0x400, 0x9, 0x8, 0xa, 0x104}, {0x81, 0x8, 0x988, 0x1, 0x0, 0xb}, {0xdc03, 0x7, 0x80, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0xa, 0xfffffff7, 0xc}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x9, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0xffffffff, 0x7, 0x5, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0x4}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x2, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x80000000}, {0x20000009, 0x2, 0x800, 0x200, 0x9, 0xb}, {0x47, 0x6, 0x8936, 0xdcb, 0x3, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0xa, 0x50, 0xff, 0x9e0f, 0x5, 0x3}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0x9, 0xfe0, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x0, 0x80000001}, {0xffffff8c, 0x9, 0x1, 0x1, 0x10, 0x5}, {0x7, 0x7, 0x104, 0x78d, 0xffffcff7, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0xf, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x20003, 0x1000}], [{0x1, 0x1}, {0x2}, {}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x3}, {}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x36bc5bece03d104f, 0x1}, {0x4}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0xa}, {0x3}, {0x3, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x3, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x4}, {0x5}, {0x2590228f88cc2931}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x2, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x4}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) 96.097749ms ago: executing program 3 (id=2236): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/9, 0x9}], 0x1) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000000)=@e={0xff, 0xa, 0x2, 0x4, @generic=0x2, 0x7f, 0x7, 0x8}) mkdir(&(0x7f0000000040)='./mnt\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r2 = fanotify_init(0x0, 0x400) setns(0xc9, 0x0) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(0xffffffffffffffff, 0x40106e8c, &(0x7f00000001c0)=[0x3, 0x22c]) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r3, 0x89ee, &(0x7f0000000000)=0x2) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$ethtool(0x0, r5) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000a00)=ANY=[], 0x17c}, 0x1, 0x0, 0x0, 0x4}, 0x40004) close_range(r2, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r6, &(0x7f0000000180)='stm32g0-typec 0x35\n\x00', 0x14) syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) (async) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/9, 0x9}], 0x1) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) (async) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000000)=@e={0xff, 0xa, 0x2, 0x4, @generic=0x2, 0x7f, 0x7, 0x8}) (async) mkdir(&(0x7f0000000040)='./mnt\x00', 0x1ff) (async) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) (async) fanotify_init(0x0, 0x400) (async) setns(0xc9, 0x0) (async) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(0xffffffffffffffff, 0x40106e8c, &(0x7f00000001c0)=[0x3, 0x22c]) (async) socket$phonet(0x23, 0x2, 0x1) (async) ioctl$SIOCPNDELRESOURCE(r3, 0x89ee, &(0x7f0000000000)=0x2) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r4, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) (async) accept4(r4, 0x0, 0x0, 0x800) (async) syz_genetlink_get_family_id$ethtool(0x0, r5) (async) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000a00)=ANY=[], 0x17c}, 0x1, 0x0, 0x0, 0x4}, 0x40004) (async) close_range(r2, 0xffffffffffffffff, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) (async) write(r6, &(0x7f0000000180)='stm32g0-typec 0x35\n\x00', 0x14) (async) 254.82µs ago: executing program 2 (id=2237): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x4000000) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000f80)={@map, 0x24, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x100, 0x0, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@multicast2, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x2, 0x0, 0x2000000000000, 0x40, 0xfffffffffffffdfd, 0x50}, {0x5}, 0x6, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) (fail_nth: 8) 0s ago: executing program 2 (id=2238): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006e80)={0x2020, 0x0, 0x0}, 0x2082) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd7000fedbdf25170000004800068008000600000000003c0004"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x4040800) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$overlay(0x0, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@volatile}]}) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r6, &(0x7f0000000bc0)={0x2020}, 0x2054) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xab, 0x0, 0x0, 0x10, &(0x7f0000000100), 0x0, 0x0, 0x19, 0x8, 0x0, 0x0}}, 0x10) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="8510000004000000950080000000000018000000000000000000000000000002950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r10, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x20, r8, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r8, 0x2, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xe12433b5be7a94dc}]}, 0x44}, 0x1, 0x0, 0x0, 0x8081}, 0x10085) statx(r5, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) write$FUSE_INIT(r1, &(0x7f0000004300)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0x9400000, 0x0, 0x0, 0x81, 0x7, 0x0, 0x0, 0x0, 0x4}}, 0x50) read$FUSE(r1, &(0x7f0000004540)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000002200)={0x10, 0xffffffffffffffda, r13}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x18228}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bridge0\x00'}]}, 0x34}}, 0x10) kernel console output (not intermixed with test programs): 263.068417][T12272] do_syscall_64+0x115/0x870 [ 263.068429][T12272] ? clear_bhb_loop+0x40/0x90 [ 263.068442][T12272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.068453][T12272] RIP: 0033:0x7fa5ded9e019 [ 263.068463][T12272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.068473][T12272] RSP: 002b:00007fa5dfc95028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 263.068484][T12272] RAX: ffffffffffffffda RBX: 00007fa5df025fa0 RCX: 00007fa5ded9e019 [ 263.068490][T12272] RDX: 0000000004040800 RSI: 0000200000000500 RDI: 0000000000000003 [ 263.068496][T12272] RBP: 00007fa5dfc95090 R08: 0000000000000000 R09: 0000000000000000 [ 263.068502][T12272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.068508][T12272] R13: 00007fa5df026038 R14: 00007fa5df025fa0 R15: 00007ffcbe1b3808 [ 263.068522][T12272] [ 263.597831][ C3] net_ratelimit: 82479 callbacks suppressed [ 263.597846][ C3] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 263.597875][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 263.598139][ C2] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 263.598592][ C2] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 263.599039][ C2] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 263.599473][ C2] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 263.599823][ C3] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 263.599938][ C2] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 263.600380][ C2] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 263.600813][ C2] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 263.727713][T12290] FAULT_INJECTION: forcing a failure. [ 263.727713][T12290] name failslab, interval 1, probability 0, space 0, times 0 [ 263.735430][T12290] CPU: 1 UID: 0 PID: 12290 Comm: syz.3.1906 Not tainted syzkaller #0 PREEMPT(full) [ 263.735446][T12290] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 263.735453][T12290] Call Trace: [ 263.735457][T12290] [ 263.735461][T12290] dump_stack_lvl+0x100/0x190 [ 263.735479][T12290] should_fail_ex.cold+0x5/0xa [ 263.735494][T12290] should_failslab+0xc2/0x120 [ 263.735508][T12290] __kmalloc_noprof+0xfc/0x820 [ 263.735519][T12290] ? lockdep_init_map_type+0x5c/0x250 [ 263.735534][T12290] ? nft_trans_alloc+0x1d/0x2d0 [ 263.735554][T12290] nft_trans_alloc+0x1d/0x2d0 [ 263.735570][T12290] nf_tables_newtable+0x1363/0x1a90 [ 263.735586][T12290] ? __pfx_nf_tables_newtable+0x10/0x10 [ 263.735602][T12290] ? __nla_parse+0x40/0x60 [ 263.735615][T12290] nfnetlink_rcv_batch+0x1410/0x2880 [ 263.735636][T12290] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 263.735650][T12290] ? find_held_lock+0x2b/0x80 [ 263.735667][T12290] ? avc_has_perm_noaudit+0x145/0x3b0 [ 263.735692][T12290] ? __nla_parse+0x40/0x60 [ 263.735704][T12290] nfnetlink_rcv+0x3bd/0x440 [ 263.735717][T12290] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 263.735734][T12290] netlink_unicast+0x585/0x850 [ 263.735748][T12290] ? __pfx_netlink_unicast+0x10/0x10 [ 263.735762][T12290] netlink_sendmsg+0x8b0/0xda0 [ 263.735775][T12290] ? __pfx_netlink_sendmsg+0x10/0x10 [ 263.735787][T12290] ? selinux_socket_sendmsg+0x198/0x2f0 [ 263.735805][T12290] ____sys_sendmsg+0xa4d/0xbe0 [ 263.735821][T12290] ? __pfx_netlink_sendmsg+0x10/0x10 [ 263.735832][T12290] ? __pfx_____sys_sendmsg+0x10/0x10 [ 263.735854][T12290] ___sys_sendmsg+0x190/0x1e0 [ 263.735871][T12290] ? __pfx____sys_sendmsg+0x10/0x10 [ 263.735887][T12290] ? __lock_acquire+0x49f/0x1a40 [ 263.735900][T12290] ? get_pid_task+0x106/0x250 [ 263.735924][T12290] __sys_sendmsg+0x160/0x210 [ 263.735937][T12290] ? __pfx___sys_sendmsg+0x10/0x10 [ 263.735957][T12290] do_syscall_64+0x115/0x870 [ 263.735970][T12290] ? clear_bhb_loop+0x40/0x90 [ 263.735983][T12290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.735999][T12290] RIP: 0033:0x7fa5ded9e019 [ 263.736008][T12290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.736018][T12290] RSP: 002b:00007fa5dfc95028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 263.736030][T12290] RAX: ffffffffffffffda RBX: 00007fa5df025fa0 RCX: 00007fa5ded9e019 [ 263.736036][T12290] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 263.736042][T12290] RBP: 00007fa5dfc95090 R08: 0000000000000000 R09: 0000000000000000 [ 263.736048][T12290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 263.736054][T12290] R13: 00007fa5df026038 R14: 00007fa5df025fa0 R15: 00007ffcbe1b3808 [ 263.736068][T12290] [ 263.980453][T12298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.006322][T12298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.016944][T12302] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 264.072653][T12295] xt_hashlimit: size too large, truncated to 1048576 [ 264.148668][T12306] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1910'. [ 264.436940][ T42] kauditd_printk_skb: 1 callbacks suppressed [ 264.436953][ T42] audit: type=1400 audit(1785500665.199:575): avc: denied { ioctl } for pid=12313 comm="syz.1.1912" path="socket:[32181]" dev="sockfs" ino=32181 ioctlcmd=0x8980 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 264.733124][T12321] syzkaller0: entered promiscuous mode [ 264.738997][T12321] syzkaller0: entered allmulticast mode [ 264.750196][T12321] tipc: Enabled bearer , priority 0 [ 264.764274][T12318] tipc: Resetting bearer [ 264.849425][T12318] tipc: Disabling bearer [ 264.969621][T12325] FAULT_INJECTION: forcing a failure. [ 264.969621][T12325] name failslab, interval 1, probability 0, space 0, times 0 [ 264.981992][T12325] CPU: 1 UID: 0 PID: 12325 Comm: syz.0.1917 Not tainted syzkaller #0 PREEMPT(full) [ 264.982009][T12325] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 264.982016][T12325] Call Trace: [ 264.982020][T12325] [ 264.982024][T12325] dump_stack_lvl+0x100/0x190 [ 264.982043][T12325] should_fail_ex.cold+0x5/0xa [ 264.982057][T12325] should_failslab+0xc2/0x120 [ 264.982072][T12325] __kmalloc_noprof+0xfc/0x820 [ 264.982084][T12325] ? sock_kmalloc+0x111/0x170 [ 264.982103][T12325] sock_kmalloc+0x111/0x170 [ 264.982119][T12325] af_alg_alloc_areq+0x9e/0x250 [ 264.982131][T12325] aead_recvmsg+0x1b8/0xe80 [ 264.982149][T12325] ? __pfx_aead_recvmsg+0x10/0x10 [ 264.982165][T12325] ? __pfx_aead_recvmsg+0x10/0x10 [ 264.982179][T12325] sock_recvmsg+0x1d5/0x220 [ 264.982196][T12325] ____sys_recvmsg+0x21e/0x670 [ 264.982213][T12325] ? __pfx_____sys_recvmsg+0x10/0x10 [ 264.982234][T12325] ? __lock_acquire+0x49f/0x1a40 [ 264.982248][T12325] ? get_pid_task+0x106/0x250 [ 264.982259][T12325] ___sys_recvmsg+0x16a/0x1a0 [ 264.982276][T12325] ? __pfx____sys_recvmsg+0x10/0x10 [ 264.982294][T12325] ? find_held_lock+0x2b/0x80 [ 264.982312][T12325] __x64_sys_recvmsg+0x19a/0x260 [ 264.982326][T12325] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 264.982347][T12325] do_syscall_64+0x115/0x870 [ 264.982360][T12325] ? clear_bhb_loop+0x40/0x90 [ 264.982372][T12325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.982383][T12325] RIP: 0033:0x7fce13b9e019 [ 264.982393][T12325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 264.982403][T12325] RSP: 002b:00007fce14996028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 264.982414][T12325] RAX: ffffffffffffffda RBX: 00007fce13e25fa0 RCX: 00007fce13b9e019 [ 264.982421][T12325] RDX: 0000000000000100 RSI: 0000200000002b40 RDI: 0000000000000004 [ 264.982427][T12325] RBP: 00007fce14996090 R08: 0000000000000000 R09: 0000000000000000 [ 264.982433][T12325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.982438][T12325] R13: 00007fce13e26038 R14: 00007fce13e25fa0 R15: 00007ffed3ed9468 [ 264.982452][T12325] [ 265.085838][T12328] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1918'. [ 265.115706][ T1259] Bluetooth: (null): Too short H5 packet [ 265.118437][ T1259] Bluetooth: (null): Invalid header checksum [ 265.200960][T12335] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1918'. [ 265.229559][ T36] Bluetooth: (null): Invalid header checksum [ 265.328102][ T103] Bluetooth: (null): Invalid header checksum [ 265.353633][T12342] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1921'. [ 265.370310][T12342] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1921'. [ 265.385090][T12342] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1921'. [ 265.440133][ T1167] Bluetooth: (null): Invalid header checksum [ 265.548936][ T1259] Bluetooth: (null): Invalid header checksum [ 265.588367][T12354] netlink: 'syz.0.1924': attribute type 39 has an invalid length. [ 265.787659][T12358] kAFS: unparsable volume name [ 265.867528][ T42] audit: type=1400 audit(1785500666.629:576): avc: denied { listen } for pid=12359 comm="syz.3.1926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 265.876927][ T42] audit: type=1400 audit(1785500666.639:577): avc: denied { shutdown } for pid=12359 comm="syz.3.1926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 266.281334][T12367] ./file0: Can't lookup blockdev [ 266.283783][T12365] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1927'. [ 266.749219][T12374] program syz.3.1928 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 267.090336][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.097236][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.102862][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.105841][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.399619][T12345] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 268.413113][T12352] netlink: 'syz.0.1924': attribute type 1 has an invalid length. [ 268.426945][T12352] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1924'. [ 268.431067][T12352] netlink: 'syz.0.1924': attribute type 1 has an invalid length. [ 268.434039][T12352] netlink: 29 bytes leftover after parsing attributes in process `syz.0.1924'. [ 268.607930][ C0] net_ratelimit: 86083 callbacks suppressed [ 268.607944][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 268.608136][ C2] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 268.608565][ C3] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 268.608739][ C3] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 268.608904][ C3] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 268.609063][ C3] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 268.609219][ C3] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 268.609379][ C3] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 268.609540][ C3] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 268.609727][ C3] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 268.611735][T12386] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1933'. [ 268.661073][T12383] tcf_pedit_act: 24 callbacks suppressed [ 268.661084][T12383] tc action pedit unable to extract header offset for header type (0x4) [ 268.667949][T12383] tc action pedit unable to extract header offset for header type (0x4) [ 268.670611][T12383] tc action pedit unable to extract header offset for header type (0x4) [ 268.673239][T12383] tc action pedit unable to extract header offset for header type (0x4) [ 268.675786][T12383] tc action pedit unable to extract header offset for header type (0x4) [ 268.678418][T12383] tc action pedit unable to extract header offset for header type (0x4) [ 268.680995][T12383] tc action pedit unable to extract header offset for header type (0x4) [ 268.683563][T12383] tc action pedit unable to extract header offset for header type (0x4) [ 268.686110][T12383] tc action pedit unable to extract header offset for header type (0x4) [ 268.688735][T12383] tc action pedit unable to extract header offset for header type (0x4) [ 268.912229][T12394] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1935'. [ 269.257254][T12412] syzkaller0: entered promiscuous mode [ 269.265002][T12412] syzkaller0: entered allmulticast mode [ 269.321401][T12408] bond1: option resend_igmp: invalid value (18446744073709551608) [ 269.324078][T12408] bond1: option resend_igmp: allowed values 0 - 255 [ 269.343374][T12408] bond1 (unregistering): Released all slaves [ 269.475076][T12413] bond1: option resend_igmp: invalid value (18446744073709551608) [ 269.477748][T12413] bond1: option resend_igmp: allowed values 0 - 255 [ 269.495067][T12413] bond1 (unregistering): Released all slaves [ 269.742340][ T42] audit: type=1400 audit(1785500670.509:578): avc: denied { create } for pid=12422 comm="syz.0.1944" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 269.749402][ T42] audit: type=1400 audit(1785500670.509:579): avc: denied { unlink } for pid=12422 comm="syz.0.1944" name="file0" dev="tmpfs" ino=2529 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 270.000272][ T42] audit: type=1400 audit(1785500670.769:580): avc: denied { mount } for pid=12437 comm="syz.0.1950" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 270.010933][T12437] ima: policy update failed [ 270.012626][ T42] audit: type=1807 audit(1785500670.779:581): UNKNOWN=0 res=0 [ 270.015076][ T42] audit: type=1802 audit(1785500670.779:582): pid=12438 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=update_policy cause=invalid-policy comm="syz.0.1950" res=0 errno=0 [ 270.023770][ T42] audit: type=1802 audit(1785500670.779:583): pid=12437 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.0.1950" res=0 errno=0 [ 270.523852][T12457] fuse: Bad value for 'user_id' [ 270.531436][T12457] fuse: Bad value for 'user_id' [ 270.658006][T12467] __nla_validate_parse: 2 callbacks suppressed [ 270.658020][T12467] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1956'. [ 272.446040][ T42] audit: type=1400 audit(1785500673.209:584): avc: denied { unmount } for pid=5734 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 272.604967][T12475] FAULT_INJECTION: forcing a failure. [ 272.604967][T12475] name failslab, interval 1, probability 0, space 0, times 0 [ 272.631948][T12475] CPU: 1 UID: 0 PID: 12475 Comm: syz.3.1958 Not tainted syzkaller #0 PREEMPT(full) [ 272.631975][T12475] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 272.631986][T12475] Call Trace: [ 272.631992][T12475] [ 272.631997][T12475] dump_stack_lvl+0x100/0x190 [ 272.632026][T12475] should_fail_ex.cold+0x5/0xa [ 272.632049][T12475] should_failslab+0xc2/0x120 [ 272.632071][T12475] __kmalloc_cache_noprof+0x91/0x6c0 [ 272.632099][T12475] ? __xa_alloc_cyclic+0x1f2/0x330 [ 272.632124][T12475] ? __xdp_reg_mem_model+0x134/0x6a0 [ 272.632156][T12475] __xdp_reg_mem_model+0x134/0x6a0 [ 272.632182][T12475] ? __pfx___xdp_reg_mem_model+0x10/0x10 [ 272.632209][T12475] ? page_pool_list+0x223/0x2a0 [ 272.632235][T12475] xdp_reg_mem_model+0x22/0x70 [ 272.632260][T12475] bpf_test_run_xdp_live+0x1cb/0x760 [ 272.632289][T12475] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 272.632313][T12475] ? __mutex_unlock_slowpath+0x35d/0x930 [ 272.632338][T12475] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 272.632363][T12475] ? find_held_lock+0x2b/0x80 [ 272.632384][T12475] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 272.632409][T12475] ? bpf_dispatcher_change_prog+0x2d9/0xa50 [ 272.632444][T12475] ? bpf_dispatcher_xdp+0x800/0x1000 [ 272.632464][T12475] ? bpf_dispatcher_xdp+0x800/0x1000 [ 272.632479][T12475] ? bpf_dispatcher_xdp+0x800/0x1000 [ 272.632494][T12475] ? bpf_dispatcher_change_prog+0x2de/0xa50 [ 272.632518][T12475] bpf_prog_test_run_xdp+0xd7d/0x1670 [ 272.632552][T12475] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 272.632585][T12475] ? fput+0x79/0x100 [ 272.632605][T12475] ? __bpf_prog_get+0x97/0x2a0 [ 272.632628][T12475] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 272.632654][T12475] __sys_bpf+0x2a12/0x4e80 [ 272.632678][T12475] ? __pfx___sys_bpf+0x10/0x10 [ 272.632694][T12475] ? find_held_lock+0x2b/0x80 [ 272.632710][T12475] ? get_pid_task+0xfc/0x250 [ 272.632724][T12475] ? get_pid_task+0xfc/0x250 [ 272.632747][T12475] ? find_held_lock+0x2b/0x80 [ 272.632768][T12475] ? rcu_read_lock_any_held+0x6a/0xa0 [ 272.632784][T12475] ? find_held_lock+0x2b/0x80 [ 272.632799][T12475] ? ksys_write+0x190/0x250 [ 272.632823][T12475] ? ksys_write+0x190/0x250 [ 272.632869][T12475] ? fput+0x79/0x100 [ 272.632892][T12475] ? __x64_sys_bpf+0xce/0x140 [ 272.632907][T12475] __x64_sys_bpf+0xce/0x140 [ 272.632936][T12475] ? do_syscall_64+0x90/0x870 [ 272.632960][T12475] do_syscall_64+0x115/0x870 [ 272.632979][T12475] ? clear_bhb_loop+0x40/0x90 [ 272.632998][T12475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.633016][T12475] RIP: 0033:0x7fa5ded9e019 [ 272.633030][T12475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.633047][T12475] RSP: 002b:00007fa5dfc95028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 272.633065][T12475] RAX: ffffffffffffffda RBX: 00007fa5df025fa0 RCX: 00007fa5ded9e019 [ 272.633075][T12475] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 272.633084][T12475] RBP: 00007fa5dfc95090 R08: 0000000000000000 R09: 0000000000000000 [ 272.633095][T12475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 272.633104][T12475] R13: 00007fa5df026038 R14: 00007fa5df025fa0 R15: 00007ffcbe1b3808 [ 272.633126][T12475] [ 272.759568][T12476] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 272.762084][T12476] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 272.770743][ T42] audit: type=1400 audit(1785500673.529:585): avc: denied { append } for pid=12473 comm="syz.0.1957" name="001" dev="devtmpfs" ino=768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 273.026732][ T42] audit: type=1400 audit(1785500673.789:586): avc: denied { map } for pid=12482 comm="syz.2.1960" path="/dev/iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 273.102682][ T42] audit: type=1400 audit(1785500673.869:587): avc: denied { read write } for pid=12481 comm="syz.1.1961" name="file0" dev="fuse" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 273.162508][T12486] SQUASHFS error: Failed to read block 0x0: -5 [ 273.166503][T12486] unable to read squashfs_super_block [ 273.256261][T12495] FAULT_INJECTION: forcing a failure. [ 273.256261][T12495] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 273.268062][T12495] CPU: 1 UID: 0 PID: 12495 Comm: syz.3.1965 Not tainted syzkaller #0 PREEMPT(full) [ 273.268084][T12495] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 273.268093][T12495] Call Trace: [ 273.268099][T12495] [ 273.268106][T12495] dump_stack_lvl+0x100/0x190 [ 273.268134][T12495] should_fail_ex.cold+0x5/0xa [ 273.268152][T12495] ? prepare_alloc_pages+0x16d/0x5f0 [ 273.268178][T12495] should_fail_alloc_page+0xeb/0x140 [ 273.268201][T12495] prepare_alloc_pages+0x1f0/0x5f0 [ 273.268220][T12495] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 273.268232][T12495] ? __pfx_stack_trace_save+0x10/0x10 [ 273.268244][T12495] ? stack_depot_save_flags+0x27/0x9d0 [ 273.268262][T12495] ? kasan_save_stack+0x3f/0x50 [ 273.268274][T12495] ? kasan_save_stack+0x30/0x50 [ 273.268285][T12495] ? kasan_save_track+0x14/0x30 [ 273.268297][T12495] ? __kasan_slab_alloc+0x89/0x90 [ 273.268309][T12495] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 273.268321][T12495] ? ptlock_alloc+0x1f/0x70 [ 273.268336][T12495] ? pte_alloc_one+0x82/0x3d0 [ 273.268351][T12495] ? __pte_alloc+0x6d/0x3e0 [ 273.268363][T12495] ? do_anonymous_page+0x13ae/0x2080 [ 273.268378][T12495] ? __handle_mm_fault+0x1d2c/0x2a00 [ 273.268394][T12495] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 273.268406][T12495] ? gup_fast_fallback+0x16dc/0x2790 [ 273.268419][T12495] ? iov_iter_extract_pages+0xac8/0x2100 [ 273.268434][T12495] ? rds_getsockopt+0x126/0x310 [ 273.268448][T12495] ? __lock_acquire+0x49f/0x1a40 [ 273.268461][T12495] ? __lock_acquire+0x49f/0x1a40 [ 273.268477][T12495] ? lock_acquire+0x1b9/0x370 [ 273.268490][T12495] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 273.268503][T12495] ? policy_nodemask+0xed/0x4f0 [ 273.268519][T12495] alloc_pages_mpol+0x1fb/0x540 [ 273.268533][T12495] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 273.268552][T12495] folio_alloc_mpol_noprof+0x36/0x260 [ 273.268569][T12495] vma_alloc_folio_noprof+0xed/0x1d0 [ 273.268585][T12495] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 273.268605][T12495] do_anonymous_page+0xb2b/0x2080 [ 273.268622][T12495] ? rcu_read_unlock+0x2d/0xb0 [ 273.268635][T12495] __handle_mm_fault+0x1d2c/0x2a00 [ 273.268653][T12495] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 273.268670][T12495] ? __pfx___handle_mm_fault+0x10/0x10 [ 273.268688][T12495] ? pte_offset_map_lock+0x174/0x320 [ 273.268701][T12495] ? find_held_lock+0x2b/0x80 [ 273.268714][T12495] ? follow_page_pte+0x4d0/0x13f0 [ 273.268731][T12495] handle_mm_fault+0x37b/0xa30 [ 273.268749][T12495] __get_user_pages+0x1178/0x32a0 [ 273.268768][T12495] ? down_read_killable+0x35e/0x520 [ 273.268783][T12495] ? __pfx___get_user_pages+0x10/0x10 [ 273.268800][T12495] __gup_longterm_locked+0x87d/0x16f0 [ 273.268815][T12495] ? is_bpf_text_address+0x8a/0x1a0 [ 273.268833][T12495] ? __pfx___gup_longterm_locked+0x10/0x10 [ 273.268851][T12495] ? find_held_lock+0x2b/0x80 [ 273.268860][T12495] ? gup_fast_fallback+0x1467/0x2790 [ 273.268874][T12495] ? sanity_check_pinned_pages+0x4f2/0x8b0 [ 273.268890][T12495] gup_fast_fallback+0x16dc/0x2790 [ 273.268913][T12495] ? __pfx_gup_fast_fallback+0x10/0x10 [ 273.268927][T12495] ? __x64_sys_getsockopt+0xbd/0x160 [ 273.268940][T12495] ? do_syscall_64+0x115/0x870 [ 273.268952][T12495] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.268969][T12495] pin_user_pages_fast+0xa7/0xf0 [ 273.268984][T12495] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 273.269002][T12495] iov_iter_extract_pages+0xac8/0x2100 [ 273.269025][T12495] ? rcu_is_watching+0x12/0xc0 [ 273.269049][T12495] ? __pfx_iov_iter_extract_pages+0x10/0x10 [ 273.269073][T12495] ? __kasan_kmalloc+0xaa/0xb0 [ 273.269094][T12495] ? __kvmalloc_node_noprof+0x36d/0x970 [ 273.269114][T12495] ? rds_info_getsockopt+0x441/0x610 [ 273.269131][T12495] rds_info_getsockopt+0x46f/0x610 [ 273.269146][T12495] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 273.269163][T12495] ? find_held_lock+0x2b/0x80 [ 273.269177][T12495] rds_getsockopt+0x126/0x310 [ 273.269187][T12495] ? __pfx_rds_getsockopt+0x10/0x10 [ 273.269197][T12495] ? copy_from_sockptr_offset.constprop.0+0xe2/0x150 [ 273.269214][T12495] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 273.269234][T12495] do_sock_getsockopt+0x3f6/0x6e0 [ 273.269252][T12495] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 273.269267][T12495] ? rcu_read_lock_any_held+0x6a/0xa0 [ 273.269281][T12495] ? find_held_lock+0x2b/0x80 [ 273.269293][T12495] ? __fget_files+0x21f/0x3d0 [ 273.269307][T12495] __sys_getsockopt+0x148/0x260 [ 273.269324][T12495] ? __x64_sys_getsockopt+0xbd/0x160 [ 273.269335][T12495] __x64_sys_getsockopt+0xbd/0x160 [ 273.269352][T12495] ? do_syscall_64+0x90/0x870 [ 273.269363][T12495] ? lockdep_hardirqs_on+0x78/0x100 [ 273.269375][T12495] do_syscall_64+0x115/0x870 [ 273.269386][T12495] ? clear_bhb_loop+0x40/0x90 [ 273.269399][T12495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.269409][T12495] RIP: 0033:0x7fa5ded9e019 [ 273.269419][T12495] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.269429][T12495] RSP: 002b:00007fa5dfc95028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 273.269441][T12495] RAX: ffffffffffffffda RBX: 00007fa5df025fa0 RCX: 00007fa5ded9e019 [ 273.269448][T12495] RDX: 000000000000271c RSI: 0000200000000114 RDI: 0000000000000003 [ 273.269454][T12495] RBP: 00007fa5dfc95090 R08: 0000200000000000 R09: 0000000000000000 [ 273.269460][T12495] R10: 0000200000c35fff R11: 0000000000000246 R12: 0000000000000002 [ 273.269466][T12495] R13: 00007fa5df026038 R14: 00007fa5df025fa0 R15: 00007ffcbe1b3808 [ 273.269480][T12495] [ 273.557913][ T29] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 273.617834][ C3] net_ratelimit: 84723 callbacks suppressed [ 273.617848][ C3] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.617938][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 273.618090][ C2] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 273.618617][ C2] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 273.619155][ C2] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 273.619697][ C2] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 273.619965][ C3] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.620219][ C2] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 273.620732][ C2] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 273.621254][ C2] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 273.722365][ T29] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 273.727396][ T29] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 273.737722][ T29] usb 7-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 273.740801][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.743521][ T29] usb 7-1: Product: syz [ 273.744844][ T29] usb 7-1: Manufacturer: syz [ 273.747692][ T29] usb 7-1: SerialNumber: syz [ 273.785004][ T29] ti_usb_3410_5052 7-1:2.0: TI USB 5052 2 port adapter converter detected [ 273.817580][ T29] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 273.842924][ T29] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 274.047265][T12515] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1968'. [ 274.254820][T12521] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1971'. [ 274.818940][ T42] kauditd_printk_skb: 20 callbacks suppressed [ 274.818952][ T42] audit: type=1400 audit(1785500675.589:608): avc: denied { view } for pid=12544 comm="syz.3.1975" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 274.848329][T12545] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1975'. [ 274.853856][T12542] syzkaller0: entered promiscuous mode [ 274.855772][T12542] syzkaller0: entered allmulticast mode [ 274.868859][T12542] FAULT_INJECTION: forcing a failure. [ 274.868859][T12542] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 274.873034][T12542] CPU: 1 UID: 0 PID: 12542 Comm: syz.0.1976 Not tainted syzkaller #0 PREEMPT(full) [ 274.873049][T12542] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 274.873055][T12542] Call Trace: [ 274.873059][T12542] [ 274.873063][T12542] dump_stack_lvl+0x100/0x190 [ 274.873081][T12542] should_fail_ex.cold+0x5/0xa [ 274.873095][T12542] _copy_from_iter+0x1f4/0x1690 [ 274.873126][T12542] ? _copy_from_iter+0x270/0x1690 [ 274.873141][T12542] ? __pfx__copy_from_iter+0x10/0x10 [ 274.873157][T12542] ? __pfx__copy_from_iter+0x10/0x10 [ 274.873171][T12542] ? _copy_from_iter+0x270/0x1690 [ 274.873188][T12542] copy_page_from_iter+0x238/0x300 [ 274.873205][T12542] skb_copy_datagram_from_iter+0x399/0x720 [ 274.873221][T12542] packet_sendmsg+0x227e/0x5100 [ 274.873235][T12542] ? avc_has_perm_noaudit+0x33a/0x3b0 [ 274.873252][T12542] ? sock_has_perm+0x25a/0x2f0 [ 274.873266][T12542] ? __pfx_sock_has_perm+0x10/0x10 [ 274.873284][T12542] ? __pfx_packet_sendmsg+0x10/0x10 [ 274.873299][T12542] ? selinux_socket_sendmsg+0x198/0x2f0 [ 274.873317][T12542] ____sys_sendmsg+0xa4d/0xbe0 [ 274.873333][T12542] ? __pfx_packet_sendmsg+0x10/0x10 [ 274.873346][T12542] ? __pfx_____sys_sendmsg+0x10/0x10 [ 274.873367][T12542] ___sys_sendmsg+0x190/0x1e0 [ 274.873384][T12542] ? __pfx____sys_sendmsg+0x10/0x10 [ 274.873400][T12542] ? __lock_acquire+0x49f/0x1a40 [ 274.873413][T12542] ? get_pid_task+0x106/0x250 [ 274.873437][T12542] __sys_sendmsg+0x160/0x210 [ 274.873450][T12542] ? __pfx___sys_sendmsg+0x10/0x10 [ 274.873469][T12542] do_syscall_64+0x115/0x870 [ 274.873482][T12542] ? clear_bhb_loop+0x40/0x90 [ 274.873494][T12542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.873505][T12542] RIP: 0033:0x7fce13b9e019 [ 274.873514][T12542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 274.873525][T12542] RSP: 002b:00007fce14996028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 274.873536][T12542] RAX: ffffffffffffffda RBX: 00007fce13e25fa0 RCX: 00007fce13b9e019 [ 274.873560][T12542] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 274.873567][T12542] RBP: 00007fce14996090 R08: 0000000000000000 R09: 0000000000000000 [ 274.873573][T12542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 274.873579][T12542] R13: 00007fce13e26038 R14: 00007fce13e25fa0 R15: 00007ffed3ed9468 [ 274.873594][T12542] [ 275.028179][ T42] audit: type=1400 audit(1785500675.799:609): avc: denied { write } for pid=12548 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 275.112782][ T42] audit: type=1400 audit(1785500675.879:610): avc: denied { write } for pid=12551 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 275.180723][T12554] syzkaller0: entered promiscuous mode [ 275.182620][T12554] syzkaller0: entered allmulticast mode [ 275.312887][T12557] overlayfs: failed to decode file handle (len=8, type=251, flags=0, err=-22) [ 275.345966][ T42] audit: type=1400 audit(1785500676.109:611): avc: denied { setopt } for pid=12558 comm="syz.0.1979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 275.453488][ T42] audit: type=1400 audit(1785500676.219:612): avc: denied { write } for pid=12561 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 275.502747][T12564] binder: 12556:12564 ioctl 40046205 0 returned -22 [ 275.541429][T12557] binder: 12556:12557 ioctl 4020ae46 7f73eaef0bd0 returned -22 [ 275.544662][T12557] binder: 12556:12557 ioctl 4020ae46 7f73eaef0bd0 returned -22 [ 275.553270][T12557] binder: 12556:12557 ioctl 4020ae46 7f73eaef0bd0 returned -22 [ 275.564227][T12557] binder: 12556:12557 ioctl 4020ae46 7f73eaef0bd0 returned -22 [ 275.571129][T12557] binder: 12556:12557 ioctl 4020ae46 7f73eaef0bd0 returned -22 [ 275.573764][T12557] binder: 12556:12557 ioctl 4020ae46 7f73eaef0bd0 returned -22 [ 275.583637][T12557] binder: 12556:12557 ioctl 4020ae46 7f73eaef0bd0 returned -22 [ 275.594081][T12557] binder: 12556:12557 ioctl 4020ae46 7f73eaef0bd0 returned -22 [ 275.603953][T12557] binder: 12556:12557 ioctl 4020ae46 7f73eaef0bd0 returned -22 [ 275.620013][T12557] binder: 12556:12557 ioctl 4020ae46 7f73eaef0bd0 returned -22 [ 275.637749][T12557] binder: 12556:12557 ioctl 4020ae46 7f73eaef08d0 returned -22 [ 275.650059][ T42] audit: type=1400 audit(1785500676.419:613): avc: denied { write } for pid=12566 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 275.873524][ T42] audit: type=1400 audit(1785500676.639:614): avc: denied { write } for pid=12570 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 276.054389][ T42] audit: type=1400 audit(1785500676.819:615): avc: denied { write } for pid=12577 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 276.583013][T12590] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1982'. [ 276.680328][T12490] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send start command (2), -110 [ 276.685344][ T5828] usb 7-1: USB disconnect, device number 4 [ 276.699953][T12593] ucma_write: process 1285 (syz.1.1983) changed security contexts after opening file descriptor, this is not allowed. [ 276.712646][ T5828] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 276.724127][ T5828] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 276.732622][ T5828] ti_usb_3410_5052 7-1:2.0: device disconnected [ 276.754716][T12574] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1980'. [ 276.820606][ T42] audit: type=1400 audit(1785500677.589:616): avc: denied { write } for pid=12594 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 276.874662][ T42] audit: type=1400 audit(1785500677.639:617): avc: denied { write } for pid=12599 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 277.120916][T12610] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=12610 comm=syz.1.1987 [ 277.167461][T12612] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12612 comm=syz.1.1988 [ 277.410468][T12624] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1990'. [ 277.614419][T12634] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1993'. [ 277.650371][ T5828] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 277.799320][ T5828] usb 7-1: Using ep0 maxpacket: 8 [ 277.810677][ T5828] usb 7-1: config 0 has an invalid interface number: 143 but max is 0 [ 277.813492][ T5828] usb 7-1: config 0 has no interface number 0 [ 277.816898][ T5828] usb 7-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 277.827819][ T5828] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.834236][ T5828] usb 7-1: config 0 descriptor?? [ 277.911054][T12639] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1994'. [ 277.923570][T12639] faux_driver vgem: [drm] Unknown color mode 7; guessing buffer size. [ 277.960908][ T5828] viperboard 7-1:0.143: version 0.00 found at bus 007 address 005 [ 277.995219][ T5828] viperboard-i2c viperboard-i2c.3.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 278.001035][ T5828] viperboard-i2c viperboard-i2c.3.auto: probe with driver viperboard-i2c failed with error -5 [ 278.038886][T12621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.043318][T12621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.069562][T12641] FAULT_INJECTION: forcing a failure. [ 278.069562][T12641] name failslab, interval 1, probability 0, space 0, times 0 [ 278.073259][T12641] CPU: 2 UID: 0 PID: 12641 Comm: syz.1.1995 Not tainted syzkaller #0 PREEMPT(full) [ 278.073274][T12641] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 278.073281][T12641] Call Trace: [ 278.073285][T12641] [ 278.073289][T12641] dump_stack_lvl+0x100/0x190 [ 278.073307][T12641] should_fail_ex.cold+0x5/0xa [ 278.073321][T12641] should_failslab+0xc2/0x120 [ 278.073335][T12641] __kmalloc_noprof+0xfc/0x820 [ 278.073348][T12641] ? nla_strdup+0xc3/0x150 [ 278.073366][T12641] nla_strdup+0xc3/0x150 [ 278.073382][T12641] nf_tables_newset+0x2560/0x4250 [ 278.073403][T12641] ? net_generic+0xea/0x2a0 [ 278.073412][T12641] ? __pfx_nf_tables_newset+0x10/0x10 [ 278.073429][T12641] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 278.073443][T12641] ? __nla_validate_parse+0x1e7/0x28b0 [ 278.073463][T12641] ? __nla_parse+0x40/0x60 [ 278.073475][T12641] nfnetlink_rcv_batch+0x1410/0x2880 [ 278.073497][T12641] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 278.073519][T12641] ? avc_has_perm_noaudit+0x145/0x3b0 [ 278.073563][T12641] ? __nla_parse+0x40/0x60 [ 278.073575][T12641] nfnetlink_rcv+0x3bd/0x440 [ 278.073588][T12641] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 278.073604][T12641] netlink_unicast+0x585/0x850 [ 278.073617][T12641] ? __pfx_netlink_unicast+0x10/0x10 [ 278.073631][T12641] netlink_sendmsg+0x8b0/0xda0 [ 278.073643][T12641] ? __pfx_netlink_sendmsg+0x10/0x10 [ 278.073655][T12641] ? selinux_socket_sendmsg+0x198/0x2f0 [ 278.073673][T12641] ____sys_sendmsg+0xa4d/0xbe0 [ 278.073689][T12641] ? __pfx_netlink_sendmsg+0x10/0x10 [ 278.073700][T12641] ? __pfx_____sys_sendmsg+0x10/0x10 [ 278.073722][T12641] ___sys_sendmsg+0x190/0x1e0 [ 278.073743][T12641] ? __pfx____sys_sendmsg+0x10/0x10 [ 278.073758][T12641] ? __lock_acquire+0x49f/0x1a40 [ 278.073772][T12641] ? get_pid_task+0x106/0x250 [ 278.073797][T12641] __sys_sendmsg+0x160/0x210 [ 278.073810][T12641] ? __pfx___sys_sendmsg+0x10/0x10 [ 278.073830][T12641] do_syscall_64+0x115/0x870 [ 278.073843][T12641] ? clear_bhb_loop+0x40/0x90 [ 278.073856][T12641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.073867][T12641] RIP: 0033:0x7f73e9f9e019 [ 278.073877][T12641] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 278.073887][T12641] RSP: 002b:00007f73eaef2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 278.073898][T12641] RAX: ffffffffffffffda RBX: 00007f73ea225fa0 RCX: 00007f73e9f9e019 [ 278.073904][T12641] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 278.073911][T12641] RBP: 00007f73eaef2090 R08: 0000000000000000 R09: 0000000000000000 [ 278.073917][T12641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 278.073923][T12641] R13: 00007f73ea226038 R14: 00007f73ea225fa0 R15: 00007ffc85d2eb28 [ 278.073937][T12641] [ 278.101821][ T5828] usb 7-1: USB disconnect, device number 5 [ 278.382038][T12647] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1997'. [ 278.396418][T12651] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1996'. [ 278.482593][T12653] Line length is too long: Should be less than 4094 [ 278.503660][T12653] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1998'. [ 278.627809][ C0] net_ratelimit: 81587 callbacks suppressed [ 278.627824][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 278.627900][ C3] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.628040][ C2] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 278.628180][ C2] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 278.628947][ C2] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 278.629082][ C2] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 278.629955][ C2] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 278.630094][ C2] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 278.630155][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 278.630292][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 278.639278][T12655] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1999'. [ 278.741689][T12659] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2002'. [ 279.088598][T12661] tmpfs: Unknown parameter 'mðÍ' [ 279.327010][T12675] netlink: 'syz.2.2006': attribute type 1 has an invalid length. [ 279.468764][T12681] FAULT_INJECTION: forcing a failure. [ 279.468764][T12681] name failslab, interval 1, probability 0, space 0, times 0 [ 279.501376][T12681] CPU: 2 UID: 0 PID: 12681 Comm: syz.1.2009 Not tainted syzkaller #0 PREEMPT(full) [ 279.501394][T12681] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 279.501400][T12681] Call Trace: [ 279.501411][T12681] [ 279.501416][T12681] dump_stack_lvl+0x100/0x190 [ 279.501446][T12681] should_fail_ex.cold+0x5/0xa [ 279.501461][T12681] should_failslab+0xc2/0x120 [ 279.501475][T12681] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 279.501490][T12681] ? security_netlbl_sid_to_secattr+0x1d8/0x4d0 [ 279.501511][T12681] kstrdup+0x51/0xe0 [ 279.501546][T12681] security_netlbl_sid_to_secattr+0x1d8/0x4d0 [ 279.501562][T12681] selinux_netlbl_sock_genattr+0x128/0x4e0 [ 279.501579][T12681] selinux_netlbl_socket_post_create+0xb0/0x1c0 [ 279.501598][T12681] selinux_socket_post_create+0x368/0x7e0 [ 279.501614][T12681] ? __pfx_selinux_socket_post_create+0x10/0x10 [ 279.501629][T12681] ? udp_init_sock+0x384/0x450 [ 279.501654][T12681] ? inet_create+0x962/0x1060 [ 279.501669][T12681] security_socket_post_create+0xaf/0x270 [ 279.501686][T12681] __sock_create+0x70b/0x860 [ 279.501711][T12681] udp_sock_create4+0xa6/0x450 [ 279.501723][T12681] ? __pfx_udp_sock_create4+0x10/0x10 [ 279.501735][T12681] ? lockdep_hardirqs_on+0x78/0x100 [ 279.501754][T12681] ? crng_make_state+0x2b0/0x6c0 [ 279.501772][T12681] rxrpc_open_socket+0x512/0x6e0 [ 279.501797][T12681] ? __pfx_rxrpc_open_socket+0x10/0x10 [ 279.501825][T12681] ? rcu_is_watching+0x12/0xc0 [ 279.501843][T12681] rxrpc_lookup_local+0xac7/0x1220 [ 279.501863][T12681] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 279.501884][T12681] rxrpc_sendmsg+0x34a/0x680 [ 279.501899][T12681] ____sys_sendmsg+0xa4d/0xbe0 [ 279.501914][T12681] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 279.501926][T12681] ? __pfx_____sys_sendmsg+0x10/0x10 [ 279.501948][T12681] ___sys_sendmsg+0x190/0x1e0 [ 279.501965][T12681] ? __pfx____sys_sendmsg+0x10/0x10 [ 279.501981][T12681] ? __lock_acquire+0x49f/0x1a40 [ 279.501994][T12681] ? get_pid_task+0x106/0x250 [ 279.502019][T12681] __sys_sendmsg+0x160/0x210 [ 279.502032][T12681] ? __pfx___sys_sendmsg+0x10/0x10 [ 279.502053][T12681] do_syscall_64+0x115/0x870 [ 279.502065][T12681] ? clear_bhb_loop+0x40/0x90 [ 279.502078][T12681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.502100][T12681] RIP: 0033:0x7f73e9f9e019 [ 279.502111][T12681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 279.502122][T12681] RSP: 002b:00007f73eaef2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 279.502147][T12681] RAX: ffffffffffffffda RBX: 00007f73ea225fa0 RCX: 00007f73e9f9e019 [ 279.502154][T12681] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 279.502160][T12681] RBP: 00007f73eaef2090 R08: 0000000000000000 R09: 0000000000000000 [ 279.502165][T12681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 279.502171][T12681] R13: 00007f73ea226038 R14: 00007f73ea225fa0 R15: 00007ffc85d2eb28 [ 279.502186][T12681] [ 279.507094][T12675] bond1: option mode: invalid value (8) [ 279.718754][T12675] bond1 (unregistering): Released all slaves [ 280.587961][T12715] usb usb8: usbfs: process 12715 (syz.3.2018) did not claim interface 0 before use [ 280.591609][ T42] kauditd_printk_skb: 15 callbacks suppressed [ 280.591619][ T42] audit: type=1400 audit(1785500681.359:633): avc: denied { bind } for pid=12714 comm="syz.3.2018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 280.650533][T12717] FAULT_INJECTION: forcing a failure. [ 280.650533][T12717] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 280.654839][T12717] CPU: 1 UID: 0 PID: 12717 Comm: syz.3.2019 Not tainted syzkaller #0 PREEMPT(full) [ 280.654855][T12717] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 280.654861][T12717] Call Trace: [ 280.654865][T12717] [ 280.654870][T12717] dump_stack_lvl+0x100/0x190 [ 280.654889][T12717] should_fail_ex.cold+0x5/0xa [ 280.654909][T12717] _copy_from_iter+0x1f4/0x1690 [ 280.654927][T12717] ? _copy_from_iter+0x270/0x1690 [ 280.654941][T12717] ? __pfx__copy_from_iter+0x10/0x10 [ 280.654958][T12717] ? __pfx__copy_from_iter+0x10/0x10 [ 280.654972][T12717] ? _copy_from_iter+0x270/0x1690 [ 280.654989][T12717] copy_page_from_iter+0x238/0x300 [ 280.655005][T12717] skb_copy_datagram_from_iter+0x399/0x720 [ 280.655022][T12717] packet_sendmsg+0x227e/0x5100 [ 280.655048][T12717] ? avc_has_perm_noaudit+0x33a/0x3b0 [ 280.655067][T12717] ? sock_has_perm+0x25a/0x2f0 [ 280.655080][T12717] ? __pfx_sock_has_perm+0x10/0x10 [ 280.655098][T12717] ? __pfx_packet_sendmsg+0x10/0x10 [ 280.655109][T12717] ? __might_fault+0xc5/0x140 [ 280.655123][T12717] ? selinux_socket_sendmsg+0x198/0x2f0 [ 280.655141][T12717] __sys_sendto+0x48b/0x4e0 [ 280.655153][T12717] ? __pfx_packet_sendmsg+0x10/0x10 [ 280.655165][T12717] ? __pfx___sys_sendto+0x10/0x10 [ 280.655181][T12717] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 280.655200][T12717] ? ksys_write+0x1ac/0x250 [ 280.655222][T12717] ? __pfx_ksys_write+0x10/0x10 [ 280.655249][T12717] __x64_sys_sendto+0xe0/0x1c0 [ 280.655265][T12717] ? do_syscall_64+0x90/0x870 [ 280.655286][T12717] ? lockdep_hardirqs_on+0x78/0x100 [ 280.655304][T12717] do_syscall_64+0x115/0x870 [ 280.655324][T12717] ? clear_bhb_loop+0x40/0x90 [ 280.655343][T12717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.655355][T12717] RIP: 0033:0x7fa5ded9e019 [ 280.655364][T12717] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.655375][T12717] RSP: 002b:00007fa5dfc95028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 280.655387][T12717] RAX: ffffffffffffffda RBX: 00007fa5df025fa0 RCX: 00007fa5ded9e019 [ 280.655395][T12717] RDX: 000000000001000a RSI: 0000200000000180 RDI: 0000000000000003 [ 280.655403][T12717] RBP: 00007fa5dfc95090 R08: 0000200000000140 R09: 0000000000000014 [ 280.655409][T12717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 280.655415][T12717] R13: 00007fa5df026038 R14: 00007fa5df025fa0 R15: 00007ffcbe1b3808 [ 280.655429][T12717] [ 281.843239][ T42] audit: type=1400 audit(1785500682.609:634): avc: denied { unmount } for pid=5740 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 282.688665][ T5094] Bluetooth: hci3: command 0x0405 tx timeout [ 283.370251][T12746] FAULT_INJECTION: forcing a failure. [ 283.370251][T12746] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 283.408803][T12746] CPU: 0 UID: 0 PID: 12746 Comm: syz.3.2026 Not tainted syzkaller #0 PREEMPT(full) [ 283.408820][T12746] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 283.408827][T12746] Call Trace: [ 283.408831][T12746] [ 283.408835][T12746] dump_stack_lvl+0x100/0x190 [ 283.408854][T12746] should_fail_ex.cold+0x5/0xa [ 283.408866][T12746] ? prepare_alloc_pages+0x16d/0x5f0 [ 283.408882][T12746] should_fail_alloc_page+0xeb/0x140 [ 283.408897][T12746] prepare_alloc_pages+0x1f0/0x5f0 [ 283.408914][T12746] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 283.408928][T12746] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 283.408942][T12746] ? folio_batch_move_lru+0x3a9/0xc00 [ 283.408960][T12746] ? __pfx_lru_add+0x10/0x10 [ 283.408970][T12746] ? __pfx_folio_batch_move_lru+0x10/0x10 [ 283.408987][T12746] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 283.408998][T12746] ? gup_fast_fallback+0x16dc/0x2790 [ 283.409017][T12746] ? __lock_acquire+0x49f/0x1a40 [ 283.409030][T12746] ? __lock_acquire+0x49f/0x1a40 [ 283.409061][T12746] ? lock_acquire+0x1b9/0x370 [ 283.409073][T12746] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 283.409087][T12746] ? policy_nodemask+0xed/0x4f0 [ 283.409103][T12746] alloc_pages_mpol+0x1fb/0x540 [ 283.409118][T12746] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 283.409136][T12746] folio_alloc_mpol_noprof+0x36/0x260 [ 283.409154][T12746] vma_alloc_folio_noprof+0xed/0x1d0 [ 283.409170][T12746] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 283.409191][T12746] do_anonymous_page+0xb2b/0x2080 [ 283.409212][T12746] ? rcu_read_unlock+0x2d/0xb0 [ 283.409226][T12746] __handle_mm_fault+0x1d2c/0x2a00 [ 283.409244][T12746] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 283.409261][T12746] ? __pfx___handle_mm_fault+0x10/0x10 [ 283.409279][T12746] ? pte_offset_map_lock+0x174/0x320 [ 283.409292][T12746] ? find_held_lock+0x2b/0x80 [ 283.409306][T12746] ? follow_page_pte+0x4d0/0x13f0 [ 283.409323][T12746] handle_mm_fault+0x37b/0xa30 [ 283.409342][T12746] __get_user_pages+0x1178/0x32a0 [ 283.409360][T12746] ? down_read_killable+0x35e/0x520 [ 283.409375][T12746] ? __pfx___get_user_pages+0x10/0x10 [ 283.409394][T12746] __gup_longterm_locked+0x87d/0x16f0 [ 283.409408][T12746] ? is_bpf_text_address+0x8a/0x1a0 [ 283.409425][T12746] ? __pfx___gup_longterm_locked+0x10/0x10 [ 283.409442][T12746] ? find_held_lock+0x2b/0x80 [ 283.409451][T12746] ? gup_fast_fallback+0x1467/0x2790 [ 283.409465][T12746] ? sanity_check_pinned_pages+0x4f2/0x8b0 [ 283.409480][T12746] gup_fast_fallback+0x16dc/0x2790 [ 283.409521][T12746] ? __pfx_gup_fast_fallback+0x10/0x10 [ 283.409537][T12746] ? __x64_sys_getsockopt+0xbd/0x160 [ 283.409550][T12746] ? do_syscall_64+0x115/0x870 [ 283.409562][T12746] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.409579][T12746] pin_user_pages_fast+0xa7/0xf0 [ 283.409593][T12746] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 283.409612][T12746] iov_iter_extract_pages+0xac8/0x2100 [ 283.409631][T12746] ? rcu_is_watching+0x12/0xc0 [ 283.409647][T12746] ? __pfx_iov_iter_extract_pages+0x10/0x10 [ 283.409661][T12746] ? __kasan_kmalloc+0xaa/0xb0 [ 283.409674][T12746] ? __kvmalloc_node_noprof+0x36d/0x970 [ 283.409688][T12746] ? rds_info_getsockopt+0x441/0x610 [ 283.409714][T12746] rds_info_getsockopt+0x46f/0x610 [ 283.409730][T12746] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 283.409747][T12746] ? find_held_lock+0x2b/0x80 [ 283.409762][T12746] rds_getsockopt+0x126/0x310 [ 283.409773][T12746] ? __pfx_rds_getsockopt+0x10/0x10 [ 283.409782][T12746] ? copy_from_sockptr_offset.constprop.0+0xe2/0x150 [ 283.409800][T12746] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 283.409821][T12746] do_sock_getsockopt+0x3f6/0x6e0 [ 283.409839][T12746] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 283.409854][T12746] ? rcu_read_lock_any_held+0x6a/0xa0 [ 283.409868][T12746] ? find_held_lock+0x2b/0x80 [ 283.409881][T12746] ? __fget_files+0x21f/0x3d0 [ 283.409895][T12746] __sys_getsockopt+0x148/0x260 [ 283.409912][T12746] ? __x64_sys_getsockopt+0xbd/0x160 [ 283.409924][T12746] __x64_sys_getsockopt+0xbd/0x160 [ 283.409936][T12746] ? do_syscall_64+0x90/0x870 [ 283.409948][T12746] ? lockdep_hardirqs_on+0x78/0x100 [ 283.409960][T12746] do_syscall_64+0x115/0x870 [ 283.409971][T12746] ? clear_bhb_loop+0x40/0x90 [ 283.409984][T12746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.409995][T12746] RIP: 0033:0x7fa5ded9e019 [ 283.410005][T12746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 283.410015][T12746] RSP: 002b:00007fa5dfc95028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 283.410027][T12746] RAX: ffffffffffffffda RBX: 00007fa5df025fa0 RCX: 00007fa5ded9e019 [ 283.410033][T12746] RDX: 000000000000271c RSI: 0000200000000114 RDI: 0000000000000003 [ 283.410039][T12746] RBP: 00007fa5dfc95090 R08: 0000200000000000 R09: 0000000000000000 [ 283.410046][T12746] R10: 0000200000c35fff R11: 0000000000000246 R12: 0000000000000002 [ 283.410051][T12746] R13: 00007fa5df026038 R14: 00007fa5df025fa0 R15: 00007ffcbe1b3808 [ 283.410066][T12746] [ 283.637845][ C0] net_ratelimit: 82256 callbacks suppressed [ 283.637861][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 283.637906][ C3] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 283.638406][ C2] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 283.638546][ C2] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 283.639354][ C2] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 283.639501][ C2] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 283.639934][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 283.640270][ C2] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 283.640412][ C2] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 283.641160][ C2] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 283.806188][T12766] syzkaller0: entered promiscuous mode [ 283.810160][T12766] syzkaller0: entered allmulticast mode [ 284.217845][ T42] audit: type=1400 audit(1785500684.979:635): avc: denied { getopt } for pid=12772 comm="syz.2.2036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 284.628663][T12797] __nla_validate_parse: 2 callbacks suppressed [ 284.628676][T12797] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2042'. [ 284.883186][ T1046] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 285.177029][ T1046] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 285.191284][ T1046] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 285.265438][ T1046] usb 6-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00 [ 285.274072][ T1046] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 285.276560][ T1046] usb 6-1: Product: syz [ 285.283520][ T1046] usb 6-1: Manufacturer: syz [ 285.303680][T12809] syzkaller0: entered promiscuous mode [ 285.305525][T12809] syzkaller0: entered allmulticast mode [ 285.390622][ T1046] iuu_phoenix 6-1:1.0: iuu_phoenix converter detected [ 285.429048][T12811] syzkaller0: entered promiscuous mode [ 285.430923][T12811] syzkaller0: entered allmulticast mode [ 285.435848][T12811] FAULT_INJECTION: forcing a failure. [ 285.435848][T12811] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 285.440697][T12811] CPU: 1 UID: 0 PID: 12811 Comm: syz.2.2046 Not tainted syzkaller #0 PREEMPT(full) [ 285.440711][T12811] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 285.440717][T12811] Call Trace: [ 285.440721][T12811] [ 285.440725][T12811] dump_stack_lvl+0x100/0x190 [ 285.440742][T12811] should_fail_ex.cold+0x5/0xa [ 285.440757][T12811] _copy_from_iter+0x1f4/0x1690 [ 285.440774][T12811] ? _copy_from_iter+0x270/0x1690 [ 285.440788][T12811] ? __pfx__copy_from_iter+0x10/0x10 [ 285.440812][T12811] ? __pfx__copy_from_iter+0x10/0x10 [ 285.440826][T12811] ? _copy_from_iter+0x270/0x1690 [ 285.440843][T12811] copy_page_from_iter+0x238/0x300 [ 285.440860][T12811] skb_copy_datagram_from_iter+0x399/0x720 [ 285.440876][T12811] packet_sendmsg+0x227e/0x5100 [ 285.440890][T12811] ? avc_has_perm_noaudit+0x33a/0x3b0 [ 285.440908][T12811] ? sock_has_perm+0x25a/0x2f0 [ 285.440922][T12811] ? __pfx_sock_has_perm+0x10/0x10 [ 285.440940][T12811] ? __pfx_packet_sendmsg+0x10/0x10 [ 285.440956][T12811] ? selinux_socket_sendmsg+0x198/0x2f0 [ 285.440991][T12811] ____sys_sendmsg+0xa4d/0xbe0 [ 285.441008][T12811] ? __pfx_packet_sendmsg+0x10/0x10 [ 285.441021][T12811] ? __pfx_____sys_sendmsg+0x10/0x10 [ 285.441043][T12811] ___sys_sendmsg+0x190/0x1e0 [ 285.441061][T12811] ? __pfx____sys_sendmsg+0x10/0x10 [ 285.441076][T12811] ? __lock_acquire+0x49f/0x1a40 [ 285.441090][T12811] ? get_pid_task+0x106/0x250 [ 285.441114][T12811] __sys_sendmsg+0x160/0x210 [ 285.441127][T12811] ? __pfx___sys_sendmsg+0x10/0x10 [ 285.441147][T12811] do_syscall_64+0x115/0x870 [ 285.441160][T12811] ? clear_bhb_loop+0x40/0x90 [ 285.441173][T12811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.441184][T12811] RIP: 0033:0x7fca49d9e019 [ 285.441193][T12811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.441204][T12811] RSP: 002b:00007fca4ad42028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 285.441215][T12811] RAX: ffffffffffffffda RBX: 00007fca4a025fa0 RCX: 00007fca49d9e019 [ 285.441222][T12811] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 285.441228][T12811] RBP: 00007fca4ad42090 R08: 0000000000000000 R09: 0000000000000000 [ 285.441234][T12811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 285.441240][T12811] R13: 00007fca4a026038 R14: 00007fca4a025fa0 R15: 00007ffeb6881dc8 [ 285.441253][T12811] [ 285.537659][ T1046] usb 6-1: iuu_phoenix converter now attached to ttyUSB0 [ 285.592947][ T42] audit: type=1400 audit(1785500686.359:636): avc: denied { write } for pid=12792 comm="syz.1.2041" name="sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 285.609830][T12815] sg_write: data in/out 63015/14 bytes for SCSI command 0x0-- guessing data in; [ 285.609830][T12815] program syz.1.2041 not setting count and/or reply_len properly [ 285.682903][T12814] tcf_pedit_act: 7 callbacks suppressed [ 285.682914][T12814] tc action pedit unable to extract header offset for header type (0x4) [ 285.688531][T12814] tc action pedit unable to extract header offset for header type (0x4) [ 285.691173][T12814] tc action pedit unable to extract header offset for header type (0x4) [ 285.693793][T12814] tc action pedit unable to extract header offset for header type (0x4) [ 285.696346][T12814] tc action pedit unable to extract header offset for header type (0x4) [ 285.698947][T12814] tc action pedit unable to extract header offset for header type (0x4) [ 285.701610][T12814] tc action pedit unable to extract header offset for header type (0x4) [ 285.704200][T12814] tc action pedit unable to extract header offset for header type (0x4) [ 285.706769][T12814] tc action pedit unable to extract header offset for header type (0x4) [ 285.709368][T12814] tc action pedit unable to extract header offset for header type (0x4) [ 287.754987][T12800] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 287.830073][ T5828] usb 6-1: USB disconnect, device number 6 [ 287.851529][ T5828] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 287.861798][ T5828] iuu_phoenix 6-1:1.0: device disconnected [ 287.925070][ T42] audit: type=1400 audit(1785500688.689:637): avc: denied { mounton } for pid=12826 comm="syz.1.2051" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 287.932015][T12827] overlayfs: regular lower layers cannot follow data lower layers [ 288.020828][ T60] Bluetooth: hci4: Frame reassembly failed (-84) [ 288.023469][ T42] audit: type=1400 audit(1785500688.789:638): avc: denied { read } for pid=12828 comm="syz.1.2052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 288.193655][ T42] audit: type=1400 audit(1785500688.959:639): avc: denied { create } for pid=12824 comm="syz.2.2049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 288.298582][T12842] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2055'. [ 288.330797][T12844] syzkaller0: entered promiscuous mode [ 288.332635][T12844] syzkaller0: entered allmulticast mode [ 288.571975][T12846] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2057'. [ 288.647824][ C3] net_ratelimit: 80822 callbacks suppressed [ 288.647836][ C3] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 288.647884][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 288.648336][ C2] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 288.648475][ C2] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 288.649219][ C2] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 288.649354][ C2] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 288.649893][ C3] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 288.650114][ C2] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 288.650252][ C2] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 288.651055][ C2] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 289.030789][ T42] audit: type=1400 audit(1785500689.799:640): avc: denied { accept } for pid=12858 comm="syz.3.2061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 289.090427][T12861] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2062'. [ 289.332130][T12867] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12867 comm=syz.0.2064 [ 289.494698][T12875] FAULT_INJECTION: forcing a failure. [ 289.494698][T12875] name failslab, interval 1, probability 0, space 0, times 0 [ 289.495660][ T1046] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 289.501055][T12875] CPU: 1 UID: 0 PID: 12875 Comm: syz.2.2068 Not tainted syzkaller #0 PREEMPT(full) [ 289.501072][T12875] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 289.501079][T12875] Call Trace: [ 289.501084][T12875] [ 289.501088][T12875] dump_stack_lvl+0x100/0x190 [ 289.501107][T12875] should_fail_ex.cold+0x5/0xa [ 289.501121][T12875] should_failslab+0xc2/0x120 [ 289.501136][T12875] __kmalloc_noprof+0xfc/0x820 [ 289.501174][T12875] ? nla_strdup+0xc3/0x150 [ 289.501193][T12875] nla_strdup+0xc3/0x150 [ 289.501211][T12875] nf_tables_newset+0x2560/0x4250 [ 289.501241][T12875] ? net_generic+0xea/0x2a0 [ 289.501252][T12875] ? __pfx_nf_tables_newset+0x10/0x10 [ 289.501269][T12875] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 289.501288][T12875] ? __nla_validate_parse+0x1e7/0x28b0 [ 289.501311][T12875] ? __nla_parse+0x40/0x60 [ 289.501323][T12875] nfnetlink_rcv_batch+0x1410/0x2880 [ 289.501350][T12875] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 289.501365][T12875] ? find_held_lock+0x2b/0x80 [ 289.501384][T12875] ? avc_has_perm_noaudit+0x145/0x3b0 [ 289.501412][T12875] ? __nla_parse+0x40/0x60 [ 289.501424][T12875] nfnetlink_rcv+0x3bd/0x440 [ 289.501438][T12875] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 289.501457][T12875] netlink_unicast+0x585/0x850 [ 289.501499][T12875] ? __pfx_netlink_unicast+0x10/0x10 [ 289.501516][T12875] netlink_sendmsg+0x8b0/0xda0 [ 289.501529][T12875] ? __pfx_netlink_sendmsg+0x10/0x10 [ 289.501542][T12875] ? selinux_socket_sendmsg+0x198/0x2f0 [ 289.501561][T12875] ____sys_sendmsg+0xa4d/0xbe0 [ 289.501578][T12875] ? __pfx_netlink_sendmsg+0x10/0x10 [ 289.501591][T12875] ? __pfx_____sys_sendmsg+0x10/0x10 [ 289.501615][T12875] ___sys_sendmsg+0x190/0x1e0 [ 289.501633][T12875] ? __pfx____sys_sendmsg+0x10/0x10 [ 289.501650][T12875] ? __lock_acquire+0x49f/0x1a40 [ 289.501663][T12875] ? get_pid_task+0x106/0x250 [ 289.501691][T12875] __sys_sendmsg+0x160/0x210 [ 289.501705][T12875] ? __pfx___sys_sendmsg+0x10/0x10 [ 289.501727][T12875] do_syscall_64+0x115/0x870 [ 289.501740][T12875] ? clear_bhb_loop+0x40/0x90 [ 289.501754][T12875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.501766][T12875] RIP: 0033:0x7fca49d9e019 [ 289.501776][T12875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 289.501786][T12875] RSP: 002b:00007fca4ad42028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 289.501798][T12875] RAX: ffffffffffffffda RBX: 00007fca4a025fa0 RCX: 00007fca49d9e019 [ 289.501805][T12875] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 289.501811][T12875] RBP: 00007fca4ad42090 R08: 0000000000000000 R09: 0000000000000000 [ 289.501818][T12875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 289.501824][T12875] R13: 00007fca4a026038 R14: 00007fca4a025fa0 R15: 00007ffeb6881dc8 [ 289.501838][T12875] [ 289.796077][ T42] audit: type=1400 audit(1785500690.559:641): avc: denied { map } for pid=12876 comm="syz.2.2069" path="socket:[36503]" dev="sockfs" ino=36503 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 289.837646][T12877] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2069'. [ 289.843677][T12877] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2069'. [ 289.897634][ T42] audit: type=1400 audit(1785500690.659:642): avc: denied { write } for pid=12878 comm="syz.2.2070" name="/" dev="9p" ino=78390029 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 289.905852][ T42] audit: type=1400 audit(1785500690.669:643): avc: denied { add_name } for pid=12878 comm="syz.2.2070" name="cpuset.effective_cpus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 289.916063][ T42] audit: type=1400 audit(1785500690.669:644): avc: denied { create } for pid=12878 comm="syz.2.2070" name="cpuset.effective_cpus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 289.935799][ T42] audit: type=1400 audit(1785500690.669:645): avc: denied { associate } for pid=12878 comm="syz.2.2070" name="cpuset.effective_cpus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 289.961812][ T42] audit: type=1400 audit(1785500690.729:646): avc: denied { read append } for pid=12878 comm="syz.2.2070" path="/478/file0/cpuset.effective_cpus" dev="9p" ino=78395271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 289.994676][ T1046] usb 8-1: Using ep0 maxpacket: 8 [ 290.020090][T12884] libceph: resolve '½@½Ée2²âOAq§¨­cz' (ret=-3): failed [ 290.040183][ T5094] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 290.064911][ T1046] usb 8-1: config index 0 descriptor too short (expected 5924, got 36) [ 290.067502][ T1046] usb 8-1: config 250 has an invalid interface number: 228 but max is -1 [ 290.087544][ T1046] usb 8-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 290.096220][ T1046] usb 8-1: config 250 has no interface number 0 [ 290.119420][T12888] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 290.124632][T12888] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 290.145965][ T1046] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 290.170170][ T1046] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 290.173407][ T1046] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 30768, setting to 1024 [ 290.187723][ T1046] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 290.248825][ T1046] usb 8-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 290.252965][ T1046] usb 8-1: config 250 interface 228 has no altsetting 0 [ 290.318824][ T1046] usb 8-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 290.327320][ T1046] usb 8-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 290.340329][ T1046] usb 8-1: Product: syz [ 290.341691][ T1046] usb 8-1: SerialNumber: syz [ 290.362208][T12894] netlink: 'syz.2.2072': attribute type 16 has an invalid length. [ 290.364860][T12894] netlink: 'syz.2.2072': attribute type 3 has an invalid length. [ 290.367340][T12894] netlink: 'syz.2.2072': attribute type 1 has an invalid length. [ 290.370128][T12894] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2072'. [ 290.422058][T12896] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2075'. [ 290.499743][ T1046] hub 8-1:250.228: bad descriptor, ignoring hub [ 290.501761][ T1046] hub 8-1:250.228: probe with driver hub failed with error -5 [ 290.668955][ T1046] usblp 8-1:250.228: usblp0: USB Bidirectional printer dev 9 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 290.683805][T12907] tipc: Can't bind to reserved service type 2 [ 290.989449][ T1046] usb 8-1: USB disconnect, device number 9 [ 290.999430][ T1046] usblp0: removed [ 291.577031][ T1046] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 291.807021][ T1046] usb 8-1: Using ep0 maxpacket: 8 [ 291.876453][ T1046] usb 8-1: config index 0 descriptor too short (expected 5924, got 36) [ 291.898887][ T1046] usb 8-1: config 250 has an invalid interface number: 228 but max is -1 [ 291.916960][ T1046] usb 8-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 291.931713][ T1046] usb 8-1: config 250 has no interface number 0 [ 291.931882][T12929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.933751][ T1046] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 291.933768][ T1046] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 291.933781][ T1046] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 30768, setting to 1024 [ 291.941217][T12929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.990893][ T1046] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 292.004501][ T1046] usb 8-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 292.028135][ T1046] usb 8-1: config 250 interface 228 has no altsetting 0 [ 292.086898][ T1046] usb 8-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 292.109531][ T1046] usb 8-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 292.117718][ T1046] usb 8-1: Product: syz [ 292.139809][ T1046] usb 8-1: SerialNumber: syz [ 292.167994][ T5828] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 292.201192][T12932] FAULT_INJECTION: forcing a failure. [ 292.201192][T12932] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 292.205244][T12932] CPU: 2 UID: 0 PID: 12932 Comm: syz.0.2086 Not tainted syzkaller #0 PREEMPT(full) [ 292.205260][T12932] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 292.205266][T12932] Call Trace: [ 292.205270][T12932] [ 292.205275][T12932] dump_stack_lvl+0x100/0x190 [ 292.205293][T12932] should_fail_ex.cold+0x5/0xa [ 292.205307][T12932] _copy_to_user+0x32/0xd0 [ 292.205323][T12932] simple_read_from_buffer+0xcb/0x170 [ 292.205336][T12932] proc_fail_nth_read+0x1af/0x230 [ 292.205353][T12932] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 292.205370][T12932] ? rw_verify_area+0xce/0x6d0 [ 292.205385][T12932] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 292.205401][T12932] vfs_read+0x1e4/0xb40 [ 292.205419][T12932] ? __pfx_vfs_read+0x10/0x10 [ 292.205434][T12932] ? __fget_files+0x215/0x3d0 [ 292.205448][T12932] ? __fget_files+0x21f/0x3d0 [ 292.205480][T12932] ksys_read+0x12a/0x250 [ 292.205498][T12932] ? __pfx_ksys_read+0x10/0x10 [ 292.205518][T12932] do_syscall_64+0x115/0x870 [ 292.205531][T12932] ? clear_bhb_loop+0x40/0x90 [ 292.205544][T12932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.205555][T12932] RIP: 0033:0x7fce13b5e84e [ 292.205565][T12932] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 292.205576][T12932] RSP: 002b:00007fce14995fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 292.205587][T12932] RAX: ffffffffffffffda RBX: 00007fce149966c0 RCX: 00007fce13b5e84e [ 292.205594][T12932] RDX: 000000000000000f RSI: 00007fce149960a0 RDI: 0000000000000004 [ 292.205600][T12932] RBP: 00007fce14996090 R08: 0000000000000000 R09: 0000000000000000 [ 292.205606][T12932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 292.205612][T12932] R13: 00007fce13e26038 R14: 00007fce13e25fa0 R15: 00007ffed3ed9468 [ 292.205625][T12932] [ 292.273766][ T1046] usb 8-1: can't set config #250, error -71 [ 292.291862][ T1046] usb 8-1: USB disconnect, device number 10 [ 292.343751][ T5828] usb 6-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 292.352302][ T5828] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.359177][ T5828] usb 6-1: Product: syz [ 292.360801][ T5828] usb 6-1: Manufacturer: syz [ 292.375980][ T5828] usb 6-1: SerialNumber: syz [ 292.426002][ T5828] ti_usb_3410_5052 6-1:2.0: TI USB 5052 2 port adapter converter detected [ 292.455200][ T5828] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 292.465494][ T5828] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 292.667347][T12952] syz.0.2092 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 292.921245][T12960] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2094'. [ 292.926537][T12960] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2094'. [ 292.982484][ T42] kauditd_printk_skb: 2 callbacks suppressed [ 292.982496][ T42] audit: type=1400 audit(1785500693.749:649): avc: denied { accept } for pid=12966 comm="syz.2.2097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 293.074011][T12972] FAULT_INJECTION: forcing a failure. [ 293.074011][T12972] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 293.080721][T12972] CPU: 1 UID: 0 PID: 12972 Comm: syz.2.2099 Not tainted syzkaller #0 PREEMPT(full) [ 293.080738][T12972] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 293.080745][T12972] Call Trace: [ 293.080749][T12972] [ 293.080754][T12972] dump_stack_lvl+0x100/0x190 [ 293.080786][T12972] should_fail_ex.cold+0x5/0xa [ 293.080801][T12972] _copy_from_user+0x2e/0xd0 [ 293.080818][T12972] copy_ns_id_req+0xbc/0x210 [ 293.080835][T12972] __x64_sys_listns+0x1d1/0x430 [ 293.080853][T12972] ? __pfx___x64_sys_listns+0x10/0x10 [ 293.080872][T12972] ? fput+0x79/0x100 [ 293.080891][T12972] do_syscall_64+0x115/0x870 [ 293.080904][T12972] ? clear_bhb_loop+0x40/0x90 [ 293.080917][T12972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.080928][T12972] RIP: 0033:0x7fca49d9e019 [ 293.080938][T12972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 293.080949][T12972] RSP: 002b:00007fca4ad42028 EFLAGS: 00000246 ORIG_RAX: 00000000000001d6 [ 293.080960][T12972] RAX: ffffffffffffffda RBX: 00007fca4a025fa0 RCX: 00007fca49d9e019 [ 293.080967][T12972] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 00002000000000c0 [ 293.080974][T12972] RBP: 00007fca4ad42090 R08: 0000000000000000 R09: 0000000000000000 [ 293.080981][T12972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.080987][T12972] R13: 00007fca4a026038 R14: 00007fca4a025fa0 R15: 00007ffeb6881dc8 [ 293.081001][T12972] [ 293.438592][ T5828] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 293.609080][ T5828] usb 7-1: Using ep0 maxpacket: 8 [ 293.613958][ T5828] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 293.616907][ T5828] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 293.620596][ T5828] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 293.623907][ T5828] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 800 [ 293.627538][ T5828] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 293.632301][ T5828] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 293.635326][ T5828] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.657805][ C0] net_ratelimit: 81049 callbacks suppressed [ 293.657819][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 293.657866][ C3] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.658183][ C2] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 293.658344][ C2] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 293.659218][ C2] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 293.659375][ C2] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 293.659877][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 293.660276][ C2] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 293.660435][ C2] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 293.661305][ C2] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 293.729518][T12930] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set config on port 0, -110 [ 293.734836][T12930] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -32 [ 293.737179][T12930] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -32 [ 293.740683][T12930] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command, -32 [ 293.760016][ T29] usb 6-1: USB disconnect, device number 7 [ 293.778112][ T29] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 293.786524][ T29] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 293.794342][ T29] ti_usb_3410_5052 6-1:2.0: device disconnected [ 293.850291][ T5828] usb 7-1: usb_control_msg returned -32 [ 293.852023][ T5828] usbtmc 7-1:16.0: can't read capabilities [ 293.962011][ T42] audit: type=1400 audit(1785500694.729:650): avc: denied { bind } for pid=12975 comm="syz.3.2101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 293.977148][ T42] audit: type=1400 audit(1785500694.739:651): avc: denied { write } for pid=12975 comm="syz.3.2101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 293.992233][ T42] audit: type=1400 audit(1785500694.739:652): avc: denied { ioctl } for pid=12975 comm="syz.3.2101" path="socket:[34940]" dev="sockfs" ino=34940 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 294.057124][T12978] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2102'. [ 294.074605][ T42] audit: type=1800 audit(1785500694.839:653): pid=12978 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.2102" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 294.153110][T12982] sctp: [Deprecated]: syz.1.2104 (pid 12982) Use of int in max_burst socket option. [ 294.153110][T12982] Use struct sctp_assoc_value instead [ 294.626190][T12999] FAULT_INJECTION: forcing a failure. [ 294.626190][T12999] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 294.626197][T12998] xt_hashlimit: max too large, truncated to 1048576 [ 294.636883][T12998] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 294.680251][T12999] CPU: 3 UID: 0 PID: 12999 Comm: syz.0.2110 Not tainted syzkaller #0 PREEMPT(full) [ 294.680269][T12999] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 294.680276][T12999] Call Trace: [ 294.680289][T12999] [ 294.680293][T12999] dump_stack_lvl+0x100/0x190 [ 294.680312][T12999] should_fail_ex.cold+0x5/0xa [ 294.680324][T12999] ? prepare_alloc_pages+0x16d/0x5f0 [ 294.680340][T12999] should_fail_alloc_page+0xeb/0x140 [ 294.680355][T12999] prepare_alloc_pages+0x1f0/0x5f0 [ 294.680373][T12999] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 294.680386][T12999] ? __pfx_stack_trace_save+0x10/0x10 [ 294.680398][T12999] ? stack_depot_save_flags+0x27/0x9d0 [ 294.680415][T12999] ? kasan_save_stack+0x3f/0x50 [ 294.680427][T12999] ? kasan_save_stack+0x30/0x50 [ 294.680439][T12999] ? kasan_save_track+0x14/0x30 [ 294.680450][T12999] ? __kasan_slab_alloc+0x89/0x90 [ 294.680463][T12999] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 294.680474][T12999] ? ptlock_alloc+0x1f/0x70 [ 294.680490][T12999] ? pte_alloc_one+0x82/0x3d0 [ 294.680500][T12999] ? __pte_alloc+0x6d/0x3e0 [ 294.680512][T12999] ? do_anonymous_page+0x13ae/0x2080 [ 294.680527][T12999] ? __handle_mm_fault+0x1d2c/0x2a00 [ 294.680544][T12999] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 294.680555][T12999] ? gup_fast_fallback+0x16dc/0x2790 [ 294.680569][T12999] ? iov_iter_extract_pages+0xac8/0x2100 [ 294.680584][T12999] ? rds_getsockopt+0x126/0x310 [ 294.680598][T12999] ? __lock_acquire+0x49f/0x1a40 [ 294.680611][T12999] ? __lock_acquire+0x49f/0x1a40 [ 294.680627][T12999] ? lock_acquire+0x1b9/0x370 [ 294.680640][T12999] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 294.680654][T12999] ? policy_nodemask+0xed/0x4f0 [ 294.680669][T12999] alloc_pages_mpol+0x1fb/0x540 [ 294.680684][T12999] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 294.680702][T12999] folio_alloc_mpol_noprof+0x36/0x260 [ 294.680724][T12999] vma_alloc_folio_noprof+0xed/0x1d0 [ 294.680740][T12999] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 294.680761][T12999] do_anonymous_page+0xb2b/0x2080 [ 294.680778][T12999] ? rcu_read_unlock+0x2d/0xb0 [ 294.680791][T12999] __handle_mm_fault+0x1d2c/0x2a00 [ 294.680810][T12999] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 294.680827][T12999] ? __pfx___handle_mm_fault+0x10/0x10 [ 294.680845][T12999] ? pte_offset_map_lock+0x174/0x320 [ 294.680858][T12999] ? find_held_lock+0x2b/0x80 [ 294.680872][T12999] ? follow_page_pte+0x4d0/0x13f0 [ 294.680900][T12999] handle_mm_fault+0x37b/0xa30 [ 294.680921][T12999] __get_user_pages+0x1178/0x32a0 [ 294.680939][T12999] ? down_read_killable+0x35e/0x520 [ 294.680955][T12999] ? __pfx___get_user_pages+0x10/0x10 [ 294.680973][T12999] __gup_longterm_locked+0x87d/0x16f0 [ 294.680988][T12999] ? is_bpf_text_address+0x8a/0x1a0 [ 294.681005][T12999] ? __pfx___gup_longterm_locked+0x10/0x10 [ 294.681022][T12999] ? find_held_lock+0x2b/0x80 [ 294.681031][T12999] ? gup_fast_fallback+0x1467/0x2790 [ 294.681044][T12999] ? sanity_check_pinned_pages+0x4f2/0x8b0 [ 294.681060][T12999] gup_fast_fallback+0x16dc/0x2790 [ 294.681084][T12999] ? __pfx_gup_fast_fallback+0x10/0x10 [ 294.681098][T12999] ? __x64_sys_getsockopt+0xbd/0x160 [ 294.681112][T12999] ? do_syscall_64+0x115/0x870 [ 294.681124][T12999] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.681141][T12999] pin_user_pages_fast+0xa7/0xf0 [ 294.681156][T12999] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 294.681174][T12999] iov_iter_extract_pages+0xac8/0x2100 [ 294.681193][T12999] ? rcu_is_watching+0x12/0xc0 [ 294.681210][T12999] ? __pfx_iov_iter_extract_pages+0x10/0x10 [ 294.681224][T12999] ? __kasan_kmalloc+0xaa/0xb0 [ 294.681237][T12999] ? __kvmalloc_node_noprof+0x36d/0x970 [ 294.681250][T12999] ? rds_info_getsockopt+0x441/0x610 [ 294.681267][T12999] rds_info_getsockopt+0x46f/0x610 [ 294.681283][T12999] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 294.681300][T12999] ? find_held_lock+0x2b/0x80 [ 294.681315][T12999] rds_getsockopt+0x126/0x310 [ 294.681325][T12999] ? __pfx_rds_getsockopt+0x10/0x10 [ 294.681335][T12999] ? copy_from_sockptr_offset.constprop.0+0xe2/0x150 [ 294.681354][T12999] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 294.681375][T12999] do_sock_getsockopt+0x3f6/0x6e0 [ 294.681393][T12999] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 294.681408][T12999] ? rcu_read_lock_any_held+0x6a/0xa0 [ 294.681422][T12999] ? find_held_lock+0x2b/0x80 [ 294.681517][T12999] ? __fget_files+0x21f/0x3d0 [ 294.681534][T12999] __sys_getsockopt+0x148/0x260 [ 294.681551][T12999] ? __x64_sys_getsockopt+0xbd/0x160 [ 294.681563][T12999] __x64_sys_getsockopt+0xbd/0x160 [ 294.681575][T12999] ? do_syscall_64+0x90/0x870 [ 294.681586][T12999] ? lockdep_hardirqs_on+0x78/0x100 [ 294.681598][T12999] do_syscall_64+0x115/0x870 [ 294.681609][T12999] ? clear_bhb_loop+0x40/0x90 [ 294.681622][T12999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.681633][T12999] RIP: 0033:0x7fce13b9e019 [ 294.681643][T12999] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 294.681654][T12999] RSP: 002b:00007fce14996028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 294.681672][T12999] RAX: ffffffffffffffda RBX: 00007fce13e25fa0 RCX: 00007fce13b9e019 [ 294.681679][T12999] RDX: 000000000000271c RSI: 0000200000000114 RDI: 0000000000000003 [ 294.681686][T12999] RBP: 00007fce14996090 R08: 0000200000000000 R09: 0000000000000000 [ 294.681692][T12999] R10: 0000200000c35fff R11: 0000000000000246 R12: 0000000000000002 [ 294.681698][T12999] R13: 00007fce13e26038 R14: 00007fce13e25fa0 R15: 00007ffed3ed9468 [ 294.681716][T12999] [ 294.690164][T12998] macvlan0: entered promiscuous mode [ 295.136806][T13010] kvm: kvm [13005]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x6 [ 295.482327][ T5751] Bluetooth: hci1: unexpected subevent 0x19 length: 24 < 28 [ 295.604962][T13022] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2115'. [ 295.788961][ T42] audit: type=1400 audit(1785500696.559:654): avc: denied { watch_sb } for pid=13028 comm="syz.3.2120" path="/536" dev="tmpfs" ino=2732 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 296.178731][ T5828] usb 7-1: USB disconnect, device number 6 [ 296.385540][T13039] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2122'. [ 296.598528][T13046] IPv6: NLM_F_CREATE should be specified when creating new route [ 296.623541][T13053] /dev/sg0: Can't lookup blockdev [ 296.657146][T13054] autofs4:pid:13054:validate_dev_ioctl: invalid path supplied for cmd(0xc0189375) [ 296.750181][T13046] netlink: 'syz.3.2125': attribute type 1 has an invalid length. [ 297.040412][ T42] audit: type=1400 audit(1785500697.809:655): avc: denied { write } for pid=13062 comm="syz.1.2129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 297.116600][T13080] gfs2: gfs2 mount does not exist [ 297.139501][ T42] audit: type=1400 audit(1785500697.909:656): avc: denied { read } for pid=13062 comm="syz.1.2129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 297.208900][T13083] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2129'. [ 297.239866][ T42] audit: type=1400 audit(1785500697.999:657): avc: denied { append } for pid=13062 comm="syz.1.2129" name="ptp0" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 297.332141][T13091] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2135'. [ 297.464205][ T42] audit: type=1400 audit(1785500698.229:658): avc: denied { name_connect } for pid=13094 comm="syz.3.2137" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 297.774564][T13114] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 298.088201][ T29] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 298.239259][ T29] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 298.242356][ T29] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 298.246807][ T29] usb 7-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00 [ 298.251194][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 298.253940][ T29] usb 7-1: Product: syz [ 298.255318][ T29] usb 7-1: Manufacturer: syz [ 298.266631][ T29] iuu_phoenix 7-1:1.0: iuu_phoenix converter detected [ 298.272102][ T29] usb 7-1: iuu_phoenix converter now attached to ttyUSB0 [ 298.478811][T13117] iuu_phoenix ttyUSB0: vcc_mode_store - vcc_mode: 3 is not a unsigned long [ 298.485830][ T29] usb 7-1: USB disconnect, device number 7 [ 298.492752][ T29] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 298.499783][ T29] iuu_phoenix 7-1:1.0: device disconnected [ 298.667844][ C0] net_ratelimit: 78355 callbacks suppressed [ 298.667859][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 298.667876][ C3] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 298.668109][ C2] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 298.668286][ C2] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 298.669040][ C2] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 298.669177][ C2] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 298.669907][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 298.669961][ C2] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 298.670097][ C2] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 298.670942][ C2] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 301.005642][T13119] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 302.073167][T13139] syzkaller0: entered promiscuous mode [ 302.077295][T13139] syzkaller0: entered allmulticast mode [ 302.097081][T13163] syzkaller0: entered promiscuous mode [ 302.099045][T13163] syzkaller0: entered allmulticast mode [ 302.150749][ T42] kauditd_printk_skb: 1 callbacks suppressed [ 302.150761][ T42] audit: type=1400 audit(1785500702.919:660): avc: denied { write } for pid=13164 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 302.223108][ T42] audit: type=1400 audit(1785500702.989:661): avc: denied { write } for pid=13167 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 302.518864][ T42] audit: type=1326 audit(1785500703.279:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13169 comm="syz.0.2151" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fce13b9e019 code=0x0 [ 302.632620][ T848] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 303.015530][ T848] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 303.064912][ T42] audit: type=1400 audit(1785500703.829:663): avc: denied { setopt } for pid=13176 comm="syz.0.2153" lport=46063 faddr=::ffff:172.30.0.1 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 303.089210][ T848] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 303.096972][ T848] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 303.121079][ T848] usb 8-1: Product: syz [ 303.127287][ T848] usb 8-1: Manufacturer: syz [ 303.133666][ T848] usb 8-1: SerialNumber: syz [ 303.492926][ T848] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 303.677824][ C0] net_ratelimit: 81958 callbacks suppressed [ 303.677839][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 303.677837][ C2] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 303.677846][ C3] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 303.678614][ C2] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 303.679916][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 303.680004][ C3] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 303.680154][ C3] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 303.680290][ C3] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 303.680424][ C3] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 303.680556][ C3] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 303.764931][ T1046] usb 8-1: USB disconnect, device number 11 [ 303.782890][ T1046] usblp0: removed [ 304.100766][ T5751] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 304.253459][T13155] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 304.829283][T13203] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2159'. [ 304.836625][T13203] nbd: must specify at least one socket [ 306.250462][T13222] FAULT_INJECTION: forcing a failure. [ 306.250462][T13222] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 306.269852][T13222] CPU: 1 UID: 0 PID: 13222 Comm: syz.3.2163 Not tainted syzkaller #0 PREEMPT(full) [ 306.269870][T13222] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 306.269876][T13222] Call Trace: [ 306.269881][T13222] [ 306.269885][T13222] dump_stack_lvl+0x100/0x190 [ 306.269904][T13222] should_fail_ex.cold+0x5/0xa [ 306.269915][T13222] ? prepare_alloc_pages+0x16d/0x5f0 [ 306.269931][T13222] should_fail_alloc_page+0xeb/0x140 [ 306.269946][T13222] prepare_alloc_pages+0x1f0/0x5f0 [ 306.269963][T13222] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 306.269976][T13222] ? __pfx_stack_trace_save+0x10/0x10 [ 306.269988][T13222] ? stack_depot_save_flags+0x27/0x9d0 [ 306.270006][T13222] ? kasan_save_stack+0x3f/0x50 [ 306.270017][T13222] ? kasan_save_stack+0x30/0x50 [ 306.270029][T13222] ? kasan_save_track+0x14/0x30 [ 306.270040][T13222] ? __kasan_slab_alloc+0x89/0x90 [ 306.270052][T13222] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 306.270063][T13222] ? ptlock_alloc+0x1f/0x70 [ 306.270078][T13222] ? pte_alloc_one+0x82/0x3d0 [ 306.270088][T13222] ? __pte_alloc+0x6d/0x3e0 [ 306.270100][T13222] ? do_anonymous_page+0x13ae/0x2080 [ 306.270115][T13222] ? __handle_mm_fault+0x1d2c/0x2a00 [ 306.270132][T13222] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 306.270143][T13222] ? gup_fast_fallback+0x16dc/0x2790 [ 306.270156][T13222] ? iov_iter_extract_pages+0xac8/0x2100 [ 306.270171][T13222] ? rds_getsockopt+0x126/0x310 [ 306.270186][T13222] ? __lock_acquire+0x49f/0x1a40 [ 306.270199][T13222] ? __lock_acquire+0x49f/0x1a40 [ 306.270215][T13222] ? lock_acquire+0x1b9/0x370 [ 306.270227][T13222] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 306.270242][T13222] ? policy_nodemask+0xed/0x4f0 [ 306.270257][T13222] alloc_pages_mpol+0x1fb/0x540 [ 306.270272][T13222] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 306.270291][T13222] folio_alloc_mpol_noprof+0x36/0x260 [ 306.270308][T13222] vma_alloc_folio_noprof+0xed/0x1d0 [ 306.270325][T13222] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 306.270345][T13222] do_anonymous_page+0xb2b/0x2080 [ 306.270362][T13222] ? rcu_read_unlock+0x2d/0xb0 [ 306.270376][T13222] __handle_mm_fault+0x1d2c/0x2a00 [ 306.270394][T13222] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 306.270411][T13222] ? __pfx___handle_mm_fault+0x10/0x10 [ 306.270429][T13222] ? pte_offset_map_lock+0x174/0x320 [ 306.270442][T13222] ? find_held_lock+0x2b/0x80 [ 306.270456][T13222] ? follow_page_pte+0x4d0/0x13f0 [ 306.270473][T13222] handle_mm_fault+0x37b/0xa30 [ 306.270492][T13222] __get_user_pages+0x1178/0x32a0 [ 306.270510][T13222] ? down_read_killable+0x35e/0x520 [ 306.270525][T13222] ? __pfx___get_user_pages+0x10/0x10 [ 306.270544][T13222] __gup_longterm_locked+0x87d/0x16f0 [ 306.270559][T13222] ? is_bpf_text_address+0x8a/0x1a0 [ 306.270576][T13222] ? __pfx___gup_longterm_locked+0x10/0x10 [ 306.270593][T13222] ? find_held_lock+0x2b/0x80 [ 306.270601][T13222] ? gup_fast_fallback+0x1467/0x2790 [ 306.270615][T13222] ? sanity_check_pinned_pages+0x4f2/0x8b0 [ 306.270631][T13222] gup_fast_fallback+0x16dc/0x2790 [ 306.270659][T13222] ? __pfx_gup_fast_fallback+0x10/0x10 [ 306.270673][T13222] ? __x64_sys_getsockopt+0xbd/0x160 [ 306.270686][T13222] ? do_syscall_64+0x115/0x870 [ 306.270698][T13222] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.270714][T13222] pin_user_pages_fast+0xa7/0xf0 [ 306.270729][T13222] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 306.270747][T13222] iov_iter_extract_pages+0xac8/0x2100 [ 306.270766][T13222] ? rcu_is_watching+0x12/0xc0 [ 306.270782][T13222] ? __pfx_iov_iter_extract_pages+0x10/0x10 [ 306.270796][T13222] ? __kasan_kmalloc+0xaa/0xb0 [ 306.270808][T13222] ? __kvmalloc_node_noprof+0x36d/0x970 [ 306.270822][T13222] ? rds_info_getsockopt+0x441/0x610 [ 306.270839][T13222] rds_info_getsockopt+0x46f/0x610 [ 306.270855][T13222] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 306.270872][T13222] ? find_held_lock+0x2b/0x80 [ 306.270886][T13222] rds_getsockopt+0x126/0x310 [ 306.270897][T13222] ? __pfx_rds_getsockopt+0x10/0x10 [ 306.270907][T13222] ? copy_from_sockptr_offset.constprop.0+0xe2/0x150 [ 306.270924][T13222] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 306.270945][T13222] do_sock_getsockopt+0x3f6/0x6e0 [ 306.270963][T13222] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 306.270978][T13222] ? rcu_read_lock_any_held+0x6a/0xa0 [ 306.270991][T13222] ? find_held_lock+0x2b/0x80 [ 306.271004][T13222] ? __fget_files+0x21f/0x3d0 [ 306.271019][T13222] __sys_getsockopt+0x148/0x260 [ 306.271036][T13222] ? __x64_sys_getsockopt+0xbd/0x160 [ 306.271047][T13222] __x64_sys_getsockopt+0xbd/0x160 [ 306.271060][T13222] ? do_syscall_64+0x90/0x870 [ 306.271071][T13222] ? lockdep_hardirqs_on+0x78/0x100 [ 306.271083][T13222] do_syscall_64+0x115/0x870 [ 306.271095][T13222] ? clear_bhb_loop+0x40/0x90 [ 306.271108][T13222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.271119][T13222] RIP: 0033:0x7fa5ded9e019 [ 306.271129][T13222] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 306.271139][T13222] RSP: 002b:00007fa5dfc95028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 306.271151][T13222] RAX: ffffffffffffffda RBX: 00007fa5df025fa0 RCX: 00007fa5ded9e019 [ 306.271158][T13222] RDX: 000000000000271c RSI: 0000200000000114 RDI: 0000000000000003 [ 306.271164][T13222] RBP: 00007fa5dfc95090 R08: 0000200000000000 R09: 0000000000000000 [ 306.271170][T13222] R10: 0000200000c35fff R11: 0000000000000246 R12: 0000000000000002 [ 306.271176][T13222] R13: 00007fa5df026038 R14: 00007fa5df025fa0 R15: 00007ffcbe1b3808 [ 306.271190][T13222] [ 306.663493][ T42] audit: type=1400 audit(1785500707.429:664): avc: denied { read } for pid=13232 comm="syz.3.2168" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 306.748245][ T42] audit: type=1400 audit(1785500707.509:665): avc: denied { mount } for pid=13236 comm="syz.1.2169" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 306.772354][T13233] affs: No valid root block on device sr0 [ 306.841183][T13239] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2170'. [ 307.161122][T13246] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 307.362053][ T42] audit: type=1400 audit(1785500708.129:666): avc: denied { remount } for pid=13253 comm="syz.1.2175" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 307.372085][T13255] tmpfs: Cannot disable swap on remount [ 307.551445][ T42] audit: type=1400 audit(1785500708.319:667): avc: denied { read } for pid=13260 comm="syz.3.2178" name="inject" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 307.574013][ T42] audit: type=1400 audit(1785500708.329:668): avc: denied { lock } for pid=13260 comm="syz.3.2178" path="socket:[38118]" dev="sockfs" ino=38118 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 307.703425][T13269] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2180'. [ 307.715383][T13264] affs: No valid root block on device sr0 [ 307.939872][T13276] FAULT_INJECTION: forcing a failure. [ 307.939872][T13276] name failslab, interval 1, probability 0, space 0, times 0 [ 307.943915][T13276] CPU: 2 UID: 0 PID: 13276 Comm: syz.3.2181 Not tainted syzkaller #0 PREEMPT(full) [ 307.943930][T13276] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 307.943937][T13276] Call Trace: [ 307.943941][T13276] [ 307.943946][T13276] dump_stack_lvl+0x100/0x190 [ 307.943964][T13276] should_fail_ex.cold+0x5/0xa [ 307.943976][T13276] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 307.943994][T13276] should_failslab+0xc2/0x120 [ 307.944008][T13276] kmem_cache_alloc_noprof+0x91/0x6a0 [ 307.944021][T13276] ? skb_clone+0x190/0x400 [ 307.944037][T13276] skb_clone+0x190/0x400 [ 307.944050][T13276] netlink_deliver_tap+0xaed/0xcc0 [ 307.944071][T13276] netlink_unicast+0x62b/0x850 [ 307.944084][T13276] ? __pfx_netlink_unicast+0x10/0x10 [ 307.944094][T13276] ? __pfx_sock_has_perm+0x10/0x10 [ 307.944111][T13276] netlink_sendmsg+0x8b0/0xda0 [ 307.944124][T13276] ? __pfx_netlink_sendmsg+0x10/0x10 [ 307.944136][T13276] ? selinux_socket_sendmsg+0x198/0x2f0 [ 307.944153][T13276] ____sys_sendmsg+0xa4d/0xbe0 [ 307.944169][T13276] ? __pfx_netlink_sendmsg+0x10/0x10 [ 307.944180][T13276] ? __pfx_____sys_sendmsg+0x10/0x10 [ 307.944198][T13276] ? rcu_is_watching+0x12/0xc0 [ 307.944214][T13276] ? ___sys_sendmsg+0x19d/0x1e0 [ 307.944229][T13276] ? kfree+0x1e5/0x6c0 [ 307.944247][T13276] ___sys_sendmsg+0x190/0x1e0 [ 307.944265][T13276] ? __pfx____sys_sendmsg+0x10/0x10 [ 307.944293][T13276] ? __pfx___might_resched+0x10/0x10 [ 307.944309][T13276] __sys_sendmmsg+0x20c/0x440 [ 307.944324][T13276] ? __pfx___sys_sendmmsg+0x10/0x10 [ 307.944337][T13276] ? ksys_write+0x190/0x250 [ 307.944363][T13276] ? fput+0x79/0x100 [ 307.944375][T13276] ? ksys_write+0x1ac/0x250 [ 307.944390][T13276] ? __pfx_ksys_write+0x10/0x10 [ 307.944409][T13276] __x64_sys_sendmmsg+0x9c/0x100 [ 307.944422][T13276] ? lockdep_hardirqs_on+0x78/0x100 [ 307.944434][T13276] do_syscall_64+0x115/0x870 [ 307.944446][T13276] ? clear_bhb_loop+0x40/0x90 [ 307.944459][T13276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.944470][T13276] RIP: 0033:0x7fa5ded9e019 [ 307.944480][T13276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 307.944490][T13276] RSP: 002b:00007fa5dfc95028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 307.944501][T13276] RAX: ffffffffffffffda RBX: 00007fa5df025fa0 RCX: 00007fa5ded9e019 [ 307.944508][T13276] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 307.944514][T13276] RBP: 00007fa5dfc95090 R08: 0000000000000000 R09: 0000000000000000 [ 307.944520][T13276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 307.944526][T13276] R13: 00007fa5df026038 R14: 00007fa5df025fa0 R15: 00007ffcbe1b3808 [ 307.944539][T13276] [ 307.959793][T13282] syzkaller0: entered promiscuous mode [ 308.050272][T13286] FAULT_INJECTION: forcing a failure. [ 308.050272][T13286] name failslab, interval 1, probability 0, space 0, times 0 [ 308.059845][T13286] CPU: 1 UID: 0 PID: 13286 Comm: syz.0.2184 Not tainted syzkaller #0 PREEMPT(full) [ 308.059869][T13286] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 308.059879][T13286] Call Trace: [ 308.059885][T13286] [ 308.059891][T13286] dump_stack_lvl+0x100/0x190 [ 308.059917][T13286] should_fail_ex.cold+0x5/0xa [ 308.059936][T13286] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 308.059963][T13286] should_failslab+0xc2/0x120 [ 308.059985][T13286] kmem_cache_alloc_noprof+0x91/0x6a0 [ 308.060005][T13286] ? skb_clone+0x190/0x400 [ 308.060029][T13286] skb_clone+0x190/0x400 [ 308.060049][T13286] netlink_deliver_tap+0xaed/0xcc0 [ 308.060081][T13286] netlink_unicast+0x6a5/0x850 [ 308.060101][T13286] ? __pfx_netlink_unicast+0x10/0x10 [ 308.060122][T13286] netlink_ack+0x655/0xb80 [ 308.060146][T13286] netlink_rcv_skb+0x333/0x420 [ 308.060162][T13286] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 308.060195][T13286] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 308.060226][T13286] xfrm_netlink_rcv+0x71/0x90 [ 308.060252][T13286] netlink_unicast+0x585/0x850 [ 308.060272][T13286] ? __pfx_netlink_unicast+0x10/0x10 [ 308.060295][T13286] netlink_sendmsg+0x8b0/0xda0 [ 308.060314][T13286] ? __pfx_netlink_sendmsg+0x10/0x10 [ 308.060334][T13286] ? selinux_socket_sendmsg+0x198/0x2f0 [ 308.060363][T13286] ____sys_sendmsg+0xa4d/0xbe0 [ 308.060386][T13286] ? __pfx_netlink_sendmsg+0x10/0x10 [ 308.060405][T13286] ? __pfx_____sys_sendmsg+0x10/0x10 [ 308.060440][T13286] ___sys_sendmsg+0x190/0x1e0 [ 308.060465][T13286] ? __pfx____sys_sendmsg+0x10/0x10 [ 308.060486][T13286] ? __lock_acquire+0x49f/0x1a40 [ 308.060504][T13286] ? get_pid_task+0x106/0x250 [ 308.060538][T13286] __sys_sendmsg+0x160/0x210 [ 308.060559][T13286] ? __pfx___sys_sendmsg+0x10/0x10 [ 308.060589][T13286] do_syscall_64+0x115/0x870 [ 308.060608][T13286] ? clear_bhb_loop+0x40/0x90 [ 308.060627][T13286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.060643][T13286] RIP: 0033:0x7fce13b9e019 [ 308.060656][T13286] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 308.060672][T13286] RSP: 002b:00007fce14996028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 308.060688][T13286] RAX: ffffffffffffffda RBX: 00007fce13e25fa0 RCX: 00007fce13b9e019 [ 308.060718][T13286] RDX: 0000000000004000 RSI: 0000200000000440 RDI: 0000000000000005 [ 308.060728][T13286] RBP: 00007fce14996090 R08: 0000000000000000 R09: 0000000000000000 [ 308.060736][T13286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.060745][T13286] R13: 00007fce13e26038 R14: 00007fce13e25fa0 R15: 00007ffed3ed9468 [ 308.060771][T13286] [ 308.204950][T13282] syzkaller0: entered allmulticast mode [ 308.210054][T13292] FAULT_INJECTION: forcing a failure. [ 308.210054][T13292] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 308.214106][T13292] CPU: 1 UID: 0 PID: 13292 Comm: syz.2.2183 Not tainted syzkaller #0 PREEMPT(full) [ 308.214122][T13292] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 308.214128][T13292] Call Trace: [ 308.214132][T13292] [ 308.214137][T13292] dump_stack_lvl+0x100/0x190 [ 308.214155][T13292] should_fail_ex.cold+0x5/0xa [ 308.214169][T13292] _copy_from_iter+0x1f4/0x1690 [ 308.214187][T13292] ? _copy_from_iter+0x270/0x1690 [ 308.214201][T13292] ? __pfx__copy_from_iter+0x10/0x10 [ 308.214217][T13292] ? __pfx__copy_from_iter+0x10/0x10 [ 308.214231][T13292] ? _copy_from_iter+0x270/0x1690 [ 308.214248][T13292] copy_page_from_iter+0x238/0x300 [ 308.214264][T13292] skb_copy_datagram_from_iter+0x399/0x720 [ 308.214281][T13292] packet_sendmsg+0x227e/0x5100 [ 308.214296][T13292] ? avc_has_perm_noaudit+0x33a/0x3b0 [ 308.214313][T13292] ? sock_has_perm+0x25a/0x2f0 [ 308.214327][T13292] ? __pfx_sock_has_perm+0x10/0x10 [ 308.214344][T13292] ? __pfx_packet_sendmsg+0x10/0x10 [ 308.214359][T13292] ? selinux_socket_sendmsg+0x198/0x2f0 [ 308.214377][T13292] ____sys_sendmsg+0xa4d/0xbe0 [ 308.214392][T13292] ? __pfx_packet_sendmsg+0x10/0x10 [ 308.214406][T13292] ? __pfx_____sys_sendmsg+0x10/0x10 [ 308.214428][T13292] ___sys_sendmsg+0x190/0x1e0 [ 308.214445][T13292] ? __pfx____sys_sendmsg+0x10/0x10 [ 308.214460][T13292] ? __lock_acquire+0x49f/0x1a40 [ 308.214474][T13292] ? get_pid_task+0x106/0x250 [ 308.214498][T13292] __sys_sendmsg+0x160/0x210 [ 308.214511][T13292] ? __pfx___sys_sendmsg+0x10/0x10 [ 308.214531][T13292] do_syscall_64+0x115/0x870 [ 308.214544][T13292] ? clear_bhb_loop+0x40/0x90 [ 308.214557][T13292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.214568][T13292] RIP: 0033:0x7fca49d9e019 [ 308.214577][T13292] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 308.214587][T13292] RSP: 002b:00007fca4ad21028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 308.214599][T13292] RAX: ffffffffffffffda RBX: 00007fca4a026090 RCX: 00007fca49d9e019 [ 308.214606][T13292] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 308.214612][T13292] RBP: 00007fca4ad21090 R08: 0000000000000000 R09: 0000000000000000 [ 308.214619][T13292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 308.214625][T13292] R13: 00007fca4a026128 R14: 00007fca4a026090 R15: 00007ffeb6881dc8 [ 308.214638][T13292] [ 308.390185][T13295] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2187'. [ 308.687837][ C0] net_ratelimit: 78209 callbacks suppressed [ 308.687851][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 308.687902][ C3] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 308.688566][ C2] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 308.688725][ C2] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 308.689586][ C2] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 308.689741][ C2] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 308.689996][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 308.690690][ C2] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 308.690845][ C2] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 308.691696][ C2] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 308.792428][T13315] tcf_pedit_act: 7 callbacks suppressed [ 308.794322][T13315] tc action pedit unable to extract header offset for header type (0x4) [ 308.801789][T13315] tc action pedit unable to extract header offset for header type (0x4) [ 308.805246][T13315] tc action pedit unable to extract header offset for header type (0x4) [ 308.808797][T13315] tc action pedit unable to extract header offset for header type (0x4) [ 308.812253][T13315] tc action pedit unable to extract header offset for header type (0x4) [ 308.815772][T13315] tc action pedit unable to extract header offset for header type (0x4) [ 308.819719][T13315] tc action pedit unable to extract header offset for header type (0x4) [ 308.823198][T13315] tc action pedit unable to extract header offset for header type (0x4) [ 308.826753][T13315] tc action pedit unable to extract header offset for header type (0x4) [ 308.830393][T13315] tc action pedit unable to extract header offset for header type (0x4) [ 309.111754][T13319] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2198'. [ 309.143189][T13319] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2198'. [ 309.254950][T13321] syzkaller0: entered promiscuous mode [ 309.256883][T13321] syzkaller0: entered allmulticast mode [ 309.733273][T13343] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2205'. [ 309.819360][T13343] syzkaller0: entered promiscuous mode [ 309.823985][T13343] syzkaller0: entered allmulticast mode [ 310.437269][T13366] FAULT_INJECTION: forcing a failure. [ 310.437269][T13366] name failslab, interval 1, probability 0, space 0, times 0 [ 310.443770][T13366] CPU: 1 UID: 0 PID: 13366 Comm: syz.1.2210 Not tainted syzkaller #0 PREEMPT(full) [ 310.443792][T13366] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 310.443798][T13366] Call Trace: [ 310.443812][T13366] [ 310.443816][T13366] dump_stack_lvl+0x100/0x190 [ 310.443834][T13366] should_fail_ex.cold+0x5/0xa [ 310.443848][T13366] should_failslab+0xc2/0x120 [ 310.443863][T13366] __kmalloc_cache_noprof+0x91/0x6c0 [ 310.443880][T13366] ? nft_limit_init+0x3cf/0x750 [ 310.443905][T13366] nft_limit_init+0x3cf/0x750 [ 310.443918][T13366] ? __pfx_nft_limit_init+0x10/0x10 [ 310.443930][T13366] ? __kmalloc_noprof+0x343/0x820 [ 310.443943][T13366] ? __pfx_nft_limit_pkts_init+0x10/0x10 [ 310.443956][T13366] nft_limit_pkts_init+0x28/0xd0 [ 310.443969][T13366] nft_expr_init+0x28e/0x3b0 [ 310.443982][T13366] ? __pfx_nft_expr_init+0x10/0x10 [ 310.444001][T13366] ? timer_init_key+0x150/0x310 [ 310.444018][T13366] nft_set_elem_expr_alloc+0x27/0x270 [ 310.444034][T13366] nft_set_expr_alloc+0x6c/0x5f0 [ 310.444051][T13366] nf_tables_newset+0x3103/0x4250 [ 310.444071][T13366] ? net_generic+0xea/0x2a0 [ 310.444081][T13366] ? __pfx_nf_tables_newset+0x10/0x10 [ 310.444097][T13366] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 310.444111][T13366] ? __nla_validate_parse+0x1e7/0x28b0 [ 310.444132][T13366] ? __nla_parse+0x40/0x60 [ 310.444144][T13366] nfnetlink_rcv_batch+0x1410/0x2880 [ 310.444166][T13366] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 310.444189][T13366] ? avc_has_perm_noaudit+0x145/0x3b0 [ 310.444215][T13366] ? __nla_parse+0x40/0x60 [ 310.444240][T13366] nfnetlink_rcv+0x3bd/0x440 [ 310.444255][T13366] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 310.444271][T13366] netlink_unicast+0x585/0x850 [ 310.444287][T13366] ? __pfx_netlink_unicast+0x10/0x10 [ 310.444301][T13366] netlink_sendmsg+0x8b0/0xda0 [ 310.444314][T13366] ? __pfx_netlink_sendmsg+0x10/0x10 [ 310.444326][T13366] ? selinux_socket_sendmsg+0x198/0x2f0 [ 310.444344][T13366] ____sys_sendmsg+0xa4d/0xbe0 [ 310.444360][T13366] ? __pfx_netlink_sendmsg+0x10/0x10 [ 310.444371][T13366] ? __pfx_____sys_sendmsg+0x10/0x10 [ 310.444393][T13366] ___sys_sendmsg+0x190/0x1e0 [ 310.444411][T13366] ? __pfx____sys_sendmsg+0x10/0x10 [ 310.444427][T13366] ? __lock_acquire+0x49f/0x1a40 [ 310.444440][T13366] ? get_pid_task+0x106/0x250 [ 310.444466][T13366] __sys_sendmsg+0x160/0x210 [ 310.444479][T13366] ? __pfx___sys_sendmsg+0x10/0x10 [ 310.444500][T13366] do_syscall_64+0x115/0x870 [ 310.444512][T13366] ? clear_bhb_loop+0x40/0x90 [ 310.444525][T13366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.444536][T13366] RIP: 0033:0x7f73e9f9e019 [ 310.444546][T13366] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 310.444557][T13366] RSP: 002b:00007f73eaef2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 310.444575][T13366] RAX: ffffffffffffffda RBX: 00007f73ea225fa0 RCX: 00007f73e9f9e019 [ 310.444581][T13366] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 310.444588][T13366] RBP: 00007f73eaef2090 R08: 0000000000000000 R09: 0000000000000000 [ 310.444594][T13366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 310.444599][T13366] R13: 00007f73ea226038 R14: 00007f73ea225fa0 R15: 00007ffc85d2eb28 [ 310.444613][T13366] [ 311.067873][ T5828] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 311.197919][ T5828] usb 7-1: device descriptor read/64, error -71 [ 311.438298][ T5828] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 311.570298][ T5828] usb 7-1: device descriptor read/64, error -71 [ 311.680191][ T5828] usb usb7-port1: attempt power cycle [ 312.018070][ T5828] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 312.049977][ T5828] usb 7-1: device descriptor read/8, error -71 [ 312.298049][ T5828] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 312.318980][ T5828] usb 7-1: device descriptor read/8, error -71 [ 312.431414][ T5828] usb usb7-port1: unable to enumerate USB device [ 313.697807][ C0] net_ratelimit: 82729 callbacks suppressed [ 313.697822][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 313.697904][ C3] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 313.698061][ C2] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 313.698211][ C2] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 313.698971][ C2] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 313.699111][ C2] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 313.699894][ C2] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 313.699922][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 313.700060][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 313.700197][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 314.072692][T13372] dummy0: entered allmulticast mode [ 314.089433][T13373] dummy0: left allmulticast mode [ 314.217056][T13381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.223775][T13381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.227434][ T42] audit: type=1400 audit(1785500714.989:669): avc: denied { accept } for pid=13380 comm="syz.0.2214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 314.634754][T13390] hpfs: Bad magic ... probably not HPFS [ 317.012954][ T1446] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.015045][ T1446] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.581986][T13412] syzkaller0: entered promiscuous mode [ 317.583775][T13412] syzkaller0: entered allmulticast mode [ 317.650333][ T42] audit: type=1400 audit(1785500718.419:670): avc: denied { write } for pid=13413 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 317.726570][ T42] audit: type=1400 audit(1785500718.489:671): avc: denied { ioctl } for pid=13419 comm="syz.2.2227" path="socket:[38906]" dev="sockfs" ino=38906 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 317.765771][ T42] audit: type=1400 audit(1785500718.529:672): avc: denied { watch } for pid=13416 comm="syz.3.2226" path="/sys/kernel/rcu_expedited" dev="sysfs" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 317.791597][ T42] audit: type=1400 audit(1785500718.529:673): avc: denied { watch_sb watch_reads } for pid=13416 comm="syz.3.2226" path="/sys/kernel/rcu_expedited" dev="sysfs" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=file permissive=1 [ 317.813816][ T42] audit: type=1400 audit(1785500718.579:674): avc: denied { write } for pid=13424 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 317.919640][ T42] audit: type=1400 audit(1785500718.689:675): avc: denied { write } for pid=13428 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 317.974090][ T42] audit: type=1400 audit(1785500718.739:676): avc: denied { write } for pid=13432 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 318.707825][ C2] net_ratelimit: 83480 callbacks suppressed [ 318.707828][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 318.707841][ C2] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 318.707939][ C3] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 318.707981][ C2] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 318.708798][ C2] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 318.708936][ C2] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 318.709719][ C2] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 318.709853][ C2] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 318.709877][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 318.710076][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 320.836428][T13436] syzkaller0: entered promiscuous mode [ 320.844146][T13436] syzkaller0: entered allmulticast mode [ 320.848942][ T42] audit: type=1400 audit(1785500721.619:677): avc: denied { create } for pid=13435 comm="syz.2.2229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 322.304025][T13475] overlay: filesystem on ./file0 is read-only [ 322.347545][T13474] ucsi-stm32g0-i2c 0-0035: i2c read 35, 00 error: -95 [ 322.355999][T13474] ucsi-stm32g0-i2c 0-0035: probe with driver ucsi-stm32g0-i2c failed with error -95 [ 322.362798][T13474] i2c i2c-0: new_device: Instantiated device stm32g0-typec at 0x35 [ 322.387665][ T5109] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000c: 0000 [#1] SMP KASAN NOPTI [ 322.391400][ T5109] KASAN: null-ptr-deref in range [0x0000000000000060-0x0000000000000067] [ 322.394085][ T5109] CPU: 1 UID: 0 PID: 5109 Comm: kworker/1:1H Not tainted syzkaller #0 PREEMPT(full) [ 322.396980][ T5109] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 322.400103][ T5109] Workqueue: events_highpri f_midi_in_work [ 322.401923][ T5109] RIP: 0010:dummy_queue+0x1ba/0xb00 [ 322.403571][ T5109] Code: 00 49 83 bc 24 c8 05 00 00 00 0f 84 a6 07 00 00 e8 8b 1d 39 fa 49 8d 7f 60 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 4f 07 00 00 45 8b 7f 60 31 ff [ 322.409503][ T5109] RSP: 0018:ffffc90003a2fa28 EFLAGS: 00010006 [ 322.411330][ T5109] RAX: dffffc0000000000 RBX: ffff88802b040410 RCX: ffffffff87d143df [ 322.413717][ T5109] RDX: 000000000000000c RSI: ffffffff87d14455 RDI: 0000000000000060 [ 322.416159][ T5109] RBP: ffff88802c8740e0 R08: 0000000000000005 R09: 0000000000000005 [ 322.418622][ T5109] R10: 0000000000000003 R11: 0000000000000000 R12: ffff88802c874c00 [ 322.421083][ T5109] R13: ffff88802b040400 R14: ffff88802c8740d8 R15: 0000000000000000 [ 322.423541][ T5109] FS: 0000000000000000(0000) GS:ffff8880d5eda000(0000) knlGS:0000000000000000 [ 322.426261][ T5109] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 322.428265][ T5109] CR2: 00007ffcbe1b2e40 CR3: 0000000051759000 CR4: 0000000000352ef0 [ 322.430734][ T5109] Call Trace: [ 322.431808][ T5109] [ 322.432748][ T5109] ? do_raw_spin_unlock+0x145/0x1e0 [ 322.434358][ T5109] usb_ep_queue+0xfa/0x3c0 [ 322.435725][ T5109] f_midi_in_work+0x9b0/0x1580 [ 322.437179][ T5109] ? __pfx_f_midi_in_work+0x10/0x10 [ 322.438717][ T5109] ? rcu_is_watching+0x12/0xc0 [ 322.440176][ T5109] process_one_work+0xa23/0x1940 [ 322.441749][ T5109] ? __pfx_process_one_work+0x10/0x10 [ 322.443433][ T5109] ? __pfx_f_midi_in_work+0x10/0x10 [ 322.445067][ T5109] worker_thread+0x5ef/0xe50 [ 322.446537][ T5109] ? __pfx_worker_thread+0x10/0x10 [ 322.448141][ T5109] ? kthread+0x13a/0x450 [ 322.449486][ T5109] ? __pfx_worker_thread+0x10/0x10 [ 322.451096][ T5109] kthread+0x370/0x450 [ 322.452382][ T5109] ? __pfx_kthread+0x10/0x10 [ 322.453850][ T5109] ret_from_fork+0x72b/0xd50 [ 322.455312][ T5109] ? __pfx_ret_from_fork+0x10/0x10 [ 322.456925][ T5109] ? __switch_to+0x800/0x10f0 [ 322.458410][ T5109] ? __pfx_kthread+0x10/0x10 [ 322.459870][ T5109] ret_from_fork_asm+0x1a/0x30 [ 322.461384][ T5109] [ 322.462369][ T5109] Modules linked in: [ 322.463610][ T5109] ---[ end trace 0000000000000000 ]--- [ 322.465298][ T5109] RIP: 0010:dummy_queue+0x1ba/0xb00 [ 322.466932][ T5109] Code: 00 49 83 bc 24 c8 05 00 00 00 0f 84 a6 07 00 00 e8 8b 1d 39 fa 49 8d 7f 60 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 4f 07 00 00 45 8b 7f 60 31 ff [ 322.472835][ T5109] RSP: 0018:ffffc90003a2fa28 EFLAGS: 00010006 [ 322.474701][ T5109] RAX: dffffc0000000000 RBX: ffff88802b040410 RCX: ffffffff87d143df [ 322.477030][ T5109] RDX: 000000000000000c RSI: ffffffff87d14455 RDI: 0000000000000060 [ 322.479358][ T5109] RBP: ffff88802c8740e0 R08: 0000000000000005 R09: 0000000000000005 [ 322.481764][ T5109] R10: 0000000000000003 R11: 0000000000000000 R12: ffff88802c874c00 [ 322.484220][ T5109] R13: ffff88802b040400 R14: ffff88802c8740d8 R15: 0000000000000000 [ 322.486686][ T5109] FS: 0000000000000000(0000) GS:ffff8880d5eda000(0000) knlGS:0000000000000000 [ 322.489446][ T5109] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 322.491501][ T5109] CR2: 00007ffcbe1b2e40 CR3: 0000000051759000 CR4: 0000000000352ef0 [ 322.493997][ T5109] Kernel panic - not syncing: Fatal exception [ 322.496452][ T5109] Kernel Offset: disabled [ 322.497817][ T5109] Rebooting in 86400 seconds..