last executing test programs: 1.89906166s ago: executing program 1 (id=157): r0 = socket(0x10, 0x3, 0x0) sendto(r0, &(0x7f0000000000)="3c000000100005060100000000000000000000000000000001000000010000001c0012000a00010076786c616e00ff8c0c0002000800010064000000", 0x3c, 0x0, 0x0, 0x0) 1.89821872s ago: executing program 1 (id=159): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt(r0, 0x7fb, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="250a00000000000061114c00000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) 1.806616341s ago: executing program 1 (id=160): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x6f87c0, 0x0) (async, rerun: 32) r1 = socket$kcm(0x10, 0x2, 0x4) (rerun: 32) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000014006b04000000d86e6c1d000a847ea6ea6567e75110623400cdd46b44dacff32c6e020075e300250002000f00000017d34460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bdd700000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0x856, &(0x7f00000000c0)="235913100000004a352504cf", 0x0, 0xc}) (async, rerun: 32) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (rerun: 32) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1) (async) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) (async) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x1, 0x3e, 0x2000000, 0x0, 0x2004cc, 0x0, 0xa1b, 0x8, 0x5, 0x0, 0x3, 0x2, 0x1], 0x10000}) (async, rerun: 64) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async, rerun: 64) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000240)={[0x7, 0x9, 0x2, 0x0, 0xeb27, 0x6, 0x3ff, 0x6, 0xffffffffffffffff, 0xd, 0x1, 0x0, 0x10000, 0xc6c9, 0x6, 0xb35], 0x2ffc, 0x100}) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) r6 = eventfd2(0x70, 0x1) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000100)={r6, 0x7, 0x2}) r7 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r7, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (async) shutdown(r7, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r8, 0x26, 0x0) (async) ioctl$CDROM_CLEAR_OPTIONS(r8, 0x5321, 0x8) (async) setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) (async, rerun: 32) sendto$inet6(r7, &(0x7f00000001c0)="bc", 0x1, 0x4, &(0x7f0000000080)={0xa, 0x4e20, 0x8, @loopback, 0xffff7ffc}, 0x1c) (async, rerun: 32) close(r7) 1.746837561s ago: executing program 3 (id=163): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8, 0x40}, 0x50) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f00000005c0)={0x17c04, 0xffffffffffffffff, 0x7, 0x3, 0x100000004, 0x803}) 1.680051971s ago: executing program 3 (id=164): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) syz_open_dev$mtd(0x0, 0x7fffffffffffffff, 0x1835a0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000120000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) 1.679735929s ago: executing program 3 (id=165): r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$MEMGETINFO(r0, 0x80204d01, &(0x7f0000000040)) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000080)) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f00000000c0)={0x10, 0x0, "0b9ec9f859fffd470261d52efc5ee87d"}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x4ba000, 0x0) ioctl$NILFS_IOCTL_GET_SUINFO(r1, 0x80186e84, &(0x7f0000000180)={&(0x7f0000000140)=[{0x1, 0x4, 0xe86271b444729c60}, {0x363, 0x2}, {0x8, 0x4, 0x2}, {0x8, 0x80000, 0x1}], 0x4, 0x10, 0x9, 0x3}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0x7fffffff}}, './file0\x00'}) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) utimensat(r0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)={{r3, r4/1000+60000}, {r5, r6/1000+60000}}, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_sctp_SIOCINQ(r7, 0x541b, &(0x7f0000000300)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000004c0)={0x0, 0x0}) r9 = fcntl$getown(r2, 0x9) r10 = syz_clone(0x240100, &(0x7f0000000540)="184b7d0d86d8bd559e942d3b25cec7913623ccbcd4d8f987dabd40a795671e6fa9acdb4205bd05e111a08cb4e150f9f5f2192d05ba40931a97d1bcf6ed05e2adb310303f5db28ca65789be819e4c215caa84e417e50c3713d247914e3d4ed705e2587f471bb6babba115c9361481e8d13358593de5d3ba3886aab1b9e6a24e66786489cfd83829de81c920af8e5815983b4c244f9631d6e89e5c2795be608b01c758b04be54c947b271a5d4bff", 0xad, &(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)="038382a9c96bc98d0132a408d22d44b9f2573b52ac9d15b9fbb836567f800923cf03018c142daaecf47f5f44a4e0f2728f13bc0c45717806e4e2d992b0058465d48ec2be13de1fad0fb8e35c197f869a115bcef7c4c93d8b07d11e1ec746ce8775757ee4a704fceaf118d0ed3dc84a6b980a0cad583d0572c72b0b1d863ba046730590f345f637297a9b70cb9753ab4853f4f06130678f6f90797f4fb3739f88999feb3263f0024ee75fbc4ea44826cdd8de9a89a985124b3688fcdb9bd0a263b124c09b12b69db8354515e8aa5adbbed98535c5637555a6bbc5404ce5b0ff84eb9964a2ffb8e69e68bb6e400d98ae77a6d0b4f045f71ce4c12b031f58b50daa18fbc3a93ecec624dacd92b3029a05dc245e72588621ff005db59dbd2ca8ef3320c8962a91df6cb028496166f33ab80e69008cc95ca81ad17be4850bd5e892d2b31721f23e10eacc0eb442eca4a1aa24afcf0f036db01be7b015da4f2880785e953f2a9ee934d6a249124a3205fca1cec331b2437dc21f8b7416aadfb7ebbe4cbdb87871fdead9d627e0ab631221dd652063c34a49ce30b0336653d79b0a38d02afd5a37759fdb8887cd5e86666ae44ca1e41cf8b83bae58ed7c8cf8737310b703fbab565d817e9a25f4c8a37003ef120c5dff03a1cfbc7fcad5d2cac9fa54d1b0f3b33b7fa409703d8d813739eb92ad37fccaa4ffb2448cf5f179efdf59b90a222ab4cbd6522f30b609bc525da68c128c707b0ac5f48981c6ef97c9c78383d6107cb7b03d59db3886076757a3cef756ac84526602ca084a31f16a10f54c4f504ab624db608e7f026fd70b1bc93673939a0bc76cd88aa466f328128dec19acada83178d96e363e1c1a541ead7d6d3a6bb5d092d63bfeeed15a7f69c9b20e1f71d1c4bec77028ae140ad45a4fc0aa5d4d5f7ac4bde375f1bdb900725c689687b1f3e321d728697b3f6816c36c5721a5492cf9f51e00b22be25aa6ec25cd34f25ac11fc8c4fcb5259f71be69c9c0bddfa8c110a8039463f446c531114fdf104963189c5144f9d9f9361a3aa1691e7443a7c6a155e3a20f149ae9bddc35aad9742c4c232e2d9502012cebb13f1e38062791e9bdb45d51e99d65b9b3e4572200093d374c0c8dc162adbec7dbd84123a2415d5c46411b2693ff97fec6544d08a352e3f01126511ee9687006a03177a9a3c3f520fea76ad37c72402d72f763d0d6e08c8f5db5053a9eae7f3486dc1428f1f6d10b1a89fffa6e379bd2b7124a566ca05b334bfa24b5a8ae161bbce65c046b1c89715d8d1a6f8af92af890df3037527d1165806d02cdce42ff71fbed17fd12bb368003e68e8743502c554366ecedcf803a895697de53d65574f5a4d8f1226f03b58b746246861b409ab51c9d21b47e099c613a82a6ee6d3a1b2671942471bc7569c6dce79b1229892c9d6d123c7456456da420d8ca837e979c684744429f8f261510691be768435aeea977aab39149bd2a8d941312dfd084c35a8256555a1212169b364fae5d7ee1779499a5a13c7873f2500f81c1c030043d247ffe8e389a518ae0bab5260463755d627f8f11d163aee620d5ca7dbc02ac2949eac554095ce96dfc0a687afac420746fcb4fa398acc8064ec2cbc758d6a7bda3390fb5194ec24cdf85b2fdeebdf3e00886cddca854bb663f9639eda8ee8c690203aba966abe6171d2ded468d723435288489d930aac06367f9dc55c5c6606a8173f1e359273a350a1b2dd3dc41a8b0f45e6e8bff41e0d47a4a3bd26f352f4b6e106b5ecc12cc691626f7651cdf2af31c99cdfdbaf86d694ce7b310048e69f24261da695e19a07167993fd97dae60f142546d117792eae734d92e179c8ee2ccac13416a7070f27f3b3597a876d3164af56bd13566a3752ab3ed7b498757b5fcb23503c4167f1f3994a6f324d0d4caedfa01b5a867adc79ead0fe74a280590610fa19ec817f8f497a3d5321b675a6866dd2e42e755139921ba09982adca882e850470d7345da09244d90ddf15a586da584f78717596c31b25d06d7d0e6562ef9803afd767f6c4adc65e6010c6a1b2fbadcf9677b8047377575d23328e53cf269bc0499b1cb277bcb7ef0f8d7c3fc62322293be4850f9826e810540e27b8b58c46ddbba72f61ccb51320864aa5d696028db4d40a2b0492332ea8429c5335edf9cee0ab0cb0f762eee6d32763b5354babe35a94dc739de5429c7fe7892b0d32356961a468f807a48765c9720b533dd2898e84a35f6e87a0d53b9bddb8515b0ef3cbb899043f1dc0d3b069a888e721183526ac572781a5bedc45a6d7077a2687032353f4354388dc2d707c9f6508e83f339d9b9553011d522812bb7e712ebeb1dc2e833839cf9682a35570ab7f5a8be201682f6e949ebb9cd5a34ce519d215f9592258286bfb2aaf7116c132ddb345cb49079104bced92e526bb12f64bd0e174579a4a14e71d86ab43480de4d2eec05b161350ba8315e932dca8e49b751ad6bba066c3149d896124662f333032ea06e6c604a3ab763c7b2830be86cf60d99ead2622b87f7a74d9760405fd7cab6386894082077e3e175d0d996e74a883b01b4bf3b32278ca6ef74145e45f4d155d3588417b404a646d1614fc2c0986a90ea632897a953a80109b5e32479b123f86540a30cd589874b3b5f455a23baaa8c1cdb03c6b3442ed091bacc545e9946ee260259b287a350bbe72275f7b136e093de714fa04c1b24c6a103545eb7c35f5de60235122eb969e9406f92dd22d2533f4d5ebad24b86baffc90bf3620028f22272ec4d9094da2bed6c7949a521545e56e1c4bdc43217d962c7cec5f540e44bcc18777d22a7e689a485728b6e3d18082ad66eee01a8427fed0c67b77a5a6b3b12a91b103ffdf348a245c8c5a369cb04e985ce68ec9a48b137d0118ee8f2e9786029c8a4af5c930277ee850dd61393ffaff32ad1500cb929af08f19b5786e0214b3864e7e1cef06fdca072e2956485d74de02c1df1f36f779c629db382cb2543c7f94a8b04e5e9f6594b2de7cea8a377565644dd9216865597c16a4db38d99f5fee1d69a386f010c68afe5e49453d62bf6c14959efcdce32d1352f98d28ed2eb1470070a38eb82110d40ae570e1b9248750ed63ff19cbefd5ac54eaa9978aa61c650d0b02597bdfed55bb6d04dcf719f948ae21f82cfd82f647b2f51516e17a4ecd9d4fe977d8748ea37e950f1ac27f736b7353965562a83830cafa7e279f50eb1e8f68571f8918c6ba7dac1ec49ac095d713fae36c284b3fa4d3cda32b697a63845395ee1fde5178b65227c401756a787786f414950aa04dbe1a3b98db460c1ebb5a48b065cb4eb874236bb29a13d31cfb6f36a531217c905efe6d5d6c867b377bb4d8c682cabd33e4ee5a89beec133dcb1ccadb78bdc9144f0ac6e47a5725aafbeea4cfe09fa67ca679a0035fd15d5f7b2a012cc5ffca8fcdcc3442989242cff4f46610ef47314043284f2596af862d578999fb38c93831ac224d3d1bf3e8aaeb5b1e2147b240939ba0ba8ce5423377da15397646ac68e9090280b2ee6165fc597e495a72520931687f12603874fab835e29754ab2a24de9ee8c4807b40c85dd39ed48671fbf14c4f29e8dc9b5cc345b0fa3c9d1f7b29155769a3dc2143ccf7c4abed04210ee71207497e2fb8614ed88fd03fe90f9d648de5a2b18bd256222bffff592e830da4e894d6c12f6a6bd8b985aa3a63449dba2f8effab11695dc50dbebc73268475bba0ecdb48a3ea1cd513946243a27b0dee2a350ddce9a8467225ca5567c094a8e537fc9fe8281dba4224dd9903b59b833a96fbc02f187161f610e5b9982e0bdced9486ebe59a9af60720d2b6c38547e6b0f77a1e507bd7eadc05c20049d849d83edce47aaf27b743695e1f29344f89ad0bbcaa308be3568492119543c8b0765772e3e7574bd5e05120c210ef1d3637558f2c84520c3b5d572641b8b686260ccc3af8e98459a639afd8193b378dee5261c1ada129d3805741692842cc0c8608ff688ed0c47e80c33b3d1595f69419f1a3f52ed4fc5e851122b01c65dfb9a7c1841c180c8ab1cc5e51c99daf5385ae813b45d5a38f44e8bebb46f738edf159ec6d5464ad3b0e6fac39f3ac11a9afdf5ecfa56084ba8e641d648069773a505370dc86a48c6cd1de5f12bef9acce69fcdb44e693422828b36e29c90d7f26596970ea4baeca5772c93c448ee1701c5ed95f886d4c82f4494221063d82e5ab8d565ff51a95e5d4981f57fb1897228cebb28612ec7de7bb6f198eecee553cc3f914ef2029a2264a43ebc4b3d40d4ba6608eb040d730a01ba9e468331115b6770ffc7d68a5d254d38792dae3848dcb52a1beef450de71b26b165aa225ab3745968c59092f55d4e5bb6b8c28ac9434d7c32533271d8618151875cf229279683df41066c0ad56dade75c86fa0beaf5ff0d2464c1e662bb00c10b2d1d16afad2c73ea07aa828784ff9c6be0457200f7e1758b00d51572bbde41073fa36921b8480eadc0ee35e1bca9f2da36d56c3d0039a7135ff0e55a7c474de8a424813ebee905ecfd0a703d8b6a1347931f46e35ea7b989adf72b19da9e6568ec16f1423dadf342d35f0b294a27dba8235ef629c1e5294df8543e2f4f93b2be4055da10e2fc8a4d706b6b5ad91dcfd37cc3d111cbfe307994a819c715625562b54dbac4b9c6e3c46c5badd56e2c85b634da6f53e3dc8a0c47d33e601fe0a54f5f7db6e9469e052afb871e11f261ba5e78b9037079eca898e272ac4f9f9dda4f0d3d64ac5e87063cb8baa555cfc8cd3767be12fb3875a115786bfb2769cfaa22a9de204da3ac752331310cdf4c3f5a7744dce53feae4ba623c696c2028bec32cb331beaa43c3fe0b83f03d9453804cd1da6ae08ec7aeec18af74d364b6a8f877fb698578a2dfe35ed4e40d0d66f6f91a36f5fe2eee027eb47e384045e11abf0c065e663e1c3ca903660b5b8fb705acd515260aad63e74dd29192f47bbe04a64fb597df5f90fc357ccec4ead2abac75911d5314c3cda1568718c551fead01468341a69cde80e257a9ea7ee3c8816ce51e9f09dc9c44d615cd13e4b8fa586265d7d74b17f2399f59d05c4cedc455f488c4a74a865e0bd379c7b11e639bf9adc0d3dd659768bd3de5cd88129c4e75e9d1b603b11171f7f4e794fcf981d605db62a19faadf38b1bf859d92e101cd7c4d473d0d8d62be18f65e3412863ee3ea72e0c0117737a8a4344d8ff2df6ec97e84658bff4dfaf1f7cff6413e05d89f15b507a9c403827712a6ffe284ba5a4102ae058f71f7447b77a0045820bb46b80e380226275da59b5b51fc865ef0bfc5458d76af41885f6e2f91c7a9d88b8e075e081cec888e57c2e562951eb0d774a115a0eeed1511c4ef99481f956db42f5729f99519b5ae91d3bcc39e538198f2dd68b058d9a28889eb863a7c05a10588be66f6d5d135905c0a4a3818f91c2f1e0322340a9936cd64d9d752dd52348a6c3d6808b2d92a816b794a9620fa332c694ca9c9814da7ae776366fda77a6591e9b1b0cb5c9703be75db38dbc943e0aacefff29b91a78c0efec3154bbbdd60c15121be219c96aab476a94c2e2159cb20983155a4c1597924e7a1855cdd3ff29f2f0e5748c372c963fa5978fe0cbefbd36b9857d2ec7f57e6fecafcb3cc785e7fd1c400acc0bf6d9244e827fcd335892d9a82f768af47031c8d908005b438efbb20d87418aa39d0f022a3221d9d4baa161fd1979ad9e747690d2f71c18b4493943c3b5a1e28da46aa9a67bf7c96e4797ab1865e2303dc1fb") r11 = getpgid(0x0) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r2, 0xc0207511, &(0x7f0000001680)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) fcntl$getownex(r7, 0x10, &(0x7f0000001700)={0x0, 0x0}) r14 = gettid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000001740)={0x0, 0x0}) r16 = getpgrp(0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000017c0)={0x0, 0x0}) r18 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001880), 0x8000, 0x0) syz_clone3(&(0x7f00000018c0)={0x109210400, &(0x7f0000000340)=0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0), {0x33}, &(0x7f0000000400)=""/19, 0x13, &(0x7f0000000440)=""/90, &(0x7f0000001840)=[r8, r9, r10, r11, r12, r13, r14, r15, r16, r17], 0xa, {r18}}, 0x58) clock_gettime(0x0, &(0x7f0000001980)={0x0, 0x0}) futex$unlock_wake_list32(&(0x7f0000001940)=0x400, 0x60a, 0x75c, &(0x7f00000019c0)={r20, r21+10000000}, &(0x7f0000001a00)=0x7, 0x8) r22 = dup3(r19, r18, 0x0) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r22, 0x40106e8c, &(0x7f0000001a40)=[0x8, 0x3]) ptrace$getregs(0xe, r9, 0x6, &(0x7f0000001a80)=""/173) bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=@bloom_filter={0x1e, 0x5, 0x80000000, 0x80000001, 0x20090, r22, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x5, 0xf}, 0x50) 1.679188395s ago: executing program 1 (id=166): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYRES8=r1, @ANYRES32=0x0, @ANYBLOB="0002010000000000240012800b00010065727370616e000014000280050016000000000008000700ac1414bb08000a00", @ANYRES32=r3], 0x4c}, 0x1, 0x0, 0x0, 0x8044}, 0x0) 1.608691675s ago: executing program 1 (id=168): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/fillfile\x00', 0x42, 0x1ff) quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000900, 0x0, &(0x7f00000002c0)) 1.608409793s ago: executing program 3 (id=169): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) r1 = socket$nl_rdma(0x10, 0x3, 0x14) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x7, 0xfff, 0x7}, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r2, @ANYBLOB="e0ff8b0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x811}, 0x4000804) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003300)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) splice(r1, 0x0, r4, 0x0, 0x400000008000f28, 0x0) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r6, &(0x7f00000008c0)=[{{&(0x7f0000000300)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000001740)=[{&(0x7f0000000200)='\f', 0x1}], 0x1}}], 0x1, 0x4000800) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000000340)=@sack_info={r7, 0x7f}, 0xc) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYRESDEC=0x0, @ANYRES16=r8, @ANYBLOB="1c012abd7000ffdbdf25060000002000038008000500ffffffff14000200766c616e3100000000000000000000002400028006000b000200000006000e004a23000006000f000a00000006000b000a000000080004000900000008000400030000000800060040850000"], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x40000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000000)=ANY=[@ANYRES8=0x0], &(0x7f0000000080)='syzkaller\x00', 0x1000}, 0x94) 1.539239369s ago: executing program 1 (id=170): setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x1, 0x4) (async) r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001040)={'pimreg1\x00', &(0x7f0000000000)=@ethtool_dump={0x3e, 0x9, 0x5, 0x1000, "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"}}) (async) ioctl$BLKCLOSEZONE(0xffffffffffffffff, 0x40101287, &(0x7f0000001080)={0x9, 0xfa}) (async) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000010c0), 0x2) (async) sendmsg$key(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001100)={0x2, 0x14, 0x8, 0x0, 0x14, 0x0, 0x70bd2d, 0x25dfdbfb, [@sadb_x_nat_t_port={0x1, 0x3, 0x84}, @sadb_key={0x9, 0x8, 0x200, 0x0, "df3b25a40a76ca312265896febed204a849eb045990a3ea105f8cee91a5081fec20c78c4fabb3a66dd55c0343ae6fba9602fb746671ad2b5d29437d8fab39847"}, @sadb_ident={0x2, 0xa, 0x4, 0x0, 0xcce}, @sadb_x_sa2={0x2, 0x13, 0x8, 0x0, 0x0, 0x70bd28, 0x3506}, @sadb_lifetime={0x4, 0x3, 0x101, 0x6, 0x5, 0x8db}]}, 0xa0}}, 0x10) ioctl$BTRFS_IOC_SPACE_INFO(r1, 0xc0109414, &(0x7f0000001240)={0xd12, 0x5ea, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) (async) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000014c00)) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000014c80)={0x6, &(0x7f0000014c40)=[{0x5, 0xfa, 0x6, 0x6}, {0xe95, 0x9, 0x4, 0x5}, {0x1, 0x9, 0x5, 0x8}, {0x1, 0x9, 0x5, 0x4}, {0x3, 0x6, 0x5, 0x1}, {0x10, 0x0, 0x53, 0x9}]}) (async) r2 = socket$kcm(0x29, 0x4, 0x0) listen(r2, 0x8) openat$tun(0xffffffffffffff9c, &(0x7f0000014cc0), 0x248000, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000014e00)={&(0x7f0000014d00)=[0x0], &(0x7f0000014d40)=[0x0, 0x0], &(0x7f0000014d80)=[0x0], &(0x7f0000014dc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x1, 0x6}) ioctl$DRM_IOCTL_MODE_SETGAMMA(r1, 0xc02064a5, &(0x7f0000014f00)={r4, 0x4, &(0x7f0000014e40)=[0x6, 0xfff5, 0x6, 0x1], &(0x7f0000014e80)=[0x8, 0x34, 0xa6e0], &(0x7f0000014ec0)}) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MFC_PROXY(r5, 0x29, 0xd3, &(0x7f0000014f40)={{0xa, 0x4e24, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, {0xa, 0x4e20, 0x7, @mcast2, 0x2}, 0xffffffffffffffff, {[0x2, 0xe, 0xd17, 0x7, 0x1, 0x9, 0x10000]}}, 0x5c) (async, rerun: 32) r6 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000014fc0), 0xc0, 0x0) (rerun: 32) ioctl$CDROMVOLCTRL(r6, 0x530a, &(0x7f0000015000)={0x3, 0x2, 0x0, 0xa}) (async, rerun: 64) r7 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000015040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (rerun: 64) syz_usb_control_io(r7, &(0x7f00000152c0)={0x2c, &(0x7f00000150c0)={0x20, 0x11, 0x80, {0x80, 0x7f6af9fdd9c9376f, "37d9f52a666de9586b0d7e2e5e6d722df41992e96bf512d22a80e9fa8300059d0fb75084b2e8ce807b98f830c1265b06a34d31c65c50abf479c92b3a3765399f26395136a02e38a7bad2eebae0c164d000b0fd8417a096d6af80231df8444a933a39ca27535696412aab1f30923e83e73164d8dd65388f0ae3af653da4f2"}}, &(0x7f0000015180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0a}}, &(0x7f00000151c0)={0x0, 0xf, 0x48, {0x5, 0xf, 0x48, 0x3, [@ssp_cap={0x24, 0x10, 0xa, 0xf9, 0x6, 0x8, 0xf0f, 0x1, [0xcf, 0x0, 0xffc0f0, 0xc0c0, 0x3f00, 0x3f1e]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1b, 0xd4, 0x40, 0xe, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "0d9e2488f920c7564afd90059c54d8f8"}]}}, &(0x7f0000015240)={0x20, 0x29, 0xf, {0xf, 0x29, 0xc7, 0x81, 0xff, 0x2, "fc87d4d7", "24569561"}}, &(0x7f0000015280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x60, 0x3, 0x9f, 0x8, 0x400, 0x2800}}}, &(0x7f0000015740)={0x84, &(0x7f0000015300)={0x0, 0x30, 0x5a, "25d4bf50ee848575e318429d5d2a55b0286bb22b582b8b11392ac1814c37fccecd61509738d3c6e0263bf26fef9aceff1538ce01cd925287cffcae6c7ec0a41666d9ba426b588282ba7e87ab22b809be7594729528c7b625b064"}, &(0x7f0000015380)={0x0, 0xa, 0x1, 0x16}, &(0x7f00000153c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000015400)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000015440)={0x20, 0x0, 0x8, {0xa0, 0x1, [0xf1ef]}}, &(0x7f0000015480)={0x40, 0x7, 0x2, 0x4}, &(0x7f00000154c0)={0x40, 0x9, 0x1, 0xd}, &(0x7f0000015500)={0x40, 0xb, 0x2, '\"<'}, &(0x7f0000015540)={0x40, 0xf, 0x2, 0x5b7}, &(0x7f0000015580)={0x40, 0x13, 0x6, @link_local}, &(0x7f00000155c0)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000015600)={0x40, 0x19, 0x2, "c621"}, &(0x7f0000015640)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000015680)={0x40, 0x1c, 0x1, 0x6}, &(0x7f00000156c0)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000015700)={0x40, 0x21, 0x1}}) (async, rerun: 64) pipe2$9p(&(0x7f0000015800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) (rerun: 64) write$P9_RLCREATE(r8, &(0x7f0000015840)={0x18, 0xf, 0x2, {{0x10, 0x2, 0x8}, 0x6}}, 0x18) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000015880)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETFB2(r9, 0xc06864ce, &(0x7f00000158c0)={r3, 0x1ff, 0x5, 0x0, 0x1, [], [0x9, 0x7, 0x1, 0x8], [0x7, 0x5, 0x8000, 0xfff], [0x6, 0x5, 0x7, 0x2]}) (async) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f0000015940)={0x3}) prlimit64(0xffffffffffffffff, 0x1, &(0x7f0000015980)={0x5, 0x8}, &(0x7f00000159c0)) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DEST(r10, &(0x7f0000015b40)={&(0x7f0000015a00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000015b00)={&(0x7f0000015a40)={0xa4, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xf}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffe00}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24000000}, 0x40048c0) r11 = mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x2, 0x5, 0x40010, 0xffffffffffffffff, 0x20000000) syz_io_uring_submit(r11, 0x0, 0x0, &(0x7f0000016fc0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000016f40)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e23, @multicast2}, 0x1, 0x0, 0x3, 0x4}}}) 1.539003663s ago: executing program 3 (id=171): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x80, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}}, @NFT_MSG_DELOBJ={0x3c, 0x14, 0xa, 0x201, 0x0, 0x0, {0x4}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}}, 0x124}, 0x1, 0x0, 0x0, 0x81}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c150000410007012cbd7000fadbdf25037c00000400c280341501802d151080040007"], 0x154c}, 0x1, 0x0, 0x0, 0x4c084}, 0xc000) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f00000001c0)={0x1, 0x7e, 0x22, 0x0, 0x407}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x581, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22004002}, 0x4040800) read$midi(r0, 0x0, 0x3b) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80383, 0x0) ioctl$SNDCTL_SEQ_RESET(r3, 0x5100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043e1f0a00c9000201"], 0x22) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, &(0x7f0000000440)=0xc00) r5 = landlock_create_ruleset(&(0x7f0000000380)={0x7b36}, 0x30, 0x0) r6 = syz_io_uring_complete(0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x10000, 0x0) ioctl$EVIOCSMASK(r6, 0x40104593, 0x0) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/bsg/2:0:0:0\x00', 0xc00, 0x0) ioctl$BSG_GET_VERSION_NUM(r7, 0x2282, &(0x7f0000000e00)) landlock_restrict_self(r5, 0xe) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_dbg\x00', 0x1ff) sync() mount(0x0, &(0x7f0000000100)='./sys_dbg\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) sync() madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 939.333222ms ago: executing program 0 (id=177): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0xfffffffd, 0xffffffffffffffff, 0x4}, 0x38) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x50, 0x50, 0x2, [@decl_tag={0xb, 0x0, 0x0, 0x11, 0x4, 0x7}, @ptr={0xa, 0x0, 0x0, 0x2, 0x3}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x2, 0x1}, {0x0, 0x2}, {0xd, 0xfffffffe}, {0x10}, {0x1, 0x100003}]}]}}, 0x0, 0x6a, 0x0, 0x0, 0x1}, 0x28) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001500010300000000000000000500000008000200", @ANYRES16=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000080) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r2) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$SIOCSIFHWADDR(r2, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0xfffffffd, 0xffffffffffffffff, 0x4}, 0x38) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x50, 0x50, 0x2, [@decl_tag={0xb, 0x0, 0x0, 0x11, 0x4, 0x7}, @ptr={0xa, 0x0, 0x0, 0x2, 0x3}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x2, 0x1}, {0x0, 0x2}, {0xd, 0xfffffffe}, {0x10}, {0x1, 0x100003}]}]}}, 0x0, 0x6a, 0x0, 0x0, 0x1}, 0x28) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001500010300000000000000000500000008000200", @ANYRES16=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000080) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) (async) close(r2) (async) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) ioctl$SIOCSIFHWADDR(r2, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) (async) 815.024889ms ago: executing program 0 (id=178): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="250a00000000000061114c00000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) (fail_nth: 14) 739.538787ms ago: executing program 0 (id=180): newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) 617.579933ms ago: executing program 3 (id=181): sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)) prctl$PR_SET_SECUREBITS(0x1c, 0x25) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x12002, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x93) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280), 0x2002000, &(0x7f0000000440)=ANY=[@ANYBLOB='quota,mpol=bind=static,gid=', @ANYRESHEX=0xee01, @ANYBLOB=',usrquota_inode_hardlimit=%m08%\x00p359,uid=', @ANYRESHEX=0xee01, @ANYBLOB=',size=5,nr_inodes=1Nxtk40mk,mode=00000000000000000000003,grpquota_block_hardlimit=\x008-,audit,rootcontext=sysadm_u,fsmagic=0x0000000000000004,appraise_type=imasig,subj_role=,,ojj_role=$(#@\'},\x00']) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @local, 0x3}, 0x1c, 0x0}, 0x440e0) ioctl$KVM_RUN(r3, 0xae80, 0x0) write(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) 617.271068ms ago: executing program 0 (id=182): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) r3 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000a80)) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f00000003c0)={0x1, r2}) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="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", 0x148}], 0x1}}], 0x1, 0x2090) sendmmsg(r0, &(0x7f0000008d80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000007c0)="c8b7df938dc9c0fcc8a7e84a57fa9059b9cfa4132462f9c45b583e8ce1f19a82364b01b4bc3436dcea3f3380b3269f2c986b7f8205fa231eac99a9de63cd1a85c820fc43c24662a22f18183bb042a742ac921efe546daedbd31cd4b5cda70186dd7ec449169ea58ebc3f3456774ea76202bc9969ea7026a8d7090c085a769e47294e4ea5b8ce3f6187e5ca87549e75b0b2980a21dc7b809da3f544d061ad96d06e0864906297353deefe8b52d519dd67f3f41dd7dd1cda0601b77e8415521d7dbb9893aeefbf94850960c84825a918b0", 0xd0}], 0x1}}, {{0x0, 0x0, &(0x7f0000003300)=[{&(0x7f00000000c0)="88a69f5139292fe55d24310330d349370620dd2737877e864a0d6d86ec395b", 0x1f}, {&(0x7f0000002240)="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", 0x286}], 0x2}}], 0x2, 0x0) 532.206037ms ago: executing program 0 (id=185): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x700) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000000500)={0xc1, {"be090000000000000000000000fff700", "2d0000000000000000eeff00", "a82a0000000000000200"}, 0x3eaf, 0x4}) ioctl$DVB_DEMUX_DMX_START(r1, 0x6f29) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c0000001000010025bd7000fddbdf2500000000", @ANYRES32=r2, @ANYRES16=r1], 0x4c}, 0x1, 0x0, 0x0, 0x200404c1}, 0x4040050) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x8002, 0x0) sendfile(r4, r4, 0x0, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0x10, 0x2, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) socket(0x1e, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r6, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r7, @ANYRES32=r7], 0x44}}, 0x2000800) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r8, &(0x7f0000000080)='4', 0x1) 267.715863ms ago: executing program 2 (id=188): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x9f, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f045}) ppoll(&(0x7f00000000c0)=[{r2, 0x9f712fd3135d632f}], 0x1, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000410007012dbd7000fedbdf2503"], 0x20}, 0x1, 0x0, 0x0, 0x2004c080}, 0xc000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)='\x00', 0x1}], 0x1}, 0x49cf75490397e68f) recvmsg$unix(r4, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x41) sendmsg$unix(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)="f1", 0x1}], 0x1, 0x0, 0x0, 0x10}, 0x1) r6 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) openat$cgroup_pressure(r7, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8905, &(0x7f0000000140)={'erspan0\x00', @broadcast}) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="680000001000ffff2bbd7000bbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="100a0500a31f0500480012800e00010069703665727370616e00000034000280060003003400000014000700fc02000000000014000600fc020000000000000000000000000001000000000000000000"], 0x68}, 0x1, 0x20000, 0x0, 0x240440d5}, 0x9080) 178.829183ms ago: executing program 2 (id=189): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0102000000fcffffff00070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff0008000340000000384c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000200003801c0000800800034000000002100002800c000280080001800000000014000000020a01"], 0xf4}}, 0x0) 178.663857ms ago: executing program 2 (id=190): newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) 90.004617ms ago: executing program 2 (id=191): r0 = socket(0x10, 0x3, 0x0) sendto(r0, &(0x7f0000000000)="3c000000100005060100000000000000000000000000000001000000010000001c0012000a00010076786c616e00ffe40c0002000800010064000000", 0x3c, 0x0, 0x0, 0x0) 89.76956ms ago: executing program 0 (id=192): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) close(r1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000640)={0x4, 0x200, 0x280, &(0x7f0000000240)=[0x7, 0x3ff, 0xffffffff, 0x7, 0x100000000, 0x9, 0x3dae800000000000, 0xffffffffffffffff, 0x2, 0x9, 0x3, 0x80000000, 0x4, 0x3ff, 0x120, 0xffffffffffff5456, 0x101, 0xe, 0x2, 0x9, 0x0, 0x7, 0x1c48, 0x6, 0xb, 0x20000000, 0x15900000, 0x3, 0x2, 0x7ffc, 0x7, 0xfffffffffffffbff, 0xfff, 0xb, 0x4, 0x4, 0x100, 0x800, 0x8, 0xf034, 0x6, 0x0, 0xffffffffffffffff, 0x4, 0xd38, 0x3, 0x8, 0x5, 0x2, 0x0, 0x2, 0x1a94, 0x1, 0x80000001, 0xffff, 0x8000000000000000, 0x0, 0x7f, 0x0, 0x8, 0x8c3, 0x5ef, 0xa33, 0x9, 0xffffffffffffff25, 0xfffffffffffffffa, 0xf703, 0xfffffffffffffffc, 0x401, 0x4, 0xc2, 0xdfb9, 0x2, 0xd424, 0x8001, 0x28, 0x0, 0xfff, 0x100000000, 0x7, 0x2, 0xfffffffffffffffc, 0x7, 0x1, 0x1121, 0x80000000, 0x7611, 0x4f416f1a, 0x3, 0x42, 0x1, 0x7, 0x4, 0x7, 0x6, 0xb0fd, 0x0, 0xd6bf, 0x5, 0x4, 0x3, 0x4, 0x9, 0x9, 0x8, 0xdd76, 0x7, 0x3, 0xce4, 0x4, 0x0, 0x3ff, 0x0, 0x0, 0xce, 0x8, 0xffffffffffffffff, 0x1, 0x0, 0x5, 0x4, 0x6, 0x9, 0xc, 0x56f26d5d, 0x6, 0x7, 0x80]}) r3 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000240)) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r4 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_G_FREQUENCY(r4, 0xc02c5638, &(0x7f0000000300)={0x168, 0x3b3523de9ecc11d5, 0x10001}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket(0x10, 0x3, 0x0) r6 = memfd_create(&(0x7f0000000080)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x84\x14n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$binfmt_misc(r8, &(0x7f0000000480)="dc", 0x1) splice(r7, 0x0, r6, &(0x7f0000000140)=0x8008, 0x4, 0x0) r9 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r9) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) unshare(0x2c020400) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)=@getchain={0x24, 0x66, 0x20, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x7, 0xfff1}, {0x0, 0x9}, {0x2, 0xa}}}, 0x24}}, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r10, 0x29, 0x36, &(0x7f0000002bc0)=ANY=[], 0x8) getsockopt$inet6_opts(r10, 0x29, 0x3b, 0xffffffffffffffff, &(0x7f0000000d80)) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x1}, {}, {0x300}}, [@TCA_CHAIN={0x8, 0xb, 0x10}]}, 0x2c}, 0x1, 0x0, 0x0, 0x810}, 0x0) ioctl$XFS_IOC_BULKSTAT(r4, 0x8040587f, &(0x7f0000000940)={{0x1, 0x0, 0x0, 0x4, 0xcc7a}, &(0x7f0000000780)=[{}, {}]}) 89.234669ms ago: executing program 2 (id=193): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) dup(r1) r2 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)}}], 0x1, 0x2090) sendmmsg(r0, &(0x7f0000008d80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000007c0)="c8b7df938dc9c0fcc8a7e84a57fa9059b9cfa4132462f9c45b583e8ce1f19a82364b01b4bc3436dcea3f3380b3269f2c986b7f8205fa231eac99a9de63cd1a85c820fc43c24662a22f18183bb042a742ac921efe546daedbd31cd4b5cda70186dd7ec449169ea58ebc3f3456774ea76202bc9969ea7026a8d7090c085a769e47294e4ea5b8ce3f6187e5ca87549e75b0b2980a21dc7b809da3f544d061ad96d06e0864906297353deefe8b52d519dd67f3f41dd7dd1cda0601b77e8415521d7dbb9893aeefbf94850960c84825a918b0", 0xd0}], 0x1}}, {{0x0, 0x0, &(0x7f0000003300)=[{&(0x7f00000000c0)="88a69f5139292fe55d24310330d349370620dd2737877e864a0d6d86ec395b", 0x1f}, {&(0x7f0000002240)="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", 0x286}], 0x2}}], 0x2, 0x0) 0s ago: executing program 2 (id=194): time(&(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) ftruncate(r0, 0x2007ffc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) pwrite64(r1, &(0x7f00000000c0)="d3", 0x1, 0xc899) sendfile(r0, r0, 0x0, 0x2000000000006) lseek(r0, 0x8, 0x4) time(&(0x7f0000000040)) 0s ago: executing program 0 (id=195): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0x1ed) rmdir(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/uac1.usb0\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="250a00000000000061114c00000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:27445' (ED25519) to the list of known hosts. [ 42.172054][ T42] kauditd_printk_skb: 20 callbacks suppressed [ 42.172074][ T42] audit: type=1400 audit(1791038023.527:141): avc: denied { mounton } for pid=5717 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 42.174865][ T42] audit: type=1400 audit(1791038023.527:142): avc: denied { mount } for pid=5717 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.177139][ T5717] cgroup: Unknown subsys name 'net' [ 42.180503][ T42] audit: type=1400 audit(1791038023.537:143): avc: denied { unmount } for pid=5717 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.342193][ T5717] cgroup: Unknown subsys name 'cpuset' [ 42.345781][ T5717] cgroup: Unknown subsys name 'rlimit' [ 42.472458][ T42] audit: type=1400 audit(1791038023.827:144): avc: denied { setattr } for pid=5717 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.472713][ T42] audit: type=1400 audit(1791038023.827:145): avc: denied { create } for pid=5717 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.472894][ T42] audit: type=1400 audit(1791038023.827:146): avc: denied { write } for pid=5717 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.473113][ T42] audit: type=1400 audit(1791038023.827:147): avc: denied { read } for pid=5717 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.483066][ T42] audit: type=1400 audit(1791038023.837:148): avc: denied { mounton } for pid=5717 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 42.483932][ T42] audit: type=1400 audit(1791038023.837:149): avc: denied { mount } for pid=5717 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 42.496873][ T42] audit: type=1400 audit(1791038023.847:150): avc: denied { read } for pid=5445 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 42.531139][ T5722] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 43.283717][ T5717] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 47.313311][ T42] kauditd_printk_skb: 8 callbacks suppressed [ 47.313328][ T42] audit: type=1400 audit(1791038028.667:159): avc: denied { create } for pid=5729 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.313675][ T42] audit: type=1400 audit(1791038028.667:160): avc: denied { read write } for pid=5729 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.314012][ T42] audit: type=1400 audit(1791038028.667:161): avc: denied { open } for pid=5729 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.322258][ T42] audit: type=1400 audit(1791038028.677:162): avc: denied { ioctl } for pid=5729 comm="syz-executor" path="socket:[6125]" dev="sockfs" ino=6125 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.354301][ T5737] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 47.356517][ T5737] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 47.359624][ T5737] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 47.360463][ T5737] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 47.361606][ T5737] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 47.362615][ T5737] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 47.362806][ T5737] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 47.363103][ T5737] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 47.365914][ T5744] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 47.366462][ T5742] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 47.367940][ T5742] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 47.367984][ T5744] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 47.370582][ T5737] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 47.371477][ T5737] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 47.372065][ T5737] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 47.372691][ T5744] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 47.376662][ T5737] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 47.377135][ T42] audit: type=1400 audit(1791038028.727:163): avc: denied { read } for pid=5732 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.377170][ T42] audit: type=1400 audit(1791038028.727:164): avc: denied { open } for pid=5732 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.377482][ T5737] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 47.378148][ T5737] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 47.378879][ T5092] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 47.380337][ T42] audit: type=1400 audit(1791038028.737:165): avc: denied { mounton } for pid=5732 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 47.393309][ T42] audit: type=1400 audit(1791038028.747:166): avc: denied { module_request } for pid=5732 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 47.412590][ T42] audit: type=1400 audit(1791038028.767:167): avc: denied { sys_module } for pid=5731 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 47.941427][ T5731] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.941567][ T5731] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.941672][ T5731] bridge_slave_0: entered allmulticast mode [ 47.943170][ T5731] bridge_slave_0: entered promiscuous mode [ 47.960932][ T5731] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.961051][ T5731] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.961165][ T5731] bridge_slave_1: entered allmulticast mode [ 47.962801][ T5731] bridge_slave_1: entered promiscuous mode [ 48.044740][ T5729] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.044822][ T5729] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.044963][ T5729] bridge_slave_0: entered allmulticast mode [ 48.046386][ T5729] bridge_slave_0: entered promiscuous mode [ 48.075617][ T5731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.075833][ T5729] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.075875][ T5729] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.075933][ T5729] bridge_slave_1: entered allmulticast mode [ 48.076665][ T5729] bridge_slave_1: entered promiscuous mode [ 48.079566][ T5731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.085894][ T5732] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.086031][ T5732] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.086151][ T5732] bridge_slave_0: entered allmulticast mode [ 48.087661][ T5732] bridge_slave_0: entered promiscuous mode [ 48.090307][ T5732] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.090391][ T5732] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.090518][ T5732] bridge_slave_1: entered allmulticast mode [ 48.092033][ T5732] bridge_slave_1: entered promiscuous mode [ 48.165122][ T5729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.184055][ T5731] team0: Port device team_slave_0 added [ 48.186793][ T5729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.204028][ T5731] team0: Port device team_slave_1 added [ 48.213287][ T5732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.213384][ T5734] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.213427][ T5734] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.213489][ T5734] bridge_slave_0: entered allmulticast mode [ 48.214280][ T5734] bridge_slave_0: entered promiscuous mode [ 48.240248][ T5732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.251003][ T5734] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.251047][ T5734] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.251116][ T5734] bridge_slave_1: entered allmulticast mode [ 48.251888][ T5734] bridge_slave_1: entered promiscuous mode [ 48.261561][ T5729] team0: Port device team_slave_0 added [ 48.277636][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.277647][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.277660][ T5731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.289882][ T5732] team0: Port device team_slave_0 added [ 48.291493][ T5734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.293090][ T5729] team0: Port device team_slave_1 added [ 48.295812][ T5734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.296538][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.296549][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.296569][ T5731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.305139][ T5732] team0: Port device team_slave_1 added [ 48.331361][ T5734] team0: Port device team_slave_0 added [ 48.345319][ T5729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.345330][ T5729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.345343][ T5729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.347386][ T5734] team0: Port device team_slave_1 added [ 48.347793][ T5729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.347801][ T5729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.347816][ T5729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.348973][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.348980][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.348992][ T5732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.365911][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.365922][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.365935][ T5732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.366398][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.366407][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.366419][ T5734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.385907][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.385917][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.385931][ T5734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.410072][ T5731] hsr_slave_0: entered promiscuous mode [ 48.410625][ T5731] hsr_slave_1: entered promiscuous mode [ 48.417424][ T5729] hsr_slave_0: entered promiscuous mode [ 48.418000][ T5729] hsr_slave_1: entered promiscuous mode [ 48.418478][ T5729] debugfs: 'hsr0' already exists in 'hsr' [ 48.418531][ T5729] Cannot create hsr debugfs directory [ 48.472173][ T5732] hsr_slave_0: entered promiscuous mode [ 48.472608][ T5732] hsr_slave_1: entered promiscuous mode [ 48.472901][ T5732] debugfs: 'hsr0' already exists in 'hsr' [ 48.472912][ T5732] Cannot create hsr debugfs directory [ 48.495786][ T5734] hsr_slave_0: entered promiscuous mode [ 48.496655][ T5734] hsr_slave_1: entered promiscuous mode [ 48.496979][ T5734] debugfs: 'hsr0' already exists in 'hsr' [ 48.496991][ T5734] Cannot create hsr debugfs directory [ 48.757554][ T5731] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.765593][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.766253][ T5731] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.770296][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.771185][ T5731] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.775312][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.783984][ T5731] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.786412][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.841711][ T5729] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.845228][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.846728][ T5729] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.852033][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.852752][ T5729] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.857315][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.869708][ T5729] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.874905][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.934720][ T5734] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.940989][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.941738][ T5734] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.945119][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.945862][ T5734] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.948195][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.948728][ T5734] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.953682][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.030463][ T5732] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 49.032639][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.035868][ T5732] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.039383][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.044588][ T5731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.052790][ T5732] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 49.057429][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.059270][ T5732] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 49.062940][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.095690][ T5731] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.111248][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.111402][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.122858][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.122906][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.136665][ T5729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.165441][ T5734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.166944][ T5729] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.176371][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.176417][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.192503][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.192549][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.206340][ T5734] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.226421][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.226481][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.232140][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.232191][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.269158][ T5732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.297203][ T5732] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.310181][ T231] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.310228][ T231] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.314565][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.314644][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.429844][ T5742] Bluetooth: hci0: command tx timeout [ 49.430357][ T5742] Bluetooth: hci1: command tx timeout [ 49.430626][ T5742] Bluetooth: hci3: command tx timeout [ 49.430682][ T5742] Bluetooth: hci2: command tx timeout [ 49.489704][ T5731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.530061][ T5729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.530454][ T5731] veth0_vlan: entered promiscuous mode [ 49.549622][ T5731] veth1_vlan: entered promiscuous mode [ 49.576075][ T5729] veth0_vlan: entered promiscuous mode [ 49.584190][ T5729] veth1_vlan: entered promiscuous mode [ 49.593383][ T5731] veth0_macvtap: entered promiscuous mode [ 49.599314][ T5731] veth1_macvtap: entered promiscuous mode [ 49.617562][ T5729] veth0_macvtap: entered promiscuous mode [ 49.625458][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.633551][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.635749][ T5734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.636171][ T5729] veth1_macvtap: entered promiscuous mode [ 49.654870][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.678457][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.712061][ T5732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.760479][ T5734] veth0_vlan: entered promiscuous mode [ 49.777504][ T5734] veth1_vlan: entered promiscuous mode [ 49.788698][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.791427][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.791446][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.838744][ T5781] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.853768][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.853786][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.858168][ T231] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.858182][ T231] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.864493][ T5734] veth0_macvtap: entered promiscuous mode [ 49.881271][ T5734] veth1_macvtap: entered promiscuous mode [ 49.881932][ T5732] veth0_vlan: entered promiscuous mode [ 49.886995][ T42] audit: type=1400 audit(1791038031.237:168): avc: denied { mount } for pid=5731 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 49.889847][ T5732] veth1_vlan: entered promiscuous mode [ 49.892024][ T231] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.892040][ T231] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.904472][ T5808] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.924903][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.941838][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.956323][ T5729] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.988171][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.989034][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.989068][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.989099][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.989129][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.989159][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.989190][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.989220][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.989251][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.994425][ T5732] veth0_macvtap: entered promiscuous mode [ 50.009579][ T5732] veth1_macvtap: entered promiscuous mode [ 50.042857][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.043633][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.043649][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.052163][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.100006][ T231] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.100027][ T231] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.101248][ T5881] tipc: Started in network mode [ 50.101264][ T5881] tipc: Node identity 4, cluster identity 4711 [ 50.101276][ T5881] tipc: Node number set to 4 [ 50.103017][ T5881] tipc: Enabled bearer , priority 0 [ 50.105339][ T5881] tipc: Disabling bearer [ 50.115975][ T5881] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 0 (only 8 groups) [ 50.184289][ T231] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.184302][ T231] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.206128][ T231] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.206146][ T231] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.218522][ T5808] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.258780][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.299060][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.299260][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.325840][ T5895] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'. [ 50.401971][ T5890] Zero length message leads to an empty skb [ 50.456388][ T5909] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12'. [ 50.459029][ T5909] IPv6: sit1: Disabled Multicast RS [ 50.459573][ T5909] sit1: entered allmulticast mode [ 50.483797][ T5913] PKCS7: Unknown OID: [98] 1.2.10824.113549.1.1.1 [ 50.483809][ T5913] Unsupported pkey algo: 106 [ 50.517925][ T5808] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.517970][ T5808] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.518503][ T5808] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.518535][ T5808] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.558745][ T5921] jffs2: notice: (5921) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 50.577653][ T5929] MTD: Couldn't look up './cgroup': -15 [ 50.609402][ T5927] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 50.689465][ T5937] netlink: 48 bytes leftover after parsing attributes in process `syz.3.21'. [ 50.705571][ T5937] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21'. [ 50.706603][ T5937] hsr_slave_0: left promiscuous mode [ 50.707379][ T5937] hsr_slave_1: left promiscuous mode [ 50.839018][ T5942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22'. [ 51.489082][ T5949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.24'. [ 51.493027][ T5949] IPv6: sit1: Disabled Multicast RS [ 51.493864][ T5949] sit1: entered allmulticast mode [ 51.507918][ T5737] Bluetooth: hci2: command tx timeout [ 51.507956][ T5737] Bluetooth: hci3: command tx timeout [ 51.507978][ T5737] Bluetooth: hci1: command tx timeout [ 51.507998][ T5737] Bluetooth: hci0: command tx timeout [ 51.548945][ T5951] FAULT_INJECTION: forcing a failure. [ 51.548945][ T5951] name fail_futex, interval 1, probability 0, space 0, times 1 [ 51.548977][ T5951] CPU: 1 UID: 0 PID: 5951 Comm: syz.0.25 Not tainted syzkaller #0 PREEMPT(full) [ 51.548999][ T5951] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.549011][ T5951] Call Trace: [ 51.549018][ T5951] [ 51.549026][ T5951] dump_stack_lvl+0x100/0x190 [ 51.549061][ T5951] should_fail_ex.cold+0x5/0xa [ 51.549091][ T5951] get_futex_key+0x1d0/0x14f0 [ 51.549121][ T5951] ? __pfx_get_futex_key+0x10/0x10 [ 51.549148][ T5951] ? wakeup_preempt_fair+0x5c3/0xdc0 [ 51.549182][ T5951] futex_wait_setup+0x91/0x540 [ 51.549211][ T5951] __futex_wait+0x19f/0x300 [ 51.549236][ T5951] ? __pfx___futex_wait+0x10/0x10 [ 51.549256][ T5951] ? __pfx_try_to_wake_up+0x10/0x10 [ 51.549278][ T5951] ? futex_hash+0x311/0x400 [ 51.549306][ T5951] ? __pfx_futex_wake_mark+0x10/0x10 [ 51.549331][ T5951] ? find_held_lock+0x2b/0x80 [ 51.549361][ T5951] ? futex_wake+0x4ea/0x5e0 [ 51.549386][ T5951] futex_wait+0xe6/0x370 [ 51.549407][ T5951] ? __pfx_futex_wait+0x10/0x10 [ 51.549442][ T5951] ? percpu_counter_add_batch+0xb9/0x230 [ 51.549472][ T5951] ? errseq_sample+0x51/0x70 [ 51.549498][ T5951] ? file_init_path+0x48e/0x670 [ 51.549534][ T5951] do_futex+0x265/0x440 [ 51.549564][ T5951] ? __pfx_do_futex+0x10/0x10 [ 51.549599][ T5951] __x64_sys_futex+0x34f/0x4d0 [ 51.549630][ T5951] ? __sys_socket+0xac/0x260 [ 51.549652][ T5951] ? __pfx___x64_sys_futex+0x10/0x10 [ 51.549692][ T5951] do_syscall_64+0x123/0x790 [ 51.549718][ T5951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.549738][ T5951] RIP: 0033:0x7f0c95b9e159 [ 51.549754][ T5951] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.549773][ T5951] RSP: 002b:00007f0c969a00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 51.549793][ T5951] RAX: ffffffffffffffda RBX: 00007f0c95e25fa8 RCX: 00007f0c95b9e159 [ 51.549808][ T5951] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f0c95e25fa8 [ 51.549820][ T5951] RBP: 00007f0c95e25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 51.549832][ T5951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 51.549843][ T5951] R13: 00007f0c95e26038 R14: 00007ffef5b92900 R15: 00007ffef5b929e8 [ 51.549869][ T5951] [ 51.997855][ T5808] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.997885][ T5808] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.997902][ T5808] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.997920][ T5808] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.065798][ T5965] netlink: 36 bytes leftover after parsing attributes in process `syz.3.29'. [ 52.145656][ T5968] CUSE: unknown device info "" [ 52.145667][ T5968] CUSE: unknown device info "" [ 52.145671][ T5968] CUSE: unknown device info "" [ 52.145675][ T5968] CUSE: unknown device info "" [ 52.145679][ T5968] CUSE: zero length info key specified [ 52.192646][ T63] Bluetooth: hci4: Frame reassembly failed (-84) [ 52.192725][ T63] Bluetooth: hci4: Frame reassembly failed (-84) [ 52.194111][ T1162] Bluetooth: hci4: Frame reassembly failed (-84) [ 52.322853][ T5978] kvm: pic: non byte read [ 52.700140][ T5986] FAULT_INJECTION: forcing a failure. [ 52.700140][ T5986] name fail_futex, interval 1, probability 0, space 0, times 0 [ 52.700171][ T5986] CPU: 2 UID: 0 PID: 5986 Comm: syz.1.35 Not tainted syzkaller #0 PREEMPT(full) [ 52.700190][ T5986] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.700199][ T5986] Call Trace: [ 52.700205][ T5986] [ 52.700212][ T5986] dump_stack_lvl+0x100/0x190 [ 52.700241][ T5986] should_fail_ex.cold+0x5/0xa [ 52.700265][ T5986] get_futex_key+0x1d0/0x14f0 [ 52.700290][ T5986] ? __pfx_get_futex_key+0x10/0x10 [ 52.700312][ T5986] ? trace_ipi_send_cpu.constprop.0+0x73/0x220 [ 52.700338][ T5986] ? __smp_call_single_queue+0x17e/0x450 [ 52.700361][ T5986] ? __pfx___smp_call_single_queue+0x10/0x10 [ 52.700403][ T5986] futex_wait_setup+0x91/0x540 [ 52.700435][ T5986] __futex_wait+0x19f/0x300 [ 52.700455][ T5986] ? __pfx___futex_wait+0x10/0x10 [ 52.700472][ T5986] ? __pfx_try_to_wake_up+0x10/0x10 [ 52.700492][ T5986] ? futex_hash+0x311/0x400 [ 52.700515][ T5986] ? __pfx_futex_wake_mark+0x10/0x10 [ 52.700535][ T5986] ? find_held_lock+0x2b/0x80 [ 52.700558][ T5986] ? futex_wake+0x4ea/0x5e0 [ 52.700579][ T5986] futex_wait+0xe6/0x370 [ 52.700596][ T5986] ? __pfx_futex_wait+0x10/0x10 [ 52.700617][ T5986] ? percpu_counter_add_batch+0xb9/0x230 [ 52.700639][ T5986] ? errseq_sample+0x51/0x70 [ 52.700659][ T5986] ? file_init_path+0x48e/0x670 [ 52.700687][ T5986] do_futex+0x265/0x440 [ 52.700711][ T5986] ? __pfx_do_futex+0x10/0x10 [ 52.700739][ T5986] __x64_sys_futex+0x34f/0x4d0 [ 52.700763][ T5986] ? __sys_socket+0xac/0x260 [ 52.700782][ T5986] ? __pfx___x64_sys_futex+0x10/0x10 [ 52.700817][ T5986] do_syscall_64+0x123/0x790 [ 52.700838][ T5986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.700855][ T5986] RIP: 0033:0x7f9e9e59e159 [ 52.700868][ T5986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.700883][ T5986] RSP: 002b:00007f9e9f4c20e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 52.700899][ T5986] RAX: ffffffffffffffda RBX: 00007f9e9e825fa8 RCX: 00007f9e9e59e159 [ 52.700910][ T5986] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9e9e825fa8 [ 52.700919][ T5986] RBP: 00007f9e9e825fa0 R08: 0000000000000000 R09: 0000000000000000 [ 52.700929][ T5986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 52.700938][ T5986] R13: 00007f9e9e826038 R14: 00007fffbe26e750 R15: 00007fffbe26e838 [ 52.700960][ T5986] [ 52.767871][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.767910][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.767938][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.767966][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.843418][ T42] kauditd_printk_skb: 95 callbacks suppressed [ 52.843436][ T42] audit: type=1400 audit(1791038034.197:264): avc: denied { setopt } for pid=5991 comm="syz.1.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 52.845218][ T42] audit: type=1400 audit(1791038034.197:265): avc: denied { create } for pid=5991 comm="syz.1.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 52.938020][ T42] audit: type=1400 audit(1791038034.297:266): avc: denied { create } for pid=5993 comm="syz.1.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 52.942280][ T5994] loop0: detected capacity change from 0 to 3904 [ 53.002023][ T5994] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 53.002037][ T5994] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 53.002065][ T5994] loop0: [ 53.045981][ T42] audit: type=1400 audit(1791038034.397:267): avc: denied { sys_module } for pid=5996 comm="syz.1.40" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 53.083009][ T5997] syz.1.40 uses obsolete (PF_INET,SOCK_PACKET) [ 53.256515][ T42] audit: type=1400 audit(1791038034.607:268): avc: denied { unlink } for pid=5729 comm="syz-executor" name="file0" dev="tmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 53.305065][ T42] audit: type=1400 audit(1791038034.657:269): avc: denied { mount } for pid=6005 comm="syz.0.41" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 53.325612][ T42] audit: type=1400 audit(1791038034.677:270): avc: denied { unmount } for pid=5731 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 53.353367][ T42] audit: type=1400 audit(1791038034.707:271): avc: denied { create } for pid=6010 comm="syz.1.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 53.379500][ T6016] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 53.382890][ T42] audit: type=1400 audit(1791038034.737:272): avc: denied { read write } for pid=6017 comm="syz.0.44" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 53.383216][ T42] audit: type=1400 audit(1791038034.737:273): avc: denied { open } for pid=6017 comm="syz.0.44" path="/dev/raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 53.470337][ T6025] can0: slcan on pts1. [ 53.548926][ T6024] can0 (unregistered): slcan off pts1. [ 53.587834][ T5737] Bluetooth: hci0: command tx timeout [ 53.587856][ T5737] Bluetooth: hci1: command tx timeout [ 53.587873][ T5737] Bluetooth: hci3: command tx timeout [ 53.587890][ T5737] Bluetooth: hci2: command tx timeout [ 53.637004][ T6044] afs: Unknown parameter 'smackfsdef' [ 53.640080][ T25] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 53.790397][ T25] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 53.792620][ T25] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 53.792637][ T25] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 53.792646][ T25] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 53.792666][ T25] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.793794][ T25] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 53.793806][ T25] usb 5-1: Product: syz [ 53.793813][ T25] usb 5-1: Manufacturer: syz [ 53.806222][ T25] cdc_wdm 5-1:1.0: skipping garbage [ 53.806235][ T25] cdc_wdm 5-1:1.0: skipping garbage [ 53.829600][ T25] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 53.829613][ T25] cdc_wdm 5-1:1.0: Unknown control protocol [ 53.854439][ T6063] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 53.874026][ T6064] netlink: 156 bytes leftover after parsing attributes in process `syz.1.57'. [ 53.933065][ T6073] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 53.999664][ T35] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 54.005250][ T979] usb 5-1: USB disconnect, device number 2 [ 54.087263][ T6082] netlink: 112 bytes leftover after parsing attributes in process `syz.1.63'. [ 54.177783][ T35] usb 7-1: Using ep0 maxpacket: 8 [ 54.178278][ T35] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 54.179531][ T35] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 54.179548][ T35] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 54.179561][ T35] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 54.179572][ T35] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 54.179591][ T35] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.228029][ T5742] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 54.338866][ T6095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.69'. [ 54.387393][ T35] usb 7-1: GET_CAPABILITIES returned 0 [ 54.387417][ T35] usbtmc 7-1:16.0: can't read capabilities [ 54.457823][ T851] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 54.597101][ T5884] usb 7-1: USB disconnect, device number 2 [ 54.610858][ T851] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 54.612212][ T851] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 54.612232][ T851] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 54.612246][ T851] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 54.612279][ T851] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.614324][ T851] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 54.614343][ T851] usb 5-1: Product: syz [ 54.614355][ T851] usb 5-1: Manufacturer: syz [ 54.633786][ T851] cdc_wdm 5-1:1.0: skipping garbage [ 54.633801][ T851] cdc_wdm 5-1:1.0: skipping garbage [ 54.637449][ T851] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 54.637465][ T851] cdc_wdm 5-1:1.0: Unknown control protocol [ 55.177942][ T6104] FAULT_INJECTION: forcing a failure. [ 55.177942][ T6104] name failslab, interval 1, probability 0, space 0, times 0 [ 55.177963][ T6104] CPU: 0 UID: 0 PID: 6104 Comm: syz.2.70 Tainted: G L syzkaller #0 PREEMPT(full) [ 55.177978][ T6104] Tainted: [L]=SOFTLOCKUP [ 55.177982][ T6104] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 55.177988][ T6104] Call Trace: [ 55.177992][ T6104] [ 55.177997][ T6104] dump_stack_lvl+0x100/0x190 [ 55.178017][ T6104] should_fail_ex.cold+0x5/0xa [ 55.178032][ T6104] should_failslab+0xc2/0x120 [ 55.178048][ T6104] __kmalloc_cache_node_noprof+0x94/0x720 [ 55.178064][ T6104] ? __get_vm_area_node+0x124/0x350 [ 55.178081][ T6104] __get_vm_area_node+0x124/0x350 [ 55.178098][ T6104] __vmalloc_node_range_noprof+0x268/0x1420 [ 55.178116][ T6104] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 55.178132][ T6104] ? up_write+0x2dc/0x5b0 [ 55.178149][ T6104] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 55.178164][ T6104] ? lock_acquire+0x1d1/0x380 [ 55.178177][ T6104] ? find_held_lock+0x2b/0x80 [ 55.178193][ T6104] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 55.178209][ T6104] ? avc_has_perm_noaudit+0x11e/0x470 [ 55.178230][ T6104] ? avc_has_perm_noaudit+0x145/0x470 [ 55.178248][ T6104] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 55.178262][ T6104] __vmalloc_node_noprof+0xad/0xf0 [ 55.178278][ T6104] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 55.178295][ T6104] __vmalloc_noprof+0xa3/0x120 [ 55.178311][ T6104] ? __pfx___vmalloc_noprof+0x10/0x10 [ 55.178328][ T6104] ? rcu_is_watching+0x13/0xc0 [ 55.178344][ T6104] ? cap_capable+0x107/0x430 [ 55.178370][ T6104] bpf_prog_alloc_no_stats+0x59/0x690 [ 55.178387][ T6104] ? security_capable+0x80/0x260 [ 55.178400][ T6104] bpf_prog_alloc+0x3b/0x200 [ 55.178414][ T6104] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 55.178428][ T6104] bpf_prog_load+0x49e/0x2a70 [ 55.178447][ T6104] ? __pfx_bpf_prog_load+0x10/0x10 [ 55.178475][ T6104] __sys_bpf+0x1f46/0x4a30 [ 55.178495][ T6104] ? __pfx___sys_bpf+0x10/0x10 [ 55.178506][ T6104] ? find_held_lock+0x2b/0x80 [ 55.178522][ T6104] ? get_pid_task+0xfc/0x250 [ 55.178537][ T6104] ? get_pid_task+0xfc/0x250 [ 55.178557][ T6104] ? find_held_lock+0x2b/0x80 [ 55.178576][ T6104] ? rcu_read_lock_any_held+0x6a/0x90 [ 55.178593][ T6104] ? find_held_lock+0x2b/0x80 [ 55.178609][ T6104] ? ksys_write+0x190/0x250 [ 55.178621][ T6104] ? ksys_write+0x190/0x250 [ 55.178633][ T6104] ? lock_acquire+0x1d1/0x380 [ 55.178654][ T6104] ? fput+0x7c/0x100 [ 55.178669][ T6104] ? ksys_write+0x1ac/0x250 [ 55.178683][ T6104] ? __x64_sys_bpf+0xce/0x140 [ 55.178694][ T6104] __x64_sys_bpf+0xce/0x140 [ 55.178707][ T6104] ? do_syscall_64+0xae/0x790 [ 55.178720][ T6104] do_syscall_64+0x123/0x790 [ 55.178733][ T6104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.178744][ T6104] RIP: 0033:0x7f76bdf9e159 [ 55.178753][ T6104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.178763][ T6104] RSP: 002b:00007f76bedd0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 55.178774][ T6104] RAX: ffffffffffffffda RBX: 00007f76be225fa0 RCX: 00007f76bdf9e159 [ 55.178781][ T6104] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 55.178788][ T6104] RBP: 00007f76bedd0090 R08: 0000000000000000 R09: 0000000000000000 [ 55.178794][ T6104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.178800][ T6104] R13: 00007f76be226038 R14: 00007f76be225fa0 R15: 00007ffc848d94f8 [ 55.178814][ T6104] [ 55.179348][ T6104] syz.2.70: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 55.179419][ T6104] CPU: 0 UID: 0 PID: 6104 Comm: syz.2.70 Tainted: G L syzkaller #0 PREEMPT(full) [ 55.179433][ T6104] Tainted: [L]=SOFTLOCKUP [ 55.179437][ T6104] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 55.179443][ T6104] Call Trace: [ 55.179447][ T6104] [ 55.179451][ T6104] dump_stack_lvl+0x100/0x190 [ 55.179470][ T6104] warn_alloc.cold+0x9e/0xb2 [ 55.179481][ T6104] ? __pfx_warn_alloc+0x10/0x10 [ 55.179498][ T6104] ? __kasan_kmalloc+0x8a/0xb0 [ 55.179531][ T6104] ? __get_vm_area_node+0x22b/0x350 [ 55.179550][ T6104] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 55.179568][ T6104] ? up_write+0x2dc/0x5b0 [ 55.179584][ T6104] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 55.179599][ T6104] ? lock_acquire+0x1d1/0x380 [ 55.179612][ T6104] ? find_held_lock+0x2b/0x80 [ 55.179629][ T6104] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 55.179645][ T6104] ? avc_has_perm_noaudit+0x11e/0x470 [ 55.179665][ T6104] ? avc_has_perm_noaudit+0x145/0x470 [ 55.179683][ T6104] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 55.179697][ T6104] __vmalloc_node_noprof+0xad/0xf0 [ 55.179713][ T6104] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 55.179730][ T6104] __vmalloc_noprof+0xa3/0x120 [ 55.179746][ T6104] ? __pfx___vmalloc_noprof+0x10/0x10 [ 55.179763][ T6104] ? rcu_is_watching+0x13/0xc0 [ 55.179778][ T6104] ? cap_capable+0x107/0x430 [ 55.179791][ T6104] bpf_prog_alloc_no_stats+0x59/0x690 [ 55.179805][ T6104] ? security_capable+0x80/0x260 [ 55.179818][ T6104] bpf_prog_alloc+0x3b/0x200 [ 55.179831][ T6104] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 55.179846][ T6104] bpf_prog_load+0x49e/0x2a70 [ 55.179864][ T6104] ? __pfx_bpf_prog_load+0x10/0x10 [ 55.179891][ T6104] __sys_bpf+0x1f46/0x4a30 [ 55.179907][ T6104] ? __pfx___sys_bpf+0x10/0x10 [ 55.179918][ T6104] ? find_held_lock+0x2b/0x80 [ 55.179934][ T6104] ? get_pid_task+0xfc/0x250 [ 55.179948][ T6104] ? get_pid_task+0xfc/0x250 [ 55.179967][ T6104] ? find_held_lock+0x2b/0x80 [ 55.179986][ T6104] ? rcu_read_lock_any_held+0x6a/0x90 [ 55.180003][ T6104] ? find_held_lock+0x2b/0x80 [ 55.180019][ T6104] ? ksys_write+0x190/0x250 [ 55.180031][ T6104] ? ksys_write+0x190/0x250 [ 55.180043][ T6104] ? lock_acquire+0x1d1/0x380 [ 55.180064][ T6104] ? fput+0x7c/0x100 [ 55.180080][ T6104] ? ksys_write+0x1ac/0x250 [ 55.180093][ T6104] ? __x64_sys_bpf+0xce/0x140 [ 55.180105][ T6104] __x64_sys_bpf+0xce/0x140 [ 55.180117][ T6104] ? do_syscall_64+0xae/0x790 [ 55.180129][ T6104] do_syscall_64+0x123/0x790 [ 55.180142][ T6104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.180153][ T6104] RIP: 0033:0x7f76bdf9e159 [ 55.180162][ T6104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.180171][ T6104] RSP: 002b:00007f76bedd0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 55.180182][ T6104] RAX: ffffffffffffffda RBX: 00007f76be225fa0 RCX: 00007f76bdf9e159 [ 55.180188][ T6104] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 55.180195][ T6104] RBP: 00007f76bedd0090 R08: 0000000000000000 R09: 0000000000000000 [ 55.180201][ T6104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.180207][ T6104] R13: 00007f76be226038 R14: 00007f76be225fa0 R15: 00007ffc848d94f8 [ 55.180221][ T6104] [ 55.180322][ T6104] Mem-Info: [ 55.180329][ T6104] active_anon:7869 inactive_anon:3 isolated_anon:0 [ 55.180329][ T6104] active_file:0 inactive_file:56108 isolated_file:0 [ 55.180329][ T6104] unevictable:1000 dirty:99 writeback:0 [ 55.180329][ T6104] slab_reclaimable:11712 slab_unreclaimable:64304 [ 55.180329][ T6104] mapped:24507 shmem:1557 pagetables:1162 [ 55.180329][ T6104] sec_pagetables:294 bounce:0 [ 55.180329][ T6104] kernel_misc_reclaimable:0 [ 55.180329][ T6104] free:459376 free_pcp:19559 free_cma:0 [ 55.180354][ T6104] Node 0 active_anon:31476kB inactive_anon:12kB active_file:0kB inactive_file:224232kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:98028kB dirty:396kB writeback:0kB shmem:4228kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12896kB pagetables:4456kB sec_pagetables:1176kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 55.180381][ T6104] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:160kB pagetables:192kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 55.180406][ T6104] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 55.180434][ T6104] lowmem_reserve[]: 0 1223 1223 1223 1223 [ 55.180453][ T6104] Node 0 DMA32 free:177448kB boost:0kB min:27356kB low:34192kB high:41028kB reserved_highatomic:0kB free_highatomic:0kB active_anon:31476kB inactive_anon:12kB active_file:0kB inactive_file:224232kB unevictable:2000kB writepending:396kB zspages:0kB present:2080628kB managed:1253116kB mlocked:0kB bounce:0kB free_pcp:74456kB local_pcp:15356kB free_cma:0kB [ 55.180482][ T6104] lowmem_reserve[]: 0 0 0 0 0 [ 55.180505][ T6104] Node 1 Normal free:1644696kB boost:0kB min:39880kB low:49848kB high:59816kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:2000kB writepending:0kB zspages:0kB present:2097152kB managed:1781880kB mlocked:0kB bounce:0kB free_pcp:3780kB local_pcp:2440kB free_cma:0kB [ 55.180533][ T6104] lowmem_reserve[]: 0 0 0 0 0 [ 55.180551][ T6104] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 55.180610][ T6104] Node 0 DMA32: 4*4kB (ME) 49*8kB (UME) 27*16kB (UME) 21*32kB (UM) 18*64kB (ME) 10*128kB (ME) 18*256kB (UME) 6*512kB (UM) 6*1024kB (UM) 4*2048kB (ME) 37*4096kB (M) = 177512kB [ 55.180693][ T6104] Node 1 Normal: 2*4kB (U) 4*8kB (UM) 9*16kB (UM) 13*32kB (UM) 11*64kB (UM) 5*128kB (UM) 1*256kB (U) 4*512kB (UM) 0*1024kB 3*2048kB (UM) 399*4096kB (M) = 1644696kB [ 55.180772][ T6104] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 55.180781][ T6104] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 55.180788][ T6104] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 55.180796][ T6104] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 55.180804][ T6104] 57661 total pagecache pages [ 55.180808][ T6104] 0 pages in swap cache [ 55.180811][ T6104] Free swap = 124996kB [ 55.180815][ T6104] Total swap = 124996kB [ 55.180819][ T6104] 1048443 pages RAM [ 55.180822][ T6104] 0 pages HighMem/MovableOnly [ 55.180826][ T6104] 285854 pages reserved [ 55.180829][ T6104] 0 pages cma reserved [ 55.213898][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.214032][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.214061][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.214078][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.258485][ T6116] erspan0: entered promiscuous mode [ 55.273152][ T6120] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1537 sclass=netlink_route_socket pid=6120 comm=syz.1.77 [ 55.289528][ T6120] bond1: entered promiscuous mode [ 55.289899][ T6120] 8021q: adding VLAN 0 to HW filter on device bond1 [ 55.292326][ T6120] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5125 sclass=netlink_route_socket pid=6120 comm=syz.1.77 [ 55.311698][ T6120] netlink: 'syz.1.77': attribute type 49 has an invalid length. [ 55.401125][ T6133] __nla_validate_parse: 1 callbacks suppressed [ 55.401137][ T6133] netlink: 4 bytes leftover after parsing attributes in process `syz.1.81'. [ 55.441224][ T6142] FAULT_INJECTION: forcing a failure. [ 55.441224][ T6142] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 55.441245][ T6142] CPU: 0 UID: 0 PID: 6142 Comm: syz.2.83 Tainted: G L syzkaller #0 PREEMPT(full) [ 55.441260][ T6142] Tainted: [L]=SOFTLOCKUP [ 55.441264][ T6142] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 55.441271][ T6142] Call Trace: [ 55.441274][ T6142] [ 55.441279][ T6142] dump_stack_lvl+0x100/0x190 [ 55.441298][ T6142] should_fail_ex.cold+0x5/0xa [ 55.441312][ T6142] ? prepare_alloc_pages+0x16d/0x5b0 [ 55.441328][ T6142] should_fail_alloc_page+0xeb/0x140 [ 55.441345][ T6142] prepare_alloc_pages+0x1f0/0x5b0 [ 55.441363][ T6142] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 55.441378][ T6142] ? lock_acquire+0x1d1/0x380 [ 55.441390][ T6142] ? is_bpf_text_address+0x25/0x1a0 [ 55.441407][ T6142] ? find_held_lock+0x2b/0x80 [ 55.441423][ T6142] ? is_bpf_text_address+0x8a/0x1a0 [ 55.441438][ T6142] ? is_bpf_text_address+0x8a/0x1a0 [ 55.441456][ T6142] ? bpf_ksym_find+0x128/0x1c0 [ 55.441466][ T6142] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 55.441478][ T6142] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 55.441490][ T6142] ? is_bpf_text_address+0x94/0x1a0 [ 55.441506][ T6142] ? __kernel_text_address+0xd/0x30 [ 55.441516][ T6142] ? unwind_get_return_address+0x59/0xa0 [ 55.441532][ T6142] ? arch_stack_walk+0xa6/0xf0 [ 55.441553][ T6142] ? __pfx_stack_trace_save+0x10/0x10 [ 55.441563][ T6142] ? lock_acquire+0x1d1/0x380 [ 55.441575][ T6142] ? stack_depot_save_flags+0x27/0x9f0 [ 55.441592][ T6142] ? find_held_lock+0x2b/0x80 [ 55.441612][ T6142] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 55.441627][ T6142] ? policy_nodemask+0xed/0x4f0 [ 55.441645][ T6142] alloc_pages_mpol+0x201/0x550 [ 55.441662][ T6142] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 55.441681][ T6142] alloc_pages_noprof+0x1a/0x160 [ 55.441692][ T6142] get_free_pages_noprof+0x10/0xb0 [ 55.441706][ T6142] __kasan_populate_vmalloc+0xa0/0x210 [ 55.441722][ T6142] alloc_vmap_area+0x95d/0x2bb0 [ 55.441740][ T6142] ? kasan_save_track+0x14/0x30 [ 55.441754][ T6142] ? __kasan_kmalloc+0xaa/0xb0 [ 55.441767][ T6142] ? __pfx_alloc_vmap_area+0x10/0x10 [ 55.441782][ T6142] ? __get_vm_area_node+0x124/0x350 [ 55.441799][ T6142] __get_vm_area_node+0x1ed/0x350 [ 55.441816][ T6142] __vmalloc_node_range_noprof+0x268/0x1420 [ 55.441833][ T6142] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 55.441850][ T6142] ? up_write+0x2dc/0x5b0 [ 55.441865][ T6142] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 55.441880][ T6142] ? lock_acquire+0x1d1/0x380 [ 55.441893][ T6142] ? find_held_lock+0x2b/0x80 [ 55.441909][ T6142] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 55.441926][ T6142] ? avc_has_perm_noaudit+0x11e/0x470 [ 55.441950][ T6142] ? avc_has_perm_noaudit+0x145/0x470 [ 55.441968][ T6142] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 55.441983][ T6142] __vmalloc_node_noprof+0xad/0xf0 [ 55.441998][ T6142] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 55.442015][ T6142] __vmalloc_noprof+0xa3/0x120 [ 55.442031][ T6142] ? __pfx___vmalloc_noprof+0x10/0x10 [ 55.442048][ T6142] ? rcu_is_watching+0x13/0xc0 [ 55.442063][ T6142] ? cap_capable+0x107/0x430 [ 55.442076][ T6142] bpf_prog_alloc_no_stats+0x59/0x690 [ 55.442091][ T6142] ? security_capable+0x80/0x260 [ 55.442103][ T6142] bpf_prog_alloc+0x3b/0x200 [ 55.442117][ T6142] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 55.442131][ T6142] bpf_prog_load+0x49e/0x2a70 [ 55.442149][ T6142] ? __pfx_bpf_prog_load+0x10/0x10 [ 55.442176][ T6142] __sys_bpf+0x1f46/0x4a30 [ 55.442191][ T6142] ? __pfx___sys_bpf+0x10/0x10 [ 55.442202][ T6142] ? find_held_lock+0x2b/0x80 [ 55.442218][ T6142] ? get_pid_task+0xfc/0x250 [ 55.442232][ T6142] ? get_pid_task+0xfc/0x250 [ 55.442251][ T6142] ? find_held_lock+0x2b/0x80 [ 55.442270][ T6142] ? rcu_read_lock_any_held+0x6a/0x90 [ 55.442287][ T6142] ? find_held_lock+0x2b/0x80 [ 55.442302][ T6142] ? ksys_write+0x190/0x250 [ 55.442314][ T6142] ? ksys_write+0x190/0x250 [ 55.442326][ T6142] ? lock_acquire+0x1d1/0x380 [ 55.442347][ T6142] ? fput+0x7c/0x100 [ 55.442362][ T6142] ? ksys_write+0x1ac/0x250 [ 55.442376][ T6142] ? __x64_sys_bpf+0xce/0x140 [ 55.442387][ T6142] __x64_sys_bpf+0xce/0x140 [ 55.442400][ T6142] ? do_syscall_64+0xae/0x790 [ 55.442412][ T6142] do_syscall_64+0x123/0x790 [ 55.442425][ T6142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.442436][ T6142] RIP: 0033:0x7f76bdf9e159 [ 55.442448][ T6142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.442458][ T6142] RSP: 002b:00007f76bedd0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 55.442469][ T6142] RAX: ffffffffffffffda RBX: 00007f76be225fa0 RCX: 00007f76bdf9e159 [ 55.442476][ T6142] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 55.442482][ T6142] RBP: 00007f76bedd0090 R08: 0000000000000000 R09: 0000000000000000 [ 55.442489][ T6142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.442495][ T6142] R13: 00007f76be226038 R14: 00007f76be225fa0 R15: 00007ffc848d94f8 [ 55.442508][ T6142] [ 55.500322][ T6146] ceph: No source [ 55.554866][ T6149] overlayfs: conflicting options: nfs_export=on,index=off [ 55.667813][ T5742] Bluetooth: hci0: command tx timeout [ 55.678289][ T5739] Bluetooth: hci1: command tx timeout [ 55.678318][ T5742] Bluetooth: hci2: command tx timeout [ 55.698610][ T6166] netlink: 48 bytes leftover after parsing attributes in process `syz.2.90'. [ 55.912910][ T6174] FAULT_INJECTION: forcing a failure. [ 55.912910][ T6174] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 55.912942][ T6174] CPU: 2 UID: 0 PID: 6174 Comm: syz.2.93 Tainted: G L syzkaller #0 PREEMPT(full) [ 55.912966][ T6174] Tainted: [L]=SOFTLOCKUP [ 55.912978][ T6174] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 55.912991][ T6174] Call Trace: [ 55.912998][ T6174] [ 55.913005][ T6174] dump_stack_lvl+0x100/0x190 [ 55.913035][ T6174] should_fail_ex.cold+0x5/0xa [ 55.913056][ T6174] ? prepare_alloc_pages+0x16d/0x5b0 [ 55.913084][ T6174] should_fail_alloc_page+0xeb/0x140 [ 55.913111][ T6174] prepare_alloc_pages+0x1f0/0x5b0 [ 55.913135][ T6174] ? is_bpf_text_address+0x94/0x1a0 [ 55.913163][ T6174] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 55.913195][ T6174] ? stack_trace_save+0x8e/0xc0 [ 55.913213][ T6174] ? __pfx_stack_trace_save+0x10/0x10 [ 55.913229][ T6174] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 55.913248][ T6174] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 55.913267][ T6174] ? is_bpf_text_address+0x94/0x1a0 [ 55.913294][ T6174] ? kasan_save_stack+0x3f/0x50 [ 55.913316][ T6174] ? kasan_save_stack+0x30/0x50 [ 55.913337][ T6174] ? kasan_save_track+0x14/0x30 [ 55.913365][ T6174] ? __kasan_slab_alloc+0x89/0x90 [ 55.913387][ T6174] ? kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 55.913408][ T6174] ? alloc_vmap_area+0x640/0x2bb0 [ 55.913430][ T6174] ? __get_vm_area_node+0x1ed/0x350 [ 55.913453][ T6174] ? __vmalloc_node_range_noprof+0x268/0x1420 [ 55.913478][ T6174] ? __vmalloc_node_noprof+0xad/0xf0 [ 55.913502][ T6174] ? __vmalloc_noprof+0xa3/0x120 [ 55.913524][ T6174] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 55.913546][ T6174] ? bpf_prog_alloc+0x3b/0x200 [ 55.913566][ T6174] ? bpf_prog_load+0x49e/0x2a70 [ 55.913589][ T6174] ? __sys_bpf+0x1f46/0x4a30 [ 55.913606][ T6174] ? __x64_sys_bpf+0xce/0x140 [ 55.913623][ T6174] ? do_syscall_64+0x123/0x790 [ 55.913641][ T6174] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.913670][ T6174] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 55.913694][ T6174] ? policy_nodemask+0xed/0x4f0 [ 55.913723][ T6174] alloc_pages_mpol+0x201/0x550 [ 55.913750][ T6174] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 55.913781][ T6174] alloc_pages_noprof+0x1a/0x160 [ 55.913799][ T6174] get_free_pages_noprof+0x10/0xb0 [ 55.913821][ T6174] __kasan_populate_vmalloc+0xa0/0x210 [ 55.913846][ T6174] alloc_vmap_area+0x95d/0x2bb0 [ 55.913876][ T6174] ? kasan_save_track+0x14/0x30 [ 55.913898][ T6174] ? __kasan_kmalloc+0xaa/0xb0 [ 55.913920][ T6174] ? __pfx_alloc_vmap_area+0x10/0x10 [ 55.913944][ T6174] ? __get_vm_area_node+0x124/0x350 [ 55.913971][ T6174] __get_vm_area_node+0x1ed/0x350 [ 55.914000][ T6174] __vmalloc_node_range_noprof+0x268/0x1420 [ 55.914030][ T6174] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 55.914055][ T6174] ? up_write+0x2dc/0x5b0 [ 55.914082][ T6174] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 55.914105][ T6174] ? lock_acquire+0x1d1/0x380 [ 55.914127][ T6174] ? find_held_lock+0x2b/0x80 [ 55.914153][ T6174] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 55.914177][ T6174] ? avc_has_perm_noaudit+0x11e/0x470 [ 55.914210][ T6174] ? avc_has_perm_noaudit+0x145/0x470 [ 55.914238][ T6174] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 55.914260][ T6174] __vmalloc_node_noprof+0xad/0xf0 [ 55.914284][ T6174] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 55.914311][ T6174] __vmalloc_noprof+0xa3/0x120 [ 55.914335][ T6174] ? __pfx___vmalloc_noprof+0x10/0x10 [ 55.914371][ T6174] ? rcu_is_watching+0x13/0xc0 [ 55.914397][ T6174] ? cap_capable+0x107/0x430 [ 55.914421][ T6174] bpf_prog_alloc_no_stats+0x59/0x690 [ 55.914444][ T6174] ? security_capable+0x80/0x260 [ 55.914465][ T6174] bpf_prog_alloc+0x3b/0x200 [ 55.914486][ T6174] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 55.914510][ T6174] bpf_prog_load+0x49e/0x2a70 [ 55.914540][ T6174] ? __pfx_bpf_prog_load+0x10/0x10 [ 55.914584][ T6174] __sys_bpf+0x1f46/0x4a30 [ 55.914610][ T6174] ? __pfx___sys_bpf+0x10/0x10 [ 55.914628][ T6174] ? find_held_lock+0x2b/0x80 [ 55.914654][ T6174] ? get_pid_task+0xfc/0x250 [ 55.914677][ T6174] ? get_pid_task+0xfc/0x250 [ 55.914708][ T6174] ? find_held_lock+0x2b/0x80 [ 55.914738][ T6174] ? rcu_read_lock_any_held+0x6a/0x90 [ 55.914764][ T6174] ? find_held_lock+0x2b/0x80 [ 55.914788][ T6174] ? ksys_write+0x190/0x250 [ 55.914807][ T6174] ? ksys_write+0x190/0x250 [ 55.914826][ T6174] ? lock_acquire+0x1d1/0x380 [ 55.914860][ T6174] ? fput+0x7c/0x100 [ 55.914883][ T6174] ? ksys_write+0x1ac/0x250 [ 55.914903][ T6174] ? __x64_sys_bpf+0xce/0x140 [ 55.914919][ T6174] __x64_sys_bpf+0xce/0x140 [ 55.914938][ T6174] ? do_syscall_64+0xae/0x790 [ 55.914957][ T6174] do_syscall_64+0x123/0x790 [ 55.914976][ T6174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.914989][ T6174] RIP: 0033:0x7f76bdf9e159 [ 55.915003][ T6174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.915018][ T6174] RSP: 002b:00007f76bedd0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 55.915036][ T6174] RAX: ffffffffffffffda RBX: 00007f76be225fa0 RCX: 00007f76bdf9e159 [ 55.915047][ T6174] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 55.915058][ T6174] RBP: 00007f76bedd0090 R08: 0000000000000000 R09: 0000000000000000 [ 55.915067][ T6174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.915077][ T6174] R13: 00007f76be226038 R14: 00007f76be225fa0 R15: 00007ffc848d94f8 [ 55.915101][ T6174] [ 56.064269][ T6182] ftl_cs: FTL header not found. [ 56.085216][ T6193] netlink: 8 bytes leftover after parsing attributes in process `syz.1.101'. [ 56.106729][ T6193] bridge1: entered promiscuous mode [ 56.106747][ T6193] bridge1: entered allmulticast mode [ 56.132032][ T6182] block2mtd: mtd1: [/dev/zram0] erase_size = 0KiB [65] [ 56.174752][ T6200] FAULT_INJECTION: forcing a failure. [ 56.174752][ T6200] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 56.174776][ T6200] CPU: 3 UID: 0 PID: 6200 Comm: syz.3.103 Tainted: G L syzkaller #0 PREEMPT(full) [ 56.174797][ T6200] Tainted: [L]=SOFTLOCKUP [ 56.174802][ T6200] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 56.174812][ T6200] Call Trace: [ 56.174817][ T6200] [ 56.174824][ T6200] dump_stack_lvl+0x100/0x190 [ 56.174862][ T6200] should_fail_ex.cold+0x5/0xa [ 56.174882][ T6200] ? prepare_alloc_pages+0x16d/0x5b0 [ 56.174907][ T6200] should_fail_alloc_page+0xeb/0x140 [ 56.174933][ T6200] prepare_alloc_pages+0x1f0/0x5b0 [ 56.174959][ T6200] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 56.174980][ T6200] ? __pfx_get_page_from_freelist+0x10/0x10 [ 56.174998][ T6200] ? prepare_alloc_pages+0x1f0/0x5b0 [ 56.175020][ T6200] ? is_bpf_text_address+0x94/0x1a0 [ 56.175045][ T6200] ? rcu_is_watching+0x13/0xc0 [ 56.175067][ T6200] ? __alloc_frozen_pages_noprof+0x56b/0x3300 [ 56.175089][ T6200] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 56.175112][ T6200] ? stack_trace_save+0x8e/0xc0 [ 56.175130][ T6200] ? __pfx_stack_trace_save+0x10/0x10 [ 56.175146][ T6200] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 56.175163][ T6200] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 56.175181][ T6200] ? is_bpf_text_address+0x94/0x1a0 [ 56.175207][ T6200] ? kasan_save_track+0x14/0x30 [ 56.175227][ T6200] ? __kasan_slab_alloc+0x89/0x90 [ 56.175248][ T6200] ? kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 56.175268][ T6200] ? alloc_vmap_area+0x640/0x2bb0 [ 56.175288][ T6200] ? __get_vm_area_node+0x1ed/0x350 [ 56.175339][ T6200] ? __vmalloc_node_range_noprof+0x268/0x1420 [ 56.175362][ T6200] ? __vmalloc_node_noprof+0xad/0xf0 [ 56.175383][ T6200] ? __vmalloc_noprof+0xa3/0x120 [ 56.175421][ T6200] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 56.175441][ T6200] ? bpf_prog_alloc+0x3b/0x200 [ 56.175461][ T6200] ? bpf_prog_load+0x49e/0x2a70 [ 56.175482][ T6200] ? __sys_bpf+0x1f46/0x4a30 [ 56.175497][ T6200] ? __x64_sys_bpf+0xce/0x140 [ 56.175514][ T6200] ? do_syscall_64+0x123/0x790 [ 56.175530][ T6200] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.175551][ T6200] alloc_pages_bulk_noprof+0x5e1/0x13c0 [ 56.175575][ T6200] ? policy_nodemask+0xed/0x4f0 [ 56.175601][ T6200] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 56.175632][ T6200] __kasan_populate_vmalloc+0xf0/0x210 [ 56.175658][ T6200] alloc_vmap_area+0x95d/0x2bb0 [ 56.175684][ T6200] ? kasan_save_track+0x14/0x30 [ 56.175703][ T6200] ? __kasan_kmalloc+0xaa/0xb0 [ 56.175723][ T6200] ? __pfx_alloc_vmap_area+0x10/0x10 [ 56.175745][ T6200] ? __get_vm_area_node+0x124/0x350 [ 56.175770][ T6200] __get_vm_area_node+0x1ed/0x350 [ 56.175796][ T6200] __vmalloc_node_range_noprof+0x268/0x1420 [ 56.175817][ T6200] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 56.175834][ T6200] ? up_write+0x2dc/0x5b0 [ 56.175863][ T6200] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 56.175884][ T6200] ? lock_acquire+0x1d1/0x380 [ 56.175903][ T6200] ? find_held_lock+0x2b/0x80 [ 56.175927][ T6200] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 56.175949][ T6200] ? avc_has_perm_noaudit+0x11e/0x470 [ 56.175979][ T6200] ? avc_has_perm_noaudit+0x145/0x470 [ 56.176006][ T6200] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 56.176026][ T6200] __vmalloc_node_noprof+0xad/0xf0 [ 56.176049][ T6200] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 56.176073][ T6200] __vmalloc_noprof+0xa3/0x120 [ 56.176095][ T6200] ? __pfx___vmalloc_noprof+0x10/0x10 [ 56.176120][ T6200] ? rcu_is_watching+0x13/0xc0 [ 56.176143][ T6200] ? cap_capable+0x107/0x430 [ 56.176163][ T6200] bpf_prog_alloc_no_stats+0x59/0x690 [ 56.176183][ T6200] ? security_capable+0x80/0x260 [ 56.176203][ T6200] bpf_prog_alloc+0x3b/0x200 [ 56.176224][ T6200] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 56.176246][ T6200] bpf_prog_load+0x49e/0x2a70 [ 56.176274][ T6200] ? __pfx_bpf_prog_load+0x10/0x10 [ 56.176316][ T6200] __sys_bpf+0x1f46/0x4a30 [ 56.176338][ T6200] ? __pfx___sys_bpf+0x10/0x10 [ 56.176355][ T6200] ? find_held_lock+0x2b/0x80 [ 56.176377][ T6200] ? get_pid_task+0xfc/0x250 [ 56.176398][ T6200] ? get_pid_task+0xfc/0x250 [ 56.176427][ T6200] ? find_held_lock+0x2b/0x80 [ 56.176452][ T6200] ? rcu_read_lock_any_held+0x6a/0x90 [ 56.176469][ T6200] ? find_held_lock+0x2b/0x80 [ 56.176485][ T6200] ? ksys_write+0x190/0x250 [ 56.176497][ T6200] ? ksys_write+0x190/0x250 [ 56.176509][ T6200] ? lock_acquire+0x1d1/0x380 [ 56.176530][ T6200] ? fput+0x7c/0x100 [ 56.176546][ T6200] ? ksys_write+0x1ac/0x250 [ 56.176560][ T6200] ? __x64_sys_bpf+0xce/0x140 [ 56.176571][ T6200] __x64_sys_bpf+0xce/0x140 [ 56.176584][ T6200] ? do_syscall_64+0xae/0x790 [ 56.176596][ T6200] do_syscall_64+0x123/0x790 [ 56.176608][ T6200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.176620][ T6200] RIP: 0033:0x7f373bd9e159 [ 56.176629][ T6200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.176639][ T6200] RSP: 002b:00007f373cb94028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 56.176651][ T6200] RAX: ffffffffffffffda RBX: 00007f373c025fa0 RCX: 00007f373bd9e159 [ 56.176658][ T6200] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 56.176664][ T6200] RBP: 00007f373cb94090 R08: 0000000000000000 R09: 0000000000000000 [ 56.176670][ T6200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.176676][ T6200] R13: 00007f373c026038 R14: 00007f373c025fa0 R15: 00007ffca4178758 [ 56.176690][ T6200] [ 56.206776][ T6202] netlink: 'syz.2.102': attribute type 1 has an invalid length. [ 56.216675][ T6193] kvm: Disabled LAPIC found during irq injection [ 56.223829][ T63] IPVS: starting estimator thread 0... [ 56.249291][ T6202] netlink: 4 bytes leftover after parsing attributes in process `syz.2.102'. [ 56.319008][ T6206] IPVS: using max 43 ests per chain, 103200 per kthread [ 56.364777][ T6214] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 56.416049][ T6220] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 56.557649][ T6232] FAULT_INJECTION: forcing a failure. [ 56.557649][ T6232] name failslab, interval 1, probability 0, space 0, times 0 [ 56.557670][ T6232] CPU: 2 UID: 0 PID: 6232 Comm: syz.3.113 Tainted: G L syzkaller #0 PREEMPT(full) [ 56.557701][ T6232] Tainted: [L]=SOFTLOCKUP [ 56.557706][ T6232] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 56.557712][ T6232] Call Trace: [ 56.557716][ T6232] [ 56.557720][ T6232] dump_stack_lvl+0x100/0x190 [ 56.557741][ T6232] should_fail_ex.cold+0x5/0xa [ 56.557757][ T6232] should_failslab+0xc2/0x120 [ 56.557773][ T6232] __kmalloc_node_noprof+0xff/0x880 [ 56.557787][ T6232] ? __get_vm_area_node+0x1ff/0x350 [ 56.557801][ T6232] ? __get_vm_area_node+0x22b/0x350 [ 56.557816][ T6232] ? __vmalloc_node_range_noprof+0x3d4/0x1420 [ 56.557835][ T6232] __vmalloc_node_range_noprof+0x3d4/0x1420 [ 56.557856][ T6232] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 56.557874][ T6232] ? find_held_lock+0x2b/0x80 [ 56.557891][ T6232] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 56.557909][ T6232] ? avc_has_perm_noaudit+0x11e/0x470 [ 56.557930][ T6232] ? avc_has_perm_noaudit+0x145/0x470 [ 56.557948][ T6232] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 56.557963][ T6232] __vmalloc_node_noprof+0xad/0xf0 [ 56.557979][ T6232] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 56.557995][ T6232] __vmalloc_noprof+0xa3/0x120 [ 56.558011][ T6232] ? __pfx___vmalloc_noprof+0x10/0x10 [ 56.558028][ T6232] ? rcu_is_watching+0x13/0xc0 [ 56.558044][ T6232] ? cap_capable+0x107/0x430 [ 56.558057][ T6232] bpf_prog_alloc_no_stats+0x59/0x690 [ 56.558071][ T6232] ? security_capable+0x80/0x260 [ 56.558084][ T6232] bpf_prog_alloc+0x3b/0x200 [ 56.558098][ T6232] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 56.558117][ T6232] bpf_prog_load+0x49e/0x2a70 [ 56.558144][ T6232] ? __pfx_bpf_prog_load+0x10/0x10 [ 56.558181][ T6232] __sys_bpf+0x1f46/0x4a30 [ 56.558205][ T6232] ? __pfx___sys_bpf+0x10/0x10 [ 56.558222][ T6232] ? find_held_lock+0x2b/0x80 [ 56.558240][ T6232] ? get_pid_task+0xfc/0x250 [ 56.558255][ T6232] ? get_pid_task+0xfc/0x250 [ 56.558274][ T6232] ? find_held_lock+0x2b/0x80 [ 56.558293][ T6232] ? rcu_read_lock_any_held+0x6a/0x90 [ 56.558310][ T6232] ? find_held_lock+0x2b/0x80 [ 56.558326][ T6232] ? ksys_write+0x190/0x250 [ 56.558338][ T6232] ? ksys_write+0x190/0x250 [ 56.558350][ T6232] ? lock_acquire+0x1d1/0x380 [ 56.558371][ T6232] ? fput+0x7c/0x100 [ 56.558386][ T6232] ? ksys_write+0x1ac/0x250 [ 56.558400][ T6232] ? __x64_sys_bpf+0xce/0x140 [ 56.558416][ T6232] __x64_sys_bpf+0xce/0x140 [ 56.558429][ T6232] ? do_syscall_64+0xae/0x790 [ 56.558441][ T6232] do_syscall_64+0x123/0x790 [ 56.558454][ T6232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.558466][ T6232] RIP: 0033:0x7f373bd9e159 [ 56.558475][ T6232] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.558485][ T6232] RSP: 002b:00007f373cb94028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 56.558496][ T6232] RAX: ffffffffffffffda RBX: 00007f373c025fa0 RCX: 00007f373bd9e159 [ 56.558502][ T6232] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 56.558509][ T6232] RBP: 00007f373cb94090 R08: 0000000000000000 R09: 0000000000000000 [ 56.558515][ T6232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.558521][ T6232] R13: 00007f373c026038 R14: 00007f373c025fa0 R15: 00007ffca4178758 [ 56.558535][ T6232] [ 56.604740][ T6236] Bluetooth: MGMT ver 1.23 [ 56.795543][ T30] usb 5-1: USB disconnect, device number 3 [ 56.852981][ T6252] netlink: 28 bytes leftover after parsing attributes in process `syz.0.121'. [ 56.996297][ T6260] FAULT_INJECTION: forcing a failure. [ 56.996297][ T6260] name failslab, interval 1, probability 0, space 0, times 0 [ 56.996319][ T6260] CPU: 0 UID: 0 PID: 6260 Comm: syz.0.123 Tainted: G L syzkaller #0 PREEMPT(full) [ 56.996333][ T6260] Tainted: [L]=SOFTLOCKUP [ 56.996337][ T6260] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 56.996344][ T6260] Call Trace: [ 56.996348][ T6260] [ 56.996352][ T6260] dump_stack_lvl+0x100/0x190 [ 56.996372][ T6260] should_fail_ex.cold+0x5/0xa [ 56.996389][ T6260] should_failslab+0xc2/0x120 [ 56.996405][ T6260] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 56.996419][ T6260] ? sidtab_sid2str_get+0x84/0x670 [ 56.996436][ T6260] ? sidtab_sid2str_get+0x17a/0x670 [ 56.996454][ T6260] kmemdup_noprof+0x29/0x60 [ 56.996466][ T6260] sidtab_sid2str_get+0x17a/0x670 [ 56.996484][ T6260] security_sid_to_context_core+0x373/0x700 [ 56.996508][ T6260] avc_audit_post_callback+0x1aa/0x910 [ 56.996525][ T6260] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 56.996543][ T6260] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 56.996559][ T6260] ? skb_put+0x138/0x180 [ 56.996571][ T6260] ? audit_log_n_string+0x2a3/0x5a0 [ 56.996587][ T6260] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 56.996604][ T6260] common_lsm_audit+0x23f/0x2b0 [ 56.996619][ T6260] ? __pfx_common_lsm_audit+0x10/0x10 [ 56.996635][ T6260] ? lockdep_hardirqs_on+0x7d/0x110 [ 56.996647][ T6260] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 56.996667][ T6260] slow_avc_audit+0x186/0x210 [ 56.996685][ T6260] ? __pfx_slow_avc_audit+0x10/0x10 [ 56.996704][ T6260] ? avc_denied+0x14a/0x190 [ 56.996722][ T6260] ? avc_has_perm_noaudit+0x3a2/0x470 [ 56.996741][ T6260] avc_has_perm+0x1a6/0x1e0 [ 56.996759][ T6260] ? __pfx_avc_has_perm+0x10/0x10 [ 56.996776][ T6260] ? __might_fault+0xc5/0x140 [ 56.996787][ T6260] ? find_held_lock+0x2b/0x80 [ 56.996803][ T6260] ? __might_fault+0xc5/0x140 [ 56.996813][ T6260] ? __might_fault+0xc5/0x140 [ 56.996826][ T6260] selinux_bpf+0xf4/0x150 [ 56.996854][ T6260] security_bpf+0xa5/0x260 [ 56.996868][ T6260] __sys_bpf+0x440/0x4a30 [ 56.996884][ T6260] ? __pfx___sys_bpf+0x10/0x10 [ 56.996896][ T6260] ? find_held_lock+0x2b/0x80 [ 56.996912][ T6260] ? get_pid_task+0xfc/0x250 [ 56.996926][ T6260] ? get_pid_task+0xfc/0x250 [ 56.996945][ T6260] ? find_held_lock+0x2b/0x80 [ 56.996969][ T6260] ? rcu_read_lock_any_held+0x6a/0x90 [ 56.996994][ T6260] ? find_held_lock+0x2b/0x80 [ 56.997016][ T6260] ? ksys_write+0x190/0x250 [ 56.997037][ T6260] ? ksys_write+0x190/0x250 [ 56.997056][ T6260] ? lock_acquire+0x1d1/0x380 [ 56.997089][ T6260] ? fput+0x7c/0x100 [ 56.997105][ T6260] ? ksys_write+0x1ac/0x250 [ 56.997119][ T6260] ? __x64_sys_bpf+0xce/0x140 [ 56.997130][ T6260] __x64_sys_bpf+0xce/0x140 [ 56.997143][ T6260] ? do_syscall_64+0xae/0x790 [ 56.997156][ T6260] do_syscall_64+0x123/0x790 [ 56.997169][ T6260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.997181][ T6260] RIP: 0033:0x7f0c95b9e159 [ 56.997190][ T6260] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.997200][ T6260] RSP: 002b:00007f0c969a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 56.997211][ T6260] RAX: ffffffffffffffda RBX: 00007f0c95e25fa0 RCX: 00007f0c95b9e159 [ 56.997218][ T6260] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 56.997224][ T6260] RBP: 00007f0c969a0090 R08: 0000000000000000 R09: 0000000000000000 [ 56.997231][ T6260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.997237][ T6260] R13: 00007f0c95e26038 R14: 00007f0c95e25fa0 R15: 00007ffef5b929e8 [ 56.997251][ T6260] [ 57.056788][ T6262] ip6t_hbh: Not strict - not implemented [ 57.512694][ T6289] netlink: 'syz.0.130': attribute type 9 has an invalid length. [ 57.557005][ T231] IPVS: starting estimator thread 0... [ 57.592309][ T6304] FAULT_INJECTION: forcing a failure. [ 57.592309][ T6304] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 57.592331][ T6304] CPU: 1 UID: 0 PID: 6304 Comm: syz.3.135 Tainted: G L syzkaller #0 PREEMPT(full) [ 57.592346][ T6304] Tainted: [L]=SOFTLOCKUP [ 57.592350][ T6304] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.592356][ T6304] Call Trace: [ 57.592360][ T6304] [ 57.592364][ T6304] dump_stack_lvl+0x100/0x190 [ 57.592384][ T6304] should_fail_ex.cold+0x5/0xa [ 57.592400][ T6304] _copy_from_user+0x2e/0xd0 [ 57.592415][ T6304] bpf_prog_load+0x1488/0x2a70 [ 57.592434][ T6304] ? __pfx_bpf_prog_load+0x10/0x10 [ 57.592460][ T6304] __sys_bpf+0x1f46/0x4a30 [ 57.592477][ T6304] ? __pfx___sys_bpf+0x10/0x10 [ 57.592489][ T6304] ? find_held_lock+0x2b/0x80 [ 57.592506][ T6304] ? get_pid_task+0xfc/0x250 [ 57.592522][ T6304] ? get_pid_task+0xfc/0x250 [ 57.592541][ T6304] ? find_held_lock+0x2b/0x80 [ 57.592560][ T6304] ? rcu_read_lock_any_held+0x6a/0x90 [ 57.592577][ T6304] ? find_held_lock+0x2b/0x80 [ 57.592593][ T6304] ? ksys_write+0x190/0x250 [ 57.592605][ T6304] ? ksys_write+0x190/0x250 [ 57.592617][ T6304] ? lock_acquire+0x1d1/0x380 [ 57.592640][ T6304] ? fput+0x7c/0x100 [ 57.592655][ T6304] ? ksys_write+0x1ac/0x250 [ 57.592669][ T6304] ? __x64_sys_bpf+0xce/0x140 [ 57.592680][ T6304] __x64_sys_bpf+0xce/0x140 [ 57.592693][ T6304] ? do_syscall_64+0xae/0x790 [ 57.592705][ T6304] do_syscall_64+0x123/0x790 [ 57.592718][ T6304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.592729][ T6304] RIP: 0033:0x7f373bd9e159 [ 57.592739][ T6304] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.592749][ T6304] RSP: 002b:00007f373cb94028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 57.592760][ T6304] RAX: ffffffffffffffda RBX: 00007f373c025fa0 RCX: 00007f373bd9e159 [ 57.592767][ T6304] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 57.592773][ T6304] RBP: 00007f373cb94090 R08: 0000000000000000 R09: 0000000000000000 [ 57.592779][ T6304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.592785][ T6304] R13: 00007f373c026038 R14: 00007f373c025fa0 R15: 00007ffca4178758 [ 57.592799][ T6304] [ 57.634645][ T6301] gadgetfs: bound to dummy_udc driver [ 57.639460][ T6294] IPVS: using max 43 ests per chain, 103200 per kthread [ 57.696234][ T6313] /dev/sg0: Can't lookup blockdev [ 57.802750][ T6328] netlink: 20 bytes leftover after parsing attributes in process `syz.1.141'. [ 57.802780][ T6328] netlink: 20 bytes leftover after parsing attributes in process `syz.1.141'. [ 57.867852][ T851] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 57.868511][ C0] gadgetfs: connected [ 57.869749][ T851] gadgetfs: disconnected [ 57.873358][ T42] kauditd_printk_skb: 112 callbacks suppressed [ 57.873369][ T42] audit: type=1326 audit(1791038039.227:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6317 comm="syz.3.140" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f373bd9e159 code=0x7fc00000 [ 57.898939][ T42] audit: type=1326 audit(1791038039.257:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6335 comm="syz.1.145" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9e9e59e159 code=0x0 [ 57.942197][ T6341] FAULT_INJECTION: forcing a failure. [ 57.942197][ T6341] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 57.942224][ T6341] CPU: 1 UID: 0 PID: 6341 Comm: syz.0.146 Tainted: G L syzkaller #0 PREEMPT(full) [ 57.942244][ T6341] Tainted: [L]=SOFTLOCKUP [ 57.942250][ T6341] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.942258][ T6341] Call Trace: [ 57.942263][ T6341] [ 57.942269][ T6341] dump_stack_lvl+0x100/0x190 [ 57.942295][ T6341] should_fail_ex.cold+0x5/0xa [ 57.942315][ T6341] _copy_from_user+0x2e/0xd0 [ 57.942334][ T6341] bpf_prog_load+0x1488/0x2a70 [ 57.942361][ T6341] ? __pfx_bpf_prog_load+0x10/0x10 [ 57.942398][ T6341] __sys_bpf+0x1f46/0x4a30 [ 57.942421][ T6341] ? __pfx___sys_bpf+0x10/0x10 [ 57.942438][ T6341] ? find_held_lock+0x2b/0x80 [ 57.942463][ T6341] ? get_pid_task+0xfc/0x250 [ 57.942486][ T6341] ? get_pid_task+0xfc/0x250 [ 57.942514][ T6341] ? find_held_lock+0x2b/0x80 [ 57.942544][ T6341] ? rcu_read_lock_any_held+0x6a/0x90 [ 57.942568][ T6341] ? find_held_lock+0x2b/0x80 [ 57.942591][ T6341] ? ksys_write+0x190/0x250 [ 57.942609][ T6341] ? ksys_write+0x190/0x250 [ 57.942629][ T6341] ? lock_acquire+0x1d1/0x380 [ 57.942662][ T6341] ? fput+0x7c/0x100 [ 57.942680][ T6341] ? ksys_write+0x1ac/0x250 [ 57.942694][ T6341] ? __x64_sys_bpf+0xce/0x140 [ 57.942706][ T6341] __x64_sys_bpf+0xce/0x140 [ 57.942721][ T6341] ? do_syscall_64+0xae/0x790 [ 57.942757][ T6341] do_syscall_64+0x123/0x790 [ 57.942779][ T6341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.942797][ T6341] RIP: 0033:0x7f0c95b9e159 [ 57.942811][ T6341] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.942826][ T6341] RSP: 002b:00007f0c969a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 57.942850][ T6341] RAX: ffffffffffffffda RBX: 00007f0c95e25fa0 RCX: 00007f0c95b9e159 [ 57.942861][ T6341] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 57.942871][ T6341] RBP: 00007f0c969a0090 R08: 0000000000000000 R09: 0000000000000000 [ 57.942880][ T6341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 57.942890][ T6341] R13: 00007f0c95e26038 R14: 00007f0c95e25fa0 R15: 00007ffef5b929e8 [ 57.942913][ T6341] [ 57.964609][ T42] audit: type=1400 audit(1791038039.317:388): avc: denied { unmount } for pid=5731 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 58.037629][ T42] audit: type=1400 audit(1791038039.387:389): avc: denied { write } for pid=6344 comm="syz.0.148" name="ipv6_route" dev="proc" ino=4026533249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 58.057235][ T42] audit: type=1400 audit(1791038039.407:390): avc: denied { create } for pid=6344 comm="syz.0.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 58.073879][ T5742] Bluetooth: hci0: unexpected event 0x06 length: 2 < 3 [ 58.073918][ T5742] Bluetooth: hci0: unexpected event 0x06 length: 2 < 3 [ 58.073947][ T5742] Bluetooth: hci0: unexpected event 0x06 length: 2 < 3 [ 58.073975][ T5742] Bluetooth: hci0: unexpected event 0x06 length: 2 < 3 [ 58.074001][ T5742] Bluetooth: hci0: unexpected event 0x06 length: 2 < 3 [ 58.074029][ T5742] Bluetooth: hci0: unexpected event 0x06 length: 2 < 3 [ 58.074056][ T5742] Bluetooth: hci0: unexpected event 0x06 length: 2 < 3 [ 58.074083][ T5742] Bluetooth: hci0: unexpected event 0x06 length: 2 < 3 [ 58.074109][ T5742] Bluetooth: hci0: unexpected event 0x06 length: 2 < 3 [ 58.074137][ T5742] Bluetooth: hci0: unexpected event 0x06 length: 2 < 3 [ 58.074164][ T5742] Bluetooth: hci0: unexpected event 0x06 length: 2 < 3 [ 58.074190][ T5742] Bluetooth: hci0: unexpected event 0x06 length: 2 < 3 [ 58.074217][ T5742] Bluetooth: hci0: unexpected event 0x06 length: 2 < 3 [ 58.074244][ T5742] Bluetooth: hci0: unexpected event 0x06 length: 2 < 3 [ 58.074270][ T5742] Bluetooth: hci0: unexpected event 0x06 length: 2 < 3 [ 58.074296][ T5742] Bluetooth: hci0: unexpected event 0x06 length: 2 < 3 [ 58.074322][ T5742] Bluetooth: hci0: unexpected event 0x06 length: 2 < 3 [ 58.074349][ T5742] Bluetooth: hci0: unexpected event 0x06 length: 2 < 3 [ 58.074378][ T5742] Bluetooth: hci0: unexpected event 0x06 length: 2 < 3 [ 58.074404][ T5742] Bluetooth: hci0: unexpected event 0x06 length: 2 < 3 [ 58.074430][ T5742] Bluetooth: hci0: unexpected event 0x06 length: 2 < 3 [ 58.074460][ T5742] Bluetooth: hci0: unexpected event 0x06 length: 2 < 3 [ 58.074491][ T5742] Bluetooth: hci0: unexpected event 0x06 length: 2 < 3 [ 58.074519][ T5742] Bluetooth: hci0: unexpected event 0x06 length: 2 < 3 [ 58.074545][ T5742] Bluetooth: hci0: unexpected event 0x06 length: 2 < 3 [ 58.074572][ T5742] Bluetooth: hci0: unexpected event 0x06 length: 2 < 3 [ 58.074598][ T5742] Bluetooth: hci0: unexpected event 0x06 length: 2 < 3 [ 58.074625][ T5742] Bluetooth: hci0: unexpected event 0x06 length: 2 < 3 [ 58.074652][ T5742] Bluetooth: hci0: unexpected event 0x06 length: 2 < 3 [ 58.074679][ T5742] Bluetooth: hci0: unexpected event 0x06 length: 2 < 3 [ 58.074706][ T5742] Bluetooth: hci0: unexpected event 0x06 length: 2 < 3 [ 58.074733][ T5742] Bluetooth: hci0: unexpected event 0x06 length: 2 < 3 [ 58.074759][ T5742] Bluetooth: hci0: unexpected event 0x06 length: 2 < 3 [ 58.077106][ T42] audit: type=1400 audit(1791038039.427:391): avc: denied { allowed } for pid=6344 comm="syz.0.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 58.524299][ T42] audit: type=1326 audit(1791038039.877:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6317 comm="syz.3.140" exe="/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f373bd9e159 code=0x7fc00000 [ 58.681796][ T42] audit: type=1400 audit(1791038040.037:393): avc: denied { create } for pid=6361 comm="syz.3.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 58.703843][ T6364] bond1: Removing last ns target with arp_interval on [ 58.759895][ T42] audit: type=1400 audit(1791038040.117:394): avc: denied { read } for pid=6372 comm="syz.1.154" name="sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 58.760016][ T42] audit: type=1400 audit(1791038040.117:395): avc: denied { open } for pid=6372 comm="syz.1.154" path="/dev/sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 58.761951][ T6373] netlink: 'syz.1.154': attribute type 1 has an invalid length. [ 58.761963][ T6373] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.154'. [ 58.761971][ T6373] netlink: 'syz.1.154': attribute type 1 has an invalid length. [ 58.761978][ T6373] netlink: 2016 bytes leftover after parsing attributes in process `syz.1.154'. [ 58.817888][ T6376] netlink: 'syz.1.155': attribute type 15 has an invalid length. [ 58.824306][ T6371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.153'. [ 58.900795][ T6392] workqueue: name exceeds WQ_NAME_LEN. Truncating to: `€Ý—‚Õb—¢áì"^‰é¶ø6Có2W [ 58.900795][ T6392] ø¬Ò7 [ 59.003207][ T6405] tmpfs: Unknown parameter 'sizeJ%' [ 59.087813][ T6405] null_blk: disk rnullb0 created [ 59.098264][ T6413] netlink: 'syz.1.166': attribute type 1 has an invalid length. [ 59.117056][ T6413] bond2: entered promiscuous mode [ 59.117115][ T6413] bond2: entered allmulticast mode [ 59.117444][ T6413] 8021q: adding VLAN 0 to HW filter on device bond2 [ 59.195832][ T6424] netlink: 'syz.2.167': attribute type 4 has an invalid length. [ 59.261074][ T6430] openvswitch: netlink: IP tunnel attribute has 5413 unknown bytes. [ 59.479000][ T35] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 59.650201][ T35] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 59.653024][ T35] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.653046][ T35] usb 6-1: Product: syz [ 59.653058][ T35] usb 6-1: Manufacturer: syz [ 59.653069][ T35] usb 6-1: SerialNumber: syz [ 59.706898][ T5836] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 59.826010][ T6446] warning: `syz.0.177' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 59.911585][ T6426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.911930][ T6426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.912551][ T6426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.912824][ T6426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.913379][ T6426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.913651][ T6426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.919068][ T6426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.919467][ T6426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.920180][ T6426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.920492][ T6426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.959325][ T6455] FAULT_INJECTION: forcing a failure. [ 59.959325][ T6455] name failslab, interval 1, probability 0, space 0, times 0 [ 59.959354][ T6455] CPU: 1 UID: 0 PID: 6455 Comm: syz.0.178 Tainted: G L syzkaller #0 PREEMPT(full) [ 59.959376][ T6455] Tainted: [L]=SOFTLOCKUP [ 59.959381][ T6455] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 59.959390][ T6455] Call Trace: [ 59.959396][ T6455] [ 59.959403][ T6455] dump_stack_lvl+0x100/0x190 [ 59.959430][ T6455] should_fail_ex.cold+0x5/0xa [ 59.959453][ T6455] should_failslab+0xc2/0x120 [ 59.959476][ T6455] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 59.959497][ T6455] ? alloc_vmap_area+0x640/0x2bb0 [ 59.959521][ T6455] alloc_vmap_area+0x640/0x2bb0 [ 59.959547][ T6455] ? kasan_save_track+0x14/0x30 [ 59.959566][ T6455] ? __kasan_kmalloc+0xaa/0xb0 [ 59.959585][ T6455] ? __pfx_alloc_vmap_area+0x10/0x10 [ 59.959606][ T6455] ? __get_vm_area_node+0x124/0x350 [ 59.959630][ T6455] __get_vm_area_node+0x1ed/0x350 [ 59.959656][ T6455] __vmalloc_node_range_noprof+0x268/0x1420 [ 59.959680][ T6455] ? bpf_check+0x18b3/0xa550 [ 59.959710][ T6455] ? bpf_check+0x18b3/0xa550 [ 59.959736][ T6455] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 59.959764][ T6455] ? avc_has_perm_noaudit+0x145/0x470 [ 59.959792][ T6455] ? bpf_check+0x18b3/0xa550 [ 59.959812][ T6455] __vmalloc_node_noprof+0xad/0xf0 [ 59.959835][ T6455] ? bpf_check+0x18b3/0xa550 [ 59.959864][ T6455] __vmalloc_noprof+0xa3/0x120 [ 59.959886][ T6455] ? __pfx___vmalloc_noprof+0x10/0x10 [ 59.959911][ T6455] ? bpf_lsm_bpf_prog_load+0x9/0x10 [ 59.959925][ T6455] ? security_bpf_prog_load+0x10f/0x2f0 [ 59.959945][ T6455] ? bpf_vlog_init+0x118/0x150 [ 59.959961][ T6455] bpf_check+0x18b3/0xa550 [ 59.959985][ T6455] ? __css_rstat_updated+0x1ce/0x590 [ 59.960004][ T6455] ? __lock_acquire+0x5c0/0x1f40 [ 59.960024][ T6455] ? __pfx___css_rstat_updated+0x10/0x10 [ 59.960059][ T6455] ? __pfx_bpf_check+0x10/0x10 [ 59.960082][ T6455] ? lock_acquire+0x1d1/0x380 [ 59.960099][ T6455] ? bpf_prog_load+0x19f9/0x2a70 [ 59.960122][ T6455] ? find_held_lock+0x2b/0x80 [ 59.960144][ T6455] ? bpf_prog_load+0x19f9/0x2a70 [ 59.960169][ T6455] ? __asan_memset+0x23/0x50 [ 59.960191][ T6455] ? bpf_prog_load+0x1ab3/0x2a70 [ 59.960212][ T6455] bpf_prog_load+0x1ab3/0x2a70 [ 59.960239][ T6455] ? __pfx_bpf_prog_load+0x10/0x10 [ 59.960280][ T6455] __sys_bpf+0x1f46/0x4a30 [ 59.960302][ T6455] ? __pfx___sys_bpf+0x10/0x10 [ 59.960318][ T6455] ? find_held_lock+0x2b/0x80 [ 59.960340][ T6455] ? get_pid_task+0xfc/0x250 [ 59.960362][ T6455] ? get_pid_task+0xfc/0x250 [ 59.960389][ T6455] ? find_held_lock+0x2b/0x80 [ 59.960416][ T6455] ? rcu_read_lock_any_held+0x6a/0x90 [ 59.960441][ T6455] ? find_held_lock+0x2b/0x80 [ 59.960463][ T6455] ? ksys_write+0x190/0x250 [ 59.960480][ T6455] ? ksys_write+0x190/0x250 [ 59.960498][ T6455] ? lock_acquire+0x1d1/0x380 [ 59.960530][ T6455] ? fput+0x7c/0x100 [ 59.960551][ T6455] ? ksys_write+0x1ac/0x250 [ 59.960572][ T6455] ? __x64_sys_bpf+0xce/0x140 [ 59.960588][ T6455] __x64_sys_bpf+0xce/0x140 [ 59.960606][ T6455] ? do_syscall_64+0xae/0x790 [ 59.960625][ T6455] do_syscall_64+0x123/0x790 [ 59.960643][ T6455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.960660][ T6455] RIP: 0033:0x7f0c95b9e159 [ 59.960674][ T6455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.960690][ T6455] RSP: 002b:00007f0c969a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 59.960707][ T6455] RAX: ffffffffffffffda RBX: 00007f0c95e25fa0 RCX: 00007f0c95b9e159 [ 59.960718][ T6455] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 59.960728][ T6455] RBP: 00007f0c969a0090 R08: 0000000000000000 R09: 0000000000000000 [ 59.960738][ T6455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 59.960747][ T6455] R13: 00007f0c95e26038 R14: 00007f0c95e25fa0 R15: 00007ffef5b929e8 [ 59.960769][ T6455] [ 60.314413][ T6471] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.382149][ T6473] loop4: detected capacity change from 0 to 7 [ 60.395059][ T6473] Dev loop4: unable to read RDB block 7 [ 60.395848][ T6473] loop4: AHDI p1 p2 p3 [ 60.395932][ T6473] loop4: partition table partially beyond EOD, truncated [ 60.396104][ T6473] loop4: p1 start 1601398130 is beyond EOD, truncated [ 60.396117][ T6473] loop4: p2 start 1702059890 is beyond EOD, truncated [ 60.470558][ T6476] __nla_validate_parse: 4 callbacks suppressed [ 60.470570][ T6476] netlink: 20 bytes leftover after parsing attributes in process `syz.2.187'. [ 60.470679][ T6476] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 60.519030][ T6478] netlink: 8 bytes leftover after parsing attributes in process `syz.2.188'. [ 60.519046][ T6478] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 60.522631][ T6478] netlink: 20 bytes leftover after parsing attributes in process `syz.2.188'. [ 60.695215][ T6486] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 60.797928][ T5836] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 60.798252][ T5836] ath9k_htc: Failed to initialize the device [ 60.823747][ T6493] [ 60.824580][ T6493] ====================================================== [ 60.826770][ T6493] WARNING: possible circular locking dependency detected [ 60.828994][ T6493] syzkaller #0 Tainted: G L [ 60.831042][ T6493] ------------------------------------------------------ [ 60.833214][ T6493] syz.0.195/6493 is trying to acquire lock: [ 60.835083][ T6493] ffffffff903feac8 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: configfs_rmdir+0x5ae/0x950 [ 60.838161][ T6493] [ 60.838161][ T6493] but task is already holding lock: [ 60.840710][ T6493] ffff888055e34880 (&sb->s_type->i_mutex_key#30){++++}-{4:4}, at: vfs_rmdir+0xed/0x8a0 [ 60.843752][ T6493] [ 60.843752][ T6493] which lock already depends on the new lock. [ 60.843752][ T6493] [ 60.846976][ T6493] [ 60.846976][ T6493] the existing dependency chain (in reverse order) is: [ 60.849812][ T6493] [ 60.849812][ T6493] -> #3 (&sb->s_type->i_mutex_key#30){++++}-{4:4}: [ 60.852554][ T6493] lock_acquire+0x1d1/0x380 [ 60.854155][ T6493] down_write+0x8b/0x1f0 [ 60.855676][ T6493] configfs_depend_item_unlocked+0xf3/0x6a0 [ 60.857700][ T6493] usbg_make_tpg+0x251/0x610 [ 60.859395][ T6493] target_fabric_make_tpg+0xab/0x8c0 [ 60.861332][ T6493] configfs_mkdir+0x525/0xd40 [ 60.862987][ T6493] vfs_mkdir+0x364/0x850 [ 60.864529][ T6493] filename_mkdirat+0x48b/0x5e0 [ 60.866230][ T6493] __x64_sys_mkdirat+0x89/0xc0 [ 60.867915][ T6493] do_syscall_64+0x123/0x790 [ 60.869558][ T6493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.871636][ T6493] [ 60.871636][ T6493] -> #2 (tpg_instances_lock){+.+.}-{4:4}: [ 60.874149][ T6493] lock_acquire+0x1d1/0x380 [ 60.875811][ T6493] __mutex_lock+0x1a4/0x1bd0 [ 60.877484][ T6493] tcm_alloc_inst+0x5f/0x1e0 [ 60.879317][ T6493] try_get_usb_function_instance+0x136/0x1f0 [ 60.881634][ T6493] usb_get_function_instance+0x16/0x70 [ 60.883792][ T6493] function_make+0x18c/0x3f0 [ 60.885555][ T6493] configfs_mkdir+0x525/0xd40 [ 60.887268][ T6493] vfs_mkdir+0x364/0x850 [ 60.888852][ T6493] filename_mkdirat+0x48b/0x5e0 [ 60.890550][ T6493] __x64_sys_mkdirat+0x89/0xc0 [ 60.892251][ T6493] do_syscall_64+0x123/0x790 [ 60.894154][ T6493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.896689][ T6493] [ 60.896689][ T6493] -> #1 (func_lock){+.+.}-{4:4}: [ 60.899441][ T6493] lock_acquire+0x1d1/0x380 [ 60.901234][ T6493] __mutex_lock+0x1a4/0x1bd0 [ 60.902856][ T6493] try_get_usb_function_instance+0x26/0x1f0 [ 60.904909][ T6493] usb_get_function_instance+0x16/0x70 [ 60.906788][ T6493] function_make+0x18c/0x3f0 [ 60.908452][ T6493] configfs_mkdir+0x525/0xd40 [ 60.910103][ T6493] vfs_mkdir+0x364/0x850 [ 60.911660][ T6493] filename_mkdirat+0x48b/0x5e0 [ 60.913358][ T6493] __x64_sys_mkdirat+0x89/0xc0 [ 60.915060][ T6493] do_syscall_64+0x123/0x790 [ 60.916689][ T6493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.918731][ T6493] [ 60.918731][ T6493] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 60.921374][ T6493] check_prev_add+0xeb/0xe60 [ 60.922991][ T6493] __lock_acquire+0x1528/0x1f40 [ 60.924766][ T6493] lock_acquire+0x1d1/0x380 [ 60.926461][ T6493] __mutex_lock+0x1a4/0x1bd0 [ 60.928187][ T6493] configfs_rmdir+0x5ae/0x950 [ 60.929974][ T6493] vfs_rmdir+0x328/0x8a0 [ 60.931504][ T6493] filename_rmdir+0x31a/0x5c0 [ 60.933144][ T6493] __x64_sys_rmdir+0x46/0x70 [ 60.934756][ T6493] do_syscall_64+0x123/0x790 [ 60.936372][ T6493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.938419][ T6493] [ 60.938419][ T6493] other info that might help us debug this: [ 60.938419][ T6493] [ 60.941614][ T6493] Chain exists of: [ 60.941614][ T6493] gadget_subsys.su_mutex --> tpg_instances_lock --> &sb->s_type->i_mutex_key#30 [ 60.941614][ T6493] [ 60.946162][ T6493] Possible unsafe locking scenario: [ 60.946162][ T6493] [ 60.948691][ T6493] CPU0 CPU1 [ 60.950572][ T6493] ---- ---- [ 60.952617][ T6493] lock(&sb->s_type->i_mutex_key#30); [ 60.954268][ T6493] lock(tpg_instances_lock); [ 60.956343][ T6493] lock(&sb->s_type->i_mutex_key#30); [ 60.958751][ T6493] lock(gadget_subsys.su_mutex); [ 60.960245][ T6493] [ 60.960245][ T6493] *** DEADLOCK *** [ 60.960245][ T6493] [ 60.962658][ T6493] locks held by syz.0.195/6493: 3, last CPU#3: [ 60.964679][ T6493] #0: ffff888023a74460 (sb_writers#18){.+.+}-{0:0}, at: filename_rmdir+0x1ff/0x5c0 [ 60.967714][ T6493] #1: ffff888055f3ac00 (&default_group_class[depth - 1]#2/1){+.+.}-{4:4}, at: filename_rmdir+0x258/0x5c0 [ 60.971260][ T6493] #2: ffff888055e34880 (&sb->s_type->i_mutex_key#30){++++}-{4:4}, at: vfs_rmdir+0xed/0x8a0 [ 60.975582][ T6493] [ 60.975582][ T6493] stack backtrace: [ 60.977462][ T6493] CPU: 3 UID: 0 PID: 6493 Comm: syz.0.195 Tainted: G L syzkaller #0 PREEMPT(full) [ 60.980925][ T6493] Tainted: [L]=SOFTLOCKUP [ 60.982305][ T6493] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 60.985547][ T6493] Call Trace: [ 60.986666][ T6493] [ 60.987868][ T6493] dump_stack_lvl+0x100/0x190 [ 60.989697][ T6493] print_circular_bug.cold+0x178/0x1be [ 60.991536][ T6493] check_noncircular+0x146/0x160 [ 60.993173][ T6493] check_prev_add+0xeb/0xe60 [ 60.994763][ T6493] ? __bfs+0x150/0x2a0 [ 60.996136][ T6493] __lock_acquire+0x1528/0x1f40 [ 60.997752][ T6493] lock_acquire+0x1d1/0x380 [ 60.999320][ T6493] ? configfs_rmdir+0x5ae/0x950 [ 61.001039][ T6493] ? __pfx___might_resched+0x10/0x10 [ 61.002779][ T6493] ? __lock_acquire+0x5c0/0x1f40 [ 61.004410][ T6493] __mutex_lock+0x1a4/0x1bd0 [ 61.005872][ T6493] ? configfs_rmdir+0x5ae/0x950 [ 61.007423][ T6493] ? configfs_rmdir+0x5ae/0x950 [ 61.008959][ T6493] ? reacquire_held_locks+0xdd/0x1f0 [ 61.010621][ T6493] ? __pfx___mutex_lock+0x10/0x10 [ 61.012227][ T6493] ? do_raw_spin_lock+0x128/0x260 [ 61.013833][ T6493] ? find_held_lock+0x2b/0x80 [ 61.015341][ T6493] ? fast_dput+0x2fe/0x6f0 [ 61.016759][ T6493] ? do_raw_spin_unlock+0x145/0x1e0 [ 61.018438][ T6493] ? _raw_spin_unlock+0x28/0x50 [ 61.020112][ T6493] ? fast_dput+0x168/0x6f0 [ 61.021548][ T6493] ? configfs_rmdir+0x5ae/0x950 [ 61.023098][ T6493] configfs_rmdir+0x5ae/0x950 [ 61.024623][ T6493] ? __pfx_configfs_rmdir+0x10/0x10 [ 61.026212][ T6493] ? __pfx_down_write+0x10/0x10 [ 61.027732][ T6493] vfs_rmdir+0x328/0x8a0 [ 61.029080][ T6493] filename_rmdir+0x31a/0x5c0 [ 61.030582][ T6493] ? __pfx_filename_rmdir+0x10/0x10 [ 61.032271][ T6493] ? do_getname+0x191/0x390 [ 61.033702][ T6493] __x64_sys_rmdir+0x46/0x70 [ 61.035154][ T6493] do_syscall_64+0x123/0x790 [ 61.036624][ T6493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.038473][ T6493] RIP: 0033:0x7f0c95b9e159 [ 61.039898][ T6493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.045894][ T6493] RSP: 002b:00007f0c969a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 61.048504][ T6493] RAX: ffffffffffffffda RBX: 00007f0c95e25fa0 RCX: 00007f0c95b9e159 [ 61.051004][ T6493] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000001c0 [ 61.053462][ T6493] RBP: 00007f0c95c3506b R08: 0000000000000000 R09: 0000000000000000 [ 61.055942][ T6493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 61.059118][ T6493] R13: 00007f0c95e26038 R14: 00007f0c95e25fa0 R15: 00007ffef5b929e8 [ 61.062446][ T6493] [ 61.065840][ T5836] usb 6-1: ath9k_htc: USB layer deinitialized [ 62.239825][ T25] usb 6-1: USB disconnect, device number 2