last executing test programs: 16.145667502s ago: executing program 1 (id=327): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf250100000005000a005b0000000c000800ffffffff00000000100007800c00018008000100", @ANYRES32, @ANYBLOB='\f\x00'], 0x50}, 0x1, 0x0, 0x0, 0x8004}, 0x80) 16.044935833s ago: executing program 1 (id=329): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e64, 0x9b, @mcast1, 0x794}, 0x1c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x140, 0x1a0) fanotify_init(0x8, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x300, 0x190, 0x2b8, 0xb0000010, 0x0, 0x5c8f0200, 0x288, 0x3a8, 0x3a8, 0x288, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x700, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@ipv6={@local, @private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0xff, 0xff, 0xffffff00], [0xffffff00, 0xff, 0x0, 0xffffffff], 'xfrm0\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x87, 0x4, 0x2, 0x4}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xc, 0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) openat(0xffffffffffffff9c, 0x0, 0x40, 0x4) fcntl$setlease(r1, 0x400, 0x0) setns(0xffffffffffffffff, 0x24020000) ptrace(0x10, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r4, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_RUN(r5, 0xae80, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x2}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r6, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000003400)={'wlan0\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006a00), r10) sendmsg$NL80211_CMD_JOIN_MESH(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000006b80)={&(0x7f0000000000)={0x48, r11, 0x1, 0x70bd23, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x20, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5, 0x6, 0x1}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x5}, 0x24000880) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001800090000000000000000001c140000fe00000143f4"], 0x30}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 12.994925597s ago: executing program 1 (id=347): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x4010, r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'geneve0\x00'}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) ioctl$VIDIOC_G_INPUT(r2, 0x80045626, &(0x7f0000000500)) r3 = add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f0000000380)={'fscrypt:', @desc3}, &(0x7f0000000600)={0x0, "0e2a96fc2afa32fb5fea4a1110402ef2984361f4a76e18044bbdfadbe2d4273486aa1f362dcac24eb6e6ae2368d93e84b2f4cc24556d18a253c27f74c426e032", 0x1e}, 0x48, 0xfffffffffffffffa) keyctl$read(0xb, r3, &(0x7f0000000780)=""/217, 0xd9) syz_clone(0x8000, &(0x7f0000000900)="67cd73cac21fb2c6c799653d052eb0df542e0f8608d9e9f9c273e1ca613d70289c9c25a573cd7c9b83f2bf5e23d16c5b06b7c17c7c6b5269b31f77cd4c6ebd7672b1b6a2a16cc07ecaef8bd2e0775f3c96f95c48394031f2fa739680cb0a22f4ccbe610d7d70b99af1aacbf5a74db1ffc46734b8665689e8e99918c7955ec316c43d37b6a44d9be3f5a4fbae0c2b966154bd975dfd67d02825a2c1c1872da7cc4e8b31281da697cf283343e27e3feeb6762a8414fafb7f01278e6bfb273568f31363a8a70d0b35de2c", 0xc9, &(0x7f0000000a00), &(0x7f0000000a40), &(0x7f0000000a80)="67c71eca5f95333c05e2bcb46c14626c1b1f61a3ed098c") setns(0xc9, 0x0) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x72f, 0x100, 0x8, 0x3b5}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000004c0)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) syz_io_uring_setup(0xf04, &(0x7f0000000400)={0x0, 0x595f, 0x1000, 0x0, 0x10000051}, &(0x7f0000000200), &(0x7f0000000000), &(0x7f00000000c0)) 12.24223316s ago: executing program 1 (id=354): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf10, 0x0, 0xffff, 0x9dff, 0x15, "0500"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x0, 0x12, "0062007d8200000000000000830ff7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000200)=0x17) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x17a) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./dev/kmsg\x00', 0x0, 0x24) lseek(r4, 0x0, 0x3) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = dup(r5) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f0000000040)="642e3ef30f23980f20d835200000000f22d80f01cbf6a2000000000f01cfb9800000c00f3235000100000f30dad00f23eef00fba760e0d0fc75f00"}], 0xffff, 0x0, 0x0, 0xffffffffffffffc8) ioctl$BTRFS_IOC_RM_DEV(r6, 0x5000940b, &(0x7f0000000a80)={{r3}, "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"}) open$dir(&(0x7f0000000000)='./file0\x00', 0x224500, 0x20) ioctl$DVB_DEMUX_DMX_STOP(r6, 0x6f2a) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$KVM_RUN(r6, 0xae80, 0x0) madvise(&(0x7f0000e95000/0x4000)=nil, 0x4000, 0x12) r8 = syz_open_dev$loop(&(0x7f0000000280), 0x11, 0x88c0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0xc2a43, 0x8e) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f00000006c0)={r9, 0x400, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffb, 0x0, 0x0, 0x1d, 0x14, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5d69098c8b534464c516bdd8a0f350000e35abdb80e38f5eb010001", "32d8cc263d9e234b02000000000000004a6783cdd3dfe7800b2d7b6aa54cc5001fcaed1e831fa79a000000020000000000000400", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x8, 0x57fd]}}) ioctl$LOOP_SET_BLOCK_SIZE(r8, 0x4c09, 0x400) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) 11.811725143s ago: executing program 1 (id=358): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf250100000005000a005b0000000c000800ffffffff00000000100007800c00018008000100", @ANYBLOB="0c0002"], 0x50}, 0x1, 0x0, 0x0, 0x8004}, 0x80) 10.625653758s ago: executing program 1 (id=368): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000400)={0x14, 0x0, 0x200, 0x38000000, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24000890}, 0x44) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x5c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000840) syz_io_uring_setup(0xf03, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24044012) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) r2 = socket(0x2a, 0x2, 0x400) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100033062cbd7000000000007f0000010000000000000000000000000000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f000001000000000000000000000000fffffffd320000007f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000046000000000000000000000000000000000000000000000000000000000100000000000002000100000000000000000048000200656362286369706865725f6e756c6c29000000"], 0x140}}, 0x0) syz_open_dev$usbfs(0x0, 0xb, 0x101301) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @loopback}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x200, 0x2}, {0x0, 0x0, 0x8000, 0x3, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010101, 0xffffeffd, 0x32}, 0x2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, 0xe8) write(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x41, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) llistxattr(0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x4040000) r5 = io_uring_setup(0x177f, &(0x7f0000000140)={0x0, 0xfffffffe, 0x1000, 0x0, 0x42b4}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000009968810524711004f320102030109021b0001000000000904000001ff01320009050d0353"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) close_range(r2, r5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setitimer(0x2, 0x0, 0x0) 10.51494957s ago: executing program 32 (id=368): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000400)={0x14, 0x0, 0x200, 0x38000000, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24000890}, 0x44) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x5c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000840) syz_io_uring_setup(0xf03, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24044012) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) r2 = socket(0x2a, 0x2, 0x400) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100033062cbd7000000000007f0000010000000000000000000000000000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f000001000000000000000000000000fffffffd320000007f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000046000000000000000000000000000000000000000000000000000000000100000000000002000100000000000000000048000200656362286369706865725f6e756c6c29000000"], 0x140}}, 0x0) syz_open_dev$usbfs(0x0, 0xb, 0x101301) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @loopback}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x200, 0x2}, {0x0, 0x0, 0x8000, 0x3, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010101, 0xffffeffd, 0x32}, 0x2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, 0xe8) write(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x41, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) llistxattr(0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x4040000) r5 = io_uring_setup(0x177f, &(0x7f0000000140)={0x0, 0xfffffffe, 0x1000, 0x0, 0x42b4}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000009968810524711004f320102030109021b0001000000000904000001ff01320009050d0353"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) close_range(r2, r5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setitimer(0x2, 0x0, 0x0) 2.603847891s ago: executing program 2 (id=455): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xf, 0x6, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x1c6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='efs\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x204100, 0x141) write(r0, &(0x7f0000000500)="372a9ff1334b565e41df338b74766fa50998419e7d7835500000000000004caaf407576f2c1109b716d1430c23d3ea25d474b1d6a2fbc02e81f43d1dc4e35a89e90000000000000000e3a5ac3d931f6fd0ead0cb0829d3cec7131825f77815ea5bc1a2fe3bc55b9096e80853cb4a24b9d37ce505ba450b6348acd87de2f7a4c526cf66043cf885f71d062eea1adf0f24d7c4034014ff2ca3ea9d9292790118064902350c2f69dfbb8c16c3b606579852a22ba905f1e2085fa31bc70a1ed4b65988eca0719587eb0b428964742d88e41412e10ddea33922b02905dac75a", 0xdd) unshare(0x68000e00) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f0000000340)={{0x80, 0xa0}, 'port1\x00', 0x3, 0x60004, 0xfffffffd, 0x613, 0xa, 0xfffffffc, 0x0, 0x0, 0x3}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f0000000500)={{0x80, 0x9}, 'port0\x00', 0x57, 0x40800, 0x9, 0x10, 0x3, 0x800, 0x8, 0x0, 0x3, 0x7f}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f0000000140)={{0x80, 0x2}, 'port0\x00', 0x80, 0x100816, 0x4, 0x9, 0x0, 0xc, 0x200000, 0x0, 0x4875c99660ff2b2d}) r3 = signalfd4(r0, &(0x7f0000000000)={[0x9]}, 0x8, 0x100800) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000000200)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x0, 0x7}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000001800)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa08004500001c006400000402907810000000e000005bb878f01658021200"], 0x0) io_uring_enter(r3, 0x4e38, 0xf83f, 0x2, &(0x7f0000000280)={[0x5894]}, 0x8) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x2e, 0x42, 0x0, r1, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000240)=@new_dev={0x2, 0x716, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x1ea}}}, &(0x7f0000000300)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000580)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x57, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, 0x0) poll(&(0x7f0000000140)=[{r5, 0xe1b9}], 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) 1.810457972s ago: executing program 3 (id=462): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0x4}}}]}, 0x3c}}, 0x4000010) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000010c0)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff}}, './file0\x00'}) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001140)={0x0, 0x4, 0x10}, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001180)=@bloom_filter={0x1e, 0xd61, 0x6, 0x6, 0x3006, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1, 0xc}, 0x50) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000001200), 0x400000, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82800, 0x0) ioctl$OCFS2_IOC_GROUP_EXTEND(r8, 0x5220, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0xc, 0x14, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @generic={0x2, 0x5, 0x1, 0x2, 0x7}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @func={0x85, 0x0, 0x1, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000f80)='GPL\x00', 0x3, 0xc7, &(0x7f0000000fc0)=""/199, 0x41100, 0x0, '\x00', r3, @fallback=0xd, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001100)={0x2, 0xb, 0x9, 0x77e}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f0000001240)=[r5, r6, r7, r8], 0x0, 0x10, 0x6}, 0x94) 1.786453661s ago: executing program 3 (id=464): r0 = syz_io_uring_setup(0x2, &(0x7f0000000000), &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000300)=0x0) (async, rerun: 32) r4 = socket(0x2, 0x1, 0x0) (rerun: 32) bind(r4, &(0x7f0000000500)=@in={0x2, 0x1a85, @loopback=0x0}, 0x10) listen(r4, 0xa) (async, rerun: 32) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000080)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x1}}) (async, rerun: 32) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000140)=@IORING_OP_WRITEV={0x2, 0x11, 0x0, @fd_index, 0x0, &(0x7f0000002100), 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x2, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000003000)='./dir0\x00', 0x1ff) (async) mount(&(0x7f0000003100)=@filename='127.0.0.1:6789:/\x00', &(0x7f0000003000)='./dir0\x00', &(0x7f0000003200)='ceph\x00', 0x0, 0x0) 1.614609888s ago: executing program 2 (id=465): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000000c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0], 0x0, 0xe3, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x96, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') (async) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, 0x0, 0x0, 0x208000, 0x0) creat(&(0x7f0000000080)='./cgroup\x00', 0x20) r3 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, &(0x7f0000000940)=0x5f) (async) getsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, &(0x7f0000000940)=0x5f) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast}}}}}}, 0x0) (async) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast}}}}}}, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000500)=0x82, &(0x7f0000000540)=0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0xfffffffffffffdbb, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff3, 0x7}, {0xa}, {0xb, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x28}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x48890) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1200000004000000040000000440000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="000000000100"/28], 0x50) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1200000004000000040000000440000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="000000000100"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="bf16000000000000620afcff0000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000bf61000000000000bfa300000000000007030000fcffffffb7040000000000008500000046000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="bf16000000000000620afcff0000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000bf61000000000000bfa300000000000007030000fcffffffb7040000000000008500000046000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.445240772s ago: executing program 2 (id=467): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf250100000005000a005b0000000c000800ffffffff0000000010", @ANYRES32, @ANYBLOB="0c0002"], 0x50}, 0x1, 0x0, 0x0, 0x8004}, 0x80) 1.444794448s ago: executing program 2 (id=468): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2d, &(0x7f00000000c0)=0x2003, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000540)={0x0, 0x8, 0x600000000000, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000940)={0x1c, 0x0, {0x10000, @usage=0x5, 0x0, 0x80000001, 0x7, 0x4, 0x0, 0x5cd, 0x0, @struct={0xffff, 0x1000}, 0x3, 0x8, [0xe, 0x7, 0x4, 0x4, 0x1ff, 0x5]}, {0x8, @struct={0x4, 0x8}, 0x0, 0x2, 0x7, 0x1, 0x9f, 0x9, 0x4c2, @struct={0x1, 0x7}, 0x7fffffff, 0x3, [0x8, 0x4, 0x9, 0x54e, 0x6, 0x8000000000000001]}, {0x3, @struct={0x80000000, 0xd2df}, r1, 0x403, 0xe35b, 0x100000000, 0x6, 0x1, 0x0, @usage=0x8, 0x9, 0x9, [0x0, 0x1, 0x6, 0xfffffffffffffffa, 0x8000000000000001, 0x4]}, {0x1ff, 0x7, 0x9}}) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af9219a1e18c488e827c1bbec", 0x89}], 0x1}, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000200)={0x0, 0x0}, 0x1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000400)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x40, @remote, @local, {[], {{0x4e20, 0x4001, r4, r3, 0x0, 0x0, 0x5, 0x10, 0x1001}}}}}}}, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000040)={@broadcast, @local, @val={@void, {0x8100, 0x1, 0x1, 0x4}}, {@can={0xc, {{0x3, 0x1}, 0x0, 0x2, 0x0, 0x0, "b771e213af24a8cd"}}}}, 0x0) 825.709102ms ago: executing program 3 (id=473): r0 = socket$packet(0x11, 0x2, 0x300) (async) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) (async) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (async) setresuid(0xee01, 0xee00, 0x0) (async) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000600)={{0x0, 0xffffffffffffff3b, 0x8, 0x5, 0xffff, 0x68, 0x5cd8, 0x1cf2, 0x6, 0x6, 0x7fffffff, 0x2, 0x8, 0x6, 0xff}}) (async) bind$inet6(r2, &(0x7f00000005c0)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000100)={'veth0_virt_wifi\x00', {0x2, 0x0, @private}}) (async) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='befs\x00', 0x0, 0x0) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000180)={'veth0_vlan\x00'}) 825.068848ms ago: executing program 0 (id=475): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x4010, r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'geneve0\x00'}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) ioctl$VIDIOC_G_INPUT(r2, 0x80045626, &(0x7f0000000500)) r3 = add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f0000000380)={'fscrypt:', @desc3}, &(0x7f0000000600)={0x0, "0e2a96fc2afa32fb5fea4a1110402ef2984361f4a76e18044bbdfadbe2d4273486aa1f362dcac24eb6e6ae2368d93e84b2f4cc24556d18a253c27f74c426e032", 0x1e}, 0x48, 0xfffffffffffffffa) keyctl$read(0xb, r3, &(0x7f0000000780)=""/217, 0xd9) syz_clone(0x8000, &(0x7f0000000900)="67cd73cac21fb2c6c799653d052eb0df542e0f8608d9e9f9c273e1ca613d70289c9c25a573cd7c9b83f2bf5e23d16c5b06b7c17c7c6b5269b31f77cd4c6ebd7672b1b6a2a16cc07ecaef8bd2e0775f3c96f95c48394031f2fa739680cb0a22f4ccbe610d7d70b99af1aacbf5a74db1ffc46734b8665689e8e99918c7955ec316c43d37b6a44d9be3f5a4fbae0c2b966154bd975dfd67d02825a2c1c1872da7cc4e8b31281da697cf283343e27e3feeb6762a8414fafb7f01278e6bfb273568f31363a8a70d0b35de2c", 0xc9, &(0x7f0000000a00), &(0x7f0000000a40), &(0x7f0000000a80)="67c71eca5f95333c05e2bcb46c14626c1b1f61a3ed098c") setns(0xc9, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x72f, 0x100, 0x8, 0x3b5}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f00000004c0)) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) syz_ublk_setup_queues(r4, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x10, 0x1, 0x2e3}, &(0x7f0000000ac0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x880000, 0x20, 0x1000000, 0x104}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdd52, 0x40000, 0x2, 0x22a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f6d, 0x8c, 0x5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8af2, 0x1, 0x8, 0x9d7c}}], 0x1, &(0x7f00000014c0)={0x2e, 0x12, 0x0, r4, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0) syz_io_uring_setup(0xf04, &(0x7f0000000400)={0x0, 0x595f, 0x1000, 0x0, 0x10000051}, &(0x7f0000000200), &(0x7f0000000000), &(0x7f00000000c0)) 822.859735ms ago: executing program 3 (id=476): openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)=""/4090, &(0x7f00000010c0)=0xffa) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000005c0)={[0x4000000000000008, 0x6, 0x48, 0x4000000000000e52, 0x800000000001, 0x5479, 0x1041, 0x200200000006, 0x0, 0x400000001, 0xfffffffffffffffe, 0x100000000, 0x200000000000001, 0x40000000009, 0x8000000000085, 0x800040068], 0x2ffc, 0x557c1}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001040)={0x3, &(0x7f0000001000)=[{0x0, 0xfe, 0x8, 0x3}, {0x0, 0x9, 0x7, 0x9}, {0x7ff, 0xfa, 0x9, 0x7c96aea8}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 642.015325ms ago: executing program 3 (id=477): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf250100000005000a005b0000000c000800ffffffff0000000010", @ANYRES32, @ANYBLOB="0c0002"], 0x50}, 0x1, 0x0, 0x0, 0x8004}, 0x80) 641.281118ms ago: executing program 3 (id=478): mkdirat(0xffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000080), 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000300)={0x3, 0x0, [{0x4b564d06, 0x0, 0x7}, {0xb87, 0x0, 0xeb}, {0xbd3, 0x0, 0xf657}]}) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r4 = openat(0xffffff9c, &(0x7f00000001c0)='./proc/sys/net/ipv6/conf/all/force_mld_version\x00', 0x1, 0x5) write$cgroup_int(r4, &(0x7f0000000180)=0x1, 0x12) r5 = socket$nl_generic(0x10, 0x3, 0x10) pread64(r5, &(0x7f0000000140)=""/48, 0x30, 0xd07) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r6, 0x400455c8, 0x4) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYRES32=r4, @ANYRES64=r4, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32=r7, @ANYBLOB="0a00180003030303030300001c005a80140000800500060000000000050001006b00000004000180"], 0x44}}, 0x20000800) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r8, 0x9362, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000200)={0x0, 0x0}) syz_open_procfs(r10, &(0x7f00000002c0)='sched\x00') sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="89f6ffff000000002000128008000100736974191400028008000200ac14141d0600100002000000"], 0x40}}, 0x404c010) 535.62778ms ago: executing program 2 (id=479): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000ba05000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000001e00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009000000850000002300000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ptrace(0x10, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2b, &(0x7f0000000340), 0x4) r3 = socket$nl_crypto(0x10, 0x3, 0x15) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x84}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x70) sendmsg$nl_crypto(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f00000001200"], 0xf0}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (rerun: 64) 385.401304ms ago: executing program 4 (id=480): r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x2, 0x0) (async) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x3, @empty, 'ip6gre0\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x3, @empty, 'bridge0\x00'}}, 0x1e) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000040)=0xfffffffc) 384.881167ms ago: executing program 4 (id=481): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000e40), 0x1, 0x0) ioctl$PTP_ENABLE_PPS(r0, 0x40043d04, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000000040)=[0x9, 0x2b4]) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r3 = syz_io_uring_setup(0x38, &(0x7f00000000c0)={0x0, 0x1d2d, 0x13500}, &(0x7f0000000240), &(0x7f0000000040), &(0x7f0000000000)) io_uring_enter(r3, 0x4138, 0xe0a8, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x21, &(0x7f0000000440), 0x1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x4000000001) 242.73154ms ago: executing program 4 (id=482): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) lsetxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180), &(0x7f0000000240)='system_u:object_r:crond_exec_t:s0\x00', 0x22, 0x2) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x16c) semop(0x0, &(0x7f0000000080)=[{0x0, 0x8001, 0x1000}], 0x1) semop(0x0, &(0x7f0000000200)=[{0x2, 0x6, 0x1000}], 0x1) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file7\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0) 242.056014ms ago: executing program 0 (id=483): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xd, 0x0, 0x20040001, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}}) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r6) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r6) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="29082dbd7040fedbdf251e000000080001000200000008000100000000000a00040077"], 0x5c}, 0x1, 0x0, 0x0, 0x2000c080}, 0x40240c4) r8 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x20002) write(r8, &(0x7f0000000040)="1c0000001e", 0x5) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r8, 0x0, 0x93, 0x54, &(0x7f0000000180)="c9648c8ef25812bf4da4f8294104884015d073702bd89f016e79f95cbdf0c243aaefda4fe4d47defb1962cd4088b60dd48a2e7ebe555a63e734734382fb6a4d6baf6fd34a8211e7f74f5f9c3a8d462abab26042b985896164216c6968bd18348e840a4478545bae6eceb65324d11c9384fb06860454a3cbf160649e4a3c4e3e3672398808704982bd79cda951a992063fb8052", &(0x7f0000000240)=""/84, 0x10, 0x0, 0xba, 0x6, &(0x7f0000000440)="5e06b5189f3ab9dc9e278d01087b7c1d87366d8b835d3f62ea1a22350eaef8467d0c045ef0db934e36af7f93c3ebc4462884605a9874c85b7fe00cc463cbc3172d3853d87e22985cfbfc3c815815d8f92add2f0d61ed0e87f4a2803ad57bce4a582fc37170846212fc020853529defd4febf658243631c8e52d40136598cc996a25d6104dd79c592371596eea75237b60eff27546cca2ca0b6840f84c636eec99106ff3d9790a021e1b3e709e376deeaca23ce6621e7791c9d5f", &(0x7f0000000500)="0ba242c9690a", 0x2, 0x0, 0x5}, 0x50) sendmsg$NL80211_CMD_SET_PMKSA(r8, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00012cbd7000ffdbdf25340000000a000600702f3bd6eacb0e0008cc001f0117090000"], 0x28}}, 0x1) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x28, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0xf9}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20000884) 241.233981ms ago: executing program 0 (id=484): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0xfd5e, &(0x7f0000000f80)=[{&(0x7f0000000880)='m', 0x1}], 0x1}, 0x5) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa000, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, &(0x7f0000000140)) setsockopt$sock_attach_bpf(r0, 0x1, 0xa, &(0x7f0000000180), 0x4) recvmsg$unix(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2082) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000b80)=@newtfilter={0x3c, 0x2c, 0x401, 0x3, 0x0, {0x0, 0x0, 0x0, r6, {0xfff2}, {0x0, 0xffff}, {0x300, 0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xa5}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 241.124355ms ago: executing program 4 (id=485): r0 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) ioctl$SNDCTL_SYNTH_MEMAVL(r0, 0xc004510e, &(0x7f0000000000)) 175.653963ms ago: executing program 4 (id=486): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async, rerun: 64) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async, rerun: 64) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) (async) sendmsg$inet6(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="944cf7", 0x3}], 0x1}, 0x20000010) (async) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x6, 0x7fff0001}]}) flistxattr(r4, 0x0, 0xdeff) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 115.731363ms ago: executing program 0 (id=487): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf250100000005000a005b0000000c000800ffffffff0000000010", @ANYRES32, @ANYBLOB="0c0002"], 0x50}, 0x1, 0x0, 0x0, 0x8004}, 0x80) 115.18865ms ago: executing program 0 (id=488): rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) (async, rerun: 64) r0 = gettid() (rerun: 64) timer_create(0x1, &(0x7f0000000800)={0x0, 0x12, 0x4, @tid=r0}, &(0x7f0000000380)=0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) (async) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x2) fchdir(r4) mkdir(&(0x7f0000000200)='./file0\x00', 0x80) (async) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x79) (async) open(&(0x7f0000000100)='./file0\x00', 0x60200, 0x11e) (async) rmdir(&(0x7f0000000280)='./file0/file0\x00') (async) rmdir(&(0x7f0000000000)='./file0\x00') r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r5, r5) (async) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r6, &(0x7f0000000080)="520003000100b8", 0x7) (async) setpgid(0x0, r5) (async) stat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) timer_settime(r1, 0x1, &(0x7f00000001c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r7 = gettid() tkill(r7, 0x16) (async, rerun: 32) r8 = socket$inet(0x2, 0x1, 0x6) (async, rerun: 32) bind$inet(r2, &(0x7f0000000000)={0x2, 0x7fe, @loopback}, 0x10) listen(r8, 0x5) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount$nfs(&(0x7f0000000080)='127.0.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="616464720b8f5a9d5be43d3932462e302e302e312c706f72743d323034392c6d6d756e4ea42a505374706f72743d320400392c70726f746f3d7463702c6d6f756e7470726f746f3d74637056c3c3be51c2940147e4efb391822c6e6f796f636b2c736f66742c74696d656f3d312c72657472616e733d31005e00"]) (async) accept$inet(r8, 0x0, 0x0) 1.282487ms ago: executing program 4 (id=489): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e25, 0x10, @mcast2}, 0x1c) (async) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) (async) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000000)={'HL\x00'}, &(0x7f0000000040)=0x1e) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async, rerun: 32) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async, rerun: 32) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x42, 0x1ff) pwrite64(r1, &(0x7f0000000200)='\x00', 0x1, 0x1000000) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) (async, rerun: 32) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) (async, rerun: 32) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/loop0\x00', 0x50203, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r3, 0xc138fd01, &(0x7f0000000000)="04000000000000000000000038010000") (async) ioctl(r3, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d79706f") write(0xffffffffffffffff, &(0x7f0000000138)="0000000000000000008000000000000000000000000000007468696e2d706f6f6c00000000000000373a3020373a31203132382030", 0x35) (async, rerun: 32) ioctl(r3, 0xc138fd09, &(0x7f0000000000)="0400000000000000000000006e010000380100000100"/45) (rerun: 32) 1.121541ms ago: executing program 0 (id=490): r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) (async) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) (async) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) listen(r1, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) (async) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {0x0, r4, 0x3}}, 0x18) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) close_range(r0, r2, 0x0) 0s ago: executing program 2 (id=491): r0 = socket(0xa, 0x5, 0x0) r1 = io_uring_setup(0x64bb, &(0x7f00000001c0)={0x0, 0x2000a869, 0x10, 0x1, 0x34f}) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x38}}, @time_exceeded={0x2b, 0x1, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @local}}}}}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000004a80)=@newtfilter={0x54, 0x2c, 0x401, 0x8000000, 0x0, {0x0, 0x0, 0x0, r5, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0x438, 0x0, 0x6}, "d94a"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xda3a}}]}]}}]}, 0x54}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x20, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @private0, [{}, {}, {0xe, 0x1, "24fcaa8fc05a"}]}}}}}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=@ipv6_newrule={0x58, 0x20, 0x1, 0x0, 0x0, {0xa, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10018}, [@FRA_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x2d}}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'ip6tnl0\x00'}, @FRA_SRC={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x58}}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000180)=[{0x0}], 0x1) r6 = io_uring_setup(0x7625, &(0x7f0000000ac0)={0x0, 0x653f, 0x400, 0x1ffffe, 0x135, 0x0, r1}) io_uring_register$IORING_REGISTER_FILES(r6, 0x1e, &(0x7f0000000280)=[r1], 0x1) sendmsg$inet_sctp(r0, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10, &(0x7f0000000500), 0x0, &(0x7f0000000000)=[@init={0x18, 0x84, 0x0, {0x5, 0xf95, 0x6, 0x7}}], 0x18, 0x20000090}, 0x40448c1) pipe2$9p(&(0x7f0000000800), 0x84080) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000340)={'syztnl0\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0xe4f7f69b44aaca36, 0x6a, 0x4, 0x1, 0x4c, @empty, @mcast2, 0xc7, 0x20, 0x6, 0xd27d}}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000500)=[0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0], 0x0, 0x65, &(0x7f0000000580)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000005c0), &(0x7f0000000640), 0x8, 0x91, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1c, 0x2, &(0x7f00000000c0)=@raw=[@generic={0x6, 0x7, 0x4, 0x0, 0x80}, @jmp={0x5, 0x1, 0x9, 0xb, 0x3, 0xffffffffffffffe0, 0xffffffffffffffff}], &(0x7f0000000140)='syzkaller\x00', 0x9, 0xe, &(0x7f0000000240)=""/14, 0x41100, 0x20, '\x00', r7, @fallback=0x15, r8, 0x8, &(0x7f00000003c0)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x5, 0xfffffff7, 0x7f7b}, 0x10, r9, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000800), 0x10, 0x3}, 0x94) kernel console output (not intermixed with test programs): [ T6219] netlink: 24 bytes leftover after parsing attributes in process `syz.0.62'. [ 60.538911][ T6239] bridge0: port 3(ip6gretap0) entered blocking state [ 60.552308][ T6239] bridge0: port 3(ip6gretap0) entered disabled state [ 60.552488][ T6239] ip6gretap0: entered allmulticast mode [ 60.557427][ T6239] ip6gretap0: entered promiscuous mode [ 60.557889][ T6239] bridge0: port 3(ip6gretap0) entered blocking state [ 60.557948][ T6239] bridge0: port 3(ip6gretap0) entered forwarding state [ 61.070382][ T6249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.72'. [ 61.854604][ T6304] netlink: 14 bytes leftover after parsing attributes in process `syz.3.89'. [ 62.202354][ T6325] netlink: 'syz.3.101': attribute type 29 has an invalid length. [ 62.212092][ T6326] warning: `syz.2.100' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 62.282179][ T6336] netlink: 60 bytes leftover after parsing attributes in process `syz.1.105'. [ 64.237852][ T6364] netlink: 'syz.2.116': attribute type 29 has an invalid length. [ 64.291220][ T6374] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.121'. [ 64.371310][ T6387] netlink: 36 bytes leftover after parsing attributes in process `syz.0.126'. [ 64.371509][ T6387] : renamed from batadv0 (while UP) [ 64.467746][ T6404] netlink: 60 bytes leftover after parsing attributes in process `syz.1.135'. [ 64.469434][ T6404] netlink: 60 bytes leftover after parsing attributes in process `syz.1.135'. [ 64.469751][ T6404] netlink: 60 bytes leftover after parsing attributes in process `syz.1.135'. [ 64.499989][ T6406] netlink: 'syz.1.138': attribute type 10 has an invalid length. [ 64.500004][ T6406] netlink: 40 bytes leftover after parsing attributes in process `syz.1.138'. [ 64.503584][ T43] kauditd_printk_skb: 20 callbacks suppressed [ 64.503601][ T43] audit: type=1400 audit(1790913818.566:359): avc: denied { create } for pid=6407 comm="syz.3.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 64.510455][ T43] audit: type=1400 audit(1790913818.566:360): avc: denied { read } for pid=5725 comm="syz-executor" name="loop1" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 64.511440][ T43] audit: type=1400 audit(1790913818.566:361): avc: denied { open } for pid=5725 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 64.511467][ T43] audit: type=1400 audit(1790913818.566:362): avc: denied { ioctl } for pid=5725 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=657 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 64.543674][ T43] audit: type=1400 audit(1790913818.606:363): avc: denied { write } for pid=6407 comm="syz.3.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 64.614221][ T43] audit: type=1400 audit(1790913818.676:364): avc: denied { create } for pid=6417 comm="syz.0.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 64.646598][ T6422] netlink: 'syz.3.143': attribute type 29 has an invalid length. [ 64.653154][ T43] audit: type=1400 audit(1790913818.706:365): avc: denied { ioctl } for pid=6423 comm="syz.1.144" path="socket:[10871]" dev="sockfs" ino=10871 ioctlcmd=0x8b32 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 65.107715][ T6450] netlink: 14 bytes leftover after parsing attributes in process `syz.1.157'. [ 65.119605][ T6452] netlink: 60 bytes leftover after parsing attributes in process `syz.2.158'. [ 65.131086][ T6454] netlink: 'syz.0.159': attribute type 39 has an invalid length. [ 65.172990][ T6455] netlink: 60 bytes leftover after parsing attributes in process `syz.2.158'. [ 65.183081][ T6454] hsr_slave_0 (unregistering): left promiscuous mode [ 65.189451][ T6452] netlink: 60 bytes leftover after parsing attributes in process `syz.2.158'. [ 65.243381][ T6459] netlink: 'syz.1.161': attribute type 10 has an invalid length. [ 65.243402][ T6459] netlink: 'syz.1.161': attribute type 4 has an invalid length. [ 65.354430][ T6474] netlink: 'syz.0.168': attribute type 29 has an invalid length. [ 65.354845][ T6474] netlink: 'syz.0.168': attribute type 29 has an invalid length. [ 65.545348][ T6498] netlink: 'syz.3.180': attribute type 29 has an invalid length. [ 65.552574][ T6500] netlink: 'syz.2.179': attribute type 29 has an invalid length. [ 65.609208][ T6504] geneve1: entered promiscuous mode [ 65.616385][ T6504] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 66.720608][ T6544] sctp: [Deprecated]: syz.3.201 (pid 6544) Use of struct sctp_assoc_value in delayed_ack socket option. [ 66.720608][ T6544] Use struct sctp_sack_info instead [ 67.092291][ T43] audit: type=1400 audit(1790913821.146:366): avc: denied { bind } for pid=6578 comm="syz.0.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 67.126251][ T6580] 8021q: adding VLAN 0 to HW filter on device bond1 [ 67.135995][ T6579] bond1: (slave geneve2): making interface the new active one [ 67.136628][ T6579] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 67.138794][ T43] audit: type=1400 audit(1790913821.196:367): avc: denied { write } for pid=6578 comm="syz.0.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 67.143763][ T12] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 67.143786][ T12] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 67.143804][ T12] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 67.143820][ T12] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 67.315353][ T43] audit: type=1400 audit(1790913821.376:368): avc: denied { mounton } for pid=6595 comm="syz.1.217" path="/44/dev" dev="tmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 67.418880][ T6605] nbd: must specify a size in bytes for the device [ 67.849350][ T6625] syz.1.227 (6625): drop_caches: 2 [ 67.905686][ T6647] nbd: must specify a size in bytes for the device [ 68.213443][ T25] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 68.321305][ T6677] capability: warning: `syz.2.238' uses deprecated v2 capabilities in a way that may be insecure [ 68.381046][ T6686] nbd: must specify a size in bytes for the device [ 68.383395][ T25] usb 6-1: Using ep0 maxpacket: 8 [ 68.385222][ T25] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 68.391549][ T25] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 68.391575][ T25] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 68.391586][ T25] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 68.391598][ T25] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 68.391609][ T25] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 68.391628][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.599206][ T25] usb 6-1: GET_CAPABILITIES returned 0 [ 68.599245][ T25] usbtmc 6-1:16.0: can't read capabilities [ 68.899305][ T63] Process accounting resumed [ 68.989622][ T5833] usb 6-1: USB disconnect, device number 2 [ 69.206427][ T6763] nbd: must specify a size in bytes for the device [ 69.289503][ T6766] binder: BINDER_SET_CONTEXT_MGR already set [ 69.289518][ T6766] binder: 6764:6766 ioctl 4018620d 200000000100 returned -16 [ 69.391133][ T6773] program syz.1.253 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 69.391185][ T6773] ata1.00: invalid transfer count 0 [ 69.403347][ T6773] __nla_validate_parse: 22 callbacks suppressed [ 69.403366][ T6773] netlink: 32 bytes leftover after parsing attributes in process `syz.1.253'. [ 69.479998][ T6780] validate_nla: 7 callbacks suppressed [ 69.480017][ T6780] netlink: 'syz.1.256': attribute type 3 has an invalid length. [ 69.480028][ T6780] netlink: 64 bytes leftover after parsing attributes in process `syz.1.256'. [ 69.520678][ T6782] netlink: 24 bytes leftover after parsing attributes in process `syz.1.257'. [ 69.658312][ T6793] netlink: 24 bytes leftover after parsing attributes in process `syz.1.257'. [ 69.661593][ T6727] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 69.678161][ T6731] Process accounting resumed [ 69.764394][ T6803] netlink: 24 bytes leftover after parsing attributes in process `syz.2.260'. [ 69.764419][ T6803] nbd: must specify a size in bytes for the device [ 69.814720][ T43] kauditd_printk_skb: 28 callbacks suppressed [ 69.814739][ T43] audit: type=1400 audit(1790913823.876:397): avc: denied { create } for pid=6804 comm="syz.2.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 69.827470][ T43] audit: type=1400 audit(1790913823.886:398): avc: denied { sys_admin } for pid=6804 comm="syz.2.261" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 69.848959][ T43] audit: type=1400 audit(1790913823.906:399): avc: denied { prog_run } for pid=6804 comm="syz.2.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 69.896513][ T43] audit: type=1400 audit(1790913823.956:400): avc: denied { connect } for pid=6807 comm="syz.3.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 69.898520][ T6808] netlink: 8 bytes leftover after parsing attributes in process `syz.3.262'. [ 69.960668][ T6810] netlink: 32 bytes leftover after parsing attributes in process `syz.3.262'. [ 70.137726][ T43] audit: type=1400 audit(1790913824.196:401): avc: denied { setattr } for pid=6816 comm="syz.2.265" path="/dev/audio1" dev="devtmpfs" ino=1320 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 70.138713][ T43] audit: type=1400 audit(1790913824.196:402): avc: denied { ioctl } for pid=6816 comm="syz.2.265" path="/dev/radio1" dev="devtmpfs" ino=978 ioctlcmd=0x563c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 70.141892][ T43] audit: type=1400 audit(1790913824.196:403): avc: denied { ioctl } for pid=6816 comm="syz.2.265" path="/dev/uinput" dev="devtmpfs" ino=941 ioctlcmd=0x940a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 70.143726][ T43] audit: type=1400 audit(1790913824.206:404): avc: denied { ioctl } for pid=6816 comm="syz.2.265" path="socket:[15515]" dev="sockfs" ino=15515 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 70.144400][ T43] audit: type=1400 audit(1790913824.206:405): avc: denied { write } for pid=6816 comm="syz.2.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 70.145508][ T43] audit: type=1400 audit(1790913824.206:406): avc: denied { listen } for pid=6816 comm="syz.2.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 70.315389][ T6825] FAULT_INJECTION: forcing a failure. [ 70.315389][ T6825] name failslab, interval 1, probability 0, space 0, times 1 [ 70.315423][ T6825] CPU: 2 UID: 0 PID: 6825 Comm: syz.2.267 Tainted: G L syzkaller #0 PREEMPT(full) [ 70.315446][ T6825] Tainted: [L]=SOFTLOCKUP [ 70.315452][ T6825] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 70.315462][ T6825] Call Trace: [ 70.315469][ T6825] [ 70.315477][ T6825] dump_stack_lvl+0x100/0x190 [ 70.315515][ T6825] should_fail_ex.cold+0x5/0xa [ 70.315542][ T6825] should_failslab+0xc2/0x120 [ 70.315566][ T6825] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 70.315589][ T6825] ? __d_alloc+0x35/0xa50 [ 70.315617][ T6825] __d_alloc+0x35/0xa50 [ 70.315644][ T6825] d_alloc_pseudo+0x1c/0xc0 [ 70.315663][ T6825] alloc_file_pseudo+0x118/0x290 [ 70.315689][ T6825] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 70.315717][ T6825] ? alloc_fd+0x471/0x7a0 [ 70.315743][ T6825] sock_alloc_file+0x50/0x210 [ 70.315769][ T6825] __sys_socket+0x1c0/0x260 [ 70.315791][ T6825] ? __pfx___sys_socket+0x10/0x10 [ 70.315816][ T6825] __x64_sys_socket+0x72/0xb0 [ 70.315834][ T6825] ? lockdep_hardirqs_on+0x7d/0x110 [ 70.315879][ T6825] do_syscall_64+0x123/0x790 [ 70.315904][ T6825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.315921][ T6825] RIP: 0033:0x7f6ffb19e159 [ 70.315936][ T6825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.315952][ T6825] RSP: 002b:00007f6ffc147028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 70.315970][ T6825] RAX: ffffffffffffffda RBX: 00007f6ffb425fa0 RCX: 00007f6ffb19e159 [ 70.315982][ T6825] RDX: 0000000000000084 RSI: 0000000000000005 RDI: 0000000000000002 [ 70.315992][ T6825] RBP: 00007f6ffb23506b R08: 0000000000000000 R09: 0000000000000000 [ 70.316002][ T6825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 70.316012][ T6825] R13: 00007f6ffb426038 R14: 00007f6ffb425fa0 R15: 00007fff6d6d34e8 [ 70.316035][ T6825] [ 70.431091][ T6840] netlink: 24 bytes leftover after parsing attributes in process `syz.2.269'. [ 70.431115][ T6840] nbd: must specify a size in bytes for the device [ 70.561911][ T6841] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 70.594090][ T6854] mmap: syz.0.274 (6854): VmData 37724160 exceed data ulimit 7. Update limits or use boot option ignore_rlimit_data. [ 70.756477][ T6864] netlink: 12 bytes leftover after parsing attributes in process `syz.0.278'. [ 70.757462][ T6864] netlink: 12 bytes leftover after parsing attributes in process `syz.0.278'. [ 70.823343][ T5811] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 70.863479][ T5737] Bluetooth: hci0: command 0x0c20 tx timeout [ 70.942291][ T6875] ip6gretap0: left allmulticast mode [ 70.942308][ T6875] ip6gretap0: left promiscuous mode [ 70.944203][ T6875] bridge0: port 3(ip6gretap0) entered disabled state [ 70.948576][ T6875] bridge_slave_1: left allmulticast mode [ 70.948593][ T6875] bridge_slave_1: left promiscuous mode [ 70.948712][ T6875] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.958467][ T6875] bridge_slave_0: left allmulticast mode [ 70.958492][ T6875] bridge_slave_0: left promiscuous mode [ 70.958664][ T6875] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.973926][ T5811] usb 6-1: Using ep0 maxpacket: 8 [ 70.975157][ T5811] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 70.976121][ T5811] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 70.976161][ T5811] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 70.976180][ T5811] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 70.976200][ T5811] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 70.976220][ T5811] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 70.976253][ T5811] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.187370][ T5811] usb 6-1: usb_control_msg returned -32 [ 71.187419][ T5811] usbtmc 6-1:16.0: can't read capabilities [ 71.197867][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.197930][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.353282][ T5833] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 71.493499][ T5833] usb 8-1: device descriptor read/64, error -71 [ 71.547908][ T6849] usbtmc 6-1:16.0: control status returned 0 [ 71.557586][ T6849] affs: No valid root block on device sr0 [ 71.570143][ T6909] No source specified [ 71.574972][ T6909] No source specified [ 71.744889][ T5833] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 71.754106][ T5811] usb 6-1: USB disconnect, device number 3 [ 71.818775][ T6916] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 71.893292][ T5833] usb 8-1: device descriptor read/64, error -71 [ 72.015074][ T5833] usb usb8-port1: attempt power cycle [ 72.307816][ T6934] netlink: 'syz.1.296': attribute type 7 has an invalid length. [ 72.307862][ T6934] netlink: 'syz.1.296': attribute type 5 has an invalid length. [ 72.353318][ T5833] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 72.374322][ T5833] usb 8-1: device descriptor read/8, error -71 [ 72.613342][ T5833] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 72.633944][ T5833] usb 8-1: device descriptor read/8, error -71 [ 72.699824][ T6953] i2c i2c-0: new_device: Instantiated device tcpci at 0x02 [ 72.743605][ T5833] usb usb8-port1: unable to enumerate USB device [ 72.813374][ T6290] IPVS: starting estimator thread 0... [ 72.881927][ T6966] bond2: down delay (12) is not a multiple of miimon (100), value rounded to 0 ms [ 72.923384][ T6961] IPVS: using max 26 ests per chain, 62400 per kthread [ 72.936732][ T6973] nbd: must specify a size in bytes for the device [ 72.986019][ T6969] loop9: detected capacity change from 0 to 7 [ 73.012780][ T6969] Dev loop9: unable to read RDB block 7 [ 73.012818][ T6969] loop9: unable to read partition table [ 73.012980][ T6969] loop9: partition table beyond EOD, truncated [ 73.013015][ T6969] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 73.035500][ T6982] block nbd2: NBD_DISCONNECT [ 73.390541][ T6993] ======================================================= [ 73.390541][ T6993] WARNING: The mand mount option has been deprecated and [ 73.390541][ T6993] and is ignored by this kernel. Remove the mand [ 73.390541][ T6993] option from the mount to silence this warning. [ 73.390541][ T6993] ======================================================= [ 73.390589][ T6993] sysfs: Unknown parameter '' [ 73.447275][ T6995] faux_driver vgem: [drm] Unknown color mode 9; guessing buffer size. [ 73.560481][ T6999] netlink: 'syz.1.314': attribute type 2 has an invalid length. [ 73.711676][ T7014] nbd: must specify a size in bytes for the device [ 73.783853][ T7022] process 'syz.0.318' launched '/dev/fd/74' with NULL argv: empty string added [ 75.027163][ T7044] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 75.027950][ T7049] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 75.117223][ T7061] fuse: Bad value for 'user_id' [ 75.117241][ T7061] fuse: Bad value for 'user_id' [ 75.121769][ T7061] kAFS: unparsable volume name [ 75.151969][ T7061] vimc link validate: Sensor A:src:640x480 (0x42474752, 8, 2, 0, 8) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 75.152101][ T7061] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 75.190878][ T7068] __nla_validate_parse: 10 callbacks suppressed [ 75.190899][ T7068] netlink: 12 bytes leftover after parsing attributes in process `syz.1.327'. [ 75.190915][ T7068] nbd: must specify a size in bytes for the device [ 75.240138][ T7071] netlink: 88 bytes leftover after parsing attributes in process `syz.3.328'. [ 75.240159][ T7071] netlink: 16 bytes leftover after parsing attributes in process `syz.3.328'. [ 75.372021][ T7080] netlink: 8 bytes leftover after parsing attributes in process `syz.1.329'. [ 75.394765][ T7079] netlink: 8 bytes leftover after parsing attributes in process `syz.3.331'. [ 75.394787][ T7079] netlink: 'syz.3.331': attribute type 30 has an invalid length. [ 75.394795][ T7079] netlink: 4 bytes leftover after parsing attributes in process `syz.3.331'. [ 75.395174][ T7079] netlink: 8 bytes leftover after parsing attributes in process `syz.3.331'. [ 75.395192][ T7079] netlink: 'syz.3.331': attribute type 30 has an invalid length. [ 75.395203][ T7079] netlink: 4 bytes leftover after parsing attributes in process `syz.3.331'. [ 75.395689][ T7078] netlink: 8 bytes leftover after parsing attributes in process `syz.3.331'. [ 75.395702][ T7078] netlink: 'syz.3.331': attribute type 30 has an invalid length. [ 75.395709][ T7078] netlink: 4 bytes leftover after parsing attributes in process `syz.3.331'. [ 75.396027][ T7078] netlink: 'syz.3.331': attribute type 30 has an invalid length. [ 75.453758][ T5872] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 75.715152][ T5872] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 76.029833][ T43] kauditd_printk_skb: 46 callbacks suppressed [ 76.029853][ T43] audit: type=1400 audit(1790913830.086:453): avc: denied { relabelfrom } for pid=7110 comm="syz.3.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 76.032098][ T43] audit: type=1400 audit(1790913830.086:454): avc: denied { relabelto } for pid=7110 comm="syz.3.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 76.076686][ T7111] NILFS (nullb0): couldn't find nilfs on the device [ 76.228152][ T7082] ceph: No mds server is up or the cluster is laggy [ 76.233347][ T7086] ceph: No mds server is up or the cluster is laggy [ 76.233633][ T5872] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 76.319417][ T43] audit: type=1400 audit(1790913830.376:455): avc: denied { unlink } for pid=7114 comm="syz.3.336" name="#1" dev="tmpfs" ino=511 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 76.331400][ T76] cfg80211: failed to load regulatory.db [ 76.335123][ T7115] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 76.423960][ T7118] nbd: must specify a size in bytes for the device [ 76.778340][ T7031] syz.0.318 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 76.778380][ T7031] CPU: 1 UID: 0 PID: 7031 Comm: syz.0.318 Tainted: G L syzkaller #0 PREEMPT(full) [ 76.778408][ T7031] Tainted: [L]=SOFTLOCKUP [ 76.778416][ T7031] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 76.778428][ T7031] Call Trace: [ 76.778435][ T7031] [ 76.778443][ T7031] dump_stack_lvl+0x100/0x190 [ 76.778496][ T7031] dump_header+0xfb/0x606 [ 76.778519][ T7031] oom_kill_process.cold+0xd/0x380 [ 76.778560][ T7031] out_of_memory+0x340/0x14f0 [ 76.778600][ T7031] ? __pfx_out_of_memory+0x10/0x10 [ 76.778638][ T7031] mem_cgroup_out_of_memory+0xc6/0x130 [ 76.778664][ T7031] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 76.778687][ T7031] ? find_held_lock+0x2b/0x80 [ 76.778722][ T7031] ? do_raw_spin_unlock+0x145/0x1e0 [ 76.778753][ T7031] ? _raw_spin_unlock+0x28/0x50 [ 76.778793][ T7031] try_charge_memcg+0x783/0xf60 [ 76.778821][ T7031] ? __pfx_try_charge_memcg+0x10/0x10 [ 76.778852][ T7031] ? find_held_lock+0x2b/0x80 [ 76.778881][ T7031] ? rcu_read_unlock+0x17/0x60 [ 76.778900][ T7031] ? rcu_read_unlock+0x17/0x60 [ 76.778920][ T7031] ? find_held_lock+0x2b/0x80 [ 76.778951][ T7031] ? rcu_read_unlock+0x17/0x60 [ 76.778984][ T7031] charge_memcg+0x1ae/0x210 [ 76.779006][ T7031] __mem_cgroup_charge+0x2b/0x1c0 [ 76.779030][ T7031] shmem_alloc_and_add_folio+0x451/0xd40 [ 76.779070][ T7031] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 76.779106][ T7031] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 76.779146][ T7031] shmem_get_folio_gfp+0x75b/0x1980 [ 76.779187][ T7031] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 76.779221][ T7031] ? vm_normal_page+0x1d1/0x380 [ 76.779246][ T7031] ? __pfx_vm_normal_page+0x10/0x10 [ 76.779276][ T7031] shmem_write_begin+0x1a4/0x420 [ 76.779300][ T7031] ? __pfx_shmem_write_begin+0x10/0x10 [ 76.779322][ T7031] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 76.779351][ T7031] generic_perform_write+0x292/0xa40 [ 76.779378][ T7031] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 76.779410][ T7031] ? __pfx_generic_perform_write+0x10/0x10 [ 76.779442][ T7031] ? file_update_time_flags+0x38c/0x520 [ 76.779467][ T7031] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 76.779490][ T7031] shmem_file_write_iter+0x10e/0x140 [ 76.779516][ T7031] __kernel_write_iter+0x2ac/0x930 [ 76.779543][ T7031] ? __pfx___kernel_write_iter+0x10/0x10 [ 76.779567][ T7031] ? __up_read+0x333/0x980 [ 76.779597][ T7031] ? dump_user_range+0x65e/0xad0 [ 76.779621][ T7031] ? copy_mc_enhanced_fast_string+0x6/0xf [ 76.779655][ T7031] dump_user_range+0x3f9/0xad0 [ 76.779683][ T7031] ? __pfx_dump_user_range+0x10/0x10 [ 76.779715][ T7031] ? __pfx_writenote+0x10/0x10 [ 76.779740][ T7031] ? elf_core_dump+0x1f25/0x3d20 [ 76.779769][ T7031] elf_core_dump+0x2d68/0x3d20 [ 76.779808][ T7031] ? __pfx_elf_core_dump+0x10/0x10 [ 76.779855][ T7031] ? kasan_save_stack+0x3f/0x50 [ 76.779880][ T7031] ? kasan_save_stack+0x30/0x50 [ 76.779902][ T7031] ? kasan_save_track+0x14/0x30 [ 76.779925][ T7031] ? __kasan_kmalloc+0xaa/0xb0 [ 76.779946][ T7031] ? vfs_coredump+0x21f6/0x54a0 [ 76.779972][ T7031] ? get_signal+0x1f2a/0x21e0 [ 76.779992][ T7031] ? arch_do_signal_or_restart+0x91/0x7e0 [ 76.780030][ T7031] ? 0xffffffffff600000 [ 76.780085][ T7031] ? lock_acquire+0x1d1/0x380 [ 76.780108][ T7031] ? get_signal+0x1f2a/0x21e0 [ 76.780140][ T7031] ? vfs_coredump+0x281a/0x54a0 [ 76.780161][ T7031] vfs_coredump+0x281a/0x54a0 [ 76.780195][ T7031] ? __pfx_vfs_coredump+0x10/0x10 [ 76.780218][ T7031] ? __lock_acquire+0x5c0/0x1f40 [ 76.780248][ T7031] ? __lock_acquire+0x5c0/0x1f40 [ 76.780273][ T7031] ? lock_acquire+0x1d1/0x380 [ 76.780294][ T7031] ? unwind_next_frame+0xbd/0x2090 [ 76.780327][ T7031] ? lock_acquire+0x1d1/0x380 [ 76.780354][ T7031] ? bpf_ksym_find+0x128/0x1c0 [ 76.780371][ T7031] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 76.780399][ T7031] ? arch_stack_walk+0xa6/0xf0 [ 76.780429][ T7031] ? __sigqueue_free+0xbe/0x2a0 [ 76.780453][ T7031] ? stack_trace_save+0x8e/0xc0 [ 76.780469][ T7031] ? __pfx_stack_trace_save+0x10/0x10 [ 76.780489][ T7031] ? stack_depot_save_flags+0x27/0x9f0 [ 76.780516][ T7031] ? __lock_acquire+0x5c0/0x1f40 [ 76.780580][ T7031] ? proc_coredump_connector+0x2d3/0x4f0 [ 76.780602][ T7031] ? __pfx_proc_coredump_connector+0x10/0x10 [ 76.780627][ T7031] ? rcu_is_watching+0x13/0xc0 [ 76.780658][ T7031] get_signal+0x1f2a/0x21e0 [ 76.780689][ T7031] ? __pfx_get_signal+0x10/0x10 [ 76.780717][ T7031] arch_do_signal_or_restart+0x91/0x7e0 [ 76.780747][ T7031] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 76.780791][ T7031] irqentry_exit+0x402/0xa10 [ 76.780814][ T7031] asm_exc_page_fault+0x26/0x30 [ 76.780833][ T7031] RIP: 0033:0x7fe5f1e53bd7 [ 76.780851][ T7031] Code: e8 fe f9 ff ff 89 f2 48 8d 3d 8d 4f 1b 00 48 8d 35 0a 0b 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 76.780868][ T7031] RSP: 002b:00007fe5f2e831a0 EFLAGS: 00010206 [ 76.780885][ T7031] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fe5f1f9e159 [ 76.780897][ T7031] RDX: 00007fe5f2e831c0 RSI: 00007fe5f2e832f0 RDI: 000000000000000b [ 76.780908][ T7031] RBP: 00007fe5f203506b R08: 0000000000000000 R09: 0000000000000000 [ 76.780919][ T7031] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 76.780929][ T7031] R13: 00007fe5f2226128 R14: 00007fe5f2226090 R15: 00007ffd4548bbf8 [ 76.780961][ T7031] [ 76.818022][ T7031] memory: usage 307200kB, limit 307200kB, failcnt 69161 [ 76.818035][ T7031] memory+swap: usage 432144kB, limit 9007199254740988kB, failcnt 0 [ 76.818043][ T7031] kmem: usage 8532kB, limit 9007199254740988kB, failcnt 0 [ 76.818049][ T7031] Memory cgroup stats for /syz0: [ 76.818134][ T7031] cache 302690304 [ 76.818140][ T7031] rss 3137536 [ 76.818144][ T7031] rss_huge 0 [ 76.818150][ T7031] shmem 302690304 [ 76.818155][ T7031] mapped_file 421888 [ 76.818160][ T7031] dirty 0 [ 76.818164][ T7031] writeback 0 [ 76.818176][ T7031] workingset_refault_anon 70 [ 76.818182][ T7031] workingset_refault_file 17537 [ 76.818191][ T7031] swap 127942656 [ 76.818197][ T7031] swapcached 308531200 [ 76.818202][ T7031] pgpgin 394471 [ 76.818208][ T7031] pgpgout 319804 [ 76.818213][ T7031] pgfault 34064 [ 76.818219][ T7031] pgmajfault 190 [ 76.818224][ T7031] inactive_anon 198045696 [ 76.818230][ T7031] active_anon 107790336 [ 76.818236][ T7031] inactive_file 0 [ 76.818242][ T7031] active_file 0 [ 76.818247][ T7031] unevictable 0 [ 76.818253][ T7031] hierarchical_memory_limit 314572800 [ 76.818260][ T7031] hierarchical_memsw_limit 9223372036854771712 [ 76.818267][ T7031] total_cache 302690304 [ 76.818273][ T7031] total_rss 3137536 [ 76.818278][ T7031] total_rss_huge 0 [ 76.818284][ T7031] total_shmem 302690304 [ 76.818290][ T7031] total_mapped_file 421888 [ 76.818296][ T7031] total_dirty 0 [ 76.818301][ T7031] total_writeback 0 [ 76.818307][ T7031] total_workingset_refault_anon 70 [ 76.818313][ T7031] total_workingset_refault_file 17537 [ 76.818320][ T7031] total_swap 127942656 [ 76.818324][ T7031] total_swapcached 308531200 [ 76.818328][ T7031] total_pgpgin 394471 [ 76.818332][ T7031] total_pgpgout 319804 [ 76.818336][ T7031] total_pgfault 34064 [ 76.818340][ T7031] total_pgmajfault 190 [ 76.818344][ T7031] total_inactive_anon 198045696 [ 76.818348][ T7031] total_active_anon 107790336 [ 76.818352][ T7031] total_inactive_file 0 [ 76.818356][ T7031] total_active_file 0 [ 76.818360][ T7031] total_unevictable 0 [ 76.818364][ T7031] anon_cost 0 [ 76.818368][ T7031] file_cost 0 [ 76.818377][ T7031] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.318,pid=7029,uid=0 [ 76.818431][ T7031] Memory cgroup out of memory: Killed process 7029 (syz.0.318) total-vm:99072kB, anon-rss:1456kB, file-rss:54952kB, shmem-rss:0kB, UID:0 pgtables:212kB oom_score_adj:1000 [ 76.913369][ T7057] syz.0.318 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 76.919528][ T7057] CPU: 2 UID: 0 PID: 7057 Comm: syz.0.318 Tainted: G L syzkaller #0 PREEMPT(full) [ 76.919547][ T7057] Tainted: [L]=SOFTLOCKUP [ 76.919552][ T7057] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 76.919559][ T7057] Call Trace: [ 76.919563][ T7057] [ 76.919568][ T7057] dump_stack_lvl+0x100/0x190 [ 76.919590][ T7057] dump_header+0xfb/0x606 [ 76.919604][ T7057] oom_kill_process.cold+0xd/0x380 [ 76.919618][ T7057] out_of_memory+0x340/0x14f0 [ 76.919639][ T7057] ? __pfx_out_of_memory+0x10/0x10 [ 76.919660][ T7057] mem_cgroup_out_of_memory+0xc6/0x130 [ 76.919675][ T7057] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 76.919689][ T7057] ? find_held_lock+0x2b/0x80 [ 76.919710][ T7057] ? do_raw_spin_unlock+0x145/0x1e0 [ 76.919727][ T7057] ? _raw_spin_unlock+0x28/0x50 [ 76.919746][ T7057] try_charge_memcg+0x783/0xf60 [ 76.919768][ T7057] ? __pfx_try_charge_memcg+0x10/0x10 [ 76.919786][ T7057] ? find_held_lock+0x2b/0x80 [ 76.919804][ T7057] ? rcu_read_unlock+0x17/0x60 [ 76.919840][ T7057] ? rcu_read_unlock+0x17/0x60 [ 76.919851][ T7057] ? find_held_lock+0x2b/0x80 [ 76.919869][ T7057] ? rcu_read_unlock+0x17/0x60 [ 76.919884][ T7057] charge_memcg+0x1ae/0x210 [ 76.919896][ T7057] __mem_cgroup_charge+0x2b/0x1c0 [ 76.919909][ T7057] shmem_alloc_and_add_folio+0x451/0xd40 [ 76.919932][ T7057] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 76.919952][ T7057] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 76.919975][ T7057] shmem_get_folio_gfp+0x75b/0x1980 [ 76.919997][ T7057] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 76.920018][ T7057] ? vm_normal_page+0x1d1/0x380 [ 76.920032][ T7057] ? __pfx_vm_normal_page+0x10/0x10 [ 76.920054][ T7057] shmem_write_begin+0x1a4/0x420 [ 76.920067][ T7057] ? __pfx_shmem_write_begin+0x10/0x10 [ 76.920079][ T7057] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 76.920095][ T7057] generic_perform_write+0x292/0xa40 [ 76.920111][ T7057] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 76.920129][ T7057] ? __pfx_generic_perform_write+0x10/0x10 [ 76.920145][ T7057] ? file_update_time_flags+0x38c/0x520 [ 76.920158][ T7057] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 76.920170][ T7057] shmem_file_write_iter+0x10e/0x140 [ 76.920184][ T7057] __kernel_write_iter+0x2ac/0x930 [ 76.920198][ T7057] ? __pfx___kernel_write_iter+0x10/0x10 [ 76.920211][ T7057] ? __up_read+0x333/0x980 [ 76.920227][ T7057] ? dump_user_range+0x65e/0xad0 [ 76.920240][ T7057] ? copy_mc_enhanced_fast_string+0x6/0xf [ 76.920258][ T7057] dump_user_range+0x3f9/0xad0 [ 76.920274][ T7057] ? __pfx_dump_user_range+0x10/0x10 [ 76.920291][ T7057] ? __pfx_writenote+0x10/0x10 [ 76.920305][ T7057] ? elf_core_dump+0x1f25/0x3d20 [ 76.920321][ T7057] elf_core_dump+0x2d68/0x3d20 [ 76.920342][ T7057] ? __pfx_elf_core_dump+0x10/0x10 [ 76.920355][ T7057] ? kasan_save_stack+0x3f/0x50 [ 76.920369][ T7057] ? kasan_save_stack+0x30/0x50 [ 76.920381][ T7057] ? kasan_save_track+0x14/0x30 [ 76.920395][ T7057] ? __kasan_kmalloc+0xaa/0xb0 [ 76.920408][ T7057] ? vfs_coredump+0x21f6/0x54a0 [ 76.920419][ T7057] ? get_signal+0x1f2a/0x21e0 [ 76.920431][ T7057] ? arch_do_signal_or_restart+0x91/0x7e0 [ 76.920450][ T7057] ? 0xffffffffff600000 [ 76.920476][ T7057] ? lock_acquire+0x1d1/0x380 [ 76.920488][ T7057] ? get_signal+0x1f2a/0x21e0 [ 76.920504][ T7057] ? vfs_coredump+0x281a/0x54a0 [ 76.920516][ T7057] vfs_coredump+0x281a/0x54a0 [ 76.920533][ T7057] ? __pfx_vfs_coredump+0x10/0x10 [ 76.920546][ T7057] ? __lock_acquire+0x5c0/0x1f40 [ 76.920562][ T7057] ? __lock_acquire+0x5c0/0x1f40 [ 76.920576][ T7057] ? lock_acquire+0x1d1/0x380 [ 76.920588][ T7057] ? unwind_next_frame+0xbd/0x2090 [ 76.920607][ T7057] ? lock_acquire+0x1d1/0x380 [ 76.920622][ T7057] ? bpf_ksym_find+0x128/0x1c0 [ 76.920634][ T7057] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 76.920650][ T7057] ? arch_stack_walk+0xa6/0xf0 [ 76.920669][ T7057] ? __sigqueue_free+0xbe/0x2a0 [ 76.920684][ T7057] ? stack_trace_save+0x8e/0xc0 [ 76.920695][ T7057] ? __pfx_stack_trace_save+0x10/0x10 [ 76.920719][ T7057] ? stack_depot_save_flags+0x27/0x9f0 [ 76.920735][ T7057] ? __lock_acquire+0x5c0/0x1f40 [ 76.920772][ T7057] ? proc_coredump_connector+0x2d3/0x4f0 [ 76.920784][ T7057] ? __pfx_proc_coredump_connector+0x10/0x10 [ 76.920799][ T7057] ? rcu_is_watching+0x13/0xc0 [ 76.920818][ T7057] get_signal+0x1f2a/0x21e0 [ 76.920836][ T7057] ? __pfx_get_signal+0x10/0x10 [ 76.920852][ T7057] arch_do_signal_or_restart+0x91/0x7e0 [ 76.920878][ T7057] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 76.920903][ T7057] irqentry_exit+0x402/0xa10 [ 76.920917][ T7057] asm_exc_page_fault+0x26/0x30 [ 76.920928][ T7057] RIP: 0033:0x7fe5f1e53bd7 [ 76.920937][ T7057] Code: e8 fe f9 ff ff 89 f2 48 8d 3d 8d 4f 1b 00 48 8d 35 0a 0b 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 76.920948][ T7057] RSP: 002b:00007fe5f2e831a0 EFLAGS: 00010206 [ 76.920958][ T7057] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fe5f1f9e159 [ 76.920965][ T7057] RDX: 00007fe5f2e831c0 RSI: 00007fe5f2e832f0 RDI: 000000000000000b [ 76.920972][ T7057] RBP: 00007fe5f203506b R08: 0000000000000000 R09: 0000000000000000 [ 76.920978][ T7057] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 76.920985][ T7057] R13: 00007fe5f2226128 R14: 00007fe5f2226090 R15: 00007ffd4548bbf8 [ 76.920999][ T7057] [ 76.921026][ T7057] memory: usage 307200kB, limit 307200kB, failcnt 69827 [ 76.921034][ T7057] memory+swap: usage 432144kB, limit 9007199254740988kB, failcnt 0 [ 76.921041][ T7057] kmem: usage 8452kB, limit 9007199254740988kB, failcnt 0 [ 76.921051][ T7057] Memory cgroup stats for /syz0: [ 76.921124][ T7057] cache 302923776 [ 76.921129][ T7057] rss 2985984 [ 76.921133][ T7057] rss_huge 0 [ 76.921137][ T7057] shmem 302923776 [ 76.921141][ T7057] mapped_file 0 [ 76.921144][ T7057] dirty 0 [ 76.921148][ T7057] writeback 0 [ 76.921151][ T7057] workingset_refault_anon 70 [ 76.921156][ T7057] workingset_refault_file 17537 [ 76.921160][ T7057] swap 127942656 [ 76.921164][ T7057] swapcached 308531200 [ 76.921168][ T7057] pgpgin 394528 [ 76.921171][ T7057] pgpgout 319841 [ 76.921175][ T7057] pgfault 34067 [ 76.921179][ T7057] pgmajfault 190 [ 76.921182][ T7057] inactive_anon 197894144 [ 76.921186][ T7057] active_anon 108023808 [ 76.921190][ T7057] inactive_file 0 [ 76.921194][ T7057] active_file 0 [ 76.921198][ T7057] unevictable 0 [ 76.921202][ T7057] hierarchical_memory_limit 314572800 [ 76.921206][ T7057] hierarchical_memsw_limit 9223372036854771712 [ 76.921211][ T7057] total_cache 302923776 [ 76.921215][ T7057] total_rss 2985984 [ 76.921218][ T7057] total_rss_huge 0 [ 76.921222][ T7057] total_shmem 302923776 [ 76.921226][ T7057] total_mapped_file 0 [ 76.921230][ T7057] total_dirty 0 [ 76.921234][ T7057] total_writeback 0 [ 76.921238][ T7057] total_workingset_refault_anon 70 [ 76.921242][ T7057] total_workingset_refault_file 17537 [ 76.921246][ T7057] total_swap 127942656 [ 76.921250][ T7057] total_swapcached 308531200 [ 76.921255][ T7057] total_pgpgin 394528 [ 76.921258][ T7057] total_pgpgout 319841 [ 76.921262][ T7057] total_pgfault 34067 [ 76.921266][ T7057] total_pgmajfault 190 [ 76.921270][ T7057] total_inactive_anon 197894144 [ 76.921274][ T7057] total_active_anon 108023808 [ 76.921279][ T7057] total_inactive_file 0 [ 76.921283][ T7057] total_active_file 0 [ 76.921286][ T7057] total_unevictable 0 [ 76.921290][ T7057] anon_cost 0 [ 76.921294][ T7057] file_cost 0 [ 76.921298][ T7057] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.318,pid=7024,uid=0 [ 76.921349][ T7057] Memory cgroup out of memory: Killed process 7024 (syz.0.318) total-vm:99072kB, anon-rss:1412kB, file-rss:51112kB, shmem-rss:0kB, UID:0 pgtables:200kB oom_score_adj:1000 [ 76.997197][ T7050] syz.0.318 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 76.997222][ T7050] CPU: 0 UID: 0 PID: 7050 Comm: syz.0.318 Tainted: G L syzkaller #0 PREEMPT(full) [ 76.997239][ T7050] Tainted: [L]=SOFTLOCKUP [ 76.997243][ T7050] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 76.997250][ T7050] Call Trace: [ 76.997255][ T7050] [ 76.997260][ T7050] dump_stack_lvl+0x100/0x190 [ 76.997281][ T7050] dump_header+0xfb/0x606 [ 76.997296][ T7050] oom_kill_process.cold+0xd/0x380 [ 76.997310][ T7050] out_of_memory+0x340/0x14f0 [ 76.997343][ T7050] ? __pfx_out_of_memory+0x10/0x10 [ 76.997374][ T7050] mem_cgroup_out_of_memory+0xc6/0x130 [ 76.997413][ T7050] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 76.997433][ T7050] ? find_held_lock+0x2b/0x80 [ 76.997463][ T7050] ? do_raw_spin_unlock+0x145/0x1e0 [ 76.997488][ T7050] ? _raw_spin_unlock+0x28/0x50 [ 76.997510][ T7050] try_charge_memcg+0x783/0xf60 [ 76.997525][ T7050] ? __pfx_try_charge_memcg+0x10/0x10 [ 76.997543][ T7050] ? find_held_lock+0x2b/0x80 [ 76.997561][ T7050] ? rcu_read_unlock+0x17/0x60 [ 76.997572][ T7050] ? rcu_read_unlock+0x17/0x60 [ 76.997583][ T7050] ? find_held_lock+0x2b/0x80 [ 76.997601][ T7050] ? rcu_read_unlock+0x17/0x60 [ 76.997615][ T7050] charge_memcg+0x1ae/0x210 [ 76.997627][ T7050] __mem_cgroup_charge+0x2b/0x1c0 [ 76.997641][ T7050] shmem_alloc_and_add_folio+0x451/0xd40 [ 76.997663][ T7050] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 76.997684][ T7050] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 76.997704][ T7050] ? __lock_acquire+0x5c0/0x1f40 [ 76.997719][ T7050] shmem_get_folio_gfp+0x75b/0x1980 [ 76.997741][ T7050] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 76.997758][ T7050] ? inode_set_ctime_current+0x9c/0x850 [ 76.997775][ T7050] ? find_held_lock+0x2b/0x80 [ 76.997793][ T7050] ? timestamp_truncate+0x22e/0x2f0 [ 76.997812][ T7050] shmem_write_begin+0x1a4/0x420 [ 76.997824][ T7050] ? __pfx_shmem_write_begin+0x10/0x10 [ 76.997835][ T7050] ? inode_set_ctime_current+0x283/0x850 [ 76.997854][ T7050] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 76.997866][ T7050] ? inode_maybe_inc_iversion+0x169/0x220 [ 76.997883][ T7050] generic_perform_write+0x292/0xa40 [ 76.997897][ T7050] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 76.997914][ T7050] ? __pfx_generic_perform_write+0x10/0x10 [ 76.997930][ T7050] ? mnt_put_write_access_file+0x4e/0x100 [ 76.997946][ T7050] ? file_update_time_flags+0x38c/0x520 [ 76.997958][ T7050] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 76.997971][ T7050] shmem_file_write_iter+0x10e/0x140 [ 76.997985][ T7050] __kernel_write_iter+0x2ac/0x930 [ 76.997999][ T7050] ? __pfx___kernel_write_iter+0x10/0x10 [ 76.998012][ T7050] ? __up_read+0x333/0x980 [ 76.998028][ T7050] ? dump_user_range+0x65e/0xad0 [ 76.998044][ T7050] dump_user_range+0x3f9/0xad0 [ 76.998060][ T7050] ? __pfx_dump_user_range+0x10/0x10 [ 76.998078][ T7050] ? __pfx_writenote+0x10/0x10 [ 76.998091][ T7050] ? elf_core_dump+0x1f25/0x3d20 [ 76.998107][ T7050] elf_core_dump+0x2d68/0x3d20 [ 76.998129][ T7050] ? __pfx_elf_core_dump+0x10/0x10 [ 76.998142][ T7050] ? kasan_save_stack+0x3f/0x50 [ 76.998155][ T7050] ? kasan_save_stack+0x30/0x50 [ 76.998168][ T7050] ? kasan_save_track+0x14/0x30 [ 76.998181][ T7050] ? __kasan_kmalloc+0xaa/0xb0 [ 76.998194][ T7050] ? vfs_coredump+0x21f6/0x54a0 [ 76.998206][ T7050] ? get_signal+0x1f2a/0x21e0 [ 76.998217][ T7050] ? arch_do_signal_or_restart+0x91/0x7e0 [ 76.998237][ T7050] ? 0xffffffffff600000 [ 76.998263][ T7050] ? lock_acquire+0x1d1/0x380 [ 76.998276][ T7050] ? get_signal+0x1f2a/0x21e0 [ 76.998292][ T7050] ? vfs_coredump+0x281a/0x54a0 [ 76.998304][ T7050] vfs_coredump+0x281a/0x54a0 [ 76.998322][ T7050] ? __pfx_vfs_coredump+0x10/0x10 [ 76.998340][ T7050] ? __lock_acquire+0x5c0/0x1f40 [ 76.998356][ T7050] ? __lock_acquire+0x5c0/0x1f40 [ 76.998370][ T7050] ? lock_acquire+0x1d1/0x380 [ 76.998382][ T7050] ? unwind_next_frame+0xbd/0x2090 [ 76.998400][ T7050] ? lock_acquire+0x1d1/0x380 [ 76.998416][ T7050] ? bpf_ksym_find+0x128/0x1c0 [ 76.998427][ T7050] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 76.998444][ T7050] ? arch_stack_walk+0xa6/0xf0 [ 76.998463][ T7050] ? __sigqueue_free+0xbe/0x2a0 [ 76.998479][ T7050] ? stack_trace_save+0x8e/0xc0 [ 76.998489][ T7050] ? __pfx_stack_trace_save+0x10/0x10 [ 76.998501][ T7050] ? stack_depot_save_flags+0x27/0x9f0 [ 76.998518][ T7050] ? __lock_acquire+0x5c0/0x1f40 [ 76.998554][ T7050] ? proc_coredump_connector+0x2d3/0x4f0 [ 76.998567][ T7050] ? __pfx_proc_coredump_connector+0x10/0x10 [ 76.998582][ T7050] ? rcu_is_watching+0x13/0xc0 [ 76.998601][ T7050] get_signal+0x1f2a/0x21e0 [ 76.998619][ T7050] ? __pfx_get_signal+0x10/0x10 [ 76.998636][ T7050] arch_do_signal_or_restart+0x91/0x7e0 [ 76.998654][ T7050] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 76.998679][ T7050] irqentry_exit+0x402/0xa10 [ 76.998693][ T7050] asm_exc_page_fault+0x26/0x30 [ 76.998705][ T7050] RIP: 0033:0x7fe5f1e53bd7 [ 76.998717][ T7050] Code: e8 fe f9 ff ff 89 f2 48 8d 3d 8d 4f 1b 00 48 8d 35 0a 0b 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 76.998731][ T7050] RSP: 002b:00007fe5f2e831a0 EFLAGS: 00010206 [ 76.998745][ T7050] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fe5f1f9e159 [ 76.998756][ T7050] RDX: 00007fe5f2e831c0 RSI: 00007fe5f2e832f0 RDI: 000000000000000b [ 76.998766][ T7050] RBP: 00007fe5f203506b R08: 0000000000000000 R09: 0000000000000000 [ 76.998776][ T7050] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 76.998786][ T7050] R13: 00007fe5f2226128 R14: 00007fe5f2226090 R15: 00007ffd4548bbf8 [ 76.998809][ T7050] [ 76.998883][ T7050] memory: usage 307200kB, limit 307200kB, failcnt 70286 [ 76.998892][ T7050] memory+swap: usage 432144kB, limit 9007199254740988kB, failcnt 0 [ 76.998899][ T7050] kmem: usage 8260kB, limit 9007199254740988kB, failcnt 0 [ 76.998905][ T7050] Memory cgroup stats for /syz0: [ 76.998979][ T7050] cache 303112192 [ 76.998984][ T7050] rss 2994176 [ 76.998988][ T7050] rss_huge 0 [ 76.998992][ T7050] shmem 303112192 [ 76.998996][ T7050] mapped_file 0 [ 76.999000][ T7050] dirty 0 [ 76.999003][ T7050] writeback 0 [ 76.999007][ T7050] workingset_refault_anon 70 [ 76.999011][ T7050] workingset_refault_file 17539 [ 76.999016][ T7050] swap 127942656 [ 76.999019][ T7050] swapcached 308531200 [ 76.999023][ T7050] pgpgin 394578 [ 76.999027][ T7050] pgpgout 319843 [ 76.999031][ T7050] pgfault 34073 [ 76.999035][ T7050] pgmajfault 191 [ 76.999039][ T7050] inactive_anon 75698176 [ 76.999042][ T7050] active_anon 230416384 [ 76.999047][ T7050] inactive_file 0 [ 76.999050][ T7050] active_file 0 [ 76.999054][ T7050] unevictable 0 [ 76.999058][ T7050] hierarchical_memory_limit 314572800 [ 76.999062][ T7050] hierarchical_memsw_limit 9223372036854771712 [ 76.999067][ T7050] total_cache 303112192 [ 76.999071][ T7050] total_rss 2994176 [ 76.999075][ T7050] total_rss_huge 0 [ 76.999079][ T7050] total_shmem 303112192 [ 76.999083][ T7050] total_mapped_file 0 [ 76.999086][ T7050] total_dirty 0 [ 76.999090][ T7050] total_writeback 0 [ 76.999094][ T7050] total_workingset_refault_anon 70 [ 76.999098][ T7050] total_workingset_refault_file 17539 [ 76.999103][ T7050] total_swap 127942656 [ 76.999107][ T7050] total_swapcached 308531200 [ 76.999111][ T7050] total_pgpgin 394578 [ 76.999115][ T7050] total_pgpgout 319843 [ 76.999119][ T7050] total_pgfault 34073 [ 76.999122][ T7050] total_pgmajfault 191 [ 76.999126][ T7050] total_inactive_anon 75698176 [ 76.999131][ T7050] total_active_anon 230416384 [ 76.999135][ T7050] total_inactive_file 0 [ 76.999139][ T7050] total_active_file 0 [ 76.999143][ T7050] total_unevictable 0 [ 76.999147][ T7050] anon_cost 0 [ 76.999150][ T7050] file_cost 0 [ 76.999154][ T7050] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.318,pid=7028,uid=0 [ 76.999213][ T7050] Memory cgroup out of memory: Killed process 7028 (syz.0.318) total-vm:99072kB, anon-rss:1412kB, file-rss:49832kB, shmem-rss:0kB, UID:0 pgtables:188kB oom_score_adj:1000 [ 77.055594][ T7050] syz.0.318 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 77.055618][ T7050] CPU: 0 UID: 0 PID: 7050 Comm: syz.0.318 Tainted: G L syzkaller #0 PREEMPT(full) [ 77.055633][ T7050] Tainted: [L]=SOFTLOCKUP [ 77.055638][ T7050] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 77.055645][ T7050] Call Trace: [ 77.055649][ T7050] [ 77.055655][ T7050] dump_stack_lvl+0x100/0x190 [ 77.055685][ T7050] dump_header+0xfb/0x606 [ 77.055707][ T7050] oom_kill_process.cold+0xd/0x380 [ 77.055729][ T7050] out_of_memory+0x340/0x14f0 [ 77.055759][ T7050] ? __pfx_out_of_memory+0x10/0x10 [ 77.055786][ T7050] mem_cgroup_out_of_memory+0xc6/0x130 [ 77.055801][ T7050] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 77.055837][ T7050] ? find_held_lock+0x2b/0x80 [ 77.055859][ T7050] ? do_raw_spin_unlock+0x145/0x1e0 [ 77.055876][ T7050] ? _raw_spin_unlock+0x28/0x50 [ 77.055896][ T7050] try_charge_memcg+0x783/0xf60 [ 77.055910][ T7050] ? __pfx_try_charge_memcg+0x10/0x10 [ 77.055928][ T7050] ? find_held_lock+0x2b/0x80 [ 77.055945][ T7050] ? rcu_read_unlock+0x17/0x60 [ 77.055956][ T7050] ? rcu_read_unlock+0x17/0x60 [ 77.055967][ T7050] ? find_held_lock+0x2b/0x80 [ 77.055985][ T7050] ? rcu_read_unlock+0x17/0x60 [ 77.055999][ T7050] charge_memcg+0x1ae/0x210 [ 77.056011][ T7050] __mem_cgroup_charge+0x2b/0x1c0 [ 77.056024][ T7050] shmem_alloc_and_add_folio+0x451/0xd40 [ 77.056047][ T7050] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 77.056070][ T7050] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 77.056099][ T7050] shmem_get_folio_gfp+0x75b/0x1980 [ 77.056130][ T7050] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 77.056153][ T7050] ? vm_normal_page+0x1d1/0x380 [ 77.056168][ T7050] ? __pfx_vm_normal_page+0x10/0x10 [ 77.056185][ T7050] shmem_write_begin+0x1a4/0x420 [ 77.056198][ T7050] ? __pfx_shmem_write_begin+0x10/0x10 [ 77.056210][ T7050] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 77.056226][ T7050] generic_perform_write+0x292/0xa40 [ 77.056242][ T7050] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 77.056260][ T7050] ? __pfx_generic_perform_write+0x10/0x10 [ 77.056277][ T7050] ? file_update_time_flags+0x38c/0x520 [ 77.056291][ T7050] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 77.056304][ T7050] shmem_file_write_iter+0x10e/0x140 [ 77.056319][ T7050] __kernel_write_iter+0x2ac/0x930 [ 77.056339][ T7050] ? __pfx___kernel_write_iter+0x10/0x10 [ 77.056353][ T7050] ? __up_read+0x333/0x980 [ 77.056370][ T7050] ? dump_user_range+0x65e/0xad0 [ 77.056387][ T7050] dump_user_range+0x3f9/0xad0 [ 77.056403][ T7050] ? __pfx_dump_user_range+0x10/0x10 [ 77.056422][ T7050] ? __pfx_writenote+0x10/0x10 [ 77.056436][ T7050] ? elf_core_dump+0x1f25/0x3d20 [ 77.056453][ T7050] elf_core_dump+0x2d68/0x3d20 [ 77.056488][ T7050] ? __pfx_elf_core_dump+0x10/0x10 [ 77.056504][ T7050] ? kasan_save_stack+0x3f/0x50 [ 77.056518][ T7050] ? kasan_save_stack+0x30/0x50 [ 77.056532][ T7050] ? kasan_save_track+0x14/0x30 [ 77.056546][ T7050] ? __kasan_kmalloc+0xaa/0xb0 [ 77.056560][ T7050] ? vfs_coredump+0x21f6/0x54a0 [ 77.056572][ T7050] ? get_signal+0x1f2a/0x21e0 [ 77.056585][ T7050] ? arch_do_signal_or_restart+0x91/0x7e0 [ 77.056606][ T7050] ? 0xffffffffff600000 [ 77.056633][ T7050] ? lock_acquire+0x1d1/0x380 [ 77.056646][ T7050] ? get_signal+0x1f2a/0x21e0 [ 77.056663][ T7050] ? vfs_coredump+0x281a/0x54a0 [ 77.056676][ T7050] vfs_coredump+0x281a/0x54a0 [ 77.056695][ T7050] ? __pfx_vfs_coredump+0x10/0x10 [ 77.056708][ T7050] ? __lock_acquire+0x5c0/0x1f40 [ 77.056726][ T7050] ? __lock_acquire+0x5c0/0x1f40 [ 77.056741][ T7050] ? lock_acquire+0x1d1/0x380 [ 77.056754][ T7050] ? unwind_next_frame+0xbd/0x2090 [ 77.056773][ T7050] ? lock_acquire+0x1d1/0x380 [ 77.056790][ T7050] ? bpf_ksym_find+0x128/0x1c0 [ 77.056802][ T7050] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 77.056819][ T7050] ? arch_stack_walk+0xa6/0xf0 [ 77.056839][ T7050] ? __sigqueue_free+0xbe/0x2a0 [ 77.056855][ T7050] ? stack_trace_save+0x8e/0xc0 [ 77.056866][ T7050] ? __pfx_stack_trace_save+0x10/0x10 [ 77.056878][ T7050] ? stack_depot_save_flags+0x27/0x9f0 [ 77.056896][ T7050] ? __lock_acquire+0x5c0/0x1f40 [ 77.056934][ T7050] ? proc_coredump_connector+0x2d3/0x4f0 [ 77.056947][ T7050] ? __pfx_proc_coredump_connector+0x10/0x10 [ 77.056964][ T7050] ? rcu_is_watching+0x13/0xc0 [ 77.056983][ T7050] get_signal+0x1f2a/0x21e0 [ 77.057001][ T7050] ? __pfx_get_signal+0x10/0x10 [ 77.057017][ T7050] arch_do_signal_or_restart+0x91/0x7e0 [ 77.057035][ T7050] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 77.057072][ T7050] irqentry_exit+0x402/0xa10 [ 77.057092][ T7050] asm_exc_page_fault+0x26/0x30 [ 77.057109][ T7050] RIP: 0033:0x7fe5f1e53bd7 [ 77.057123][ T7050] Code: e8 fe f9 ff ff 89 f2 48 8d 3d 8d 4f 1b 00 48 8d 35 0a 0b 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 77.057138][ T7050] RSP: 002b:00007fe5f2e831a0 EFLAGS: 00010206 [ 77.057152][ T7050] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fe5f1f9e159 [ 77.057161][ T7050] RDX: 00007fe5f2e831c0 RSI: 00007fe5f2e832f0 RDI: 000000000000000b [ 77.057168][ T7050] RBP: 00007fe5f203506b R08: 0000000000000000 R09: 0000000000000000 [ 77.057174][ T7050] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 77.057181][ T7050] R13: 00007fe5f2226128 R14: 00007fe5f2226090 R15: 00007ffd4548bbf8 [ 77.057196][ T7050] [ 77.057255][ T7050] memory: usage 307200kB, limit 307200kB, failcnt 70529 [ 77.057263][ T7050] memory+swap: usage 432144kB, limit 9007199254740988kB, failcnt 0 [ 77.057270][ T7050] kmem: usage 7716kB, limit 9007199254740988kB, failcnt 0 [ 77.057276][ T7050] Memory cgroup stats for /syz0: [ 77.057409][ T7050] cache 303669248 [ 77.057415][ T7050] rss 2994176 [ 77.057419][ T7050] rss_huge 0 [ 77.057423][ T7050] shmem 303669248 [ 77.057427][ T7050] mapped_file 0 [ 77.057431][ T7050] dirty 0 [ 77.057434][ T7050] writeback 0 [ 77.057438][ T7050] workingset_refault_anon 70 [ 77.057442][ T7050] workingset_refault_file 17543 [ 77.057446][ T7050] swap 127942656 [ 77.057450][ T7050] swapcached 308531200 [ 77.057454][ T7050] pgpgin 394718 [ 77.057457][ T7050] pgpgout 319847 [ 77.057461][ T7050] pgfault 34081 [ 77.057465][ T7050] pgmajfault 192 [ 77.057469][ T7050] inactive_anon 75698176 [ 77.057473][ T7050] active_anon 230973440 [ 77.057477][ T7050] inactive_file 0 [ 77.057480][ T7050] active_file 0 [ 77.057484][ T7050] unevictable 0 [ 77.057488][ T7050] hierarchical_memory_limit 314572800 [ 77.057492][ T7050] hierarchical_memsw_limit 9223372036854771712 [ 77.057497][ T7050] total_cache 303669248 [ 77.057501][ T7050] total_rss 2994176 [ 77.057505][ T7050] total_rss_huge 0 [ 77.057509][ T7050] total_shmem 303669248 [ 77.057513][ T7050] total_mapped_file 0 [ 77.057517][ T7050] total_dirty 0 [ 77.057520][ T7050] total_writeback 0 [ 77.057524][ T7050] total_workingset_refault_anon 70 [ 77.057529][ T7050] total_workingset_refault_file 17543 [ 77.057533][ T7050] total_swap 127942656 [ 77.057537][ T7050] total_swapcached 308531200 [ 77.057541][ T7050] total_pgpgin 394718 [ 77.057545][ T7050] total_pgpgout 319847 [ 77.057549][ T7050] total_pgfault 34081 [ 77.057553][ T7050] total_pgmajfault 192 [ 77.057557][ T7050] total_inactive_anon 75698176 [ 77.057561][ T7050] total_active_anon 230973440 [ 77.057565][ T7050] total_inactive_file 0 [ 77.057569][ T7050] total_active_file 0 [ 77.057573][ T7050] total_unevictable 0 [ 77.057577][ T7050] anon_cost 0 [ 77.057581][ T7050] file_cost 0 [ 77.057585][ T7050] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.318,pid=7025,uid=0 [ 77.057663][ T7050] Memory cgroup out of memory: Killed process 7025 (syz.0.318) total-vm:99072kB, anon-rss:1412kB, file-rss:47464kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:1000 [ 77.097603][ T7050] syz.0.318 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 77.097626][ T7050] CPU: 0 UID: 0 PID: 7050 Comm: syz.0.318 Tainted: G L syzkaller #0 PREEMPT(full) [ 77.097641][ T7050] Tainted: [L]=SOFTLOCKUP [ 77.097645][ T7050] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 77.097652][ T7050] Call Trace: [ 77.097656][ T7050] [ 77.097661][ T7050] dump_stack_lvl+0x100/0x190 [ 77.097681][ T7050] dump_header+0xfb/0x606 [ 77.097695][ T7050] oom_kill_process.cold+0xd/0x380 [ 77.097708][ T7050] out_of_memory+0x340/0x14f0 [ 77.097727][ T7050] ? __pfx_out_of_memory+0x10/0x10 [ 77.097747][ T7050] mem_cgroup_out_of_memory+0xc6/0x130 [ 77.097761][ T7050] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 77.097789][ T7050] ? find_held_lock+0x2b/0x80 [ 77.097809][ T7050] ? do_raw_spin_unlock+0x145/0x1e0 [ 77.097825][ T7050] ? _raw_spin_unlock+0x28/0x50 [ 77.097845][ T7050] try_charge_memcg+0x783/0xf60 [ 77.097859][ T7050] ? __pfx_try_charge_memcg+0x10/0x10 [ 77.097876][ T7050] ? find_held_lock+0x2b/0x80 [ 77.097892][ T7050] ? rcu_read_unlock+0x17/0x60 [ 77.097902][ T7050] ? rcu_read_unlock+0x17/0x60 [ 77.097913][ T7050] ? find_held_lock+0x2b/0x80 [ 77.097929][ T7050] ? rcu_read_unlock+0x17/0x60 [ 77.097943][ T7050] charge_memcg+0x1ae/0x210 [ 77.097954][ T7050] __mem_cgroup_charge+0x2b/0x1c0 [ 77.097966][ T7050] shmem_alloc_and_add_folio+0x451/0xd40 [ 77.097988][ T7050] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 77.098007][ T7050] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 77.098029][ T7050] shmem_get_folio_gfp+0x75b/0x1980 [ 77.098050][ T7050] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 77.098069][ T7050] ? vm_normal_page+0x1d1/0x380 [ 77.098083][ T7050] ? __pfx_vm_normal_page+0x10/0x10 [ 77.098099][ T7050] shmem_write_begin+0x1a4/0x420 [ 77.098111][ T7050] ? __pfx_shmem_write_begin+0x10/0x10 [ 77.098123][ T7050] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 77.098138][ T7050] generic_perform_write+0x292/0xa40 [ 77.098153][ T7050] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 77.098169][ T7050] ? __pfx_generic_perform_write+0x10/0x10 [ 77.098186][ T7050] ? file_update_time_flags+0x38c/0x520 [ 77.098199][ T7050] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 77.098211][ T7050] shmem_file_write_iter+0x10e/0x140 [ 77.098225][ T7050] __kernel_write_iter+0x2ac/0x930 [ 77.098239][ T7050] ? __pfx___kernel_write_iter+0x10/0x10 [ 77.098252][ T7050] ? __up_read+0x333/0x980 [ 77.098268][ T7050] ? dump_user_range+0x65e/0xad0 [ 77.098284][ T7050] dump_user_range+0x3f9/0xad0 [ 77.098299][ T7050] ? __pfx_dump_user_range+0x10/0x10 [ 77.098317][ T7050] ? __pfx_writenote+0x10/0x10 [ 77.098330][ T7050] ? elf_core_dump+0x1f25/0x3d20 [ 77.098351][ T7050] elf_core_dump+0x2d68/0x3d20 [ 77.098372][ T7050] ? __pfx_elf_core_dump+0x10/0x10 [ 77.098385][ T7050] ? kasan_save_stack+0x3f/0x50 [ 77.098398][ T7050] ? kasan_save_stack+0x30/0x50 [ 77.098411][ T7050] ? kasan_save_track+0x14/0x30 [ 77.098424][ T7050] ? __kasan_kmalloc+0xaa/0xb0 [ 77.098437][ T7050] ? vfs_coredump+0x21f6/0x54a0 [ 77.098448][ T7050] ? get_signal+0x1f2a/0x21e0 [ 77.098460][ T7050] ? arch_do_signal_or_restart+0x91/0x7e0 [ 77.098480][ T7050] ? 0xffffffffff600000 [ 77.098507][ T7050] ? lock_acquire+0x1d1/0x380 [ 77.098519][ T7050] ? get_signal+0x1f2a/0x21e0 [ 77.098535][ T7050] ? vfs_coredump+0x281a/0x54a0 [ 77.098547][ T7050] vfs_coredump+0x281a/0x54a0 [ 77.098564][ T7050] ? __pfx_vfs_coredump+0x10/0x10 [ 77.098577][ T7050] ? __lock_acquire+0x5c0/0x1f40 [ 77.098593][ T7050] ? __lock_acquire+0x5c0/0x1f40 [ 77.098607][ T7050] ? lock_acquire+0x1d1/0x380 [ 77.098619][ T7050] ? unwind_next_frame+0xbd/0x2090 [ 77.098638][ T7050] ? lock_acquire+0x1d1/0x380 [ 77.098654][ T7050] ? bpf_ksym_find+0x128/0x1c0 [ 77.098664][ T7050] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 77.098681][ T7050] ? arch_stack_walk+0xa6/0xf0 [ 77.098699][ T7050] ? __sigqueue_free+0xbe/0x2a0 [ 77.098719][ T7050] ? stack_trace_save+0x8e/0xc0 [ 77.098735][ T7050] ? __pfx_stack_trace_save+0x10/0x10 [ 77.098752][ T7050] ? stack_depot_save_flags+0x27/0x9f0 [ 77.098775][ T7050] ? __lock_acquire+0x5c0/0x1f40 [ 77.098830][ T7050] ? proc_coredump_connector+0x2d3/0x4f0 [ 77.098845][ T7050] ? __pfx_proc_coredump_connector+0x10/0x10 [ 77.098860][ T7050] ? rcu_is_watching+0x13/0xc0 [ 77.098879][ T7050] get_signal+0x1f2a/0x21e0 [ 77.098896][ T7050] ? __pfx_get_signal+0x10/0x10 [ 77.098913][ T7050] arch_do_signal_or_restart+0x91/0x7e0 [ 77.098931][ T7050] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 77.098956][ T7050] irqentry_exit+0x402/0xa10 [ 77.098970][ T7050] asm_exc_page_fault+0x26/0x30 [ 77.098981][ T7050] RIP: 0033:0x7fe5f1e53bd7 [ 77.098992][ T7050] Code: e8 fe f9 ff ff 89 f2 48 8d 3d 8d 4f 1b 00 48 8d 35 0a 0b 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 77.099002][ T7050] RSP: 002b:00007fe5f2e831a0 EFLAGS: 00010206 [ 77.099012][ T7050] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fe5f1f9e159 [ 77.099019][ T7050] RDX: 00007fe5f2e831c0 RSI: 00007fe5f2e832f0 RDI: 000000000000000b [ 77.099026][ T7050] RBP: 00007fe5f203506b R08: 0000000000000000 R09: 0000000000000000 [ 77.099032][ T7050] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 77.099039][ T7050] R13: 00007fe5f2226128 R14: 00007fe5f2226090 R15: 00007ffd4548bbf8 [ 77.099053][ T7050] [ 77.099143][ T7050] memory: usage 307200kB, limit 307200kB, failcnt 70757 [ 77.099154][ T7050] memory+swap: usage 432144kB, limit 9007199254740988kB, failcnt 0 [ 77.099163][ T7050] kmem: usage 7700kB, limit 9007199254740988kB, failcnt 0 [ 77.099172][ T7050] Memory cgroup stats for /syz0: [ 77.099262][ T7050] cache 303685632 [ 77.099268][ T7050] rss 2949120 [ 77.099272][ T7050] rss_huge 0 [ 77.099276][ T7050] shmem 303685632 [ 77.099280][ T7050] mapped_file 0 [ 77.099283][ T7050] dirty 0 [ 77.099287][ T7050] writeback 0 [ 77.099291][ T7050] workingset_refault_anon 70 [ 77.099295][ T7050] workingset_refault_file 17543 [ 77.099299][ T7050] swap 127942656 [ 77.099303][ T7050] swapcached 308531200 [ 77.099307][ T7050] pgpgin 394722 [ 77.099311][ T7050] pgpgout 319847 [ 77.099314][ T7050] pgfault 34081 [ 77.099318][ T7050] pgmajfault 192 [ 77.099322][ T7050] inactive_anon 175263744 [ 77.099326][ T7050] active_anon 131424256 [ 77.099330][ T7050] inactive_file 0 [ 77.099339][ T7050] active_file 0 [ 77.099344][ T7050] unevictable 0 [ 77.099348][ T7050] hierarchical_memory_limit 314572800 [ 77.099352][ T7050] hierarchical_memsw_limit 9223372036854771712 [ 77.099357][ T7050] total_cache 303685632 [ 77.099362][ T7050] total_rss 2949120 [ 77.099366][ T7050] total_rss_huge 0 [ 77.099370][ T7050] total_shmem 303685632 [ 77.099374][ T7050] total_mapped_file 0 [ 77.099379][ T7050] total_dirty 0 [ 77.099382][ T7050] total_writeback 0 [ 77.099387][ T7050] total_workingset_refault_anon 70 [ 77.099391][ T7050] total_workingset_refault_file 17543 [ 77.099396][ T7050] total_swap 127942656 [ 77.099400][ T7050] total_swapcached 308531200 [ 77.099405][ T7050] total_pgpgin 394722 [ 77.099409][ T7050] total_pgpgout 319847 [ 77.099413][ T7050] total_pgfault 34081 [ 77.099417][ T7050] total_pgmajfault 192 [ 77.099421][ T7050] total_inactive_anon 175263744 [ 77.099426][ T7050] total_active_anon 131424256 [ 77.099430][ T7050] total_inactive_file 0 [ 77.099434][ T7050] total_active_file 0 [ 77.099439][ T7050] total_unevictable 0 [ 77.099443][ T7050] anon_cost 0 [ 77.099447][ T7050] file_cost 0 [ 77.099451][ T7050] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.318,pid=7035,uid=0 [ 77.099507][ T7050] Memory cgroup out of memory: Killed process 7035 (syz.0.318) total-vm:99072kB, anon-rss:1412kB, file-rss:45032kB, shmem-rss:0kB, UID:0 pgtables:180kB oom_score_adj:1000 [ 77.119908][ T7032] syz.0.318 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 77.119930][ T7032] CPU: 3 UID: 0 PID: 7032 Comm: syz.0.318 Tainted: G L syzkaller #0 PREEMPT(full) [ 77.119945][ T7032] Tainted: [L]=SOFTLOCKUP [ 77.119949][ T7032] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 77.119956][ T7032] Call Trace: [ 77.119960][ T7032] [ 77.119965][ T7032] dump_stack_lvl+0x100/0x190 [ 77.119985][ T7032] dump_header+0xfb/0x606 [ 77.119999][ T7032] oom_kill_process.cold+0xd/0x380 [ 77.120013][ T7032] out_of_memory+0x340/0x14f0 [ 77.120032][ T7032] ? __pfx_out_of_memory+0x10/0x10 [ 77.120052][ T7032] mem_cgroup_out_of_memory+0xc6/0x130 [ 77.120066][ T7032] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 77.120079][ T7032] ? find_held_lock+0x2b/0x80 [ 77.120099][ T7032] ? do_raw_spin_unlock+0x145/0x1e0 [ 77.120115][ T7032] ? _raw_spin_unlock+0x28/0x50 [ 77.120134][ T7032] try_charge_memcg+0x783/0xf60 [ 77.120148][ T7032] ? __pfx_try_charge_memcg+0x10/0x10 [ 77.120165][ T7032] ? find_held_lock+0x2b/0x80 [ 77.120181][ T7032] ? rcu_read_unlock+0x17/0x60 [ 77.120192][ T7032] ? rcu_read_unlock+0x17/0x60 [ 77.120202][ T7032] ? find_held_lock+0x2b/0x80 [ 77.120219][ T7032] ? rcu_read_unlock+0x17/0x60 [ 77.120233][ T7032] charge_memcg+0x1ae/0x210 [ 77.120243][ T7032] __mem_cgroup_charge+0x2b/0x1c0 [ 77.120256][ T7032] shmem_alloc_and_add_folio+0x451/0xd40 [ 77.120278][ T7032] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 77.120296][ T7032] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 77.120318][ T7032] shmem_get_folio_gfp+0x75b/0x1980 [ 77.120340][ T7032] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 77.120363][ T7032] ? vm_normal_page+0x1d1/0x380 [ 77.120377][ T7032] ? __pfx_vm_normal_page+0x10/0x10 [ 77.120394][ T7032] shmem_write_begin+0x1a4/0x420 [ 77.120406][ T7032] ? __pfx_shmem_write_begin+0x10/0x10 [ 77.120417][ T7032] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 77.120433][ T7032] generic_perform_write+0x292/0xa40 [ 77.120448][ T7032] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 77.120465][ T7032] ? __pfx_generic_perform_write+0x10/0x10 [ 77.120481][ T7032] ? file_update_time_flags+0x38c/0x520 [ 77.120495][ T7032] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 77.120507][ T7032] shmem_file_write_iter+0x10e/0x140 [ 77.120521][ T7032] __kernel_write_iter+0x2ac/0x930 [ 77.120535][ T7032] ? __pfx___kernel_write_iter+0x10/0x10 [ 77.120548][ T7032] ? __up_read+0x333/0x980 [ 77.120564][ T7032] ? dump_user_range+0x65e/0xad0 [ 77.120581][ T7032] dump_user_range+0x3f9/0xad0 [ 77.120596][ T7032] ? __pfx_dump_user_range+0x10/0x10 [ 77.120613][ T7032] ? __pfx_writenote+0x10/0x10 [ 77.120627][ T7032] ? elf_core_dump+0x1f25/0x3d20 [ 77.120643][ T7032] elf_core_dump+0x2d68/0x3d20 [ 77.120664][ T7032] ? __pfx_elf_core_dump+0x10/0x10 [ 77.120677][ T7032] ? kasan_save_stack+0x3f/0x50 [ 77.120690][ T7032] ? kasan_save_stack+0x30/0x50 [ 77.120703][ T7032] ? kasan_save_track+0x14/0x30 [ 77.120716][ T7032] ? __kasan_kmalloc+0xaa/0xb0 [ 77.120730][ T7032] ? vfs_coredump+0x21f6/0x54a0 [ 77.120741][ T7032] ? get_signal+0x1f2a/0x21e0 [ 77.120752][ T7032] ? arch_do_signal_or_restart+0x91/0x7e0 [ 77.120772][ T7032] ? 0xffffffffff600000 [ 77.120798][ T7032] ? lock_acquire+0x1d1/0x380 [ 77.120810][ T7032] ? get_signal+0x1f2a/0x21e0 [ 77.120826][ T7032] ? vfs_coredump+0x281a/0x54a0 [ 77.120838][ T7032] vfs_coredump+0x281a/0x54a0 [ 77.120855][ T7032] ? __pfx_vfs_coredump+0x10/0x10 [ 77.120868][ T7032] ? __lock_acquire+0x5c0/0x1f40 [ 77.120884][ T7032] ? __lock_acquire+0x5c0/0x1f40 [ 77.120898][ T7032] ? lock_acquire+0x1d1/0x380 [ 77.120910][ T7032] ? unwind_next_frame+0xbd/0x2090 [ 77.120928][ T7032] ? lock_acquire+0x1d1/0x380 [ 77.120944][ T7032] ? bpf_ksym_find+0x128/0x1c0 [ 77.120954][ T7032] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 77.120971][ T7032] ? arch_stack_walk+0xa6/0xf0 [ 77.120990][ T7032] ? __sigqueue_free+0xbe/0x2a0 [ 77.121005][ T7032] ? stack_trace_save+0x8e/0xc0 [ 77.121016][ T7032] ? __pfx_stack_trace_save+0x10/0x10 [ 77.121027][ T7032] ? stack_depot_save_flags+0x27/0x9f0 [ 77.121044][ T7032] ? __lock_acquire+0x5c0/0x1f40 [ 77.121080][ T7032] ? proc_coredump_connector+0x2d3/0x4f0 [ 77.121093][ T7032] ? __pfx_proc_coredump_connector+0x10/0x10 [ 77.121108][ T7032] ? rcu_is_watching+0x13/0xc0 [ 77.121127][ T7032] get_signal+0x1f2a/0x21e0 [ 77.121145][ T7032] ? __pfx_get_signal+0x10/0x10 [ 77.121162][ T7032] arch_do_signal_or_restart+0x91/0x7e0 [ 77.121181][ T7032] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 77.121207][ T7032] irqentry_exit+0x402/0xa10 [ 77.121221][ T7032] asm_exc_page_fault+0x26/0x30 [ 77.121233][ T7032] RIP: 0033:0x7fe5f1e53bd7 [ 77.121243][ T7032] Code: e8 fe f9 ff ff 89 f2 48 8d 3d 8d 4f 1b 00 48 8d 35 0a 0b 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 77.121254][ T7032] RSP: 002b:00007fe5f2e831a0 EFLAGS: 00010206 [ 77.121264][ T7032] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fe5f1f9e159 [ 77.121271][ T7032] RDX: 00007fe5f2e831c0 RSI: 00007fe5f2e832f0 RDI: 000000000000000b [ 77.121277][ T7032] RBP: 00007fe5f203506b R08: 0000000000000000 R09: 0000000000000000 [ 77.121284][ T7032] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 77.121291][ T7032] R13: 00007fe5f2226128 R14: 00007fe5f2226090 R15: 00007ffd4548bbf8 [ 77.121305][ T7032] [ 77.121310][ T7032] memory: usage 307200kB, limit 307200kB, failcnt 70839 [ 77.121317][ T7032] memory+swap: usage 432144kB, limit 9007199254740988kB, failcnt 0 [ 77.121324][ T7032] kmem: usage 7688kB, limit 9007199254740988kB, failcnt 0 [ 77.121331][ T7032] Memory cgroup stats for /syz0: [ 77.121406][ T7032] cache 303685632 [ 77.121413][ T7032] rss 2949120 [ 77.121419][ T7032] rss_huge 0 [ 77.121424][ T7032] shmem 303685632 [ 77.121430][ T7032] mapped_file 0 [ 77.121436][ T7032] dirty 0 [ 77.121442][ T7032] writeback 0 [ 77.121448][ T7032] workingset_refault_anon 70 [ 77.121454][ T7032] workingset_refault_file 17543 [ 77.121459][ T7032] swap 127942656 [ 77.121463][ T7032] swapcached 308531200 [ 77.121467][ T7032] pgpgin 394722 [ 77.121471][ T7032] pgpgout 319847 [ 77.121475][ T7032] pgfault 34081 [ 77.121480][ T7032] pgmajfault 192 [ 77.121486][ T7032] inactive_anon 175263744 [ 77.121492][ T7032] active_anon 131424256 [ 77.121498][ T7032] inactive_file 0 [ 77.121505][ T7032] active_file 0 [ 77.121510][ T7032] unevictable 0 [ 77.121516][ T7032] hierarchical_memory_limit 314572800 [ 77.121523][ T7032] hierarchical_memsw_limit 9223372036854771712 [ 77.121530][ T7032] total_cache 303685632 [ 77.121537][ T7032] total_rss 2949120 [ 77.121543][ T7032] total_rss_huge 0 [ 77.121549][ T7032] total_shmem 303685632 [ 77.121556][ T7032] total_mapped_file 0 [ 77.121562][ T7032] total_dirty 0 [ 77.121567][ T7032] total_writeback 0 [ 77.121572][ T7032] total_workingset_refault_anon 70 [ 77.121579][ T7032] total_workingset_refault_file 17543 [ 77.121586][ T7032] total_swap 127942656 [ 77.121592][ T7032] total_swapcached 308531200 [ 77.121598][ T7032] total_pgpgin 394722 [ 77.121604][ T7032] total_pgpgout 319847 [ 77.121610][ T7032] total_pgfault 34081 [ 77.121616][ T7032] total_pgmajfault 192 [ 77.121623][ T7032] total_inactive_anon 175263744 [ 77.121629][ T7032] total_active_anon 131424256 [ 77.121636][ T7032] total_inactive_file 0 [ 77.121644][ T7032] total_active_file 0 [ 77.121650][ T7032] total_unevictable 0 [ 77.121657][ T7032] anon_cost 0 [ 77.121661][ T7032] file_cost 0 [ 77.121664][ T7032] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.318,pid=7031,uid=0 [ 77.121718][ T7032] Memory cgroup out of memory: Killed process 7031 (syz.0.318) total-vm:99072kB, anon-rss:1412kB, file-rss:44456kB, shmem-rss:0kB, UID:0 pgtables:180kB oom_score_adj:1000 [ 77.260261][ T7123] evm: overlay not supported [ 77.277160][ T7123] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5134 sclass=netlink_route_socket pid=7123 comm=syz.3.340 [ 77.482481][ T43] audit: type=1400 audit(1790913831.536:456): avc: denied { write } for pid=7125 comm="syz.0.339" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 77.943298][ T43] audit: type=1400 audit(1790913832.006:457): avc: denied { ioctl } for pid=7134 comm="syz.0.343" path="socket:[14805]" dev="sockfs" ino=14805 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 77.979288][ T7135] macvlan2: entered promiscuous mode [ 77.979308][ T7135] macvlan2: entered allmulticast mode [ 77.979449][ T7135] team0: Device macvlan2 is already an upper device of the team interface [ 78.270255][ T7145] xt_l2tp: v2 sid > 0xffff: 4294967294 [ 78.338192][ T7147] nbd: must specify a size in bytes for the device [ 78.441162][ T7151] batman_adv: batadv0: Adding interface: syz_tun [ 78.441174][ T7151] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.441190][ T7151] batman_adv: batadv0: Interface activated: syz_tun [ 78.563924][ T43] audit: type=1400 audit(1790913832.626:458): avc: denied { create } for pid=7153 comm="syz.0.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 78.567695][ T43] audit: type=1400 audit(1790913832.626:459): avc: denied { connect } for pid=7153 comm="syz.0.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 79.261023][ T43] audit: type=1400 audit(1790913833.316:460): avc: denied { mount } for pid=7167 comm="syz.1.354" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 79.364486][ T7027] syz.0.318 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 79.364523][ T7027] CPU: 1 UID: 0 PID: 7027 Comm: syz.0.318 Tainted: G L syzkaller #0 PREEMPT(full) [ 79.364549][ T7027] Tainted: [L]=SOFTLOCKUP [ 79.364557][ T7027] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 79.364570][ T7027] Call Trace: [ 79.364582][ T7027] [ 79.364590][ T7027] dump_stack_lvl+0x100/0x190 [ 79.364633][ T7027] dump_header+0xfb/0x606 [ 79.364657][ T7027] oom_kill_process.cold+0xd/0x380 [ 79.364681][ T7027] out_of_memory+0x340/0x14f0 [ 79.364720][ T7027] ? __pfx_out_of_memory+0x10/0x10 [ 79.364755][ T7027] mem_cgroup_out_of_memory+0xc6/0x130 [ 79.364780][ T7027] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 79.364802][ T7027] ? find_held_lock+0x2b/0x80 [ 79.364854][ T7027] ? do_raw_spin_unlock+0x145/0x1e0 [ 79.364881][ T7027] ? _raw_spin_unlock+0x28/0x50 [ 79.364917][ T7027] try_charge_memcg+0x783/0xf60 [ 79.364939][ T7027] ? __pfx_try_charge_memcg+0x10/0x10 [ 79.364965][ T7027] ? find_held_lock+0x2b/0x80 [ 79.364989][ T7027] ? rcu_read_unlock+0x17/0x60 [ 79.365007][ T7027] ? rcu_read_unlock+0x17/0x60 [ 79.365024][ T7027] ? find_held_lock+0x2b/0x80 [ 79.365052][ T7027] ? rcu_read_unlock+0x17/0x60 [ 79.365076][ T7027] charge_memcg+0x1ae/0x210 [ 79.365096][ T7027] __mem_cgroup_charge+0x2b/0x1c0 [ 79.365119][ T7027] shmem_alloc_and_add_folio+0x451/0xd40 [ 79.365154][ T7027] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 79.365187][ T7027] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 79.365221][ T7027] shmem_get_folio_gfp+0x75b/0x1980 [ 79.365256][ T7027] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 79.365284][ T7027] ? vm_normal_page+0x1d1/0x380 [ 79.365307][ T7027] ? __pfx_vm_normal_page+0x10/0x10 [ 79.365333][ T7027] shmem_write_begin+0x1a4/0x420 [ 79.365353][ T7027] ? __pfx_shmem_write_begin+0x10/0x10 [ 79.365373][ T7027] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 79.365398][ T7027] generic_perform_write+0x292/0xa40 [ 79.365423][ T7027] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 79.365451][ T7027] ? __pfx_generic_perform_write+0x10/0x10 [ 79.365485][ T7027] ? file_update_time_flags+0x38c/0x520 [ 79.365508][ T7027] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 79.365528][ T7027] shmem_file_write_iter+0x10e/0x140 [ 79.365551][ T7027] __kernel_write_iter+0x2ac/0x930 [ 79.365575][ T7027] ? __pfx___kernel_write_iter+0x10/0x10 [ 79.365595][ T7027] ? __up_read+0x333/0x980 [ 79.365623][ T7027] ? dump_user_range+0x65e/0xad0 [ 79.365651][ T7027] dump_user_range+0x3f9/0xad0 [ 79.365677][ T7027] ? __pfx_dump_user_range+0x10/0x10 [ 79.365706][ T7027] ? __pfx_writenote+0x10/0x10 [ 79.365728][ T7027] ? elf_core_dump+0x1f25/0x3d20 [ 79.365754][ T7027] elf_core_dump+0x2d68/0x3d20 [ 79.365791][ T7027] ? __pfx_elf_core_dump+0x10/0x10 [ 79.365812][ T7027] ? kasan_save_stack+0x3f/0x50 [ 79.365833][ T7027] ? kasan_save_stack+0x30/0x50 [ 79.365854][ T7027] ? kasan_save_track+0x14/0x30 [ 79.365875][ T7027] ? __kasan_kmalloc+0xaa/0xb0 [ 79.365895][ T7027] ? vfs_coredump+0x21f6/0x54a0 [ 79.365913][ T7027] ? get_signal+0x1f2a/0x21e0 [ 79.365931][ T7027] ? arch_do_signal_or_restart+0x91/0x7e0 [ 79.365964][ T7027] ? 0xffffffffff600000 [ 79.366010][ T7027] ? lock_acquire+0x1d1/0x380 [ 79.366030][ T7027] ? get_signal+0x1f2a/0x21e0 [ 79.366058][ T7027] ? vfs_coredump+0x281a/0x54a0 [ 79.366077][ T7027] vfs_coredump+0x281a/0x54a0 [ 79.366107][ T7027] ? __pfx_vfs_coredump+0x10/0x10 [ 79.366127][ T7027] ? __lock_acquire+0x5c0/0x1f40 [ 79.366154][ T7027] ? __lock_acquire+0x5c0/0x1f40 [ 79.366176][ T7027] ? lock_acquire+0x1d1/0x380 [ 79.366196][ T7027] ? unwind_next_frame+0xbd/0x2090 [ 79.366227][ T7027] ? lock_acquire+0x1d1/0x380 [ 79.366254][ T7027] ? bpf_ksym_find+0x128/0x1c0 [ 79.366273][ T7027] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 79.366302][ T7027] ? arch_stack_walk+0xa6/0xf0 [ 79.366332][ T7027] ? __sigqueue_free+0xbe/0x2a0 [ 79.366354][ T7027] ? stack_trace_save+0x8e/0xc0 [ 79.366372][ T7027] ? __pfx_stack_trace_save+0x10/0x10 [ 79.366391][ T7027] ? stack_depot_save_flags+0x27/0x9f0 [ 79.366418][ T7027] ? __lock_acquire+0x5c0/0x1f40 [ 79.366489][ T7027] ? proc_coredump_connector+0x2d3/0x4f0 [ 79.366511][ T7027] ? __pfx_proc_coredump_connector+0x10/0x10 [ 79.366537][ T7027] ? rcu_is_watching+0x13/0xc0 [ 79.366568][ T7027] get_signal+0x1f2a/0x21e0 [ 79.366598][ T7027] ? __pfx_get_signal+0x10/0x10 [ 79.366627][ T7027] arch_do_signal_or_restart+0x91/0x7e0 [ 79.366656][ T7027] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 79.366695][ T7027] irqentry_exit+0x402/0xa10 [ 79.366716][ T7027] asm_exc_page_fault+0x26/0x30 [ 79.366733][ T7027] RIP: 0033:0x7fe5f1e53bd7 [ 79.366747][ T7027] Code: e8 fe f9 ff ff 89 f2 48 8d 3d 8d 4f 1b 00 48 8d 35 0a 0b 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 79.366762][ T7027] RSP: 002b:00007fe5f2e831a0 EFLAGS: 00010206 [ 79.366785][ T7027] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fe5f1f9e159 [ 79.366796][ T7027] RDX: 00007fe5f2e831c0 RSI: 00007fe5f2e832f0 RDI: 000000000000000b [ 79.366807][ T7027] RBP: 00007fe5f203506b R08: 0000000000000000 R09: 0000000000000000 [ 79.366818][ T7027] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 79.366828][ T7027] R13: 00007fe5f2226128 R14: 00007fe5f2226090 R15: 00007ffd4548bbf8 [ 79.366855][ T7027] [ 79.366906][ T7027] memory: usage 307200kB, limit 307200kB, failcnt 83352 [ 79.366919][ T7027] memory+swap: usage 432144kB, limit 9007199254740988kB, failcnt 0 [ 79.366931][ T7027] kmem: usage 6788kB, limit 9007199254740988kB, failcnt 0 [ 79.366941][ T7027] Memory cgroup stats for /syz0: [ 79.367100][ T7027] cache 307073024 [ 79.367109][ T7027] rss 544768 [ 79.367115][ T7027] rss_huge 0 [ 79.367122][ T7027] shmem 307073024 [ 79.367128][ T7027] mapped_file 0 [ 79.367134][ T7027] dirty 0 [ 79.367140][ T7027] writeback 0 [ 79.367146][ T7027] workingset_refault_anon 83 [ 79.367152][ T7027] workingset_refault_file 18605 [ 79.367160][ T7027] swap 127942656 [ 79.367166][ T7027] swapcached 382070784 [ 79.367172][ T7027] pgpgin 444560 [ 79.367179][ T7027] pgpgout 369457 [ 79.367185][ T7027] pgfault 37551 [ 79.367191][ T7027] pgmajfault 217 [ 79.367198][ T7027] inactive_anon 17190912 [ 79.367205][ T7027] active_anon 290430976 [ 79.367211][ T7027] inactive_file 0 [ 79.367217][ T7027] active_file 0 [ 79.367223][ T7027] unevictable 0 [ 79.367230][ T7027] hierarchical_memory_limit 314572800 [ 79.367237][ T7027] hierarchical_memsw_limit 9223372036854771712 [ 79.367244][ T7027] total_cache 307073024 [ 79.367250][ T7027] total_rss 544768 [ 79.367257][ T7027] total_rss_huge 0 [ 79.367263][ T7027] total_shmem 307073024 [ 79.367269][ T7027] total_mapped_file 0 [ 79.367275][ T7027] total_dirty 0 [ 79.367281][ T7027] total_writeback 0 [ 79.367287][ T7027] total_workingset_refault_anon 83 [ 79.367295][ T7027] total_workingset_refault_file 18605 [ 79.367302][ T7027] total_swap 127942656 [ 79.367309][ T7027] total_swapcached 382070784 [ 79.367316][ T7027] total_pgpgin 444560 [ 79.367338][ T7027] total_pgpgout 369457 [ 79.367345][ T7027] total_pgfault 37551 [ 79.367352][ T7027] total_pgmajfault 217 [ 79.367359][ T7027] total_inactive_anon 17190912 [ 79.367365][ T7027] total_active_anon 290430976 [ 79.367372][ T7027] total_inactive_file 0 [ 79.367378][ T7027] total_active_file 0 [ 79.367385][ T7027] total_unevictable 0 [ 79.367391][ T7027] anon_cost 0 [ 79.367397][ T7027] file_cost 0 [ 79.367405][ T7027] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.318,pid=7032,uid=0 [ 79.367523][ T7027] Memory cgroup out of memory: Killed process 7032 (syz.0.318) total-vm:99072kB, anon-rss:1292kB, file-rss:54952kB, shmem-rss:0kB, UID:0 pgtables:212kB oom_score_adj:1000 [ 79.398460][ T7170] loop7: detected capacity change from 0 to 7 [ 79.409029][ T6568] Buffer I/O error on dev loop7, logical block 0, async page read [ 79.410107][ T6568] Buffer I/O error on dev loop7, logical block 0, async page read [ 79.410324][ T6568] Buffer I/O error on dev loop7, logical block 0, async page read [ 79.410538][ T6568] Buffer I/O error on dev loop7, logical block 0, async page read [ 79.410819][ T6568] Buffer I/O error on dev loop7, logical block 0, async page read [ 79.509157][ T43] audit: type=1400 audit(1790913833.566:461): avc: denied { unmount } for pid=5725 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 79.549798][ T6087] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 79.608538][ T7187] netlink: 'syz.2.359': attribute type 1 has an invalid length. [ 79.638491][ T7039] syz.0.318 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 79.638523][ T7039] CPU: 1 UID: 0 PID: 7039 Comm: syz.0.318 Tainted: G L syzkaller #0 PREEMPT(full) [ 79.638547][ T7039] Tainted: [L]=SOFTLOCKUP [ 79.638554][ T7039] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 79.638565][ T7039] Call Trace: [ 79.638572][ T7039] [ 79.638580][ T7039] dump_stack_lvl+0x100/0x190 [ 79.638611][ T7039] dump_header+0xfb/0x606 [ 79.638633][ T7039] oom_kill_process.cold+0xd/0x380 [ 79.638656][ T7039] out_of_memory+0x340/0x14f0 [ 79.638687][ T7039] ? __pfx_out_of_memory+0x10/0x10 [ 79.638720][ T7039] mem_cgroup_out_of_memory+0xc6/0x130 [ 79.638742][ T7039] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 79.638762][ T7039] ? find_held_lock+0x2b/0x80 [ 79.638794][ T7039] ? do_raw_spin_unlock+0x145/0x1e0 [ 79.638821][ T7039] ? _raw_spin_unlock+0x28/0x50 [ 79.638852][ T7039] try_charge_memcg+0x783/0xf60 [ 79.638876][ T7039] ? __pfx_try_charge_memcg+0x10/0x10 [ 79.638901][ T7039] ? find_held_lock+0x2b/0x80 [ 79.638926][ T7039] ? rcu_read_unlock+0x17/0x60 [ 79.638942][ T7039] ? rcu_read_unlock+0x17/0x60 [ 79.638959][ T7039] ? find_held_lock+0x2b/0x80 [ 79.638986][ T7039] ? rcu_read_unlock+0x17/0x60 [ 79.639009][ T7039] charge_memcg+0x1ae/0x210 [ 79.639028][ T7039] __mem_cgroup_charge+0x2b/0x1c0 [ 79.639049][ T7039] shmem_alloc_and_add_folio+0x451/0xd40 [ 79.639084][ T7039] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 79.639114][ T7039] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 79.639143][ T7039] ? __lock_acquire+0x5c0/0x1f40 [ 79.639167][ T7039] shmem_get_folio_gfp+0x75b/0x1980 [ 79.639200][ T7039] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 79.639226][ T7039] ? inode_set_ctime_current+0x9c/0x850 [ 79.639254][ T7039] ? find_held_lock+0x2b/0x80 [ 79.639282][ T7039] ? timestamp_truncate+0x22e/0x2f0 [ 79.639311][ T7039] shmem_write_begin+0x1a4/0x420 [ 79.639331][ T7039] ? __pfx_shmem_write_begin+0x10/0x10 [ 79.639348][ T7039] ? inode_set_ctime_current+0x283/0x850 [ 79.639374][ T7039] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 79.639393][ T7039] ? inode_maybe_inc_iversion+0x169/0x220 [ 79.639420][ T7039] generic_perform_write+0x292/0xa40 [ 79.639449][ T7039] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 79.639476][ T7039] ? __pfx_generic_perform_write+0x10/0x10 [ 79.639501][ T7039] ? mnt_put_write_access_file+0x4e/0x100 [ 79.639526][ T7039] ? file_update_time_flags+0x38c/0x520 [ 79.639548][ T7039] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 79.639567][ T7039] shmem_file_write_iter+0x10e/0x140 [ 79.639590][ T7039] __kernel_write_iter+0x2ac/0x930 [ 79.639613][ T7039] ? __pfx___kernel_write_iter+0x10/0x10 [ 79.639633][ T7039] ? __up_read+0x333/0x980 [ 79.639659][ T7039] ? dump_user_range+0x65e/0xad0 [ 79.639686][ T7039] dump_user_range+0x3f9/0xad0 [ 79.639712][ T7039] ? __pfx_dump_user_range+0x10/0x10 [ 79.639741][ T7039] ? __pfx_writenote+0x10/0x10 [ 79.639759][ T7039] ? elf_core_dump+0x1f25/0x3d20 [ 79.639783][ T7039] elf_core_dump+0x2d68/0x3d20 [ 79.639844][ T7039] ? __pfx_elf_core_dump+0x10/0x10 [ 79.639866][ T7039] ? kasan_save_stack+0x3f/0x50 [ 79.639887][ T7039] ? kasan_save_stack+0x30/0x50 [ 79.639907][ T7039] ? kasan_save_track+0x14/0x30 [ 79.639928][ T7039] ? __kasan_kmalloc+0xaa/0xb0 [ 79.639948][ T7039] ? vfs_coredump+0x21f6/0x54a0 [ 79.639965][ T7039] ? get_signal+0x1f2a/0x21e0 [ 79.639985][ T7039] ? arch_do_signal_or_restart+0x91/0x7e0 [ 79.640018][ T7039] ? 0xffffffffff600000 [ 79.640066][ T7039] ? lock_acquire+0x1d1/0x380 [ 79.640085][ T7039] ? get_signal+0x1f2a/0x21e0 [ 79.640113][ T7039] ? vfs_coredump+0x281a/0x54a0 [ 79.640132][ T7039] vfs_coredump+0x281a/0x54a0 [ 79.640161][ T7039] ? __pfx_vfs_coredump+0x10/0x10 [ 79.640181][ T7039] ? __lock_acquire+0x5c0/0x1f40 [ 79.640207][ T7039] ? __lock_acquire+0x5c0/0x1f40 [ 79.640230][ T7039] ? lock_acquire+0x1d1/0x380 [ 79.640249][ T7039] ? unwind_next_frame+0xbd/0x2090 [ 79.640295][ T7039] ? lock_acquire+0x1d1/0x380 [ 79.640321][ T7039] ? bpf_ksym_find+0x128/0x1c0 [ 79.640339][ T7039] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 79.640367][ T7039] ? arch_stack_walk+0xa6/0xf0 [ 79.640399][ T7039] ? __sigqueue_free+0xbe/0x2a0 [ 79.640423][ T7039] ? stack_trace_save+0x8e/0xc0 [ 79.640445][ T7039] ? __pfx_stack_trace_save+0x10/0x10 [ 79.640464][ T7039] ? stack_depot_save_flags+0x27/0x9f0 [ 79.640490][ T7039] ? __lock_acquire+0x5c0/0x1f40 [ 79.640556][ T7039] ? proc_coredump_connector+0x2d3/0x4f0 [ 79.640576][ T7039] ? __pfx_proc_coredump_connector+0x10/0x10 [ 79.640602][ T7039] ? rcu_is_watching+0x13/0xc0 [ 79.640631][ T7039] get_signal+0x1f2a/0x21e0 [ 79.640661][ T7039] ? __pfx_get_signal+0x10/0x10 [ 79.640688][ T7039] arch_do_signal_or_restart+0x91/0x7e0 [ 79.640715][ T7039] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 79.640758][ T7039] irqentry_exit+0x402/0xa10 [ 79.640780][ T7039] asm_exc_page_fault+0x26/0x30 [ 79.640798][ T7039] RIP: 0033:0x7fe5f1e53bd7 [ 79.640813][ T7039] Code: e8 fe f9 ff ff 89 f2 48 8d 3d 8d 4f 1b 00 48 8d 35 0a 0b 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 79.640829][ T7039] RSP: 002b:00007fe5f2e831a0 EFLAGS: 00010206 [ 79.640844][ T7039] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fe5f1f9e159 [ 79.640855][ T7039] RDX: 00007fe5f2e831c0 RSI: 00007fe5f2e832f0 RDI: 000000000000000b [ 79.640866][ T7039] RBP: 00007fe5f203506b R08: 0000000000000000 R09: 0000000000000000 [ 79.640877][ T7039] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 79.640887][ T7039] R13: 00007fe5f2226128 R14: 00007fe5f2226090 R15: 00007ffd4548bbf8 [ 79.640914][ T7039] [ 79.641056][ T7039] memory: usage 307200kB, limit 307200kB, failcnt 84024 [ 79.641078][ T7039] memory+swap: usage 432144kB, limit 9007199254740988kB, failcnt 0 [ 79.641089][ T7039] kmem: usage 6788kB, limit 9007199254740988kB, failcnt 0 [ 79.641101][ T7039] Memory cgroup stats for /syz0: [ 79.641250][ T7039] cache 307073024 [ 79.641263][ T7039] rss 544768 [ 79.641271][ T7039] rss_huge 0 [ 79.641277][ T7039] shmem 307073024 [ 79.641283][ T7039] mapped_file 0 [ 79.641290][ T7039] dirty 0 [ 79.641296][ T7039] writeback 0 [ 79.641304][ T7039] workingset_refault_anon 83 [ 79.641312][ T7039] workingset_refault_file 18605 [ 79.641318][ T7039] swap 127942656 [ 79.641325][ T7039] swapcached 382070784 [ 79.641331][ T7039] pgpgin 444560 [ 79.641338][ T7039] pgpgout 369457 [ 79.641344][ T7039] pgfault 37551 [ 79.641350][ T7039] pgmajfault 217 [ 79.641357][ T7039] inactive_anon 17190912 [ 79.641363][ T7039] active_anon 290430976 [ 79.641370][ T7039] inactive_file 0 [ 79.641376][ T7039] active_file 0 [ 79.641382][ T7039] unevictable 0 [ 79.641388][ T7039] hierarchical_memory_limit 314572800 [ 79.641395][ T7039] hierarchical_memsw_limit 9223372036854771712 [ 79.641403][ T7039] total_cache 307073024 [ 79.641410][ T7039] total_rss 544768 [ 79.641417][ T7039] total_rss_huge 0 [ 79.641423][ T7039] total_shmem 307073024 [ 79.641430][ T7039] total_mapped_file 0 [ 79.641436][ T7039] total_dirty 0 [ 79.641452][ T7039] total_writeback 0 [ 79.641459][ T7039] total_workingset_refault_anon 83 [ 79.641466][ T7039] total_workingset_refault_file 18605 [ 79.641474][ T7039] total_swap 127942656 [ 79.641481][ T7039] total_swapcached 382070784 [ 79.641488][ T7039] total_pgpgin 444560 [ 79.641494][ T7039] total_pgpgout 369457 [ 79.641501][ T7039] total_pgfault 37551 [ 79.641508][ T7039] total_pgmajfault 217 [ 79.641514][ T7039] total_inactive_anon 17190912 [ 79.641522][ T7039] total_active_anon 290430976 [ 79.641529][ T7039] total_inactive_file 0 [ 79.641536][ T7039] total_active_file 0 [ 79.641543][ T7039] total_unevictable 0 [ 79.641550][ T7039] anon_cost 0 [ 79.641556][ T7039] file_cost 0 [ 79.641562][ T7039] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.318,pid=7027,uid=0 [ 79.641650][ T7039] Memory cgroup out of memory: Killed process 7027 (syz.0.318) total-vm:99072kB, anon-rss:1292kB, file-rss:54952kB, shmem-rss:0kB, UID:0 pgtables:212kB oom_score_adj:1000 [ 79.668624][ T7187] 8021q: adding VLAN 0 to HW filter on device bond1 [ 79.699214][ T7030] syz.0.318 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 79.699247][ T7030] CPU: 2 UID: 0 PID: 7030 Comm: syz.0.318 Tainted: G L syzkaller #0 PREEMPT(full) [ 79.699270][ T7030] Tainted: [L]=SOFTLOCKUP [ 79.699276][ T7030] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 79.699286][ T7030] Call Trace: [ 79.699291][ T7030] [ 79.699298][ T7030] dump_stack_lvl+0x100/0x190 [ 79.699336][ T7030] dump_header+0xfb/0x606 [ 79.699356][ T7030] oom_kill_process.cold+0xd/0x380 [ 79.699398][ T7030] out_of_memory+0x340/0x14f0 [ 79.699429][ T7030] ? __pfx_out_of_memory+0x10/0x10 [ 79.699459][ T7030] mem_cgroup_out_of_memory+0xc6/0x130 [ 79.699481][ T7030] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 79.699500][ T7030] ? find_held_lock+0x2b/0x80 [ 79.699529][ T7030] ? do_raw_spin_unlock+0x145/0x1e0 [ 79.699552][ T7030] ? _raw_spin_unlock+0x28/0x50 [ 79.699579][ T7030] try_charge_memcg+0x783/0xf60 [ 79.699601][ T7030] ? __pfx_try_charge_memcg+0x10/0x10 [ 79.699625][ T7030] ? find_held_lock+0x2b/0x80 [ 79.699647][ T7030] ? rcu_read_unlock+0x17/0x60 [ 79.699663][ T7030] ? rcu_read_unlock+0x17/0x60 [ 79.699679][ T7030] ? find_held_lock+0x2b/0x80 [ 79.699702][ T7030] ? rcu_read_unlock+0x17/0x60 [ 79.699722][ T7030] charge_memcg+0x1ae/0x210 [ 79.699740][ T7030] __mem_cgroup_charge+0x2b/0x1c0 [ 79.699759][ T7030] shmem_alloc_and_add_folio+0x451/0xd40 [ 79.699790][ T7030] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 79.699841][ T7030] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 79.699873][ T7030] shmem_get_folio_gfp+0x75b/0x1980 [ 79.699904][ T7030] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 79.699931][ T7030] ? vm_normal_page+0x1d1/0x380 [ 79.699952][ T7030] ? __pfx_vm_normal_page+0x10/0x10 [ 79.699977][ T7030] shmem_write_begin+0x1a4/0x420 [ 79.699996][ T7030] ? __pfx_shmem_write_begin+0x10/0x10 [ 79.700013][ T7030] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 79.700036][ T7030] generic_perform_write+0x292/0xa40 [ 79.700057][ T7030] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 79.700083][ T7030] ? __pfx_generic_perform_write+0x10/0x10 [ 79.700107][ T7030] ? file_update_time_flags+0x38c/0x520 [ 79.700128][ T7030] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 79.700146][ T7030] shmem_file_write_iter+0x10e/0x140 [ 79.700167][ T7030] __kernel_write_iter+0x2ac/0x930 [ 79.700188][ T7030] ? __pfx___kernel_write_iter+0x10/0x10 [ 79.700207][ T7030] ? __up_read+0x333/0x980 [ 79.700231][ T7030] ? dump_user_range+0x65e/0xad0 [ 79.700250][ T7030] ? copy_mc_enhanced_fast_string+0x6/0xf [ 79.700277][ T7030] dump_user_range+0x3f9/0xad0 [ 79.700300][ T7030] ? __pfx_dump_user_range+0x10/0x10 [ 79.700332][ T7030] ? __pfx_writenote+0x10/0x10 [ 79.700351][ T7030] ? elf_core_dump+0x1f25/0x3d20 [ 79.700375][ T7030] elf_core_dump+0x2d68/0x3d20 [ 79.700409][ T7030] ? __pfx_elf_core_dump+0x10/0x10 [ 79.700428][ T7030] ? kasan_save_stack+0x3f/0x50 [ 79.700448][ T7030] ? kasan_save_stack+0x30/0x50 [ 79.700467][ T7030] ? kasan_save_track+0x14/0x30 [ 79.700487][ T7030] ? __kasan_kmalloc+0xaa/0xb0 [ 79.700506][ T7030] ? vfs_coredump+0x21f6/0x54a0 [ 79.700522][ T7030] ? get_signal+0x1f2a/0x21e0 [ 79.700541][ T7030] ? arch_do_signal_or_restart+0x91/0x7e0 [ 79.700570][ T7030] ? 0xffffffffff600000 [ 79.700613][ T7030] ? lock_acquire+0x1d1/0x380 [ 79.700631][ T7030] ? get_signal+0x1f2a/0x21e0 [ 79.700657][ T7030] ? vfs_coredump+0x281a/0x54a0 [ 79.700674][ T7030] vfs_coredump+0x281a/0x54a0 [ 79.700702][ T7030] ? __pfx_vfs_coredump+0x10/0x10 [ 79.700721][ T7030] ? __lock_acquire+0x5c0/0x1f40 [ 79.700745][ T7030] ? __lock_acquire+0x5c0/0x1f40 [ 79.700767][ T7030] ? lock_acquire+0x1d1/0x380 [ 79.700785][ T7030] ? unwind_next_frame+0xbd/0x2090 [ 79.700813][ T7030] ? lock_acquire+0x1d1/0x380 [ 79.700842][ T7030] ? bpf_ksym_find+0x128/0x1c0 [ 79.700859][ T7030] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 79.700884][ T7030] ? arch_stack_walk+0xa6/0xf0 [ 79.700912][ T7030] ? __sigqueue_free+0xbe/0x2a0 [ 79.700935][ T7030] ? stack_trace_save+0x8e/0xc0 [ 79.700951][ T7030] ? __pfx_stack_trace_save+0x10/0x10 [ 79.700969][ T7030] ? stack_depot_save_flags+0x27/0x9f0 [ 79.700992][ T7030] ? __lock_acquire+0x5c0/0x1f40 [ 79.701051][ T7030] ? proc_coredump_connector+0x2d3/0x4f0 [ 79.701070][ T7030] ? __pfx_proc_coredump_connector+0x10/0x10 [ 79.701094][ T7030] ? rcu_is_watching+0x13/0xc0 [ 79.701121][ T7030] get_signal+0x1f2a/0x21e0 [ 79.701149][ T7030] ? __pfx_get_signal+0x10/0x10 [ 79.701174][ T7030] arch_do_signal_or_restart+0x91/0x7e0 [ 79.701200][ T7030] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 79.701237][ T7030] irqentry_exit+0x402/0xa10 [ 79.701259][ T7030] asm_exc_page_fault+0x26/0x30 [ 79.701276][ T7030] RIP: 0033:0x7fe5f1e53bd7 [ 79.701291][ T7030] Code: e8 fe f9 ff ff 89 f2 48 8d 3d 8d 4f 1b 00 48 8d 35 0a 0b 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 79.701307][ T7030] RSP: 002b:00007fe5f2e831a0 EFLAGS: 00010206 [ 79.701328][ T7030] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fe5f1f9e159 [ 79.701340][ T7030] RDX: 00007fe5f2e831c0 RSI: 00007fe5f2e832f0 RDI: 000000000000000b [ 79.701351][ T7030] RBP: 00007fe5f203506b R08: 0000000000000000 R09: 0000000000000000 [ 79.701366][ T7030] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 79.701379][ T7030] R13: 00007fe5f2226128 R14: 00007fe5f2226090 R15: 00007ffd4548bbf8 [ 79.701404][ T7030] [ 79.724198][ T7030] memory: usage 307200kB, limit 307200kB, failcnt 84241 [ 79.724215][ T7030] memory+swap: usage 432144kB, limit 9007199254740988kB, failcnt 0 [ 79.724267][ T7030] kmem: usage 6788kB, limit 9007199254740988kB, failcnt 0 [ 79.724278][ T7030] Memory cgroup stats for /syz0: [ 79.724373][ T7030] cache 307073024 [ 79.724380][ T7030] rss 544768 [ 79.724386][ T7030] rss_huge 0 [ 79.724391][ T7030] shmem 307073024 [ 79.724398][ T7030] mapped_file 0 [ 79.724403][ T7030] dirty 0 [ 79.724409][ T7030] writeback 0 [ 79.724414][ T7030] workingset_refault_anon 83 [ 79.724420][ T7030] workingset_refault_file 18605 [ 79.724427][ T7030] swap 127942656 [ 79.724432][ T7030] swapcached 382070784 [ 79.724438][ T7030] pgpgin 444560 [ 79.724443][ T7030] pgpgout 369457 [ 79.724448][ T7030] pgfault 37551 [ 79.724453][ T7030] pgmajfault 217 [ 79.724459][ T7030] inactive_anon 17190912 [ 79.724465][ T7030] active_anon 290430976 [ 79.724471][ T7030] inactive_file 0 [ 79.724477][ T7030] active_file 0 [ 79.724482][ T7030] unevictable 0 [ 79.724488][ T7030] hierarchical_memory_limit 314572800 [ 79.724495][ T7030] hierarchical_memsw_limit 9223372036854771712 [ 79.724501][ T7030] total_cache 307073024 [ 79.724507][ T7030] total_rss 544768 [ 79.724512][ T7030] total_rss_huge 0 [ 79.724518][ T7030] total_shmem 307073024 [ 79.724524][ T7030] total_mapped_file 0 [ 79.724529][ T7030] total_dirty 0 [ 79.724535][ T7030] total_writeback 0 [ 79.724541][ T7030] total_workingset_refault_anon 83 [ 79.724547][ T7030] total_workingset_refault_file 18605 [ 79.724554][ T7030] total_swap 127942656 [ 79.724560][ T7030] total_swapcached 382070784 [ 79.724565][ T7030] total_pgpgin 444560 [ 79.724571][ T7030] total_pgpgout 369457 [ 79.724577][ T7030] total_pgfault 37551 [ 79.724583][ T7030] total_pgmajfault 217 [ 79.724589][ T7030] total_inactive_anon 17190912 [ 79.724595][ T7030] total_active_anon 290430976 [ 79.724601][ T7030] total_inactive_file 0 [ 79.724607][ T7030] total_active_file 0 [ 79.724613][ T7030] total_unevictable 0 [ 79.724619][ T7030] anon_cost 0 [ 79.724624][ T7030] file_cost 0 [ 79.724630][ T7030] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.318,pid=7026,uid=0 [ 79.724707][ T7030] Memory cgroup out of memory: Killed process 7026 (syz.0.318) total-vm:99072kB, anon-rss:1292kB, file-rss:54952kB, shmem-rss:0kB, UID:0 pgtables:212kB oom_score_adj:1000 [ 79.845342][ T43] audit: type=1400 audit(1790913833.906:462): avc: denied { shutdown } for pid=7190 comm="syz.2.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 80.490712][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.679724][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.932446][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.964248][ T5084] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.969279][ T5084] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.970556][ T5084] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.971424][ T5084] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.972159][ T5084] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.127382][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.313792][ T7033] syz.0.318 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 81.313817][ T7033] CPU: 2 UID: 0 PID: 7033 Comm: syz.0.318 Tainted: G L syzkaller #0 PREEMPT(full) [ 81.313833][ T7033] Tainted: [L]=SOFTLOCKUP [ 81.313837][ T7033] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 81.313844][ T7033] Call Trace: [ 81.313848][ T7033] [ 81.313854][ T7033] dump_stack_lvl+0x100/0x190 [ 81.313875][ T7033] dump_header+0xfb/0x606 [ 81.313889][ T7033] oom_kill_process.cold+0xd/0x380 [ 81.313903][ T7033] out_of_memory+0x340/0x14f0 [ 81.313922][ T7033] ? __pfx_out_of_memory+0x10/0x10 [ 81.313942][ T7033] mem_cgroup_out_of_memory+0xc6/0x130 [ 81.313956][ T7033] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 81.313969][ T7033] ? find_held_lock+0x2b/0x80 [ 81.313989][ T7033] ? do_raw_spin_unlock+0x145/0x1e0 [ 81.314005][ T7033] ? _raw_spin_unlock+0x28/0x50 [ 81.314024][ T7033] try_charge_memcg+0x783/0xf60 [ 81.314038][ T7033] ? __pfx_try_charge_memcg+0x10/0x10 [ 81.314055][ T7033] ? find_held_lock+0x2b/0x80 [ 81.314071][ T7033] ? rcu_read_unlock+0x17/0x60 [ 81.314081][ T7033] ? rcu_read_unlock+0x17/0x60 [ 81.314092][ T7033] ? find_held_lock+0x2b/0x80 [ 81.314109][ T7033] ? rcu_read_unlock+0x17/0x60 [ 81.314122][ T7033] charge_memcg+0x1ae/0x210 [ 81.314134][ T7033] __mem_cgroup_charge+0x2b/0x1c0 [ 81.314146][ T7033] shmem_alloc_and_add_folio+0x451/0xd40 [ 81.314167][ T7033] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 81.314187][ T7033] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 81.314206][ T7033] ? __lock_acquire+0x5c0/0x1f40 [ 81.314220][ T7033] shmem_get_folio_gfp+0x75b/0x1980 [ 81.314241][ T7033] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 81.314258][ T7033] ? inode_set_ctime_current+0x9c/0x850 [ 81.314276][ T7033] ? find_held_lock+0x2b/0x80 [ 81.314293][ T7033] ? timestamp_truncate+0x22e/0x2f0 [ 81.314400][ T7033] shmem_write_begin+0x1a4/0x420 [ 81.314413][ T7033] ? __pfx_shmem_write_begin+0x10/0x10 [ 81.314424][ T7033] ? inode_set_ctime_current+0x283/0x850 [ 81.314441][ T7033] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 81.314453][ T7033] ? inode_maybe_inc_iversion+0x169/0x220 [ 81.314469][ T7033] generic_perform_write+0x292/0xa40 [ 81.314484][ T7033] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 81.314500][ T7033] ? __pfx_generic_perform_write+0x10/0x10 [ 81.314516][ T7033] ? mnt_put_write_access_file+0x4e/0x100 [ 81.314532][ T7033] ? file_update_time_flags+0x38c/0x520 [ 81.314545][ T7033] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 81.314557][ T7033] shmem_file_write_iter+0x10e/0x140 [ 81.314571][ T7033] __kernel_write_iter+0x2ac/0x930 [ 81.314585][ T7033] ? __pfx___kernel_write_iter+0x10/0x10 [ 81.314602][ T7033] ? copy_mc_enhanced_fast_string+0x6/0xf [ 81.314627][ T7033] dump_user_range+0x3f9/0xad0 [ 81.314653][ T7033] ? __pfx_dump_user_range+0x10/0x10 [ 81.314680][ T7033] ? __pfx_writenote+0x10/0x10 [ 81.314694][ T7033] ? elf_core_dump+0x1f25/0x3d20 [ 81.314718][ T7033] elf_core_dump+0x2d68/0x3d20 [ 81.314753][ T7033] ? __pfx_elf_core_dump+0x10/0x10 [ 81.314772][ T7033] ? kasan_save_stack+0x3f/0x50 [ 81.314788][ T7033] ? kasan_save_stack+0x30/0x50 [ 81.314807][ T7033] ? kasan_save_track+0x14/0x30 [ 81.314826][ T7033] ? __kasan_kmalloc+0xaa/0xb0 [ 81.314845][ T7033] ? vfs_coredump+0x21f6/0x54a0 [ 81.314862][ T7033] ? get_signal+0x1f2a/0x21e0 [ 81.314880][ T7033] ? arch_do_signal_or_restart+0x91/0x7e0 [ 81.314907][ T7033] ? 0xffffffffff600000 [ 81.314952][ T7033] ? lock_acquire+0x1d1/0x380 [ 81.314970][ T7033] ? get_signal+0x1f2a/0x21e0 [ 81.314992][ T7033] ? vfs_coredump+0x281a/0x54a0 [ 81.315010][ T7033] vfs_coredump+0x281a/0x54a0 [ 81.315041][ T7033] ? __pfx_vfs_coredump+0x10/0x10 [ 81.315077][ T7033] ? __lock_acquire+0x5c0/0x1f40 [ 81.315102][ T7033] ? __lock_acquire+0x5c0/0x1f40 [ 81.315125][ T7033] ? lock_acquire+0x1d1/0x380 [ 81.315145][ T7033] ? unwind_next_frame+0xbd/0x2090 [ 81.315176][ T7033] ? lock_acquire+0x1d1/0x380 [ 81.315197][ T7033] ? bpf_ksym_find+0x128/0x1c0 [ 81.315216][ T7033] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 81.315243][ T7033] ? arch_stack_walk+0xa6/0xf0 [ 81.315276][ T7033] ? __sigqueue_free+0xbe/0x2a0 [ 81.315296][ T7033] ? stack_trace_save+0x8e/0xc0 [ 81.315314][ T7033] ? __pfx_stack_trace_save+0x10/0x10 [ 81.315333][ T7033] ? stack_depot_save_flags+0x27/0x9f0 [ 81.315366][ T7033] ? __lock_acquire+0x5c0/0x1f40 [ 81.315424][ T7033] ? proc_coredump_connector+0x2d3/0x4f0 [ 81.315444][ T7033] ? __pfx_proc_coredump_connector+0x10/0x10 [ 81.315470][ T7033] ? rcu_is_watching+0x13/0xc0 [ 81.315498][ T7033] get_signal+0x1f2a/0x21e0 [ 81.315529][ T7033] ? __pfx_get_signal+0x10/0x10 [ 81.315556][ T7033] arch_do_signal_or_restart+0x91/0x7e0 [ 81.315584][ T7033] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 81.315621][ T7033] irqentry_exit+0x402/0xa10 [ 81.315644][ T7033] asm_exc_page_fault+0x26/0x30 [ 81.315662][ T7033] RIP: 0033:0x7fe5f1e53bd7 [ 81.315678][ T7033] Code: e8 fe f9 ff ff 89 f2 48 8d 3d 8d 4f 1b 00 48 8d 35 0a 0b 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 81.315811][ T7033] RSP: 002b:00007fe5f2e831a0 EFLAGS: 00010206 [ 81.315829][ T7033] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fe5f1f9e159 [ 81.315840][ T7033] RDX: 00007fe5f2e831c0 RSI: 00007fe5f2e832f0 RDI: 000000000000000b [ 81.315851][ T7033] RBP: 00007fe5f203506b R08: 0000000000000000 R09: 0000000000000000 [ 81.315862][ T7033] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 81.315873][ T7033] R13: 00007fe5f2226128 R14: 00007fe5f2226090 R15: 00007ffd4548bbf8 [ 81.315899][ T7033] [ 81.322455][ T43] kauditd_printk_skb: 3 callbacks suppressed [ 81.322469][ T43] audit: type=1400 audit(1790913835.376:466): avc: denied { read } for pid=7236 comm="syz.3.373" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 81.322714][ T43] audit: type=1400 audit(1790913835.376:467): avc: denied { open } for pid=7236 comm="syz.3.373" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 81.350714][ T7033] memory: usage 307200kB, limit 307200kB, failcnt 92609 [ 81.350732][ T7033] memory+swap: usage 432144kB, limit 9007199254740988kB, failcnt 0 [ 81.350743][ T7033] kmem: usage 6428kB, limit 9007199254740988kB, failcnt 0 [ 81.350753][ T7033] Memory cgroup stats for /syz0: [ 81.350845][ T7033] cache 307429376 [ 81.350853][ T7033] rss 557056 [ 81.350859][ T7033] rss_huge 0 [ 81.350906][ T7033] shmem 307429376 [ 81.350913][ T7033] mapped_file 0 [ 81.350919][ T7033] dirty 0 [ 81.350925][ T7033] writeback 0 [ 81.350931][ T7033] workingset_refault_anon 83 [ 81.350937][ T7033] workingset_refault_file 19104 [ 81.350943][ T7033] swap 127942656 [ 81.350949][ T7033] swapcached 433598464 [ 81.350955][ T7033] pgpgin 477776 [ 81.350961][ T7033] pgpgout 402583 [ 81.350966][ T7033] pgfault 39359 [ 81.350972][ T7033] pgmajfault 221 [ 81.350978][ T7033] inactive_anon 99168256 [ 81.350984][ T7033] active_anon 208822272 [ 81.350990][ T7033] inactive_file 0 [ 81.350996][ T7033] active_file 0 [ 81.351002][ T7033] unevictable 0 [ 81.351008][ T7033] hierarchical_memory_limit 314572800 [ 81.351012][ T7033] hierarchical_memsw_limit 9223372036854771712 [ 81.351017][ T7033] total_cache 307429376 [ 81.351024][ T7033] total_rss 557056 [ 81.351030][ T7033] total_rss_huge 0 [ 81.351035][ T7033] total_shmem 307429376 [ 81.351042][ T7033] total_mapped_file 0 [ 81.351048][ T7033] total_dirty 0 [ 81.351054][ T7033] total_writeback 0 [ 81.351059][ T7033] total_workingset_refault_anon 83 [ 81.351066][ T7033] total_workingset_refault_file 19104 [ 81.351072][ T7033] total_swap 127942656 [ 81.351078][ T7033] total_swapcached 433598464 [ 81.351084][ T7033] total_pgpgin 477776 [ 81.351090][ T7033] total_pgpgout 402583 [ 81.351096][ T7033] total_pgfault 39359 [ 81.351102][ T7033] total_pgmajfault 221 [ 81.351108][ T7033] total_inactive_anon 99168256 [ 81.351115][ T7033] total_active_anon 208822272 [ 81.351122][ T7033] total_inactive_file 0 [ 81.351126][ T7033] total_active_file 0 [ 81.351130][ T7033] total_unevictable 0 [ 81.351135][ T7033] anon_cost 0 [ 81.351141][ T7033] file_cost 0 [ 81.351147][ T7033] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.318,pid=7042,uid=0 [ 81.351259][ T7033] Memory cgroup out of memory: Killed process 7042 (syz.0.318) total-vm:99072kB, anon-rss:1292kB, file-rss:57624kB, shmem-rss:0kB, UID:0 pgtables:212kB oom_score_adj:1000 [ 81.515390][ T7036] Memory cgroup out of memory: Killed process 7046 (syz.0.318) total-vm:99072kB, anon-rss:1292kB, file-rss:54952kB, shmem-rss:0kB, UID:0 pgtables:212kB oom_score_adj:1000 [ 81.583649][ T43] audit: type=1400 audit(1790913835.636:468): avc: denied { search } for pid=5438 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.586026][ T43] audit: type=1400 audit(1790913835.646:469): avc: denied { search } for pid=5438 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.586134][ T43] audit: type=1400 audit(1790913835.646:470): avc: denied { search } for pid=5438 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.586239][ T7057] Memory cgroup out of memory: Killed process 7034 (syz.0.318) total-vm:99072kB, anon-rss:1292kB, file-rss:54952kB, shmem-rss:0kB, UID:0 pgtables:212kB oom_score_adj:1000 [ 81.660592][ T12] bridge_slave_1: left allmulticast mode [ 81.661170][ T7058] Memory cgroup out of memory: Killed process 7033 (syz.0.318) total-vm:99072kB, anon-rss:1292kB, file-rss:54952kB, shmem-rss:0kB, UID:0 pgtables:212kB oom_score_adj:1000 [ 81.661892][ T12] bridge_slave_1: left promiscuous mode [ 81.667467][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.741980][ T7045] Memory cgroup out of memory: Killed process 7030 (syz.0.318) total-vm:99072kB, anon-rss:1292kB, file-rss:54952kB, shmem-rss:0kB, UID:0 pgtables:212kB oom_score_adj:1000 [ 81.749510][ T12] bridge_slave_0: left allmulticast mode [ 81.749527][ T12] bridge_slave_0: left promiscuous mode [ 81.749705][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.944039][ T7258] __nla_validate_parse: 9 callbacks suppressed [ 81.944053][ T7258] netlink: 8 bytes leftover after parsing attributes in process `syz.3.379'. [ 82.158609][ T43] audit: type=1400 audit(1790913836.216:471): avc: denied { map } for pid=7225 comm="syz.0.371" path="socket:[17728]" dev="sockfs" ino=17728 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 82.158772][ T43] audit: type=1400 audit(1790913836.216:472): avc: denied { accept } for pid=7225 comm="syz.0.371" path="socket:[17728]" dev="sockfs" ino=17728 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 82.288124][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 82.339814][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 82.356250][ T12] bond0 (unregistering): Released all slaves [ 82.452110][ T43] audit: type=1400 audit(1790913836.506:473): avc: denied { create } for pid=7265 comm="syz.2.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 82.452410][ T43] audit: type=1400 audit(1790913836.506:474): avc: denied { connect } for pid=7265 comm="syz.2.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 82.575888][ T43] audit: type=1400 audit(1790913836.626:475): avc: denied { read } for pid=7271 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.580890][ T7270] Bluetooth: MGMT ver 1.23 [ 82.945880][ T5438] 8021q: adding VLAN 0 to HW filter on device eth2 [ 83.023188][ T5737] Bluetooth: hci0: command tx timeout [ 83.232434][ T7308] fuse: Bad value for 'group_id' [ 83.232460][ T7308] fuse: Bad value for 'group_id' [ 83.234753][ T5438] 8021q: adding VLAN 0 to HW filter on device eth3 [ 83.245755][ T7308] netlink: 12 bytes leftover after parsing attributes in process `syz.3.391'. [ 83.317180][ T7221] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.321104][ T7221] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.321186][ T7221] bridge_slave_0: entered allmulticast mode [ 83.322181][ T7221] bridge_slave_0: entered promiscuous mode [ 83.374781][ T12] hsr_slave_0: left promiscuous mode [ 83.392790][ T12] hsr_slave_1: left promiscuous mode [ 83.393368][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.393390][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.412915][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.413662][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.446500][ T12] veth1_vlan: left promiscuous mode [ 83.446592][ T12] veth0_vlan: left promiscuous mode [ 83.884400][ T7221] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.884486][ T7221] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.884566][ T7221] bridge_slave_1: entered allmulticast mode [ 83.885422][ T7221] bridge_slave_1: entered promiscuous mode [ 83.924282][ T7221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.925654][ T7221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.943334][ T7221] team0: Port device team_slave_0 added [ 83.945796][ T7221] team0: Port device team_slave_1 added [ 83.959297][ T7221] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.959308][ T7221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.959321][ T7221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.962859][ T7221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.962870][ T7221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.962884][ T7221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.009995][ T7221] hsr_slave_0: entered promiscuous mode [ 84.010423][ T7221] hsr_slave_1: entered promiscuous mode [ 84.010748][ T7221] debugfs: 'hsr0' already exists in 'hsr' [ 84.010759][ T7221] Cannot create hsr debugfs directory [ 84.144222][ T7333] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 84.144317][ T7333] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 84.144383][ T7333] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 84.144461][ T7333] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 84.144535][ T7333] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 84.144597][ T7333] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 84.144664][ T7333] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 84.144729][ T7333] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 84.144795][ T7333] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 84.144897][ T7333] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 84.171492][ T7333] kvm: vcpu 0: requested 148514 ns lapic timer period limited to 200000 ns [ 84.277086][ T5438] 8021q: adding VLAN 0 to HW filter on device eth4 [ 84.300438][ T7221] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 84.325261][ T7221] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.325734][ T7221] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 84.328498][ T7221] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.328871][ T7221] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 84.350097][ T7221] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.352230][ T7221] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 84.364637][ T7221] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.438465][ T7221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.461407][ T7221] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.474051][ T5066] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.474097][ T5066] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.481875][ T6288] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.481950][ T6288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.599365][ T5438] 8021q: adding VLAN 0 to HW filter on device eth5 [ 84.826834][ T7221] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.832575][ T7382] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 85.024504][ T7221] veth0_vlan: entered promiscuous mode [ 85.030264][ T7221] veth1_vlan: entered promiscuous mode [ 85.056453][ T7221] veth0_macvtap: entered promiscuous mode [ 85.058939][ T7221] veth1_macvtap: entered promiscuous mode [ 85.067693][ T7221] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.070994][ T7221] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.075220][ T5776] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.075423][ T5776] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.075502][ T5776] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.075521][ T5776] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.113095][ T5737] Bluetooth: hci0: command tx timeout [ 85.137101][ T6740] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.137116][ T6740] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.158455][ T6740] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.158470][ T6740] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.188033][ T7411] tipc: Started in network mode [ 85.188047][ T7411] tipc: Node identity 4, cluster identity 4711 [ 85.188053][ T7411] tipc: Node number set to 4 [ 85.296382][ T7418] PKCS7: Unknown OID: [4] 5.25.43183(bad) [ 85.296394][ T7418] PKCS7: Only support pkcs7_signedData type [ 85.444949][ T7425] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 85.444964][ T7425] UDF-fs: Scanning with blocksize 2048 failed [ 85.445874][ T7425] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 85.445885][ T7425] UDF-fs: Scanning with blocksize 4096 failed [ 85.649897][ T7435] netlink: 12 bytes leftover after parsing attributes in process `syz.2.412'. [ 85.832575][ T7442] device-mapper: table: 248:0: integrity: Error reading superblock (-EIO) [ 85.832594][ T7442] device-mapper: ioctl: error adding target to table [ 86.289576][ T7469] pimreg: entered allmulticast mode [ 86.348794][ T43] kauditd_printk_skb: 3101 callbacks suppressed [ 86.348809][ T43] audit: type=1400 audit(1790913840.406:3577): avc: denied { setopt } for pid=7472 comm="syz.0.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 86.444148][ T43] audit: type=1400 audit(1790913840.506:3578): avc: denied { connect } for pid=7476 comm="syz.0.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 86.452191][ T43] audit: type=1400 audit(1790913840.506:3579): avc: denied { mount } for pid=7476 comm="syz.0.425" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 86.478191][ T43] audit: type=1400 audit(1790913840.536:3580): avc: denied { map } for pid=7478 comm="syz.3.426" path="/dev/comedi4" dev="devtmpfs" ino=1303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 86.494190][ T43] audit: type=1400 audit(1790913840.556:3581): avc: denied { cmd } for pid=7476 comm="iou-wrk-7477" path="/dev/ublk-control" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 86.518167][ T7477] ptp ptp0: new virtual clock ptp2 [ 86.518182][ T7477] ptp ptp0: guarantee physical clock free running [ 86.518563][ T7477] ptp ptp0: delete virtual clock ptp2 [ 86.551179][ T7477] ptp ptp0: only physical clock in use now [ 86.571130][ T43] audit: type=1400 audit(1790913840.626:3582): avc: denied { unmount } for pid=5726 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 86.785164][ T7494] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 86.845337][ T7496] dlm: non-version read from control device 0 [ 86.850841][ T7498] new mount options do not match the existing superblock, will be ignored [ 86.851827][ T43] audit: type=1400 audit(1790913840.906:3583): avc: denied { mount } for pid=7497 comm="syz.4.432" name="/" dev="cgroup" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 86.852609][ T43] audit: type=1400 audit(1790913840.906:3584): avc: denied { read } for pid=7497 comm="syz.4.432" name="usbmon5" dev="devtmpfs" ino=752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 86.852783][ T43] audit: type=1400 audit(1790913840.906:3585): avc: denied { open } for pid=7497 comm="syz.4.432" path="/dev/usbmon5" dev="devtmpfs" ino=752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 86.857965][ T43] audit: type=1400 audit(1790913840.916:3586): avc: denied { ioctl } for pid=7497 comm="syz.4.432" path="/dev/usbmon5" dev="devtmpfs" ino=752 ioctlcmd=0x9208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 86.899751][ T7500] IPVS: set_ctl: invalid protocol: 41 172.30.0.4:20002 [ 86.959936][ T7504] netlink: 4 bytes leftover after parsing attributes in process `syz.4.435'. [ 87.010967][ T7506] netlink: 52 bytes leftover after parsing attributes in process `syz.2.431'. [ 87.010983][ T7506] nbd: must specify at least one socket [ 87.020141][ T7510] netlink: 4 bytes leftover after parsing attributes in process `syz.4.435'. [ 87.193687][ T5737] Bluetooth: hci0: command tx timeout [ 87.201148][ T7521] ip6t_srh: unknown srh match flags 45F8 [ 87.715669][ T7535] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 87.773964][ T7540] kvm: MONITOR instruction emulated as NOP! [ 87.912614][ T7547] netlink: 52 bytes leftover after parsing attributes in process `syz.0.446'. [ 87.912639][ T7547] nbd: must specify at least one socket [ 88.033432][ T852] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 88.187046][ T852] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 88.188957][ T852] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 88.188983][ T852] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 88.189011][ T852] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.196514][ T7544] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 88.204247][ T852] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 88.389345][ T7559] netlink: 4 bytes leftover after parsing attributes in process `syz.2.449'. [ 88.389367][ T7559] netlink: 32 bytes leftover after parsing attributes in process `syz.2.449'. [ 88.410063][ T7544] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 88.429457][ T852] usb 8-1: USB disconnect, device number 7 [ 88.570437][ T7568] netlink: 4 bytes leftover after parsing attributes in process `syz.2.453'. [ 89.263397][ T5737] Bluetooth: hci0: command tx timeout [ 89.293795][ T7585] netlink: 52 bytes leftover after parsing attributes in process `syz.3.457'. [ 89.293812][ T7585] nbd: must specify at least one socket [ 89.361564][ T7587] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 89.855379][ T7614] netlink: 40 bytes leftover after parsing attributes in process `syz.2.467'. [ 89.855403][ T7614] nbd: must specify at least one socket [ 89.899712][ T7618] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 89.910144][ T7618] bridge1: entered promiscuous mode [ 89.910179][ T7618] bridge1: entered allmulticast mode [ 90.406385][ T7602] ceph: No mds server is up or the cluster is laggy [ 90.480313][ T7633] befs: (nbd3): No write support. Marking filesystem read-only [ 90.482587][ T7633] befs: (nbd3): unable to read superblock [ 90.505357][ T7636] syzkaller0: entered promiscuous mode [ 90.505378][ T7636] syzkaller0: entered allmulticast mode [ 90.656143][ T7646] netlink: 40 bytes leftover after parsing attributes in process `syz.3.477'. [ 90.656166][ T7646] nbd: must specify at least one socket [ 90.720575][ T74] Bluetooth: hci4: Frame reassembly failed (-84) [ 90.772737][ T7652] ptrace attach of "/syz-executor exec"[5736] was attempted by "/syz-executor exec"[7652] [ 91.048565][ T7659] SELinux: Context system_u:object_r:crond_exec_t:s0 is not valid (left unmapped). [ 91.050509][ T7659] overlayfs: failed to resolve './file1/file0': -2 [ 91.068693][ T7661] netlink: 'syz.0.483': attribute type 4 has an invalid length. [ 91.189016][ T7673] nbd: must specify at least one socket [ 91.246907][ T7679] Bluetooth: MGMT ver 1.23 [ 91.255670][ T7675] nfs: Unknown parameter 'addr Z[' [ 91.325355][ T7686] [ 91.326215][ T7686] ====================================================== [ 91.328382][ T7686] WARNING: possible circular locking dependency detected [ 91.330490][ T7686] syzkaller #0 Tainted: G L [ 91.332246][ T7686] ------------------------------------------------------ [ 91.334368][ T7686] syz.0.490/7686 is trying to acquire lock: [ 91.336071][ T7686] ffff88803936d568 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0x4ca/0xcb0 [ 91.339310][ T7686] [ 91.339310][ T7686] but task is already holding lock: [ 91.341400][ T7686] ffff88803936f2e0 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x3a5/0x620 [ 91.343972][ T7686] [ 91.343972][ T7686] which lock already depends on the new lock. [ 91.343972][ T7686] [ 91.346956][ T7686] [ 91.346956][ T7686] the existing dependency chain (in reverse order) is: [ 91.349524][ T7686] [ 91.349524][ T7686] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 91.351816][ T7686] lock_acquire+0x1d1/0x380 [ 91.353311][ T7686] lock_sock_nested+0x41/0xf0 [ 91.354926][ T7686] smc_listen_out+0xf2/0x4b0 [ 91.356455][ T7686] smc_listen_work+0x767/0x50e0 [ 91.358016][ T7686] process_one_work+0xac7/0x1b10 [ 91.359685][ T7686] worker_thread+0x5ef/0xe50 [ 91.361180][ T7686] kthread+0x373/0x450 [ 91.362559][ T7686] ret_from_fork+0x730/0xd60 [ 91.364103][ T7686] ret_from_fork_asm+0x1a/0x30 [ 91.365724][ T7686] [ 91.365724][ T7686] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 91.368782][ T7686] check_prev_add+0xeb/0xe60 [ 91.370435][ T7686] __lock_acquire+0x1528/0x1f40 [ 91.372014][ T7686] lock_acquire+0x1d1/0x380 [ 91.373516][ T7686] __flush_work+0x4de/0xcb0 [ 91.374959][ T7686] cancel_work_sync+0xd1/0xf0 [ 91.376539][ T7686] smc_clcsock_release+0x5f/0xe0 [ 91.378105][ T7686] __smc_release+0x5c2/0x880 [ 91.379591][ T7686] smc_close_non_accepted+0xda/0x200 [ 91.381253][ T7686] smc_close_active+0x4ff/0x1060 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 91.383004][ T7686] __smc_release+0x634/0x880 [ 91.384753][ T7686] smc_release+0x1fc/0x620 [ 91.386263][ T7686] __sock_release+0xb3/0x260 [ 91.387836][ T7686] sock_close+0x1c/0x30 [ 91.389236][ T7686] __fput+0x3ff/0xb50 [ 91.390560][ T7686] task_work_run+0x150/0x240 [ 91.392045][ T7686] exit_to_user_mode_loop+0x1d8/0x700 [ 91.393789][ T7686] do_syscall_64+0x661/0x790 [ 91.395265][ T7686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.397128][ T7686] [ 91.397128][ T7686] other info that might help us debug this: [ 91.397128][ T7686] [ 91.400004][ T7686] Possible unsafe locking scenario: [ 91.400004][ T7686] [ 91.402115][ T7686] CPU0 CPU1 [ 91.403671][ T7686] ---- ---- [ 91.405258][ T7686] lock(sk_lock-AF_SMC/1); [ 91.406595][ T7686] lock((work_completion)(&new_smc->smc_listen_work)); [ 91.409395][ T7686] lock(sk_lock-AF_SMC/1); [ 91.411387][ T7686] lock((work_completion)(&new_smc->smc_listen_work)); [ 91.413388][ T7686] [ 91.413388][ T7686] *** DEADLOCK *** [ 91.413388][ T7686] [ 91.415784][ T7686] locks held by syz.0.490/7686: 3, last CPU#3: [ 91.417535][ T7686] #0: ffff88803b7e1380 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 91.420669][ T7686] #1: ffff88803936f2e0 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x3a5/0x620 [ 91.423496][ T7686] #2: ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: __flush_work+0xfd/0xcb0 [ 91.426229][ T7686] [ 91.426229][ T7686] stack backtrace: [ 91.427939][ T7686] CPU: 3 UID: 0 PID: 7686 Comm: syz.0.490 Tainted: G L syzkaller #0 PREEMPT(full) [ 91.431074][ T7686] Tainted: [L]=SOFTLOCKUP [ 91.432323][ T7686] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 91.435277][ T7686] Call Trace: [ 91.436283][ T7686] [ 91.437145][ T7686] dump_stack_lvl+0x100/0x190 [ 91.438511][ T7686] print_circular_bug.cold+0x178/0x1be [ 91.440090][ T7686] check_noncircular+0x146/0x160 [ 91.441500][ T7686] check_prev_add+0xeb/0xe60 [ 91.442863][ T7686] __lock_acquire+0x1528/0x1f40 [ 91.444565][ T7686] lock_acquire+0x1d1/0x380 [ 91.446121][ T7686] ? __flush_work+0x4ca/0xcb0 [ 91.447558][ T7686] ? mark_held_locks+0x40/0x70 [ 91.449239][ T7686] ? __flush_work+0x4ca/0xcb0 [ 91.450614][ T7686] __flush_work+0x4de/0xcb0 [ 91.451965][ T7686] ? __flush_work+0x4ca/0xcb0 [ 91.453391][ T7686] ? __pfx___flush_work+0x10/0x10 [ 91.454882][ T7686] ? __lock_acquire+0x5c0/0x1f40 [ 91.456363][ T7686] ? __pfx_wq_barrier_func+0x10/0x10 [ 91.457877][ T7686] ? __pfx___might_resched+0x10/0x10 [ 91.459449][ T7686] ? __smc_release+0x5ba/0x880 [ 91.460835][ T7686] cancel_work_sync+0xd1/0xf0 [ 91.462185][ T7686] smc_clcsock_release+0x5f/0xe0 [ 91.463629][ T7686] __smc_release+0x5c2/0x880 [ 91.465060][ T7686] ? __pfx_sock_def_readable+0x10/0x10 [ 91.466646][ T7686] smc_close_non_accepted+0xda/0x200 [ 91.468177][ T7686] smc_close_active+0x4ff/0x1060 [ 91.469663][ T7686] __smc_release+0x634/0x880 [ 91.471000][ T7686] smc_release+0x1fc/0x620 [ 91.472288][ T7686] __sock_release+0xb3/0x260 [ 91.473640][ T7686] ? __pfx_sock_close+0x10/0x10 [ 91.475039][ T7686] sock_close+0x1c/0x30 [ 91.476306][ T7686] __fput+0x3ff/0xb50 [ 91.477466][ T7686] ? _raw_spin_unlock_irq+0x23/0x50 [ 91.478959][ T7686] task_work_run+0x150/0x240 [ 91.481259][ T7686] ? __pfx_task_work_run+0x10/0x10 [ 91.482777][ T7686] exit_to_user_mode_loop+0x1d8/0x700 [ 91.484398][ T7686] ? rcu_is_watching+0x13/0xc0 [ 91.485817][ T7686] do_syscall_64+0x661/0x790 [ 91.487202][ T7686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.488943][ T7686] RIP: 0033:0x7fe5f1f9e159 [ 91.490287][ T7686] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.495802][ T7686] RSP: 002b:00007fe5f2ec3028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 91.498169][ T7686] RAX: 0000000000000000 RBX: 00007fe5f2225fa0 RCX: 00007fe5f1f9e159 [ 91.500450][ T7686] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 91.502794][ T7686] RBP: 00007fe5f203506b R08: 0000000000000000 R09: 0000000000000000 [ 91.505425][ T7686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.507674][ T7686] R13: 00007fe5f2226038 R14: 00007fe5f2225fa0 R15: 00007ffd4548bbf8 [ 91.509922][ T7686] [ 91.806555][ T5804] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.806576][ T5804] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 91.846535][ T5804] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.846557][ T5804] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 91.899652][ T5804] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.899683][ T5804] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 91.956970][ T5804] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.957000][ T5804] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 92.029942][ T5804] bridge_slave_1: left allmulticast mode [ 92.029967][ T5804] bridge_slave_1: left promiscuous mode [ 92.030138][ T5804] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.031795][ T5804] bridge_slave_0: left allmulticast mode [ 92.031815][ T5804] bridge_slave_0: left promiscuous mode [ 92.031967][ T5804] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.082303][ T5804] bond1 (unregistering): (slave geneve2): Releasing active interface [ 92.092504][ T5804] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.096594][ T5804] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.097458][ T5804] bond0 (unregistering): Released all slaves [ 92.099435][ T5804] bond1 (unregistering): Released all slaves [ 92.102736][ T5804] bond2 (unregistering): Released all slaves [ 92.155068][ T43] kauditd_printk_skb: 22 callbacks suppressed [ 92.155086][ T43] audit: type=1400 audit(1790913846.216:3609): avc: denied { write } for pid=7698 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.158204][ T5804] : left promiscuous mode [ 92.195386][ T43] audit: type=1400 audit(1790913846.256:3610): avc: denied { write } for pid=7701 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.224528][ T5438] 8021q: adding VLAN 0 to HW filter on device eth6 [ 92.283473][ T43] audit: type=1400 audit(1790913846.336:3611): avc: denied { write } for pid=7704 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.315237][ T43] audit: type=1400 audit(1790913846.376:3612): avc: denied { write } for pid=7707 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.321039][ T5804] hsr_slave_1: left promiscuous mode [ 92.321414][ T5804] batman_adv: : Interface deactivated: batadv_slave_0 [ 92.321428][ T5804] batman_adv: : Removing interface: batadv_slave_0 [ 92.321875][ T5804] batman_adv: : Interface deactivated: batadv_slave_1 [ 92.321887][ T5804] batman_adv: : Removing interface: batadv_slave_1 [ 92.331822][ T5804] veth1_macvtap: left promiscuous mode [ 92.331850][ T5804] veth0_macvtap: left promiscuous mode [ 92.331910][ T5804] veth1_vlan: left promiscuous mode [ 92.331946][ T5804] veth0_vlan: left promiscuous mode [ 92.426841][ T5804] team0 (unregistering): Port device team_slave_1 removed [ 92.430549][ T5804] team0 (unregistering): Port device team_slave_0 removed [ 92.472737][ T5438] 8021q: adding VLAN 0 to HW filter on device eth7 [ 92.528133][ T43] audit: type=1400 audit(1790913846.586:3613): avc: denied { write } for pid=7710 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.579174][ T43] audit: type=1400 audit(1790913846.636:3614): avc: denied { write } for pid=7713 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.610168][ T5438] 8021q: adding VLAN 0 to HW filter on device eth8 [ 92.655231][ T43] audit: type=1400 audit(1790913846.716:3615): avc: denied { write } for pid=7716 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.690488][ T43] audit: type=1400 audit(1790913846.746:3616): avc: denied { write } for pid=7719 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.720677][ T5438] 8021q: adding VLAN 0 to HW filter on device eth9 [ 92.738373][ T5804] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.783114][ T5084] Bluetooth: hci4: command 0x1003 tx timeout [ 92.783116][ T5737] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 92.801506][ T5804] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.926568][ T5804] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.946354][ T7647] batman_adv: batadv0: Interface deactivated: syz_tun [ 92.956500][ T7647] batman_adv: batadv0: Removing interface: syz_tun [ 92.959839][ T5804] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.067715][ T5804] bridge_slave_1: left allmulticast mode [ 93.067757][ T5804] bridge_slave_1: left promiscuous mode [ 93.067867][ T5804] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.069282][ T5804] bridge_slave_0: left allmulticast mode [ 93.069299][ T5804] bridge_slave_0: left promiscuous mode [ 93.069406][ T5804] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.122141][ T5804] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.126522][ T5804] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.127574][ T5804] bond0 (unregistering): Released all slaves [ 93.173245][ T43] audit: type=1400 audit(1790913847.226:3617): avc: denied { write } for pid=7726 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.208012][ T43] audit: type=1400 audit(1790913847.266:3618): avc: denied { write } for pid=7729 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.236149][ T5438] 8021q: adding VLAN 0 to HW filter on device eth10 [ 93.299556][ T5804] hsr_slave_0: left promiscuous mode [ 93.299933][ T5804] hsr_slave_1: left promiscuous mode [ 93.300155][ T5804] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.300173][ T5804] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.300584][ T5804] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.300593][ T5804] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.302121][ T5804] veth1_macvtap: left promiscuous mode [ 93.302135][ T5804] veth0_macvtap: left promiscuous mode [ 93.302163][ T5804] veth1_vlan: left promiscuous mode [ 93.302183][ T5804] veth0_vlan: left promiscuous mode [ 93.378162][ T5804] team0 (unregistering): Port device team_slave_1 removed [ 93.381794][ T5804] team0 (unregistering): Port device team_slave_0 removed [ 93.421139][ T5438] 8021q: adding VLAN 0 to HW filter on device eth11 [ 93.529152][ T5438] 8021q: adding VLAN 0 to HW filter on device eth12 [ 93.650964][ T5438] 8021q: adding VLAN 0 to HW filter on device eth13 [ 93.748478][ T5804] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.846064][ T5804] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.865618][ T5804] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.925856][ T5804] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.035267][ T5804] pimreg: left allmulticast mode [ 94.087758][ T5804] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.089222][ T5804] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.090020][ T5804] bond0 (unregistering): Released all slaves [ 94.092644][ T5804] bond1 (unregistering): (slave veth3): Releasing backup interface [ 94.107004][ T5804] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 94.108068][ T5804] bond1 (unregistering): Released all slaves [ 94.176954][ T5804] tipc: Left network mode [ 94.222910][ T5438] 8021q: adding VLAN 0 to HW filter on device eth14 [ 94.289745][ T5804] hsr_slave_0: left promiscuous mode [ 94.290143][ T5804] hsr_slave_1: left promiscuous mode [ 94.290489][ T5804] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.290502][ T5804] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.290913][ T5804] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.290925][ T5804] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.292379][ T5804] veth1_macvtap: left promiscuous mode [ 94.292400][ T5804] veth0_macvtap: left promiscuous mode [ 94.292451][ T5804] veth1_vlan: left promiscuous mode [ 94.292486][ T5804] veth0_vlan: left promiscuous mode [ 94.393507][ T5804] team0 (unregistering): Port device team_slave_1 removed [ 94.395999][ T5804] team0 (unregistering): Port device team_slave_0 removed [ 94.436325][ T5438] 8021q: adding VLAN 0 to HW filter on device eth15 [ 94.566472][ T5438] 8021q: adding VLAN 0 to HW filter on device eth16 [ 94.810307][ T5438] 8021q: adding VLAN 0 to HW filter on device eth17 [ 97.170824][ T43] kauditd_printk_skb: 21 callbacks suppressed [ 97.170844][ T43] audit: type=1400 audit(1790913851.226:3640): avc: denied { write } for pid=7817 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1