last executing test programs: 3m44.8750964s ago: executing program 32 (id=4357): sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x20000090) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xfbaaf000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, 0x0, &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/module/damon_reclaim/parameters/quota_mem_pressure_us\x00', 0x2, 0x0) write(r3, &(0x7f0000000180)='100', 0x3) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/module/damon_reclaim/parameters/skip_anon\x00', 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/module/damon_reclaim/parameters/enabled\x00', 0x2, 0x0) write(r4, &(0x7f0000000280)='Y', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/algorithm_params\x00', 0x1, 0x0) write(r5, 0x0, 0x0) 2m49.347499769s ago: executing program 33 (id=5357): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newrule={0x40, 0x20, 0x1, 0x70bd29, 0x25dfdbfe, {0x2, 0x10, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, [@FRA_DST={0x8, 0x1, @multicast1}, @FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'lo\x00'}, @FRA_FLOW={0x8}]}, 0x40}}, 0x40010) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c00000011000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="100a0600090901000c001a80080006"], 0x2c}, 0x1, 0x0, 0x0, 0xc0c0}, 0x14) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f0000000080)='tracefs\x00', 0x0, &(0x7f0000000000)) ioctl$FUSE_DEV_IOC_CLONE(r4, 0x8004e500, &(0x7f0000000080)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0x18, &(0x7f0000000480)=0xc, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) sendto$packet(r6, &(0x7f0000000180)="0b0377002e0064001100475400f6a13bb1000000086086dd6558", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r7}, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/dynamic_events\x00', 0x2, 0x0) write(r8, &(0x7f0000000100)='e:my_eprobe raw_syscalls/sys_enter', 0x22) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./trace/events/eprobes/my_eprobe/enable\x00', 0x2, 0x0) write(r9, &(0x7f0000000200)='1', 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000000)={'wlan1\x00', 0x2}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_delete(r10) 2m31.98858374s ago: executing program 34 (id=5528): syz_open_dev$tty1(0xc, 0x4, 0x4) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x800) openat$kvm(0xffffffffffffff9c, 0x0, 0x2501, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = semget(0x3, 0x4, 0x39c) semop(r1, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, &(0x7f00000002c0)=[{0x800000000}, {0x0, 0x6, 0x7}], 0x2, 0xbff, 0x1e, 0x0, 0xc, 0x21}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x37, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x1, 0x0, 0x1}}]}}]}, 0x44}}, 0x4084) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000180)='syzkaller0\x00', 0xb) sendto$inet(r7, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x2, 0x4e20, @loopback}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a0103000000001c000000010000040900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000068000000060a010400000000000000000100000008000b4000000000400004803c0001800b00010065787468647200002c000280080001400000000c08000340000000010800044000000022050002000700000008000640000000040900010073797a30"], 0xdc}}, 0x0) semop(r1, &(0x7f0000000000)=[{0x0, 0x9, 0x800}, {0x2, 0x1, 0x1800}, {0x0, 0x4, 0x1000}, {0x2, 0xc}, {0x0, 0xcd36, 0x1000}], 0x2b7d) semctl$SETALL(r1, 0x0, 0x11, &(0x7f00000000c0)=[0x7ffb]) 2m3.216298177s ago: executing program 6 (id=5973): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b707000000000000631159000055bf312c02512da56e00000007000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195}, 0x23) syz_open_dev$video(&(0x7f0000000100), 0x7fff, 0x4880) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@getneightbl={0x14, 0x42, 0x400, 0x70bd2d, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x14}}, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0xfffffffe}}, 0x2e) r2 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/current\x00') socket$vsock_stream(0x28, 0x1, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r3) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0x0, 0x80) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x18) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r4, 0xc2604110, &(0x7f0000000680)={0x0, [[0x5, 0x0, 0x9, 0x1, 0xfffffff5, 0x0, 0x0, 0x1], [0x4, 0x1, 0x0, 0x6], [0x100091, 0x4, 0x2, 0x0, 0xfffffffe, 0x0, 0xff]], '\x00', [{0x0, 0x3304}, {}, {0x4}, {}, {}, {0x8}, {}, {0x1}, {}, {0xb}, {0x2, 0xf7bb}, {0x0, 0x3}], '\x00', 0x303}) syz_usb_disconnect(r2) r6 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet_mtu(r6, 0x111, 0xa, &(0x7f0000000000)=0x3, 0x4) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000140)={0x1, 0x0, @pic={0x9, 0x8, 0x2, 0x8, 0x1, 0x2d, 0x2, 0xd, 0x10, 0x7, 0x7f, 0x8, 0x3, 0x5, 0x6, 0xfc}}) 2m1.779832322s ago: executing program 6 (id=5980): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104008000"/20, @ANYRES32=0x0, @ANYBLOB="04000000100000001c00128009000100626f6e64000000000c00028005001d0003000000"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4000004) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 2m1.669067754s ago: executing program 6 (id=5983): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='.', 0x1}], 0x1}}], 0x2, 0x8020) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000180)={0x0, 0xe, 0x1, [0x2]}, 0xa) (fail_nth: 3) 2m1.590905876s ago: executing program 6 (id=5986): fsopen(&(0x7f0000000100)='ceph\x00', 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2) socket$netlink(0x10, 0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$packet(0x11, 0x3, 0x300) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) socket$inet6(0x10, 0x3, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x101100, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x0) memfd_create(&(0x7f0000002b40)='/$!}\\\x00', 0x4) socket$l2tp(0x2, 0x2, 0x73) openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x315901c, 0x0) chroot(&(0x7f0000001140)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00') syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="043e1d", @ANYRES16=r0], 0x22) 2m1.590531312s ago: executing program 6 (id=5987): setns(0xc9, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x800, 0x2) setns(0xc9, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) r2 = socket(0x8, 0x5, 0x5) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x400261f2, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYRESDEC=r2, @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="44000000100003052abd70000007000000000000", @ANYRES32=0x0, @ANYBLOB="00000000063800001c0012800900010069706970000000000c00028008000100", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB], 0x44}}, 0x0) 2m1.311147946s ago: executing program 6 (id=5990): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) 2m1.231265513s ago: executing program 35 (id=5990): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) 2m0.069290871s ago: executing program 5 (id=5992): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000140)) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/time\x00') open_by_handle_at(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="20000000f1000100", @ANYRES64=r1], 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f00000018c0)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11, 0x800}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0xf98, 0x2c, 0x0, @local, @mcast2, {[@fragment={0x3a}], @pkt_toobig={0x2, 0x0, 0x0, 0x800, {0xf, 0x6, "010380", 0x3ff, 0x0, 0x1, @loopback, @loopback, [@routing={0x2f, 0x10, 0x0, 0xa3, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @local, @private2, @empty, @remote, @loopback, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}]}, @hopopts={0x3a, 0x1d8, '\x00', [@generic={0xd, 0xebf, "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"}]}], "ab0924172f9c2a1d"}}}}}}, 0xfce) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) 1m58.571199703s ago: executing program 5 (id=5993): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) (fail_nth: 3) 1m58.44040684s ago: executing program 5 (id=5995): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, '\x00', 0x1}}}, 0xe) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x3}}}, 0x6) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0x0, 0xc8, @any, 0x1}}}, 0xe) 1m58.278600621s ago: executing program 3 (id=5998): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0xc048aeca, &(0x7f0000000280)={0x2, 0x0, [{0xaf2, 0x0, 0x4}, {0x244, 0x0, 0x4}]}) (fail_nth: 2) 1m58.150613959s ago: executing program 3 (id=6000): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e0001000200", @ANYBLOB=','], 0x8) (fail_nth: 3) 1m58.148399002s ago: executing program 3 (id=6001): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='-. -3 -4\n', 0x9) 1m58.110010908s ago: executing program 3 (id=6002): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0x1fe) symlinkat(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1/phonet.usb0\x00') r0 = openat(0xffffffffffffffff, 0x0, 0x620302, 0x83) write(r0, 0x0, 0x0) write(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)="653a6d795f726561645f6d737231202d12725236bdb1a498e4c59cb27a167133a79012dbca52da810e4e833ca479b79b6342a3b456447e17c5e5a6572f0000000000", 0x42) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close(r0) unlinkat(r0, 0x0, 0x0) rmdir(0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x20048000, 0xf95, 0x0, 0x9}, 0x1c) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x2010, r1, 0x2800000000000) mremap(&(0x7f000000e000/0x7000)=nil, 0x7000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x804, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x4, 0x0) syz_io_uring_setup(0x29d7, &(0x7f0000000540)={0x0, 0x8550, 0xc00, 0x1, 0xf}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_WAITID={0x32, 0x51, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}}) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1m58.006489009s ago: executing program 3 (id=6004): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x111) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x0) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000040)={0x401, 0x1}) 1m57.641047647s ago: executing program 3 (id=6006): sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="c10e000018001f06", 0x8, 0x4000000, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r2 = accept4$alg(r1, 0x0, 0x0, 0x80000) sendmsg$alg(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x880}, 0x404c804) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0xffffffff, 0x80, 0xfffffffe, 0x2, 0x10007e, 0x20000006, 0x50, 0x6, 0x10000, 0x80005, 0x2, 0x8, 0xffffff00, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x26, 0xd, 0x1, 0x6, 0x7, 0xe661, 0x4, 0x7, 0x10001, 0x8, 0x4c74, 0xff0, 0x0, 0x3, 0x6, 0x8, 0x800080ee, 0x10, 0x17, 0x1, 0x9, 0x200, 0x3e, 0x8c, 0x6, 0xca9, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x6, 0x5, 0x1, 0x40], [0x10000007, 0x9, 0x80000130, 0x8004, 0x5, 0xff7ffff3, 0x2, 0xc8, 0xf9, 0x9, 0x7, 0x6c7, 0x9, 0x2, 0x1000003, 0x4, 0x0, 0x5, 0x42f, 0xe, 0x312, 0x78, 0x1, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x4400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x8101, 0x1, 0xeaf, 0xffff80f1, 0x1, 0x206, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0xfffffe01, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93694, 0x43, 0x2], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x40000009, 0x5, 0x7fff, 0x3, 0x5, 0xc303, 0x4, 0x6, 0x5, 0x5, 0x8, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x8001, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x8005, 0xd, 0x800003, 0x200, 0x400080, 0xffffffff, 0x4, 0x2950bfaf, 0x2, 0xa2, 0x7, 0xa6, 0x5, 0x6, 0x1000ac8, 0xc1, 0x2, 0x1000003, 0x7ff, 0x129, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x21c, 0x120000, 0x3, 0x2006, 0x80a2ec, 0x4, 0x24], [0x9, 0x40bb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0x5, 0xcef, 0x1ff, 0x200, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000001, 0x7, 0x4, 0xc8, 0xfffffffe, 0xfffff000, 0x4010080, 0x3, 0x7e, 0x100, 0xff, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x7ff, 0x1, 0x30b1d69b, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x1, 0x928, 0xb1e, 0xc7, 0x200, 0xffff2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000240)={0x11, @multicast1, 0x4e1f, 0x0, 'lblc\x00', 0x0, 0x0, 0x4}, 0x2c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000010a"], 0x14}}, 0x0) 1m57.599946345s ago: executing program 36 (id=6006): sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="c10e000018001f06", 0x8, 0x4000000, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r2 = accept4$alg(r1, 0x0, 0x0, 0x80000) sendmsg$alg(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x880}, 0x404c804) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0xffffffff, 0x80, 0xfffffffe, 0x2, 0x10007e, 0x20000006, 0x50, 0x6, 0x10000, 0x80005, 0x2, 0x8, 0xffffff00, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x26, 0xd, 0x1, 0x6, 0x7, 0xe661, 0x4, 0x7, 0x10001, 0x8, 0x4c74, 0xff0, 0x0, 0x3, 0x6, 0x8, 0x800080ee, 0x10, 0x17, 0x1, 0x9, 0x200, 0x3e, 0x8c, 0x6, 0xca9, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x6, 0x5, 0x1, 0x40], [0x10000007, 0x9, 0x80000130, 0x8004, 0x5, 0xff7ffff3, 0x2, 0xc8, 0xf9, 0x9, 0x7, 0x6c7, 0x9, 0x2, 0x1000003, 0x4, 0x0, 0x5, 0x42f, 0xe, 0x312, 0x78, 0x1, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x4400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x8101, 0x1, 0xeaf, 0xffff80f1, 0x1, 0x206, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0xfffffe01, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93694, 0x43, 0x2], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x40000009, 0x5, 0x7fff, 0x3, 0x5, 0xc303, 0x4, 0x6, 0x5, 0x5, 0x8, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x8001, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x8005, 0xd, 0x800003, 0x200, 0x400080, 0xffffffff, 0x4, 0x2950bfaf, 0x2, 0xa2, 0x7, 0xa6, 0x5, 0x6, 0x1000ac8, 0xc1, 0x2, 0x1000003, 0x7ff, 0x129, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x21c, 0x120000, 0x3, 0x2006, 0x80a2ec, 0x4, 0x24], [0x9, 0x40bb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0x5, 0xcef, 0x1ff, 0x200, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000001, 0x7, 0x4, 0xc8, 0xfffffffe, 0xfffff000, 0x4010080, 0x3, 0x7e, 0x100, 0xff, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x7ff, 0x1, 0x30b1d69b, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x1, 0x928, 0xb1e, 0xc7, 0x200, 0xffff2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000240)={0x11, @multicast1, 0x4e1f, 0x0, 'lblc\x00', 0x0, 0x0, 0x4}, 0x2c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000010a"], 0x14}}, 0x0) 1m57.560738239s ago: executing program 5 (id=6008): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000019280)=""/79, 0x513000, 0x1000, 0x0, 0x1}, 0x20) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r2, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xa, 0xfffffffc}) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x12c, @ioapic={0xf000, 0x8000, 0x6, 0xfd8, 0x0, [{0xf7, 0xd4, 0x80, '\x00', 0x4}, {0xe2, 0x9, 0x9, '\x00', 0x4}, {0xe, 0xa, 0x9, '\x00', 0x48}, {0x4, 0x1, 0xc1, '\x00', 0x6}, {0x85, 0x9, 0xb, '\x00', 0xc5}, {0x0, 0x6, 0x7, '\x00', 0x7}, {0x6, 0x80, 0x7, '\x00', 0x7}, {0x3, 0x2, 0xcb, '\x00', 0xf}, {0x8, 0x8, 0x4, '\x00', 0x1}, {0x3, 0x8, 0x4, '\x00', 0x8}, {0x30, 0x0, 0x4, '\x00', 0x81}, {0x3, 0x8, 0x0, '\x00', 0x23}, {0x3, 0x1, 0xa8, '\x00', 0xa}, {0x1a, 0x8, 0x4, '\x00', 0x4}, {0x96, 0xd0, 0xf0, '\x00', 0x9}, {0xfb, 0x2, 0x83, '\x00', 0x18}, {0x2, 0x3, 0x0, '\x00', 0xb}, {0x8, 0x3, 0xc9, '\x00', 0x9}, {0x5, 0x1, 0x9, '\x00', 0x64}, {0x7f, 0xee, 0x5}, {0x9, 0x9, 0x4, '\x00', 0x6}, {0x1, 0xe, 0x2}, {0xa0, 0x9, 0x0, '\x00', 0x4}, {0x0, 0x2, 0x7}]}}) socket$inet6(0xa, 0x80001, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) read$FUSE(r4, &(0x7f00000002c0)={0x2020}, 0x2020) r5 = socket(0x18, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000019300)=[@in6={0xa, 0x4e21, 0x7c, @empty}]}, &(0x7f00000007c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000180), &(0x7f0000000040)=0x4) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000019240)='/sys/kernel/hardlockup_count', 0xc000, 0x1) read$msr(r7, &(0x7f0000000280)=""/210, 0xd2) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x84, &(0x7f0000000280)={r6, @in6={{0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}}, 0x3, 0x83}, 0x90) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={r6, 0x7ad}, 0x8) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x185042, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000001ac0)={r2, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fa, 0x0, 0xa, 0x1c, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1cac3f000000008554fe581b5937f8374c72a964a02447a75df8a69ea90300", "24431a1e77a68e174f000000000000000010e200", [0x82, 0x3fd]}}) mkdirat(0xffffffffffffff9c, &(0x7f0000019200)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x80000, 0x0) r9 = openat(0xffffffffffffff9c, 0x0, 0x10001, 0x0) close(r9) r10 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0) write(r10, &(0x7f0000000200)='wwnn=0x1111111111111111,wwpn=0x2222222222222222', 0x2f) 1m57.441071729s ago: executing program 5 (id=6009): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f0000000180)={0x980902, 0x3, @name="6c14f9104c575323652bb05c9764e27d0235e28510452c132c1eaa54d11e47a7"}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000300)={'#! ', './file0', [{0x20, 'hugetlb.1GB.usage_in_bytes\x00'}, {0x20, '/proc/keys\x00'}, {0x20, '!%'}, {}, {0x20, '/proc/keys\x00'}, {0x20, 's]\xd3'}], 0xa, "02eb4b6b86dd3dea880e2b77cb27e519cdc734a9215a592b38f290cdede8fef3452333f66a435e99c1a9fc0c443f527dfc493e7504bd458c0e7d73d9f0b7e91e3a46a69e71e49e5f4fa14099761aafd97f493ba863ca17c9e69ff603ae4b1fac29b7e22a1372454efd77d7695ab39befbd50e388e6819a6414b95fff0362f7d6018586b1e60e866466834d43b7c68097ff610446360e42a295dbae5b9a261c9890e164668c11b600"/178}, 0xf9) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) r3 = syz_pidfd_open(0x0, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, 0x0) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000001080), 0x800, 0x0) ioctl$CDROMPLAYBLK(r4, 0x5317, &(0x7f00000010c0)={0x7, 0x5}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/rtc/rtc0/wakealarm\x00', 0x2, 0x0) write(r5, &(0x7f0000000040)='+5', 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pread64(r2, &(0x7f0000002200)=""/224, 0xe0, 0x8d35) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x90f102) write$binfmt_aout(r8, &(0x7f0000000480)=ANY=[@ANYBLOB="0000000000000000000000800080000014000091ff0f00004500f5ff06ff00010100fc5e15f4c3d3fbd80dad000008"], 0x125) write$ublk_bdev(r2, &(0x7f0000000540)="f9f9f557a74060a3f48ba9f1e352674745d1258532cdc7f2841ac63c478a14ef7d76c75125bb5ff637c8dd12a376437618c5b77a2ca73ec5987eb8ad3d9be4d978ab58969a1e5f8a61e8c4701fd71e4ce4ebf11d0fec7d6036a3f7e5b8cf6e3187952add597541e7e9ba570e3114972f5f1cb90de3fc49bf599f204d4c90a689a9be7237d892d9801ea754d4059a99037bca77b933eb122260b140f12f6552980e3c4c5c1cdde29e167bf84e27edae8a1c14b9ce8838a4fbb1394ef4fa27bf5c7eedf0699ffb622849c6fe9f496ca764e6d636030d827f9d3b005a8f2462d36e4cf04c92504509165b1e973a06663aa32ab82980a8757681", 0xf8) wait4(r7, 0x0, 0x80000000, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) mount$9p_tcp(&(0x7f0000000640), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x28014d0, &(0x7f0000000080)=ANY=[@ANYBLOB="7472616e733d7463702c706f72743d30783030303030303030303030301fc000000000000065766d61702c00"]) ioctl$SCSI_IOCTL_GET_PCI(r8, 0x5387, &(0x7f00000001c0)) waitid(0x1, r7, 0x0, 0x2, 0x0) ptrace$getregset(0x4205, r6, 0x2, &(0x7f0000000240)={&(0x7f0000000100)=""/106, 0xfffffdb8}) cachestat(r2, &(0x7f0000000040)={0x3, 0x3}, &(0x7f0000000280), 0x0) 1m57.140884146s ago: executing program 5 (id=6010): r0 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x141000) ioctl$FE_GET_PROPERTY(r1, 0x80106f53, &(0x7f00000001c0)={0x37, &(0x7f0000000040)=[{0x3a, '\x00', @buffer={"8845034f89c1fa937bcd39da5b5fea662c334fd2eb6f0de6ffeffb5d7faf52d2", 0x20}, 0x8}]}) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r0, 0x0, 0x70) r3 = openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0) read$qrtrtun(r2, &(0x7f0000000200)=""/235, 0xeb) write$cgroup_subtree(r3, &(0x7f0000000040)={[{0x2b, 'rdma'}]}, 0x6) r4 = openat$fault_inject(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/fail_io_timeout/interval\x00', 0x1, 0x0) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x109) fremovexattr(r5, &(0x7f0000000000)=@known='system.posix_acl_default\x00') write$cgroup_subtree(r5, &(0x7f0000000300)={[{0x6, 'rlimit'}, {0x0, 'perf_event'}, {0x2b, 'cpuacct'}, {0x2d, 'net_prio'}, {0x2d, 'rlimit'}, {0x2b, 'pids'}, {0x2b, 'rdma'}]}, 0x3b) ioctl$int_in(r4, 0x0, &(0x7f0000000180)=0x100000001) 1m42.15419044s ago: executing program 37 (id=6010): r0 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x141000) ioctl$FE_GET_PROPERTY(r1, 0x80106f53, &(0x7f00000001c0)={0x37, &(0x7f0000000040)=[{0x3a, '\x00', @buffer={"8845034f89c1fa937bcd39da5b5fea662c334fd2eb6f0de6ffeffb5d7faf52d2", 0x20}, 0x8}]}) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r0, 0x0, 0x70) r3 = openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0) read$qrtrtun(r2, &(0x7f0000000200)=""/235, 0xeb) write$cgroup_subtree(r3, &(0x7f0000000040)={[{0x2b, 'rdma'}]}, 0x6) r4 = openat$fault_inject(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/fail_io_timeout/interval\x00', 0x1, 0x0) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x109) fremovexattr(r5, &(0x7f0000000000)=@known='system.posix_acl_default\x00') write$cgroup_subtree(r5, &(0x7f0000000300)={[{0x6, 'rlimit'}, {0x0, 'perf_event'}, {0x2b, 'cpuacct'}, {0x2d, 'net_prio'}, {0x2d, 'rlimit'}, {0x2b, 'pids'}, {0x2b, 'rdma'}]}, 0x3b) ioctl$int_in(r4, 0x0, &(0x7f0000000180)=0x100000001) 1m29.140737122s ago: executing program 9 (id=6288): r0 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x8, 0xffffffff, 0xffffffff, 0xffffffff], [0x39a8, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffff7, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xe8e1, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0xd3, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) setns(0xc9, 0x0) setsockopt(0xffffffffffffffff, 0x8, 0x8, &(0x7f0000000140)="923ecfc96e33cf86d94b2d98630bfeb11a2535d70b7dadc0a518b5133f3a04cdc6d6cf95db499f534ba7ac7411449e439a688dafb0ae05d873bed8a07a7cceeb647434ff466510f8836a322a59781a870238d7b27a02a8c56d838317fdc9dee1d4999293bcb9c5de18a5a574fa30edc0cc80bfaefed546d45f56b9bc3881ddeca521bf6f1bb46bf36a54b94bfad4751268d784af96034e50a7a2fee4fbb1aa2f27c4060653", 0xa5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xe, &(0x7f0000000a00)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x1e00, 0x2c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="61122400000000006113340000000000bf10000000000000150002006f3007783d030100000000008701000000000000bc26000000000000bf67200000000000560300000ee600f06702000003000000140300000ee600f0bf050000000000000f610000000000006507f4ff02000400070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586e3f640f9f7e9a73b761ad4f0952a70046270d2b6436fdeecd791614ed46de741eb8cf91c046ef9beca574b350021c7ec6ef130f53748068ca432dae4e248b22b9ad8b2811f67916a1764578cba4b069037bfb3362d5691ac397f7e207145d970f0d97867552629b146645c785fb77dbeca38e49a9d5221f1f45f0a25890d04d91a15a05ae7e7ed6252c3d6c1973fb858de1da70d67317e7872b0603ce47ed2c1520e71b527bb42aa2e20e1e85df73736ed0a782ab7e7278dd54358cfdf6313d40f926332623625b49626481054787ab2dff85a9bebd6b317f26c691a65aa97bb3d1506a3a565e9c7ea5ad4611d2d77ee8a5c1b23814a26b6a20061fbb65bdd03770fa849f2a29ba69f90625f42592a70ba890f7a92878ae73574c3a233ee5954119931a1905210715fa77a8795f2fbec3797cb90f59fe8a4abec25f40c87bf25b750bbaa"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = openat(0xffffffffffffffff, &(0x7f0000001040)='net/atm/vc\x00', 0x608480, 0x9a) read(r1, &(0x7f0000001080)=""/4096, 0x1000) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000500)={'batadv_slave_1\x00', 0x0}) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xcb, &(0x7f0000000540)={0x0, 0x1, 0x4, r2, 0x1}, 0xc) ioctl$SNDRV_PCM_IOCTL_PAUSE(r0, 0x40044145, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="0580c20000000180c200000008004510005c00000000002f9078000000000000000024806558"], 0x0) r3 = socket$inet6(0x10, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414000800080004"], 0x2c}}, 0x0) sendto$inet6(r3, &(0x7f0000000640)="88f6d0c293f76312815f6c9f50395b3d5069accf7ec4160c33dbee22fc7de2c712f7d88e3c01443e806cfcf3ab08e5c722815d45458ad4497e47b3d74bd00ec3bc566fc77aeee1428520b58b8294cd761ae8f6fa54e9ea5b7b31445812a1cf5533395b61aa9d1a5039217a1026dcec2d41d2a0b9157689466d21d7741837bddb9c828244f98b19cc02c9541e29acae82fe8af2bf51b5c25b100d86a7ad3647d0bd4a8064cd36f28a0d78c487cacf", 0xfffffffffffffed4, 0x800, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') getdents64(r4, &(0x7f0000001ec0)=""/142, 0x8e) ioctl$SNDRV_PCM_IOCTL_REWIND(r4, 0x40084146, &(0x7f00000005c0)=0x77) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x200000, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x80001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x3) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000580)=@ccm_128={{0x303}, "f4264d803258725a", "ccdbd1dd71baf0f2fab2d8ee50edf6bf", "09d6cffc", "58d7bccd3cea3733"}, 0x28) sendto$inet6(r6, &(0x7f00000001c0)="c3", 0x1, 0x40, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1m29.140494585s ago: executing program 9 (id=6289): add_key(0x0, &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) r0 = socket$netlink(0x10, 0x3, 0xf) setsockopt$sock_int(r0, 0x1, 0x2b, 0x0, 0x0) sendfile(r0, r0, &(0x7f0000000040)=0xfffffffc, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}, 0x6}, 0x1c) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002080)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x24004881}, 0xc041) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0) write(r2, &(0x7f0000000070)='syz0:127.0.0.1', 0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x1ff) mount$afs(0x0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000c00), 0xfd, 0x0) 1m29.069252388s ago: executing program 9 (id=6290): add_key(0x0, &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) r0 = socket$netlink(0x10, 0x3, 0xf) setsockopt$sock_int(r0, 0x1, 0x2b, 0x0, 0x0) sendfile(r0, r0, &(0x7f0000000040)=0xfffffffc, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}, 0x6}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000d40), 0x40000, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x9) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7482def62b6f75ec241d89d237590820f53e1c1dfd673572bf272b0393fa1298abba467a0487a331f61cd820406df1148d435637ee4e8111d6b5d231d16689028ff34cdcf4ce8062c7a165c19c762631d4f0a0bb7864a5f97326b293471ceba0392e9f8abe75577e8f0c9455512cae0965e937a1b3b4856244", @ANYRESHEX=r1], 0x20}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/net/afs/rootcell\x00', 0x41) mount(0x0, &(0x7f0000000300)='./proc/net/afs/rootcell\x00', &(0x7f0000000280)='erofs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x200040, 0x9b) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x5c8c, 0x0, @empty, @mcast1, 0x80, 0x0, 0x0, 0x20000000}}) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$IOMMU_HWPT_ALLOC$TEST(r3, 0x3b89, &(0x7f00000001c0)={0x28, 0x2, 0x0, 0x0, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000180)}) ioctl$IOMMU_DESTROY$hwpt(r3, 0x3b80, &(0x7f0000000200)={0x8, r6}) write(r4, &(0x7f0000000070)='syz0:127.0.0.1', 0xe) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000240), 0x800000103, 0x412282) socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000340)=0x6, 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) 1m29.068882699s ago: executing program 9 (id=6291): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x440040, 0xa0) fcntl$notify(r0, 0x402, 0x21) chdir(&(0x7f00000003c0)='./bus\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e22, 0x3, @mcast1, 0x2}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') write$P9_RREADDIR(r3, &(0x7f0000000400)={0x2a6, 0x29, 0x1, {0x2, [{{0x20, 0x2, 0x5}, 0x9, 0x79, 0x207, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, {{0x40, 0x4, 0x8}, 0x100000, 0xf, 0x7, './file0'}, {{0x40, 0x4, 0x5}, 0x1, 0xe4, 0x7, './file0'}, {{0x0, 0x0, 0x1}, 0x1, 0x33, 0x7, './file0'}, {{0x0, 0x1, 0x8}, 0x0, 0x6, 0x7, './file0'}]}}, 0x2a6) madvise(&(0x7f0000205000/0x2000)=nil, 0x2000, 0x0) syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x22340200, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1m28.884771236s ago: executing program 9 (id=6292): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0xff00, 0x48b, &(0x7f0000000000)={0x1, 'sit0\x00', 0x4}, 0x18) 1m28.577488831s ago: executing program 9 (id=6295): r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x88040, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f00000001c0)='\\$:$\'\x00') socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x8) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0xd01c3, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x4) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000019080)=0x30) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000040)=0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='7', 0x1) fsopen(&(0x7f0000000180)='proc\x00', 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000080)=0x2) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000840)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000800)={&(0x7f00000003c0)={0x3f8, r6, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IE_PROBE_RESP={0x168, 0x7f, [@fast_bss_trans={0x37, 0x97, {0x8, 0x4, "d4184265395c0122b6de6a0757413d31", "b3d933d742977ad00eede8caa20f464261b0fd16209d88f0e02347fd9013a3e0", "b3ffc821c6c9e8507936e68bfa03d353515380dc208c66b7fff1bb25f1810c09", [{0x1, 0x10, "968c81cdbb741d9edeb4598888687028"}, {0x3, 0x2, "8e5c"}, {0x3, 0x10, "467e7f6406dacf5071a2ba6d01cc4bef"}, {0x4, 0x1b, "78663c7f3baabf48589c7ff2981fbf43af82672087d1eefceafbc7"}]}}, @ht={0x2d, 0x1a, {0x800, 0x2, 0x5, 0x0, {0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x1, 0x1}, 0x1, 0xa7e, 0x8}}, @preq={0x82, 0x72, {{0x0, 0x1}, 0x1, 0x0, 0x9, @broadcast, 0x3, @void, 0x9, 0x1000, 0x8, [{{0x1, 0x0, 0x1}}, {{}, @broadcast, 0x2}, {{0x0, 0x0, 0x1}, @broadcast, 0xcc2}, {{0x0, 0x0, 0x1}, @broadcast, 0x7}, {{}, @device_a, 0x8}, {{0x0, 0x0, 0x1}, @device_b, 0xb}, {{0x1, 0x0, 0x1}, @broadcast, 0x2}, {{}, @device_a, 0x7fffffff}]}}, @dsss={0x3, 0x1, 0x64}, @random={0x4, 0x36, "fbd0ef2939dc3b39ad9ad5c036c8da8f6db8b2147b5cbc942c12fb0332ef9d7f62e1a3b7be0eb5d4eb73dfaa71cb7111c3e8637fa950"}]}, @NL80211_ATTR_BEACON_HEAD={0x274, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x2}, @device_b, @device_b, @initial, {0x6, 0x3a3}}, 0x33f, @default, 0x70e5, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1, 0x28}, @val={0x4, 0x6, {0x0, 0xd, 0x1, 0x4}}, @void, @void, @val={0x25, 0x3, {0x1, 0xb0, 0x80}}, @val={0x2a, 0x1}, @void, @void, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x0, 0x1, 0x0, 0xff, 0x40}}, @void, [{0xdd, 0x3d, "f9db219a07e24b74d5a90b802e2d92f8ccf70777a4bb63b6e931ad91ff9222c701ecdab600d042ea514715263a7febf0df4cf067a332dba7ca4f7dd518"}, {0xdd, 0xd1, "c8809d78a0a2bb79815c43fe5286a2dbd15a9aa653b3d8e22c29b185dfe8374d7c31d4fd4448cd7fa0d69fe0ec84ccd81732003b50f219da7f762fa93558e2b509f42b6ac56ffd13fc25d5da97a48adb32ef9c8d5cb55fd8f1fd309fff4b512ac2c75516dd913faec33565cc1ee9e677c718c3b587144eacacbb7a3a2f2c807c01fa97d5ea005348498d0bfa22ca58ebd5be7520c73824a0d016554ab1aba21f80fd6770dc588fd2726ba6352321fd844ef358141c418380724a76a0d2f642ae26c5422acf632d4df0938a08f48498839e"}, {0xdd, 0x3c, "00260d7199c196e1822fad608007fd1555ec331c1ac8638021a25eff8a4c070a15133db9089143e51663b8c82c18fa8a3d6469a3815abd36872d088f"}, {0xdd, 0x3c, "af74a3d5aa1700be25a20a45b090a6450d85fd24a4533dec99e95e9287a840998580eaea922ea5894cdce1791d01cd7fef959b533f4f2a5b2d4b7943"}, {0xdd, 0x14, "2af5b90a69c43b0d88f5a5d05ee04f988631cc7b"}, {0xdd, 0x82, "3f069c6f52ad11f75377404c9aa5f26d1fb44eaac48cd78f5e7810550b59d2884087f60a88689b19bcb790445d7c35044c13153d7702856e89f468afbdabc3f17ab5c6c5acf78473449a7d63af08345a68830f50cc3994c9fc8ac3daf713095a9a7c3a6c382403ab92ab9cb49f0f6faba884d411c8ad78476e9a14f057005e8840b9"}]}}]}, 0x3f8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1m28.480929245s ago: executing program 38 (id=6295): r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x88040, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f00000001c0)='\\$:$\'\x00') socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x8) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0xd01c3, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x4) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000019080)=0x30) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000040)=0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='7', 0x1) fsopen(&(0x7f0000000180)='proc\x00', 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000080)=0x2) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000840)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000800)={&(0x7f00000003c0)={0x3f8, r6, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IE_PROBE_RESP={0x168, 0x7f, [@fast_bss_trans={0x37, 0x97, {0x8, 0x4, "d4184265395c0122b6de6a0757413d31", "b3d933d742977ad00eede8caa20f464261b0fd16209d88f0e02347fd9013a3e0", "b3ffc821c6c9e8507936e68bfa03d353515380dc208c66b7fff1bb25f1810c09", [{0x1, 0x10, "968c81cdbb741d9edeb4598888687028"}, {0x3, 0x2, "8e5c"}, {0x3, 0x10, "467e7f6406dacf5071a2ba6d01cc4bef"}, {0x4, 0x1b, "78663c7f3baabf48589c7ff2981fbf43af82672087d1eefceafbc7"}]}}, @ht={0x2d, 0x1a, {0x800, 0x2, 0x5, 0x0, {0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x1, 0x1}, 0x1, 0xa7e, 0x8}}, @preq={0x82, 0x72, {{0x0, 0x1}, 0x1, 0x0, 0x9, @broadcast, 0x3, @void, 0x9, 0x1000, 0x8, [{{0x1, 0x0, 0x1}}, {{}, @broadcast, 0x2}, {{0x0, 0x0, 0x1}, @broadcast, 0xcc2}, {{0x0, 0x0, 0x1}, @broadcast, 0x7}, {{}, @device_a, 0x8}, {{0x0, 0x0, 0x1}, @device_b, 0xb}, {{0x1, 0x0, 0x1}, @broadcast, 0x2}, {{}, @device_a, 0x7fffffff}]}}, @dsss={0x3, 0x1, 0x64}, @random={0x4, 0x36, "fbd0ef2939dc3b39ad9ad5c036c8da8f6db8b2147b5cbc942c12fb0332ef9d7f62e1a3b7be0eb5d4eb73dfaa71cb7111c3e8637fa950"}]}, @NL80211_ATTR_BEACON_HEAD={0x274, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x2}, @device_b, @device_b, @initial, {0x6, 0x3a3}}, 0x33f, @default, 0x70e5, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1, 0x28}, @val={0x4, 0x6, {0x0, 0xd, 0x1, 0x4}}, @void, @void, @val={0x25, 0x3, {0x1, 0xb0, 0x80}}, @val={0x2a, 0x1}, @void, @void, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x0, 0x1, 0x0, 0xff, 0x40}}, @void, [{0xdd, 0x3d, "f9db219a07e24b74d5a90b802e2d92f8ccf70777a4bb63b6e931ad91ff9222c701ecdab600d042ea514715263a7febf0df4cf067a332dba7ca4f7dd518"}, {0xdd, 0xd1, "c8809d78a0a2bb79815c43fe5286a2dbd15a9aa653b3d8e22c29b185dfe8374d7c31d4fd4448cd7fa0d69fe0ec84ccd81732003b50f219da7f762fa93558e2b509f42b6ac56ffd13fc25d5da97a48adb32ef9c8d5cb55fd8f1fd309fff4b512ac2c75516dd913faec33565cc1ee9e677c718c3b587144eacacbb7a3a2f2c807c01fa97d5ea005348498d0bfa22ca58ebd5be7520c73824a0d016554ab1aba21f80fd6770dc588fd2726ba6352321fd844ef358141c418380724a76a0d2f642ae26c5422acf632d4df0938a08f48498839e"}, {0xdd, 0x3c, "00260d7199c196e1822fad608007fd1555ec331c1ac8638021a25eff8a4c070a15133db9089143e51663b8c82c18fa8a3d6469a3815abd36872d088f"}, {0xdd, 0x3c, "af74a3d5aa1700be25a20a45b090a6450d85fd24a4533dec99e95e9287a840998580eaea922ea5894cdce1791d01cd7fef959b533f4f2a5b2d4b7943"}, {0xdd, 0x14, "2af5b90a69c43b0d88f5a5d05ee04f988631cc7b"}, {0xdd, 0x82, "3f069c6f52ad11f75377404c9aa5f26d1fb44eaac48cd78f5e7810550b59d2884087f60a88689b19bcb790445d7c35044c13153d7702856e89f468afbdabc3f17ab5c6c5acf78473449a7d63af08345a68830f50cc3994c9fc8ac3daf713095a9a7c3a6c382403ab92ab9cb49f0f6faba884d411c8ad78476e9a14f057005e8840b9"}]}}]}, 0x3f8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1m21.6108686s ago: executing program 1 (id=6356): r0 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0x2c, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000001000)}, 0x400000}) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x1, 0x1, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@userptr={0x0, 0x1, 0x400000, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000401000)}, 0x400000}) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f00000001c0)=0x2) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000200)=0x1) 1m21.460474807s ago: executing program 1 (id=6357): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1df) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) write$P9_RLOCK(r0, 0x0, 0x0) r1 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setresuid(0x0, r2, r2) mount$overlay(0x0, &(0x7f0000000180)='./sys/module/kvm/parameters/nx_huge_pages\x00', &(0x7f00000001c0), 0x80, &(0x7f0000002240)={[], [{@euid_lt={'euid<', r2}}, {@fsmagic={'fsmagic', 0x3d, 0xffff}}]}) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) write(r3, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xfff3, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002300)=@delqdisc={0xf4, 0x25, 0x8, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x2, 0xa}, {0x6, 0x4}, {0x0, 0xe}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x80000001}, @TCA_STAB={0xc8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x6, 0x1ff, 0x5, 0x0, 0x9, 0xffff58f1, 0x2}}, {0x8, 0x2, [0xb, 0x5]}}, {{0x1c, 0x1, {0x93, 0x8, 0x6, 0x8000, 0x0, 0x1000, 0x2, 0x3}}, {0xa, 0x2, [0x688, 0x3ff, 0x1]}}, {{0x1c, 0x1, {0xe, 0x1, 0x7, 0x200, 0x2, 0x4, 0x6, 0x2}}, {0x8, 0x2, [0x2, 0x1ff]}}, {{0x1c, 0x1, {0x5, 0x40, 0x3ff, 0x8000, 0x2, 0x5, 0xa1d6, 0x8}}, {0x14, 0x2, [0x3, 0xb, 0x400, 0x4, 0x4, 0x1, 0x2, 0x8e81]}}, {{0x1c, 0x1, {0x3, 0x8, 0x100, 0x0, 0x2, 0x0, 0x8, 0x2}}, {0x8, 0x2, [0xb638, 0xc]}}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x810}, 0x20840) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000180)='syzkaller0\x00', 0xb) sendto$inet(r7, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x2, 0x4e20, @loopback}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020) epoll_wait(r3, &(0x7f0000002280)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x215) 1m21.460273212s ago: executing program 1 (id=6358): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff}, [@generic={0xd7, 0xa, 0x0, 0x0, 0x40}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0xd}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x2}, 0x94) 1m21.380747238s ago: executing program 1 (id=6359): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0xc001) syz_emit_vhci(0x0, 0x6) r1 = socket$unix(0x1, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2, 0x0, 0x48}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)="14", 0x2, 0x0, 0x4}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) (fail_nth: 4) 1m21.260586933s ago: executing program 1 (id=6360): unshare(0x22020600) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, 0x0, &(0x7f00000000c0)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[], 0x67) syz_emit_vhci(0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x10001, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x2000000000000) syz_emit_vhci(0x0, 0xc) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x41, 0xb2}) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, 0x0, 0x20000804) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0xa, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c00", @ANYRES8=r5], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) syz_emit_vhci(0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, 0x0, 0x0) r6 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, 0x0, 0x0) 1m20.760595662s ago: executing program 1 (id=6372): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x841, 0x0) r1 = socket$netlink(0x10, 0x3, 0x7) ioprio_set$pid(0x2, 0x0, 0x6000) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/pm_print_times', 0x20206, 0xac) sendfile(r2, r2, 0x0, 0x68) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x1, 0x0, &(0x7f00000004c0)) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x8) 1m11.690604762s ago: executing program 4 (id=6498): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/module/acpi/parameters/trace_state\x00', 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@newtaction={0x1c4, 0x30, 0x4, 0x70bd2b, 0x0, {}, [{0x1b0, 0x1, [@m_tunnel_key={0x60, 0x0, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x7fffffff}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @loopback}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}]}, {0x4}, {0xc}, {0xc}}}, @m_xt={0x9c, 0xb, 0x0, 0x0, {{0x7}, {0x5c, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}]}, {0x19, 0x6, "b0c788834491db917a9a992c9833c17cff3b436365"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mirred={0xb0, 0x1008, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x1, 0x20000000, 0x3, 0xcb8c}, 0x4}}]}, {0x61, 0x6, "a611650f26be9cd7202da28cac16d8d11fdb771f20ce375a34e3dba9f39705a673d73efe471bb4fd0d2fbed092b7ee194fceec6f36a9fd75fe5dedc20749c4f127768202979a913d3c140ae84f54b33f261beb283c20852cc5b0027f9a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x1c4}}, 0x4000000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000080)={0x29, 0x0, [{0x296, 0x0, 0x2}]}) write(r0, 0x0, 0x0) mkdirat(r0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) (async) unlinkat(r0, &(0x7f0000000040)='./tracing\x00', 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000240)={0x2, 0x2, 0xa, 0x9, 0x9, 0x8001, 0xcda, 0x3}, &(0x7f0000000280)=0x20) mount(0x0, &(0x7f00000023c0)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0xdc) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r5) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r6, 0x638, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20008040) ioctl$OCFS2_IOC_GROUP_EXTEND(r5, 0x5220, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000002c0)={0x7f, "2706056341cc38079ca7bb1db28661d3f81ea55a43c68f2906fd6296c96636e1"}) 1m11.544119889s ago: executing program 4 (id=6499): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='sessname=s+ device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) (fail_nth: 5) 1m11.457738136s ago: executing program 4 (id=6500): syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x7d}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8b19, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00#\f!\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000180)={'veth1_to_hsr\x00', @broadcast}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) read$fb(0xffffffffffffffff, &(0x7f0000000000)=""/40, 0x28) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000480)) r2 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r2, 0x28, 0x6, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x28, 0x64, 0x0, 0x8, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x606f, 0x0, 0xe7}}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x7fda8000) read(r0, &(0x7f00000000c0)=""/175, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) 1m11.200844888s ago: executing program 4 (id=6501): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys\x00', 0x1, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4048aecb, &(0x7f00000006c0)={0x7, 0x0, [{0xc0000000, 0xffffffff, 0x0, 0x7fffffff, 0x40006, 0x6, 0x1}, {0xc0000001, 0x4, 0x0, 0x11, 0x27, 0x7, 0xf8d1}, {0xd, 0x8, 0x0, 0xffff, 0x7fffffff, 0x2, 0x2}, {0x80000008, 0x10, 0x1, 0x0, 0xdf4, 0x6, 0x80000001}, {0xd, 0x2bb, 0x0, 0xa, 0x3, 0x80000001, 0x400}, {0x80000000, 0x100, 0x0, 0x2, 0x1, 0x2000001, 0x7}, {0x80000001, 0x200, 0x6, 0x68be, 0x8, 0x2}]}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f00000000c0)={'wg2\x00', 0x0}) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1/file0\x00', 0x6a) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) chdir(&(0x7f0000000140)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000100)={'tunl0\x00', r6, 0x7808, 0x8, 0xfe02, 0x3, {{0x18, 0x4, 0x0, 0xf, 0x60, 0x65, 0x0, 0x1, 0x29, 0x0, @private=0xa010101, @local, {[@lsrr={0x83, 0x3, 0x93}, @rr={0x7, 0x23, 0x6a, [@broadcast, @empty, @rand_addr=0x64010102, @private=0xa010100, @multicast2, @dev={0xac, 0x14, 0x14, 0x1d}, @broadcast, @private=0xa010100]}, @end, @timestamp_addr={0x44, 0x24, 0xbc, 0x1, 0xb, [{@loopback, 0xe}, {@multicast2, 0x7}, {@loopback, 0x92b}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}]}, @noop]}}}}}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000280)={0x1, 0x0, [{0x3, 0x5, 0x0, 0x0, @adapter={0x5, 0x7fffffffffffffff, 0x8000000000000001, 0x80, 0x3}}]}) write(r0, &(0x7f0000000600)='sessname=s+ device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) ioctl$KVM_CREATE_GUEST_MEMFD(r0, 0xc040aed4, &(0x7f0000000200)={0x3, 0x35}) 1m11.010827141s ago: executing program 4 (id=6502): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000020000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c890}, 0x0) setuid(0xee01) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x7, 0x0, 0x0, 0x0, 0x63, 0x11, 0x59}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195}, 0x23) 1m10.890602923s ago: executing program 4 (id=6503): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) (async, rerun: 64) sendmsg$netlink(r0, &(0x7f0000000c80)={0x0, 0xffffffffffffffb6, &(0x7f0000000b40)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x18}], 0x1, 0x0, 0x0, 0x8000}, 0x0) (rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x30, 0x3f, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x2fc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x5, 0x23, 0x0, 0x0, @str='\x00'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) setns(0xc9, 0x0) (async, rerun: 32) r4 = socket(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYBLOB="0300000000000000280012800a0001"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="0400000004000000040000000500010000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0040000000f4ff00000000000000000000000000e9a65a0000000000"], 0x50) (async, rerun: 32) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) (rerun: 32) ioctl$TCSETA(r6, 0x5406, &(0x7f0000000040)={0x513, 0x7fff, 0x5, 0x40, 0x19, "9880fcbf8deed943"}) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000e000000000000000d00000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000950000e800000000c063eec8278ad20498717ecba86c95181239a46a6e5187d9e3395ab35c3de134f98a5f44069b10d80d294caae6ca5282f82abb529c09f2a93e320434bd57115414c96316243a82aeecbc09efa4ac93323da80c7e43566ad1f40db9b5a30c82877a6a25f156f8d39f3fcf6d3c3293cb47ac402189b472bdb6cc32f043c8b4d18a2127335399b9b3f979877c59b67f29472096ee57164702ce"], &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94) (rerun: 32) 1m10.820780239s ago: executing program 39 (id=6503): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) (async, rerun: 64) sendmsg$netlink(r0, &(0x7f0000000c80)={0x0, 0xffffffffffffffb6, &(0x7f0000000b40)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x18}], 0x1, 0x0, 0x0, 0x8000}, 0x0) (rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x30, 0x3f, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x2fc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x5, 0x23, 0x0, 0x0, @str='\x00'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) setns(0xc9, 0x0) (async, rerun: 32) r4 = socket(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYBLOB="0300000000000000280012800a0001"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="0400000004000000040000000500010000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0040000000f4ff00000000000000000000000000e9a65a0000000000"], 0x50) (async, rerun: 32) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) (rerun: 32) ioctl$TCSETA(r6, 0x5406, &(0x7f0000000040)={0x513, 0x7fff, 0x5, 0x40, 0x19, "9880fcbf8deed943"}) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000e000000000000000d00000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000950000e800000000c063eec8278ad20498717ecba86c95181239a46a6e5187d9e3395ab35c3de134f98a5f44069b10d80d294caae6ca5282f82abb529c09f2a93e320434bd57115414c96316243a82aeecbc09efa4ac93323da80c7e43566ad1f40db9b5a30c82877a6a25f156f8d39f3fcf6d3c3293cb47ac402189b472bdb6cc32f043c8b4d18a2127335399b9b3f979877c59b67f29472096ee57164702ce"], &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94) (rerun: 32) 1m5.65470127s ago: executing program 40 (id=6372): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x841, 0x0) r1 = socket$netlink(0x10, 0x3, 0x7) ioprio_set$pid(0x2, 0x0, 0x6000) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/pm_print_times', 0x20206, 0xac) sendfile(r2, r2, 0x0, 0x68) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x1, 0x0, &(0x7f00000004c0)) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x8) 18.078382349s ago: executing program 2 (id=6985): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="780000001000030400000000000000000000740059e6991d527925c54c867311aa6d7062002453045f27c104608e280db178f6a66a65872995ca4bd1edf17efaa163405a06dfbe557b3056b4554dfe4a7a5e919e98657698393d08b4f7205889d43f821ec71ea43115a30c8ff60829b411b8d2a60d27de5df11ff7fc4eb4de9291c76be4fcde937073d5ce4698dda7e60a69df328b5ba50a2cbd", @ANYRESOCT=r1, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r1], 0x78}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000780)={'erspan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}]}, 0x38}}, 0x0) r5 = socket$kcm(0x2, 0x3, 0x2) r6 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x74) fchdir(r7) ioctl$USBDEVFS_CONNECTINFO(r7, 0x40085511, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000480)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x2b}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1f, 0x31, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e20, 0x4e20, 0x1d, 0x0, @gue={{0x2, 0x0, 0x0, 0xff, 0x100}, "b68ed34f131c03e57e518e4d4d"}}}}, 0x3f) 4.292943681s ago: executing program 2 (id=6988): setns(0xc9, 0x40000000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x5e0}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 4.291017551s ago: executing program 2 (id=6991): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='.', 0x1}], 0x1}}], 0x2, 0x8020) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000180)={0x0, 0xe, 0x1, [0x2]}, 0xa) (fail_nth: 7) 4.283737942s ago: executing program 2 (id=6996): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) open_by_handle_at(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="15000000fe"], 0x1) mount(&(0x7f00000000c0)=@filename='none\x00', &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000002060b0100000000000000000000000005000100070000000900020073797a30000000000c00078008000640000000000500050002000000050004000000000016000300686173683a6e6574"], 0x5c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000003540)={'wlan0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="01002cbd7000fcdbdf252e00000008000300", @ANYRES32=r6, @ANYBLOB="0a0034000202020202020000040015010400cc0004004900"], 0x34}, 0x1, 0x0, 0x0, 0x24000000}, 0xc090) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070601080008000000000000000000000500010006"], 0x1c}}, 0x8050) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000a0000000500010006000200050004000000000011000300686173683a69702c706f727400e83c042a4529d00cd1800000050005000a0000000900020073797a3100000000c1d196efd95d1c42e5de7e54b58aa56067d21485c412d952cc7b7a00de6e74"], 0x4c}}, 0x2) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe800000000050e10cae9d64883409238978efd900000000e5ffff0500bb060004400e1f00000500070088000000060005404e220000dcb63c4d7f951fe4c5c048cf89f01f936ce756787a5d465bbcb9c7b21077d546c8ea34f02661788d68ba514a55f4230f185f9b49e86cf3aa569697bbd43dbc9a00bc5b4856ed6e7dabcdb2e2c22a354998f52e0a5b8f343ad804f44502dc8fca0cefa9e96b351e896a246f9133cee166d8434a9f4c77ec421fb42cedc081251698d9c40000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) recvmsg(r3, &(0x7f0000003400)={0x0, 0x0, 0x0}, 0x10000) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x1}]}) r11 = semget$private(0x0, 0x6, 0x1b5) semop(r11, &(0x7f0000000200)=[{0x0, 0xffff, 0x1000}], 0x1) semctl$SETVAL(r11, 0x0, 0x10, &(0x7f00000000c0)=0xd3) socket$inet6_udp(0xa, 0x2, 0x0) close_range(r10, 0xffffffffffffffff, 0x600000000000000) r12 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/midi1_first_group\x00', 0x801, 0x0) write(r12, &(0x7f0000000040)="32835fa7a68cfd0fcbbe", 0xa) 3.359377667s ago: executing program 2 (id=7007): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9545dd30a3731677b2d0bfa91", 0x0, 0x27cb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xb4, &(0x7f000000cf3d)=""/180, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xfffffffe}, 0x10, 0x0, r1}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r3, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20) recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0) recvfrom$inet6(r0, &(0x7f0000000140)=""/26, 0x1a, 0x40010001, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x9}}, './proc/net/rpc/nfsd.export/channel/file0\x00'}) setsockopt$inet_MCAST_LEAVE_GROUP(r5, 0x0, 0x2d, &(0x7f0000000380)={0xff, {{0x2, 0x4e22, @empty}}}, 0x88) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x1ff) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountstats\x00') read$FUSE(r6, &(0x7f0000003240)={0x2020}, 0x2020) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/net/rpc/nfsd.export/channel\x00', 0x90800, 0x0) write(r7, &(0x7f0000000540)='client1 ./export 2147483647 139264 65534 65534 1\n', 0x31) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./proc/net/rpc/nfsd.export/channel/file0\x00', 0x1) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r8, 0x0, 0x22, &(0x7f00000000c0)=0x1, 0x4) bind$inet(r8, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) 2.939981426s ago: executing program 8 (id=7013): r0 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0x2) write(0xffffffffffffffff, &(0x7f0000001000)="4f4f4f4fffffffff000000010000028000", 0x11) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0x2c, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000001000)}, 0x400000}) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x1, 0x1, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@userptr={0x0, 0x1, 0x400000, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000401000)}, 0x400000}) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f00000001c0)=0x2) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000200)=0x1) 2.830694392s ago: executing program 8 (id=7014): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1df) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_connect) r1 = socket$inet_smc(0x2b, 0x1, 0x0) write$P9_RLOCK(r1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) write(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) read$FUSE(r2, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x320081a, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$AUTOFS_IOC_FAIL(r5, 0x4c81, 0xffffffe4) pread64(r4, 0x0, 0x0, 0x4eb) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0) ioctl$NILFS_IOCTL_GET_CPINFO(r3, 0x80186e82, &(0x7f0000002400)={&(0x7f0000002240)=[{0x0, 0x0, 0x6, 0x7, 0x3, 0x2, 0x5, 0x791c}, {0xac66a9ab44cfb57d, 0x0, 0x1, 0xfa, 0x80000001, 0x6, 0x1, 0x4}, {0x1, 0x0, 0x3, 0x1, 0x9, 0x4, 0x10001, 0x4}, {0x2, 0x0, 0x2f8, 0x0, 0x8000, 0xffffffff00000000, 0xfffffffffffeffff, 0x5}, {0x3, 0x0, 0x2, 0x3ff, 0x5, 0xb313, 0x3, 0x7}, {0x1, 0x0, 0x13f00000000000, 0x7fffffff, 0x9, 0x8, 0x2, 0xffffffffffff0710}, {0x2, 0x0, 0xfffffffffffffff3, 0x3e1e, 0x5, 0x200, 0xb, 0x7fff}], 0x7, 0x38, 0x1, 0x400000000000}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r6, &(0x7f0000000140)='never', 0x5) 2.418882818s ago: executing program 2 (id=7015): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="a000000000010006000000000000000001000002140016400000000200000007000001ff0000000808000c40000000023c001980080002004803000008000200000800000800020004000000080002004808000008000100480c000008000100000a00000800020002000000080015400000000214000d8008000200e000000208000200ac1414aa080008400000000706001240000300000800154000000003"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x1080) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) rt_sigprocmask(0x2, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = dup3(r3, r5, 0x80000) dup(r6) read(r5, &(0x7f00000014c0)=""/4096, 0x1000) timer_settime(r4, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r6, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f00000006c0)={0x7, 0x0, [{0xc0000000, 0xffffffff, 0x0, 0x7fffffff, 0x40006, 0x6, 0x1}, {0xc0000001, 0x4, 0x0, 0x11, 0x27, 0x7, 0xf8d1}, {0xd, 0x8, 0x0, 0xffff, 0x7fffffff, 0x2, 0x2}, {0x80000008, 0x10, 0x1, 0x0, 0xdf4, 0x6, 0x80000001}, {0xd, 0x2bb, 0x0, 0xa, 0x1ff, 0x80000001, 0x400}, {0x80000000, 0x100, 0x0, 0x2, 0x1, 0x2000001, 0x7}, {0x80000001, 0x200, 0x6, 0x68be, 0x8, 0x2}]}) 1.485020544s ago: executing program 8 (id=7017): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xadd4}]}]}, 0x28}}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x2a, &(0x7f0000000240)=0xc, 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000380)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000580)={{r0}, r6, 0x2, @unused=[0x354000000, 0x9, 0x1, 0x7f], @subvolid=0x5}) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="6800000042000100000000000000000003010000060000002600010000112233445566778899aabb0800450000140000000001840000010203040506070800000c00020006002000080000000c0003"], 0x68}}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:05.0/remove\x00', 0x1, 0x0) write(r7, &(0x7f0000000300)='1', 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r7, &(0x7f0000000180)={&(0x7f0000000040)={0x1d, r8}, 0x10, &(0x7f0000000140)={&(0x7f0000000080)={0x0, 0x410, 0x0, {0x77359400}, {}, {0x2}, 0x1, @can={{0x3}, 0x6, 0x1, 0x0, 0x0, "087d4b31f271059b"}}, 0x48}, 0x1, 0x0, 0x0, 0x8804}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet(0x2, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xadd4}]}]}, 0x28}}, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$sock_int(r5, 0x1, 0x2a, &(0x7f0000000240)=0xc, 0x4) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000380)) (async) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000580)={{r0}, r6, 0x2, @unused=[0x354000000, 0x9, 0x1, 0x7f], @subvolid=0x5}) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="6800000042000100000000000000000003010000060000002600010000112233445566778899aabb0800450000140000000001840000010203040506070800000c00020006002000080000000c0003"], 0x68}}, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:05.0/remove\x00', 0x1, 0x0) (async) write(r7, &(0x7f0000000300)='1', 0x1) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) sendmsg$can_bcm(r7, &(0x7f0000000180)={&(0x7f0000000040)={0x1d, r8}, 0x10, &(0x7f0000000140)={&(0x7f0000000080)={0x0, 0x410, 0x0, {0x77359400}, {}, {0x2}, 0x1, @can={{0x3}, 0x6, 0x1, 0x0, 0x0, "087d4b31f271059b"}}, 0x48}, 0x1, 0x0, 0x0, 0x8804}, 0x0) (async) 1.369804241s ago: executing program 0 (id=7018): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x102, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) unlinkat(r0, 0x0, 0x200) set_mempolicy(0x4005, &(0x7f0000000040)=0x13, 0x6) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) (fail_nth: 7) 1.259762479s ago: executing program 0 (id=7019): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x7, 0x0, 0x0, 0x0, 0x63, 0x11, 0x59}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195}, 0x23) (fail_nth: 7) 1.120364399s ago: executing program 8 (id=7020): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ef) (async, rerun: 32) lsetxattr$security_capability(&(0x7f0000000340)='./file1\x00', &(0x7f00000002c0), 0x0, 0x0, 0x0) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) (async) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="d800000000000000f9ffffffffffffff00000000000000000200000000000000020000000000000000010000000000000300000008000000060000000000000005000000000000000400000000000000fc000000000000800300001ef70000000000000000000000ffffff7f58000000040000000090000009000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="010000800100000000000000000000000000200037050000000000002b000000008000003a2d285cc980000009c30000f3397cd86d4d928d14d3a461b60245898556c20600000000002b133b0801000000000000"], 0x0, 0x0, 0x0}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x2) ioctl(r0, 0x40104d05, &(0x7f0000000a00)) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) (async, rerun: 64) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x120) (async) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) (async) truncate(&(0x7f0000000140)='./file2\x00', 0xe2) 1.120243398s ago: executing program 0 (id=7021): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000140)="213a6d795f726561645f6d737231202d12725236bdb1a498e4c59cb27a1671339a254188fb2a8b47b404f1a79012dbca52da81eadc8cb45d0e4e833ca479b79b6342a3b4a9b5173ce58618a56e1fef", 0x4f) 1.036991074s ago: executing program 0 (id=7022): r0 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0x2) write(0xffffffffffffffff, &(0x7f0000001000)="4f4f4f4fffffffff000000010000028000", 0x11) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0x2c, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000001000)}, 0x400000}) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x1, 0x1, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@userptr={0x0, 0x1, 0x400000, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000401000)}, 0x400000}) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f00000001c0)=0x2) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000200)=0x1) 840.390502ms ago: executing program 8 (id=7024): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r1], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$netlink(0x10, 0x3, 0x1) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, 0x0, &(0x7f0000000040)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newlink={0x40, 0x10, 0x1, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r3, 0x0, 0x8}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x12, 0x1f}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x11}, 0x0) setsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f00000000c0)=0x253, 0x4) 805.53017ms ago: executing program 0 (id=7025): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000002440), 0x2000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000002480)=0xe) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES32=0x0], 0x48) syz_clone3(&(0x7f00000003c0)={0x80, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=0x0, {0x9}, &(0x7f00000001c0)=""/144, 0x90, &(0x7f0000000280)=""/156, &(0x7f0000000380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0], 0x6}, 0x58) syz_open_procfs(r1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) sendmsg$NFC_CMD_LLC_SET_PARAMS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x31c}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x8}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x324}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0xe}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000841}, 0x4080) socket$pppl2tp(0x18, 0x1, 0x1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0001, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="450a000000ff03ffc311a400100100001800000000000000000000000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x66}, 0x94) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="020200020c00000000000000000000000200080008000000fd0000000000000002000100000000000000050001000040030006000000000002000000ac1414ff000000000000000003000500330028000200"/96], 0x60}, 0x1, 0x7}, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000340)=0x1) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, 0x0) write$ppp(r2, &(0x7f0000000440)="2b434e1ea400aa710272bd4c7743bd454b9d4f81e0de8d1cab1a252253c32173ac21841aceb0f03b12c9e7a89ca462e2ec507b5c7cdd477d473860062d07e6320cdde824e9052fd51d44bc735410da8d434e8abc3f809d3fb312fa468a41b425a160bccfcad22c5f90e76523f2c438be", 0x70) 728.862075ms ago: executing program 7 (id=7026): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x2, 0x2, 0xfec00000, 0x2000, &(0x7f0000f8b000/0x2000)=nil}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xd000, 0x2000, &(0x7f0000c7d000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r4, 0x0) mlock(&(0x7f0000f45000/0x3000)=nil, 0x3000) socket(0x840000000002, 0x3, 0xff) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x2, 0x4, 0x200000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) 654.401718ms ago: executing program 8 (id=7027): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = fsopen(&(0x7f0000000100)='udf\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000000c0)='gid', &(0x7f0000000140)='udf\x00', 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r2, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x54, 0x2, 0x6, 0x104, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x1}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000080}, 0x80) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x130, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) 621.766063ms ago: executing program 0 (id=7028): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = memfd_create(&(0x7f0000000640)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\xedh\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\x1c\x83\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\x00\x00\x00\x9d\xd8\x9b\x80\xabt\x82\x83\xb4\xf1\xba_\xf0v\x8a\xf8a>\x8f\xf6\xcc\x93*\xf47F\x7f\xe6\xf3T\xf0{\xae&\xc2m6\xdaF\xae\x8b\x06\x86\xce\xc0\x1e`K\x89\xb8F\xff\xb4\xd8\xbe\xf10x0}) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x80}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008800}, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r1, 0xc0844123, 0x0) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) mmap$snddsp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x21010, r1, 0xf000) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000024000300b08073e8d44e91e3da922c22438244bb885c69e2432e4079b568fdd03a4ddc6e1400020077673000"/70], 0x4c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 0s ago: executing program 7 (id=7033): r0 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0x2) write(0xffffffffffffffff, &(0x7f0000001000)="4f4f4f4fffffffff000000010000028000000168", 0x14) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0x2c, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000001000)}, 0x400000}) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x1, 0x1, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@userptr={0x0, 0x1, 0x400000, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000401000)}, 0x400000}) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f00000001c0)=0x2) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000200)=0x1) kernel console output (not intermixed with test programs): atadv_slave_1 [ 620.604684][ T5600] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.604747][ T5600] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.604767][ T5600] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.604785][ T5600] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.011875][T24340] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 621.207220][T24347] sd 0:0:0:0: PR command failed: 1026 [ 621.207270][T24347] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 621.207310][T24347] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 621.328887][T24351] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 621.385024][T24351] loop6: detected capacity change from 0 to 2640 [ 621.411788][ T5731] buffer_io_error: 25 callbacks suppressed [ 621.411872][ T5731] Buffer I/O error on dev loop6, logical block 0, async page read [ 621.412808][ T5731] Buffer I/O error on dev loop6, logical block 0, async page read [ 621.419924][ T5731] Buffer I/O error on dev loop6, logical block 0, async page read [ 621.420834][ T5731] Buffer I/O error on dev loop6, logical block 0, async page read [ 621.421933][ T5731] Buffer I/O error on dev loop6, logical block 0, async page read [ 621.501735][T24360] ubi0: attaching mtd0 [ 621.530396][T24360] ubi0: scanning is finished [ 621.530456][T24360] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 621.627798][T24373] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 4, id = 0 [ 621.846065][T24360] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 621.939857][T24376] FAULT_INJECTION: forcing a failure. [ 621.939857][T24376] name failslab, interval 1, probability 0, space 0, times 0 [ 621.939948][T24376] CPU: 2 UID: 0 PID: 24376 Comm: syz.2.6774 Tainted: G L syzkaller #0 PREEMPT(full) [ 621.939989][T24376] Tainted: [L]=SOFTLOCKUP [ 621.939998][T24376] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 621.940009][T24376] Call Trace: [ 621.940017][T24376] [ 621.940025][T24376] dump_stack_lvl+0x100/0x190 [ 621.940058][T24376] should_fail_ex.cold+0x5/0xa [ 621.940085][T24376] should_failslab+0xc2/0x120 [ 621.940111][T24376] __kmalloc_cache_noprof+0x91/0x6d0 [ 621.940142][T24376] ? tcf_block_get_ext+0x3c8/0x1950 [ 621.940177][T24376] tcf_block_get_ext+0x3c8/0x1950 [ 621.940207][T24376] ? rtnetlink_rcv_msg+0x3c9/0xe90 [ 621.940231][T24376] ? netlink_rcv_skb+0x159/0x420 [ 621.940253][T24376] tcf_block_get+0xa8/0x100 [ 621.940281][T24376] ? __pfx_tcf_block_get+0x10/0x10 [ 621.940417][T24376] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 621.940444][T24376] ? lockdep_init_map_type+0x5c/0x250 [ 621.940472][T24376] ? __pfx_multiq_init+0x10/0x10 [ 621.940585][T24376] multiq_init+0x70/0x2b0 [ 621.940692][T24376] ? __pfx_multiq_init+0x10/0x10 [ 621.940721][T24376] qdisc_create+0x47b/0x1060 [ 621.940747][T24376] tc_modify_qdisc+0xdcf/0x2120 [ 621.940787][T24376] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 621.940903][T24376] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 621.940924][T24376] rtnetlink_rcv_msg+0x3c9/0xe90 [ 621.940949][T24376] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 621.941005][T24376] ? ref_tracker_free+0x37e/0x6c0 [ 621.941082][T24376] netlink_rcv_skb+0x159/0x420 [ 621.941101][T24376] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 621.941120][T24376] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 621.941148][T24376] ? netlink_deliver_tap+0x1ae/0xcc0 [ 621.941178][T24376] netlink_unicast+0x585/0x850 [ 621.941199][T24376] ? __pfx_netlink_unicast+0x10/0x10 [ 621.941226][T24376] netlink_sendmsg+0x8b0/0xda0 [ 621.941248][T24376] ? __pfx_netlink_sendmsg+0x10/0x10 [ 621.941267][T24376] ? selinux_socket_sendmsg+0x198/0x2f0 [ 621.941300][T24376] ____sys_sendmsg+0xa4d/0xbe0 [ 621.941321][T24376] ? __pfx_netlink_sendmsg+0x10/0x10 [ 621.941347][T24376] ? __pfx_____sys_sendmsg+0x10/0x10 [ 621.941376][T24376] ? ring_buffer_unlock_commit+0x2e7/0x700 [ 621.941406][T24376] ___sys_sendmsg+0x190/0x1e0 [ 621.941434][T24376] ? __pfx____sys_sendmsg+0x10/0x10 [ 621.941474][T24376] ? find_held_lock+0x2b/0x80 [ 621.941515][T24376] __sys_sendmsg+0x160/0x210 [ 621.941535][T24376] ? __pfx___sys_sendmsg+0x10/0x10 [ 621.941568][T24376] do_syscall_64+0x123/0x790 [ 621.941593][T24376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.941612][T24376] RIP: 0033:0x7f4ddb59e159 [ 621.941627][T24376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 621.941646][T24376] RSP: 002b:00007f4ddc4c2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 621.941663][T24376] RAX: ffffffffffffffda RBX: 00007f4ddb825fa0 RCX: 00007f4ddb59e159 [ 621.941673][T24376] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000003 [ 621.941686][T24376] RBP: 00007f4ddb63503b R08: 0000000000000000 R09: 0000000000000000 [ 621.941696][T24376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 621.941705][T24376] R13: 00007f4ddb826038 R14: 00007f4ddb825fa0 R15: 00007ffd394ed618 [ 621.941729][T24376] [ 622.106069][T24384] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3944 sclass=netlink_route_socket pid=24384 comm=syz.0.6778 [ 622.844573][ T42] usb 7-1: new full-speed USB device number 104 using dummy_hcd [ 622.999540][ T42] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 623.006254][ T42] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 623.006329][ T42] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 623.006376][ T42] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.230681][ T42] usb 7-1: usb_control_msg returned -32 [ 623.234578][ T42] usbtmc 7-1:16.0: can't read capabilities [ 623.266596][T24426] FAULT_INJECTION: forcing a failure. [ 623.266596][T24426] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 623.266669][T24426] CPU: 2 UID: 0 PID: 24426 Comm: syz.0.6792 Tainted: G L syzkaller #0 PREEMPT(full) [ 623.266695][T24426] Tainted: [L]=SOFTLOCKUP [ 623.266702][T24426] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 623.266712][T24426] Call Trace: [ 623.266719][T24426] [ 623.266726][T24426] dump_stack_lvl+0x100/0x190 [ 623.266756][T24426] should_fail_ex.cold+0x5/0xa [ 623.266778][T24426] ? prepare_alloc_pages+0x16d/0x5b0 [ 623.266805][T24426] should_fail_alloc_page+0xeb/0x140 [ 623.266831][T24426] prepare_alloc_pages+0x1f0/0x5b0 [ 623.266856][T24426] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 623.266890][T24426] ? clockevents_program_event+0x1ef/0x820 [ 623.266921][T24426] ? __lock_acquire+0x5c0/0x1f40 [ 623.266942][T24426] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 623.266971][T24426] ? __pfx___css_rstat_updated+0x10/0x10 [ 623.266993][T24426] ? find_held_lock+0x2b/0x80 [ 623.267024][T24426] ? __lock_acquire+0x5c0/0x1f40 [ 623.267041][T24426] ? __css_rstat_updated+0x1ce/0x590 [ 623.267070][T24426] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 623.267092][T24426] ? policy_nodemask+0xed/0x4f0 [ 623.267117][T24426] alloc_pages_mpol+0x201/0x550 [ 623.267141][T24426] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 623.267164][T24426] ? find_held_lock+0x2b/0x80 [ 623.267191][T24426] folio_alloc_mpol_noprof+0x36/0x260 [ 623.267218][T24426] vma_alloc_folio_noprof+0xed/0x1d0 [ 623.267243][T24426] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 623.267267][T24426] ? rcu_read_unlock+0x2d/0xb0 [ 623.267297][T24426] ? rcu_read_unlock+0x2d/0xb0 [ 623.267329][T24426] do_wp_page+0x1b15/0x45c0 [ 623.267357][T24426] ? lock_acquire+0x1d1/0x380 [ 623.267376][T24426] ? __pfx_do_wp_page+0x10/0x10 [ 623.267400][T24426] ? do_raw_spin_lock+0x128/0x260 [ 623.267423][T24426] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 623.267452][T24426] __handle_mm_fault+0x1cd2/0x2f60 [ 623.267483][T24426] ? __pfx___handle_mm_fault+0x10/0x10 [ 623.267507][T24426] ? vm_normal_page+0x1d1/0x380 [ 623.267527][T24426] ? __pfx_vm_normal_page+0x10/0x10 [ 623.267547][T24426] ? find_held_lock+0x2b/0x80 [ 623.267572][T24426] ? find_held_lock+0x2b/0x80 [ 623.267595][T24426] ? follow_page_pte+0x479/0x1050 [ 623.267631][T24426] handle_mm_fault+0x363/0xa20 [ 623.267662][T24426] __get_user_pages+0x8ae/0x2c30 [ 623.267693][T24426] ? __pfx___get_user_pages+0x10/0x10 [ 623.267721][T24426] populate_vma_page_range+0x267/0x3f0 [ 623.267744][T24426] ? __pfx_populate_vma_page_range+0x10/0x10 [ 623.267765][T24426] ? __pfx_find_vma_intersection+0x10/0x10 [ 623.267793][T24426] __mm_populate+0x107/0x3a0 [ 623.267816][T24426] ? __pfx___mm_populate+0x10/0x10 [ 623.267840][T24426] ? up_write+0x2dc/0x5b0 [ 623.267864][T24426] do_mlock+0x3f0/0x800 [ 623.267895][T24426] ? __pfx_do_mlock+0x10/0x10 [ 623.267922][T24426] ? event_triggers_call+0x337/0x4d0 [ 623.267949][T24426] ? trace_event_buffer_commit+0x20a/0xa80 [ 623.267980][T24426] __x64_sys_mlock+0xce/0x120 [ 623.268007][T24426] ? __pfx___x64_sys_mlock+0x10/0x10 [ 623.268037][T24426] ? rcu_is_watching+0x13/0xc0 [ 623.268063][T24426] do_syscall_64+0x123/0x790 [ 623.268088][T24426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.268107][T24426] RIP: 0033:0x7f81a839e159 [ 623.268122][T24426] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 623.268139][T24426] RSP: 002b:00007f81a9292028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 623.268158][T24426] RAX: ffffffffffffffda RBX: 00007f81a8625fa0 RCX: 00007f81a839e159 [ 623.268170][T24426] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000200000c00000 [ 623.268181][T24426] RBP: 00007f81a9292090 R08: 0000000000000000 R09: 0000000000000000 [ 623.268192][T24426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 623.268203][T24426] R13: 00007f81a8626038 R14: 00007f81a8625fa0 R15: 00007ffd998674f8 [ 623.268229][T24426] [ 623.489035][T24434] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6795'. [ 623.529552][T24437] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input30 [ 623.574787][T24438] overlayfs: failed lookup in lower (newroot/205, name='file2', err=-40): overlapping layers [ 623.608665][ T43] kauditd_printk_skb: 1834 callbacks suppressed [ 623.608726][ T43] audit: type=1400 audit(5100020483.758:5673): avc: denied { read } for pid=5123 comm="acpid" name="event3" dev="devtmpfs" ino=4336 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 623.612229][ T43] audit: type=1400 audit(5100020483.758:5674): avc: denied { read open } for pid=5123 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=4336 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 623.613360][ T43] audit: type=1400 audit(5100020483.758:5675): avc: denied { ioctl } for pid=5123 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=4336 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 623.620100][ T43] audit: type=1400 audit(5100020483.768:5676): avc: denied { ioctl } for pid=5123 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=4336 ioctlcmd=0x4521 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 623.623612][ T43] audit: type=1400 audit(5100020483.768:5677): avc: denied { ioctl } for pid=5123 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=4336 ioctlcmd=0x4506 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 623.624638][ T43] audit: type=1400 audit(5100020483.768:5678): avc: denied { create } for pid=24442 comm="syz.0.6797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 623.628340][ T43] audit: type=1400 audit(5100020483.778:5679): avc: denied { setopt } for pid=24442 comm="syz.0.6797" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 623.628898][ T43] audit: type=1400 audit(5100020483.778:5680): avc: denied { setopt } for pid=24442 comm="syz.0.6797" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 623.631430][T24444] FAULT_INJECTION: forcing a failure. [ 623.631430][T24444] name failslab, interval 1, probability 0, space 0, times 0 [ 623.631456][T24444] CPU: 0 UID: 0 PID: 24444 Comm: syz.0.6797 Tainted: G L syzkaller #0 PREEMPT(full) [ 623.631480][T24444] Tainted: [L]=SOFTLOCKUP [ 623.631487][T24444] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 623.631497][T24444] Call Trace: [ 623.631504][T24444] [ 623.631511][T24444] dump_stack_lvl+0x100/0x190 [ 623.631542][T24444] should_fail_ex.cold+0x5/0xa [ 623.631563][T24444] ? __pfx_audit_log_vformat+0x10/0x10 [ 623.631595][T24444] should_failslab+0xc2/0x120 [ 623.631618][T24444] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 623.631638][T24444] ? sidtab_sid2str_get+0x84/0x670 [ 623.631660][T24444] ? sidtab_sid2str_get+0x17a/0x670 [ 623.631685][T24444] kmemdup_noprof+0x29/0x60 [ 623.631713][T24444] sidtab_sid2str_get+0x17a/0x670 [ 623.631737][T24444] security_sid_to_context_core+0x373/0x700 [ 623.631777][T24444] avc_audit_post_callback+0x109/0x910 [ 623.631804][T24444] ? __pfx_audit_log_lsm_data+0x10/0x10 [ 623.631824][T24444] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 623.631844][T24444] ? skb_put+0x138/0x180 [ 623.631869][T24444] ? audit_log_n_string+0x2a3/0x5a0 [ 623.631894][T24444] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 623.631915][T24444] common_lsm_audit+0x23f/0x2b0 [ 623.631936][T24444] ? __pfx_common_lsm_audit+0x10/0x10 [ 623.631954][T24444] ? avc_denied+0x14a/0x190 [ 623.631981][T24444] slow_avc_audit+0x186/0x210 [ 623.632004][T24444] ? __pfx_slow_avc_audit+0x10/0x10 [ 623.632027][T24444] ? find_held_lock+0x2b/0x80 [ 623.632052][T24444] ? avc_has_perm_noaudit+0x2b3/0x3b0 [ 623.632084][T24444] avc_has_perm+0x1a6/0x1e0 [ 623.632108][T24444] ? __pfx_avc_has_perm+0x10/0x10 [ 623.632138][T24444] sock_has_perm+0x253/0x2f0 [ 623.632163][T24444] ? __pfx_sock_has_perm+0x10/0x10 [ 623.632197][T24444] ? __fget_files+0x34/0x3d0 [ 623.632219][T24444] ? find_held_lock+0x2b/0x80 [ 623.632243][T24444] ? __fget_files+0x215/0x3d0 [ 623.632268][T24444] selinux_socket_setsockopt+0x41/0x80 [ 623.632295][T24444] security_socket_setsockopt+0x9b/0x230 [ 623.632328][T24444] do_sock_setsockopt+0x53/0x1d0 [ 623.632353][T24444] __sys_setsockopt+0x195/0x220 [ 623.632377][T24444] __x64_sys_setsockopt+0xbd/0x160 [ 623.632396][T24444] ? trace_syscall_enter+0xd6/0x120 [ 623.632419][T24444] do_syscall_64+0x123/0x790 [ 623.632445][T24444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.632464][T24444] RIP: 0033:0x7f81a839e159 [ 623.632480][T24444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 623.632498][T24444] RSP: 002b:00007f81a9292028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 623.632516][T24444] RAX: ffffffffffffffda RBX: 00007f81a8625fa0 RCX: 00007f81a839e159 [ 623.632528][T24444] RDX: 00000000000000d3 RSI: 0000000000000029 RDI: 0000000000000003 [ 623.632540][T24444] RBP: 00007f81a9292090 R08: 000000000000005c R09: 0000000000000000 [ 623.632551][T24444] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 623.632562][T24444] R13: 00007f81a8626038 R14: 00007f81a8625fa0 R15: 00007ffd998674f8 [ 623.632588][T24444] [ 623.632714][ T43] audit: type=1400 audit(5100020483.778:5681): avc: denied { setopt } for pid=24442 comm="syz.0.6797" lport=58 ssid=149 tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 623.741247][ T43] audit: type=1400 audit(5100020483.888:5682): avc: denied { unmount } for pid=21614 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 624.048510][T24456] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 624.095718][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.097824][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.159960][T24459] ip_tables: iptables: counters copy to user failed while replacing table [ 624.170422][T24459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 624.170761][T24459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 624.834768][T24472] FAULT_INJECTION: forcing a failure. [ 624.834768][T24472] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 624.834862][T24472] CPU: 2 UID: 0 PID: 24472 Comm: syz.7.6807 Tainted: G L syzkaller #0 PREEMPT(full) [ 624.834900][T24472] Tainted: [L]=SOFTLOCKUP [ 624.834908][T24472] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 624.834918][T24472] Call Trace: [ 624.834925][T24472] [ 624.834932][T24472] dump_stack_lvl+0x100/0x190 [ 624.834963][T24472] should_fail_ex.cold+0x5/0xa [ 624.834989][T24472] _copy_to_user+0x32/0xd0 [ 624.835020][T24472] simple_read_from_buffer+0xcb/0x170 [ 624.835045][T24472] proc_fail_nth_read+0x1af/0x230 [ 624.835069][T24472] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 624.835092][T24472] ? rw_verify_area+0xce/0x6d0 [ 624.835117][T24472] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 624.835139][T24472] vfs_read+0x1e4/0xb40 [ 624.835157][T24472] ? lock_acquire+0x1d1/0x380 [ 624.835176][T24472] ? __fget_files+0x34/0x3d0 [ 624.835198][T24472] ? __pfx_vfs_read+0x10/0x10 [ 624.835214][T24472] ? find_held_lock+0x2b/0x80 [ 624.835238][T24472] ? __fget_files+0x215/0x3d0 [ 624.835264][T24472] ? __fget_files+0x21f/0x3d0 [ 624.835293][T24472] ksys_read+0x12a/0x250 [ 624.835310][T24472] ? __pfx_ksys_read+0x10/0x10 [ 624.835325][T24472] ? trace_syscall_enter+0xcc/0x120 [ 624.835361][T24472] do_syscall_64+0x123/0x790 [ 624.835386][T24472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.835405][T24472] RIP: 0033:0x7f6abd15e98e [ 624.835421][T24472] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 624.835438][T24472] RSP: 002b:00007f6abb3f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 624.835456][T24472] RAX: ffffffffffffffda RBX: 00007f6abb3f66c0 RCX: 00007f6abd15e98e [ 624.835468][T24472] RDX: 000000000000000f RSI: 00007f6abb3f60a0 RDI: 0000000000000005 [ 624.835480][T24472] RBP: 00007f6abb3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 624.835491][T24472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 624.835502][T24472] R13: 00007f6abd426038 R14: 00007f6abd425fa0 R15: 00007ffe19605218 [ 624.835527][T24472] [ 625.206310][T24486] netlink: 'syz.0.6812': attribute type 14 has an invalid length. [ 625.232298][T24490] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 625.246217][T24490] romfs: unable to set blocksize [ 625.246217][T24490] [ 625.610384][ T5872] usb 7-1: USB disconnect, device number 104 [ 626.353797][T24520] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 626.539619][T24524] syzkaller0: entered promiscuous mode [ 626.539705][T24524] syzkaller0: entered allmulticast mode [ 626.784585][ T5984] usb 13-1: new full-speed USB device number 20 using dummy_hcd [ 626.937824][ T5984] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 626.944813][ T5984] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 626.944883][ T5984] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 626.944939][ T5984] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.160252][ T5984] usb 13-1: usb_control_msg returned -32 [ 627.160323][ T5984] usbtmc 13-1:16.0: can't read capabilities [ 628.336415][T24496] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 628.487003][T24530] FAULT_INJECTION: forcing a failure. [ 628.487003][T24530] name failslab, interval 1, probability 0, space 0, times 0 [ 628.487056][T24530] CPU: 2 UID: 0 PID: 24530 Comm: syz.2.6827 Tainted: G L syzkaller #0 PREEMPT(full) [ 628.487074][T24530] Tainted: [L]=SOFTLOCKUP [ 628.487078][T24530] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 628.487084][T24530] Call Trace: [ 628.487088][T24530] [ 628.487093][T24530] dump_stack_lvl+0x100/0x190 [ 628.487113][T24530] should_fail_ex.cold+0x5/0xa [ 628.487128][T24530] should_failslab+0xc2/0x120 [ 628.487142][T24530] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 628.487156][T24530] ? key_alloc+0x423/0x1310 [ 628.487170][T24530] kmemdup_noprof+0x29/0x60 [ 628.487186][T24530] key_alloc+0x423/0x1310 [ 628.487201][T24530] ? __kmalloc_noprof+0x350/0x840 [ 628.487212][T24530] ? __pfx_key_alloc+0x10/0x10 [ 628.487224][T24530] ? hook_cred_prepare+0x177/0x370 [ 628.487238][T24530] keyring_alloc+0x44/0xc0 [ 628.487255][T24530] lookup_user_key+0xcfe/0x1300 [ 628.487293][T24530] ? __pfx_lookup_user_key+0x10/0x10 [ 628.487320][T24530] ? lock_acquire+0x1d1/0x380 [ 628.487336][T24530] ? __might_fault+0xc5/0x140 [ 628.487364][T24530] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 628.487398][T24530] ? strncpy_from_user+0x19d/0x2d0 [ 628.487418][T24530] __do_sys_add_key+0x2a6/0x460 [ 628.487433][T24530] ? __pfx___do_sys_add_key+0x10/0x10 [ 628.487446][T24530] ? find_held_lock+0x2b/0x80 [ 628.487466][T24530] do_syscall_64+0x123/0x790 [ 628.487481][T24530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.487492][T24530] RIP: 0033:0x7f4ddb59e159 [ 628.487502][T24530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 628.487513][T24530] RSP: 002b:00007f4ddc4c2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 628.487526][T24530] RAX: ffffffffffffffda RBX: 00007f4ddb825fa0 RCX: 00007f4ddb59e159 [ 628.487533][T24530] RDX: ffff0f0000000000 RSI: 0000000000000000 RDI: 0000200000000240 [ 628.487540][T24530] RBP: 00007f4ddb63503b R08: fffffffffffffffe R09: 0000000000000000 [ 628.487547][T24530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 628.487553][T24530] R13: 00007f4ddb826038 R14: 00007f4ddb825fa0 R15: 00007ffd394ed618 [ 628.487567][T24530] [ 628.582977][T24527] overlayfs: upper fs does not support file handles, falling back to index=off. [ 628.615091][ T43] kauditd_printk_skb: 427 callbacks suppressed [ 628.615147][ T43] audit: type=1400 audit(5100020488.768:6110): avc: denied { ioctl } for pid=24526 comm="syz.7.6826" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 628.720028][ T43] audit: type=1400 audit(5100020488.868:6111): avc: denied { prog_load } for pid=24534 comm="syz.2.6829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 628.726860][ T43] audit: type=1400 audit(5100020488.868:6112): avc: denied { bpf } for pid=24534 comm="syz.2.6829" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 628.726908][ T43] audit: type=1400 audit(5100020488.868:6113): avc: denied { prog_load } for pid=24534 comm="syz.2.6829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 628.726983][ T43] audit: type=1400 audit(5100020488.868:6114): avc: denied { bpf } for pid=24534 comm="syz.2.6829" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 628.727018][ T43] audit: type=1400 audit(5100020488.868:6115): avc: denied { perfmon } for pid=24534 comm="syz.2.6829" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 628.727052][ T43] audit: type=1400 audit(5100020488.868:6116): avc: denied { perfmon } for pid=24534 comm="syz.2.6829" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 628.727087][ T43] audit: type=1400 audit(5100020488.878:6117): avc: denied { perfmon } for pid=24534 comm="syz.2.6829" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 628.734114][ T43] audit: type=1400 audit(5100020488.878:6118): avc: denied { perfmon } for pid=24534 comm="syz.2.6829" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 628.734180][ T43] audit: type=1400 audit(5100020488.878:6119): avc: denied { bpf } for pid=24534 comm="syz.2.6829" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 629.254874][T24543] FAULT_INJECTION: forcing a failure. [ 629.254874][T24543] name failslab, interval 1, probability 0, space 0, times 0 [ 629.254949][T24543] CPU: 2 UID: 0 PID: 24543 Comm: syz.0.6833 Tainted: G L syzkaller #0 PREEMPT(full) [ 629.254985][T24543] Tainted: [L]=SOFTLOCKUP [ 629.254993][T24543] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 629.255002][T24543] Call Trace: [ 629.255008][T24543] [ 629.255015][T24543] dump_stack_lvl+0x100/0x190 [ 629.255042][T24543] should_fail_ex.cold+0x5/0xa [ 629.255065][T24543] should_failslab+0xc2/0x120 [ 629.255085][T24543] __kmalloc_noprof+0xfc/0x840 [ 629.255101][T24543] ? rcu_is_watching+0x13/0xc0 [ 629.255123][T24543] ? tomoyo_realpath_from_path+0xb6/0x690 [ 629.255148][T24543] tomoyo_realpath_from_path+0xb6/0x690 [ 629.255175][T24543] tomoyo_check_open_permission+0x2af/0x3c0 [ 629.255220][T24543] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 629.255256][T24543] ? hook_file_open+0x248/0x8e0 [ 629.255302][T24543] tomoyo_file_open+0x6b/0x90 [ 629.255326][T24543] security_file_open+0xb5/0x1e0 [ 629.255348][T24543] do_dentry_open+0x588/0x14d0 [ 629.255374][T24543] vfs_open+0x82/0x3f0 [ 629.255401][T24543] path_openat+0x19fa/0x2440 [ 629.255427][T24543] ? __pfx_path_openat+0x10/0x10 [ 629.255457][T24543] do_file_open+0x20e/0x430 [ 629.255481][T24543] ? __pfx_do_file_open+0x10/0x10 [ 629.255521][T24543] ? _raw_spin_unlock+0x28/0x50 [ 629.255540][T24543] ? alloc_fd+0x471/0x7a0 [ 629.255570][T24543] do_sys_openat2+0x10f/0x1e0 [ 629.255594][T24543] ? __pfx_do_sys_openat2+0x10/0x10 [ 629.255629][T24543] __x64_sys_openat+0x12d/0x210 [ 629.255654][T24543] ? __pfx___x64_sys_openat+0x10/0x10 [ 629.255728][T24543] ? find_held_lock+0x2b/0x80 [ 629.255754][T24543] ? trace_syscall_enter+0xcc/0x120 [ 629.255788][T24543] do_syscall_64+0x123/0x790 [ 629.255813][T24543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.255832][T24543] RIP: 0033:0x7f81a839e159 [ 629.255848][T24543] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 629.255866][T24543] RSP: 002b:00007f81a9292028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 629.255885][T24543] RAX: ffffffffffffffda RBX: 00007f81a8625fa0 RCX: 00007f81a839e159 [ 629.255897][T24543] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 629.255909][T24543] RBP: 00007f81a9292090 R08: 0000000000000000 R09: 0000000000000000 [ 629.255920][T24543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 629.255931][T24543] R13: 00007f81a8626038 R14: 00007f81a8625fa0 R15: 00007ffd998674f8 [ 629.255958][T24543] [ 629.258414][T24543] ERROR: Out of memory at tomoyo_realpath_from_path. [ 629.337094][T24546] FAULT_INJECTION: forcing a failure. [ 629.337094][T24546] name failslab, interval 1, probability 0, space 0, times 0 [ 629.337116][T24546] CPU: 2 UID: 0 PID: 24546 Comm: syz.7.6831 Tainted: G L syzkaller #0 PREEMPT(full) [ 629.337132][T24546] Tainted: [L]=SOFTLOCKUP [ 629.337136][T24546] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 629.337143][T24546] Call Trace: [ 629.337147][T24546] [ 629.337152][T24546] dump_stack_lvl+0x100/0x190 [ 629.337173][T24546] should_fail_ex.cold+0x5/0xa [ 629.337189][T24546] should_failslab+0xc2/0x120 [ 629.337205][T24546] kmem_cache_alloc_noprof+0x92/0x6a0 [ 629.337217][T24546] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 629.337237][T24546] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 629.337257][T24546] mmu_topup_memory_caches+0x25/0x170 [ 629.337270][T24546] kvm_mmu_load+0xe8/0x2580 [ 629.337283][T24546] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 629.337300][T24546] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 629.337353][T24546] ? __pfx_kvm_mmu_load+0x10/0x10 [ 629.337367][T24546] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 629.337379][T24546] ? kvm_check_and_inject_events+0x896/0x1050 [ 629.337394][T24546] vcpu_run+0x395d/0x5e80 [ 629.337411][T24546] ? mark_held_locks+0x40/0x70 [ 629.337428][T24546] ? __pfx_vcpu_run+0x10/0x10 [ 629.337443][T24546] ? lock_acquire+0x1d1/0x380 [ 629.337454][T24546] ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1dd0 [ 629.337469][T24546] ? fpu_swap_kvm_fpstate+0x217/0x460 [ 629.337485][T24546] ? __local_bh_enable_ip+0xa5/0x120 [ 629.337499][T24546] ? kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 629.337513][T24546] kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 629.337530][T24546] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 629.337543][T24546] ? lock_acquire+0x1d1/0x380 [ 629.337554][T24546] ? do_raw_write_lock+0x11e/0x260 [ 629.337568][T24546] ? find_held_lock+0x2b/0x80 [ 629.337584][T24546] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 629.337598][T24546] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 629.337616][T24546] kvm_vcpu_ioctl+0x730/0x1700 [ 629.337632][T24546] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 629.337647][T24546] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 629.337661][T24546] ? do_vfs_ioctl+0x226/0x13e0 [ 629.337672][T24546] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 629.337682][T24546] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 629.337696][T24546] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 629.337710][T24546] ? __fget_files+0x34/0x3d0 [ 629.337729][T24546] ? selinux_file_ioctl+0x13b/0x290 [ 629.337740][T24546] ? selinux_file_ioctl+0xb6/0x290 [ 629.337751][T24546] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 629.337767][T24546] __x64_sys_ioctl+0x18e/0x210 [ 629.337779][T24546] do_syscall_64+0x123/0x790 [ 629.337794][T24546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.337807][T24546] RIP: 0033:0x7f6abd19e159 [ 629.337817][T24546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 629.337827][T24546] RSP: 002b:00007f6abb3d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 629.337838][T24546] RAX: ffffffffffffffda RBX: 00007f6abd426090 RCX: 00007f6abd19e159 [ 629.337846][T24546] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 629.337853][T24546] RBP: 00007f6abb3d5090 R08: 0000000000000000 R09: 0000000000000000 [ 629.337859][T24546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 629.337866][T24546] R13: 00007f6abd426128 R14: 00007f6abd426090 R15: 00007ffe19605218 [ 629.337880][T24546] [ 629.532968][ T5829] usb 13-1: USB disconnect, device number 20 [ 629.925714][T24566] FAULT_INJECTION: forcing a failure. [ 629.925714][T24566] name failslab, interval 1, probability 0, space 0, times 0 [ 629.925794][T24566] CPU: 2 UID: 0 PID: 24566 Comm: syz.8.6843 Tainted: G L syzkaller #0 PREEMPT(full) [ 629.925843][T24566] Tainted: [L]=SOFTLOCKUP [ 629.925850][T24566] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 629.925860][T24566] Call Trace: [ 629.925866][T24566] [ 629.925874][T24566] dump_stack_lvl+0x100/0x190 [ 629.925902][T24566] should_fail_ex.cold+0x5/0xa [ 629.925926][T24566] should_failslab+0xc2/0x120 [ 629.925948][T24566] kmem_cache_alloc_noprof+0x92/0x6a0 [ 629.925967][T24566] ? __anon_vma_prepare+0xae/0x5e0 [ 629.925990][T24566] __anon_vma_prepare+0xae/0x5e0 [ 629.926005][T24566] ? __lock_acquire+0x5c0/0x1f40 [ 629.926019][T24566] __vmf_anon_prepare+0x11f/0x250 [ 629.926033][T24566] do_anonymous_page+0x47d/0x2050 [ 629.926053][T24566] ? __pfx_do_anonymous_page+0x10/0x10 [ 629.926068][T24566] ? rcu_read_unlock+0x2d/0xb0 [ 629.926084][T24566] ? rcu_read_unlock+0x2d/0xb0 [ 629.926100][T24566] ? __pte_offset_map+0x179/0x310 [ 629.926114][T24566] __handle_mm_fault+0x1ff3/0x2f60 [ 629.926132][T24566] ? __pfx___handle_mm_fault+0x10/0x10 [ 629.926149][T24566] ? __pfx_mt_find+0x10/0x10 [ 629.926183][T24566] ? find_vma+0xbf/0x140 [ 629.926201][T24566] ? __pfx_find_vma+0x10/0x10 [ 629.926244][T24566] handle_mm_fault+0x363/0xa20 [ 629.926273][T24566] do_user_addr_fault+0x745/0x12f0 [ 629.926303][T24566] exc_page_fault+0x6f/0xd0 [ 629.926326][T24566] asm_exc_page_fault+0x26/0x30 [ 629.926345][T24566] RIP: 0033:0x7fa134960082 [ 629.926360][T24566] Code: 8d 15 49 19 0f 00 48 89 ee 48 89 df e8 87 f2 03 00 48 8b 05 38 2d 29 00 48 83 e8 01 48 39 e8 0f 82 b3 00 00 00 66 0f 6f 0c 24 <4c> 89 6b 20 0f 11 4b 10 48 83 c4 18 48 89 d8 5b 5d 41 5c 41 5d 41 [ 629.926379][T24566] RSP: 002b:00007fa135790d20 EFLAGS: 00010286 [ 629.926396][T24566] RAX: ffffffffffffffff RBX: 00007fa12c000000 RCX: 00007fa13499df57 [ 629.926410][T24566] RDX: 00007fa134a519a7 RSI: 0000000000021000 RDI: 00007fa12c000000 [ 629.926420][T24566] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 629.926432][T24566] R10: 0000000000000022 R11: 0000000000000217 R12: 0000000004000000 [ 629.926443][T24566] R13: 0000000000001000 R14: 00007fa130000000 R15: 0000000001600000 [ 629.926467][T24566] [ 629.926814][T24566] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 629.961178][T24566] netlink: zone id is out of range [ 629.961186][T24566] netlink: zone id is out of range [ 629.961190][T24566] netlink: zone id is out of range [ 629.961194][T24566] netlink: zone id is out of range [ 629.961197][T24566] netlink: zone id is out of range [ 629.961201][T24566] netlink: zone id is out of range [ 629.961399][T24566] netlink: zone id is out of range [ 629.961404][T24566] netlink: zone id is out of range [ 629.961408][T24566] netlink: zone id is out of range [ 629.961411][T24566] netlink: zone id is out of range [ 630.186031][T24581] netlink: 'syz.0.6849': attribute type 1 has an invalid length. [ 630.213434][T24581] bond1: entered promiscuous mode [ 630.216154][T24581] 8021q: adding VLAN 0 to HW filter on device bond1 [ 630.249425][T24581] 8021q: adding VLAN 0 to HW filter on device bond1 [ 630.252862][T24581] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 630.263116][T24581] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 630.270715][T24581] bond1: (slave ip6gre1): making interface the new active one [ 630.274667][T24581] ip6gre1: entered promiscuous mode [ 630.278552][T24581] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 630.576897][T24597] futex_wake_op: syz.2.6855 tries to shift op by -1; fix this program [ 630.590593][T24597] bridge1: entered promiscuous mode [ 630.593077][T24597] bridge1: entered allmulticast mode [ 631.545112][T24630] FAULT_INJECTION: forcing a failure. [ 631.545112][T24630] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 631.545209][T24630] CPU: 1 UID: 0 PID: 24630 Comm: syz.8.6866 Tainted: G L syzkaller #0 PREEMPT(full) [ 631.545236][T24630] Tainted: [L]=SOFTLOCKUP [ 631.545242][T24630] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 631.545248][T24630] Call Trace: [ 631.545253][T24630] [ 631.545258][T24630] dump_stack_lvl+0x100/0x190 [ 631.545277][T24630] should_fail_ex.cold+0x5/0xa [ 631.545307][T24630] _copy_from_user+0x2e/0xd0 [ 631.545325][T24630] btf_new_fd+0x783/0x5bc0 [ 631.545344][T24630] ? cred_has_capability.isra.0+0x2bd/0x300 [ 631.545356][T24630] ? cred_has_capability.isra.0+0x186/0x300 [ 631.545370][T24630] ? __pfx_btf_new_fd+0x10/0x10 [ 631.545386][T24630] ? rcu_is_watching+0x13/0xc0 [ 631.545401][T24630] ? cap_capable+0x107/0x430 [ 631.545417][T24630] ? bpf_lsm_capable+0x9/0x10 [ 631.545432][T24630] ? security_capable+0x80/0x260 [ 631.545448][T24630] ? ns_capable+0xd2/0xf0 [ 631.545460][T24630] __sys_bpf+0x13ef/0x4a30 [ 631.545475][T24630] ? __pfx___sys_bpf+0x10/0x10 [ 631.545487][T24630] ? trace_event_buffer_commit+0x20a/0xa80 [ 631.545510][T24630] ? __pfx_eprobe_trigger_func+0x10/0x10 [ 631.545537][T24630] ? trace_event_buffer_commit+0x20a/0xa80 [ 631.545554][T24630] ? find_held_lock+0x2b/0x80 [ 631.545571][T24630] ? __x64_sys_bpf+0xce/0x140 [ 631.545581][T24630] __x64_sys_bpf+0xce/0x140 [ 631.545592][T24630] ? rcu_is_watching+0x13/0xc0 [ 631.545607][T24630] do_syscall_64+0x123/0x790 [ 631.545623][T24630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.545634][T24630] RIP: 0033:0x7fa13499e159 [ 631.545645][T24630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 631.545655][T24630] RSP: 002b:00007fa135792028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 631.545666][T24630] RAX: ffffffffffffffda RBX: 00007fa134c25fa0 RCX: 00007fa13499e159 [ 631.545673][T24630] RDX: 0000000000000028 RSI: 0000200000000200 RDI: 0000000000000012 [ 631.545681][T24630] RBP: 00007fa134a3503b R08: 0000000000000000 R09: 0000000000000000 [ 631.545689][T24630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 631.545696][T24630] R13: 00007fa134c26038 R14: 00007fa134c25fa0 R15: 00007ffc37387f68 [ 631.545711][T24630] [ 631.694415][T24634] FAULT_INJECTION: forcing a failure. [ 631.694415][T24634] name failslab, interval 1, probability 0, space 0, times 0 [ 631.698282][T24634] CPU: 1 UID: 0 PID: 24634 Comm: syz.8.6868 Tainted: G L syzkaller #0 PREEMPT(full) [ 631.698301][T24634] Tainted: [L]=SOFTLOCKUP [ 631.698305][T24634] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 631.698312][T24634] Call Trace: [ 631.698317][T24634] [ 631.698322][T24634] dump_stack_lvl+0x100/0x190 [ 631.698343][T24634] should_fail_ex.cold+0x5/0xa [ 631.698359][T24634] should_failslab+0xc2/0x120 [ 631.698388][T24634] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 631.698401][T24634] ? __d_alloc+0x35/0xa50 [ 631.698419][T24634] __d_alloc+0x35/0xa50 [ 631.698435][T24634] d_alloc+0x4a/0x1e0 [ 631.698451][T24634] lookup_one_qstr_excl+0x171/0x250 [ 631.698468][T24634] ? mnt_get_write_access+0x52/0x2f0 [ 631.698486][T24634] __start_renaming+0x16d/0x520 [ 631.698506][T24634] filename_renameat2+0x538/0xa60 [ 631.698526][T24634] ? __pfx_filename_renameat2+0x10/0x10 [ 631.698543][T24634] ? lock_acquire+0x1d1/0x380 [ 631.698555][T24634] ? __might_fault+0xc5/0x140 [ 631.698572][T24634] ? __might_fault+0xc5/0x140 [ 631.698595][T24634] ? do_getname+0x191/0x390 [ 631.698613][T24634] __x64_sys_rename+0x81/0xb0 [ 631.698629][T24634] do_syscall_64+0x123/0x790 [ 631.698645][T24634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.698657][T24634] RIP: 0033:0x7fa13499e159 [ 631.698667][T24634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 631.698678][T24634] RSP: 002b:00007fa135792028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 631.698689][T24634] RAX: ffffffffffffffda RBX: 00007fa134c25fa0 RCX: 00007fa13499e159 [ 631.698697][T24634] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000200000000180 [ 631.698704][T24634] RBP: 00007fa135792090 R08: 0000000000000000 R09: 0000000000000000 [ 631.698711][T24634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 631.698717][T24634] R13: 00007fa134c26038 R14: 00007fa134c25fa0 R15: 00007ffc37387f68 [ 631.698732][T24634] [ 631.946726][T24644] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6872'. [ 631.964295][T24640] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6871'. [ 631.964430][T24640] bridge_slave_1: left allmulticast mode [ 631.964444][T24640] bridge_slave_1: left promiscuous mode [ 631.964670][T24640] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.972555][T24640] bridge_slave_0: left allmulticast mode [ 631.972570][T24640] bridge_slave_0: left promiscuous mode [ 631.972722][T24640] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.156174][T24651] EXT4-fs (nbd2): unable to read superblock [ 632.286488][T24660] loop5: detected capacity change from 0 to 7 [ 632.291268][T24660] loop5: p1 p3 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p2 [ 632.291333][T24660] loop5: partition table partially beyond EOD, truncated [ 632.291453][T24660] loop5: p1 size 512 extends beyond EOD, truncated [ 632.291563][T24659] 8021q: adding VLAN 0 to HW filter on device bond0 [ 632.294466][T24659] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 632.313925][T24660] loop5: p5 size 512 extends beyond EOD, truncated [ 632.330267][T24660] loop5: p7 size 512 extends beyond EOD, truncated [ 632.346919][T24660] loop5: p9 size 512 extends beyond EOD, truncated [ 632.348824][T24659] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 632.349828][T24659] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 632.352168][T24659] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 632.352181][T24659] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 632.358167][T24659] veth1_vlan: left promiscuous mode [ 632.358580][T24660] loop5: p11 size 512 extends beyond EOD, truncated [ 632.358753][T24659] veth0_vlan: left promiscuous mode [ 632.360833][T24659] veth0_vlan: entered promiscuous mode [ 632.363792][T24659] veth1_vlan: entered promiscuous mode [ 632.369469][T24659] veth1_macvtap: left promiscuous mode [ 632.369972][T24659] veth0_macvtap: left promiscuous mode [ 632.370497][T24659] veth0_macvtap: entered promiscuous mode [ 632.370975][T24659] veth1_macvtap: entered promiscuous mode [ 632.371518][T24660] loop5: p13 size 512 extends beyond EOD, truncated [ 632.376189][T24659] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 632.376644][T24659] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 632.377089][T24659] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 632.377565][T24659] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 632.381528][T24660] loop5: p15 size 512 extends beyond EOD, truncated [ 632.384104][T24659] 8021q: adding VLAN 0 to HW filter on device bond1 [ 632.394689][T24660] loop5: p17 size 512 extends beyond EOD, truncated [ 632.400301][T24660] loop5: p19 size 512 extends beyond EOD, truncated [ 632.412665][T24660] loop5: p21 size 512 extends beyond EOD, truncated [ 632.412998][ T111] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.413069][ T111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 632.418824][ T111] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.418869][ T111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 632.419447][T24660] loop5: p23 size 512 extends beyond EOD, truncated [ 632.425469][T24660] loop5: p25 size 512 extends beyond EOD, truncated [ 632.431090][T24660] loop5: p27 size 512 extends beyond EOD, truncated [ 632.440391][T24655] tipc: Started in network mode [ 632.440444][T24655] tipc: Node identity 7f000001, cluster identity 4711 [ 632.440610][T24655] tipc: New replicast peer: 127.0.0.1 [ 632.441313][T24655] tipc: Enabled bearer , priority 10 [ 632.447005][T24660] loop5: p29 size 512 extends beyond EOD, truncated [ 632.454814][ T5960] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.456507][T24660] loop5: p31 size 512 extends beyond EOD, truncated [ 632.462465][T24660] loop5: p33 size 512 extends beyond EOD, truncated [ 632.470519][T24660] loop5: p35 size 512 extends beyond EOD, truncated [ 632.475507][ T5600] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.475649][ T5600] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.475668][ T5600] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.489045][T24660] loop5: p37 size 512 extends beyond EOD, truncated [ 632.498828][T24660] loop5: p39 size 512 extends beyond EOD, truncated [ 632.516114][T24660] loop5: p41 size 512 extends beyond EOD, truncated [ 632.520579][T24660] loop5: p43 size 512 extends beyond EOD, truncated [ 632.534782][T24660] loop5: p45 size 512 extends beyond EOD, truncated [ 632.548173][T24660] loop5: p47 size 512 extends beyond EOD, truncated [ 632.555902][T24660] loop5: p49 size 512 extends beyond EOD, truncated [ 632.569564][T24660] loop5: p51 size 512 extends beyond EOD, truncated [ 632.578264][T24660] loop5: p53 size 512 extends beyond EOD, truncated [ 632.587034][T24660] loop5: p55 size 512 extends beyond EOD, truncated [ 632.596728][T24660] loop5: p57 size 512 extends beyond EOD, truncated [ 632.602609][T24660] loop5: p59 size 512 extends beyond EOD, truncated [ 632.609786][T24660] loop5: p61 size 512 extends beyond EOD, truncated [ 632.617445][T24660] loop5: p63 size 512 extends beyond EOD, truncated [ 632.620530][T24669] vivid-000: disconnect [ 632.622630][T24668] vivid-000: reconnect [ 632.624245][T24660] loop5: p65 size 512 extends beyond EOD, truncated [ 632.630468][T24660] loop5: p67 size 512 extends beyond EOD, truncated [ 632.636360][T24660] loop5: p69 size 512 extends beyond EOD, truncated [ 632.647409][T24660] loop5: p71 size 512 extends beyond EOD, truncated [ 632.653523][T24660] loop5: p73 size 512 extends beyond EOD, truncated [ 632.659503][T24660] loop5: p75 size 512 extends beyond EOD, truncated [ 632.665990][T24660] loop5: p77 size 512 extends beyond EOD, truncated [ 632.674724][T24660] loop5: p79 size 512 extends beyond EOD, truncated [ 632.685513][T24660] loop5: p81 size 512 extends beyond EOD, truncated [ 632.696713][T24660] loop5: p83 size 512 extends beyond EOD, truncated [ 632.704911][T24660] loop5: p85 size 512 extends beyond EOD, truncated [ 632.706685][ T58] usb 13-1: new high-speed USB device number 21 using dummy_hcd [ 632.710608][T24660] loop5: p87 size 512 extends beyond EOD, truncated [ 632.717960][T24660] loop5: p89 size 512 extends beyond EOD, truncated [ 632.726190][T24660] loop5: p91 size 512 extends beyond EOD, truncated [ 632.732588][T24660] loop5: p93 size 512 extends beyond EOD, truncated [ 632.738410][T24660] loop5: p95 size 512 extends beyond EOD, truncated [ 632.743391][T24660] loop5: p97 size 512 extends beyond EOD, truncated [ 632.749144][T24660] loop5: p99 size 512 extends beyond EOD, truncated [ 632.754341][T24660] loop5: p101 size 512 extends beyond EOD, truncated [ 632.767412][T24660] loop5: p103 size 512 extends beyond EOD, truncated [ 632.772573][T24660] loop5: p105 size 512 extends beyond EOD, truncated [ 632.780086][T24660] loop5: p107 size 512 extends beyond EOD, truncated [ 632.785463][T24660] loop5: p109 size 512 extends beyond EOD, truncated [ 632.791007][T24660] loop5: p111 size 512 extends beyond EOD, truncated [ 632.793130][T24671] netlink: 64 bytes leftover after parsing attributes in process `syz.7.6883'. [ 632.797162][T24660] loop5: p113 size 512 extends beyond EOD, truncated [ 632.802015][T24660] loop5: p115 size 512 extends beyond EOD, truncated [ 632.806997][T24671] syzkaller1: entered promiscuous mode [ 632.807061][T24671] syzkaller1: entered allmulticast mode [ 632.807609][T24660] loop5: p117 size 512 extends beyond EOD, truncated [ 632.811925][T24660] loop5: p119 size 512 extends beyond EOD, truncated [ 632.823288][T24660] loop5: p121 size 512 extends beyond EOD, truncated [ 632.830282][T24660] loop5: p123 size 512 extends beyond EOD, truncated [ 632.834293][T24660] loop5: p125 size 512 extends beyond EOD, truncated [ 632.838763][T24660] loop5: p127 size 512 extends beyond EOD, truncated [ 632.847061][T24660] loop5: p129 size 512 extends beyond EOD, truncated [ 632.851172][T24660] loop5: p131 size 512 extends beyond EOD, truncated [ 632.858953][ T58] usb 13-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 632.863902][T24660] loop5: p133 size 512 extends beyond EOD, truncated [ 632.868813][T24660] loop5: p135 size 512 extends beyond EOD, truncated [ 632.872807][T24660] loop5: p137 size 512 extends beyond EOD, truncated [ 632.877439][ T58] usb 13-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 632.877539][ T58] usb 13-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 632.878653][T24660] loop5: p139 size 512 extends beyond EOD, truncated [ 632.882705][T24660] loop5: p141 size 512 extends beyond EOD, truncated [ 632.886945][T24660] loop5: p143 size 512 extends beyond EOD, truncated [ 632.891046][T24660] loop5: p145 size 512 extends beyond EOD, truncated [ 632.895559][T24660] loop5: p147 size 512 extends beyond EOD, truncated [ 632.899338][ T58] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.899351][ T58] usb 13-1: Product: syz [ 632.899359][ T58] usb 13-1: Manufacturer: syz [ 632.899367][ T58] usb 13-1: SerialNumber: syz [ 632.899760][T24660] loop5: p149 size 512 extends beyond EOD, truncated [ 632.908915][T24660] loop5: p151 size 512 extends beyond EOD, truncated [ 632.913054][T24660] loop5: p153 size 512 extends beyond EOD, truncated [ 632.921485][T24660] loop5: p155 size 512 extends beyond EOD, truncated [ 632.926123][T24660] loop5: p157 size 512 extends beyond EOD, truncated [ 632.936039][T24660] loop5: p159 size 512 extends beyond EOD, truncated [ 632.940690][T24660] loop5: p161 size 512 extends beyond EOD, truncated [ 632.945543][T24660] loop5: p163 size 512 extends beyond EOD, truncated [ 632.949964][T24660] loop5: p165 size 512 extends beyond EOD, truncated [ 632.954294][T24660] loop5: p167 size 512 extends beyond EOD, truncated [ 632.958804][T24660] loop5: p169 size 512 extends beyond EOD, truncated [ 632.963041][T24660] loop5: p171 size 512 extends beyond EOD, truncated [ 632.970509][T24660] loop5: p173 size 512 extends beyond EOD, truncated [ 632.976580][T24660] loop5: p175 size 512 extends beyond EOD, truncated [ 632.980749][T24660] loop5: p177 size 512 extends beyond EOD, truncated [ 632.990605][T24660] loop5: p179 size 512 extends beyond EOD, truncated [ 633.000059][T24660] loop5: p181 size 512 extends beyond EOD, truncated [ 633.007728][T24660] loop5: p183 size 512 extends beyond EOD, truncated [ 633.016283][T24660] loop5: p185 size 512 extends beyond EOD, truncated [ 633.023944][T24660] loop5: p187 size 512 extends beyond EOD, truncated [ 633.031665][T24660] loop5: p189 size 512 extends beyond EOD, truncated [ 633.039834][T24660] loop5: p191 size 512 extends beyond EOD, truncated [ 633.047108][T24660] loop5: p193 size 512 extends beyond EOD, truncated [ 633.058148][T24660] loop5: p195 size 512 extends beyond EOD, truncated [ 633.068255][T24660] loop5: p197 size 512 extends beyond EOD, truncated [ 633.079438][T24660] loop5: p199 size 512 extends beyond EOD, truncated [ 633.091653][T24660] loop5: p201 size 512 extends beyond EOD, truncated [ 633.102581][T24660] loop5: p203 size 512 extends beyond EOD, truncated [ 633.118297][T24660] loop5: p205 size 512 extends beyond EOD, truncated [ 633.133716][T24660] loop5: p207 size 512 extends beyond EOD, truncated [ 633.138435][T18938] usb 13-1: USB disconnect, device number 21 [ 633.153598][T24660] loop5: p209 size 512 extends beyond EOD, truncated [ 633.168895][T24660] loop5: p211 size 512 extends beyond EOD, truncated [ 633.179824][T24660] loop5: p213 size 512 extends beyond EOD, truncated [ 633.192631][T24660] loop5: p215 size 512 extends beyond EOD, truncated [ 633.209480][T24660] loop5: p217 size 512 extends beyond EOD, truncated [ 633.218330][T24660] loop5: p219 size 512 extends beyond EOD, truncated [ 633.233527][T24660] loop5: p221 size 512 extends beyond EOD, truncated [ 633.245290][T24660] loop5: p223 size 512 extends beyond EOD, truncated [ 633.260094][T24674] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=241 sclass=netlink_route_socket pid=24674 comm=syz.7.6884 [ 633.260209][T24674] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=241 sclass=netlink_route_socket pid=24674 comm=syz.7.6884 [ 633.260272][T24674] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=241 sclass=netlink_route_socket pid=24674 comm=syz.7.6884 [ 633.260334][T24674] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=241 sclass=netlink_route_socket pid=24674 comm=syz.7.6884 [ 633.260388][T24674] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=241 sclass=netlink_route_socket pid=24674 comm=syz.7.6884 [ 633.260437][T24674] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=241 sclass=netlink_route_socket pid=24674 comm=syz.7.6884 [ 633.260485][T24674] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=241 sclass=netlink_route_socket pid=24674 comm=syz.7.6884 [ 633.260536][T24674] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=241 sclass=netlink_route_socket pid=24674 comm=syz.7.6884 [ 633.260583][T24674] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=241 sclass=netlink_route_socket pid=24674 comm=syz.7.6884 [ 633.260631][T24674] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=241 sclass=netlink_route_socket pid=24674 comm=syz.7.6884 [ 633.260845][T24660] loop5: p225 size 512 extends beyond EOD, truncated [ 633.276995][T24660] loop5: p227 size 512 extends beyond EOD, truncated [ 633.282473][T24660] loop5: p229 size 512 extends beyond EOD, truncated [ 633.294966][T24660] loop5: p231 size 512 extends beyond EOD, truncated [ 633.305132][T24660] loop5: p233 size 512 extends beyond EOD, truncated [ 633.318985][T24660] loop5: p235 size 512 extends beyond EOD, truncated [ 633.332730][T24660] loop5: p237 size 512 extends beyond EOD, truncated [ 633.342356][T24660] loop5: p239 size 512 extends beyond EOD, truncated [ 633.351548][T24660] loop5: p241 size 512 extends beyond EOD, truncated [ 633.369089][T24660] loop5: p243 size 512 extends beyond EOD, truncated [ 633.382898][T24660] loop5: p245 size 512 extends beyond EOD, truncated [ 633.383989][T24681] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6885'. [ 633.397177][T24660] loop5: p247 size 512 extends beyond EOD, truncated [ 633.403601][T24660] loop5: p249 size 512 extends beyond EOD, truncated [ 633.416379][T24660] loop5: p251 size 512 extends beyond EOD, truncated [ 633.430322][T24660] loop5: p253 size 512 extends beyond EOD, truncated [ 633.437755][T24686] netlink: 64 bytes leftover after parsing attributes in process `syz.7.6887'. [ 633.440002][T24660] loop5: p255 size 512 extends beyond EOD, truncated [ 633.449377][T24678] syzkaller1: entered promiscuous mode [ 633.449429][T24678] syzkaller1: entered allmulticast mode [ 633.492136][T24686] syzkaller1: entered promiscuous mode [ 633.492184][T24686] syzkaller1: entered allmulticast mode [ 633.565129][ T5984] tipc: Node number set to 2130706433 [ 633.633868][ T43] kauditd_printk_skb: 662 callbacks suppressed [ 633.633968][ T43] audit: type=1400 audit(5100020493.778:6776): avc: denied { read write } for pid=21486 comm="syz-executor" name="loop7" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 633.638219][ T43] audit: type=1400 audit(5100020493.788:6777): avc: denied { read write open } for pid=21486 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 633.639544][ T43] audit: type=1400 audit(5100020493.788:6778): avc: denied { ioctl } for pid=21486 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=663 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 633.666758][ T1355] usb 13-1: new full-speed USB device number 22 using dummy_hcd [ 633.672641][ T43] audit: type=1400 audit(5100020493.818:6779): avc: denied { ioctl } for pid=24682 comm="syz.8.6886" path="/dev/raw-gadget" dev="devtmpfs" ino=848 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 633.682914][ T43] audit: type=1400 audit(5100020493.828:6780): avc: denied { ioctl } for pid=24682 comm="syz.8.6886" path="/dev/raw-gadget" dev="devtmpfs" ino=848 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 633.693389][ T43] audit: type=1400 audit(5100020493.838:6781): avc: denied { ioctl } for pid=24682 comm="syz.8.6886" path="/dev/raw-gadget" dev="devtmpfs" ino=848 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 633.711154][ T43] audit: type=1400 audit(5100020493.858:6782): avc: denied { create } for pid=24689 comm="syz.2.6889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 633.711832][ T43] audit: type=1400 audit(5100020493.858:6783): avc: denied { create } for pid=24689 comm="syz.2.6889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 633.713111][ T43] audit: type=1400 audit(5100020493.858:6784): avc: denied { write } for pid=24689 comm="syz.2.6889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 633.713289][ T43] audit: type=1400 audit(5100020493.858:6785): avc: denied { write } for pid=24689 comm="syz.2.6889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 633.757738][T24694] program syz.7.6890 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 633.824778][ T1355] usb 13-1: device descriptor read/64, error -71 [ 633.846667][T24698] FAULT_INJECTION: forcing a failure. [ 633.846667][T24698] name failslab, interval 1, probability 0, space 0, times 0 [ 633.846798][T24698] CPU: 1 UID: 0 PID: 24698 Comm: syz.7.6892 Tainted: G L syzkaller #0 PREEMPT(full) [ 633.846833][T24698] Tainted: [L]=SOFTLOCKUP [ 633.846840][T24698] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 633.846850][T24698] Call Trace: [ 633.846878][T24698] [ 633.846886][T24698] dump_stack_lvl+0x100/0x190 [ 633.846913][T24698] should_fail_ex.cold+0x5/0xa [ 633.846936][T24698] should_failslab+0xc2/0x120 [ 633.846956][T24698] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 633.846974][T24698] ? sidtab_sid2str_get+0x84/0x670 [ 633.846993][T24698] ? sidtab_sid2str_get+0x17a/0x670 [ 633.847015][T24698] kmemdup_noprof+0x29/0x60 [ 633.847038][T24698] sidtab_sid2str_get+0x17a/0x670 [ 633.847059][T24698] security_sid_to_context_core+0x373/0x700 [ 633.847080][T24698] avc_audit_post_callback+0x1aa/0x910 [ 633.847102][T24698] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 633.847119][T24698] ? skb_put+0x138/0x180 [ 633.847141][T24698] ? audit_log_n_string+0x2a3/0x5a0 [ 633.847163][T24698] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 633.847182][T24698] common_lsm_audit+0x23f/0x2b0 [ 633.847200][T24698] ? __pfx_common_lsm_audit+0x10/0x10 [ 633.847215][T24698] ? avc_denied+0x14a/0x190 [ 633.847240][T24698] slow_avc_audit+0x186/0x210 [ 633.847259][T24698] ? __pfx_slow_avc_audit+0x10/0x10 [ 633.847280][T24698] ? find_held_lock+0x2b/0x80 [ 633.847302][T24698] ? avc_has_perm_noaudit+0x2b3/0x3b0 [ 633.847330][T24698] avc_has_perm+0x1a6/0x1e0 [ 633.847351][T24698] ? __pfx_avc_has_perm+0x10/0x10 [ 633.847371][T24698] ? check_buffer+0x13f/0x820 [ 633.847394][T24698] ? is_bpf_text_address+0x94/0x1a0 [ 633.847414][T24698] ? kernel_text_address+0x8d/0x100 [ 633.847441][T24698] sock_has_perm+0x253/0x2f0 [ 633.847463][T24698] ? __pfx_sock_has_perm+0x10/0x10 [ 633.847499][T24698] selinux_socket_sendmsg+0x8f/0x2f0 [ 633.847525][T24698] security_socket_sendmsg+0xfb/0x230 [ 633.847549][T24698] ____sys_sendmsg+0x89e/0xbe0 [ 633.847572][T24698] ? __pfx_____sys_sendmsg+0x10/0x10 [ 633.847595][T24698] ? ring_buffer_unlock_commit+0x2e7/0x700 [ 633.847620][T24698] ___sys_sendmsg+0x190/0x1e0 [ 633.847643][T24698] ? __pfx____sys_sendmsg+0x10/0x10 [ 633.847675][T24698] ? find_held_lock+0x2b/0x80 [ 633.847710][T24698] __sys_sendmsg+0x160/0x210 [ 633.847727][T24698] ? __pfx___sys_sendmsg+0x10/0x10 [ 633.847756][T24698] do_syscall_64+0x123/0x790 [ 633.847778][T24698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.847795][T24698] RIP: 0033:0x7f6abd19e159 [ 633.847809][T24698] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 633.847825][T24698] RSP: 002b:00007f6abb3f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 633.847841][T24698] RAX: ffffffffffffffda RBX: 00007f6abd425fa0 RCX: 00007f6abd19e159 [ 633.847852][T24698] RDX: 0000000004000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 633.847868][T24698] RBP: 00007f6abb3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 633.847877][T24698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 633.847887][T24698] R13: 00007f6abd426038 R14: 00007f6abd425fa0 R15: 00007ffe19605218 [ 633.847909][T24698] [ 633.931880][T24700] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 633.933844][T24700] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 634.074794][ T1355] usb 13-1: new full-speed USB device number 23 using dummy_hcd [ 634.125232][T24707] tmpfs: Bad value for 'mpol' [ 634.204556][ T1355] usb 13-1: device descriptor read/64, error -71 [ 634.318310][ T1355] usb usb13-port1: attempt power cycle [ 634.428741][T11778] udevd[11778]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 634.447737][ T5726] udevd[5726]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 634.449815][ T5731] udevd[5731]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 634.463547][ T5730] udevd[5730]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory [ 634.478936][T11793] udevd[11793]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 634.483517][ T8068] udevd[8068]: inotify_add_watch(7, /dev/loop5p9, 10) failed: No such file or directory [ 634.485176][ T6004] udevd[6004]: inotify_add_watch(7, /dev/loop5p6, 10) failed: No such file or directory [ 634.491097][ T5895] udevd[5895]: inotify_add_watch(7, /dev/loop5p10, 10) failed: No such file or directory [ 634.494032][ T5896] udevd[5896]: inotify_add_watch(7, /dev/loop5p8, 10) failed: No such file or directory [ 634.532565][T24720] udevd[24720]: inotify_add_watch(7, /dev/loop5p12, 10) failed: No such file or directory [ 634.605202][T24728] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 634.664651][ T30] usb 7-1: new high-speed USB device number 105 using dummy_hcd [ 634.664793][ T1355] usb 13-1: new full-speed USB device number 24 using dummy_hcd [ 634.698058][ T1355] usb 13-1: device descriptor read/8, error -71 [ 634.825935][ T30] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 634.837166][ T30] usb 7-1: config 0 has an invalid interface number: 50 but max is 0 [ 634.837270][ T30] usb 7-1: config 0 has no interface number 0 [ 634.837294][ T30] usb 7-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 634.867007][ T30] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.867043][ T30] usb 7-1: Product: syz [ 634.867125][ T30] usb 7-1: Manufacturer: syz [ 634.867147][ T30] usb 7-1: SerialNumber: syz [ 634.879461][ T30] usb 7-1: config 0 descriptor?? [ 634.893760][ T30] yurex 7-1:0.50: USB YUREX device now attached to Yurex #1 [ 634.936184][ T1355] usb 13-1: new full-speed USB device number 25 using dummy_hcd [ 634.964619][ T5960] net_ratelimit: 522 callbacks suppressed [ 634.964683][ T5960] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 634.969254][ T1355] usb 13-1: device descriptor read/8, error -71 [ 635.074617][ T5600] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 635.074946][ T1355] usb usb13-port1: unable to enumerate USB device [ 635.100884][ T30] usb 7-1: USB disconnect, device number 105 [ 635.111770][ T30] yurex 7-1:0.50: USB YUREX #1 now disconnected [ 635.140693][T24739] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6904'. [ 635.194601][ T5600] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 635.275657][T24744] FAULT_INJECTION: forcing a failure. [ 635.275657][T24744] name failslab, interval 1, probability 0, space 0, times 0 [ 635.286405][T24744] CPU: 3 UID: 0 PID: 24744 Comm: syz.0.6906 Tainted: G L syzkaller #0 PREEMPT(full) [ 635.286451][T24744] Tainted: [L]=SOFTLOCKUP [ 635.286459][T24744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 635.286470][T24744] Call Trace: [ 635.286477][T24744] [ 635.286485][T24744] dump_stack_lvl+0x100/0x190 [ 635.286518][T24744] should_fail_ex.cold+0x5/0xa [ 635.286549][T24744] should_failslab+0xc2/0x120 [ 635.286573][T24744] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 635.286595][T24744] ? sidtab_sid2str_get+0x84/0x670 [ 635.286618][T24744] ? sidtab_sid2str_get+0x17a/0x670 [ 635.286644][T24744] kmemdup_noprof+0x29/0x60 [ 635.286672][T24744] sidtab_sid2str_get+0x17a/0x670 [ 635.286697][T24744] security_sid_to_context_core+0x373/0x700 [ 635.286722][T24744] avc_audit_post_callback+0x109/0x910 [ 635.286749][T24744] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 635.286771][T24744] ? skb_put+0x138/0x180 [ 635.286796][T24744] ? audit_log_n_string+0x2a3/0x5a0 [ 635.286822][T24744] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 635.286845][T24744] common_lsm_audit+0x23f/0x2b0 [ 635.286867][T24744] ? __pfx_common_lsm_audit+0x10/0x10 [ 635.286885][T24744] ? avc_denied+0x14a/0x190 [ 635.286919][T24744] slow_avc_audit+0x186/0x210 [ 635.286944][T24744] ? __pfx_slow_avc_audit+0x10/0x10 [ 635.286968][T24744] ? find_held_lock+0x2b/0x80 [ 635.286993][T24744] ? avc_has_perm_noaudit+0x2b3/0x3b0 [ 635.287026][T24744] avc_has_perm+0x1a6/0x1e0 [ 635.287052][T24744] ? __pfx_avc_has_perm+0x10/0x10 [ 635.287077][T24744] ? check_buffer+0x13f/0x820 [ 635.287103][T24744] ? is_bpf_text_address+0x94/0x1a0 [ 635.287126][T24744] ? kernel_text_address+0x8d/0x100 [ 635.287157][T24744] sock_has_perm+0x253/0x2f0 [ 635.287183][T24744] ? __pfx_sock_has_perm+0x10/0x10 [ 635.287225][T24744] selinux_socket_sendmsg+0x8f/0x2f0 [ 635.287255][T24744] security_socket_sendmsg+0xfb/0x230 [ 635.287283][T24744] ____sys_sendmsg+0x89e/0xbe0 [ 635.287310][T24744] ? __pfx_____sys_sendmsg+0x10/0x10 [ 635.287340][T24744] ? ring_buffer_unlock_commit+0x2e7/0x700 [ 635.287370][T24744] ___sys_sendmsg+0x190/0x1e0 [ 635.287397][T24744] ? __pfx____sys_sendmsg+0x10/0x10 [ 635.287436][T24744] ? find_held_lock+0x2b/0x80 [ 635.287480][T24744] __sys_sendmsg+0x160/0x210 [ 635.287502][T24744] ? __pfx___sys_sendmsg+0x10/0x10 [ 635.287537][T24744] do_syscall_64+0x123/0x790 [ 635.287565][T24744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.287586][T24744] RIP: 0033:0x7f81a839e159 [ 635.287604][T24744] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 635.287624][T24744] RSP: 002b:00007f81a9292028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 635.287644][T24744] RAX: ffffffffffffffda RBX: 00007f81a8625fa0 RCX: 00007f81a839e159 [ 635.287657][T24744] RDX: 000000000004c040 RSI: 0000200000000040 RDI: 0000000000000003 [ 635.287670][T24744] RBP: 00007f81a9292090 R08: 0000000000000000 R09: 0000000000000000 [ 635.287683][T24744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 635.287695][T24744] R13: 00007f81a8626038 R14: 00007f81a8625fa0 R15: 00007ffd998674f8 [ 635.287719][T24744] [ 635.306128][ T5600] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 635.379596][T24741] KVM: debugfs: duplicate directory 24741-5 [ 635.417899][ T5600] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 635.498377][T24741] KVM: debugfs: duplicate directory 24741-14 [ 635.536194][ T5600] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 635.555055][T24741] KVM: debugfs: duplicate directory 24741-25 [ 635.645594][ T5960] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 635.764767][ T5960] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 635.884651][ T5600] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 635.995367][ T5960] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 636.079066][T24760] netlink: 240 bytes leftover after parsing attributes in process `syz.2.6911'. [ 636.087424][T24758] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(33554432.9.1986356271), cmd(12) [ 636.159938][T24762] rnbd_client L202: map_device: Unknown parameter or missing value 'ses%name=s+' [ 636.248076][T24764] FAULT_INJECTION: forcing a failure. [ 636.248076][T24764] name failslab, interval 1, probability 0, space 0, times 0 [ 636.253369][T24764] CPU: 3 UID: 0 PID: 24764 Comm: syz.2.6913 Tainted: G L syzkaller #0 PREEMPT(full) [ 636.253409][T24764] Tainted: [L]=SOFTLOCKUP [ 636.253417][T24764] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 636.253426][T24764] Call Trace: [ 636.253434][T24764] [ 636.253441][T24764] dump_stack_lvl+0x100/0x190 [ 636.253472][T24764] should_fail_ex.cold+0x5/0xa [ 636.253497][T24764] should_failslab+0xc2/0x120 [ 636.253518][T24764] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 636.253537][T24764] ? sidtab_sid2str_get+0x84/0x670 [ 636.253557][T24764] ? sidtab_sid2str_get+0x17a/0x670 [ 636.253580][T24764] kmemdup_noprof+0x29/0x60 [ 636.253607][T24764] sidtab_sid2str_get+0x17a/0x670 [ 636.253645][T24764] security_sid_to_context_core+0x373/0x700 [ 636.253669][T24764] avc_audit_post_callback+0x109/0x910 [ 636.253693][T24764] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 636.253712][T24764] ? skb_put+0x138/0x180 [ 636.253735][T24764] ? audit_log_n_string+0x2a3/0x5a0 [ 636.253759][T24764] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 636.253779][T24764] common_lsm_audit+0x23f/0x2b0 [ 636.253799][T24764] ? __pfx_common_lsm_audit+0x10/0x10 [ 636.253815][T24764] ? avc_denied+0x14a/0x190 [ 636.253841][T24764] slow_avc_audit+0x186/0x210 [ 636.253863][T24764] ? __pfx_slow_avc_audit+0x10/0x10 [ 636.253885][T24764] ? find_held_lock+0x2b/0x80 [ 636.253913][T24764] ? avc_has_perm_noaudit+0x2b3/0x3b0 [ 636.253944][T24764] avc_has_perm+0x1a6/0x1e0 [ 636.253966][T24764] ? __pfx_avc_has_perm+0x10/0x10 [ 636.253988][T24764] ? check_buffer+0x13f/0x820 [ 636.254011][T24764] ? is_bpf_text_address+0x94/0x1a0 [ 636.254033][T24764] ? kernel_text_address+0x8d/0x100 [ 636.254061][T24764] sock_has_perm+0x253/0x2f0 [ 636.254085][T24764] ? __pfx_sock_has_perm+0x10/0x10 [ 636.254125][T24764] selinux_socket_sendmsg+0x8f/0x2f0 [ 636.254152][T24764] security_socket_sendmsg+0xfb/0x230 [ 636.254195][T24764] ____sys_sendmsg+0x89e/0xbe0 [ 636.254222][T24764] ? __pfx_____sys_sendmsg+0x10/0x10 [ 636.254247][T24764] ? ring_buffer_unlock_commit+0x2e7/0x700 [ 636.254274][T24764] ___sys_sendmsg+0x190/0x1e0 [ 636.254299][T24764] ? __pfx____sys_sendmsg+0x10/0x10 [ 636.254334][T24764] ? find_held_lock+0x2b/0x80 [ 636.254373][T24764] __sys_sendmsg+0x160/0x210 [ 636.254391][T24764] ? __pfx___sys_sendmsg+0x10/0x10 [ 636.254424][T24764] do_syscall_64+0x123/0x790 [ 636.254447][T24764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.254465][T24764] RIP: 0033:0x7f4ddb59e159 [ 636.254480][T24764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 636.254497][T24764] RSP: 002b:00007f4ddc4c2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 636.254515][T24764] RAX: ffffffffffffffda RBX: 00007f4ddb825fa0 RCX: 00007f4ddb59e159 [ 636.254527][T24764] RDX: 0000000000040000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 636.254538][T24764] RBP: 00007f4ddc4c2090 R08: 0000000000000000 R09: 0000000000000000 [ 636.254549][T24764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 636.254559][T24764] R13: 00007f4ddb826038 R14: 00007f4ddb825fa0 R15: 00007ffd394ed618 [ 636.254584][T24764] [ 636.418670][T24767] netlink: 'syz.2.6914': attribute type 1 has an invalid length. [ 636.438144][T24767] bond1: entered promiscuous mode [ 636.438366][T24767] 8021q: adding VLAN 0 to HW filter on device bond1 [ 636.448133][T24770] netlink: 'syz.2.6914': attribute type 1 has an invalid length. [ 636.458830][T24770] bond2: entered promiscuous mode [ 636.459041][T24770] 8021q: adding VLAN 0 to HW filter on device bond2 [ 636.744910][T24783] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 636.758509][T24783] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 636.974584][ T5829] usb 13-1: new high-speed USB device number 26 using dummy_hcd [ 637.126597][ T5829] usb 13-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 637.141811][ T5829] usb 13-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 637.141858][ T5829] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.157763][ T5829] as10x_usb: device has been detected [ 637.159875][ T5829] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 637.186470][ T5829] usb 13-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 637.232273][ T5829] as10x_usb: error during firmware upload part1 [ 637.234363][ T5829] Registered device Abilis Systems DVB-Titan [ 637.957341][T24810] rnbd_client L607: Mapping device / on session s+, (access_mode: rw, nr_poll_queues: 0) [ 637.957436][T24810] rnbd_client L1256: Session s+ not found, and path parameter not given [ 638.312943][T24818] FAULT_INJECTION: forcing a failure. [ 638.312943][T24818] name failslab, interval 1, probability 0, space 0, times 0 [ 638.313093][T24818] CPU: 1 UID: 0 PID: 24818 Comm: syz.2.6932 Tainted: G L syzkaller #0 PREEMPT(full) [ 638.313121][T24818] Tainted: [L]=SOFTLOCKUP [ 638.313128][T24818] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 638.313138][T24818] Call Trace: [ 638.313147][T24818] [ 638.313154][T24818] dump_stack_lvl+0x100/0x190 [ 638.313187][T24818] should_fail_ex.cold+0x5/0xa [ 638.313227][T24818] should_failslab+0xc2/0x120 [ 638.313249][T24818] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 638.313272][T24818] ? sidtab_sid2str_get+0x84/0x670 [ 638.313293][T24818] ? sidtab_sid2str_get+0x17a/0x670 [ 638.313319][T24818] kmemdup_noprof+0x29/0x60 [ 638.313347][T24818] sidtab_sid2str_get+0x17a/0x670 [ 638.313371][T24818] security_sid_to_context_core+0x373/0x700 [ 638.313396][T24818] avc_audit_post_callback+0x109/0x910 [ 638.313420][T24818] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 638.313440][T24818] ? skb_put+0x138/0x180 [ 638.313466][T24818] ? audit_log_n_string+0x2a3/0x5a0 [ 638.313493][T24818] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 638.313517][T24818] common_lsm_audit+0x23f/0x2b0 [ 638.313538][T24818] ? __pfx_common_lsm_audit+0x10/0x10 [ 638.313556][T24818] ? avc_denied+0x14a/0x190 [ 638.313582][T24818] slow_avc_audit+0x186/0x210 [ 638.313605][T24818] ? __pfx_slow_avc_audit+0x10/0x10 [ 638.313626][T24818] ? find_held_lock+0x2b/0x80 [ 638.313649][T24818] ? avc_has_perm_noaudit+0x2b3/0x3b0 [ 638.313682][T24818] avc_has_perm+0x1a6/0x1e0 [ 638.313706][T24818] ? __pfx_avc_has_perm+0x10/0x10 [ 638.313732][T24818] ? check_buffer+0x13f/0x820 [ 638.313756][T24818] ? is_bpf_text_address+0x94/0x1a0 [ 638.313779][T24818] ? kernel_text_address+0x8d/0x100 [ 638.313807][T24818] sock_has_perm+0x253/0x2f0 [ 638.313832][T24818] ? __pfx_sock_has_perm+0x10/0x10 [ 638.313866][T24818] selinux_socket_sendmsg+0x8f/0x2f0 [ 638.313889][T24818] security_socket_sendmsg+0xfb/0x230 [ 638.313912][T24818] ____sys_sendmsg+0x89e/0xbe0 [ 638.313935][T24818] ? __pfx_____sys_sendmsg+0x10/0x10 [ 638.313961][T24818] ? ring_buffer_unlock_commit+0x2e7/0x700 [ 638.313987][T24818] ___sys_sendmsg+0x190/0x1e0 [ 638.314013][T24818] ? __pfx____sys_sendmsg+0x10/0x10 [ 638.314049][T24818] ? find_held_lock+0x2b/0x80 [ 638.314090][T24818] __sys_sendmsg+0x160/0x210 [ 638.314110][T24818] ? __pfx___sys_sendmsg+0x10/0x10 [ 638.314143][T24818] do_syscall_64+0x123/0x790 [ 638.314192][T24818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.314212][T24818] RIP: 0033:0x7f4ddb59e159 [ 638.314228][T24818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 638.314245][T24818] RSP: 002b:00007f4ddc4c2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 638.314265][T24818] RAX: ffffffffffffffda RBX: 00007f4ddb825fa0 RCX: 00007f4ddb59e159 [ 638.314277][T24818] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 638.314288][T24818] RBP: 00007f4ddc4c2090 R08: 0000000000000000 R09: 0000000000000000 [ 638.314300][T24818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 638.314310][T24818] R13: 00007f4ddb826038 R14: 00007f4ddb825fa0 R15: 00007ffd394ed618 [ 638.314333][T24818] [ 638.658535][ T43] kauditd_printk_skb: 601 callbacks suppressed [ 638.660034][ T43] audit: type=1400 audit(5100020498.808:7385): avc: denied { unmount } for pid=21486 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 638.672138][ T43] audit: type=1400 audit(5100020498.818:7386): avc: denied { read write } for pid=21486 comm="syz-executor" name="loop7" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 638.672743][ T43] audit: type=1400 audit(5100020498.818:7387): avc: denied { read write open } for pid=21486 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 638.673300][ T43] audit: type=1400 audit(5100020498.818:7388): avc: denied { ioctl } for pid=21486 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=663 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 638.712657][ T43] audit: type=1400 audit(5100020498.858:7389): avc: denied { create } for pid=24830 comm="syz.2.6934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 638.719275][ T43] audit: type=1400 audit(5100020498.868:7390): avc: denied { setopt } for pid=24830 comm="syz.2.6934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 638.724458][ T43] audit: type=1400 audit(5100020498.868:7391): avc: denied { bind } for pid=24830 comm="syz.2.6934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 638.728679][ T43] audit: type=1400 audit(5100020498.878:7392): avc: denied { name_bind } for pid=24830 comm="syz.2.6934" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 638.729637][ T43] audit: type=1400 audit(5100020498.878:7393): avc: denied { mounton } for pid=24831 comm="syz.7.6935" path="/237/file0" dev="tmpfs" ino=1320 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 638.730033][ T43] audit: type=1400 audit(5100020498.878:7394): avc: denied { node_bind } for pid=24830 comm="syz.2.6934" saddr=172.20.20.170 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 638.822515][ T5984] usb 13-1: USB disconnect, device number 26 [ 638.860062][ T5984] Unregistered device Abilis Systems DVB-Titan [ 638.864384][ T5984] as10x_usb: device has been disconnected [ 639.152727][T24844] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6939'. [ 639.228966][T24842] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 639.231521][T24842] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 639.318288][T24848] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6939'. [ 639.318966][T24848] nbd: nbd64 already in use [ 639.486355][ T5809] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.486514][ T5809] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.486547][ T5809] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.486580][ T5809] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.821220][T24868] syzkaller0: entered promiscuous mode [ 639.821858][T24868] syzkaller0: entered allmulticast mode [ 639.978789][T24872] FAULT_INJECTION: forcing a failure. [ 639.978789][T24872] name failslab, interval 1, probability 0, space 0, times 0 [ 639.978899][T24872] CPU: 0 UID: 0 PID: 24872 Comm: syz.0.6948 Tainted: G L syzkaller #0 PREEMPT(full) [ 639.978934][T24872] Tainted: [L]=SOFTLOCKUP [ 639.978942][T24872] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 639.978950][T24872] Call Trace: [ 639.978955][T24872] [ 639.978960][T24872] dump_stack_lvl+0x100/0x190 [ 639.978980][T24872] should_fail_ex.cold+0x5/0xa [ 639.978996][T24872] should_failslab+0xc2/0x120 [ 639.979011][T24872] __kvmalloc_node_noprof+0x113/0x9b0 [ 639.979025][T24872] ? page_pool_create_percpu+0x2e0/0xd50 [ 639.979046][T24872] page_pool_create_percpu+0x2e0/0xd50 [ 639.979065][T24872] bpf_test_run_xdp_live+0x192/0x760 [ 639.979083][T24872] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 639.979100][T24872] ? prepare_to_wait_event+0x8d/0x720 [ 639.979116][T24872] ? preempt_schedule_thunk+0x16/0x40 [ 639.979132][T24872] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 639.979148][T24872] ? find_held_lock+0x2b/0x80 [ 639.979163][T24872] ? bpf_dispatcher_change_prog+0x6c3/0xa50 [ 639.979187][T24872] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 639.979200][T24872] ? 0xffffffffa0405d00 [ 639.979210][T24872] ? 0xffffffffa0405d00 [ 639.979219][T24872] ? bpf_dispatcher_change_prog+0x2de/0xa50 [ 639.979238][T24872] bpf_prog_test_run_xdp+0xd86/0x1670 [ 639.979260][T24872] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 639.979281][T24872] ? fput+0x7c/0x100 [ 639.979296][T24872] ? __bpf_prog_get+0x97/0x290 [ 639.979312][T24872] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 639.979329][T24872] __sys_bpf+0x2265/0x4a30 [ 639.979343][T24872] ? __pfx___sys_bpf+0x10/0x10 [ 639.979355][T24872] ? trace_event_buffer_commit+0x20a/0xa80 [ 639.979379][T24872] ? __pfx_eprobe_trigger_func+0x10/0x10 [ 639.979405][T24872] ? trace_event_buffer_commit+0x20a/0xa80 [ 639.979423][T24872] ? find_held_lock+0x2b/0x80 [ 639.979440][T24872] ? __x64_sys_bpf+0xce/0x140 [ 639.979450][T24872] __x64_sys_bpf+0xce/0x140 [ 639.979461][T24872] ? rcu_is_watching+0x13/0xc0 [ 639.979477][T24872] do_syscall_64+0x123/0x790 [ 639.979493][T24872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.979505][T24872] RIP: 0033:0x7f81a839e159 [ 639.979514][T24872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 639.979525][T24872] RSP: 002b:00007f81a9292028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 639.979537][T24872] RAX: ffffffffffffffda RBX: 00007f81a8625fa0 RCX: 00007f81a839e159 [ 639.979544][T24872] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 639.979552][T24872] RBP: 00007f81a9292090 R08: 0000000000000000 R09: 0000000000000000 [ 639.979558][T24872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 639.979565][T24872] R13: 00007f81a8626038 R14: 00007f81a8625fa0 R15: 00007ffd998674f8 [ 639.979587][T24872] [ 639.979670][T24872] page_pool_create_percpu() gave up with errno -12 [ 640.036024][ T5809] net_ratelimit: 32 callbacks suppressed [ 640.036039][ T5809] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 640.151562][T18938] usb 5-1: USB disconnect, device number 38 [ 640.154953][ T5809] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 640.238411][T24878] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 640.258151][T24878] rtrs_client L2095: : Failed to resolve address, err: -ENODEV [ 640.258258][T24878] rtrs_client L2636: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 640.276611][ T5809] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 640.394887][ T5809] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 640.504975][ T5809] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 640.614641][ T5809] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 640.643121][T24886] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6953'. [ 640.668853][T24886] syzkaller1: entered promiscuous mode [ 640.668920][T24886] syzkaller1: entered allmulticast mode [ 640.736864][ T5600] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 640.844758][ T5600] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 640.955721][ T5600] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 641.065178][ T5600] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 641.309947][T24910] selinux_netlink_send: 21 callbacks suppressed [ 641.310046][T24910] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35889 sclass=netlink_route_socket pid=24910 comm=syz.2.6962 [ 641.313651][T24912] FAULT_INJECTION: forcing a failure. [ 641.313651][T24912] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 641.313679][T24912] CPU: 1 UID: 0 PID: 24912 Comm: syz.0.6964 Tainted: G L syzkaller #0 PREEMPT(full) [ 641.313703][T24912] Tainted: [L]=SOFTLOCKUP [ 641.313710][T24912] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 641.313720][T24912] Call Trace: [ 641.313727][T24912] [ 641.313735][T24912] dump_stack_lvl+0x100/0x190 [ 641.313765][T24912] should_fail_ex.cold+0x5/0xa [ 641.313791][T24912] _copy_to_iter+0x1f3/0x1720 [ 641.313824][T24912] ? __pfx__copy_to_iter+0x10/0x10 [ 641.313852][T24912] ? folio_mark_accessed+0xf3/0x1040 [ 641.313876][T24912] ? __pfx_filemap_get_pages+0x10/0x10 [ 641.313918][T24912] ? __pfx_folio_mark_accessed+0x10/0x10 [ 641.313947][T24912] copy_page_to_iter+0x285/0x370 [ 641.313978][T24912] filemap_read+0x7a9/0x10a0 [ 641.314015][T24912] ? __pfx_filemap_read+0x10/0x10 [ 641.314058][T24912] ? __pfx_down_read+0x10/0x10 [ 641.314082][T24912] ? __x64_sys_io_submit+0x1b1/0x3a0 [ 641.314107][T24912] ? do_syscall_64+0x123/0x790 [ 641.314127][T24912] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.314145][T24912] ? avc_policy_seqno+0x9/0x20 [ 641.314190][T24912] ? selinux_file_permission+0x8f/0x6d0 [ 641.314215][T24912] blkdev_read_iter+0x2c4/0x4f0 [ 641.314240][T24912] aio_read+0x312/0x4d0 [ 641.314266][T24912] ? __pfx_aio_read+0x10/0x10 [ 641.314309][T24912] ? __might_fault+0xc5/0x140 [ 641.314341][T24912] ? io_submit_one+0x4c8/0x1fb0 [ 641.314369][T24912] io_submit_one+0x4c8/0x1fb0 [ 641.314396][T24912] ? __lock_acquire+0x5c0/0x1f40 [ 641.314420][T24912] ? __pfx_io_submit_one+0x10/0x10 [ 641.314447][T24912] ? lock_acquire+0x1d1/0x380 [ 641.314469][T24912] ? __might_fault+0xc5/0x140 [ 641.314501][T24912] ? __x64_sys_io_submit+0x1b1/0x3a0 [ 641.314528][T24912] __x64_sys_io_submit+0x1b1/0x3a0 [ 641.314556][T24912] ? __pfx___x64_sys_io_submit+0x10/0x10 [ 641.314586][T24912] ? trace_syscall_enter+0xcc/0x120 [ 641.314611][T24912] ? rcu_is_watching+0x13/0xc0 [ 641.314635][T24912] do_syscall_64+0x123/0x790 [ 641.314659][T24912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.314677][T24912] RIP: 0033:0x7f81a839e159 [ 641.314692][T24912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 641.314709][T24912] RSP: 002b:00007f81a9292028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 641.314726][T24912] RAX: ffffffffffffffda RBX: 00007f81a8625fa0 RCX: 00007f81a839e159 [ 641.314738][T24912] RDX: 0000200000000440 RSI: 0000000000000001 RDI: 00007f81a9269000 [ 641.314750][T24912] RBP: 00007f81a9292090 R08: 0000000000000000 R09: 0000000000000000 [ 641.314761][T24912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 641.314772][T24912] R13: 00007f81a8626038 R14: 00007f81a8625fa0 R15: 00007ffd998674f8 [ 641.314798][T24912] [ 641.767425][T24930] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 641.767747][T24930] /dev/nullb0: Can't open blockdev [ 642.713502][T24958] FAULT_INJECTION: forcing a failure. [ 642.713502][T24958] name failslab, interval 1, probability 0, space 0, times 0 [ 642.713562][T24958] CPU: 0 UID: 0 PID: 24958 Comm: syz.0.6980 Tainted: G L syzkaller #0 PREEMPT(full) [ 642.713589][T24958] Tainted: [L]=SOFTLOCKUP [ 642.713595][T24958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 642.713602][T24958] Call Trace: [ 642.713606][T24958] [ 642.713611][T24958] dump_stack_lvl+0x100/0x190 [ 642.713631][T24958] should_fail_ex.cold+0x5/0xa [ 642.713647][T24958] should_failslab+0xc2/0x120 [ 642.713662][T24958] kmem_cache_alloc_noprof+0x92/0x6a0 [ 642.713674][T24958] ? mas_next_range+0xa4/0x100 [ 642.713689][T24958] ? vm_area_alloc+0x1f/0x160 [ 642.713706][T24958] vm_area_alloc+0x1f/0x160 [ 642.713720][T24958] __mmap_region+0x107c/0x32c0 [ 642.713741][T24958] ? __pfx___mmap_region+0x10/0x10 [ 642.713763][T24958] ? get_page_from_freelist+0x110d/0x35d0 [ 642.713796][T24958] ? mas_prev_slot+0x768/0x11b0 [ 642.713838][T24958] ? unmapped_area_topdown+0x54e/0x6a0 [ 642.713908][T24958] mmap_region+0x3db/0x6d0 [ 642.713937][T24958] ? __pfx_mmap_region+0x10/0x10 [ 642.713962][T24958] ? thp_get_unmapped_area_vmaflags+0x2a5/0x330 [ 642.713989][T24958] ? selinux_mmap_addr+0x2b/0x110 [ 642.714014][T24958] ? bpf_lsm_mmap_addr+0x9/0x30 [ 642.714035][T24958] ? security_mmap_addr+0x71/0x1e0 [ 642.714056][T24958] ? __get_unmapped_area+0x255/0x3e0 [ 642.714080][T24958] do_mmap+0x12c7/0x1c30 [ 642.714105][T24958] ? lock_acquire+0x1d1/0x380 [ 642.714124][T24958] ? __pfx_do_mmap+0x10/0x10 [ 642.714145][T24958] ? __pfx___might_resched+0x10/0x10 [ 642.714186][T24958] ? selinux_mmap_file+0x154/0x1c0 [ 642.714214][T24958] ? __pfx_down_write_killable+0x10/0x10 [ 642.714243][T24958] vm_mmap_pgoff+0x28d/0x470 [ 642.714266][T24958] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 642.714296][T24958] ksys_mmap_pgoff+0xe4/0x610 [ 642.714318][T24958] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 642.714338][T24958] ? find_held_lock+0x2b/0x80 [ 642.714360][T24958] ? trace_syscall_enter+0xcc/0x120 [ 642.714391][T24958] __x64_sys_mmap+0x125/0x190 [ 642.714416][T24958] do_syscall_64+0x123/0x790 [ 642.714440][T24958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.714459][T24958] RIP: 0033:0x7f81a839dec2 [ 642.714489][T24958] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 642.714508][T24958] RSP: 002b:00007f81a9290d08 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 642.714528][T24958] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f81a839dec2 [ 642.714541][T24958] RDX: 0000000000000000 RSI: 0000000008000000 RDI: 0000000000000000 [ 642.714551][T24958] RBP: 0000000000000022 R08: 00000000ffffffff R09: 0000000000000000 [ 642.714562][T24958] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000004000000 [ 642.714573][T24958] R13: 0000000000001000 R14: 0000000000000022 R15: 00007f81a8432778 [ 642.714597][T24958] [ 642.871781][T24962] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 642.992906][T24967] netlink: 88 bytes leftover after parsing attributes in process `syz.2.6985'. [ 643.057655][T24969] syzkaller1: entered promiscuous mode [ 643.057744][T24969] syzkaller1: entered allmulticast mode [ 643.375660][ T4283] e1000 0000:00:06.0 eth0: Reset adapter [ 643.504929][ T4283] e1000 0000:00:06.0 eth0: Reset adapter [ 643.513473][T24990] FAULT_INJECTION: forcing a failure. [ 643.513473][T24990] name failslab, interval 1, probability 0, space 0, times 0 [ 643.523507][T24990] CPU: 1 UID: 0 PID: 24990 Comm: syz.2.6991 Tainted: G L syzkaller #0 PREEMPT(full) [ 643.523553][T24990] Tainted: [L]=SOFTLOCKUP [ 643.523562][T24990] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 643.523572][T24990] Call Trace: [ 643.523578][T24990] [ 643.523585][T24990] dump_stack_lvl+0x100/0x190 [ 643.523614][T24990] should_fail_ex.cold+0x5/0xa [ 643.523653][T24990] should_failslab+0xc2/0x120 [ 643.523676][T24990] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 643.523695][T24990] ? sidtab_sid2str_get+0x84/0x670 [ 643.523715][T24990] ? sidtab_sid2str_get+0x17a/0x670 [ 643.523738][T24990] kmemdup_noprof+0x29/0x60 [ 643.523764][T24990] sidtab_sid2str_get+0x17a/0x670 [ 643.523786][T24990] security_sid_to_context_core+0x373/0x700 [ 643.523808][T24990] avc_audit_post_callback+0x1aa/0x910 [ 643.523830][T24990] ? __pfx_audit_log_lsm_data+0x10/0x10 [ 643.523849][T24990] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 643.523868][T24990] ? skb_put+0x138/0x180 [ 643.523891][T24990] ? audit_log_n_string+0x2a3/0x5a0 [ 643.523920][T24990] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 643.523939][T24990] common_lsm_audit+0x23f/0x2b0 [ 643.523958][T24990] ? __pfx_common_lsm_audit+0x10/0x10 [ 643.523975][T24990] ? avc_denied+0x14a/0x190 [ 643.524001][T24990] slow_avc_audit+0x186/0x210 [ 643.524022][T24990] ? __pfx_slow_avc_audit+0x10/0x10 [ 643.524044][T24990] ? find_held_lock+0x2b/0x80 [ 643.524066][T24990] ? avc_has_perm_noaudit+0x2b3/0x3b0 [ 643.524096][T24990] avc_has_perm+0x1a6/0x1e0 [ 643.524118][T24990] ? __pfx_avc_has_perm+0x10/0x10 [ 643.524148][T24990] sock_has_perm+0x253/0x2f0 [ 643.524170][T24990] ? __pfx_sock_has_perm+0x10/0x10 [ 643.524200][T24990] ? __fget_files+0x34/0x3d0 [ 643.524220][T24990] ? find_held_lock+0x2b/0x80 [ 643.524242][T24990] ? __fget_files+0x215/0x3d0 [ 643.524264][T24990] selinux_socket_setsockopt+0x41/0x80 [ 643.524290][T24990] security_socket_setsockopt+0x9b/0x230 [ 643.524315][T24990] do_sock_setsockopt+0x53/0x1d0 [ 643.524339][T24990] __sys_setsockopt+0x195/0x220 [ 643.524362][T24990] __x64_sys_setsockopt+0xbd/0x160 [ 643.524378][T24990] ? trace_syscall_enter+0xd6/0x120 [ 643.524399][T24990] do_syscall_64+0x123/0x790 [ 643.524422][T24990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.524440][T24990] RIP: 0033:0x7f4ddb59e159 [ 643.524455][T24990] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 643.524470][T24990] RSP: 002b:00007f4ddc4a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 643.524488][T24990] RAX: ffffffffffffffda RBX: 00007f4ddb826090 RCX: 00007f4ddb59e159 [ 643.524498][T24990] RDX: 0000000000000077 RSI: 0000000000000084 RDI: 0000000000000003 [ 643.524508][T24990] RBP: 00007f4ddc4a1090 R08: 000000000000000a R09: 0000000000000000 [ 643.524518][T24990] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 643.524528][T24990] R13: 00007f4ddb826128 R14: 00007f4ddb826090 R15: 00007ffd394ed618 [ 643.524550][T24990] [ 643.665407][ T43] kauditd_printk_skb: 1110 callbacks suppressed [ 643.665472][ T43] audit: type=1400 audit(5100020503.818:8505): avc: denied { search } for pid=24986 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 643.665585][ T43] audit: type=1400 audit(5100020503.818:8506): avc: denied { search } for pid=24986 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1834 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 643.665690][ T43] audit: type=1400 audit(5100020503.818:8507): avc: denied { search } for pid=24986 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 643.665780][ T43] audit: type=1400 audit(5100020503.818:8508): avc: denied { search } for pid=24986 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 643.666780][ T43] audit: type=1400 audit(5100020503.818:8509): avc: denied { search } for pid=24986 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 643.666870][ T43] audit: type=1400 audit(5100020503.818:8510): avc: denied { search } for pid=24986 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1834 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 643.666959][ T43] audit: type=1400 audit(5100020503.818:8511): avc: denied { search } for pid=24986 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 643.667132][ T43] audit: type=1400 audit(5100020503.818:8512): avc: denied { read } for pid=24986 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 643.667671][ T43] audit: type=1400 audit(5100020503.818:8513): avc: denied { read open } for pid=24986 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 643.668363][ T43] audit: type=1400 audit(5100020503.818:8514): avc: denied { getattr } for pid=24986 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 645.144823][ T5960] net_ratelimit: 33 callbacks suppressed [ 645.144900][ T5960] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 645.264704][ T5600] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 645.384716][ T5600] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 645.504827][ T5600] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 645.615420][ T5600] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 645.705648][ T4283] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 645.734673][ T5600] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 645.854684][ T5600] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 645.964675][ T5600] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 646.074678][ T5600] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 646.184652][ T5600] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 648.814698][ T43] kauditd_printk_skb: 1096 callbacks suppressed [ 648.815394][ T43] audit: type=1400 audit(5100020508.958:9609): avc: denied { search } for pid=25015 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 648.815443][ T43] audit: type=1400 audit(5100020508.968:9610): avc: denied { search } for pid=25015 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1834 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 648.815484][ T43] audit: type=1400 audit(5100020508.968:9611): avc: denied { search } for pid=25015 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 648.815518][ T43] audit: type=1400 audit(5100020508.968:9612): avc: denied { search } for pid=25015 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 648.846359][ T43] audit: type=1400 audit(5100020508.998:9613): avc: denied { search } for pid=25016 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 648.846414][ T43] audit: type=1400 audit(5100020508.998:9614): avc: denied { search } for pid=25016 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1834 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 648.846573][ T43] audit: type=1400 audit(5100020508.998:9615): avc: denied { search } for pid=25016 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 648.846704][ T43] audit: type=1400 audit(5100020508.998:9616): avc: denied { read } for pid=25016 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 648.847757][ T43] audit: type=1400 audit(5100020508.998:9617): avc: denied { read open } for pid=25016 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 648.849985][ T43] audit: type=1400 audit(5100020508.998:9618): avc: denied { getattr } for pid=25016 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 650.214683][ T5960] net_ratelimit: 35 callbacks suppressed [ 650.214756][ T5960] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 650.325409][ T5960] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 650.434636][ T5960] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 650.554620][ T5960] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 650.674634][ T5960] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 650.784721][ T5960] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 650.894790][ T5809] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 651.005046][ T5809] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 651.114770][ T5809] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 651.224718][ T5960] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 654.401659][ T43] kauditd_printk_skb: 485 callbacks suppressed [ 654.401760][ T43] audit: type=1400 audit(5100020514.548:10104): avc: denied { search } for pid=25020 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 654.401821][ T43] audit: type=1400 audit(5100020514.548:10105): avc: denied { search } for pid=25020 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1834 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 654.401858][ T43] audit: type=1400 audit(5100020514.548:10106): avc: denied { search } for pid=25020 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 654.401898][ T43] audit: type=1400 audit(5100020514.548:10107): avc: denied { search } for pid=25020 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 654.426885][ T43] audit: type=1400 audit(5100020514.578:10108): avc: denied { search } for pid=25021 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 654.426982][ T43] audit: type=1400 audit(5100020514.578:10109): avc: denied { search } for pid=25021 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1834 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 654.427128][ T43] audit: type=1400 audit(5100020514.578:10110): avc: denied { search } for pid=25021 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 654.427267][ T43] audit: type=1400 audit(5100020514.578:10111): avc: denied { read } for pid=25021 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 654.428305][ T43] audit: type=1400 audit(5100020514.578:10112): avc: denied { read open } for pid=25021 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 654.429313][ T43] audit: type=1400 audit(5100020514.578:10113): avc: denied { getattr } for pid=25021 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 655.275306][ T5960] net_ratelimit: 35 callbacks suppressed [ 655.275397][ T5960] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 655.384736][ T5809] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 655.494746][ T5960] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 655.604674][ T5809] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 655.714662][ T5960] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 655.834672][ T5960] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 655.945613][ T5960] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 656.054754][ T5960] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 656.164765][ T5960] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 656.274629][ T5960] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 656.796633][T25034] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 656.858456][T25033] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6996'. [ 656.867820][T25037] bridge0: port 3(syz_tun) entered blocking state [ 656.867999][T25037] bridge0: port 3(syz_tun) entered disabled state [ 656.868181][T25037] syz_tun: entered allmulticast mode [ 656.869180][T25037] syz_tun: entered promiscuous mode [ 657.665828][T25055] sch_tbf: burst 0 is lower than device veth1 mtu (1514) ! [ 657.883586][T25065] FAULT_INJECTION: forcing a failure. [ 657.883586][T25065] name fail_futex, interval 1, probability 0, space 0, times 0 [ 657.884557][T25065] CPU: 3 UID: 0 PID: 25065 Comm: syz.8.7010 Tainted: G L syzkaller #0 PREEMPT(full) [ 657.884576][T25065] Tainted: [L]=SOFTLOCKUP [ 657.884581][T25065] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 657.884587][T25065] Call Trace: [ 657.884592][T25065] [ 657.884597][T25065] dump_stack_lvl+0x100/0x190 [ 657.884617][T25065] should_fail_ex.cold+0x5/0xa [ 657.884634][T25065] get_futex_key+0x1d0/0x14f0 [ 657.884650][T25065] ? __pfx_get_futex_key+0x10/0x10 [ 657.884665][T25065] ? trace_event_buffer_commit+0x20a/0xa80 [ 657.884682][T25065] futex_wake+0xf4/0x5e0 [ 657.884701][T25065] ? __pfx_futex_wake+0x10/0x10 [ 657.884719][T25065] ? __pfx_eprobe_trigger_func+0x10/0x10 [ 657.884740][T25065] do_futex+0x2b2/0x440 [ 657.884757][T25065] ? __pfx_do_futex+0x10/0x10 [ 657.884772][T25065] ? event_triggers_call+0x337/0x4d0 [ 657.884788][T25065] __x64_sys_futex+0x34f/0x4d0 [ 657.884804][T25065] ? __pfx___x64_sys_futex+0x10/0x10 [ 657.884818][T25065] ? find_held_lock+0x2b/0x80 [ 657.884846][T25065] ? trace_syscall_enter+0xcc/0x120 [ 657.884862][T25065] ? trace_syscall_enter+0xcc/0x120 [ 657.884879][T25065] do_syscall_64+0x123/0x790 [ 657.884895][T25065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.884908][T25065] RIP: 0033:0x7fa13499e159 [ 657.884918][T25065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 657.884929][T25065] RSP: 002b:00007fa1357920e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 657.884941][T25065] RAX: ffffffffffffffda RBX: 00007fa134c25fa8 RCX: 00007fa13499e159 [ 657.884949][T25065] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa134c25fac [ 657.884956][T25065] RBP: 00007fa134c25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 657.884963][T25065] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 657.884970][T25065] R13: 00007fa134c26038 R14: 00007ffc37387e80 R15: 00007ffc37387f68 [ 657.884985][T25065] [ 658.238571][T25075] hub 8-0:1.0: USB hub found [ 658.240683][T25075] hub 8-0:1.0: 1 port detected [ 658.324609][ T5728] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 658.350684][T25076] deleting an unspecified loop device is not supported. [ 658.488989][ T5728] usb 5-1: unable to get BOS descriptor or descriptor too short [ 658.489075][ T5728] usb 5-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=a4.d6 [ 658.497243][ T5728] usb 5-1: config 12 has an invalid interface number: 99 but max is 0 [ 658.497266][ T5728] usb 5-1: config 12 has no interface number 0 [ 658.497298][ T5728] usb 5-1: config 12 interface 99 altsetting 14 endpoint 0xD has invalid maxpacket 552, setting to 64 [ 658.497320][ T5728] usb 5-1: config 12 interface 99 has no altsetting 0 [ 658.516441][ T5728] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.516506][ T5728] usb 5-1: Product: syz [ 658.516537][ T5728] usb 5-1: Manufacturer: syz [ 658.516551][ T5728] usb 5-1: SerialNumber: syz [ 658.945354][ T42] usb 7-1: new low-speed USB device number 106 using dummy_hcd [ 659.128050][ T42] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 659.132820][ T42] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 659.132933][ T42] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 659.132961][ T42] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 659.132988][ T42] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 659.150791][ T42] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 659.150836][ T42] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 659.150927][ T42] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 659.150955][ T42] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 659.167820][ T42] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 659.170135][ T42] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 659.173366][ T42] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 659.177145][ T42] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 659.194923][ T42] usb 7-1: string descriptor 0 read error: -22 [ 659.195063][ T42] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.216479][ T42] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 659.420570][ T43] kauditd_printk_skb: 853 callbacks suppressed [ 659.420616][ T43] audit: type=1400 audit(5100020519.568:10965): avc: denied { read write } for pid=25077 comm="syz.2.7015" name="sisusbvga0" dev="devtmpfs" ino=4183 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 659.433587][ T43] audit: type=1400 audit(5100020519.578:10966): avc: denied { read write open } for pid=25077 comm="syz.2.7015" path="/dev/sisusbvga0" dev="devtmpfs" ino=4183 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 659.444191][ T5728] usb 5-1: no audio or video endpoints found [ 659.450753][ T43] audit: type=1400 audit(5100020519.598:10967): avc: denied { read } for pid=25077 comm="syz.2.7015" name="iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 659.450805][ T43] audit: type=1400 audit(5100020519.598:10968): avc: denied { read open } for pid=25077 comm="syz.2.7015" path="/dev/iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 659.466973][ T5728] usb 5-1: USB disconnect, device number 39 [ 659.529008][ T43] audit: type=1400 audit(5100020519.678:10969): avc: denied { create } for pid=25080 comm="syz.0.7016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 659.537134][ T43] audit: type=1400 audit(5100020519.688:10970): avc: denied { unmount } for pid=21614 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 659.556500][ T43] audit: type=1400 audit(5100020519.708:10971): avc: denied { unmount } for pid=21614 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 659.558727][ T43] audit: type=1400 audit(5100020519.708:10972): avc: denied { setopt } for pid=25080 comm="syz.0.7016" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 659.561492][ T43] audit: type=1400 audit(5100020519.708:10973): avc: denied { mounton } for pid=25080 comm="syz.0.7016" path="/168/proc" dev="tmpfs" ino=948 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 659.562780][ T43] audit: type=1400 audit(5100020519.708:10974): avc: denied { mount } for pid=25080 comm="syz.0.7016" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 659.568745][T25081] FAULT_INJECTION: forcing a failure. [ 659.568745][T25081] name failslab, interval 1, probability 0, space 0, times 0 [ 659.568771][T25081] CPU: 2 UID: 0 PID: 25081 Comm: syz.0.7016 Tainted: G L syzkaller #0 PREEMPT(full) [ 659.568786][T25081] Tainted: [L]=SOFTLOCKUP [ 659.568790][T25081] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 659.568797][T25081] Call Trace: [ 659.568803][T25081] [ 659.568809][T25081] dump_stack_lvl+0x100/0x190 [ 659.568829][T25081] should_fail_ex.cold+0x5/0xa [ 659.568845][T25081] should_failslab+0xc2/0x120 [ 659.568859][T25081] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 659.568872][T25081] ? __alloc_skb+0x140/0x710 [ 659.568885][T25081] __alloc_skb+0x140/0x710 [ 659.568895][T25081] ? __alloc_skb+0x5b7/0x710 [ 659.568905][T25081] ? __pfx___alloc_skb+0x10/0x10 [ 659.568916][T25081] ? ip_ra_control+0x40a/0x590 [ 659.568930][T25081] ? ip_ra_control+0x40a/0x590 [ 659.568946][T25081] inet_netconf_notify_devconf+0x9d/0x170 [ 659.568961][T25081] mrtsock_destruct+0x25d/0x350 [ 659.568974][T25081] ? __pfx_mrtsock_destruct+0x10/0x10 [ 659.568988][T25081] ? __pfx_mrtsock_destruct+0x10/0x10 [ 659.569000][T25081] ip_ra_control+0x43c/0x590 [ 659.569016][T25081] raw_close+0x19/0x30 [ 659.569031][T25081] inet_release+0xed/0x200 [ 659.569045][T25081] __sock_release+0xb3/0x260 [ 659.569057][T25081] ? __pfx_sock_close+0x10/0x10 [ 659.569068][T25081] sock_close+0x1c/0x30 [ 659.569079][T25081] __fput+0x3ff/0xb50 [ 659.569096][T25081] fput_close_sync+0x118/0x250 [ 659.569111][T25081] ? __pfx_fput_close_sync+0x10/0x10 [ 659.569130][T25081] __x64_sys_close+0x8b/0x120 [ 659.569145][T25081] do_syscall_64+0x123/0x790 [ 659.569160][T25081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.569171][T25081] RIP: 0033:0x7f81a839e159 [ 659.569181][T25081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 659.569192][T25081] RSP: 002b:00007f81a9292028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 659.569204][T25081] RAX: ffffffffffffffda RBX: 00007f81a8625fa0 RCX: 00007f81a839e159 [ 659.569211][T25081] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 659.569217][T25081] RBP: 00007f81a843503b R08: 0000000000000000 R09: 0000000000000000 [ 659.569224][T25081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 659.569230][T25081] R13: 00007f81a8626038 R14: 00007f81a8625fa0 R15: 00007ffd998674f8 [ 659.569244][T25081] [ 659.705669][T25083] FAULT_INJECTION: forcing a failure. [ 659.705669][T25083] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 659.707600][T25083] CPU: 1 UID: 0 PID: 25083 Comm: syz.0.7018 Tainted: G L syzkaller #0 PREEMPT(full) [ 659.707619][T25083] Tainted: [L]=SOFTLOCKUP [ 659.707623][T25083] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 659.707630][T25083] Call Trace: [ 659.707635][T25083] [ 659.707639][T25083] dump_stack_lvl+0x100/0x190 [ 659.707660][T25083] should_fail_ex.cold+0x5/0xa [ 659.707677][T25083] _copy_from_user+0x2e/0xd0 [ 659.707696][T25083] kstrtouint_from_user+0xd6/0x1d0 [ 659.707710][T25083] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 659.707727][T25083] ? lock_acquire+0x1d1/0x380 [ 659.707747][T25083] proc_fail_nth_write+0x83/0x220 [ 659.707762][T25083] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 659.707780][T25083] vfs_write+0x2aa/0x1050 [ 659.707792][T25083] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 659.707805][T25083] ? lock_acquire+0x1d1/0x380 [ 659.707816][T25083] ? __fget_files+0x34/0x3d0 [ 659.707830][T25083] ? __pfx_vfs_write+0x10/0x10 [ 659.707840][T25083] ? find_held_lock+0x2b/0x80 [ 659.707855][T25083] ? __fget_files+0x215/0x3d0 [ 659.707871][T25083] ? __fget_files+0x21f/0x3d0 [ 659.707888][T25083] ksys_write+0x12a/0x250 [ 659.707899][T25083] ? __pfx_ksys_write+0x10/0x10 [ 659.707909][T25083] ? trace_syscall_enter+0xcc/0x120 [ 659.707927][T25083] do_syscall_64+0x123/0x790 [ 659.707943][T25083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.707955][T25083] RIP: 0033:0x7f81a835e98e [ 659.707965][T25083] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 659.707975][T25083] RSP: 002b:00007f81a9291fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 659.707987][T25083] RAX: ffffffffffffffda RBX: 00007f81a92926c0 RCX: 00007f81a835e98e [ 659.707994][T25083] RDX: 0000000000000001 RSI: 00007f81a9292090 RDI: 0000000000000004 [ 659.708001][T25083] RBP: 00007f81a9292090 R08: 0000000000000000 R09: 0000000000000000 [ 659.708007][T25083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 659.708014][T25083] R13: 00007f81a8626038 R14: 00007f81a8625fa0 R15: 00007ffd998674f8 [ 659.708028][T25083] [ 659.807975][T25085] netlink: 16 bytes leftover after parsing attributes in process `syz.8.7017'. [ 659.818136][T25089] FAULT_INJECTION: forcing a failure. [ 659.818136][T25089] name failslab, interval 1, probability 0, space 0, times 0 [ 659.818223][T25089] CPU: 2 UID: 0 PID: 25089 Comm: syz.0.7019 Tainted: G L syzkaller #0 PREEMPT(full) [ 659.818260][T25089] Tainted: [L]=SOFTLOCKUP [ 659.818268][T25089] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 659.818279][T25089] Call Trace: [ 659.818286][T25089] [ 659.818295][T25089] dump_stack_lvl+0x100/0x190 [ 659.818330][T25089] should_fail_ex.cold+0x5/0xa [ 659.818357][T25089] should_failslab+0xc2/0x120 [ 659.818382][T25089] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 659.818401][T25089] ? sidtab_sid2str_get+0x84/0x670 [ 659.818422][T25089] ? sidtab_sid2str_get+0x17a/0x670 [ 659.818447][T25089] kmemdup_noprof+0x29/0x60 [ 659.818475][T25089] sidtab_sid2str_get+0x17a/0x670 [ 659.818496][T25089] security_sid_to_context_core+0x373/0x700 [ 659.818520][T25089] avc_audit_post_callback+0x109/0x910 [ 659.818555][T25089] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 659.818581][T25089] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 659.818600][T25089] ? skb_put+0x138/0x180 [ 659.818624][T25089] ? audit_log_n_string+0x2a3/0x5a0 [ 659.818648][T25089] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 659.818667][T25089] common_lsm_audit+0x23f/0x2b0 [ 659.818694][T25089] ? __pfx_common_lsm_audit+0x10/0x10 [ 659.818710][T25089] ? avc_denied+0x14a/0x190 [ 659.818738][T25089] slow_avc_audit+0x186/0x210 [ 659.818763][T25089] ? __pfx_slow_avc_audit+0x10/0x10 [ 659.818787][T25089] ? find_held_lock+0x2b/0x80 [ 659.818809][T25089] ? avc_has_perm_noaudit+0x2b3/0x3b0 [ 659.818841][T25089] avc_has_perm+0x1a6/0x1e0 [ 659.818867][T25089] ? __pfx_avc_has_perm+0x10/0x10 [ 659.818885][T25089] ? __might_fault+0xc5/0x140 [ 659.818913][T25089] ? find_held_lock+0x2b/0x80 [ 659.818937][T25089] ? __might_fault+0xc5/0x140 [ 659.818959][T25089] ? __might_fault+0xc5/0x140 [ 659.818985][T25089] selinux_bpf+0xf4/0x150 [ 659.819010][T25089] security_bpf+0xa5/0x260 [ 659.819029][T25089] __sys_bpf+0x440/0x4a30 [ 659.819053][T25089] ? __pfx___sys_bpf+0x10/0x10 [ 659.819071][T25089] ? trace_event_buffer_commit+0x20a/0xa80 [ 659.819113][T25089] ? __pfx_eprobe_trigger_func+0x10/0x10 [ 659.819170][T25089] ? trace_event_buffer_commit+0x20a/0xa80 [ 659.819201][T25089] ? find_held_lock+0x2b/0x80 [ 659.819229][T25089] ? __x64_sys_bpf+0xce/0x140 [ 659.819244][T25089] __x64_sys_bpf+0xce/0x140 [ 659.819261][T25089] ? rcu_is_watching+0x13/0xc0 [ 659.819289][T25089] do_syscall_64+0x123/0x790 [ 659.819317][T25089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.819334][T25089] RIP: 0033:0x7f81a839e159 [ 659.819345][T25092] netlink: 25 bytes leftover after parsing attributes in process `syz.8.7017'. [ 659.819348][T25089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 659.819364][T25089] RSP: 002b:00007f81a9292028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 659.819381][T25089] RAX: ffffffffffffffda RBX: 00007f81a8625fa0 RCX: 00007f81a839e159 [ 659.819392][T25089] RDX: 0000000000000023 RSI: 000020000000e000 RDI: 0000000000000005 [ 659.819403][T25089] RBP: 00007f81a9292090 R08: 0000000000000000 R09: 0000000000000000 [ 659.819415][T25089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 659.819426][T25089] R13: 00007f81a8626038 R14: 00007f81a8625fa0 R15: 00007ffd998674f8 [ 659.819453][T25089] [ 660.056722][T25096] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7020'. [ 660.072868][T25097] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7020'. [ 660.295501][ T5809] net_ratelimit: 35 callbacks suppressed [ 660.295578][ T5809] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 660.404603][ T5809] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 660.472843][T25117] ip_tables: iptables: counters copy to user failed while replacing table [ 660.526487][ T5809] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 660.644646][ T5809] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 660.665631][ T1355] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 660.722317][T25123] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 660.723325][T25123] overlayfs: failed to set xattr on upper [ 660.723333][T25123] overlayfs: ...falling back to redirect_dir=nofollow. [ 660.723338][T25123] overlayfs: ...falling back to index=off. [ 660.723342][T25123] overlayfs: ...falling back to uuid=null. [ 660.754679][ T5809] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 660.836570][ T1355] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 660.849682][ T1355] usb 5-1: config 0 interface 0 altsetting 255 bulk endpoint 0x4 has invalid maxpacket 61 [ 660.849768][ T1355] usb 5-1: config 0 interface 0 has no altsetting 0 [ 660.864619][ T5809] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 660.884000][ T1355] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 660.884075][ T1355] usb 5-1: Product: syz [ 660.884120][ T1355] usb 5-1: Manufacturer: syz [ 660.884131][ T1355] usb 5-1: SerialNumber: syz [ 660.887372][ T1355] usb 5-1: config 0 descriptor?? [ 660.908135][T25116] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 660.917368][ T1355] usb 5-1: selecting invalid altsetting 0 [ 660.975105][ T5809] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 661.086383][ T5809] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 661.133279][ C2] ================================================================== [ 661.133315][ C2] BUG: KASAN: slab-use-after-free in find_endpoint+0x2a3/0x2c0 [ 661.133352][ C2] Read of size 1 at addr ffff88802c3e0a62 by task syz.0.7028/25116 [ 661.133369][ C2] [ 661.133382][ C2] CPU: 2 UID: 0 PID: 25116 Comm: syz.0.7028 Tainted: G L syzkaller #0 PREEMPT(full) [ 661.133409][ C2] Tainted: [L]=SOFTLOCKUP [ 661.133416][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 661.133429][ C2] Call Trace: [ 661.133437][ C2] [ 661.133446][ C2] dump_stack_lvl+0x100/0x190 [ 661.133476][ C2] print_report+0x13d/0x4b0 [ 661.133504][ C2] ? __virt_addr_valid+0x239/0x430 [ 661.133525][ C2] ? find_endpoint+0x2a3/0x2c0 [ 661.133549][ C2] kasan_report+0xdf/0x1c0 [ 661.133575][ C2] ? find_endpoint+0x2a3/0x2c0 [ 661.133602][ C2] find_endpoint+0x2a3/0x2c0 [ 661.133628][ C2] dummy_timer+0x500/0x3700 [ 661.133661][ C2] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 661.133684][ C2] ? debug_object_deactivate+0x2e4/0x3b0 [ 661.133709][ C2] ? __pfx_dummy_timer+0x10/0x10 [ 661.133732][ C2] ? mark_held_locks+0x40/0x70 [ 661.133747][ C2] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 661.133765][ C2] ? __pfx_dummy_timer+0x10/0x10 [ 661.133800][ C2] __hrtimer_run_queues+0x462/0x9c0 [ 661.133826][ C2] hrtimer_run_softirq+0x1ca/0x360 [ 661.133848][ C2] handle_softirqs+0x1e6/0x9d0 [ 661.133869][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 661.133888][ C2] ? _raw_spin_unlock+0x28/0x50 [ 661.133907][ C2] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 661.133936][ C2] __irq_exit_rcu+0x16a/0x210 [ 661.133955][ C2] irq_exit_rcu+0x9/0x30 [ 661.133974][ C2] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 661.133997][ C2] [ 661.134004][ C2] [ 661.134012][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 661.134034][ C2] RIP: 0010:__asan_memcpy+0x34/0x60 [ 661.134054][ C2] Code: 48 89 f5 53 48 89 d3 48 8b 4c 24 18 31 d2 48 89 de 48 89 ef e8 cd f1 ff ff 84 c0 74 2b 48 8b 4c 24 18 ba 01 00 00 00 48 89 de <4c> 89 e7 e8 b4 f1 ff ff 84 c0 74 12 48 89 da 48 89 ee 5b 4c 89 e7 [ 661.134097][ C2] RSP: 0018:ffffc900036a7988 EFLAGS: 00000202 [ 661.134115][ C2] RAX: 0000000000000001 RBX: 0000000000000002 RCX: ffffffff896724b7 [ 661.134130][ C2] RDX: 0000000000000001 RSI: 0000000000000002 RDI: ffffc900036a7a50 [ 661.134141][ C2] RBP: ffffc900036a7a50 R08: 0000000000000000 R09: fffff520006d4f4a [ 661.134153][ C2] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888052cc0602 [ 661.134163][ C2] R13: ffff8880225aae00 R14: dffffc0000000000 R15: 0000000000000002 [ 661.134179][ C2] ? mulaw_decode+0x507/0x730 [ 661.134204][ C2] ? __asan_memcpy+0x23/0x60 [ 661.134215][ C2] mulaw_decode+0x507/0x730 [ 661.134233][ C2] ? __pfx_mulaw_decode+0x10/0x10 [ 661.134248][ C2] ? snd_pcm_oss_write+0x49a/0xa30 [ 661.134263][ C2] mulaw_transfer+0x27b/0x2d0 [ 661.134279][ C2] snd_pcm_plug_write_transfer+0x222/0x400 [ 661.134295][ C2] ? __pfx_snd_pcm_plug_write_transfer+0x10/0x10 [ 661.134314][ C2] ? snd_pcm_format_physical_width+0x76/0xa0 [ 661.134330][ C2] ? snd_pcm_plug_client_channels_buf+0x212/0x450 [ 661.134346][ C2] snd_pcm_oss_write2+0x24a/0x400 [ 661.134360][ C2] ? __pfx_snd_pcm_oss_write2+0x10/0x10 [ 661.134373][ C2] ? snd_pcm_kernel_ioctl+0x12e/0x280 [ 661.134389][ C2] ? snd_pcm_oss_prepare+0x11e/0x240 [ 661.134401][ C2] snd_pcm_oss_write+0x729/0xa30 [ 661.134415][ C2] ? security_file_permission+0x76/0x210 [ 661.134429][ C2] vfs_write+0x2aa/0x1050 [ 661.134440][ C2] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 661.134453][ C2] ? lock_acquire+0x1d1/0x380 [ 661.134464][ C2] ? __fget_files+0x34/0x3d0 [ 661.134477][ C2] ? __pfx_vfs_write+0x10/0x10 [ 661.134486][ C2] ? find_held_lock+0x2b/0x80 [ 661.134501][ C2] ? __fget_files+0x215/0x3d0 [ 661.134512][ C2] ? __fget_files+0x215/0x3d0 [ 661.134525][ C2] ? __fget_files+0x21f/0x3d0 [ 661.134538][ C2] ksys_write+0x12a/0x250 [ 661.134549][ C2] ? __pfx_ksys_write+0x10/0x10 [ 661.134559][ C2] ? trace_syscall_enter+0xcc/0x120 [ 661.134573][ C2] do_syscall_64+0x123/0x790 [ 661.134587][ C2] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.134598][ C2] RIP: 0033:0x7f81a839e159 [ 661.134608][ C2] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 661.134619][ C2] RSP: 002b:00007f81a9292028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 661.134629][ C2] RAX: ffffffffffffffda RBX: 00007f81a8625fa0 RCX: 00007f81a839e159 [ 661.134637][ C2] RDX: 00000000fffffcd9 RSI: 0000200000002200 RDI: 0000000000000006 [ 661.134644][ C2] RBP: 00007f81a843503b R08: 0000000000000000 R09: 0000000000000000 [ 661.134651][ C2] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 661.134657][ C2] R13: 00007f81a8626038 R14: 00007f81a8625fa0 R15: 00007ffd998674f8 [ 661.134667][ C2] [ 661.134672][ C2] [ 661.134674][ C2] Allocated by task 0: [ 661.134681][ C2] kasan_save_stack+0x30/0x50 [ 661.134692][ C2] kasan_save_track+0x14/0x30 [ 661.134702][ C2] __kasan_kmalloc+0xaa/0xb0 [ 661.134712][ C2] __kmalloc_noprof+0x32f/0x840 [ 661.134721][ C2] ieee802_11_parse_elems_full+0x17c/0x3c90 [ 661.134732][ C2] ieee80211_inform_bss+0x159/0x1170 [ 661.134747][ C2] cfg80211_inform_single_bss_data+0x898/0x1dc0 [ 661.134761][ C2] cfg80211_inform_bss_data+0x230/0x3c20 [ 661.134774][ C2] cfg80211_inform_bss_frame_data+0x245/0x7c0 [ 661.134788][ C2] ieee80211_bss_info_update+0x310/0xab0 [ 661.134803][ C2] ieee80211_scan_rx+0x4e6/0xb60 [ 661.134819][ C2] __ieee80211_rx_handle_packet+0xbab/0xfc0 [ 661.134830][ C2] ieee80211_rx_list+0xf19/0x2160 [ 661.134839][ C2] ieee80211_rx_napi+0xdc/0x400 [ 661.134848][ C2] ieee80211_handle_queued_frames+0xc8/0x120 [ 661.134862][ C2] tasklet_action_common+0x2de/0x3d0 [ 661.134874][ C2] handle_softirqs+0x1e6/0x9d0 [ 661.134883][ C2] __irq_exit_rcu+0x16a/0x210 [ 661.134893][ C2] irq_exit_rcu+0x9/0x30 [ 661.134902][ C2] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 661.134913][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 661.134924][ C2] [ 661.134927][ C2] Freed by task 0: [ 661.134931][ C2] kasan_save_stack+0x30/0x50 [ 661.134942][ C2] kasan_save_track+0x14/0x30 [ 661.134952][ C2] kasan_save_free_info+0x3b/0x70 [ 661.134966][ C2] __kasan_slab_free+0x5f/0x80 [ 661.134977][ C2] kfree+0x22b/0x6d0 [ 661.134990][ C2] ieee80211_inform_bss+0x8f5/0x1170 [ 661.135004][ C2] cfg80211_inform_single_bss_data+0x898/0x1dc0 [ 661.135018][ C2] cfg80211_inform_bss_data+0x230/0x3c20 [ 661.135032][ C2] cfg80211_inform_bss_frame_data+0x245/0x7c0 [ 661.135046][ C2] ieee80211_bss_info_update+0x310/0xab0 [ 661.135060][ C2] ieee80211_scan_rx+0x4e6/0xb60 [ 661.135074][ C2] __ieee80211_rx_handle_packet+0xbab/0xfc0 [ 661.135084][ C2] ieee80211_rx_list+0xf19/0x2160 [ 661.135093][ C2] ieee80211_rx_napi+0xdc/0x400 [ 661.135102][ C2] ieee80211_handle_queued_frames+0xc8/0x120 [ 661.135116][ C2] tasklet_action_common+0x2de/0x3d0 [ 661.135127][ C2] handle_softirqs+0x1e6/0x9d0 [ 661.135136][ C2] __irq_exit_rcu+0x16a/0x210 [ 661.135148][ C2] irq_exit_rcu+0x9/0x30 [ 661.135158][ C2] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 661.135169][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 661.135180][ C2] [ 661.135183][ C2] The buggy address belongs to the object at ffff88802c3e0800 [ 661.135183][ C2] which belongs to the cache kmalloc-1k of size 1024 [ 661.135191][ C2] The buggy address is located 610 bytes inside of [ 661.135191][ C2] freed 1024-byte region [ffff88802c3e0800, ffff88802c3e0c00) [ 661.135202][ C2] [ 661.135205][ C2] The buggy address belongs to the physical page: [ 661.135210][ C2] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802c3e0800 pfn:0x2c3e0 [ 661.135220][ C2] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 661.135228][ C2] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 661.135239][ C2] page_type: f5(slab) [ 661.135248][ C2] raw: 00fff00000000240 ffff88801c042dc0 ffffea00015a1010 ffffea0000b3cc10 [ 661.135258][ C2] raw: ffff88802c3e0800 000000000010000c 00000000f5000000 0000000000000000 [ 661.135267][ C2] head: 00fff00000000240 ffff88801c042dc0 ffffea00015a1010 ffffea0000b3cc10 [ 661.135276][ C2] head: ffff88802c3e0800 000000000010000c 00000000f5000000 0000000000000000 [ 661.135285][ C2] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 661.135294][ C2] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 661.135300][ C2] page dumped because: kasan: bad access detected [ 661.135308][ C2] page_owner tracks the page as allocated [ 661.135312][ C2] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1162, tgid 1162 (kworker/u33:10), ts 43113300354 [ 661.135329][ C2] post_alloc_hook+0xfd/0x120 [ 661.135344][ C2] get_page_from_freelist+0x110d/0x35d0 [ 661.135359][ C2] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 661.135374][ C2] new_slab+0xa9/0x6e0 [ 661.135387][ C2] refill_objects+0xe3/0x410 [ 661.135402][ C2] __pcs_replace_empty_main+0x35e/0x650 [ 661.135416][ C2] __kmalloc_noprof+0x67c/0x840 [ 661.135425][ C2] ieee802_11_parse_elems_full+0x17c/0x3c90 [ 661.135436][ C2] ieee80211_ibss_rx_queued_mgmt+0xc96/0x1c70 [ 661.135451][ C2] ieee80211_iface_work+0xa9a/0x1070 [ 661.135466][ C2] cfg80211_wiphy_work+0x2b7/0x550 [ 661.135481][ C2] process_one_work+0xac7/0x1b10 [ 661.135495][ C2] worker_thread+0x5ef/0xe50 [ 661.135509][ C2] kthread+0x373/0x450 [ 661.135522][ C2] ret_from_fork+0x730/0xd60 [ 661.135533][ C2] ret_from_fork_asm+0x1a/0x30 [ 661.135543][ C2] page last free pid 10 tgid 10 ts 43106267870 stack trace: [ 661.135551][ C2] free_pages_prepare+0x586/0xe00 [ 661.135564][ C2] __free_contig_range_common+0x14f/0x250 [ 661.135578][ C2] free_pages_bulk+0x12a/0x200 [ 661.135587][ C2] vm_area_free_pages+0xb2/0x2a0 [ 661.135597][ C2] vfree+0xf7/0x6d0 [ 661.135607][ C2] delayed_vfree_work+0x56/0x80 [ 661.135619][ C2] process_one_work+0xac7/0x1b10 [ 661.135633][ C2] worker_thread+0x5ef/0xe50 [ 661.135647][ C2] kthread+0x373/0x450 [ 661.135659][ C2] ret_from_fork+0x730/0xd60 [ 661.135669][ C2] ret_from_fork_asm+0x1a/0x30 [ 661.135680][ C2] [ 661.135682][ C2] Memory state around the buggy address: [ 661.135687][ C2] ffff88802c3e0900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 661.135694][ C2] ffff88802c3e0980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 661.135702][ C2] >ffff88802c3e0a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 661.135707][ C2] ^ [ 661.135713][ C2] ffff88802c3e0a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 661.135720][ C2] ffff88802c3e0b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 661.135726][ C2] ================================================================== [ 661.135733][ C2] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 661.502161][ C2] CPU: 2 UID: 0 PID: 25116 Comm: syz.0.7028 Tainted: G L syzkaller #0 PREEMPT(full) [ 661.505673][ C2] Tainted: [L]=SOFTLOCKUP [ 661.507125][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 661.510529][ C2] Call Trace: [ 661.511696][ C2] [ 661.512668][ C2] dump_stack_lvl+0x100/0x190 [ 661.514262][ C2] vpanic+0x553/0x970 [ 661.515537][ C2] ? __pfx_vpanic+0x10/0x10 [ 661.517131][ C2] ? __pfx_vprintk_emit+0x10/0x10 [ 661.518811][ C2] ? find_endpoint+0x2a3/0x2c0 [ 661.520407][ C2] panic+0xd1/0xe0 [ 661.521650][ C2] ? __pfx_panic+0x10/0x10 [ 661.523092][ C2] ? end_report.part.0+0x23/0x90 [ 661.525024][ C2] ? rcu_is_watching+0x13/0xc0 [ 661.526683][ C2] ? end_report.part.0+0x23/0x90 [ 661.528745][ C2] check_panic_on_warn.cold+0x19/0x34 [ 661.530515][ C2] end_report.part.0+0x3a/0x90 [ 661.532015][ C2] kasan_report.cold+0xe/0x18 [ 661.533555][ C2] ? find_endpoint+0x2a3/0x2c0 [ 661.535314][ C2] find_endpoint+0x2a3/0x2c0 [ 661.536787][ C2] dummy_timer+0x500/0x3700 [ 661.538353][ C2] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 661.540210][ C2] ? debug_object_deactivate+0x2e4/0x3b0 [ 661.542087][ C2] ? __pfx_dummy_timer+0x10/0x10 [ 661.543792][ C2] ? mark_held_locks+0x40/0x70 [ 661.545764][ C2] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 661.548181][ C2] ? __pfx_dummy_timer+0x10/0x10 [ 661.550288][ C2] __hrtimer_run_queues+0x462/0x9c0 [ 661.552458][ C2] hrtimer_run_softirq+0x1ca/0x360 [ 661.554595][ C2] handle_softirqs+0x1e6/0x9d0 [ 661.556214][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 661.557862][ C2] ? _raw_spin_unlock+0x28/0x50 [ 661.559481][ C2] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 661.561341][ C2] __irq_exit_rcu+0x16a/0x210 [ 661.562955][ C2] irq_exit_rcu+0x9/0x30 [ 661.564413][ C2] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 661.566380][ C2] [ 661.567527][ C2] [ 661.568434][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 661.570329][ C2] RIP: 0010:__asan_memcpy+0x34/0x60 [ 661.572003][ C2] Code: 48 89 f5 53 48 89 d3 48 8b 4c 24 18 31 d2 48 89 de 48 89 ef e8 cd f1 ff ff 84 c0 74 2b 48 8b 4c 24 18 ba 01 00 00 00 48 89 de <4c> 89 e7 e8 b4 f1 ff ff 84 c0 74 12 48 89 da 48 89 ee 5b 4c 89 e7 [ 661.578346][ C2] RSP: 0018:ffffc900036a7988 EFLAGS: 00000202 [ 661.580387][ C2] RAX: 0000000000000001 RBX: 0000000000000002 RCX: ffffffff896724b7 [ 661.583004][ C2] RDX: 0000000000000001 RSI: 0000000000000002 RDI: ffffc900036a7a50 [ 661.585613][ C2] RBP: ffffc900036a7a50 R08: 0000000000000000 R09: fffff520006d4f4a [ 661.588154][ C2] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888052cc0602 [ 661.590730][ C2] R13: ffff8880225aae00 R14: dffffc0000000000 R15: 0000000000000002 [ 661.593479][ C2] ? mulaw_decode+0x507/0x730 [ 661.595456][ C2] ? __asan_memcpy+0x23/0x60 [ 661.597369][ C2] mulaw_decode+0x507/0x730 [ 661.599005][ C2] ? __pfx_mulaw_decode+0x10/0x10 [ 661.600690][ C2] ? snd_pcm_oss_write+0x49a/0xa30 [ 661.602370][ C2] mulaw_transfer+0x27b/0x2d0 [ 661.603961][ C2] snd_pcm_plug_write_transfer+0x222/0x400 [ 661.606232][ C2] ? __pfx_snd_pcm_plug_write_transfer+0x10/0x10 [ 661.608768][ C2] ? snd_pcm_format_physical_width+0x76/0xa0 [ 661.611168][ C2] ? snd_pcm_plug_client_channels_buf+0x212/0x450 [ 661.613455][ C2] snd_pcm_oss_write2+0x24a/0x400 [ 661.615102][ C2] ? __pfx_snd_pcm_oss_write2+0x10/0x10 [ 661.616931][ C2] ? snd_pcm_kernel_ioctl+0x12e/0x280 [ 661.618722][ C2] ? snd_pcm_oss_prepare+0x11e/0x240 [ 661.620467][ C2] snd_pcm_oss_write+0x729/0xa30 [ 661.622120][ C2] ? security_file_permission+0x76/0x210 [ 661.623840][ C2] vfs_write+0x2aa/0x1050 [ 661.625377][ C2] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 661.627074][ C2] ? lock_acquire+0x1d1/0x380 [ 661.628617][ C2] ? __fget_files+0x34/0x3d0 [ 661.630172][ C2] ? __pfx_vfs_write+0x10/0x10 [ 661.631693][ C2] ? find_held_lock+0x2b/0x80 [ 661.633156][ C2] ? __fget_files+0x215/0x3d0 [ 661.634949][ C2] ? __fget_files+0x215/0x3d0 [ 661.636695][ C2] ? __fget_files+0x21f/0x3d0 [ 661.638282][ C2] ksys_write+0x12a/0x250 [ 661.639672][ C2] ? __pfx_ksys_write+0x10/0x10 [ 661.641203][ C2] ? trace_syscall_enter+0xcc/0x120 [ 661.642968][ C2] do_syscall_64+0x123/0x790 [ 661.644470][ C2] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.646433][ C2] RIP: 0033:0x7f81a839e159 [ 661.647829][ C2] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 661.654154][ C2] RSP: 002b:00007f81a9292028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 661.657292][ C2] RAX: ffffffffffffffda RBX: 00007f81a8625fa0 RCX: 00007f81a839e159 [ 661.659780][ C2] RDX: 00000000fffffcd9 RSI: 0000200000002200 RDI: 0000000000000006 [ 661.662334][ C2] RBP: 00007f81a843503b R08: 0000000000000000 R09: 0000000000000000 [ 661.665241][ C2] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 661.668453][ C2] R13: 00007f81a8626038 R14: 00007f81a8625fa0 R15: 00007ffd998674f8 [ 661.671193][ C2] [ 661.672816][ C2] Kernel Offset: disabled [ 661.674369][ C2] Rebooting in 86400 seconds.. VM DIAGNOSIS: 07:03:35 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffff88802d8a0c50 RCX=00000000000000a0 RDX=0000000000000000 RSI=ffff88802d8a0c28 RDI=ffffffff8edec2e0 RBP=0000000000000007 RSP=ffffc900059d78a0 R8 =0000000000000000 R9 =0000000000000001 R10=0000000000000004 R11=0000000000000001 R12=ffff88802d8a0000 R13=0000000000000002 R14=0000000000000000 R15=ffffffff8edec2e0 RIP=ffffffff81e726f2 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 000055557ef2c500 ffffffff 00c00000 GS =0000 ffff8880d5b5d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffc37386b80 CR3=0000000034c30000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000020081 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc373871e0 0000003000000018 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7379735f65676173 752e746363617570 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc37388456 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc37388456 00007ffc3738845c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa134a3561e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa134a3565e ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa134a357c2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa134a35650 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 2074657365720064 656c696166202973 2528746174736c00 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 0551405640570041 40494c4443050c56 000d514451564900 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000098 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000098 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000000 RBX=dffffc0000000000 RCX=0000000000000001 RDX=1ffff1100aefac14 RSI=ffffffff8c621000 RDI=ffffffff8c621040 RBP=0000000000000040 RSP=ffffc900042d6cb0 R8 =0000000000000000 R9 =fffff94000170e98 R10=ffffea0000b874c7 R11=0000000000000001 R12=ffff8880571f6040 R13=0000000000000cc0 R14=0000000000000001 R15=ffff8880577d4b00 RIP=ffffffff8bd04902 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f6abb3f66c0 ffffffff 00c00000 GS =0000 ffff8880d5c5d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffc863bf010 CR3=000000005b321000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000feffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000001000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=72f076a42a84e8fa 74bb1803632ab3e1 72f076a42a84e8fa 74bb1803632ab3e1 72f076a42a84e8fa 74bb1803632ab3e1 72f076a42a84e8fa 74bb1803632ab3e1 ZMM18=1df2c55c9243949c 3b3e260d8b5fcbf7 1df2c55c9243949c 3b3e260d8b5fcbf7 1df2c55c9243949c 3b3e260d8b5fcbf7 1df2c55c9243949c 3b3e260d8b5fcbf7 ZMM19=092d000000000000 0000000000000005 092d000000000000 0000000000000004 092d000000000000 0000000000000003 092d000000000000 0000000000000002 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000317a797301ff fffffffffffffedf ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0833800304c08080 8810001a80040108 0006015fae248182 08001ae003001000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1ad0030010001ac0 030210001ab00300 10001990030fffff ffffffff04198003 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0300000000000008 ffffffae00000000 0300000000000008 ffffff9e00000000 ZMM25=f77cc2edf77cc2ed f77cc2edf77cc2ed f77cc2edf77cc2ed f77cc2edf77cc2ed f77cc2edf77cc2ed f77cc2edf77cc2ed f77cc2edf77cc2ed f77cc2edf77cc2ed ZMM26=93ac26d693ac26d6 93ac26d693ac26d6 93ac26d693ac26d6 93ac26d693ac26d6 93ac26d693ac26d6 93ac26d693ac26d6 93ac26d693ac26d6 93ac26d693ac26d6 ZMM27=c421c1eac421c1ea c421c1eac421c1ea c421c1eac421c1ea c421c1eac421c1ea c421c1eac421c1ea c421c1eac421c1ea c421c1eac421c1ea c421c1eac421c1ea ZMM28=000000400000003f 0000003e0000003d 0000003c0000003b 0000003a00000039 0000003800000037 0000003600000035 0000003400000033 0000003200000031 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=1e2100001e210000 1e2100001e210000 1e2100001e210000 1e2100001e210000 1e2100001e210000 1e2100001e210000 1e2100001e210000 1e2100001e210000 info registers vcpu 2 CPU#2 RAX=000000000000000d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85b043a5 RDI=ffffffff9bc67ca0 RBP=ffffffff9bc67c60 RSP=ffffc900006583c8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3230383838666666 R12=0000000000000000 R13=000000000000000d R14=0000000000000007 R15=ffffc900006586e0 RIP=ffffffff85b043cf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f81a92926c0 ffffffff 00c00000 GS =0000 ffff8880d5d5d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000002200 CR3=0000000037cc6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffff800 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd998679e6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd998679e6 00007ffd998679ec ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f81a843561e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f81a843565e ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f81a84357c2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f81a8435650 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000336f69 6475612f7665642f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000104c4a 4756420c5546470c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f81a85f25f8 00007f81a85f25c8 00007f81a85f2600 00007f81a85f25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=dffffc0000000000 RBX=ffff88802310b930 RCX=0000000000000000 RDX=ffffc900042af63c RSI=ffffffff84e191c5 RDI=ffffc900042af63c RBP=ffffc900042af638 RSP=ffffc900042af508 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000800 R11=0000000000000001 R12=000000000000004c R13=00000000000007ff R14=0000000000000133 R15=dffffc0000000000 RIP=ffffffff84e19261 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f6bc3748880 ffffffff 00c00000 GS =0000 ffff8880d5e5d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f6bc382c130 CR3=000000003d20d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000a020001 Opmask01=0000000000001000 Opmask02=0000000003ffffff Opmask03=0000000022080800 Opmask04=00000000fffffbff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c65732d64616572 68742f636f72702f ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6574616572637366 2f727474612f666c ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 00007ffc863c0a30 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6bc2fd17f0 00007f6bc2fd17e0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6bc31f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffff0000000000ff ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2a2a2a2a2a2a2a2a 2a2a2a2a2a2a2a2a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2a2a2a2a2a2a2a2a 2a2a2a2a2a2a2a2a ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 727275630073252f 727474612f64252f 6b7361742f666c65 732f636f72702f00 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 575750460056000a 575151440a41000a 4e5644510a434940 560a464a57550a00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 0000000000000000 00007ffc863c0a30 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055c6417ef810 000055c6417f1800 000055c6415a4370 000055c6417ef790 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055c6417ef710 000055c6417e2730 000055c6417deda0 000055c6417f8e40 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055c6417e4030 000055c6417e3fd0 000055c6417f97c0 000055c6417e6ce0 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055c6417e6c80 000055c6417dc6f0 000055c6417f2eb0 000055c6417f2e30 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000a0049000a0000 0a000a00645f205f 646d5f000a00004d 544e472000004600 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000