last executing test programs: 8.654579067s ago: executing program 0 (id=141): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1e6) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x4001, 0x3, 0xa38, 0x0, 0xb, 0x148, 0x0, 0x148, 0x9a0, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x880, 0x8e8, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@u32={{0x7e0}, {[], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa98) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000240)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000f80)={0x30, r3, 0x801, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x45a}, @NL80211_MESHCONF_FORWARDING={0x5, 0x13, 0x1}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4840}, 0x4000) r6 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000280)=[{0xff8d, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="ca7946adac26f60406cb781585d1ed95f390a76300", 0x15}, {&(0x7f0000000340)="c8134e45d62497d3b2b9bdcb5befc470a5cb7451e0fd2702ce61bb90", 0x1c}], 0x2}], 0x1, 0x40800) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x3f) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001000)=@generic={&(0x7f0000000fc0)='./dev\x00', 0x0, 0x8}, 0x18) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000001140)={r4, &(0x7f0000001040)='raw\x00', 0x103000, &(0x7f0000001080)={@align=0x2a1d, {0x7fff, 0x100, 0x7f, 0x1}}, 0x9, &(0x7f00000010c0)={@_ha_fsid}, &(0x7f0000001100)=0x77}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000001240)={'syztnl1\x00', &(0x7f00000011c0)={'syztnl2\x00', 0x0, 0x29, 0xa, 0x6, 0x398, 0x1, @private1, @mcast2, 0x700, 0xeb604357180f3839, 0x3}}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001180)={@ifindex=r9, r7, 0x29, 0x0, r8}, 0x20) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r10 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) accept(r10, &(0x7f0000001280)=@nfc_llcp, &(0x7f0000001300)=0x80) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil) r11 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x48) ioctl$EXT4_IOC_GROUP_ADD(r11, 0x40286608, &(0x7f0000000480)={0x8, 0x2, 0x9, 0xb, 0xfffbffff, 0xc}) getsockname$packet(r11, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) 8.191539521s ago: executing program 0 (id=144): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x20000) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = fanotify_init(0x3, 0x400) fstat(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, r4, r4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000a52000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000100)="67f2e00d64360fae8197530f00cf64f75dd72e3edb3b0f38f173882e64640f01c5baf80c66b866878a8566efbafc0ced0fc72ff30fc7b30000", 0x39}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8.011130559s ago: executing program 0 (id=145): r0 = io_uring_setup(0x6a40, &(0x7f0000000000)={0x0, 0x2f9c, 0x400, 0x2, 0x260}) syz_io_uring_setup(0x4e0, &(0x7f0000000080)={0x0, 0x79af, 0x3180, 0x8000, 0x400252, 0x0, r0}, 0x0, 0x0, 0x0) exit(0xf) pselect6(0x40, &(0x7f0000000100)={0x2, 0x5, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x7fff}, &(0x7f0000000140)={0x1f, 0x0, 0x0, 0x0, 0x10001, 0xffffffffffffffff}, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000001700)=0x1, 0x4) sendto$inet6(r1, &(0x7f0000001800)="a6", 0x1, 0x20000045, &(0x7f0000001840)={0xa, 0x4001, 0xfffb, @loopback, 0xfffffffd}, 0x1c) 5.943117871s ago: executing program 0 (id=160): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/ports/1\x00', 0x1ff) (async) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/ports/1\x00', 0x76801, 0x100) (async) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x8, &(0x7f0000000440), 0x8) sendmsg$kcm(r1, &(0x7f0000000480)={&(0x7f00000004c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x1}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000580)='a', 0x1}], 0x1}, 0x0) (async) sendmsg$inet(r1, &(0x7f00000005c0)={&(0x7f0000000600)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000680)="a5", 0x1}], 0x1}, 0x8001) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000006c0)={0x1, 0x5}, &(0x7f0000000700)=0x8) (async) r3 = openat(r0, 0x0, 0x4403, 0x0) write(r3, &(0x7f00000001c0)='tc', 0x2) (async) syz_emit_ethernet(0x6a, &(0x7f00000003c0)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x8000, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0xd, 0x4]}, {0xdd86, 0x88be, 0x0, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}}, {0x8, 0x22eb, 0x4, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x2, {0x0, 0x3}}}}}}}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0) write(r4, &(0x7f0000000340)='i', 0x1) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0xec, 0x2f, 0x5, 0x70bd27, 0x25dfdbfb, {0x4}, [@typed={0xd8, 0x18, 0x0, 0x0, @str='\x00\xcfkN\'\xb9\xad\n\x16\x04\x00\xf5\"q\xb6*F+l\x95\xf2v\x1a\xf3z\x92i\xdcT\xd8\xdb\xca>e\xa3\x1a\xb0\x8d\x98K\xb7\x04]\x01b\xa5h\xe9M(\x0e\xa2S\xea\xeco\xef4{\xeaG\x9cg\xa2T\\B\xbc\x1e\xeb\x804$\xba\xe7\x12$\x15\xd0\xb8S\x8b\xcd7\xeb\x9d\xc7\xa5\xf6\xd5\x829?.,R\xa0Q\x13I\x1e\xfc\xd3Q\x81\x8f\x83a8\xaa\xe5\x94\x18n\xb8\x99iv\xe4\xb79\xf3\x13\xc6\xfau\x10o\x1b\x88\'\xe6\x02r\x03\xf6\\WH\xb5t\x11\xf4I\t5&D\xf3j\x12Z\xda1P\x19\xd12\x86\x11\xbe\xc9C\'\xecv0@oI|\xe6\f\n\x9e\x13\xe6\xd8\xd9~)ak\x19\xaas?\xa1\xad9k\xe6\xccf9\xacs\x03J`\x87\xe57\xf9\xb2\xf9\x04\xdd\xc1\xb0\xa3\x1a'}]}, 0xec}, 0x1, 0x0, 0x0, 0x42914}, 0x4000014) 5.031932365s ago: executing program 0 (id=155): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x34, r1, 0x1, 0x100, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_GET_PROPERTY(r2, 0x80106f53, &(0x7f0000000040)={0x2c, &(0x7f0000000180)=[{0x1c, '\x00', @st={0x4, [{0x0, @uvalue=0xac0b}, {0x2, @svalue}, {0x2, @uvalue=0x5817}, {0x0, @uvalue=0xc1}]}, 0x80}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) socket$netlink(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x34, r1, 0x1, 0x100, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) (async) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) (async) ioctl$FE_GET_PROPERTY(r2, 0x80106f53, &(0x7f0000000040)={0x2c, &(0x7f0000000180)=[{0x1c, '\x00', @st={0x4, [{0x0, @uvalue=0xac0b}, {0x2, @svalue}, {0x2, @uvalue=0x5817}, {0x0, @uvalue=0xc1}]}, 0x80}]}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) (async) 3.030999252s ago: executing program 2 (id=188): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r2, 0x6, 0xc, 0x0, &(0x7f0000000000)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x19) ioctl(r3, 0x40085500, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000002dc0)={"fc399059429f41c88f296da1344951f21a435e19d5073401010000000000002052873e0026ba12320a8492197085aa330e9316fb7603b15e454c8518763baeac308191e250e15a58aabf5b3ecd13f87a62de7b04000000693a4b21639331bee6cbf30563b863d82034aee0bef82ba3b85db024ba1cac050657f2579dcb891cee731766753a258801a5f767d6797981ce206eadbbef536bd8772a48f1833e360e1050cab4bf10d003258d679e49d70239b04adcfdccf1ea5ede82d17891e08a895bd6bd93b87ea8fd1f2a29894ecda469cd461defa657ee9eb2551ad7c53c9f0d52a049bf000000000000000085916168d61d3580daf26ecd3be14f55b0e513f3c3c955b06a7c197d562c2a855b44ee58bac8ed58400d42e085c9b1a839bad2f9b66ea5b7581ac715debda61a8007f39363f1c699922c05f3b35b08f1771370844b2a8a13b578141465fd38d1a7545a2a9ed8ca76956ca01b32fee4b86643bb26173c6b75e9ceb5c4fb2b23a19ec2e26860f474d73c60c6dee9c4eeb4d4a54cb0f8353aa2656df3d1cfb03df8a54de9cba19ce44a8df989a687bb46b30b3bad901b4c2d95767fd47436d7041c93bc41c67487ac434b3881ac8caba2f42c587edce816b1fbcf68a5d03504f5ef00fea3632c8e21bb90a9a7b032b3f7c2952b49770bc5a335327b5c79f13d78e8278fdcd7f63cf4e9d1b5e27f8adb0f8ef70990c32fed25c361a67d501bc9afbbd48e248affbd1a1c901cfeb769eea352bbb215ac145c9098fa0240fc188cfc2640854f159aab147fe1455294d4faab8112f0af30a8089cab96b3edccccfb837d2d4a57632e320d16d6353045a0a01902b736d66a7556407c1daa875ae9e539ac45e235f09ef59a924e92d0637cdd5f3a7fd85a440e30b1a616cb391e54c9b43453fa1a4c337f3431ff05fc70cdbd5fc704b50f6f96bf0d67c2e90fbf583a974d51a30db97aea64a62358b65a6c699a20cf11db8d0dd1cda8d56efdc38da1c0791ded177b93035be018ab4ca7998a713c16f96ae6b88192899d53ffd3f14dfdccb99ea6fbe2d52a0a428de9b9cc908750ea613f26b3f409e5d430936550036cef1980646780c3a5c76b5fc5a77aa5187d5f3e5b6aa8ee63720a2ece54d241b3dff1c904b5f5d40790d4a7689464fc118d88a95b6d4a1b8606eeaf8134e329ab9194f4b37986597218c5130a1af65157ab6b8505205087731a58b7bbfaf648d9d3d4b1ed6641a0d94526b63887c79842452c6c6d5472ab032485cf22e62abb2b3137572670088f7e98f317aa14a1d21a38fa558624a3832bcd4bda0ba8dc1d87e53ae2f9d95930ba03022e5127c46d02427a49213e406c800a11c8b0373b9ca73eae0085460e62e88eb35fe3a80832ca1dcc3a4d95aceaa71400"}) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000031c0)=[@text32={0x20, &(0x7f0000003200)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b800000100265d7aeabbc900bbc9000f30300f272d9d53bf0000c4b9e16dc30101220f01c3", 0x67}], 0x1, 0x14, 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000500)={0x0, &(0x7f00000002c0)=[@wr_crn={0x67, 0x20, {0x0, 0x8}}, @nested_vmresume={0x130, 0x18, 0x1}, @in_dx={0x69, 0x20, {0x7813, 0x1}}, @wr_drn={0x68, 0x20, {0x0, 0x5}}, @wr_drn={0x68, 0x20, {0x0, 0x5}}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0x1, 0x8000000000000001}}, @nested_vmlaunch={0x12f, 0x18}, @wr_drn={0x68, 0x20, {0x4, 0x3}}, @cpuid={0x64, 0x18, {0x9, 0x9}}, @uexit={0x0, 0x18, 0xfffffffffffffffb}, @nested_vmresume={0x130, 0x18}, @nested_create_vm={0x12d, 0x18}, @code={0xa, 0x53, {"66baa100b87e658b15ef0f01f840d9ed66baf80cb8fc0d998eef66bafc0ced660f10fd440f01df440f20c03506000000440f22c0c4a2cd062766b874008ec845ff09"}}, @wr_crn={0x67, 0x20, {0x8}}, @out_dx={0x6a, 0x28, {0x148, 0x1, 0x400}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @host64=0x2c00, 0xfffffffffffffff3, 0x2, 0x5}}], 0x233}) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) mkdirat(r6, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x100) write(r6, &(0x7f0000000100)='100', 0x3) ioctl$KVM_RUN(r6, 0xae80, 0x0) fchown(r5, 0xffffffffffffffff, 0xffffffffffffffff) 2.851592388s ago: executing program 2 (id=190): r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) syz_usb_connect(0x0, 0x2e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002000000404406478000010102030109021c0001010080fa0904030000010100000a240100010a0002"], 0x0) (async, rerun: 64) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) (rerun: 64) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f00000000c0)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000240)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000280)={0x1, 0x1, &(0x7f00000002c0)=[r2], &(0x7f0000000300), 0x0, &(0x7f0000000340), 0x0, 0x1}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async, rerun: 32) r3 = socket$inet6(0xa, 0x2, 0x0) (rerun: 32) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x4d1, @mcast2, 0x5}, 0x1c) (async) openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/keys\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./lower1\x00', 0x1ff) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./lower2\x00', 0x1ff) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./upper\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./work\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./lower1/dir1\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./mnt\x00', &(0x7f0000000500)='overlay\x00', 0x0, &(0x7f0000000540)='lowerdir=lower1:lower2,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00') (async, rerun: 64) renameat2(0xffffffffffffff9c, &(0x7f00000005c0)='./mnt/dir1\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./mnt/dir2\x00', 0x0) (async, rerun: 64) umount2(&(0x7f0000000640)='./mnt\x00', 0x0) (async) mount(0x0, &(0x7f0000000680)='./mnt\x00', &(0x7f00000006c0)='overlay\x00', 0x0, &(0x7f0000000700)='lowerdir=lower1:lower2,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00') (async, rerun: 64) socket$inet_sctp(0x2, 0x5, 0x84) (async, rerun: 64) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0xb, 0x10000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYRES8=r4], 0x158}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) ioctl(r4, 0xc4c85513, &(0x7f0000000200)) (async) close_range(r0, 0xffffffffffffffff, 0x0) 2.0721983s ago: executing program 1 (id=192): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2c, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x100, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r4}]}}}]}, 0x3c}}, 0x4008040) socket$nl_route(0x10, 0x3, 0x0) 2.071560165s ago: executing program 1 (id=193): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="300000001c00010401000000000000002d000000010000008000000105000100280000000a0002000000000000000000300000001c00010401000000000000002d000000010000008000000105000100270000000a0002000000000000000000300000001d00010401000000000000002d000000010000008000000105000100280000000a0002000000000000000000", 0x90) sendmsg$kcm(r0, &(0x7f0000000a80)={&(0x7f0000000ac0)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000b80)="b88a000000000000000000008100", 0x5bc}], 0x1}, 0x0) 1.938959167s ago: executing program 1 (id=194): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0xa8882, 0x0) r1 = dup(r0) ioctl$FS_IOC_SETFLAGS(r1, 0x40081271, &(0x7f0000000200)=0x4000) ioctl$CDROMREADMODE2(r1, 0x530c, &(0x7f0000000240)={0x7, 0x9, 0x1, 0x8, 0x1f, 0x1}) 1.937795114s ago: executing program 1 (id=195): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x30, 0xc000}}], 0x1, 0x0) fallocate(r0, 0x8, 0x7, 0x850) 1.937320228s ago: executing program 1 (id=196): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f0000000640)=0x1, 0x4) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) sendmsg$inet(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000700)="43a0249a2a918e7b7750cdc12f43253a02e06b1fb6bdfcde06", 0x19}, {&(0x7f0000000740)="5a524df9cb07f641c783aa6d69a5869305efcef3bbb7bba72ac1c8a5078c1247c6", 0x21}, {&(0x7f0000000780)="a45e67e4d8baf67e433d91ba096e15ca28315bba5edb6b95482c744d6f8231bf67bd5e9cc57a353eefb975f1af7a66ad40bad5d88344d974a95c09095161e3dac02e6879498c", 0x46}, {0x0}], 0x4}, 0x20000004) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="240000001800dd8d000000000000000002001000fe0400010000003508001e0002000200"], 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc/net/rpc/auth.rpcsec.context/channel\x00', &(0x7f0000000040)='proc\x00', 0x2cc010, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r6, &(0x7f0000000940)='\\x01000000 2147483647 0 - 0', 0x1b) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x4], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0xfffc, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x48004}, 0x20000000) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000bc0)={r7, 0x8002, 0x7fff, 0x0, 0x0, [], [0x2], [0x0, 0x4, 0xfffffffe, 0x5e8]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000d80)={&(0x7f0000000cc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000d00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, 0xbbbbbbbb}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000e40)={&(0x7f0000000dc0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000e00)=[0x0, 0x0, 0x0], 0x4, 0x0, 0xe0e0e0e0}) r10 = syz_open_dev$dri(&(0x7f0000000e80), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r10, 0x4010640d, &(0x7f0000000ec0)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r10, 0xc01064b5, &(0x7f0000000f00)={&(0x7f0000000f40)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r10, 0xc02064b6, &(0x7f0000000f80)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r10, 0xc02064b9, &(0x7f0000000fc0)={&(0x7f0000001000)=[0x0, 0x0, 0x0], &(0x7f0000001040), 0x3, r12}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000001240)={&(0x7f00000011c0)=[0x0, 0x0], &(0x7f0000001200), 0x2, 0x0, 0xcccccccc}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000001300)={0x400, 0x2, &(0x7f0000000c40)=[0x0, r7], &(0x7f0000000c80)=[0x9, 0x3ff, 0x9, 0x7, 0x2, 0xc67, 0x0, 0x5], &(0x7f0000001280)=[r8, r9, r13, r14], &(0x7f00000012c0)=[0x8, 0x9, 0x6]}) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0x8, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x24, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x20, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xff}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xff}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4239}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000003c0)={0x2, @in6={{0xa, 0x4e21, 0xe2, @private1, 0x1}}, 0x80000000, 0x2, 0x2d56, 0xff, 0x82, 0x1, 0x81}, &(0x7f0000000480)=0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000004c0)={r15, @in={{0x2, 0x4e22, @empty}}, 0x7, 0x4}, 0x90) io_setup(0x239f, &(0x7f0000000380)) 1.908910034s ago: executing program 3 (id=197): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet(0x2, 0x4, 0x1) write(r0, &(0x7f0000000080)="08001800000020a3", 0x8) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000c00)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x791}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20061090}, 0xd0) 1.840118631s ago: executing program 2 (id=198): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000300)={'syz0\x00', {0xfff7, 0xc, 0x100, 0x81}, 0x1d, [0x7b, 0xb7e2, 0x3, 0x9, 0x100, 0x3, 0x1, 0x7, 0x9, 0x2, 0x7, 0xa, 0x3, 0xfffffffc, 0x7f, 0xfffffffd, 0x7fff, 0x9, 0x6, 0x5, 0x6, 0x6, 0x7, 0x6, 0xff, 0x2, 0xa5f2b87a, 0x409, 0x0, 0xfc75, 0x8, 0x9, 0x4, 0x2, 0xffff, 0x81, 0xfffff765, 0x2, 0x3, 0x6, 0xa, 0x2, 0x5, 0x0, 0x3ff, 0x6, 0x7, 0x8000, 0xfffffffd, 0x80, 0x8, 0x8, 0x9, 0x7, 0x101, 0xc3c, 0x1733, 0x7fff, 0x7ffc, 0x1, 0x6, 0x5, 0x1, 0x4], [0x8, 0x3, 0x8, 0x8, 0x0, 0x8, 0x4, 0x0, 0x0, 0x10, 0x6, 0x7, 0x8, 0xe61, 0xffffff73, 0x1000, 0x6, 0x13e5, 0x3, 0x3, 0x1000, 0x7, 0x1, 0x3b40, 0x4, 0x1000, 0x5, 0x7fff, 0x8, 0x5a, 0xffff2503, 0x7fffffff, 0x6995, 0x1, 0x80000000, 0x8, 0xdab, 0x5, 0x2, 0x76c4, 0xfffffffd, 0x5, 0x3, 0x10000, 0xd, 0x2, 0x9, 0x10, 0x4000e, 0x9, 0x7, 0xa, 0x9, 0x3, 0x8, 0x3, 0x2, 0x3a6, 0x0, 0xc0d, 0xfffffffd, 0xc, 0xc, 0xfffffffb], [0x3, 0x6, 0x6, 0x9, 0x1000, 0x0, 0x80000000, 0x5, 0x7f, 0xa, 0xfc, 0x1003, 0xf1, 0x6, 0x6, 0x10000, 0x72, 0xc, 0x633, 0xd, 0x7, 0x6, 0x80000000, 0x6, 0x0, 0x7, 0x8, 0x2ef3adcb, 0x10, 0x2, 0x8, 0x8, 0x74, 0x4, 0x7, 0x7ff, 0xfffffff2, 0x63, 0x7, 0x2, 0x3, 0xfffffff3, 0x20a7fd9e, 0xfffffffd, 0x2, 0xa1, 0x0, 0x9d, 0x7, 0xa8a, 0x2, 0xa347, 0x77, 0x3, 0x1ff, 0x7, 0x7, 0x2, 0x0, 0x3, 0x8, 0x2, 0x3, 0x5], [0x4, 0x4, 0x5, 0x8000, 0x493e, 0x3, 0x35ff4447, 0x7, 0x5, 0x5, 0x5d3a, 0x5, 0x9, 0x3ff, 0xb88f, 0xffff0000, 0x9, 0xf79f, 0x2, 0x10, 0x8, 0x2, 0xff, 0x6, 0x4, 0x8, 0x200, 0xd970, 0x7, 0x4e6, 0x8, 0x40000000, 0x5ef, 0x8400, 0xc, 0x41, 0x400, 0x1, 0x5, 0x0, 0x9a8, 0x99f, 0x231, 0x3ff, 0x8, 0x1, 0xffff0001, 0x1, 0x215c, 0x10, 0x8, 0x5396, 0x6161, 0x9, 0x101, 0x206, 0x8, 0x431, 0x6, 0x5, 0x4, 0x7b, 0x7fc, 0x9]}, 0x45c) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600064000000000060005"], 0xe4}}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) (async) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080), 0x1) (async) sendto$inet6(r0, &(0x7f0000000040)='l', 0xffe0, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.778926063s ago: executing program 1 (id=199): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000240)=@security={'security\x00', 0xe, 0x4, 0x3f8, 0xffffffff, 0x0, 0x128, 0x238, 0xffffffff, 0xffffffff, 0x328, 0x328, 0x328, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@ipv6={@mcast1, @mcast1, [0xff, 0xffffff00, 0xffffffff, 0xffffffff], [0x0, 0xffffffff, 0xffffffff], 'veth0_to_hsr\x00', 'ip6erspan0\x00', {0xff}, {}, 0x2, 0x2, 0x4, 0x1c}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@icmp6={{0x28}, {0xd, "d547"}}, @common=@ah={{0x30}, {[0x4d2, 0x4d3], 0xc, 0x9, 0x2}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x18, 0x3, 0x3}}}, {{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @empty}, [0x0, 0xff, 0xff000000, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'veth1_to_batadv\x00', 'veth1_to_batadv\x00', {}, {}, 0x5e, 0x6, 0x3, 0x2}, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@mh={{0x28}, {"5fa9", 0x1}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "e9ff9fcfbe523f5914b3380753f8e80a89f295827c85fe9cec51667c060c"}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffff00, 0xffffffff, 0xffffffff, 0xff], [0xffffff00, 0xff, 0xff000000, 0xffffffff], 'pim6reg1\x00', 'gre0\x00', {0xff}, {0xff}, 0x3c, 0x3, 0x5}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@local, 'tunl0\x00', {0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)={0x14, 0x21, 0x9, 0x2, 0x25dfdbff, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x44080) write$nci(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="600602b2"], 0xa) 1.76820779s ago: executing program 3 (id=200): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000440)=0x1, 0x4) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000680)={0x1f, 0x1, @any, 0x0, 0x2}, 0xe) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000020, &(0x7f00000006c0)=0xa, 0x1959cc36) connect$inet6(r1, &(0x7f0000000700)={0xa, 0x0, 0x0, @loopback}, 0x58) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000740), 0x4) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000400)=0x80000) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000480)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x8}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) dup2(r0, r2) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000500)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000240)=ANY=[@ANYBLOB="0380c2000000aaaaaaaaaa3d0800450000140000000000019078ac1e0001ac1414aa030490781200183f25000000000000000001000801007f"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x11) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000540)={'bond0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="48270100602101001c00128009000100626f6e64000000000c00028005000e0003000000"], 0x3c}}, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000380)={0x26, 'akcipher\x00', 0x0, 0x0, 'rsa\x00'}, 0x58) chdir(&(0x7f0000000640)='./file0\x00') mkdir(&(0x7f00000001c0)='./bus\x00', 0x110) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) mkdir(&(0x7f0000000000)='./bus\x00', 0x10) utime(&(0x7f0000000040)='./bus\x00', &(0x7f0000000140)={0x1, 0x8}) 1.600644919s ago: executing program 3 (id=201): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='coredump_filter\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000200)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000400)={0x0, 0x0, "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", "6aea598ab10f976e3f0626d43da9bfac3d43dc6367a0e1dbe2cb9b30c5b87ae9dfc59e03430ddd314421c456682259ffe8b5174721e1fa7c95aee082b8908b9d8079dd58a69d426558cb2d44ca4303eac2be9e12e025a938fccadf1c11412c0050f4b613aca2ec29644fe4ab57ce139d59c119fdddf02c9fdde697e843e62f4a409c81af0b47fa83ba205563232e93251bb0a208c935625e816d21ccc9aa9a26c17e133ed2abe302dd1130a479fd0309f03543ebb24d3cf7bcde56bff6733db4217e47529edfdd9711418c28f813b559e2f49aedc9ff353b3dd3f543a09791be60bc76a073e58bd92be4aeaf38d39b65960195b467f9485f6952ec747a2423d1a663794b52897f579e3df8570b98efb35a18dde5e6fe85a969f82cc7a097b390e2f2addcdfd8b43536660a6ccc89646673f9a56ec9bed2ffb96d219af9f7f70c1d702bf21e12c96e0432359c87260df7b6dd896dfcdd675a6b2b3eb05c7843e1ece7d7bc29d90651cba46284cda0d36c96026a242dcc5ddffca5a9292cb2975069d77b8a8fb82ca3e8bf04283b5cda765bfd03e4dda1b7829a623c6126f86832db831ae16acca190754a207c8b45b307f300371783d633736140def3451fb0087d3b381fc929e981e9d8fb4c7b08f6f7ed8472357a0ce337bfac5a5478e70bc71b9dd1e76b2b6cd09aacdf0e354a84d2466f8ebb07e95599b4a5e90aeeb51f2f4f64573f03e0db2688e4c9f466fadcb1185180d5242fe2d2e2aec70bcdb8bef31a8b0f6a222ce38caa73202a874bd1ceca2a98f2ed4f21398fb4548e501f1bc9a936506588672bb1267ed8a4f25d1d235240d805778aeacb104aa8004711de77e20f683b7d944ba66191007c591c258124c94b3f5c0ab4e91d66d5273c478ab3313406ad310afea200c1fc124b86b28006811e9c6c8a35c251c842bdb8c7f95af03855aa812007104dc8a606a429e32bf17995fb0714059e5b546731bdb74604fba913e3ba6fff97c245ec36c259bd09c99639160ff5c9c66880c03e33aa5336946e337e7c75909e58140f7d830c0d2677bea69b1dcd8aed3dbc79a9b8d07145515aad6066ebec33abe54a6208f1be0f6493500a8c3fd89704dfa3c067a4affd2f60a31fb402c6f3136ed6c01f8311a0e7b578d96a57682060a0b7c0c11909328a40ca0cd778284d1d3e638d62eb85b1cb3febb75fd0c6940313f353c9162ec386cb8c2a8ff6e2890908a1b39837c53890bff54f39023eb49e8d59a1140dac0774d2a62b171040ea4f27d3a1b1a1aefdadd7a3cf6c040ab80f225bf5094292d0f031743daf35f939f48765c9e3c6bfb0387aa65187e87a723c8c79037fe80bcf12c935bed40e66d043bdd934d19124dc0665ce40b0184efb3d6c6f19e85aa927e14420c8cf3c99b1866ca9fc9b0e21af349752112034f72b0094763675ec3fe8a992a01168bf5dff385e3804ef6cd7644588713037995e4d748ad89082b8f93b4b9db21a3376c1c170ff2c1ec95d9c9c81a2951e2b983a86a06dc34fa72b4a2d3db99ce404d62702cd3faeec0b45eb50a218fcd2f62d12ddf306485242811ad516227fee983af74f79cd075a4da5c7461507a1b05a71c8c438d0146f6b562be0c39f2a177b1d8fe828bfb7e0ece6db77320cc4937a3949d09ea4b623c1cc6a5834fd3c2b3797b53037e8c74d522666e411c937ebc89a000a839c87addbc23da1c0a0b623e6d28fdb043d09d31fa46a30995d0892c988f7833718e4157c5b4456110d13004baeba4fbc397eba9f9bdaafa800e18c5304feeb7ac82961c3956812e88941d431274545f3a79b1b60581730613f8da8256d5db8549f90f6bc3570d20e586b2ca03631219260c09be93fc2c3d284b3c210fc3d2942303e5fc91d94300ab5201293bc36929ab0eb475cb451c1ece455bab18ec365bf47e967bc7d8b3caa507963bde260bec23e68504301917f68662c0c2e71d2fb2e1c8d6efffda3f7a6b92755b32164dc330e9133f27df713953c78946ee33eef89df8079f9f61865b8fc199c0ca287670e0231190f467e369720b49cfcfd2cb9432a3b906380e9edb09df3c6e1aa230a13255020e4a0facd61b5efef2624872e695ede1de0ccacde023f8820a3097347ab0ab995b72a59f12db4dc80045567ca71182f87fd326bcbe11c3e90c14c3ef372df920d278245a18c8edbc8bdab9a81d16dab1a046c282af997fe61b68b3ea1752dd46188e0127738dc991c45ef326f8e0279a9f69366a408f24d83ffa9aec396eb2dda6deaccc8c75dc740478be7372710e761339b9cfb538df5bd790e8dfbc4f84bd9d393e2d0c51c81b0fd1c30d4489bceea093d3cdc1c1b806082ef3242fb5a3b57cc9b9924993cd852eeeda7044af75e385e3cab34cc32207d6a96e60c2f37cc8cbfe546ba7eb4cf10c91e807a6e5754749a2a1b9458160e4dd7f34da6874a8588362bc7fff5514e4d37aa6f5bdb2794bb760f81be6d8bcd6b0cb50cafed213eca03bc44deebc6d20359edd911eb622e7b6222828eee6adf1418ba869eb2396582ad64177c941808072bc256c290f98c6dcf6524054143b2c19b4c879ebedb40cbbf6e9cc1870229c8eaad0f75b95a4350bdcc3623844cdce5cbff3feea80cbc1844d0430fa5ea7ea087fe94288cc04df070d6fcb4520832f8678cd0dbdec22b47ba4bccfe3be1351a2bd6c7e29b54ee080f4466f029314921e62e3ec3350836b72acc010e60d0de905dbf1875733aba057460cba4dab94f6c0e247f41b5353ebbecb0fe971822ecd20b2efba553189e88094a22f10af7188df32adc42b8d6a798752ba984fb85223dbeaaef7cc314b98486d9226eb81ca7016e9c86a26a6c5b86396e2216fbe6203b4f4aa5958f6e9a38c01c22fcdb0563dea6e054e8141d7b3dc2e0581aaea306dc114574c9c9edc9c9029751c71a88dfeab24ecc69e7e01a710eca3385bb3132d8e5227bf0fd9df921976b4d9f001022ccd15df4bb7f73f0fa7b17be63d761cce13a32cab107d893ba4ab09c242ce47b40edc6f107081ece7473b57789432dd1efa4010da24889dd30b4e275c6953943eba569773d0f6fb576e821bb9ecdc34d8e11189dccc5aeb22d4b91700a01ae54dd3a0b83af60a01428ef41299301a2f996f7f65ba7529c96725689ac52240de066e1992abf9d9ff2721cec1be70e8ba715aa23ff25dd87c1b1d6b208c69f7be5a52cf0edebd7fe6c85201ffebcab916e95ef15a1d099c9a4bac3e4a2ef491c638bd23656d4cd5bfa591e07d7a0b1aa152cfd265bc23f68921668dd75b130bdf0ddcf5febfb144e76fff5ca96461969d5169421aaa7917b9c91818f89a010889d3f8ef2d268113c68fcdddb493866d3147cbaab6fe01daeee531cfea6adcdb775e49bc0d07cea6c5a411e612d303d34eba60344888101958c9dda97bbb9ccf5ee6d3c2ca0cc7d89549c9e51a4fdc8bf012d99b4de319852bf73431f4540ebaaa8188e510746d982c7f7fd8ea016f57f4edcdbcf340f70ae9185feecf57b9c339a6122c8d13a6a7ee451bd2287e73359280b3da87cc5138ca701b683dd451857ad8e44e9e6342e143feb7dd8c168977d0c4265456660259103e0e6ecc3d876fafd7dba6f575606d884916bc17bbb1236ef6fb9cddcaaed6ce404a440f8e198c9380856da691499e70007421162703653faae87bfdbae10cdd2fcd918384f62c16b44b21bc31513ec02d5ffa4a6848730c4ed8a338862d6ac742819ffd7243ec9b2ba5d0e9383fe98ebb03374185451d49387290f8a9a6ab4365dd8702948b81c1e9ef5cfad6f621b069a670d1c77ebffcdd490b71d9e6976aaec08ecf0a50eeb8cd38a8e6f5ea4884d3b8b02831ca1b78be34a58020e1e6c3c12a79ab2ccfa70c03ca2ccd63d2e3e22043a757638a86e233f63306a19c347ae983333e81d207645cd75b5e68b35c90390227222aa0866e5bfa7e2b6ace3e0418a7ceee3c216eb5a474ee8f4c7013ab9f3210f7fc57b7091f4741616aaf29d4adb1a1713a0c9f29cd008e48d7a49dfde01f0c028066d40dee32c55ff469b5b98d7b94ad801ec1cf8269f75aab2ac7c53f21cd7d4e4e0d1575a5a53ec5cdfb8a7c5baa194efa1eabb9624e10856bdd1069330f0a089cf53f5b0e1b8d1d3eb90af538ea826491241b262e6140b9fe8e1b42c276fb743b18e33b2bfa0773febfeac882af1ae2d00883f5bc662202fdad17388c7512556782267467efa6f8d0c92dc693931af50d4179c27a41bd5ed7b79ae5b74d5cbf000e617c3802a4ed7d2badbfc9cf62f432e97db606b04fde8a318e44de9d830b1dd22a4df8253e67edef53d47af68b20d54b17e7410af298f2eaad73f181d04d84265c7361682f8647592bfb8e0178a1cf916d1b4bd45508028d6ee08fda2fe47faf1fed97984aaa107f0e19484ce05415e1bce22cc138a2d5bda4615af7ab3707ff95f5e6c06d5d043b05c39dee0b04bdede4f11c9b2aaf23564491287365da62690597564008bf6c2a2d5abd429d23952085c4c8b4acc6bbaec97f165f0195c9d0df03a21c1c31b6dbbde8d4460bf1a041cd3e5ce82b58b2cedd4ab2cd075355ec476c98f4fc5f7db4ffa8d889f76631f2bddc455127d6d26f84310de52860025679ec6372fb63fa2b2d687cb9d1d840c1f840c932e9ab1f2d955430ab86d1a43fb6b6b1788a2675f4e04ec3ad97d3e9c6af52f6ef2b28a072b30c849328454c4e094c9cc13be48fc6bbd7fdacbe9ff4802a16a03edc027a39797fa2e564f338a1d5535e5275f14c8d76f223be6c01fbe40bf738e5f10df6b0a810306a7780da844da760582bf6d0e9d64c303923dc95cda40ad4660cdd70afda47d485ea52bbb70d2c428df5c9c8f7f3f63299bd62799c2616259f27ad5d5a0a4c66bfc303f7930eb88a18b9068c652c4513c3ef20579963490afcc737097c0aefb641944a0eb5b762d39badf9543d3b38e4dc0c017201a5b9aab97a583c8e2e22b7d292846b714dbbe7d27e569fdd54cd2b9049c9842d7ca85db42ce9e2156defef782e0ce123fd243ac0b6d85af9f617f34b8e56ea3825732ce38b77c39d3d6cc3e5f30f66103b07429dd7fbf1de3956af9f883586b610738e5a10139c1aac63155a5bbeae55fc6229451c492e17f9433f15d9a7ecb657dc139e210022cac2558fa6c979d41621f41c775deefd4a851306cb9b4cdbe26b8eb252e12ee18e6dc7ce1086a7f2f231057303fc5436acab68495d37a9f418d248f09786085737d873d0528e2d118979cdae7049481c6b6352894703e8e5b4853b89c2bb9ec420d6873ccefae72fed8f4a096859cb720f3f98ddb1564237e3b6d40e0e4ac14f98ce53ac5aa66e6a77a8fc09a368d68259e8db65450627b4e136067084a929f5595c7b2c2d2613a"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001400)={r2, r3, "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", "59f21ae704f0b5d7dad0dac3c1b8ba0ef4fb08fb493ca357884161135f5aa6f7da6d2612974e0fc20e5e8eb3f77e2716f875ae5fde8895fb7a64fdfd452e6c10487b0533ac785a183b808a8e0281363a03facb952915af413b07dbae1866bdb3b256cdb6f756d2cd1b5fd169a0cd0258824427fdd6bf626d0c37b8abbb6bb4391dc8af706b93e64978dab48bd626001d37b91f07bb5c03b5ec1349f32265098348e86f35b6427563d26a3958fcecc86cb8d4823b9a2fbb6389043119d2a018e7b8a8de7726f584da3c0d8b22e4874d4ab2ad6623b2757189e92e5d95b67ac6a7c6716c490615662081acb8e1090e80c2f3ba1c75f638b86dea9745e3c4ed4797d21a3ef2f868f214eb24fff2392eab85f4665b8db3f39f27d6b2c47a594654722fe8f495d65ea0c6d5c4afa2f34307baf0675361d842b5f56a88ee4f4e2e0c903c960264b42eea10498ec5640590c10c66de43b7f57fda94be6e9176d5a1de719403deeef4dfb2942c212d7c747bfd572736a15b05a245160034abb8eb33fd9524b6a586698b82b28f4b00bf3262b65af27ebc232deb8c8e0a8202f3f37108a30acfebb2d52d85cabe577fa4435068c0ef7fab0e2115ba52dc093bcea2d83638bde96de26d11daef6bc196bf4e4c9ffd02bd1978da1703fd8890fe1021c8fd5ba387131d6b7d7c240cbabc71d9a6e12f82c8365025eb1c6bdc186fc299729aa91fd659df99bc80597ec2a2701dbdd146241ad57bc205e6d9e721e3582d95c8720f9b37c894bdada9741438007bbea2fb27f45a3681579fc05a26c444c230c4434f295763367414b59e7365d702643a709906fafb1839bec6bc832bc7579f421aff80c647a8ab56b4659831522f8fafd36d9cfe282a97363bd58e358dd61a72d7c54e4939a9156453748fe8a236134af50bd215830fff86fc168d4846ee9e72ffd6f7b1699c8704c70e9411057429ac0b9ed56414c7856fc1d29a05980a01041b17bd35a265f4e2d6b2ad72dc9ca431b87de4e743a1d07fe727246d522a0286bdc6b12d840bc0617bd83c1bd43621e53414c38fcf796f32693855added7e32a2918f1feec939a4eeed515706baf61de537da211f40f5420095db0db751036a489ee0291fc7146df23e67243c7df7adf7a2075bfe93d054796d7d2aaee7a4265696d933e604be878206c1307cd5342f3b8fd6b9e4d9befe1fe4de3562ac549fc0d8ad8f8f2630a4da9ebbc7664f6022536805a0d7a3b47d32c672a138b998302dfbb6232d587cb5e0cff843029d0ded5633e18af217b5f0bcedb62df37d043a3878c0e37cab2fa0fd08bdbf24ed6afaad8de1aafa7e8761cc235a00be7a6539b400e7dc359f379199be30016791307582c51b9183b45aa0ae30a5d655e0f9939566f226b50cf24830e3227e49fb5e15c783c83d55b70974f6bfeda300f463ec5ef03ff7565fdfe3af1c0b8f9f02f40a319a9c3ff20024eec2bf711e41243e59a9c3dea857e05ea448ccaf46f2ac2af33a646077a6c13744467b3e4826590ddd5830234922b66ba2a5350934484955c71e832a3e4634c68535439dbd6a140edeb138e574a380a1b4860c1ef5374e7979020276053bbf84ae335cbce14a3fabe7534d2b723a237e9f148419f2a8e493b7f29d31598b42d268bb932c4c9f25a9521258c967be6959014a941413ae19c0bb33d8d86094f0371c0cc54b7a349ed18c9a958a46158533f2a815b66f33a76562608dd0da5edf12ab4ef2a188ded9486df1e7a9bf2c250a9fd7e72f3009c725a8e452885a57b505521999c7b6ed23e28e03370eeec71e2745f5e000fdfa539f24963c568143cea6cbf0c8bc55003f1335bbbd6de666414e5249ed96aed80b7749e1780242e264f85d16bb037469a2c486dfa58748c862d75ef1ca4cfb8b9867611ea4691030b9a992463a9fd721c67bf868ad9309078fd9a56296aaa4785021f4169b59f4b5a8d2a24a6109d6563aa8c207e23b95cc402d76ecaa70f96f41dd93895aa91a161a77f7fc81aec8ea4d0afa5ecbd1276e49ca546f8cd3a921c354d4d1f902be416d5778f628d986b002b98183e1586796d5a511bac88ca1c994b124f4a04661e9d9f266c91ab6ff28cbe7835e26b0fe22cb85036b4745a425dcb6ae91e3629bd6e225b78d9e1512bd1e015e21a53604f58755f26ac758ec94481e900be4d1f95d4e8ff3794ff0bf685f8d43258e088c207b60408a20ca23f640b4a60ad75ef19ab0f1ec82ffc3fc8fd19f1ca0d39ec74fe4bd294049394d7fb7b89c1a97d2ecffc1e7ce0eef6d5dffff84c6615eabcf6000ad48ae41ba2eea15c0bd92f4dd95092c6eac64e3b4ebd8a6a9dbb7e543b1e5144d1b6ef9a80c72713de3267869e257039463f22ae2a7426d1f35d3ac93cbc081bd2d3d05c5f7023014297d790a275c24ceff980d4a3dbd20a2160db76db63ee321ed85051e10d5297bbb93f9e684171b73d87e67a9d6d1657c147210128095686906ead31d5fd3cc83ea209f804c40f52440969783e4d9df3ed8f75b4b21053fe3705ba1a1c33c7dc93526fa15cb053c9362c7a6318d7b75c4b935962af77e914128092fbf2466ddb1fdd10658676b3326af432bb998fd4eaea68da4867b26a550c9d3b22fcdc3a58a836f393df67c5546c6c307f016715245bbc319769a0b2707ddae1fdd67a18f142b02b7efef9e06cc9e116aa6ca6e0d5b8c7b00eb33e6477ea899fb928cf74fe08b43ca283626dd6153d6727e11af37080d88bdc132453e52963e4f167e4fb9ce3dda3cbcd4857a13f357ccece7cd8e387cc7108201a735da318642a1b28def24b8a167ac235f01957c4e8edb644b7deb83addf9fa2d444926072ff510918aef8f56f1b2a389b1d50659899abf7aceeb6e2b601b6ee860b4993cd7a40a5a82ea400c1fa099c8e6ca8e999253851c5e60f4d268f61bc90aa5e4e2b4447fb123caac9597c0804d170f80a42c01ee7f04e61101491f47b22f03691e688dfef75b3ed3089f0406d5d4c5cee57e8d4ecdbc503ac38954e237dd247a18e1be4946e8fe241a0a512d3e88b1a712d9ecf35b73ed239a91b34006afe4756cedb9ead0b22b35653c9f285e4d83401985de8226e965c916ee291781ad406a19d1fcffdd957d312a56b9ab1043cfc6175ab9d166dd4702f9c860c1cd522b2c24501fbc6fd8e3bdb61a4b58b3e05e23f254b3e7a5927baecade51981479c2d0465f69b5de58961120c17b1e6a668a8948b65a6a37637d4dc9202e6faba583a8d6b6e90ae37b118345bb029130354fae1a107a80dd65a34b1b83fb0387fb04a2deea7360d8b41a1a3470d0388c81482ccb5c51b19608e411cd97bfcad7d3a87e2ed602ff2a4843891af94de35705730dd397a6da9bea48cd49bd511459d40bca88009ac015a94fa3aa65e60436011351f47cf99600a333917e7db9c916529b323a0ecc33613792cb34ff1729f3391ad8a8278748bebb9d930faea35292b45a207b3c82babc7f919bbca9ce91dcd519ac9a99d3631401f13963c1c05a5e80c1aaa7143034e9581ff82d77c759a23a1c0d42cfbdc69d4591ab6dc5cd8abd2bcbe7c3ab7d825ca49b30ea6c62b306ea8f00376e4083a94ed96f9dfcd4a0714f8fee6d3a1e3e65d4465bf095ee76c74de5b925a48465e3c703def44edc1c048ed96812442ba35fcfb12e62964630f4a152c88bcca1b818b76c55f72d6afe7cd6a74f5cc16de33c86983b037f3a497bacd90207c8957cce16b76ee9356836440b9eafe478a1015d862b54ede9561afb2463a45cdb85b71f769e220ba180af0edce5f50538fcabb9ca4fc9293ffe06e026d33f5f3cfc4c38474894145347ca58f7a2394135257fa4fc8fa53314b4792658823f9e098a50770db95525118c066e014f318e59e2194c13260c44b5eeffe20f28d48494088ba7d77cba8ae1b8ce0987b088fbfbb98d78c87af6e70ded2cd8406ce46da22da36bc16db11f1484e3604755a9d1346d1d19268003c557a7e4e34116a748270b851badd63f245056bbc9f279090a4461f43ec784baf840a690fc62b2ccbcc52cd136db7e7b0db32f5aaab7719928f4828010aec88c16724cd564075ff006b62ba546b9d3625b31efe6eefe55b0b8f1d379f8df99fd29ebc6996b94bab8bf5ff97f6601d246d8e8edde15ffc7418fd03b5e6b3a91d292dcd90d315609b15257ea92b49ddc1c60e909d5da89a40115613b27957bd0638e61379ecfcc0476d0e710c06aeccad86384290e4e31220a4039c9a0f9c7b164ba0b15c307815244ae87efe3bd80a5a589fe7e05527d4263e251c769c33aa3b0b9a10bac07235f58af82447849155c8aa58b5f7fe03260e720ef5cea22fd5d2a5beea560b979f4ef42a598821e0a60e3c586b10565a5ecbdbb785bf5dd3aa604b7ebaaf8f6e500bcd9c70bfe39cf72f27fc5ca63bbc74a757739488875d10c69e86f67364439b7a90868782bceea1e6688ea13be25f4f5cd2a24f491798d15c3f749a8b633d3b77a553d56b640fbbe8d4b0607cb2745fcccfdeb02584f183034dd1e19e27f67c8520e31885415d78f8800fdda56e3d9a66572c03b26184cd9e09c9a328482b48bacc9abdd0a3d4ce9ba98f6987caa6e7be8ee71e96e479541b8c2b99f2432b1d67fe6c5f0e91698e9bd053abb249fed77587daa33a8ae0c49cee487055f2b25bda19fdf9dffb10ccfb803016c64a3aa5ca18dd502e875d8bb8f9e5a0586d76272fff0ab3fd4f8dc52823be7f4136209ab824925bee4964517a499b38593158e797051c40403cc59f430e670b9b37fa66dfbb7925583c6b4c559ff6cf1a2a428acb717a5ddb34ae3832b7d6c53c87d99e388dd758691514eeee4bd30cff6ff3b9b3df435a9103e50cd39144e0571a9adddc1bfb632947dc4b6b6cdf196042dd911b9922abc3833cd933de80c78c399f001f04791b19903dd63a5fb4cd23f5e43c9ac1b9d6582e0ebae34118b812083d764449e9c24d6e9d64913a55f8f041064273b48e7f14f6f19dc19a1af98b423f9f3655022235b24a76b7b99df48ec7ba89ec9b0683de7468b28a9b8ee5ddfe9d026d202db06337a826f5d1a3ba03c30a7202c899d966cd53fb01e14c76853b8fa6cb238ba4b399baa410d8d51abfc95b44d590a38087b653beaa0a218b9d71058f15cc1182ec73d7009aed1f11cc1d6dffe1d7efc0a9e99223e6ae55fecd1d4040fcda7749000b1a70edf1922cd0c417189262d75f8a59cb132b36a6e36359cecf857b64f2a864be4548525bf46fc57a969b689cab46c63efb6357c985552cc784e89f3dab3320a40367cad4f42bdfd50990958bfbc7f832144ec900e0af7345411f3d0102edf10f5afa67eba42b4f33b52b981f45265d2a763941aad2ab6490d3125264a4040679f4db937ba"}) read$FUSE(r1, 0x0, 0x0) getpeername$unix(r1, &(0x7f0000000100)=@abs, &(0x7f0000000180)=0x6e) get_mempolicy(&(0x7f00000001c0), 0x0, 0x7, &(0x7f00007d3000/0x4000)=nil, 0x4) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='coredump_filter\x00') (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000200)) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000400)={0x0, 0x0, "18ad00de0125181e16f8e1a893a797a4b08f923f95b1766e1a20baf2d2415a45815ac83ccc7eb97092db3c7748e21d915318f34710bd66632d96708717a71b0cc3d43a9fb5686a3f61026c2d16c9b25abe7c096ccc3eb804440388905e62cdc3a0a6b204734b03dbdd769c45f11b1cf6bb1283b93863f4ed286d0459289b18c850eef711c2bbdd4d7d616c9b5f6f0c18f2aaec41880ed2456775700edb7a045b3e7c4b93eace55aa4e79e1dd297b7707f27fb88d47ab1d5bd8dd58538a0f8a1376ad26046730f78d3c46e507000a28fdbfaa391b3a48a644106f49845a7eee84e352926442c356c0199d6cde26c46a835763252c452367d9846bd802a14575ca", "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"}) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001400)={r2, r3, "469e5d3b5a00e4235eb69ce5ebe625a0c662969973844a8d4faaee4433194ce682932f93cb33605f6cb4c34f213ec80686a64ba6b861f373bd80f8a8c009273e679be1a3ec973192ce7229c7096a6c5a502e02b76c36c29eec5f78dd7936d1954adc49705130985f3277ab340737928d347affe51a05719a62f00d79ad53f084ffe3760e59d566b647ca07b382d18d1344f06669db01c5e4dbe40704bc96c209b7698c285de29fc323c647a111d70b2a3af8e3ff8c47ba3ccf0c7ee6d336be583a5c99c789a6d16c0609b90a4d3e853b01645ca6b5c57141eb81401f9351ff95203c803c9438f00fd59cd100a809dce9b3150c6309c964f8b3858fdbab3a9c02", "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"}) (async) read$FUSE(r1, 0x0, 0x0) (async) getpeername$unix(r1, &(0x7f0000000100)=@abs, &(0x7f0000000180)=0x6e) (async) get_mempolicy(&(0x7f00000001c0), 0x0, 0x7, &(0x7f00007d3000/0x4000)=nil, 0x4) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) (async) 1.600396203s ago: executing program 3 (id=202): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000240)="580000001400192340834b80044d8c561f067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000b0c10000000224e00000000", 0x58}], 0x1) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/locks\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r1) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0xc}, 0x20, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xca9, 0x0, 0x0, 0x2000, 0xf407}, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x11, 0x6, 0x1ff, {0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0) (async) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r5, &(0x7f0000000300)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x9}}, 0x10) (async) rt_sigtimedwait(&(0x7f0000000040)={[0x8000000000000000]}, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), r2) sendmsg$TIPC_CMD_GET_NETID(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x1c, r7, 0x1, 0x70bd2d, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x4048015}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000700)='./proc\x00', &(0x7f0000000740)='proc\x00', 0x0, 0x0) (async, rerun: 32) r8 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./proc/fs/cifs/Stats\x00', 0x0, 0x0) (rerun: 32) read$FUSE(r8, &(0x7f0000000b00)={0x2020}, 0x2020) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) (async, rerun: 64) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) (rerun: 64) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000800)) (async) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000840)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0xc, 0x0, &(0x7f0000000100)=[@freeze_done]}) (async) r11 = dup3(r10, r9, 0x0) r12 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000900)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r12, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r12, 0x4018620d, &(0x7f0000000940)={0x73622a85, 0x10b, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000980)={0x8, 0x0, &(0x7f00000009c0)=[@acquire]}) 1.510021791s ago: executing program 3 (id=203): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0x93d, 0x0, 0x7ee69d08}]}) (async) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0xe0302, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000100)={0xff6a, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x13, r2, 0x0, r1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, 0x0, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000300)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, 0x0, 0x0) (async) sendto$inet(r3, &(0x7f0000000340), 0xffffffffffffff94, 0xb, 0x0, 0x0) (async) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x8905, &(0x7f00000003c0)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x202f) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil}) (async) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000340)={0xffffffffffffffff, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000006800019f517c0000a105df250200020000000000080001000000000004000b000600120005"], 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x0) (async) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) r8 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000040)=0x1c) socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r8, 0x0, 0xffffffffffffff73) (async) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000380)=[@text16={0x10, 0x0}], 0x1, 0x8, 0x0, 0x0) 1.090620799s ago: executing program 0 (id=204): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026ae7000fcdbdf2502000000080069005e1ced0308000c01"], 0x24}, 0x1, 0x0, 0x0, 0x44840}, 0x4000040) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000480)={0x0, 0xffffffffffffff8c, &(0x7f00000004c0)={&(0x7f0000000500)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}}, 0x28}}, 0x0) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) symlink(&(0x7f0000000000)='./dev/sda1\x00', &(0x7f0000000180)='./mnt\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x0) mount(&(0x7f0000000140)=@filename='./dev/sda1\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000240)='ext4\x00', 0x8410, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./mnt\x00', 0xa0000, 0x14) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f00000002c0)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x15, 0xcd, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x8001, 0x3ff}]}) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000600)={{{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@local}}, &(0x7f0000000700)=0xe8) mount$9p_virtio(&(0x7f0000000540), &(0x7f0000000580)='./mnt\x00', &(0x7f00000005c0), 0xc, &(0x7f0000000740)={'trans=virtio,', {[{@noextend}, {@noxattr}, {@cache_loose}], [{@fsuuid={'fsuuid', 0x3d, {[0x38, 0x62, 0x37, 0x63, 0xf0, 0x63, 0x31, 0x35], 0x2d, [0x62, 0x37, 0x65, 0x32], 0x2d, [0x30, 0x61, 0x34, 0x62], 0x2d, [0x31, 0x63, 0x34, 0x35], 0x2d, [0x30, 0x0, 0x34, 0x37, 0x35, 0x38, 0x35, 0x30]}}}, {@subj_user={'subj_user', 0x3d, '+}\'/%}+'}}, {@euid_gt={'euid>', r4}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}]}}) 979.27835ms ago: executing program 2 (id=205): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback, 0x9}, {0xa, 0x4e20, 0x6, @mcast1, 0x7fffffff}, r3, 0x80d}}, 0x48) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000240)={0x12, 0x6, 0xfa00, {0x0, r3, r2}}, 0x18) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x40088c4) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20001891}, 0x24008814) dup2(r0, r1) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001780)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f00000017c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001800)=0x14) sendmsg$nl_route(r4, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001880)={&(0x7f00000018c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000001900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001940)=0x14) sendmsg$nl_route(r7, &(0x7f0000001980)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000001a00)=@newlink={0x44, 0x10, 0x403, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90446}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) sendmsg$nl_route(r7, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8008, 0x4408}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}, @IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg(r0, &(0x7f0000000140), 0x0, 0x0, 0x0) 881.72338ms ago: executing program 2 (id=206): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newsa={0x154, 0x10, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0x80}, {@in6=@loopback, 0x1234, 0x33}, @in6=@loopback, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x80}, [@algo_auth={0x48, 0x1, {{'hmac(sha1)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x2, 0x4000, 0x20}}]}, 0x154}}, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000640)="2c000000360005000100000000000000010100000c", 0x15, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b24, &(0x7f0000000680)={'wlan0\x00'}) bind$tipc(r0, &(0x7f0000000340)=@name={0x1e, 0x2, 0xfffffffffffffffe, {{0x42, 0x2}, 0x2}}, 0x10) r3 = gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000580), 0x88042, 0x0) write$dsp(r4, &(0x7f00000005c0)='\x00', 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(r3, &(0x7f0000000600)='net/psched\x00') r5 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'tunl0\x00', &(0x7f00000000c0)=@ethtool_ringparam={0x10, 0x1000, 0xef, 0x1, 0x8001, 0x3, 0x6, 0x1ff, 0xf47}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000061100c000000000095000000000000000000000000000000004d86767f2603402613039a8ae0c6e274b2b7117bc8777d8348a7dc6ebbff723a5d33652316de368440053fbe301fde48a60c656f7c7a85340ee6e5ab03b362a0a8cb946be077a1dbe32615fb8c48ee6372429fd8bd479cea0f89d665cc9ed241fd08df41b856c60ba340ebe9f9a6f2ccef4c6aa1fb5c0ead240000000000148c985a918e77e5c22ffe9674462b1b5b7a0b3acc25673def83aff9acc66190c68703c23379a147cd2a70484de93e31f24575fe4521d8a5d61c7a6ad7aea773f770fde9a48473b286c84e0edcacd2f499ca88f917f1432ecbadf047bd2e27c48c8cac07808d69a93e91beca5d9eaa4e9edabe24f5b4"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 621.863452ms ago: executing program 3 (id=207): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}, 0x1, 0x0, 0x0, 0x84}, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x2000000000000216, &(0x7f0000000740)=ANY=[@ANYBLOB="ae291ae2eacf6ea71d884473bef8a90f0ad4fd586cda3ae035edb917aac3ce4913432e448fa8586a5fb8ded4c30d94ccdb61e146fed9a02389160da779563898c7eb67f4a1aaedfadb7a3a626fd39437d4cb01e10718cbb821558d3be34bafd7f0cef4891c8886fda8024bdaddfcdd9e51740747da15fb0320e2d5ce84c2cad942ae9b90b336b5c02ecbe59e063c94cf658e653ab79e7fe51b168ffb3b6a13e38546db1cfb86bb40577ad5"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="190000000400000008000000"], 0x50) (async) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r2 = fsopen(&(0x7f0000000000)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000140)='auto_da_alloc', &(0x7f0000000300)='8\x00', 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000500)={0x10, 0x0, 0x8000, 0x2ffffffff}, 0xc) (async, rerun: 32) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) (async, rerun: 32) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000540)={'dummy0\x00', 0x0}) (async) setns(0xc9, 0x0) syz_emit_vhci(&(0x7f00000006c0)=ANY=[@ANYBLOB="043e1f0a"], 0x22) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000700)={'veth0_vlan\x00'}) (async, rerun: 64) syz_emit_vhci(&(0x7f0000000a80)=ANY=[@ANYBLOB="0407ff09fffffffffffffcae8c9527bc70286c795356b591953f197f93846a605cbbd21f73846e579524ecda887e7a8cc7358bb8409e7a5a857e348e9f478ef79b99e8ead0c01e8cedb03441a352e976cca9207ac1f60e8cbda7e2506521ac91f064507f050d3e06db33d5bd3e92a790853f8031252f77ab97605a169ab0b4c6678934da6769e714547951edc47a96eb739d477d4df1123bab7bf7c07a7679734d3bcdf22461443d455f163151dcff2a200ca7ecc44a285d062a9f74a64fabe77c363acd1dcfa697e37d2955e2d0400b7f35cd12c530e003000000000000003480b33ba7f1ff00976f0c0e53cb244aac658471d98b21afa1098bebf981be364f4cbae11659c6"], 0x102) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) syz_emit_vhci(&(0x7f0000000980)=ANY=[@ANYBLOB="040e079c0814"], 0xa) (rerun: 64) sendmsg$nl_route(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="3c000000240005040200"/20, @ANYRES32=r6, @ANYBLOB="00000100ffffffff000000000c00010063616b655f6d71"], 0x3c}}, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000200)={'bridge0\x00', @broadcast}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) (async) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 0s ago: executing program 2 (id=208): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000003c0)="b805000000b9fa0000000f01d9660f78c4020a3ef32e650f09b805000000b90000c0fe0fae41d901000000b87f8b7f26ba000000000f30660fc775022e0fba600c980f320f3566b857000f20c035000000800f22c0", 0x55}], 0xaaaaaaaaaaaaaf6, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r2, @ANYBLOB="00032dbd7000ffdbdf250500000008000400090000001c000180060004004e210000060001000a0000000800050000000000080006000e000000240004800600020089000000080009002f0000000800090014000000060004004e2300002c00038008000500ffffffff08000500ac1414340600040000080000060007004e23000005000800080000005000028006000f00ff0f000005000d000100000006000b000200000006000e004e21000008000700fbffffff05000d000100000014000100e000000100000000000000000000000006000f003600000014000180060004004e24000008000500040000000809060005000000"], 0xfc}}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000440), 0x88240, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000480)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000480)={0xc, 0x0, 0x0}) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r9, 0x84, 0x6b, &(0x7f00000005c0)=[@in6={0xa, 0x4e20, 0x351418d7, @private0, 0x8000}], 0x1c) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r7, 0x3ba0, &(0x7f00000004c0)={0x48, 0x2, r8, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r7, 0x3ba0, &(0x7f0000000540)={0x48, 0x15, r10, 0x0, r8}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r7, 0x3ba0, &(0x7f0000000540)={0x48, 0x15, r10, 0x0, r8}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2c, r1, 0x400, 0x70bd27, 0x25dfdbff, {{0x12}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) kernel console output (not intermixed with test programs): ailable for device syz [ 49.193316][ T5919] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13'. [ 49.198528][ T5919] ip6erspan0: entered promiscuous mode [ 49.311750][ T5927] capability: warning: `syz.3.15' uses 32-bit capabilities (legacy support in use) [ 49.350590][ T5932] Zero length message leads to an empty skb [ 49.374151][ T5932] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 49.416208][ T5939] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 49.502363][ T5939] overlayfs: failed to resolve './file0': -2 [ 50.149705][ T5741] Bluetooth: hci0: command tx timeout [ 50.149732][ T5742] Bluetooth: hci1: command tx timeout [ 50.149736][ T5741] Bluetooth: hci3: command tx timeout [ 50.149756][ T5742] Bluetooth: hci2: command tx timeout qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 50.380775][ T5963] bond1: entered allmulticast mode [ 50.381514][ T5963] 8021q: adding VLAN 0 to HW filter on device bond1 [ 50.560028][ T5099] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 50.562606][ T1311] Process accounting resumed [ 50.592197][ T5979] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 50.723069][ T5099] usb 8-1: Using ep0 maxpacket: 8 [ 50.728236][ T5099] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 50.728502][ T5979] Process accounting resumed [ 50.731397][ T5099] usb 8-1: config 1 interface 0 altsetting 4 bulk endpoint 0x1 has invalid maxpacket 16 [ 50.731419][ T5099] usb 8-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 50.731438][ T5099] usb 8-1: config 1 interface 0 has no altsetting 0 [ 50.735857][ T5099] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.735876][ T5099] usb 8-1: Product: 濦㋟ଗ욀곏쉗䅄锎퐋鄬칮࢞磄鸩両῵됛幘釅쳛᭧ሮ䒛좶轼嵐䂽⑹큗⊚Ṝް㸐䆇巊䌘㎹偮擹ほ넑赏⍤㺓㊳珞븤䝢४廢玺㟜羮娣欸般␀㺭汇毌䥣캔赉쮱⍕澔䎛韣兴戢衖Ⴭ虛窜硱洫怌㷾䂻薸絨ힰĮ쉅葕胰鮚늎ᆶ襔쨟ҭ雛촌䣠쉐铇핇㴼갇損 [ 50.735902][ T5099] usb 8-1: Manufacturer:   [ 50.735913][ T5099] usb 8-1: SerialNumber: syz [ 50.742925][ T5950] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 50.743018][ T5950] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 50.938146][ T5984] netlink: 28 bytes leftover after parsing attributes in process `syz.0.31'. [ 51.040150][ T43] kauditd_printk_skb: 129 callbacks suppressed [ 51.040161][ T43] audit: type=1400 audit(1792280569.441:293): avc: denied { write } for pid=5985 comm="syz.2.32" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 51.044125][ T43] audit: type=1400 audit(1792280569.441:294): avc: denied { call } for pid=5985 comm="syz.2.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 51.044671][ T43] audit: type=1400 audit(1792280569.441:295): avc: denied { transfer } for pid=5985 comm="syz.2.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 51.111765][ T43] audit: type=1400 audit(1792280569.511:296): avc: denied { ioctl } for pid=5987 comm="syz.0.33" path="socket:[10911]" dev="sockfs" ino=10911 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 51.125889][ T5992] FAULT_INJECTION: forcing a failure. [ 51.125889][ T5992] name failslab, interval 1, probability 0, space 0, times 1 [ 51.125909][ T5992] CPU: 3 UID: 0 PID: 5992 Comm: syz.0.33 Not tainted syzkaller #0 PREEMPT(full) [ 51.125922][ T5992] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.125929][ T5992] Call Trace: [ 51.125934][ T5992] [ 51.125939][ T5992] dump_stack_lvl+0x100/0x190 [ 51.125960][ T5992] should_fail_ex.cold+0x5/0xa [ 51.125977][ T5992] should_failslab+0xc2/0x120 [ 51.126009][ T5992] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 51.126026][ T5992] ? kstrdup_const+0x63/0x80 [ 51.126041][ T5992] kstrdup+0x51/0xe0 [ 51.126054][ T5992] kstrdup_const+0x63/0x80 [ 51.126066][ T5992] __kernfs_new_node+0x9b/0xa10 [ 51.126082][ T5992] ? __pfx___kernfs_new_node+0x10/0x10 [ 51.126097][ T5992] ? lock_acquire+0x1d1/0x380 [ 51.126109][ T5992] ? kernfs_root+0x23/0x2a0 [ 51.126120][ T5992] ? find_held_lock+0x2b/0x80 [ 51.126136][ T5992] ? kernfs_root+0xee/0x2a0 [ 51.126146][ T5992] ? kernfs_root+0xee/0x2a0 [ 51.126160][ T5992] kernfs_create_dir_ns+0xa6/0x2b0 [ 51.126174][ T5992] ? percpu_ref_init+0x244/0x3f0 [ 51.126189][ T5992] cgroup_mkdir+0x3be/0x1330 [ 51.126208][ T5992] ? __pfx_cgroup_mkdir+0x10/0x10 [ 51.126222][ T5992] kernfs_iop_mkdir+0x111/0x190 [ 51.126234][ T5992] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 51.126250][ T5992] vfs_mkdir+0x364/0x850 [ 51.126265][ T5992] filename_mkdirat+0x48b/0x5e0 [ 51.126283][ T5992] ? __pfx_filename_mkdirat+0x10/0x10 [ 51.126300][ T5992] ? strncpy_from_user+0x19d/0x2d0 [ 51.126319][ T5992] ? do_getname+0x191/0x390 [ 51.126337][ T5992] __x64_sys_mkdirat+0x89/0xc0 [ 51.126355][ T5992] do_syscall_64+0x123/0x790 [ 51.126375][ T5992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.126388][ T5992] RIP: 0033:0x7f4df119e559 [ 51.126398][ T5992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.126408][ T5992] RSP: 002b:00007f4df1fdd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 51.126419][ T5992] RAX: ffffffffffffffda RBX: 00007f4df1426090 RCX: 00007f4df119e559 [ 51.126426][ T5992] RDX: 00000000000001ff RSI: 00002000000004c0 RDI: ffffffffffffff9c [ 51.126433][ T5992] RBP: 00007f4df1235ab8 R08: 0000000000000000 R09: 0000000000000000 [ 51.126439][ T5992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 51.126446][ T5992] R13: 00007f4df1426128 R14: 00007f4df1426090 R15: 00007ffedef41b08 [ 51.126462][ T5992] [ 51.129331][ T43] audit: type=1400 audit(1792280569.521:297): avc: denied { write } for pid=5985 comm="syz.2.32" path="socket:[10905]" dev="sockfs" ino=10905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.129443][ T5990] Bluetooth: MGMT ver 1.23 [ 51.133744][ T5990] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 51.140634][ T43] audit: type=1400 audit(1792280569.541:298): avc: denied { write } for pid=5991 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 51.152749][ T43] audit: type=1400 audit(1792280569.551:299): avc: denied { setopt } for pid=5987 comm="syz.0.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.153577][ T5950] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(14) [ 51.153597][ T5950] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 51.155572][ T5950] vhci_hcd vhci_hcd.0: Device attached [ 51.156579][ T5997] vhci_hcd: cannot find the pending unlink 18756 [ 51.156887][ T5997] vhci_hcd: connection closed [ 51.161272][ T13] vhci_hcd vhci_hcd.3: stop threads [ 51.161473][ T13] vhci_hcd vhci_hcd.3: release socket [ 51.161494][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 51.177772][ T5099] usb 8-1: USB disconnect, device number 2 [ 51.227507][ T43] audit: type=1400 audit(1792280569.621:300): avc: denied { write } for pid=6000 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 51.334690][ T43] audit: type=1400 audit(1792280569.731:301): avc: denied { write } for pid=6002 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 51.385795][ T43] audit: type=1400 audit(1792280569.781:302): avc: denied { unmount } for pid=5727 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 51.561435][ T6018] rxe_eth0 speed is unknown, defaulting to 1000 [ 51.611620][ T6018] FAULT_INJECTION: forcing a failure. [ 51.611620][ T6018] name failslab, interval 1, probability 0, space 0, times 0 [ 51.611638][ T6018] CPU: 1 UID: 0 PID: 6018 Comm: syz.2.36 Not tainted syzkaller #0 PREEMPT(full) [ 51.611651][ T6018] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.611658][ T6018] Call Trace: [ 51.611662][ T6018] [ 51.611667][ T6018] dump_stack_lvl+0x100/0x190 [ 51.611688][ T6018] should_fail_ex.cold+0x5/0xa [ 51.611705][ T6018] should_failslab+0xc2/0x120 [ 51.611723][ T6018] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 51.611740][ T6018] ? kstrdup_const+0x63/0x80 [ 51.611756][ T6018] kstrdup+0x51/0xe0 [ 51.611769][ T6018] kstrdup_const+0x63/0x80 [ 51.611786][ T6018] __kernfs_new_node+0x9b/0xa10 [ 51.611802][ T6018] ? __pfx___kernfs_new_node+0x10/0x10 [ 51.611817][ T6018] ? lock_acquire+0x1d1/0x380 [ 51.611830][ T6018] ? kernfs_root+0x23/0x2a0 [ 51.611842][ T6018] ? find_held_lock+0x2b/0x80 [ 51.611858][ T6018] ? kernfs_root+0xee/0x2a0 [ 51.611869][ T6018] ? kernfs_root+0xee/0x2a0 [ 51.611884][ T6018] kernfs_new_node+0x117/0x150 [ 51.611899][ T6018] __kernfs_create_file+0x53/0x350 [ 51.611917][ T6018] sysfs_add_file_mode_ns+0x207/0x3c0 [ 51.611951][ T6018] internal_create_group+0x593/0xfb0 [ 51.611969][ T6018] ? __pfx_internal_create_group+0x10/0x10 [ 51.611980][ T6018] ? __pfx_kobject_add+0x10/0x10 [ 51.611999][ T6018] internal_create_groups+0x9d/0x150 [ 51.612013][ T6018] setup_port+0x409/0x16e0 [ 51.612035][ T6018] ? __pfx_setup_port+0x10/0x10 [ 51.612051][ T6018] ? do_raw_spin_unlock+0x145/0x1e0 [ 51.612069][ T6018] ? rxe_get_link_layer+0x64/0xc0 [ 51.612084][ T6018] ? __pfx_rxe_get_link_layer+0x10/0x10 [ 51.612116][ T6018] ? rdma_port_get_link_layer+0x57/0xe0 [ 51.612137][ T6018] ib_setup_port_attrs+0x201/0x600 [ 51.612153][ T6018] ? kobject_put+0xb9/0x640 [ 51.612167][ T6018] ? __pfx_ib_setup_port_attrs+0x10/0x10 [ 51.612188][ T6018] ? __init_waitqueue_head+0xca/0x150 [ 51.612207][ T6018] add_one_compat_dev+0x5b3/0x820 [ 51.612221][ T6018] rdma_dev_init_net+0x30a/0x590 [ 51.612234][ T6018] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 51.612245][ T6018] ? __kmalloc_noprof+0x350/0x840 [ 51.612263][ T6018] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 51.612275][ T6018] ops_init+0x1e2/0x5f0 [ 51.612290][ T6018] setup_net+0x118/0x3a0 [ 51.612303][ T6018] ? __pfx_setup_net+0x10/0x10 [ 51.612320][ T6018] copy_net_ns+0x345/0x7a0 [ 51.612336][ T6018] create_new_namespaces+0x3ea/0xac0 [ 51.612354][ T6018] unshare_nsproxy_namespaces+0xf2/0x220 [ 51.612369][ T6018] ksys_unshare+0x4a2/0xb30 [ 51.612386][ T6018] ? __pfx_ksys_unshare+0x10/0x10 [ 51.612410][ T6018] __x64_sys_unshare+0x31/0x40 [ 51.612424][ T6018] do_syscall_64+0x123/0x790 [ 51.612443][ T6018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.612454][ T6018] RIP: 0033:0x7f3701f9e559 [ 51.612464][ T6018] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.612475][ T6018] RSP: 002b:00007f3702dff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 51.612487][ T6018] RAX: ffffffffffffffda RBX: 00007f3702225fa0 RCX: 00007f3701f9e559 [ 51.612494][ T6018] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000042000000 [ 51.612500][ T6018] RBP: 00007f3702035ab8 R08: 0000000000000000 R09: 0000000000000000 [ 51.612507][ T6018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 51.612513][ T6018] R13: 00007f3702226038 R14: 00007f3702225fa0 R15: 00007ffef8077c28 [ 51.612529][ T6018] [ 51.705930][ T5741] Bluetooth: Frame is too long (len 12, expected len 4) [ 51.971130][ T6028] netlink: 44 bytes leftover after parsing attributes in process `syz.3.39'. [ 52.046418][ T6032] use of bytesused == 0 is deprecated and will be removed in the future, [ 52.046439][ T6032] use the actual size instead. [ 52.229285][ T6036] Can't find a SQUASHFS superblock on nullb0 [ 52.231297][ T5741] Bluetooth: hci2: command tx timeout [ 52.231662][ T5730] Bluetooth: hci3: command tx timeout [ 52.231680][ T5741] Bluetooth: hci1: command tx timeout [ 52.257427][ T6038] batadv0: entered promiscuous mode [ 52.257969][ T6038] macvlan2: entered promiscuous mode [ 52.258140][ T6038] macvlan2: entered allmulticast mode [ 52.258149][ T6038] batadv0: entered allmulticast mode [ 52.260070][ T6038] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 52.269676][ T6038] binder: 6037:6038 ioctl c0306201 200000000580 returned -22 [ 52.593251][ T6036] overlayfs: failed to create directory ./file0/work (errno: 22); mounting read-only [ 52.669799][ T29] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 52.715616][ T6055] netlink: 'syz.1.47': attribute type 6 has an invalid length. [ 52.739087][ T6055] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 52.741406][ T6058] netlink: 4 bytes leftover after parsing attributes in process `syz.3.48'. [ 52.848087][ T6068] netlink: 'syz.3.52': attribute type 21 has an invalid length. [ 52.848120][ T6068] IPv6: NLM_F_CREATE should be specified when creating new route [ 52.850330][ T29] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 52.851113][ T29] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 52.851136][ T29] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 52.851148][ T29] usb 5-1: config 0 interface 0 has no altsetting 0 [ 52.853242][ T29] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 52.853252][ T29] usb 5-1: Product: syz [ 52.853259][ T29] usb 5-1: Manufacturer: syz [ 52.853267][ T29] usb 5-1: SerialNumber: syz [ 52.858669][ T29] usb 5-1: config 0 descriptor?? [ 52.861806][ T29] hub 5-1:0.0: bad descriptor, ignoring hub [ 52.861816][ T29] hub 5-1:0.0: probe with driver hub failed with error -5 [ 52.864971][ T29] usb 5-1: selecting invalid altsetting 0 [ 52.887679][ T6073] syz.1.53 uses obsolete (PF_INET,SOCK_PACKET) [ 53.064491][ T29] usb 5-1: USB disconnect, device number 2 [ 53.096869][ T6093] netlink: 36 bytes leftover after parsing attributes in process `syz.1.57'. [ 53.187151][ T6102] netlink: 12 bytes leftover after parsing attributes in process `syz.2.59'. [ 53.272720][ T6113] hsr_slave_0: left promiscuous mode [ 53.276836][ T6113] hsr_slave_1: left promiscuous mode [ 53.498275][ T6118] cgroup: fork rejected by pids controller in /syz1 [ 53.684283][ T6169] FAULT_INJECTION: forcing a failure. [ 53.684283][ T6169] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 53.684303][ T6169] CPU: 1 UID: 0 PID: 6169 Comm: syz.0.63 Not tainted syzkaller #0 PREEMPT(full) [ 53.684316][ T6169] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.684323][ T6169] Call Trace: [ 53.684327][ T6169] [ 53.684332][ T6169] dump_stack_lvl+0x100/0x190 [ 53.684352][ T6169] should_fail_ex.cold+0x5/0xa [ 53.684368][ T6169] strncpy_from_user+0x3b/0x2d0 [ 53.684390][ T6169] do_getname+0x78/0x390 [ 53.684403][ T6169] __x64_sys_unlinkat+0xa0/0x130 [ 53.684416][ T6169] do_syscall_64+0x123/0x790 [ 53.684435][ T6169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.684447][ T6169] RIP: 0033:0x7f4df119e559 [ 53.684457][ T6169] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.684470][ T6169] RSP: 002b:00007f4df1ffe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 53.684481][ T6169] RAX: ffffffffffffffda RBX: 00007f4df1425fa0 RCX: 00007f4df119e559 [ 53.684489][ T6169] RDX: 0000000000000200 RSI: 0000200000000440 RDI: ffffffffffffff9c [ 53.684496][ T6169] RBP: 00007f4df1235ab8 R08: 0000000000000000 R09: 0000000000000000 [ 53.684504][ T6169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 53.684511][ T6169] R13: 00007f4df1426038 R14: 00007f4df1425fa0 R15: 00007ffedef41b08 [ 53.684527][ T6169] [ 53.738426][ T6174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.65'. [ 53.764293][ T6174] FAULT_INJECTION: forcing a failure. [ 53.764293][ T6174] name failslab, interval 1, probability 0, space 0, times 0 [ 53.764313][ T6174] CPU: 1 UID: 0 PID: 6174 Comm: syz.0.65 Not tainted syzkaller #0 PREEMPT(full) [ 53.764337][ T6174] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.764347][ T6174] Call Trace: [ 53.764353][ T6174] [ 53.764360][ T6174] dump_stack_lvl+0x100/0x190 [ 53.764402][ T6174] should_fail_ex.cold+0x5/0xa [ 53.764427][ T6174] should_failslab+0xc2/0x120 [ 53.764452][ T6174] __kmalloc_cache_node_noprof+0x94/0x720 [ 53.764477][ T6174] ? __alloc_workqueue+0x1211/0x1950 [ 53.764506][ T6174] __alloc_workqueue+0x1211/0x1950 [ 53.764538][ T6174] alloc_workqueue_noprof+0xc7/0x130 [ 53.764559][ T6174] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 53.764581][ T6174] ? mempool_create_node_noprof+0xf4/0x1b0 [ 53.764598][ T6174] ? mempool_create_node_noprof+0xfe/0x1b0 [ 53.764616][ T6174] ? __pfx_msgpool_alloc+0x10/0x10 [ 53.764643][ T6174] ceph_osdc_init+0x575/0xa00 [ 53.764664][ T6174] ceph_create_client+0x281/0x370 [ 53.764682][ T6174] ceph_get_tree+0x1a4/0x1fd0 [ 53.764700][ T6174] ? bpf_lsm_capable+0x9/0x10 [ 53.764715][ T6174] ? security_capable+0x80/0x260 [ 53.764735][ T6174] vfs_get_tree+0x92/0x320 [ 53.764752][ T6174] path_mount+0x7d0/0x2850 [ 53.764773][ T6174] ? __pfx_path_mount+0x10/0x10 [ 53.764788][ T6174] ? lockdep_hardirqs_on+0x7d/0x110 [ 53.764813][ T6174] ? putname+0xb1/0x110 [ 53.764826][ T6174] ? kmem_cache_free+0x127/0x6c0 [ 53.764850][ T6174] ? __x64_sys_mount+0x293/0x310 [ 53.764865][ T6174] __x64_sys_mount+0x293/0x310 [ 53.764882][ T6174] ? __pfx___x64_sys_mount+0x10/0x10 [ 53.764904][ T6174] do_syscall_64+0x123/0x790 [ 53.764929][ T6174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.764946][ T6174] RIP: 0033:0x7f4df119e559 [ 53.764960][ T6174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.764975][ T6174] RSP: 002b:00007f4df1ffe028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 53.764991][ T6174] RAX: ffffffffffffffda RBX: 00007f4df1425fa0 RCX: 00007f4df119e559 [ 53.765001][ T6174] RDX: 0000200000001780 RSI: 0000200000001740 RDI: 0000200000001700 [ 53.765011][ T6174] RBP: 00007f4df1235ab8 R08: 0000000000000000 R09: 0000000000000000 [ 53.765021][ T6174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 53.765030][ T6174] R13: 00007f4df1426038 R14: 00007f4df1425fa0 R15: 00007ffedef41b08 [ 53.765052][ T6174] [ 53.812108][ T6180] SELinux: syz.0.66 (6180) wrote to user. This is no longer supported. [ 53.865503][ T6186] overlayfs: missing 'lowerdir' [ 53.872479][ T6186] CIFS: VFS: UNC: missing share name [ 53.872559][ T6186] CIFS: VFS: Malformed UNC in devname [ 53.956165][ T5741] Bluetooth: hci1: unexpected cc 0x1407 length: 11 > 9 [ 54.309752][ T5741] Bluetooth: hci3: command tx timeout [ 54.319651][ T5741] Bluetooth: hci2: command tx timeout [ 54.486169][ T6222] FAULT_INJECTION: forcing a failure. [ 54.486169][ T6222] name fail_futex, interval 1, probability 0, space 0, times 1 [ 54.486194][ T6222] CPU: 0 UID: 0 PID: 6222 Comm: syz.1.74 Not tainted syzkaller #0 PREEMPT(full) [ 54.486213][ T6222] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 54.486223][ T6222] Call Trace: [ 54.486229][ T6222] [ 54.486236][ T6222] dump_stack_lvl+0x100/0x190 [ 54.486282][ T6222] should_fail_ex.cold+0x5/0xa [ 54.486309][ T6222] get_futex_key+0x1d0/0x14f0 [ 54.486337][ T6222] ? __pfx_get_futex_key+0x10/0x10 [ 54.486359][ T6222] ? find_held_lock+0x2b/0x80 [ 54.486383][ T6222] ? futex_wake+0x4ea/0x5e0 [ 54.486405][ T6222] futex_wake+0xf4/0x5e0 [ 54.486425][ T6222] ? __pfx_futex_wake+0x10/0x10 [ 54.486445][ T6222] ? fput+0x7c/0x100 [ 54.486469][ T6222] ? __sys_recvfrom+0x258/0x2f0 [ 54.486489][ T6222] do_futex+0x2b2/0x440 [ 54.486514][ T6222] ? __pfx_do_futex+0x10/0x10 [ 54.486543][ T6222] __x64_sys_futex+0x34f/0x4d0 [ 54.486569][ T6222] ? __pfx___x64_sys_futex+0x10/0x10 [ 54.486601][ T6222] do_syscall_64+0x123/0x790 [ 54.486627][ T6222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.486644][ T6222] RIP: 0033:0x7f8963f9e559 [ 54.486659][ T6222] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.486674][ T6222] RSP: 002b:00007f89621f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 54.486692][ T6222] RAX: ffffffffffffffda RBX: 00007f8964225fa8 RCX: 00007f8963f9e559 [ 54.486703][ T6222] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8964225fac [ 54.486713][ T6222] RBP: 00007f8964225fa0 R08: 0000000000000001 R09: 0000000000000000 [ 54.486724][ T6222] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 54.486734][ T6222] R13: 00007f8964226038 R14: 00007fff84320430 R15: 00007fff84320518 [ 54.486756][ T6222] [ 54.568148][ T6227] overlayfs: missing 'lowerdir' [ 54.806244][ T6247] netlink: 20 bytes leftover after parsing attributes in process `syz.0.82'. [ 54.806534][ T6247] xfrm0: entered promiscuous mode [ 54.806549][ T6247] xfrm0: entered allmulticast mode [ 54.818620][ T6247] netlink: 20 bytes leftover after parsing attributes in process `syz.0.82'. [ 54.846153][ T6259] Bluetooth: MGMT ver 1.23 [ 55.420506][ T6282] netlink: 8 bytes leftover after parsing attributes in process `syz.2.88'. [ 55.464661][ T6292] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 55.464871][ T6292] CIFS: Attempting to mount //127.0.0.1/share [ 55.519336][ T6293] CIFS: VFS: Invalid response size 0 for command 0 [ 55.521527][ T6292] CIFS: VFS: cifs_mount failed w/return code = -5 [ 55.616424][ T6300] ======================================================= [ 55.616424][ T6300] WARNING: The mand mount option has been deprecated and [ 55.616424][ T6300] and is ignored by this kernel. Remove the mand [ 55.616424][ T6300] option from the mount to silence this warning. [ 55.616424][ T6300] ======================================================= [ 55.679096][ T6307] netlink: 'syz.3.95': attribute type 7 has an invalid length. [ 55.679111][ T6307] netlink: 'syz.3.95': attribute type 8 has an invalid length. [ 55.700443][ T6307] bond2: option downdelay: invalid value (18446744073709551615) [ 55.700454][ T6307] bond2: option downdelay: allowed values 0 - 2147483647 [ 55.701697][ T6307] bond2 (unregistering): Released all slaves [ 56.203835][ T43] kauditd_printk_skb: 129 callbacks suppressed [ 56.203852][ T43] audit: type=1400 audit(1792280574.601:432): avc: denied { write } for pid=6319 comm="syz.0.100" name="snmp" dev="proc" ino=4026533180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 56.263484][ T43] audit: type=1400 audit(1792280574.661:433): avc: denied { write } for pid=6319 comm="syz.0.100" name="c.1" dev="configfs" ino=9898 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 56.264210][ T43] audit: type=1400 audit(1792280574.661:434): avc: denied { create } for pid=6319 comm="syz.0.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 56.468590][ T43] audit: type=1400 audit(1792280574.861:435): avc: denied { append } for pid=6327 comm="syz.1.101" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 56.469017][ T6328] random: crng reseeded on system resumption [ 56.473224][ T43] audit: type=1400 audit(1792280574.861:436): avc: denied { open } for pid=6327 comm="syz.1.101" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 56.479218][ T6328] Unrecognized hibernate image header format! [ 56.479228][ T6328] PM: hibernation: Image mismatch: architecture specific data [ 56.567296][ T43] audit: type=1400 audit(1792280574.961:437): avc: denied { create } for pid=6331 comm="syz.1.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 56.567840][ T43] audit: type=1400 audit(1792280574.961:438): avc: denied { bind } for pid=6331 comm="syz.1.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 56.662262][ T6334] netlink: 'syz.2.103': attribute type 10 has an invalid length. [ 56.662799][ T6334] syz_tun: entered promiscuous mode [ 56.670117][ T6334] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 56.719558][ C1] net_ratelimit: 196 callbacks suppressed [ 56.879651][ T5742] Bluetooth: hci1: command 0x0c24 tx timeout [ 56.881165][ T5741] Bluetooth: hci1: Opcode 0x0c24 failed: -110 [ 57.098344][ T6338] ip_tables: iptables: counters copy to user failed while replacing table [ 57.162703][ T6345] CIFS: Witness protocol support is experimental [ 57.162724][ T6345] CIFS mount error: No usable UNC path provided in device string! [ 57.162724][ T6345] [ 57.162840][ T6345] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 57.163327][ T6345] process 'syz.0.105' launched '/dev/fd/4' with NULL argv: empty string added [ 57.163507][ T43] audit: type=1400 audit(1792280575.561:439): avc: denied { execute_no_trans } for pid=6344 comm="syz.0.105" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 57.196117][ T6347] ./cgroup: Can't lookup blockdev [ 57.220318][ T43] audit: type=1400 audit(1792280575.621:440): avc: denied { ioctl } for pid=6348 comm="syz.0.107" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=12402 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 57.264419][ T6349] netlink: 12 bytes leftover after parsing attributes in process `syz.0.107'. [ 57.271259][ T6349] ifb0: entered allmulticast mode [ 57.277225][ T43] audit: type=1400 audit(1792280575.671:441): avc: denied { mounton } for pid=6348 comm="syz.0.107" path="/26/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 57.300526][ T6353] capability: warning: `syz.2.108' uses deprecated v2 capabilities in a way that may be insecure [ 57.337738][ T6349] input: syz0 as /devices/virtual/input/input7 [ 57.342939][ T6349] netlink: 12 bytes leftover after parsing attributes in process `syz.0.107'. [ 57.347619][ T6350] netlink: 12 bytes leftover after parsing attributes in process `syz.0.107'. [ 57.378557][ T6349] xfrm1: entered promiscuous mode [ 57.378565][ T6349] xfrm1: entered allmulticast mode [ 57.387343][ T5831] rxe_eth0 speed is unknown, defaulting to 1000 [ 57.387532][ T6361] cgroup: fork rejected by pids controller in [ 57.387541][ T6361] /syz2 [ 57.387545][ T6361] [ 57.409146][ T6364] fuse: Bad value for 'rootmode' [ 57.419400][ T6365] xt_bpf: check failed: parse error [ 57.846540][ T6423] input: syz0 as /devices/virtual/input/input8 [ 57.850346][ T6425] SELinux: Context system_u:object_r:run_init_exec_t:s0 is not valid (left unmapped). [ 57.988951][ T6427] ima: policy update failed [ 58.214402][ T5741] Bluetooth: hci1: unexpected cc 0x1407 length: 11 > 9 [ 58.214447][ T5741] Bluetooth: hci1: unexpected event for opcode 0x1407 ** 3768 printk messages dropped ** ** 687 printk messages dropped ** ** 160 printk messages dropped ** ** 141 printk messages dropped ** ** 227 printk messages dropped ** ** 147 printk messages dropped ** ** 134 printk messages dropped ** ** 148 printk messages dropped ** ** 141 printk messages dropped ** ** 176 printk messages dropped ** ** 73 printk messages dropped ** ** 5720 printk messages dropped ** ** 141 printk messages dropped ** ** 132 printk messages dropped ** ** 134 printk messages dropped ** ** 136 printk messages dropped ** ** 131 printk messages dropped ** ** 133 printk messages dropped ** ** 134 printk messages dropped ** ** 77 printk messages dropped ** ** 1458 printk messages dropped ** ** 131 printk messages dropped ** ** 136 printk messages dropped ** ** 143 printk messages dropped ** ** 142 printk messages dropped ** ** 141 printk messages dropped ** ** 150 printk messages dropped ** ** 144 printk messages dropped ** ** 148 printk messages dropped ** ** 140 printk messages dropped ** ** 140 printk messages dropped ** ** 162 printk messages dropped ** ** 155 printk messages dropped ** ** 142 printk messages dropped ** ** 141 printk messages dropped ** ** 131 printk messages dropped ** ** 145 printk messages dropped ** ** 129 printk messages dropped ** ** 130 printk messages dropped ** ** 138 printk messages dropped ** ** 138 printk messages dropped ** ** 140 printk messages dropped ** ** 140 printk messages dropped ** ** 137 printk messages dropped ** ** 150 printk messages dropped ** ** 114 printk messages dropped ** ** 145 printk messages dropped ** ** 132 printk messages dropped ** ** 131 printk messages dropped ** ** 127 printk messages dropped ** ** 136 printk messages dropped ** ** 122 printk messages dropped ** ** 137 printk messages dropped ** ** 151 printk messages dropped ** ** 144 printk messages dropped ** ** 148 printk messages dropped ** ** 43 printk messages dropped ** [ 59.215509][ T6448] FAULT_INJECTION: forcing a failure. [ 59.215509][ T6448] name failslab, interval 1, probability 0, space 0, times 0 [ 59.215528][ T6448] CPU: 1 UID: 0 PID: 6448 Comm: syz.3.121 Not tainted syzkaller #0 PREEMPT(full) [ 59.215541][ T6448] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 59.215548][ T6448] Call Trace: [ 59.215552][ T6448] [ 59.215557][ T6448] dump_stack_lvl+0x100/0x190 [ 59.215577][ T6448] should_fail_ex.cold+0x5/0xa [ 59.215594][ T6448] should_failslab+0xc2/0x120 [ 59.215611][ T6448] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 59.215627][ T6448] ? __alloc_skb+0x140/0x710 [ 59.215642][ T6448] __alloc_skb+0x140/0x710 [ 59.215651][ T6448] ? __alloc_skb+0x5b7/0x710 [ 59.215661][ T6448] ? __pfx___alloc_skb+0x10/0x10 [ 59.215671][ T6448] ? genl_rcv_msg+0x4be/0x800 [ 59.215688][ T6448] netlink_ack+0x117/0xb80 [ 59.215703][ T6448] netlink_rcv_skb+0x333/0x420 [ 59.215713][ T6448] ? __pfx_genl_rcv_msg+0x10/0x10 [ 59.215727][ T6448] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 59.215744][ T6448] ? netlink_deliver_tap+0x1ae/0xcc0 [ 59.215763][ T6448] genl_rcv+0x28/0x40 [ 59.215773][ T6448] netlink_unicast+0x65f/0x950 [ 59.215793][ T6448] ? __pfx_netlink_unicast+0x10/0x10 [ 59.215808][ T6448] netlink_sendmsg+0x8b0/0xda0 [ 59.215821][ T6448] ? __pfx_netlink_sendmsg+0x10/0x10 [ 59.215833][ T6448] ? selinux_socket_sendmsg+0x198/0x2f0 [ 59.215853][ T6448] ____sys_sendmsg+0xa4d/0xbe0 [ 59.215867][ T6448] ? __pfx_netlink_sendmsg+0x10/0x10 [ 59.215878][ T6448] ? __pfx_____sys_sendmsg+0x10/0x10 [ 59.215897][ T6448] ? lock_acquire+0x1d1/0x380 [ 59.215910][ T6448] ? get_pid_task+0x2a/0x250 [ 59.215928][ T6448] ___sys_sendmsg+0x190/0x1e0 [ 59.215944][ T6448] ? __pfx____sys_sendmsg+0x10/0x10 [ 59.215960][ T6448] ? get_pid_task+0x106/0x250 [ 59.215981][ T6448] ? find_held_lock+0x2b/0x80 [ 59.216007][ T6448] __sys_sendmsg+0x160/0x210 [ 59.216019][ T6448] ? __pfx___sys_sendmsg+0x10/0x10 [ 59.216039][ T6448] do_syscall_64+0x123/0x790 [ 59.216058][ T6448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.216095][ T6448] RIP: 0033:0x7efd81b9e559 [ 59.216105][ T6448] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.216116][ T6448] RSP: 002b:00007efd82a3f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 59.216127][ T6448] RAX: ffffffffffffffda RBX: 00007efd81e25fa0 RCX: 00007efd81b9e559 [ 59.216134][ T6448] RDX: 0000000004000000 RSI: 0000200000000000 RDI: 0000000000000003 ** 247 printk messages dropped ** ** 129 printk messages dropped ** ** 134 printk messages dropped ** ** 120 printk messages dropped ** ** 123 printk messages dropped ** ** 132 printk messages dropped ** ** 128 printk messages dropped ** ** 134 printk messages dropped ** ** 127 printk messages dropped ** ** 116 printk messages dropped ** ** 119 printk messages dropped ** ** 133 printk messages dropped ** ** 135 printk messages dropped ** ** 125 printk messages dropped ** ** 123 printk messages dropped ** ** 135 printk messages dropped ** ** 134 printk messages dropped ** ** 133 printk messages dropped ** ** 134 printk messages dropped ** ** 133 printk messages dropped ** ** 135 printk messages dropped ** ** 133 printk messages dropped ** ** 132 printk messages dropped ** ** 66 printk messages dropped ** [ 59.441078][ T6451] netlink: 4 bytes leftover after parsing attributes in process `syz.3.122'. [ 59.500672][ T6377] syz.2.108 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 59.500690][ T6377] CPU: 2 UID: 0 PID: 6377 Comm: syz.2.108 Not tainted syzkaller #0 PREEMPT(full) [ 59.500703][ T6377] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 59.500710][ T6377] Call Trace: [ 59.500714][ T6377] [ 59.500718][ T6377] dump_stack_lvl+0x100/0x190 [ 59.500740][ T6377] dump_header+0xfb/0x606 [ 59.500754][ T6377] oom_kill_process.cold+0xd/0x380 [ 59.500768][ T6377] out_of_memory+0x340/0x14f0 [ 59.500789][ T6377] ? __pfx_out_of_memory+0x10/0x10 [ 59.500816][ T6377] mem_cgroup_out_of_memory+0xc6/0x130 [ 59.500831][ T6377] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 59.500845][ T6377] ? find_held_lock+0x2b/0x80 [ 59.500865][ T6377] ? do_raw_spin_unlock+0x145/0x1e0 [ 59.500881][ T6377] ? _raw_spin_unlock+0x28/0x50 [ 59.500897][ T6377] try_charge_memcg+0x783/0xf60 [ 59.500913][ T6377] ? __pfx_try_charge_memcg+0x10/0x10 [ 59.500924][ T6377] ? find_held_lock+0x2b/0x80 [ 59.500940][ T6377] ? rcu_read_unlock+0x17/0x60 [ 59.500951][ T6377] ? rcu_read_unlock+0x17/0x60 [ 59.500963][ T6377] ? find_held_lock+0x2b/0x80 [ 59.500980][ T6377] ? rcu_read_unlock+0x17/0x60 [ 59.500995][ T6377] charge_memcg+0x1ae/0x210 [ 59.501008][ T6377] __mem_cgroup_charge+0x2b/0x1c0 [ 59.501022][ T6377] shmem_alloc_and_add_folio+0x451/0xd40 [ 59.501038][ T6377] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 59.501051][ T6377] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 59.501064][ T6377] ? __lock_acquire+0x5c0/0x1f40 [ 59.501079][ T6377] shmem_get_folio_gfp+0x75b/0x1980 [ 59.501095][ T6377] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 59.501105][ T6377] ? inode_set_ctime_current+0x9c/0x850 [ 59.501117][ T6377] ? find_held_lock+0x2b/0x80 [ 59.501135][ T6377] ? timestamp_truncate+0x22e/0x2f0 [ 59.501148][ T6377] shmem_write_begin+0x1a4/0x420 [ 59.501161][ T6377] ? __pfx_shmem_write_begin+0x10/0x10 [ 59.501173][ T6377] ? inode_set_ctime_current+0x283/0x850 [ 59.501184][ T6377] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 59.501197][ T6377] ? inode_maybe_inc_iversion+0x169/0x220 [ 59.501215][ T6377] generic_perform_write+0x292/0xa40 [ 59.501231][ T6377] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 59.501249][ T6377] ? __pfx_generic_perform_write+0x10/0x10 [ 59.501266][ T6377] ? mnt_put_write_access_file+0x4e/0x100 [ 59.501283][ T6377] ? file_update_time_flags+0x38c/0x520 [ 59.501297][ T6377] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 59.501311][ T6377] shmem_file_write_iter+0x10e/0x140 [ 59.501326][ T6377] __kernel_write_iter+0x2ac/0x930 [ 59.501341][ T6377] ? __pfx___kernel_write_iter+0x10/0x10 ** 138 printk messages dropped ** ** 96 printk messages dropped ** ** 148 printk messages dropped ** ** 152 printk messages dropped ** ** 161 printk messages dropped ** ** 155 printk messages dropped ** ** 181 printk messages dropped ** ** 152 printk messages dropped ** ** 214 printk messages dropped ** ** 228 printk messages dropped ** ** 151 printk messages dropped ** ** 141 printk messages dropped ** ** 218 printk messages dropped ** ** 234 printk messages dropped ** ** 248 printk messages dropped ** ** 35 printk messages dropped ** ** 89 printk messages dropped ** ** 79 printk messages dropped ** ** 52 printk messages dropped ** [ 59.586687][ T6377] syz.2.108 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 59.586704][ T6377] CPU: 2 UID: 0 PID: 6377 Comm: syz.2.108 Not tainted syzkaller #0 PREEMPT(full) [ 59.586717][ T6377] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 59.586724][ T6377] Call Trace: [ 59.586728][ T6377] [ 59.586733][ T6377] dump_stack_lvl+0x100/0x190 [ 59.586754][ T6377] dump_header+0xfb/0x606 [ 59.586768][ T6377] oom_kill_process.cold+0xd/0x380 [ 59.586782][ T6377] out_of_memory+0x340/0x14f0 [ 59.586808][ T6377] ? __pfx_out_of_memory+0x10/0x10 [ 59.586829][ T6377] mem_cgroup_out_of_memory+0xc6/0x130 [ 59.586846][ T6377] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 59.586860][ T6377] ? find_held_lock+0x2b/0x80 [ 59.586880][ T6377] ? do_raw_spin_unlock+0x145/0x1e0 [ 59.586897][ T6377] ? _raw_spin_unlock+0x28/0x50 [ 59.586913][ T6377] try_charge_memcg+0x783/0xf60 [ 59.586929][ T6377] ? __pfx_try_charge_memcg+0x10/0x10 [ 59.586940][ T6377] ? find_held_lock+0x2b/0x80 [ 59.586956][ T6377] ? rcu_read_unlock+0x17/0x60 [ 59.586968][ T6377] ? rcu_read_unlock+0x17/0x60 [ 59.586980][ T6377] ? find_held_lock+0x2b/0x80 [ 59.586997][ T6377] ? rcu_read_unlock+0x17/0x60 [ 59.587012][ T6377] charge_memcg+0x1ae/0x210 [ 59.587025][ T6377] __mem_cgroup_charge+0x2b/0x1c0 [ 59.587039][ T6377] shmem_alloc_and_add_folio+0x451/0xd40 [ 59.587055][ T6377] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 59.587069][ T6377] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 59.587082][ T6377] ? __lock_acquire+0x5c0/0x1f40 [ 59.587097][ T6377] shmem_get_folio_gfp+0x75b/0x1980 [ 59.587113][ T6377] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 59.587124][ T6377] ? inode_set_ctime_current+0x9c/0x850 [ 59.587136][ T6377] ? find_held_lock+0x2b/0x80 [ 59.587154][ T6377] ? timestamp_truncate+0x22e/0x2f0 [ 59.587167][ T6377] shmem_write_begin+0x1a4/0x420 [ 59.587181][ T6377] ? __pfx_shmem_write_begin+0x10/0x10 [ 59.587193][ T6377] ? inode_set_ctime_current+0x283/0x850 [ 59.587204][ T6377] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 59.587217][ T6377] ? inode_maybe_inc_iversion+0x169/0x220 [ 59.587235][ T6377] generic_perform_write+0x292/0xa40 [ 59.587251][ T6377] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 59.587269][ T6377] ? __pfx_generic_perform_write+0x10/0x10 [ 59.587286][ T6377] ? mnt_put_write_access_file+0x4e/0x100 [ 59.587304][ T6377] ? file_update_time_flags+0x38c/0x520 [ 59.587318][ T6377] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 59.587332][ T6377] shmem_file_write_iter+0x10e/0x140 [ 59.587347][ T6377] __kernel_write_iter+0x2ac/0x930 [ 59.587363][ T6377] ? __pfx___kernel_write_iter+0x10/0x10 [ 59.587377][ T6377] ? __up_read+0x333/0x980 [ 59.587393][ T6377] ? dump_user_range+0x65e/0xad0 [ 59.587408][ T6377] ? copy_mc_enhanced_fast_string+0x6/0xf [ 59.587425][ T6377] dump_user_range+0x3f9/0xad0 [ 59.587443][ T6377] ? __pfx_dump_user_range+0x10/0x10 [ 59.587463][ T6377] ? __pfx_writenote+0x10/0x10 [ 59.587478][ T6377] ? elf_core_dump+0x1f25/0x3d20 [ 59.587497][ T6377] elf_core_dump+0x2d68/0x3d20 [ 59.587521][ T6377] ? __pfx_elf_core_dump+0x10/0x10 [ 59.587535][ T6377] ? kasan_save_stack+0x3f/0x50 [ 59.587550][ T6377] ? kasan_save_stack+0x30/0x50 [ 59.587564][ T6377] ? kasan_save_track+0x14/0x30 [ 59.587594][ T6377] ? __kasan_kmalloc+0xaa/0xb0 [ 59.587609][ T6377] ? vfs_coredump+0x21f6/0x54a0 [ 59.587622][ T6377] ? get_signal+0x1f2a/0x21e0 ** 205 printk messages dropped ** ** 149 printk messages dropped ** ** 162 printk messages dropped ** ** 165 printk messages dropped ** ** 145 printk messages dropped ** ** 151 printk messages dropped ** ** 144 printk messages dropped ** ** 145 printk messages dropped ** ** 163 printk messages dropped ** ** 166 printk messages dropped ** ** 155 printk messages dropped ** ** 163 printk messages dropped ** ** 179 printk messages dropped ** ** 171 printk messages dropped ** ** 174 printk messages dropped ** ** 175 printk messages dropped ** ** 174 printk messages dropped ** ** 184 printk messages dropped ** ** 176 printk messages dropped ** ** 197 printk messages dropped ** ** 139 printk messages dropped ** ** 22 printk messages dropped ** [ 59.694210][ T6453] syz_tun: entered allmulticast mode [ 59.700372][ T6452] syz_tun: left allmulticast mode [ 59.767151][ T6456] FAULT_INJECTION: forcing a failure. [ 59.767151][ T6456] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 59.767168][ T6456] CPU: 1 UID: 0 PID: 6456 Comm: syz.3.124 Not tainted syzkaller #0 PREEMPT(full) [ 59.767181][ T6456] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 59.767188][ T6456] Call Trace: [ 59.767192][ T6456] [ 59.767198][ T6456] dump_stack_lvl+0x100/0x190 [ 59.767218][ T6456] should_fail_ex.cold+0x5/0xa [ 59.767235][ T6456] _copy_from_user+0x2e/0xd0 [ 59.767254][ T6456] do_ipv6_setsockopt+0x349c/0x44a0 [ 59.767268][ T6456] ? avc_has_perm_noaudit+0x56/0x470 [ 59.767290][ T6456] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 59.767306][ T6456] ? avc_has_perm_noaudit+0x145/0x470 [ 59.767321][ T6456] ? avc_has_perm+0x135/0x1e0 [ 59.767335][ T6456] ? __pfx_avc_has_perm+0x10/0x10 [ 59.767351][ T6456] ? futex_wait+0x11e/0x370 [ 59.767367][ T6456] ? sock_has_perm+0x25a/0x2f0 [ 59.767383][ T6456] ? __pfx_sock_has_perm+0x10/0x10 [ 59.767398][ T6456] ? selinux_netlbl_socket_setsockopt+0x134/0x470 [ 59.767417][ T6456] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 59.767440][ T6456] ? ipv6_setsockopt+0xcb/0x170 [ 59.767451][ T6456] ipv6_setsockopt+0xcb/0x170 [ 59.767466][ T6456] udpv6_setsockopt+0x64/0xb0 [ 59.767482][ T6456] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 59.767498][ T6456] do_sock_setsockopt+0xf3/0x1d0 [ 59.767514][ T6456] __sys_setsockopt+0x195/0x220 [ 59.767528][ T6456] __x64_sys_setsockopt+0xbd/0x160 [ 59.767539][ T6456] ? do_syscall_64+0xae/0x790 [ 59.767555][ T6456] ? lockdep_hardirqs_on+0x7d/0x110 [ 59.767571][ T6456] do_syscall_64+0x123/0x790 [ 59.767603][ T6456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.767615][ T6456] RIP: 0033:0x7efd81b9e559 [ 59.767625][ T6456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.767637][ T6456] RSP: 002b:00007efd82a3f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 59.767649][ T6456] RAX: ffffffffffffffda RBX: 00007efd81e25fa0 RCX: 00007efd81b9e559 [ 59.767657][ T6456] RDX: 0000000000000037 RSI: 0000000000000029 RDI: 0000000000000006 [ 59.767664][ T6456] RBP: 00007efd81c35ab8 R08: 0000000000000018 R09: 0000000000000000 [ 59.767671][ T6456] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000000 [ 59.767678][ T6456] R13: 00007efd81e26038 R14: 00007efd81e25fa0 R15: 00007ffc45229938 [ 59.767696][ T6456] [ 59.780537][ T6456] netlink: 'syz.3.124': attribute type 10 has an invalid length. [ 59.816781][ T6375] syz.2.108 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 59.816803][ T6375] CPU: 2 UID: 0 PID: 6375 Comm: syz.2.108 Not tainted syzkaller #0 PREEMPT(full) [ 59.816816][ T6375] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 59.816823][ T6375] Call Trace: [ 59.816828][ T6375] [ 59.816833][ T6375] dump_stack_lvl+0x100/0x190 [ 59.816853][ T6375] dump_header+0xfb/0x606 [ 59.816867][ T6375] oom_kill_process.cold+0xd/0x380 [ 59.816882][ T6375] out_of_memory+0x340/0x14f0 [ 59.816902][ T6375] ? __pfx_out_of_memory+0x10/0x10 [ 59.816923][ T6375] mem_cgroup_out_of_memory+0xc6/0x130 [ 59.816938][ T6375] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 59.816952][ T6375] ? find_held_lock+0x2b/0x80 [ 59.816971][ T6375] ? do_raw_spin_unlock+0x145/0x1e0 [ 59.816987][ T6375] ? _raw_spin_unlock+0x28/0x50 [ 59.817004][ T6375] try_charge_memcg+0x783/0xf60 [ 59.817020][ T6375] ? __pfx_try_charge_memcg+0x10/0x10 [ 59.817030][ T6375] ? find_held_lock+0x2b/0x80 [ 59.817046][ T6375] ? rcu_read_unlock+0x17/0x60 [ 59.817058][ T6375] ? rcu_read_unlock+0x17/0x60 [ 59.817069][ T6375] ? find_held_lock+0x2b/0x80 [ 59.817086][ T6375] ? rcu_read_unlock+0x17/0x60 [ 59.817101][ T6375] charge_memcg+0x1ae/0x210 [ 59.817113][ T6375] __mem_cgroup_charge+0x2b/0x1c0 [ 59.817127][ T6375] shmem_alloc_and_add_folio+0x451/0xd40 [ 59.817143][ T6375] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 59.817157][ T6375] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 59.817172][ T6375] shmem_get_folio_gfp+0x75b/0x1980 [ 59.817187][ T6375] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 59.817200][ T6375] ? vm_normal_page+0x1d1/0x380 [ 59.817214][ T6375] ? __pfx_vm_normal_page+0x10/0x10 [ 59.817232][ T6375] shmem_write_begin+0x1a4/0x420 [ 59.817245][ T6375] ? __pfx_shmem_write_begin+0x10/0x10 [ 59.817258][ T6375] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 59.817274][ T6375] generic_perform_write+0x292/0xa40 [ 59.817290][ T6375] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 59.817308][ T6375] ? __pfx_generic_perform_write+0x10/0x10 [ 59.817325][ T6375] ? file_update_time_flags+0x38c/0x520 [ 59.817340][ T6375] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 59.817353][ T6375] shmem_file_write_iter+0x10e/0x140 [ 59.817368][ T6375] __kernel_write_iter+0x2ac/0x930 [ 59.817384][ T6375] ? __pfx___kernel_write_iter+0x10/0x10 [ 59.817398][ T6375] ? __up_read+0x333/0x980 [ 59.817414][ T6375] ? dump_user_range+0x65e/0xad0 [ 59.817428][ T6375] ? copy_mc_enhanced_fast_string+0x6/0xf [ 59.817444][ T6375] dump_user_range+0x3f9/0xad0 [ 59.817462][ T6375] ? __pfx_dump_user_range+0x10/0x10 [ 59.817482][ T6375] ? __pfx_writenote+0x10/0x10 [ 59.817496][ T6375] ? elf_core_dump+0x1f25/0x3d20 [ 59.817514][ T6375] elf_core_dump+0x2d68/0x3d20 [ 59.817538][ T6375] ? __pfx_elf_core_dump+0x10/0x10 [ 59.817567][ T6375] ? kasan_save_stack+0x3f/0x50 [ 59.817582][ T6375] ? kasan_save_stack+0x30/0x50 [ 59.817596][ T6375] ? kasan_save_track+0x14/0x30 [ 59.817610][ T6375] ? __kasan_kmalloc+0xaa/0xb0 [ 59.817624][ T6375] ? vfs_coredump+0x21f6/0x54a0 [ 59.817637][ T6375] ? get_signal+0x1f2a/0x21e0 [ 59.817648][ T6375] ? arch_do_signal_or_restart+0x91/0x7e0 [ 59.817669][ T6375] ? 0xffffffffff600000 [ 59.817697][ T6375] ? lock_acquire+0x1d1/0x380 [ 59.817709][ T6375] ? get_signal+0x1f2a/0x21e0 [ 59.817726][ T6375] ? vfs_coredump+0x281a/0x54a0 [ 59.817740][ T6375] vfs_coredump+0x281a/0x54a0 [ 59.817759][ T6375] ? __pfx_vfs_coredump+0x10/0x10 [ 59.817774][ T6375] ? __lock_acquire+0x5c0/0x1f40 [ 59.817790][ T6375] ? __lock_acquire+0x5c0/0x1f40 [ 59.817809][ T6375] ? lock_acquire+0x1d1/0x380 [ 59.817821][ T6375] ? unwind_next_frame+0xbd/0x2090 [ 59.817840][ T6375] ? lock_acquire+0x1d1/0x380 [ 59.817857][ T6375] ? bpf_ksym_find+0x128/0x1c0 [ 59.817869][ T6375] ? __pfx_stack_trace_consume_entry+0x10/0x10 ** 31 printk messages dropped ** [ 59.818704][ T6375] rss 200704 ** 245 printk messages dropped ** [ 59.877087][ T6458] netlink: 'syz.0.125': attribute type 63 has an invalid length. [ 59.877101][ T6458] netlink: 5 bytes leftover after parsing attributes in process `syz.0.125'. [ 59.878030][ T5741] Bluetooth: hci1: unexpected cc 0x1405 length: 11 > 4 [ 59.878058][ T5741] Bluetooth: hci1: unexpected event for opcode 0x1405 [ 60.009382][ T6375] syz.2.108 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=0, oom_score_adj=1000 [ 60.009400][ T6375] CPU: 3 UID: 0 PID: 6375 Comm: syz.2.108 Not tainted syzkaller #0 PREEMPT(full) [ 60.009412][ T6375] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 60.009419][ T6375] Call Trace: [ 60.009424][ T6375] [ 60.009430][ T6375] dump_stack_lvl+0x100/0x190 [ 60.009449][ T6375] dump_header+0xfb/0x606 [ 60.009464][ T6375] oom_kill_process.cold+0xd/0x380 [ 60.009478][ T6375] out_of_memory+0x340/0x14f0 [ 60.009510][ T6375] ? __pfx_out_of_memory+0x10/0x10 [ 60.009534][ T6375] mem_cgroup_out_of_memory+0xc6/0x130 [ 60.009562][ T6375] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 60.009576][ T6375] ? find_held_lock+0x2b/0x80 [ 60.009597][ T6375] ? do_raw_spin_unlock+0x145/0x1e0 [ 60.009613][ T6375] ? _raw_spin_unlock+0x28/0x50 [ 60.009629][ T6375] try_charge_memcg+0x783/0xf60 [ 60.009645][ T6375] ? __pfx_try_charge_memcg+0x10/0x10 [ 60.009657][ T6375] ? find_held_lock+0x2b/0x80 [ 60.009673][ T6375] ? rcu_read_unlock+0x17/0x60 [ 60.009684][ T6375] ? rcu_read_unlock+0x17/0x60 [ 60.009705][ T6375] obj_cgroup_charge_pages+0x2b/0x1f0 [ 60.009718][ T6375] __memcg_slab_post_alloc_hook+0x47f/0x10c0 [ 60.009736][ T6375] ? kasan_save_track+0x14/0x30 [ 60.009753][ T6375] kmem_cache_alloc_lru_noprof+0x4f6/0x6a0 [ 60.009769][ T6375] ? xas_nomem+0x101/0x2c0 [ 60.009788][ T6375] xas_nomem+0x101/0x2c0 [ 60.009803][ T6375] ? _raw_spin_unlock_irq+0x23/0x50 [ 60.009819][ T6375] shmem_add_to_page_cache+0x880/0xcd0 [ 60.009842][ T6375] ? __pfx_shmem_add_to_page_cache+0x10/0x10 [ 60.009868][ T6375] shmem_alloc_and_add_folio+0x558/0xd40 [ 60.009883][ T6375] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 60.009896][ T6375] ? shmem_allowable_huge_orders+0x1d7/0x470 ** 19 printk messages dropped ** [ 60.010203][ T6375] ? __pfx_dump_user_range+0x10/0x10 ** 3 printk messages dropped ** [ 60.010279][ T6375] ? __pfx_elf_core_dump+0x10/0x10 [ 60.010293][ T6375] ? kasan_save_stack+0x3f/0x50 [ 60.010307][ T6375] ? kasan_save_stack+0x30/0x50 [ 60.010321][ T6375] ? kasan_save_track+0x14/0x30 ** 1 printk messages dropped ** [ 60.010349][ T6375] ? vfs_coredump+0x21f6/0x54a0 ** 1 printk messages dropped ** [ 60.010374][ T6375] ? arch_do_signal_or_restart+0x91/0x7e0 ** 47 printk messages dropped ** [ 60.011968][ T6375] dirty 0 ** 17 printk messages dropped ** [ 60.012102][ T6375] total_rss 192512 [ 60.012109][ T6375] total_rss_huge 0 [ 60.012115][ T6375] total_shmem 309977088 [ 60.012121][ T6375] total_mapped_file 26980352 [ 60.012128][ T6375] total_dirty 0 [ 60.012134][ T6375] total_writeback 0 [ 60.012141][ T6375] total_workingset_refault_anon 0 [ 60.012147][ T6375] total_workingset_refault_file 162 [ 60.012151][ T6375] total_swap 127983616 [ 60.012158][ T6375] total_swapcached 133578752 [ 60.012165][ T6375] total_pgpgin 115390 [ 60.012171][ T6375] total_pgpgout 39657 [ 60.012178][ T6375] total_pgfault 22745 [ 60.012184][ T6375] total_pgmajfault 9 [ 60.012191][ T6375] total_inactive_anon 190648320 [ 60.012198][ T6375] total_active_anon 119066624 [ 60.012204][ T6375] total_inactive_file 0 [ 60.012211][ T6375] total_active_file 0 [ 60.012217][ T6375] total_unevictable 0 [ 60.012224][ T6375] anon_cost 0 [ 60.012230][ T6375] file_cost 0 [ 60.012235][ T6375] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.108,pid=6375,uid=0 [ 60.012336][ T6375] Memory cgroup out of memory: Killed process 6375 (syz.2.108) total-vm:180344kB, anon-rss:0kB, file-rss:0kB, shmem-rss:26344kB, UID:0 pgtables:72kB oom_score_adj:1000 ** 9 printk messages dropped ** [ 60.126773][ T6460] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 60.144303][ T6375] syz.2.108 (6375) used greatest stack depth: 19176 bytes left [ 60.252208][ T5741] Bluetooth: hci3: unexpected subevent 0x10 length: 5 > 2 [ 60.328422][ T6387] syz.2.108 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 60.328441][ T6387] CPU: 2 UID: 0 PID: 6387 Comm: syz.2.108 Not tainted syzkaller #0 PREEMPT(full) [ 60.328453][ T6387] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 60.328460][ T6387] Call Trace: [ 60.328464][ T6387] [ 60.328470][ T6387] dump_stack_lvl+0x100/0x190 [ 60.328490][ T6387] dump_header+0xfb/0x606 [ 60.328504][ T6387] oom_kill_process.cold+0xd/0x380 [ 60.328518][ T6387] out_of_memory+0x340/0x14f0 [ 60.328539][ T6387] ? __pfx_out_of_memory+0x10/0x10 [ 60.328560][ T6387] mem_cgroup_out_of_memory+0xc6/0x130 [ 60.328575][ T6387] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 60.328589][ T6387] ? find_held_lock+0x2b/0x80 [ 60.328610][ T6387] ? do_raw_spin_unlock+0x145/0x1e0 [ 60.328625][ T6387] ? _raw_spin_unlock+0x28/0x50 [ 60.328641][ T6387] try_charge_memcg+0x783/0xf60 [ 60.328657][ T6387] ? __pfx_try_charge_memcg+0x10/0x10 [ 60.328668][ T6387] ? find_held_lock+0x2b/0x80 [ 60.328684][ T6387] ? rcu_read_unlock+0x17/0x60 [ 60.328695][ T6387] ? rcu_read_unlock+0x17/0x60 [ 60.328707][ T6387] ? find_held_lock+0x2b/0x80 [ 60.328724][ T6387] ? rcu_read_unlock+0x17/0x60 [ 60.328739][ T6387] charge_memcg+0x1ae/0x210 [ 60.328751][ T6387] __mem_cgroup_charge+0x2b/0x1c0 [ 60.328769][ T6387] shmem_alloc_and_add_folio+0x451/0xd40 [ 60.328786][ T6387] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 60.328799][ T6387] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 60.328814][ T6387] shmem_get_folio_gfp+0x75b/0x1980 [ 60.328830][ T6387] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 60.328843][ T6387] ? vm_normal_page+0x1d1/0x380 [ 60.328857][ T6387] ? __pfx_vm_normal_page+0x10/0x10 [ 60.328875][ T6387] shmem_write_begin+0x1a4/0x420 [ 60.328888][ T6387] ? __pfx_shmem_write_begin+0x10/0x10 [ 60.328901][ T6387] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 60.328917][ T6387] generic_perform_write+0x292/0xa40 [ 60.328934][ T6387] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 60.328952][ T6387] ? __pfx_generic_perform_write+0x10/0x10 [ 60.328969][ T6387] ? file_update_time_flags+0x38c/0x520 [ 60.328996][ T6387] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 60.329011][ T6387] shmem_file_write_iter+0x10e/0x140 [ 60.329026][ T6387] __kernel_write_iter+0x2ac/0x930 [ 60.329042][ T6387] ? __pfx___kernel_write_iter+0x10/0x10 [ 60.329056][ T6387] ? __up_read+0x333/0x980 [ 60.329072][ T6387] ? dump_user_range+0x65e/0xad0 [ 60.329090][ T6387] dump_user_range+0x3f9/0xad0 [ 60.329108][ T6387] ? __pfx_dump_user_range+0x10/0x10 [ 60.329128][ T6387] ? __pfx_writenote+0x10/0x10 [ 60.329142][ T6387] ? elf_core_dump+0x1f25/0x3d20 [ 60.329160][ T6387] elf_core_dump+0x2d68/0x3d20 [ 60.329184][ T6387] ? __pfx_elf_core_dump+0x10/0x10 [ 60.329199][ T6387] ? kasan_save_stack+0x3f/0x50 [ 60.329213][ T6387] ? kasan_save_stack+0x30/0x50 [ 60.329227][ T6387] ? kasan_save_track+0x14/0x30 [ 60.329241][ T6387] ? __kasan_kmalloc+0xaa/0xb0 [ 60.329255][ T6387] ? vfs_coredump+0x21f6/0x54a0 [ 60.329268][ T6387] ? get_signal+0x1f2a/0x21e0 [ 60.329280][ T6387] ? arch_do_signal_or_restart+0x91/0x7e0 [ 60.329300][ T6387] ? 0xffffffffff600000 [ 60.329328][ T6387] ? lock_acquire+0x1d1/0x380 [ 60.329340][ T6387] ? get_signal+0x1f2a/0x21e0 [ 60.329358][ T6387] ? vfs_coredump+0x281a/0x54a0 [ 60.329371][ T6387] vfs_coredump+0x281a/0x54a0 [ 60.329391][ T6387] ? __pfx_vfs_coredump+0x10/0x10 [ 60.329406][ T6387] ? __lock_acquire+0x5c0/0x1f40 [ 60.329422][ T6387] ? __lock_acquire+0x5c0/0x1f40 [ 60.329437][ T6387] ? lock_acquire+0x1d1/0x380 [ 60.329450][ T6387] ? unwind_next_frame+0xbd/0x2090 [ 60.329468][ T6387] ? lock_acquire+0x1d1/0x380 [ 60.329485][ T6387] ? bpf_ksym_find+0x128/0x1c0 [ 60.329497][ T6387] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 60.329514][ T6387] ? arch_stack_walk+0xa6/0xf0 [ 60.329535][ T6387] ? __sigqueue_free+0xbe/0x2a0 [ 60.329551][ T6387] ? stack_trace_save+0x8e/0xc0 [ 60.329563][ T6387] ? __pfx_stack_trace_save+0x10/0x10 [ 60.329576][ T6387] ? stack_depot_save_flags+0x27/0x9f0 [ 60.329588][ T6387] ? __lock_acquire+0x5c0/0x1f40 [ 60.329627][ T6387] ? proc_coredump_connector+0x2d3/0x4f0 [ 60.329643][ T6387] ? __pfx_proc_coredump_connector+0x10/0x10 [ 60.329662][ T6387] ? rcu_is_watching+0x13/0xc0 [ 60.329681][ T6387] get_signal+0x1f2a/0x21e0 [ 60.329700][ T6387] ? __pfx_get_signal+0x10/0x10 [ 60.329712][ T6387] ? __pfx_force_sig_fault+0x10/0x10 [ 60.329729][ T6387] arch_do_signal_or_restart+0x91/0x7e0 [ 60.329746][ T6387] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 60.329776][ T6387] irqentry_exit+0x402/0xa10 [ 60.329794][ T6387] asm_exc_page_fault+0x26/0x30 [ 60.329806][ T6387] RIP: 0033:0x7f3701f9e559 [ 60.329820][ T6387] Code: Unable to access opcode bytes at 0x7f3701f9e52f. [ 60.329826][ T6387] RSP: 002b:00007f3700192fd8 EFLAGS: 00010206 [ 60.329835][ T6387] RAX: 0000000000000000 RBX: 00007f3702226630 RCX: 00007f3701f9e559 [ 60.329842][ T6387] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000001000 [ 60.329849][ T6387] RBP: 00007f3702035ab8 R08: 0000000000000000 R09: 0000000000000000 [ 60.329856][ T6387] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 60.329863][ T6387] R13: 00007f37022266c8 R14: 00007f3702226630 R15: 00007ffef8077c28 [ 60.329878][ T6387] [ 60.331325][ T6387] memory: usage 307200kB, limit 307200kB, failcnt 27494 [ 60.331334][ T6387] memory+swap: usage 432072kB, limit 9007199254740988kB, failcnt 0 [ 60.331341][ T6387] kmem: usage 4036kB, limit 9007199254740988kB, failcnt 0 [ 60.331348][ T6387] Memory cgroup stats for /syz2: [ 60.331498][ T6387] cache 310337536 [ 60.331505][ T6387] rss 65536 [ 60.331509][ T6387] rss_huge 0 [ 60.331513][ T6387] shmem 310333440 [ 60.331517][ T6387] mapped_file 35176448 [ 60.331521][ T6387] dirty 0 [ 60.331525][ T6387] writeback 0 [ 60.331529][ T6387] workingset_refault_anon 0 [ 60.331534][ T6387] workingset_refault_file 162 [ 60.331538][ T6387] swap 127868928 [ 60.331542][ T6387] swapcached 153481216 [ 60.331546][ T6387] pgpgin 127041 [ 60.331550][ T6387] pgpgout 51250 [ 60.331554][ T6387] pgfault 24055 [ 60.331558][ T6387] pgmajfault 9 [ 60.331562][ T6387] inactive_anon 226615296 [ 60.331566][ T6387] active_anon 82911232 [ 60.331571][ T6387] inactive_file 0 [ 60.331575][ T6387] active_file 0 [ 60.331579][ T6387] unevictable 0 [ 60.331583][ T6387] hierarchical_memory_limit 314572800 [ 60.331587][ T6387] hierarchical_memsw_limit 9223372036854771712 [ 60.331592][ T6387] total_cache 310337536 [ 60.331597][ T6387] total_rss 65536 [ 60.331601][ T6387] total_rss_huge 0 [ 60.331605][ T6387] total_shmem 310333440 [ 60.331609][ T6387] total_mapped_file 35176448 ** 98 printk messages dropped ** ** 127 printk messages dropped ** ** 71 printk messages dropped ** ** 79 printk messages dropped ** ** 105 printk messages dropped ** ** 173 printk messages dropped ** ** 151 printk messages dropped ** ** 120 printk messages dropped ** ** 64 printk messages dropped ** [ 60.499754][ T6379] memory: usage 299248kB, limit 307200kB, failcnt 28427 [ 60.499765][ T6379] memory+swap: usage 412636kB, limit 9007199254740988kB, failcnt 0 [ 60.499773][ T6379] kmem: usage 4044kB, limit 9007199254740988kB, failcnt 0 [ 60.499779][ T6379] Memory cgroup stats for /syz2: [ 60.499856][ T6379] cache 301674496 [ 60.499861][ T6379] rss 65536 [ 60.499865][ T6379] rss_huge 0 [ 60.499869][ T6379] shmem 301674496 [ 60.499873][ T6379] mapped_file 26599424 [ 60.499877][ T6379] dirty 0 [ 60.499881][ T6379] writeback 0 [ 60.499886][ T6379] workingset_refault_anon 0 [ 60.499890][ T6379] workingset_refault_file 162 [ 60.499894][ T6379] swap 116113408 [ 60.499898][ T6379] swapcached 157102080 [ 60.499903][ T6379] pgpgin 129266 [ 60.499907][ T6379] pgpgout 55548 [ 60.499910][ T6379] pgfault 24210 [ 60.499915][ T6379] pgmajfault 9 [ 60.499918][ T6379] inactive_anon 137846784 [ 60.499923][ T6379] active_anon 163307520 [ 60.499927][ T6379] inactive_file 0 [ 60.499931][ T6379] active_file 0 [ 60.499935][ T6379] unevictable 0 [ 60.499939][ T6379] hierarchical_memory_limit 314572800 [ 60.499944][ T6379] hierarchical_memsw_limit 9223372036854771712 [ 60.499949][ T6379] total_cache 301674496 [ 60.499953][ T6379] total_rss 65536 [ 60.499957][ T6379] total_rss_huge 0 [ 60.499961][ T6379] total_shmem 301674496 [ 60.499965][ T6379] total_mapped_file 26599424 [ 60.499970][ T6379] total_dirty 0 [ 60.499974][ T6379] total_writeback 0 [ 60.499978][ T6379] total_workingset_refault_anon 0 [ 60.499983][ T6379] total_workingset_refault_file 162 [ 60.499987][ T6379] total_swap 116113408 [ 60.499991][ T6379] total_swapcached 157102080 [ 60.499996][ T6379] total_pgpgin 129266 [ 60.500000][ T6379] total_pgpgout 55548 [ 60.500004][ T6379] total_pgfault 24210 [ 60.500008][ T6379] total_pgmajfault 9 [ 60.500012][ T6379] total_inactive_anon 137846784 [ 60.500017][ T6379] total_active_anon 163307520 [ 60.500021][ T6379] total_inactive_file 0 [ 60.500026][ T6379] total_active_file 0 [ 60.500030][ T6379] total_unevictable 0 [ 60.500034][ T6379] anon_cost 0 [ 60.500038][ T6379] file_cost 0 [ 60.500042][ T6379] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.108,pid=6374,uid=0 [ 60.500113][ T6379] Memory cgroup out of memory: Killed process 6374 (syz.2.108) total-vm:180344kB, anon-rss:0kB, file-rss:0kB, shmem-rss:25960kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 60.505483][ T6472] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 60.740676][ T6477] FAULT_INJECTION: forcing a failure. [ 60.740676][ T6477] name failslab, interval 1, probability 0, space 0, times 0 [ 60.740696][ T6477] CPU: 1 UID: 0 PID: 6477 Comm: syz.0.131 Not tainted syzkaller #0 PREEMPT(full) [ 60.740710][ T6477] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 60.740717][ T6477] Call Trace: [ 60.740721][ T6477] [ 60.740725][ T6477] dump_stack_lvl+0x100/0x190 [ 60.740746][ T6477] should_fail_ex.cold+0x5/0xa [ 60.740762][ T6477] should_failslab+0xc2/0x120 [ 60.740779][ T6477] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 60.740795][ T6477] ? alloc_vmap_area+0x640/0x2bb0 [ 60.740813][ T6477] alloc_vmap_area+0x640/0x2bb0 [ 60.740832][ T6477] ? kasan_save_track+0x14/0x30 [ 60.740847][ T6477] ? __kasan_kmalloc+0xaa/0xb0 [ 60.740861][ T6477] ? __pfx_alloc_vmap_area+0x10/0x10 [ 60.740877][ T6477] ? __get_vm_area_node+0x124/0x350 ** 283 printk messages dropped ** ** 207 printk messages dropped ** ** 207 printk messages dropped ** ** 119 printk messages dropped ** ** 47 printk messages dropped ** ** 231 printk messages dropped ** ** 190 printk messages dropped ** ** 193 printk messages dropped ** ** 152 printk messages dropped ** ** 145 printk messages dropped ** ** 148 printk messages dropped ** ** 86 printk messages dropped ** ** 141 printk messages dropped ** ** 140 printk messages dropped ** ** 154 printk messages dropped ** ** 156 printk messages dropped ** ** 153 printk messages dropped ** ** 149 printk messages dropped ** ** 147 printk messages dropped ** ** 123 printk messages dropped ** ** 148 printk messages dropped ** ** 126 printk messages dropped ** ** 132 printk messages dropped ** ** 146 printk messages dropped ** ** 152 printk messages dropped ** ** 193 printk messages dropped ** ** 186 printk messages dropped ** ** 175 printk messages dropped ** ** 153 printk messages dropped ** ** 184 printk messages dropped ** ** 168 printk messages dropped ** ** 132 printk messages dropped ** ** 130 printk messages dropped ** ** 155 printk messages dropped ** ** 168 printk messages dropped ** ** 170 printk messages dropped ** ** 166 printk messages dropped ** ** 161 printk messages dropped ** ** 56 printk messages dropped ** ** 40 printk messages dropped ** ** 67 printk messages dropped ** ** 57 printk messages dropped ** ** 728 printk messages dropped ** ** 4665 printk messages dropped ** ** 56 printk messages dropped ** ** 6574 printk messages dropped ** ** 486 printk messages dropped ** ** 434 printk messages dropped ** ** 431 printk messages dropped ** ** 397 printk messages dropped ** ** 433 printk messages dropped ** ** 284 printk messages dropped ** ** 176 printk messages dropped ** ** 132 printk messages dropped ** ** 179 printk messages dropped ** ** 167 printk messages dropped ** ** 171 printk messages dropped ** ** 193 printk messages dropped ** ** 213 printk messages dropped ** ** 242 printk messages dropped ** ** 195 printk messages dropped ** ** 132 printk messages dropped ** ** 3058 printk messages dropped ** ** 288 printk messages dropped ** ** 284 printk messages dropped ** ** 270 printk messages dropped ** ** 252 printk messages dropped ** ** 134 printk messages dropped ** ** 133 printk messages dropped ** ** 133 printk messages dropped ** ** 174 printk messages dropped ** ** 121 printk messages dropped ** ** 75 printk messages dropped ** ** 16 printk messages dropped ** ** 1744 printk messages dropped ** ** 166 printk messages dropped ** ** 158 printk messages dropped ** ** 137 printk messages dropped ** ** 139 printk messages dropped ** ** 154 printk messages dropped ** ** 295 printk messages dropped ** ** 249 printk messages dropped ** ** 141 printk messages dropped ** ** 142 printk messages dropped ** ** 179 printk messages dropped ** ** 225 printk messages dropped ** ** 158 printk messages dropped ** ** 138 printk messages dropped ** ** 137 printk messages dropped ** ** 139 printk messages dropped ** ** 137 printk messages dropped ** ** 94 printk messages dropped ** ** 123 printk messages dropped ** ** 134 printk messages dropped ** ** 139 printk messages dropped ** ** 138 printk messages dropped ** ** 161 printk messages dropped ** ** 136 printk messages dropped ** ** 133 printk messages dropped ** ** 42 printk messages dropped ** [ 61.217688][ T43] kauditd_printk_skb: 32 callbacks suppressed [ 61.217697][ T43] audit: type=1400 audit(1792280579.611:474): avc: denied { read } for pid=6489 comm="syz.3.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 61.384396][ T6500] phram: parameter too long [ 61.487827][ T43] audit: type=1400 audit(1792280579.881:475): avc: denied { create } for pid=6501 comm="syz.2.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 61.488264][ T43] audit: type=1400 audit(1792280579.881:476): avc: denied { connect } for pid=6501 comm="syz.2.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 61.488457][ T6506] netlink: 32 bytes leftover after parsing attributes in process `syz.2.138'. ** 801 printk messages dropped ** ** 542 printk messages dropped ** ** 300 printk messages dropped ** ** 293 printk messages dropped ** ** 275 printk messages dropped ** ** 132 printk messages dropped ** ** 142 printk messages dropped ** ** 142 printk messages dropped ** ** 122 printk messages dropped ** ** 115 printk messages dropped ** ** 129 printk messages dropped ** ** 126 printk messages dropped ** ** 128 printk messages dropped ** ** 121 printk messages dropped ** ** 121 printk messages dropped ** ** 128 printk messages dropped ** ** 116 printk messages dropped ** ** 146 printk messages dropped ** ** 142 printk messages dropped ** ** 130 printk messages dropped ** ** 126 printk messages dropped ** ** 1 printk messages dropped ** [ 61.593307][ T6383] syz.2.108 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 61.593323][ T6383] CPU: 1 UID: 0 PID: 6383 Comm: syz.2.108 Not tainted syzkaller #0 PREEMPT(full) [ 61.593335][ T6383] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 61.593343][ T6383] Call Trace: [ 61.593347][ T6383] [ 61.593352][ T6383] dump_stack_lvl+0x100/0x190 [ 61.593373][ T6383] dump_header+0xfb/0x606 [ 61.593386][ T6383] oom_kill_process.cold+0xd/0x380 [ 61.593400][ T6383] out_of_memory+0x340/0x14f0 [ 61.593421][ T6383] ? __pfx_out_of_memory+0x10/0x10 [ 61.593442][ T6383] mem_cgroup_out_of_memory+0xc6/0x130 [ 61.593460][ T6383] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 61.593474][ T6383] ? find_held_lock+0x2b/0x80 [ 61.593494][ T6383] ? do_raw_spin_unlock+0x145/0x1e0 [ 61.593510][ T6383] ? _raw_spin_unlock+0x28/0x50 [ 61.593527][ T6383] try_charge_memcg+0x783/0xf60 [ 61.593542][ T6383] ? __pfx_try_charge_memcg+0x10/0x10 [ 61.593553][ T6383] ? find_held_lock+0x2b/0x80 [ 61.593569][ T6383] ? rcu_read_unlock+0x17/0x60 [ 61.593581][ T6383] ? rcu_read_unlock+0x17/0x60 [ 61.593592][ T6383] ? find_held_lock+0x2b/0x80 [ 61.593613][ T6383] ? rcu_read_unlock+0x17/0x60 [ 61.593628][ T6383] charge_memcg+0x1ae/0x210 [ 61.593640][ T6383] __mem_cgroup_charge+0x2b/0x1c0 [ 61.593655][ T6383] shmem_alloc_and_add_folio+0x451/0xd40 [ 61.593671][ T6383] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 61.593684][ T6383] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 61.593699][ T6383] shmem_get_folio_gfp+0x75b/0x1980 [ 61.593715][ T6383] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 61.593729][ T6383] ? filemap_map_pages+0x1155/0x2060 [ 61.593749][ T6383] shmem_fault+0x1fb/0xa30 [ 61.593761][ T6383] ? __pfx_shmem_fault+0x10/0x10 [ 61.593775][ T6383] ? __pfx_filemap_map_pages+0x10/0x10 ** 88 printk messages dropped ** [ 61.595037][ T6383] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 ** 158 printk messages dropped ** ** 4126 printk messages dropped ** ** 155 printk messages dropped ** ** 146 printk messages dropped ** ** 273 printk messages dropped ** ** 142 printk messages dropped ** ** 60 printk messages dropped ** ** 4666 printk messages dropped ** ** 145 printk messages dropped ** ** 21 printk messages dropped ** ** 66 printk messages dropped ** ** 39 printk messages dropped ** [ 61.762741][ T6515] No such timeout policy "syz1" [ 61.773136][ T43] audit: type=1400 audit(1792280580.171:477): avc: denied { setopt } for pid=6513 comm="syz.0.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 61.777568][ C1] net_ratelimit: 686 callbacks suppressed [ 61.783270][ T43] audit: type=1400 audit(1792280580.181:478): avc: denied { accept } for pid=6513 comm="syz.0.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 61.785494][ T43] audit: type=1400 audit(1792280580.181:479): avc: denied { write } for pid=6513 comm="syz.0.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 61.785519][ T43] audit: type=1400 audit(1792280580.181:480): avc: denied { ioctl } for pid=6513 comm="syz.0.141" path="socket:[12498]" dev="sockfs" ino=12498 ioctlcmd=0x5868 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 61.788938][ T6516] netlink: 12 bytes leftover after parsing attributes in process `syz.2.142'. [ 61.840022][ T43] audit: type=1400 audit(1792280580.241:481): avc: denied { create } for pid=6513 comm="syz.0.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 61.848217][ T43] audit: type=1400 audit(1792280580.241:482): avc: denied { accept } for pid=6513 comm="syz.0.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 61.869244][ T6518] EXT4-fs warning (device sda1): verify_group_input:161: Bad blocks count 4294705151 [ 61.955558][ T6383] syz.2.108 (6383) used greatest stack depth: 18544 bytes left [ 61.999682][ T6385] syz.2.108 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 61.999699][ T6385] CPU: 0 UID: 0 PID: 6385 Comm: syz.2.108 Not tainted syzkaller #0 PREEMPT(full) [ 61.999711][ T6385] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 61.999718][ T6385] Call Trace: [ 61.999723][ T6385] [ 61.999728][ T6385] dump_stack_lvl+0x100/0x190 [ 61.999748][ T6385] dump_header+0xfb/0x606 [ 61.999762][ T6385] oom_kill_process.cold+0xd/0x380 [ 61.999777][ T6385] out_of_memory+0x340/0x14f0 [ 61.999797][ T6385] ? __pfx_out_of_memory+0x10/0x10 [ 61.999818][ T6385] mem_cgroup_out_of_memory+0xc6/0x130 [ 61.999833][ T6385] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 61.999847][ T6385] ? find_held_lock+0x2b/0x80 [ 61.999867][ T6385] ? do_raw_spin_unlock+0x145/0x1e0 [ 61.999883][ T6385] ? _raw_spin_unlock+0x28/0x50 [ 61.999900][ T6385] try_charge_memcg+0x783/0xf60 [ 61.999915][ T6385] ? __pfx_try_charge_memcg+0x10/0x10 [ 61.999926][ T6385] ? find_held_lock+0x2b/0x80 [ 61.999942][ T6385] ? rcu_read_unlock+0x17/0x60 [ 61.999953][ T6385] ? rcu_read_unlock+0x17/0x60 [ 61.999965][ T6385] ? find_held_lock+0x2b/0x80 [ 61.999982][ T6385] ? rcu_read_unlock+0x17/0x60 [ 61.999997][ T6385] charge_memcg+0x1ae/0x210 [ 62.000009][ T6385] __mem_cgroup_charge+0x2b/0x1c0 [ 62.000023][ T6385] shmem_alloc_and_add_folio+0x451/0xd40 [ 62.000039][ T6385] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 62.000071][ T6385] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 62.000092][ T6385] shmem_get_folio_gfp+0x75b/0x1980 [ 62.000108][ T6385] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 62.000120][ T6385] ? vm_normal_page+0x1d1/0x380 [ 62.000135][ T6385] ? __pfx_vm_normal_page+0x10/0x10 [ 62.000153][ T6385] shmem_write_begin+0x1a4/0x420 [ 62.000166][ T6385] ? __pfx_shmem_write_begin+0x10/0x10 [ 62.000179][ T6385] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 62.000195][ T6385] generic_perform_write+0x292/0xa40 [ 62.000211][ T6385] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 62.000229][ T6385] ? __pfx_generic_perform_write+0x10/0x10 [ 62.000247][ T6385] ? file_update_time_flags+0x38c/0x520 [ 62.000261][ T6385] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 62.000274][ T6385] shmem_file_write_iter+0x10e/0x140 [ 62.000289][ T6385] __kernel_write_iter+0x2ac/0x930 [ 62.000304][ T6385] ? __pfx___kernel_write_iter+0x10/0x10 [ 62.000318][ T6385] ? __up_read+0x333/0x980 [ 62.000335][ T6385] ? dump_user_range+0x65e/0xad0 [ 62.000349][ T6385] ? copy_mc_enhanced_fast_string+0x6/0xf [ 62.000365][ T6385] dump_user_range+0x3f9/0xad0 [ 62.000382][ T6385] ? __pfx_dump_user_range+0x10/0x10 [ 62.000402][ T6385] ? __pfx_writenote+0x10/0x10 [ 62.000417][ T6385] ? elf_core_dump+0x1f25/0x3d20 [ 62.000435][ T6385] elf_core_dump+0x2d68/0x3d20 [ 62.000458][ T6385] ? __pfx_elf_core_dump+0x10/0x10 [ 62.000473][ T6385] ? kasan_save_stack+0x3f/0x50 [ 62.000487][ T6385] ? kasan_save_stack+0x30/0x50 [ 62.000501][ T6385] ? kasan_save_track+0x14/0x30 [ 62.000515][ T6385] ? __kasan_kmalloc+0xaa/0xb0 [ 62.000529][ T6385] ? vfs_coredump+0x21f6/0x54a0 [ 62.000542][ T6385] ? get_signal+0x1f2a/0x21e0 [ 62.000554][ T6385] ? arch_do_signal_or_restart+0x91/0x7e0 [ 62.000574][ T6385] ? 0xffffffffff600000 [ 62.000604][ T6385] ? lock_acquire+0x1d1/0x380 [ 62.000616][ T6385] ? get_signal+0x1f2a/0x21e0 [ 62.000633][ T6385] ? vfs_coredump+0x281a/0x54a0 [ 62.000647][ T6385] vfs_coredump+0x281a/0x54a0 [ 62.000666][ T6385] ? __pfx_vfs_coredump+0x10/0x10 [ 62.000681][ T6385] ? __lock_acquire+0x5c0/0x1f40 [ 62.000697][ T6385] ? __lock_acquire+0x5c0/0x1f40 [ 62.000712][ T6385] ? lock_acquire+0x1d1/0x380 [ 62.000724][ T6385] ? unwind_next_frame+0xbd/0x2090 [ 62.000743][ T6385] ? lock_acquire+0x1d1/0x380 [ 62.000759][ T6385] ? bpf_ksym_find+0x128/0x1c0 [ 62.000771][ T6385] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 62.000788][ T6385] ? arch_stack_walk+0xa6/0xf0 [ 62.000807][ T6385] ? __sigqueue_free+0xbe/0x2a0 [ 62.000823][ T6385] ? stack_trace_save+0x8e/0xc0 [ 62.000834][ T6385] ? __pfx_stack_trace_save+0x10/0x10 [ 62.000846][ T6385] ? stack_depot_save_flags+0x27/0x9f0 [ 62.000859][ T6385] ? __lock_acquire+0x5c0/0x1f40 [ 62.000896][ T6385] ? proc_coredump_connector+0x2d3/0x4f0 [ 62.000912][ T6385] ? __pfx_proc_coredump_connector+0x10/0x10 [ 62.000930][ T6385] ? rcu_is_watching+0x13/0xc0 [ 62.000948][ T6385] get_signal+0x1f2a/0x21e0 [ 62.000967][ T6385] ? __pfx_get_signal+0x10/0x10 [ 62.000979][ T6385] ? __pfx_force_sig_fault+0x10/0x10 [ 62.000995][ T6385] arch_do_signal_or_restart+0x91/0x7e0 [ 62.001013][ T6385] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 62.001039][ T6385] irqentry_exit+0x402/0xa10 [ 62.001057][ T6385] asm_exc_page_fault+0x26/0x30 [ 62.001068][ T6385] RIP: 0033:0x7f3701f9e559 [ 62.001081][ T6385] Code: Unable to access opcode bytes at 0x7f3701f9e52f. [ 62.001089][ T6385] RSP: 002b:00007f3700192fd8 EFLAGS: 00010206 [ 62.001099][ T6385] RAX: 0000000000000000 RBX: 00007f3702226630 RCX: 00007f3701f9e559 [ 62.001106][ T6385] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000001000 [ 62.001113][ T6385] RBP: 00007f3702035ab8 R08: 0000000000000000 R09: 0000000000000000 [ 62.001119][ T6385] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 62.001126][ T6385] R13: 00007f37022266c8 R14: 00007f3702226630 R15: 00007ffef8077c28 [ 62.001141][ T6385] [ 62.001145][ T6385] memory: usage 307200kB, limit 307200kB, failcnt 38237 [ 62.001152][ T6385] memory+swap: usage 432076kB, limit 9007199254740988kB, failcnt 0 [ 62.001159][ T6385] kmem: usage 3836kB, limit 9007199254740988kB, failcnt 0 [ 62.001166][ T6385] Memory cgroup stats for /syz2: [ 62.001242][ T6385] cache 310575104 [ 62.001247][ T6385] rss 65536 [ 62.001251][ T6385] rss_huge 0 [ 62.001256][ T6385] shmem 310571008 [ 62.001260][ T6385] mapped_file 39628800 [ 62.001264][ T6385] dirty 4096 [ 62.001268][ T6385] writeback 0 [ 62.001272][ T6385] workingset_refault_anon 0 [ 62.001276][ T6385] workingset_refault_file 162 [ 62.001281][ T6385] swap 127873024 [ 62.001285][ T6385] swapcached 213712896 [ 62.001289][ T6385] pgpgin 176986 [ 62.001295][ T6385] pgpgout 101146 [ 62.001301][ T6385] pgfault 29122 [ 62.001307][ T6385] pgmajfault 10 [ 62.001313][ T6385] inactive_anon 164208640 [ 62.001320][ T6385] active_anon 146358272 [ 62.001326][ T6385] inactive_file 0 [ 62.001332][ T6385] active_file 0 [ 62.001339][ T6385] unevictable 0 [ 62.001347][ T6385] hierarchical_memory_limit 314572800 [ 62.001354][ T6385] hierarchical_memsw_limit 9223372036854771712 [ 62.001362][ T6385] total_cache 310575104 [ 62.001368][ T6385] total_rss 65536 [ 62.001375][ T6385] total_rss_huge 0 [ 62.001382][ T6385] total_shmem 310571008 [ 62.001389][ T6385] total_mapped_file 39628800 [ 62.001396][ T6385] total_dirty 4096 [ 62.001404][ T6385] total_writeback 0 [ 62.001411][ T6385] total_workingset_refault_anon 0 [ 62.001418][ T6385] total_workingset_refault_file 162 [ 62.001423][ T6385] total_swap 127873024 [ 62.001428][ T6385] total_swapcached 213712896 [ 62.001432][ T6385] total_pgpgin 176986 [ 62.001437][ T6385] total_pgpgout 101146 [ 62.001441][ T6385] total_pgfault 29122 [ 62.001445][ T6385] total_pgmajfault 10 [ 62.001450][ T6385] total_inactive_anon 164208640 [ 62.001454][ T6385] total_active_anon 146358272 [ 62.001459][ T6385] total_inactive_file 0 [ 62.001463][ T6385] total_active_file 0 [ 62.001467][ T6385] total_unevictable 0 [ 62.001471][ T6385] anon_cost 0 [ 62.001475][ T6385] file_cost 0 [ 62.001480][ T6385] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.108,pid=6382,uid=0 [ 62.001531][ T6385] Memory cgroup out of memory: Killed process 6382 (syz.2.108) total-vm:180344kB, anon-rss:0kB, file-rss:0kB, shmem-rss:38624kB, UID:0 pgtables:108kB oom_score_adj:1000 [ 62.032935][ T6378] syz.2.108 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 62.032952][ T6378] CPU: 2 UID: 0 PID: 6378 Comm: syz.2.108 Not tainted syzkaller #0 PREEMPT(full) [ 62.032965][ T6378] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 62.032972][ T6378] Call Trace: [ 62.032976][ T6378] [ 62.032980][ T6378] dump_stack_lvl+0x100/0x190 [ 62.033000][ T6378] dump_header+0xfb/0x606 [ 62.033014][ T6378] oom_kill_process.cold+0xd/0x380 [ 62.033028][ T6378] out_of_memory+0x340/0x14f0 [ 62.033049][ T6378] ? __pfx_out_of_memory+0x10/0x10 [ 62.033069][ T6378] mem_cgroup_out_of_memory+0xc6/0x130 [ 62.033087][ T6378] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 62.033101][ T6378] ? find_held_lock+0x2b/0x80 [ 62.033121][ T6378] ? do_raw_spin_unlock+0x145/0x1e0 [ 62.033137][ T6378] ? _raw_spin_unlock+0x28/0x50 [ 62.033153][ T6378] try_charge_memcg+0x783/0xf60 [ 62.033184][ T6378] ? __pfx_try_charge_memcg+0x10/0x10 [ 62.033195][ T6378] ? find_held_lock+0x2b/0x80 [ 62.033211][ T6378] ? rcu_read_unlock+0x17/0x60 [ 62.033222][ T6378] ? rcu_read_unlock+0x17/0x60 [ 62.033234][ T6378] ? find_held_lock+0x2b/0x80 [ 62.033251][ T6378] ? rcu_read_unlock+0x17/0x60 [ 62.033265][ T6378] charge_memcg+0x1ae/0x210 [ 62.033277][ T6378] __mem_cgroup_charge+0x2b/0x1c0 [ 62.033292][ T6378] shmem_alloc_and_add_folio+0x451/0xd40 [ 62.033307][ T6378] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 62.033320][ T6378] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 62.033332][ T6378] ? __lock_acquire+0x5c0/0x1f40 [ 62.033347][ T6378] shmem_get_folio_gfp+0x75b/0x1980 [ 62.033363][ T6378] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 62.033373][ T6378] ? inode_set_ctime_current+0x9c/0x850 [ 62.033385][ T6378] ? find_held_lock+0x2b/0x80 [ 62.033403][ T6378] ? timestamp_truncate+0x22e/0x2f0 [ 62.033416][ T6378] shmem_write_begin+0x1a4/0x420 [ 62.033429][ T6378] ? __pfx_shmem_write_begin+0x10/0x10 [ 62.033441][ T6378] ? inode_set_ctime_current+0x283/0x850 [ 62.033452][ T6378] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 62.033465][ T6378] ? inode_maybe_inc_iversion+0x169/0x220 [ 62.033483][ T6378] generic_perform_write+0x292/0xa40 [ 62.033498][ T6378] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 62.033516][ T6378] ? __pfx_generic_perform_write+0x10/0x10 [ 62.033533][ T6378] ? mnt_put_write_access_file+0x4e/0x100 [ 62.033550][ T6378] ? file_update_time_flags+0x38c/0x520 [ 62.033564][ T6378] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 62.033582][ T6378] shmem_file_write_iter+0x10e/0x140 [ 62.033596][ T6378] __kernel_write_iter+0x2ac/0x930 [ 62.033612][ T6378] ? __pfx___kernel_write_iter+0x10/0x10 [ 62.033626][ T6378] ? __up_read+0x333/0x980 [ 62.033642][ T6378] ? dump_user_range+0x65e/0xad0 [ 62.033660][ T6378] dump_user_range+0x3f9/0xad0 [ 62.033677][ T6378] ? __pfx_dump_user_range+0x10/0x10 [ 62.033697][ T6378] ? __pfx_writenote+0x10/0x10 [ 62.033711][ T6378] ? elf_core_dump+0x1f25/0x3d20 [ 62.033740][ T6378] elf_core_dump+0x2d68/0x3d20 [ 62.033766][ T6378] ? __pfx_elf_core_dump+0x10/0x10 [ 62.033780][ T6378] ? kasan_save_stack+0x3f/0x50 [ 62.033795][ T6378] ? kasan_save_stack+0x30/0x50 [ 62.033808][ T6378] ? kasan_save_track+0x14/0x30 [ 62.033822][ T6378] ? __kasan_kmalloc+0xaa/0xb0 [ 62.033836][ T6378] ? vfs_coredump+0x21f6/0x54a0 [ 62.033849][ T6378] ? get_signal+0x1f2a/0x21e0 [ 62.033861][ T6378] ? arch_do_signal_or_restart+0x91/0x7e0 [ 62.033881][ T6378] ? 0xffffffffff600000 [ 62.033908][ T6378] ? lock_acquire+0x1d1/0x380 [ 62.033921][ T6378] ? get_signal+0x1f2a/0x21e0 [ 62.033938][ T6378] ? vfs_coredump+0x281a/0x54a0 [ 62.033951][ T6378] vfs_coredump+0x281a/0x54a0 [ 62.033971][ T6378] ? __pfx_vfs_coredump+0x10/0x10 [ 62.033985][ T6378] ? __lock_acquire+0x5c0/0x1f40 [ 62.034001][ T6378] ? __lock_acquire+0x5c0/0x1f40 [ 62.034016][ T6378] ? lock_acquire+0x1d1/0x380 [ 62.034028][ T6378] ? unwind_next_frame+0xbd/0x2090 [ 62.034047][ T6378] ? lock_acquire+0x1d1/0x380 [ 62.034064][ T6378] ? bpf_ksym_find+0x128/0x1c0 [ 62.034077][ T6378] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 62.034094][ T6378] ? arch_stack_walk+0xa6/0xf0 [ 62.034113][ T6378] ? __sigqueue_free+0xbe/0x2a0 [ 62.034128][ T6378] ? stack_trace_save+0x8e/0xc0 [ 62.034140][ T6378] ? __pfx_stack_trace_save+0x10/0x10 [ 62.034152][ T6378] ? stack_depot_save_flags+0x27/0x9f0 [ 62.034164][ T6378] ? __lock_acquire+0x5c0/0x1f40 [ 62.034202][ T6378] ? proc_coredump_connector+0x2d3/0x4f0 [ 62.034218][ T6378] ? __pfx_proc_coredump_connector+0x10/0x10 [ 62.034236][ T6378] ? rcu_is_watching+0x13/0xc0 [ 62.034255][ T6378] get_signal+0x1f2a/0x21e0 [ 62.034273][ T6378] ? __pfx_get_signal+0x10/0x10 [ 62.034286][ T6378] ? __pfx_force_sig_fault+0x10/0x10 [ 62.034302][ T6378] arch_do_signal_or_restart+0x91/0x7e0 [ 62.034320][ T6378] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 62.034346][ T6378] irqentry_exit+0x402/0xa10 [ 62.034364][ T6378] asm_exc_page_fault+0x26/0x30 [ 62.034375][ T6378] RIP: 0033:0x7f3701f9e559 [ 62.034388][ T6378] Code: Unable to access opcode bytes at 0x7f3701f9e52f. [ 62.034393][ T6378] RSP: 002b:00007f3700192fd8 EFLAGS: 00010206 [ 62.034402][ T6378] RAX: 0000000000000000 RBX: 00007f3702226630 RCX: 00007f3701f9e559 [ 62.034409][ T6378] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000001000 [ 62.034416][ T6378] RBP: 00007f3702035ab8 R08: 0000000000000000 R09: 0000000000000000 [ 62.034423][ T6378] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 62.034429][ T6378] R13: 00007f37022266c8 R14: 00007f3702226630 R15: 00007ffef8077c28 [ 62.034444][ T6378] [ 62.040542][ T6378] memory: usage 307200kB, limit 307200kB, failcnt 38459 [ 62.040552][ T6378] memory+swap: usage 432076kB, limit 9007199254740988kB, failcnt 0 [ 62.040559][ T6378] kmem: usage 3828kB, limit 9007199254740988kB, failcnt 0 [ 62.040566][ T6378] Memory cgroup stats for /syz2: [ 62.041145][ T6378] cache 310575104 [ 62.041151][ T6378] rss 65536 [ 62.041155][ T6378] rss_huge 0 [ 62.041159][ T6378] shmem 310571008 [ 62.041163][ T6378] mapped_file 39628800 [ 62.041167][ T6378] dirty 4096 [ 62.041171][ T6378] writeback 0 [ 62.041175][ T6378] workingset_refault_anon 0 [ 62.041179][ T6378] workingset_refault_file 162 [ 62.041184][ T6378] swap 127873024 [ 62.041188][ T6378] swapcached 213712896 [ 62.041192][ T6378] pgpgin 176986 [ 62.041196][ T6378] pgpgout 101146 [ 62.041200][ T6378] pgfault 29122 [ 62.041204][ T6378] pgmajfault 10 [ 62.041208][ T6378] inactive_anon 164208640 [ 62.041213][ T6378] active_anon 146358272 [ 62.041217][ T6378] inactive_file 0 [ 62.041221][ T6378] active_file 0 [ 62.041225][ T6378] unevictable 0 [ 62.041229][ T6378] hierarchical_memory_limit 314572800 [ 62.041233][ T6378] hierarchical_memsw_limit 9223372036854771712 [ 62.041238][ T6378] total_cache 310575104 [ 62.041243][ T6378] total_rss 65536 [ 62.041247][ T6378] total_rss_huge 0 [ 62.041251][ T6378] total_shmem 310571008 [ 62.041255][ T6378] total_mapped_file 39628800 [ 62.041259][ T6378] total_dirty 4096 [ 62.041263][ T6378] total_writeback 0 [ 62.041267][ T6378] total_workingset_refault_anon 0 [ 62.041272][ T6378] total_workingset_refault_file 162 [ 62.041277][ T6378] total_swap 127873024 [ 62.041281][ T6378] total_swapcached 213712896 [ 62.041285][ T6378] total_pgpgin 176986 [ 62.041289][ T6378] total_pgpgout 101146 [ 62.041293][ T6378] total_pgfault 29122 [ 62.041298][ T6378] total_pgmajfault 10 [ 62.041302][ T6378] total_inactive_anon 164208640 [ 62.041306][ T6378] total_active_anon 146358272 [ 62.041310][ T6378] total_inactive_file 0 [ 62.041315][ T6378] total_active_file 0 [ 62.041319][ T6378] total_unevictable 0 [ 62.041323][ T6378] anon_cost 0 [ 62.041327][ T6378] file_cost 0 [ 62.041332][ T6378] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.108,pid=6386,uid=0 [ 62.041473][ T6378] Memory cgroup out of memory: Killed process 6386 (syz.2.108) total-vm:180344kB, anon-rss:0kB, file-rss:0kB, shmem-rss:35872kB, UID:0 pgtables:104kB oom_score_adj:1000 [ 62.094555][ T6378] Memory cgroup out of memory: Killed process 6373 (syz.2.108) total-vm:180344kB, anon-rss:0kB, file-rss:0kB, shmem-rss:35704kB, UID:0 pgtables:104kB oom_score_adj:1000 [ 62.113622][ T6387] Memory cgroup out of memory: Killed process 6387 (syz.2.108) total-vm:180344kB, anon-rss:0kB, file-rss:0kB, shmem-rss:31920kB, UID:0 pgtables:96kB oom_score_adj:1000 [ 62.350128][ T43] audit: type=1400 audit(1792280580.751:483): avc: denied { getattr } for pid=6527 comm="syz.1.146" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=13591 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 62.589745][ T6382] syz.2.108 (6382) used greatest stack depth: 18536 bytes left [ 62.744884][ T6547] bridge0: entered allmulticast mode [ 62.745685][ T6547] netlink: 4 bytes leftover after parsing attributes in process `syz.3.150'. [ 62.745740][ T6547] bridge_slave_1: left allmulticast mode [ 62.745751][ T6547] bridge_slave_1: left promiscuous mode [ 62.746438][ T6547] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.766904][ T6547] bridge_slave_0: left allmulticast mode [ 62.766916][ T6547] bridge_slave_0: left promiscuous mode [ 62.767023][ T6547] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.805072][ T6547] bridge0 (unregistering): left allmulticast mode [ 62.946882][ T6384] Memory cgroup out of memory: Killed process 6378 (syz.2.108) total-vm:180344kB, anon-rss:0kB, file-rss:0kB, shmem-rss:54508kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 63.039458][ T6384] Memory cgroup out of memory: Killed process 6380 (syz.2.108) total-vm:180344kB, anon-rss:0kB, file-rss:0kB, shmem-rss:46444kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 63.680946][ T6385] Memory cgroup out of memory: Killed process 6377 (syz.2.108) total-vm:180344kB, anon-rss:0kB, file-rss:0kB, shmem-rss:61356kB, UID:0 pgtables:156kB oom_score_adj:1000 [ 63.697476][ T6385] Memory cgroup out of memory: Killed process 6371 (syz.2.108) total-vm:180344kB, anon-rss:0kB, file-rss:0kB, shmem-rss:61568kB, UID:0 pgtables:156kB oom_score_adj:1000 [ 64.210153][ T6381] Memory cgroup out of memory: Killed process 6384 (syz.2.108) total-vm:180344kB, anon-rss:0kB, file-rss:0kB, shmem-rss:70724kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 64.227838][ T6379] Memory cgroup out of memory: Killed process 6385 (syz.2.108) total-vm:180344kB, anon-rss:0kB, file-rss:0kB, shmem-rss:70632kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 64.234695][ T6379] Memory cgroup out of memory: Killed process 6381 (syz.2.108) total-vm:180344kB, anon-rss:0kB, file-rss:0kB, shmem-rss:70504kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 64.249849][ T5726] Memory cgroup out of memory: Killed process 6379 (syz.2.108) total-vm:180344kB, anon-rss:0kB, file-rss:0kB, shmem-rss:68432kB, UID:0 pgtables:192kB oom_score_adj:1000 [ 64.261634][ T5726] Memory cgroup out of memory: Killed process 6537 (syz.2.149) total-vm:102400kB, anon-rss:1452kB, file-rss:23388kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 64.264424][ T6538] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 64.264929][ T6538] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 64.287477][ T6538] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 64.304296][ T6538] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 64.304388][ T6538] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 64.312973][ T6538] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 64.330684][ T6538] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 64.330764][ T6538] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 64.338651][ T6538] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 64.353968][ T6545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.354267][ T6545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.426272][ T6565] nvmet: Invalid value 'i' for adrfam [ 64.428772][ T6568] netlink: 'syz.3.152': attribute type 63 has an invalid length. [ 64.428784][ T6568] netlink: 5 bytes leftover after parsing attributes in process `syz.3.152'. [ 64.430380][ T5741] Bluetooth: hci2: unexpected cc 0x1405 length: 11 > 4 [ 64.430408][ T5741] Bluetooth: hci2: unexpected event for opcode 0x1405 [ 64.599572][ T5813] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 64.770038][ T5813] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 64.772364][ T5813] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.772374][ T5813] usb 6-1: Product: syz [ 64.772381][ T5813] usb 6-1: Manufacturer: syz [ 64.772388][ T5813] usb 6-1: SerialNumber: syz [ 64.789937][ T5741] Bluetooth: hci1: command 0x0c24 tx timeout [ 64.808728][ T5813] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 65.015737][ T5599] usb 6-1: USB disconnect, device number 2 [ 65.025085][ T6574] macsec1: entered promiscuous mode [ 65.302592][ T6583] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.377226][ T6583] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.435677][ T6583] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.508262][ T6583] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.609633][ T5539] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.619661][ T5539] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.629648][ T5539] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.639735][ T5539] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.642625][ T6587] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.698789][ T6587] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.758161][ T6587] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.803942][ T6587] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.839672][ T5813] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 65.840896][ T5813] ath9k_htc: Failed to initialize the device [ 65.841645][ T5599] usb 6-1: ath9k_htc: USB layer deinitialized [ 66.057799][ T6619] ipt_rpfilter: unknown options [ 66.058462][ T6619] netlink: 'syz.1.162': attribute type 3 has an invalid length. [ 66.058477][ T6619] netlink: 64 bytes leftover after parsing attributes in process `syz.1.162'. [ 66.095605][ T6621] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 66.107015][ T6621] kvm: pic: non byte read [ 66.108897][ T6621] kvm: pic: level sensitive irq not supported [ 66.109271][ T6621] kvm: pic: non byte read [ 66.269735][ T43] kauditd_printk_skb: 21 callbacks suppressed [ 66.269744][ T43] audit: type=1400 audit(1792280584.671:505): avc: denied { write } for pid=6631 comm="syz.3.166" name="functions" dev="configfs" ino=9891 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 66.274445][ T43] audit: type=1400 audit(1792280584.671:506): avc: denied { write } for pid=6631 comm="syz.3.166" name="header" dev="configfs" ino=15671 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 66.274687][ T43] audit: type=1400 audit(1792280584.671:507): avc: denied { write } for pid=6631 comm="syz.3.166" name="header" dev="configfs" ino=15671 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 66.275017][ T43] audit: type=1400 audit(1792280584.671:508): avc: denied { write } for pid=6631 comm="syz.3.166" name="c.1" dev="configfs" ino=9898 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 66.275194][ T43] audit: type=1400 audit(1792280584.671:509): avc: denied { write } for pid=6631 comm="syz.3.166" name="c.1" dev="configfs" ino=9898 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 66.302827][ T6636] netlink: 'syz.2.168': attribute type 30 has an invalid length. [ 66.314971][ T6636] bond1: option arp_missed_max: invalid value (0) [ 66.314980][ T6636] bond1: option arp_missed_max: allowed values 1 - 255 [ 66.317916][ T6636] bond1 (unregistering): Released all slaves [ 66.342312][ T43] audit: type=1400 audit(1792280584.741:510): avc: denied { load_policy } for pid=6638 comm="syz.3.169" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 66.344099][ T6642] SELinux: ebitmap: empty map [ 66.344223][ T6642] SELinux: failed to load policy [ 66.389598][ T5741] Bluetooth: hci3: command 0x0c1a tx timeout [ 66.422692][ T43] audit: type=1400 audit(1792280584.821:511): avc: denied { create } for pid=6644 comm="syz.2.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 66.428762][ T43] audit: type=1400 audit(1792280584.821:512): avc: denied { sys_admin } for pid=6644 comm="syz.2.172" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 66.436056][ T43] audit: type=1400 audit(1792280584.831:513): avc: denied { accept } for pid=6651 comm="syz.3.173" lport=36715 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 66.436083][ T43] audit: type=1400 audit(1792280584.831:514): avc: denied { write } for pid=6651 comm="syz.3.173" lport=36715 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 66.495283][ T6655] netlink: 44 bytes leftover after parsing attributes in process `syz.1.174'. [ 66.497852][ T5741] Bluetooth: hci3: unexpected cc 0x1407 length: 11 > 9 [ 66.497882][ T5741] Bluetooth: hci3: unexpected event for opcode 0x1407 [ 66.509298][ T6664] tmpfs: Unknown parameter 'mpoL' [ 66.509977][ T6664] netlink: 8 bytes leftover after parsing attributes in process `syz.3.177'. [ 66.575964][ T6669] netlink: 196 bytes leftover after parsing attributes in process `syz.3.179'. [ 66.615394][ T6672] vers=2.0 not permitted when mounting with smb3 [ 66.615394][ T6672] [ 66.615442][ T6672] CIFS: VFS: vers=2.0 not permitted when mounting with smb3 [ 66.643972][ T6674] binder: binder_mmap: 6673 200000000000-200000200000 bad vm_flags failed -1 [ 66.869710][ T5741] Bluetooth: hci1: command 0x0c24 tx timeout [ 66.924776][ T6683] nvmet_tcp: enabling port 1 (127.0.0.1:4) [ 66.959618][ C3] net_ratelimit: 260 callbacks suppressed [ 67.052206][ T6686] syzkaller0: entered promiscuous mode [ 67.052215][ T6686] syzkaller0: entered allmulticast mode [ 67.069222][ T6689] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=6689 comm=syz.1.186 [ 67.069329][ T6689] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=6689 comm=syz.1.186 [ 67.069400][ T6689] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=6689 comm=syz.1.186 [ 67.069474][ T6689] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=6689 comm=syz.1.186 [ 67.069709][ T6689] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=6689 comm=syz.1.186 [ 67.069780][ T6689] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=6689 comm=syz.1.186 [ 67.069853][ T6689] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=6689 comm=syz.1.186 [ 67.070009][ T6689] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=6689 comm=syz.1.186 [ 67.070082][ T6689] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=6689 comm=syz.1.186 [ 67.070182][ T6689] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=6689 comm=syz.1.186 [ 67.086240][ T6690] netlink: 148 bytes leftover after parsing attributes in process `syz.1.186'. [ 67.113293][ T6689] netlink: 'syz.1.186': attribute type 10 has an invalid length. [ 67.126062][ T6689] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 67.128923][ T1164] IPVS: starting estimator thread 0... [ 67.219632][ T6694] IPVS: using max 43 ests per chain, 103200 per kthread [ 67.315730][ T6696] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=2558430984 (81869791488 ns) > initial count (19335048768 ns). Using initial count to start timer. [ 67.368253][ T6700] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 67.501425][ T6711] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.504825][ T6711] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.520166][ T6711] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.522260][ T6711] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.523026][ T6704] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.523263][ T6711] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.524057][ T6704] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.524757][ T6704] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.526010][ T6711] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.526941][ T6704] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.527462][ T6711] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.528613][ T6704] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.529025][ T6711] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.531969][ T6711] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.533847][ T6704] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.552258][ T6711] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.563937][ T6704] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.567165][ T6711] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.569091][ T6704] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.572814][ T6711] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.577011][ T6704] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.577066][ T6711] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.582756][ T6704] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.587070][ T6711] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.587693][ T6704] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.592955][ T6711] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.598219][ T6704] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.599355][ T6711] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.603488][ T6704] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.608089][ T6711] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.613277][ T6704] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.614149][ T6711] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.616318][ T6704] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.620721][ T6711] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.624902][ T6704] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.625880][ T6711] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.628119][ T6704] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.629120][ T6711] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.631951][ T6704] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.636056][ T6711] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.636949][ T6704] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.641745][ T6711] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.643990][ T6704] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.652468][ T6711] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.652917][ T6704] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.657594][ T6711] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.663134][ T6704] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.665214][ T6711] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.666163][ T6704] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.669125][ T6711] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.672729][ T6704] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.676878][ T6711] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.677684][ T6704] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.680396][ T6711] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.684360][ T6704] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.688202][ T6711] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.689160][ T6704] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.693107][ T6711] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.697538][ T6704] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.698578][ T6711] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.701601][ T6704] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.705537][ T6711] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.709174][ T6704] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.710644][ T6711] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.713127][ T6704] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.716921][ T6711] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.717486][ T6704] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.725158][ T6704] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.726202][ T6711] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.729411][ T6704] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.733039][ T6711] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.733637][ T6704] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.737254][ T6711] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.741109][ T6704] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.744715][ T6711] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.745267][ T6704] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.748647][ T6711] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.752844][ T6704] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.756586][ T6711] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.758897][ T6704] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.760976][ T6711] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.764888][ T6704] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.765508][ T6711] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.769019][ T6704] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.772856][ T6711] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.776979][ T6704] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.780642][ T6711] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.784452][ T6704] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.788336][ T6711] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.788909][ T6704] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.792169][ T6711] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.797264][ T6711] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.797464][ T6704] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.800763][ T6711] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.804559][ T6704] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.805169][ T6711] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.808512][ T6704] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.812814][ T6711] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.816573][ T6704] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.817520][ T6711] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.820154][ T6704] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.824067][ T6704] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.824537][ T6711] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.827921][ T6704] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.832306][ T6711] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.836313][ T6704] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.840595][ T6711] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.844249][ T6704] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.848064][ T6711] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.851672][ T6704] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.855652][ T6711] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.856690][ T6704] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.859118][ T6711] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.863228][ T6704] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.863829][ T6711] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.866975][ T6704] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.871052][ T6711] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.874791][ T6704] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.878579][ T6711] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.882828][ T6704] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.886293][ T6711] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.891685][ T6704] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.894004][ T6711] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.897792][ T6704] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.899358][ T6711] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.901849][ T6704] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.902094][ T6711] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.906077][ T6704] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.910640][ T6704] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 68.454378][ T6738] netlink: 44 bytes leftover after parsing attributes in process `syz.2.198'. [ 68.454393][ T6738] netlink: 43 bytes leftover after parsing attributes in process `syz.2.198'. [ 68.454403][ T6738] netlink: 'syz.2.198': attribute type 6 has an invalid length. [ 68.454412][ T6738] netlink: 'syz.2.198': attribute type 5 has an invalid length. [ 68.454421][ T6738] netlink: 43 bytes leftover after parsing attributes in process `syz.2.198'. [ 68.959569][ T5741] Bluetooth: hci1: command 0x0c24 tx timeout [ 69.179679][ T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.179715][ T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.199666][ T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.199691][ T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.318300][ T6776] netlink: 'syz.2.205': attribute type 1 has an invalid length. [ 69.338191][ T6776] 8021q: adding VLAN 0 to HW filter on device bond1 [ 69.372272][ T6776] bond1: (slave geneve2): making interface the new active one [ 69.374773][ T6776] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 69.410507][ T6779] warning: `syz.2.206' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 70.474356][ T6790] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 70.518956][ T5742] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 70.519079][ T5742] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 70.519201][ T5742] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 70.519735][ T6782] netlink: 12 bytes leftover after parsin ** replaying previous printk message ** [ 70.519735][ T6782] netlink: 12 bytes leftover after parsing attributes in process `syz.3.207'. [ 70.520543][ T5742] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 70.523013][ T5742] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 70.523134][ T5742] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 70.523251][ T5742] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 70.523415][ T5742] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 70.523544][ T5742] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 70.523716][ T5742] Bluetooth: hci2: unexpected event for opcode 0x1408 ** 281 printk messages dropped ** ** 132 printk messages dropped ** ** 133 printk messages dropped ** ** 133 printk messages dropped ** ** 90 printk messages dropped ** ** 229 printk messages dropped ** ** 133 printk messages dropped ** ** 148 printk messages dropped ** ** 128 printk messages dropped ** ** 135 printk messages dropped ** ** 145 printk messages dropped ** ** 153 printk messages dropped ** ** 149 printk messages dropped ** ** 146 printk messages dropped ** ** 130 printk messages dropped ** ** 158 printk messages dropped ** ** 134 printk messages dropped ** ** 115 printk messages dropped ** ** 126 printk messages dropped ** ** 121 printk messages dropped ** ** 126 printk messages dropped ** ** 137 printk messages dropped ** ** 118 printk messages dropped ** ** 130 printk messages dropped ** ** 123 printk messages dropped ** ** 135 printk messages dropped ** ** 127 printk messages dropped ** ** 131 printk messages dropped ** ** 113 printk messages dropped ** ** 125 printk messages dropped ** ** 123 printk messages dropped ** ** 122 printk messages dropped ** ** 126 printk messages dropped ** ** 97 printk messages dropped ** [ 70.598374][ T5742] Modules linked in: [ 70.598382][ T5742] [ 70.600951][ T5742] CPU: 3 UID: 0 PID: 5742 Comm: kworker/u34:7 Not tainted syzkaller #0 PREEMPT(full) [ 70.604581][ T5742] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 70.608405][ T5742] Workqueue: hci2 hci_conn_timeout [ 70.610457][ T5742] [ 70.611424][ T5742] RIP: 0010:hci_conn_timeout+0x16a/0x230 [ 70.613548][ T5742] Code: 44 0f b6 2d 3b fc 76 07 31 ff 41 83 e5 40 44 89 ee e8 1a 6d 42 f7 45 84 ed 0f 84 02 ff ff ff e9 2d 47 a8 f6 e8 f7 72 42 f7 90 <0f> 0b 90 e8 ee 72 42 f7 48 8d bb ed f5 ff ff 48 b8 00 00 00 00 00 [ 70.620769][ T5742] RSP: 0018:ffffc900031cfbf8 EFLAGS: 00010293 [ 70.623045][ T5742] [ 70.623936][ T5742] RAX: 0000000000000000 RBX: ffff888059ddca50 RCX: 0000000000000000 [ 70.626791][ T5742] RDX: ffff88802d83a580 RSI: ffffffff8ac9e479 RDI: ffff88802d83a580 [ 70.629798][ T5742] RBP: 00000000ffffffc0 R08: 0000000000000005 R09: 0000000000000000 [ 70.632664][ T5742] R10: 00000000ffffffc0 R11: 0000000000000001 R12: ffff888059ddc000 [ 70.635565][ T5742] R13: 0000000000000000 R14: ffffffff8d576ec0 R15: ffff88802f635c00 [ 70.638462][ T5742] FS: 0000000000000000(0000) GS:ffff8880d4c46000(0000) knlGS:0000000000000000 [ 70.641815][ T5742] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 70.644307][ T5742] CR2: 00007f3701febc40 CR3: 0000000050f1e000 CR4: 0000000000352ef0 [ 70.647225][ T5742] Call Trace: [ 70.648572][ T5742] [ 70.649793][ T5742] process_one_work+0xac7/0x1b10 [ 70.651679][ T5742] ? __pfx_process_one_work+0x10/0x10 [ 70.653676][ T5742] ? lock_acquire+0x1d1/0x380 [ 70.655487][ T5742] ? __pfx_hci_conn_timeout+0x10/0x10 [ 70.657549][ T5742] worker_thread+0x5ef/0xe50 [ 70.659353][ T5742] ? __pfx_worker_thread+0x10/0x10 [ 70.661414][ T5742] ? kthread+0x13a/0x450 [ 70.663036][ T5742] ? __pfx_worker_thread+0x10/0x10 [ 70.665138][ T5742] kthread+0x373/0x450 [ 70.666719][ T5742] ? __pfx_kthread+0x10/0x10 [ 70.668550][ T5742] ret_from_fork+0x730/0xd60 [ 70.670554][ T5742] ? __pfx_ret_from_fork+0x10/0x10 [ 70.672558][ T5742] ? __switch_to+0x800/0x10f0 [ 70.674401][ T5742] ? __pfx_kthread+0x10/0x10 [ 70.676273][ T5742] ret_from_fork_asm+0x1a/0x30 [ 70.677944][ T5742] [ 70.679145][ T6783] 842_compress: add hash index2 6b pos d0 data 0 [ 70.679151][ T5742] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 70.683344][ T5742] CPU: 3 UID: 0 PID: 5742 Comm: kworker/u34:7 Not tainted syzkaller #0 PREEMPT(full) [ 70.686389][ T5742] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 70.689423][ T5742] Workqueue: hci2 hci_conn_timeout [ 70.691006][ T5742] Call Trace: [ 70.692064][ T5742] [ 70.692980][ T5742] dump_stack_lvl+0x100/0x190 [ 70.694450][ T5742] vpanic+0x553/0x970 [ 70.695691][ T5742] ? __pfx_vpanic+0x10/0x10 [ 70.697111][ T5742] panic+0xd1/0xe0 [ 70.698250][ T5742] ? __pfx_panic+0x10/0x10 [ 70.699643][ T5742] check_panic_on_warn.cold+0x19/0x34 [ 70.701311][ T5742] ? hci_conn_timeout+0x16a/0x230 [ 70.702868][ T5742] __warn.cold+0x191/0x318 [ 70.704276][ T5742] __report_bug+0x30f/0x440 [ 70.705694][ T5742] ? hci_conn_timeout+0x16a/0x230 [ 70.707259][ T5742] ? __pfx___report_bug+0x10/0x10 [ 70.708842][ T5742] ? __dynamic_pr_debug+0x201/0x270 [ 70.710445][ T5742] ? __pfx___dynamic_pr_debug+0x10/0x10 [ 70.712166][ T5742] ? hci_conn_timeout+0x16a/0x230 [ 70.713715][ T5742] report_bug+0xb3/0x220 [ 70.715021][ T5742] ? hci_conn_timeout+0x16a/0x230 [ 70.716590][ T5742] handle_bug+0x16a/0x2a0 [ 70.717946][ T5742] exc_invalid_op+0x17/0x50 [ 70.719336][ T5742] asm_exc_invalid_op+0x1a/0x20 [ 70.720890][ T5742] RIP: 0010:hci_conn_timeout+0x16a/0x230 [ 70.722591][ T5742] Code: 44 0f b6 2d 3b fc 76 07 31 ff 41 83 e5 40 44 89 ee e8 1a 6d 42 f7 45 84 ed 0f 84 02 ff ff ff e9 2d 47 a8 f6 e8 f7 72 42 f7 90 <0f> 0b 90 e8 ee 72 42 f7 48 8d bb ed f5 ff ff 48 b8 00 00 00 00 00 [ 70.728406][ T5742] RSP: 0018:ffffc900031cfbf8 EFLAGS: 00010293 [ 70.730293][ T5742] RAX: 0000000000000000 RBX: ffff888059ddca50 RCX: 0000000000000000 [ 70.732740][ T5742] RDX: ffff88802d83a580 RSI: ffffffff8ac9e479 RDI: ffff88802d83a580 [ 70.735152][ T5742] RBP: 00000000ffffffc0 R08: 0000000000000005 R09: 0000000000000000 [ 70.737554][ T5742] R10: 00000000ffffffc0 R11: 0000000000000001 R12: ffff888059ddc000 [ 70.739933][ T5742] R13: 0000000000000000 R14: ffffffff8d576ec0 R15: ffff88802f635c00 [ 70.742402][ T5742] ? hci_conn_timeout+0x169/0x230 [ 70.743962][ T5742] ? hci_conn_timeout+0x169/0x230 [ 70.745517][ T5742] process_one_work+0xac7/0x1b10 [ 70.747058][ T5742] ? __pfx_process_one_work+0x10/0x10 [ 70.748714][ T5742] ? lock_acquire+0x1d1/0x380 [ 70.750205][ T5742] ? __pfx_hci_conn_timeout+0x10/0x10 [ 70.751879][ T5742] worker_thread+0x5ef/0xe50 [ 70.753350][ T5742] ? __pfx_worker_thread+0x10/0x10 [ 70.754936][ T5742] ? kthread+0x13a/0x450 [ 70.756264][ T5742] ? __pfx_worker_thread+0x10/0x10 [ 70.757837][ T5742] kthread+0x373/0x450 [ 70.759114][ T5742] ? __pfx_kthread+0x10/0x10 [ 70.760577][ T5742] ret_from_fork+0x730/0xd60 [ 70.762031][ T5742] ? __pfx_ret_from_fork+0x10/0x10 [ 70.763615][ T5742] ? __switch_to+0x800/0x10f0 [ 70.765089][ T5742] ? __pfx_kthread+0x10/0x10 [ 70.766522][ T5742] ret_from_fork_asm+0x1a/0x30 [ 70.768032][ T5742] [ 70.769549][ T5742] Kernel Offset: disabled [ 70.770909][ T5742] Rebooting in 86400 seconds..