last executing test programs: 5m10.649540024s ago: executing program 32 (id=1305): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() ptrace$PTRACE_SETSIGMASK(0x420b, 0x0, 0x8, &(0x7f00000005c0)={[0x8]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r4, 0x9c3fa077fa966179, 0x12, 0xffff0000, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) 5m2.722550572s ago: executing program 33 (id=1245): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() getrlimit(0x2, &(0x7f0000000040)) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x1, &(0x7f0000000180)=0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xd, 0x0, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) 4m56.343341213s ago: executing program 4 (id=1422): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff274"], 0x84}, 0x1, 0x0, 0x0, 0x2004c015}, 0x40) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 4m56.343114783s ago: executing program 4 (id=1423): mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='.\x00', &(0x7f0000000000), 0x4, &(0x7f0000000140)={'trans=virtio,', {[{@posixacl}]}}) (fail_nth: 5) 4m56.212015791s ago: executing program 4 (id=1424): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003f00)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x158b8}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0xa}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 4m56.073257865s ago: executing program 4 (id=1426): socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) syz_clone(0x8021000, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff], 0x0, 0x4}) 4m55.993060246s ago: executing program 4 (id=1429): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) fstat(r1, &(0x7f0000000300)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000000c0)=0xfffff801) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10001}, 0x4000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x2, 0x2, 0x2}}]}, 0x40}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000bfd000/0x400000)=nil) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0xfffffffffffffffd}]}) syz_clone(0x1e88c000, 0x0, 0x0, 0x0, 0x0, 0x0) 4m55.893341729s ago: executing program 4 (id=1430): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[], 0xffdd) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[], 0xffdd) 4m40.927363061s ago: executing program 34 (id=1430): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[], 0xffdd) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[], 0xffdd) 4m40.882070564s ago: executing program 1 (id=1584): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="7b87f20f", @ANYBLOB="01"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x54, 0x0, 0x0, 0x0}, 0xfffffffffffffd5b) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 31) 4m39.90198526s ago: executing program 1 (id=1592): r0 = msgget$private(0x0, 0x193) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r1, &(0x7f0000000f80)}, 0x20) msgsnd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="02"], 0x8, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x470, 0x310, 0x168, 0x0, 0x310, 0x98, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0x98}}, {{@ip={@remote, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@pkttype={{0x28}}]}, @ECN={0x28}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0904653e2856ac646f914b742f226c1356a70000000000000000020019f400b502ed0f000000000000000900010073797a30000000002c00666962001cdbce80080001400000001208000340000000360800024000000002140000001100010000000000000000000000000a"], 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000140)='dctcp', 0x5) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) msgrcv(r0, &(0x7f0000000240)={0x0, ""/163}, 0xab, 0x3, 0x2000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="05"], 0x10) close_range(r5, 0xffffffffffffffff, 0x0) msgctl$IPC_RMID(r0, 0x0) 4m39.80243521s ago: executing program 1 (id=1593): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x30, r1, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20008050) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0xffffffff7fffffff, 0x301300) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000040)={0x0, 0x3, 0x1, 0x1, 0x0, 0x1000, 0x0}) 4m39.632061544s ago: executing program 1 (id=1595): socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) syz_clone(0x8021000, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x0, &(0x7f00000000c0), &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff], 0x0, 0x4}) 4m39.399430563s ago: executing program 1 (id=1596): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') (async) chdir(&(0x7f0000000080)='./file1\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x802, 0x0) setsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000f40)=0x1, 0x4) (async) setsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000f40)=0x1, 0x4) 4m39.332333144s ago: executing program 1 (id=1598): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003f00)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfa, {0x0, 0x0, 0x0, r9, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x158b8}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0xa}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x300}], 0x2}, 0x5) 4m24.319270889s ago: executing program 35 (id=1598): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003f00)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfa, {0x0, 0x0, 0x0, r9, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x158b8}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0xa}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x300}], 0x2}, 0x5) 1m23.937343261s ago: executing program 2 (id=4220): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f0000000140)='./file0\x00', 0x0) setxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000), &(0x7f00000000c0)=@v2={0x6, 0x3, 0x0, 0x0, 0x1, 'b'}, 0xa, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @void}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r7, r5, 0x25, 0x0, @val=@netkit={@void, @value=r6}}, 0x1c) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r8, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000011c0)={0x14, 0x7, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4004c}, 0x4000) 1m23.857187651s ago: executing program 2 (id=4223): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8726140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x4040844) 1m23.795496887s ago: executing program 2 (id=4226): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fcd000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, &(0x7f0000000080)="360f7883b81e2626660fc7350ff4650666b95c0300000f32f4656df30f09650f01cfc6f8000f0d35", 0x28}], 0x1, 0x2, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fce000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x3, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x3, 0x0, 0x2080, {0x0, 0x3000}, {'\x00', "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008bc584c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f6f38740000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a4900"}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 16) 1m23.537247397s ago: executing program 2 (id=4228): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x121403, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@struct={0x0, 0x2, 0x0, 0x13, 0x0, 0x2, [{0x5}, {0x5}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x43}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x11) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x1, 0xc000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) ioctl$KVM_CAP_X2APIC_API(r2, 0x4068aea3, &(0x7f00000001c0)={0x81, 0x0, 0x2}) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000e38000/0x18000)=nil, &(0x7f0000000340)=[@text16={0x10, 0x0}], 0x1, 0x24, 0x0, 0x0) mremap(&(0x7f0000ff9000/0x7000)=nil, 0x7000, 0x4000, 0x3, &(0x7f0000fee000/0x4000)=nil) ioctl$FS_IOC_SETFLAGS(r0, 0x40081271, &(0x7f0000000980)=0x4000) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='cramfs\x00', 0x800, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x121403, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@struct={0x0, 0x2, 0x0, 0x13, 0x0, 0x2, [{0x5}, {0x5}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x43}, 0x20) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x11) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x1, 0xc000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) (async) ioctl$KVM_CAP_X2APIC_API(r2, 0x4068aea3, &(0x7f00000001c0)={0x81, 0x0, 0x2}) (async) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) (async) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000e38000/0x18000)=nil, &(0x7f0000000340)=[@text16={0x10, 0x0}], 0x1, 0x24, 0x0, 0x0) (async) mremap(&(0x7f0000ff9000/0x7000)=nil, 0x7000, 0x4000, 0x3, &(0x7f0000fee000/0x4000)=nil) (async) ioctl$FS_IOC_SETFLAGS(r0, 0x40081271, &(0x7f0000000980)=0x4000) (async) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='cramfs\x00', 0x800, 0x0) (async) 1m23.467958793s ago: executing program 2 (id=4229): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0xb00) 1m23.467594772s ago: executing program 2 (id=4230): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}}, 0x0, 0x1, [{{0xa, 0x4e20, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10001}}]}, 0x110) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0xe9, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x10, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000001000000000000000000000c5265300964dc76431376cc99a1800000004000000000000000700000085100000fbffffff1864000003000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8) write$cgroup_pid(r2, &(0x7f0000000180), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='FROZEN\x00', 0x7) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r6, &(0x7f0000000240)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) 1m22.157705194s ago: executing program 5 (id=4246): r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {0x0, 0xffc0}], 0x2, &(0x7f0000000280)=[{&(0x7f0000000400)=""/95, 0x5f}], 0x1, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x635b019898d05711, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xa, 0x0, 0x300, 0x0, 0x0, 0xfffffffd}}) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) 1m22.157537145s ago: executing program 5 (id=4247): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x2012, r3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x48, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x44044c81}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xff01) 1m21.987717083s ago: executing program 5 (id=4248): sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x708e8866d617f1cf}, 0xc, &(0x7f0000000340)={&(0x7f0000000680)={0x1d0, 0x1, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_USERDATA={0x55, 0x6, "27f9011c8136b51399ce40585e575f22375f3a390dac9996b327d8a740323a18484a51cfb08d04b86ca08917dbb638d840c7a6daefe2dff52bbabced7e0da9fc93ff20939277eb077995e24331f88feda5"}, @NFTA_TABLE_USERDATA={0x85, 0x6, "5c8dc3febbbf30ddaa4940e4d581ee45f90e23d8770a37c4a9e89db1449ff39bd1fd7fcd5b22b7fc41f91ce5ece5239f638e5f0da771ec239cdd7a9ea0098814137c6000b99e3796b2de212f4828c4a7149e290a736a968dac61f6ee535ffedb62d9fb61ac69b6614dd8f51ff01daa7425de2ad11e16a2c1459d2d22c5525dc780"}, @NFTA_TABLE_USERDATA={0xcd, 0x6, "b7144ea6c498569f833dbdb9cbd3a725437a458de416fb3a266387561425207d8f3d23eba8e4dbb30c26fadf57fe619d432f54b6ae4c680b7e60dd4989438e7e1b2617f1d1e4747639e776e2fade7e5e46d128212c0b0a1990e2496393d54fd4502ab53cb940c85e58a313c9f2054b3d3060e43680f8150d60b5005bf6e0b931655ebebf5365a843fe9c9456e54e82f9771892f467b80685003e8caa618e5f25a6f55380db154ea07db684c36fc0b7e3cfa8de3f8b24f8f3ba1d4ffeafd1179ff2acb514167e0af0e8"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) write(0xffffffffffffffff, &(0x7f0000000500)="ba", 0x1) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x300, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 1m21.935117852s ago: executing program 5 (id=4249): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) symlinkat(&(0x7f0000000040)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1000) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) getsockopt$inet_buf(r0, 0x118, 0x1, 0x0, &(0x7f00000003c0)) chdir(&(0x7f00000003c0)='./bus\x00') r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) utimes(&(0x7f0000000340)='./file0/file0\x00', 0x0) 1m21.867844534s ago: executing program 5 (id=4250): r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010026bd7000fedbdf25030000000800010000000000100007800c000180080001"], 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x20008000) 1m21.516386481s ago: executing program 5 (id=4251): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) r8 = syz_init_net_socket$ax25(0x3, 0x3, 0x7) setsockopt$ax25_int(r8, 0x101, 0x9, &(0x7f0000000340)=0xb0a, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x80, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x2012, r3, 0x0) r9 = socket(0x1, 0x3, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000)={0x3, 0x3}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[], 0x48) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, 0x0) r10 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r10, 0x5423, 0x0) bind$unix(r9, &(0x7f0000000400)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$SIOCGETMIFCNT_IN6(r9, 0x89e0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x48, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x44044c81}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m21.458527103s ago: executing program 36 (id=4251): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) r8 = syz_init_net_socket$ax25(0x3, 0x3, 0x7) setsockopt$ax25_int(r8, 0x101, 0x9, &(0x7f0000000340)=0xb0a, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x80, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x2012, r3, 0x0) r9 = socket(0x1, 0x3, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000)={0x3, 0x3}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[], 0x48) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, 0x0) r10 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r10, 0x5423, 0x0) bind$unix(r9, &(0x7f0000000400)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$SIOCGETMIFCNT_IN6(r9, 0x89e0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x48, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x44044c81}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m16.239671826s ago: executing program 8 (id=4314): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0xeffdffff, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 1m16.134444969s ago: executing program 8 (id=4316): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x7d, &(0x7f0000000000)={0x0, 0xffff0006}, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setresgid(0xee00, 0xee01, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000011c0)={0x24, 0x7, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x4000) 1m16.034447296s ago: executing program 8 (id=4318): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x7f00000000000000) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x8d5}) 1m15.796423676s ago: executing program 8 (id=4322): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703141f00001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x4040844) 1m15.737282333s ago: executing program 8 (id=4323): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a51080002"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r4 = socket(0x9, 0x800, 0x80) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010000d042abd70000000000000000000", @ANYRES32=r5, @ANYBLOB="01000000000000001c0012802b7c11dbf9cdb819385085eaa9d20a00ae460100626f6e64000000000c0002800500010006000000"], 0x3c}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000040)={'wg2\x00', 0x0}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001780)={0xffffffffffffffff, 0x20, &(0x7f0000000680)={&(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000001700)=""/127, 0x7f}}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB="1e00000007000000060000000800000088000100", @ANYRES32, @ANYBLOB="0300000000671eb4f7f578000000000c00000000", @ANYRES32=r5, @ANYRES32, @ANYBLOB="03000000000000000500"/24, @ANYRES32, @ANYBLOB], 0x50) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f0000000080)={0x8}) fstat(r10, &(0x7f0000000300)) r11 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000001840), 0x600000, 0x0) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002140)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, r10, 0x20000, 0x2, 0x80005}, 0x50) r13 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') preadv(r13, &(0x7f00000001c0)=[{&(0x7f0000001140)=""/4096, 0x1000}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002200)={0x6, 0x5, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc}, [@map_idx={0x18, 0x5, 0x5, 0x0, 0xf}]}, &(0x7f00000004c0)='GPL\x00', 0xd, 0xa7, &(0x7f0000000500)=""/167, 0x41100, 0x4, '\x00', r7, @fallback=0x31, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000640)={0x3, 0x1, 0x8, 0x2}, 0x10, r8, 0xffffffffffffffff, 0x8, &(0x7f0000001900)=[r9, r10, r11, 0xffffffffffffffff, r12, r13], &(0x7f0000001940)=[{0x1, 0x5, 0x3, 0x6754f12622ea8b67}, {0x4, 0x4, 0x8, 0x6}, {0x2, 0x5, 0x4, 0xc}, {0x1, 0x2, 0xb, 0xa}, {0x5, 0x2, 0x4, 0xc}, {0x5, 0x5, 0x7, 0x3}, {0x0, 0x4, 0x3, 0x5}, {0x3ff, 0x3, 0xd}], 0x10, 0xff000000}, 0x94) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000400)={'erspan0\x00', r7, 0x20, 0x80, 0x9, 0x1d, {{0x1d, 0x4, 0x3, 0x7, 0x74, 0x65, 0x0, 0x2, 0x2f, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0x23, 0x28, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote, @private=0xa010100, @rand_addr=0x64010102, @local, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@local, 0x9}, {@loopback, 0x4}, {@multicast2, 0x4}, {@loopback, 0x1}, {@dev={0xac, 0x14, 0x14, 0x43}}, {@remote, 0x1}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x4}]}]}}}}}) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000021c0)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES64=r3, @ANYRES16=r10, @ANYRES32=r14], 0x54}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x0, 0x1201}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}}, 0x0) 1m15.73649201s ago: executing program 8 (id=4324): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000100)={@hyper}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r2, 0x7cb, &(0x7f0000000140)={0x0, 0x0, 0x8}) read$FUSE(r1, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r5 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) syz_fuse_handle_req(r1, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0x6, 0x2, 0x101, 0x0, 0x10000000, 0x10000000, {0x0, 0xd08, 0xfffffffffffffffd, 0x100, 0x0, 0x0, 0xa, 0x1000002, 0x122, 0x2000, 0x10000, r4, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000000440)={0x50, 0x0, r3, {0x7, 0x29, 0xffffffff, 0x11508d30, 0x0, 0x2, 0x80000001, 0x2, 0x0, 0x0, 0x0, 0x6}}, 0x50) setsockopt$inet_group_source_req(r5, 0x0, 0x0, &(0x7f0000001400)={0x5, {{0x2, 0x4e22, @rand_addr=0x64010102}}, {{0x2, 0x4e21, @rand_addr=0x64010101}}}, 0x108) r6 = dup(r0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000000)={0x10003, 0x0, 0xeeee8000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) mount(&(0x7f00000001c0)=@nullb, &(0x7f0000001240)='./file0\x00', &(0x7f0000001280)='hfsplus\x00', 0x1, &(0x7f00000012c0)='\x00') write$UHID_INPUT(r6, &(0x7f0000000200)={0xfc, {"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", 0x1000}}, 0x1006) 1m8.264026947s ago: executing program 37 (id=4230): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}}, 0x0, 0x1, [{{0xa, 0x4e20, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10001}}]}, 0x110) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0xe9, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x10, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000001000000000000000000000c5265300964dc76431376cc99a1800000004000000000000000700000085100000fbffffff1864000003000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8) write$cgroup_pid(r2, &(0x7f0000000180), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='FROZEN\x00', 0x7) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r6, &(0x7f0000000240)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) 1m0.726960487s ago: executing program 6 (id=4468): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000100)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b87a000f00d80f300f300fc79d53bf0000c4b9e16dc30101220f01c3", 0x64}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f00000008c0)={0x1, 0x0, {[0x101, 0x9, 0x6, 0xc1, 0x7, 0x9, 0x2, 0x5]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m0.682423253s ago: executing program 38 (id=4324): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000100)={@hyper}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r2, 0x7cb, &(0x7f0000000140)={0x0, 0x0, 0x8}) read$FUSE(r1, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r5 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) syz_fuse_handle_req(r1, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0x6, 0x2, 0x101, 0x0, 0x10000000, 0x10000000, {0x0, 0xd08, 0xfffffffffffffffd, 0x100, 0x0, 0x0, 0xa, 0x1000002, 0x122, 0x2000, 0x10000, r4, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000000440)={0x50, 0x0, r3, {0x7, 0x29, 0xffffffff, 0x11508d30, 0x0, 0x2, 0x80000001, 0x2, 0x0, 0x0, 0x0, 0x6}}, 0x50) setsockopt$inet_group_source_req(r5, 0x0, 0x0, &(0x7f0000001400)={0x5, {{0x2, 0x4e22, @rand_addr=0x64010102}}, {{0x2, 0x4e21, @rand_addr=0x64010101}}}, 0x108) r6 = dup(r0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000000)={0x10003, 0x0, 0xeeee8000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) mount(&(0x7f00000001c0)=@nullb, &(0x7f0000001240)='./file0\x00', &(0x7f0000001280)='hfsplus\x00', 0x1, &(0x7f00000012c0)='\x00') write$UHID_INPUT(r6, &(0x7f0000000200)={0xfc, {"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", 0x1000}}, 0x1006) 1m0.237613636s ago: executing program 6 (id=4473): sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x708e8866d617f1cf}, 0xc, &(0x7f0000000340)={&(0x7f0000000680)={0x14, 0x1, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x8c01, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 1m0.237205703s ago: executing program 6 (id=4474): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0xf, [0x7, 0x8, 0x5, 0x7, 0x8, 0x6, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0x3, 0x4a732f64, 0x1001, 0x8, 0xd, 0x4, 0x12a3, 0x6ca35c61, 0x4, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x0, 0x10000, 0x0, 0x91, 0x10, 0x4, 0x16, 0x2, 0x6, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0xfff, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0x5, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x0, 0x1000, 0xfffff801, 0x5], [0xfffffffe, 0xfffffffe, 0xffff, 0xc, 0xfff, 0x2e6bf781, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x5e, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0x10, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x6, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0xe, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x7, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x81, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5339, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0xffff, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) (fail_nth: 10) 59.767608147s ago: executing program 6 (id=4480): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_CHANNEL(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRESDEC=r0, @ANYBLOB="080026bd0200fddbdf2541000000080003006ebfb21cad3fab59fa0682902e0a31c32d4612399ebb2d66a593962500a32ee804d488642264bcb47693ec9d150b32850da43fcae77f19bc27ab673f56b5debf6715353d805c358c13ee1e12a7790bd672692f3eb9a9d3f2ab0f0ace595646e09da0f56f274130b4b20973fb06c3de7d2242d08e7164e1293b5cab0a5283da315eb24fe01ff0f10802efefaa06265ac62a436ce12a403d26b5cde9", @ANYRES32=0x0, @ANYBLOB="0c0198005228d73a1db8dcc90d6a9be812a76f8b01fe00005500000079fe95e091a2680cb5d7d40aa6a082335bdf6262d899695bed0c86f97fbab3e544bd671396c8c87f4b184f3430fa8b8ee6882f50f4d96ae0ea5b5f4dd4150a2a9841cb51e7f32ab98ee3d21d1947548da3b65b5bd140566aada2d341eac950a03d2b5046d635213b6e62c1b68f07a619a50700"/152], 0x28}, 0x1, 0x0, 0x0, 0x41}, 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88840, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r7, &(0x7f00000002c0)=""/4096, 0x1000) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fcd000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, &(0x7f0000000080)="360f7883b81e2626660fc7350ff4650666b95c0300000f32f4656df30f09650f01cfc6f8000f0d35", 0x28}], 0x1, 0x2, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r8, r8, &(0x7f0000fce000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x3, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r8, 0x4080aebf, &(0x7f0000003680)=@vmx={0x3, 0x0, 0x2080, {0x0, 0x3000}, {'\x00', "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008bc584c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f6f38740000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a4900"}}) syz_kvm_setup_cpu$x86(r6, r8, &(0x7f0000fc2000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000240)="d9ebf20f2afd26673e0f01c20fc79a240066b9800000c00f326635000400000f300f0f47228e0f77b82f0f8ed865cf66b89abb00000f23c80f21f86635000000000f23f8", 0x44}], 0x1, 0x29, &(0x7f00000012c0), 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 59.057670861s ago: executing program 6 (id=4488): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000580)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r0, 0x3b8c, &(0x7f0000000780)={0x30, r1, 0x0, 0x0, 0x0, 0x8000000000000000, 0x80000000000000a6, 0x0}) (async) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r0, 0x3b8c, &(0x7f0000000780)={0x30, r1, 0x0, 0x0, 0x0, 0x8000000000000000, 0x80000000000000a6, 0x0}) 58.733283039s ago: executing program 6 (id=4491): r0 = accept4$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x0) accept$ax25(r0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x121583, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40081271, &(0x7f0000000980)=0x200) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$BLKRRPART(r3, 0x125f, 0x0) fadvise64(r2, 0x1, 0x9, 0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x6c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) sendto$inet6(r1, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160004000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) 58.618299281s ago: executing program 39 (id=4491): r0 = accept4$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x0) accept$ax25(r0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x121583, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40081271, &(0x7f0000000980)=0x200) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$BLKRRPART(r3, 0x125f, 0x0) fadvise64(r2, 0x1, 0x9, 0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x6c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) sendto$inet6(r1, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160004000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) 2.545779367s ago: executing program 9 (id=5525): r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010026bd7000fedbdf25039e00000800010000000000100007800c000180080001"], 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x20008000) 2.463882312s ago: executing program 9 (id=5528): r0 = socket$kcm(0x10, 0x7, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000000}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r2, 0x11, 0xb, &(0x7f0000000200)=0x6, 0x4) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269bb, 0x8031, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x1}]}}]}, 0x38}}, 0x4048000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000100)={'ip_vti0\x00', r4, 0x7800, 0x1, 0x2, 0x2, {{0xb, 0x4, 0x0, 0x1b, 0x2c, 0x66, 0x0, 0x3, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@generic={0x7, 0x11, "bf3029daaf107ad6e2bcd42e6710b6"}, @rr={0x7, 0x7, 0x9b, [@broadcast]}]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000000000000400000000000000100000000000000020"], 0x24, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 1.564680639s ago: executing program 9 (id=5553): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100ffffffff0000400001000000050007000000000008000900000000101400200000003f00000000000000ffbf0000000008000a000000000014001f00000000000000000000000000000000000600020000000000050021000000000006001b"], 0x6c}, 0x1, 0x620b}, 0x0) 1.503963407s ago: executing program 9 (id=5555): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000140)={0x7, 0x918, &(0x7f0000000000)="316f35d1e120d8cbc4ebd922c075fa12fb1536f005ee4c946389ba8059af8ff8a30ad8d971bb4b2165b95a168c9173ff88af95d7c848ea50fbf3ad38d1bded4ea64bef", &(0x7f00000000c0)="f70678c2026befe1a15f26672a48107f7c01819fb0c867e8c51d2483bdd7a5924496beeb6e0634e1fee6a02f2ee02b7edf867ffd2eb650615f4b87d23b53299250069277ed1cb4f6d5c0da176536775f1ab6779940a298", 0x43, 0x57}) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3e) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r4, &(0x7f0000000080), 0x0}, 0x20) ioctl$KVM_CAP_MAX_VCPU_ID(r3, 0x4068aea3, &(0x7f0000000180)) 1.146878584s ago: executing program 7 (id=5559): syz_emit_ethernet(0x3e, &(0x7f00000004c0)={@local, @random="6cf6566994c6", @val={@void}, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x2d, 0x2c, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local, {[@rr={0x7, 0x3, 0x9}]}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x14}}}}}}, 0x0) 1.146458513s ago: executing program 9 (id=5560): r0 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x2, &(0x7f0000000380)=[{0x80, 0x7, 0x0, 0x2}, {0x16}]}) r2 = memfd_create(&(0x7f00000004c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x02Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\xff\xec\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92\xf3H\xf9\x7f\x102\x83\x9b\xdaR\a\xfeU\xc8\xc3\xa76\xe7%\x0eyx\x15\n\xe3l\x98\xcf\xbaU6\xf9\xb5S21Bk\xad\xe60P\xa2c)\xca\xc4`_\x15\xc4\t\xaa\xc4e\x12\x103\xf9\xc4\xba\x86[N\xb27BD\xab`\xae\x1c&\xdb\ns\x8c\x92\xe0\xa52\b\x8bj\x01X\xfa\xf2\x8b\xe1\xf9\n\xc4Ux\xa9\x1b\xc6\xad\xb4\xf0\xba+\x91/&\x81\xba\xa5\x8em0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800020010"], 0x44}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@bridge_getlink={0x28, 0x12, 0xdbf44c00c5896d57, 0x10, 0x0, {0x7, 0x0, 0x0, 0x0, 0x20000}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xeca}]}, 0x28}}, 0x0) io_uring_enter(r1, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) keyctl$KEYCTL_MOVE(0x1c, 0x0, 0x0, 0x0, 0x0) 957.293528ms ago: executing program 3 (id=5569): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) r2 = gettid() unshare(0x4a000200) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0x1, 0x3, 0x0, {0x0, 0x0, 0x0, r1, 0x40001, 0x804c}, [@IFLA_NET_NS_PID={0x8, 0x13, r2}]}, 0x28}, 0x1, 0x0, 0x5865}, 0x0) 728.638202ms ago: executing program 3 (id=5573): syz_socket_connect_nvme_tcp() r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') ioctl$BTRFS_IOC_ADD_DEV(r0, 0xb701, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000040), 0x0) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000003000000090001"], 0x2c}}, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="0200000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240), 0xfff, r6}, 0x38) bind$l2tp6(r4, &(0x7f0000000080)={0xa, 0x0, 0x7, @remote, 0x0, 0x4}, 0x20) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000400)=[{&(0x7f0000000000)="390000001000111867090707a640400f0021ff3f31000000170a0017c3000000040037000900030001372564b758b9a64411f6bb744dc48f57", 0x39}], 0x1) 624.945064ms ago: executing program 3 (id=5574): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) writev(r1, &(0x7f0000006380)=[{&(0x7f0000007480)="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", 0x63b}], 0x1) (async) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000810000001b"]) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000008400004803c0001800a0001006d617463680000002c0002800d000100636f6e6e6d61726b0000000010000300a62a1a4094b2c56d78942e9708000240000000010900020073797a32000000000900010073797a300000000014000000110001"], 0x94}}, 0x0) (async) syz_emit_ethernet(0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaa000000000000000d004500000000849078ac2414bbac1414bbf2dfbc81cfe0ca1b360883fff0380bc500000000c1ee77806b494d720c0e74e2fdc2708db74b1792028abea7abb9703a6a84abefac"], 0x0) 624.567236ms ago: executing program 3 (id=5576): r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x9, 0xfffffffe, 0x0, 0x2}, 0x10) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff80700000001000000000000060500080002000000", 0x24) 546.991326ms ago: executing program 3 (id=5577): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f0000000240)=0x3b, 0x4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0xf, [0x7, 0x8, 0x5, 0x7, 0x8, 0x6, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0x3, 0x4a732f64, 0x1001, 0x8, 0xd, 0x4, 0x12a3, 0x6ca35c61, 0x4, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x0, 0x10000, 0x0, 0x91, 0x10, 0x4, 0x16, 0x2, 0x6, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0xfff, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0x5, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x0, 0x1000, 0xfffff801, 0x5], [0xfffffffe, 0xfffffffe, 0xffff, 0xc, 0xfff, 0x2e6bf781, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x5e, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0x10, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x6, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0xe, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x7, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x81, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5339, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0xffff, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x8c400, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000140)={0x0, 0x7}, &(0x7f00000001c0)=0x8) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x440000, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r5, 0xc008ae05, &(0x7f00000003c0)={0x3, 0x0, [{0x40000001, 0x7, 0x7, 0x1000, 0x401, 0x5, 0x7ff}, {0x80000000, 0x6, 0x7, 0x116, 0x3, 0x34, 0x59f5}, {0x40000007, 0xf251, 0x3, 0x7fff, 0xc4f, 0x6, 0xffffff19}]}) r6 = socket$kcm(0x10, 0x2, 0x4) fsetxattr$security_capability(r0, &(0x7f0000000440), &(0x7f0000000540)=@v1={0x1000000, [{0x1000, 0xe18f}]}, 0xc, 0x1) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 296.068035ms ago: executing program 9 (id=5579): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000340), 0x2) memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="042ffd02ffffffffffff050800400b07000712c124cdc30d643c235d7359da9e070000004528aa51fa2d9b48e7167b55d05a1b29e5b8e5b773fcce"], 0x200) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec0800000000600", 0x15}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000005c0)="f2b314c96d500b66f7", 0x9}], 0x1}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[@hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x88, 0x29, 0x4, {0x4, 0xd, '\x00', [@calipso={0x7, 0x8, {0x1, 0x0, 0x9, 0x9f}}, @calipso={0x7, 0x40, {0x1, 0xe, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x6, 0x4, 0x400, 0xb]}}, @jumbo={0xc2, 0x4, 0x81}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}]}}}, @hopopts={{0xb0, 0x29, 0x36, {0x33, 0x12, '\x00', [@calipso={0x7, 0x18, {0x3, 0x4, 0x3, 0x7, [0x0, 0xffffffffffffff04]}}, @pad1, @pad1, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x38, {0x3, 0xc, 0x0, 0xfff, [0x4, 0x966, 0x7, 0xfffffffffffffff7, 0x1, 0xfffffffffffffe01]}}, @generic={0xff, 0x1e, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b"}, @generic={0x8}, @generic={0x1, 0x4, "2bdb86d1"}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@ipv4={'\x00', '\xff\xff', @private=0xa010101}, @mcast2]}}}], 0x1a0}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) (fail_nth: 79) 295.613601ms ago: executing program 0 (id=5580): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}}, 0xf1ffffff) 237.08749ms ago: executing program 0 (id=5581): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@newsa={0x19c, 0x16, 0x633, 0x0, 0x80000000, {{@in=@rand_addr=0x64010100, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {@in=@broadcast, 0x4d2, 0x32}, @in6=@loopback, {0x2000000}, {0x5, 0xffffffffffffffff, 0x0, 0x5}, {0x4, 0x2}, 0x6, 0x2, 0x0, 0x4, 0x18, 0x19}, [@policy={0xac, 0x7, {{@in=@loopback, @in=@remote, 0x4e23, 0x9, 0x4e23, 0xe, 0xa, 0xc0, 0x20, 0x3a}, {0x1, 0x3, 0x1, 0xfa, 0x9, 0xd2f, 0x3c, 0x8000}, {0xfffffffffffff11c, 0x81, 0x9, 0x7}, 0x4, 0x6e6bb2, 0x1, 0x1, 0x0, 0x3}}]}, 0x19c}}, 0x0) 70.655616ms ago: executing program 0 (id=5582): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x800004, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r0, &(0x7f0000000100)="826bf66fcd0df08c433940d6d97c568290edc21365868a76", 0x18, 0x4000000000000000, 0x0, 0x0) 70.496065ms ago: executing program 7 (id=5583): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000440)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0xb00, 0x0, 0xfd, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x60, 0x3, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x37}}}}}}}, 0x0) 70.269876ms ago: executing program 0 (id=5584): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x28}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r0 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) readv(r2, &(0x7f0000000040)=[{&(0x7f0000004980)=""/4096, 0x1000}, {&(0x7f0000000000)=""/45, 0x2d}], 0x2) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r1, 0x0, 0x0, 0x800) recvmsg(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x40) madvise(&(0x7f0000646000/0x3000)=nil, 0x3000, 0x64) madvise(&(0x7f0000ae6000/0x4000)=nil, 0x4000, 0x14) mremap(&(0x7f000080c000/0x3000)=nil, 0x3000, 0x4000, 0x7, &(0x7f0000925000/0x4000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 4.675281ms ago: executing program 7 (id=5585): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000200)={0xfc, {"a2e3ad0e090d07f91b5e1a1887f70706d038e7ff7fc6e5539b203c4f8b089b3f32356c030890e0879b0af8c6e70a9b334a959b6696048ed30af3988f7ef319520100ffe8d178708c523c921b1b5b31070d0773090acd3b78130daa61d8e8040000dd5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b5d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c309bd6d62d1c39b0927271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be72fb2ff7949d1f416e56c71b1931870262f5e801119242ca026bfcc21e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c088244ec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a605608057228652d9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f109000000bb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae1b9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982c04000000000000005c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80c1ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843ddbd8db411d8fe995354bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59658bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227fff72de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d25a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939b5fdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b726d5ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e240100c0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f7524e2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458ffff5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945fc83d38a155d5284edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff51cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1e9aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295bf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e542ccea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000", 0x1000}}, 0x1006) 3.602214ms ago: executing program 3 (id=5586): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000100)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b87a000f00d80f300f300fc79d53bf0000c4b9e16dc30101220f01c3", 0x64}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f00000008c0)={0x1, 0x0, {[0x101, 0x9, 0x6, 0xc1, 0x7, 0x9, 0x2, 0x5]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000380)={@random="7d85f8fd07e9", @local, @val={@val={0x88a8, 0x5, 0x0, 0x3}, {0x8100, 0x1, 0x0, 0x3}}, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, @mcast2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @loopback}}}}, &(0x7f0000000040)={0x0, 0x2, [0xc53, 0x745, 0xd91, 0x53d]}) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f00000002c0)={r0, &(0x7f00000000c0)='\xaa\xaa\xaa\xaa\xaa', 0x100, &(0x7f0000000200)={@align=0x80000000, {0xb169, 0x1, 0x10001, 0xff}}, 0x4, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000280)}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f0000000340)=r4) 3.469226ms ago: executing program 0 (id=5587): syz_emit_ethernet(0x3e, &(0x7f00000004c0)={@local, @random="6cf6566994c6", @val={@void}, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x2d, 0x2c, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local, {[@rr={0x7, 0x3, 0x9}]}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x20}}}}}}, 0x0) 199.006µs ago: executing program 0 (id=5588): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x8000000, 0xfffffffe, 0x10001, 0xfffffffd, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x2, '\x00', 0xb}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x6, 0x2, 0xf5, '\x00', 0xf}, {0x1, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x4, 0x53, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x4, 0xc}, {0x7f, 0x5, 0xb, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x7, '\x00', 0xdc}, {0x40, 0x1, 0x5, '\x00', 0x1}, {0xfe, 0x3, 0x26}, {0xcb, 0x3, 0x1, '\x00', 0x6}, {0xf, 0xee, 0xa, '\x00', 0x3}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x8}, {0x5, 0xc, 0x5, '\x00', 0xc}, {0x7, 0x1, 0x7}, {0x0, 0x80, 0x1, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4}]}}) 0s ago: executing program 7 (id=5589): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r2, 0x4004e502, 0x0) ioctl$MEDIA_IOC_DEVICE_INFO(r0, 0xc1007c00, &(0x7f0000000300)) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, &(0x7f0000000080)={0x1c0980928, 0x101, "21234e08a42be8f30c56a68f3a8b3d06f842b27fa0e919d9d579cc1f93c60300", 0x6c90, 0x10010000, 0x0, 0x0, 0x4ff, 0x1e8, 0x10, 0x9887, [0x400, 0x10000, 0x0, 0xfffffffe]}) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYRESHEX=r0], 0x64}, 0x1, 0x0, 0x0, 0x40c1}, 0x404c041) kernel console output (not intermixed with test programs): vcpu_ioctl+0x730/0x1730 [ 422.359000][T21262] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 422.359025][T21262] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 422.359050][T21262] ? do_vfs_ioctl+0x226/0x13e0 [ 422.359074][T21262] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 422.359098][T21262] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 422.359127][T21262] ? __fget_files+0x215/0x3d0 [ 422.359142][T21262] ? hook_file_ioctl_common+0x146/0x410 [ 422.359172][T21262] ? selinux_file_ioctl+0x139/0x290 [ 422.359190][T21262] ? selinux_file_ioctl+0xb4/0x290 [ 422.359210][T21262] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 422.359236][T21262] __x64_sys_ioctl+0x18e/0x210 [ 422.359261][T21262] do_syscall_64+0x106/0xf80 [ 422.359278][T21262] ? clear_bhb_loop+0x40/0x90 [ 422.359300][T21262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.359317][T21262] RIP: 0033:0x7fd0b7b9c629 [ 422.359333][T21262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 422.359349][T21262] RSP: 002b:00007fd0b8ab2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 422.359366][T21262] RAX: ffffffffffffffda RBX: 00007fd0b7e15fa0 RCX: 00007fd0b7b9c629 [ 422.359378][T21262] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 422.359388][T21262] RBP: 00007fd0b8ab2090 R08: 0000000000000000 R09: 0000000000000000 [ 422.359398][T21262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 422.359409][T21262] R13: 00007fd0b7e16038 R14: 00007fd0b7e15fa0 R15: 00007ffe27ec0de8 [ 422.359433][T21262] [ 422.363029][T21257] FAULT_INJECTION: forcing a failure. [ 422.363029][T21257] name failslab, interval 1, probability 0, space 0, times 0 [ 422.375112][T21268] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5140'. [ 422.380394][T21257] CPU: 0 UID: 0 PID: 21257 Comm: syz.0.5135 Tainted: G L syzkaller #0 PREEMPT(full) [ 422.380413][T21257] Tainted: [L]=SOFTLOCKUP [ 422.380417][T21257] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 422.380424][T21257] Call Trace: [ 422.380428][T21257] [ 422.380433][T21257] dump_stack_lvl+0x100/0x190 [ 422.380455][T21257] should_fail_ex.cold+0x5/0xa [ 422.380470][T21257] should_failslab+0xc2/0x120 [ 422.380488][T21257] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 422.380502][T21257] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 422.380522][T21257] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 422.380543][T21257] mmu_topup_memory_caches+0x25/0x170 [ 422.380556][T21257] kvm_mmu_load+0xd6/0x23e0 [ 422.380568][T21257] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 422.380584][T21257] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 422.380601][T21257] ? __pfx_kvm_mmu_load+0x10/0x10 [ 422.380612][T21257] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 422.380631][T21257] ? kvm_check_and_inject_events+0x961/0x10c0 [ 422.380643][T21257] ? record_steal_time+0x430/0xbe0 [ 422.380660][T21257] vcpu_run+0x39f4/0x5ca0 [ 422.380678][T21257] ? __pfx_vcpu_run+0x10/0x10 [ 422.380695][T21257] ? rcu_is_watching+0x12/0xc0 [ 422.380710][T21257] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 422.380723][T21257] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 422.380741][T21257] kvm_vcpu_ioctl+0x730/0x1730 [ 422.380765][T21257] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 422.380784][T21257] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 422.380800][T21257] ? do_vfs_ioctl+0x226/0x13e0 [ 422.380818][T21257] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 422.380840][T21257] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 422.380872][T21257] ? __fget_files+0x215/0x3d0 [ 422.380886][T21257] ? hook_file_ioctl_common+0x146/0x410 [ 422.380913][T21257] ? selinux_file_ioctl+0x139/0x290 [ 422.380925][T21257] ? selinux_file_ioctl+0xb4/0x290 [ 422.380938][T21257] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 422.380955][T21257] __x64_sys_ioctl+0x18e/0x210 [ 422.380972][T21257] do_syscall_64+0x106/0xf80 [ 422.380984][T21257] ? clear_bhb_loop+0x40/0x90 [ 422.381000][T21257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.381017][T21257] RIP: 0033:0x7fa16919c629 [ 422.381031][T21257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 422.381047][T21257] RSP: 002b:00007fa169ff4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 422.381063][T21257] RAX: ffffffffffffffda RBX: 00007fa169415fa0 RCX: 00007fa16919c629 [ 422.381074][T21257] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 422.381084][T21257] RBP: 00007fa169ff4090 R08: 0000000000000000 R09: 0000000000000000 [ 422.381094][T21257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 422.381104][T21257] R13: 00007fa169416038 R14: 00007fa169415fa0 R15: 00007ffeb80b8678 [ 422.381127][T21257] [ 422.746094][T21278] netlink: 'syz.3.5143': attribute type 10 has an invalid length. [ 422.749706][T21278] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5143'. [ 422.849455][ T5934] Bluetooth: hci0: SCO packet for unknown connection handle 1 [ 422.851966][ T5934] Bluetooth: hci0: Ignoring connect complete event for invalid link type [ 422.973851][T21305] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5153'. [ 422.980656][T21305] netlink: 9 bytes leftover after parsing attributes in process `syz.9.5153'. [ 423.020728][T21311] netlink: 40 bytes leftover after parsing attributes in process `syz.9.5156'. [ 423.121845][T21319] netlink: 'syz.3.5160': attribute type 4 has an invalid length. [ 423.207531][ T5934] Bluetooth: hci0: command tx timeout [ 423.208895][ T39] usb 12-1: new full-speed USB device number 37 using dummy_hcd [ 423.236980][T21326] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5162'. [ 423.260498][ T40] audit: type=1400 audit(2000000084.169:996): avc: denied { create } for pid=21322 comm="syz.3.5162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 423.292711][T21326] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1280 sclass=netlink_route_socket pid=21326 comm=syz.3.5162 [ 423.297654][ T40] audit: type=1400 audit(2000000084.209:997): avc: denied { ioctl } for pid=21322 comm="syz.3.5162" path="socket:[128156]" dev="sockfs" ino=128156 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 423.379760][ T39] usb 12-1: config 0 has an invalid interface number: 251 but max is 0 [ 423.383074][ T39] usb 12-1: config 0 has no interface number 0 [ 423.385230][ T39] usb 12-1: config 0 interface 251 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 423.390008][ T39] usb 12-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 423.392747][ T39] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.395194][ T39] usb 12-1: Product: syz [ 423.396673][ T39] usb 12-1: Manufacturer: syz [ 423.398398][ T39] usb 12-1: SerialNumber: syz [ 423.401351][ T39] usb 12-1: config 0 descriptor?? [ 423.408142][ T39] asix 12-1:0.251: probe with driver asix failed with error -22 [ 423.500059][ T5934] Bluetooth: hci2: SCO packet for unknown connection handle 1 [ 423.501910][ T5934] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 423.753885][ T5934] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 424.010405][T21389] random: crng reseeded on system resumption [ 424.022187][T21389] Restarting kernel threads ... [ 424.024549][T21389] Done restarting kernel threads. [ 424.034695][T21397] block nbd0: not configured, cannot reconfigure [ 424.070693][ T40] audit: type=1400 audit(2000000084.979:998): avc: denied { read } for pid=21398 comm="syz.0.5187" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 424.073659][T21401] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=21401 comm=syz.0.5187 [ 424.081914][ T40] audit: type=1400 audit(2000000084.979:999): avc: denied { open } for pid=21398 comm="syz.0.5187" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 424.097565][ T40] audit: type=1400 audit(2000000084.979:1000): avc: denied { ioctl } for pid=21398 comm="syz.0.5187" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 424.153073][T21406] FAULT_INJECTION: forcing a failure. [ 424.153073][T21406] name failslab, interval 1, probability 0, space 0, times 0 [ 424.156882][T21406] CPU: 0 UID: 0 PID: 21406 Comm: syz.3.5190 Tainted: G L syzkaller #0 PREEMPT(full) [ 424.156901][T21406] Tainted: [L]=SOFTLOCKUP [ 424.156905][T21406] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 424.156912][T21406] Call Trace: [ 424.156917][T21406] [ 424.156921][T21406] dump_stack_lvl+0x100/0x190 [ 424.156943][T21406] should_fail_ex.cold+0x5/0xa [ 424.156958][T21406] should_failslab+0xc2/0x120 [ 424.156976][T21406] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 424.156990][T21406] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 424.157011][T21406] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 424.157032][T21406] mmu_topup_memory_caches+0x25/0x170 [ 424.157046][T21406] kvm_mmu_load+0xd6/0x23e0 [ 424.157057][T21406] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 424.157072][T21406] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 424.157089][T21406] ? __pfx_kvm_mmu_load+0x10/0x10 [ 424.157100][T21406] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 424.157117][T21406] ? kvm_check_and_inject_events+0x961/0x10c0 [ 424.157130][T21406] ? record_steal_time+0x430/0xbe0 [ 424.157148][T21406] vcpu_run+0x39f4/0x5ca0 [ 424.157165][T21406] ? __pfx_vcpu_run+0x10/0x10 [ 424.157183][T21406] ? rcu_is_watching+0x12/0xc0 [ 424.157198][T21406] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 424.157211][T21406] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 424.157228][T21406] kvm_vcpu_ioctl+0x730/0x1730 [ 424.157245][T21406] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 424.157262][T21406] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 424.157290][T21406] ? do_vfs_ioctl+0x226/0x13e0 [ 424.157308][T21406] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 424.157324][T21406] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 424.157341][T21406] ? __fget_files+0x215/0x3d0 [ 424.157351][T21406] ? hook_file_ioctl_common+0x146/0x410 [ 424.157369][T21406] ? selinux_file_ioctl+0x139/0x290 [ 424.157381][T21406] ? selinux_file_ioctl+0xb4/0x290 [ 424.157394][T21406] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 424.157411][T21406] __x64_sys_ioctl+0x18e/0x210 [ 424.157427][T21406] do_syscall_64+0x106/0xf80 [ 424.157439][T21406] ? clear_bhb_loop+0x40/0x90 [ 424.157453][T21406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.157465][T21406] RIP: 0033:0x7ff9ff39c629 [ 424.157475][T21406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 424.157486][T21406] RSP: 002b:00007ffa00203028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 424.157498][T21406] RAX: ffffffffffffffda RBX: 00007ff9ff615fa0 RCX: 00007ff9ff39c629 [ 424.157505][T21406] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000b [ 424.157512][T21406] RBP: 00007ffa00203090 R08: 0000000000000000 R09: 0000000000000000 [ 424.157518][T21406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 424.157525][T21406] R13: 00007ff9ff616038 R14: 00007ff9ff615fa0 R15: 00007fff06082378 [ 424.157563][T21406] [ 424.421215][T21424] FAULT_INJECTION: forcing a failure. [ 424.421215][T21424] name failslab, interval 1, probability 0, space 0, times 0 [ 424.425268][T21424] CPU: 0 UID: 0 PID: 21424 Comm: syz.0.5194 Tainted: G L syzkaller #0 PREEMPT(full) [ 424.425286][T21424] Tainted: [L]=SOFTLOCKUP [ 424.425290][T21424] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 424.425297][T21424] Call Trace: [ 424.425301][T21424] [ 424.425306][T21424] dump_stack_lvl+0x100/0x190 [ 424.425327][T21424] should_fail_ex.cold+0x5/0xa [ 424.425342][T21424] should_failslab+0xc2/0x120 [ 424.425361][T21424] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 424.425375][T21424] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 424.425396][T21424] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 424.425417][T21424] mmu_topup_memory_caches+0x25/0x170 [ 424.425430][T21424] kvm_mmu_load+0xd6/0x23e0 [ 424.425442][T21424] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 424.425457][T21424] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 424.425474][T21424] ? __pfx_kvm_mmu_load+0x10/0x10 [ 424.425485][T21424] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 424.425503][T21424] ? kvm_check_and_inject_events+0x961/0x10c0 [ 424.425515][T21424] ? record_steal_time+0x430/0xbe0 [ 424.425560][T21424] vcpu_run+0x39f4/0x5ca0 [ 424.425580][T21424] ? __pfx_vcpu_run+0x10/0x10 [ 424.425597][T21424] ? rcu_is_watching+0x12/0xc0 [ 424.425612][T21424] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 424.425625][T21424] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 424.425642][T21424] kvm_vcpu_ioctl+0x730/0x1730 [ 424.425659][T21424] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 424.425676][T21424] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 424.425692][T21424] ? do_vfs_ioctl+0x226/0x13e0 [ 424.425707][T21424] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 424.425723][T21424] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 424.425741][T21424] ? __fget_files+0x215/0x3d0 [ 424.425750][T21424] ? hook_file_ioctl_common+0x146/0x410 [ 424.425769][T21424] ? selinux_file_ioctl+0x139/0x290 [ 424.425780][T21424] ? selinux_file_ioctl+0xb4/0x290 [ 424.425793][T21424] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 424.425812][T21424] __x64_sys_ioctl+0x18e/0x210 [ 424.425828][T21424] do_syscall_64+0x106/0xf80 [ 424.425840][T21424] ? clear_bhb_loop+0x40/0x90 [ 424.425854][T21424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.425870][T21424] RIP: 0033:0x7fa16919c629 [ 424.425886][T21424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 424.425904][T21424] RSP: 002b:00007fa169fd3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 424.425923][T21424] RAX: ffffffffffffffda RBX: 00007fa169416090 RCX: 00007fa16919c629 [ 424.425936][T21424] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 424.425946][T21424] RBP: 00007fa169fd3090 R08: 0000000000000000 R09: 0000000000000000 [ 424.425958][T21424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 424.425968][T21424] R13: 00007fa169416128 R14: 00007fa169416090 R15: 00007ffeb80b8678 [ 424.425986][T21424] [ 424.640644][T21429] netlink: 'syz.9.5196': attribute type 10 has an invalid length. [ 424.806468][T21445] netlink: 'syz.9.5203': attribute type 4 has an invalid length. [ 424.937641][ T5934] Bluetooth: hci5: SCO packet for unknown connection handle 1 [ 424.943992][ T5934] Bluetooth: hci5: Ignoring connect complete event for invalid link type [ 425.059197][T10141] bridge_slave_1: left allmulticast mode [ 425.061033][T10141] bridge_slave_1: left promiscuous mode [ 425.062958][T10141] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.077061][T10141] bridge_slave_0: left allmulticast mode [ 425.079324][T10141] bridge_slave_0: left promiscuous mode [ 425.081202][T10141] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.093985][ T40] audit: type=1400 audit(2000000085.999:1001): avc: denied { execute } for pid=21473 comm="syz.0.5216" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 425.134161][ T40] audit: type=1400 audit(2000000086.039:1002): avc: denied { listen } for pid=21476 comm="syz.0.5217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 425.240991][T10141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 425.249837][T10141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 425.254160][T10141] bond0 (unregistering): Released all slaves [ 425.411571][T21496] __nla_validate_parse: 6 callbacks suppressed [ 425.411590][T21496] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5223'. [ 425.415698][ T40] audit: type=1400 audit(2000000086.319:1003): avc: denied { map } for pid=21497 comm="syz.9.5224" path="socket:[129519]" dev="sockfs" ino=129519 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 425.425681][ T40] audit: type=1400 audit(2000000086.319:1004): avc: denied { accept } for pid=21497 comm="syz.9.5224" path="socket:[129519]" dev="sockfs" ino=129519 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 425.597612][T10141] hsr_slave_0: left promiscuous mode [ 425.610380][T10141] hsr_slave_1: left promiscuous mode [ 425.613679][T10141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 425.628016][T10141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 425.765996][T10141] team0 (unregistering): Port device team_slave_1 removed [ 425.784788][T10141] team0 (unregistering): Port device team_slave_0 removed [ 425.838443][T21518] netlink: 'syz.9.5230': attribute type 19 has an invalid length. [ 426.014668][ T10] usb 12-1: USB disconnect, device number 37 [ 426.132390][T21533] block nbd0: not configured, cannot reconfigure [ 426.370753][T21554] FAULT_INJECTION: forcing a failure. [ 426.370753][T21554] name failslab, interval 1, probability 0, space 0, times 0 [ 426.375596][T21554] CPU: 0 UID: 0 PID: 21554 Comm: syz.3.5245 Tainted: G L syzkaller #0 PREEMPT(full) [ 426.375615][T21554] Tainted: [L]=SOFTLOCKUP [ 426.375619][T21554] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 426.375625][T21554] Call Trace: [ 426.375630][T21554] [ 426.375635][T21554] dump_stack_lvl+0x100/0x190 [ 426.375656][T21554] should_fail_ex.cold+0x5/0xa [ 426.375671][T21554] should_failslab+0xc2/0x120 [ 426.375689][T21554] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 426.375703][T21554] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 426.375724][T21554] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 426.375747][T21554] mmu_topup_memory_caches+0x25/0x170 [ 426.375761][T21554] kvm_mmu_load+0xd6/0x23e0 [ 426.375772][T21554] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 426.375787][T21554] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 426.375805][T21554] ? __pfx_kvm_mmu_load+0x10/0x10 [ 426.375815][T21554] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 426.375833][T21554] ? kvm_check_and_inject_events+0x961/0x10c0 [ 426.375845][T21554] ? record_steal_time+0x430/0xbe0 [ 426.375862][T21554] vcpu_run+0x39f4/0x5ca0 [ 426.375880][T21554] ? __pfx_vcpu_run+0x10/0x10 [ 426.375905][T21554] ? rcu_is_watching+0x12/0xc0 [ 426.375924][T21554] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 426.375942][T21554] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 426.375964][T21554] kvm_vcpu_ioctl+0x730/0x1730 [ 426.375981][T21554] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 426.375998][T21554] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 426.376014][T21554] ? do_vfs_ioctl+0x226/0x13e0 [ 426.376030][T21554] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 426.376045][T21554] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 426.376063][T21554] ? __fget_files+0x215/0x3d0 [ 426.376073][T21554] ? hook_file_ioctl_common+0x146/0x410 [ 426.376091][T21554] ? selinux_file_ioctl+0x139/0x290 [ 426.376103][T21554] ? selinux_file_ioctl+0xb4/0x290 [ 426.376116][T21554] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 426.376132][T21554] __x64_sys_ioctl+0x18e/0x210 [ 426.376149][T21554] do_syscall_64+0x106/0xf80 [ 426.376161][T21554] ? clear_bhb_loop+0x40/0x90 [ 426.376175][T21554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.376186][T21554] RIP: 0033:0x7ff9ff39c629 [ 426.376196][T21554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 426.376207][T21554] RSP: 002b:00007ffa00203028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 426.376219][T21554] RAX: ffffffffffffffda RBX: 00007ff9ff615fa0 RCX: 00007ff9ff39c629 [ 426.376226][T21554] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000b [ 426.376232][T21554] RBP: 00007ffa00203090 R08: 0000000000000000 R09: 0000000000000000 [ 426.376239][T21554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 426.376245][T21554] R13: 00007ff9ff616038 R14: 00007ff9ff615fa0 R15: 00007fff06082378 [ 426.376259][T21554] [ 426.550759][T21569] netlink: 'syz.7.5248': attribute type 10 has an invalid length. [ 426.553303][T21569] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5248'. [ 426.642471][T21572] FAULT_INJECTION: forcing a failure. [ 426.642471][T21572] name failslab, interval 1, probability 0, space 0, times 0 [ 426.646451][T21572] CPU: 2 UID: 0 PID: 21572 Comm: syz.7.5249 Tainted: G L syzkaller #0 PREEMPT(full) [ 426.646469][T21572] Tainted: [L]=SOFTLOCKUP [ 426.646473][T21572] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 426.646480][T21572] Call Trace: [ 426.646484][T21572] [ 426.646489][T21572] dump_stack_lvl+0x100/0x190 [ 426.646511][T21572] should_fail_ex.cold+0x5/0xa [ 426.646526][T21572] should_failslab+0xc2/0x120 [ 426.646544][T21572] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 426.646559][T21572] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 426.646580][T21572] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 426.646601][T21572] mmu_topup_memory_caches+0x25/0x170 [ 426.646614][T21572] kvm_mmu_load+0xd6/0x23e0 [ 426.646625][T21572] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 426.646640][T21572] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 426.646658][T21572] ? __pfx_kvm_mmu_load+0x10/0x10 [ 426.646669][T21572] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 426.646686][T21572] ? kvm_check_and_inject_events+0x961/0x10c0 [ 426.646698][T21572] ? record_steal_time+0x430/0xbe0 [ 426.646716][T21572] vcpu_run+0x39f4/0x5ca0 [ 426.646734][T21572] ? __pfx_vcpu_run+0x10/0x10 [ 426.646755][T21572] ? rcu_is_watching+0x12/0xc0 [ 426.646770][T21572] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 426.646783][T21572] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 426.646800][T21572] kvm_vcpu_ioctl+0x730/0x1730 [ 426.646817][T21572] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 426.646834][T21572] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 426.646850][T21572] ? do_vfs_ioctl+0x226/0x13e0 [ 426.646866][T21572] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 426.646881][T21572] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 426.646898][T21572] ? __fget_files+0x215/0x3d0 [ 426.646908][T21572] ? hook_file_ioctl_common+0x146/0x410 [ 426.646926][T21572] ? selinux_file_ioctl+0x139/0x290 [ 426.646938][T21572] ? selinux_file_ioctl+0xb4/0x290 [ 426.646950][T21572] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 426.646967][T21572] __x64_sys_ioctl+0x18e/0x210 [ 426.646984][T21572] do_syscall_64+0x106/0xf80 [ 426.646995][T21572] ? clear_bhb_loop+0x40/0x90 [ 426.647010][T21572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.647021][T21572] RIP: 0033:0x7f201a99c629 [ 426.647032][T21572] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 426.647043][T21572] RSP: 002b:00007f201b796028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 426.647055][T21572] RAX: ffffffffffffffda RBX: 00007f201ac15fa0 RCX: 00007f201a99c629 [ 426.647062][T21572] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 426.647069][T21572] RBP: 00007f201b796090 R08: 0000000000000000 R09: 0000000000000000 [ 426.647075][T21572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 426.647082][T21572] R13: 00007f201ac16038 R14: 00007f201ac15fa0 R15: 00007ffe0266e788 [ 426.647096][T21572] [ 426.738998][ T5933] Bluetooth: hci2: SCO packet for unknown connection handle 1 [ 426.742211][ T5933] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 426.899479][T21583] FAULT_INJECTION: forcing a failure. [ 426.899479][T21583] name failslab, interval 1, probability 0, space 0, times 0 [ 426.904482][T21583] CPU: 3 UID: 0 PID: 21583 Comm: syz.0.5254 Tainted: G L syzkaller #0 PREEMPT(full) [ 426.904510][T21583] Tainted: [L]=SOFTLOCKUP [ 426.904517][T21583] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 426.904527][T21583] Call Trace: [ 426.904534][T21583] [ 426.904542][T21583] dump_stack_lvl+0x100/0x190 [ 426.904575][T21583] should_fail_ex.cold+0x5/0xa [ 426.904600][T21583] should_failslab+0xc2/0x120 [ 426.904627][T21583] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 426.904650][T21583] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 426.904682][T21583] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 426.904717][T21583] mmu_topup_memory_caches+0x25/0x170 [ 426.904738][T21583] kvm_mmu_load+0xd6/0x23e0 [ 426.904755][T21583] ? vmx_flush_tlb_guest+0x113/0x560 [ 426.904780][T21583] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 426.904803][T21583] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 426.904836][T21583] ? __pfx_kvm_mmu_load+0x10/0x10 [ 426.904853][T21583] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 426.904880][T21583] ? kvm_check_and_inject_events+0x961/0x10c0 [ 426.904900][T21583] ? record_steal_time+0x430/0xbe0 [ 426.904927][T21583] vcpu_run+0x39f4/0x5ca0 [ 426.904956][T21583] ? __pfx_vcpu_run+0x10/0x10 [ 426.904984][T21583] ? rcu_is_watching+0x12/0xc0 [ 426.905007][T21583] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 426.905027][T21583] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 426.905054][T21583] kvm_vcpu_ioctl+0x730/0x1730 [ 426.905083][T21583] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 426.905108][T21583] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 426.905133][T21583] ? do_vfs_ioctl+0x226/0x13e0 [ 426.905157][T21583] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 426.905180][T21583] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 426.905209][T21583] ? __fget_files+0x215/0x3d0 [ 426.905225][T21583] ? hook_file_ioctl_common+0x146/0x410 [ 426.905255][T21583] ? selinux_file_ioctl+0x139/0x290 [ 426.905273][T21583] ? selinux_file_ioctl+0xb4/0x290 [ 426.905293][T21583] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 426.905319][T21583] __x64_sys_ioctl+0x18e/0x210 [ 426.905344][T21583] do_syscall_64+0x106/0xf80 [ 426.905362][T21583] ? clear_bhb_loop+0x40/0x90 [ 426.905384][T21583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.905402][T21583] RIP: 0033:0x7fa16919c629 [ 426.905418][T21583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 426.905434][T21583] RSP: 002b:00007fa169ff4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 426.905451][T21583] RAX: ffffffffffffffda RBX: 00007fa169415fa0 RCX: 00007fa16919c629 [ 426.905463][T21583] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 426.905473][T21583] RBP: 00007fa169ff4090 R08: 0000000000000000 R09: 0000000000000000 [ 426.905483][T21583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 426.905493][T21583] R13: 00007fa169416038 R14: 00007fa169415fa0 R15: 00007ffeb80b8678 [ 426.905544][T21583] [ 427.105713][T21598] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5259'. [ 427.110143][T21598] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5259'. [ 427.131250][T21598] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5259'. [ 427.131256][T10145] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 427.134948][T21598] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5259'. [ 427.145782][ T5286] Bluetooth: hci0: SCO packet for unknown connection handle 1 [ 427.145901][ T5286] Bluetooth: hci0: Ignoring connect complete event for invalid link type [ 427.159610][T10145] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 427.163313][T10145] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 427.167005][T10145] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 427.200783][T21607] FAULT_INJECTION: forcing a failure. [ 427.200783][T21607] name failslab, interval 1, probability 0, space 0, times 0 [ 427.206663][T21607] CPU: 2 UID: 0 PID: 21607 Comm: syz.9.5263 Tainted: G L syzkaller #0 PREEMPT(full) [ 427.206683][T21607] Tainted: [L]=SOFTLOCKUP [ 427.206687][T21607] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 427.206694][T21607] Call Trace: [ 427.206698][T21607] [ 427.206704][T21607] dump_stack_lvl+0x100/0x190 [ 427.206726][T21607] should_fail_ex.cold+0x5/0xa [ 427.206740][T21607] should_failslab+0xc2/0x120 [ 427.206759][T21607] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 427.206774][T21607] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 427.206794][T21607] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 427.206816][T21607] mmu_topup_memory_caches+0x25/0x170 [ 427.206829][T21607] kvm_mmu_load+0xd6/0x23e0 [ 427.206840][T21607] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 427.206856][T21607] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 427.206873][T21607] ? __pfx_kvm_mmu_load+0x10/0x10 [ 427.206884][T21607] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 427.206902][T21607] ? kvm_check_and_inject_events+0x961/0x10c0 [ 427.206914][T21607] ? record_steal_time+0x430/0xbe0 [ 427.206931][T21607] vcpu_run+0x39f4/0x5ca0 [ 427.206949][T21607] ? __pfx_vcpu_run+0x10/0x10 [ 427.206967][T21607] ? rcu_is_watching+0x12/0xc0 [ 427.206982][T21607] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 427.206995][T21607] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 427.207012][T21607] kvm_vcpu_ioctl+0x730/0x1730 [ 427.207029][T21607] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 427.207046][T21607] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 427.207062][T21607] ? do_vfs_ioctl+0x226/0x13e0 [ 427.207078][T21607] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 427.207093][T21607] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 427.207111][T21607] ? __fget_files+0x215/0x3d0 [ 427.207121][T21607] ? hook_file_ioctl_common+0x146/0x410 [ 427.207140][T21607] ? selinux_file_ioctl+0x139/0x290 [ 427.207151][T21607] ? selinux_file_ioctl+0xb4/0x290 [ 427.207164][T21607] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 427.207181][T21607] __x64_sys_ioctl+0x18e/0x210 [ 427.207198][T21607] do_syscall_64+0x106/0xf80 [ 427.207210][T21607] ? clear_bhb_loop+0x40/0x90 [ 427.207224][T21607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.207235][T21607] RIP: 0033:0x7fd0b7b9c629 [ 427.207246][T21607] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 427.207257][T21607] RSP: 002b:00007fd0b8ab2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 427.207268][T21607] RAX: ffffffffffffffda RBX: 00007fd0b7e15fa0 RCX: 00007fd0b7b9c629 [ 427.207275][T21607] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 427.207296][T21607] RBP: 00007fd0b8ab2090 R08: 0000000000000000 R09: 0000000000000000 [ 427.207303][T21607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 427.207310][T21607] R13: 00007fd0b7e16038 R14: 00007fd0b7e15fa0 R15: 00007ffe27ec0de8 [ 427.207325][T21607] [ 427.251793][T21613] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 427.251793][T21613] The task syz.7.5265 (21613) triggered the difference, watch for misbehavior. [ 427.278984][T21615] dummy0: entered allmulticast mode [ 427.340705][T21615] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21615 comm=syz.3.5266 [ 427.359066][T21615] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=9167 sclass=netlink_xfrm_socket pid=21615 comm=syz.3.5266 [ 427.574368][T21638] Bluetooth: hci2: SCO packet for unknown connection handle 1 [ 427.575994][T21638] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 427.608496][ T10] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 427.674664][ T40] audit: type=1400 audit(2000000088.569:1005): avc: denied { setopt } for pid=21652 comm="syz.9.5276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 427.749263][T21662] 8021q: adding VLAN 0 to HW filter on device bond0 [ 427.768815][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 427.773446][ T10] usb 8-1: config index 0 descriptor too short (expected 29285, got 863) [ 427.777103][ T10] usb 8-1: config 105 has too many interfaces: 115, using maximum allowed: 32 [ 427.781393][ T10] usb 8-1: config 105 has an invalid descriptor of length 0, skipping remainder of the config [ 427.792978][ T10] usb 8-1: config 105 has 0 interfaces, different from the descriptor's value: 115 [ 427.804096][ T10] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 427.809317][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.812908][ T10] usb 8-1: Product: syz [ 427.814494][ T10] usb 8-1: Manufacturer: syz [ 427.816443][ T10] usb 8-1: SerialNumber: syz [ 427.986700][T21638] Bluetooth: hci5: SCO packet for unknown connection handle 1 [ 427.990161][T21638] Bluetooth: hci5: Ignoring connect complete event for invalid link type [ 428.050458][ T10] usb 8-1: USB disconnect, device number 18 [ 428.084991][T21614] dummy0: left allmulticast mode [ 428.237400][T19708] usb 14-1: new high-speed USB device number 7 using dummy_hcd [ 428.337479][T21638] Bluetooth: hci1: command 0x0406 tx timeout [ 428.389149][T19708] usb 14-1: config 0 has no interfaces? [ 428.393520][T19708] usb 14-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 428.397249][T19708] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.401198][T19708] usb 14-1: Product: syz [ 428.402755][T19708] usb 14-1: Manufacturer: syz [ 428.404463][T19708] usb 14-1: SerialNumber: syz [ 428.412431][T19708] usb 14-1: config 0 descriptor?? [ 428.635861][T19708] usb 14-1: USB disconnect, device number 7 [ 428.655318][T21736] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5296'. [ 428.967666][T21638] Bluetooth: hci0: command 0x0406 tx timeout [ 429.200456][T21718] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 429.274143][T21761] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5302'. [ 429.284485][T21763] FAULT_INJECTION: forcing a failure. [ 429.284485][T21763] name failslab, interval 1, probability 0, space 0, times 0 [ 429.290359][T21763] CPU: 0 UID: 0 PID: 21763 Comm: syz.9.5300 Tainted: G L syzkaller #0 PREEMPT(full) [ 429.290388][T21763] Tainted: [L]=SOFTLOCKUP [ 429.290396][T21763] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 429.290406][T21763] Call Trace: [ 429.290412][T21763] [ 429.290421][T21763] dump_stack_lvl+0x100/0x190 [ 429.290452][T21763] should_fail_ex.cold+0x5/0xa [ 429.290478][T21763] should_failslab+0xc2/0x120 [ 429.290514][T21763] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 429.290536][T21763] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 429.290569][T21763] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 429.290602][T21763] mmu_topup_memory_caches+0x25/0x170 [ 429.290623][T21763] kvm_mmu_load+0xd6/0x23e0 [ 429.290644][T21763] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 429.290666][T21763] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 429.290695][T21763] ? __pfx_kvm_mmu_load+0x10/0x10 [ 429.290713][T21763] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 429.290741][T21763] ? kvm_check_and_inject_events+0x961/0x10c0 [ 429.290761][T21763] ? record_steal_time+0x430/0xbe0 [ 429.290789][T21763] vcpu_run+0x39f4/0x5ca0 [ 429.290819][T21763] ? __pfx_vcpu_run+0x10/0x10 [ 429.290863][T21763] ? rcu_is_watching+0x12/0xc0 [ 429.290887][T21763] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 429.290907][T21763] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 429.290936][T21763] kvm_vcpu_ioctl+0x730/0x1730 [ 429.290963][T21763] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 429.290987][T21763] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 429.291014][T21763] ? do_vfs_ioctl+0x226/0x13e0 [ 429.291039][T21763] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 429.291064][T21763] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 429.291090][T21763] ? __fget_files+0x215/0x3d0 [ 429.291107][T21763] ? hook_file_ioctl_common+0x146/0x410 [ 429.291137][T21763] ? selinux_file_ioctl+0x139/0x290 [ 429.291154][T21763] ? selinux_file_ioctl+0xb4/0x290 [ 429.291176][T21763] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 429.291201][T21763] __x64_sys_ioctl+0x18e/0x210 [ 429.291228][T21763] do_syscall_64+0x106/0xf80 [ 429.291246][T21763] ? clear_bhb_loop+0x40/0x90 [ 429.291266][T21763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.291283][T21763] RIP: 0033:0x7fd0b7b9c629 [ 429.291300][T21763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 429.291317][T21763] RSP: 002b:00007fd0b8a91028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 429.291335][T21763] RAX: ffffffffffffffda RBX: 00007fd0b7e16090 RCX: 00007fd0b7b9c629 [ 429.291347][T21763] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000b [ 429.291358][T21763] RBP: 00007fd0b8a91090 R08: 0000000000000000 R09: 0000000000000000 [ 429.291369][T21763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 429.291379][T21763] R13: 00007fd0b7e16128 R14: 00007fd0b7e16090 R15: 00007ffe27ec0de8 [ 429.291404][T21763] [ 429.477080][T21765] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5301'. [ 429.569576][ T5933] Bluetooth: hci5: SCO packet for unknown connection handle 1 [ 429.580097][ T5933] Bluetooth: hci5: Ignoring connect complete event for invalid link type [ 429.608230][ T5933] Bluetooth: hci2: command 0x0406 tx timeout [ 429.643036][T21778] netlink: 184 bytes leftover after parsing attributes in process `syz.7.5306'. [ 429.647772][T21778] xt_socket: unknown flags 0xd0 [ 429.726972][T21782] FAULT_INJECTION: forcing a failure. [ 429.726972][T21782] name failslab, interval 1, probability 0, space 0, times 0 [ 429.732036][T21782] CPU: 3 UID: 0 PID: 21782 Comm: syz.0.5307 Tainted: G L syzkaller #0 PREEMPT(full) [ 429.732063][T21782] Tainted: [L]=SOFTLOCKUP [ 429.732069][T21782] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 429.732080][T21782] Call Trace: [ 429.732088][T21782] [ 429.732096][T21782] dump_stack_lvl+0x100/0x190 [ 429.732143][T21782] should_fail_ex.cold+0x5/0xa [ 429.732165][T21782] should_failslab+0xc2/0x120 [ 429.732191][T21782] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 429.732214][T21782] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 429.732246][T21782] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 429.732278][T21782] mmu_topup_memory_caches+0x25/0x170 [ 429.732299][T21782] kvm_mmu_load+0xd6/0x23e0 [ 429.732316][T21782] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 429.732338][T21782] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 429.732365][T21782] ? __pfx_kvm_mmu_load+0x10/0x10 [ 429.732382][T21782] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 429.732408][T21782] ? kvm_check_and_inject_events+0x961/0x10c0 [ 429.732427][T21782] ? record_steal_time+0x430/0xbe0 [ 429.732453][T21782] vcpu_run+0x39f4/0x5ca0 [ 429.732481][T21782] ? __pfx_vcpu_run+0x10/0x10 [ 429.732509][T21782] ? rcu_is_watching+0x12/0xc0 [ 429.732532][T21782] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 429.732551][T21782] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 429.732577][T21782] kvm_vcpu_ioctl+0x730/0x1730 [ 429.732604][T21782] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 429.732628][T21782] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 429.732653][T21782] ? do_vfs_ioctl+0x226/0x13e0 [ 429.732676][T21782] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 429.732699][T21782] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 429.732739][T21782] ? __fget_files+0x215/0x3d0 [ 429.732758][T21782] ? hook_file_ioctl_common+0x146/0x410 [ 429.732787][T21782] ? selinux_file_ioctl+0x139/0x290 [ 429.732805][T21782] ? selinux_file_ioctl+0xb4/0x290 [ 429.732824][T21782] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 429.732849][T21782] __x64_sys_ioctl+0x18e/0x210 [ 429.732874][T21782] do_syscall_64+0x106/0xf80 [ 429.732900][T21782] ? clear_bhb_loop+0x40/0x90 [ 429.732922][T21782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.732939][T21782] RIP: 0033:0x7fa16919c629 [ 429.732954][T21782] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 429.732970][T21782] RSP: 002b:00007fa169ff4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 429.732988][T21782] RAX: ffffffffffffffda RBX: 00007fa169415fa0 RCX: 00007fa16919c629 [ 429.732999][T21782] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 429.733009][T21782] RBP: 00007fa169ff4090 R08: 0000000000000000 R09: 0000000000000000 [ 429.733019][T21782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 429.733029][T21782] R13: 00007fa169416038 R14: 00007fa169415fa0 R15: 00007ffeb80b8678 [ 429.733053][T21782] [ 430.160281][T21803] FAULT_INJECTION: forcing a failure. [ 430.160281][T21803] name failslab, interval 1, probability 0, space 0, times 0 [ 430.165582][T21803] CPU: 0 UID: 0 PID: 21803 Comm: syz.9.5313 Tainted: G L syzkaller #0 PREEMPT(full) [ 430.165612][T21803] Tainted: [L]=SOFTLOCKUP [ 430.165619][T21803] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 430.165630][T21803] Call Trace: [ 430.165636][T21803] [ 430.165645][T21803] dump_stack_lvl+0x100/0x190 [ 430.165705][T21803] should_fail_ex.cold+0x5/0xa [ 430.165731][T21803] ? tomoyo_realpath_from_path+0xb6/0x690 [ 430.165773][T21803] should_failslab+0xc2/0x120 [ 430.165802][T21803] __kmalloc_noprof+0xe0/0x850 [ 430.165831][T21803] tomoyo_realpath_from_path+0xb6/0x690 [ 430.165858][T21803] tomoyo_path_number_perm+0x23c/0x580 [ 430.165886][T21803] ? tomoyo_path_number_perm+0x22e/0x580 [ 430.165916][T21803] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 430.165969][T21803] ? find_held_lock+0x2b/0x80 [ 430.165992][T21803] ? __fget_files+0x215/0x3d0 [ 430.166007][T21803] ? hook_file_ioctl_common+0x146/0x410 [ 430.166035][T21803] ? __fget_files+0x21f/0x3d0 [ 430.166057][T21803] security_file_ioctl+0xd3/0x230 [ 430.166079][T21803] __x64_sys_ioctl+0xb7/0x210 [ 430.166106][T21803] do_syscall_64+0x106/0xf80 [ 430.166134][T21803] ? clear_bhb_loop+0x40/0x90 [ 430.166158][T21803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.166177][T21803] RIP: 0033:0x7fd0b7b9c629 [ 430.166193][T21803] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 430.166210][T21803] RSP: 002b:00007fd0b8ab2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 430.166228][T21803] RAX: ffffffffffffffda RBX: 00007fd0b7e15fa0 RCX: 00007fd0b7b9c629 [ 430.166240][T21803] RDX: 0000200000000100 RSI: 000000004014563c RDI: 0000000000000003 [ 430.166250][T21803] RBP: 00007fd0b8ab2090 R08: 0000000000000000 R09: 0000000000000000 [ 430.166261][T21803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 430.166272][T21803] R13: 00007fd0b7e16038 R14: 00007fd0b7e15fa0 R15: 00007ffe27ec0de8 [ 430.166297][T21803] [ 430.166352][T21803] ERROR: Out of memory at tomoyo_realpath_from_path. [ 430.303272][ T5286] Bluetooth: hci2: SCO packet for unknown connection handle 1 [ 430.310448][ T5286] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 430.313577][ T5286] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 430.453854][T21830] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 430.687492][T21856] block nbd0: not configured, cannot reconfigure [ 430.693256][ T5286] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 430.696304][T21859] overlay: filesystem on ./bus is read-only [ 430.701946][ T40] audit: type=1400 audit(2000000091.599:1006): avc: denied { mounton } for pid=21857 comm="syz.9.5332" path="/bus" dev="proc" ino=4026531853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 430.733795][T21863] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 430.794846][T21861] kvm: kvm [21858]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 430.802450][T21861] kvm: kvm [21858]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 431.034820][T21887] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5337'. [ 431.038876][T21885] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5337'. [ 431.042857][T21885] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 431.047700][ T5286] Bluetooth: hci0: command 0x0406 tx timeout [ 431.049974][ T5933] Bluetooth: hci5: command 0x0406 tx timeout [ 431.081120][T21885] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 431.088871][T21891] FAULT_INJECTION: forcing a failure. [ 431.088871][T21891] name failslab, interval 1, probability 0, space 0, times 0 [ 431.092920][T21891] CPU: 0 UID: 0 PID: 21891 Comm: syz.3.5338 Tainted: G L syzkaller #0 PREEMPT(full) [ 431.092940][T21891] Tainted: [L]=SOFTLOCKUP [ 431.092944][T21891] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 431.092951][T21891] Call Trace: [ 431.092966][T21891] [ 431.092972][T21891] dump_stack_lvl+0x100/0x190 [ 431.093003][T21891] should_fail_ex.cold+0x5/0xa [ 431.093018][T21891] should_failslab+0xc2/0x120 [ 431.093036][T21891] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 431.093051][T21891] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 431.093073][T21891] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 431.093094][T21891] mmu_topup_memory_caches+0x25/0x170 [ 431.093108][T21891] kvm_mmu_load+0xd6/0x23e0 [ 431.093119][T21891] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 431.093135][T21891] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 431.093152][T21891] ? __pfx_kvm_mmu_load+0x10/0x10 [ 431.093163][T21891] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 431.093181][T21891] ? kvm_check_and_inject_events+0x961/0x10c0 [ 431.093193][T21891] ? record_steal_time+0x430/0xbe0 [ 431.093211][T21891] vcpu_run+0x39f4/0x5ca0 [ 431.093229][T21891] ? __pfx_vcpu_run+0x10/0x10 [ 431.093246][T21891] ? rcu_is_watching+0x12/0xc0 [ 431.093261][T21891] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 431.093274][T21891] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 431.093291][T21891] kvm_vcpu_ioctl+0x730/0x1730 [ 431.093309][T21891] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 431.093326][T21891] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 431.093342][T21891] ? do_vfs_ioctl+0x226/0x13e0 [ 431.093358][T21891] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 431.093374][T21891] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 431.093402][T21891] ? __fget_files+0x215/0x3d0 [ 431.093412][T21891] ? hook_file_ioctl_common+0x146/0x410 [ 431.093431][T21891] ? selinux_file_ioctl+0x139/0x290 [ 431.093443][T21891] ? selinux_file_ioctl+0xb4/0x290 [ 431.093455][T21891] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 431.093493][T21891] __x64_sys_ioctl+0x18e/0x210 [ 431.093510][T21891] do_syscall_64+0x106/0xf80 [ 431.093529][T21891] ? clear_bhb_loop+0x40/0x90 [ 431.093548][T21891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.093560][T21891] RIP: 0033:0x7ff9ff39c629 [ 431.093570][T21891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 431.093581][T21891] RSP: 002b:00007ffa00203028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 431.093592][T21891] RAX: ffffffffffffffda RBX: 00007ff9ff615fa0 RCX: 00007ff9ff39c629 [ 431.093599][T21891] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 431.093605][T21891] RBP: 00007ffa00203090 R08: 0000000000000000 R09: 0000000000000000 [ 431.093612][T21891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 431.093619][T21891] R13: 00007ff9ff616038 R14: 00007ff9ff615fa0 R15: 00007fff06082378 [ 431.093633][T21891] [ 431.402636][T21922] fuse: Unknown parameter 'fðÖ˜/{³Šn¶™Fú6£¤8Fïd·ùï3„u›ïhãBóQýá1Oèâ¾#4®?fÓ‡Š0x0000000000000003' [ 431.435397][T21926] netlink: 68 bytes leftover after parsing attributes in process `syz.7.5343'. [ 431.511070][T21933] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5344'. [ 431.591043][T21638] Bluetooth: hci1: SCO packet for unknown connection handle 1 [ 431.592807][T21638] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 431.595238][T21638] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 431.639384][T21949] syzkaller0: entered promiscuous mode [ 431.641845][T21949] syzkaller0: entered allmulticast mode [ 431.650594][ T6082] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 431.811128][ T6082] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 431.816139][ T6082] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 431.821557][ T6082] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 431.826159][ T6082] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 431.833982][ T6082] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 431.838236][ T6082] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.844698][ T6082] usb 5-1: config 0 descriptor?? [ 431.849323][T21922] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 431.912139][T21966] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5349'. [ 432.048732][T21974] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5352'. [ 432.054393][T21974] netlink: 9 bytes leftover after parsing attributes in process `syz.3.5352'. [ 432.059000][T21974] 0·: renamed from hsr0 (while UP) [ 432.063723][T21974] 0·: entered allmulticast mode [ 432.065677][T21974] hsr_slave_0: entered allmulticast mode [ 432.070318][T21974] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 432.121126][T21638] Bluetooth: hci2: SCO packet for unknown connection handle 1 [ 432.121440][T21638] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 432.125381][T21638] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 432.182044][T21981] FAULT_INJECTION: forcing a failure. [ 432.182044][T21981] name failslab, interval 1, probability 0, space 0, times 0 [ 432.187274][T21981] CPU: 2 UID: 0 PID: 21981 Comm: syz.3.5355 Tainted: G L syzkaller #0 PREEMPT(full) [ 432.187315][T21981] Tainted: [L]=SOFTLOCKUP [ 432.187323][T21981] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 432.187333][T21981] Call Trace: [ 432.187340][T21981] [ 432.187347][T21981] dump_stack_lvl+0x100/0x190 [ 432.187380][T21981] should_fail_ex.cold+0x5/0xa [ 432.187405][T21981] should_failslab+0xc2/0x120 [ 432.187431][T21981] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 432.187452][T21981] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 432.187484][T21981] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 432.187534][T21981] mmu_topup_memory_caches+0x25/0x170 [ 432.187556][T21981] kvm_mmu_load+0xd6/0x23e0 [ 432.187575][T21981] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 432.187597][T21981] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 432.187623][T21981] ? __pfx_kvm_mmu_load+0x10/0x10 [ 432.187639][T21981] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 432.187666][T21981] ? kvm_check_and_inject_events+0x961/0x10c0 [ 432.187686][T21981] ? record_steal_time+0x430/0xbe0 [ 432.187713][T21981] vcpu_run+0x39f4/0x5ca0 [ 432.187742][T21981] ? __pfx_vcpu_run+0x10/0x10 [ 432.187770][T21981] ? rcu_is_watching+0x12/0xc0 [ 432.187792][T21981] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 432.187812][T21981] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 432.187839][T21981] kvm_vcpu_ioctl+0x730/0x1730 [ 432.187866][T21981] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 432.187891][T21981] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 432.187917][T21981] ? do_vfs_ioctl+0x226/0x13e0 [ 432.187941][T21981] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 432.187965][T21981] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 432.187994][T21981] ? __fget_files+0x215/0x3d0 [ 432.188010][T21981] ? hook_file_ioctl_common+0x146/0x410 [ 432.188039][T21981] ? selinux_file_ioctl+0x139/0x290 [ 432.188058][T21981] ? selinux_file_ioctl+0xb4/0x290 [ 432.188078][T21981] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 432.188104][T21981] __x64_sys_ioctl+0x18e/0x210 [ 432.188130][T21981] do_syscall_64+0x106/0xf80 [ 432.188147][T21981] ? clear_bhb_loop+0x40/0x90 [ 432.188169][T21981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.188187][T21981] RIP: 0033:0x7ff9ff39c629 [ 432.188204][T21981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 432.188221][T21981] RSP: 002b:00007ffa00203028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 432.188239][T21981] RAX: ffffffffffffffda RBX: 00007ff9ff615fa0 RCX: 00007ff9ff39c629 [ 432.188251][T21981] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000b [ 432.188262][T21981] RBP: 00007ffa00203090 R08: 0000000000000000 R09: 0000000000000000 [ 432.188272][T21981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 432.188283][T21981] R13: 00007ff9ff616038 R14: 00007ff9ff615fa0 R15: 00007fff06082378 [ 432.188308][T21981] [ 432.529993][T21996] netlink: 32 bytes leftover after parsing attributes in process `syz.9.5361'. [ 432.545124][ T6082] usbhid 5-1:0.0: can't add hid device: -71 [ 432.547236][ T6082] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 432.554066][ T6082] usb 5-1: USB disconnect, device number 12 [ 432.616050][T22006] FAULT_INJECTION: forcing a failure. [ 432.616050][T22006] name failslab, interval 1, probability 0, space 0, times 0 [ 432.620258][T22006] CPU: 0 UID: 0 PID: 22006 Comm: syz.3.5362 Tainted: G L syzkaller #0 PREEMPT(full) [ 432.620276][T22006] Tainted: [L]=SOFTLOCKUP [ 432.620280][T22006] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 432.620287][T22006] Call Trace: [ 432.620292][T22006] [ 432.620296][T22006] dump_stack_lvl+0x100/0x190 [ 432.620318][T22006] should_fail_ex.cold+0x5/0xa [ 432.620333][T22006] should_failslab+0xc2/0x120 [ 432.620351][T22006] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 432.620365][T22006] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 432.620386][T22006] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 432.620407][T22006] mmu_topup_memory_caches+0x25/0x170 [ 432.620420][T22006] kvm_mmu_load+0xd6/0x23e0 [ 432.620431][T22006] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 432.620447][T22006] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 432.620464][T22006] ? __pfx_kvm_mmu_load+0x10/0x10 [ 432.620479][T22006] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 432.620497][T22006] ? kvm_check_and_inject_events+0x961/0x10c0 [ 432.620509][T22006] ? record_steal_time+0x430/0xbe0 [ 432.620526][T22006] vcpu_run+0x39f4/0x5ca0 [ 432.620544][T22006] ? __pfx_vcpu_run+0x10/0x10 [ 432.620562][T22006] ? rcu_is_watching+0x12/0xc0 [ 432.620577][T22006] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 432.620590][T22006] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 432.620607][T22006] kvm_vcpu_ioctl+0x730/0x1730 [ 432.620624][T22006] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 432.620640][T22006] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 432.620657][T22006] ? do_vfs_ioctl+0x226/0x13e0 [ 432.620673][T22006] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 432.620688][T22006] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 432.620706][T22006] ? __fget_files+0x215/0x3d0 [ 432.620716][T22006] ? hook_file_ioctl_common+0x146/0x410 [ 432.620735][T22006] ? selinux_file_ioctl+0x139/0x290 [ 432.620747][T22006] ? selinux_file_ioctl+0xb4/0x290 [ 432.620759][T22006] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 432.620776][T22006] __x64_sys_ioctl+0x18e/0x210 [ 432.620793][T22006] do_syscall_64+0x106/0xf80 [ 432.620804][T22006] ? clear_bhb_loop+0x40/0x90 [ 432.620818][T22006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.620830][T22006] RIP: 0033:0x7ff9ff39c629 [ 432.620840][T22006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 432.620851][T22006] RSP: 002b:00007ffa00203028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 432.620862][T22006] RAX: ffffffffffffffda RBX: 00007ff9ff615fa0 RCX: 00007ff9ff39c629 [ 432.620869][T22006] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 432.620876][T22006] RBP: 00007ffa00203090 R08: 0000000000000000 R09: 0000000000000000 [ 432.620882][T22006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 432.620889][T22006] R13: 00007ff9ff616038 R14: 00007ff9ff615fa0 R15: 00007fff06082378 [ 432.620903][T22006] [ 432.738757][T21638] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 432.894993][T22031] netlink: 48 bytes leftover after parsing attributes in process `syz.9.5368'. [ 432.947123][T22035] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5369'. [ 432.951092][T22035] netlink: 'syz.7.5369': attribute type 21 has an invalid length. [ 432.971437][T22037] cgroup2: Unknown parameter 'euid' [ 433.018307][ T40] audit: type=1400 audit(2000000093.929:1007): avc: denied { execute } for pid=22038 comm="syz.9.5371" path="/dev/dsp" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 433.114331][ T40] audit: type=1400 audit(2000000094.019:1008): avc: denied { wake_alarm } for pid=22052 comm="syz.7.5375" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 434.041524][T21638] Bluetooth: hci5: SCO packet for unknown connection handle 1 [ 434.043023][T21638] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 434.045904][T21638] Bluetooth: hci5: Ignoring connect complete event for invalid link type [ 434.158846][T22102] FAULT_INJECTION: forcing a failure. [ 434.158846][T22102] name failslab, interval 1, probability 0, space 0, times 0 [ 434.164233][T22102] CPU: 0 UID: 0 PID: 22102 Comm: syz.9.5383 Tainted: G L syzkaller #0 PREEMPT(full) [ 434.164260][T22102] Tainted: [L]=SOFTLOCKUP [ 434.164267][T22102] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 434.164277][T22102] Call Trace: [ 434.164299][T22102] [ 434.164307][T22102] dump_stack_lvl+0x100/0x190 [ 434.164339][T22102] should_fail_ex.cold+0x5/0xa [ 434.164364][T22102] should_failslab+0xc2/0x120 [ 434.164391][T22102] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 434.164413][T22102] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 434.164446][T22102] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 434.164480][T22102] mmu_topup_memory_caches+0x25/0x170 [ 434.164502][T22102] kvm_mmu_load+0xd6/0x23e0 [ 434.164520][T22102] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 434.164543][T22102] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 434.164570][T22102] ? __pfx_kvm_mmu_load+0x10/0x10 [ 434.164587][T22102] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 434.164614][T22102] ? kvm_check_and_inject_events+0x961/0x10c0 [ 434.164633][T22102] ? record_steal_time+0x430/0xbe0 [ 434.164661][T22102] vcpu_run+0x39f4/0x5ca0 [ 434.164691][T22102] ? __pfx_vcpu_run+0x10/0x10 [ 434.164720][T22102] ? rcu_is_watching+0x12/0xc0 [ 434.164753][T22102] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 434.164774][T22102] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 434.164802][T22102] kvm_vcpu_ioctl+0x730/0x1730 [ 434.164830][T22102] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 434.164855][T22102] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 434.164881][T22102] ? do_vfs_ioctl+0x226/0x13e0 [ 434.164906][T22102] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 434.164929][T22102] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 434.164958][T22102] ? __fget_files+0x215/0x3d0 [ 434.164974][T22102] ? hook_file_ioctl_common+0x146/0x410 [ 434.165004][T22102] ? selinux_file_ioctl+0x139/0x290 [ 434.165022][T22102] ? selinux_file_ioctl+0xb4/0x290 [ 434.165043][T22102] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 434.165069][T22102] __x64_sys_ioctl+0x18e/0x210 [ 434.165094][T22102] do_syscall_64+0x106/0xf80 [ 434.165112][T22102] ? clear_bhb_loop+0x40/0x90 [ 434.165134][T22102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.165153][T22102] RIP: 0033:0x7fd0b7b9c629 [ 434.165170][T22102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 434.165186][T22102] RSP: 002b:00007fd0b8ab2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 434.165204][T22102] RAX: ffffffffffffffda RBX: 00007fd0b7e15fa0 RCX: 00007fd0b7b9c629 [ 434.165215][T22102] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 434.165226][T22102] RBP: 00007fd0b8ab2090 R08: 0000000000000000 R09: 0000000000000000 [ 434.165236][T22102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 434.165247][T22102] R13: 00007fd0b7e16038 R14: 00007fd0b7e15fa0 R15: 00007ffe27ec0de8 [ 434.165273][T22102] [ 434.289060][T22114] FAULT_INJECTION: forcing a failure. [ 434.289060][T22114] name failslab, interval 1, probability 0, space 0, times 0 [ 434.293277][T22114] CPU: 3 UID: 0 PID: 22114 Comm: syz.0.5386 Tainted: G L syzkaller #0 PREEMPT(full) [ 434.293297][T22114] Tainted: [L]=SOFTLOCKUP [ 434.293301][T22114] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 434.293308][T22114] Call Trace: [ 434.293313][T22114] [ 434.293319][T22114] dump_stack_lvl+0x100/0x190 [ 434.293341][T22114] should_fail_ex.cold+0x5/0xa [ 434.293356][T22114] should_failslab+0xc2/0x120 [ 434.293374][T22114] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 434.293389][T22114] ? alloc_pid+0x1bd/0x1890 [ 434.293415][T22114] alloc_pid+0x1bd/0x1890 [ 434.293455][T22114] ? find_held_lock+0x2b/0x80 [ 434.293477][T22114] ? __pfx_alloc_pid+0x10/0x10 [ 434.293497][T22114] ? sched_mm_cid_fork+0x246/0xcd0 [ 434.293516][T22114] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 434.293537][T22114] ? fpu_clone+0x226/0x7c0 [ 434.293552][T22114] ? copy_thread+0x6ce/0xb60 [ 434.293565][T22114] copy_process+0x48f6/0x7a10 [ 434.293587][T22114] ? __pfx_copy_process+0x10/0x10 [ 434.293604][T22114] ? lockdep_init_map_type+0x5c/0x250 [ 434.293623][T22114] ? lockdep_init_map_type+0x5c/0x250 [ 434.293642][T22114] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 434.293663][T22114] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 434.293680][T22114] vhost_task_create+0x1db/0x370 [ 434.293693][T22114] ? __pfx_vhost_task_create+0x10/0x10 [ 434.293705][T22114] ? trace_contention_end+0x140/0x180 [ 434.293719][T22114] ? __pfx_vhost_task_fn+0x10/0x10 [ 434.293733][T22114] ? __pfx___mutex_lock+0x10/0x10 [ 434.293744][T22114] ? kasan_quarantine_put+0x104/0x240 [ 434.293759][T22114] ? lockdep_hardirqs_on+0x78/0x100 [ 434.293774][T22114] kvm_mmu_post_init_vm+0x1b3/0x370 [ 434.293788][T22114] kvm_arch_vcpu_ioctl_run+0x66/0x1830 [ 434.293801][T22114] ? kvm_vcpu_ioctl+0x155c/0x1730 [ 434.293820][T22114] kvm_vcpu_ioctl+0x730/0x1730 [ 434.293838][T22114] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 434.293855][T22114] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 434.293871][T22114] ? do_vfs_ioctl+0x226/0x13e0 [ 434.293887][T22114] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 434.293906][T22114] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 434.293927][T22114] ? __fget_files+0x215/0x3d0 [ 434.293939][T22114] ? hook_file_ioctl_common+0x146/0x410 [ 434.293960][T22114] ? selinux_file_ioctl+0x139/0x290 [ 434.293972][T22114] ? selinux_file_ioctl+0xb4/0x290 [ 434.293984][T22114] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 434.294001][T22114] __x64_sys_ioctl+0x18e/0x210 [ 434.294018][T22114] do_syscall_64+0x106/0xf80 [ 434.294029][T22114] ? clear_bhb_loop+0x40/0x90 [ 434.294045][T22114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.294061][T22114] RIP: 0033:0x7fa16919c629 [ 434.294075][T22114] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 434.294090][T22114] RSP: 002b:00007fa169fd3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 434.294107][T22114] RAX: ffffffffffffffda RBX: 00007fa169416090 RCX: 00007fa16919c629 [ 434.294119][T22114] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 434.294129][T22114] RBP: 00007fa169fd3090 R08: 0000000000000000 R09: 0000000000000000 [ 434.294140][T22114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 434.294150][T22114] R13: 00007fa169416128 R14: 00007fa169416090 R15: 00007ffeb80b8678 [ 434.294176][T22114] [ 439.608993][T21638] Bluetooth: hci5: SCO packet for unknown connection handle 1 [ 439.611814][T21638] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 439.613470][T22163] __nla_validate_parse: 2 callbacks suppressed [ 439.613485][T22163] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5394'. [ 439.615910][T21638] Bluetooth: hci5: Ignoring connect complete event for invalid link type [ 439.631549][T22161] mkiss: ax0: crc mode is auto. [ 439.681738][T21638] Bluetooth: hci5: unexpected event 0x2f length: 509 > 260 [ 439.757701][T22168] FAULT_INJECTION: forcing a failure. [ 439.757701][T22168] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 439.780038][T22168] CPU: 0 UID: 0 PID: 22168 Comm: syz.0.5396 Tainted: G L syzkaller #0 PREEMPT(full) [ 439.780066][T22168] Tainted: [L]=SOFTLOCKUP [ 439.780071][T22168] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 439.780081][T22168] Call Trace: [ 439.780087][T22168] [ 439.780094][T22168] dump_stack_lvl+0x100/0x190 [ 439.780123][T22168] should_fail_ex.cold+0x5/0xa [ 439.780140][T22168] ? prepare_alloc_pages+0x16d/0x5f0 [ 439.780167][T22168] should_fail_alloc_page+0xeb/0x140 [ 439.780193][T22168] prepare_alloc_pages+0x1f0/0x5f0 [ 439.780221][T22168] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 439.780241][T22168] ? filter_irq_stacks+0x51/0x90 [ 439.780261][T22168] ? stack_depot_save_flags+0x27/0x9d0 [ 439.780283][T22168] ? stack_depot_save_flags+0x27/0x9d0 [ 439.780309][T22168] ? kasan_save_stack+0x3f/0x50 [ 439.780329][T22168] ? kasan_save_stack+0x30/0x50 [ 439.780348][T22168] ? kasan_save_track+0x14/0x30 [ 439.780367][T22168] ? __kasan_kmalloc+0xaa/0xb0 [ 439.780386][T22168] ? __kvmalloc_node_noprof+0x360/0xa00 [ 439.780407][T22168] ? __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 439.780430][T22168] ? mmu_topup_memory_caches+0xbc/0x170 [ 439.780446][T22168] ? kvm_mmu_load+0xd6/0x23e0 [ 439.780460][T22168] ? vcpu_run+0x39f4/0x5ca0 [ 439.780475][T22168] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 439.780493][T22168] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 439.780513][T22168] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.780546][T22168] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 439.780569][T22168] ? policy_nodemask+0xed/0x4f0 [ 439.780594][T22168] alloc_pages_mpol+0x1fb/0x550 [ 439.780618][T22168] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 439.780646][T22168] ? __kasan_kmalloc+0xaa/0xb0 [ 439.780670][T22168] alloc_pages_noprof+0x131/0x390 [ 439.780695][T22168] get_free_pages_noprof+0x10/0xb0 [ 439.780718][T22168] __kvm_mmu_topup_memory_cache+0x278/0x5f0 [ 439.780748][T22168] mmu_topup_memory_caches+0xbc/0x170 [ 439.780767][T22168] kvm_mmu_load+0xd6/0x23e0 [ 439.780782][T22168] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 439.780803][T22168] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 439.780827][T22168] ? __pfx_kvm_mmu_load+0x10/0x10 [ 439.780840][T22168] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 439.780861][T22168] ? kvm_check_and_inject_events+0x961/0x10c0 [ 439.780878][T22168] ? record_steal_time+0x430/0xbe0 [ 439.780902][T22168] vcpu_run+0x39f4/0x5ca0 [ 439.780928][T22168] ? __pfx_vcpu_run+0x10/0x10 [ 439.780954][T22168] ? rcu_is_watching+0x12/0xc0 [ 439.780976][T22168] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 439.780993][T22168] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 439.781018][T22168] kvm_vcpu_ioctl+0x730/0x1730 [ 439.781043][T22168] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 439.781065][T22168] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 439.781087][T22168] ? do_vfs_ioctl+0x226/0x13e0 [ 439.781109][T22168] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 439.781130][T22168] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 439.781156][T22168] ? __fget_files+0x215/0x3d0 [ 439.781170][T22168] ? hook_file_ioctl_common+0x146/0x410 [ 439.781197][T22168] ? selinux_file_ioctl+0x139/0x290 [ 439.781213][T22168] ? selinux_file_ioctl+0xb4/0x290 [ 439.781244][T22168] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 439.781268][T22168] __x64_sys_ioctl+0x18e/0x210 [ 439.781291][T22168] do_syscall_64+0x106/0xf80 [ 439.781308][T22168] ? clear_bhb_loop+0x40/0x90 [ 439.781328][T22168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.781344][T22168] RIP: 0033:0x7fa16919c629 [ 439.781359][T22168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 439.781374][T22168] RSP: 002b:00007fa169ff4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 439.781424][T22168] RAX: ffffffffffffffda RBX: 00007fa169415fa0 RCX: 00007fa16919c629 [ 439.781435][T22168] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009 [ 439.781445][T22168] RBP: 00007fa169ff4090 R08: 0000000000000000 R09: 0000000000000000 [ 439.781454][T22168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 439.781463][T22168] R13: 00007fa169416038 R14: 00007fa169415fa0 R15: 00007ffeb80b8678 [ 439.781486][T22168] [ 440.051598][T22189] FAULT_INJECTION: forcing a failure. [ 440.051598][T22189] name failslab, interval 1, probability 0, space 0, times 0 [ 440.055647][T22189] CPU: 3 UID: 0 PID: 22189 Comm: syz.3.5402 Tainted: G L syzkaller #0 PREEMPT(full) [ 440.055665][T22189] Tainted: [L]=SOFTLOCKUP [ 440.055669][T22189] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 440.055676][T22189] Call Trace: [ 440.055680][T22189] [ 440.055685][T22189] dump_stack_lvl+0x100/0x190 [ 440.055706][T22189] should_fail_ex.cold+0x5/0xa [ 440.055721][T22189] should_failslab+0xc2/0x120 [ 440.055739][T22189] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 440.055754][T22189] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 440.055774][T22189] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 440.055795][T22189] mmu_topup_memory_caches+0x25/0x170 [ 440.055808][T22189] kvm_mmu_load+0xd6/0x23e0 [ 440.055820][T22189] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 440.055835][T22189] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 440.055853][T22189] ? __pfx_kvm_mmu_load+0x10/0x10 [ 440.055863][T22189] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 440.055881][T22189] ? kvm_check_and_inject_events+0x961/0x10c0 [ 440.055893][T22189] ? record_steal_time+0x430/0xbe0 [ 440.055910][T22189] vcpu_run+0x39f4/0x5ca0 [ 440.055928][T22189] ? __pfx_vcpu_run+0x10/0x10 [ 440.055946][T22189] ? rcu_is_watching+0x12/0xc0 [ 440.055961][T22189] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 440.055974][T22189] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 440.055990][T22189] kvm_vcpu_ioctl+0x730/0x1730 [ 440.056008][T22189] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 440.056025][T22189] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 440.056041][T22189] ? do_vfs_ioctl+0x226/0x13e0 [ 440.056056][T22189] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 440.056072][T22189] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 440.056090][T22189] ? __fget_files+0x215/0x3d0 [ 440.056100][T22189] ? hook_file_ioctl_common+0x146/0x410 [ 440.056118][T22189] ? selinux_file_ioctl+0x139/0x290 [ 440.056130][T22189] ? selinux_file_ioctl+0xb4/0x290 [ 440.056143][T22189] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 440.056160][T22189] __x64_sys_ioctl+0x18e/0x210 [ 440.056176][T22189] do_syscall_64+0x106/0xf80 [ 440.056188][T22189] ? clear_bhb_loop+0x40/0x90 [ 440.056202][T22189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.056214][T22189] RIP: 0033:0x7ff9ff39c629 [ 440.056224][T22189] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 440.056235][T22189] RSP: 002b:00007ffa00203028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 440.056246][T22189] RAX: ffffffffffffffda RBX: 00007ff9ff615fa0 RCX: 00007ff9ff39c629 [ 440.056253][T22189] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000b [ 440.056260][T22189] RBP: 00007ffa00203090 R08: 0000000000000000 R09: 0000000000000000 [ 440.056267][T22189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 440.056273][T22189] R13: 00007ff9ff616038 R14: 00007ff9ff615fa0 R15: 00007fff06082378 [ 440.056288][T22189] [ 440.069099][T21638] Bluetooth: hci5: SCO packet for unknown connection handle 1 [ 440.176180][T21638] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 440.178941][T21638] Bluetooth: hci5: Ignoring connect complete event for invalid link type [ 440.201137][T22206] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5407'. [ 440.254174][T22208] mkiss: ax0: crc mode is auto. [ 440.423128][T21638] Bluetooth: hci5: SCO packet for unknown connection handle 1 [ 440.425188][T21638] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 440.428668][T21638] Bluetooth: hci5: Ignoring connect complete event for invalid link type [ 440.546440][T22242] cgroup: release_agent respecified [ 440.666483][T22252] netlink: 'syz.3.5423': attribute type 6 has an invalid length. [ 440.792511][T22249] kvm: kvm [22248]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 440.799476][T22249] kvm: kvm [22248]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 440.815776][T22267] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5426'. [ 440.842488][T22267] netlink: 9 bytes leftover after parsing attributes in process `syz.3.5426'. [ 440.849405][T22267] 1·: renamed from 70· (while UP) [ 440.863509][T22267] A link change request failed with some changes committed already. Interface 71· may have been left with an inconsistent configuration, please check. [ 441.062165][T22290] bond4: option xmit_hash_policy: invalid value (6) [ 441.068038][T22290] bond4 (unregistering): Released all slaves [ 441.084536][T22295] FAULT_INJECTION: forcing a failure. [ 441.084536][T22295] name failslab, interval 1, probability 0, space 0, times 0 [ 441.092587][T22295] CPU: 1 UID: 0 PID: 22295 Comm: syz.0.5436 Tainted: G L syzkaller #0 PREEMPT(full) [ 441.092617][T22295] Tainted: [L]=SOFTLOCKUP [ 441.092629][T22295] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 441.092640][T22295] Call Trace: [ 441.092646][T22295] [ 441.092654][T22295] dump_stack_lvl+0x100/0x190 [ 441.092685][T22295] should_fail_ex.cold+0x5/0xa [ 441.092710][T22295] should_failslab+0xc2/0x120 [ 441.092737][T22295] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 441.092758][T22295] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 441.092789][T22295] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 441.092824][T22295] mmu_topup_memory_caches+0x25/0x170 [ 441.092845][T22295] kvm_mmu_load+0xd6/0x23e0 [ 441.092863][T22295] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 441.092885][T22295] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 441.092912][T22295] ? __pfx_kvm_mmu_load+0x10/0x10 [ 441.092930][T22295] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 441.092956][T22295] ? kvm_check_and_inject_events+0x961/0x10c0 [ 441.092977][T22295] ? record_steal_time+0x430/0xbe0 [ 441.093003][T22295] vcpu_run+0x39f4/0x5ca0 [ 441.093032][T22295] ? __pfx_vcpu_run+0x10/0x10 [ 441.093062][T22295] ? rcu_is_watching+0x12/0xc0 [ 441.093087][T22295] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 441.093107][T22295] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 441.093135][T22295] kvm_vcpu_ioctl+0x730/0x1730 [ 441.093164][T22295] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 441.093188][T22295] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 441.093216][T22295] ? do_vfs_ioctl+0x226/0x13e0 [ 441.093241][T22295] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 441.093264][T22295] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 441.093292][T22295] ? __fget_files+0x215/0x3d0 [ 441.093308][T22295] ? hook_file_ioctl_common+0x146/0x410 [ 441.093336][T22295] ? selinux_file_ioctl+0x139/0x290 [ 441.093356][T22295] ? selinux_file_ioctl+0xb4/0x290 [ 441.093398][T22295] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 441.093427][T22295] __x64_sys_ioctl+0x18e/0x210 [ 441.093452][T22295] do_syscall_64+0x106/0xf80 [ 441.093470][T22295] ? clear_bhb_loop+0x40/0x90 [ 441.093495][T22295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.093513][T22295] RIP: 0033:0x7fa16919c629 [ 441.093528][T22295] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 441.093543][T22295] RSP: 002b:00007fa169ff4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 441.093562][T22295] RAX: ffffffffffffffda RBX: 00007fa169415fa0 RCX: 00007fa16919c629 [ 441.093573][T22295] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 441.093584][T22295] RBP: 00007fa169ff4090 R08: 0000000000000000 R09: 0000000000000000 [ 441.093592][T22295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 441.093603][T22295] R13: 00007fa169416038 R14: 00007fa169415fa0 R15: 00007ffeb80b8678 [ 441.093635][T22295] [ 441.101802][T22300] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 441.135154][T22297] FAULT_INJECTION: forcing a failure. [ 441.135154][T22297] name failslab, interval 1, probability 0, space 0, times 0 [ 441.138374][T22300] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5434'. [ 441.139915][T22297] CPU: 0 UID: 0 PID: 22297 Comm: syz.3.5433 Tainted: G L syzkaller #0 PREEMPT(full) [ 441.139942][T22297] Tainted: [L]=SOFTLOCKUP [ 441.139949][T22297] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 441.139958][T22297] Call Trace: [ 441.139964][T22297] [ 441.139971][T22297] dump_stack_lvl+0x100/0x190 [ 441.140004][T22297] should_fail_ex.cold+0x5/0xa [ 441.140028][T22297] should_failslab+0xc2/0x120 [ 441.140056][T22297] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 441.140077][T22297] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 441.140109][T22297] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 441.140143][T22297] mmu_topup_memory_caches+0x25/0x170 [ 441.140163][T22297] kvm_mmu_load+0xd6/0x23e0 [ 441.140182][T22297] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 441.140206][T22297] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 441.140234][T22297] ? __pfx_kvm_mmu_load+0x10/0x10 [ 441.140252][T22297] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 441.140280][T22297] ? kvm_check_and_inject_events+0x961/0x10c0 [ 441.140300][T22297] ? record_steal_time+0x430/0xbe0 [ 441.140327][T22297] vcpu_run+0x39f4/0x5ca0 [ 441.140358][T22297] ? __pfx_vcpu_run+0x10/0x10 [ 441.140388][T22297] ? rcu_is_watching+0x12/0xc0 [ 441.140417][T22297] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 441.140437][T22297] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 441.140466][T22297] kvm_vcpu_ioctl+0x730/0x1730 [ 441.140493][T22297] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 441.140518][T22297] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 441.140544][T22297] ? do_vfs_ioctl+0x226/0x13e0 [ 441.140567][T22297] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 441.140591][T22297] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 441.140621][T22297] ? __fget_files+0x215/0x3d0 [ 441.140635][T22297] ? hook_file_ioctl_common+0x146/0x410 [ 441.140665][T22297] ? selinux_file_ioctl+0x139/0x290 [ 441.140683][T22297] ? selinux_file_ioctl+0xb4/0x290 [ 441.140703][T22297] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 441.140729][T22297] __x64_sys_ioctl+0x18e/0x210 [ 441.140755][T22297] do_syscall_64+0x106/0xf80 [ 441.140771][T22297] ? clear_bhb_loop+0x40/0x90 [ 441.140795][T22297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.140813][T22297] RIP: 0033:0x7ff9ff39c629 [ 441.140827][T22297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 441.140845][T22297] RSP: 002b:00007ffa00203028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 441.140866][T22297] RAX: ffffffffffffffda RBX: 00007ff9ff615fa0 RCX: 00007ff9ff39c629 [ 441.140876][T22297] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 441.140886][T22297] RBP: 00007ffa00203090 R08: 0000000000000000 R09: 0000000000000000 [ 441.140896][T22297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 441.140906][T22297] R13: 00007ff9ff616038 R14: 00007ff9ff615fa0 R15: 00007fff06082378 [ 441.140931][T22297] [ 441.337782][T22300] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5434'. [ 441.377732][T22305] netlink: 'syz.7.5437': attribute type 10 has an invalid length. [ 441.380187][T22305] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5437'. [ 441.418303][T22307] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5438'. [ 441.526650][T22315] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 441.700095][T22335] FAULT_INJECTION: forcing a failure. [ 441.700095][T22335] name failslab, interval 1, probability 0, space 0, times 0 [ 441.704124][T22335] CPU: 0 UID: 0 PID: 22335 Comm: syz.9.5449 Tainted: G L syzkaller #0 PREEMPT(full) [ 441.704143][T22335] Tainted: [L]=SOFTLOCKUP [ 441.704148][T22335] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 441.704155][T22335] Call Trace: [ 441.704159][T22335] [ 441.704164][T22335] dump_stack_lvl+0x100/0x190 [ 441.704186][T22335] should_fail_ex.cold+0x5/0xa [ 441.704200][T22335] should_failslab+0xc2/0x120 [ 441.704219][T22335] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 441.704233][T22335] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 441.704254][T22335] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 441.704275][T22335] mmu_topup_memory_caches+0x25/0x170 [ 441.704289][T22335] kvm_mmu_load+0xd6/0x23e0 [ 441.704300][T22335] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 441.704316][T22335] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 441.704334][T22335] ? __pfx_kvm_mmu_load+0x10/0x10 [ 441.704349][T22335] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 441.704367][T22335] ? kvm_check_and_inject_events+0x961/0x10c0 [ 441.704380][T22335] ? record_steal_time+0x430/0xbe0 [ 441.704397][T22335] vcpu_run+0x39f4/0x5ca0 [ 441.704415][T22335] ? __pfx_vcpu_run+0x10/0x10 [ 441.704433][T22335] ? rcu_is_watching+0x12/0xc0 [ 441.704448][T22335] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 441.704461][T22335] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 441.704478][T22335] kvm_vcpu_ioctl+0x730/0x1730 [ 441.704496][T22335] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 441.704513][T22335] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 441.704529][T22335] ? do_vfs_ioctl+0x226/0x13e0 [ 441.704545][T22335] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 441.704561][T22335] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 441.704578][T22335] ? __fget_files+0x215/0x3d0 [ 441.704588][T22335] ? hook_file_ioctl_common+0x146/0x410 [ 441.704607][T22335] ? selinux_file_ioctl+0x139/0x290 [ 441.704618][T22335] ? selinux_file_ioctl+0xb4/0x290 [ 441.704631][T22335] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 441.704648][T22335] __x64_sys_ioctl+0x18e/0x210 [ 441.704664][T22335] do_syscall_64+0x106/0xf80 [ 441.704676][T22335] ? clear_bhb_loop+0x40/0x90 [ 441.704691][T22335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.704702][T22335] RIP: 0033:0x7fd0b7b9c629 [ 441.704713][T22335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 441.704724][T22335] RSP: 002b:00007fd0b8ab2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 441.704736][T22335] RAX: ffffffffffffffda RBX: 00007fd0b7e15fa0 RCX: 00007fd0b7b9c629 [ 441.704743][T22335] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000b [ 441.704750][T22335] RBP: 00007fd0b8ab2090 R08: 0000000000000000 R09: 0000000000000000 [ 441.704756][T22335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 441.704763][T22335] R13: 00007fd0b7e16038 R14: 00007fd0b7e15fa0 R15: 00007ffe27ec0de8 [ 441.704777][T22335] [ 441.874166][T22343] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5452'. [ 441.935808][T22348] Invalid logical block size (2049) [ 442.018862][T21638] Bluetooth: hci0: command 0x0406 tx timeout [ 442.101767][T21638] Bluetooth: hci2: SCO packet for unknown connection handle 1 [ 442.103622][T21638] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 442.106319][T21638] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 442.214987][T22364] pimreg3: entered allmulticast mode [ 442.335934][T22376] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5465'. [ 442.342948][T22376] 0·: renamed from hsr0 (while UP) [ 442.350148][T22376] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 442.830678][T22420] FAULT_INJECTION: forcing a failure. [ 442.830678][T22420] name failslab, interval 1, probability 0, space 0, times 0 [ 442.834944][T22420] CPU: 2 UID: 0 PID: 22420 Comm: syz.3.5478 Tainted: G L syzkaller #0 PREEMPT(full) [ 442.834963][T22420] Tainted: [L]=SOFTLOCKUP [ 442.834967][T22420] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 442.834974][T22420] Call Trace: [ 442.834979][T22420] [ 442.834984][T22420] dump_stack_lvl+0x100/0x190 [ 442.835006][T22420] should_fail_ex.cold+0x5/0xa [ 442.835021][T22420] should_failslab+0xc2/0x120 [ 442.835040][T22420] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 442.835054][T22420] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 442.835075][T22420] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 442.835097][T22420] mmu_topup_memory_caches+0x25/0x170 [ 442.835110][T22420] kvm_mmu_load+0xd6/0x23e0 [ 442.835121][T22420] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 442.835137][T22420] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 442.835154][T22420] ? __pfx_kvm_mmu_load+0x10/0x10 [ 442.835166][T22420] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 442.835183][T22420] ? kvm_check_and_inject_events+0x961/0x10c0 [ 442.835196][T22420] ? record_steal_time+0x430/0xbe0 [ 442.835213][T22420] vcpu_run+0x39f4/0x5ca0 [ 442.835231][T22420] ? __pfx_vcpu_run+0x10/0x10 [ 442.835249][T22420] ? rcu_is_watching+0x12/0xc0 [ 442.835264][T22420] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 442.835277][T22420] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 442.835294][T22420] kvm_vcpu_ioctl+0x730/0x1730 [ 442.835311][T22420] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 442.835328][T22420] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 442.835344][T22420] ? do_vfs_ioctl+0x226/0x13e0 [ 442.835360][T22420] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 442.835375][T22420] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 442.835393][T22420] ? __fget_files+0x215/0x3d0 [ 442.835403][T22420] ? hook_file_ioctl_common+0x146/0x410 [ 442.835422][T22420] ? selinux_file_ioctl+0x139/0x290 [ 442.835433][T22420] ? selinux_file_ioctl+0xb4/0x290 [ 442.835446][T22420] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 442.835463][T22420] __x64_sys_ioctl+0x18e/0x210 [ 442.835479][T22420] do_syscall_64+0x106/0xf80 [ 442.835491][T22420] ? clear_bhb_loop+0x40/0x90 [ 442.835505][T22420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.835517][T22420] RIP: 0033:0x7ff9ff39c629 [ 442.835527][T22420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 442.835538][T22420] RSP: 002b:00007ffa00203028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 442.835549][T22420] RAX: ffffffffffffffda RBX: 00007ff9ff615fa0 RCX: 00007ff9ff39c629 [ 442.835556][T22420] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 442.835563][T22420] RBP: 00007ffa00203090 R08: 0000000000000000 R09: 0000000000000000 [ 442.835570][T22420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 442.835576][T22420] R13: 00007ff9ff616038 R14: 00007ff9ff615fa0 R15: 00007fff06082378 [ 442.835590][T22420] [ 443.098517][T22426] FAULT_INJECTION: forcing a failure. [ 443.098517][T22426] name failslab, interval 1, probability 0, space 0, times 0 [ 443.102618][T22426] CPU: 1 UID: 0 PID: 22426 Comm: syz.3.5480 Tainted: G L syzkaller #0 PREEMPT(full) [ 443.102637][T22426] Tainted: [L]=SOFTLOCKUP [ 443.102641][T22426] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 443.102648][T22426] Call Trace: [ 443.102653][T22426] [ 443.102658][T22426] dump_stack_lvl+0x100/0x190 [ 443.102679][T22426] should_fail_ex.cold+0x5/0xa [ 443.102694][T22426] should_failslab+0xc2/0x120 [ 443.102712][T22426] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 443.102726][T22426] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 443.102747][T22426] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 443.102769][T22426] mmu_topup_memory_caches+0x25/0x170 [ 443.102783][T22426] kvm_mmu_load+0xd6/0x23e0 [ 443.102795][T22426] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 443.102810][T22426] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 443.102827][T22426] ? __pfx_kvm_mmu_load+0x10/0x10 [ 443.102838][T22426] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 443.102856][T22426] ? kvm_check_and_inject_events+0x961/0x10c0 [ 443.102868][T22426] ? record_steal_time+0x430/0xbe0 [ 443.102886][T22426] vcpu_run+0x39f4/0x5ca0 [ 443.102904][T22426] ? __pfx_vcpu_run+0x10/0x10 [ 443.102921][T22426] ? rcu_is_watching+0x12/0xc0 [ 443.102936][T22426] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 443.102949][T22426] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 443.102966][T22426] kvm_vcpu_ioctl+0x730/0x1730 [ 443.102984][T22426] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 443.103000][T22426] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 443.103017][T22426] ? do_vfs_ioctl+0x226/0x13e0 [ 443.103033][T22426] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 443.103048][T22426] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 443.103066][T22426] ? __fget_files+0x215/0x3d0 [ 443.103076][T22426] ? hook_file_ioctl_common+0x146/0x410 [ 443.103095][T22426] ? selinux_file_ioctl+0x139/0x290 [ 443.103106][T22426] ? selinux_file_ioctl+0xb4/0x290 [ 443.103119][T22426] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 443.103136][T22426] __x64_sys_ioctl+0x18e/0x210 [ 443.103152][T22426] do_syscall_64+0x106/0xf80 [ 443.103164][T22426] ? clear_bhb_loop+0x40/0x90 [ 443.103178][T22426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.103190][T22426] RIP: 0033:0x7ff9ff39c629 [ 443.103201][T22426] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 443.103211][T22426] RSP: 002b:00007ffa00203028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 443.103223][T22426] RAX: ffffffffffffffda RBX: 00007ff9ff615fa0 RCX: 00007ff9ff39c629 [ 443.103231][T22426] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 443.103238][T22426] RBP: 00007ffa00203090 R08: 0000000000000000 R09: 0000000000000000 [ 443.103244][T22426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 443.103250][T22426] R13: 00007ff9ff616038 R14: 00007ff9ff615fa0 R15: 00007fff06082378 [ 443.103265][T22426] [ 443.262465][T21638] Bluetooth: hci5: SCO packet for unknown connection handle 1 [ 443.264240][T21638] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 443.267265][T21638] Bluetooth: hci5: Ignoring connect complete event for invalid link type [ 445.451237][T22382] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 445.557147][T22461] __nla_validate_parse: 3 callbacks suppressed [ 445.557163][T22461] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.5488'. [ 445.567026][T22461] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 445.613633][ T40] audit: type=1400 audit(2000000106.519:1009): avc: denied { getopt } for pid=22463 comm="syz.3.5487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 445.660493][T22477] FAULT_INJECTION: forcing a failure. [ 445.660493][T22477] name failslab, interval 1, probability 0, space 0, times 0 [ 445.665154][T22477] CPU: 0 UID: 0 PID: 22477 Comm: syz.0.5491 Tainted: G L syzkaller #0 PREEMPT(full) [ 445.665173][T22477] Tainted: [L]=SOFTLOCKUP [ 445.665177][T22477] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 445.665184][T22477] Call Trace: [ 445.665188][T22477] [ 445.665193][T22477] dump_stack_lvl+0x100/0x190 [ 445.665215][T22477] should_fail_ex.cold+0x5/0xa [ 445.665229][T22477] should_failslab+0xc2/0x120 [ 445.665247][T22477] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 445.665262][T22477] ? alloc_empty_file+0x55/0x1c0 [ 445.665275][T22477] ? __pfx_stack_trace_save+0x10/0x10 [ 445.665292][T22477] alloc_empty_file+0x55/0x1c0 [ 445.665305][T22477] path_openat+0xe8/0x31a0 [ 445.665315][T22477] ? kasan_save_stack+0x3f/0x50 [ 445.665330][T22477] ? kasan_save_stack+0x30/0x50 [ 445.665368][T22477] ? kasan_save_track+0x14/0x30 [ 445.665382][T22477] ? __kasan_slab_alloc+0x89/0x90 [ 445.665398][T22477] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 445.665412][T22477] ? do_getname+0x35/0x390 [ 445.665425][T22477] ? do_sys_openat2+0xc5/0x1e0 [ 445.665437][T22477] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.665451][T22477] ? __pfx_path_openat+0x10/0x10 [ 445.665467][T22477] do_file_open+0x20e/0x430 [ 445.665478][T22477] ? __pfx_do_file_open+0x10/0x10 [ 445.665498][T22477] ? alloc_fd+0x476/0x790 [ 445.665510][T22477] ? do_getname+0x191/0x390 [ 445.665525][T22477] do_sys_openat2+0x10d/0x1e0 [ 445.665537][T22477] ? __pfx_do_sys_openat2+0x10/0x10 [ 445.665555][T22477] __x64_sys_openat+0x12d/0x210 [ 445.665568][T22477] ? __pfx___x64_sys_openat+0x10/0x10 [ 445.665583][T22477] ? do_user_addr_fault+0x8d6/0x12f0 [ 445.665599][T22477] do_syscall_64+0x106/0xf80 [ 445.665610][T22477] ? clear_bhb_loop+0x40/0x90 [ 445.665624][T22477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.665635][T22477] RIP: 0033:0x7fa16915cece [ 445.665651][T22477] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 445.665662][T22477] RSP: 002b:00007fa169ff3b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 445.665673][T22477] RAX: ffffffffffffffda RBX: 00007fa169ff46c0 RCX: 00007fa16915cece [ 445.665681][T22477] RDX: 0000000000105a02 RSI: 00007fa169ff3c00 RDI: ffffffffffffff9c [ 445.665688][T22477] RBP: 00007fa169ff3c00 R08: 0000000000000000 R09: 0000000000000000 [ 445.665695][T22477] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 445.665701][T22477] R13: 00007fa169416038 R14: 00007fa169415fa0 R15: 00007ffeb80b8678 [ 445.665715][T22477] [ 445.901572][T22496] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5495'. [ 446.014231][T21638] block nbd9: Receive control failed (result -32) [ 446.054394][T22166] block nbd9: shutting down sockets [ 446.115330][T22512] 9p: Bad value for 'rfdno' [ 446.174896][T22519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.178139][T22519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.188245][T22521] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5499'. [ 446.226058][T22527] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5502'. [ 446.347595][T21638] Bluetooth: hci5: SCO packet for unknown connection handle 1 [ 446.350291][T21638] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 446.353150][T21638] Bluetooth: hci5: Ignoring connect complete event for invalid link type [ 446.457109][T22553] netlink: 'syz.0.5511': attribute type 10 has an invalid length. [ 446.463594][T22553] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5511'. [ 446.513718][T22558] netlink: 164 bytes leftover after parsing attributes in process `syz.9.5513'. [ 446.524123][T22562] FAULT_INJECTION: forcing a failure. [ 446.524123][T22562] name failslab, interval 1, probability 0, space 0, times 0 [ 446.529618][T22562] CPU: 2 UID: 0 PID: 22562 Comm: syz.3.5515 Tainted: G L syzkaller #0 PREEMPT(full) [ 446.529636][T22562] Tainted: [L]=SOFTLOCKUP [ 446.529640][T22562] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 446.529647][T22562] Call Trace: [ 446.529651][T22562] [ 446.529656][T22562] dump_stack_lvl+0x100/0x190 [ 446.529678][T22562] should_fail_ex.cold+0x5/0xa [ 446.529693][T22562] should_failslab+0xc2/0x120 [ 446.529710][T22562] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 446.529725][T22562] ? __alloc_skb+0x140/0x710 [ 446.529744][T22562] __alloc_skb+0x140/0x710 [ 446.529760][T22562] ? __alloc_skb+0x5b7/0x710 [ 446.529776][T22562] ? __pfx___alloc_skb+0x10/0x10 [ 446.529797][T22562] netlink_alloc_large_skb+0x69/0x150 [ 446.529811][T22562] netlink_sendmsg+0x680/0xda0 [ 446.529825][T22562] ? __pfx_netlink_sendmsg+0x10/0x10 [ 446.529837][T22562] ? __might_fault+0xc0/0x140 [ 446.529855][T22562] ____sys_sendmsg+0xa54/0xc30 [ 446.529870][T22562] ? __pfx_____sys_sendmsg+0x10/0x10 [ 446.529890][T22562] ___sys_sendmsg+0x190/0x1e0 [ 446.529919][T22562] ? __pfx____sys_sendmsg+0x10/0x10 [ 446.529950][T22562] __sys_sendmsg+0x170/0x220 [ 446.529968][T22562] ? __pfx___sys_sendmsg+0x10/0x10 [ 446.529995][T22562] do_syscall_64+0x106/0xf80 [ 446.530007][T22562] ? clear_bhb_loop+0x40/0x90 [ 446.530021][T22562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.530033][T22562] RIP: 0033:0x7ff9ff39c629 [ 446.530043][T22562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 446.530054][T22562] RSP: 002b:00007ffa00203028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 446.530065][T22562] RAX: ffffffffffffffda RBX: 00007ff9ff615fa0 RCX: 00007ff9ff39c629 [ 446.530073][T22562] RDX: 0000000000004000 RSI: 0000200000000000 RDI: 0000000000000004 [ 446.530080][T22562] RBP: 00007ffa00203090 R08: 0000000000000000 R09: 0000000000000000 [ 446.530086][T22562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 446.530093][T22562] R13: 00007ff9ff616038 R14: 00007ff9ff615fa0 R15: 00007fff06082378 [ 446.530106][T22562] [ 446.602107][T22567] FAULT_INJECTION: forcing a failure. [ 446.602107][T22567] name failslab, interval 1, probability 0, space 0, times 0 [ 446.620958][T22567] CPU: 0 UID: 0 PID: 22567 Comm: syz.9.5516 Tainted: G L syzkaller #0 PREEMPT(full) [ 446.620978][T22567] Tainted: [L]=SOFTLOCKUP [ 446.620981][T22567] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 446.620989][T22567] Call Trace: [ 446.620993][T22567] [ 446.620997][T22567] dump_stack_lvl+0x100/0x190 [ 446.621020][T22567] should_fail_ex.cold+0x5/0xa [ 446.621036][T22567] should_failslab+0xc2/0x120 [ 446.621054][T22567] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 446.621068][T22567] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 446.621089][T22567] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 446.621110][T22567] mmu_topup_memory_caches+0x25/0x170 [ 446.621124][T22567] kvm_mmu_load+0xd6/0x23e0 [ 446.621135][T22567] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 446.621150][T22567] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 446.621181][T22567] ? __pfx_kvm_mmu_load+0x10/0x10 [ 446.621192][T22567] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 446.621210][T22567] ? kvm_check_and_inject_events+0x961/0x10c0 [ 446.621222][T22567] ? record_steal_time+0x430/0xbe0 [ 446.621239][T22567] vcpu_run+0x39f4/0x5ca0 [ 446.621257][T22567] ? __pfx_vcpu_run+0x10/0x10 [ 446.621275][T22567] ? rcu_is_watching+0x12/0xc0 [ 446.621290][T22567] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 446.621315][T22567] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 446.621366][T22567] kvm_vcpu_ioctl+0x730/0x1730 [ 446.621385][T22567] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 446.621401][T22567] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 446.621418][T22567] ? do_vfs_ioctl+0x226/0x13e0 [ 446.621434][T22567] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 446.621449][T22567] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 446.621468][T22567] ? __fget_files+0x215/0x3d0 [ 446.621478][T22567] ? hook_file_ioctl_common+0x146/0x410 [ 446.621496][T22567] ? selinux_file_ioctl+0x139/0x290 [ 446.621508][T22567] ? selinux_file_ioctl+0xb4/0x290 [ 446.621520][T22567] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 446.621537][T22567] __x64_sys_ioctl+0x18e/0x210 [ 446.621555][T22567] do_syscall_64+0x106/0xf80 [ 446.621567][T22567] ? clear_bhb_loop+0x40/0x90 [ 446.621581][T22567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.621593][T22567] RIP: 0033:0x7fd0b7b9c629 [ 446.621604][T22567] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 446.621615][T22567] RSP: 002b:00007fd0b8ab2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 446.621626][T22567] RAX: ffffffffffffffda RBX: 00007fd0b7e15fa0 RCX: 00007fd0b7b9c629 [ 446.621633][T22567] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 446.621640][T22567] RBP: 00007fd0b8ab2090 R08: 0000000000000000 R09: 0000000000000000 [ 446.621660][T22567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 446.621668][T22567] R13: 00007fd0b7e16038 R14: 00007fd0b7e15fa0 R15: 00007ffe27ec0de8 [ 446.621683][T22567] [ 446.677439][T21638] Bluetooth: hci1: SCO packet for unknown connection handle 1 [ 446.704292][T22574] binder: BINDER_SET_CONTEXT_MGR already set [ 446.707824][T21638] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 446.707855][T21638] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 446.755648][T22574] binder: 22559:22574 ioctl 4018620d 200000000100 returned -16 [ 446.815588][T22579] FAULT_INJECTION: forcing a failure. [ 446.815588][T22579] name failslab, interval 1, probability 0, space 0, times 0 [ 446.820823][T22579] CPU: 3 UID: 0 PID: 22579 Comm: syz.3.5518 Tainted: G L syzkaller #0 PREEMPT(full) [ 446.820841][T22579] Tainted: [L]=SOFTLOCKUP [ 446.820846][T22579] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 446.820852][T22579] Call Trace: [ 446.820857][T22579] [ 446.820861][T22579] dump_stack_lvl+0x100/0x190 [ 446.820884][T22579] should_fail_ex.cold+0x5/0xa [ 446.820899][T22579] should_failslab+0xc2/0x120 [ 446.820917][T22579] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 446.820932][T22579] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 446.820953][T22579] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 446.820974][T22579] mmu_topup_memory_caches+0x25/0x170 [ 446.820988][T22579] kvm_mmu_load+0xd6/0x23e0 [ 446.821000][T22579] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 446.821015][T22579] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 446.821032][T22579] ? __pfx_kvm_mmu_load+0x10/0x10 [ 446.821043][T22579] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 446.821060][T22579] ? kvm_check_and_inject_events+0x961/0x10c0 [ 446.821073][T22579] ? record_steal_time+0x430/0xbe0 [ 446.821090][T22579] vcpu_run+0x39f4/0x5ca0 [ 446.821108][T22579] ? __pfx_vcpu_run+0x10/0x10 [ 446.821125][T22579] ? rcu_is_watching+0x12/0xc0 [ 446.821141][T22579] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 446.821154][T22579] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 446.821188][T22579] kvm_vcpu_ioctl+0x730/0x1730 [ 446.821205][T22579] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 446.821222][T22579] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 446.821238][T22579] ? do_vfs_ioctl+0x226/0x13e0 [ 446.821254][T22579] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 446.821270][T22579] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 446.821287][T22579] ? __fget_files+0x215/0x3d0 [ 446.821297][T22579] ? hook_file_ioctl_common+0x146/0x410 [ 446.821316][T22579] ? selinux_file_ioctl+0x139/0x290 [ 446.821353][T22579] ? selinux_file_ioctl+0xb4/0x290 [ 446.821369][T22579] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 446.821390][T22579] __x64_sys_ioctl+0x18e/0x210 [ 446.821406][T22579] do_syscall_64+0x106/0xf80 [ 446.821418][T22579] ? clear_bhb_loop+0x40/0x90 [ 446.821432][T22579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.821443][T22579] RIP: 0033:0x7ff9ff39c629 [ 446.821454][T22579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 446.821465][T22579] RSP: 002b:00007ffa001e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 446.821476][T22579] RAX: ffffffffffffffda RBX: 00007ff9ff616090 RCX: 00007ff9ff39c629 [ 446.821483][T22579] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 446.821490][T22579] RBP: 00007ffa001e2090 R08: 0000000000000000 R09: 0000000000000000 [ 446.821497][T22579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 446.821503][T22579] R13: 00007ff9ff616128 R14: 00007ff9ff616090 R15: 00007fff06082378 [ 446.821518][T22579] [ 447.086264][T22599] block nbd0: not configured, cannot reconfigure [ 447.220459][T21638] Bluetooth: hci0: SCO packet for unknown connection handle 1 [ 447.226426][T21638] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 447.229891][T21638] Bluetooth: hci0: Ignoring connect complete event for invalid link type [ 447.258772][T22622] FAULT_INJECTION: forcing a failure. [ 447.258772][T22622] name failslab, interval 1, probability 0, space 0, times 0 [ 447.263727][T22622] CPU: 3 UID: 0 PID: 22622 Comm: syz.3.5530 Tainted: G L syzkaller #0 PREEMPT(full) [ 447.263746][T22622] Tainted: [L]=SOFTLOCKUP [ 447.263750][T22622] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 447.263756][T22622] Call Trace: [ 447.263761][T22622] [ 447.263766][T22622] dump_stack_lvl+0x100/0x190 [ 447.263788][T22622] should_fail_ex.cold+0x5/0xa [ 447.263803][T22622] should_failslab+0xc2/0x120 [ 447.263821][T22622] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 447.263836][T22622] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 447.263856][T22622] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 447.263877][T22622] mmu_topup_memory_caches+0x25/0x170 [ 447.263891][T22622] kvm_mmu_load+0xd6/0x23e0 [ 447.263902][T22622] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 447.263918][T22622] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 447.263935][T22622] ? __pfx_kvm_mmu_load+0x10/0x10 [ 447.263946][T22622] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 447.263964][T22622] ? kvm_check_and_inject_events+0x961/0x10c0 [ 447.263976][T22622] ? record_steal_time+0x430/0xbe0 [ 447.263994][T22622] vcpu_run+0x39f4/0x5ca0 [ 447.264012][T22622] ? __pfx_vcpu_run+0x10/0x10 [ 447.264029][T22622] ? rcu_is_watching+0x12/0xc0 [ 447.264044][T22622] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 447.264057][T22622] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 447.264074][T22622] kvm_vcpu_ioctl+0x730/0x1730 [ 447.264091][T22622] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 447.264108][T22622] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 447.264125][T22622] ? do_vfs_ioctl+0x226/0x13e0 [ 447.264140][T22622] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 447.264156][T22622] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 447.264174][T22622] ? __fget_files+0x215/0x3d0 [ 447.264184][T22622] ? hook_file_ioctl_common+0x146/0x410 [ 447.264202][T22622] ? selinux_file_ioctl+0x139/0x290 [ 447.264214][T22622] ? selinux_file_ioctl+0xb4/0x290 [ 447.264227][T22622] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 447.264244][T22622] __x64_sys_ioctl+0x18e/0x210 [ 447.264260][T22622] do_syscall_64+0x106/0xf80 [ 447.264272][T22622] ? clear_bhb_loop+0x40/0x90 [ 447.264286][T22622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.264298][T22622] RIP: 0033:0x7ff9ff39c629 [ 447.264308][T22622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 447.264318][T22622] RSP: 002b:00007ffa001e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 447.264330][T22622] RAX: ffffffffffffffda RBX: 00007ff9ff616090 RCX: 00007ff9ff39c629 [ 447.264337][T22622] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 447.264344][T22622] RBP: 00007ffa001e2090 R08: 0000000000000000 R09: 0000000000000000 [ 447.264350][T22622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 447.264357][T22622] R13: 00007ff9ff616128 R14: 00007ff9ff616090 R15: 00007fff06082378 [ 447.264371][T22622] [ 447.621601][T22647] /dev/nullb0: Can't open blockdev [ 447.631089][T22647] /dev/nullb0: Can't open blockdev [ 447.662100][T22655] netlink: 'syz.7.5545': attribute type 10 has an invalid length. [ 447.664539][T22655] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5545'. [ 447.843589][T22666] FAULT_INJECTION: forcing a failure. [ 447.843589][T22666] name failslab, interval 1, probability 0, space 0, times 0 [ 447.849677][T22666] CPU: 3 UID: 0 PID: 22666 Comm: syz.0.5549 Tainted: G L syzkaller #0 PREEMPT(full) [ 447.849706][T22666] Tainted: [L]=SOFTLOCKUP [ 447.849712][T22666] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 447.849723][T22666] Call Trace: [ 447.849729][T22666] [ 447.849736][T22666] dump_stack_lvl+0x100/0x190 [ 447.849781][T22666] should_fail_ex.cold+0x5/0xa [ 447.849805][T22666] should_failslab+0xc2/0x120 [ 447.849832][T22666] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 447.849855][T22666] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 447.849888][T22666] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 447.849921][T22666] mmu_topup_memory_caches+0x25/0x170 [ 447.849942][T22666] kvm_mmu_load+0xd6/0x23e0 [ 447.849961][T22666] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 447.849985][T22666] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 447.850012][T22666] ? __pfx_kvm_mmu_load+0x10/0x10 [ 447.850030][T22666] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 447.850057][T22666] ? kvm_check_and_inject_events+0x961/0x10c0 [ 447.850078][T22666] ? record_steal_time+0x430/0xbe0 [ 447.850105][T22666] vcpu_run+0x39f4/0x5ca0 [ 447.850135][T22666] ? __pfx_vcpu_run+0x10/0x10 [ 447.850165][T22666] ? rcu_is_watching+0x12/0xc0 [ 447.850190][T22666] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 447.850210][T22666] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 447.850238][T22666] kvm_vcpu_ioctl+0x730/0x1730 [ 447.850264][T22666] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 447.850290][T22666] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 447.850316][T22666] ? do_vfs_ioctl+0x226/0x13e0 [ 447.850340][T22666] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 447.850363][T22666] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 447.850406][T22666] ? __fget_files+0x215/0x3d0 [ 447.850421][T22666] ? hook_file_ioctl_common+0x146/0x410 [ 447.850451][T22666] ? selinux_file_ioctl+0x139/0x290 [ 447.850470][T22666] ? selinux_file_ioctl+0xb4/0x290 [ 447.850490][T22666] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 447.850517][T22666] __x64_sys_ioctl+0x18e/0x210 [ 447.850542][T22666] do_syscall_64+0x106/0xf80 [ 447.850569][T22666] ? clear_bhb_loop+0x40/0x90 [ 447.850591][T22666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.850614][T22666] RIP: 0033:0x7fa16919c629 [ 447.850630][T22666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 447.850647][T22666] RSP: 002b:00007fa169ff4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 447.850664][T22666] RAX: ffffffffffffffda RBX: 00007fa169415fa0 RCX: 00007fa16919c629 [ 447.850676][T22666] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000b [ 447.850687][T22666] RBP: 00007fa169ff4090 R08: 0000000000000000 R09: 0000000000000000 [ 447.850698][T22666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 447.850708][T22666] R13: 00007fa169416038 R14: 00007fa169415fa0 R15: 00007ffeb80b8678 [ 447.850734][T22666] [ 447.885374][T22672] kvm: kvm [22661]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 447.996710][T22672] kvm: kvm [22661]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 448.239627][T22693] FAULT_INJECTION: forcing a failure. [ 448.239627][T22693] name failslab, interval 1, probability 0, space 0, times 0 [ 448.244561][T22693] CPU: 0 UID: 0 PID: 22693 Comm: syz.3.5557 Tainted: G L syzkaller #0 PREEMPT(full) [ 448.244589][T22693] Tainted: [L]=SOFTLOCKUP [ 448.244596][T22693] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 448.244607][T22693] Call Trace: [ 448.244615][T22693] [ 448.244623][T22693] dump_stack_lvl+0x100/0x190 [ 448.244657][T22693] should_fail_ex.cold+0x5/0xa [ 448.244681][T22693] should_failslab+0xc2/0x120 [ 448.244709][T22693] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 448.244732][T22693] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 448.244765][T22693] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 448.244800][T22693] mmu_topup_memory_caches+0x25/0x170 [ 448.244823][T22693] kvm_mmu_load+0xd6/0x23e0 [ 448.244842][T22693] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 448.244867][T22693] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 448.244896][T22693] ? __pfx_kvm_mmu_load+0x10/0x10 [ 448.244914][T22693] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 448.244942][T22693] ? kvm_check_and_inject_events+0x961/0x10c0 [ 448.244962][T22693] ? record_steal_time+0x430/0xbe0 [ 448.244990][T22693] vcpu_run+0x39f4/0x5ca0 [ 448.245021][T22693] ? __pfx_vcpu_run+0x10/0x10 [ 448.245051][T22693] ? rcu_is_watching+0x12/0xc0 [ 448.245076][T22693] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 448.245097][T22693] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 448.245125][T22693] kvm_vcpu_ioctl+0x730/0x1730 [ 448.245153][T22693] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 448.245180][T22693] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 448.245208][T22693] ? do_vfs_ioctl+0x226/0x13e0 [ 448.245233][T22693] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 448.245257][T22693] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 448.245287][T22693] ? __fget_files+0x215/0x3d0 [ 448.245302][T22693] ? hook_file_ioctl_common+0x146/0x410 [ 448.245355][T22693] ? selinux_file_ioctl+0x139/0x290 [ 448.245374][T22693] ? selinux_file_ioctl+0xb4/0x290 [ 448.245400][T22693] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 448.245427][T22693] __x64_sys_ioctl+0x18e/0x210 [ 448.245453][T22693] do_syscall_64+0x106/0xf80 [ 448.245472][T22693] ? clear_bhb_loop+0x40/0x90 [ 448.245495][T22693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.245514][T22693] RIP: 0033:0x7ff9ff39c629 [ 448.245531][T22693] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 448.245547][T22693] RSP: 002b:00007ffa001e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 448.245565][T22693] RAX: ffffffffffffffda RBX: 00007ff9ff616090 RCX: 00007ff9ff39c629 [ 448.245576][T22693] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 448.245587][T22693] RBP: 00007ffa001e2090 R08: 0000000000000000 R09: 0000000000000000 [ 448.245597][T22693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 448.245608][T22693] R13: 00007ff9ff616128 R14: 00007ff9ff616090 R15: 00007fff06082378 [ 448.245633][T22693] [ 448.445470][T22697] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 448.456334][T22700] dlm: no local IP address has been set [ 448.460714][T22700] dlm: cannot start dlm midcomms -107 [ 448.463443][ T40] audit: type=1326 audit(2000000109.369:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22699 comm="syz.9.5560" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd0b7b9c629 code=0x0 [ 448.473176][ T40] audit: type=1400 audit(2000000109.379:1011): avc: denied { setopt } for pid=22698 comm="syz.0.5561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 448.773808][T22727] netlink: 830 bytes leftover after parsing attributes in process `syz.0.5567'. [ 448.818459][T22735] netlink: 268 bytes leftover after parsing attributes in process `syz.0.5570'. [ 448.821469][T22735] openvswitch: netlink: Flow key attr not present in new flow. [ 448.851368][T22738] /dev/sg0: Can't lookup blockdev [ 448.854425][T22741] /dev/sg0: Can't lookup blockdev [ 448.913898][T22745] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5573'. [ 448.924031][T22745] 0·: renamed from 71· (while UP) [ 448.927939][T22745] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 448.982493][T22748] program syz.3.5574 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 449.050065][T22752] FAULT_INJECTION: forcing a failure. [ 449.050065][T22752] name failslab, interval 1, probability 0, space 0, times 0 [ 449.055397][T22752] CPU: 0 UID: 0 PID: 22752 Comm: syz.0.5575 Tainted: G L syzkaller #0 PREEMPT(full) [ 449.055424][T22752] Tainted: [L]=SOFTLOCKUP [ 449.055431][T22752] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 449.055442][T22752] Call Trace: [ 449.055448][T22752] [ 449.055456][T22752] dump_stack_lvl+0x100/0x190 [ 449.055490][T22752] should_fail_ex.cold+0x5/0xa [ 449.055515][T22752] should_failslab+0xc2/0x120 [ 449.055542][T22752] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 449.055566][T22752] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 449.055599][T22752] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 449.055647][T22752] mmu_topup_memory_caches+0x25/0x170 [ 449.055669][T22752] kvm_mmu_load+0xd6/0x23e0 [ 449.055688][T22752] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 449.055712][T22752] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 449.055739][T22752] ? __pfx_kvm_mmu_load+0x10/0x10 [ 449.055757][T22752] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 449.055784][T22752] ? kvm_check_and_inject_events+0x961/0x10c0 [ 449.055804][T22752] ? record_steal_time+0x430/0xbe0 [ 449.055831][T22752] vcpu_run+0x39f4/0x5ca0 [ 449.055860][T22752] ? __pfx_vcpu_run+0x10/0x10 [ 449.055889][T22752] ? rcu_is_watching+0x12/0xc0 [ 449.055914][T22752] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 449.055935][T22752] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 449.055963][T22752] kvm_vcpu_ioctl+0x730/0x1730 [ 449.055990][T22752] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 449.056016][T22752] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 449.056043][T22752] ? do_vfs_ioctl+0x226/0x13e0 [ 449.056066][T22752] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 449.056092][T22752] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 449.056121][T22752] ? __fget_files+0x215/0x3d0 [ 449.056137][T22752] ? hook_file_ioctl_common+0x146/0x410 [ 449.056167][T22752] ? selinux_file_ioctl+0x139/0x290 [ 449.056186][T22752] ? selinux_file_ioctl+0xb4/0x290 [ 449.056206][T22752] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 449.056233][T22752] __x64_sys_ioctl+0x18e/0x210 [ 449.056259][T22752] do_syscall_64+0x106/0xf80 [ 449.056278][T22752] ? clear_bhb_loop+0x40/0x90 [ 449.056300][T22752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.056319][T22752] RIP: 0033:0x7fa16919c629 [ 449.056335][T22752] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 449.056352][T22752] RSP: 002b:00007fa169ff4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 449.056369][T22752] RAX: ffffffffffffffda RBX: 00007fa169415fa0 RCX: 00007fa16919c629 [ 449.056386][T22752] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 449.056397][T22752] RBP: 00007fa169ff4090 R08: 0000000000000000 R09: 0000000000000000 [ 449.056407][T22752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 449.056417][T22752] R13: 00007fa169416038 R14: 00007fa169415fa0 R15: 00007ffeb80b8678 [ 449.056444][T22752] [ 449.180883][T21638] Bluetooth: hci0: command 0x0406 tx timeout [ 449.298164][T21638] Bluetooth: hci5: SCO packet for unknown connection handle 1 [ 449.299913][T21638] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 449.302355][T21638] Bluetooth: hci5: Ignoring connect complete event for invalid link type [ 449.327034][T21638] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 449.380690][T22767] FAULT_INJECTION: forcing a failure. [ 449.380690][T22767] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 449.389912][T22767] CPU: 1 UID: 0 PID: 22767 Comm: syz.9.5579 Tainted: G L syzkaller #0 PREEMPT(full) [ 449.389944][T22767] Tainted: [L]=SOFTLOCKUP [ 449.389951][T22767] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 449.389962][T22767] Call Trace: [ 449.389969][T22767] [ 449.389977][T22767] dump_stack_lvl+0x100/0x190 [ 449.390012][T22767] should_fail_ex.cold+0x5/0xa [ 449.390033][T22767] ? prepare_alloc_pages+0x16d/0x5f0 [ 449.390066][T22767] should_fail_alloc_page+0xeb/0x140 [ 449.390097][T22767] prepare_alloc_pages+0x1f0/0x5f0 [ 449.390132][T22767] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 449.390157][T22767] ? filter_irq_stacks+0x51/0x90 [ 449.390183][T22767] ? stack_depot_save_flags+0x27/0x9d0 [ 449.390217][T22767] ? kasan_save_stack+0x3f/0x50 [ 449.390242][T22767] ? kasan_save_stack+0x30/0x50 [ 449.390272][T22767] ? kasan_save_track+0x14/0x30 [ 449.390296][T22767] ? __kasan_kmalloc+0xaa/0xb0 [ 449.390319][T22767] ? __kvmalloc_node_noprof+0x360/0xa00 [ 449.390344][T22767] ? __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 449.390372][T22767] ? mmu_topup_memory_caches+0xbc/0x170 [ 449.390393][T22767] ? kvm_mmu_load+0xd6/0x23e0 [ 449.390409][T22767] ? vcpu_run+0x39f4/0x5ca0 [ 449.390429][T22767] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 449.390452][T22767] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 449.390476][T22767] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.390516][T22767] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 449.390543][T22767] ? policy_nodemask+0xed/0x4f0 [ 449.390575][T22767] alloc_pages_mpol+0x1fb/0x550 [ 449.390605][T22767] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 449.390634][T22767] ? __kasan_kmalloc+0xaa/0xb0 [ 449.390664][T22767] alloc_pages_noprof+0x131/0x390 [ 449.390695][T22767] get_free_pages_noprof+0x10/0xb0 [ 449.390722][T22767] __kvm_mmu_topup_memory_cache+0x278/0x5f0 [ 449.390759][T22767] mmu_topup_memory_caches+0xbc/0x170 [ 449.390782][T22767] kvm_mmu_load+0xd6/0x23e0 [ 449.390801][T22767] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 449.390826][T22767] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 449.390855][T22767] ? __pfx_kvm_mmu_load+0x10/0x10 [ 449.390874][T22767] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 449.390902][T22767] ? kvm_check_and_inject_events+0x961/0x10c0 [ 449.390922][T22767] ? record_steal_time+0x430/0xbe0 [ 449.390949][T22767] vcpu_run+0x39f4/0x5ca0 [ 449.390980][T22767] ? __pfx_vcpu_run+0x10/0x10 [ 449.391010][T22767] ? rcu_is_watching+0x12/0xc0 [ 449.391035][T22767] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 449.391055][T22767] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 449.391083][T22767] kvm_vcpu_ioctl+0x730/0x1730 [ 449.391111][T22767] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 449.391137][T22767] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 449.391163][T22767] ? do_vfs_ioctl+0x226/0x13e0 [ 449.391188][T22767] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 449.391212][T22767] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 449.391242][T22767] ? __fget_files+0x215/0x3d0 [ 449.391258][T22767] ? hook_file_ioctl_common+0x146/0x410 [ 449.391312][T22767] ? selinux_file_ioctl+0x139/0x290 [ 449.391332][T22767] ? selinux_file_ioctl+0xb4/0x290 [ 449.391354][T22767] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 449.391381][T22767] __x64_sys_ioctl+0x18e/0x210 [ 449.391406][T22767] do_syscall_64+0x106/0xf80 [ 449.391425][T22767] ? clear_bhb_loop+0x40/0x90 [ 449.391447][T22767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.391466][T22767] RIP: 0033:0x7fd0b7b9c629 [ 449.391482][T22767] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 449.391498][T22767] RSP: 002b:00007fd0b8ab2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 449.391516][T22767] RAX: ffffffffffffffda RBX: 00007fd0b7e15fa0 RCX: 00007fd0b7b9c629 [ 449.391527][T22767] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009 [ 449.391538][T22767] RBP: 00007fd0b8ab2090 R08: 0000000000000000 R09: 0000000000000000 [ 449.391549][T22767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 449.391560][T22767] R13: 00007fd0b7e16038 R14: 00007fd0b7e15fa0 R15: 00007ffe27ec0de8 [ 449.391603][T22767] [ 449.641292][T10141] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] SMP KASAN NOPTI [ 449.646016][T10141] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 449.649407][T10141] CPU: 0 UID: 0 PID: 10141 Comm: kworker/u32:59 Tainted: G L syzkaller #0 PREEMPT(full) [ 449.653794][T10141] Tainted: [L]=SOFTLOCKUP [ 449.655505][T10141] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 449.659644][T10141] Workqueue: krdsd rds_tcp_accept_worker [ 449.661988][T10141] RIP: 0010:rds_tcp_accept_one+0x9aa/0xd90 [ 449.664657][T10141] Code: fa 48 c1 ea 03 80 3c 02 00 0f 85 b1 03 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b 64 24 18 49 8d 7c 24 12 48 89 fa 48 c1 ea 03 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 08 84 c0 0f 85 76 03 00 00 [ 449.672174][T10141] RSP: 0018:ffffc900069a7b68 EFLAGS: 00010202 [ 449.674607][T10141] RAX: dffffc0000000000 RBX: ffff888042d26a00 RCX: 0000000000000000 [ 449.677764][T10141] RDX: 0000000000000002 RSI: ffffffff8adb769a RDI: 0000000000000012 [ 449.680908][T10141] RBP: ffff88805a7028c0 R08: 0000000000000001 R09: 0000000000000000 [ 449.684039][T10141] R10: 0000000000000001 R11: 1ffffffff1cfe929 R12: 0000000000000000 [ 449.687152][T10141] R13: ffff88803a820000 R14: ffff88802fb98000 R15: ffff88803a820020 [ 449.690326][T10141] FS: 0000000000000000(0000) GS:ffff8880d634a000(0000) knlGS:0000000000000000 [ 449.693980][T10141] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 449.696556][T10141] CR2: 00007fa169f4da08 CR3: 00000000498cc000 CR4: 0000000000352ef0 [ 449.699820][T10141] Call Trace: [ 449.701261][T10141] [ 449.702520][T10141] ? __pfx_rds_tcp_accept_one+0x10/0x10 [ 449.704755][T10141] rds_tcp_accept_worker+0x41/0x60 [ 449.706809][T10141] process_one_work+0x9d7/0x1920 [ 449.708822][T10141] ? __pfx_process_one_work+0x10/0x10 [ 449.710969][T10141] ? __pfx_rds_tcp_accept_worker+0x10/0x10 [ 449.713273][T10141] worker_thread+0x5da/0xe40 [ 449.715153][T10141] ? kthread+0x13a/0x450 [ 449.716945][T10141] ? __pfx_worker_thread+0x10/0x10 [ 449.719062][T10141] kthread+0x370/0x450 [ 449.720752][T10141] ? __pfx_kthread+0x10/0x10 [ 449.722699][T10141] ret_from_fork+0x754/0xd80 [ 449.724544][T10141] ? __pfx_ret_from_fork+0x10/0x10 [ 449.726655][T10141] ? __switch_to+0x7b4/0x1120 [ 449.728563][T10141] ? __pfx_kthread+0x10/0x10 [ 449.730567][T10141] ret_from_fork_asm+0x1a/0x30 [ 449.732567][T10141] [ 449.733859][T10141] Modules linked in: [ 449.736116][T10141] ---[ end trace 0000000000000000 ]--- [ 449.737936][ T40] audit: type=1400 audit(2000000110.649:1012): avc: denied { read } for pid=5317 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 449.739521][T10141] RIP: 0010:rds_tcp_accept_one+0x9aa/0xd90 [ 449.747436][ T40] audit: type=1400 audit(2000000110.649:1013): avc: denied { search } for pid=5317 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 449.748128][T10141] Code: fa 48 c1 ea 03 80 3c 02 00 0f 85 b1 03 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b 64 24 18 49 8d 7c 24 12 48 89 fa 48 c1 ea 03 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 08 84 c0 0f 85 76 03 00 00 [ 449.756572][ T40] audit: type=1400 audit(2000000110.649:1014): avc: denied { search } for pid=5317 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 449.765353][T10141] RSP: 0018:ffffc900069a7b68 EFLAGS: 00010202 [ 449.774472][ T40] audit: type=1400 audit(2000000110.649:1015): avc: denied { add_name } for pid=5317 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 449.776498][T10141] RAX: dffffc0000000000 RBX: ffff888042d26a00 RCX: 0000000000000000 [ 449.785089][ T40] audit: type=1400 audit(2000000110.649:1016): avc: denied { create } for pid=5317 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 449.788257][T10141] RDX: 0000000000000002 RSI: ffffffff8adb769a RDI: 0000000000000012 [ 449.788272][T10141] RBP: ffff88805a7028c0 R08: 0000000000000001 R09: 0000000000000000 [ 449.788283][T10141] R10: 0000000000000001 R11: 1ffffffff1cfe929 R12: 0000000000000000 [ 449.788294][T10141] R13: ffff88803a820000 R14: ffff88802fb98000 R15: ffff88803a820020 [ 449.788311][T10141] FS: 0000000000000000(0000) GS:ffff8880d634a000(0000) knlGS:0000000000000000 [ 449.788342][T10141] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 449.788355][T10141] CR2: 00007fa169f4da08 CR3: 000000000e598000 CR4: 0000000000352ef0 [ 449.796496][ T40] audit: type=1400 audit(2000000110.649:1017): avc: denied { append open } for pid=5317 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 449.799637][T10141] Kernel panic - not syncing: Fatal exception [ 449.802620][T10141] Kernel Offset: disabled