last executing test programs: 1m6.790690807s ago: executing program 2 (id=1466): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791090000000000007000000002000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3f}, 0x48) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmmsg$sock(r0, &(0x7f0000002980)=[{{&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x80, &(0x7f0000001340)=[{&(0x7f0000000100)="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", 0x1000}, {&(0x7f0000001100)="efcb7dd4eba938e80b2a940f24c24554456fd99218e7e07b0d89c7a6dc6007d49f0feabea9f30442f1873783de8487287fcc13c2affc3764f8584c6e6c7877971a62cfb14d43242089eb4e03c6e14d7fdb2c61c9e2df076d8e87a9afe95736092540742ad900e78a211e8aa449945d108f1a5263013e6b95a4cad79894e9537c2d2c5cfda3392f06221f7c0dc7ee975b03a824238f6ed32db8dafa8a8615490a93c5bb455d5a75e4dce341bfe39e2967f7de33154ea7f86e76448deaf26f200c326a8fe69c299b85a6dfd6530b23d7b8b9669b1e2489673e7acb32bf5dd0093f28a4e17e3c8ade6942a82030c4587d11271b6f", 0xf3}, {&(0x7f0000001200)="a4085d1313893a8690fe6eaea01a56c521fa8283be319c41899bd94b8638d886ba59bbf38fd918d73e2cfdb3b119a3d75977aadd7b1ec3a00f42fef96d55fe51581476ae395f331dcad93813a4402446508bfbbbcfc6a54fd42d5bf5c516819e9aa29d419006fadcd4d96441de1178c832c273636547832e87f88789d167b89e5f9d8871779a1a38923069518bfd004ac83f61e48abefc5135afb3f46c7f7c0e43c32beda1eba7aa8a2779b1e8d0f2498222a81e4d010d57bc42b90ad4acdef0d4a45386314f53df631655b3fa132a0b", 0xd0}, {&(0x7f0000001300)="b984f2126de8596efff92e1961", 0xd}], 0x4, &(0x7f0000001380)}}, {{&(0x7f00000013c0)=@caif=@util={0x25, "6e87e3d28a8159262602121abb9398ed"}, 0x80, &(0x7f0000002440)=[{&(0x7f0000001440)="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", 0x1000}], 0x1, &(0x7f0000002480)=[@txtime={{0x18}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x10000}}, @mark={{0x14, 0x1, 0x24, 0x800}}, @txtime={{0x18, 0x1, 0x3d, 0x2d}}], 0x78}}, {{&(0x7f0000002500)=@xdp={0x2c, 0x8, 0x0, 0x3e}, 0x80, &(0x7f0000002840)=[{&(0x7f0000002580)="211b18a12b1255ca0965fa6188878f6a47ad298d6263a101cc07c96c29a89b506a4db8b09ef05ca82ac3dafa9291161611b8481c4ce09f5a13dd33ba1564c4563c791a5457d79bd4c92cd4d52867c38fa6c5f43721978f5fbf34184bfcf5bcae8471f409da4d1b3b463f58234aa0e82866411e11a194cfc7dc65bbeaa080f916e6b3ca5cd0aa0522a6b9f4c784ece785ea", 0x91}, {&(0x7f0000002640)="05545914d56d0dbdf27ff502a5ea01de251078bfab4772da07d8d8a1635b7fb07f02635334dbcaa0948679c52553948895f9e9da01587f583d230536fd60bb9e2b5c659b89fda18aeee647c7c21a1b7785390327009433f140390b7f3368d04f6bcec85622bade9544be84cd22d84e961ac16c0943d36eeba1b3a26b919c1805e76bbbe246db03d16347", 0x8a}, {&(0x7f0000002700)="d2fe56f6b5ac8d1959a572d87d6c26e66c976d5b1c467320208ce83e5b4d247ee3612cc8dc91bdcceff0c6cc53", 0x2d}, {&(0x7f0000002740)="99db83d4ba1d86b6c7bab2eecca9180120989d688b22300a128f1f9c5520476402df44847708f7d0d8782998e9a26a33df6f7fa3f929ea1920f39008e8a0a5c1752599a20f9e03457e04dcbd0e72f2a0e4041129d80f2e71da0b8c8e5a16cd2b89baefde30877f77417f81cd84f8c3a66276b6364aba613da1ec3a71a04e86d3bcc47b041b30f938d3d1a5de2bee8a988dba47eb31f66960c38bdcc86eff75875a7ede47567134e9e3f9bbfcb7582c0e1f17f7c14dae1c4bb9d8e20a68d05375efec334ab07fd455f3556704ad87e38e850a3b7a61addd1e42939d81ab4bab27813611daf1877006548bb5177459a3c9470cab31fd84ebcbdf", 0xf9}], 0x4, &(0x7f0000002880)=[@txtime={{0x18, 0x1, 0x3d, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x1e31}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @txtime={{0x18}}, @timestamping={{0x14, 0x1, 0x25, 0x7f}}], 0xd8}}], 0x3, 0x40084) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2710, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001380), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0xffff, 0x100000, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x0, 0x20000000, 0x1883}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0x100, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd6, 0x4, 0x6, 0x0, 0x3, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x350bae1a, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xd4f, 0x7, 0xf2, 0x10, 0x5, 0x8, 0x10001, 0x401, 0x80000000, 0x2401, 0x3ca5, 0x1, 0x0, 0xff, 0x4, 0x4, 0x3, 0x0, 0x0, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x3, 0xa, 0x0, 0x10000, 0x401, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x1, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffd, 0xa7d6, 0xb6eb, 0xc74, 0x77, 0x1, 0xff, 0x5cb5, 0xfffffffe, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0x0, 0x401, 0x2, 0x2, 0x4680, 0x7, 0xe665, 0x3c6e, 0x3, 0x40, 0x80, 0x4b, 0x8000, 0x2, 0xb, 0x6, 0x4fa4, 0x80000002, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x9, 0xfd, 0x101, 0x4, 0x40, 0xa, 0x1b, 0x1ff, 0x7ff, 0x2, 0x80000000, 0xffff, 0x9, 0x0, 0x6, 0x2, 0x1, 0x3, 0xa0, 0xf, 0x1ff, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x9, 0x1, 0xf1a, 0x664, 0x4, 0x9, 0x9, 0x2, 0x4, 0xfffffffd, 0x10, 0x0, 0x9, 0x10000, 0x1, 0x9, 0xf7a, 0xc6, 0x1, 0x4, 0x6, 0xffffffff, 0x6, 0x10001, 0x8, 0x68, 0x7, 0x1, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0x2, 0x40, 0x1c, 0x80, 0xb5f8, 0x8bc, 0x3, 0x101, 0x5, 0x63, 0x4, 0x8001, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x7, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x8, 0x6688, 0x45e3, 0x5, 0x7, 0x1, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0xce, 0xf, 0x0, 0x1, 0x667, 0x3, 0x0, 0x9, 0x9, 0x37d, 0x10001, 0xc, 0x1, 0x1, 0x2, 0x6, 0x4, 0x6, 0x1, 0x9, 0x6, 0xfffffffa, 0x2, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80000001, 0x8, 0x8000, 0x3a, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x4, 0x10000, 0x4, 0xffff, 0xe, 0x89, 0x2, 0x7, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x0, 0x8, 0x0, 0x2, 0x80000004, 0x29, 0x9, 0x0, 0x4, 0x4, 0x0, 0x1, 0x4, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x4, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0xbf, 0x0, 0x8, 0x40, 0xd3, 0x7, 0x1, 0x89aa, 0x8, 0x7, 0xf0ce, 0x4, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x1, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xc, 0x6, 0x9, 0xfffffeff, 0x4, 0x2, 0x7fff, 0x101, 0x7, 0x6, 0x706, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x6, 0x1, 0xa9c, 0x9, 0x9, 0x1, 0x2, 0x5, 0x1000, 0x5, 0x1ff, 0x9, 0x3, 0x3, 0x10001, 0xffff0000, 0xf, 0x1, 0xffffa5ba, 0xffffa9b4, 0x8, 0x4, 0x8000005, 0x2000003, 0x4b5f, 0x6, 0xa, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0xc8f, 0x1, 0x7, 0x8, 0x1, 0x10000, 0x57dc, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0x5, 0x5, 0x4, 0xfff, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x7f, 0x4, 0x2, 0x80000000, 0xd, 0x3, 0x1, 0x0, 0x5, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xae6, 0x9, 0xffffa0ae, 0x9, 0x6, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x9a, 0x9, 0xb, 0x800, 0x4, 0x3ff, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x2, 0x20000000, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0x8000001, 0x0, 0xfff, 0x101, 0x4, 0x0, 0x96c6, 0xc, 0x5, 0xfff, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x6, 0x4b15, 0x10000, 0x1, 0x9, 0x1, 0xd, 0x9, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x3, 0x10001, 0x1, 0x7, 0x1, 0x5, 0x8, 0xffffc487, 0x200, 0x10001, 0x37c, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x0, 0x3, 0x4, 0x80000000, 0xb46d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x9, 0x3, 0xffffffff, 0x9, 0x7f, 0x6, 0x8, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x28, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x80000001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0xff, 0x5, 0x2, 0x2, 0x400004, 0x10000, 0x80000001, 0x5, 0x1c00, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0xffff, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x9, 0x8, 0x0, 0x5, 0xf, 0x5, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x9, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x7, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x1, 0x30, 0xffffff7e, 0x1, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x4000, 0x1, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x43, 0x3, 0x9, 0x5, 0x80000000, 0x9, 0x0, 0x5, 0x81, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x1a, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x2, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x9, 0x6, 0x9, 0x9, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x8000002, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0xfb4, 0xbf8, 0x7, 0x405, 0x6, 0x4, 0x8001, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0x3, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x100, 0x8, 0x3, 0x6, 0x80000000, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0x7fffffff, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x5, 0x6, 0x1, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xd, 0x3, 0x4, 0x3, 0x81, 0x8, 0x14, 0x8, 0x9, 0x6, 0xffff, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0x0, 0x924, 0x6, 0x100, 0x1, 0x5, 0xffff351b, 0x8, 0xfffffffb, 0x7, 0x9, 0x2, 0x5, 0x4, 0x1, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x5, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0xb8, 0x8, 0x5, 0xfffffff7, 0x7, 0x7, 0x5, 0x6330, 0x0, 0x6, 0xea, 0x0, 0xfff, 0x809, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x2ec, 0x9, 0x6, 0x3ff, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x8, 0x3, 0xe, 0x1, 0x1, 0xc, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x9, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0x9, 0xc0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x0, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xfffffff8, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x8, 0x1, 0xfffffffb, 0x1af88, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x40, 0x8, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x7fff, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x7, 0x7ff, 0x0, 0x1, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xdd, 0x8, 0x89, 0x0, 0x100, 0x1, 0x9, 0xe75, 0x400, 0x1, 0x8, 0x200, 0xe9ab, 0xfffffff8, 0x8000, 0x7, 0x2, 0x2, 0x43, 0x3ff, 0x8, 0x7, 0x9, 0x1, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x5, 0x8]}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f0000019740)={&(0x7f00000196c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000019700)={0xfffffffffffffffd}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="c0000000190001000000000010000000e0000002000000000000000000000000ac1414bb00000000000000000000000000000000000000000a"], 0xc0}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r5, &(0x7f0000019840)={&(0x7f0000019780)={0x10, 0x0, 0x0, 0x400002}, 0xc, &(0x7f0000019800)={&(0x7f00000197c0)={0x28, r2, 0x0, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x49}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x48094}, 0x20000080) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r6, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"}) ioctl$SIOCSIFHWADDR(r6, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @remote}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000003340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000003300)={&(0x7f0000002a40)={0x894, r2, 0x10, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3ff, 0x14}}}}, [@NL80211_ATTR_FRAME={0x34, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x4}, @device_a, @device_b, @from_mac=@device_b, {0x3, 0x1}, @value=@ver_80211n={0x0, 0x9, 0x2, 0x2, 0x0, 0x0, 0x1}}, 0xf, @val={0x8c, 0x10, {0xbd4, "2d49db3dddd6", @short="f2d319bc14aa09d3"}}}}, @NL80211_ATTR_FRAME={0x3a8, 0x33, @assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x2}, @device_b, @broadcast, @random="98afabfa137d", {0x1, 0x5}}, 0x2000, 0x3d, @default, @void, @void, [{0xdd, 0x84, "f2a5b4c74cff921374f270aac968f507a0d9ed317e412d2056c686ffbbb70029fac6f4c67c51fc84a30e8731b7ec885aebd733db41422877937df375744e21982e672fc2c18f58caf57d022ca298684fba188b7f2561dcf11badbb31924881fc7fba225510da16338876146823683c71f7d7d5c01c13f0369d5a3d323b7815e680012283"}, {0xdd, 0xe3, "219de3e4188905b90ec33a289418040dd21884c0f22e69d13285716484f42abf2ef6e7c888871cc6538b8bf4e1700f9309bdddd65fa5b718563114fee1e82125a5ebc4fd7a07180bfcd8c2443c9fbda3525c62ee068a255b688385d7aeec9ab6480aa455e83feda2b960724bf20d0a33482f9550941f85bc589e0bcf9b475fc80889864358969e29323a52332345c8e74cefe2c501611c13aab730fe394f3f23eda3a22d1926009def58caa3233c21fc14c0061520fcec98e2a072f63881e5c2b1a626dc41f22b5ef4bd6067ab121d5a0b8370963a344963102c4cde362fe263c90d03"}, {0xdd, 0xf3, "37be109679e48dfd70910a819dff9795924cca119a2763724609a5a66c6d8204cfb916b33de0e4ffb387414152d15dd29199b7199dc42f989c5e7dae7d90129ac733f415894d2c5497f6066fe50c0cb8817574608d117dc16d97f38339df4296bbabc20d7d35706c596c3eb3ace3510091d717f50b2f54eaaec62f7d275aa65b391d41d9c7902916c2398576537f92c6167db35c57651e0cc91edd510239c7b171cb084cf24a1c92bcd427f35bd6d4eb312cb0af0ba924a839cfcaba9831cd182c99eb2bf2c8aee54952a18f06a9f01bf1898c5bb5efbeca2b2f026d4f60228a53db3086da68d8853e8b8b34e37bcb4f852650"}, {0xdd, 0x9e, "b3aaa530cffef31b60a22a5003e91a7e5d775c03b9909402b4f43a61b8d68b3f60dff9f5341908cfb6841eec37a1457668a69bbd9d239ae1e1d12567e87de2ffa173587d7cbf437e74f63ae054cfa41ce990748e7a2a6aae225b1bc4b2af38df5d076bcb7f7c834d3075f5f36c4c354e2d90b1a3344dc06c1bbaaca22bc42f009b32ba7a092197c46c57ba9f9a521d9f4759f881deb33e19880f2c6ca2b3"}, {0xdd, 0x84, "53d6f12f6c3edc06ae8d69083f5139d52ea0d3dcbb2861de7ec9c7fd1d4bd3333db761c0ecf0d6ddedf62e0572f34748e14c8b2b2ca89ebbf274951d7102a1b4499b915c45e4eee9debdaae9ffa7a8fdc9fd735e97bee37fa746ac793b5676af384d461512773c116978b860a3cd966e7b92f11fb2c3f47c7db5d50834e854cd9c9b49a6"}]}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_FRAME={0x2c, 0x33, @action_no_ack={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x4}, @device_b, @broadcast, @initial, {0x8, 0x1}}, @sp_mp_close={0xf, 0x3, {{0x72, 0x6}, {0x75, 0x4, {0x1, 0x3, @void, @void, @void}}}}}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0xfff, 0x8, 0x6]}, @NL80211_ATTR_FRAME={0x3a, 0x33, @action_no_ack={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x6}, @device_a, @device_a, @random="9a2a8cd57a52", {0xf, 0x7}}, @tdls_chsw_resp={0xc, 0x6, {0xb, {0x65, 0x12, {@initial, @broadcast, @device_b}}, {0x68, 0x4, {0x4, 0xe}}}}}}, @NL80211_ATTR_FRAME={0x408, 0x33, @probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x4}, @device_a, @device_a, @from_mac=@broadcast, {0x9, 0x7}, @value=@ver_80211n={0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1}}, 0x1, @random=0x1, 0x3282, @void, @val, @void, @void, @void, @void, @val={0x72, 0x6}, @void, [{0xdd, 0x8, "2a5a3380b4977197"}, {0xdd, 0xb, "9e62f408b620dd0e5e3427"}, {0xdd, 0x26, "a9cfaecf317fd79b22bbd203e66cf4a4d6c4cd8e55ec329f01aff860497edc3f5c31367be482"}, {0xdd, 0xe0, "525d3f3968468859cc35bbfedb68ecd1de44405d5400ddac7331a09a0a67acd014f5d0ba0c5e720ce7c959e463a9c08a7b914effe47e5eade5fbe11682b625a53c5551057bedeefb06b418ac313c99900e5f6040b0eaa12a78862f476c0f5d2661b269ac3285808d68b28e468ccb26416a63af587a39f4559ac396eec2af045fb9706c443fb9b0c0cdcd612b47c6391e709b9c5ab394d38b33758954569f83823e3412039bb1dfd5a94b82be9cef8d87c4271e2c187002771b10763ae91af8f9ccf789dddec2a8517eef07f8855034a3129424812de013cba90f5026e98533d6"}, {0xdd, 0x46, "1d7beda8eef2760a8de0a78c2d4b75557d95e87780e57a07bd7eb8d5bc013ca2f9c7772aa7a996f97ac057a944b077a524c77a0556bdcd23117c8e26461cebe5ef38a1ccd1ea"}, {0xdd, 0x69, "42f2c1c6fc70216380e82d0a8234e6d5ff466b82497f98c199a5f2f7042f9c9c59f2a19a6792bef6197b3ca7f7c1110ca2c83a8a02c797778de8cf59a0a8e273992060a047e3df6a17d3a2ca6ac9c7079120544a4334fa0026767cbbe8f0da3158bb492eeb8eeabe00"}, {0xdd, 0xe1, "b6e23a316d1e34fd2c93ac3fa2e68c7b073dc810a250959338ad1a142f532962f7b0fa473551f0e8f7cb6882f2cd37ea53e17147c07e0c6b48c6631050e62eb5c7b861f044ac93cacc7a0070736c875d2755c733b6f72e4a77b2118fb3b504972bcc23103caac1ca4cd0e4c8b70f90285f617fa20d31d8530988a4b469cbae059c2ade3945ebb2ddc5650e17bc0031f4f51fc22bc79d6b35a4511305fb8b4a9b80b9412e9ade147d98ff568d5824bff1d71189d2089e471b7aaac8179ed802242e7f141f386d89f3f7a7cb263ca1d409ddb3bfec748e9918cf4324ec786a95428b"}, {0xdd, 0x6c, "db45f07595189eebc889df8993c3ae2ab152abcfdb9134de7e852362b6c9075ce77e6086843d9365acee7c4b0fce8f6b6e07af425c8dd45d2943110401368535200077f745a15a4c9ab0e0911485f786135b925a4ca723e3bce723d2aee9cf33f6c5ddc5dbb50aa3c900a7fc"}, {0xdd, 0x17, "a8b67ecb036669d4b40546f8bbd3b0a91ed339796d7f8a"}, {0xdd, 0x92, "938bade2ae8abf00ca3185f16afdfc38ba86ab39d59b68bd052ba44a93668276111c2cf5a3236389798ec571e9e73cf7cfcbdb044546acb0fb731d4b376e8ff2a4793d118a4721d5260b60f2ee7dec76cfa5a56bdfce088ade5b48571da3908fc980abba27fad477e2b23a6a9dcb93a042f892d600c43c7a9ad5b604b5325d8d453c7f523a0385df9d0cede5b67c1ed4f594"}]}}]}, 0x894}, 0x1, 0x0, 0x0, 0xc}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000019580)={0x0, @in={{0x2, 0x4e23, @multicast1}}, [0x6ee, 0x2, 0xffffffffffffffe2, 0x4, 0x6, 0x7, 0x1, 0xff, 0x17e3, 0x8, 0x6, 0x8, 0x3, 0x8, 0x6]}, &(0x7f0000019680)=0x100) 1m6.709793392s ago: executing program 2 (id=1469): r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x41) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x7}}}}]}]}, 0x70}}, 0x20040000) syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x800, 0x1, 0x3}, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0xd, 0xb, 0x0, &(0x7f0000000300)='GPL\x00', 0x3, 0x9, &(0x7f0000000040)=""/9, 0x0, 0x24, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdffffffa}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0xd, 0xb, 0x0, &(0x7f0000000300)='GPL\x00', 0x3, 0x9, &(0x7f0000000040)=""/9, 0x0, 0x24, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdffffffa}, 0x94) fanotify_init(0x0, 0x0) (async) r1 = fanotify_init(0x0, 0x0) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r1, 0x0, r2) fanotify_mark(r1, 0x21, 0x800001b, r3, 0x0) fanotify_mark(r3, 0x2, 0x40000038, r3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5], 0x90}}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5], 0x90}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2a, 0x2, 0x0) (async) r7 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={&(0x7f0000001d00)=@qipcrtr, 0x80, 0x0}, 0x0) sendmsg$kcm(r7, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) (async) sendmsg$kcm(r7, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) r8 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/cgroup.procs\x00', 0x2, 0x0) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000440)={0x0, 0x0, @pic={0x2, 0x4, 0xd, 0x8, 0x7, 0x81, 0x80, 0x6, 0x65, 0x1, 0x5, 0xf, 0x7, 0xfc, 0xd, 0xff}}) copy_file_range(r0, 0x0, r8, 0x0, 0xfffffffffffffffd, 0x0) (async) copy_file_range(r0, 0x0, r8, 0x0, 0xfffffffffffffffd, 0x0) 1m6.508717459s ago: executing program 2 (id=1475): r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000040)={0x7, 0x30, [0x992, 0x4, 0x5, 0x9e8], &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x9, 0x101241) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f00000000c0)={0x40, 0x1, "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"}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000200)=0xffffffffffffffff) poll(&(0x7f0000000240)=[{r1, 0xa203}, {r2, 0x4000}], 0x2, 0xa) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x125c03, 0x0) ioctl$TIOCSRS485(r3, 0x542f, &(0x7f00000002c0)={0x1, 0xb, 0xfef}) r4 = landlock_create_ruleset(&(0x7f0000000300)={0x10001, 0x1, 0x1}, 0x18, 0x2) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0xf503, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000340), &(0x7f0000000380)=0x4) ioctl$VIDIOC_G_SLICED_VBI_CAP(r3, 0xc0745645, &(0x7f00000003c0)={0x1, [0x1, 0xfffa, 0xd8, 0x100, 0x3, 0x1, 0x7fff, 0x7, 0x5, 0x9, 0x10, 0x3, 0x283, 0x400, 0x0, 0x1000, 0x1f, 0x401, 0x4, 0x3, 0x200, 0xe, 0xa1, 0x6, 0x788, 0x0, 0x2, 0x3, 0x2, 0x5, 0x1, 0xfffa, 0xc4d9, 0x6, 0x1, 0x9, 0x20d0, 0x6, 0x401, 0xa, 0x9, 0x0, 0xfff7, 0x7, 0xffff, 0x0, 0x7fff, 0xe831], 0xb}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000440)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000480)=0x1c) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000004c0)={r6, 0x6, 0x20}, &(0x7f0000000500)=0xc) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000540)={r5, @in6={{0xa, 0x4e23, 0xcaae, @rand_addr=' \x01\x00', 0xffff0bfb}}, 0x6, 0x5, 0x1, 0x3, 0xa0, 0xfffffffa, 0x1}, &(0x7f0000000600)=0x9c) fcntl$setstatus(r4, 0x4, 0x40000) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000001740)=@urb_type_iso={0x0, {0xb}, 0x3, 0x43, &(0x7f0000000640)="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", 0x1000, 0x1, 0x2, 0x6c, 0x0, 0x200, &(0x7f0000001640)="0c6e73321f19c0302d9d430b12ffa0043ab991a0391076b4599ab98cb8472f2dec3b7afcbb061f76c73b830687fe18050b0c28f1a766c6b4a45107ec43db81428a8bb91dc7c6f7d4bcf736893d6e3b92bb2cce19c0b23dcc2d3248d3dedd327a3b9d9236d54eed56c19486beed974aca837a77ebadbe4b9b4f7d09074892a502fca629b2632b8044c8e535f2a17e3df01483e9ffce5cd3354246aebb79f869e7439b1541f049c8decc836e464d1f6acce965cf6160c07186c09772b4428593d75b99e3a01cb2f50f0729f6230812f760ae2183280f15790338c81b397d8a", [{0xfffffffb, 0x3, 0x36}, {0x0, 0x4, 0x7fffffff}, {0x80000000, 0x5b, 0xfffffffb}, {0x80d, 0xef8c, 0x4}, {0x8eb, 0x1, 0xa4}, {0xfffffff8, 0x0, 0xff}, {0x0, 0x6, 0x3}, {0x3, 0x5, 0x9}, {0x800, 0x1400, 0x8}, {0xf, 0x40, 0x7ff}, {0x3, 0x6, 0x6}, {0x3, 0x7, 0x4}, {0x3, 0x2, 0xf3}, {0x10000, 0xffffffff, 0x7}, {0x4, 0x2, 0x4}, {0xfffffff8, 0x4, 0x10000}, {0x101, 0xffff, 0x80000}, {0x4, 0x4, 0x9}, {0x4, 0x7800000, 0x10}, {0x7, 0x3, 0x9}, {0x6, 0x9, 0x9}, {0x5, 0xfffffffc, 0x8}, {0x80000000, 0xfffff000, 0x4}, {0x69, 0x3a4, 0x3}, {0x3, 0x9, 0x9}, {0x26, 0x1ff, 0x9}, {0x1, 0x1, 0x3}, {0x7, 0x8, 0xfffffffa}, {0x5, 0x977e, 0x8}, {0xeabd, 0x39dba369, 0x7}, {0x2ee, 0x5, 0x3}, {0x7fff, 0x8, 0x1}, {0x9, 0x6, 0xffffffff}, {0x4, 0x14, 0x33245ac3}, {0x2, 0x0, 0x7}, {0x1, 0x101, 0xfffffeff}, {0x2, 0x80000000, 0x4}, {0xffffff01, 0x7, 0x4}, {0x2, 0x4, 0x8000}, {0x7fff, 0xfffffff7, 0x5}, {0x1, 0x9}, {0x76c, 0x9, 0x3}, {0x8, 0x7f}, {0x7, 0x10000000, 0x5}, {0x488b, 0x7f, 0xde}, {0x1, 0x81, 0xfffffffa}, {0x7, 0x1ff, 0x800}, {0x9, 0x3, 0x3}, {0x80000000, 0x9, 0xfffffff1}, {0x79, 0x4, 0x5cf}, {0x6, 0xb66, 0x2}, {0x39, 0x8, 0x8}, {0x8, 0x7f, 0x9}, {0x817, 0x1, 0x40}, {0x4, 0x4}, {0x10000, 0x3, 0x2}, {0x1, 0x8, 0x6}, {0x1, 0x845, 0x10001}, {0x4, 0x2400000, 0x7}, {0x10, 0xffffff81, 0x6a}, {0x4, 0x9, 0x43}, {0x8, 0x1, 0x401}, {0x10e, 0x2, 0xce}, {0x1, 0x2, 0x20000}, {0x8, 0x2, 0x2}, {0x4, 0x1, 0xb05}, {0xd, 0x100, 0x81}, {0xc, 0x57a, 0x40}, {0x1ff, 0x4, 0x9}, {0x8690, 0x87, 0x40}, {0x80000001, 0x4fa, 0x7}, {0xfffffeff, 0x0, 0x1000}, {0x6, 0xf, 0xec}, {0x1, 0xc0000000, 0xfffffff7}, {0x0, 0xfffffffa, 0x6}, {0x8, 0x4, 0x3405}, {0xf9e2, 0x2, 0xfffffff7}, {0x7ff, 0x4, 0x5}, {0x3, 0x7, 0x1}, {0x38b9, 0xa, 0x8}, {0x8, 0x10, 0x1}, {0x0, 0x2, 0x5}, {0x9, 0xfffffffd, 0x2}, {0x400, 0x9, 0x80000001}, {0x0, 0x6, 0x9}, {0x3, 0x5, 0x4}, {0x4, 0x27e, 0x7a}, {0x5, 0x3, 0x2}, {0x7fff, 0x8, 0xfffffffb}, {0x800, 0x9, 0x7f}, {0x8, 0xa, 0x1}, {0xb, 0xc, 0x9}, {0x2, 0xa26, 0x6}, {0x0, 0x4, 0x5}, {0x2, 0x9, 0x2}, {0x1, 0x6, 0x4}, {0xff, 0x3, 0xb3}, {0x9, 0x2, 0xf}, {0x3, 0x6, 0x2}, {0x4, 0x3a, 0x3}, {0x4, 0x1000, 0x7}, {0x1, 0x8, 0x5}, {0x8, 0xc5f, 0x4}, {0x0, 0xfffff2c8, 0xb1d0}, {0x8, 0xe5a, 0x8}, {0x0, 0x5, 0x9}, {0x3, 0xb6, 0xfffffffc}, {0x8, 0x80000001, 0x2}]}) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f0000001cc0)) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000001d40)={0x1, &(0x7f0000001d00)=[{0x8, 0xb5, 0x91, 0x2}]}) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000001d80)={0x1ff, 0xfffffffe}) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000001dc0)={{0x84, @broadcast, 0x4e21, 0x0, 'dh\x00', 0x36, 0x7, 0xb}, {@remote, 0xe3, 0x0, 0x81, 0x100}}, 0x44) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x8040ae9f, &(0x7f0000001e40)) ioctl$FBIO_WAITFORVSYNC(r3, 0x40044620, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000001ec0)={&(0x7f0000001e80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000001f00)={0xffffffff, 0x0, 0x1}) ioctl$DRM_IOCTL_SG_FREE(r7, 0x40106439, &(0x7f0000001f40)={0x0, r8}) ioctl$KDMKTONE(r0, 0x4b30, 0x6) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000001fc0)={'wg2\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000002080)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002040)={&(0x7f0000002000)=@ipv6_delroute={0x40, 0x19, 0x10, 0x70bd27, 0x25dfdbfe, {0xa, 0x20, 0x0, 0x8, 0xfc, 0x1, 0xfd, 0x1, 0x400}, [@RTA_MULTIPATH={0xc, 0x9, {0x7418, 0x1, 0x2, r9}}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_DST={0x14, 0x2, @private2}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 1m6.505431383s ago: executing program 2 (id=1477): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x141000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_vhci(&(0x7f00000002c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xa}, @hci_ev_le_conn_update_complete={{}, {0x0, 0xc8, 0x4e2, 0x8, 0x8000}}}}, 0xd) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0x50}, @l2cap_cid_signaling={{0x4c}, [@l2cap_conf_rsp={{0x5, 0x81, 0x32}, {0x0, 0x0, 0x0, [@l2cap_conf_rfc={0x4, 0x9, {0x1, 0x5, 0x8, 0xfff8, 0x1, 0x6}}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0x6, 0x40, 0x81, 0x101, 0xf89e}}, @l2cap_conf_efs={0x6, 0x10, {0x1, 0x0, 0x1b, 0x7, 0xffff7fff, 0xfff}}, @l2cap_conf_mtu={0x1, 0x2, 0x2}]}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x2, 0x2}, {0x1}}, @l2cap_info_rsp={{0xb, 0x1, 0x4}, {0x7f, 0x9}}, @l2cap_conn_req={{0x2, 0x5, 0x4}, {0x7, 0x3}}]}}, 0x55) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003052cbd7000fedbdf2500000020", @ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d6163736563000014000280050006000000000005000f00019a000008000500", @ANYRES32=r4], 0x4c}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x1, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000100)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m6.350424716s ago: executing program 2 (id=1481): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) (async) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) openat$urandom(0xffffffffffffff9c, 0x0, 0x103902, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = fanotify_init(0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) fanotify_mark(r3, 0x1, 0x1023, r4, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r3, 0x455, 0x19, r5, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000480)='fdinfo/3\x00') read$eventfd(r6, &(0x7f0000000280), 0x8) (async) read$eventfd(r6, &(0x7f0000000280), 0x8) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="000022f001043101050009008000ffffffffffff0180c200000e8100350008004500001c00000000001190780000fe0000e0000001000017c1000890"], 0x3c) (async) write$tun(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="000022f001043101050009008000ffffffffffff0180c200000e8100350008004500001c00000000001190780000fe0000e0000001000017c1000890"], 0x3c) write(r1, &(0x7f0000000000)="05000000010001", 0x7) (async) write(r1, &(0x7f0000000000)="05000000010001", 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) (async) r10 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r10, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r8, {0x1}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r10, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r8, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r10, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r8, {0x1}}, './file1\x00'}) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) 1m6.147662588s ago: executing program 2 (id=1484): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000940)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x3, 0x4, 0x6, 0x6f, 0x0, 0x3}, &(0x7f0000000a00)=0x9c) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) write$vga_arbiter(r4, &(0x7f00000005c0), 0xf) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r5, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027000000000005002d"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r6 = accept4$alg(r2, 0x0, 0x0, 0x0) sendmmsg$sock(r6, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000780)="646262a6d9745ba0bd63d7494773690f40c8435e4b4473d46fe26d59dfe17f04acc32eaa1bb0038e468e0bedc8d2bcb8a3f95fe9915497684d15261d6f1db5df", 0x40}], 0x1}}], 0x1, 0x0) 50.952093273s ago: executing program 32 (id=1484): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000940)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x3, 0x4, 0x6, 0x6f, 0x0, 0x3}, &(0x7f0000000a00)=0x9c) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) write$vga_arbiter(r4, &(0x7f00000005c0), 0xf) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r5, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027000000000005002d"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r6 = accept4$alg(r2, 0x0, 0x0, 0x0) sendmmsg$sock(r6, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000780)="646262a6d9745ba0bd63d7494773690f40c8435e4b4473d46fe26d59dfe17f04acc32eaa1bb0038e468e0bedc8d2bcb8a3f95fe9915497684d15261d6f1db5df", 0x40}], 0x1}}], 0x1, 0x0) 3.520237901s ago: executing program 3 (id=2075): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT_IN6(r0, 0x89e1, &(0x7f0000000340)={@empty, @private1}) r1 = socket$nl_generic(0x11, 0x3, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x8, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaa538ae3e463208004500001c000000cff6ddfcaa725213212806cc2a9f095760e7029078"], 0x0) r5 = socket(0x20000000000000a, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x48, &(0x7f00000000c0)={0x0, 0x0}, 0x10) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x1010c0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a5c000000060a0b04000000000000000002000000300004802c0001800a00010071756575650000001c0002800600024000060000060001400003000006000340000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x84}}, 0x40) ioctl$TIOCOUTQ(r6, 0x5411, &(0x7f0000000080)) times(&(0x7f0000000000)) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000008000000180100002520732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000f98500000006000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000740)="ba37bc6e74cc160f3f46dd21efc8", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg(r1, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 3.349203128s ago: executing program 3 (id=2081): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r2 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_RMFB(r2, 0xc00464af, &(0x7f00000003c0)=r3) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000001a00)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000000)={0x28, 0x2, r4, r1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x2, r1, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x5}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffff, 0x8}, {0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x9, 0x2}}]}}]}, 0x44}}, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008"], 0x4c}}, 0x40000) socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg(r9, &(0x7f0000000000), 0x4000000000001f2, 0xfc) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000180)={@private1, 0x8000000, 0x2, 0xff, 0xe, 0x9, 0x7fff}, 0x20) socket$nl_rdma(0x10, 0x3, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r0, 0x3b8b, &(0x7f0000000240)={0x10, 0x1, r5}) 3.270307934s ago: executing program 3 (id=2082): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, 0x0, &(0x7f0000000740), 0x20075, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) 2.407559199s ago: executing program 3 (id=2085): r0 = socket$nl_generic(0x10, 0x3, 0x10) close(r0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) (async, rerun: 64) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) (async, rerun: 64) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r1, 0x5607, 0x2c) (async) r2 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x6a, 0x3, 0x0, &(0x7f0000000180)) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="04000000", @ANYBLOB="af76bd4c1492df76ec88f1c96235980b96751b8f5a1130766f56031ab4ee5f97dbee166b8bf2f3a167c2a6b0a449154488e5db93217d27d7fd57002e587a17a70bcf8af3826ed06813ea4e49286049f07b45adf27f96264c67218e9a6f58a044cb0b953f84db0a62c15a7333c1cd045df69506e82cff679444addd7c5552ac6b4c60bb45e520922df269843852ff5ba9a168d3eb17d3dc9c57b5372ab78cd91ddb9e766346fc5a4f1dd8262c03e1d93301e1f5afb9fe615b2078f0856004190d38355d1525dabf023b09c31dfdd03c082bc16843047f97d31cc07ab65a370eb109a5", @ANYBLOB="01002bbd700000000000010000001c000180060001000200000008000300ac1e0101080006000a0000002333c3cdf6627520b83dc592e9fe847dd9d8dbe7bad4d2b884a812a060b3223c880959f43e17"], 0x30}}, 0x10) (async) pipe(&(0x7f0000000000)) (async) fcntl$lock(r0, 0x407, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) (async) close(r0) 2.407314142s ago: executing program 3 (id=2086): r0 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x22c43) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)={0xb8, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @empty}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_PROTOINFO={0x8, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x4}}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xfffffffe}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8}]}]}, 0xb8}}, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r0]) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3d) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1fe, 0x3, 0x8080000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x22c43) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)={0xb8, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @empty}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_PROTOINFO={0x8, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x4}}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xfffffffe}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8}]}]}, 0xb8}}, 0x0) (async) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r0]) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3d) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1fe, 0x3, 0x8080000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) (async) 2.330300168s ago: executing program 3 (id=2087): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380031090314230c2ebd7000ffdbdf2509000200a947736c4bda9e37dfbbf644450e73797a310000000008004100727865001400330000807468315f76697274df774d66690060efe4c87a3b2d7af8ac87d534eb893700e75b0d29793d8617bfec39d2d937aa"], 0x38}, 0x1, 0x0, 0x0, 0x14f7325d9d03b00}, 0x4000) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc774000) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xfffe, 0x0, 0x0, 0x300, 0x7fffffff}, 0x9c) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x100000000000004) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000001140)=""/4096, 0x1000}], 0x1, 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f0000000280)={0x3, 0x4, 0xdbe, 0x4080}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r6) sendmsg$IEEE802154_ADD_IFACE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002dbd7000fcdbdf252100000009001f00706879320000000005002000000000000a0001"], 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000000) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r5, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x34, r8, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x81}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x4}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0x8090) ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000600)={0x2, @sliced={0x8, [0x4, 0x8001, 0x3, 0x725, 0x9, 0x0, 0x1000, 0x7, 0x4, 0x5, 0x8, 0x400, 0xe, 0xa42, 0x62, 0x7, 0x6, 0xb, 0x2, 0x8, 0x8, 0x6, 0xc, 0x5, 0x0, 0x2, 0x58dd, 0x9, 0x9, 0x202c, 0x9, 0x6, 0x9, 0x7, 0x8800, 0x7, 0x0, 0x8, 0x0, 0x80, 0x87, 0x8, 0x7, 0x9, 0x5, 0xfffa, 0x3a, 0x2], 0x56}}) 1.739705802s ago: executing program 4 (id=2099): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[], 0x28}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) r2 = socket$inet(0x2, 0x3, 0x6) ioctl$SW_SYNC_IOC_INC(0xffffffffffffffff, 0xc0105702, &(0x7f0000000100)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x18) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$TCFLSH(r4, 0x400455c8, 0x2) ioctl$TIOCSETD(r4, 0x5412, &(0x7f0000000140)=0xc0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r4, 0xc040563d, &(0x7f0000000440)={0x0, 0x0, 0x101, 0x6, {0x5, 0x7f, 0x1, 0x1}}) syz_emit_ethernet(0x66, &(0x7f0000001a40)=ANY=[@ANYBLOB="ffffffffffaaaaaaaaaabb86dd601200b000303a0000000000000000000000000000000000ff020001a0009078000000006027738200000000fc0100000000000000000000000000002001000000000000000000000000000100"/101], 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000004000000000000000000190095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r4}, 0x94) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001840)={r5, r7, 0x25, 0x0, @val=@netfilter}, 0x40) syz_emit_ethernet(0xd82, &(0x7f0000001880)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000288a83300810010008847690be8050d44060020010000000000000000008000000002fe80000000000000000000000000000f4e244e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000000)={{0x2, 0x4e23, @broadcast}, {0x118, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}, 0x6f631b4376e74f0e, {0x2, 0x0, @rand_addr=0x64010102}}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xa9, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r8, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x1, 0x0, 0xd66, 0xf5ffffff}, 0x0) sendmsg$tipc(r9, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20000004}, 0x4008040) r10 = socket(0x10, 0x3, 0x0) getrandom(0xfffffffffffffffe, 0xffffffffffffff9b, 0x4) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001a00010000000000000000001c140000000000000008"], 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 1.290007969s ago: executing program 0 (id=2100): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000000240)={0x8, 0x97, 0xffff}, 0xc) syz_emit_ethernet(0x6a, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @broadcast}, {0x0, 0x883e, 0x48, 0x0, @wg=@cookie={0x3, 0x3, "90c7205b89c6ba79f201fb2a7ccdec3f092308bf4d1ae199", "11da928cceb7f2257669a73e935ab02244656cfe8638fefb94440b907850c38e"}}}}}}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000000)={0x28, 0x2, r3, r1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x2, r1, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x5}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r6, r5, 0x80000) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0xfffffffffffffd14, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r7, 0x3b86, &(0x7f0000000080)={0x18, r1, 0x8, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x20, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, 0x0, 0x1000) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r0, 0x3b8b, &(0x7f0000000240)={0x10, 0x1, r4}) 1.289293804s ago: executing program 4 (id=2101): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r0, &(0x7f0000009780)={0x2020}, 0x2020) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b36, &(0x7f0000000000)={'wlan1\x00'}) open(&(0x7f0000000240)='./bus\x00', 0x34117e, 0x44) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r8) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$kcm(0x11, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r12, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x800, 0x2, 0x8, 0x10000, 0x40}, 0x8, 0x5}, [{0x7, 0x8, 0x2, 0x5, 0x2, 0x200}, {0xff, 0x7, 0x101, 0x8, 0x810, 0xffffffff}, {0x5, 0x8, 0xfff, 0x2, 0xffffffff, 0xb93}, {0x6, 0x4, 0x3, 0xfffffff3, 0x4, 0x6}, {0xd3d4, 0x2, 0x8, 0x6, 0x101, 0x10}, {0x9, 0x40, 0x6, 0x80000000, 0x6, 0x10001}, {0x4, 0x9, 0x100, 0xf9d8, 0x7, 0x2}, {0x5796, 0xffff, 0xd44b, 0x8, 0x1, 0x37a}, {0x6, 0x3, 0x1, 0x80000001, 0x3f, 0x10}, {0x4, 0x9e9c, 0x60, 0x7, 0x0, 0x1}, {0xffe00000, 0x1, 0x8000, 0x4, 0x3, 0x7}, {0x101, 0x9, 0x400, 0x3, 0x9, 0x3}, {0xce9, 0xfffffffb, 0x4, 0xae5e, 0x3ff, 0x2}, {0x3, 0x5, 0x6, 0x4, 0x197d, 0xfb56}, {0x2, 0xe42, 0xf3, 0x0, 0x6, 0x101}, {0x4, 0x5, 0x74d77b97, 0xfffffd8b, 0x0, 0x4}, {0x7fff, 0x5b, 0xb3a, 0x6, 0x2, 0xb5e}, {0x4c5be96a, 0x6, 0x2, 0x5, 0xd2a1, 0xbe47}, {0x6, 0x7, 0x9, 0x4, 0x3, 0x1}, {0x3, 0x8, 0x7, 0x4, 0x95, 0x3}, {0x6, 0x5, 0x2, 0x7fffffff, 0x8, 0xff}, {0x1, 0x71, 0x800000, 0xcf55, 0x3, 0x9}, {0x7933, 0x6e20, 0x6, 0x81, 0x2, 0x8}, {0xff, 0x8001, 0xff, 0x10001, 0x5, 0x5}, {0x6, 0x37, 0x0, 0x6, 0xed, 0x5}, {0xce, 0xae, 0x4, 0x2, 0x10000, 0x800}, {0x200, 0x5, 0x6, 0x5, 0x9, 0x9}, {0x8, 0xe, 0x8, 0x8, 0x5}, {0x3, 0x3, 0xa, 0x6, 0x9, 0x9}, {0x9, 0x4, 0x9d42, 0x4, 0x1, 0xfffffffb}, {0x8c, 0x6b8, 0x6, 0x2, 0x2, 0xfffffffe}, {0x3, 0x811, 0x9, 0x5, 0x4}, {0x3, 0x80000001, 0x400, 0x2, 0x0, 0x8001}, {0xfffffe01, 0x2, 0x4, 0x2, 0x8, 0x8}, {0x0, 0x22, 0x5, 0x3, 0x401, 0x5}, {0xa, 0x5, 0x101, 0x5, 0xfffffc01}, {0x4, 0x5, 0x0, 0x0, 0xdb, 0x3d04b554}, {0x5, 0x9, 0xfffffffa, 0x1, 0xfffffffc, 0x2}, {0x8, 0x7, 0x7, 0x99f, 0x9, 0x3}, {0x5, 0x252, 0x8000, 0xffff8001, 0xb, 0x900}, {0x4, 0x3, 0x3, 0x21, 0x7, 0x7}, {0xfffffffb, 0x8a1, 0x2, 0x7, 0x0, 0x4}, {0x0, 0x7fff, 0x2, 0xfffff399, 0x20000009, 0xe756}, {0xfff, 0xc, 0x4, 0x8, 0x2, 0xe}, {0x6, 0x4, 0x6, 0x1, 0x80, 0x980}, {0x23ae789, 0xc, 0x4, 0x7, 0x200, 0x4}, {0x5, 0xe, 0x2, 0x9, 0x0, 0xf3}, {0x0, 0x9, 0x2, 0x4, 0x3, 0x4}, {0x8, 0x4, 0x5, 0xfffffffd, 0x400, 0x7f}, {0x9, 0x80, 0x6e6b, 0x6, 0x203}, {0x371cf7fc, 0x7, 0x2, 0x1ff, 0xfffffffa, 0x6a97}, {0xd1, 0x6, 0x4, 0x7, 0x5a, 0x9}, {0x8, 0x7f, 0x7fffffff, 0x7f, 0x2, 0x8}, {0x7ff, 0x1, 0x3, 0x2, 0x9, 0x400}, {0x6, 0x1ff, 0x0, 0x9, 0x7, 0x4}, {0x4, 0x6, 0xfe, 0x100, 0x1000c6}, {0x3, 0xfffffffd, 0xd, 0x6, 0xfffffffe, 0x1000}, {0x7, 0x2, 0x1, 0xd, 0xfffffffe, 0x3}, {0xfffffffa, 0x80000001, 0xe, 0x2, 0x200, 0x7}, {0x3, 0x0, 0xa820, 0x787e, 0x2, 0x2}, {0x8, 0x4, 0x5ae, 0x2, 0x8}, {0x5, 0x52, 0x8, 0x5, 0x10, 0x9}, {0x1, 0x7, 0x3, 0x280, 0x800, 0x6}, {0x10, 0x801, 0x0, 0x8, 0x3, 0xa}, {0xad, 0x8, 0x4, 0x5, 0x0, 0xfff}, {0x6, 0x6, 0x7fff, 0x0, 0xff, 0x7fffffff}, {0x8, 0x85e6, 0x3, 0x0, 0x5, 0xc}, {0x9, 0x78e3, 0x5, 0xbc27, 0x7, 0x9}, {0x6, 0x7, 0x2, 0xdb60, 0x3}, {0x80000001, 0x0, 0x3, 0x1, 0x81, 0xba}, {0x10001, 0xfff, 0x7, 0x0, 0x9, 0xc29}, {0x100, 0x2, 0x9, 0x7, 0x84e1, 0x3ff}, {0xdc, 0x9, 0xe, 0x7, 0x9}, {0x7, 0x5, 0x1, 0x80, 0x6, 0xff}, {0xd5e, 0x5, 0x0, 0x100, 0x0, 0x10}, {0x200, 0x2, 0x8000, 0x0, 0x6b, 0x4}, {0x0, 0x0, 0x9, 0x8, 0x100, 0x1000}, {0x4, 0x3ff, 0x0, 0x10000, 0x7, 0x7}, {0x6, 0x9, 0x1, 0x2001ff, 0x4, 0x1}, {0x4, 0xd38f, 0x6, 0x4, 0x170ddbc4, 0xe38}, {0x14a, 0x7, 0x0, 0x10001, 0x1, 0x2}, {0x9, 0x6, 0x1, 0x400, 0xffffffff, 0xfffffffc}, {0x7, 0x6, 0x3909, 0xffffffff, 0x1705, 0x7}, {0x3, 0x3b10fe2d, 0x4006, 0x5, 0x3, 0xffff7fff}, {0x9430, 0xb, 0x6, 0x2, 0x9, 0x5}, {0xa, 0xb1fb, 0x6, 0x6, 0xc5, 0x9}, {0x2a455dad, 0x5, 0x29, 0xfffffff9, 0x800, 0x7fff}, {0x3, 0x3, 0xee, 0x9, 0x6, 0x8}, {0x5ce, 0x3, 0x0, 0xb, 0x8, 0x99}, {0x2, 0x9, 0xf623, 0x7, 0xff, 0x8}, {0x101, 0x6, 0x80000000, 0x9, 0xfffff697, 0x8}, {0x9, 0x8, 0x7, 0x2, 0xa226, 0x9}, {0x8, 0x8, 0x3, 0xfffff246, 0xf, 0x2}, {0x3, 0xaf, 0x7ff, 0xe0, 0x0, 0x7cf}, {0x8, 0x7, 0x29af2cf0, 0x1, 0x7, 0x80000000}, {0x7fff, 0x9, 0x4b, 0xa4e}, {0xffffffff, 0x7, 0xa, 0x80000000, 0x0, 0x69}, {0x4, 0x9, 0xffffff01, 0x4, 0x100, 0x5}, {0x6, 0x6, 0x2, 0x80000001, 0x6, 0x9}, {0x6, 0x401, 0x2, 0x2, 0x3, 0xb}, {0xd, 0x40, 0x3, 0xa, 0xffffffff, 0x1d1a}, {0xc0, 0x81, 0xb, 0x3, 0xea, 0x3}, {0xc, 0x2, 0x1, 0xa, 0x1, 0x2f4}, {0xf, 0x6, 0x1, 0x73e7, 0x1000, 0x4}, {0x6, 0x8000, 0x3ff, 0x8dcc, 0x4, 0x7ff}, {0x7, 0x12, 0x8, 0x8, 0x69, 0x9}, {0x7f, 0x7, 0x4, 0x0, 0x3, 0x2}, {0x6, 0x0, 0x7a, 0x5, 0x4, 0x1000}, {0xb06, 0x7, 0x7ff, 0x400009, 0x0, 0x7bffffff}, {0x4, 0x7b, 0x3, 0x4, 0x0, 0xa7}, {0x81, 0x56c3, 0x1, 0xdda, 0x6, 0xb27d}, {0x4, 0x3, 0x401, 0xad, 0xcf5, 0xf8c}, {0x8, 0x1, 0x3, 0x40, 0x1, 0x4907}, {0x6, 0x4, 0x38, 0x4, 0x5, 0x6}, {0x7, 0x2, 0xf, 0x64, 0x1, 0x7}, {0x1, 0x2, 0x4010, 0xffffffad, 0x0, 0x751e}, {0xfff0, 0x2, 0x4, 0x3, 0x3, 0x5}, {0x5, 0x7, 0x8, 0x1, 0x5, 0xfff}, {0x4fb, 0x0, 0x0, 0x7ff, 0x4, 0x5}, {0xf455, 0x3, 0x7fff, 0x59ed, 0xb4e9, 0xe4}, {0x7, 0x2, 0xe, 0x0, 0x3da78e9c, 0x8000}, {0x2, 0x0, 0x400, 0x765, 0x7f, 0x7}, {0x5, 0x7, 0x5, 0x8, 0x8, 0x7}, {0x10, 0x3, 0x9, 0xffffff01, 0x8, 0x2}, {0x6a, 0x200, 0x81, 0xffffffff, 0x4, 0x200}, {0x3, 0x8007, 0x3, 0x4a, 0x6, 0x1}, {0x0, 0x2, 0x7, 0x616, 0x5, 0x4}, {0x6, 0xb25b, 0x3, 0x0, 0x6, 0xb}], [{0x4, 0x1}, {0x5}, {0x4}, {}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x0, 0x1}, {0x2}, {0x4}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x4}, {0x1}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x4}, {0x3, 0x1}, {}, {0x4, 0x1}, {0x4}, {}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x1}, {}, {0x5}, {0x3}, {0xd}, {0x0, 0x338f50ad6d91f11}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x4}, {0x3}, {0x1, 0x1}, {0x4}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x4}, {0x3}, {}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1}, {0x6, 0x1}, {0x5}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x3}, {0x4}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {0x4}, {0x4}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r7, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000600)=ANY=[@ANYBLOB='\"\x00\x00\x00\x00\x00\x00\x00', @ANYRES64=0x3], 0x10) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000009c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000980)={&(0x7f0000000c40)=ANY=[@ANYBLOB="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", @ANYRESHEX=r6], 0x24c}, 0x1, 0x0, 0x0, 0x44050}, 0x4080) 1.21913698s ago: executing program 0 (id=2102): r0 = socket$kcm(0x10, 0x2, 0x10) (async) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x549000, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140)=0x0) lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r4, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x0, 0xb, 0xfffc, 0x0, 0x1, 0x0, 0xffffffff, 0x120, 0x2000, 0xa8, r5, r6, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_clone(0x25986600, 0x0, 0x4f, 0x0, 0x0, 0x0) syz_open_procfs(r7, &(0x7f0000000040)='statm\x00') r8 = gettid() sendmsg$netlink(r1, &(0x7f0000000dc0)={&(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000cc0)=[{&(0x7f0000000180)={0x264, 0x2a, 0x100, 0x70bd2b, 0x25dfdbfb, "", [@typed={0x8, 0xcc, 0x0, 0x0, @ipv4=@multicast1}, @generic="62a1f94888452a0c06178c788c91dae5159855090c2f8518e6630a9980aa73017ea668d46410de184bb2c58e0ee0a44a1b5b32a2088ac2497455d231d62597cae852f3ddd20a243da4b4e67355e3b0dd13a13b5ea53b18ae1a2c2f8945f999a625d3d71cc3df8125cedf4248a54c06944f4c47f5bdda9057f6dd81d59327a7f1b7fb11c1fd3e7587905e7b5e2a38214e294a9d62", @nested={0x142, 0xb2, 0x0, 0x1, [@typed={0x8, 0x13d, 0x0, 0x0, @pid=r2}, @generic="f80695ca3387f243754223c9be7fbc5d1b82835a7ac2376fd538187ff1c1a9e2682a3b13df500856c995ceab59ffc60c6ae59be86f2c79e71c1ea00d2e7d1217ba613d", @generic="dbb9e9d8892aad133e086e1a5240af110a05eda68e5855ef3b5930f53870cf335165bf93a3ad92ad5790da9126a88f6ad776c72464c64cc2c720cf615d7efe9f057fca6de049945f6af2f24f86f225c877add9ee5dfbe12f01df8181fac450f4472a4c709889c26fa45f25a54a651610577f4f53ecebf8f4c90444cf50d61719a1e3457808aca298b2fbab63a3ce90efd617cb67b542e22e2adce0d1d315c618f04e1bd0cad8b314714b1f0efffbb873caccac247a6a413df3308fcf0d7f1b7b35019450d4276715978ce1789ab376a8fb5bee681b6fa93141b068d036e16db87bc70b9f9b14f6a3737cc40a208634d8f5c2ca"]}, @typed={0x9, 0x10, 0x0, 0x0, @str=']{[}\x00'}, @generic="edc883317c538e1adb965307020d65eef0787ac7d9501a47f44f97cb5d56a2eb1f1ef63bb156f4e8998f8941ba26e84914c9ea3c90db508c41b46ef8dc66e71e1c34275baf9d6d642981d639efb939faf15e82284968c6ac06ca6881bfb7de4a", @typed={0x8, 0x75, 0x0, 0x0, @ipv4=@remote}]}, 0x264}, {&(0x7f00000004c0)={0x1a8, 0x39, 0x400, 0x70bd27, 0x25dfdbfb, "", [@nested={0x10f, 0xe9, 0x0, 0x1, [@nested={0x4, 0x3f}, @typed={0xc, 0x112, 0x0, 0x0, @u64=0x4}, @generic="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"]}, @generic="f1a8fe92b715591959de4345684cf0de03f6ae8df80128b008f1ec8b99e1806bf538a358f13a518122d481bb0cd6621a4eaabc1c74feaf8c61e514961c06b5e5d7b4a8a7f1f4db37d741a3a43877c42e6d0592094b1afff81ba002953e767a1de5c3cfb2", @typed={0x8, 0xc0, 0x0, 0x0, @str='\'/}\x00'}, @typed={0x5, 0x92, 0x0, 0x0, @str='\x00'}, @nested={0x14, 0xf7, 0x0, 0x1, [@typed={0x8, 0x6d, 0x0, 0x0, @uid=r3}, @typed={0x5, 0xcb, 0x0, 0x0, @str='\x00'}]}]}, 0x1a8}, {&(0x7f0000000680)={0xb0, 0x32, 0x4, 0x70bd2c, 0x25dfdbfe, "", [@nested={0x95, 0x141, 0x0, 0x1, [@typed={0x4, 0x2e}, @generic="6a35af7aaf86c05c291eb9269fdb3d1fc9a09e0cb7da5e63eb6fecfc5672f882ae8bac67312b20d02a130155f7cc7eb43e18d9ce7fa38859e6362383265c592f0dca927487d5c6bd4d2b6308c84d7f7dbc0cc2ac01a909f77e73c8370609eb2b4692d6f3333542d44e5bfb80ff788d42d8aaf33f92a04b0bfbd2dbda58", @typed={0x8, 0xa9, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x104, 0x0, 0x0, @uid=r5}]}, @typed={0x8, 0xf2, 0x0, 0x0, @ipv4=@multicast2}]}, 0xb0}, {&(0x7f0000000740)={0x15c, 0x39, 0x20, 0x70bd2c, 0x25dfdbfd, "", [@nested={0x14b, 0x114, 0x0, 0x1, [@typed={0x82, 0x70, 0x0, 0x0, @binary="d3ce6a092b683a3364abc18fa06e959f45816b005b1e6da22881771666632ade859ad6f0ed918130e95b24e1093c54e321e5c1e61c40902200f2a7168ba2f25cdce7cc852ce1d6ed1f0aaf170175371ff03f334ef057138befb91325ce0960d8ce0e26c11dd543df4193d300242272e48c9fb71eb1ca514bee82d15cf966"}, @typed={0x4, 0x11a}, @typed={0x14, 0x65, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @generic="39fb1da0d70854cf0946948201d4b2a49e9e88ec33df3d8aa131c592cf6d53403d3060f7f997d11f361342c105f1bf088a9b3ce080a549209f801fdff21b998c90f5447450f34552aa381e2eb0bf71c1c01b380503ba48c7c7cfe63adad3e664dfcd62a5d5a79f53213aa2e2ed14b407bb8c98d4023839bc0ca3953ea1b7a513ba8cf4e4559e6502752e11b24906e7731a6b8050c2698ea5908d63a2d52d83525918f039703446", @typed={0x4, 0x76}]}]}, 0x15c}, {&(0x7f00000008c0)={0x10c, 0x26, 0x200, 0x70bd2d, 0x25dfdbff, "", [@nested={0xf2, 0x8, 0x0, 0x1, [@typed={0xc, 0x7, 0x0, 0x0, @u64=0x1}, @typed={0x8, 0xd1, 0x0, 0x0, @u32=0xc6ce}, @generic="497f81d53de0a9d065b8bc7d31724eed70695762d8708610d6ad9db294566bb72ca3585c1c1b0762d7d0ccb10dfef836720f90b8631ec0c804d594487a111d458c315438ad0327909725480f35ba84bb6d31501088dedf8fee294f7dd0dec2bf1e721d4613a65fab6b928fb35e23598141ffff064c1d1dad0080ac32d84906429458dfd7d1b7db132ad27011b57f178cb83a89274779994c65384e583ca2279c7df91295592dccba3fef73c9b8957488c1b4243d96b697c1b09d97cf853ae238ac7f21e4510433efd1c05c3e1ab5c4926feb1fa66cd0", @nested={0x4, 0x13c}]}, @typed={0x8, 0x12f, 0x0, 0x0, @uid=0xee01}]}, 0x10c}, {&(0x7f0000000a00)={0x1c, 0x34, 0x200, 0x70bd29, 0x25dfdbfc, "", [@typed={0xc, 0xe6, 0x0, 0x0, @u64=0x400}]}, 0x1c}, {&(0x7f0000000a40)={0x60, 0x2d, 0x400, 0x70bd29, 0x25dfdbfb, "", [@generic="c14dc126ced3a42bddcd2fad3fe34ddd4c65cd82eab8a837d02165af0dc2d88b7777e4938ab291348dc7d76903bdff4abfa3e2d9e313b2eba9c3efab58bb2aa1771241c7520fdcb68a1ce81358"]}, 0x60}, {&(0x7f0000000ac0)={0x24, 0x1c, 0x200, 0x70bd26, 0x25dfdbfc, "", [@nested={0x14, 0x14a, 0x0, 0x1, [@typed={0x8, 0x103, 0x0, 0x0, @pid=r7}, @nested={0x4, 0x10d}, @nested={0x4, 0x99}]}]}, 0x24}, {&(0x7f0000000b00)={0x1b0, 0x9, 0x200, 0x70bd27, 0x25dfdbfc, "", [@nested={0x18d, 0x2c, 0x0, 0x1, [@generic="152b6f45305c2f82abb14e4cadf42a161a26d5ec18a9c59986a1ceb9d2565fa0d0fbd80b6f458d38c7687f68fd2de4ee3b873e4743ce11e38291c0eb6189991ce48edbefcd0e680894bebb7dae04b59fae8ab84dcd86524ca62fc22270f236a69522e277131446549d5c66e9ac4b37df24a403f1fdeb93b4b5372146cbf96307ef1aa430a1029845da43302a670a54339089ffbbd0c7d4fdd685c7cc3376cf10dd0eef223d7b7fc2debabe996682792ea80e1eda0c7a2d267fef547a199fc5f7e4ab967d251c017aaa1e314b8a97038a7c", @generic="7f4856f9c8341ae27f892b41d6bbe26f56b0ac217c91bec26258de542e2acbd31c0e1fb62e2e3d59e1860aa6b8ca0ec7318319500b0537b339de258939aab491d577401d266b0a550e47c445abcc9a6cf48db4d90b52a7d7e5246ac042bed2471813cae28301b727c79d8eab38857f23766ea24ad3", @generic="cd8f1308c6773dfa6124a03ec0f9b0aa357441099cefd81346aa47bf9be47b89d2262b0be478b4cf3b4a1f20c58275d2e24a2eefb266943b91f78e", @typed={0x8, 0xf1, 0x0, 0x0, @ipv4=@multicast1}]}, @typed={0x8, 0x108, 0x0, 0x0, @u32=0x81}, @typed={0x8, 0x100, 0x0, 0x0, @pid=r8}]}, 0x1b0}], 0x9, &(0x7f0000000d80)=[@rights={{0x10}}, @rights={{0x20, 0x1, 0x1, [r0, r0, r0, r0]}}], 0x30, 0x30000001}, 0x80) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b35, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) 1.100495691s ago: executing program 4 (id=2103): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x3, 0x100000008, 0x7f, 0x1, 0x0, 0x2, 0xfffffffffffff804, 0x0, 0x0, 0x0, 0x2000000000000, 0x7, 0x0, 0x1, 0x8], 0xeeef0000, 0x4db00}) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000180)={0x0, 0x0}) syz_open_procfs(r5, &(0x7f0000000200)='map_files\x00') 1.007966796s ago: executing program 0 (id=2104): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) listen(0xffffffffffffffff, 0x5) syz_emit_ethernet(0x46, &(0x7f0000000140)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c6dd00", 0x10, 0x3a, 0xff, @remote={0xfe, 0xe0}, @mcast2, {[], @ndisc_ra={0x89, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0xffffffff}}}}}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x127}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5, 0x84}}}, 0x8c}, 0x1, 0x0, 0x0, 0x4010}, 0x20050800) (async) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0xc) 1.00714385s ago: executing program 4 (id=2105): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400b500000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000001400001c00128009000100626f6e64000000000c000280080014"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8000010}, 0x48000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf2525000000080001007063303a31302e300000000008008c000100000000000000000000f900000000efd5f48e4ed10f4ed015a11130de43199562"], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x80) ioctl$XFS_IOC_FSGEOMETRY(r1, 0x8100587e, &(0x7f0000000380)) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xb}, 0x48) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$qrtrtun(r2, &(0x7f00000004c0)=""/57, 0x39) socket$netlink(0x10, 0x3, 0x0) 938.54805ms ago: executing program 4 (id=2106): syz_open_dev$video4linux(&(0x7f0000000000), 0xfff, 0x2) (async) r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0xfff, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x10, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="0b000000000000000a00000000000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000020000000a00000000000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000fe8000000000000000000000000000bb"], 0x190) syz_emit_ethernet(0x5a, &(0x7f0000000a00)={@multicast, @random="4e7b5543f090", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x3, 0x3a, 0xff, @remote, @mcast2, {[@fragment={0x3b, 0x0, 0x6, 0x1, 0x0, 0x3, 0x67}], @mlv2_query={0x82, 0x0, 0x0, 0x479, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6, 0x1, 0x8, 0x3}}}}}}, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x100, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x100, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xd0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1000001, 0x8013, r4, 0xf6695000) getsockopt$inet6_int(r2, 0x29, 0xcf, 0x0, &(0x7f00000000c0)) (async) getsockopt$inet6_int(r2, 0x29, 0xcf, 0x0, &(0x7f00000000c0)) ioctl$NILFS_IOCTL_GET_CPSTAT(r2, 0x80186e83, &(0x7f0000000100)) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000200), 0xc2001, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r5, 0x80044dfb, &(0x7f0000000180)) (async) ioctl$SOUND_MIXER_READ_STEREODEVS(r5, 0x80044dfb, &(0x7f0000000180)) socket$kcm(0x10, 0x3, 0x10) (async) r6 = socket$kcm(0x10, 0x3, 0x10) madvise(&(0x7f00004b4000/0x2000)=nil, 0x2000, 0x12) poll(&(0x7f0000000140), 0x0, 0x90fc) socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x2, 0x300) socket$netlink(0x10, 0x3, 0x18) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f00000003c0)="e26248", 0x3}], 0x2}, 0x44040) 935.459015ms ago: executing program 0 (id=2107): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) r1 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x80000005}, {0x2}]}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x7b, &(0x7f0000000000)=r4, 0x8) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) sendto$inet6(r4, &(0x7f0000000500)="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", 0x1000, 0x24000000, &(0x7f0000001500)={0xa, 0x4e23, 0xfffffffb, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c) getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x4, 0x3, 0x1, 0x7, 0x9, {0x0, @in={{0x2, 0x4e24, @remote}}, 0x2a6, 0xa, 0x80, 0x5e40, 0xac}}, &(0x7f0000000280)=0xb0) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r4, 0x84, 0x5, &(0x7f0000001540)={r5, @in={{0x2, 0x4e23, @multicast2}}}, 0x84) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3) r6 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000000)={{0x2, 0x4e23, @multicast1}, {0x1, @multicast}, 0x3d, {0x2, 0xe20, @empty}}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x20}) write$binfmt_script(r7, &(0x7f000000e0c0), 0x10010) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, "b835f54529188d9f", "a5998aa6b6d65ed8829f86957c1816938a788b80f8583285d6dba96bcb7f6a54", "eaa20a2c", "8e7b9e66eae88fc4"}, 0x38) sendfile(r0, r7, &(0x7f0000000100)=0x1010, 0x10001) 860.307335ms ago: executing program 0 (id=2108): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, 0x0, &(0x7f0000000740), 0x20075, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) 770.193213ms ago: executing program 1 (id=2109): modify_ldt$write2(0x11, &(0x7f0000000100)={0x9, 0x0, 0xffffffffffffffff, 0x1}, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000000)={0x7f, 0x20000800, 0x2000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x10) 420.218686ms ago: executing program 1 (id=2110): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x121403, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r1, 0x11, 0x67, 0x0, &(0x7f0000000700)) ioctl$FS_IOC_SETFLAGS(r0, 0x40081271, &(0x7f0000000980)=0x4000) sendto(r1, &(0x7f0000000000)="94e4ff30653059a90546262259c79ef5894c4be262ddd46724fca3e3ccf5f6f9427d07e9e1a680313db15a", 0x2b, 0x20000084, 0x0, 0x0) 419.737471ms ago: executing program 1 (id=2111): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x60, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0xffffffff}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x1}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x60}}, 0x8000) ioctl$USBDEVFS_REAPURB(r2, 0x4004550c, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000001a00)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000000)={0x28, 0x2, r5, r4, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x2, r4, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x5}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000010429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="2b030000000000002000128008000100677470001400028008000100", @ANYRES32=r8, @ANYBLOB="080002"], 0x40}}, 0x8080) setsockopt$inet_udp_encap(r8, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r9, r7, 0x2) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r0, 0x3b8b, &(0x7f0000000240)={0x10, 0x1, r6}) 310.069205ms ago: executing program 1 (id=2112): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)="dd71fc1566") syz_open_procfs(r4, &(0x7f0000000240)='net/ip_tables_names\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@gettclass={0x24, 0x2a, 0x8, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x2}, {0xfff2, 0xe}, {0xfff1, 0xffff}}}, 0x24}}, 0x20040000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf2507000000080001006000000008000300", @ANYRES32=r6, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c657230000089e9013c3d90fc64c8d4a77e"], 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 250.409683ms ago: executing program 1 (id=2113): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r1 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) close(r1) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) fcntl$setstatus(r1, 0x4, 0x2c00) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x6}, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$KVM_RUN(r3, 0xae80, 0x0) 200.233888ms ago: executing program 1 (id=2114): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"/332], 0x14c}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000680)}], 0x5, 0x4, 0x5) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x400000002) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x5, 0xfffffff8, 0x0, 0xff, 0xff}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x1e, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB="4000000047ce6d83a127409632569b1d3b683a59219ceb20605b920a6251c46e343307ea37c4a59cac32528f6a796cfce26ce3b5264e75e15a9fc789e724e766bde8ae99ffe52e5d29c8cd05d40a7da7778649b53a1fd16ffcc0c9dd2e1e1c347e76d770f08213c9eeab39ec703175ca60479144b56257d7cb5273e380bc69cf5cd9b6e6284be9529dc15b35d22e75b7a7607a50b5e409aef4015c79d6f4e4cb8341f2ba0b5945f194b1de2043655a5066e1b4fe959f309a6d6a42bff8d753f676f7f0ddb70224a8500e6592e566505b", @ANYRES16=r5, @ANYBLOB="01002cbd700000000000020000000c00990000001000000000000800a000ee0900000800270001000000"], 0x40}, 0x1, 0x0, 0x0, 0xc804}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r8, &(0x7f0000000a40)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000d00)=ANY=[@ANYBLOB="f4000000aab8d9bee3542cc713365c0374766b1c5dd1229898cea66743112d60f9a42e07a628ed2f965b2bb3c3dcd5d287f3fcf13995db4d7265cf9bd762249b49881491ccdc5a3ce79ad14dc7f961c9c9b9b0d790033673f66383152f4373d8e15baa86f2fd053b71ed75f71bcb29166ffb22d7311d57823f1c2b4eeefc841aa68bbf051eafbb870ac747b13fec8acb1c692122ba65917236317d1faeb13ccb0d21204cec091c9b64ea10d92e661572836fda7235ce06ca0dcaade1716c9e3f8fa7db", @ANYRES16=r5, @ANYBLOB="22002dbd7000fcdbdf250b00000008000300", @ANYRES32=r7, @ANYBLOB="05000800030000000800090005ac0f0004000b0028005080090001001a89aef527000000180008800400010004000100040002000400020004000100050008000300000005000800030000006000508011000100713b5fb38592e17490fa072fc5000000040006000400060005000900010000001000088004000100040002000400020011000100364f99ad889507a3e7f7871d6d0000000800030005ac0f000c0008800400020004000100080037000100000024006e800400010004000200040002000400020004000200040001000400020004000200"], 0xf4}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) socket$kcm(0x11, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x9102}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40480, 0x0) close(r11) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0x0, 0x10}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x7fffffff, 0x6361, 0x5, 0xffffffff, 0x407}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x101}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f0000000180)={&(0x7f0000000580)=@ll={0x11, 0xc, r14, 0x1, 0xc0, 0x6, @random="5e3ab422dab4"}, 0x80, &(0x7f0000003600)=[{&(0x7f0000000bc0)="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", 0x12e}], 0x1}, 0x400d1) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r15, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x2ec}, 0x1, 0x0, 0x0, 0x20008811}, 0x0) 216.324µs ago: executing program 0 (id=2115): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000018c0)=@raw={'raw\x00', 0x8, 0x3, 0x540, 0x0, 0x11, 0x148, 0x340, 0x0, 0x4a8, 0x2a8, 0x2a8, 0x4a8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r2}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, '\x00', {0x7}}}}, {{@uncond, 0x0, 0x128, 0x168, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'veth1_to_bridge\x00', {}, 'erspan0\x00', {0xff}, 0x4, 0x1e}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0xd, 0x0, 0x2}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0x3, {0xff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5a0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendmmsg$inet(r0, &(0x7f0000000c00)=[{{&(0x7f0000000080)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r0, &(0x7f0000000c80)="e8", 0x6200, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900038073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x25}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f0000000180)=""/71, &(0x7f0000000200)=0x47) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}}], {0x14}}, 0x78}}, 0x0) clock_nanosleep(0x9, 0x1, &(0x7f00000002c0)={0x77359400}, 0x0) syz_usb_connect(0x1, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003429533083014dc6ccc850102030109021b0001080780050904ce0001ff5d010409050a0bff031c030618d221624205069488073b8218246b4b65cd6c6e1d858856bf052a32cb3515b0512c981219b16ca42e8cea9ffdc2dcd49d1f063b0b32ef22e10ab2e976ba3a177d5fa06ccf8ab325fbe490794cd74c8c90228a350da93d9acb24e6bf4d944553cc4b54d3353918e1848439a40baded59bf9399b0ac6ed6e59e671ca03a82194edfc18daadf877a6f258114ad"], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) 0s ago: executing program 4 (id=2116): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000080), 0x88400, 0x0) ioctl$CDROM_LAST_WRITTEN(r1, 0x5392, &(0x7f0000000040)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f00000001c0)={&(0x7f0000000500)=[r2, 0x0], 0x0, 0x400000d2}) r3 = syz_open_dev$sg(&(0x7f0000000080), 0xffff0000, 0x40) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000040000009e", @ANYRESHEX=r3]) kernel console output (not intermixed with test programs): k: 388 bytes leftover after parsing attributes in process `syz.0.1657'. [ 215.132081][ T5447] 8021q: adding VLAN 0 to HW filter on device eth2 [ 215.149960][T11531] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.174180][ T226] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.183367][ T226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.216139][ T226] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.218838][ T226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.227460][ T12] tipc: Disabling bearer [ 215.233072][ T12] tipc: Left network mode [ 215.240728][ T40] audit: type=1400 audit(1778901655.794:917): avc: denied { execute } for pid=11659 comm="syz.0.1660" path="/dev/dsp" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 215.297282][T11666] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.1660'. [ 215.307643][ T62] Bluetooth: hci4: command tx timeout [ 215.373866][T11517] syz.1.1624 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 215.378630][T11517] CPU: 0 UID: 0 PID: 11517 Comm: syz.1.1624 Tainted: G L syzkaller #0 PREEMPT(full) [ 215.378660][T11517] Tainted: [L]=SOFTLOCKUP [ 215.378666][T11517] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 215.378675][T11517] Call Trace: [ 215.378681][T11517] [ 215.378687][T11517] dump_stack_lvl+0x100/0x190 [ 215.378713][T11517] dump_header+0xfb/0x606 [ 215.378732][T11517] oom_kill_process.cold+0xd/0x330 [ 215.378752][T11517] out_of_memory+0x340/0x14f0 [ 215.378806][T11517] ? __pfx_out_of_memory+0x10/0x10 [ 215.378836][T11517] mem_cgroup_out_of_memory+0xc6/0x130 [ 215.378859][T11517] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 215.378918][T11517] ? find_held_lock+0x2b/0x80 [ 215.378939][T11517] ? do_raw_spin_unlock+0x145/0x1e0 [ 215.378962][T11517] ? _raw_spin_unlock+0x28/0x50 [ 215.378985][T11517] try_charge_memcg+0x6e5/0xdf0 [ 215.379010][T11517] ? __pfx_try_charge_memcg+0x10/0x10 [ 215.379026][T11517] ? find_held_lock+0x2b/0x80 [ 215.379041][T11517] ? rcu_read_unlock+0x17/0x60 [ 215.379058][T11517] ? rcu_read_unlock+0x17/0x60 [ 215.379076][T11517] ? find_held_lock+0x2b/0x80 [ 215.379091][T11517] ? rcu_read_unlock+0x17/0x60 [ 215.379114][T11517] charge_memcg+0x19f/0x210 [ 215.379133][T11517] __mem_cgroup_charge+0x2b/0x1c0 [ 215.379155][T11517] shmem_alloc_and_add_folio+0x451/0xd40 [ 215.379217][T11517] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 215.379243][T11517] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 215.379274][T11517] shmem_get_folio_gfp+0x6ab/0x1900 [ 215.379303][T11517] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 215.379334][T11517] shmem_write_begin+0x1a4/0x420 [ 215.379352][T11517] ? __pfx_shmem_write_begin+0x10/0x10 [ 215.379377][T11517] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 215.379395][T11517] ? lockdep_hardirqs_on+0x78/0x100 [ 215.379422][T11517] generic_perform_write+0x292/0xa40 [ 215.379452][T11517] ? __pfx_generic_perform_write+0x10/0x10 [ 215.379478][T11517] ? file_update_time_flags+0x373/0x500 [ 215.379505][T11517] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 215.379522][T11517] shmem_file_write_iter+0x10e/0x140 [ 215.379542][T11517] __kernel_write_iter+0x2ac/0x920 [ 215.379562][T11517] ? __pfx___kernel_write_iter+0x10/0x10 [ 215.379579][T11517] ? __up_read+0x2c1/0x6e0 [ 215.379605][T11517] ? dump_user_range+0x65e/0xad0 [ 215.379626][T11517] dump_user_range+0x3f9/0xad0 [ 215.379645][T11517] ? __pfx_dump_user_range+0x10/0x10 [ 215.379668][T11517] ? __pfx_writenote+0x10/0x10 [ 215.379689][T11517] elf_core_dump+0x2d5f/0x3d10 [ 215.379718][T11517] ? __pfx_elf_core_dump+0x10/0x10 [ 215.379734][T11517] ? kasan_save_stack+0x3f/0x50 [ 215.379750][T11517] ? kasan_save_stack+0x30/0x50 [ 215.379763][T11517] ? __kasan_kmalloc+0xaa/0xb0 [ 215.379775][T11517] ? __kvmalloc_node_noprof+0x360/0xa00 [ 215.379798][T11517] ? vfs_coredump+0x22db/0x5770 [ 215.379814][T11517] ? asm_exc_page_fault+0x26/0x30 [ 215.379836][T11517] ? 0xffffffffff600000 [ 215.379890][T11517] ? vfs_coredump+0x29a0/0x5770 [ 215.379904][T11517] vfs_coredump+0x29a0/0x5770 [ 215.379939][T11517] ? __pfx_vfs_coredump+0x10/0x10 [ 215.379956][T11517] ? __lock_acquire+0x4a5/0x2630 [ 215.379988][T11517] ? lock_acquire+0x1b1/0x370 [ 215.380021][T11517] ? is_bpf_text_address+0x8a/0x1a0 [ 215.380059][T11517] ? bpf_ksym_find+0x128/0x1c0 [ 215.380085][T11517] ? __kernel_text_address+0xd/0x30 [ 215.380104][T11517] ? unwind_get_return_address+0x59/0xa0 [ 215.380126][T11517] ? arch_stack_walk+0xa6/0xf0 [ 215.380154][T11517] ? __sigqueue_free+0xbe/0x2a0 [ 215.380168][T11517] ? stack_trace_save+0x8e/0xc0 [ 215.380183][T11517] ? __pfx_stack_trace_save+0x10/0x10 [ 215.380198][T11517] ? stack_depot_save_flags+0x27/0x9d0 [ 215.380214][T11517] ? __lock_acquire+0x4a5/0x2630 [ 215.380266][T11517] ? proc_coredump_connector+0x2d3/0x4f0 [ 215.380286][T11517] ? __pfx_proc_coredump_connector+0x10/0x10 [ 215.380309][T11517] ? rcu_is_watching+0x12/0xc0 [ 215.380335][T11517] get_signal+0x2162/0x2210 [ 215.380364][T11517] ? __pfx_get_signal+0x10/0x10 [ 215.380384][T11517] ? __pfx_force_sig_fault+0x10/0x10 [ 215.380409][T11517] arch_do_signal_or_restart+0x91/0x7e0 [ 215.380433][T11517] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 215.380463][T11517] ? rcu_is_watching+0x12/0xc0 [ 215.380487][T11517] irqentry_exit+0x410/0x7e0 [ 215.380510][T11517] asm_exc_page_fault+0x26/0x30 [ 215.380524][T11517] RIP: 0033:0x7f841cf9ce61 [ 215.380536][T11517] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 215.380550][T11517] RSP: 002b:00000000fffffeb0 EFLAGS: 00010217 [ 215.380564][T11517] RAX: 0000000000000000 RBX: 00007f841d215fa0 RCX: 00007f841cf9ce59 [ 215.380573][T11517] RDX: 0000000000000000 RSI: 00000000fffffeb0 RDI: 0000000002000400 [ 215.380581][T11517] RBP: 00007f841d032d6f R08: 0000000000000000 R09: 0000000000000000 [ 215.380589][T11517] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 215.380597][T11517] R13: 00007f841d216038 R14: 00007f841d215fa0 R15: 00007ffdb44a4208 [ 215.380617][T11517] [ 215.380743][T11517] memory: usage 307200kB, limit 307200kB, failcnt 24295 [ 215.566339][T11517] memory+swap: usage 409452kB, limit 9007199254740988kB, failcnt 0 [ 215.568847][T11517] kmem: usage 7112kB, limit 9007199254740988kB, failcnt 0 [ 215.570998][T11517] Memory cgroup stats for /syz1: [ 215.571075][T11517] cache 307101696 [ 215.573812][T11517] rss 163840 [ 215.587364][T11517] rss_huge 0 [ 215.588724][T11517] shmem 307101696 [ 215.590242][T11517] mapped_file 0 [ 215.591781][T11517] dirty 0 [ 215.593124][T11517] writeback 0 [ 215.594571][T11517] workingset_refault_anon 28 [ 215.596659][T11517] workingset_refault_file 3302 [ 215.598846][T11517] swap 104706048 [ 215.600414][T11517] swapcached 139255808 [ 215.602106][T11517] pgpgin 249192 [ 215.603679][T11517] pgpgout 174170 [ 215.605110][T11517] pgfault 97214 [ 215.606632][T11517] pgmajfault 108 [ 215.609178][T11517] inactive_anon 54042624 [ 215.611045][T11517] active_anon 253247488 [ 215.612772][T11517] inactive_file 0 [ 215.614318][T11517] active_file 0 [ 215.616111][T11517] unevictable 0 [ 215.617762][T11517] hierarchical_memory_limit 314572800 [ 215.620019][T11517] hierarchical_memsw_limit 9223372036854771712 [ 215.622471][T11517] total_cache 307101696 [ 215.624237][T11517] total_rss 163840 [ 215.625477][T11517] total_rss_huge 0 [ 215.626902][T11517] total_shmem 307101696 [ 215.628847][T11517] total_mapped_file 0 [ 215.630246][T11517] total_dirty 0 [ 215.631489][T11517] total_writeback 0 [ 215.632826][T11517] total_workingset_refault_anon 28 [ 215.634597][T11517] total_workingset_refault_file 3302 [ 215.636213][T11517] total_swap 104706048 [ 215.637655][T11517] total_swapcached 139255808 [ 215.639314][T11517] total_pgpgin 249192 [ 215.640639][T11517] total_pgpgout 174170 [ 215.641901][T11517] total_pgfault 97214 [ 215.643229][T11517] total_pgmajfault 108 [ 215.644550][T11517] total_inactive_anon 54042624 [ 215.646090][T11517] total_active_anon 253247488 [ 215.647825][T11517] total_inactive_file 0 [ 215.649119][T11517] total_active_file 0 [ 215.650387][T11517] total_unevictable 0 [ 215.651750][T11517] anon_cost 0 [ 215.652898][T11517] file_cost 0 [ 215.654045][T11517] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1624,pid=11508,uid=0 [ 215.658823][T11517] Memory cgroup out of memory: Killed process 11508 (syz.1.1624) total-vm:98656kB, anon-rss:348kB, file-rss:57412kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 215.669489][T11531] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.683029][T11514] syz.1.1624 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 215.697285][T11514] CPU: 2 UID: 0 PID: 11514 Comm: syz.1.1624 Tainted: G L syzkaller #0 PREEMPT(full) [ 215.697307][T11514] Tainted: [L]=SOFTLOCKUP [ 215.697311][T11514] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 215.697317][T11514] Call Trace: [ 215.697322][T11514] [ 215.697326][T11514] dump_stack_lvl+0x100/0x190 [ 215.697344][T11514] dump_header+0xfb/0x606 [ 215.697356][T11514] oom_kill_process.cold+0xd/0x330 [ 215.697369][T11514] out_of_memory+0x340/0x14f0 [ 215.697388][T11514] ? __pfx_out_of_memory+0x10/0x10 [ 215.697408][T11514] mem_cgroup_out_of_memory+0xc6/0x130 [ 215.697424][T11514] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 215.697438][T11514] ? find_held_lock+0x2b/0x80 [ 215.697468][T11514] ? do_raw_spin_unlock+0x145/0x1e0 [ 215.697486][T11514] ? _raw_spin_unlock+0x28/0x50 [ 215.697501][T11514] try_charge_memcg+0x6e5/0xdf0 [ 215.697516][T11514] ? __pfx_try_charge_memcg+0x10/0x10 [ 215.697527][T11514] ? find_held_lock+0x2b/0x80 [ 215.697537][T11514] ? rcu_read_unlock+0x17/0x60 [ 215.697549][T11514] ? rcu_read_unlock+0x17/0x60 [ 215.697561][T11514] ? find_held_lock+0x2b/0x80 [ 215.697571][T11514] ? rcu_read_unlock+0x17/0x60 [ 215.697586][T11514] charge_memcg+0x19f/0x210 [ 215.697599][T11514] __mem_cgroup_charge+0x2b/0x1c0 [ 215.697613][T11514] shmem_alloc_and_add_folio+0x451/0xd40 [ 215.697635][T11514] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 215.697653][T11514] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 215.697673][T11514] shmem_get_folio_gfp+0x6ab/0x1900 [ 215.697692][T11514] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 215.697713][T11514] shmem_write_begin+0x1a4/0x420 [ 215.697724][T11514] ? __pfx_shmem_write_begin+0x10/0x10 [ 215.697742][T11514] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 215.697754][T11514] ? lockdep_hardirqs_on+0x78/0x100 [ 215.697770][T11514] generic_perform_write+0x292/0xa40 [ 215.697790][T11514] ? __pfx_generic_perform_write+0x10/0x10 [ 215.697807][T11514] ? file_update_time_flags+0x373/0x500 [ 215.697825][T11514] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 215.697836][T11514] shmem_file_write_iter+0x10e/0x140 [ 215.697849][T11514] __kernel_write_iter+0x2ac/0x920 [ 215.697863][T11514] ? __pfx___kernel_write_iter+0x10/0x10 [ 215.697875][T11514] ? __up_read+0x2c1/0x6e0 [ 215.697891][T11514] ? dump_user_range+0x65e/0xad0 [ 215.697905][T11514] dump_user_range+0x3f9/0xad0 [ 215.697918][T11514] ? __pfx_dump_user_range+0x10/0x10 [ 215.697933][T11514] ? __pfx_writenote+0x10/0x10 [ 215.697948][T11514] elf_core_dump+0x2d5f/0x3d10 [ 215.697969][T11514] ? __pfx_elf_core_dump+0x10/0x10 [ 215.697980][T11514] ? kasan_save_stack+0x3f/0x50 [ 215.697989][T11514] ? kasan_save_stack+0x30/0x50 [ 215.697998][T11514] ? __kasan_kmalloc+0xaa/0xb0 [ 215.698007][T11514] ? __kvmalloc_node_noprof+0x360/0xa00 [ 215.698023][T11514] ? vfs_coredump+0x22db/0x5770 [ 215.698033][T11514] ? asm_exc_page_fault+0x26/0x30 [ 215.698045][T11514] ? 0xffffffffff600000 [ 215.698077][T11514] ? vfs_coredump+0x29a0/0x5770 [ 215.698086][T11514] vfs_coredump+0x29a0/0x5770 [ 215.698101][T11514] ? __pfx_vfs_coredump+0x10/0x10 [ 215.698112][T11514] ? __lock_acquire+0x4a5/0x2630 [ 215.698131][T11514] ? lock_acquire+0x1b1/0x370 [ 215.698151][T11514] ? is_bpf_text_address+0x8a/0x1a0 [ 215.698165][T11514] ? bpf_ksym_find+0x128/0x1c0 [ 215.698183][T11514] ? __kernel_text_address+0xd/0x30 [ 215.698198][T11514] ? unwind_get_return_address+0x59/0xa0 [ 215.698215][T11514] ? arch_stack_walk+0xa6/0xf0 [ 215.698235][T11514] ? __sigqueue_free+0xbe/0x2a0 [ 215.698246][T11514] ? stack_trace_save+0x8e/0xc0 [ 215.698261][T11514] ? __pfx_stack_trace_save+0x10/0x10 [ 215.698277][T11514] ? stack_depot_save_flags+0x27/0x9d0 [ 215.698296][T11514] ? __lock_acquire+0x4a5/0x2630 [ 215.698361][T11514] ? proc_coredump_connector+0x2d3/0x4f0 [ 215.698383][T11514] ? __pfx_proc_coredump_connector+0x10/0x10 [ 215.698400][T11514] ? rcu_is_watching+0x12/0xc0 [ 215.698420][T11514] get_signal+0x2162/0x2210 [ 215.698441][T11514] ? __pfx_get_signal+0x10/0x10 [ 215.698464][T11514] ? __pfx_force_sig_fault+0x10/0x10 [ 215.698483][T11514] arch_do_signal_or_restart+0x91/0x7e0 [ 215.698502][T11514] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 215.698524][T11514] ? rcu_is_watching+0x12/0xc0 [ 215.698542][T11514] irqentry_exit+0x410/0x7e0 [ 215.698559][T11514] asm_exc_page_fault+0x26/0x30 [ 215.698569][T11514] RIP: 0033:0x7f841cf9ce61 [ 215.698579][T11514] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 215.698590][T11514] RSP: 002b:00000000fffffeb0 EFLAGS: 00010217 [ 215.698600][T11514] RAX: 0000000000000000 RBX: 00007f841d215fa0 RCX: 00007f841cf9ce59 [ 215.698607][T11514] RDX: 0000000000000000 RSI: 00000000fffffeb0 RDI: 0000000002000400 [ 215.698613][T11514] RBP: 00007f841d032d6f R08: 0000000000000000 R09: 0000000000000000 [ 215.698619][T11514] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 215.698624][T11514] R13: 00007f841d216038 R14: 00007f841d215fa0 R15: 00007ffdb44a4208 [ 215.698638][T11514] [ 215.698666][T11514] memory: usage 307200kB, limit 307200kB, failcnt 24712 [ 215.839404][T11531] veth0_vlan: entered promiscuous mode [ 215.897097][T11514] memory+swap: usage 400716kB, limit 9007199254740988kB, failcnt 0 [ 215.900161][T11514] kmem: usage 7144kB, limit 9007199254740988kB, failcnt 0 [ 215.902761][T11514] Memory cgroup stats for /syz1: [ 215.902851][T11514] cache 304775168 [ 215.905749][T11514] rss 147456 [ 215.906959][T11514] rss_huge 0 [ 215.911219][T11514] shmem 304775168 [ 215.912497][T11514] mapped_file 0 [ 215.913701][T11514] dirty 0 [ 215.914671][T11514] writeback 0 [ 215.915822][T11514] workingset_refault_anon 28 [ 215.917625][T11514] workingset_refault_file 3302 [ 215.919313][T11514] swap 97492992 [ 215.920562][T11514] swapcached 142516224 [ 215.921993][T11514] pgpgin 251950 [ 215.923206][T11514] pgpgout 177496 [ 215.924435][T11514] pgfault 97386 [ 215.925652][T11514] pgmajfault 108 [ 215.927566][T11514] inactive_anon 50774016 [ 215.929325][T11514] active_anon 253984768 [ 215.930981][T11514] inactive_file 0 [ 215.932266][T11514] active_file 0 [ 215.933516][T11514] unevictable 0 [ 215.934809][T11514] hierarchical_memory_limit 314572800 [ 215.936819][T11514] hierarchical_memsw_limit 9223372036854771712 [ 215.939715][T11514] total_cache 304775168 [ 215.941178][T11514] total_rss 147456 [ 215.942604][T11514] total_rss_huge 0 [ 215.943874][T11514] total_shmem 304775168 [ 215.945296][T11514] total_mapped_file 0 [ 215.946703][T11514] total_dirty 0 [ 215.948604][T11514] total_writeback 0 [ 215.950075][T11514] total_workingset_refault_anon 28 [ 215.951913][T11514] total_workingset_refault_file 3302 [ 215.953717][T11514] total_swap 97492992 [ 215.955074][T11514] total_swapcached 142516224 [ 215.956639][T11514] total_pgpgin 251950 [ 215.958409][T11514] total_pgpgout 177496 [ 215.959858][T11514] total_pgfault 97386 [ 215.961260][T11514] total_pgmajfault 108 [ 215.962676][T11514] total_inactive_anon 50774016 [ 215.964272][T11514] total_active_anon 253984768 [ 215.965801][T11514] total_inactive_file 0 [ 215.967850][T11514] total_active_file 0 [ 215.969476][T11514] total_unevictable 0 [ 215.970845][T11514] anon_cost 0 [ 215.972230][T11514] file_cost 0 [ 215.976007][T11514] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1624,pid=11504,uid=0 [ 215.989145][T11531] veth1_vlan: entered promiscuous mode [ 216.002386][T11514] Memory cgroup out of memory: Killed process 11504 (syz.1.1624) total-vm:98656kB, anon-rss:348kB, file-rss:57412kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 216.027846][T11531] veth0_macvtap: entered promiscuous mode [ 216.042682][T11531] veth1_macvtap: entered promiscuous mode [ 216.088785][ T40] audit: type=1400 audit(1778901656.644:918): avc: denied { write } for pid=11661 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 216.114680][T11508] syz.1.1624 (11508) used greatest stack depth: 19320 bytes left [ 216.150798][T11531] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.150912][ T40] audit: type=1400 audit(1778901656.704:919): avc: denied { write } for pid=11687 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 216.167835][T11531] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.181301][ T202] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.184538][ T202] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.196244][ T202] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.207121][ T202] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.260739][T11692] ptrace attach of "/syz-executor exec"[5736] was attempted by "/syz-executor exec"[11692] [ 216.285715][ T5447] 8021q: adding VLAN 0 to HW filter on device eth4 [ 216.300081][ T40] audit: type=1400 audit(1778901656.844:920): avc: denied { read } for pid=11690 comm="syz.3.1662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 216.324656][T11695] use of bytesused == 0 is deprecated and will be removed in the future, [ 216.331380][T11695] use the actual size instead. [ 216.332984][T11517] syz.1.1624 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 216.333013][T11517] CPU: 2 UID: 0 PID: 11517 Comm: syz.1.1624 Tainted: G L syzkaller #0 PREEMPT(full) [ 216.333029][T11517] Tainted: [L]=SOFTLOCKUP [ 216.333033][T11517] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 216.333039][T11517] Call Trace: [ 216.333044][T11517] [ 216.333050][T11517] dump_stack_lvl+0x100/0x190 [ 216.333068][T11517] dump_header+0xfb/0x606 [ 216.333082][T11517] oom_kill_process.cold+0xd/0x330 [ 216.333096][T11517] out_of_memory+0x340/0x14f0 [ 216.333117][T11517] ? __pfx_out_of_memory+0x10/0x10 [ 216.333137][T11517] mem_cgroup_out_of_memory+0xc6/0x130 [ 216.333154][T11517] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 216.333171][T11517] ? find_held_lock+0x2b/0x80 [ 216.333185][T11517] ? do_raw_spin_unlock+0x145/0x1e0 [ 216.333202][T11517] ? _raw_spin_unlock+0x28/0x50 [ 216.333218][T11517] try_charge_memcg+0x6e5/0xdf0 [ 216.333233][T11517] ? __pfx_try_charge_memcg+0x10/0x10 [ 216.333244][T11517] ? find_held_lock+0x2b/0x80 [ 216.333254][T11517] ? rcu_read_unlock+0x17/0x60 [ 216.333266][T11517] ? rcu_read_unlock+0x17/0x60 [ 216.333278][T11517] ? find_held_lock+0x2b/0x80 [ 216.333288][T11517] ? rcu_read_unlock+0x17/0x60 [ 216.333303][T11517] charge_memcg+0x19f/0x210 [ 216.333315][T11517] __mem_cgroup_charge+0x2b/0x1c0 [ 216.333331][T11517] shmem_alloc_and_add_folio+0x451/0xd40 [ 216.333353][T11517] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 216.333370][T11517] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 216.333391][T11517] shmem_get_folio_gfp+0x6ab/0x1900 [ 216.333411][T11517] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 216.333431][T11517] shmem_write_begin+0x1a4/0x420 [ 216.333443][T11517] ? __pfx_shmem_write_begin+0x10/0x10 [ 216.333460][T11517] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 216.333473][T11517] ? lockdep_hardirqs_on+0x78/0x100 [ 216.333490][T11517] generic_perform_write+0x292/0xa40 [ 216.333510][T11517] ? __pfx_generic_perform_write+0x10/0x10 [ 216.333527][T11517] ? file_update_time_flags+0x373/0x500 [ 216.333561][T11517] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 216.333573][T11517] shmem_file_write_iter+0x10e/0x140 [ 216.333586][T11517] __kernel_write_iter+0x2ac/0x920 [ 216.333600][T11517] ? __pfx___kernel_write_iter+0x10/0x10 [ 216.333612][T11517] ? __up_read+0x2c1/0x6e0 [ 216.333630][T11517] ? dump_user_range+0x65e/0xad0 [ 216.333641][T11517] ? copy_mc_enhanced_fast_string+0x6/0xf [ 216.333655][T11517] dump_user_range+0x3f9/0xad0 [ 216.333672][T11517] ? __pfx_dump_user_range+0x10/0x10 [ 216.333688][T11517] ? __pfx_writenote+0x10/0x10 [ 216.333703][T11517] elf_core_dump+0x2d5f/0x3d10 [ 216.333722][T11517] ? __pfx_elf_core_dump+0x10/0x10 [ 216.333733][T11517] ? kasan_save_stack+0x3f/0x50 [ 216.333742][T11517] ? kasan_save_stack+0x30/0x50 [ 216.333751][T11517] ? __kasan_kmalloc+0xaa/0xb0 [ 216.333760][T11517] ? __kvmalloc_node_noprof+0x360/0xa00 [ 216.333777][T11517] ? vfs_coredump+0x22db/0x5770 [ 216.333787][T11517] ? asm_exc_page_fault+0x26/0x30 [ 216.333800][T11517] ? 0xffffffffff600000 [ 216.333831][T11517] ? vfs_coredump+0x29a0/0x5770 [ 216.333840][T11517] vfs_coredump+0x29a0/0x5770 [ 216.333856][T11517] ? __pfx_vfs_coredump+0x10/0x10 [ 216.333867][T11517] ? __lock_acquire+0x4a5/0x2630 [ 216.333886][T11517] ? lock_acquire+0x1b1/0x370 [ 216.333906][T11517] ? is_bpf_text_address+0x8a/0x1a0 [ 216.333921][T11517] ? bpf_ksym_find+0x128/0x1c0 [ 216.333941][T11517] ? __kernel_text_address+0xd/0x30 [ 216.333956][T11517] ? unwind_get_return_address+0x59/0xa0 [ 216.333974][T11517] ? arch_stack_walk+0xa6/0xf0 [ 216.333995][T11517] ? __sigqueue_free+0xbe/0x2a0 [ 216.334007][T11517] ? stack_trace_save+0x8e/0xc0 [ 216.334019][T11517] ? __pfx_stack_trace_save+0x10/0x10 [ 216.334030][T11517] ? stack_depot_save_flags+0x27/0x9d0 [ 216.334042][T11517] ? __lock_acquire+0x4a5/0x2630 [ 216.334079][T11517] ? proc_coredump_connector+0x2d3/0x4f0 [ 216.334095][T11517] ? __pfx_proc_coredump_connector+0x10/0x10 [ 216.334112][T11517] ? rcu_is_watching+0x12/0xc0 [ 216.334131][T11517] get_signal+0x2162/0x2210 [ 216.334153][T11517] ? __pfx_get_signal+0x10/0x10 [ 216.334168][T11517] ? __pfx_force_sig_fault+0x10/0x10 [ 216.334187][T11517] arch_do_signal_or_restart+0x91/0x7e0 [ 216.334209][T11517] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 216.334233][T11517] ? rcu_is_watching+0x12/0xc0 [ 216.334251][T11517] irqentry_exit+0x410/0x7e0 [ 216.334268][T11517] asm_exc_page_fault+0x26/0x30 [ 216.334279][T11517] RIP: 0033:0x7f841cf9ce61 [ 216.334288][T11517] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 216.334299][T11517] RSP: 002b:00000000fffffeb0 EFLAGS: 00010217 [ 216.334308][T11517] RAX: 0000000000000000 RBX: 00007f841d215fa0 RCX: 00007f841cf9ce59 [ 216.334315][T11517] RDX: 0000000000000000 RSI: 00000000fffffeb0 RDI: 0000000002000400 [ 216.334321][T11517] RBP: 00007f841d032d6f R08: 0000000000000000 R09: 0000000000000000 [ 216.334327][T11517] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 216.334333][T11517] R13: 00007f841d216038 R14: 00007f841d215fa0 R15: 00007ffdb44a4208 [ 216.334347][T11517] [ 216.334351][T11517] memory: usage 307200kB, limit 307200kB, failcnt 27411 [ 216.349130][T11695] input: syz1 as /devices/virtual/input/input25 [ 216.358435][T11517] memory+swap: usage 409452kB, limit 9007199254740988kB, failcnt 0 [ 216.519489][T11517] kmem: usage 6912kB, limit 9007199254740988kB, failcnt 0 [ 216.522108][T11517] Memory cgroup stats for /syz1: [ 216.522206][T11517] cache 305328128 [ 216.524991][T11517] rss 180224 [ 216.526027][T11517] rss_huge 0 [ 216.527461][T11517] shmem 305328128 [ 216.528922][T11517] mapped_file 0 [ 216.530267][T11517] dirty 0 [ 216.531400][T11517] writeback 0 [ 216.532592][T11517] workingset_refault_anon 28 [ 216.534232][T11517] workingset_refault_file 3411 [ 216.538715][T11517] swap 91934720 [ 216.539937][T11517] swapcached 152068096 [ 216.541423][T11517] pgpgin 260776 [ 216.542721][T11517] pgpgout 186177 [ 216.543957][T11517] pgfault 97968 [ 216.545223][T11517] pgmajfault 111 [ 216.546426][T11517] inactive_anon 155099136 [ 216.548414][T11517] active_anon 150401024 [ 216.549824][T11517] inactive_file 0 [ 216.551179][T11517] active_file 0 [ 216.552343][T11517] unevictable 0 [ 216.553707][T11517] hierarchical_memory_limit 314572800 [ 216.555722][T11517] hierarchical_memsw_limit 9223372036854771712 [ 216.558584][T11517] total_cache 305328128 [ 216.559538][T11691] bond5 (unregistering): Released all slaves [ 216.560070][T11517] total_rss 180224 [ 216.560080][T11517] total_rss_huge 0 [ 216.560085][T11517] total_shmem 305328128 [ 216.560089][T11517] total_mapped_file 0 [ 216.560094][T11517] total_dirty 0 [ 216.560099][T11517] total_writeback 0 [ 216.560103][T11517] total_workingset_refault_anon 28 [ 216.560108][T11517] total_workingset_refault_file 3411 [ 216.560113][T11517] total_swap 91934720 [ 216.560118][T11517] total_swapcached 152068096 [ 216.560123][T11517] total_pgpgin 260776 [ 216.560127][T11517] total_pgpgout 186177 [ 216.560132][T11517] total_pgfault 97968 [ 216.584831][T11517] total_pgmajfault 111 [ 216.586551][T11517] total_inactive_anon 155099136 [ 216.588332][T11517] total_active_anon 150401024 [ 216.590687][T11517] total_inactive_file 0 [ 216.592344][T11517] total_active_file 0 [ 216.594777][T11517] total_unevictable 0 [ 216.596353][T11517] anon_cost 0 [ 216.597789][T11517] file_cost 0 [ 216.599167][T11517] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1624,pid=11501,uid=0 [ 216.607894][T11517] Memory cgroup out of memory: Killed process 11501 (syz.1.1624) total-vm:98524kB, anon-rss:296kB, file-rss:57412kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 216.923952][ T7781] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.927884][ T7781] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.991676][ T7781] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.000751][ T7781] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.043655][ T40] audit: type=1400 audit(1778901657.594:921): avc: denied { write } for pid=11705 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 217.135456][ T40] audit: type=1400 audit(1778901657.684:922): avc: denied { write } for pid=11708 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 217.397465][ T62] Bluetooth: hci4: command tx timeout [ 217.428098][T11515] syz.1.1624 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 217.442481][T11515] CPU: 1 UID: 0 PID: 11515 Comm: syz.1.1624 Tainted: G L syzkaller #0 PREEMPT(full) [ 217.442503][T11515] Tainted: [L]=SOFTLOCKUP [ 217.442506][T11515] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 217.442513][T11515] Call Trace: [ 217.442517][T11515] [ 217.442522][T11515] dump_stack_lvl+0x100/0x190 [ 217.442542][T11515] dump_header+0xfb/0x606 [ 217.442555][T11515] oom_kill_process.cold+0xd/0x330 [ 217.442585][T11515] out_of_memory+0x340/0x14f0 [ 217.442607][T11515] ? __pfx_out_of_memory+0x10/0x10 [ 217.442627][T11515] mem_cgroup_out_of_memory+0xc6/0x130 [ 217.442645][T11515] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 217.442659][T11515] ? find_held_lock+0x2b/0x80 [ 217.442674][T11515] ? do_raw_spin_unlock+0x145/0x1e0 [ 217.442691][T11515] ? _raw_spin_unlock+0x28/0x50 [ 217.442706][T11515] try_charge_memcg+0x6e5/0xdf0 [ 217.442733][T11515] ? __pfx_try_charge_memcg+0x10/0x10 [ 217.442747][T11515] ? find_held_lock+0x2b/0x80 [ 217.442757][T11515] ? rcu_read_unlock+0x17/0x60 [ 217.442769][T11515] ? rcu_read_unlock+0x17/0x60 [ 217.442781][T11515] ? find_held_lock+0x2b/0x80 [ 217.442792][T11515] ? rcu_read_unlock+0x17/0x60 [ 217.442807][T11515] charge_memcg+0x19f/0x210 [ 217.442820][T11515] __mem_cgroup_charge+0x2b/0x1c0 [ 217.442834][T11515] shmem_alloc_and_add_folio+0x451/0xd40 [ 217.442886][T11515] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 217.442905][T11515] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 217.442925][T11515] shmem_get_folio_gfp+0x6ab/0x1900 [ 217.442945][T11515] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 217.442966][T11515] shmem_write_begin+0x1a4/0x420 [ 217.442977][T11515] ? __pfx_shmem_write_begin+0x10/0x10 [ 217.442995][T11515] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 217.443008][T11515] ? lockdep_hardirqs_on+0x78/0x100 [ 217.443024][T11515] generic_perform_write+0x292/0xa40 [ 217.443045][T11515] ? __pfx_generic_perform_write+0x10/0x10 [ 217.443062][T11515] ? file_update_time_flags+0x373/0x500 [ 217.443084][T11515] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 217.443095][T11515] shmem_file_write_iter+0x10e/0x140 [ 217.443109][T11515] __kernel_write_iter+0x2ac/0x920 [ 217.443122][T11515] ? __pfx___kernel_write_iter+0x10/0x10 [ 217.443134][T11515] ? __up_read+0x2c1/0x6e0 [ 217.443152][T11515] ? dump_user_range+0x65e/0xad0 [ 217.443165][T11515] dump_user_range+0x3f9/0xad0 [ 217.443179][T11515] ? __pfx_dump_user_range+0x10/0x10 [ 217.443194][T11515] ? __pfx_writenote+0x10/0x10 [ 217.443210][T11515] elf_core_dump+0x2d5f/0x3d10 [ 217.443229][T11515] ? __pfx_elf_core_dump+0x10/0x10 [ 217.443240][T11515] ? kasan_save_stack+0x3f/0x50 [ 217.443250][T11515] ? kasan_save_stack+0x30/0x50 [ 217.443259][T11515] ? __kasan_kmalloc+0xaa/0xb0 [ 217.443267][T11515] ? __kvmalloc_node_noprof+0x360/0xa00 [ 217.443285][T11515] ? vfs_coredump+0x22db/0x5770 [ 217.443294][T11515] ? asm_exc_page_fault+0x26/0x30 [ 217.443307][T11515] ? 0xffffffffff600000 [ 217.443339][T11515] ? vfs_coredump+0x29a0/0x5770 [ 217.443348][T11515] vfs_coredump+0x29a0/0x5770 [ 217.443364][T11515] ? __pfx_vfs_coredump+0x10/0x10 [ 217.443375][T11515] ? __lock_acquire+0x4a5/0x2630 [ 217.443394][T11515] ? lock_acquire+0x1b1/0x370 [ 217.443414][T11515] ? is_bpf_text_address+0x8a/0x1a0 [ 217.443430][T11515] ? bpf_ksym_find+0x128/0x1c0 [ 217.443449][T11515] ? __kernel_text_address+0xd/0x30 [ 217.443465][T11515] ? unwind_get_return_address+0x59/0xa0 [ 217.443482][T11515] ? arch_stack_walk+0xa6/0xf0 [ 217.443503][T11515] ? __sigqueue_free+0xbe/0x2a0 [ 217.443514][T11515] ? stack_trace_save+0x8e/0xc0 [ 217.443526][T11515] ? __pfx_stack_trace_save+0x10/0x10 [ 217.443537][T11515] ? stack_depot_save_flags+0x27/0x9d0 [ 217.443550][T11515] ? __lock_acquire+0x4a5/0x2630 [ 217.443591][T11515] ? proc_coredump_connector+0x2d3/0x4f0 [ 217.443608][T11515] ? __pfx_proc_coredump_connector+0x10/0x10 [ 217.443625][T11515] ? rcu_is_watching+0x12/0xc0 [ 217.443645][T11515] get_signal+0x2162/0x2210 [ 217.443667][T11515] ? __pfx_get_signal+0x10/0x10 [ 217.443682][T11515] ? __pfx_force_sig_fault+0x10/0x10 [ 217.443702][T11515] arch_do_signal_or_restart+0x91/0x7e0 [ 217.443722][T11515] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 217.443744][T11515] ? rcu_is_watching+0x12/0xc0 [ 217.443762][T11515] irqentry_exit+0x410/0x7e0 [ 217.443779][T11515] asm_exc_page_fault+0x26/0x30 [ 217.443789][T11515] RIP: 0033:0x7f841cf9ce61 [ 217.443800][T11515] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 217.443810][T11515] RSP: 002b:00000000fffffeb0 EFLAGS: 00010217 [ 217.443820][T11515] RAX: 0000000000000000 RBX: 00007f841d215fa0 RCX: 00007f841cf9ce59 [ 217.443827][T11515] RDX: 0000000000000000 RSI: 00000000fffffeb0 RDI: 0000000002000400 [ 217.443833][T11515] RBP: 00007f841d032d6f R08: 0000000000000000 R09: 0000000000000000 [ 217.443840][T11515] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 217.443846][T11515] R13: 00007f841d216038 R14: 00007f841d215fa0 R15: 00007ffdb44a4208 [ 217.443860][T11515] [ 217.443909][T11515] memory: usage 307200kB, limit 307200kB, failcnt 34629 [ 217.596116][T11712] SELinux: Context system_u:object_r:fonts_cache_t:s0 is not valid (left unmapped). [ 217.637265][T11515] memory+swap: usage 409460kB, limit 9007199254740988kB, failcnt 0 [ 217.643619][ T40] audit: type=1400 audit(1778901658.194:923): avc: denied { relabelto } for pid=11710 comm="syz.0.1666" name="tun" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:fonts_cache_t:s0" [ 217.643795][T11515] kmem: usage 6888kB, limit 9007199254740988kB, failcnt 0 [ 217.647568][ T40] audit: type=1400 audit(1778901658.194:924): avc: denied { associate } for pid=11710 comm="syz.0.1666" name="tun" dev="devtmpfs" ino=720 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fonts_cache_t:s0" [ 217.650038][T11515] Memory cgroup stats for /syz1: [ 217.671760][T11515] cache 307236864 [ 217.675146][T11515] rss 270336 [ 217.676660][T11515] rss_huge 0 [ 217.678155][T11515] shmem 307236864 [ 217.679741][T11515] mapped_file 0 [ 217.680927][T11515] dirty 0 [ 217.683063][T11515] writeback 0 [ 217.683065][ T12] hsr_slave_0: left promiscuous mode [ 217.684225][T11515] workingset_refault_anon 29 [ 217.687856][T11515] workingset_refault_file 5461 [ 217.689379][T11515] swap 104714240 [ 217.690566][T11515] swapcached 185892864 [ 217.692065][T11515] pgpgin 281185 [ 217.693587][T11515] pgpgout 206107 [ 217.695155][T11515] pgfault 98901 [ 217.696534][T11515] pgmajfault 120 [ 217.697816][T11515] inactive_anon 201748480 [ 217.699191][T11515] active_anon 105766912 [ 217.700499][T11515] inactive_file 0 [ 217.701689][T11515] active_file 0 [ 217.703056][T11515] unevictable 0 [ 217.704676][T11515] hierarchical_memory_limit 314572800 [ 217.706658][T11515] hierarchical_memsw_limit 9223372036854771712 [ 217.709922][T11515] total_cache 307236864 [ 217.711906][T11515] total_rss 270336 [ 217.722674][T11515] total_rss_huge 0 [ 217.723850][ T12] hsr_slave_1: left promiscuous mode [ 217.727231][T11515] total_shmem 307236864 [ 217.730048][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.731316][T11515] total_mapped_file 0 [ 217.733430][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.746582][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.752557][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.768199][T11515] total_dirty 0 [ 217.769825][T11515] total_writeback 0 [ 217.771370][T11515] total_workingset_refault_anon 29 [ 217.775783][T11515] total_workingset_refault_file 5461 [ 217.778701][T11515] total_swap 104714240 [ 217.780402][T11515] total_swapcached 185892864 [ 217.782227][T11515] total_pgpgin 281185 [ 217.783788][T11515] total_pgpgout 206107 [ 217.785327][T11515] total_pgfault 98901 [ 217.787378][T11515] total_pgmajfault 120 [ 217.789185][T11515] total_inactive_anon 201748480 [ 217.792825][T11515] total_active_anon 105766912 [ 217.794635][T11515] total_inactive_file 0 [ 217.795331][ T12] veth1_macvtap: left promiscuous mode [ 217.796300][T11515] total_active_file 0 [ 217.800198][T11515] total_unevictable 0 [ 217.800421][ T12] veth0_macvtap: left promiscuous mode [ 217.801948][T11515] anon_cost 0 [ 217.801959][T11515] file_cost 0 [ 217.801966][T11515] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg= [ 217.802333][T11715] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 217.804980][ T12] veth1_vlan: left promiscuous mode [ 217.806182][T11515] /syz1 [ 217.808599][ T12] veth0_vlan: left promiscuous mode [ 217.812664][T11515] ,task=syz.1.1624,pid=11518,uid=0 [ 217.822930][T11515] Memory cgroup out of memory: Killed process 11518 (syz.1.1624) total-vm:98656kB, anon-rss:348kB, file-rss:57412kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 217.848141][T11510] syz.1.1624 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 217.854271][T11510] CPU: 2 UID: 0 PID: 11510 Comm: syz.1.1624 Tainted: G L syzkaller #0 PREEMPT(full) [ 217.854306][T11510] Tainted: [L]=SOFTLOCKUP [ 217.854313][T11510] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 217.854323][T11510] Call Trace: [ 217.854330][T11510] [ 217.854337][T11510] dump_stack_lvl+0x100/0x190 [ 217.854361][T11510] dump_header+0xfb/0x606 [ 217.854381][T11510] oom_kill_process.cold+0xd/0x330 [ 217.854403][T11510] out_of_memory+0x340/0x14f0 [ 217.854436][T11510] ? __pfx_out_of_memory+0x10/0x10 [ 217.854466][T11510] mem_cgroup_out_of_memory+0xc6/0x130 [ 217.854494][T11510] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 217.854516][T11510] ? find_held_lock+0x2b/0x80 [ 217.854537][T11510] ? do_raw_spin_unlock+0x145/0x1e0 [ 217.854560][T11510] ? _raw_spin_unlock+0x28/0x50 [ 217.854587][T11510] try_charge_memcg+0x6e5/0xdf0 [ 217.854612][T11510] ? __pfx_try_charge_memcg+0x10/0x10 [ 217.854628][T11510] ? find_held_lock+0x2b/0x80 [ 217.854641][T11510] ? rcu_read_unlock+0x17/0x60 [ 217.854658][T11510] ? rcu_read_unlock+0x17/0x60 [ 217.854679][T11510] ? find_held_lock+0x2b/0x80 [ 217.854698][T11510] ? rcu_read_unlock+0x17/0x60 [ 217.854724][T11510] charge_memcg+0x19f/0x210 [ 217.854743][T11510] __mem_cgroup_charge+0x2b/0x1c0 [ 217.854764][T11510] shmem_alloc_and_add_folio+0x451/0xd40 [ 217.854797][T11510] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 217.854826][T11510] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 217.854881][T11510] shmem_get_folio_gfp+0x6ab/0x1900 [ 217.854914][T11510] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 217.854948][T11510] shmem_write_begin+0x1a4/0x420 [ 217.854966][T11510] ? __pfx_shmem_write_begin+0x10/0x10 [ 217.854991][T11510] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 217.855011][T11510] ? lockdep_hardirqs_on+0x78/0x100 [ 217.855039][T11510] generic_perform_write+0x292/0xa40 [ 217.855069][T11510] ? __pfx_generic_perform_write+0x10/0x10 [ 217.855093][T11510] ? file_update_time_flags+0x373/0x500 [ 217.855125][T11510] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 217.855145][T11510] shmem_file_write_iter+0x10e/0x140 [ 217.855165][T11510] __kernel_write_iter+0x2ac/0x920 [ 217.855187][T11510] ? __pfx___kernel_write_iter+0x10/0x10 [ 217.855204][T11510] ? __up_read+0x2c1/0x6e0 [ 217.855228][T11510] ? dump_user_range+0x65e/0xad0 [ 217.855249][T11510] dump_user_range+0x3f9/0xad0 [ 217.855270][T11510] ? __pfx_dump_user_range+0x10/0x10 [ 217.855302][T11510] ? __pfx_writenote+0x10/0x10 [ 217.855325][T11510] elf_core_dump+0x2d5f/0x3d10 [ 217.855355][T11510] ? __pfx_elf_core_dump+0x10/0x10 [ 217.855374][T11510] ? kasan_save_stack+0x3f/0x50 [ 217.855390][T11510] ? kasan_save_stack+0x30/0x50 [ 217.855407][T11510] ? __kasan_kmalloc+0xaa/0xb0 [ 217.855421][T11510] ? __kvmalloc_node_noprof+0x360/0xa00 [ 217.855444][T11510] ? vfs_coredump+0x22db/0x5770 [ 217.855459][T11510] ? asm_exc_page_fault+0x26/0x30 [ 217.855478][T11510] ? 0xffffffffff600000 [ 217.855534][T11510] ? vfs_coredump+0x29a0/0x5770 [ 217.855547][T11510] vfs_coredump+0x29a0/0x5770 [ 217.855573][T11510] ? __pfx_vfs_coredump+0x10/0x10 [ 217.855592][T11510] ? __lock_acquire+0x4a5/0x2630 [ 217.855626][T11510] ? lock_acquire+0x1b1/0x370 [ 217.855657][T11510] ? is_bpf_text_address+0x8a/0x1a0 [ 217.855678][T11510] ? bpf_ksym_find+0x128/0x1c0 [ 217.855710][T11510] ? __kernel_text_address+0xd/0x30 [ 217.855733][T11510] ? unwind_get_return_address+0x59/0xa0 [ 217.855757][T11510] ? arch_stack_walk+0xa6/0xf0 [ 217.855788][T11510] ? __sigqueue_free+0xbe/0x2a0 [ 217.855807][T11510] ? stack_trace_save+0x8e/0xc0 [ 217.855826][T11510] ? __pfx_stack_trace_save+0x10/0x10 [ 217.855847][T11510] ? stack_depot_save_flags+0x27/0x9d0 [ 217.855865][T11510] ? __lock_acquire+0x4a5/0x2630 [ 217.855925][T11510] ? proc_coredump_connector+0x2d3/0x4f0 [ 217.855951][T11510] ? __pfx_proc_coredump_connector+0x10/0x10 [ 217.855980][T11510] ? rcu_is_watching+0x12/0xc0 [ 217.856007][T11510] get_signal+0x2162/0x2210 [ 217.856040][T11510] ? __pfx_get_signal+0x10/0x10 [ 217.856066][T11510] ? __pfx_force_sig_fault+0x10/0x10 [ 217.856094][T11510] arch_do_signal_or_restart+0x91/0x7e0 [ 217.856119][T11510] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 217.856157][T11510] ? rcu_is_watching+0x12/0xc0 [ 217.856184][T11510] irqentry_exit+0x410/0x7e0 [ 217.856208][T11510] asm_exc_page_fault+0x26/0x30 [ 217.856222][T11510] RIP: 0033:0x7f841cf9ce61 [ 217.856242][T11510] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 217.856259][T11510] RSP: 002b:00000000fffffeb0 EFLAGS: 00010217 [ 217.856275][T11510] RAX: 0000000000000000 RBX: 00007f841d215fa0 RCX: 00007f841cf9ce59 [ 217.856285][T11510] RDX: 0000000000000000 RSI: 00000000fffffeb0 RDI: 0000000002000400 [ 217.856301][T11510] RBP: 00007f841d032d6f R08: 0000000000000000 R09: 0000000000000000 [ 217.856310][T11510] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 217.856319][T11510] R13: 00007f841d216038 R14: 00007f841d215fa0 R15: 00007ffdb44a4208 [ 217.856348][T11510] [ 217.856356][T11510] memory: usage 307200kB, limit 307200kB, failcnt 34850 [ 218.056033][T11510] memory+swap: usage 385144kB, limit 9007199254740988kB, failcnt 0 [ 218.059468][T11510] kmem: usage 6424kB, limit 9007199254740988kB, failcnt 0 [ 218.062204][T11510] Memory cgroup stats for /syz1: [ 218.062346][T11510] cache 289042432 [ 218.065681][T11510] rss 122880 [ 218.067255][T11510] rss_huge 0 [ 218.068589][T11510] shmem 289042432 [ 218.070109][T11510] mapped_file 0 [ 218.071620][T11510] dirty 0 [ 218.072852][T11510] writeback 0 [ 218.074171][T11510] workingset_refault_anon 29 [ 218.075939][T11510] workingset_refault_file 5461 [ 218.077931][T11510] swap 97972224 [ 218.079348][T11510] swapcached 185892864 [ 218.081039][T11510] pgpgin 281331 [ 218.082601][T11510] pgpgout 210731 [ 218.084195][T11510] pgfault 98909 [ 218.085813][T11510] pgmajfault 120 [ 218.087461][T11510] inactive_anon 192327680 [ 218.089149][T11510] active_anon 96845824 [ 218.090794][T11510] inactive_file 0 [ 218.092301][T11510] active_file 0 [ 218.093794][T11510] unevictable 0 [ 218.095218][T11510] hierarchical_memory_limit 314572800 [ 218.097535][T11510] hierarchical_memsw_limit 9223372036854771712 [ 218.100089][T11510] total_cache 289042432 [ 218.101714][T11510] total_rss 122880 [ 218.103181][T11510] total_rss_huge 0 [ 218.104719][T11510] total_shmem 289042432 [ 218.106347][T11510] total_mapped_file 0 [ 218.111611][T11510] total_dirty 0 [ 218.113007][T11510] total_writeback 0 [ 218.114545][T11510] total_workingset_refault_anon 29 [ 218.116721][T11510] total_workingset_refault_file 5461 [ 218.118821][T11510] total_swap 97972224 [ 218.120471][T11510] total_swapcached 185892864 [ 218.122385][T11510] total_pgpgin 281331 [ 218.124097][T11510] total_pgpgout 210731 [ 218.130558][T11510] total_pgfault 98909 [ 218.132181][T11510] total_pgmajfault 120 [ 218.134023][T11510] total_inactive_anon 192327680 [ 218.136162][T11510] total_active_anon 96845824 [ 218.138919][T11510] total_inactive_file 0 [ 218.140681][T11510] total_active_file 0 [ 218.142359][T11510] total_unevictable 0 [ 218.144184][T11510] anon_cost 0 [ 218.145529][T11510] file_cost 0 [ 218.147531][T11510] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1624,pid=11517,uid=0 [ 218.153544][T11510] Memory cgroup out of memory: Killed process 11517 (syz.1.1624) total-vm:98656kB, anon-rss:348kB, file-rss:57412kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 218.368034][ T12] team0 (unregistering): Port device team_slave_1 removed [ 218.382113][ T12] team0 (unregistering): Port device team_slave_0 removed [ 218.394872][T11723] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1670'. [ 218.499522][ T5447] 8021q: adding VLAN 0 to HW filter on device eth3 [ 218.774569][T11737] netlink: 'syz.0.1673': attribute type 21 has an invalid length. [ 218.777158][T11737] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1673'. [ 218.788315][T11510] syz.1.1624 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 218.809559][T11510] CPU: 1 UID: 0 PID: 11510 Comm: syz.1.1624 Tainted: G L syzkaller #0 PREEMPT(full) [ 218.809583][T11510] Tainted: [L]=SOFTLOCKUP [ 218.809587][T11510] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 218.809593][T11510] Call Trace: [ 218.809598][T11510] [ 218.809602][T11510] dump_stack_lvl+0x100/0x190 [ 218.809621][T11510] dump_header+0xfb/0x606 [ 218.809637][T11510] oom_kill_process.cold+0xd/0x330 [ 218.809650][T11510] out_of_memory+0x340/0x14f0 [ 218.809669][T11510] ? __pfx_out_of_memory+0x10/0x10 [ 218.809689][T11510] mem_cgroup_out_of_memory+0xc6/0x130 [ 218.809707][T11510] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 218.809721][T11510] ? find_held_lock+0x2b/0x80 [ 218.809735][T11510] ? do_raw_spin_unlock+0x145/0x1e0 [ 218.809752][T11510] ? _raw_spin_unlock+0x28/0x50 [ 218.809767][T11510] try_charge_memcg+0x6e5/0xdf0 [ 218.809804][T11510] ? __pfx_try_charge_memcg+0x10/0x10 [ 218.809815][T11510] ? find_held_lock+0x2b/0x80 [ 218.809825][T11510] ? rcu_read_unlock+0x17/0x60 [ 218.809837][T11510] ? rcu_read_unlock+0x17/0x60 [ 218.809849][T11510] ? find_held_lock+0x2b/0x80 [ 218.809859][T11510] ? rcu_read_unlock+0x17/0x60 [ 218.809875][T11510] charge_memcg+0x19f/0x210 [ 218.809887][T11510] __mem_cgroup_charge+0x2b/0x1c0 [ 218.809902][T11510] shmem_alloc_and_add_folio+0x451/0xd40 [ 218.809923][T11510] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 218.809940][T11510] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 218.809961][T11510] shmem_get_folio_gfp+0x6ab/0x1900 [ 218.809980][T11510] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 218.810001][T11510] shmem_write_begin+0x1a4/0x420 [ 218.810012][T11510] ? __pfx_shmem_write_begin+0x10/0x10 [ 218.810030][T11510] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 218.810043][T11510] ? lockdep_hardirqs_on+0x78/0x100 [ 218.810059][T11510] generic_perform_write+0x292/0xa40 [ 218.810079][T11510] ? __pfx_generic_perform_write+0x10/0x10 [ 218.810097][T11510] ? file_update_time_flags+0x373/0x500 [ 218.810115][T11510] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 218.810127][T11510] shmem_file_write_iter+0x10e/0x140 [ 218.810140][T11510] __kernel_write_iter+0x2ac/0x920 [ 218.810153][T11510] ? __pfx___kernel_write_iter+0x10/0x10 [ 218.810165][T11510] ? __up_read+0x2c1/0x6e0 [ 218.810182][T11510] ? dump_user_range+0x65e/0xad0 [ 218.810196][T11510] dump_user_range+0x3f9/0xad0 [ 218.810209][T11510] ? __pfx_dump_user_range+0x10/0x10 [ 218.810224][T11510] ? __pfx_writenote+0x10/0x10 [ 218.810238][T11510] elf_core_dump+0x2d5f/0x3d10 [ 218.810257][T11510] ? __pfx_elf_core_dump+0x10/0x10 [ 218.810268][T11510] ? kasan_save_stack+0x3f/0x50 [ 218.810277][T11510] ? kasan_save_stack+0x30/0x50 [ 218.810286][T11510] ? __kasan_kmalloc+0xaa/0xb0 [ 218.810295][T11510] ? __kvmalloc_node_noprof+0x360/0xa00 [ 218.810311][T11510] ? vfs_coredump+0x22db/0x5770 [ 218.810321][T11510] ? asm_exc_page_fault+0x26/0x30 [ 218.810333][T11510] ? 0xffffffffff600000 [ 218.810364][T11510] ? vfs_coredump+0x29a0/0x5770 [ 218.810373][T11510] vfs_coredump+0x29a0/0x5770 [ 218.810388][T11510] ? __pfx_vfs_coredump+0x10/0x10 [ 218.810399][T11510] ? __lock_acquire+0x4a5/0x2630 [ 218.810418][T11510] ? lock_acquire+0x1b1/0x370 [ 218.810437][T11510] ? is_bpf_text_address+0x8a/0x1a0 [ 218.810451][T11510] ? bpf_ksym_find+0x128/0x1c0 [ 218.810474][T11510] ? __kernel_text_address+0xd/0x30 [ 218.810488][T11510] ? unwind_get_return_address+0x59/0xa0 [ 218.810505][T11510] ? arch_stack_walk+0xa6/0xf0 [ 218.810525][T11510] ? __sigqueue_free+0xbe/0x2a0 [ 218.810536][T11510] ? stack_trace_save+0x8e/0xc0 [ 218.810547][T11510] ? __pfx_stack_trace_save+0x10/0x10 [ 218.810558][T11510] ? stack_depot_save_flags+0x27/0x9d0 [ 218.810570][T11510] ? __lock_acquire+0x4a5/0x2630 [ 218.810605][T11510] ? proc_coredump_connector+0x2d3/0x4f0 [ 218.810620][T11510] ? __pfx_proc_coredump_connector+0x10/0x10 [ 218.810638][T11510] ? rcu_is_watching+0x12/0xc0 [ 218.810658][T11510] get_signal+0x2162/0x2210 [ 218.810680][T11510] ? __pfx_get_signal+0x10/0x10 [ 218.810697][T11510] ? __pfx_force_sig_fault+0x10/0x10 [ 218.810717][T11510] arch_do_signal_or_restart+0x91/0x7e0 [ 218.810736][T11510] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 218.810759][T11510] ? rcu_is_watching+0x12/0xc0 [ 218.810778][T11510] irqentry_exit+0x410/0x7e0 [ 218.810795][T11510] asm_exc_page_fault+0x26/0x30 [ 218.810806][T11510] RIP: 0033:0x7f841cf9ce61 [ 218.810816][T11510] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 218.810857][T11510] RSP: 002b:00000000fffffeb0 EFLAGS: 00010217 [ 218.810890][T11510] RAX: 0000000000000000 RBX: 00007f841d215fa0 RCX: 00007f841cf9ce59 [ 218.810901][T11510] RDX: 0000000000000000 RSI: 00000000fffffeb0 RDI: 0000000002000400 [ 218.810909][T11510] RBP: 00007f841d032d6f R08: 0000000000000000 R09: 0000000000000000 [ 218.810915][T11510] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 218.810921][T11510] R13: 00007f841d216038 R14: 00007f841d215fa0 R15: 00007ffdb44a4208 [ 218.810936][T11510] [ 218.810942][T11510] memory: usage 307144kB, limit 307200kB, failcnt 37312 [ 218.868690][ T5447] 8021q: adding VLAN 0 to HW filter on device eth5 [ 218.880899][T11510] memory+swap: usage 409012kB, limit 9007199254740988kB, failcnt 0 [ 219.013273][T11510] kmem: usage 6204kB, limit 9007199254740988kB, failcnt 0 [ 219.053578][T11510] Memory cgroup stats for /syz1: [ 219.053660][T11510] cache 307200000 [ 219.078904][T11510] rss 122880 [ 219.082501][T11510] rss_huge 0 [ 219.083786][T11510] shmem 307200000 [ 219.101954][T11510] mapped_file 0 [ 219.103268][T11510] dirty 0 [ 219.113879][T11510] writeback 0 [ 219.127903][T11510] workingset_refault_anon 29 [ 219.150039][T11510] workingset_refault_file 5462 [ 219.155028][T11510] swap 104349696 [ 219.164010][T11510] swapcached 198647808 [ 219.169180][T11510] pgpgin 299361 [ 219.178570][T11510] pgpgout 224329 [ 219.185032][T11510] pgfault 99825 [ 219.195713][T11510] pgmajfault 122 [ 219.204690][T11510] inactive_anon 157900800 [ 219.245387][T11510] active_anon 149430272 [ 219.246843][T11510] inactive_file 0 [ 219.263636][T11510] active_file 0 [ 219.267777][T11510] unevictable 0 [ 219.269015][T11510] hierarchical_memory_limit 314572800 [ 219.288541][T11510] hierarchical_memsw_limit 9223372036854771712 [ 219.293342][T11510] total_cache 307200000 [ 219.294704][T11510] total_rss 122880 [ 219.301978][T11510] total_rss_huge 0 [ 219.303835][T11510] total_shmem 307200000 [ 219.305633][T11510] total_mapped_file 0 [ 219.309421][T11510] total_dirty 0 [ 219.313288][T11510] total_writeback 0 [ 219.314867][T11510] total_workingset_refault_anon 29 [ 219.319058][T11510] total_workingset_refault_file 5462 [ 219.330116][T11510] total_swap 104349696 [ 219.331818][T11510] total_swapcached 198647808 [ 219.347386][T11510] total_pgpgin 299361 [ 219.349889][T11510] total_pgpgout 224329 [ 219.365862][T11510] total_pgfault 99825 [ 219.367844][T11510] total_pgmajfault 122 [ 219.371191][T11510] total_inactive_anon 157900800 [ 219.373477][T11510] total_active_anon 149430272 [ 219.375586][T11510] total_inactive_file 0 [ 219.377405][T11510] total_active_file 0 [ 219.379617][T11510] total_unevictable 0 [ 219.383919][T11510] anon_cost 0 [ 219.385174][T11510] file_cost 0 [ 219.386541][T11510] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1624,pid=11515,uid=0 [ 219.403412][T11510] Memory cgroup out of memory: Killed process 11515 (syz.1.1624) total-vm:98656kB, anon-rss:348kB, file-rss:57664kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 219.418584][T11512] syz.1.1624 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 219.424716][T11512] CPU: 3 UID: 0 PID: 11512 Comm: syz.1.1624 Tainted: G L syzkaller #0 PREEMPT(full) [ 219.424749][T11512] Tainted: [L]=SOFTLOCKUP [ 219.424756][T11512] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 219.424766][T11512] Call Trace: [ 219.424773][T11512] [ 219.424780][T11512] dump_stack_lvl+0x100/0x190 [ 219.424805][T11512] dump_header+0xfb/0x606 [ 219.424819][T11512] oom_kill_process.cold+0xd/0x330 [ 219.424834][T11512] out_of_memory+0x340/0x14f0 [ 219.424870][T11512] ? __pfx_out_of_memory+0x10/0x10 [ 219.424901][T11512] mem_cgroup_out_of_memory+0xc6/0x130 [ 219.424927][T11512] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 219.424952][T11512] ? find_held_lock+0x2b/0x80 [ 219.424975][T11512] ? do_raw_spin_unlock+0x145/0x1e0 [ 219.425003][T11512] ? _raw_spin_unlock+0x28/0x50 [ 219.425029][T11512] try_charge_memcg+0x6e5/0xdf0 [ 219.425050][T11512] ? __pfx_try_charge_memcg+0x10/0x10 [ 219.425063][T11512] ? find_held_lock+0x2b/0x80 [ 219.425074][T11512] ? rcu_read_unlock+0x17/0x60 [ 219.425088][T11512] ? rcu_read_unlock+0x17/0x60 [ 219.425101][T11512] ? find_held_lock+0x2b/0x80 [ 219.425113][T11512] ? rcu_read_unlock+0x17/0x60 [ 219.425130][T11512] charge_memcg+0x19f/0x210 [ 219.425143][T11512] __mem_cgroup_charge+0x2b/0x1c0 [ 219.425160][T11512] shmem_alloc_and_add_folio+0x451/0xd40 [ 219.425182][T11512] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 219.425202][T11512] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 219.425224][T11512] shmem_get_folio_gfp+0x6ab/0x1900 [ 219.425246][T11512] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 219.425269][T11512] shmem_write_begin+0x1a4/0x420 [ 219.425281][T11512] ? __pfx_shmem_write_begin+0x10/0x10 [ 219.425300][T11512] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 219.425314][T11512] ? lockdep_hardirqs_on+0x78/0x100 [ 219.425333][T11512] generic_perform_write+0x292/0xa40 [ 219.425354][T11512] ? __pfx_generic_perform_write+0x10/0x10 [ 219.425373][T11512] ? file_update_time_flags+0x373/0x500 [ 219.425394][T11512] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 219.425406][T11512] shmem_file_write_iter+0x10e/0x140 [ 219.425420][T11512] __kernel_write_iter+0x2ac/0x920 [ 219.425435][T11512] ? __pfx___kernel_write_iter+0x10/0x10 [ 219.425453][T11512] ? __up_read+0x2c1/0x6e0 [ 219.425472][T11512] ? dump_user_range+0x65e/0xad0 [ 219.425487][T11512] dump_user_range+0x3f9/0xad0 [ 219.425501][T11512] ? __pfx_dump_user_range+0x10/0x10 [ 219.425517][T11512] ? __pfx_writenote+0x10/0x10 [ 219.425533][T11512] elf_core_dump+0x2d5f/0x3d10 [ 219.425554][T11512] ? __pfx_elf_core_dump+0x10/0x10 [ 219.425566][T11512] ? kasan_save_stack+0x3f/0x50 [ 219.425576][T11512] ? kasan_save_stack+0x30/0x50 [ 219.425586][T11512] ? __kasan_kmalloc+0xaa/0xb0 [ 219.425596][T11512] ? __kvmalloc_node_noprof+0x360/0xa00 [ 219.425614][T11512] ? vfs_coredump+0x22db/0x5770 [ 219.425624][T11512] ? asm_exc_page_fault+0x26/0x30 [ 219.425638][T11512] ? 0xffffffffff600000 [ 219.425672][T11512] ? vfs_coredump+0x29a0/0x5770 [ 219.425682][T11512] vfs_coredump+0x29a0/0x5770 [ 219.425699][T11512] ? __pfx_vfs_coredump+0x10/0x10 [ 219.425711][T11512] ? __lock_acquire+0x4a5/0x2630 [ 219.425732][T11512] ? lock_acquire+0x1b1/0x370 [ 219.425753][T11512] ? is_bpf_text_address+0x8a/0x1a0 [ 219.425768][T11512] ? bpf_ksym_find+0x128/0x1c0 [ 219.425789][T11512] ? __kernel_text_address+0xd/0x30 [ 219.425805][T11512] ? unwind_get_return_address+0x59/0xa0 [ 219.425824][T11512] ? arch_stack_walk+0xa6/0xf0 [ 219.425845][T11512] ? __sigqueue_free+0xbe/0x2a0 [ 219.425858][T11512] ? stack_trace_save+0x8e/0xc0 [ 219.425870][T11512] ? __pfx_stack_trace_save+0x10/0x10 [ 219.425882][T11512] ? stack_depot_save_flags+0x27/0x9d0 [ 219.425895][T11512] ? __lock_acquire+0x4a5/0x2630 [ 219.425935][T11512] ? proc_coredump_connector+0x2d3/0x4f0 [ 219.425952][T11512] ? __pfx_proc_coredump_connector+0x10/0x10 [ 219.425969][T11512] ? rcu_is_watching+0x12/0xc0 [ 219.425989][T11512] get_signal+0x2162/0x2210 [ 219.426010][T11512] ? __pfx_get_signal+0x10/0x10 [ 219.426025][T11512] ? __pfx_force_sig_fault+0x10/0x10 [ 219.426044][T11512] arch_do_signal_or_restart+0x91/0x7e0 [ 219.426062][T11512] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 219.426084][T11512] ? rcu_is_watching+0x12/0xc0 [ 219.426102][T11512] irqentry_exit+0x410/0x7e0 [ 219.426118][T11512] asm_exc_page_fault+0x26/0x30 [ 219.426131][T11512] RIP: 0033:0x7f841cf9ce61 [ 219.426165][T11512] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 219.426180][T11512] RSP: 002b:00000000fffffeb0 EFLAGS: 00010217 [ 219.426210][T11512] RAX: 0000000000000000 RBX: 00007f841d215fa0 RCX: 00007f841cf9ce59 [ 219.426216][T11512] RDX: 0000000000000000 RSI: 00000000fffffeb0 RDI: 0000000002000400 [ 219.426222][T11512] RBP: 00007f841d032d6f R08: 0000000000000000 R09: 0000000000000000 [ 219.426229][T11512] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 219.426235][T11512] R13: 00007f841d216038 R14: 00007f841d215fa0 R15: 00007ffdb44a4208 [ 219.426249][T11512] [ 219.437167][T11512] memory: usage 307200kB, limit 307200kB, failcnt 39765 [ 219.477695][ T62] Bluetooth: hci4: command tx timeout [ 219.479133][T11512] memory+swap: usage 399772kB, limit 9007199254740988kB, failcnt 0 [ 219.479151][T11512] kmem: usage 6048kB, limit 9007199254740988kB, failcnt 0 [ 219.479163][T11512] Memory cgroup stats for /syz1: [ 219.619921][T11512] cache 278032384 [ 219.623571][T11512] rss 122880 [ 219.624927][T11512] rss_huge 0 [ 219.626415][T11512] shmem 278032384 [ 219.628523][T11512] mapped_file 0 [ 219.630103][T11512] dirty 0 [ 219.631844][T11512] writeback 0 [ 219.633147][T11512] workingset_refault_anon 29 [ 219.635021][T11512] workingset_refault_file 5462 [ 219.636935][T11512] swap 90570752 [ 219.638724][T11512] swapcached 198975488 [ 219.640217][T11512] pgpgin 301921 [ 219.641516][T11512] pgpgout 234010 [ 219.642829][T11512] pgfault 99858 [ 219.644074][T11512] pgmajfault 122 [ 219.645354][T11512] inactive_anon 80338944 [ 219.648497][T11512] active_anon 197824512 [ 219.650402][T11512] inactive_file 0 [ 219.652631][T11512] active_file 0 [ 219.654133][T11512] unevictable 0 [ 219.655639][T11512] hierarchical_memory_limit 314572800 [ 219.663945][T11512] hierarchical_memsw_limit 9223372036854771712 [ 219.666677][T11512] total_cache 278032384 [ 219.668899][T11512] total_rss 122880 [ 219.670475][T11512] total_rss_huge 0 [ 219.672074][T11512] total_shmem 278032384 [ 219.673746][T11512] total_mapped_file 0 [ 219.676826][T11512] total_dirty 0 [ 219.681409][T11512] total_writeback 0 [ 219.683059][T11512] total_workingset_refault_anon 29 [ 219.689546][T11512] total_workingset_refault_file 5462 [ 219.690673][T11769] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 219.691179][T11512] total_swap 90570752 [ 219.691187][T11512] total_swapcached 198975488 [ 219.691192][T11512] total_pgpgin 301921 [ 219.691196][T11512] total_pgpgout 234010 [ 219.691201][T11512] total_pgfault 99858 [ 219.691206][T11512] total_pgmajfault 122 [ 219.691210][T11512] total_inactive_anon 80338944 [ 219.691215][T11512] total_active_anon 197824512 [ 219.691219][T11512] total_inactive_file 0 [ 219.691224][T11512] total_active_file 0 [ 219.691228][T11512] total_unevictable 0 [ 219.691232][T11512] anon_cost 0 [ 219.691236][T11512] file_cost 0 [ 219.691241][T11512] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/ [ 219.695870][T11769] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 219.705682][T11512] ,mems_allowed=0-1 [ 219.706557][T11769] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 219.706577][T11769] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 219.731746][T11512] ,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1624,pid=11521,uid=0 [ 219.738172][T11512] Memory cgroup out of memory: Killed process 11521 (syz.1.1624) total-vm:98656kB, anon-rss:348kB, file-rss:57664kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 219.809634][T11778] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 219.863798][ T12] IPVS: stop unused estimator thread 0... [ 220.063148][T11796] [U] ^A [ 220.277344][ T34] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 220.391017][T11819] fuse: Unknown parameter 'rootmo' [ 220.439458][ T34] usb 5-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x3B, changing to 0xB [ 220.446759][ T34] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0xB has an invalid bInterval 69, changing to 10 [ 220.453637][ T34] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0xB has invalid maxpacket 26310, setting to 1024 [ 220.454493][T11823] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 220.459846][ T34] usb 5-1: config 0 interface 0 has no altsetting 0 [ 220.467396][ T34] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 220.471228][ T34] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 220.474743][ T34] usb 5-1: Product: syz [ 220.478174][ T34] usb 5-1: Manufacturer: syz [ 220.481484][ T34] usb 5-1: SerialNumber: syz [ 220.486653][ T34] usb 5-1: config 0 descriptor?? [ 220.489646][T11792] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 220.495135][ T34] usb 5-1: selecting invalid altsetting 0 [ 220.695805][T11792] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 220.701249][T11792] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 220.703872][T11792] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 220.707626][T11792] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 220.711698][T11792] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 220.715861][T11792] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 220.718627][T11792] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 220.722463][T11792] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 220.726571][T11792] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 220.729559][T11792] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 220.733425][T11792] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 220.737430][T11792] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 220.742956][T11792] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 220.759206][T11792] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 220.761178][ T5828] usb 5-1: USB disconnect, device number 23 [ 220.766317][T11792] usb 5-1: cannot submit urb 0, error -19: no device [ 220.943558][T11831] lo speed is unknown, defaulting to 1000 [ 221.020313][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 221.020328][ T40] audit: type=1400 audit(1778901661.574:934): avc: denied { getopt } for pid=11835 comm="syz.1.1698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 221.100451][T11831] vxcan1 speed is unknown, defaulting to 1000 [ 221.334911][ T40] audit: type=1400 audit(1778901661.884:935): avc: denied { watch_with_perm } for pid=11852 comm="syz.3.1704" path="/448/bus" dev="tmpfs" ino=2383 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 221.464967][T11858] overlayfs: failed to resolve './file0': -2 [ 221.537675][T11516] syz.1.1624 (11516) used greatest stack depth: 18968 bytes left [ 222.469408][T11510] syz.1.1624 (11510) used greatest stack depth: 18936 bytes left [ 222.613560][T11889] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1717'. [ 222.644520][T11893] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 222.888704][T11904] gfs2: not a GFS2 filesystem [ 222.928053][T11915] netlink: 650 bytes leftover after parsing attributes in process `syz.4.1723'. [ 222.978076][ T40] audit: type=1400 audit(1778901663.534:936): avc: denied { remount } for pid=11917 comm="syz.4.1724" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 222.979323][T11918] option changes via remount are deprecated (pid=11917 comm=syz.4.1724) [ 222.992020][T11918] cgroup: option or name mismatch, new: 0x0 "none", old: 0x0 "" [ 223.806903][T11920] syz.4.1725 (11920): drop_caches: 2 [ 224.786026][T11999] overlayfs: missing 'lowerdir' [ 224.884407][ T40] audit: type=1400 audit(1778901665.434:937): avc: denied { write } for pid=11998 comm="syz.1.1738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 225.254769][ T40] audit: type=1400 audit(1778901665.804:938): avc: denied { create } for pid=12009 comm="syz.3.1740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=iucv_socket permissive=1 [ 225.296485][T12010] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1740'. [ 225.322984][T12013] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1739'. [ 225.510081][T12025] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1746'. [ 226.671949][T12056] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1753'. [ 226.829614][ T62] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 226.834667][ T62] Bluetooth: hci4: Injecting HCI hardware error event [ 226.841032][ T5094] Bluetooth: hci4: hardware error 0x00 [ 226.896561][ T1175] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80 [ 226.904490][T12077] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1756'. [ 226.909854][T12064] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 227.481009][T12097] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1763'. [ 227.971660][T12103] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1764'. [ 227.982436][T12103] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1764'. [ 227.989678][T12103] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1764'. [ 228.014761][T12105] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 228.039987][T12108] xt_hashlimit: size too large, truncated to 1048576 [ 228.095781][T12107] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1766'. [ 228.111428][T12107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1766'. [ 228.127111][T12115] tipc: Started in network mode [ 228.127294][T12107] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1766'. [ 228.129257][T12115] tipc: Node identity 4004, cluster identity 4711 [ 228.129306][T12115] tipc: Node number set to 16388 [ 228.133189][T12107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1766'. [ 228.161625][T12120] gfs2: error -5 reading superblock [ 228.233816][T12130] netlink: 'syz.3.1772': attribute type 1 has an invalid length. [ 228.281929][ T40] audit: type=1400 audit(1778901668.834:939): avc: denied { connect } for pid=12134 comm="syz.4.1774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 228.286705][T12130] bond5: entered promiscuous mode [ 228.293182][T12130] 8021q: adding VLAN 0 to HW filter on device bond5 [ 228.293471][ T40] audit: type=1400 audit(1778901668.844:940): avc: denied { create } for pid=12129 comm="syz.3.1772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 228.378612][T12136] xt_nat: multiple ranges no longer supported [ 228.384261][T12136] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1772'. [ 228.446076][T12151] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 228.571815][T12159] bridge4: entered promiscuous mode [ 228.911546][ T5094] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 229.186225][T12169] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1781'. [ 229.262376][ T40] audit: type=1326 audit(1778901669.814:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12173 comm="syz.4.1783" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb57dd9ce59 code=0x0 [ 229.364363][T12180] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1785'. [ 229.386460][T12186] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 229.515425][ T40] audit: type=1400 audit(1778901670.064:942): avc: denied { write } for pid=12188 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 229.641076][ T40] audit: type=1400 audit(1778901670.194:943): avc: denied { write } for pid=12198 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 229.746856][ T40] audit: type=1400 audit(1778901670.294:944): avc: denied { write } for pid=12207 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 229.815739][ T40] audit: type=1400 audit(1778901670.364:945): avc: denied { write } for pid=12214 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 229.851778][T12221] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) ! [ 229.970233][T12227] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 229.979569][T12227] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 229.985791][T12227] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 230.499959][T12226] syzkaller0: entered promiscuous mode [ 230.504394][T12226] syzkaller0: entered allmulticast mode [ 230.563247][ T40] audit: type=1400 audit(1778901671.114:946): avc: denied { write } for pid=12233 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 230.652220][T12245] netlink: 'syz.4.1798': attribute type 1 has an invalid length. [ 230.668489][ T40] audit: type=1400 audit(1778901671.214:947): avc: denied { write } for pid=12243 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 230.718270][T12245] 8021q: adding VLAN 0 to HW filter on device bond2 [ 230.790945][T12250] bond2: (slave veth3): Enslaving as an active interface with a down link [ 230.863664][T12245] bond2: (slave dummy0): making interface the new active one [ 230.868070][ T50] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 230.868898][T12245] dummy0: entered promiscuous mode [ 230.875261][T12245] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 230.887195][ T40] audit: type=1400 audit(1778901671.444:948): avc: denied { setattr } for pid=12255 comm="syz.1.1801" name="NETLINK" dev="sockfs" ino=48309 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 230.904078][T12250] bond2: (slave dummy0): Releasing active interface [ 230.909118][T12250] dummy0 (unregistering): left promiscuous mode [ 230.930509][T12259] nbd: must specify a size in bytes for the device [ 231.030135][ T50] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.035131][ T50] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.040158][ T50] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 231.046028][ T50] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 231.050376][ T50] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.062163][ T50] usb 8-1: config 0 descriptor?? [ 231.300069][ T50] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 231.315985][ T5843] usb 8-1: USB disconnect, device number 14 [ 231.399846][T12274] fido_id[12274]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb8/report_descriptor': No such file or directory [ 231.920990][T12282] netlink: 'syz.4.1806': attribute type 7 has an invalid length. [ 231.924500][T12282] netlink: 'syz.4.1806': attribute type 8 has an invalid length. [ 231.971619][T12284] bond3: option xmit_hash_policy: invalid value (6) [ 231.975913][T12284] bond3 (unregistering): Released all slaves [ 232.008105][T12291] dlm: non-version read from control device 0 [ 232.063540][T12292] could not allocate digest TFM handle ghash-generic [ 232.136416][T12303] bridge_slave_0: left allmulticast mode [ 232.146752][T12303] bridge_slave_0: left promiscuous mode [ 232.151631][T12303] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.161567][T12303] bridge_slave_1: left allmulticast mode [ 232.163826][T12303] bridge_slave_1: left promiscuous mode [ 232.166579][T12303] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.190200][T12312] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 232.191282][T12303] bond0: (slave bond_slave_0): Releasing backup interface [ 232.195721][T12312] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 232.209033][T12312] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 232.215615][T12303] bond0: (slave bond_slave_1): Releasing backup interface [ 232.232377][T12303] team0: Port device team_slave_0 removed [ 232.241875][T12303] team0: Port device team_slave_1 removed [ 232.245442][T12303] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.249245][T12303] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.257941][T12303] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.261268][T12303] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.270288][T12303] net_ratelimit: 330 callbacks suppressed [ 232.270308][T12303] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 232.281098][T12314] veth0_vlan: left promiscuous mode [ 232.284127][T12314] vlan0: entered promiscuous mode [ 232.286948][T12314] veth0_vlan: entered promiscuous mode [ 232.301222][T12314] team0: Port device vlan0 added [ 232.671121][T12329] syz.3.1818: attempt to access beyond end of device [ 232.671121][T12329] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 232.675549][T12329] gfs2: error -5 reading superblock [ 233.170317][T12329] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 233.189705][T12338] netdevsim netdevsim1: Direct firmware load for  failed with error -2 [ 233.202669][T12338] netdevsim netdevsim1: Falling back to sysfs fallback for:  [ 233.205706][T12334] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 233.254592][T12345] syzkaller1: tun_chr_ioctl cmd 1074025676 [ 233.258420][T12345] syzkaller1: owner set to 805 [ 233.263663][T12348] netlink: 'syz.0.1822': attribute type 1 has an invalid length. [ 233.267112][T12345] __nla_validate_parse: 10 callbacks suppressed [ 233.267123][T12345] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1823'. [ 233.275149][T12348] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 233.337412][T12358] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 233.432166][T12364] fuse: Unknown parameter 'HAGa' [ 233.441082][T12364] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.1826'. [ 233.455291][T12364] netlink: ct family unspecified [ 233.512523][T12368] random: crng reseeded on system resumption [ 233.801958][T12370] overlayfs: invalid origin (0000006f7665726c) [ 234.363575][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 234.363596][ T40] audit: type=1400 audit(1778901674.914:955): avc: denied { bind } for pid=12373 comm="syz.0.1831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 234.595024][T12393] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 234.607213][ T1471] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 234.656316][T12395] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1837'. [ 234.662161][T12395] openvswitch: netlink: Flow actions attr not present in new flow. [ 234.667229][ T50] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 234.722976][T12401] netlink: 'syz.4.1839': attribute type 2 has an invalid length. [ 234.725818][T12401] netlink: 151 bytes leftover after parsing attributes in process `syz.4.1839'. [ 234.778258][ T1471] usb 6-1: Using ep0 maxpacket: 8 [ 234.784591][ T1471] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 234.787826][ T1471] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 234.793574][T12406] lo speed is unknown, defaulting to 1000 [ 234.793671][ T1471] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 234.800407][ T1471] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 234.806742][ T1471] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 234.810981][ T1471] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 234.814478][ T1471] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.819307][ T50] usb 5-1: Using ep0 maxpacket: 8 [ 234.824315][ T50] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 234.829535][ T50] usb 5-1: config 0 has no interface number 0 [ 234.831567][ T50] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 234.837879][ T50] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 234.843794][ T50] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 234.850123][ T50] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 234.854773][ T50] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 234.860401][ T50] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.865054][ T50] usb 5-1: config 0 descriptor?? [ 234.879629][ T50] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 235.002273][T12406] vxcan1 speed is unknown, defaulting to 1000 [ 235.026123][ T1471] usb 6-1: usb_control_msg returned -32 [ 235.029620][ T1471] usbtmc 6-1:16.0: can't read capabilities [ 235.078330][T12381] comedi comedi3: board detection failed [ 235.109283][T12381] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 235.363465][ T9] usb 6-1: USB disconnect, device number 22 [ 236.285842][T12431] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 236.406195][T12436] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1848'. [ 237.148414][ T50] usb 5-1: USB disconnect, device number 24 [ 237.148426][ C3] ldusb 5-1:0.55: usb_submit_urb failed (-19) [ 237.164213][ T50] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 237.361636][T12438] overlayfs: statfs failed on './file0' [ 237.589548][T12448] ntfs3(sr0): Primary boot signature is not NTFS. [ 237.590048][T12448] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 237.618510][T12457] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 237.630210][T12448] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 237.676714][T12463] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 237.763084][T12466] tc action pedit 'at' offset -2147483647 out of bounds [ 237.851164][T12474] xt_hashlimit: size too large, truncated to 1048576 [ 237.900307][T12468] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1858'. [ 238.770809][ T5731] Process accounting resumed [ 238.786149][ T5731] Process accounting resumed [ 238.787534][T12489] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 238.791032][ T5731] Process accounting resumed [ 238.791521][ T5731] Process accounting resumed [ 238.798387][ T5731] Process accounting resumed [ 238.801502][ T5731] Process accounting resumed [ 238.832647][T12487] Process accounting resumed [ 238.867489][T12493] tipc: Enabled bearer , priority 0 [ 238.871454][T12493] syzkaller0: entered promiscuous mode [ 238.873780][T12493] syzkaller0: entered allmulticast mode [ 238.873796][ T40] audit: type=1400 audit(1778901679.424:956): avc: denied { listen } for pid=12495 comm="syz.0.1866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 238.897249][ T40] audit: type=1400 audit(1778901679.434:957): avc: denied { accept } for pid=12495 comm="syz.0.1866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 238.904161][T12493] tipc: Resetting bearer [ 238.923214][T12493] tipc: Disabling bearer [ 239.030023][T12480] kvm: kvm [12479]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0xab2f [ 239.107355][ T5731] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 239.279715][ T5731] usb 8-1: config 0 has no interfaces? [ 239.293955][ T5731] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 239.297859][ T5731] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 239.301240][ T5731] usb 8-1: Product: syz [ 239.303240][ T5731] usb 8-1: Manufacturer: syz [ 239.320327][ T5731] usb 8-1: config 0 descriptor?? [ 239.526032][ T5731] usb 8-1: USB disconnect, device number 15 [ 240.087692][T12519] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 240.236717][ T40] audit: type=1400 audit(1778901680.784:958): avc: denied { mount } for pid=12526 comm="syz.0.1875" name="/" dev="pstore" ino=2686 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 240.260734][T12530] libceph: secret too big 3051 [ 240.271253][T12531] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 240.337167][ T1471] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 240.444672][T12540] netlink: 'syz.1.1879': attribute type 11 has an invalid length. [ 240.450102][T12540] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1879'. [ 240.509421][ T1471] usb 8-1: config 0 has no interfaces? [ 240.513407][ T1471] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 240.517489][ T1471] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 240.527064][ T1471] usb 8-1: Product: syz [ 240.529084][ T1471] usb 8-1: Manufacturer: syz [ 240.534572][ T1471] usb 8-1: config 0 descriptor?? [ 240.594959][T12553] binder: 12551:12553 ioctl c008ae88 200000000180 returned -22 [ 240.633486][T12557] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 240.770746][T12563] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1885'. [ 241.518852][T12581] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 241.660104][T12588] sysfs: cannot create duplicate filename '/class/ieee80211/1^!' [ 241.677176][T12588] CPU: 0 UID: 0 PID: 12588 Comm: syz.0.1894 Tainted: G L syzkaller #0 PREEMPT(full) [ 241.677200][T12588] Tainted: [L]=SOFTLOCKUP [ 241.677206][T12588] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 241.677214][T12588] Call Trace: [ 241.677219][T12588] [ 241.677224][T12588] dump_stack_lvl+0x100/0x190 [ 241.677251][T12588] sysfs_warn_dup.cold+0x1c/0x28 [ 241.677284][T12588] sysfs_do_create_link_sd+0x113/0x140 [ 241.677304][T12588] sysfs_create_link+0x61/0xc0 [ 241.677319][T12588] device_add+0x675/0x1950 [ 241.677341][T12588] ? __pfx_device_add+0x10/0x10 [ 241.677355][T12588] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 241.677372][T12588] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 241.677421][T12588] wiphy_register+0x1edd/0x2d90 [ 241.677436][T12588] ? __rtnl_unlock+0xb9/0xf0 [ 241.677470][T12588] ? __pfx_wiphy_register+0x10/0x10 [ 241.677486][T12588] ? __asan_memset+0x23/0x50 [ 241.677507][T12588] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 241.677548][T12588] ieee80211_register_hw+0x3055/0x4570 [ 241.677590][T12588] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 241.677610][T12588] ? __pfx___debug_object_init+0x10/0x10 [ 241.677638][T12588] ? find_held_lock+0x2b/0x80 [ 241.677651][T12588] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 241.677666][T12588] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 241.677681][T12588] ? __hrtimer_setup+0x208/0x330 [ 241.677702][T12588] mac80211_hwsim_new_radio+0x2a01/0x5aa0 [ 241.677735][T12588] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 241.677757][T12588] ? __asan_memcpy+0x3c/0x60 [ 241.677777][T12588] hwsim_new_radio_nl+0xc5f/0x1370 [ 241.677795][T12588] ? rcu_is_watching+0x12/0xc0 [ 241.677812][T12588] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 241.677833][T12588] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 241.677884][T12588] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 241.677908][T12588] genl_family_rcv_msg_doit+0x214/0x300 [ 241.677930][T12588] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 241.677954][T12588] ? bpf_lsm_capable+0x9/0x10 [ 241.677967][T12588] ? security_capable+0x80/0x260 [ 241.677981][T12588] ? ns_capable+0xd2/0xf0 [ 241.677998][T12588] genl_rcv_msg+0x560/0x800 [ 241.678016][T12588] ? __pfx_genl_rcv_msg+0x10/0x10 [ 241.678033][T12588] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 241.678055][T12588] netlink_rcv_skb+0x159/0x420 [ 241.678070][T12588] ? __pfx_genl_rcv_msg+0x10/0x10 [ 241.678087][T12588] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 241.678108][T12588] ? netlink_deliver_tap+0x1ae/0xcc0 [ 241.678123][T12588] genl_rcv+0x28/0x40 [ 241.678138][T12588] netlink_unicast+0x585/0x850 [ 241.678154][T12588] ? __pfx_netlink_unicast+0x10/0x10 [ 241.678173][T12588] netlink_sendmsg+0x8b0/0xda0 [ 241.678190][T12588] ? __pfx_netlink_sendmsg+0x10/0x10 [ 241.678204][T12588] ? __might_fault+0x30/0x140 [ 241.678225][T12588] ____sys_sendmsg+0x9e1/0xb70 [ 241.678256][T12588] ? __pfx_netlink_sendmsg+0x10/0x10 [ 241.678274][T12588] ? __pfx_____sys_sendmsg+0x10/0x10 [ 241.678293][T12588] ? __pfx_futex_wake_mark+0x10/0x10 [ 241.678310][T12588] ___sys_sendmsg+0x190/0x1e0 [ 241.678328][T12588] ? __pfx____sys_sendmsg+0x10/0x10 [ 241.678365][T12588] __sys_sendmsg+0x170/0x220 [ 241.678378][T12588] ? __pfx___sys_sendmsg+0x10/0x10 [ 241.678390][T12588] ? __x64_sys_futex+0x34f/0x4d0 [ 241.678415][T12588] ? rcu_is_watching+0x12/0xc0 [ 241.678436][T12588] do_syscall_64+0x10b/0xf80 [ 241.678470][T12588] ? clear_bhb_loop+0x40/0x90 [ 241.678509][T12588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.678524][T12588] RIP: 0033:0x7f1418b9ce59 [ 241.678538][T12588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.678552][T12588] RSP: 002b:00007f141999d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 241.678595][T12588] RAX: ffffffffffffffda RBX: 00007f1418e15fa0 RCX: 00007f1418b9ce59 [ 241.678603][T12588] RDX: 0000000004000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 241.678611][T12588] RBP: 00007f1418c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 241.678619][T12588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 241.678627][T12588] R13: 00007f1418e16038 R14: 00007f1418e15fa0 R15: 00007fff22935b18 [ 241.678650][T12588] [ 242.359330][ T1471] usb 8-1: USB disconnect, device number 16 [ 242.477920][T12602] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 242.518718][T12607] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 242.532981][ T40] audit: type=1400 audit(1778901683.084:959): avc: denied { relabelto } for pid=12606 comm="syz.3.1901" name="cgroup.procs" dev="cgroup" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:semanage_exec_t:s0" [ 242.548203][ T40] audit: type=1400 audit(1778901683.084:960): avc: denied { associate } for pid=12606 comm="syz.3.1901" name="cgroup.procs" dev="cgroup" ino=120 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:semanage_exec_t:s0" [ 242.571945][T12611] xt_NFQUEUE: number of total queues is 0 [ 242.616652][T12618] bond6: Removing last arp target with arp_interval on [ 242.632663][ T40] audit: type=1400 audit(1778901683.184:962): avc: denied { setopt } for pid=12625 comm="syz.4.1908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 242.639509][T12626] Cannot find del_set index 2 as target [ 242.644241][ T40] audit: type=1400 audit(1778901683.184:961): avc: denied { create } for pid=12624 comm="syz.1.1907" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 242.712261][T12634] netlink: 'syz.1.1910': attribute type 13 has an invalid length. [ 242.850422][T12643] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 242.909335][T12645] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 242.912983][T12645] FAULT_INJECTION: forcing a failure. [ 242.912983][T12645] name failslab, interval 1, probability 0, space 0, times 0 [ 242.917140][T12645] CPU: 0 UID: 0 PID: 12645 Comm: syz.4.1914 Tainted: G L syzkaller #0 PREEMPT(full) [ 242.917160][T12645] Tainted: [L]=SOFTLOCKUP [ 242.917164][T12645] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 242.917170][T12645] Call Trace: [ 242.917176][T12645] [ 242.917182][T12645] dump_stack_lvl+0x100/0x190 [ 242.917200][T12645] should_fail_ex.cold+0x5/0xa [ 242.917216][T12645] ? tomoyo_realpath_from_path+0xb6/0x690 [ 242.917232][T12645] should_failslab+0xc2/0x120 [ 242.917244][T12645] __kmalloc_noprof+0xe0/0x850 [ 242.917260][T12645] ? kfree+0x1dd/0x6c0 [ 242.917276][T12645] tomoyo_realpath_from_path+0xb6/0x690 [ 242.917294][T12645] tomoyo_path_number_perm+0x23c/0x580 [ 242.917306][T12645] ? tomoyo_path_number_perm+0x22e/0x580 [ 242.917320][T12645] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 242.917347][T12645] ? find_held_lock+0x2b/0x80 [ 242.917358][T12645] ? __fget_files+0x215/0x3d0 [ 242.917371][T12645] ? hook_file_ioctl_common+0x149/0x410 [ 242.917402][T12645] ? __fget_files+0x215/0x3d0 [ 242.917418][T12645] ? __fget_files+0x21f/0x3d0 [ 242.917433][T12645] security_file_ioctl+0xd3/0x230 [ 242.917449][T12645] __x64_sys_ioctl+0xb7/0x210 [ 242.917462][T12645] do_syscall_64+0x10b/0xf80 [ 242.917477][T12645] ? clear_bhb_loop+0x40/0x90 [ 242.917490][T12645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.917502][T12645] RIP: 0033:0x7fb57dd9ce59 [ 242.917512][T12645] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.917522][T12645] RSP: 002b:00007fb57ec22028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 242.917534][T12645] RAX: ffffffffffffffda RBX: 00007fb57e015fa0 RCX: 00007fb57dd9ce59 [ 242.917540][T12645] RDX: 0000200000000240 RSI: 0000000000003b8b RDI: 0000000000000003 [ 242.917546][T12645] RBP: 00007fb57ec22090 R08: 0000000000000000 R09: 0000000000000000 [ 242.917552][T12645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.917558][T12645] R13: 00007fb57e016038 R14: 00007fb57e015fa0 R15: 00007ffcbdb34cb8 [ 242.917572][T12645] [ 242.917615][T12645] ERROR: Out of memory at tomoyo_realpath_from_path. [ 243.061959][T12649] program syz.4.1916 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 243.220457][ T40] audit: type=1326 audit(1778901683.774:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12650 comm="syz.4.1917" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb57dd9ce59 code=0x7fc00000 [ 243.378024][ T40] audit: type=1400 audit(1778901683.934:964): avc: denied { mount } for pid=12655 comm="syz.3.1918" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 243.385374][ T40] audit: type=1400 audit(1778901683.934:965): avc: denied { remount } for pid=12655 comm="syz.3.1918" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 243.683705][ T40] audit: type=1400 audit(1778901684.234:966): avc: denied { ioctl } for pid=12661 comm="syz.1.1920" path="socket:[51712]" dev="sockfs" ino=51712 ioctlcmd=0xae83 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 243.749451][T12673] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 243.755852][T12675] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 243.760328][T12675] FAULT_INJECTION: forcing a failure. [ 243.760328][T12675] name failslab, interval 1, probability 0, space 0, times 0 [ 243.764415][T12675] CPU: 0 UID: 0 PID: 12675 Comm: syz.4.1923 Tainted: G L syzkaller #0 PREEMPT(full) [ 243.764433][T12675] Tainted: [L]=SOFTLOCKUP [ 243.764437][T12675] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 243.764443][T12675] Call Trace: [ 243.764448][T12675] [ 243.764457][T12675] dump_stack_lvl+0x100/0x190 [ 243.764474][T12675] should_fail_ex.cold+0x5/0xa [ 243.764490][T12675] ? tomoyo_encode2+0xfb/0x3c0 [ 243.764504][T12675] should_failslab+0xc2/0x120 [ 243.764516][T12675] __kmalloc_noprof+0xe0/0x850 [ 243.764531][T12675] ? d_absolute_path+0x136/0x1b0 [ 243.764546][T12675] tomoyo_encode2+0xfb/0x3c0 [ 243.764563][T12675] tomoyo_encode+0x29/0x50 [ 243.764577][T12675] tomoyo_realpath_from_path+0x18c/0x690 [ 243.764595][T12675] tomoyo_path_number_perm+0x23c/0x580 [ 243.764607][T12675] ? tomoyo_path_number_perm+0x22e/0x580 [ 243.764621][T12675] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 243.764647][T12675] ? find_held_lock+0x2b/0x80 [ 243.764657][T12675] ? __fget_files+0x215/0x3d0 [ 243.764670][T12675] ? hook_file_ioctl_common+0x149/0x410 [ 243.764685][T12675] ? __fget_files+0x215/0x3d0 [ 243.764701][T12675] ? __fget_files+0x21f/0x3d0 [ 243.764716][T12675] security_file_ioctl+0xd3/0x230 [ 243.764731][T12675] __x64_sys_ioctl+0xb7/0x210 [ 243.764743][T12675] do_syscall_64+0x10b/0xf80 [ 243.764759][T12675] ? clear_bhb_loop+0x40/0x90 [ 243.764771][T12675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.764781][T12675] RIP: 0033:0x7fb57dd9ce59 [ 243.764792][T12675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.764802][T12675] RSP: 002b:00007fb57ec22028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 243.764830][T12675] RAX: ffffffffffffffda RBX: 00007fb57e015fa0 RCX: 00007fb57dd9ce59 [ 243.764837][T12675] RDX: 0000200000000240 RSI: 0000000000003b8b RDI: 0000000000000003 [ 243.764843][T12675] RBP: 00007fb57ec22090 R08: 0000000000000000 R09: 0000000000000000 [ 243.764849][T12675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.764854][T12675] R13: 00007fb57e016038 R14: 00007fb57e015fa0 R15: 00007ffcbdb34cb8 [ 243.764868][T12675] [ 243.764880][T12675] ERROR: Out of memory at tomoyo_realpath_from_path. [ 243.877710][T12679] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 244.107100][ T5814] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 244.257101][ T5814] usb 5-1: Using ep0 maxpacket: 16 [ 244.261103][ T5814] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 244.266518][ T5814] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 244.270757][ T5814] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.274092][ T5814] usb 5-1: Product: syz [ 244.275966][ T5814] usb 5-1: Manufacturer: syz [ 244.278704][ T5814] usb 5-1: SerialNumber: syz [ 244.286747][ T5814] usb 5-1: config 0 descriptor?? [ 244.297560][ T5814] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 244.300871][ T5814] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 244.782058][ T40] audit: type=1400 audit(1778901685.334:967): avc: denied { read } for pid=12693 comm="syz.1.1929" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 244.897805][ T5814] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 245.016135][T12700] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 245.266049][T12709] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 245.313366][T12711] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 245.319092][T12711] FAULT_INJECTION: forcing a failure. [ 245.319092][T12711] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 245.319290][ T5814] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 245.324135][T12711] CPU: 0 UID: 0 PID: 12711 Comm: syz.3.1935 Tainted: G L syzkaller #0 PREEMPT(full) [ 245.324160][T12711] Tainted: [L]=SOFTLOCKUP [ 245.324165][T12711] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 245.324173][T12711] Call Trace: [ 245.324180][T12711] [ 245.324187][T12711] dump_stack_lvl+0x100/0x190 [ 245.324210][T12711] should_fail_ex.cold+0x5/0xa [ 245.324231][T12711] _copy_from_user+0x2e/0xd0 [ 245.324252][T12711] iommufd_fops_ioctl+0x300/0x520 [ 245.324273][T12711] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 245.324293][T12711] ? __fget_files+0x215/0x3d0 [ 245.324309][T12711] ? hook_file_ioctl_common+0x149/0x410 [ 245.324335][T12711] ? selinux_file_ioctl+0x13b/0x290 [ 245.324354][T12711] ? selinux_file_ioctl+0xb6/0x290 [ 245.324372][T12711] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 245.324392][T12711] __x64_sys_ioctl+0x18e/0x210 [ 245.324409][T12711] do_syscall_64+0x10b/0xf80 [ 245.324429][T12711] ? clear_bhb_loop+0x40/0x90 [ 245.324472][T12711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.324487][T12711] RIP: 0033:0x7f84da19ce59 [ 245.324500][T12711] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.324514][T12711] RSP: 002b:00007f84db0d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 245.324529][T12711] RAX: ffffffffffffffda RBX: 00007f84da415fa0 RCX: 00007f84da19ce59 [ 245.324537][T12711] RDX: 0000200000000240 RSI: 0000000000003b8b RDI: 0000000000000003 [ 245.324546][T12711] RBP: 00007f84db0d9090 R08: 0000000000000000 R09: 0000000000000000 [ 245.324554][T12711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.324561][T12711] R13: 00007f84da416038 R14: 00007f84da415fa0 R15: 00007ffe5b56f138 [ 245.324580][T12711] [ 245.391338][ T5814] em28xx 5-1:0.0: board has no eeprom [ 245.391846][T12718] fuse: Unknown parameter 'f;.Jz d' [ 245.601697][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 245.601711][ T40] audit: type=1400 audit(1778901686.154:971): avc: denied { read } for pid=12676 comm="syz.0.1924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 245.688904][T12728] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 245.699306][T12731] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 245.818725][T12739] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1941'. [ 246.489855][ T5814] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 246.494968][ T5814] em28xx 5-1:0.0: dvb set to bulk mode. [ 246.497613][ T70] em28xx 5-1:0.0: Binding DVB extension [ 246.551067][T12746] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1943'. [ 246.572778][T12749] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 246.610204][T12746] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1943'. [ 246.615171][T12746] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1943'. [ 246.620758][ T70] em28xx 5-1:0.0: Registering input extension [ 246.626832][T12753] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 246.644603][T12753] FAULT_INJECTION: forcing a failure. [ 246.644603][T12753] name fail_iommufd, interval 1, probability 0, space 0, times 1 [ 246.652957][T12753] CPU: 3 UID: 0 PID: 12753 Comm: syz.1.1946 Tainted: G L syzkaller #0 PREEMPT(full) [ 246.652987][T12753] Tainted: [L]=SOFTLOCKUP [ 246.652993][T12753] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 246.653004][T12753] Call Trace: [ 246.653011][T12753] [ 246.653018][T12753] dump_stack_lvl+0x100/0x190 [ 246.653047][T12753] should_fail_ex.cold+0x5/0xa [ 246.653071][T12753] iommufd_get_object+0x7a/0x470 [ 246.653111][T12753] ? __pfx_iommufd_get_object+0x10/0x10 [ 246.653150][T12753] ? __might_fault+0xc5/0x140 [ 246.653182][T12753] iommufd_hwpt_set_dirty_tracking+0xe6/0x300 [ 246.653204][T12753] iommufd_fops_ioctl+0x358/0x520 [ 246.653228][T12753] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 246.653250][T12753] ? __fget_files+0x215/0x3d0 [ 246.653270][T12753] ? hook_file_ioctl_common+0x149/0x410 [ 246.653302][T12753] ? selinux_file_ioctl+0x13b/0x290 [ 246.653326][T12753] ? selinux_file_ioctl+0xb6/0x290 [ 246.653350][T12753] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 246.653372][T12753] __x64_sys_ioctl+0x18e/0x210 [ 246.653394][T12753] do_syscall_64+0x10b/0xf80 [ 246.653418][T12753] ? clear_bhb_loop+0x40/0x90 [ 246.653438][T12753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.653456][T12753] RIP: 0033:0x7f841cf9ce59 [ 246.653471][T12753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.653484][T12753] RSP: 002b:00007f841dede028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 246.653499][T12753] RAX: ffffffffffffffda RBX: 00007f841d215fa0 RCX: 00007f841cf9ce59 [ 246.653509][T12753] RDX: 0000200000000240 RSI: 0000000000003b8b RDI: 0000000000000003 [ 246.653518][T12753] RBP: 00007f841dede090 R08: 0000000000000000 R09: 0000000000000000 [ 246.653528][T12753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.653538][T12753] R13: 00007f841d216038 R14: 00007f841d215fa0 R15: 00007ffdb44a4208 [ 246.653560][T12753] [ 246.823236][T12761] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1950'. [ 246.836109][T12761] bond0 (unregistering): Released all slaves [ 246.857165][ T1471] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 246.981008][ T9] usb 5-1: USB disconnect, device number 25 [ 246.984007][ T9] em28xx 5-1:0.0: Disconnecting em28xx [ 246.989023][ T9] em28xx 5-1:0.0: Closing input extension [ 247.017239][ T1471] usb 8-1: Using ep0 maxpacket: 32 [ 247.027435][ T1471] usb 8-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 247.034873][ T1471] usb 8-1: string descriptor 0 read error: -22 [ 247.039637][ T1471] usb 8-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice= 0.40 [ 247.043500][ T9] em28xx 5-1:0.0: Freeing device [ 247.047711][ T1471] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.092360][T12775] netlink: 'syz.1.1954': attribute type 16 has an invalid length. [ 247.095740][T12775] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.1954'. [ 247.159276][T12781] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 247.211243][T12786] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 247.216800][T12786] FAULT_INJECTION: forcing a failure. [ 247.216800][T12786] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 247.221733][T12786] CPU: 3 UID: 0 PID: 12786 Comm: syz.1.1958 Tainted: G L syzkaller #0 PREEMPT(full) [ 247.221751][T12786] Tainted: [L]=SOFTLOCKUP [ 247.221755][T12786] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 247.221761][T12786] Call Trace: [ 247.221764][T12786] [ 247.221769][T12786] dump_stack_lvl+0x100/0x190 [ 247.221787][T12786] should_fail_ex.cold+0x5/0xa [ 247.221803][T12786] _copy_to_user+0x32/0xd0 [ 247.221821][T12786] simple_read_from_buffer+0xcb/0x170 [ 247.221836][T12786] proc_fail_nth_read+0x1af/0x230 [ 247.221849][T12786] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 247.221861][T12786] ? rw_verify_area+0xce/0x6d0 [ 247.221871][T12786] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 247.221882][T12786] vfs_read+0x1e4/0xb30 [ 247.221895][T12786] ? __pfx_vfs_read+0x10/0x10 [ 247.221906][T12786] ? __fget_files+0x215/0x3d0 [ 247.221923][T12786] ? __fget_files+0x21f/0x3d0 [ 247.221940][T12786] ksys_read+0x12a/0x250 [ 247.221951][T12786] ? __pfx_ksys_read+0x10/0x10 [ 247.221964][T12786] ? rcu_is_watching+0x12/0xc0 [ 247.221983][T12786] do_syscall_64+0x10b/0xf80 [ 247.221998][T12786] ? clear_bhb_loop+0x40/0x90 [ 247.222010][T12786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.222021][T12786] RIP: 0033:0x7f841cf5d68e [ 247.222030][T12786] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 247.222041][T12786] RSP: 002b:00007f841deddfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 247.222052][T12786] RAX: ffffffffffffffda RBX: 00007f841dede6c0 RCX: 00007f841cf5d68e [ 247.222059][T12786] RDX: 000000000000000f RSI: 00007f841dede0a0 RDI: 0000000000000004 [ 247.222065][T12786] RBP: 00007f841dede090 R08: 0000000000000000 R09: 0000000000000000 [ 247.222070][T12786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.222076][T12786] R13: 00007f841d216038 R14: 00007f841d215fa0 R15: 00007ffdb44a4208 [ 247.222090][T12786] [ 247.296190][ T34] usb 8-1: USB disconnect, device number 17 [ 247.421890][T12798] trusted_key: encrypted_key: insufficient parameters specified [ 247.428670][T12798] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 247.431878][T12798] SELinux: failed to load policy [ 247.939320][T12803] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 247.968501][T12812] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 248.984736][T12833] program syz.3.1976 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 249.020157][T12838] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 249.022620][T12838] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 249.028290][T12838] vhci_hcd vhci_hcd.0: Device attached [ 249.031601][T12836] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1977'. [ 249.031776][T12839] usbip_core: unknown command [ 249.036882][T12839] vhci_hcd: unknown pdu 184551936 [ 249.038715][T12839] usbip_core: unknown command [ 249.040774][ T202] vhci_hcd vhci_hcd.3: stop threads [ 249.042533][ T202] vhci_hcd vhci_hcd.3: release socket [ 249.044290][ T202] vhci_hcd vhci_hcd.3: disconnect device [ 249.240483][T12843] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 249.309289][T12851] XFS (nullb0): Invalid superblock magic number [ 249.350340][T12860] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1981'. [ 249.353557][T12860] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1981'. [ 249.481230][T12866] program syz.4.1984 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 249.484422][T12865] xt_hashlimit: max too large, truncated to 1048576 [ 249.486873][T12865] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 249.518700][T12868] misc userio: Begin command sent, but we're already running [ 249.522291][T12869] misc userio: Begin command sent, but we're already running [ 249.524838][T12869] misc userio: Begin command sent, but we're already running [ 249.527363][T12868] misc userio: Begin command sent, but we're already running [ 249.529807][T12868] misc userio: Begin command sent, but we're already running [ 249.532278][T12869] misc userio: Begin command sent, but we're already running [ 249.534795][T12869] misc userio: Begin command sent, but we're already running [ 249.537384][T12868] misc userio: Begin command sent, but we're already running [ 249.539884][T12868] misc userio: Begin command sent, but we're already running [ 249.542301][T12869] misc userio: Begin command sent, but we're already running [ 249.544727][T12869] misc userio: Begin command sent, but we're already running [ 249.548166][T12868] misc userio: Begin command sent, but we're already running [ 249.550970][T12868] misc userio: Begin command sent, but we're already running [ 249.553388][T12869] misc userio: Begin command sent, but we're already running [ 249.556447][T12869] misc userio: Begin command sent, but we're already running [ 249.559659][T12868] misc userio: Begin command sent, but we're already running [ 249.562292][T12868] misc userio: Begin command sent, but we're already running [ 249.564777][T12869] misc userio: Begin command sent, but we're already running [ 249.568316][T12869] misc userio: Begin command sent, but we're already running [ 249.572866][T12868] misc userio: Begin command sent, but we're already running [ 249.576931][T12874] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 249.653314][T12883] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 249.714561][T12888] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 249.742246][T12891] netlink: 'syz.4.1992': attribute type 1 has an invalid length. [ 249.757580][T12891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.211132][T12899] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1995'. [ 250.478001][T12904] overlayfs: failed lookup in lower (newroot/502, name='file0', err=-40): overlapping layers [ 250.484970][T12905] overlayfs: failed lookup in lower (newroot/502, name='bus', err=-40): overlapping layers [ 250.489098][T12906] overlayfs: failed lookup in lower (newroot/502, name='bus', err=-40): overlapping layers [ 250.511285][T12891] bond0: (slave veth7): Enslaving as an active interface with a down link [ 250.529259][T12909] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 250.534809][T12893] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 250.538271][T12893] bond0: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 250.592282][T12915] program syz.0.1999 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 250.629286][T12917] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 250.731852][T12928] netlink: 'syz.4.2004': attribute type 1 has an invalid length. [ 250.739770][T12929] netlink: 'syz.0.2002': attribute type 1 has an invalid length. [ 250.759917][T12929] 8021q: adding VLAN 0 to HW filter on device bond7 [ 250.801707][T12929] bond7: (slave veth13): Enslaving as an active interface with a down link [ 250.815881][T12929] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 250.818411][T12929] bond7: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 250.888832][T12938] fuse: Bad value for 'group_id' [ 250.890528][T12938] fuse: Bad value for 'group_id' [ 251.889691][T12962] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 251.981010][T12974] __nla_validate_parse: 2 callbacks suppressed [ 251.981032][T12974] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2016'. [ 252.053701][T12977] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2017'. [ 252.054725][T12979] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 252.064254][T12979] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2018'. [ 252.066039][T12977] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2017'. [ 252.072349][T12977] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2017'. [ 252.100504][ T40] audit: type=1400 audit(1778901692.644:972): avc: denied { mounton } for pid=12976 comm="syz.0.2017" path="/511/file0" dev="tmpfs" ino=2737 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 252.118394][T12979] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12979 comm=syz.1.2018 [ 252.942431][T12989] hpfs: Bad magic ... probably not HPFS [ 252.952952][T12989] hpfs: Bad magic ... probably not HPFS [ 253.090588][T12997] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 253.154953][T13000] program syz.0.2026 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 253.220175][T13006] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 253.226737][T13006] netlink: 'syz.0.2028': attribute type 11 has an invalid length. [ 253.552295][T13021] tmpfs: Unknown parameter 'quot?' [ 253.681918][T13026] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2035'. [ 253.693907][ T226] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.697247][T13026] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2035'. [ 253.697899][ T226] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.705146][ T226] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.709007][ T226] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.210853][T13028] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 254.395934][T13043] ip6erspan0: entered promiscuous mode [ 254.536268][T13055] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 255.439002][ T40] audit: type=1400 audit(1778901695.984:973): avc: denied { create } for pid=13060 comm="syz.1.2047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 255.464240][ T40] audit: type=1400 audit(1778901695.984:974): avc: denied { bind } for pid=13060 comm="syz.1.2047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 255.491348][ T40] audit: type=1400 audit(1778901696.044:975): avc: denied { nlmsg_read } for pid=13062 comm="syz.4.2046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 255.530056][T13063] netlink: 'syz.4.2046': attribute type 13 has an invalid length. [ 255.548528][T13070] ufs: You didn't specify the type of your ufs filesystem [ 255.548528][T13070] [ 255.548528][T13070] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 255.548528][T13070] [ 255.548528][T13070] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 255.558619][T13070] ufs: ufstype=old is supported read-only [ 255.573283][T13070] ufs: ufs_fill_super(): bad magic number [ 255.581311][T13072] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1014 sclass=netlink_route_socket pid=13072 comm=syz.4.2046 [ 255.900415][ T70] usb 6-1: new low-speed USB device number 23 using dummy_hcd [ 256.109705][ T70] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 256.116004][ T70] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 256.118125][T13098] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 256.120452][ T70] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 256.124869][ T70] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 256.128717][ T70] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.130146][T13098] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2058'. [ 256.142421][T13076] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 256.144166][T13098] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2058'. [ 256.147859][ T70] hub 6-1:1.0: bad descriptor, ignoring hub [ 256.152846][ T70] hub 6-1:1.0: probe with driver hub failed with error -5 [ 256.158197][ T70] cdc_wdm 6-1:1.0: skipping garbage [ 256.159954][ T70] cdc_wdm 6-1:1.0: skipping garbage [ 256.164840][ T70] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 256.167701][T13098] netlink: 'syz.0.2058': attribute type 1 has an invalid length. [ 256.170966][ T70] cdc_wdm 6-1:1.0: Unknown control protocol [ 256.685060][ C0] wdm_int_callback: 293 callbacks suppressed [ 256.685087][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 256.689622][ C0] wdm_int_callback: 293 callbacks suppressed [ 256.689638][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 256.693516][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 256.695590][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 256.697680][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 256.699714][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 256.701699][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 256.703982][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 256.706329][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 256.708424][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 256.710734][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 256.712749][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 256.908558][T13114] SELinux: Context system_u:object_r:scanner_device_t:s0 is not valid (left unmapped). [ 256.912121][ T40] audit: type=1400 audit(1778901697.464:976): avc: denied { relabelto } for pid=13110 comm="syz.4.2059" name="pmem0" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:scanner_device_t:s0" [ 256.921782][ T40] audit: type=1400 audit(1778901697.464:977): avc: denied { associate } for pid=13110 comm="syz.4.2059" name="pmem0" dev="devtmpfs" ino=710 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:scanner_device_t:s0" [ 256.960914][ C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 256.963811][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 256.966395][T13101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.966529][ C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 256.970392][T13101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.972360][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 256.977859][ C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 256.980595][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 256.983146][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 257.023957][ T34] usb 6-1: USB disconnect, device number 23 [ 257.338731][ T40] audit: type=1400 audit(1778901697.894:978): avc: denied { map } for pid=13130 comm="syz.0.2066" path="pipe:[54433]" dev="pipefs" ino=54433 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 257.660717][T13148] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 257.707862][T13151] netlink: 'syz.1.2071': attribute type 10 has an invalid length. [ 258.017276][ T846] usb 6-1: new low-speed USB device number 24 using dummy_hcd [ 258.168491][ T846] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 258.171219][ T846] usb 6-1: config 0 has no interface number 0 [ 258.173537][ T846] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 258.178468][ T846] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 258.182415][ T846] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 258.187710][ T846] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 258.191838][ T846] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 258.195618][ T846] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 258.200573][ T846] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 258.203679][ T846] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.213021][ T846] usb 6-1: config 0 descriptor?? [ 258.215302][T13151] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 258.217843][T13151] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 258.219529][T13137] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 258.226165][ T846] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 258.273359][T13157] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 258.277723][ T40] audit: type=1804 audit(1778901698.824:979): pid=13155 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.2073" name="/newroot/115/file0" dev="tmpfs" ino=617 res=1 errno=0 [ 258.295572][T13155] uprobe: syz.4.2073:13155 failed to unregister, leaking uprobe [ 258.309873][T13155] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 258.392490][ T40] audit: type=1400 audit(1778901698.944:980): avc: denied { getopt } for pid=13172 comm="syz.0.2077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 258.426087][T13150] ldusb 6-1:0.55: Write buffer overflow, 1 bytes dropped [ 258.440338][ T5731] usb 6-1: USB disconnect, device number 24 [ 258.472622][ T5731] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 258.535366][T13186] tmpfs: Bad value for 'mpol' [ 258.546530][T13188] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 258.577680][T13189] netlink: 'syz.4.2080': attribute type 4 has an invalid length. [ 258.578096][T13188] 9pnet_virtio: no channels available for device syz [ 258.661635][T13194] fuse: Invalid rootmode [ 259.509734][T13209] program syz.3.2086 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 259.515924][T13209] program syz.3.2086 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 259.646444][T13221] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 259.700759][T13229] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2084'. [ 259.736142][ T40] audit: type=1400 audit(1778901700.284:981): avc: denied { listen } for pid=13227 comm="syz.1.2084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 259.748794][ T40] audit: type=1400 audit(1778901700.304:982): avc: denied { setopt } for pid=13227 comm="syz.1.2084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 259.826646][T13228] VFS: Mount too revealing [ 259.826649][ T40] audit: type=1400 audit(1778901700.374:983): avc: denied { mount } for pid=13226 comm="syz.4.2092" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 260.589393][T13263] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 260.598041][T13263] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 260.603027][T13263] binder: 13262:13263 ioctl c0306201 200000000640 returned -22 [ 260.605657][T13263] binder: 13262:13263 ioctl 3b86 200000000080 returned -22 [ 260.628733][T13265] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2101'. [ 260.638639][T13265] syzkaller0: entered promiscuous mode [ 260.642382][T13265] syzkaller0: entered allmulticast mode [ 260.654994][T13265] tc action pedit offset must be on 32 bit boundaries [ 260.662447][T13265] netlink: 196 bytes leftover after parsing attributes in process `syz.4.2101'. [ 260.795980][T13271] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 260.891317][T13278] xt_hashlimit: size too large, truncated to 1048576 [ 260.947973][ T40] audit: type=1400 audit(1778901701.504:984): avc: denied { map } for pid=13286 comm="syz.4.2106" path="socket:[53157]" dev="sockfs" ino=53157 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 260.988310][ T1435] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.505776][T13303] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 261.515345][T13303] gtp1: entered promiscuous mode [ 261.517397][T13303] gtp1: entered allmulticast mode [ 261.639423][ T40] audit: type=1400 audit(1778901702.194:985): avc: denied { write } for pid=13307 comm="syz.1.2113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 261.718555][T13312] syzkaller0: entered promiscuous mode [ 261.721031][T13312] syzkaller0: entered allmulticast mode [ 261.726316][T13312] netlink: 328 bytes leftover after parsing attributes in process `syz.1.2114'. [ 261.915553][T13314] xt_hashlimit: max too large, truncated to 1048576 [ 261.918869][T13314] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 261.929290][T13316] ------------[ cut here ]------------ [ 261.931160][T13316] 1 [ 261.931168][T13316] WARNING: mm/page_alloc.c:5202 at __alloc_frozen_pages_noprof+0x23da/0x2bc0, CPU#2: syz.4.2116/13316 [ 261.933408][T13314] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2115'. [ 261.935516][T13316] Modules linked in: [ 261.935561][T13316] CPU: 2 UID: 0 PID: 13316 Comm: syz.4.2116 Tainted: G L syzkaller #0 PREEMPT(full) [ 261.942859][T13314] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2115'. [ 261.943871][T13316] Tainted: [L]=SOFTLOCKUP [ 261.947983][T13316] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 261.951226][T13316] RIP: 0010:__alloc_frozen_pages_noprof+0x23da/0x2bc0 [ 261.953431][T13316] Code: 00 45 31 c9 49 83 bc 24 78 05 00 00 00 4c 89 4c 24 50 0f 85 64 f8 ff ff c6 44 24 10 00 e9 f2 ea ff ff c6 05 13 5a 57 0e 01 90 <0f> 0b 90 e9 79 df ff ff 83 7c 24 40 03 41 bc 04 00 00 00 7f 06 41 [ 261.959670][T13316] RSP: 0018:ffffc90003f57760 EFLAGS: 00010246 [ 261.961691][T13316] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 261.964315][T13316] RDX: 0000000000000000 RSI: 0000000000000015 RDI: 0000000000040cc0 [ 261.966854][T13316] RBP: 0000000000000015 R08: 0000000000000005 R09: 0000000000000009 [ 261.969535][T13316] R10: 0000000000000015 R11: 0000000000000000 R12: 0000000000040cc0 [ 261.972097][T13316] R13: 1ffff920007eaf3b R14: 0000000000000015 R15: 1ffff920007eaf05 [ 261.974757][T13316] FS: 00007fb57ec226c0(0000) GS:ffff8880d6570000(0000) knlGS:0000000000000000 [ 261.977734][T13316] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 261.979939][T13316] CR2: 000000110c3a0605 CR3: 000000002bd02000 CR4: 0000000000352ef0 [ 261.982744][T13316] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 261.985469][T13316] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 261.988157][T13316] Call Trace: [ 261.989289][T13316] [ 261.990326][T13316] ? find_held_lock+0x2b/0x80 [ 261.991977][T13316] ? is_bpf_text_address+0x8a/0x1a0 [ 261.993706][T13316] ? is_bpf_text_address+0x8a/0x1a0 [ 261.995432][T13316] ? bpf_ksym_find+0x128/0x1c0 [ 261.997335][T13316] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 261.999476][T13316] ? is_bpf_text_address+0x94/0x1a0 [ 262.001178][T13316] ? kernel_text_address+0x8d/0x100 [ 262.002870][T13316] ? __pfx_widen_string+0x10/0x10 [ 262.003564][T13317] program syz.4.2116 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 262.004560][T13316] ? __kernel_text_address+0xd/0x30 [ 262.009384][T13316] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 262.011474][T13316] ? arch_stack_walk+0xa6/0xf0 [ 262.013074][T13316] ? stack_trace_save+0x8e/0xc0 [ 262.014624][T13316] ? __pfx_stack_trace_save+0x10/0x10 [ 262.016389][T13316] ? stack_depot_save_flags+0x27/0x9d0 [ 262.018295][T13316] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 262.020227][T13316] ? policy_nodemask+0xed/0x4f0 [ 262.021850][T13316] alloc_pages_mpol+0x1fb/0x540 [ 262.023492][T13316] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 262.025395][T13316] ? drm_syncobj_array_find+0x34/0x3b0 [ 262.027371][T13316] ___kmalloc_large_node+0xe5/0x120 [ 262.029078][T13316] __kmalloc_large_node_noprof+0x1c/0x70 [ 262.030970][T13316] __kmalloc_noprof+0x5be/0x850 [ 262.032546][T13316] drm_syncobj_array_find+0x34/0x3b0 [ 262.034496][T13316] drm_syncobj_timeline_signal_ioctl+0x22a/0x8d0 [ 262.036539][T13316] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 262.038803][T13316] ? drm_dev_exit+0x41/0x60 [ 262.040292][T13316] ? drm_dev_exit+0x41/0x60 [ 262.041759][T13316] drm_ioctl_kernel+0x1f3/0x3e0 [ 262.043370][T13316] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 262.045592][T13316] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 262.047478][T13316] drm_ioctl+0x5e6/0xc60 [ 262.048841][T13316] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 262.051041][T13316] ? __pfx_drm_ioctl+0x10/0x10 [ 262.052604][T13316] ? selinux_file_ioctl+0x13b/0x290 [ 262.054344][T13316] ? selinux_file_ioctl+0xb6/0x290 [ 262.055993][T13316] ? __pfx_drm_ioctl+0x10/0x10 [ 262.057632][T13316] __x64_sys_ioctl+0x18e/0x210 [ 262.059219][T13316] do_syscall_64+0x10b/0xf80 [ 262.060820][T13316] ? clear_bhb_loop+0x40/0x90 [ 262.062387][T13316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.064334][T13316] RIP: 0033:0x7fb57dd9ce59 [ 262.065773][T13316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.071989][T13316] RSP: 002b:00007fb57ec22028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 262.074756][T13316] RAX: ffffffffffffffda RBX: 00007fb57e015fa0 RCX: 00007fb57dd9ce59 [ 262.077481][T13316] RDX: 00002000000001c0 RSI: 00000000c01864cd RDI: 0000000000000003 [ 262.080041][T13316] RBP: 00007fb57de32d6f R08: 0000000000000000 R09: 0000000000000000 [ 262.082563][T13316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 262.085185][T13316] R13: 00007fb57e016038 R14: 00007fb57e015fa0 R15: 00007ffcbdb34cb8 [ 262.088007][T13316] [ 262.089045][T13316] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 262.091400][T13316] CPU: 2 UID: 0 PID: 13316 Comm: syz.4.2116 Tainted: G L syzkaller #0 PREEMPT(full) [ 262.094895][T13316] Tainted: [L]=SOFTLOCKUP [ 262.096321][T13316] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 262.099584][T13316] Call Trace: [ 262.100666][T13316] [ 262.101619][T13316] dump_stack_lvl+0x100/0x190 [ 262.103152][T13316] vpanic+0x552/0x970 [ 262.104459][T13316] ? __pfx_vpanic+0x10/0x10 [ 262.105921][T13316] panic+0xd1/0xe0 [ 262.107146][T13316] ? __pfx_panic+0x10/0x10 [ 262.108594][T13316] check_panic_on_warn.cold+0x19/0x34 [ 262.110348][T13316] ? __alloc_frozen_pages_noprof+0x23da/0x2bc0 [ 262.112345][T13316] __warn.cold+0x191/0x328 [ 262.113817][T13316] __report_bug+0x296/0x3d0 [ 262.115305][T13316] ? __alloc_frozen_pages_noprof+0x23da/0x2bc0 [ 262.117304][T13316] ? __pfx___report_bug+0x10/0x10 [ 262.118942][T13316] ? __lock_acquire+0x4a5/0x2630 [ 262.120535][T13316] ? __lock_acquire+0x4a5/0x2630 [ 262.122161][T13316] ? __alloc_frozen_pages_noprof+0x23da/0x2bc0 [ 262.124272][T13316] report_bug+0xb2/0x220 [ 262.125673][T13316] ? __alloc_frozen_pages_noprof+0x23da/0x2bc0 [ 262.127687][T13316] handle_bug+0x16a/0x2a0 [ 262.129157][T13316] exc_invalid_op+0x17/0x50 [ 262.130635][T13316] asm_exc_invalid_op+0x1a/0x20 [ 262.132209][T13316] RIP: 0010:__alloc_frozen_pages_noprof+0x23da/0x2bc0 [ 262.134442][T13316] Code: 00 45 31 c9 49 83 bc 24 78 05 00 00 00 4c 89 4c 24 50 0f 85 64 f8 ff ff c6 44 24 10 00 e9 f2 ea ff ff c6 05 13 5a 57 0e 01 90 <0f> 0b 90 e9 79 df ff ff 83 7c 24 40 03 41 bc 04 00 00 00 7f 06 41 [ 262.140605][T13316] RSP: 0018:ffffc90003f57760 EFLAGS: 00010246 [ 262.142577][T13316] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 262.145456][T13316] RDX: 0000000000000000 RSI: 0000000000000015 RDI: 0000000000040cc0 [ 262.148013][T13316] RBP: 0000000000000015 R08: 0000000000000005 R09: 0000000000000009 [ 262.150558][T13316] R10: 0000000000000015 R11: 0000000000000000 R12: 0000000000040cc0 [ 262.153077][T13316] R13: 1ffff920007eaf3b R14: 0000000000000015 R15: 1ffff920007eaf05 [ 262.155735][T13316] ? find_held_lock+0x2b/0x80 [ 262.157279][T13316] ? is_bpf_text_address+0x8a/0x1a0 [ 262.159025][T13316] ? is_bpf_text_address+0x8a/0x1a0 [ 262.160701][T13316] ? bpf_ksym_find+0x128/0x1c0 [ 262.162267][T13316] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 262.164277][T13316] ? is_bpf_text_address+0x94/0x1a0 [ 262.165959][T13316] ? kernel_text_address+0x8d/0x100 [ 262.167628][T13316] ? __pfx_widen_string+0x10/0x10 [ 262.169253][T13316] ? __kernel_text_address+0xd/0x30 [ 262.170945][T13316] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 262.172959][T13316] ? arch_stack_walk+0xa6/0xf0 [ 262.174505][T13316] ? stack_trace_save+0x8e/0xc0 [ 262.176075][T13316] ? __pfx_stack_trace_save+0x10/0x10 [ 262.177773][T13316] ? stack_depot_save_flags+0x27/0x9d0 [ 262.179542][T13316] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 262.181425][T13316] ? policy_nodemask+0xed/0x4f0 [ 262.183014][T13316] alloc_pages_mpol+0x1fb/0x540 [ 262.184566][T13316] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 262.186297][T13316] ? drm_syncobj_array_find+0x34/0x3b0 [ 262.188044][T13316] ___kmalloc_large_node+0xe5/0x120 [ 262.189703][T13316] __kmalloc_large_node_noprof+0x1c/0x70 [ 262.191519][T13316] __kmalloc_noprof+0x5be/0x850 [ 262.193119][T13316] drm_syncobj_array_find+0x34/0x3b0 [ 262.194866][T13316] drm_syncobj_timeline_signal_ioctl+0x22a/0x8d0 [ 262.196932][T13316] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 262.199131][T13316] ? drm_dev_exit+0x41/0x60 [ 262.200602][T13316] ? drm_dev_exit+0x41/0x60 [ 262.202081][T13316] drm_ioctl_kernel+0x1f3/0x3e0 [ 262.203695][T13316] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 262.205850][T13316] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 262.207621][T13316] drm_ioctl+0x5e6/0xc60 [ 262.209032][T13316] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 262.211274][T13316] ? __pfx_drm_ioctl+0x10/0x10 [ 262.212820][T13316] ? selinux_file_ioctl+0x13b/0x290 [ 262.214534][T13316] ? selinux_file_ioctl+0xb6/0x290 [ 262.216238][T13316] ? __pfx_drm_ioctl+0x10/0x10 [ 262.217787][T13316] __x64_sys_ioctl+0x18e/0x210 [ 262.219365][T13316] do_syscall_64+0x10b/0xf80 [ 262.220821][T13316] ? clear_bhb_loop+0x40/0x90 [ 262.222337][T13316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.224251][T13316] RIP: 0033:0x7fb57dd9ce59 [ 262.225706][T13316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.231860][T13316] RSP: 002b:00007fb57ec22028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 262.234523][T13316] RAX: ffffffffffffffda RBX: 00007fb57e015fa0 RCX: 00007fb57dd9ce59 [ 262.237042][T13316] RDX: 00002000000001c0 RSI: 00000000c01864cd RDI: 0000000000000003 [ 262.239531][T13316] RBP: 00007fb57de32d6f R08: 0000000000000000 R09: 0000000000000000 [ 262.242075][T13316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 262.244580][T13316] R13: 00007fb57e016038 R14: 00007fb57e015fa0 R15: 00007ffcbdb34cb8 [ 262.247123][T13316] [ 262.248812][T13316] Kernel Offset: disabled [ 262.250242][T13316] Rebooting in 86400 seconds..