last executing test programs: 56.893236817s ago: executing program 1 (id=465): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) flock(r1, 0x1) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000ff9000/0x4000)=nil) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020800000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a310000000038000000050a01020000000000000000010020000c00024000000000000000010900010073797a31000000000400048008000700", @ANYRESHEX=r2], 0xc0}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10) sendto(r2, &(0x7f0000000640)="41d23bfcdabc43a46eb83f8f2dca4b6b190715a1a604e037e299ab0f826e009ce18040e5501f7c2a9607628fd403e77c7dc74a72a8fd7dfdc22132e7f847ee8310b2d107003a88f73c48ca40f78ed6", 0x4f, 0x40008c1, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x10022, 0x0) syz_open_dev$dri(&(0x7f00000001c0), 0x1, 0x2100) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYRES16], 0x48}, 0x1, 0x0, 0x0, 0x4004080}, 0x20000000) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB="b702000009000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2e6405000000000065060400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000002c3f2cc2b7956244cef7baf48e6d2885a09a87507ebfc75b5b0f4e4309ebcdac5f7a860c008cbdd3b4c3b7f28754860c9c781f6410457253e89ad528d985636a86ec0f68f59cd1159a2c2e85d726859a919cc9548a349980d1ccdce27f94bc074c27f81078545c146a0857153b7b8f00034debae58a4ab415b0d7ff0575cc272cd3d7e8d974927676468ff2d86e0ffac94792ed9cf6b40b3cf252a47c05ae8a70d57cc3e067d1867b54d24e20000000000000020009ebf84d3b042d6e432cd080e3b57239f0127473e6ba922aff649609d40b47ec331ccba3cf96f9483ff19a6471bf5abc742d9cbcfb964b11b31034694a6aad86cf08a6c7b2235dc99de9aa3e6b77c7a2877261ed32da90864987f30926c9013eec3b86836ae50447aa5a79f40c235000000453302712c3d8fc4e2b61adb0695e800000000d4f4e91f0000002c33df424d1bafe5725c8a404724f8a4f1cda7997b65954f74097560b91da309b887af2485c2d9ab09b523000000000000000bf7b2ff4602aec1eea200000064881c5630521a08e051374cf05c921a06fb7818000000009dc8d95e0e5b365d10e1004dae58b3b5b89709b0ff47b200000000004000cbef88811dc8c1b27ac7d9a6bb70f60eb9c01dd2fc79b85e4d961498f3a80131d21d856177a2189f45d011ef1da5c6d57bb8fd387ccea9c3899a914e47e82f040000009d81003f927355408f87264797d3fa970949793b94329d580500d1f91c0d22587e05a61e3d8576ca168e88d7a9af95b04a37c27bfffab9abbb31fa8c0080258cfa6d3f166e695f3c56490aeef464d9965d70a50f1282619344f223548e750339643adac1322c87ca253ff2fb1882760d6feab16bacdf83c11816dbe959ebc5ec479c8319f73e2249eab0486b110702a481d3b51976a52303056e800b4ae5acc2dfae60ab958e9f3ef9b4aaa4e8d6166f636a65eb1d672bf2000000cda8462cc9b16624998be65683321e970000000009b8e20762c1bf4a3eb6769f2b23e842bacd9c685edea0ffa3e975424f8ede49e61a4de808a38ba3512d64dc71867df4eee3f1ff791cf7c9862f98b45852e4b2f78721b978a2df2f2a29a387c6f0576b36038f819286eca99a6a434811cf2a117d775fe986a49fb82cf5f15972d5ab18f1045384501adabb20f7b0e15ff47f1744e2341b59034959a1289ba6e243668e6735305707e3de7652bfc5b60c76deff43a1d6fd6a4180ab723735abbeffe7f2ec3a0bb86f9eddfc0f3d1d503d7a54b49e1ae6c5aa620d27e91aa0aa0ed6fcacfc91fbb4c256409e54daefbb107c381fa729ff5f3907d93430da178d685d7730f5e129438a5214f722096d2986334c2576bef69145d3fbd78a9059e454474f92e65828b018174a9f4738b8c71fbdeac26ab95e02f9a847182766964976b1fccdb9f35721e43e33883cf16ed1343fb7429eb395123b0a4262b7023c22039b9002589a378ed4c6267965af78b861bd025312538cec97966b8973d4e299d9802264d06e40ae118e1d242d1128dcedeb44030df12ef68f78215d65f96eb55db8cbcb060008000d988374f85451a694ffe38a1d03916ff10dc82b31c98d42e1a1bda1290de1a499a5a385b31112a48ba3e6d6849914c1788a7aca37177cc341fff44fec5c5e0abae01c439a1b0311e074e81ae9993b5b3459553e4ece78d4c1501c70f5d81e0725d5b273755c0000000000000000aa4234ff82182952a76233d18e7d49638aeb04e7a9e9e7eafb7c255372795d2d192a0a33cab0f5bf2e93e0544fcdf2df2bc6ce96e5a11993d54f97a23754ac828674dbb93c0ad345715be4a13678b01edf76d8a923655800a2c88cce004505ab45d8f5f88aa887bbce5c18970428516f6099bdbb2cd7a2356397f1a0a23e662e2a6c4834400cbaa41c3c574e6e6aefb7a68da5ec1ae49f968bbe0e0bf9878516f553639f5b4828e92019b61f5874be1c7cdd9482df50bc24a8a1fa10d291390eb84e26a2e8dbeaa45604b05a116c1210a7540bf81005044273f5a8ffc538db289350eb248e483bd8920efcf30a798c2b636243e0a37262ca47dfeefa753ba528f7ba77e825051ce69b4475d7d714ba0c636e6ae9f710411d30ef424aeaabe057c7df6ff8f767bcd9012e1047c686f5ccb76ab3a5df53cbc22ba7ea8f6a8e220bb4d83de1e4dc19d6c1be841503850803bc2c2d5e0e34270a7f1cca0c6c53a8e5f891f7a793a70da62d6d88fbb90d220acc687931b42d6be83ab870da3c0a567f5e65ec0457f4ad2a4ec0b671b36388afd5520a8483a4b11f7d02a409315f0f9e59f47668d68a74838d6976e12fd45200014041dffacbf60892ec8bd7560686f137a806d3dfaba900b47cac62f828342fff009adb5b2251461a1b9d6ba625b8fe04e69a1a4be2696f0000000086e172932e03000000000000005942e1b9d6dc28ab8e19e1111dd893e801015642faf21eef40d6e7de3ef62c4bc5ff17e7aeb2841098f845d1cc9ec4eee79c298fb0ba939b13707044e2e9cc0d350438c1c8c6bb9a38c6ac5ca0d9cf1f3d6915f25cb26edfc28b3079b97df32601240e454db103fb0c4a143673a3f160d3a7b83ecd0509ce9eba0c7bf7843799b1b56a234f9eaab8a3f14f1472bb6aaeb8ac9ee4054605558ab31f339f6a4caf2ee2fd01f34dca3300000000000000000000000000000000f59f8e6e00000000c44130098d833a24000000000095e6f945ba9a941cef5e70b8c152321e24b5b29bcf374dcf5a29a35d76e6e2bf8df95462690a4fc9ec8129e92b6ebb4b40a992a75d3c595426ae40d0bfc87db24d856359079b29b3c374d081c300b2cfaa596d24e800ef8e2201f2fb7a9946f89f9f31f7cbd603fd7f8898c70b5c65f2e28f22e1a79a6af3a54861b07f124642e98389557affbdede09b5566a4a1ee73b20846810030a754acddcdafe3ceeeebc0b5f2fedfe7d198e3067f3dbac9441a9ab8409cbbb7e15b9ae3944097de34de2001c8533a3766e6e4c4c4702ccb932a27a3962814cd6aa8fc684beeaa3932efae3a9052be8eec1e95f6ad8d41dd34829503ba4b66e27154cb6e34aa13450522df1723130b6fe347c93f00e40e293c98d849a33f773c743728992f40faccd5c23130a1c6bfd6fc661bca1598137ddd1090ded672f5a48a40cab3f640c8241a364cbdd3f188eec7da7bccafbd5bf28a46f0eecc6b550471b0b0770c6a5a411c0e0b19e15a461e7c6833ba936e214b013f2819ec6572a43b5cd32b11d7e4f8dcf8f7820a17b7b2ee6178a03351dd25091e46bfd82a3979b9cad109fd6217cd52aa81bdabd50826a674bd16b8f7e6aed12a305366599f5f029a7b24558c027518c669760500002f1c19d16a6f391906000000cc0bbbfb8c698ecc137d96711100e0108d3bd2afed0b279ebf0527552a9331e646c424b14ffbb815622bfd2f635855bed1b164d0a56bd104be069854111c5b26ec3c652b5f0a6b9676dae987ec23456ba05a4dfb15321ef6b76e7e547a688c67ab531cfc784c9f940d9fb0464a6cce635e14b80dc5c1c64e75e6bd5355d84f8df272f18f58c570e7afd83ee77f157c146aa747b728969aeb4aba1d8f9de1b3fb8ab6ea50e884c2ea98e6400bf0c5ae2887cd1da0e57ccfdf5eca2b455247efcc13102846c0a85f20c80007c0ce6efce627b95b8ad3003385de97101678fb2163ecea6e70a77a6fbc089e31a5ccece932229b8f79faa6863d6857c3d9a9710f9f8ad16eeb8342278f311cbc226498028234d21466892983378fe64acbb44f694cd78e43c74aa75505cb1c91b189f8f89f233a05f5cd4e173a373178557843dd705268f74a9e5429945503195aefd6706b584d8408c9652b3fe68500747f7ee8375fa559c3ad195d3795df1a8364cd13acc3256ee4634c73eeb6954d0fcf09ab84df0b8900e0c6fea2ccb600ae7a4b128cae19df160e7c207b89132d1d5bdc9ffc79f0549b82df521817651d5fead5128205b92ccdccc69407ab556217af277af911dbd456dfc43dd061b6c91485dcc208cf0b3d0bf851de413f5de5ec015e296914afab6411109355e027ce04990d9aae251b9deb11b7db45b9f15b7b55d8fdbedd9e6cf891205694f02be8b9ea8ecd41308a0e1b93ae3435bfa88b440b1f701b4d0fc49c82193f27f8023b630ea97edbf3bf421a0a1a2b4ac7bb30bcd1cdd172c0df37408fd6827bb03e8742fc1c7a2befd1299928c5f79e846a8dc7ca648d960a759e6711b69776896a9656d59af6d44bc5348229fa84ae78af8421a22c4b4c17a3d24a4a0104000000000000d77cc4eef51c2b417c8c7458ddd7dd9d1a863bf0a9e1a30a19020490038017a5c7e474c83302a2c2b5c976dacf3dda7191c757f208000000000000005f7ed983f65723fbb36b9b51abb0dbcd335700000000000000000000000000000086666201251aa4f139d0485ffcf89f01639fd1579a3802f720a0215c720a97071f5065a23642a58275dbca444b00e2e5835185d5d5b2796eb0fe32cf3b0633f58ecc7648c3c6efe82f93a3008052416512eea30ea9472e0b456a652883c0907323cf03be193a05008cdef7a98a1671a1918df310dc4bfd61c3db4819ab1c57b348a8ff1ed36364a20fe846f1cd086058d139ce528425b31c5d08b433562ffb318c1285011f9b78b2401989384311101e452f54661ecdb2514a6ae50dbdd422de0f0f8c670000000000390be79688f80c47314cb1b14afcaa5d23f9032e0ec51f45f447d6a7c798fcf7e60e2180e289410801e4f03a0e140f388f25b92da1025d8409e171a2336ed71cca86eb4658fe06df286e0e20276b0618eeffd05774f15686cd9d3182ca2fec863875f305fed6baf48a594db12582a38cfdffffffffffffff0cf8d920517835fe7d09cfcb624f6931f1cc6f6b71f58de9ddc38e0c43992f6bc57a718d0cfd197b5324b4e05ef1caa96db3ae1f2f2e5791faba2ebbe1a6faf21f2748fb1fb6743c3ca8af4e6b02518c9b7fdc1b5721eb1c3ed98db25536f74ac7861afc94544e52dcb5c60460a05802e3b437ac977bfa26b887a2443e8d559c58187f004eb82b07937df6e96f77ed551926bec4e0188fae10a35d1c5f1768ac6be829bea46f1babc3d74adc31ca71bdab9079e4288881b434484eadde9da6b81802842abd462d546c59d87acc014f81d3414759bda12d2a2c6bc1bfa807bd3101eb227184a61107b6d0618e2a3b842671e084ac3f0ff94dc48b51601247318ab4d1c5106458000000000008000000000000cfee0107e6c2fe8639d926829fdbbd86bf591a8c3c235d8939af9d923f648165881a6c29997234406400b3b1c321cc158dbe17123eace30000000000009ea77cb4d3ca892600000000796de6ae4ae40bdf9a6e8c5dc29562262af9cd54e8e3ecc7e3c8cba0ecc791683496c4e5c1a5729714d9f9031f49b400cd2667b4ea6df54809615a4f973f93e6ccec72f16ff998e29ed99df733680a9d5cea57f99cc139b6ea9014f3000000000000000000000000000000000000feeab45a4046a622b0dceb413e4e39b7317e92cbed46b41ab5115bfb542c933783d750852dfdc6656aaf15e10615a88821f2f1bc53969b52d6852755e7681ad5beda80b38ccd34116b99f50b4fdd967b3f20f260455412b67563e40e323bde9d673fceda0ad6981565c8a183d928903b4f4472dde41b6dcd75314c31e704dfcb222c8359fe88944f852242270c932abfaeece0843d708f5cd25b2a63ae1e79723c1c3c013836b47da0a35d0f34c070000000000000422ae2c148d444dd437a7d2f5e575009bc2d17a199802409329dae8baa58d3de63ad45328a9d4dc1ace543dfe11913c6c6413f8f7a15657d012fea460bb4656a20df1ba26932b0ef49f8ea88d7b4c1289314ba789661640f1b5d7cbae103fa95b0035f1e8e866307d4796eab0992704f9e00be4b1af8dfa9e94ad74e607ea9d7d7a95ed5a15429426abbed8d2c657018305c6f9e5159a5453f958991a908ff4cb2e8cbccb1d3c8daf754e4b01b2edd023e5bfdf293bd28fc1f8885f6edd5a715df4d180247feb08e9e2e5126c48be6098e711f0d86de5d76fdccae34eef9197c32ab4e6fcb52eb9ce18fdb621a75913a97254d783778203ec0bd1a8859683e1d01da4e81fb73bb3b358340a0310bf5ae17b917208da607fd7b125cf99fd3e9056f5184df7570ede94b736ae354b5b8ae2cc473b455f2f86d47c69027676bf1141f316b0f278f1692406572ee82766f8e5ff1cfec2a7a6cab7d0f2582a877c9bd4ca81089373f738d02e6bb4d3df30ac0f041e51ad36e1ff140812baf54b80635cc80963c8f69fa4506f7a30c99d3e538cc0aeafcad86ead38ed949aa3c204aea50e5e0039f01b82595b7dc921a8acc1f76340f060cc9a3acad3451c17dc9b5ca5d10a0cb1708592d1900a046f33761d50895febd9fd58cb132989766cf7c252daac259576ec218e3857e6fa97fe445d1fab51d87302a4bb28a4cfe462ee4849cc6832650188ca187d85509d8beccf9d9cf752368985804195b9fd2faf1aff8248f3981bd55cbbf514cd8365fee72cc7af053e5388ceadadb967ef735181df6a90cab13f58f6d563c9ab4ad37297aecffd8446cb2b14ec36a99af8393e3760d5970ba1debdcbccd54012c559ee2797ff962328aa6a252c0756e396ce4d52937546675203bdf1d6b120acac576523f8b1daa922188bf61536312f90dba92fb380c3c6fb5f9883a2c4dd99a1bac9b7cb25ff2ef9bd58ff97ddfdd2d4bcc371ee82245b57cd91a7fa3479cd339f54a5c422b753cd42d441ea881d46e419312db1f0cccce"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff48}, 0x48) sendmsg$kcm(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="100000000700000401"], 0x10}, 0x331e5c6805043cda) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r4, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) r5 = semget$private(0x0, 0x207, 0x0) semctl$SETALL(r5, 0x0, 0x11, &(0x7f00000003c0)) io_setup(0x8, &(0x7f00000002c0)) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f00000014c0)=0xfffffffffffffffd) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r7 = syz_open_dev$dri(&(0x7f0000000280), 0x10000001, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r7, 0xc01064c8, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000040)=[0x0, 0x0]}) 56.764783399s ago: executing program 1 (id=466): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newtaction={0x78, 0x30, 0xffff, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ife={0x60, 0x1, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) (async) r1 = memfd_create(&(0x7f0000000000)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xadNaC\xa6\xf9\xa7>c\x84\xd8\xfa\xf1\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8g8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xd8\x12\x8cXc5%\x03\x8d`\xdayC\x9b\x9a\xd9c\xe9\xb4\v\x99\x87\xe4\x00\x0e\x8eS\x8e\f\x05ZH\xa2\x0e\xbc\x9c\x95\b2Cf6\x9a\xe7\xb9\x86\xbe\xd0\xda\x91\xc1sl\x11PA\x93\xa5\x93\xc8\xf1w\x7fp6z\xbf\xe8[\'u\xb8\xd2$K\x12\rt\x87\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00r\xe2`\xdf\xd2\xb3\xaf\xe9\xc4!Z\xb4&\xa2\x12\xe2i\x91kC$A\xafR\xb3\xff\x1d=Z\x0e\xde\x99\xec\x10\xb4+\x13\'\x92>\x14\x00\a\xb6R\x8b\xdcz\xc3\xd1Y\xd6\xd9;s \xb0\x938\xb7D9\xdcN\xbd\xdbn\xe35\xa7\x02\x9c\xc1\xd9\x13?\xc9\xd7\xab\x9c\xf3\x82\xd1\xee^kk\xce\xdbn\x02\x1f\x80\t\xdbr\xa9\xcc\xf1\xcb\x9f@\x8c\xfc\x02W/p\x97\xb0\xbd\x8f\xdb|n2a\xee\x95u\x83\xca\x8a>}\xd3\xd0\xff6.pa\x17\xe3e\xd2\x7f\xf6\xbc\x9d\x112\x1b\x14p\xa1\xd6u\xefn\xb4\xa3\x05D\x8c\xc5l\xcc\b\xeb\xf42\xe9\xf15\xf3\xf2\xee\xd6\xed\t\xb3\xf7\x1a\x7f\xe6\xb4z\x19\xe1\xb4w\xf7\xa6\xd7\\\xfa\x96\xe2\xf9\xb1\x81\xba\xdfg\xadI\x1c\xde*_\xd5\xdf\xeeA\xcd \x91\xc9\xd4\xd1\xcd*.t\x80]\xd5~\xfb\xfb>\x9d\x91Kq]N\x87\x0f\x04L\xd4(\xf2G \xfdr~:\xc4\xc3\xfe\x14G\xadG~^l\xe0:(Y`\x0e\x90\xfa\x1c\xb6\f6\x92B\x92\xd3\xa9BG\xd2*AB\x1e\x01\xf0m+\x02\x87\x81aj;\xb6y.g\xeb\xc4\x0f\xd3\x85\xa5\x00\xa1\xa6iP\x0f\x02\x14\x90q\x94\xab\xb3\x0f\x01=\x06\x98\xa8\x87\xd9=\xce\xbef<\x1d\v\xba[\xd8]\x9e\xf30\xb8\xf1\b\x06M\x18w\xdc\x0e\x98?\x04G\xf9\x99\xab\xc1\xc0z\xe9Fu\x03\x9aj\xc0]\xb47\xd5\xb8]\x98y@\x8c\x8fM\x8c],\x1b\x03\xaa\'gv\xeb\xbf\xa8d\"\x94e3Q\xfci\xdf\xad\x819\xd1\xf3\xaa\xc8i\xf2\x8a\xc4CU3\x87Ns\x9f\x9f\xcd\x05\x06g\x9aRBg\x98\x10Ch\x1c\x96\xd3\xce', 0x7) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {}, {0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) (async) sendmsg$nl_route(r0, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000900)={&(0x7f0000000980)=ANY=[@ANYBLOB="1c0000005e0001002dbd7000fedbdf2500000000", @ANYRES32=r4, @ANYBLOB="d0e433b4ca8a1a9bf11c6f13ff999bfc4b1ab697f0b452c19c69f6110d116097fc99e001a55f35f67f52a65400ace9e03db639b137a08fbddedebd76ea4e82df7c64c32364c61596150a27440eb1a10366c61e4d6910352bdba4873a535d85b82d59a98b71770e7d822df141dd3a17a1a632905c99104e5a3d20e36afb789004"], 0x1c}, 0x1, 0x0, 0x0, 0x200008c1}, 0x44881) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0x10012, r1, 0xa7f0f000) 56.684656752s ago: executing program 1 (id=467): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="14220100000003002400128009000100626f6e6400000cbc4031b2a094141728", @ANYRES32=0x0, @ANYBLOB="0500010006000000"], 0x44}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) r1 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (rerun: 64) r2 = syz_ublk_setup_io_uring(0x30c8, &(0x7f0000000040)={0x0, 0x71b3, 0x0, 0x0, 0x1009}, 0x0, 0x0, 0x0) close(0x3) (async, rerun: 32) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) (async, rerun: 32) syz_ublk_add_dev(r2, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, r1, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000041c0)=@new_dev={0x1, 0x4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x11}}}, 0x0) (async) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r2, 0x13, &(0x7f0000000280)=[0x45b, 0x1000], 0x2) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) (async, rerun: 64) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) (rerun: 64) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b", 0xe4}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b8000000000000001701000002000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf900000080c79d6b6d1d"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1", 0xa2}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b", 0x2f}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b", 0x4b}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) (async) r5 = socket$alg(0x26, 0x5, 0x0) (async) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x9f6d000000000000, 0x1000, 0x0, 0x1, 0x19, 0xc, "faf98317e5a114998a1a8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x5, 0x7]}}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000dc0)=@gettaction={0x134, 0x32, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x9}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x101}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @action_gd=@TCA_ACT_TAB={0x30, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe0b4}}, {0x14, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x60, 0x1, [{0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x100}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8000}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x10001}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x3c, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5c8b}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}]}, 0x134}}, 0x24004000) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) (async) r8 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe03048", 0x48}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}, {&(0x7f0000000340)="8f3dcb904ffd8ade0b", 0x9}, {&(0x7f0000000500)="da23e8238c594402242cd06d4ad5a1ed972c43", 0x13}, {&(0x7f00000020c0)="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", 0x100f}], 0x6, &(0x7f0000000300)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x30}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async, rerun: 32) setns(0xc9, 0x0) (rerun: 32) r9 = socket(0x2a, 0x2, 0x0) connect$inet6(r9, &(0x7f0000000000)={0x2a, 0x4e20, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x200}, 0x1c) 56.57547096s ago: executing program 1 (id=469): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x2}, 0x6) getsockname$packet(r0, 0x0, &(0x7f0000000180)) (fail_nth: 1) 56.515495771s ago: executing program 1 (id=470): mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./proc\x00', 0x192) mount(0x0, &(0x7f0000000900)='./proc\x00', &(0x7f0000000a00)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./proc/fs/cifs/Stats\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(r3, 0x0) setresuid(0x0, r3, r3) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f0000000340)=0xc) mount$tmpfs(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000200), 0x0, &(0x7f00000006c0)={[{@size={'size', 0x3d, [0x74, 0x6d, 0x99d9ed300f217a7c, 0x5d, 0x78, 0x37]}}, {@uid={'uid', 0x3d, r3}}, {@noswap}, {@huge_within_size}, {@uid={'uid', 0x3d, r4}}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'TRACE\x00'}}, {@subj_type={'subj_type', 0x3d, '-@:\\'}}]}) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x4}, 0x59) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f00000005c0), 0x10) recvmmsg(r5, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000380)=""/110, 0x6e}], 0x1}, 0x7f}], 0x1, 0x10002, 0x0) write$binfmt_misc(r0, &(0x7f0000000100)="c37305182cf6e3a1dd6f2ef7c36fdd45573979aaa5ca2880fd9706481447b7064d923c643c3e833de7c61e649864a07185a0", 0x32) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace(0x4210, r6) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x9, 0x3, 0x260, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x1e0, 0xffffffff, 0xffffffff, 0x1e0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2c0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001100)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000040000000200000000000011030000000000faffffffffffffff000d000000000000000000000000020000000000000c0200000000006100"], 0x0, 0x4c, 0x0, 0x2}, 0x20) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010004b0401800000000000007a000000", @ANYRES32=0x0, @ANYBLOB="4800000000000000240012"], 0x44}}, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a14000000000a050000000000000000000a00fffe38000000090a010300000000000000000700000008000f40000000020900010073797a310000000008000a400000000008000f400000000114"], 0x74}, 0x1, 0x0, 0x0, 0x88000}, 0x20000000) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000600012800b00010067656e65766500005000028005000800000000000400380205000900010000000500"], 0x88}}, 0x810) sendmsg$can_bcm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockname$packet(r1, 0x0, &(0x7f0000000180)) 56.245706299s ago: executing program 1 (id=478): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000a0)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c00000013000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000005c001a8006000000060000005000058024000180080001000100000008000200000000000800030000ffff0008000400", @ANYRES32=r1, @ANYBLOB="2800038008000100010000100a0002007a112251445500000800030000000000080004"], 0x7c}}, 0x0) 41.200631684s ago: executing program 32 (id=478): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000a0)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c00000013000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000005c001a8006000000060000005000058024000180080001000100000008000200000000000800030000ffff0008000400", @ANYRES32=r1, @ANYBLOB="2800038008000100010000100a0002007a112251445500000800030000000000080004"], 0x7c}}, 0x0) 3.665473935s ago: executing program 4 (id=1512): setns(0xc9, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x4d0}]}) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="580000001000ffff27bd7000fadbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15010000000000003000128009000100766c616e00000000200002800600050088a8000006000100010000000c000200130000001000000008000500", @ANYRES32=r4], 0x58}, 0x1, 0x0, 0x0, 0x880}, 0x8048802) r5 = socket(0x8, 0x2, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_int(r7, &(0x7f00000002c0)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000180)=0x15) ioctl(r6, 0x404c4701, &(0x7f00000001c0)="0100000000000000000000000100000001000000010000000000000020000000200000000100000001") ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000240)=0xf9) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000241)=0x3) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000242)=0x3f) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000280)=0x1) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000244)=0x1c) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000245)=0xf9) setsockopt(r5, 0x108, 0x42020054, &(0x7f0000000000)="010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000", 0x54) bind(r5, &(0x7f0000000100)=@generic={0x8, "0000ffff01002000"}, 0xc) getsockopt$SO_TIMESTAMP(r5, 0x1, 0x3f, &(0x7f00000000c0), &(0x7f0000000180)=0x4) r8 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$clear(0x7, r8) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_GET_REPORT_REPLY(r9, &(0x7f0000000080)={0xa, {0x7, 0x5, 0xe}}, 0xa) 2.564679394s ago: executing program 0 (id=1535): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000a0)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c00000013000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000005c001a8006000000010000005000058024000180080001000100000008000200000000000800030000ffff0008000400", @ANYRES32=r1, @ANYBLOB="2800038008000100010000100a0002007a112251445500000800030000000003080004"], 0x7c}}, 0x0) 2.564405595s ago: executing program 0 (id=1536): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x6, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = io_uring_setup(0x178e, &(0x7f00000001c0)={0x0, 0x52c1, 0x80, 0xfffffffe, 0xc}) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000240)) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000ffffff7f0000000000faff0061100c00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xb}, 0x90) r3 = syz_io_uring_setup(0x4329, &(0x7f0000000180)={0x0, 0x776c, 0x110c9, 0x6, 0x160}, &(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000000)) r4 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000140)={0x80000008}) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r3, 0xc, 0x0, 0x0) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write(r5, &(0x7f0000000600)='dir .', 0x5) write(r5, &(0x7f0000000700)='bind', 0x4) close_range(r1, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x60680, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB='@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000050000000200"/28, @ANYRESOCT=r1, @ANYRES64=r0], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000080000000000000001000084060000000000000001"], 0x0, 0x42, 0x0, 0x3}, 0x28) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{r7, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000440)='%pS \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r8, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r9}, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x6, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000050000000000000007000000b7080000000000007b8af8ff00000000b7080000068000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500020000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0xdca6bfcc9a561e2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x0, 0xe, 0x0, &(0x7f0000000200)="6a00000000000000000000ccf0cf", 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) setsockopt$netlink_NETLINK_NO_ENOBUFS(r6, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) 2.435045037s ago: executing program 0 (id=1537): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) mount$tmpfs(0x0, &(0x7f0000001880)='.\x00', &(0x7f00000018c0), 0x1, &(0x7f0000001900)=ANY=[@ANYBLOB='mode=00080000000000000000000,\x00']) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) r1 = syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000780)=ANY=[@ANYRESDEC=0x0], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x18, &(0x7f00000012c0)=ANY=[@ANYBLOB="001105"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$I2C(&(0x7f00000000c0), 0xc, 0x88000) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000480)={0x0, 0x6e, 0x5, &(0x7f0000000000)={0x2, "6f5fe95f410000000000b59c000073ef440427000000bda900"}}) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) sendmsg$NFC_CMD_ENABLE_SE(0xffffffffffffffff, 0x0, 0x20040000) timerfd_create(0x0, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000380)={0x1d, r4, 0x0, {0x0, 0x0, 0x1}, 0x2}, 0x18) sendmsg$can_j1939(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f00000004c0)={0x0}}, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x8, &(0x7f0000000040)=""/10, &(0x7f0000000000)=0xa) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0xe8, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0xd4, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x0, 0x0, 0x4000}}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x3c, 0x3, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x2232, 0x4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xe8}}, 0x880) 1.934936368s ago: executing program 0 (id=1546): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000a0)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c00000013000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000005c001a8006000000010000005000058024000180080001000100000008000200000000000800030000ffff0008000400", @ANYRES32=r1, @ANYBLOB="2800038008000100010000100a0002007a112251445500000800030000000300080004"], 0x7c}}, 0x0) 1.859611557s ago: executing program 0 (id=1548): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, 0x0, 0x0) setresuid(0xee01, 0xee01, 0x0) setresuid(0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, 0x0}}], 0x1, 0x0) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000020180)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x1a, &(0x7f0000000300)={@remote, @empty, @val={@val={0x88a8, 0x2, 0x0, 0x3}, {0x8100, 0x6, 0x1, 0x3}}, {@llc_tr={0x11, {@llc={0x4, 0x80, "339d"}}}}}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @rand_addr=0x64010101}, 0x10) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x4004) 1.85870685s ago: executing program 0 (id=1549): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f00000000c0)={'veth0_to_bond\x00', {0x2, 0x4e21, @remote}}) recvfrom(r0, 0x0, 0x0, 0x32, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "2e2b5aa4"}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0x8}]}}, 0x0}, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) readv(r4, &(0x7f0000000580)=[{&(0x7f00000005c0)=""/156, 0x9c}], 0x1) close_range(r2, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 875.079046ms ago: executing program 2 (id=1558): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x0, 0x3c}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r2, @ANYBLOB="0100000002"], 0x40) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r4}, &(0x7f00000000c0), &(0x7f0000000140)='%+9llu \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r3}, &(0x7f00000000c0), &(0x7f0000000140)='%+9llu \x00'}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r5}, 0x20) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$HIDIOCGNAME(r1, 0x80404806, &(0x7f0000000340)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0xc00) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000feffc6be4c09040900020073797a310000000008000a40fffffffc140000001100010000000000000000000100000a"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40040) sendmsg$NFT_MSG_GETSET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x2c, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048010}, 0x4000) ioctl$KVM_INTERRUPT(r6, 0x4004ae86, &(0x7f0000000100)=0x7a3) 822.376911ms ago: executing program 2 (id=1560): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000001c0)={0x2020, 0x0, 0x0}, 0x2020) stat(&(0x7f0000002200)='./dev/mapper/control\x00', &(0x7f0000002240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ATTR(r1, &(0x7f00000022c0)={0x78, 0xfffffffffffffff5, r2, {0x2, 0x9, 0x0, {0x4, 0x9, 0x2, 0x8, 0x6, 0x94, 0x8f, 0x9, 0xfffff001, 0xc000, 0x6, 0xee01, r3, 0x5f2d0, 0x5}}}, 0x78) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r4, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000100000000000000000000000000000000000000000000006d") ioctl$vim2m_VIDIOC_STREAMON(r4, 0x40045612, &(0x7f0000000140)) ioctl(r4, 0xc138fd09, &(0x7f0000000000)="0400000000000000000000006e0100003801000001") r5 = socket$kcm(0x2, 0x7, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[], 0x8a) 545.565035ms ago: executing program 2 (id=1563): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x4e24, 0x1, @loopback, 0x9}}, 0x0, 0x0, 0x32, 0x0, "aae37be4753f0a28060a80cdd60fe31d6ba25cec257a3a485a338d600a8402d23df4854ed4cf29109f0e30e8d115e434392db157494620680fffb8cb989ab0cfc17eb88225e0fb0a062dd7a81eb098d3"}, 0xd8) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x2, @empty, 0xfe5}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000540)="922c", 0x2}], 0x1}}], 0x1, 0x200880d8) socket(0x10, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x4e24, 0x1, @loopback, 0x9}}, 0x0, 0x0, 0x32, 0x0, "aae37be4753f0a28060a80cdd60fe31d6ba25cec257a3a485a338d600a8402d23df4854ed4cf29109f0e30e8d115e434392db157494620680fffb8cb989ab0cfc17eb88225e0fb0a062dd7a81eb098d3"}, 0xd8) (async) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x2, @empty, 0xfe5}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000540)="922c", 0x2}], 0x1}}], 0x1, 0x200880d8) (async) socket(0x10, 0x2, 0x0) (async) 455.29553ms ago: executing program 2 (id=1564): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x4e0, 0x378, 0x180, 0x0, 0x2e0, 0x180, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, 0x0, {[{{@uncond, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@remote, [], @ipv6=@local, [], @ipv4=@private, [], @ipv6=@private1}}}, @common=@ttl={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x218}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}}]}, @ECN={0x28}}, {{@ip={@rand_addr, @dev, 0x0, 0x0, 'syzkaller0\x00', 'macvlan1\x00'}, 0x0, 0x70, 0x98, 0x0, {0x8001000000000000}}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x540) 450.133014ms ago: executing program 2 (id=1566): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, 0x0, 0x0) setresuid(0xee01, 0xee01, 0x0) setresuid(0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, 0x0}}], 0x1, 0x0) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000020180)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x1a, &(0x7f0000000300)={@remote, @empty, @val={@val={0x88a8, 0x2, 0x0, 0x3}, {0x8100, 0x6, 0x1, 0x3}}, {@llc_tr={0x11, {@llc={0x4, 0x80, "339d"}}}}}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @rand_addr=0x64010101}, 0x10) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) 395.403873ms ago: executing program 4 (id=1567): pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000380)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r1, 0x3ba0, &(0x7f0000000480)={0x48, 0x6, r2}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_LLC_SET_PARAMS(r3, 0x0, 0x4048080) (async) sendmsg$NFC_CMD_LLC_SET_PARAMS(r3, 0x0, 0x4048080) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}}, 0x840) (async) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}}, 0x840) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000040900010073797a3100000000090a00020073797a32000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001000000000000000000010000b8267a728c9ec5f2115ab9472b60eb192b2b015eb2e5a7303f03e3b45674cb691be59797c7503457417dbbbc3ea5c48d150bacee8e6fd3e6713927b21e2d8083b28a71920700bb28e7ed880b2ce99fc7903aedb5403dbb6c07746aeb7dfb6dfb89008695cd2cb0b47ae2a9515f3aaffd769fcf8568bb2fc48cc3a3c5c1fad3d437279b29810116262613a382c7552c8b7862f26be3a5515d504598ebc8d87ac3e1829e8bb8f6f53ade7de8e552948c958b9115ed01ff1b99fdb79d137ec82cba723ea29cf59e954559564128bed72cfee85454406a443a307b"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x65e5, 0x1795e, 0x40, &(0x7f00000003c0)={[0x6cfe]}, 0x8) (async) io_uring_enter(r0, 0x65e5, 0x1795e, 0x40, &(0x7f00000003c0)={[0x6cfe]}, 0x8) socket$inet(0x2, 0x80001, 0x84) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r3) (async) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r3) sendmsg$IEEE802154_LLSEC_ADD_KEY(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, r6, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40811}, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40483, 0x2c01}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x40850) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'bond0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="350d0000000000003000128008000100687372002400028008000200", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r9], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) (async) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="350d0000000000003000128008000100687372002400028008000200", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r9], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 394.971311ms ago: executing program 2 (id=1568): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x2}]}}, &(0x7f0000000540)=""/132, 0x26, 0x84, 0x1}, 0x20) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000040)='@', 0x1, 0x20004880, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 285.124358ms ago: executing program 4 (id=1570): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000002000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl(r1, 0x4048aec9, &(0x7f0000000300)="01") socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f00000000c0)={@remote}, 0x14) (async) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f00000000c0)={@remote}, 0x14) close(0x3) ioctl(r2, 0x4048aecb, &(0x7f0000001000)="070000000000000002000000ffffffff") (async) ioctl(r2, 0x4048aecb, &(0x7f0000001000)="070000000000000002000000ffffffff") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d2) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file0\x00'}) quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, r5, &(0x7f0000000240)) (async) quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, r5, &(0x7f0000000240)) r6 = open(&(0x7f0000000080)='./bus\x00', 0x78d000, 0x110) socket$nl_rdma(0x10, 0x3, 0x14) r7 = socket(0x1, 0x2, 0x0) getsockopt$sock_timeval(r7, 0x1, 0x49, 0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r6, {0x5b, 0x3ff}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r6, {0x5b, 0x3ff}}, './file0\x00'}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000300)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000340)=0x4) setsockopt$inet_sctp6_SCTP_MAXSEG(r8, 0x84, 0xd, &(0x7f0000000380)=@assoc_id=r9, 0x4) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) openat$cgroup_ro(r6, &(0x7f0000000140)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) (async) openat$cgroup_ro(r6, &(0x7f0000000140)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) 215.246692ms ago: executing program 3 (id=1571): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) sendmsg$inet6(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@hopopts={{0x18, 0x29, 0x36, {0xe5c1ba4d5b7fcc8}}}], 0x18}, 0x30000004) 214.914408ms ago: executing program 3 (id=1572): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000001c0)={0x2020, 0x0, 0x0}, 0x2020) stat(&(0x7f0000002200)='./dev/mapper/control\x00', &(0x7f0000002240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ATTR(r1, &(0x7f00000022c0)={0x78, 0xfffffffffffffff5, r2, {0x2, 0x9, 0x0, {0x4, 0x9, 0x2, 0x8, 0x6, 0x94, 0x8f, 0x9, 0xfffff001, 0xc000, 0x6, 0xee01, r3, 0x5f2d0, 0x5}}}, 0x78) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r4, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000200000000000000000000000000000000000000000000006d") ioctl$vim2m_VIDIOC_STREAMON(r4, 0x40045612, &(0x7f0000000140)) ioctl(r4, 0xc138fd09, &(0x7f0000000000)="0400000000000000000000006e0100003801000001") r5 = socket$kcm(0x2, 0x7, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[], 0x8a) 71.621677ms ago: executing program 3 (id=1573): r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r1, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0x2, 0x3, @mcast2}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000000)="6797f04cdb6f2c95f1c922adb0da67dc3bf442976fc916d4a50f5d1ae7453eddc232ca4c6ae6c56d", 0x28}], 0x1}, 0x30008b08) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f00000000c0)={0x29c, 0x7, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_USERDATA={0xaf, 0x7, 0x1, 0x0, "65a1335ae2506555e611b1813c9edae1c7b514f28bb384eb5d3df379e8a27c01613380a90993944e4bfc8223949bd58f1bd0e872f8adb1267ea5d0c3ac0f5af08bd92f9d2b7e5a38862fc23e16558e38d7b35c9294c3f498cd7257358cd36988a99a7bb8e677aa07128f5aa3536a401d877dac46869f7126d8b8b6a981ac7ae715731dec8ba12c6ff5260f2514d08b30ebead45c0a40ecd44a96ab844b9f8c4d7aa250801e84414fdbf759"}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x190, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0x64, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x18}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_MASQ_FLAGS={0x8}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x44}]}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x34, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8}, @NFTA_NG_OFFSET={0x8}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x6}]}}}, {0x54, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0xc5}]}}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}, {0x64, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x6}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x6}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x5}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x5}, @NFTA_XFRM_KEY={0x8}]}}}]}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}]}]}, 0x29c}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 71.464971ms ago: executing program 4 (id=1574): r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) writev(r0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000080)="538cd9", 0x3}], 0x2) 71.195081ms ago: executing program 3 (id=1575): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x4e0, 0x378, 0x180, 0x0, 0x2e0, 0x180, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, 0x0, {[{{@uncond, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@remote, [], @ipv6=@local, [], @ipv4=@private, [], @ipv6=@private1}}}, @common=@ttl={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x218}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}}]}, @ECN={0x28}}, {{@ip={@rand_addr, @dev, 0x0, 0x0, 'syzkaller0\x00', 'macvlan1\x00'}, 0x0, 0x70, 0x98, 0x0, {0xe002000000000000}}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x540) 5.454273ms ago: executing program 4 (id=1576): r0 = socket(0x10, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@id={0x1e, 0x3, 0x0, {0x4e21, 0x1}}, 0x10) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x9, 0xfffffffe, 0x0, 0x2}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x101080, 0x0) write(r2, &(0x7f0000000180)='add 2', 0x5) r3 = userfaultfd(0x801) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000001c0)=0x40) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x7e) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000080)={{&(0x7f000085d000/0x3000)=nil, 0x3000}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r5, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r5, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) read$FUSE(r1, &(0x7f00000005c0)={0x2020}, 0x2020) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff80700000001000000000000000500080002000000", 0x24) r6 = socket$igmp6(0xa, 0x3, 0x2) ioctl$KVM_RUN(r1, 0xae80, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x4, &(0x7f00000001c0)={0x7ff, {{0xa, 0x4e22, 0x7fffffff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4000800}}, {{0xa, 0x4e22, 0x4d14, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}}}, 0x5a) brk(0x4) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f000000e480), 0x0, 0x0) 1.50024ms ago: executing program 3 (id=1577): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, 0x0, 0x0) setresuid(0xee01, 0xee01, 0x0) setresuid(0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, 0x0}}], 0x1, 0x0) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000020180)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x1a, &(0x7f0000000300)={@remote, @empty, @val={@val={0x88a8, 0x2, 0x0, 0x3}, {0x8100, 0x6, 0x1, 0x3}}, {@llc_tr={0x11, {@llc={0x4, 0x80, "339d"}}}}}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @rand_addr=0x64010101}, 0x10) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) 222.456µs ago: executing program 3 (id=1578): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x5, 0x2) write(r0, &(0x7f0000000300)="abb575ff8f794acbfc9b55a30a459b034129669322381a5c856076b35bdf039a2d218e7e378ca2ec91eefde8bb59814143a8117a116d4c1afa9ed6889dfb4c3056deb8421d4cb8556005e26d", 0x4c) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) socket$inet6(0xa, 0x3, 0x8000000003c) bind$tipc(r1, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x41}}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/target/core\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/target/core/rd_mcp_0\x00', 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/tcm.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/configs\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/target/usb_gadget/naa.6001405123456789\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/nexus\x00', 0x2, 0x0) write(r2, &(0x7f0000000940)='naa.6', 0x5) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="8c45040000000000140012800900010076657468000000000400028008001300", @ANYRES32=0x0, @ANYBLOB="1ac8d8ff4c43f42b4bb4d29b809b123ec5c1ec3629b85f45ce01a4c2a452e6b929fb10e88fd01463a00e482498a4fa1bf145a9dbcb65dfef5c533d50393856fe3e86e36aa57bee6e6bcda737b264187f35eec662be27a7a3597d8b80c4946a62634ef67480e44d56800e26b1a21cd41e1a95bfaefa5985b0157a"], 0x3c}, 0x1, 0x0, 0x0, 0x4015}, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f00000002c0)=0x1) close_range(r0, r0, 0x0) 0s ago: executing program 4 (id=1579): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000a0)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c00000013000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000005c001a8006000000010000005000058024000180080001000100000008000200000000000800030000ffff0008000400", @ANYRES32=r1, @ANYBLOB="2800038008000100010000100a0002007a112251445500000800030000000000080004"], 0x7c}, 0x1, 0x300}, 0x0) kernel console output (not intermixed with test programs): [ T8985] ? __pfx_sock_has_perm+0x10/0x10 [ 125.393249][ T8985] ? __might_fault+0xc5/0x140 [ 125.393264][ T8985] ? __pfx_sctp_sendmsg+0x10/0x10 [ 125.393278][ T8985] inet_sendmsg+0x11c/0x140 [ 125.393295][ T8985] __sys_sendto+0x453/0x4e0 [ 125.393308][ T8985] ? __pfx_inet_sendmsg+0x10/0x10 [ 125.393325][ T8985] ? __pfx___sys_sendto+0x10/0x10 [ 125.393342][ T8985] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 125.393364][ T8985] ? ksys_write+0x1ac/0x250 [ 125.393376][ T8985] ? __pfx_ksys_write+0x10/0x10 [ 125.393389][ T8985] __x64_sys_sendto+0xe0/0x1c0 [ 125.393402][ T8985] ? do_syscall_64+0x90/0x870 [ 125.393416][ T8985] ? lockdep_hardirqs_on+0x78/0x100 [ 125.393431][ T8985] do_syscall_64+0x115/0x870 [ 125.393445][ T8985] ? clear_bhb_loop+0x70/0xc0 [ 125.393460][ T8985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.393472][ T8985] RIP: 0033:0x7fe5e279e0d9 [ 125.393483][ T8985] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.393494][ T8985] RSP: 002b:00007fe5e3653028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 125.393514][ T8985] RAX: ffffffffffffffda RBX: 00007fe5e2a25fa0 RCX: 00007fe5e279e0d9 [ 125.393521][ T8985] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 125.393527][ T8985] RBP: 00007fe5e3653090 R08: 0000200000000080 R09: 0000000000000010 [ 125.393534][ T8985] R10: 0000000020004880 R11: 0000000000000246 R12: 0000000000000002 [ 125.393541][ T8985] R13: 00007fe5e2a26038 R14: 00007fe5e2a25fa0 R15: 00007ffe4d809528 [ 125.393555][ T8985] [ 125.636530][ T9002] device-mapper: table: 248:0: zero-length target [ 125.638640][ T9002] device-mapper: ioctl: error adding target to table [ 125.831344][ T9022] syz_tun: entered allmulticast mode [ 125.835268][ T9021] syz_tun: left allmulticast mode [ 125.921432][ T9029] Cannot find add_set index 0 as target [ 125.926337][ T5734] Bluetooth: hci3: command 0x1003 tx timeout [ 125.927945][ T5738] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 125.961608][ T9035] FAULT_INJECTION: forcing a failure. [ 125.961608][ T9035] name failslab, interval 1, probability 0, space 0, times 0 [ 125.964954][ T9034] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1032'. [ 125.968670][ T9035] CPU: 2 UID: 0 PID: 9035 Comm: syz.4.1031 Tainted: G L syzkaller #0 PREEMPT(full) [ 125.968689][ T9035] Tainted: [L]=SOFTLOCKUP [ 125.968693][ T9035] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 125.968700][ T9035] Call Trace: [ 125.968704][ T9035] [ 125.968709][ T9035] dump_stack_lvl+0x100/0x190 [ 125.968730][ T9035] should_fail_ex.cold+0x5/0xa [ 125.968746][ T9035] should_failslab+0xc2/0x120 [ 125.968763][ T9035] __kmalloc_cache_noprof+0x91/0x6c0 [ 125.968776][ T9035] ? sctp_add_bind_addr+0xae/0x3e0 [ 125.968794][ T9035] sctp_add_bind_addr+0xae/0x3e0 [ 125.968812][ T9035] sctp_copy_local_addr_list+0x349/0x550 [ 125.968832][ T9035] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 125.968852][ T9035] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 125.968871][ T9035] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 125.968888][ T9035] sctp_bind_addr_copy+0xe0/0x530 [ 125.968907][ T9035] sctp_connect_new_asoc+0x1c9/0x770 [ 125.968921][ T9035] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 125.968940][ T9035] sctp_sendmsg+0x1743/0x22e0 [ 125.968956][ T9035] ? __pfx_sctp_sendmsg+0x10/0x10 [ 125.968968][ T9035] ? sock_has_perm+0x25a/0x2f0 [ 125.968984][ T9035] ? __pfx_sock_has_perm+0x10/0x10 [ 125.969004][ T9035] ? __might_fault+0xc5/0x140 [ 125.969024][ T9035] ? __pfx_sctp_sendmsg+0x10/0x10 [ 125.969037][ T9035] inet_sendmsg+0x11c/0x140 [ 125.969055][ T9035] __sys_sendto+0x453/0x4e0 [ 125.969068][ T9035] ? __pfx_inet_sendmsg+0x10/0x10 [ 125.969085][ T9035] ? __pfx___sys_sendto+0x10/0x10 [ 125.969102][ T9035] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 125.969124][ T9035] ? ksys_write+0x1ac/0x250 [ 125.969135][ T9035] ? __pfx_ksys_write+0x10/0x10 [ 125.969147][ T9035] __x64_sys_sendto+0xe0/0x1c0 [ 125.969160][ T9035] ? do_syscall_64+0x90/0x870 [ 125.969175][ T9035] ? lockdep_hardirqs_on+0x78/0x100 [ 125.969190][ T9035] do_syscall_64+0x115/0x870 [ 125.969204][ T9035] ? clear_bhb_loop+0x70/0xc0 [ 125.969218][ T9035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.969230][ T9035] RIP: 0033:0x7f8e99b9e0d9 [ 125.969240][ T9035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.969251][ T9035] RSP: 002b:00007f8e9a9a8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 125.969263][ T9035] RAX: ffffffffffffffda RBX: 00007f8e99e25fa0 RCX: 00007f8e99b9e0d9 [ 125.969271][ T9035] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 125.969277][ T9035] RBP: 00007f8e9a9a8090 R08: 0000200000000080 R09: 0000000000000010 [ 125.969284][ T9035] R10: 0000000020004880 R11: 0000000000000246 R12: 0000000000000002 [ 125.969290][ T9035] R13: 00007f8e99e26038 R14: 00007f8e99e25fa0 R15: 00007fff11014e38 [ 125.969304][ T9035] [ 126.095493][ T9034] vlan2: entered promiscuous mode [ 126.097304][ T9034] bridge0: entered promiscuous mode [ 126.239739][ T9050] Unsupported ieee802154 address type: 0 [ 126.315136][ T9059] syz_tun: entered allmulticast mode [ 126.317298][ T9057] device-mapper: table: 248:0: zero-length target [ 126.319331][ T9057] device-mapper: ioctl: error adding target to table [ 126.321253][ T9058] syz_tun: left allmulticast mode [ 126.506253][ T9071] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1040'. [ 126.584997][ T9077] Cannot find add_set index 0 as target [ 126.628731][ T9080] FAULT_INJECTION: forcing a failure. [ 126.628731][ T9080] name failslab, interval 1, probability 0, space 0, times 0 [ 126.634242][ T9080] CPU: 3 UID: 0 PID: 9080 Comm: syz.2.1043 Tainted: G L syzkaller #0 PREEMPT(full) [ 126.634272][ T9080] Tainted: [L]=SOFTLOCKUP [ 126.634278][ T9080] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 126.634290][ T9080] Call Trace: [ 126.634312][ T9080] [ 126.634322][ T9080] dump_stack_lvl+0x100/0x190 [ 126.634406][ T9080] should_fail_ex.cold+0x5/0xa [ 126.634448][ T9080] should_failslab+0xc2/0x120 [ 126.634490][ T9080] __kmalloc_cache_noprof+0x91/0x6c0 [ 126.634513][ T9080] ? sctp_add_bind_addr+0xae/0x3e0 [ 126.634548][ T9080] sctp_add_bind_addr+0xae/0x3e0 [ 126.634575][ T9080] sctp_copy_local_addr_list+0x349/0x550 [ 126.634602][ T9080] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 126.634642][ T9080] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 126.634672][ T9080] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 126.634706][ T9080] sctp_bind_addr_copy+0xe0/0x530 [ 126.634738][ T9080] sctp_connect_new_asoc+0x1c9/0x770 [ 126.634762][ T9080] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 126.634794][ T9080] sctp_sendmsg+0x1743/0x22e0 [ 126.634822][ T9080] ? __pfx_sctp_sendmsg+0x10/0x10 [ 126.634841][ T9080] ? sock_has_perm+0x25a/0x2f0 [ 126.634921][ T9080] ? __pfx_sock_has_perm+0x10/0x10 [ 126.634953][ T9080] ? __might_fault+0xc5/0x140 [ 126.634981][ T9080] ? __pfx_sctp_sendmsg+0x10/0x10 [ 126.635003][ T9080] inet_sendmsg+0x11c/0x140 [ 126.635031][ T9080] __sys_sendto+0x453/0x4e0 [ 126.635058][ T9080] ? __pfx_inet_sendmsg+0x10/0x10 [ 126.635085][ T9080] ? __pfx___sys_sendto+0x10/0x10 [ 126.635114][ T9080] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 126.635151][ T9080] ? ksys_write+0x1ac/0x250 [ 126.635171][ T9080] ? __pfx_ksys_write+0x10/0x10 [ 126.635189][ T9080] __x64_sys_sendto+0xe0/0x1c0 [ 126.635210][ T9080] ? do_syscall_64+0x90/0x870 [ 126.635234][ T9080] ? lockdep_hardirqs_on+0x78/0x100 [ 126.635257][ T9080] do_syscall_64+0x115/0x870 [ 126.635280][ T9080] ? clear_bhb_loop+0x70/0xc0 [ 126.635303][ T9080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.635322][ T9080] RIP: 0033:0x7fe5e279e0d9 [ 126.635339][ T9080] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.635357][ T9080] RSP: 002b:00007fe5e3653028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 126.635387][ T9080] RAX: ffffffffffffffda RBX: 00007fe5e2a25fa0 RCX: 00007fe5e279e0d9 [ 126.635399][ T9080] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 126.635410][ T9080] RBP: 00007fe5e3653090 R08: 0000200000000080 R09: 0000000000000010 [ 126.635423][ T9080] R10: 0000000020004880 R11: 0000000000000246 R12: 0000000000000002 [ 126.635433][ T9080] R13: 00007fe5e2a26038 R14: 00007fe5e2a25fa0 R15: 00007ffe4d809528 [ 126.635459][ T9080] [ 126.759875][ T9083] < [ 126.827266][ T9087] syz_tun: entered allmulticast mode [ 126.832824][ T9086] syz_tun: left allmulticast mode [ 126.919291][ T9095] device-mapper: table: 248:0: zero-length target [ 126.922267][ T9095] device-mapper: ioctl: error adding target to table [ 126.936544][ T9099] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1050'. [ 126.945526][ T9099] bond0: entered promiscuous mode [ 126.951206][ T9099] bond_slave_0: entered promiscuous mode [ 126.953997][ T9099] bond_slave_1: entered promiscuous mode [ 126.956837][ T9102] Cannot find add_set index 0 as target [ 126.958354][ T9099] gretap0: entered promiscuous mode [ 126.964775][ T9099] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 126.969480][ T9099] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 126.981522][ T9099] hsr1: entered promiscuous mode [ 127.017411][ T9107] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1054'. [ 127.095761][ T9110] FAULT_INJECTION: forcing a failure. [ 127.095761][ T9110] name failslab, interval 1, probability 0, space 0, times 0 [ 127.099885][ T9110] CPU: 2 UID: 0 PID: 9110 Comm: syz.2.1055 Tainted: G L syzkaller #0 PREEMPT(full) [ 127.099905][ T9110] Tainted: [L]=SOFTLOCKUP [ 127.099908][ T9110] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 127.099915][ T9110] Call Trace: [ 127.099921][ T9110] [ 127.099927][ T9110] dump_stack_lvl+0x100/0x190 [ 127.099949][ T9110] should_fail_ex.cold+0x5/0xa [ 127.099965][ T9110] should_failslab+0xc2/0x120 [ 127.099982][ T9110] __kmalloc_cache_noprof+0x91/0x6c0 [ 127.099995][ T9110] ? sctp_add_bind_addr+0xae/0x3e0 [ 127.100022][ T9110] sctp_add_bind_addr+0xae/0x3e0 [ 127.100049][ T9110] sctp_copy_local_addr_list+0x349/0x550 [ 127.100081][ T9110] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 127.100111][ T9110] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 127.100130][ T9110] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 127.100147][ T9110] sctp_bind_addr_copy+0xe0/0x530 [ 127.100166][ T9110] sctp_connect_new_asoc+0x1c9/0x770 [ 127.100181][ T9110] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 127.100201][ T9110] sctp_sendmsg+0x1743/0x22e0 [ 127.100218][ T9110] ? __pfx_sctp_sendmsg+0x10/0x10 [ 127.100230][ T9110] ? sock_has_perm+0x25a/0x2f0 [ 127.100246][ T9110] ? __pfx_sock_has_perm+0x10/0x10 [ 127.100265][ T9110] ? __might_fault+0xc5/0x140 [ 127.100280][ T9110] ? __pfx_sctp_sendmsg+0x10/0x10 [ 127.100294][ T9110] inet_sendmsg+0x11c/0x140 [ 127.100311][ T9110] __sys_sendto+0x453/0x4e0 [ 127.100324][ T9110] ? __pfx_inet_sendmsg+0x10/0x10 [ 127.100341][ T9110] ? __pfx___sys_sendto+0x10/0x10 [ 127.100358][ T9110] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 127.100380][ T9110] ? ksys_write+0x1ac/0x250 [ 127.100390][ T9110] ? __pfx_ksys_write+0x10/0x10 [ 127.100403][ T9110] __x64_sys_sendto+0xe0/0x1c0 [ 127.100416][ T9110] ? do_syscall_64+0x90/0x870 [ 127.100430][ T9110] ? lockdep_hardirqs_on+0x78/0x100 [ 127.100445][ T9110] do_syscall_64+0x115/0x870 [ 127.100460][ T9110] ? clear_bhb_loop+0x70/0xc0 [ 127.100474][ T9110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.100486][ T9110] RIP: 0033:0x7fe5e279e0d9 [ 127.100497][ T9110] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.100508][ T9110] RSP: 002b:00007fe5e3653028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 127.100521][ T9110] RAX: ffffffffffffffda RBX: 00007fe5e2a25fa0 RCX: 00007fe5e279e0d9 [ 127.100528][ T9110] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 127.100535][ T9110] RBP: 00007fe5e3653090 R08: 0000200000000080 R09: 0000000000000010 [ 127.100541][ T9110] R10: 0000000020004880 R11: 0000000000000246 R12: 0000000000000002 [ 127.100548][ T9110] R13: 00007fe5e2a26038 R14: 00007fe5e2a25fa0 R15: 00007ffe4d809528 [ 127.100563][ T9110] [ 127.380727][ T9124] syz_tun: entered allmulticast mode [ 127.385804][ T9123] syz_tun: left allmulticast mode [ 127.477423][ T9132] Cannot find add_set index 0 as target [ 127.534912][ T9135] device-mapper: table: 248:0: zero-length target [ 127.540309][ T9135] device-mapper: ioctl: error adding target to table [ 127.754421][ T9149] FAULT_INJECTION: forcing a failure. [ 127.754421][ T9149] name failslab, interval 1, probability 0, space 0, times 0 [ 127.760569][ T9149] CPU: 1 UID: 0 PID: 9149 Comm: syz.0.1067 Tainted: G L syzkaller #0 PREEMPT(full) [ 127.760599][ T9149] Tainted: [L]=SOFTLOCKUP [ 127.760605][ T9149] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 127.760623][ T9149] Call Trace: [ 127.760629][ T9149] [ 127.760636][ T9149] dump_stack_lvl+0x100/0x190 [ 127.760667][ T9149] should_fail_ex.cold+0x5/0xa [ 127.760690][ T9149] should_failslab+0xc2/0x120 [ 127.760714][ T9149] __kmalloc_cache_noprof+0x91/0x6c0 [ 127.760734][ T9149] ? sctp_add_bind_addr+0xae/0x3e0 [ 127.760761][ T9149] sctp_add_bind_addr+0xae/0x3e0 [ 127.760787][ T9149] sctp_copy_local_addr_list+0x349/0x550 [ 127.760817][ T9149] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 127.760844][ T9149] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 127.760873][ T9149] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 127.760898][ T9149] sctp_bind_addr_copy+0xe0/0x530 [ 127.760928][ T9149] sctp_connect_new_asoc+0x1c9/0x770 [ 127.760950][ T9149] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 127.760978][ T9149] sctp_sendmsg+0x1743/0x22e0 [ 127.761004][ T9149] ? __pfx_sctp_sendmsg+0x10/0x10 [ 127.761024][ T9149] ? sock_has_perm+0x25a/0x2f0 [ 127.761048][ T9149] ? __pfx_sock_has_perm+0x10/0x10 [ 127.761079][ T9149] ? __might_fault+0xc5/0x140 [ 127.761104][ T9149] ? __pfx_sctp_sendmsg+0x10/0x10 [ 127.761124][ T9149] inet_sendmsg+0x11c/0x140 [ 127.761149][ T9149] __sys_sendto+0x453/0x4e0 [ 127.761169][ T9149] ? __pfx_inet_sendmsg+0x10/0x10 [ 127.761194][ T9149] ? __pfx___sys_sendto+0x10/0x10 [ 127.761222][ T9149] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 127.761257][ T9149] ? ksys_write+0x1ac/0x250 [ 127.761295][ T9149] ? __pfx_ksys_write+0x10/0x10 [ 127.761318][ T9149] __x64_sys_sendto+0xe0/0x1c0 [ 127.761337][ T9149] ? do_syscall_64+0x90/0x870 [ 127.761359][ T9149] ? lockdep_hardirqs_on+0x78/0x100 [ 127.761382][ T9149] do_syscall_64+0x115/0x870 [ 127.761403][ T9149] ? clear_bhb_loop+0x70/0xc0 [ 127.761425][ T9149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.761444][ T9149] RIP: 0033:0x7f42fd39e0d9 [ 127.761462][ T9149] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.761477][ T9149] RSP: 002b:00007f42fe1b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 127.761497][ T9149] RAX: ffffffffffffffda RBX: 00007f42fd625fa0 RCX: 00007f42fd39e0d9 [ 127.761508][ T9149] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 127.761518][ T9149] RBP: 00007f42fe1b7090 R08: 0000200000000080 R09: 0000000000000010 [ 127.761529][ T9149] R10: 0000000020004880 R11: 0000000000000246 R12: 0000000000000002 [ 127.761540][ T9149] R13: 00007f42fd626038 R14: 00007f42fd625fa0 R15: 00007ffd818d0b68 [ 127.761563][ T9149] [ 127.894688][ T9153] batadv_slave_1: entered allmulticast mode [ 127.898566][ T9152] batadv_slave_1: left allmulticast mode [ 127.929894][ T9160] Cannot find add_set index 0 as target [ 128.020032][ T9165] ima: policy update failed [ 128.105365][ T9173] misc userio: No port type given on /dev/userio [ 128.176854][ T9179] netlink: 'syz.0.1078': attribute type 1 has an invalid length. [ 128.215174][ T9179] bond4: entered promiscuous mode [ 128.217588][ T9179] bond4: entered allmulticast mode [ 128.220322][ T9179] 8021q: adding VLAN 0 to HW filter on device bond4 [ 128.229243][ T9179] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1078'. [ 128.230920][ T9173] block device autoloading is deprecated and will be removed. [ 128.288170][ T43] kauditd_printk_skb: 18457 callbacks suppressed [ 128.288192][ T43] audit: type=1400 audit(1786537431.558:21808): avc: denied { getattr } for pid=9185 comm="syz.4.1080" path="pid:[4026532878]" dev="nsfs" ino=4026532878 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 128.324901][ T9190] syz_tun: entered allmulticast mode [ 128.346262][ T9190] hsr1: left promiscuous mode [ 128.356915][ T9190] bond4: left promiscuous mode [ 128.359070][ T9190] bond4: left allmulticast mode [ 128.364098][ T9189] syz_tun: left allmulticast mode [ 128.416451][ T9195] FAULT_INJECTION: forcing a failure. [ 128.416451][ T9195] name failslab, interval 1, probability 0, space 0, times 0 [ 128.429226][ T9195] CPU: 3 UID: 0 PID: 9195 Comm: syz.0.1083 Tainted: G L syzkaller #0 PREEMPT(full) [ 128.429248][ T9195] Tainted: [L]=SOFTLOCKUP [ 128.429252][ T9195] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 128.429260][ T9195] Call Trace: [ 128.429264][ T9195] [ 128.429269][ T9195] dump_stack_lvl+0x100/0x190 [ 128.429290][ T9195] should_fail_ex.cold+0x5/0xa [ 128.429306][ T9195] should_failslab+0xc2/0x120 [ 128.429322][ T9195] __kmalloc_cache_noprof+0x91/0x6c0 [ 128.429336][ T9195] ? sctp_add_bind_addr+0xae/0x3e0 [ 128.429354][ T9195] sctp_add_bind_addr+0xae/0x3e0 [ 128.429372][ T9195] sctp_copy_local_addr_list+0x349/0x550 [ 128.429393][ T9195] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 128.429413][ T9195] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 128.429432][ T9195] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 128.429448][ T9195] sctp_bind_addr_copy+0xe0/0x530 [ 128.429467][ T9195] sctp_connect_new_asoc+0x1c9/0x770 [ 128.429482][ T9195] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 128.429501][ T9195] sctp_sendmsg+0x1743/0x22e0 [ 128.429517][ T9195] ? __pfx_sctp_sendmsg+0x10/0x10 [ 128.429529][ T9195] ? sock_has_perm+0x25a/0x2f0 [ 128.429545][ T9195] ? __pfx_sock_has_perm+0x10/0x10 [ 128.429565][ T9195] ? __might_fault+0xc5/0x140 [ 128.429581][ T9195] ? __pfx_sctp_sendmsg+0x10/0x10 [ 128.429594][ T9195] inet_sendmsg+0x11c/0x140 [ 128.429612][ T9195] __sys_sendto+0x453/0x4e0 [ 128.429629][ T9195] ? __pfx_inet_sendmsg+0x10/0x10 [ 128.429646][ T9195] ? __pfx___sys_sendto+0x10/0x10 [ 128.429663][ T9195] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 128.429685][ T9195] ? ksys_write+0x1ac/0x250 [ 128.429696][ T9195] ? __pfx_ksys_write+0x10/0x10 [ 128.429708][ T9195] __x64_sys_sendto+0xe0/0x1c0 [ 128.429721][ T9195] ? do_syscall_64+0x90/0x870 [ 128.429736][ T9195] ? lockdep_hardirqs_on+0x78/0x100 [ 128.429751][ T9195] do_syscall_64+0x115/0x870 [ 128.429765][ T9195] ? clear_bhb_loop+0x70/0xc0 [ 128.429779][ T9195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.429790][ T9195] RIP: 0033:0x7f42fd39e0d9 [ 128.429801][ T9195] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.429813][ T9195] RSP: 002b:00007f42fe1b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 128.429825][ T9195] RAX: ffffffffffffffda RBX: 00007f42fd625fa0 RCX: 00007f42fd39e0d9 [ 128.429832][ T9195] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 128.429839][ T9195] RBP: 00007f42fe1b7090 R08: 0000200000000080 R09: 0000000000000010 [ 128.429846][ T9195] R10: 0000000020004880 R11: 0000000000000246 R12: 0000000000000002 [ 128.429852][ T9195] R13: 00007f42fd626038 R14: 00007f42fd625fa0 R15: 00007ffd818d0b68 [ 128.429866][ T9195] [ 128.538231][ T9202] netlink: 'syz.3.1085': attribute type 2 has an invalid length. [ 128.539387][ T43] audit: type=1400 audit(1786537431.808:21809): avc: denied { setattr } for pid=9199 comm="syz.0.1086" path="socket:[31586]" dev="sockfs" ino=31586 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 128.540796][ T9202] netlink: 46 bytes leftover after parsing attributes in process `syz.3.1085'. [ 128.587997][ T43] audit: type=1400 audit(1786537431.858:21810): avc: denied { kexec_image_load } for pid=9205 comm="syz.2.1088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 128.643991][ T9214] syz_tun: entered allmulticast mode [ 128.657169][ T9213] syz_tun: left allmulticast mode [ 128.696943][ T9222] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1094'. [ 128.708874][ T9222] Device name not specified. [ 128.708874][ T9222] [ 128.711373][ T9222] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1094'. [ 128.734388][ T9225] FAULT_INJECTION: forcing a failure. [ 128.734388][ T9225] name failslab, interval 1, probability 0, space 0, times 0 [ 128.738642][ T9225] CPU: 2 UID: 0 PID: 9225 Comm: syz.2.1095 Tainted: G L syzkaller #0 PREEMPT(full) [ 128.738663][ T9225] Tainted: [L]=SOFTLOCKUP [ 128.738667][ T9225] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 128.738687][ T9225] Call Trace: [ 128.738695][ T9225] [ 128.738702][ T9225] dump_stack_lvl+0x100/0x190 [ 128.738729][ T9225] should_fail_ex.cold+0x5/0xa [ 128.738753][ T9225] should_failslab+0xc2/0x120 [ 128.738778][ T9225] __kmalloc_cache_noprof+0x91/0x6c0 [ 128.738797][ T9225] ? sctp_add_bind_addr+0xae/0x3e0 [ 128.738824][ T9225] sctp_add_bind_addr+0xae/0x3e0 [ 128.738849][ T9225] sctp_copy_local_addr_list+0x349/0x550 [ 128.738903][ T9225] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 128.738933][ T9225] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 128.738962][ T9225] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 128.738987][ T9225] sctp_bind_addr_copy+0xe0/0x530 [ 128.739017][ T9225] sctp_connect_new_asoc+0x1c9/0x770 [ 128.739039][ T9225] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 128.739076][ T9225] sctp_sendmsg+0x1743/0x22e0 [ 128.739105][ T9225] ? __pfx_sctp_sendmsg+0x10/0x10 [ 128.739122][ T9225] ? sock_has_perm+0x25a/0x2f0 [ 128.739149][ T9225] ? __pfx_sock_has_perm+0x10/0x10 [ 128.739179][ T9225] ? __might_fault+0xc5/0x140 [ 128.739204][ T9225] ? __pfx_sctp_sendmsg+0x10/0x10 [ 128.739228][ T9225] inet_sendmsg+0x11c/0x140 [ 128.739255][ T9225] __sys_sendto+0x453/0x4e0 [ 128.739274][ T9225] ? __pfx_inet_sendmsg+0x10/0x10 [ 128.739298][ T9225] ? __pfx___sys_sendto+0x10/0x10 [ 128.739324][ T9225] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 128.739360][ T9225] ? ksys_write+0x1ac/0x250 [ 128.739376][ T9225] ? __pfx_ksys_write+0x10/0x10 [ 128.739395][ T9225] __x64_sys_sendto+0xe0/0x1c0 [ 128.739409][ T9225] ? do_syscall_64+0x90/0x870 [ 128.739423][ T9225] ? lockdep_hardirqs_on+0x78/0x100 [ 128.739438][ T9225] do_syscall_64+0x115/0x870 [ 128.739453][ T9225] ? clear_bhb_loop+0x70/0xc0 [ 128.739467][ T9225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.739479][ T9225] RIP: 0033:0x7fe5e279e0d9 [ 128.739489][ T9225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.739500][ T9225] RSP: 002b:00007fe5e3653028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 128.739513][ T9225] RAX: ffffffffffffffda RBX: 00007fe5e2a25fa0 RCX: 00007fe5e279e0d9 [ 128.739520][ T9225] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 128.739526][ T9225] RBP: 00007fe5e3653090 R08: 0000200000000080 R09: 0000000000000010 [ 128.739533][ T9225] R10: 0000000020004880 R11: 0000000000000246 R12: 0000000000000002 [ 128.739540][ T9225] R13: 00007fe5e2a26038 R14: 00007fe5e2a25fa0 R15: 00007ffe4d809528 [ 128.739555][ T9225] [ 128.849462][ T43] audit: type=1400 audit(1786537432.118:21811): avc: denied { write } for pid=9226 comm="syz.3.1096" name="/" dev="9p" ino=77617125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 128.889404][ T43] audit: type=1400 audit(1786537432.158:21812): avc: denied { load_policy } for pid=9232 comm="syz.2.1097" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 128.890026][ T9233] SELinux: policydb version 1402900228 does not match my version range 15-35 [ 128.896954][ T9235] Cannot find add_set index 0 as target [ 128.904484][ T9233] SELinux: failed to load policy [ 128.931987][ T43] audit: type=1400 audit(1786537432.188:21813): avc: denied { execute } for pid=9232 comm="syz.2.1097" path="/file1" dev="ramfs" ino=32403 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 128.947332][ T43] audit: type=1400 audit(1786537432.218:21814): avc: denied { read } for pid=9237 comm="syz.4.1099" dev="nsfs" ino=4026532865 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 128.954807][ T43] audit: type=1400 audit(1786537432.218:21815): avc: denied { open } for pid=9237 comm="syz.4.1099" path="net:[4026532865]" dev="nsfs" ino=4026532865 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 128.963051][ T9240] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 128.992064][ T43] audit: type=1400 audit(1786537432.258:21816): avc: denied { bind } for pid=9237 comm="syz.4.1099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 128.996543][ T9244] hfs: can't find a HFS filesystem on dev sr0 [ 129.014699][ T9244] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 129.026291][ T9247] syz_tun: entered allmulticast mode [ 129.038624][ T9244] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1101'. [ 129.064025][ T43] audit: type=1400 audit(1786537432.328:21817): avc: denied { mmap_zero } for pid=9248 comm="syz.0.1103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 129.106605][ T9257] FAULT_INJECTION: forcing a failure. [ 129.106605][ T9257] name failslab, interval 1, probability 0, space 0, times 0 [ 129.127948][ T9257] CPU: 2 UID: 0 PID: 9257 Comm: syz.4.1106 Tainted: G L syzkaller #0 PREEMPT(full) [ 129.127981][ T9257] Tainted: [L]=SOFTLOCKUP [ 129.127987][ T9257] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 129.127999][ T9257] Call Trace: [ 129.128006][ T9257] [ 129.128014][ T9257] dump_stack_lvl+0x100/0x190 [ 129.128046][ T9257] should_fail_ex.cold+0x5/0xa [ 129.128071][ T9257] should_failslab+0xc2/0x120 [ 129.128098][ T9257] __kmalloc_noprof+0xfc/0x820 [ 129.128118][ T9257] ? rcu_is_watching+0x12/0xc0 [ 129.128147][ T9257] ? tomoyo_realpath_from_path+0xb6/0x690 [ 129.128182][ T9257] tomoyo_realpath_from_path+0xb6/0x690 [ 129.128205][ T9257] tomoyo_path_number_perm+0x23c/0x580 [ 129.128231][ T9257] ? tomoyo_path_number_perm+0x22e/0x580 [ 129.128259][ T9257] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 129.128329][ T9257] ? find_held_lock+0x2b/0x80 [ 129.128350][ T9257] ? __fget_files+0x215/0x3d0 [ 129.128370][ T9257] ? hook_file_ioctl_common+0x140/0x440 [ 129.128393][ T9257] ? __fget_files+0x215/0x3d0 [ 129.128417][ T9257] ? __fget_files+0x21f/0x3d0 [ 129.128442][ T9257] security_file_ioctl+0xd3/0x230 [ 129.128497][ T9257] __x64_sys_ioctl+0xb7/0x210 [ 129.128536][ T9257] do_syscall_64+0x115/0x870 [ 129.128559][ T9257] ? clear_bhb_loop+0x70/0xc0 [ 129.128588][ T9257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.128606][ T9257] RIP: 0033:0x7f8e99b9e0d9 [ 129.128621][ T9257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.128638][ T9257] RSP: 002b:00007f8e9a9a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 129.128658][ T9257] RAX: ffffffffffffffda RBX: 00007f8e99e25fa0 RCX: 00007f8e99b9e0d9 [ 129.128669][ T9257] RDX: 00002000000003c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 129.128680][ T9257] RBP: 00007f8e9a9a8090 R08: 0000000000000000 R09: 0000000000000000 [ 129.128693][ T9257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.128705][ T9257] R13: 00007f8e99e26038 R14: 00007f8e99e25fa0 R15: 00007fff11014e38 [ 129.128732][ T9257] [ 129.128772][ T9257] ERROR: Out of memory at tomoyo_realpath_from_path. [ 129.238811][ T9265] FAULT_INJECTION: forcing a failure. [ 129.238811][ T9265] name failslab, interval 1, probability 0, space 0, times 0 [ 129.244321][ T9265] CPU: 1 UID: 0 PID: 9265 Comm: syz.2.1110 Tainted: G L syzkaller #0 PREEMPT(full) [ 129.244349][ T9265] Tainted: [L]=SOFTLOCKUP [ 129.244356][ T9265] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 129.244367][ T9265] Call Trace: [ 129.244376][ T9265] [ 129.244384][ T9265] dump_stack_lvl+0x100/0x190 [ 129.244417][ T9265] should_fail_ex.cold+0x5/0xa [ 129.244443][ T9265] should_failslab+0xc2/0x120 [ 129.244470][ T9265] __kmalloc_cache_noprof+0x91/0x6c0 [ 129.244491][ T9265] ? sctp_add_bind_addr+0xae/0x3e0 [ 129.244522][ T9265] sctp_add_bind_addr+0xae/0x3e0 [ 129.244551][ T9265] sctp_copy_local_addr_list+0x349/0x550 [ 129.244584][ T9265] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 129.244613][ T9265] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 129.244642][ T9265] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 129.244669][ T9265] sctp_bind_addr_copy+0xe0/0x530 [ 129.244699][ T9265] sctp_connect_new_asoc+0x1c9/0x770 [ 129.244721][ T9265] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 129.244753][ T9265] sctp_sendmsg+0x1743/0x22e0 [ 129.244782][ T9265] ? __pfx_sctp_sendmsg+0x10/0x10 [ 129.244802][ T9265] ? sock_has_perm+0x25a/0x2f0 [ 129.244827][ T9265] ? __pfx_sock_has_perm+0x10/0x10 [ 129.244860][ T9265] ? __might_fault+0xc5/0x140 [ 129.244885][ T9265] ? __pfx_sctp_sendmsg+0x10/0x10 [ 129.244907][ T9265] inet_sendmsg+0x11c/0x140 [ 129.244936][ T9265] __sys_sendto+0x453/0x4e0 [ 129.244957][ T9265] ? __pfx_inet_sendmsg+0x10/0x10 [ 129.244982][ T9265] ? __pfx___sys_sendto+0x10/0x10 [ 129.245011][ T9265] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 129.245048][ T9265] ? ksys_write+0x1ac/0x250 [ 129.245066][ T9265] ? __pfx_ksys_write+0x10/0x10 [ 129.245086][ T9265] __x64_sys_sendto+0xe0/0x1c0 [ 129.245113][ T9265] ? do_syscall_64+0x90/0x870 [ 129.245135][ T9265] ? lockdep_hardirqs_on+0x78/0x100 [ 129.245158][ T9265] do_syscall_64+0x115/0x870 [ 129.245183][ T9265] ? clear_bhb_loop+0x70/0xc0 [ 129.245205][ T9265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.245239][ T9265] RIP: 0033:0x7fe5e279e0d9 [ 129.245255][ T9265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.245272][ T9265] RSP: 002b:00007fe5e3653028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 129.245292][ T9265] RAX: ffffffffffffffda RBX: 00007fe5e2a25fa0 RCX: 00007fe5e279e0d9 [ 129.245304][ T9265] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 129.245316][ T9265] RBP: 00007fe5e3653090 R08: 0000200000000080 R09: 0000000000000010 [ 129.245328][ T9265] R10: 0000000020004880 R11: 0000000000000246 R12: 0000000000000002 [ 129.245339][ T9265] R13: 00007fe5e2a26038 R14: 00007fe5e2a25fa0 R15: 00007ffe4d809528 [ 129.245365][ T9265] [ 129.388331][ T9270] batadv_slave_1: entered allmulticast mode [ 129.408220][ T9272] Cannot find add_set index 0 as target [ 129.453826][ T9274] device-mapper: table: 248:0: zero-length target [ 129.455991][ T9274] device-mapper: ioctl: error adding target to table [ 129.506809][ T9288] FAULT_INJECTION: forcing a failure. [ 129.506809][ T9288] name failslab, interval 1, probability 0, space 0, times 0 [ 129.511123][ T9288] CPU: 2 UID: 0 PID: 9288 Comm: syz.0.1117 Tainted: G L syzkaller #0 PREEMPT(full) [ 129.511142][ T9288] Tainted: [L]=SOFTLOCKUP [ 129.511146][ T9288] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 129.511152][ T9288] Call Trace: [ 129.511157][ T9288] [ 129.511162][ T9288] dump_stack_lvl+0x100/0x190 [ 129.511183][ T9288] should_fail_ex.cold+0x5/0xa [ 129.511214][ T9288] should_failslab+0xc2/0x120 [ 129.511232][ T9288] __kmalloc_noprof+0xfc/0x820 [ 129.511247][ T9288] ? tomoyo_encode2+0xfb/0x3c0 [ 129.511263][ T9288] tomoyo_encode2+0xfb/0x3c0 [ 129.511276][ T9288] tomoyo_encode+0x29/0x50 [ 129.511286][ T9288] tomoyo_realpath_from_path+0x18c/0x690 [ 129.511300][ T9288] tomoyo_path_number_perm+0x23c/0x580 [ 129.511317][ T9288] ? tomoyo_path_number_perm+0x22e/0x580 [ 129.511334][ T9288] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 129.511364][ T9288] ? find_held_lock+0x2b/0x80 [ 129.511376][ T9288] ? __fget_files+0x215/0x3d0 [ 129.511388][ T9288] ? hook_file_ioctl_common+0x140/0x440 [ 129.511401][ T9288] ? __fget_files+0x215/0x3d0 [ 129.511415][ T9288] ? __fget_files+0x21f/0x3d0 [ 129.511429][ T9288] security_file_ioctl+0xd3/0x230 [ 129.511448][ T9288] __x64_sys_ioctl+0xb7/0x210 [ 129.511467][ T9288] do_syscall_64+0x115/0x870 [ 129.511482][ T9288] ? clear_bhb_loop+0x70/0xc0 [ 129.511496][ T9288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.511508][ T9288] RIP: 0033:0x7f42fd39e0d9 [ 129.511518][ T9288] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.511530][ T9288] RSP: 002b:00007f42fe1b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 129.511542][ T9288] RAX: ffffffffffffffda RBX: 00007f42fd625fa0 RCX: 00007f42fd39e0d9 [ 129.511549][ T9288] RDX: 00002000000003c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 129.511556][ T9288] RBP: 00007f42fe1b7090 R08: 0000000000000000 R09: 0000000000000000 [ 129.511562][ T9288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.511569][ T9288] R13: 00007f42fd626038 R14: 00007f42fd625fa0 R15: 00007ffd818d0b68 [ 129.511583][ T9288] [ 129.511607][ T9288] ERROR: Out of memory at tomoyo_realpath_from_path. [ 129.551620][ T9292] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 129.649850][ T9298] syz_tun: entered allmulticast mode [ 129.659799][ T9300] FAULT_INJECTION: forcing a failure. [ 129.659799][ T9300] name failslab, interval 1, probability 0, space 0, times 0 [ 129.671459][ T9300] CPU: 3 UID: 0 PID: 9300 Comm: syz.4.1122 Tainted: G L syzkaller #0 PREEMPT(full) [ 129.671481][ T9300] Tainted: [L]=SOFTLOCKUP [ 129.671485][ T9300] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 129.671491][ T9300] Call Trace: [ 129.671496][ T9300] [ 129.671501][ T9300] dump_stack_lvl+0x100/0x190 [ 129.671522][ T9300] should_fail_ex.cold+0x5/0xa [ 129.671538][ T9300] should_failslab+0xc2/0x120 [ 129.671555][ T9300] __kmalloc_cache_noprof+0x91/0x6c0 [ 129.671568][ T9300] ? sctp_add_bind_addr+0xae/0x3e0 [ 129.671587][ T9300] sctp_add_bind_addr+0xae/0x3e0 [ 129.671604][ T9300] sctp_copy_local_addr_list+0x349/0x550 [ 129.671625][ T9300] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 129.671644][ T9300] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 129.671664][ T9300] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 129.671681][ T9300] sctp_bind_addr_copy+0xe0/0x530 [ 129.671700][ T9300] sctp_connect_new_asoc+0x1c9/0x770 [ 129.671713][ T9300] ? preempt_schedule_thunk+0x16/0x40 [ 129.671731][ T9300] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 129.671750][ T9300] sctp_sendmsg+0x1743/0x22e0 [ 129.671766][ T9300] ? __pfx_sctp_sendmsg+0x10/0x10 [ 129.671778][ T9300] ? sock_has_perm+0x25a/0x2f0 [ 129.671795][ T9300] ? __pfx_sock_has_perm+0x10/0x10 [ 129.671814][ T9300] ? __might_fault+0xc5/0x140 [ 129.671830][ T9300] ? __pfx_sctp_sendmsg+0x10/0x10 [ 129.671843][ T9300] inet_sendmsg+0x11c/0x140 [ 129.671861][ T9300] __sys_sendto+0x453/0x4e0 [ 129.671875][ T9300] ? __pfx_inet_sendmsg+0x10/0x10 [ 129.671891][ T9300] ? __pfx___sys_sendto+0x10/0x10 [ 129.671909][ T9300] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 129.671931][ T9300] ? ksys_write+0x1ac/0x250 [ 129.671942][ T9300] ? __pfx_ksys_write+0x10/0x10 [ 129.671954][ T9300] __x64_sys_sendto+0xe0/0x1c0 [ 129.671967][ T9300] ? do_syscall_64+0x90/0x870 [ 129.671982][ T9300] ? lockdep_hardirqs_on+0x78/0x100 [ 129.671996][ T9300] do_syscall_64+0x115/0x870 [ 129.672011][ T9300] ? clear_bhb_loop+0x70/0xc0 [ 129.672025][ T9300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.672037][ T9300] RIP: 0033:0x7f8e99b9e0d9 [ 129.672048][ T9300] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.672058][ T9300] RSP: 002b:00007f8e9a9a8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 129.672071][ T9300] RAX: ffffffffffffffda RBX: 00007f8e99e25fa0 RCX: 00007f8e99b9e0d9 [ 129.672078][ T9300] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 129.672085][ T9300] RBP: 00007f8e9a9a8090 R08: 0000200000000080 R09: 0000000000000010 [ 129.672091][ T9300] R10: 0000000020004880 R11: 0000000000000246 R12: 0000000000000002 [ 129.672098][ T9300] R13: 00007f8e99e26038 R14: 00007f8e99e25fa0 R15: 00007fff11014e38 [ 129.672114][ T9300] [ 129.691390][ T9303] Cannot find add_set index 0 as target [ 129.912939][ T9316] FAULT_INJECTION: forcing a failure. [ 129.912939][ T9316] name failslab, interval 1, probability 0, space 0, times 0 [ 129.920219][ T9316] CPU: 1 UID: 0 PID: 9316 Comm: syz.2.1130 Tainted: G L syzkaller #0 PREEMPT(full) [ 129.920250][ T9316] Tainted: [L]=SOFTLOCKUP [ 129.920256][ T9316] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 129.920266][ T9316] Call Trace: [ 129.920273][ T9316] [ 129.920280][ T9316] dump_stack_lvl+0x100/0x190 [ 129.920310][ T9316] should_fail_ex.cold+0x5/0xa [ 129.920335][ T9316] should_failslab+0xc2/0x120 [ 129.920361][ T9316] __kmalloc_noprof+0xfc/0x820 [ 129.920384][ T9316] ? tomoyo_encode2+0xfb/0x3c0 [ 129.920409][ T9316] tomoyo_encode2+0xfb/0x3c0 [ 129.920430][ T9316] tomoyo_encode+0x29/0x50 [ 129.920448][ T9316] tomoyo_realpath_from_path+0x18c/0x690 [ 129.920471][ T9316] tomoyo_path_number_perm+0x23c/0x580 [ 129.920497][ T9316] ? tomoyo_path_number_perm+0x22e/0x580 [ 129.920526][ T9316] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 129.920572][ T9316] ? find_held_lock+0x2b/0x80 [ 129.920591][ T9316] ? __fget_files+0x215/0x3d0 [ 129.920609][ T9316] ? hook_file_ioctl_common+0x140/0x440 [ 129.920628][ T9316] ? __fget_files+0x215/0x3d0 [ 129.920649][ T9316] ? __fget_files+0x21f/0x3d0 [ 129.920673][ T9316] security_file_ioctl+0xd3/0x230 [ 129.920712][ T9316] __x64_sys_ioctl+0xb7/0x210 [ 129.920742][ T9316] do_syscall_64+0x115/0x870 [ 129.920765][ T9316] ? clear_bhb_loop+0x70/0xc0 [ 129.920786][ T9316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.920807][ T9316] RIP: 0033:0x7fe5e279e0d9 [ 129.920824][ T9316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.920842][ T9316] RSP: 002b:00007fe5e3653028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 129.920860][ T9316] RAX: ffffffffffffffda RBX: 00007fe5e2a25fa0 RCX: 00007fe5e279e0d9 [ 129.920873][ T9316] RDX: 00002000000003c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 129.920884][ T9316] RBP: 00007fe5e3653090 R08: 0000000000000000 R09: 0000000000000000 [ 129.920895][ T9316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.920906][ T9316] R13: 00007fe5e2a26038 R14: 00007fe5e2a25fa0 R15: 00007ffe4d809528 [ 129.920931][ T9316] [ 129.920949][ T9316] ERROR: Out of memory at tomoyo_realpath_from_path. [ 129.941377][ T9315] input: syz0 as /devices/virtual/input/input16 [ 130.014238][ T9318] bridge_slave_0 (unregistering): left allmulticast mode [ 130.017069][ T9318] bridge_slave_0 (unregistering): left promiscuous mode [ 130.022118][ T9318] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.062624][ T9315] loop4: detected capacity change from 0 to 7 [ 130.081787][ T9315] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 130.084009][ T9315] loop4: partition table partially beyond EOD, truncated [ 130.090208][ T9315] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 130.321279][ T9330] device-mapper: table: 248:0: zero-length target [ 130.323435][ T9330] device-mapper: ioctl: error adding target to table [ 130.496672][ T9342] FAULT_INJECTION: forcing a failure. [ 130.496672][ T9342] name failslab, interval 1, probability 0, space 0, times 0 [ 130.502565][ T9342] CPU: 2 UID: 0 PID: 9342 Comm: syz.0.1137 Tainted: G L syzkaller #0 PREEMPT(full) [ 130.502597][ T9342] Tainted: [L]=SOFTLOCKUP [ 130.502603][ T9342] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 130.502615][ T9342] Call Trace: [ 130.502621][ T9342] [ 130.502629][ T9342] dump_stack_lvl+0x100/0x190 [ 130.502660][ T9342] should_fail_ex.cold+0x5/0xa [ 130.502687][ T9342] should_failslab+0xc2/0x120 [ 130.502714][ T9342] __kmalloc_cache_noprof+0x91/0x6c0 [ 130.502736][ T9342] ? sctp_add_bind_addr+0xae/0x3e0 [ 130.502766][ T9342] sctp_add_bind_addr+0xae/0x3e0 [ 130.502793][ T9342] sctp_copy_local_addr_list+0x349/0x550 [ 130.502826][ T9342] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 130.502885][ T9342] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 130.502916][ T9342] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 130.502943][ T9342] sctp_bind_addr_copy+0xe0/0x530 [ 130.502974][ T9342] sctp_connect_new_asoc+0x1c9/0x770 [ 130.502998][ T9342] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 130.503029][ T9342] sctp_sendmsg+0x1743/0x22e0 [ 130.503056][ T9342] ? __pfx_sctp_sendmsg+0x10/0x10 [ 130.503078][ T9342] ? sock_has_perm+0x25a/0x2f0 [ 130.503119][ T9342] ? __pfx_sock_has_perm+0x10/0x10 [ 130.503150][ T9342] ? __might_fault+0xc5/0x140 [ 130.503184][ T9342] ? __pfx_sctp_sendmsg+0x10/0x10 [ 130.503207][ T9342] inet_sendmsg+0x11c/0x140 [ 130.503233][ T9342] __sys_sendto+0x453/0x4e0 [ 130.503255][ T9342] ? __pfx_inet_sendmsg+0x10/0x10 [ 130.503278][ T9342] ? __pfx___sys_sendto+0x10/0x10 [ 130.503306][ T9342] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 130.503339][ T9342] ? ksys_write+0x1ac/0x250 [ 130.503359][ T9342] ? __pfx_ksys_write+0x10/0x10 [ 130.503380][ T9342] __x64_sys_sendto+0xe0/0x1c0 [ 130.503402][ T9342] ? do_syscall_64+0x90/0x870 [ 130.503427][ T9342] ? lockdep_hardirqs_on+0x78/0x100 [ 130.503450][ T9342] do_syscall_64+0x115/0x870 [ 130.503471][ T9342] ? clear_bhb_loop+0x70/0xc0 [ 130.503497][ T9342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.503516][ T9342] RIP: 0033:0x7f42fd39e0d9 [ 130.503534][ T9342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.503552][ T9342] RSP: 002b:00007f42fe1b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 130.503572][ T9342] RAX: ffffffffffffffda RBX: 00007f42fd625fa0 RCX: 00007f42fd39e0d9 [ 130.503583][ T9342] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 130.503595][ T9342] RBP: 00007f42fe1b7090 R08: 0000200000000080 R09: 0000000000000010 [ 130.503607][ T9342] R10: 0000000020004880 R11: 0000000000000246 R12: 0000000000000002 [ 130.503616][ T9342] R13: 00007f42fd626038 R14: 00007f42fd625fa0 R15: 00007ffd818d0b68 [ 130.503642][ T9342] [ 130.504066][ T9343] Cannot find add_set index 0 as target [ 130.642023][ T9347] fuse: Bad value for 'user_id' [ 130.646070][ T9347] fuse: Bad value for 'user_id' [ 130.791187][ T9357] device-mapper: table: 248:0: zero-length target [ 130.793846][ T9357] device-mapper: ioctl: error adding target to table [ 130.940453][ T9366] FAULT_INJECTION: forcing a failure. [ 130.940453][ T9366] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 130.946061][ T9366] CPU: 1 UID: 0 PID: 9366 Comm: syz.2.1143 Tainted: G L syzkaller #0 PREEMPT(full) [ 130.946092][ T9366] Tainted: [L]=SOFTLOCKUP [ 130.946100][ T9366] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 130.946110][ T9366] Call Trace: [ 130.946117][ T9366] [ 130.946125][ T9366] dump_stack_lvl+0x100/0x190 [ 130.946158][ T9366] should_fail_ex.cold+0x5/0xa [ 130.946184][ T9366] _copy_from_user+0x2e/0xd0 [ 130.946237][ T9366] binder_ioctl+0x4cb/0x74a0 [ 130.946271][ T9366] ? tomoyo_path_number_perm+0x188/0x580 [ 130.946306][ T9366] ? __pfx_binder_ioctl+0x10/0x10 [ 130.946335][ T9366] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 130.946361][ T9366] ? do_vfs_ioctl+0x226/0x13e0 [ 130.946391][ T9366] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 130.946420][ T9366] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 130.946459][ T9366] ? hook_file_ioctl_common+0x140/0x440 [ 130.946488][ T9366] ? selinux_file_ioctl+0x13b/0x290 [ 130.946515][ T9366] ? selinux_file_ioctl+0xb6/0x290 [ 130.946543][ T9366] ? __pfx_binder_ioctl+0x10/0x10 [ 130.946569][ T9366] __x64_sys_ioctl+0x18e/0x210 [ 130.946599][ T9366] do_syscall_64+0x115/0x870 [ 130.946629][ T9366] ? clear_bhb_loop+0x70/0xc0 [ 130.946653][ T9366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.946674][ T9366] RIP: 0033:0x7fe5e279e0d9 [ 130.946689][ T9366] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.946706][ T9366] RSP: 002b:00007fe5e3653028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 130.946727][ T9366] RAX: ffffffffffffffda RBX: 00007fe5e2a25fa0 RCX: 00007fe5e279e0d9 [ 130.946739][ T9366] RDX: 00002000000003c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 130.946750][ T9366] RBP: 00007fe5e3653090 R08: 0000000000000000 R09: 0000000000000000 [ 130.946761][ T9366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.946770][ T9366] R13: 00007fe5e2a26038 R14: 00007fe5e2a25fa0 R15: 00007ffe4d809528 [ 130.946794][ T9366] [ 130.946814][ T9366] binder: 9365:9366 ioctl c0306201 2000000003c0 returned -14 [ 131.082199][ T9368] FAULT_INJECTION: forcing a failure. [ 131.082199][ T9368] name failslab, interval 1, probability 0, space 0, times 0 [ 131.094274][ T9368] CPU: 3 UID: 0 PID: 9368 Comm: syz.0.1148 Tainted: G L syzkaller #0 PREEMPT(full) [ 131.094296][ T9368] Tainted: [L]=SOFTLOCKUP [ 131.094300][ T9368] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 131.094307][ T9368] Call Trace: [ 131.094311][ T9368] [ 131.094316][ T9368] dump_stack_lvl+0x100/0x190 [ 131.094336][ T9368] should_fail_ex.cold+0x5/0xa [ 131.094352][ T9368] should_failslab+0xc2/0x120 [ 131.094369][ T9368] __kmalloc_cache_noprof+0x91/0x6c0 [ 131.094381][ T9368] ? sctp_add_bind_addr+0xae/0x3e0 [ 131.094400][ T9368] sctp_add_bind_addr+0xae/0x3e0 [ 131.094418][ T9368] sctp_copy_local_addr_list+0x349/0x550 [ 131.094439][ T9368] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 131.094458][ T9368] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 131.094478][ T9368] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 131.094495][ T9368] sctp_bind_addr_copy+0xe0/0x530 [ 131.094514][ T9368] sctp_connect_new_asoc+0x1c9/0x770 [ 131.094529][ T9368] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 131.094548][ T9368] sctp_sendmsg+0x1743/0x22e0 [ 131.094564][ T9368] ? __pfx_sctp_sendmsg+0x10/0x10 [ 131.094576][ T9368] ? sock_has_perm+0x25a/0x2f0 [ 131.094592][ T9368] ? __pfx_sock_has_perm+0x10/0x10 [ 131.094612][ T9368] ? __might_fault+0xc5/0x140 [ 131.094627][ T9368] ? __pfx_sctp_sendmsg+0x10/0x10 [ 131.094640][ T9368] inet_sendmsg+0x11c/0x140 [ 131.094658][ T9368] __sys_sendto+0x453/0x4e0 [ 131.094671][ T9368] ? __pfx_inet_sendmsg+0x10/0x10 [ 131.094688][ T9368] ? __pfx___sys_sendto+0x10/0x10 [ 131.094705][ T9368] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 131.094727][ T9368] ? ksys_write+0x1ac/0x250 [ 131.094738][ T9368] ? __pfx_ksys_write+0x10/0x10 [ 131.094750][ T9368] __x64_sys_sendto+0xe0/0x1c0 [ 131.094764][ T9368] ? do_syscall_64+0x90/0x870 [ 131.094778][ T9368] ? lockdep_hardirqs_on+0x78/0x100 [ 131.094793][ T9368] do_syscall_64+0x115/0x870 [ 131.094807][ T9368] ? clear_bhb_loop+0x70/0xc0 [ 131.094822][ T9368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.094833][ T9368] RIP: 0033:0x7f42fd39e0d9 [ 131.094844][ T9368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.094882][ T9368] RSP: 002b:00007f42fe1b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 131.094900][ T9368] RAX: ffffffffffffffda RBX: 00007f42fd625fa0 RCX: 00007f42fd39e0d9 [ 131.094910][ T9368] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 131.094921][ T9368] RBP: 00007f42fe1b7090 R08: 0000200000000080 R09: 0000000000000010 [ 131.094931][ T9368] R10: 0000000020004880 R11: 0000000000000246 R12: 0000000000000002 [ 131.094940][ T9368] R13: 00007f42fd626038 R14: 00007f42fd625fa0 R15: 00007ffd818d0b68 [ 131.094955][ T9368] [ 131.206190][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.214101][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.220191][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.230373][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.240927][ T9374] Cannot find add_set index 0 as target [ 131.264266][ T9376] input: syz0 as /devices/virtual/input/input17 [ 131.415840][ T9392] FAULT_INJECTION: forcing a failure. [ 131.415840][ T9392] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 131.420587][ T9392] CPU: 0 UID: 0 PID: 9392 Comm: syz.3.1156 Tainted: G L syzkaller #0 PREEMPT(full) [ 131.420606][ T9392] Tainted: [L]=SOFTLOCKUP [ 131.420611][ T9392] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 131.420618][ T9392] Call Trace: [ 131.420623][ T9392] [ 131.420628][ T9392] dump_stack_lvl+0x100/0x190 [ 131.420649][ T9392] should_fail_ex.cold+0x5/0xa [ 131.420666][ T9392] _copy_from_user+0x2e/0xd0 [ 131.420685][ T9392] binder_ioctl+0x4cb/0x74a0 [ 131.420705][ T9392] ? tomoyo_path_number_perm+0x188/0x580 [ 131.420727][ T9392] ? __pfx_binder_ioctl+0x10/0x10 [ 131.420744][ T9392] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 131.420760][ T9392] ? do_vfs_ioctl+0x226/0x13e0 [ 131.420778][ T9392] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 131.420796][ T9392] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 131.420820][ T9392] ? hook_file_ioctl_common+0x140/0x440 [ 131.420837][ T9392] ? selinux_file_ioctl+0x13b/0x290 [ 131.420854][ T9392] ? selinux_file_ioctl+0xb6/0x290 [ 131.420872][ T9392] ? __pfx_binder_ioctl+0x10/0x10 [ 131.420889][ T9392] __x64_sys_ioctl+0x18e/0x210 [ 131.420907][ T9392] do_syscall_64+0x115/0x870 [ 131.420922][ T9392] ? clear_bhb_loop+0x70/0xc0 [ 131.420936][ T9392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.420948][ T9392] RIP: 0033:0x7f9893d9e0d9 [ 131.420959][ T9392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.420970][ T9392] RSP: 002b:00007f9894cfe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 131.420982][ T9392] RAX: ffffffffffffffda RBX: 00007f9894025fa0 RCX: 00007f9893d9e0d9 [ 131.420989][ T9392] RDX: 00002000000003c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 131.420996][ T9392] RBP: 00007f9894cfe090 R08: 0000000000000000 R09: 0000000000000000 [ 131.421002][ T9392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.421009][ T9392] R13: 00007f9894026038 R14: 00007f9894025fa0 R15: 00007ffd5049cb48 [ 131.421023][ T9392] [ 131.421028][ T9392] binder: 9391:9392 ioctl c0306201 2000000003c0 returned -14 [ 131.513687][ T9394] device-mapper: table: 248:0: zero-length target [ 131.518032][ T9394] device-mapper: ioctl: error adding target to table [ 131.597681][ T9401] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1159'. [ 131.660188][ T9403] FAULT_INJECTION: forcing a failure. [ 131.660188][ T9403] name failslab, interval 1, probability 0, space 0, times 0 [ 131.665137][ T9405] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1161'. [ 131.665406][ T9403] CPU: 0 UID: 0 PID: 9403 Comm: syz.4.1160 Tainted: G L syzkaller #0 PREEMPT(full) [ 131.665434][ T9403] Tainted: [L]=SOFTLOCKUP [ 131.665440][ T9403] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 131.665450][ T9403] Call Trace: [ 131.665457][ T9403] [ 131.665464][ T9403] dump_stack_lvl+0x100/0x190 [ 131.665494][ T9403] should_fail_ex.cold+0x5/0xa [ 131.665526][ T9403] should_failslab+0xc2/0x120 [ 131.665551][ T9403] __kmalloc_cache_noprof+0x91/0x6c0 [ 131.665571][ T9403] ? sctp_add_bind_addr+0xae/0x3e0 [ 131.665598][ T9403] sctp_add_bind_addr+0xae/0x3e0 [ 131.665640][ T9403] sctp_copy_local_addr_list+0x349/0x550 [ 131.665674][ T9403] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 131.665705][ T9403] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 131.665735][ T9403] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 131.665761][ T9403] sctp_bind_addr_copy+0xe0/0x530 [ 131.665808][ T9403] sctp_connect_new_asoc+0x1c9/0x770 [ 131.665831][ T9403] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 131.665860][ T9403] sctp_sendmsg+0x1743/0x22e0 [ 131.665900][ T9403] ? __pfx_sctp_sendmsg+0x10/0x10 [ 131.665921][ T9403] ? sock_has_perm+0x25a/0x2f0 [ 131.665946][ T9403] ? __pfx_sock_has_perm+0x10/0x10 [ 131.665977][ T9403] ? __might_fault+0xc5/0x140 [ 131.666002][ T9403] ? __pfx_sctp_sendmsg+0x10/0x10 [ 131.666022][ T9403] inet_sendmsg+0x11c/0x140 [ 131.666048][ T9403] __sys_sendto+0x453/0x4e0 [ 131.666068][ T9403] ? __pfx_inet_sendmsg+0x10/0x10 [ 131.666091][ T9403] ? __pfx___sys_sendto+0x10/0x10 [ 131.666119][ T9403] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 131.666150][ T9403] ? ksys_write+0x1ac/0x250 [ 131.666166][ T9403] ? __pfx_ksys_write+0x10/0x10 [ 131.666184][ T9403] __x64_sys_sendto+0xe0/0x1c0 [ 131.666203][ T9403] ? do_syscall_64+0x90/0x870 [ 131.666224][ T9403] ? lockdep_hardirqs_on+0x78/0x100 [ 131.666246][ T9403] do_syscall_64+0x115/0x870 [ 131.666266][ T9403] ? clear_bhb_loop+0x70/0xc0 [ 131.666289][ T9403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.666319][ T9403] RIP: 0033:0x7f8e99b9e0d9 [ 131.666335][ T9403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.666352][ T9403] RSP: 002b:00007f8e9a9a8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 131.666370][ T9403] RAX: ffffffffffffffda RBX: 00007f8e99e25fa0 RCX: 00007f8e99b9e0d9 [ 131.666380][ T9403] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 131.666390][ T9403] RBP: 00007f8e9a9a8090 R08: 0000200000000080 R09: 0000000000000010 [ 131.666401][ T9403] R10: 0000000020004880 R11: 0000000000000246 R12: 0000000000000002 [ 131.666411][ T9403] R13: 00007f8e99e26038 R14: 00007f8e99e25fa0 R15: 00007fff11014e38 [ 131.666436][ T9403] [ 131.714614][ T9407] Cannot find add_set index 0 as target [ 131.715588][ T9405] nbd: must specify at least one socket [ 131.754657][ T9412] binder: 9411:9412 unknown command 0 [ 131.765363][ T9412] binder: 9411:9412 ioctl c0306201 2000000003c0 returned -22 [ 131.871262][ T9420] ipt_REJECT: ECHOREPLY no longer supported. [ 131.884124][ T9422] fuse: Unknown parameter 'grou00000000000000000000' [ 131.973263][ T9429] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1170'. [ 131.977205][ T9429] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1170'. [ 131.981024][ T9429] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1170'. [ 131.984607][ T9429] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1170'. [ 132.032671][ T9434] binder: BC_ACQUIRE_RESULT not supported [ 132.035269][ T9434] binder: 9433:9434 ioctl c0306201 2000000003c0 returned -22 [ 132.097384][ T9436] device-mapper: table: 248:0: zero-length target [ 132.097883][ T9439] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1175'. [ 132.099828][ T9436] device-mapper: ioctl: error adding target to table [ 132.124624][ T9442] syz_tun: entered allmulticast mode [ 132.130149][ T9440] syz_tun: left allmulticast mode [ 132.353408][ T9464] fuse: Unknown parameter 'group_i00000000000000000000' [ 132.394509][ T9470] binder: 9468:9470 unknown command 0 [ 132.396435][ T9470] binder: 9468:9470 ioctl c0306201 2000000003c0 returned -22 [ 132.509507][ T9480] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 132.552904][ T9485] Cannot find add_set index 0 as target [ 132.557403][ T9482] device-mapper: table: 248:0: zero-length target [ 132.557416][ T9482] device-mapper: ioctl: error adding target to table [ 132.594586][ T9489] fuse: Unknown parameter 'group_i00000000000000000000' [ 132.628743][ T9491] binder: 9490:9491 unknown command 0 [ 132.630559][ T9491] binder: 9490:9491 ioctl c0306201 2000000003c0 returned -22 [ 132.654403][ T9496] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1197'. [ 132.664045][ T9496] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1197'. [ 132.668665][ T9499] FAULT_INJECTION: forcing a failure. [ 132.668665][ T9499] name failslab, interval 1, probability 0, space 0, times 0 [ 132.679841][ T9496] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1197'. [ 132.681414][ T9499] CPU: 3 UID: 0 PID: 9499 Comm: syz.0.1198 Tainted: G L syzkaller #0 PREEMPT(full) [ 132.681433][ T9499] Tainted: [L]=SOFTLOCKUP [ 132.681437][ T9499] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 132.681444][ T9499] Call Trace: [ 132.681449][ T9499] [ 132.681454][ T9499] dump_stack_lvl+0x100/0x190 [ 132.681475][ T9499] should_fail_ex.cold+0x5/0xa [ 132.681491][ T9499] should_failslab+0xc2/0x120 [ 132.681508][ T9499] __kmalloc_cache_noprof+0x91/0x6c0 [ 132.681521][ T9499] ? sctp_add_bind_addr+0xae/0x3e0 [ 132.681540][ T9499] sctp_add_bind_addr+0xae/0x3e0 [ 132.681557][ T9499] sctp_copy_local_addr_list+0x349/0x550 [ 132.681578][ T9499] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 132.681597][ T9499] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 132.681622][ T9499] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 132.681639][ T9499] sctp_bind_addr_copy+0xe0/0x530 [ 132.681658][ T9499] sctp_connect_new_asoc+0x1c9/0x770 [ 132.681672][ T9499] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 132.681691][ T9499] sctp_sendmsg+0x1743/0x22e0 [ 132.681708][ T9499] ? __pfx_sctp_sendmsg+0x10/0x10 [ 132.681720][ T9499] ? sock_has_perm+0x25a/0x2f0 [ 132.681736][ T9499] ? __pfx_sock_has_perm+0x10/0x10 [ 132.681756][ T9499] ? __might_fault+0xc5/0x140 [ 132.681771][ T9499] ? __pfx_sctp_sendmsg+0x10/0x10 [ 132.681784][ T9499] inet_sendmsg+0x11c/0x140 [ 132.681801][ T9499] __sys_sendto+0x453/0x4e0 [ 132.681814][ T9499] ? __pfx_inet_sendmsg+0x10/0x10 [ 132.681831][ T9499] ? __pfx___sys_sendto+0x10/0x10 [ 132.681848][ T9499] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 132.681870][ T9499] ? ksys_write+0x1ac/0x250 [ 132.681881][ T9499] ? __pfx_ksys_write+0x10/0x10 [ 132.681893][ T9499] __x64_sys_sendto+0xe0/0x1c0 [ 132.681906][ T9499] ? do_syscall_64+0x90/0x870 [ 132.681921][ T9499] ? lockdep_hardirqs_on+0x78/0x100 [ 132.681935][ T9499] do_syscall_64+0x115/0x870 [ 132.681950][ T9499] ? clear_bhb_loop+0x70/0xc0 [ 132.681964][ T9499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.681975][ T9499] RIP: 0033:0x7f42fd39e0d9 [ 132.681986][ T9499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.681996][ T9499] RSP: 002b:00007f42fe1b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 132.682007][ T9499] RAX: ffffffffffffffda RBX: 00007f42fd625fa0 RCX: 00007f42fd39e0d9 [ 132.682015][ T9499] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 132.682021][ T9499] RBP: 00007f42fe1b7090 R08: 0000200000000080 R09: 0000000000000010 [ 132.682027][ T9499] R10: 0000000020004880 R11: 0000000000000246 R12: 0000000000000002 [ 132.682033][ T9499] R13: 00007f42fd626038 R14: 00007f42fd625fa0 R15: 00007ffd818d0b68 [ 132.682047][ T9499] [ 132.725989][ T12] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.799659][ T12] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.816659][ T13] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.820315][ T13] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.862029][ T9514] fuse: Unknown parameter 'group_i00000000000000000000' [ 132.894064][ T9516] device-mapper: table: 248:0: zero-length target [ 132.897563][ T9516] device-mapper: ioctl: error adding target to table [ 133.018929][ T9523] Cannot find map_set index 135 as target [ 133.069981][ T9532] FAULT_INJECTION: forcing a failure. [ 133.069981][ T9532] name failslab, interval 1, probability 0, space 0, times 0 [ 133.075757][ T9532] CPU: 1 UID: 0 PID: 9532 Comm: syz.3.1210 Tainted: G L syzkaller #0 PREEMPT(full) [ 133.075776][ T9532] Tainted: [L]=SOFTLOCKUP [ 133.075781][ T9532] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 133.075788][ T9532] Call Trace: [ 133.075792][ T9532] [ 133.075797][ T9532] dump_stack_lvl+0x100/0x190 [ 133.075817][ T9532] should_fail_ex.cold+0x5/0xa [ 133.075833][ T9532] should_failslab+0xc2/0x120 [ 133.075852][ T9532] __kmalloc_cache_noprof+0x91/0x6c0 [ 133.075880][ T9532] ? sctp_add_bind_addr+0xae/0x3e0 [ 133.075899][ T9532] sctp_add_bind_addr+0xae/0x3e0 [ 133.075916][ T9532] sctp_copy_local_addr_list+0x349/0x550 [ 133.075937][ T9532] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 133.075956][ T9532] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 133.075975][ T9532] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 133.075991][ T9532] sctp_bind_addr_copy+0xe0/0x530 [ 133.076011][ T9532] sctp_connect_new_asoc+0x1c9/0x770 [ 133.076025][ T9532] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 133.076044][ T9532] sctp_sendmsg+0x1743/0x22e0 [ 133.076061][ T9532] ? __pfx_sctp_sendmsg+0x10/0x10 [ 133.076073][ T9532] ? sock_has_perm+0x25a/0x2f0 [ 133.076089][ T9532] ? __pfx_sock_has_perm+0x10/0x10 [ 133.076109][ T9532] ? __might_fault+0xc5/0x140 [ 133.076124][ T9532] ? __pfx_sctp_sendmsg+0x10/0x10 [ 133.076138][ T9532] inet_sendmsg+0x11c/0x140 [ 133.076155][ T9532] __sys_sendto+0x453/0x4e0 [ 133.076168][ T9532] ? __pfx_inet_sendmsg+0x10/0x10 [ 133.076190][ T9532] ? __pfx___sys_sendto+0x10/0x10 [ 133.076208][ T9532] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 133.076230][ T9532] ? ksys_write+0x1ac/0x250 [ 133.076241][ T9532] ? __pfx_ksys_write+0x10/0x10 [ 133.076253][ T9532] __x64_sys_sendto+0xe0/0x1c0 [ 133.076266][ T9532] ? do_syscall_64+0x90/0x870 [ 133.076281][ T9532] ? lockdep_hardirqs_on+0x78/0x100 [ 133.076296][ T9532] do_syscall_64+0x115/0x870 [ 133.076310][ T9532] ? clear_bhb_loop+0x70/0xc0 [ 133.076324][ T9532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.076336][ T9532] RIP: 0033:0x7f9893d9e0d9 [ 133.076346][ T9532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.076357][ T9532] RSP: 002b:00007f9894cfe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 133.076368][ T9532] RAX: ffffffffffffffda RBX: 00007f9894025fa0 RCX: 00007f9893d9e0d9 [ 133.076375][ T9532] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 133.076382][ T9532] RBP: 00007f9894cfe090 R08: 0000200000000080 R09: 0000000000000010 [ 133.076388][ T9532] R10: 0000000020004880 R11: 0000000000000246 R12: 0000000000000002 [ 133.076395][ T9532] R13: 00007f9894026038 R14: 00007f9894025fa0 R15: 00007ffd5049cb48 [ 133.076409][ T9532] [ 133.272059][ T9544] fuse: Unknown parameter 'group_id00000000000000000000' [ 133.437943][ T9559] netlink: 'syz.0.1219': attribute type 4 has an invalid length. [ 133.449238][ T9554] netlink: 'syz.0.1219': attribute type 4 has an invalid length. [ 133.530584][ T9566] Cannot find add_set index 0 as target [ 133.577308][ T9568] fuse: Unknown parameter 'group_id00000000000000000000' [ 133.586517][ T9570] tmpfs: Unknown parameter 'usrquota_inhardlim' [ 133.597284][ T9570] netlink: 'syz.4.1226': attribute type 8 has an invalid length. [ 133.795455][ T9589] fuse: Unknown parameter 'group_id00000000000000000000' [ 133.868018][ T9595] FAULT_INJECTION: forcing a failure. [ 133.868018][ T9595] name failslab, interval 1, probability 0, space 0, times 0 [ 133.886070][ T9595] CPU: 2 UID: 0 PID: 9595 Comm: syz.3.1238 Tainted: G L syzkaller #0 PREEMPT(full) [ 133.886101][ T9595] Tainted: [L]=SOFTLOCKUP [ 133.886107][ T9595] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 133.886117][ T9595] Call Trace: [ 133.886123][ T9595] [ 133.886129][ T9595] dump_stack_lvl+0x100/0x190 [ 133.886159][ T9595] should_fail_ex.cold+0x5/0xa [ 133.886183][ T9595] should_failslab+0xc2/0x120 [ 133.886208][ T9595] __kmalloc_cache_noprof+0x91/0x6c0 [ 133.886227][ T9595] ? sctp_add_bind_addr+0xae/0x3e0 [ 133.886255][ T9595] sctp_add_bind_addr+0xae/0x3e0 [ 133.886279][ T9595] sctp_copy_local_addr_list+0x349/0x550 [ 133.886308][ T9595] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 133.886336][ T9595] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 133.886363][ T9595] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 133.886387][ T9595] sctp_bind_addr_copy+0xe0/0x530 [ 133.886412][ T9595] sctp_connect_new_asoc+0x1c9/0x770 [ 133.886433][ T9595] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 133.886462][ T9595] sctp_sendmsg+0x1743/0x22e0 [ 133.886487][ T9595] ? __pfx_sctp_sendmsg+0x10/0x10 [ 133.886505][ T9595] ? sock_has_perm+0x25a/0x2f0 [ 133.886528][ T9595] ? __pfx_sock_has_perm+0x10/0x10 [ 133.886554][ T9595] ? __might_fault+0xc5/0x140 [ 133.886578][ T9595] ? __pfx_sctp_sendmsg+0x10/0x10 [ 133.886599][ T9595] inet_sendmsg+0x11c/0x140 [ 133.886623][ T9595] __sys_sendto+0x453/0x4e0 [ 133.886643][ T9595] ? __pfx_inet_sendmsg+0x10/0x10 [ 133.886666][ T9595] ? __pfx___sys_sendto+0x10/0x10 [ 133.886691][ T9595] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 133.886724][ T9595] ? ksys_write+0x1ac/0x250 [ 133.886740][ T9595] ? __pfx_ksys_write+0x10/0x10 [ 133.886760][ T9595] __x64_sys_sendto+0xe0/0x1c0 [ 133.886778][ T9595] ? do_syscall_64+0x90/0x870 [ 133.886799][ T9595] ? lockdep_hardirqs_on+0x78/0x100 [ 133.886820][ T9595] do_syscall_64+0x115/0x870 [ 133.886860][ T9595] ? clear_bhb_loop+0x70/0xc0 [ 133.886884][ T9595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.886901][ T9595] RIP: 0033:0x7f9893d9e0d9 [ 133.886916][ T9595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.886932][ T9595] RSP: 002b:00007f9894cfe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 133.886951][ T9595] RAX: ffffffffffffffda RBX: 00007f9894025fa0 RCX: 00007f9893d9e0d9 [ 133.886962][ T9595] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 133.886970][ T9595] RBP: 00007f9894cfe090 R08: 0000200000000080 R09: 0000000000000010 [ 133.886980][ T9595] R10: 0000000020004880 R11: 0000000000000246 R12: 0000000000000002 [ 133.886989][ T9595] R13: 00007f9894026038 R14: 00007f9894025fa0 R15: 00007ffd5049cb48 [ 133.887013][ T9595] [ 134.160898][ T9617] fuse: Bad value for 'user_id' [ 134.167906][ T9617] fuse: Bad value for 'user_id' [ 134.213860][ T9623] Cannot find add_set index 0 as target [ 134.297723][ T9633] FAULT_INJECTION: forcing a failure. [ 134.297723][ T9633] name failslab, interval 1, probability 0, space 0, times 0 [ 134.301811][ T9633] CPU: 2 UID: 0 PID: 9633 Comm: syz.3.1253 Tainted: G L syzkaller #0 PREEMPT(full) [ 134.301830][ T9633] Tainted: [L]=SOFTLOCKUP [ 134.301834][ T9633] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 134.301841][ T9633] Call Trace: [ 134.301846][ T9633] [ 134.301851][ T9633] dump_stack_lvl+0x100/0x190 [ 134.301871][ T9633] should_fail_ex.cold+0x5/0xa [ 134.301886][ T9633] should_failslab+0xc2/0x120 [ 134.301903][ T9633] __kmalloc_cache_noprof+0x91/0x6c0 [ 134.301915][ T9633] ? sctp_add_bind_addr+0xae/0x3e0 [ 134.301934][ T9633] sctp_add_bind_addr+0xae/0x3e0 [ 134.301951][ T9633] sctp_copy_local_addr_list+0x349/0x550 [ 134.301972][ T9633] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 134.301991][ T9633] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 134.302010][ T9633] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 134.302027][ T9633] sctp_bind_addr_copy+0xe0/0x530 [ 134.302046][ T9633] sctp_connect_new_asoc+0x1c9/0x770 [ 134.302060][ T9633] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 134.302078][ T9633] sctp_sendmsg+0x1743/0x22e0 [ 134.302094][ T9633] ? __pfx_sctp_sendmsg+0x10/0x10 [ 134.302106][ T9633] ? sock_has_perm+0x25a/0x2f0 [ 134.302123][ T9633] ? __pfx_sock_has_perm+0x10/0x10 [ 134.302142][ T9633] ? __might_fault+0xc5/0x140 [ 134.302157][ T9633] ? __pfx_sctp_sendmsg+0x10/0x10 [ 134.302170][ T9633] inet_sendmsg+0x11c/0x140 [ 134.302188][ T9633] __sys_sendto+0x453/0x4e0 [ 134.302201][ T9633] ? __pfx_inet_sendmsg+0x10/0x10 [ 134.302218][ T9633] ? __pfx___sys_sendto+0x10/0x10 [ 134.302235][ T9633] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 134.302257][ T9633] ? ksys_write+0x1ac/0x250 [ 134.302268][ T9633] ? __pfx_ksys_write+0x10/0x10 [ 134.302280][ T9633] __x64_sys_sendto+0xe0/0x1c0 [ 134.302293][ T9633] ? do_syscall_64+0x90/0x870 [ 134.302308][ T9633] ? lockdep_hardirqs_on+0x78/0x100 [ 134.302322][ T9633] do_syscall_64+0x115/0x870 [ 134.302336][ T9633] ? clear_bhb_loop+0x70/0xc0 [ 134.302350][ T9633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.302362][ T9633] RIP: 0033:0x7f9893d9e0d9 [ 134.302373][ T9633] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.302383][ T9633] RSP: 002b:00007f9894cfe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 134.302395][ T9633] RAX: ffffffffffffffda RBX: 00007f9894025fa0 RCX: 00007f9893d9e0d9 [ 134.302402][ T9633] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 134.302408][ T9633] RBP: 00007f9894cfe090 R08: 0000200000000080 R09: 0000000000000010 [ 134.302414][ T9633] R10: 0000000020004880 R11: 0000000000000246 R12: 0000000000000002 [ 134.302421][ T9633] R13: 00007f9894026038 R14: 00007f9894025fa0 R15: 00007ffd5049cb48 [ 134.302435][ T9633] [ 134.397206][ T9639] fuse: Bad value for 'user_id' [ 134.398865][ T9639] fuse: Bad value for 'user_id' [ 134.450295][ T9645] Cannot find add_set index 0 as target [ 134.571901][ T9641] device-mapper: table: 248:0: zero-length target [ 134.574705][ T9641] device-mapper: ioctl: error adding target to table [ 134.630672][ T43] kauditd_printk_skb: 10 callbacks suppressed [ 134.630687][ T43] audit: type=1400 audit(1786537437.898:21828): avc: denied { append } for pid=9656 comm="syz.2.1262" name="mice" dev="devtmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 134.644100][ T43] audit: type=1400 audit(1786537437.898:21829): avc: denied { ioctl } for pid=9656 comm="syz.2.1262" path="socket:[34736]" dev="sockfs" ino=34736 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 134.676203][ T9661] gfs2: gfs2 mount does not exist [ 134.747220][ T9668] fuse: Bad value for 'user_id' [ 134.749668][ T9668] fuse: Bad value for 'user_id' [ 134.772112][ T9670] FAULT_INJECTION: forcing a failure. [ 134.772112][ T9670] name failslab, interval 1, probability 0, space 0, times 0 [ 134.777102][ T9670] CPU: 2 UID: 0 PID: 9670 Comm: syz.0.1267 Tainted: G L syzkaller #0 PREEMPT(full) [ 134.777131][ T9670] Tainted: [L]=SOFTLOCKUP [ 134.777137][ T9670] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 134.777148][ T9670] Call Trace: [ 134.777155][ T9670] [ 134.777163][ T9670] dump_stack_lvl+0x100/0x190 [ 134.777194][ T9670] should_fail_ex.cold+0x5/0xa [ 134.777218][ T9670] should_failslab+0xc2/0x120 [ 134.777243][ T9670] __kmalloc_cache_noprof+0x91/0x6c0 [ 134.777263][ T9670] ? sctp_add_bind_addr+0xae/0x3e0 [ 134.777293][ T9670] sctp_add_bind_addr+0xae/0x3e0 [ 134.777320][ T9670] sctp_copy_local_addr_list+0x349/0x550 [ 134.777351][ T9670] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 134.777381][ T9670] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 134.777411][ T9670] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 134.777439][ T9670] sctp_bind_addr_copy+0xe0/0x530 [ 134.777469][ T9670] sctp_connect_new_asoc+0x1c9/0x770 [ 134.777492][ T9670] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 134.777528][ T9670] sctp_sendmsg+0x1743/0x22e0 [ 134.777554][ T9670] ? __pfx_sctp_sendmsg+0x10/0x10 [ 134.777573][ T9670] ? sock_has_perm+0x25a/0x2f0 [ 134.777598][ T9670] ? __pfx_sock_has_perm+0x10/0x10 [ 134.777629][ T9670] ? __might_fault+0xc5/0x140 [ 134.777655][ T9670] ? __pfx_sctp_sendmsg+0x10/0x10 [ 134.777675][ T9670] inet_sendmsg+0x11c/0x140 [ 134.777701][ T9670] __sys_sendto+0x453/0x4e0 [ 134.777722][ T9670] ? __pfx_inet_sendmsg+0x10/0x10 [ 134.777746][ T9670] ? __pfx___sys_sendto+0x10/0x10 [ 134.777773][ T9670] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 134.777809][ T9670] ? ksys_write+0x1ac/0x250 [ 134.777826][ T9670] ? __pfx_ksys_write+0x10/0x10 [ 134.777846][ T9670] __x64_sys_sendto+0xe0/0x1c0 [ 134.777866][ T9670] ? do_syscall_64+0x90/0x870 [ 134.777888][ T9670] ? lockdep_hardirqs_on+0x78/0x100 [ 134.777911][ T9670] do_syscall_64+0x115/0x870 [ 134.777933][ T9670] ? clear_bhb_loop+0x70/0xc0 [ 134.777955][ T9670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.777973][ T9670] RIP: 0033:0x7f42fd39e0d9 [ 134.777988][ T9670] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.778003][ T9670] RSP: 002b:00007f42fe1b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 134.778021][ T9670] RAX: ffffffffffffffda RBX: 00007f42fd625fa0 RCX: 00007f42fd39e0d9 [ 134.778032][ T9670] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 134.778043][ T9670] RBP: 00007f42fe1b7090 R08: 0000200000000080 R09: 0000000000000010 [ 134.778053][ T9670] R10: 0000000020004880 R11: 0000000000000246 R12: 0000000000000002 [ 134.778063][ T9670] R13: 00007f42fd626038 R14: 00007f42fd625fa0 R15: 00007ffd818d0b68 [ 134.778088][ T9670] [ 135.020892][ T9693] fuse: Bad value for 'fd' [ 135.068369][ T9703] FAULT_INJECTION: forcing a failure. [ 135.068369][ T9703] name failslab, interval 1, probability 0, space 0, times 0 [ 135.082608][ T9703] CPU: 3 UID: 0 PID: 9703 Comm: syz.2.1280 Tainted: G L syzkaller #0 PREEMPT(full) [ 135.082640][ T9703] Tainted: [L]=SOFTLOCKUP [ 135.082646][ T9703] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 135.082656][ T9703] Call Trace: [ 135.082663][ T9703] [ 135.082670][ T9703] dump_stack_lvl+0x100/0x190 [ 135.082700][ T9703] should_fail_ex.cold+0x5/0xa [ 135.082724][ T9703] should_failslab+0xc2/0x120 [ 135.082751][ T9703] __kmalloc_cache_noprof+0x91/0x6c0 [ 135.082770][ T9703] ? sctp_add_bind_addr+0xae/0x3e0 [ 135.082799][ T9703] sctp_add_bind_addr+0xae/0x3e0 [ 135.082826][ T9703] sctp_copy_local_addr_list+0x349/0x550 [ 135.082883][ T9703] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 135.082912][ T9703] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 135.082956][ T9703] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 135.082982][ T9703] sctp_bind_addr_copy+0xe0/0x530 [ 135.083012][ T9703] sctp_connect_new_asoc+0x1c9/0x770 [ 135.083033][ T9703] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 135.083063][ T9703] sctp_sendmsg+0x1743/0x22e0 [ 135.083088][ T9703] ? __pfx_sctp_sendmsg+0x10/0x10 [ 135.083106][ T9703] ? sock_has_perm+0x25a/0x2f0 [ 135.083129][ T9703] ? __pfx_sock_has_perm+0x10/0x10 [ 135.083160][ T9703] ? __might_fault+0xc5/0x140 [ 135.083186][ T9703] ? __pfx_sctp_sendmsg+0x10/0x10 [ 135.083206][ T9703] inet_sendmsg+0x11c/0x140 [ 135.083232][ T9703] __sys_sendto+0x453/0x4e0 [ 135.083253][ T9703] ? __pfx_inet_sendmsg+0x10/0x10 [ 135.083278][ T9703] ? __pfx___sys_sendto+0x10/0x10 [ 135.083305][ T9703] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 135.083341][ T9703] ? ksys_write+0x1ac/0x250 [ 135.083359][ T9703] ? __pfx_ksys_write+0x10/0x10 [ 135.083380][ T9703] __x64_sys_sendto+0xe0/0x1c0 [ 135.083400][ T9703] ? do_syscall_64+0x90/0x870 [ 135.083422][ T9703] ? lockdep_hardirqs_on+0x78/0x100 [ 135.083445][ T9703] do_syscall_64+0x115/0x870 [ 135.083466][ T9703] ? clear_bhb_loop+0x70/0xc0 [ 135.083489][ T9703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.083505][ T9703] RIP: 0033:0x7fe5e279e0d9 [ 135.083521][ T9703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.083538][ T9703] RSP: 002b:00007fe5e3653028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 135.083556][ T9703] RAX: ffffffffffffffda RBX: 00007fe5e2a25fa0 RCX: 00007fe5e279e0d9 [ 135.083589][ T9703] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 135.083600][ T9703] RBP: 00007fe5e3653090 R08: 0000200000000080 R09: 0000000000000010 [ 135.083611][ T9703] R10: 0000000020004880 R11: 0000000000000246 R12: 0000000000000002 [ 135.083621][ T9703] R13: 00007fe5e2a26038 R14: 00007fe5e2a25fa0 R15: 00007ffe4d809528 [ 135.083644][ T9703] [ 135.211602][ T9714] Cannot find add_set index 0 as target [ 135.271070][ T9721] fuse: Bad value for 'fd' [ 135.289553][ T9723] tipc: Started in network mode [ 135.291338][ T9723] tipc: Node identity 4, cluster identity 4711 [ 135.293493][ T9723] tipc: Node number set to 4 [ 135.302396][ T43] audit: type=1400 audit(1786537438.568:21830): avc: denied { mounton } for pid=9724 comm="syz.0.1289" path="/343/config" dev="configfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 135.346203][ T9728] binder: 9727:9728 unknown command 1078485781 [ 135.348256][ T9728] binder: 9727:9728 ioctl c0306201 2000000003c0 returned -22 [ 135.518322][ T9749] fuse: Bad value for 'fd' [ 135.538139][ T43] audit: type=1400 audit(1786537438.808:21831): avc: denied { connect } for pid=9750 comm="syz.0.1298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 135.548265][ T43] audit: type=1400 audit(1786537438.818:21832): avc: denied { ioctl } for pid=9750 comm="syz.0.1298" path="socket:[37172]" dev="sockfs" ino=37172 ioctlcmd=0x89f8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 135.598556][ T43] audit: type=1400 audit(1786537438.868:21833): avc: denied { read } for pid=9750 comm="syz.0.1298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 135.756128][ T9774] Cannot find add_set index 0 as target [ 135.801605][ T9780] fuse: Bad value for 'fd' [ 135.871995][ T9786] netlink: 'syz.3.1312': attribute type 10 has an invalid length. [ 136.031082][ T9798] Cannot find add_set index 0 as target [ 136.036311][ T9800] fuse: Bad value for 'fd' [ 136.069079][ T9802] Cannot find set identified by id 65534 to match [ 136.180194][ T43] audit: type=1400 audit(1786537439.448:21834): avc: denied { map } for pid=9805 comm="syz.4.1322" path="/dev/ublkc0" dev="devtmpfs" ino=3073 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 136.438156][ T9840] syzkaller0: entered promiscuous mode [ 136.439939][ T9840] syzkaller0: entered allmulticast mode [ 136.443349][ T9844] FAULT_INJECTION: forcing a failure. [ 136.443349][ T9844] name failslab, interval 1, probability 0, space 0, times 0 [ 136.460246][ T9844] CPU: 1 UID: 0 PID: 9844 Comm: syz.3.1332 Tainted: G L syzkaller #0 PREEMPT(full) [ 136.460279][ T9844] Tainted: [L]=SOFTLOCKUP [ 136.460287][ T9844] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 136.460299][ T9844] Call Trace: [ 136.460307][ T9844] [ 136.460317][ T9844] dump_stack_lvl+0x100/0x190 [ 136.460413][ T9844] should_fail_ex.cold+0x5/0xa [ 136.460451][ T9844] should_failslab+0xc2/0x120 [ 136.460497][ T9844] __kmalloc_cache_noprof+0x91/0x6c0 [ 136.460521][ T9844] ? sctp_add_bind_addr+0xae/0x3e0 [ 136.460560][ T9844] sctp_add_bind_addr+0xae/0x3e0 [ 136.460592][ T9844] sctp_copy_local_addr_list+0x349/0x550 [ 136.460629][ T9844] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 136.460663][ T9844] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 136.460696][ T9844] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 136.460736][ T9844] sctp_bind_addr_copy+0xe0/0x530 [ 136.460775][ T9844] sctp_connect_new_asoc+0x1c9/0x770 [ 136.460827][ T9844] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 136.460866][ T9844] sctp_sendmsg+0x1743/0x22e0 [ 136.460897][ T9844] ? __pfx_sctp_sendmsg+0x10/0x10 [ 136.460918][ T9844] ? sock_has_perm+0x25a/0x2f0 [ 136.460992][ T9844] ? __pfx_sock_has_perm+0x10/0x10 [ 136.461033][ T9844] ? __might_fault+0xc5/0x140 [ 136.461063][ T9844] ? __pfx_sctp_sendmsg+0x10/0x10 [ 136.461089][ T9844] inet_sendmsg+0x11c/0x140 [ 136.461117][ T9844] __sys_sendto+0x453/0x4e0 [ 136.461141][ T9844] ? __pfx_inet_sendmsg+0x10/0x10 [ 136.461170][ T9844] ? __pfx___sys_sendto+0x10/0x10 [ 136.461202][ T9844] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 136.461242][ T9844] ? ksys_write+0x1ac/0x250 [ 136.461264][ T9844] ? __pfx_ksys_write+0x10/0x10 [ 136.461287][ T9844] __x64_sys_sendto+0xe0/0x1c0 [ 136.461311][ T9844] ? do_syscall_64+0x90/0x870 [ 136.461338][ T9844] ? lockdep_hardirqs_on+0x78/0x100 [ 136.461366][ T9844] do_syscall_64+0x115/0x870 [ 136.461390][ T9844] ? clear_bhb_loop+0x70/0xc0 [ 136.461416][ T9844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.461438][ T9844] RIP: 0033:0x7f9893d9e0d9 [ 136.461457][ T9844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.461476][ T9844] RSP: 002b:00007f9894cfe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 136.461513][ T9844] RAX: ffffffffffffffda RBX: 00007f9894025fa0 RCX: 00007f9893d9e0d9 [ 136.461527][ T9844] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 136.461540][ T9844] RBP: 00007f9894cfe090 R08: 0000200000000080 R09: 0000000000000010 [ 136.461552][ T9844] R10: 0000000020004880 R11: 0000000000000246 R12: 0000000000000002 [ 136.461565][ T9844] R13: 00007f9894026038 R14: 00007f9894025fa0 R15: 00007ffd5049cb48 [ 136.461594][ T9844] [ 136.881749][ T43] audit: type=1400 audit(1786537440.148:21835): avc: denied { read } for pid=9865 comm="syz.0.1341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 136.893697][ T9867] netlink: 'syz.0.1341': attribute type 10 has an invalid length. [ 136.899865][ T9867] lowpan0: left allmulticast mode [ 136.930357][ T9868] sctp: [Deprecated]: syz.4.1342 (pid 9868) Use of struct sctp_assoc_value in delayed_ack socket option. [ 136.930357][ T9868] Use struct sctp_sack_info instead [ 137.201572][ T9881] fuse: Invalid rootmode [ 137.251173][ T9885] capability: warning: `syz.2.1348' uses deprecated v2 capabilities in a way that may be insecure [ 137.340475][ T43] audit: type=1400 audit(1786537440.608:21836): avc: denied { getopt } for pid=9892 comm="syz.2.1352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 137.349031][ T43] audit: type=1400 audit(1786537440.618:21837): avc: denied { getopt } for pid=9892 comm="syz.2.1352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 137.381683][ T9897] FAULT_INJECTION: forcing a failure. [ 137.381683][ T9897] name failslab, interval 1, probability 0, space 0, times 0 [ 137.389080][ T9897] CPU: 2 UID: 0 PID: 9897 Comm: syz.2.1354 Tainted: G L syzkaller #0 PREEMPT(full) [ 137.389107][ T9897] Tainted: [L]=SOFTLOCKUP [ 137.389113][ T9897] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 137.389123][ T9897] Call Trace: [ 137.389130][ T9897] [ 137.389137][ T9897] dump_stack_lvl+0x100/0x190 [ 137.389167][ T9897] should_fail_ex.cold+0x5/0xa [ 137.389192][ T9897] should_failslab+0xc2/0x120 [ 137.389218][ T9897] __kmalloc_cache_noprof+0x91/0x6c0 [ 137.389239][ T9897] ? sctp_add_bind_addr+0xae/0x3e0 [ 137.389268][ T9897] sctp_add_bind_addr+0xae/0x3e0 [ 137.389295][ T9897] sctp_copy_local_addr_list+0x349/0x550 [ 137.389327][ T9897] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 137.389357][ T9897] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 137.389387][ T9897] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 137.389413][ T9897] sctp_bind_addr_copy+0xe0/0x530 [ 137.389444][ T9897] sctp_connect_new_asoc+0x1c9/0x770 [ 137.389467][ T9897] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 137.389518][ T9897] sctp_sendmsg+0x1743/0x22e0 [ 137.389547][ T9897] ? __pfx_sctp_sendmsg+0x10/0x10 [ 137.389571][ T9897] ? sock_has_perm+0x25a/0x2f0 [ 137.389596][ T9897] ? __pfx_sock_has_perm+0x10/0x10 [ 137.389627][ T9897] ? __might_fault+0xc5/0x140 [ 137.389654][ T9897] ? __pfx_sctp_sendmsg+0x10/0x10 [ 137.389675][ T9897] inet_sendmsg+0x11c/0x140 [ 137.389700][ T9897] __sys_sendto+0x453/0x4e0 [ 137.389718][ T9897] ? __pfx_inet_sendmsg+0x10/0x10 [ 137.389743][ T9897] ? __pfx___sys_sendto+0x10/0x10 [ 137.389772][ T9897] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 137.389807][ T9897] ? ksys_write+0x1ac/0x250 [ 137.389825][ T9897] ? __pfx_ksys_write+0x10/0x10 [ 137.389846][ T9897] __x64_sys_sendto+0xe0/0x1c0 [ 137.389866][ T9897] ? do_syscall_64+0x90/0x870 [ 137.389889][ T9897] ? lockdep_hardirqs_on+0x78/0x100 [ 137.389913][ T9897] do_syscall_64+0x115/0x870 [ 137.389936][ T9897] ? clear_bhb_loop+0x70/0xc0 [ 137.389958][ T9897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.389975][ T9897] RIP: 0033:0x7fe5e279e0d9 [ 137.389992][ T9897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.390006][ T9897] RSP: 002b:00007fe5e3653028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 137.390024][ T9897] RAX: ffffffffffffffda RBX: 00007fe5e2a25fa0 RCX: 00007fe5e279e0d9 [ 137.390035][ T9897] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 137.390045][ T9897] RBP: 00007fe5e3653090 R08: 0000200000000080 R09: 0000000000000010 [ 137.390056][ T9897] R10: 0000000020004880 R11: 0000000000000246 R12: 0000000000000002 [ 137.390066][ T9897] R13: 00007fe5e2a26038 R14: 00007fe5e2a25fa0 R15: 00007ffe4d809528 [ 137.390088][ T9897] [ 137.453489][ T9900] NILFS (nullb0): couldn't find nilfs on the device [ 137.544846][ T9905] FAULT_INJECTION: forcing a failure. [ 137.544846][ T9905] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 137.553197][ T9905] CPU: 1 UID: 0 PID: 9905 Comm: syz.2.1357 Tainted: G L syzkaller #0 PREEMPT(full) [ 137.553224][ T9905] Tainted: [L]=SOFTLOCKUP [ 137.553229][ T9905] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 137.553238][ T9905] Call Trace: [ 137.553244][ T9905] [ 137.553250][ T9905] dump_stack_lvl+0x100/0x190 [ 137.553276][ T9905] should_fail_ex.cold+0x5/0xa [ 137.553297][ T9905] _copy_from_user+0x2e/0xd0 [ 137.553336][ T9905] uhid_char_write+0x18d/0x10e0 [ 137.553357][ T9905] vfs_write+0x2aa/0x1050 [ 137.553373][ T9905] ? __pfx_uhid_char_write+0x10/0x10 [ 137.553392][ T9905] ? __pfx_vfs_write+0x10/0x10 [ 137.553404][ T9905] ? find_held_lock+0x2b/0x80 [ 137.553420][ T9905] ? __fget_files+0x215/0x3d0 [ 137.553437][ T9905] ? __fget_files+0x215/0x3d0 [ 137.553458][ T9905] ? __fget_files+0x21f/0x3d0 [ 137.553480][ T9905] ksys_write+0x1f8/0x250 [ 137.553498][ T9905] ? __pfx_ksys_write+0x10/0x10 [ 137.553525][ T9905] do_syscall_64+0x115/0x870 [ 137.553550][ T9905] ? clear_bhb_loop+0x70/0xc0 [ 137.553572][ T9905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.553589][ T9905] RIP: 0033:0x7fe5e279e0d9 [ 137.553604][ T9905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.553620][ T9905] RSP: 002b:00007fe5e3653028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 137.553637][ T9905] RAX: ffffffffffffffda RBX: 00007fe5e2a25fa0 RCX: 00007fe5e279e0d9 [ 137.553647][ T9905] RDX: 000000000000000a RSI: 0000200000000080 RDI: 0000000000000003 [ 137.553657][ T9905] RBP: 00007fe5e3653090 R08: 0000000000000000 R09: 0000000000000000 [ 137.553666][ T9905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.553675][ T9905] R13: 00007fe5e2a26038 R14: 00007fe5e2a25fa0 R15: 00007ffe4d809528 [ 137.553697][ T9905] [ 137.822050][ T9924] Cannot find add_set index 0 as target [ 137.889724][ T9932] FAULT_INJECTION: forcing a failure. [ 137.889724][ T9932] name failslab, interval 1, probability 0, space 0, times 0 [ 137.906107][ T9930] fuse: Invalid rootmode [ 137.906311][ T9932] CPU: 0 UID: 0 PID: 9932 Comm: syz.4.1368 Tainted: G L syzkaller #0 PREEMPT(full) [ 137.906329][ T9932] Tainted: [L]=SOFTLOCKUP [ 137.906334][ T9932] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 137.906341][ T9932] Call Trace: [ 137.906346][ T9932] [ 137.906351][ T9932] dump_stack_lvl+0x100/0x190 [ 137.906371][ T9932] should_fail_ex.cold+0x5/0xa [ 137.906387][ T9932] should_failslab+0xc2/0x120 [ 137.906406][ T9932] __kmalloc_cache_noprof+0x91/0x6c0 [ 137.906424][ T9932] ? sctp_add_bind_addr+0xae/0x3e0 [ 137.906449][ T9932] sctp_add_bind_addr+0xae/0x3e0 [ 137.906473][ T9932] sctp_copy_local_addr_list+0x349/0x550 [ 137.906502][ T9932] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 137.906529][ T9932] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 137.906555][ T9932] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 137.906578][ T9932] sctp_bind_addr_copy+0xe0/0x530 [ 137.906624][ T9932] sctp_connect_new_asoc+0x1c9/0x770 [ 137.906651][ T9932] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 137.906678][ T9932] sctp_sendmsg+0x1743/0x22e0 [ 137.906701][ T9932] ? __pfx_sctp_sendmsg+0x10/0x10 [ 137.906718][ T9932] ? sock_has_perm+0x25a/0x2f0 [ 137.906741][ T9932] ? __pfx_sock_has_perm+0x10/0x10 [ 137.906770][ T9932] ? __might_fault+0xc5/0x140 [ 137.906795][ T9932] ? __pfx_sctp_sendmsg+0x10/0x10 [ 137.906814][ T9932] inet_sendmsg+0x11c/0x140 [ 137.906868][ T9932] __sys_sendto+0x453/0x4e0 [ 137.906888][ T9932] ? __pfx_inet_sendmsg+0x10/0x10 [ 137.906913][ T9932] ? __pfx___sys_sendto+0x10/0x10 [ 137.906940][ T9932] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 137.906966][ T9932] ? ksys_write+0x1ac/0x250 [ 137.906977][ T9932] ? __pfx_ksys_write+0x10/0x10 [ 137.906990][ T9932] __x64_sys_sendto+0xe0/0x1c0 [ 137.907003][ T9932] ? do_syscall_64+0x90/0x870 [ 137.907018][ T9932] ? lockdep_hardirqs_on+0x78/0x100 [ 137.907033][ T9932] do_syscall_64+0x115/0x870 [ 137.907047][ T9932] ? clear_bhb_loop+0x70/0xc0 [ 137.907061][ T9932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.907073][ T9932] RIP: 0033:0x7f8e99b9e0d9 [ 137.907084][ T9932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.907095][ T9932] RSP: 002b:00007f8e9a9a8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 137.907108][ T9932] RAX: ffffffffffffffda RBX: 00007f8e99e25fa0 RCX: 00007f8e99b9e0d9 [ 137.907115][ T9932] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 137.907122][ T9932] RBP: 00007f8e9a9a8090 R08: 0000200000000080 R09: 0000000000000010 [ 137.907129][ T9932] R10: 0000000020004880 R11: 0000000000000246 R12: 0000000000000002 [ 137.907136][ T9932] R13: 00007f8e99e26038 R14: 00007f8e99e25fa0 R15: 00007fff11014e38 [ 137.907150][ T9932] [ 137.930272][ T9937] syz.0.1363 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 137.992437][ T9939] FAULT_INJECTION: forcing a failure. [ 137.992437][ T9939] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 138.015129][ T9943] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 138.021967][ T9939] CPU: 1 UID: 0 PID: 9939 Comm: syz.2.1372 Tainted: G L syzkaller #0 PREEMPT(full) [ 138.021988][ T9939] Tainted: [L]=SOFTLOCKUP [ 138.021992][ T9939] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 138.021999][ T9939] Call Trace: [ 138.022004][ T9939] [ 138.022008][ T9939] dump_stack_lvl+0x100/0x190 [ 138.022030][ T9939] should_fail_ex.cold+0x5/0xa [ 138.022046][ T9939] _copy_to_user+0x32/0xd0 [ 138.022064][ T9939] simple_read_from_buffer+0xcb/0x170 [ 138.022079][ T9939] proc_fail_nth_read+0x1af/0x230 [ 138.022108][ T9939] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 138.022127][ T9939] ? rw_verify_area+0xce/0x6d0 [ 138.022144][ T9939] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 138.022162][ T9939] vfs_read+0x1e4/0xb40 [ 138.022182][ T9939] ? __pfx_vfs_read+0x10/0x10 [ 138.022200][ T9939] ? __fget_files+0x215/0x3d0 [ 138.022215][ T9939] ? __fget_files+0x21f/0x3d0 [ 138.022230][ T9939] ksys_read+0x12a/0x250 [ 138.022240][ T9939] ? __pfx_ksys_read+0x10/0x10 [ 138.022254][ T9939] do_syscall_64+0x115/0x870 [ 138.022270][ T9939] ? clear_bhb_loop+0x70/0xc0 [ 138.022283][ T9939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.022295][ T9939] RIP: 0033:0x7fe5e275e90e [ 138.022306][ T9939] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 138.022317][ T9939] RSP: 002b:00007fe5e3652fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 138.022329][ T9939] RAX: ffffffffffffffda RBX: 00007fe5e36536c0 RCX: 00007fe5e275e90e [ 138.022336][ T9939] RDX: 000000000000000f RSI: 00007fe5e36530a0 RDI: 0000000000000004 [ 138.022343][ T9939] RBP: 00007fe5e3653090 R08: 0000000000000000 R09: 0000000000000000 [ 138.022349][ T9939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.022355][ T9939] R13: 00007fe5e2a26038 R14: 00007fe5e2a25fa0 R15: 00007ffe4d809528 [ 138.022369][ T9939] [ 138.242597][ T9954] binder: 9953:9954 ioctl 40087602 2000000000c0 returned -22 [ 138.254931][ T9954] binder: 9953:9954 ioctl 80205871 200000000100 returned -22 [ 138.261485][ T9954] fuse: Bad value for 'fd' [ 138.323512][ T9965] fuse: Bad value for 'rootmode' [ 138.362757][ T9968] FAULT_INJECTION: forcing a failure. [ 138.362757][ T9968] name failslab, interval 1, probability 0, space 0, times 0 [ 138.368645][ T9968] CPU: 3 UID: 0 PID: 9968 Comm: syz.4.1383 Tainted: G L syzkaller #0 PREEMPT(full) [ 138.368676][ T9968] Tainted: [L]=SOFTLOCKUP [ 138.368684][ T9968] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 138.368695][ T9968] Call Trace: [ 138.368702][ T9968] [ 138.368709][ T9968] dump_stack_lvl+0x100/0x190 [ 138.368743][ T9968] should_fail_ex.cold+0x5/0xa [ 138.368769][ T9968] should_failslab+0xc2/0x120 [ 138.368795][ T9968] __kmalloc_cache_noprof+0x91/0x6c0 [ 138.368818][ T9968] ? sctp_add_bind_addr+0xae/0x3e0 [ 138.368848][ T9968] sctp_add_bind_addr+0xae/0x3e0 [ 138.368877][ T9968] sctp_copy_local_addr_list+0x349/0x550 [ 138.368909][ T9968] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 138.368939][ T9968] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 138.368968][ T9968] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 138.368994][ T9968] sctp_bind_addr_copy+0xe0/0x530 [ 138.369023][ T9968] sctp_connect_new_asoc+0x1c9/0x770 [ 138.369047][ T9968] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 138.369079][ T9968] sctp_sendmsg+0x1743/0x22e0 [ 138.369107][ T9968] ? __pfx_sctp_sendmsg+0x10/0x10 [ 138.369128][ T9968] ? sock_has_perm+0x25a/0x2f0 [ 138.369152][ T9968] ? __pfx_sock_has_perm+0x10/0x10 [ 138.369184][ T9968] ? __might_fault+0xc5/0x140 [ 138.369209][ T9968] ? __pfx_sctp_sendmsg+0x10/0x10 [ 138.369232][ T9968] inet_sendmsg+0x11c/0x140 [ 138.369258][ T9968] __sys_sendto+0x453/0x4e0 [ 138.369278][ T9968] ? __pfx_inet_sendmsg+0x10/0x10 [ 138.369320][ T9968] ? __pfx___sys_sendto+0x10/0x10 [ 138.369347][ T9968] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 138.369383][ T9968] ? ksys_write+0x1ac/0x250 [ 138.369401][ T9968] ? __pfx_ksys_write+0x10/0x10 [ 138.369422][ T9968] __x64_sys_sendto+0xe0/0x1c0 [ 138.369442][ T9968] ? do_syscall_64+0x90/0x870 [ 138.369472][ T9968] ? lockdep_hardirqs_on+0x78/0x100 [ 138.369497][ T9968] do_syscall_64+0x115/0x870 [ 138.369520][ T9968] ? clear_bhb_loop+0x70/0xc0 [ 138.369543][ T9968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.369561][ T9968] RIP: 0033:0x7f8e99b9e0d9 [ 138.369578][ T9968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.369594][ T9968] RSP: 002b:00007f8e9a9a8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 138.369614][ T9968] RAX: ffffffffffffffda RBX: 00007f8e99e25fa0 RCX: 00007f8e99b9e0d9 [ 138.369627][ T9968] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 138.369638][ T9968] RBP: 00007f8e9a9a8090 R08: 0000200000000080 R09: 0000000000000010 [ 138.369649][ T9968] R10: 0000000020004880 R11: 0000000000000246 R12: 0000000000000002 [ 138.369661][ T9968] R13: 00007f8e99e26038 R14: 00007f8e99e25fa0 R15: 00007fff11014e38 [ 138.369687][ T9968] [ 138.850056][ T9996] fuse: Bad value for 'rootmode' [ 138.888329][ T9998] Cannot find add_set index 0 as target [ 138.988321][T10002] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10002 comm=syz.3.1396 [ 139.022421][T10006] random: crng reseeded on system resumption [ 139.104725][T10016] FAULT_INJECTION: forcing a failure. [ 139.104725][T10016] name failslab, interval 1, probability 0, space 0, times 0 [ 139.109804][T10016] CPU: 3 UID: 0 PID: 10016 Comm: syz.3.1399 Tainted: G L syzkaller #0 PREEMPT(full) [ 139.109823][T10016] Tainted: [L]=SOFTLOCKUP [ 139.109827][T10016] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 139.109834][T10016] Call Trace: [ 139.109838][T10016] [ 139.109843][T10016] dump_stack_lvl+0x100/0x190 [ 139.109864][T10016] should_fail_ex.cold+0x5/0xa [ 139.109880][T10016] should_failslab+0xc2/0x120 [ 139.109896][T10016] __kmalloc_cache_noprof+0x91/0x6c0 [ 139.109909][T10016] ? sctp_add_bind_addr+0xae/0x3e0 [ 139.109928][T10016] sctp_add_bind_addr+0xae/0x3e0 [ 139.109944][T10016] sctp_copy_local_addr_list+0x349/0x550 [ 139.109965][T10016] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 139.109984][T10016] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 139.110003][T10016] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 139.110021][T10016] sctp_bind_addr_copy+0xe0/0x530 [ 139.110039][T10016] sctp_connect_new_asoc+0x1c9/0x770 [ 139.110055][T10016] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 139.110074][T10016] sctp_sendmsg+0x1743/0x22e0 [ 139.110090][T10016] ? __pfx_sctp_sendmsg+0x10/0x10 [ 139.110102][T10016] ? sock_has_perm+0x25a/0x2f0 [ 139.110118][T10016] ? __pfx_sock_has_perm+0x10/0x10 [ 139.110138][T10016] ? __might_fault+0xc5/0x140 [ 139.110153][T10016] ? __pfx_sctp_sendmsg+0x10/0x10 [ 139.110169][T10016] inet_sendmsg+0x11c/0x140 [ 139.110186][T10016] __sys_sendto+0x453/0x4e0 [ 139.110199][T10016] ? __pfx_inet_sendmsg+0x10/0x10 [ 139.110216][T10016] ? __pfx___sys_sendto+0x10/0x10 [ 139.110249][T10016] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 139.110272][T10016] ? ksys_write+0x1ac/0x250 [ 139.110283][T10016] ? __pfx_ksys_write+0x10/0x10 [ 139.110296][T10016] __x64_sys_sendto+0xe0/0x1c0 [ 139.110309][T10016] ? do_syscall_64+0x90/0x870 [ 139.110324][T10016] ? lockdep_hardirqs_on+0x78/0x100 [ 139.110339][T10016] do_syscall_64+0x115/0x870 [ 139.110353][T10016] ? clear_bhb_loop+0x70/0xc0 [ 139.110367][T10016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.110379][T10016] RIP: 0033:0x7f9893d9e0d9 [ 139.110388][T10016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.110399][T10016] RSP: 002b:00007f9894cfe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 139.110411][T10016] RAX: ffffffffffffffda RBX: 00007f9894025fa0 RCX: 00007f9893d9e0d9 [ 139.110418][T10016] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 139.110424][T10016] RBP: 00007f9894cfe090 R08: 0000200000000080 R09: 0000000000000010 [ 139.110431][T10016] R10: 0000000020004880 R11: 0000000000000246 R12: 0000000000000002 [ 139.110437][T10016] R13: 00007f9894026038 R14: 00007f9894025fa0 R15: 00007ffd5049cb48 [ 139.110452][T10016] [ 139.341156][T10024] fuse: Bad value for 'rootmode' [ 139.521686][T10044] Cannot find add_set index 0 as target [ 139.615348][T10053] fuse: Unknown parameter 'use00000000000000000000' [ 139.628113][T10050] __nla_validate_parse: 71 callbacks suppressed [ 139.628126][T10050] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1411'. [ 139.640848][ T43] kauditd_printk_skb: 7 callbacks suppressed [ 139.640860][ T43] audit: type=1804 audit(1786537442.908:21845): pid=10054 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.3.1413" name="bus" dev="ramfs" ino=35750 res=1 errno=0 [ 139.650029][ T43] audit: type=1804 audit(1786537442.918:21846): pid=10055 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.1413" name="bus" dev="ramfs" ino=35750 res=1 errno=0 [ 139.658765][ T43] audit: type=1804 audit(1786537442.928:21847): pid=10054 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.3.1413" name="bus" dev="ramfs" ino=35750 res=1 errno=0 [ 139.708758][T10061] FAULT_INJECTION: forcing a failure. [ 139.708758][T10061] name failslab, interval 1, probability 0, space 0, times 0 [ 139.712787][T10061] CPU: 1 UID: 0 PID: 10061 Comm: syz.3.1416 Tainted: G L syzkaller #0 PREEMPT(full) [ 139.712806][T10061] Tainted: [L]=SOFTLOCKUP [ 139.712810][T10061] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 139.712817][T10061] Call Trace: [ 139.712821][T10061] [ 139.712826][T10061] dump_stack_lvl+0x100/0x190 [ 139.712847][T10061] should_fail_ex.cold+0x5/0xa [ 139.712863][T10061] should_failslab+0xc2/0x120 [ 139.712879][T10061] __kmalloc_cache_noprof+0x91/0x6c0 [ 139.712892][T10061] ? sctp_add_bind_addr+0xae/0x3e0 [ 139.712911][T10061] sctp_add_bind_addr+0xae/0x3e0 [ 139.712929][T10061] sctp_copy_local_addr_list+0x349/0x550 [ 139.712949][T10061] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 139.712973][T10061] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 139.712992][T10061] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 139.713008][T10061] sctp_bind_addr_copy+0xe0/0x530 [ 139.713028][T10061] sctp_connect_new_asoc+0x1c9/0x770 [ 139.713042][T10061] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 139.713060][T10061] sctp_sendmsg+0x1743/0x22e0 [ 139.713077][T10061] ? __pfx_sctp_sendmsg+0x10/0x10 [ 139.713089][T10061] ? sock_has_perm+0x25a/0x2f0 [ 139.713105][T10061] ? __pfx_sock_has_perm+0x10/0x10 [ 139.713124][T10061] ? __might_fault+0xc5/0x140 [ 139.713140][T10061] ? __pfx_sctp_sendmsg+0x10/0x10 [ 139.713153][T10061] inet_sendmsg+0x11c/0x140 [ 139.713170][T10061] __sys_sendto+0x453/0x4e0 [ 139.713184][T10061] ? __pfx_inet_sendmsg+0x10/0x10 [ 139.713200][T10061] ? __pfx___sys_sendto+0x10/0x10 [ 139.713218][T10061] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 139.713240][T10061] ? ksys_write+0x1ac/0x250 [ 139.713251][T10061] ? __pfx_ksys_write+0x10/0x10 [ 139.713263][T10061] __x64_sys_sendto+0xe0/0x1c0 [ 139.713276][T10061] ? do_syscall_64+0x90/0x870 [ 139.713291][T10061] ? lockdep_hardirqs_on+0x78/0x100 [ 139.713305][T10061] do_syscall_64+0x115/0x870 [ 139.713320][T10061] ? clear_bhb_loop+0x70/0xc0 [ 139.713334][T10061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.713345][T10061] RIP: 0033:0x7f9893d9e0d9 [ 139.713356][T10061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.713366][T10061] RSP: 002b:00007f9894cfe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 139.713379][T10061] RAX: ffffffffffffffda RBX: 00007f9894025fa0 RCX: 00007f9893d9e0d9 [ 139.713387][T10061] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 139.713393][T10061] RBP: 00007f9894cfe090 R08: 0000200000000080 R09: 0000000000000010 [ 139.713400][T10061] R10: 0000000020004880 R11: 0000000000000246 R12: 0000000000000002 [ 139.713406][T10061] R13: 00007f9894026038 R14: 00007f9894025fa0 R15: 00007ffd5049cb48 [ 139.713420][T10061] [ 139.849093][ T43] audit: type=1400 audit(1786537443.118:21848): avc: denied { ioctl } for pid=10064 comm="syz.4.1417" path="cgroup:[4026532881]" dev="nsfs" ino=4026532881 ioctlcmd=0xf50c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 139.853920][T10065] binder: 10064:10065 ioctl 4018620d 200000000040 returned -22 [ 139.866694][T10065] binder: 10064:10065 ioctl c0306201 2000000003c0 returned -14 [ 139.935874][T10072] Cannot find add_set index 0 as target [ 140.003443][T10081] fuse: Unknown parameter 'use00000000000000000000' [ 140.118078][T10087] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 140.137518][T10098] FAULT_INJECTION: forcing a failure. [ 140.137518][T10098] name failslab, interval 1, probability 0, space 0, times 0 [ 140.141605][T10098] CPU: 2 UID: 0 PID: 10098 Comm: syz.3.1427 Tainted: G L syzkaller #0 PREEMPT(full) [ 140.141624][T10098] Tainted: [L]=SOFTLOCKUP [ 140.141628][T10098] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 140.141635][T10098] Call Trace: [ 140.141640][T10098] [ 140.141645][T10098] dump_stack_lvl+0x100/0x190 [ 140.141665][T10098] should_fail_ex.cold+0x5/0xa [ 140.141692][T10098] should_failslab+0xc2/0x120 [ 140.141708][T10098] __kmalloc_cache_noprof+0x91/0x6c0 [ 140.141721][T10098] ? sctp_add_bind_addr+0xae/0x3e0 [ 140.141740][T10098] sctp_add_bind_addr+0xae/0x3e0 [ 140.141757][T10098] sctp_copy_local_addr_list+0x349/0x550 [ 140.141777][T10098] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 140.141796][T10098] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 140.141816][T10098] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 140.141832][T10098] sctp_bind_addr_copy+0xe0/0x530 [ 140.141851][T10098] sctp_connect_new_asoc+0x1c9/0x770 [ 140.141865][T10098] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 140.141884][T10098] sctp_sendmsg+0x1743/0x22e0 [ 140.141900][T10098] ? __pfx_sctp_sendmsg+0x10/0x10 [ 140.141912][T10098] ? sock_has_perm+0x25a/0x2f0 [ 140.141928][T10098] ? __pfx_sock_has_perm+0x10/0x10 [ 140.141947][T10098] ? __might_fault+0xc5/0x140 [ 140.141963][T10098] ? __pfx_sctp_sendmsg+0x10/0x10 [ 140.141976][T10098] inet_sendmsg+0x11c/0x140 [ 140.141993][T10098] __sys_sendto+0x453/0x4e0 [ 140.142006][T10098] ? __pfx_inet_sendmsg+0x10/0x10 [ 140.142023][T10098] ? __pfx___sys_sendto+0x10/0x10 [ 140.142040][T10098] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 140.142062][T10098] ? ksys_write+0x1ac/0x250 [ 140.142074][T10098] ? __pfx_ksys_write+0x10/0x10 [ 140.142086][T10098] __x64_sys_sendto+0xe0/0x1c0 [ 140.142099][T10098] ? do_syscall_64+0x90/0x870 [ 140.142114][T10098] ? lockdep_hardirqs_on+0x78/0x100 [ 140.142128][T10098] do_syscall_64+0x115/0x870 [ 140.142143][T10098] ? clear_bhb_loop+0x70/0xc0 [ 140.142161][T10098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.142172][T10098] RIP: 0033:0x7f9893d9e0d9 [ 140.142183][T10098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.142194][T10098] RSP: 002b:00007f9894cfe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 140.142206][T10098] RAX: ffffffffffffffda RBX: 00007f9894025fa0 RCX: 00007f9893d9e0d9 [ 140.142212][T10098] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 140.142219][T10098] RBP: 00007f9894cfe090 R08: 0000200000000080 R09: 0000000000000010 [ 140.142226][T10098] R10: 0000000020004880 R11: 0000000000000246 R12: 0000000000000002 [ 140.142232][T10098] R13: 00007f9894026038 R14: 00007f9894025fa0 R15: 00007ffd5049cb48 [ 140.142246][T10098] [ 140.446919][T10111] Cannot find add_set index 0 as target [ 140.490764][T10113] fuse: Unknown parameter 'use00000000000000000000' [ 140.538641][T10117] binder: 10116:10117 ioctl d000943e 200000001640 returned -22 [ 140.543490][T10117] binder: 10116:10117 ioctl d000943d 200000000580 returned -22 [ 140.546448][T10117] binder: 10116:10117 ioctl c0709411 200000001580 returned -22 [ 140.549338][T10117] netlink: 'syz.2.1435': attribute type 9 has an invalid length. [ 140.553068][T10119] loop7: detected capacity change from 0 to 7 [ 140.558273][T10117] binder: BINDER_SET_CONTEXT_MGR already set [ 140.560203][T10117] binder: 10116:10117 ioctl 4018620d 200000000000 returned -16 [ 140.620744][T10119] Dev loop7: unable to read RDB block 7 [ 140.625242][T10119] loop7: unable to read partition table [ 140.628960][T10119] loop7: partition table beyond EOD, truncated [ 140.633638][T10119] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 140.688740][T10122] Dev loop7: unable to read RDB block 7 [ 140.691279][T10122] loop7: unable to read partition table [ 140.693849][T10122] loop7: partition table beyond EOD, truncated [ 140.809554][T10131] sg_write: data in/out 476/14 bytes for SCSI command 0x0-- guessing data in; [ 140.809554][T10131] program syz.3.1439 not setting count and/or reply_len properly [ 140.859954][ T43] audit: type=1400 audit(1786537444.128:21849): avc: denied { write } for pid=10132 comm="syz.2.1440" name="usb_gadget" dev="configfs" ino=6352 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 140.869711][ T43] audit: type=1400 audit(1786537444.128:21850): avc: denied { write } for pid=10132 comm="syz.2.1440" name="functions" dev="configfs" ino=38933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 140.879115][ T43] audit: type=1400 audit(1786537444.138:21851): avc: denied { write } for pid=10132 comm="syz.2.1440" name="midi2.0" dev="configfs" ino=38938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 141.281718][T10154] fuse: Unknown parameter 'user_i00000000000000000000' [ 141.302312][T10156] tmpfs: Unknown parameter 'giי' [ 141.315625][T10156] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 141.513901][ T43] audit: type=1400 audit(1786537444.778:21852): avc: denied { write } for pid=10159 comm="syz.2.1450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 141.649732][T10185] fuse: Unknown parameter 'user_i00000000000000000000' [ 141.666437][ T43] audit: type=1400 audit(1786537444.938:21853): avc: denied { write } for pid=10178 comm="syz.4.1457" name="/" dev="9p" ino=77617125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 141.787492][ T323] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 141.859071][ T43] audit: type=1400 audit(1786537445.128:21854): avc: denied { bind } for pid=10198 comm="syz.3.1465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 141.939910][T10204] 9pnet_virtio: no channels available for device syz [ 141.958679][ T323] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 141.969200][ T323] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.974244][ T323] usb 7-1: Product: syz [ 141.978445][ T323] usb 7-1: Manufacturer: syz [ 141.980541][ T323] usb 7-1: SerialNumber: syz [ 141.988638][ T323] usb 7-1: config 0 descriptor?? [ 142.000084][T10208] binfmt_misc: register: failed to install interpreter file my_tracefs/events/task/task_rename/filter [ 142.202935][ T323] usb 7-1: USB disconnect, device number 9 [ 142.624569][T10227] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 142.655037][T10227] overlayfs: missing 'lowerdir' [ 143.097753][T10273] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 143.189194][T10279] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1491'. [ 143.229281][T10274] could not allocate digest TFM handle poly1305 [ 143.232497][T10279] syz_tun (unregistering): left allmulticast mode [ 143.237711][T10272] could not allocate digest TFM handle poly1305 [ 143.271298][T10286] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 143.281651][T10286] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1492'. [ 143.494457][T10304] lo: entered allmulticast mode [ 143.498592][T10302] lo: left allmulticast mode [ 143.498888][ T25] hid (null): unknown global tag 0xc [ 143.506738][ T25] hid (null): bogus close delimiter [ 143.511031][ T25] hid (null): invalid report_count 38438 [ 143.513015][ T25] hid (null): unknown global tag 0xc [ 143.520635][ T25] hid-generic 0005:0000:000D.0002: unknown main item tag 0x3 [ 143.523848][ T25] hid-generic 0005:0000:000D.0002: unknown main item tag 0x6 [ 143.526372][ T25] hid-generic 0005:0000:000D.0002: unknown main item tag 0x2 [ 143.528804][ T25] hid-generic 0005:0000:000D.0002: reserved main item tag 0xe [ 143.531438][ T25] hid-generic 0005:0000:000D.0002: reserved main item tag 0xd [ 143.533775][ T25] hid-generic 0005:0000:000D.0002: unknown main item tag 0x1 [ 143.539180][ T25] hid-generic 0005:0000:000D.0002: unknown global tag 0xc [ 143.541550][ T25] hid-generic 0005:0000:000D.0002: item 0 0 1 12 parsing failed [ 143.544696][ T25] hid-generic 0005:0000:000D.0002: probe with driver hid-generic failed with error -22 [ 143.608634][T10313] vlan2: entered allmulticast mode [ 143.610565][T10313] macsec0: entered allmulticast mode [ 143.705312][T10322] netlink: 'syz.3.1502': attribute type 322 has an invalid length. [ 144.404646][T10345] syz_tun: entered allmulticast mode [ 144.410545][T10344] syz_tun: left allmulticast mode [ 144.450108][T10349] Cannot find add_set index 0 as target [ 144.487006][T10351] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1511'. [ 144.504043][T10351] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 144.516241][T10351] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 144.520912][T10351] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 144.523337][T10351] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 144.648516][ T43] kauditd_printk_skb: 16 callbacks suppressed [ 144.648533][ T43] audit: type=1400 audit(1786537447.918:21871): avc: denied { setopt } for pid=10354 comm="syz.4.1512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 144.668988][ T43] audit: type=1400 audit(1786537447.918:21872): avc: denied { bind } for pid=10354 comm="syz.4.1512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 144.677756][ T43] audit: type=1400 audit(1786537447.918:21873): avc: denied { getopt } for pid=10354 comm="syz.4.1512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 144.765108][T10373] lo: entered allmulticast mode [ 144.776622][T10373] vlan2: left allmulticast mode [ 144.778297][T10373] macsec0: left allmulticast mode [ 144.783587][T10371] lo: left allmulticast mode [ 144.784576][ T43] audit: type=1400 audit(1786537448.048:21874): avc: denied { mount } for pid=10372 comm="syz.0.1516" name="/" dev="pstore" ino=2757 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 144.937270][T10392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.950730][T10392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.955302][T10395] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 145.020650][ T43] audit: type=1326 audit(1786537448.288:21875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10396 comm="syz.2.1525" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe5e279e0d9 code=0x0 [ 145.219507][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 145.221566][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 145.260045][T10411] lo: entered allmulticast mode [ 145.264340][T10410] lo: left allmulticast mode [ 145.326490][T10415] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1531'. [ 145.676218][ T43] audit: type=1400 audit(1786537448.948:21876): avc: denied { read write } for pid=10430 comm="syz.0.1536" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 145.684112][ T43] audit: type=1400 audit(1786537448.948:21877): avc: denied { open } for pid=10430 comm="syz.0.1536" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 145.685560][T10431] netfs: Cache "CacheFiles" added (type cachefiles) [ 145.692236][ T43] audit: type=1400 audit(1786537448.948:21878): avc: denied { create_files_as } for pid=10430 comm="syz.0.1536" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=kernel_service permissive=1 [ 145.696379][T10431] CacheFiles: File cache on CacheFiles registered [ 145.709052][T10431] CacheFiles: File cache on CacheFiles unregistering [ 145.711816][T10431] netfs: Withdrawing cache "CacheFiles" (0 objs) [ 145.722052][T10431] Illegal XDP return value 11 on prog (id 82) dev N/A, expect packet loss! [ 145.759128][T10433] tmpfs: Bad value for 'mode' [ 146.010356][T10445] Cannot find add_set index 0 as target [ 146.484682][T10474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.495584][T10475] loop2: detected capacity change from 0 to 7 [ 146.498058][T10474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.507171][T10475] Dev loop2: unable to read RDB block 7 [ 146.510749][T10475] loop2: AHDI p1 p2 p3 [ 146.512271][T10475] loop2: partition table partially beyond EOD, truncated [ 146.520076][T10475] loop2: p3 start 335544320 is beyond EOD, truncated [ 146.545129][ T43] audit: type=1400 audit(1786537449.808:21879): avc: denied { read } for pid=10473 comm="syz.3.1553" name="trace" dev="tracefs" ino=3162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 146.554768][T10475] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 146.559541][ T43] audit: type=1400 audit(1786537449.818:21880): avc: denied { open } for pid=10473 comm="syz.3.1553" path="/435/trace/trace" dev="tracefs" ino=3162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 147.159582][ T5136] Dev loop2: unable to read RDB block 7 [ 147.162036][ T5136] loop2: AHDI p1 p2 p3 [ 147.163886][ T5136] loop2: partition table partially beyond EOD, truncated [ 147.167659][ T5136] loop2: p3 start 335544320 is beyond EOD, truncated [ 147.173951][T10501] Cannot find add_set index 0 as target [ 147.209464][T10504] syz.2.1555: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 147.273222][ T5136] Dev loop2: unable to read RDB block 7 [ 147.282647][ T5136] loop2: AHDI p1 p2 p3 [ 147.284449][ T5136] loop2: partition table partially beyond EOD, truncated [ 147.287530][ T5136] loop2: p3 start 335544320 is beyond EOD, truncated [ 147.332474][T10514] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1558'. [ 147.449965][T10525] device-mapper: table: 248:0: zero-length target [ 147.452336][T10525] device-mapper: ioctl: error adding target to table [ 147.563678][T10527] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 147.566688][T10527] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 147.570005][T10527] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 147.572561][T10527] UDF-fs: Scanning with blocksize 512 failed [ 147.577221][T10527] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 147.580402][T10527] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 147.583452][T10527] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 147.589330][T10527] UDF-fs: Scanning with blocksize 1024 failed [ 147.592175][T10527] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 147.595165][T10527] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 147.598699][T10527] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 147.601524][T10527] UDF-fs: Scanning with blocksize 2048 failed [ 147.603946][T10527] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 147.607772][T10527] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 147.610871][T10527] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 147.613570][T10527] UDF-fs: Scanning with blocksize 4096 failed [ 147.615586][T10527] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 147.625990][T10527] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 147.629679][T10527] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 147.635250][T10527] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 147.648687][T10527] UDF-fs: Scanning with blocksize 512 failed [ 147.666221][T10527] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 147.669814][T10527] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 147.678541][T10527] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 147.683216][T10527] UDF-fs: Scanning with blocksize 1024 failed [ 147.701590][T10527] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 147.706636][T10527] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 147.709936][T10527] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 147.713031][T10527] UDF-fs: Scanning with blocksize 2048 failed [ 147.722444][T10527] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 147.727714][T10527] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 147.734224][T10527] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 147.742201][T10527] UDF-fs: Scanning with blocksize 4096 failed [ 147.744159][T10527] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 147.765286][T10548] Cannot find add_set index 0 as target [ 147.814855][T10556] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1567'. [ 147.827068][T10555] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1567'. [ 147.846730][T10556] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1567'. [ 147.846738][T10555] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1567'. [ 147.851197][T10555] bond0: entered promiscuous mode [ 147.854546][T10555] bond_slave_0: entered promiscuous mode [ 147.857377][T10555] bond_slave_1: entered promiscuous mode [ 147.861055][T10555] gretap0: entered promiscuous mode [ 147.864165][T10555] debugfs: 'hsr1' already exists in 'hsr' [ 147.868160][T10555] Cannot create hsr debugfs directory [ 147.869950][T10555] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 147.873093][T10555] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 147.876450][T10555] hsr1: entered promiscuous mode [ 147.933411][T10563] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 147.968863][T10565] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 148.040395][T10570] device-mapper: table: 248:0: zero-length target [ 148.043207][T10570] device-mapper: ioctl: error adding target to table [ 148.201175][T10583] lo: entered allmulticast mode [ 148.205236][T10582] lo: left allmulticast mode [ 148.243769][T10585] [ 148.244588][T10585] ====================================================== [ 148.246636][T10585] WARNING: possible circular locking dependency detected [ 148.248798][T10585] syzkaller #0 Tainted: G L [ 148.250690][T10585] ------------------------------------------------------ [ 148.253216][T10585] syz.3.1578/10585 is trying to acquire lock: [ 148.255078][T10585] ffff88802008a280 (&sb->s_type->i_mutex_key#30){++++}-{4:4}, at: configfs_depend_item_unlocked+0xf3/0x6a0 [ 148.258565][T10585] [ 148.258565][T10585] but task is already holding lock: [ 148.261397][T10585] ffff888055f36518 (&opts->dep_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x1a4/0x620 [ 148.264875][T10585] [ 148.264875][T10585] which lock already depends on the new lock. [ 148.264875][T10585] [ 148.268010][T10585] [ 148.268010][T10585] the existing dependency chain (in reverse order) is: [ 148.271164][T10585] [ 148.271164][T10585] -> #3 (&opts->dep_lock){+.+.}-{4:4}: [ 148.274177][T10585] lock_acquire+0x1b9/0x370 [ 148.276213][T10585] __mutex_lock+0x1a4/0x1bd0 [ 148.278371][T10585] usbg_make_tpg+0x1a4/0x620 [ 148.280502][T10585] target_fabric_make_tpg+0xab/0x8c0 [ 148.282960][T10585] configfs_mkdir+0x51e/0xb70 [ 148.285129][T10585] vfs_mkdir+0x361/0x850 [ 148.287164][T10585] filename_mkdirat+0x48b/0x5e0 [ 148.289419][T10585] __x64_sys_mkdirat+0x89/0xc0 [ 148.291598][T10585] do_syscall_64+0x115/0x870 [ 148.293705][T10585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.295882][T10585] [ 148.295882][T10585] -> #2 (tpg_instances_lock){+.+.}-{4:4}: [ 148.298619][T10585] lock_acquire+0x1b9/0x370 [ 148.299146][T10588] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 148.300204][T10585] __mutex_lock+0x1a4/0x1bd0 [ 148.300223][T10585] usbg_make_tpg+0x10b/0x620 [ 148.307365][T10585] target_fabric_make_tpg+0xab/0x8c0 [ 148.309295][T10585] configfs_mkdir+0x51e/0xb70 [ 148.310953][T10585] vfs_mkdir+0x361/0x850 [ 148.312746][T10585] filename_mkdirat+0x48b/0x5e0 [ 148.314896][T10585] __x64_sys_mkdirat+0x89/0xc0 [ 148.317155][T10585] do_syscall_64+0x115/0x870 [ 148.319203][T10585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.321709][T10585] [ 148.321709][T10585] -> #1 (&subsys->su_mutex){+.+.}-{4:4}: [ 148.324785][T10585] lock_acquire+0x1b9/0x370 [ 148.326772][T10585] __mutex_lock+0x1a4/0x1bd0 [ 148.328824][T10585] configfs_rmdir+0x5ae/0x950 [ 148.330879][T10585] vfs_rmdir+0x328/0x8a0 [ 148.332864][T10585] filename_rmdir+0x31a/0x5c0 [ 148.334948][T10585] __x64_sys_rmdir+0x46/0x70 [ 148.336982][T10585] do_syscall_64+0x115/0x870 [ 148.339013][T10585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.341489][T10585] [ 148.341489][T10585] -> #0 (&sb->s_type->i_mutex_key#30){++++}-{4:4}: [ 148.344783][T10585] check_prev_add+0xeb/0xe60 [ 148.346808][T10585] __lock_acquire+0x136c/0x1a40 [ 148.348918][T10585] lock_acquire+0x1b9/0x370 [ 148.350897][T10585] down_write+0x8b/0x1f0 [ 148.352800][T10585] configfs_depend_item_unlocked+0xf3/0x6a0 [ 148.355300][T10585] usbg_make_tpg+0x261/0x620 [ 148.357309][T10585] target_fabric_make_tpg+0xab/0x8c0 [ 148.359591][T10585] configfs_mkdir+0x51e/0xb70 [ 148.361661][T10585] vfs_mkdir+0x361/0x850 [ 148.363543][T10585] filename_mkdirat+0x48b/0x5e0 [ 148.365629][T10585] __x64_sys_mkdirat+0x89/0xc0 [ 148.367702][T10585] do_syscall_64+0x115/0x870 [ 148.369710][T10585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.372231][T10585] [ 148.372231][T10585] other info that might help us debug this: [ 148.372231][T10585] [ 148.376118][T10585] Chain exists of: [ 148.376118][T10585] &sb->s_type->i_mutex_key#30 --> tpg_instances_lock --> &opts->dep_lock [ 148.376118][T10585] [ 148.381588][T10585] Possible unsafe locking scenario: [ 148.381588][T10585] [ 148.384453][T10585] CPU0 CPU1 [ 148.386521][T10585] ---- ---- [ 148.388610][T10585] lock(&opts->dep_lock); [ 148.390360][T10585] lock(tpg_instances_lock); [ 148.393175][T10585] lock(&opts->dep_lock); [ 148.395854][T10585] lock(&sb->s_type->i_mutex_key#30); [ 148.398000][T10585] [ 148.398000][T10585] *** DEADLOCK *** [ 148.398000][T10585] [ 148.401129][T10585] 5 locks held by syz.3.1578/10585: [ 148.403161][T10585] #0: ffff888023b30450 (sb_writers#21){.+.+}-{0:0}, at: filename_create+0x10d/0x400 [ 148.406846][T10585] #1: ffff88803b0ae9c0 (&sb->s_type->i_mutex_key#7/1){+.+.}-{4:4}, at: filename_create+0x1c0/0x400 [ 148.411023][T10585] #2: ffffffff8fd80de8 (&subsys->su_mutex){+.+.}-{4:4}, at: configfs_mkdir+0x4b5/0xb70 [ 148.414797][T10585] #3: ffffffff9024c140 (tpg_instances_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x10b/0x620 [ 148.418563][T10585] #4: ffff888055f36518 (&opts->dep_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x1a4/0x620 [ 148.422238][T10585] [ 148.422238][T10585] stack backtrace: [ 148.424624][T10585] CPU: 1 UID: 0 PID: 10585 Comm: syz.3.1578 Tainted: G L syzkaller #0 PREEMPT(full) [ 148.424652][T10585] Tainted: [L]=SOFTLOCKUP [ 148.424659][T10585] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 148.424671][T10585] Call Trace: [ 148.424681][T10585] [ 148.424692][T10585] dump_stack_lvl+0x100/0x190 [ 148.424723][T10585] print_circular_bug.cold+0x178/0x1c7 [ 148.424757][T10585] check_noncircular+0x146/0x160 [ 148.424783][T10585] check_prev_add+0xeb/0xe60 [ 148.424805][T10585] __lock_acquire+0x136c/0x1a40 [ 148.424827][T10585] ? rcu_is_watching+0x12/0xc0 [ 148.424859][T10585] lock_acquire+0x1b9/0x370 [ 148.424881][T10585] ? configfs_depend_item_unlocked+0xf3/0x6a0 [ 148.424907][T10585] ? __pfx___might_resched+0x10/0x10 [ 148.424931][T10585] down_write+0x8b/0x1f0 [ 148.424956][T10585] ? configfs_depend_item_unlocked+0xf3/0x6a0 [ 148.424980][T10585] ? __pfx_down_write+0x10/0x10 [ 148.425010][T10585] configfs_depend_item_unlocked+0xf3/0x6a0 [ 148.425036][T10585] ? __lock_acquire+0x49f/0x1a40 [ 148.425062][T10585] usbg_make_tpg+0x261/0x620 [ 148.425082][T10585] ? __pfx_usbg_make_tpg+0x10/0x10 [ 148.425102][T10585] ? find_held_lock+0x2b/0x80 [ 148.425117][T10585] ? __pfx_usbg_make_tpg+0x10/0x10 [ 148.425138][T10585] target_fabric_make_tpg+0xab/0x8c0 [ 148.425168][T10585] configfs_mkdir+0x51e/0xb70 [ 148.425194][T10585] ? __pfx_target_fabric_make_tpg+0x10/0x10 [ 148.425219][T10585] ? __pfx_configfs_mkdir+0x10/0x10 [ 148.425245][T10585] ? inode_permission+0x374/0x620 [ 148.425272][T10585] vfs_mkdir+0x361/0x850 [ 148.425298][T10585] filename_mkdirat+0x48b/0x5e0 [ 148.425323][T10585] ? __pfx_filename_mkdirat+0x10/0x10 [ 148.425343][T10585] ? strncpy_from_user+0x19d/0x2d0 [ 148.425368][T10585] ? do_getname+0x191/0x390 [ 148.425390][T10585] __x64_sys_mkdirat+0x89/0xc0 [ 148.425410][T10585] do_syscall_64+0x115/0x870 [ 148.425433][T10585] ? clear_bhb_loop+0x70/0xc0 [ 148.425456][T10585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.425477][T10585] RIP: 0033:0x7f9893d9e0d9 [ 148.425492][T10585] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.425509][T10585] RSP: 002b:00007f9894cfe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 148.425527][T10585] RAX: ffffffffffffffda RBX: 00007f9894025fa0 RCX: 00007f9893d9e0d9 [ 148.425537][T10585] RDX: 00000000000001ff RSI: 0000200000000740 RDI: ffffffffffffff9c [ 148.425548][T10585] RBP: 00007f9893e35024 R08: 0000000000000000 R09: 0000000000000000 [ 148.425558][T10585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.425569][T10585] R13: 00007f9894026038 R14: 00007f9894025fa0 R15: 00007ffd5049cb48 [ 148.425585][T10585]